@shware/workflow 9.0.3 → 9.1.0

package/dist/engine/interpreter.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"interpreter.mjs","names":[],"sources":["../../src/engine/interpreter.ts"],"sourcesContent":["import type { NodeIR, PropValueIR, ScalarIR, WorkflowIR } from '../ir';\nimport { hashToBucket } from './bucket';\nimport { evaluateCondition, relevantEvents } from './condition';\nimport type {\n  FactSource,\n  JourneyContext,\n  JourneyOutcome,\n  OutboundMessage,\n  PushDevice,\n} from './ports';\nimport { RECIPIENT_PROPERTY } from './recipient';\nimport { nextWindowStart } from './time-window';\n\n/**\n * IR interpreter: the execution core for one user's journey instance.\n *\n * Pure logic — it imports nothing platform-specific; every external effect\n * arrives through the JourneyContext ports, and durable semantics\n * (checkpoint/replay) are the EngineStep adapter's job.\n *\n * Step naming: an IR node id *is* the step name (derived from the structural\n * path, so it is deterministic and unique). When one node needs several steps,\n * a suffix is appended (`${id}:guard`, `${id}:check:${n}`).\n *\n * Guard semantics: goal / exitWhen are checked at journey entry and after\n * every suspension point (delay / random_delay / time_window / wait_until) —\n * the moments where wall-clock time passed and the user's state may have\n * moved. Between two synchronous nodes no meaningful time passes, so checking\n * there would only burn step budget (each checkpoint costs a state write).\n */\n\n/**\n * Cap on wait_until re-evaluations, so a wake-up storm cannot exhaust the platform's step\n * budget. Each loop iteration costs a handful of steps, so 64 checks stay well inside the\n * platform step budgets while absorbing far more wake churn than 16 did. Past the cap the wait\n * is not given up: it sleeps to its deadline and checks once more there (see waitLoop) — the\n * answer is still right at the deadline, it just stops being event-driven in between.\n */\nconst MAX_WAIT_CHECKS = 64;\n\n/** The user property holding an IANA timezone id, read when a time_window says tz: 'user'. Same convention-table status as RECIPIENT_PROPERTY. */\nconst TIMEZONE_PROPERTY = 'timezone';\n\ntype FlowSignal =\n  | { kind: 'fall_through' }\n  | { kind: 'exit'; reason?: string }\n  | { kind: 'goal' }\n  | { kind: 'exit_when' };\n\nconst FALL_THROUGH: FlowSignal = { kind: 'fall_through' };\n\n/**\n * Whether and when the instance converted — a fact of its own, apart from how it ends: with\n * `exitOnMatch: false` a conversion lets the flow go on, and the instance still ends `completed`\n * (or `exited`, `exit_when`) carrying it. Set only from checkpointed step results, so a replay\n * rebuilds the same state.\n */\ninterface GoalState {\n  convertedAt?: number;\n}\n\n/** Who a message or report is about now: a journey started by a visitor moves when they sign in. */\nfunction ownerOf(ctx: JourneyContext): Promise<string> {\n  return ctx.currentUserId?.() ?? Promise.resolve(ctx.userId);\n}\n\nconst goalStates = new WeakMap<JourneyContext, GoalState>();\n\nfunction goalState(ctx: JourneyContext): GoalState {\n  let state = goalStates.get(ctx);\n  if (state === undefined) {\n    state = {};\n    goalStates.set(ctx, state);\n  }\n  return state;\n}\n\n/** When the goal's attribution window closes, measured from entry; none without `within`. */\nfunction goalDeadline(ir: WorkflowIR, ctx: JourneyContext): number | undefined {\n  return ir.goal?.within === undefined ? undefined : ctx.enteredAtMs + ir.goal.within.ms;\n}\n\n/**\n * Whether the goal holds for events inside its window: after entry, and not after the window\n * closed — an instance resumed past the deadline must not count a purchase made after it. The\n * conversion time is when the check saw it, capped at the deadline.\n */\nasync function goalReached(\n  ir: WorkflowIR,\n  ctx: JourneyContext,\n  now: number\n): Promise<{ at: number } | null> {\n  const goal = ir.goal;\n  if (goal === undefined) return null;\n  const deadline = goalDeadline(ir, ctx);\n  const met = await evaluateCondition(goal.condition, ctx.facts, now, {\n    anchorMs: ctx.enteredAtMs,\n    ...(deadline === undefined ? {} : { untilMs: deadline }),\n  });\n  return met ? { at: deadline === undefined ? now : Math.min(now, deadline) } : null;\n}\n\nexport async function runJourney(ir: WorkflowIR, ctx: JourneyContext): Promise<JourneyOutcome> {\n  await started(ir, ctx);\n  const entry = await checkGuards('entry', ir, ctx);\n  let signal = entry ?? (await runFlow(ir.flow, ir, ctx));\n  // The flow is done but the conversion window is not: keep watching it (see awaitTail)\n  if (signal.kind === 'fall_through') signal = (await awaitTail(ir, ctx)) ?? FALL_THROUGH;\n  const { convertedAt } = goalState(ctx);\n  const converted = convertedAt === undefined ? {} : { convertedAt };\n  switch (signal.kind) {\n    case 'fall_through':\n      return { status: 'completed', ...converted };\n    case 'exit':\n      return signal.reason !== undefined\n        ? { status: 'exited', reason: signal.reason, ...converted }\n        : { status: 'exited', ...converted };\n    case 'goal':\n      return { status: 'goal', ...converted };\n    case 'exit_when':\n      return { status: 'exit_when', ...converted };\n  }\n}\n\nasync function runFlow(nodes: NodeIR[], ir: WorkflowIR, ctx: JourneyContext): Promise<FlowSignal> {\n  for (const node of nodes) {\n    await reached(node, ir, ctx);\n    const signal = await runNode(node, ir, ctx);\n    if (signal.kind !== 'fall_through') return signal;\n  }\n  return FALL_THROUGH;\n}\n\n/**\n * Tell the observer the instance entered — before the entry guards, which can end it before the\n * first node: an instance is counted from its entry, not from its first node.\n */\nasync function started(ir: WorkflowIR, ctx: JourneyContext): Promise<void> {\n  const observer = ctx.observer;\n  if (observer?.started === undefined) return;\n  await ctx.step.do('entry:started', async () => {\n    await observer.started?.({\n      workflow: ir.id,\n      instanceId: ctx.instanceId,\n      userId: await ownerOf(ctx),\n      at: ctx.enteredAtMs,\n    });\n  });\n}\n\n/**\n * Tell the observer the instance is at `node`. A step of its own, so a replay does not report\n * the nodes it passes on the way back again, and the arrival time stays the first one.\n */\nasync function reached(node: NodeIR, ir: WorkflowIR, ctx: JourneyContext): Promise<void> {\n  const observer = ctx.observer;\n  if (observer?.nodeReached === undefined) return;\n  await ctx.step.do(`${node.id}:reached`, async () => {\n    await observer.nodeReached?.({\n      workflow: ir.id,\n      instanceId: ctx.instanceId,\n      userId: await ownerOf(ctx),\n      nodeId: node.id,\n      at: Date.now(),\n    });\n  });\n}\n\n/**\n * One copy out through the host's sender, with the observer on both sides: it may attach\n * tracking before, and hears how the transport took the copy after. A send that throws is\n * not reported — the step retries it, and reports when it settles. A report that fails after\n * the send is logged, never thrown: the step would retry and the transport — a webhook, a web\n * push, with no idempotency key of its own — would deliver the copy again.\n */\nasync function deliver(message: OutboundMessage, ctx: JourneyContext): Promise<void> {\n  const observer = ctx.observer;\n  // A replayed step whose copy an earlier run already settled: the transport took it once\n  if (await observer?.messageSettled?.(message)) return;\n  const tracking = await observer?.messagePrepared?.(message);\n  const copy = tracking === undefined ? message : { ...message, tracking };\n  const result = await ctx.messages.send(copy);\n  try {\n    await observer?.messageSent?.(copy, result ?? { delivered: true });\n  } catch (error) {\n    console.error(`[workflow] reporting ${copy.idempotencyKey} as sent failed`, error);\n  }\n}\n\n/**\n * Goal / exitWhen guards (see the header for when they run).\n *\n * The goal condition is anchored at workflow entry: a `performed` inside it\n * only counts events after the user entered, so pre-existing history cannot\n * register as a conversion. exitWhen is deliberately unanchored — \"user\n * unsubscribed\" should exit no matter when it happened.\n */\nasync function checkGuards(\n  stepId: string,\n  ir: WorkflowIR,\n  ctx: JourneyContext\n): Promise<FlowSignal | null> {\n  const goal = ir.goal;\n  const exitWhen = ir.exitWhen;\n  if (goal === undefined && exitWhen === undefined) return null;\n\n  const state = goalState(ctx);\n  const result = await ctx.step.do(`${stepId}:guard`, async () => {\n    const now = Date.now();\n    // Already converted (exitOnMatch: false): the conversion stands, no need to look again\n    const goalHit =\n      goal !== undefined && state.convertedAt === undefined\n        ? await goalReached(ir, ctx, now)\n        : null;\n    const exitMet = exitWhen !== undefined && (await evaluateCondition(exitWhen, ctx.facts, now));\n    return { goalAt: goalHit?.at ?? null, exitMet };\n  });\n\n  if (result.goalAt !== null) {\n    state.convertedAt ??= result.goalAt;\n    if (goal?.exitOnMatch ?? true) return { kind: 'goal' };\n  }\n  if (result.exitMet) return { kind: 'exit_when' };\n  return null;\n}\n\n/**\n * The host's template check, with the instance and node added to the message:\n * a refused message must point at the journey that produced it. The error\n * keeps its class (and `name`), so adapters can stop retrying it.\n */\nfunction validate(\n  node: Extract<NodeIR, { type: 'message' }>,\n  props: Record<string, ScalarIR | undefined>,\n  ctx: JourneyContext\n): Record<string, ScalarIR | undefined> {\n  if (ctx.validator === undefined) return props;\n  try {\n    return ctx.validator.validate({ channel: node.channel, template: node.template, props });\n  } catch (error) {\n    if (error instanceof Error) {\n      error.message = `[${ctx.instanceId} ${node.id}] ${error.message}`;\n    }\n    throw error;\n  }\n}\n\n/**\n * Whether the user opted out of what this step sends. An email or push step checks its topic —\n * an opt-out of the topic on that channel or of the whole channel skips it — and a transactional\n * message (`topic: null`) is never skipped: a receipt or a code goes out whatever the user opted\n * out of. A node compiled before topics existed (no `topic`) checks the channel-wide opt-out\n * only, as it always did. Other channels check the channel.\n */\nasync function suppressed(\n  node: Extract<NodeIR, { type: 'message' }>,\n  ctx: JourneyContext\n): Promise<boolean> {\n  if (node.topic === null) return false;\n  return (await ctx.facts.isSuppressed?.(node.channel, node.topic)) === true;\n}\n\n/** The copy's topic, for the channels that have one: what the observer records and the senders may read. */\nfunction topicOf(node: Extract<NodeIR, { type: 'message' }>): { topic?: string | null } {\n  return node.channel === 'email' || node.channel === 'push' ? { topic: node.topic ?? null } : {};\n}\n\ntype PushPlan = { props: Record<string, ScalarIR | undefined>; devices: PushDevice[] };\n\n/**\n * A push goes to devices, not to a profile address: one copy per device the\n * host's directory lists (or only the most recent, `devices: 'latest'`). Each\n * copy's idempotency key carries its token, so a retried step that already\n * reached some devices re-sends to the rest and the senders drop the repeats —\n * keyed by token rather than position, because the list can change between\n * attempts. A user with no device is skipped, not failed: being unreachable is\n * a state of the user, and `reachable('push')` is how a journey branches on it.\n */\n/**\n * A push: one step settles what goes out and to which devices, then each device gets a step of\n * its own — a failure on one device retries that device alone, and the copies already delivered\n * are not sent again (APNs and FCM carry the idempotency key but do not de-duplicate on it).\n */\nasync function sendPush(\n  node: Extract<NodeIR, { type: 'message' }>,\n  ir: WorkflowIR,\n  ctx: JourneyContext\n): Promise<void> {\n  const plan = await ctx.step.do<PushPlan | null>(`${node.id}:send`, async () => {\n    const props = validate(node, await resolveValues(node.props, ctx.facts), ctx);\n    // Once per step, before any device: the topic's opt-out or the channel's (never a transactional push)\n    if (await suppressed(node, ctx)) return null;\n    const listed = await ctx.facts.listDevices();\n    const devices = node.devices === 'latest' ? listed.slice(0, 1) : listed;\n    return { props, devices };\n  });\n  // null: the topic or the channel is opted out\n  if (plan === null) return;\n  if (plan.devices.length === 0) {\n    console.log(`[journey] push ${node.template} skipped: no device for user ${ctx.userId}`);\n    return;\n  }\n  for (const [index, device] of plan.devices.entries()) {\n    await ctx.step.do(`${node.id}:send:${index}`, async () => {\n      await deliver(\n        {\n          workflow: ir.id,\n          instanceId: ctx.instanceId,\n          nodeId: node.id,\n          channel: 'push',\n          template: node.template,\n          props: plan.props,\n          userId: await ownerOf(ctx),\n          recipient: device.token,\n          device,\n          idempotencyKey: `${ctx.instanceId}:${node.id}:${device.token}`,\n          ...topicOf(node),\n        },\n        ctx\n      );\n    });\n  }\n}\n\nasync function runNode(node: NodeIR, ir: WorkflowIR, ctx: JourneyContext): Promise<FlowSignal> {\n  switch (node.type) {\n    case 'message': {\n      if (node.channel === 'push') {\n        await sendPush(node, ir, ctx);\n        return FALL_THROUGH;\n      }\n      await ctx.step.do(`${node.id}:send`, async () => {\n        const props = validate(node, await resolveValues(node.props, ctx.facts), ctx);\n        // An opted-out channel (an email unsubscribe) is skipped, like a push with no device\n        if (await suppressed(node, ctx)) return;\n        const recipientPath = RECIPIENT_PROPERTY[node.channel];\n        const recipient =\n          recipientPath === undefined ? undefined : await ctx.facts.getProperty(recipientPath);\n        await deliver(\n          {\n            workflow: ir.id,\n            instanceId: ctx.instanceId,\n            nodeId: node.id,\n            channel: node.channel,\n            template: node.template,\n            props,\n            userId: await ownerOf(ctx),\n            recipient: recipient === undefined ? undefined : String(recipient),\n            idempotencyKey: `${ctx.instanceId}:${node.id}`,\n            ...topicOf(node),\n          },\n          ctx\n        );\n      });\n      return FALL_THROUGH;\n    }\n\n    case 'delay': {\n      await ctx.step.sleep(node.id, node.duration.ms);\n      return (await checkGuards(node.id, ir, ctx)) ?? FALL_THROUGH;\n    }\n\n    case 'random_delay': {\n      // The random value is drawn and persisted inside the step, so replay does not re-roll it\n      const ms = await ctx.step.do(`${node.id}:roll`, async () => {\n        const span = node.max.ms - node.min.ms;\n        return node.min.ms + Math.floor(Math.random() * Math.max(span, 0));\n      });\n      await ctx.step.sleep(`${node.id}:sleep`, ms);\n      return (await checkGuards(node.id, ir, ctx)) ?? FALL_THROUGH;\n    }\n\n    case 'time_window': {\n      const target = await ctx.step.do(`${node.id}:target`, async () => {\n        const tz =\n          node.tz === 'user'\n            ? String((await ctx.facts.getProperty(TIMEZONE_PROPERTY)) ?? 'UTC')\n            : node.tz;\n        return nextWindowStart(Date.now(), node.days, node.between, tz);\n      });\n      if (target === null) return FALL_THROUGH; // already inside the window: no suspension, no guard\n      // The remaining time is checkpointed: a replay must not recompute it from a later clock\n      // (the target has passed by then, and a negative sleep is an error on some runtimes)\n      const ms = await ctx.step.do(`${node.id}:remaining`, async () => target - Date.now());\n      if (ms > 0) await ctx.step.sleep(`${node.id}:sleep`, ms);\n      return (await checkGuards(node.id, ir, ctx)) ?? FALL_THROUGH;\n    }\n\n    case 'wait_until': {\n      const met = await waitUntil(node, ctx);\n      // Time passed while waiting — guard before acting on the outcome (goal wins over the wait result)\n      const guard = await checkGuards(node.id, ir, ctx);\n      if (guard) return guard;\n      if (met) return FALL_THROUGH;\n      const onTimeout = node.onTimeout;\n      if (onTimeout === 'continue') return FALL_THROUGH;\n      if (onTimeout === 'exit') return { kind: 'exit', reason: `${node.id}:timeout` };\n      return runFlow(onTimeout, ir, ctx);\n    }\n\n    case 'branch': {\n      const matched = await ctx.step.do(`${node.id}:eval`, async () => {\n        const now = Date.now();\n        for (const [i, branchCase] of node.cases.entries()) {\n          if (await evaluateCondition(branchCase.condition, ctx.facts, now)) {\n            return i;\n          }\n        }\n        return -1; // no match → default arm, or simply continue\n      });\n      const flow = matched >= 0 ? node.cases[matched]?.flow : node.otherwise;\n      if (flow === undefined) return FALL_THROUGH;\n      const signal = await runFlow(flow, ir, ctx);\n      // Structural rejoin: once an arm falls through, execution resumes after the branch\n      return signal;\n    }\n\n    case 'filter': {\n      const pass = await ctx.step.do(`${node.id}:eval`, async () =>\n        evaluateCondition(node.condition, ctx.facts, Date.now())\n      );\n      return pass ? FALL_THROUGH : { kind: 'exit', reason: node.reason ?? `${node.id}:filtered` };\n    }\n\n    case 'cohort': {\n      // Deterministic bucketing, so replay needs no checkpoint. An explicit\n      // experiment key is global on purpose: two workflows naming the same\n      // experiment bucket a user identically. The fallback is namespaced by the\n      // workflow, because structural ids ('2', '1.c0.0') repeat across\n      // workflows and a bare one would put a user in the same arm of every\n      // unrelated split at that position.\n      const bucket = hashToBucket(`${ctx.userId}:${node.key ?? `${ir.id}:${node.id}`}`);\n      // Integer basis points on both sides (the DSL guarantees weights sit on\n      // the 0.01% grid), so no float ever meets the comparison.\n      let cumulative = 0;\n      for (const arm of node.arms) {\n        cumulative += Math.round(arm.weight * 100);\n        if (bucket < cumulative) return runFlow(arm.flow, ir, ctx);\n      }\n      return FALL_THROUGH;\n    }\n\n    case 'exit':\n      return node.reason !== undefined ? { kind: 'exit', reason: node.reason } : { kind: 'exit' };\n\n    case 'send_event': {\n      await ctx.step.do(`${node.id}:emit`, async () => {\n        const payload = await resolveValues(node.payload, ctx.facts);\n        try {\n          await ctx.events.emit(node.event, payload, `${ctx.instanceId}:${node.id}`);\n        } catch (error) {\n          // A refused event must point at the journey that emitted it\n          if (error instanceof Error)\n            error.message = `[${ctx.instanceId} ${node.id}] ${error.message}`;\n          throw error;\n        }\n      });\n      return FALL_THROUGH;\n    }\n\n    case 'action': {\n      // Custom code runs inside step.do: retried on throw, checkpointed on success\n      const invoker = ctx.actions;\n      if (invoker === undefined) {\n        throw new Error(\n          `action '${node.action}': this runtime has no ActionInvoker configured — register the action on the adapter (see engine/actions.ts)`\n        );\n      }\n      await ctx.step.do(`${node.id}:run`, async () => {\n        const args = await resolveValues(node.args, ctx.facts);\n        await invoker.invoke({\n          action: node.action,\n          args,\n          userId: await ownerOf(ctx),\n          idempotencyKey: `${ctx.instanceId}:${node.id}`,\n        });\n      });\n      return FALL_THROUGH;\n    }\n  }\n}\n\nasync function waitUntil(\n  node: Extract<NodeIR, { type: 'wait_until' }>,\n  ctx: JourneyContext\n): Promise<boolean> {\n  const deadline = await ctx.step.do(\n    `${node.id}:deadline`,\n    async () => Date.now() + node.timeout.ms\n  );\n  const events = await ctx.step.do(`${node.id}:events`, async () =>\n    relevantEvents(node.condition, ctx.facts)\n  );\n  // Anchor at the moment the wait began (deadline is checkpointed, so this is\n  // replay-stable): `performed` inside the condition only counts events that\n  // happen during the wait — pre-existing history must not satisfy it.\n  const anchorMs = deadline - node.timeout.ms;\n  const met = await waitLoop(node.id, ctx, deadline, events, async (now) =>\n    (await evaluateCondition(node.condition, ctx.facts, now, { anchorMs })) ? true : null\n  );\n  await ctx.step.unsubscribe(`${node.id}:unsubscribe`);\n  return met === true;\n}\n\n/**\n * The conversion window outlives the flow: a journey whose steps are done while its goal's\n * `within` is still open keeps watching until the window closes — the purchase that follows the\n * last offer email is that email's conversion, and ending the instance at the email would report\n * it as a plain completion. `exitWhen` still applies while it waits. Nothing to wait for without\n * a window, or once the instance has converted.\n */\nasync function awaitTail(ir: WorkflowIR, ctx: JourneyContext): Promise<FlowSignal | null> {\n  const deadline = goalDeadline(ir, ctx);\n  const goal = ir.goal;\n  if (goal === undefined || deadline === undefined) return null;\n  const state = goalState(ctx);\n  if (state.convertedAt !== undefined) return null;\n  const open = await ctx.step.do('goal:open', async () => deadline > Date.now());\n  if (!open) return null;\n  const exitWhen = ir.exitWhen;\n  const events = await ctx.step.do('goal:events', async () => [\n    ...new Set([\n      ...(await relevantEvents(goal.condition, ctx.facts)),\n      ...(exitWhen === undefined ? [] : await relevantEvents(exitWhen, ctx.facts)),\n    ]),\n  ]);\n  const hit = await waitLoop('goal', ctx, deadline, events, async (now) => {\n    const reached = await goalReached(ir, ctx, now);\n    if (reached !== null) return { kind: 'goal' as const, at: reached.at };\n    if (exitWhen !== undefined && (await evaluateCondition(exitWhen, ctx.facts, now))) {\n      return { kind: 'exit_when' as const, at: now };\n    }\n    return null;\n  });\n  await ctx.step.unsubscribe('goal:unsubscribe');\n  if (hit === null) return null;\n  if (hit.kind === 'goal') {\n    state.convertedAt ??= hit.at;\n    return { kind: 'goal' };\n  }\n  return { kind: 'exit_when' };\n}\n\n/**\n * Wait until `check` finds something or the deadline passes: subscribe, check, sleep until a\n * relevant event wakes the instance or time runs out. `check` runs inside a step, so its result\n * must be serializable; null means \"not yet\". Null from here means the deadline passed with\n * nothing found — never a failure, and never a wait given up on early.\n */\nasync function waitLoop<R>(\n  id: string,\n  ctx: JourneyContext,\n  deadline: number,\n  events: string[],\n  check: (now: number) => Promise<R | null>\n): Promise<R | null> {\n  for (let attempt = 0; attempt < MAX_WAIT_CHECKS; attempt++) {\n    // Subscribe before the check, every attempt: one subscribe arms at least\n    // one wake-up (AWS callbacks are consumed on delivery, so each attempt\n    // needs a fresh arm; Cloudflare rows make the repeat call idempotent), and\n    // arming first closes the race where the event lands between the check and\n    // the registration.\n    await ctx.step.subscribe(`${id}:subscribe:${attempt}`, events, { deadlineMs: deadline });\n\n    const met = await ctx.step.do(`${id}:check:${attempt}`, async () => check(Date.now()));\n    if (met !== null) return met;\n\n    // Checkpointed: replay re-runs this control flow with wall-clock time far\n    // ahead of the original run, so the branch must come from a persisted value.\n    const remaining = await ctx.step.do(\n      `${id}:remaining:${attempt}`,\n      async () => deadline - Date.now()\n    );\n    // The condition was checked just above — expiring here needs no extra final check\n    if (remaining <= 0) return null;\n\n    const wake = await ctx.step.waitForWake(`${id}:wait:${attempt}`, {\n      timeoutMs: remaining,\n      deadlineMs: deadline,\n    });\n    // Final check after timeout: in a tight race the event may land exactly as the timer fires\n    if (wake === 'timeout') return finalCheck(id, ctx, check);\n    // Woken → back to the top of the loop to re-evaluate (at-least-once wake-up semantics)\n  }\n  // Check budget exhausted (see MAX_WAIT_CHECKS). Not a timeout: the wait keeps its deadline,\n  // only the wake-ups are given up — sleep to the deadline, then check once more there. The\n  // subscription rows stay until the caller's unsubscribe; a wake landing meanwhile is dropped\n  // by the runtime (nothing is parked on it), which is the point.\n  console.warn(\n    `[journey] ${ctx.instanceId} ${id}: ${MAX_WAIT_CHECKS} wake-ups without the condition holding — sleeping to the deadline`\n  );\n  const budgetRemaining = await ctx.step.do(\n    `${id}:budget:remaining`,\n    async () => deadline - Date.now()\n  );\n  if (budgetRemaining > 0) await ctx.step.sleep(`${id}:budget:sleep`, budgetRemaining);\n  return finalCheck(id, ctx, check);\n}\n\n/** The check once the deadline is reached — one step for all the ways of getting there. */\nasync function finalCheck<R>(\n  id: string,\n  ctx: JourneyContext,\n  check: (now: number) => Promise<R | null>\n): Promise<R | null> {\n  return ctx.step.do(`${id}:final`, async () => check(Date.now()));\n}\n\nasync function resolveValues(\n  values: Record<string, PropValueIR>,\n  facts: FactSource\n): Promise<Record<string, ScalarIR | undefined>> {\n  const resolved: Record<string, ScalarIR | undefined> = {};\n  for (const [key, value] of Object.entries(values)) {\n    resolved[key] = typeof value === 'object' ? await facts.getProperty(value.path) : value;\n  }\n  return resolved;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCA,MAAM,kBAAkB;;AAGxB,MAAM,oBAAoB;AAQ1B,MAAM,eAA2B,EAAE,MAAM,eAAe;;AAaxD,SAAS,QAAQ,KAAsC;CACrD,OAAO,IAAI,gBAAgB,KAAK,QAAQ,QAAQ,IAAI,MAAM;AAC5D;AAEA,MAAM,6BAAa,IAAI,QAAmC;AAE1D,SAAS,UAAU,KAAgC;CACjD,IAAI,QAAQ,WAAW,IAAI,GAAG;CAC9B,IAAI,UAAU,KAAA,GAAW;EACvB,QAAQ,CAAC;EACT,WAAW,IAAI,KAAK,KAAK;CAC3B;CACA,OAAO;AACT;;AAGA,SAAS,aAAa,IAAgB,KAAyC;CAC7E,OAAO,GAAG,MAAM,WAAW,KAAA,IAAY,KAAA,IAAY,IAAI,cAAc,GAAG,KAAK,OAAO;AACtF;;;;;;AAOA,eAAe,YACb,IACA,KACA,KACgC;CAChC,MAAM,OAAO,GAAG;CAChB,IAAI,SAAS,KAAA,GAAW,OAAO;CAC/B,MAAM,WAAW,aAAa,IAAI,GAAG;CAKrC,OAAO,MAJW,kBAAkB,KAAK,WAAW,IAAI,OAAO,KAAK;EAClE,UAAU,IAAI;EACd,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,SAAS;CACxD,CAAC,IACY,EAAE,IAAI,aAAa,KAAA,IAAY,MAAM,KAAK,IAAI,KAAK,QAAQ,EAAE,IAAI;AAChF;AAEA,eAAsB,WAAW,IAAgB,KAA8C;CAC7F,MAAM,QAAQ,IAAI,GAAG;CAErB,IAAI,SAAS,MADO,YAAY,SAAS,IAAI,GAAG,KACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,GAAG;CAErD,IAAI,OAAO,SAAS,gBAAgB,SAAU,MAAM,UAAU,IAAI,GAAG,KAAM;CAC3E,MAAM,EAAE,gBAAgB,UAAU,GAAG;CACrC,MAAM,YAAY,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY;CACjE,QAAQ,OAAO,MAAf;EACE,KAAK,gBACH,OAAO;GAAE,QAAQ;GAAa,GAAG;EAAU;EAC7C,KAAK,QACH,OAAO,OAAO,WAAW,KAAA,IACrB;GAAE,QAAQ;GAAU,QAAQ,OAAO;GAAQ,GAAG;EAAU,IACxD;GAAE,QAAQ;GAAU,GAAG;EAAU;EACvC,KAAK,QACH,OAAO;GAAE,QAAQ;GAAQ,GAAG;EAAU;EACxC,KAAK,aACH,OAAO;GAAE,QAAQ;GAAa,GAAG;EAAU;CAC/C;AACF;AAEA,eAAe,QAAQ,OAAiB,IAAgB,KAA0C;CAChG,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,QAAQ,MAAM,IAAI,GAAG;EAC3B,MAAM,SAAS,MAAM,QAAQ,MAAM,IAAI,GAAG;EAC1C,IAAI,OAAO,SAAS,gBAAgB,OAAO;CAC7C;CACA,OAAO;AACT;;;;;AAMA,eAAe,QAAQ,IAAgB,KAAoC;CACzE,MAAM,WAAW,IAAI;CACrB,IAAI,UAAU,YAAY,KAAA,GAAW;CACrC,MAAM,IAAI,KAAK,GAAG,iBAAiB,YAAY;EAC7C,MAAM,SAAS,UAAU;GACvB,UAAU,GAAG;GACb,YAAY,IAAI;GAChB,QAAQ,MAAM,QAAQ,GAAG;GACzB,IAAI,IAAI;EACV,CAAC;CACH,CAAC;AACH;;;;;AAMA,eAAe,QAAQ,MAAc,IAAgB,KAAoC;CACvF,MAAM,WAAW,IAAI;CACrB,IAAI,UAAU,gBAAgB,KAAA,GAAW;CACzC,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,WAAW,YAAY;EAClD,MAAM,SAAS,cAAc;GAC3B,UAAU,GAAG;GACb,YAAY,IAAI;GAChB,QAAQ,MAAM,QAAQ,GAAG;GACzB,QAAQ,KAAK;GACb,IAAI,KAAK,IAAI;EACf,CAAC;CACH,CAAC;AACH;;;;;;;;AASA,eAAe,QAAQ,SAA0B,KAAoC;CACnF,MAAM,WAAW,IAAI;CAErB,IAAI,MAAM,UAAU,iBAAiB,OAAO,GAAG;CAC/C,MAAM,WAAW,MAAM,UAAU,kBAAkB,OAAO;CAC1D,MAAM,OAAO,aAAa,KAAA,IAAY,UAAU;EAAE,GAAG;EAAS;CAAS;CACvE,MAAM,SAAS,MAAM,IAAI,SAAS,KAAK,IAAI;CAC3C,IAAI;EACF,MAAM,UAAU,cAAc,MAAM,UAAU,EAAE,WAAW,KAAK,CAAC;CACnE,SAAS,OAAO;EACd,QAAQ,MAAM,wBAAwB,KAAK,eAAe,kBAAkB,KAAK;CACnF;AACF;;;;;;;;;AAUA,eAAe,YACb,QACA,IACA,KAC4B;CAC5B,MAAM,OAAO,GAAG;CAChB,MAAM,WAAW,GAAG;CACpB,IAAI,SAAS,KAAA,KAAa,aAAa,KAAA,GAAW,OAAO;CAEzD,MAAM,QAAQ,UAAU,GAAG;CAC3B,MAAM,SAAS,MAAM,IAAI,KAAK,GAAG,GAAG,OAAO,SAAS,YAAY;EAC9D,MAAM,MAAM,KAAK,IAAI;EAErB,MAAM,UACJ,SAAS,KAAA,KAAa,MAAM,gBAAgB,KAAA,IACxC,MAAM,YAAY,IAAI,KAAK,GAAG,IAC9B;EACN,MAAM,UAAU,aAAa,KAAA,KAAc,MAAM,kBAAkB,UAAU,IAAI,OAAO,GAAG;EAC3F,OAAO;GAAE,QAAQ,SAAS,MAAM;GAAM;EAAQ;CAChD,CAAC;CAED,IAAI,OAAO,WAAW,MAAM;EAC1B,MAAM,gBAAgB,OAAO;EAC7B,IAAI,MAAM,eAAe,MAAM,OAAO,EAAE,MAAM,OAAO;CACvD;CACA,IAAI,OAAO,SAAS,OAAO,EAAE,MAAM,YAAY;CAC/C,OAAO;AACT;;;;;;AAOA,SAAS,SACP,MACA,OACA,KACsC;CACtC,IAAI,IAAI,cAAc,KAAA,GAAW,OAAO;CACxC,IAAI;EACF,OAAO,IAAI,UAAU,SAAS;GAAE,SAAS,KAAK;GAAS,UAAU,KAAK;GAAU;EAAM,CAAC;CACzF,SAAS,OAAO;EACd,IAAI,iBAAiB,OACnB,MAAM,UAAU,IAAI,IAAI,WAAW,GAAG,KAAK,GAAG,IAAI,MAAM;EAE1D,MAAM;CACR;AACF;;;;;;;;AASA,eAAe,WACb,MACA,KACkB;CAClB,IAAI,KAAK,UAAU,MAAM,OAAO;CAChC,OAAQ,MAAM,IAAI,MAAM,eAAe,KAAK,SAAS,KAAK,KAAK,MAAO;AACxE;;AAGA,SAAS,QAAQ,MAAuE;CACtF,OAAO,KAAK,YAAY,WAAW,KAAK,YAAY,SAAS,EAAE,OAAO,KAAK,SAAS,KAAK,IAAI,CAAC;AAChG;;;;;;;;;;;;;;;AAkBA,eAAe,SACb,MACA,IACA,KACe;CACf,MAAM,OAAO,MAAM,IAAI,KAAK,GAAoB,GAAG,KAAK,GAAG,QAAQ,YAAY;EAC7E,MAAM,QAAQ,SAAS,MAAM,MAAM,cAAc,KAAK,OAAO,IAAI,KAAK,GAAG,GAAG;EAE5E,IAAI,MAAM,WAAW,MAAM,GAAG,GAAG,OAAO;EACxC,MAAM,SAAS,MAAM,IAAI,MAAM,YAAY;EAE3C,OAAO;GAAE;GAAO,SADA,KAAK,YAAY,WAAW,OAAO,MAAM,GAAG,CAAC,IAAI;EACzC;CAC1B,CAAC;CAED,IAAI,SAAS,MAAM;CACnB,IAAI,KAAK,QAAQ,WAAW,GAAG;EAC7B,QAAQ,IAAI,kBAAkB,KAAK,SAAS,+BAA+B,IAAI,QAAQ;EACvF;CACF;CACA,KAAK,MAAM,CAAC,OAAO,WAAW,KAAK,QAAQ,QAAQ,GACjD,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,QAAQ,SAAS,YAAY;EACxD,MAAM,QACJ;GACE,UAAU,GAAG;GACb,YAAY,IAAI;GAChB,QAAQ,KAAK;GACb,SAAS;GACT,UAAU,KAAK;GACf,OAAO,KAAK;GACZ,QAAQ,MAAM,QAAQ,GAAG;GACzB,WAAW,OAAO;GAClB;GACA,gBAAgB,GAAG,IAAI,WAAW,GAAG,KAAK,GAAG,GAAG,OAAO;GACvD,GAAG,QAAQ,IAAI;EACjB,GACA,GACF;CACF,CAAC;AAEL;AAEA,eAAe,QAAQ,MAAc,IAAgB,KAA0C;CAC7F,QAAQ,KAAK,MAAb;EACE,KAAK;GACH,IAAI,KAAK,YAAY,QAAQ;IAC3B,MAAM,SAAS,MAAM,IAAI,GAAG;IAC5B,OAAO;GACT;GACA,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,QAAQ,YAAY;IAC/C,MAAM,QAAQ,SAAS,MAAM,MAAM,cAAc,KAAK,OAAO,IAAI,KAAK,GAAG,GAAG;IAE5E,IAAI,MAAM,WAAW,MAAM,GAAG,GAAG;IACjC,MAAM,gBAAgB,mBAAmB,KAAK;IAC9C,MAAM,YACJ,kBAAkB,KAAA,IAAY,KAAA,IAAY,MAAM,IAAI,MAAM,YAAY,aAAa;IACrF,MAAM,QACJ;KACE,UAAU,GAAG;KACb,YAAY,IAAI;KAChB,QAAQ,KAAK;KACb,SAAS,KAAK;KACd,UAAU,KAAK;KACf;KACA,QAAQ,MAAM,QAAQ,GAAG;KACzB,WAAW,cAAc,KAAA,IAAY,KAAA,IAAY,OAAO,SAAS;KACjE,gBAAgB,GAAG,IAAI,WAAW,GAAG,KAAK;KAC1C,GAAG,QAAQ,IAAI;IACjB,GACA,GACF;GACF,CAAC;GACD,OAAO;EAGT,KAAK;GACH,MAAM,IAAI,KAAK,MAAM,KAAK,IAAI,KAAK,SAAS,EAAE;GAC9C,OAAQ,MAAM,YAAY,KAAK,IAAI,IAAI,GAAG,KAAM;EAGlD,KAAK,gBAAgB;GAEnB,MAAM,KAAK,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,QAAQ,YAAY;IAC1D,MAAM,OAAO,KAAK,IAAI,KAAK,KAAK,IAAI;IACpC,OAAO,KAAK,IAAI,KAAK,KAAK,MAAM,KAAK,OAAO,IAAI,KAAK,IAAI,MAAM,CAAC,CAAC;GACnE,CAAC;GACD,MAAM,IAAI,KAAK,MAAM,GAAG,KAAK,GAAG,SAAS,EAAE;GAC3C,OAAQ,MAAM,YAAY,KAAK,IAAI,IAAI,GAAG,KAAM;EAClD;EAEA,KAAK,eAAe;GAClB,MAAM,SAAS,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,UAAU,YAAY;IAChE,MAAM,KACJ,KAAK,OAAO,SACR,OAAQ,MAAM,IAAI,MAAM,YAAY,iBAAiB,KAAM,KAAK,IAChE,KAAK;IACX,OAAO,gBAAgB,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,SAAS,EAAE;GAChE,CAAC;GACD,IAAI,WAAW,MAAM,OAAO;GAG5B,MAAM,KAAK,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,aAAa,YAAY,SAAS,KAAK,IAAI,CAAC;GACpF,IAAI,KAAK,GAAG,MAAM,IAAI,KAAK,MAAM,GAAG,KAAK,GAAG,SAAS,EAAE;GACvD,OAAQ,MAAM,YAAY,KAAK,IAAI,IAAI,GAAG,KAAM;EAClD;EAEA,KAAK,cAAc;GACjB,MAAM,MAAM,MAAM,UAAU,MAAM,GAAG;GAErC,MAAM,QAAQ,MAAM,YAAY,KAAK,IAAI,IAAI,GAAG;GAChD,IAAI,OAAO,OAAO;GAClB,IAAI,KAAK,OAAO;GAChB,MAAM,YAAY,KAAK;GACvB,IAAI,cAAc,YAAY,OAAO;GACrC,IAAI,cAAc,QAAQ,OAAO;IAAE,MAAM;IAAQ,QAAQ,GAAG,KAAK,GAAG;GAAU;GAC9E,OAAO,QAAQ,WAAW,IAAI,GAAG;EACnC;EAEA,KAAK,UAAU;GACb,MAAM,UAAU,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,QAAQ,YAAY;IAC/D,MAAM,MAAM,KAAK,IAAI;IACrB,KAAK,MAAM,CAAC,GAAG,eAAe,KAAK,MAAM,QAAQ,GAC/C,IAAI,MAAM,kBAAkB,WAAW,WAAW,IAAI,OAAO,GAAG,GAC9D,OAAO;IAGX,OAAO;GACT,CAAC;GACD,MAAM,OAAO,WAAW,IAAI,KAAK,MAAM,QAAQ,EAAE,OAAO,KAAK;GAC7D,IAAI,SAAS,KAAA,GAAW,OAAO;GAG/B,OAAO,MAFc,QAAQ,MAAM,IAAI,GAAG;EAG5C;EAEA,KAAK,UAIH,OAAO,MAHY,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,QAAQ,YAChD,kBAAkB,KAAK,WAAW,IAAI,OAAO,KAAK,IAAI,CAAC,CACzD,IACc,eAAe;GAAE,MAAM;GAAQ,QAAQ,KAAK,UAAU,GAAG,KAAK,GAAG;EAAW;EAG5F,KAAK,UAAU;GAOb,MAAM,SAAS,aAAa,GAAG,IAAI,OAAO,GAAG,KAAK,OAAO,GAAG,GAAG,GAAG,GAAG,KAAK,MAAM;GAGhF,IAAI,aAAa;GACjB,KAAK,MAAM,OAAO,KAAK,MAAM;IAC3B,cAAc,KAAK,MAAM,IAAI,SAAS,GAAG;IACzC,IAAI,SAAS,YAAY,OAAO,QAAQ,IAAI,MAAM,IAAI,GAAG;GAC3D;GACA,OAAO;EACT;EAEA,KAAK,QACH,OAAO,KAAK,WAAW,KAAA,IAAY;GAAE,MAAM;GAAQ,QAAQ,KAAK;EAAO,IAAI,EAAE,MAAM,OAAO;EAE5F,KAAK;GACH,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,QAAQ,YAAY;IAC/C,MAAM,UAAU,MAAM,cAAc,KAAK,SAAS,IAAI,KAAK;IAC3D,IAAI;KACF,MAAM,IAAI,OAAO,KAAK,KAAK,OAAO,SAAS,GAAG,IAAI,WAAW,GAAG,KAAK,IAAI;IAC3E,SAAS,OAAO;KAEd,IAAI,iBAAiB,OACnB,MAAM,UAAU,IAAI,IAAI,WAAW,GAAG,KAAK,GAAG,IAAI,MAAM;KAC1D,MAAM;IACR;GACF,CAAC;GACD,OAAO;EAGT,KAAK,UAAU;GAEb,MAAM,UAAU,IAAI;GACpB,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,MACR,WAAW,KAAK,OAAO,6GACzB;GAEF,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,OAAO,YAAY;IAC9C,MAAM,OAAO,MAAM,cAAc,KAAK,MAAM,IAAI,KAAK;IACrD,MAAM,QAAQ,OAAO;KACnB,QAAQ,KAAK;KACb;KACA,QAAQ,MAAM,QAAQ,GAAG;KACzB,gBAAgB,GAAG,IAAI,WAAW,GAAG,KAAK;IAC5C,CAAC;GACH,CAAC;GACD,OAAO;EACT;CACF;AACF;AAEA,eAAe,UACb,MACA,KACkB;CAClB,MAAM,WAAW,MAAM,IAAI,KAAK,GAC9B,GAAG,KAAK,GAAG,YACX,YAAY,KAAK,IAAI,IAAI,KAAK,QAAQ,EACxC;CACA,MAAM,SAAS,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,UAAU,YACpD,eAAe,KAAK,WAAW,IAAI,KAAK,CAC1C;CAIA,MAAM,WAAW,WAAW,KAAK,QAAQ;CACzC,MAAM,MAAM,MAAM,SAAS,KAAK,IAAI,KAAK,UAAU,QAAQ,OAAO,QAC/D,MAAM,kBAAkB,KAAK,WAAW,IAAI,OAAO,KAAK,EAAE,SAAS,CAAC,IAAK,OAAO,IACnF;CACA,MAAM,IAAI,KAAK,YAAY,GAAG,KAAK,GAAG,aAAa;CACnD,OAAO,QAAQ;AACjB;;;;;;;;AASA,eAAe,UAAU,IAAgB,KAAiD;CACxF,MAAM,WAAW,aAAa,IAAI,GAAG;CACrC,MAAM,OAAO,GAAG;CAChB,IAAI,SAAS,KAAA,KAAa,aAAa,KAAA,GAAW,OAAO;CACzD,MAAM,QAAQ,UAAU,GAAG;CAC3B,IAAI,MAAM,gBAAgB,KAAA,GAAW,OAAO;CAE5C,IAAI,CAAC,MADc,IAAI,KAAK,GAAG,aAAa,YAAY,WAAW,KAAK,IAAI,CAAC,GAClE,OAAO;CAClB,MAAM,WAAW,GAAG;CAOpB,MAAM,MAAM,MAAM,SAAS,QAAQ,KAAK,UAAU,MAN7B,IAAI,KAAK,GAAG,eAAe,YAAY,CAC1D,mBAAG,IAAI,IAAI,CACT,GAAI,MAAM,eAAe,KAAK,WAAW,IAAI,KAAK,GAClD,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,MAAM,eAAe,UAAU,IAAI,KAAK,CAC5E,CAAC,CACH,CAAC,GACyD,OAAO,QAAQ;EACvE,MAAM,UAAU,MAAM,YAAY,IAAI,KAAK,GAAG;EAC9C,IAAI,YAAY,MAAM,OAAO;GAAE,MAAM;GAAiB,IAAI,QAAQ;EAAG;EACrE,IAAI,aAAa,KAAA,KAAc,MAAM,kBAAkB,UAAU,IAAI,OAAO,GAAG,GAC7E,OAAO;GAAE,MAAM;GAAsB,IAAI;EAAI;EAE/C,OAAO;CACT,CAAC;CACD,MAAM,IAAI,KAAK,YAAY,kBAAkB;CAC7C,IAAI,QAAQ,MAAM,OAAO;CACzB,IAAI,IAAI,SAAS,QAAQ;EACvB,MAAM,gBAAgB,IAAI;EAC1B,OAAO,EAAE,MAAM,OAAO;CACxB;CACA,OAAO,EAAE,MAAM,YAAY;AAC7B;;;;;;;AAQA,eAAe,SACb,IACA,KACA,UACA,QACA,OACmB;CACnB,KAAK,IAAI,UAAU,GAAG,UAAU,iBAAiB,WAAW;EAM1D,MAAM,IAAI,KAAK,UAAU,GAAG,GAAG,aAAa,WAAW,QAAQ,EAAE,YAAY,SAAS,CAAC;EAEvF,MAAM,MAAM,MAAM,IAAI,KAAK,GAAG,GAAG,GAAG,SAAS,WAAW,YAAY,MAAM,KAAK,IAAI,CAAC,CAAC;EACrF,IAAI,QAAQ,MAAM,OAAO;EAIzB,MAAM,YAAY,MAAM,IAAI,KAAK,GAC/B,GAAG,GAAG,aAAa,WACnB,YAAY,WAAW,KAAK,IAAI,CAClC;EAEA,IAAI,aAAa,GAAG,OAAO;EAO3B,IAAI,MALe,IAAI,KAAK,YAAY,GAAG,GAAG,QAAQ,WAAW;GAC/D,WAAW;GACX,YAAY;EACd,CAAC,MAEY,WAAW,OAAO,WAAW,IAAI,KAAK,KAAK;CAE1D;CAKA,QAAQ,KACN,aAAa,IAAI,WAAW,GAAG,GAAG,IAAI,gBAAgB,mEACxD;CACA,MAAM,kBAAkB,MAAM,IAAI,KAAK,GACrC,GAAG,GAAG,oBACN,YAAY,WAAW,KAAK,IAAI,CAClC;CACA,IAAI,kBAAkB,GAAG,MAAM,IAAI,KAAK,MAAM,GAAG,GAAG,gBAAgB,eAAe;CACnF,OAAO,WAAW,IAAI,KAAK,KAAK;AAClC;;AAGA,eAAe,WACb,IACA,KACA,OACmB;CACnB,OAAO,IAAI,KAAK,GAAG,GAAG,GAAG,SAAS,YAAY,MAAM,KAAK,IAAI,CAAC,CAAC;AACjE;AAEA,eAAe,cACb,QACA,OAC+C;CAC/C,MAAM,WAAiD,CAAC;CACxD,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,GAC9C,SAAS,OAAO,OAAO,UAAU,WAAW,MAAM,MAAM,YAAY,MAAM,IAAI,IAAI;CAEpF,OAAO;AACT"}
+{"version":3,"file":"interpreter.mjs","names":[],"sources":["../../src/engine/interpreter.ts"],"sourcesContent":["import type { NodeIR, PropValueIR, ScalarIR, WorkflowIR } from '../ir';\nimport { hashToBucket } from './bucket';\nimport { evaluateCondition, relevantEvents } from './condition';\nimport type {\n  FactSource,\n  JourneyContext,\n  JourneyOutcome,\n  OutboundMessage,\n  PushDevice,\n} from './ports';\nimport { RECIPIENT_PROPERTY } from './recipient';\nimport { nextWindowStart } from './time-window';\n\n/**\n * IR interpreter: the execution core for one user's journey instance.\n *\n * Pure logic — it imports nothing platform-specific; every external effect\n * arrives through the JourneyContext ports, and durable semantics\n * (checkpoint/replay) are the EngineStep adapter's job.\n *\n * Step naming: an IR node id *is* the step name (derived from the structural\n * path, so it is deterministic and unique). When one node needs several steps,\n * a suffix is appended (`${id}:guard`, `${id}:check:${n}`).\n *\n * Guard semantics: goal / exitWhen are checked at journey entry and after\n * every suspension point (delay / random_delay / time_window / wait_until) —\n * the moments where wall-clock time passed and the user's state may have\n * moved. Between two synchronous nodes no meaningful time passes, so checking\n * there would only burn step budget (each checkpoint costs a state write).\n */\n\n/**\n * Cap on wait_until re-evaluations, so a wake-up storm cannot exhaust the platform's step\n * budget. Each loop iteration costs a handful of steps, so 64 checks stay well inside the\n * platform step budgets while absorbing far more wake churn than 16 did. Past the cap the wait\n * is not given up: it sleeps to its deadline and checks once more there (see waitLoop) — the\n * answer is still right at the deadline, it just stops being event-driven in between.\n */\nconst MAX_WAIT_CHECKS = 64;\n\n/** The user property holding an IANA timezone id, read when a time_window says tz: 'user'. Same convention-table status as RECIPIENT_PROPERTY. */\nconst TIMEZONE_PROPERTY = 'timezone';\n\ntype FlowSignal =\n  | { kind: 'fall_through' }\n  | { kind: 'exit'; reason?: string }\n  | { kind: 'goal' }\n  | { kind: 'exit_when' };\n\nconst FALL_THROUGH: FlowSignal = { kind: 'fall_through' };\n\n/**\n * Whether and when the instance converted — a fact of its own, apart from how it ends: with\n * `exitOnMatch: false` a conversion lets the flow go on, and the instance still ends `completed`\n * (or `exited`, `exit_when`) carrying it. Set only from checkpointed step results, so a replay\n * rebuilds the same state.\n */\ninterface GoalState {\n  convertedAt?: number;\n}\n\n/** Who a message or report is about now: a journey started by a visitor moves when they sign in. */\nfunction ownerOf(ctx: JourneyContext): Promise<string> {\n  return ctx.currentUserId?.() ?? Promise.resolve(ctx.userId);\n}\n\nconst goalStates = new WeakMap<JourneyContext, GoalState>();\n\nfunction goalState(ctx: JourneyContext): GoalState {\n  let state = goalStates.get(ctx);\n  if (state === undefined) {\n    state = {};\n    goalStates.set(ctx, state);\n  }\n  return state;\n}\n\n/** When the goal's attribution window closes, measured from entry; none without `within`. */\nfunction goalDeadline(ir: WorkflowIR, ctx: JourneyContext): number | undefined {\n  return ir.goal?.within === undefined ? undefined : ctx.enteredAtMs + ir.goal.within.ms;\n}\n\n/**\n * Whether the goal holds for events inside its window: after entry, and not after the window\n * closed — an instance resumed past the deadline must not count a purchase made after it. The\n * conversion time is when the check saw it, capped at the deadline.\n */\nasync function goalReached(\n  ir: WorkflowIR,\n  ctx: JourneyContext,\n  now: number\n): Promise<{ at: number } | null> {\n  const goal = ir.goal;\n  if (goal === undefined) return null;\n  const deadline = goalDeadline(ir, ctx);\n  const met = await evaluateCondition(goal.condition, ctx.facts, now, {\n    anchorMs: ctx.enteredAtMs,\n    ...(deadline === undefined ? {} : { untilMs: deadline }),\n  });\n  return met ? { at: deadline === undefined ? now : Math.min(now, deadline) } : null;\n}\n\nexport async function runJourney(ir: WorkflowIR, ctx: JourneyContext): Promise<JourneyOutcome> {\n  await started(ir, ctx);\n  const entry = await checkGuards('entry', ir, ctx);\n  let signal = entry ?? (await runFlow(ir.flow, ir, ctx));\n  // The flow is done but the conversion window is not: keep watching it (see awaitTail)\n  if (signal.kind === 'fall_through') signal = (await awaitTail(ir, ctx)) ?? FALL_THROUGH;\n  const { convertedAt } = goalState(ctx);\n  const converted = convertedAt === undefined ? {} : { convertedAt };\n  switch (signal.kind) {\n    case 'fall_through':\n      return { status: 'completed', ...converted };\n    case 'exit':\n      return signal.reason !== undefined\n        ? { status: 'exited', reason: signal.reason, ...converted }\n        : { status: 'exited', ...converted };\n    case 'goal':\n      return { status: 'goal', ...converted };\n    case 'exit_when':\n      return { status: 'exit_when', ...converted };\n  }\n}\n\nasync function runFlow(nodes: NodeIR[], ir: WorkflowIR, ctx: JourneyContext): Promise<FlowSignal> {\n  for (const node of nodes) {\n    await reached(node, ir, ctx);\n    const signal = await runNode(node, ir, ctx);\n    if (signal.kind !== 'fall_through') return signal;\n  }\n  return FALL_THROUGH;\n}\n\n/**\n * Tell the observer the instance entered — before the entry guards, which can end it before the\n * first node: an instance is counted from its entry, not from its first node.\n */\nasync function started(ir: WorkflowIR, ctx: JourneyContext): Promise<void> {\n  const observer = ctx.observer;\n  if (observer?.started === undefined) return;\n  await ctx.step.do('entry:started', async () => {\n    await observer.started?.({\n      workflow: ir.id,\n      instanceId: ctx.instanceId,\n      userId: await ownerOf(ctx),\n      at: ctx.enteredAtMs,\n    });\n  });\n}\n\n/**\n * Tell the observer the instance is at `node`. A step of its own, so a replay does not report\n * the nodes it passes on the way back again, and the arrival time stays the first one.\n */\nasync function reached(node: NodeIR, ir: WorkflowIR, ctx: JourneyContext): Promise<void> {\n  const observer = ctx.observer;\n  if (observer?.nodeReached === undefined) return;\n  await ctx.step.do(`${node.id}:reached`, async () => {\n    await observer.nodeReached?.({\n      workflow: ir.id,\n      instanceId: ctx.instanceId,\n      userId: await ownerOf(ctx),\n      nodeId: node.id,\n      at: Date.now(),\n    });\n  });\n}\n\n/**\n * One copy out through the host's sender, with the observer around it: settled? → prepared\n * (the row, the tracking) → claimed (handed to the transport, committed before the send) →\n * send → sent.\n *\n * Delivery is at most once. A send that throws is a definite failure: the claim is released, the\n * step retries, and the copy is reported when it settles. A copy that was claimed but never\n * settled is the uncertain case — the earlier run died between the transport taking it and the\n * report (or the step's checkpoint) — and a replay does not send it again; it logs and moves on.\n * The templates that must arrive opt out of that per template (`redelivery: 'resend'`), and are\n * sent again as the step retries. A report that fails after the send is logged, never thrown:\n * the step would retry, and the copy — now claimed — would be skipped.\n *\n * Why at most once (decided 2026-11-10, after reviewing the alternatives): exactly-once is out of\n * reach — Cloudflare Email Service (the `send_email` binding and the REST endpoint alike) and SES\n * accept no idempotency key or client message id, FCM does not de-duplicate, only APNs and Web\n * Push collapse a repeat on the device. Between the two remaining options, a duplicate marketing\n * email costs spam complaints, unsubscribes and sender reputation, while a lost nudge is invisible\n * to the user and a journey has later steps; this is how Customer.io and Braze behave (the\n * delivery record is the source of truth, no resend on uncertainty). Do not \"fix\" this back to\n * at-least-once: set `redelivery: 'resend'` on the templates that need it instead.\n */\nasync function deliver(message: OutboundMessage, ctx: JourneyContext): Promise<void> {\n  const observer = ctx.observer;\n  // A replayed step whose copy an earlier run already settled: the transport took it once\n  if (await observer?.messageSettled?.(message)) return;\n  const tracking = await observer?.messagePrepared?.(message);\n  const copy = tracking === undefined ? message : { ...message, tracking };\n  const claimed = (await observer?.messageClaimed?.(copy)) ?? true;\n  if (!claimed && copy.redelivery !== 'resend') {\n    console.warn(\n      `[workflow] ${copy.idempotencyKey} was handed to the transport by an earlier run and never settled: not sent again (redelivery: 'skip')`\n    );\n    return;\n  }\n  let result: Awaited<ReturnType<typeof ctx.messages.send>>;\n  try {\n    result = await ctx.messages.send(copy);\n  } catch (error) {\n    // A thrown send is a definite failure: the copy did not go out, so the retry must be free to send it\n    try {\n      await observer?.messageReleased?.(copy);\n    } catch (releaseError) {\n      console.error(\n        `[workflow] releasing ${copy.idempotencyKey} after a failed send failed`,\n        releaseError\n      );\n    }\n    throw error;\n  }\n  try {\n    await observer?.messageSent?.(copy, result ?? { delivered: true });\n  } catch (error) {\n    console.error(`[workflow] reporting ${copy.idempotencyKey} as sent failed`, error);\n  }\n}\n\n/**\n * Goal / exitWhen guards (see the header for when they run).\n *\n * The goal condition is anchored at workflow entry: a `performed` inside it\n * only counts events after the user entered, so pre-existing history cannot\n * register as a conversion. exitWhen is deliberately unanchored — \"user\n * unsubscribed\" should exit no matter when it happened.\n */\nasync function checkGuards(\n  stepId: string,\n  ir: WorkflowIR,\n  ctx: JourneyContext\n): Promise<FlowSignal | null> {\n  const goal = ir.goal;\n  const exitWhen = ir.exitWhen;\n  if (goal === undefined && exitWhen === undefined) return null;\n\n  const state = goalState(ctx);\n  const result = await ctx.step.do(`${stepId}:guard`, async () => {\n    const now = Date.now();\n    // Already converted (exitOnMatch: false): the conversion stands, no need to look again\n    const goalHit =\n      goal !== undefined && state.convertedAt === undefined\n        ? await goalReached(ir, ctx, now)\n        : null;\n    const exitMet = exitWhen !== undefined && (await evaluateCondition(exitWhen, ctx.facts, now));\n    return { goalAt: goalHit?.at ?? null, exitMet };\n  });\n\n  if (result.goalAt !== null) {\n    state.convertedAt ??= result.goalAt;\n    if (goal?.exitOnMatch ?? true) return { kind: 'goal' };\n  }\n  if (result.exitMet) return { kind: 'exit_when' };\n  return null;\n}\n\n/**\n * The host's template check, with the instance and node added to the message:\n * a refused message must point at the journey that produced it. The error\n * keeps its class (and `name`), so adapters can stop retrying it.\n */\nfunction validate(\n  node: Extract<NodeIR, { type: 'message' }>,\n  props: Record<string, ScalarIR | undefined>,\n  ctx: JourneyContext\n): Record<string, ScalarIR | undefined> {\n  if (ctx.validator === undefined) return props;\n  try {\n    return ctx.validator.validate({ channel: node.channel, template: node.template, props });\n  } catch (error) {\n    if (error instanceof Error) {\n      error.message = `[${ctx.instanceId} ${node.id}] ${error.message}`;\n    }\n    throw error;\n  }\n}\n\n/**\n * Whether the user opted out of what this step sends. An email or push step checks its topic —\n * an opt-out of the topic on that channel or of the whole channel skips it — and a transactional\n * message (`topic: null`) is never skipped: a receipt or a code goes out whatever the user opted\n * out of. A node compiled before topics existed (no `topic`) checks the channel-wide opt-out\n * only, as it always did. Other channels check the channel.\n */\nasync function suppressed(\n  node: Extract<NodeIR, { type: 'message' }>,\n  ctx: JourneyContext\n): Promise<boolean> {\n  if (node.topic === null) return false;\n  return (await ctx.facts.isSuppressed?.(node.channel, node.topic)) === true;\n}\n\n/** The copy's topic, for the channels that have one: what the observer records and the senders may read. */\nfunction topicOf(node: Extract<NodeIR, { type: 'message' }>): { topic?: string | null } {\n  return node.channel === 'email' || node.channel === 'push' ? { topic: node.topic ?? null } : {};\n}\n\n/** The template's `redelivery`, only when it opts into resending: absent is the default, 'skip'. */\nfunction redeliveryOf(node: Extract<NodeIR, { type: 'message' }>): { redelivery?: 'resend' } {\n  return node.redelivery === 'resend' ? { redelivery: 'resend' } : {};\n}\n\ntype PushPlan = { props: Record<string, ScalarIR | undefined>; devices: PushDevice[] };\n\n/**\n * A push goes to devices, not to a profile address: one copy per device the\n * host's directory lists (or only the most recent, `devices: 'latest'`). Each\n * copy's idempotency key carries its token, so a retried step that already\n * reached some devices re-sends to the rest and skips the ones it reached —\n * keyed by token rather than position, because the list can change between\n * attempts. A user with no device is skipped, not failed: being unreachable is\n * a state of the user, and `reachable('push')` is how a journey branches on it.\n */\n/**\n * A push: one step settles what goes out and to which devices, then each device gets a step of\n * its own — a failure on one device retries that device alone, and the copies already delivered\n * or claimed are not sent again (see `deliver`; APNs collapses a repeat on the device, FCM does\n * not de-duplicate at all).\n */\nasync function sendPush(\n  node: Extract<NodeIR, { type: 'message' }>,\n  ir: WorkflowIR,\n  ctx: JourneyContext\n): Promise<void> {\n  const plan = await ctx.step.do<PushPlan | null>(`${node.id}:send`, async () => {\n    const props = validate(node, await resolveValues(node.props, ctx.facts), ctx);\n    // Once per step, before any device: the topic's opt-out or the channel's (never a transactional push)\n    if (await suppressed(node, ctx)) return null;\n    const listed = await ctx.facts.listDevices();\n    const devices = node.devices === 'latest' ? listed.slice(0, 1) : listed;\n    return { props, devices };\n  });\n  // null: the topic or the channel is opted out\n  if (plan === null) return;\n  if (plan.devices.length === 0) {\n    console.log(`[journey] push ${node.template} skipped: no device for user ${ctx.userId}`);\n    return;\n  }\n  for (const [index, device] of plan.devices.entries()) {\n    await ctx.step.do(`${node.id}:send:${index}`, async () => {\n      await deliver(\n        {\n          workflow: ir.id,\n          instanceId: ctx.instanceId,\n          nodeId: node.id,\n          channel: 'push',\n          template: node.template,\n          props: plan.props,\n          userId: await ownerOf(ctx),\n          recipient: device.token,\n          device,\n          idempotencyKey: `${ctx.instanceId}:${node.id}:${device.token}`,\n          ...topicOf(node),\n          ...redeliveryOf(node),\n        },\n        ctx\n      );\n    });\n  }\n}\n\nasync function runNode(node: NodeIR, ir: WorkflowIR, ctx: JourneyContext): Promise<FlowSignal> {\n  switch (node.type) {\n    case 'message': {\n      if (node.channel === 'push') {\n        await sendPush(node, ir, ctx);\n        return FALL_THROUGH;\n      }\n      await ctx.step.do(`${node.id}:send`, async () => {\n        const props = validate(node, await resolveValues(node.props, ctx.facts), ctx);\n        // An opted-out channel (an email unsubscribe) is skipped, like a push with no device\n        if (await suppressed(node, ctx)) return;\n        const recipientPath = RECIPIENT_PROPERTY[node.channel];\n        const recipient =\n          recipientPath === undefined ? undefined : await ctx.facts.getProperty(recipientPath);\n        await deliver(\n          {\n            workflow: ir.id,\n            instanceId: ctx.instanceId,\n            nodeId: node.id,\n            channel: node.channel,\n            template: node.template,\n            props,\n            userId: await ownerOf(ctx),\n            recipient: recipient === undefined ? undefined : String(recipient),\n            idempotencyKey: `${ctx.instanceId}:${node.id}`,\n            ...topicOf(node),\n            ...redeliveryOf(node),\n          },\n          ctx\n        );\n      });\n      return FALL_THROUGH;\n    }\n\n    case 'delay': {\n      await ctx.step.sleep(node.id, node.duration.ms);\n      return (await checkGuards(node.id, ir, ctx)) ?? FALL_THROUGH;\n    }\n\n    case 'random_delay': {\n      // The random value is drawn and persisted inside the step, so replay does not re-roll it\n      const ms = await ctx.step.do(`${node.id}:roll`, async () => {\n        const span = node.max.ms - node.min.ms;\n        return node.min.ms + Math.floor(Math.random() * Math.max(span, 0));\n      });\n      await ctx.step.sleep(`${node.id}:sleep`, ms);\n      return (await checkGuards(node.id, ir, ctx)) ?? FALL_THROUGH;\n    }\n\n    case 'time_window': {\n      const target = await ctx.step.do(`${node.id}:target`, async () => {\n        const tz =\n          node.tz === 'user'\n            ? String((await ctx.facts.getProperty(TIMEZONE_PROPERTY)) ?? 'UTC')\n            : node.tz;\n        return nextWindowStart(Date.now(), node.days, node.between, tz);\n      });\n      if (target === null) return FALL_THROUGH; // already inside the window: no suspension, no guard\n      // The remaining time is checkpointed: a replay must not recompute it from a later clock\n      // (the target has passed by then, and a negative sleep is an error on some runtimes)\n      const ms = await ctx.step.do(`${node.id}:remaining`, async () => target - Date.now());\n      if (ms > 0) await ctx.step.sleep(`${node.id}:sleep`, ms);\n      return (await checkGuards(node.id, ir, ctx)) ?? FALL_THROUGH;\n    }\n\n    case 'wait_until': {\n      const met = await waitUntil(node, ctx);\n      // Time passed while waiting — guard before acting on the outcome (goal wins over the wait result)\n      const guard = await checkGuards(node.id, ir, ctx);\n      if (guard) return guard;\n      if (met) return FALL_THROUGH;\n      const onTimeout = node.onTimeout;\n      if (onTimeout === 'continue') return FALL_THROUGH;\n      if (onTimeout === 'exit') return { kind: 'exit', reason: `${node.id}:timeout` };\n      return runFlow(onTimeout, ir, ctx);\n    }\n\n    case 'branch': {\n      const matched = await ctx.step.do(`${node.id}:eval`, async () => {\n        const now = Date.now();\n        for (const [i, branchCase] of node.cases.entries()) {\n          if (await evaluateCondition(branchCase.condition, ctx.facts, now)) {\n            return i;\n          }\n        }\n        return -1; // no match → default arm, or simply continue\n      });\n      const flow = matched >= 0 ? node.cases[matched]?.flow : node.otherwise;\n      if (flow === undefined) return FALL_THROUGH;\n      const signal = await runFlow(flow, ir, ctx);\n      // Structural rejoin: once an arm falls through, execution resumes after the branch\n      return signal;\n    }\n\n    case 'filter': {\n      const pass = await ctx.step.do(`${node.id}:eval`, async () =>\n        evaluateCondition(node.condition, ctx.facts, Date.now())\n      );\n      return pass ? FALL_THROUGH : { kind: 'exit', reason: node.reason ?? `${node.id}:filtered` };\n    }\n\n    case 'cohort': {\n      // Deterministic bucketing, so replay needs no checkpoint. An explicit\n      // experiment key is global on purpose: two workflows naming the same\n      // experiment bucket a user identically. The fallback is namespaced by the\n      // workflow, because structural ids ('2', '1.c0.0') repeat across\n      // workflows and a bare one would put a user in the same arm of every\n      // unrelated split at that position.\n      const bucket = hashToBucket(`${ctx.userId}:${node.key ?? `${ir.id}:${node.id}`}`);\n      // Integer basis points on both sides (the DSL guarantees weights sit on\n      // the 0.01% grid), so no float ever meets the comparison.\n      let cumulative = 0;\n      for (const arm of node.arms) {\n        cumulative += Math.round(arm.weight * 100);\n        if (bucket < cumulative) return runFlow(arm.flow, ir, ctx);\n      }\n      return FALL_THROUGH;\n    }\n\n    case 'exit':\n      return node.reason !== undefined ? { kind: 'exit', reason: node.reason } : { kind: 'exit' };\n\n    case 'send_event': {\n      await ctx.step.do(`${node.id}:emit`, async () => {\n        const payload = await resolveValues(node.payload, ctx.facts);\n        try {\n          await ctx.events.emit(node.event, payload, `${ctx.instanceId}:${node.id}`);\n        } catch (error) {\n          // A refused event must point at the journey that emitted it\n          if (error instanceof Error)\n            error.message = `[${ctx.instanceId} ${node.id}] ${error.message}`;\n          throw error;\n        }\n      });\n      return FALL_THROUGH;\n    }\n\n    case 'action': {\n      // Custom code runs inside step.do: retried on throw, checkpointed on success\n      const invoker = ctx.actions;\n      if (invoker === undefined) {\n        throw new Error(\n          `action '${node.action}': this runtime has no ActionInvoker configured — register the action on the adapter (see engine/actions.ts)`\n        );\n      }\n      await ctx.step.do(`${node.id}:run`, async () => {\n        const args = await resolveValues(node.args, ctx.facts);\n        await invoker.invoke({\n          action: node.action,\n          args,\n          userId: await ownerOf(ctx),\n          idempotencyKey: `${ctx.instanceId}:${node.id}`,\n        });\n      });\n      return FALL_THROUGH;\n    }\n  }\n}\n\nasync function waitUntil(\n  node: Extract<NodeIR, { type: 'wait_until' }>,\n  ctx: JourneyContext\n): Promise<boolean> {\n  const deadline = await ctx.step.do(\n    `${node.id}:deadline`,\n    async () => Date.now() + node.timeout.ms\n  );\n  const events = await ctx.step.do(`${node.id}:events`, async () =>\n    relevantEvents(node.condition, ctx.facts)\n  );\n  // Anchor at the moment the wait began (deadline is checkpointed, so this is\n  // replay-stable): `performed` inside the condition only counts events that\n  // happen during the wait — pre-existing history must not satisfy it.\n  const anchorMs = deadline - node.timeout.ms;\n  const met = await waitLoop(node.id, ctx, deadline, events, async (now) =>\n    (await evaluateCondition(node.condition, ctx.facts, now, { anchorMs })) ? true : null\n  );\n  await ctx.step.unsubscribe(`${node.id}:unsubscribe`);\n  return met === true;\n}\n\n/**\n * The conversion window outlives the flow: a journey whose steps are done while its goal's\n * `within` is still open keeps watching until the window closes — the purchase that follows the\n * last offer email is that email's conversion, and ending the instance at the email would report\n * it as a plain completion. `exitWhen` still applies while it waits. Nothing to wait for without\n * a window, or once the instance has converted.\n */\nasync function awaitTail(ir: WorkflowIR, ctx: JourneyContext): Promise<FlowSignal | null> {\n  const deadline = goalDeadline(ir, ctx);\n  const goal = ir.goal;\n  if (goal === undefined || deadline === undefined) return null;\n  const state = goalState(ctx);\n  if (state.convertedAt !== undefined) return null;\n  const open = await ctx.step.do('goal:open', async () => deadline > Date.now());\n  if (!open) return null;\n  const exitWhen = ir.exitWhen;\n  const events = await ctx.step.do('goal:events', async () => [\n    ...new Set([\n      ...(await relevantEvents(goal.condition, ctx.facts)),\n      ...(exitWhen === undefined ? [] : await relevantEvents(exitWhen, ctx.facts)),\n    ]),\n  ]);\n  const hit = await waitLoop('goal', ctx, deadline, events, async (now) => {\n    const reached = await goalReached(ir, ctx, now);\n    if (reached !== null) return { kind: 'goal' as const, at: reached.at };\n    if (exitWhen !== undefined && (await evaluateCondition(exitWhen, ctx.facts, now))) {\n      return { kind: 'exit_when' as const, at: now };\n    }\n    return null;\n  });\n  await ctx.step.unsubscribe('goal:unsubscribe');\n  if (hit === null) return null;\n  if (hit.kind === 'goal') {\n    state.convertedAt ??= hit.at;\n    return { kind: 'goal' };\n  }\n  return { kind: 'exit_when' };\n}\n\n/**\n * Wait until `check` finds something or the deadline passes: subscribe, check, sleep until a\n * relevant event wakes the instance or time runs out. `check` runs inside a step, so its result\n * must be serializable; null means \"not yet\". Null from here means the deadline passed with\n * nothing found — never a failure, and never a wait given up on early.\n */\nasync function waitLoop<R>(\n  id: string,\n  ctx: JourneyContext,\n  deadline: number,\n  events: string[],\n  check: (now: number) => Promise<R | null>\n): Promise<R | null> {\n  for (let attempt = 0; attempt < MAX_WAIT_CHECKS; attempt++) {\n    // Subscribe before the check, every attempt: one subscribe arms at least\n    // one wake-up (AWS callbacks are consumed on delivery, so each attempt\n    // needs a fresh arm; Cloudflare rows make the repeat call idempotent), and\n    // arming first closes the race where the event lands between the check and\n    // the registration.\n    await ctx.step.subscribe(`${id}:subscribe:${attempt}`, events, { deadlineMs: deadline });\n\n    const met = await ctx.step.do(`${id}:check:${attempt}`, async () => check(Date.now()));\n    if (met !== null) return met;\n\n    // Checkpointed: replay re-runs this control flow with wall-clock time far\n    // ahead of the original run, so the branch must come from a persisted value.\n    const remaining = await ctx.step.do(\n      `${id}:remaining:${attempt}`,\n      async () => deadline - Date.now()\n    );\n    // The condition was checked just above — expiring here needs no extra final check\n    if (remaining <= 0) return null;\n\n    const wake = await ctx.step.waitForWake(`${id}:wait:${attempt}`, {\n      timeoutMs: remaining,\n      deadlineMs: deadline,\n    });\n    // Final check after timeout: in a tight race the event may land exactly as the timer fires\n    if (wake === 'timeout') return finalCheck(id, ctx, check);\n    // Woken → back to the top of the loop to re-evaluate (at-least-once wake-up semantics)\n  }\n  // Check budget exhausted (see MAX_WAIT_CHECKS). Not a timeout: the wait keeps its deadline,\n  // only the wake-ups are given up — sleep to the deadline, then check once more there. The\n  // subscription rows stay until the caller's unsubscribe; a wake landing meanwhile is dropped\n  // by the runtime (nothing is parked on it), which is the point.\n  console.warn(\n    `[journey] ${ctx.instanceId} ${id}: ${MAX_WAIT_CHECKS} wake-ups without the condition holding — sleeping to the deadline`\n  );\n  const budgetRemaining = await ctx.step.do(\n    `${id}:budget:remaining`,\n    async () => deadline - Date.now()\n  );\n  if (budgetRemaining > 0) await ctx.step.sleep(`${id}:budget:sleep`, budgetRemaining);\n  return finalCheck(id, ctx, check);\n}\n\n/** The check once the deadline is reached — one step for all the ways of getting there. */\nasync function finalCheck<R>(\n  id: string,\n  ctx: JourneyContext,\n  check: (now: number) => Promise<R | null>\n): Promise<R | null> {\n  return ctx.step.do(`${id}:final`, async () => check(Date.now()));\n}\n\nasync function resolveValues(\n  values: Record<string, PropValueIR>,\n  facts: FactSource\n): Promise<Record<string, ScalarIR | undefined>> {\n  const resolved: Record<string, ScalarIR | undefined> = {};\n  for (const [key, value] of Object.entries(values)) {\n    resolved[key] = typeof value === 'object' ? await facts.getProperty(value.path) : value;\n  }\n  return resolved;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCA,MAAM,kBAAkB;;AAGxB,MAAM,oBAAoB;AAQ1B,MAAM,eAA2B,EAAE,MAAM,eAAe;;AAaxD,SAAS,QAAQ,KAAsC;CACrD,OAAO,IAAI,gBAAgB,KAAK,QAAQ,QAAQ,IAAI,MAAM;AAC5D;AAEA,MAAM,6BAAa,IAAI,QAAmC;AAE1D,SAAS,UAAU,KAAgC;CACjD,IAAI,QAAQ,WAAW,IAAI,GAAG;CAC9B,IAAI,UAAU,KAAA,GAAW;EACvB,QAAQ,CAAC;EACT,WAAW,IAAI,KAAK,KAAK;CAC3B;CACA,OAAO;AACT;;AAGA,SAAS,aAAa,IAAgB,KAAyC;CAC7E,OAAO,GAAG,MAAM,WAAW,KAAA,IAAY,KAAA,IAAY,IAAI,cAAc,GAAG,KAAK,OAAO;AACtF;;;;;;AAOA,eAAe,YACb,IACA,KACA,KACgC;CAChC,MAAM,OAAO,GAAG;CAChB,IAAI,SAAS,KAAA,GAAW,OAAO;CAC/B,MAAM,WAAW,aAAa,IAAI,GAAG;CAKrC,OAAO,MAJW,kBAAkB,KAAK,WAAW,IAAI,OAAO,KAAK;EAClE,UAAU,IAAI;EACd,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,SAAS;CACxD,CAAC,IACY,EAAE,IAAI,aAAa,KAAA,IAAY,MAAM,KAAK,IAAI,KAAK,QAAQ,EAAE,IAAI;AAChF;AAEA,eAAsB,WAAW,IAAgB,KAA8C;CAC7F,MAAM,QAAQ,IAAI,GAAG;CAErB,IAAI,SAAS,MADO,YAAY,SAAS,IAAI,GAAG,KACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,GAAG;CAErD,IAAI,OAAO,SAAS,gBAAgB,SAAU,MAAM,UAAU,IAAI,GAAG,KAAM;CAC3E,MAAM,EAAE,gBAAgB,UAAU,GAAG;CACrC,MAAM,YAAY,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY;CACjE,QAAQ,OAAO,MAAf;EACE,KAAK,gBACH,OAAO;GAAE,QAAQ;GAAa,GAAG;EAAU;EAC7C,KAAK,QACH,OAAO,OAAO,WAAW,KAAA,IACrB;GAAE,QAAQ;GAAU,QAAQ,OAAO;GAAQ,GAAG;EAAU,IACxD;GAAE,QAAQ;GAAU,GAAG;EAAU;EACvC,KAAK,QACH,OAAO;GAAE,QAAQ;GAAQ,GAAG;EAAU;EACxC,KAAK,aACH,OAAO;GAAE,QAAQ;GAAa,GAAG;EAAU;CAC/C;AACF;AAEA,eAAe,QAAQ,OAAiB,IAAgB,KAA0C;CAChG,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,QAAQ,MAAM,IAAI,GAAG;EAC3B,MAAM,SAAS,MAAM,QAAQ,MAAM,IAAI,GAAG;EAC1C,IAAI,OAAO,SAAS,gBAAgB,OAAO;CAC7C;CACA,OAAO;AACT;;;;;AAMA,eAAe,QAAQ,IAAgB,KAAoC;CACzE,MAAM,WAAW,IAAI;CACrB,IAAI,UAAU,YAAY,KAAA,GAAW;CACrC,MAAM,IAAI,KAAK,GAAG,iBAAiB,YAAY;EAC7C,MAAM,SAAS,UAAU;GACvB,UAAU,GAAG;GACb,YAAY,IAAI;GAChB,QAAQ,MAAM,QAAQ,GAAG;GACzB,IAAI,IAAI;EACV,CAAC;CACH,CAAC;AACH;;;;;AAMA,eAAe,QAAQ,MAAc,IAAgB,KAAoC;CACvF,MAAM,WAAW,IAAI;CACrB,IAAI,UAAU,gBAAgB,KAAA,GAAW;CACzC,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,WAAW,YAAY;EAClD,MAAM,SAAS,cAAc;GAC3B,UAAU,GAAG;GACb,YAAY,IAAI;GAChB,QAAQ,MAAM,QAAQ,GAAG;GACzB,QAAQ,KAAK;GACb,IAAI,KAAK,IAAI;EACf,CAAC;CACH,CAAC;AACH;;;;;;;;;;;;;;;;;;;;;;;AAwBA,eAAe,QAAQ,SAA0B,KAAoC;CACnF,MAAM,WAAW,IAAI;CAErB,IAAI,MAAM,UAAU,iBAAiB,OAAO,GAAG;CAC/C,MAAM,WAAW,MAAM,UAAU,kBAAkB,OAAO;CAC1D,MAAM,OAAO,aAAa,KAAA,IAAY,UAAU;EAAE,GAAG;EAAS;CAAS;CAEvE,IAAI,EADa,MAAM,UAAU,iBAAiB,IAAI,KAAM,SAC5C,KAAK,eAAe,UAAU;EAC5C,QAAQ,KACN,cAAc,KAAK,eAAe,sGACpC;EACA;CACF;CACA,IAAI;CACJ,IAAI;EACF,SAAS,MAAM,IAAI,SAAS,KAAK,IAAI;CACvC,SAAS,OAAO;EAEd,IAAI;GACF,MAAM,UAAU,kBAAkB,IAAI;EACxC,SAAS,cAAc;GACrB,QAAQ,MACN,wBAAwB,KAAK,eAAe,8BAC5C,YACF;EACF;EACA,MAAM;CACR;CACA,IAAI;EACF,MAAM,UAAU,cAAc,MAAM,UAAU,EAAE,WAAW,KAAK,CAAC;CACnE,SAAS,OAAO;EACd,QAAQ,MAAM,wBAAwB,KAAK,eAAe,kBAAkB,KAAK;CACnF;AACF;;;;;;;;;AAUA,eAAe,YACb,QACA,IACA,KAC4B;CAC5B,MAAM,OAAO,GAAG;CAChB,MAAM,WAAW,GAAG;CACpB,IAAI,SAAS,KAAA,KAAa,aAAa,KAAA,GAAW,OAAO;CAEzD,MAAM,QAAQ,UAAU,GAAG;CAC3B,MAAM,SAAS,MAAM,IAAI,KAAK,GAAG,GAAG,OAAO,SAAS,YAAY;EAC9D,MAAM,MAAM,KAAK,IAAI;EAErB,MAAM,UACJ,SAAS,KAAA,KAAa,MAAM,gBAAgB,KAAA,IACxC,MAAM,YAAY,IAAI,KAAK,GAAG,IAC9B;EACN,MAAM,UAAU,aAAa,KAAA,KAAc,MAAM,kBAAkB,UAAU,IAAI,OAAO,GAAG;EAC3F,OAAO;GAAE,QAAQ,SAAS,MAAM;GAAM;EAAQ;CAChD,CAAC;CAED,IAAI,OAAO,WAAW,MAAM;EAC1B,MAAM,gBAAgB,OAAO;EAC7B,IAAI,MAAM,eAAe,MAAM,OAAO,EAAE,MAAM,OAAO;CACvD;CACA,IAAI,OAAO,SAAS,OAAO,EAAE,MAAM,YAAY;CAC/C,OAAO;AACT;;;;;;AAOA,SAAS,SACP,MACA,OACA,KACsC;CACtC,IAAI,IAAI,cAAc,KAAA,GAAW,OAAO;CACxC,IAAI;EACF,OAAO,IAAI,UAAU,SAAS;GAAE,SAAS,KAAK;GAAS,UAAU,KAAK;GAAU;EAAM,CAAC;CACzF,SAAS,OAAO;EACd,IAAI,iBAAiB,OACnB,MAAM,UAAU,IAAI,IAAI,WAAW,GAAG,KAAK,GAAG,IAAI,MAAM;EAE1D,MAAM;CACR;AACF;;;;;;;;AASA,eAAe,WACb,MACA,KACkB;CAClB,IAAI,KAAK,UAAU,MAAM,OAAO;CAChC,OAAQ,MAAM,IAAI,MAAM,eAAe,KAAK,SAAS,KAAK,KAAK,MAAO;AACxE;;AAGA,SAAS,QAAQ,MAAuE;CACtF,OAAO,KAAK,YAAY,WAAW,KAAK,YAAY,SAAS,EAAE,OAAO,KAAK,SAAS,KAAK,IAAI,CAAC;AAChG;;AAGA,SAAS,aAAa,MAAuE;CAC3F,OAAO,KAAK,eAAe,WAAW,EAAE,YAAY,SAAS,IAAI,CAAC;AACpE;;;;;;;;;;;;;;;;AAmBA,eAAe,SACb,MACA,IACA,KACe;CACf,MAAM,OAAO,MAAM,IAAI,KAAK,GAAoB,GAAG,KAAK,GAAG,QAAQ,YAAY;EAC7E,MAAM,QAAQ,SAAS,MAAM,MAAM,cAAc,KAAK,OAAO,IAAI,KAAK,GAAG,GAAG;EAE5E,IAAI,MAAM,WAAW,MAAM,GAAG,GAAG,OAAO;EACxC,MAAM,SAAS,MAAM,IAAI,MAAM,YAAY;EAE3C,OAAO;GAAE;GAAO,SADA,KAAK,YAAY,WAAW,OAAO,MAAM,GAAG,CAAC,IAAI;EACzC;CAC1B,CAAC;CAED,IAAI,SAAS,MAAM;CACnB,IAAI,KAAK,QAAQ,WAAW,GAAG;EAC7B,QAAQ,IAAI,kBAAkB,KAAK,SAAS,+BAA+B,IAAI,QAAQ;EACvF;CACF;CACA,KAAK,MAAM,CAAC,OAAO,WAAW,KAAK,QAAQ,QAAQ,GACjD,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,QAAQ,SAAS,YAAY;EACxD,MAAM,QACJ;GACE,UAAU,GAAG;GACb,YAAY,IAAI;GAChB,QAAQ,KAAK;GACb,SAAS;GACT,UAAU,KAAK;GACf,OAAO,KAAK;GACZ,QAAQ,MAAM,QAAQ,GAAG;GACzB,WAAW,OAAO;GAClB;GACA,gBAAgB,GAAG,IAAI,WAAW,GAAG,KAAK,GAAG,GAAG,OAAO;GACvD,GAAG,QAAQ,IAAI;GACf,GAAG,aAAa,IAAI;EACtB,GACA,GACF;CACF,CAAC;AAEL;AAEA,eAAe,QAAQ,MAAc,IAAgB,KAA0C;CAC7F,QAAQ,KAAK,MAAb;EACE,KAAK;GACH,IAAI,KAAK,YAAY,QAAQ;IAC3B,MAAM,SAAS,MAAM,IAAI,GAAG;IAC5B,OAAO;GACT;GACA,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,QAAQ,YAAY;IAC/C,MAAM,QAAQ,SAAS,MAAM,MAAM,cAAc,KAAK,OAAO,IAAI,KAAK,GAAG,GAAG;IAE5E,IAAI,MAAM,WAAW,MAAM,GAAG,GAAG;IACjC,MAAM,gBAAgB,mBAAmB,KAAK;IAC9C,MAAM,YACJ,kBAAkB,KAAA,IAAY,KAAA,IAAY,MAAM,IAAI,MAAM,YAAY,aAAa;IACrF,MAAM,QACJ;KACE,UAAU,GAAG;KACb,YAAY,IAAI;KAChB,QAAQ,KAAK;KACb,SAAS,KAAK;KACd,UAAU,KAAK;KACf;KACA,QAAQ,MAAM,QAAQ,GAAG;KACzB,WAAW,cAAc,KAAA,IAAY,KAAA,IAAY,OAAO,SAAS;KACjE,gBAAgB,GAAG,IAAI,WAAW,GAAG,KAAK;KAC1C,GAAG,QAAQ,IAAI;KACf,GAAG,aAAa,IAAI;IACtB,GACA,GACF;GACF,CAAC;GACD,OAAO;EAGT,KAAK;GACH,MAAM,IAAI,KAAK,MAAM,KAAK,IAAI,KAAK,SAAS,EAAE;GAC9C,OAAQ,MAAM,YAAY,KAAK,IAAI,IAAI,GAAG,KAAM;EAGlD,KAAK,gBAAgB;GAEnB,MAAM,KAAK,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,QAAQ,YAAY;IAC1D,MAAM,OAAO,KAAK,IAAI,KAAK,KAAK,IAAI;IACpC,OAAO,KAAK,IAAI,KAAK,KAAK,MAAM,KAAK,OAAO,IAAI,KAAK,IAAI,MAAM,CAAC,CAAC;GACnE,CAAC;GACD,MAAM,IAAI,KAAK,MAAM,GAAG,KAAK,GAAG,SAAS,EAAE;GAC3C,OAAQ,MAAM,YAAY,KAAK,IAAI,IAAI,GAAG,KAAM;EAClD;EAEA,KAAK,eAAe;GAClB,MAAM,SAAS,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,UAAU,YAAY;IAChE,MAAM,KACJ,KAAK,OAAO,SACR,OAAQ,MAAM,IAAI,MAAM,YAAY,iBAAiB,KAAM,KAAK,IAChE,KAAK;IACX,OAAO,gBAAgB,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,SAAS,EAAE;GAChE,CAAC;GACD,IAAI,WAAW,MAAM,OAAO;GAG5B,MAAM,KAAK,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,aAAa,YAAY,SAAS,KAAK,IAAI,CAAC;GACpF,IAAI,KAAK,GAAG,MAAM,IAAI,KAAK,MAAM,GAAG,KAAK,GAAG,SAAS,EAAE;GACvD,OAAQ,MAAM,YAAY,KAAK,IAAI,IAAI,GAAG,KAAM;EAClD;EAEA,KAAK,cAAc;GACjB,MAAM,MAAM,MAAM,UAAU,MAAM,GAAG;GAErC,MAAM,QAAQ,MAAM,YAAY,KAAK,IAAI,IAAI,GAAG;GAChD,IAAI,OAAO,OAAO;GAClB,IAAI,KAAK,OAAO;GAChB,MAAM,YAAY,KAAK;GACvB,IAAI,cAAc,YAAY,OAAO;GACrC,IAAI,cAAc,QAAQ,OAAO;IAAE,MAAM;IAAQ,QAAQ,GAAG,KAAK,GAAG;GAAU;GAC9E,OAAO,QAAQ,WAAW,IAAI,GAAG;EACnC;EAEA,KAAK,UAAU;GACb,MAAM,UAAU,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,QAAQ,YAAY;IAC/D,MAAM,MAAM,KAAK,IAAI;IACrB,KAAK,MAAM,CAAC,GAAG,eAAe,KAAK,MAAM,QAAQ,GAC/C,IAAI,MAAM,kBAAkB,WAAW,WAAW,IAAI,OAAO,GAAG,GAC9D,OAAO;IAGX,OAAO;GACT,CAAC;GACD,MAAM,OAAO,WAAW,IAAI,KAAK,MAAM,QAAQ,EAAE,OAAO,KAAK;GAC7D,IAAI,SAAS,KAAA,GAAW,OAAO;GAG/B,OAAO,MAFc,QAAQ,MAAM,IAAI,GAAG;EAG5C;EAEA,KAAK,UAIH,OAAO,MAHY,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,QAAQ,YAChD,kBAAkB,KAAK,WAAW,IAAI,OAAO,KAAK,IAAI,CAAC,CACzD,IACc,eAAe;GAAE,MAAM;GAAQ,QAAQ,KAAK,UAAU,GAAG,KAAK,GAAG;EAAW;EAG5F,KAAK,UAAU;GAOb,MAAM,SAAS,aAAa,GAAG,IAAI,OAAO,GAAG,KAAK,OAAO,GAAG,GAAG,GAAG,GAAG,KAAK,MAAM;GAGhF,IAAI,aAAa;GACjB,KAAK,MAAM,OAAO,KAAK,MAAM;IAC3B,cAAc,KAAK,MAAM,IAAI,SAAS,GAAG;IACzC,IAAI,SAAS,YAAY,OAAO,QAAQ,IAAI,MAAM,IAAI,GAAG;GAC3D;GACA,OAAO;EACT;EAEA,KAAK,QACH,OAAO,KAAK,WAAW,KAAA,IAAY;GAAE,MAAM;GAAQ,QAAQ,KAAK;EAAO,IAAI,EAAE,MAAM,OAAO;EAE5F,KAAK;GACH,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,QAAQ,YAAY;IAC/C,MAAM,UAAU,MAAM,cAAc,KAAK,SAAS,IAAI,KAAK;IAC3D,IAAI;KACF,MAAM,IAAI,OAAO,KAAK,KAAK,OAAO,SAAS,GAAG,IAAI,WAAW,GAAG,KAAK,IAAI;IAC3E,SAAS,OAAO;KAEd,IAAI,iBAAiB,OACnB,MAAM,UAAU,IAAI,IAAI,WAAW,GAAG,KAAK,GAAG,IAAI,MAAM;KAC1D,MAAM;IACR;GACF,CAAC;GACD,OAAO;EAGT,KAAK,UAAU;GAEb,MAAM,UAAU,IAAI;GACpB,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,MACR,WAAW,KAAK,OAAO,6GACzB;GAEF,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,OAAO,YAAY;IAC9C,MAAM,OAAO,MAAM,cAAc,KAAK,MAAM,IAAI,KAAK;IACrD,MAAM,QAAQ,OAAO;KACnB,QAAQ,KAAK;KACb;KACA,QAAQ,MAAM,QAAQ,GAAG;KACzB,gBAAgB,GAAG,IAAI,WAAW,GAAG,KAAK;IAC5C,CAAC;GACH,CAAC;GACD,OAAO;EACT;CACF;AACF;AAEA,eAAe,UACb,MACA,KACkB;CAClB,MAAM,WAAW,MAAM,IAAI,KAAK,GAC9B,GAAG,KAAK,GAAG,YACX,YAAY,KAAK,IAAI,IAAI,KAAK,QAAQ,EACxC;CACA,MAAM,SAAS,MAAM,IAAI,KAAK,GAAG,GAAG,KAAK,GAAG,UAAU,YACpD,eAAe,KAAK,WAAW,IAAI,KAAK,CAC1C;CAIA,MAAM,WAAW,WAAW,KAAK,QAAQ;CACzC,MAAM,MAAM,MAAM,SAAS,KAAK,IAAI,KAAK,UAAU,QAAQ,OAAO,QAC/D,MAAM,kBAAkB,KAAK,WAAW,IAAI,OAAO,KAAK,EAAE,SAAS,CAAC,IAAK,OAAO,IACnF;CACA,MAAM,IAAI,KAAK,YAAY,GAAG,KAAK,GAAG,aAAa;CACnD,OAAO,QAAQ;AACjB;;;;;;;;AASA,eAAe,UAAU,IAAgB,KAAiD;CACxF,MAAM,WAAW,aAAa,IAAI,GAAG;CACrC,MAAM,OAAO,GAAG;CAChB,IAAI,SAAS,KAAA,KAAa,aAAa,KAAA,GAAW,OAAO;CACzD,MAAM,QAAQ,UAAU,GAAG;CAC3B,IAAI,MAAM,gBAAgB,KAAA,GAAW,OAAO;CAE5C,IAAI,CAAC,MADc,IAAI,KAAK,GAAG,aAAa,YAAY,WAAW,KAAK,IAAI,CAAC,GAClE,OAAO;CAClB,MAAM,WAAW,GAAG;CAOpB,MAAM,MAAM,MAAM,SAAS,QAAQ,KAAK,UAAU,MAN7B,IAAI,KAAK,GAAG,eAAe,YAAY,CAC1D,mBAAG,IAAI,IAAI,CACT,GAAI,MAAM,eAAe,KAAK,WAAW,IAAI,KAAK,GAClD,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,MAAM,eAAe,UAAU,IAAI,KAAK,CAC5E,CAAC,CACH,CAAC,GACyD,OAAO,QAAQ;EACvE,MAAM,UAAU,MAAM,YAAY,IAAI,KAAK,GAAG;EAC9C,IAAI,YAAY,MAAM,OAAO;GAAE,MAAM;GAAiB,IAAI,QAAQ;EAAG;EACrE,IAAI,aAAa,KAAA,KAAc,MAAM,kBAAkB,UAAU,IAAI,OAAO,GAAG,GAC7E,OAAO;GAAE,MAAM;GAAsB,IAAI;EAAI;EAE/C,OAAO;CACT,CAAC;CACD,MAAM,IAAI,KAAK,YAAY,kBAAkB;CAC7C,IAAI,QAAQ,MAAM,OAAO;CACzB,IAAI,IAAI,SAAS,QAAQ;EACvB,MAAM,gBAAgB,IAAI;EAC1B,OAAO,EAAE,MAAM,OAAO;CACxB;CACA,OAAO,EAAE,MAAM,YAAY;AAC7B;;;;;;;AAQA,eAAe,SACb,IACA,KACA,UACA,QACA,OACmB;CACnB,KAAK,IAAI,UAAU,GAAG,UAAU,iBAAiB,WAAW;EAM1D,MAAM,IAAI,KAAK,UAAU,GAAG,GAAG,aAAa,WAAW,QAAQ,EAAE,YAAY,SAAS,CAAC;EAEvF,MAAM,MAAM,MAAM,IAAI,KAAK,GAAG,GAAG,GAAG,SAAS,WAAW,YAAY,MAAM,KAAK,IAAI,CAAC,CAAC;EACrF,IAAI,QAAQ,MAAM,OAAO;EAIzB,MAAM,YAAY,MAAM,IAAI,KAAK,GAC/B,GAAG,GAAG,aAAa,WACnB,YAAY,WAAW,KAAK,IAAI,CAClC;EAEA,IAAI,aAAa,GAAG,OAAO;EAO3B,IAAI,MALe,IAAI,KAAK,YAAY,GAAG,GAAG,QAAQ,WAAW;GAC/D,WAAW;GACX,YAAY;EACd,CAAC,MAEY,WAAW,OAAO,WAAW,IAAI,KAAK,KAAK;CAE1D;CAKA,QAAQ,KACN,aAAa,IAAI,WAAW,GAAG,GAAG,IAAI,gBAAgB,mEACxD;CACA,MAAM,kBAAkB,MAAM,IAAI,KAAK,GACrC,GAAG,GAAG,oBACN,YAAY,WAAW,KAAK,IAAI,CAClC;CACA,IAAI,kBAAkB,GAAG,MAAM,IAAI,KAAK,MAAM,GAAG,GAAG,gBAAgB,eAAe;CACnF,OAAO,WAAW,IAAI,KAAK,KAAK;AAClC;;AAGA,eAAe,WACb,IACA,KACA,OACmB;CACnB,OAAO,IAAI,KAAK,GAAG,GAAG,GAAG,SAAS,YAAY,MAAM,KAAK,IAAI,CAAC,CAAC;AACjE;AAEA,eAAe,cACb,QACA,OAC+C;CAC/C,MAAM,WAAiD,CAAC;CACxD,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,GAC9C,SAAS,OAAO,OAAO,UAAU,WAAW,MAAM,MAAM,YAAY,MAAM,IAAI,IAAI;CAEpF,OAAO;AACT"}

package/dist/engine/ports.d.cts

@@ -112,12 +112,20 @@ export interface OutboundMessage {
   /**
    * `${instanceId}:${nodeId}` (plus `:${token}` for a push copy) — one per copy, stable across
    * replays and retries. The engine skips a copy the observer reports settled
-   * (`messageSettled`); past that, de-duplication is the provider's: APNs (collapse id) and Web
-   * Push (`Topic`) collapse on it, SES and the Cloudflare REST API cannot, so a crash between the
-   * provider taking a copy and its report still sends it twice there. It is also the copy's
+   * (`messageSettled`) or claimed by an earlier run (`messageClaimed`: handed to the transport,
+   * outcome unknown — see `redelivery`). The providers do not de-duplicate on it: APNs (collapse
+   * id) and Web Push (`Topic`) collapse a repeat on the device, SES and Cloudflare Email Service
+   * (binding and REST API alike) accept no idempotency key at all. It is also the copy's
    * identity for tracking: a push carries it in its payload, so the app can report the tap.
    */
   idempotencyKey: string;
+  /**
+   * What a replayed send step does with a copy an earlier run claimed but never settled (the
+   * transport may or may not have taken it): `'skip'` (the default, and absent) treats it as
+   * delivered and skips it — at-most-once; `'resend'` sends it again — at-least-once. Set from
+   * the template's `redelivery` option.
+   */
+  redelivery?: 'skip' | 'resend' | undefined;
   /** What the host's observer asked the sender to add for measuring this copy (see `MessageTracking`). */
   tracking?: MessageTracking | undefined;
 }
@@ -175,6 +183,10 @@ export interface MessageSender {
  * host's — the engine only reports. Every method is optional and must be idempotent: a step
  * that fails after its report ran is retried and reports again (keyed by the instance and node,
  * or the copy's idempotency key).
+ *
+ * Three of them decide whether a copy reaches the transport (`messageSettled`, `messageClaimed`,
+ * `messageReleased`): an observer that implements none of them leaves the engine with the step
+ * alone, and a step replayed after a lost checkpoint sends again. Implement all three or none.
  */
 export interface JourneyObserver {
   /** The instance entered, before its entry guards: `at` is the trigger's time, the entry anchor. */
@@ -196,13 +208,26 @@ export interface JourneyObserver {
    * Whether this copy (its idempotency key) was already settled — sent, or settled undelivered —
    * by an earlier run of the same step. The send and its report sit inside one durable step, so
    * an instance that crashes after both but before the step's checkpoint replays the step; a
-   * settled copy is then skipped instead of reaching the transport a second time. (A crash
-   * between the transport taking it and the report is still a second send: only a provider that
-   * de-duplicates on the key closes that.)
+   * settled copy is then skipped instead of reaching the transport a second time. The window
+   * between the transport taking the copy and the settle is `messageClaimed`'s.
    */
   messageSettled?(message: OutboundMessage): Promise<boolean>;
   /** A copy is about to go out; the tracking returned travels with it to the sender. */
   messagePrepared?(message: OutboundMessage): Promise<MessageTracking | undefined>;
+  /**
+   * The copy is being handed to the transport: record the claim, committed before the send, and
+   * answer whether this run made it (true) or an earlier run of the same step already held it
+   * (false). A claim without a settle means the earlier run died between the transport and its
+   * report, and the copy may have gone out: the engine does not send it again unless the
+   * template says `redelivery: 'resend'` (see `OutboundMessage.redelivery`). Must be atomic —
+   * two runs of the step cannot both be told true.
+   */
+  messageClaimed?(message: OutboundMessage): Promise<boolean>;
+  /**
+   * The transport threw, so the copy did not go out: release the claim, and the step's retry
+   * sends it. Called only after `messageClaimed` answered true in the same run.
+   */
+  messageReleased?(message: OutboundMessage): Promise<void>;
   /** The transport took the copy (`delivered: true`), or settled it undelivered; a thrown send is not reported. */
   messageSent?(message: OutboundMessage, result: {
     delivered: true;

package/dist/engine/ports.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"ports.d.cts","names":[],"sources":["../../src/engine/ports.ts"],"mappings":";;;;;;;;;;;;;;;iBAiBiB;;EAEf,GAAG,GAAG,cAAc,UAAU,QAAQ,KAAK,QAAQ;;;;;EAMnD,MAAM,cAAc,aAAa;;;;;;;;;;;;;;;EAgBjC,UACE,cACA,2BACA;IAAY;MACX;;EAGH,YAAY,eAAe;;;;;;;;;;;;EAa3B,YACE,cACA;IAAQ;IAAmB;MAC1B;;;iBAIY;EACf;EACA;;;iBAIe;;;;;;;;;EASf,YACE,eACA;IAAS;IAAkB;IAAkB,QAAQ;IAAa;MACjE;EACH,YAAY,eAAe,QAAQ;;EAEnC,oBAAoB,eAAe,QAAQ;;EAE3C,eAAe,QAAQ;;;;;;EAMvB,cAAc,SAAS,WAAW,iBAAiB;;iBAGpC;;EAEf;EACA;EACA;EACA,SAAS;EACT;;EAEA,OAAO,eAAe;EACtB;;;;;;EAMA;;EAEA,SAAS;;EAET;;;;;;;;;EASA;;EAEA,WAAW;;;YAID;;;;;;iBAOK;;;;;;EAMf;;;;;EAKA,QAAQ,aAAa,SAAS;;EAE9B;;;;;;EAMA;;EAEA,OAAO;;;;;;EAMP,eAAe;;;;;;;iBAQA;EACf;EACA;;iBAGe;EACf,KAAK,SAAS,kBAAkB,eAAe;;;;;;;;;iBAUhC;;EAEf,SAAS;IACP;IACA;IACA;IACA;MACE;;EAEJ,aAAa;IACX;IACA;IACA;IACA;IACA;MACE;;;;;;;;;EASJ,gBAAgB,SAAS,kBAAkB;;EAE3C,iBAAiB,SAAS,kBAAkB,QAAQ;;EAEpD,aAAa,SAAS,iBAAiB;IAAU;MAAoB,aAAa;;EAElF,UAAU;IACR;IACA;IACA;IACA,QAAQ;IACR;;IAEA;MACE;;;;;;;;;iBAUW;EACf,SAAS;IACP,SAAS;IACT;IACA,OAAO,eAAe;MACpB,eAAe;;;iBAIJ;;;;;;;;EAQf,KAAK,eAAe,SAAS,eAAe,uBAAuB,aAAa;;;iBAIjE;;EAEf;;EAEA,MAAM,eAAe;EACrB;;EAEA;;;;;;;iBAQe;EACf,OAAO,YAAY,mBAAmB;;iBAGvB;EACf;;EAEA;;;;;;;EAOA;;EAEA,uBAAuB;EACvB,MAAM;EACN,OAAO;EACP,UAAU;EACV,QAAQ;;EAER,UAAU;;EAEV,YAAY;;EAEZ,WAAW;;;;;;;YAQD;EACN;;EACA;EAAkB;;EAClB;;EACA;;EACA"}
+{"version":3,"file":"ports.d.cts","names":[],"sources":["../../src/engine/ports.ts"],"mappings":";;;;;;;;;;;;;;;iBAiBiB;;EAEf,GAAG,GAAG,cAAc,UAAU,QAAQ,KAAK,QAAQ;;;;;EAMnD,MAAM,cAAc,aAAa;;;;;;;;;;;;;;;EAgBjC,UACE,cACA,2BACA;IAAY;MACX;;EAGH,YAAY,eAAe;;;;;;;;;;;;EAa3B,YACE,cACA;IAAQ;IAAmB;MAC1B;;;iBAIY;EACf;EACA;;;iBAIe;;;;;;;;;EASf,YACE,eACA;IAAS;IAAkB;IAAkB,QAAQ;IAAa;MACjE;EACH,YAAY,eAAe,QAAQ;;EAEnC,oBAAoB,eAAe,QAAQ;;EAE3C,eAAe,QAAQ;;;;;;EAMvB,cAAc,SAAS,WAAW,iBAAiB;;iBAGpC;;EAEf;EACA;EACA;EACA,SAAS;EACT;;EAEA,OAAO,eAAe;EACtB;;;;;;EAMA;;EAEA,SAAS;;EAET;;;;;;;;;;EAUA;;;;;;;EAOA;;EAEA,WAAW;;;YAID;;;;;;iBAOK;;;;;;EAMf;;;;;EAKA,QAAQ,aAAa,SAAS;;EAE9B;;;;;;EAMA;;EAEA,OAAO;;;;;;EAMP,eAAe;;;;;;;iBAQA;EACf;EACA;;iBAGe;EACf,KAAK,SAAS,kBAAkB,eAAe;;;;;;;;;;;;;iBAchC;;EAEf,SAAS;IACP;IACA;IACA;IACA;MACE;;EAEJ,aAAa;IACX;IACA;IACA;IACA;IACA;MACE;;;;;;;;EAQJ,gBAAgB,SAAS,kBAAkB;;EAE3C,iBAAiB,SAAS,kBAAkB,QAAQ;;;;;;;;;EASpD,gBAAgB,SAAS,kBAAkB;;;;;EAK3C,iBAAiB,SAAS,kBAAkB;;EAE5C,aAAa,SAAS,iBAAiB;IAAU;MAAoB,aAAa;;EAElF,UAAU;IACR;IACA;IACA;IACA,QAAQ;IACR;;IAEA;MACE;;;;;;;;;iBAUW;EACf,SAAS;IACP,SAAS;IACT;IACA,OAAO,eAAe;MACpB,eAAe;;;iBAIJ;;;;;;;;EAQf,KAAK,eAAe,SAAS,eAAe,uBAAuB,aAAa;;;iBAIjE;;EAEf;;EAEA,MAAM,eAAe;EACrB;;EAEA;;;;;;;iBAQe;EACf,OAAO,YAAY,mBAAmB;;iBAGvB;EACf;;EAEA;;;;;;;EAOA;;EAEA,uBAAuB;EACvB,MAAM;EACN,OAAO;EACP,UAAU;EACV,QAAQ;;EAER,UAAU;;EAEV,YAAY;;EAEZ,WAAW;;;;;;;YAQD;EACN;;EACA;EAAkB;;EAClB;;EACA;;EACA"}

package/dist/engine/ports.d.mts

@@ -112,12 +112,20 @@ export interface OutboundMessage {
   /**
    * `${instanceId}:${nodeId}` (plus `:${token}` for a push copy) — one per copy, stable across
    * replays and retries. The engine skips a copy the observer reports settled
-   * (`messageSettled`); past that, de-duplication is the provider's: APNs (collapse id) and Web
-   * Push (`Topic`) collapse on it, SES and the Cloudflare REST API cannot, so a crash between the
-   * provider taking a copy and its report still sends it twice there. It is also the copy's
+   * (`messageSettled`) or claimed by an earlier run (`messageClaimed`: handed to the transport,
+   * outcome unknown — see `redelivery`). The providers do not de-duplicate on it: APNs (collapse
+   * id) and Web Push (`Topic`) collapse a repeat on the device, SES and Cloudflare Email Service
+   * (binding and REST API alike) accept no idempotency key at all. It is also the copy's
    * identity for tracking: a push carries it in its payload, so the app can report the tap.
    */
   idempotencyKey: string;
+  /**
+   * What a replayed send step does with a copy an earlier run claimed but never settled (the
+   * transport may or may not have taken it): `'skip'` (the default, and absent) treats it as
+   * delivered and skips it — at-most-once; `'resend'` sends it again — at-least-once. Set from
+   * the template's `redelivery` option.
+   */
+  redelivery?: 'skip' | 'resend' | undefined;
   /** What the host's observer asked the sender to add for measuring this copy (see `MessageTracking`). */
   tracking?: MessageTracking | undefined;
 }
@@ -175,6 +183,10 @@ export interface MessageSender {
  * host's — the engine only reports. Every method is optional and must be idempotent: a step
  * that fails after its report ran is retried and reports again (keyed by the instance and node,
  * or the copy's idempotency key).
+ *
+ * Three of them decide whether a copy reaches the transport (`messageSettled`, `messageClaimed`,
+ * `messageReleased`): an observer that implements none of them leaves the engine with the step
+ * alone, and a step replayed after a lost checkpoint sends again. Implement all three or none.
  */
 export interface JourneyObserver {
   /** The instance entered, before its entry guards: `at` is the trigger's time, the entry anchor. */
@@ -196,13 +208,26 @@ export interface JourneyObserver {
    * Whether this copy (its idempotency key) was already settled — sent, or settled undelivered —
    * by an earlier run of the same step. The send and its report sit inside one durable step, so
    * an instance that crashes after both but before the step's checkpoint replays the step; a
-   * settled copy is then skipped instead of reaching the transport a second time. (A crash
-   * between the transport taking it and the report is still a second send: only a provider that
-   * de-duplicates on the key closes that.)
+   * settled copy is then skipped instead of reaching the transport a second time. The window
+   * between the transport taking the copy and the settle is `messageClaimed`'s.
    */
   messageSettled?(message: OutboundMessage): Promise<boolean>;
   /** A copy is about to go out; the tracking returned travels with it to the sender. */
   messagePrepared?(message: OutboundMessage): Promise<MessageTracking | undefined>;
+  /**
+   * The copy is being handed to the transport: record the claim, committed before the send, and
+   * answer whether this run made it (true) or an earlier run of the same step already held it
+   * (false). A claim without a settle means the earlier run died between the transport and its
+   * report, and the copy may have gone out: the engine does not send it again unless the
+   * template says `redelivery: 'resend'` (see `OutboundMessage.redelivery`). Must be atomic —
+   * two runs of the step cannot both be told true.
+   */
+  messageClaimed?(message: OutboundMessage): Promise<boolean>;
+  /**
+   * The transport threw, so the copy did not go out: release the claim, and the step's retry
+   * sends it. Called only after `messageClaimed` answered true in the same run.
+   */
+  messageReleased?(message: OutboundMessage): Promise<void>;
   /** The transport took the copy (`delivered: true`), or settled it undelivered; a thrown send is not reported. */
   messageSent?(message: OutboundMessage, result: {
     delivered: true;

package/dist/engine/ports.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"ports.d.mts","names":[],"sources":["../../src/engine/ports.ts"],"mappings":";;;;;;;;;;;;;;;iBAiBiB;;EAEf,GAAG,GAAG,cAAc,UAAU,QAAQ,KAAK,QAAQ;;;;;EAMnD,MAAM,cAAc,aAAa;;;;;;;;;;;;;;;EAgBjC,UACE,cACA,2BACA;IAAY;MACX;;EAGH,YAAY,eAAe;;;;;;;;;;;;EAa3B,YACE,cACA;IAAQ;IAAmB;MAC1B;;;iBAIY;EACf;EACA;;;iBAIe;;;;;;;;;EASf,YACE,eACA;IAAS;IAAkB;IAAkB,QAAQ;IAAa;MACjE;EACH,YAAY,eAAe,QAAQ;;EAEnC,oBAAoB,eAAe,QAAQ;;EAE3C,eAAe,QAAQ;;;;;;EAMvB,cAAc,SAAS,WAAW,iBAAiB;;iBAGpC;;EAEf;EACA;EACA;EACA,SAAS;EACT;;EAEA,OAAO,eAAe;EACtB;;;;;;EAMA;;EAEA,SAAS;;EAET;;;;;;;;;EASA;;EAEA,WAAW;;;YAID;;;;;;iBAOK;;;;;;EAMf;;;;;EAKA,QAAQ,aAAa,SAAS;;EAE9B;;;;;;EAMA;;EAEA,OAAO;;;;;;EAMP,eAAe;;;;;;;iBAQA;EACf;EACA;;iBAGe;EACf,KAAK,SAAS,kBAAkB,eAAe;;;;;;;;;iBAUhC;;EAEf,SAAS;IACP;IACA;IACA;IACA;MACE;;EAEJ,aAAa;IACX;IACA;IACA;IACA;IACA;MACE;;;;;;;;;EASJ,gBAAgB,SAAS,kBAAkB;;EAE3C,iBAAiB,SAAS,kBAAkB,QAAQ;;EAEpD,aAAa,SAAS,iBAAiB;IAAU;MAAoB,aAAa;;EAElF,UAAU;IACR;IACA;IACA;IACA,QAAQ;IACR;;IAEA;MACE;;;;;;;;;iBAUW;EACf,SAAS;IACP,SAAS;IACT;IACA,OAAO,eAAe;MACpB,eAAe;;;iBAIJ;;;;;;;;EAQf,KAAK,eAAe,SAAS,eAAe,uBAAuB,aAAa;;;iBAIjE;;EAEf;;EAEA,MAAM,eAAe;EACrB;;EAEA;;;;;;;iBAQe;EACf,OAAO,YAAY,mBAAmB;;iBAGvB;EACf;;EAEA;;;;;;;EAOA;;EAEA,uBAAuB;EACvB,MAAM;EACN,OAAO;EACP,UAAU;EACV,QAAQ;;EAER,UAAU;;EAEV,YAAY;;EAEZ,WAAW;;;;;;;YAQD;EACN;;EACA;EAAkB;;EAClB;;EACA;;EACA"}
+{"version":3,"file":"ports.d.mts","names":[],"sources":["../../src/engine/ports.ts"],"mappings":";;;;;;;;;;;;;;;iBAiBiB;;EAEf,GAAG,GAAG,cAAc,UAAU,QAAQ,KAAK,QAAQ;;;;;EAMnD,MAAM,cAAc,aAAa;;;;;;;;;;;;;;;EAgBjC,UACE,cACA,2BACA;IAAY;MACX;;EAGH,YAAY,eAAe;;;;;;;;;;;;EAa3B,YACE,cACA;IAAQ;IAAmB;MAC1B;;;iBAIY;EACf;EACA;;;iBAIe;;;;;;;;;EASf,YACE,eACA;IAAS;IAAkB;IAAkB,QAAQ;IAAa;MACjE;EACH,YAAY,eAAe,QAAQ;;EAEnC,oBAAoB,eAAe,QAAQ;;EAE3C,eAAe,QAAQ;;;;;;EAMvB,cAAc,SAAS,WAAW,iBAAiB;;iBAGpC;;EAEf;EACA;EACA;EACA,SAAS;EACT;;EAEA,OAAO,eAAe;EACtB;;;;;;EAMA;;EAEA,SAAS;;EAET;;;;;;;;;;EAUA;;;;;;;EAOA;;EAEA,WAAW;;;YAID;;;;;;iBAOK;;;;;;EAMf;;;;;EAKA,QAAQ,aAAa,SAAS;;EAE9B;;;;;;EAMA;;EAEA,OAAO;;;;;;EAMP,eAAe;;;;;;;iBAQA;EACf;EACA;;iBAGe;EACf,KAAK,SAAS,kBAAkB,eAAe;;;;;;;;;;;;;iBAchC;;EAEf,SAAS;IACP;IACA;IACA;IACA;MACE;;EAEJ,aAAa;IACX;IACA;IACA;IACA;IACA;MACE;;;;;;;;EAQJ,gBAAgB,SAAS,kBAAkB;;EAE3C,iBAAiB,SAAS,kBAAkB,QAAQ;;;;;;;;;EASpD,gBAAgB,SAAS,kBAAkB;;;;;EAK3C,iBAAiB,SAAS,kBAAkB;;EAE5C,aAAa,SAAS,iBAAiB;IAAU;MAAoB,aAAa;;EAElF,UAAU;IACR;IACA;IACA;IACA,QAAQ;IACR;;IAEA;MACE;;;;;;;;;iBAUW;EACf,SAAS;IACP,SAAS;IACT;IACA,OAAO,eAAe;MACpB,eAAe;;;iBAIJ;;;;;;;;EAQf,KAAK,eAAe,SAAS,eAAe,uBAAuB,aAAa;;;iBAIjE;;EAEf;;EAEA,MAAM,eAAe;EACrB;;EAEA;;;;;;;iBAQe;EACf,OAAO,YAAY,mBAAmB;;iBAGvB;EACf;;EAEA;;;;;;;EAOA;;EAEA,uBAAuB;EACvB,MAAM;EACN,OAAO;EACP,UAAU;EACV,QAAQ;;EAER,UAAU;;EAEV,YAAY;;EAEZ,WAAW;;;;;;;YAQD;EACN;;EACA;EAAkB;;EAClB;;EACA;;EACA"}

package/dist/ir.cjs

@@ -198,7 +198,8 @@ const NodeIR = zod_mini.lazy(() => zod_mini.discriminatedUnion("type", [
 		template: zod_mini.string(),
 		props: zod_mini.record(zod_mini.string(), PropValueIR),
 		devices: zod_mini.optional(zod_mini.literal("latest")),
-		topic: zod_mini.optional(zod_mini.nullable(zod_mini.string()))
+		topic: zod_mini.optional(zod_mini.nullable(zod_mini.string())),
+		redelivery: zod_mini.optional(zod_mini.literal("resend"))
 	}),
 	zod_mini.object({
 		...nodeBase,

package/dist/ir.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ir.cjs","names":["z"],"sources":["../src/ir.ts"],"sourcesContent":["import * as z from 'zod/mini';\n\n/**\n * IR (Intermediate Representation) — what the DSL compiles to: serializable\n * JSON. It is the three-way contract between the engine that interprets it,\n * the UI (react-flow) that renders it, and diff / audit tooling.\n *\n * Validation strategy: the zod/mini schemas are the authoritative definition.\n * TS types are either inferred from a schema or hand-written under the same\n * name (zod cannot infer recursive types; the hand-written type is anchored\n * with a ZodMiniType<T> annotation, so any drift fails to compile). IR crosses\n * process boundaries (database, network, UI), so runtime validation is a must.\n *\n * ## Versioning (two independent axes)\n *\n * 1. IR format version (irVersion): evolution of the IR schema itself. Adding\n *    optional fields does not bump it; only structurally incompatible changes\n *    do (changing a discriminant, dropping a field, altering semantics).\n *    Readers dispatch on irVersion to the matching schema/migrator; writers\n *    always write the current version.\n * 2. Content version (contentHash): a content-addressed id for a single\n *    definition's **execution semantics** — the canonical-JSON hash after\n *    metadata (meta / label / reason) is stripped, see hash.ts. It is used to:\n *    - pin a version when a user enters, so an in-flight journey runs the\n *      pinned version to completion (the default policy; compatible hot\n *      updates are a future explicit-migration topic). Known exception:\n *      segment conditions are resolved **by id at evaluation time** — a\n *      segment redeploy changes behaviour of in-flight journeys that\n *      reference it. Pinning covers the workflow's own structure; per-hash\n *      segment snapshots are future work;\n *    - diff on deploy: same hash means unchanged, skip publishing;\n *    - audit: answer \"which version was this user on\" at any point.\n *\n * ## Node ids\n *\n * Derived from the structural path at compile time — stable and deterministic:\n * root level '0', '1', …; the j-th child of a branch's i-th case is\n * '{branchId}.c{i}.{j}', the default arm '{branchId}.o.{j}'; cohort arms use\n * the arm name '{cohortId}.{armName}.{j}'; a waitUntil timeout flow '{id}.t.{j}'.\n * Editing a node's parameters keeps its id; inserting a node shifts the ids of\n * its later siblings (a known trade-off — locating in-flight users relies on\n * the pinned version rather than cross-version id alignment, and cross-version\n * mapping is an explicit migrator's job).\n */\n\nexport const IR_VERSION = 2;\n\n/* -------------------------------- Base values ------------------------------- */\n\nexport const ScalarIR = z.union([z.string(), z.number(), z.boolean()]);\nexport type ScalarIR = z.infer<typeof ScalarIR>;\n\n/** Duration: `value` keeps the DSL literal ('23 hours', for display), `ms` is what the engine uses. */\n/*\n * TODO: `value` is hashed alongside `ms`, so '7 days' / '1 week' / '168 hours'\n * — identical to the engine, which only reads ms — produce three different\n * contentHashes. Rewording a duration therefore reports as a semantic change in\n * plan and repins in-flight users. Moving `value` out of the hash (it is a\n * display string) would fix it; deferred because it changes existing hashes.\n */\nexport const DurationIR = z.object({ value: z.string(), ms: z.number() });\nexport type DurationIR = z.infer<typeof DurationIR>;\n\n/** User-property reference — isomorphic to the DSL's UserPropertyRef once serialized (phantom type dropped). */\nexport const UserPropertyRefIR = z.object({\n  type: z.literal('user_property'),\n  path: z.string(),\n});\nexport type UserPropertyRefIR = z.infer<typeof UserPropertyRefIR>;\n\n/** A message prop / event payload value: either a literal or a user-property reference. */\nexport const PropValueIR = z.union([ScalarIR, UserPropertyRefIR]);\nexport type PropValueIR = z.infer<typeof PropValueIR>;\n\nexport const ChannelIR = z.enum(['email', 'sms', 'push', 'in_app', 'slack', 'discord', 'survey']);\nexport type ChannelIR = z.infer<typeof ChannelIR>;\n\nexport const WeekdayIR = z.enum(['mon', 'tue', 'wed', 'thu', 'fri', 'sat', 'sun']);\nexport type WeekdayIR = z.infer<typeof WeekdayIR>;\n\n/* --------------------------------- Provenance -------------------------------- */\n\n/**\n * Source location of the builder call that produced a definition — the IR's\n * source map. Lives under `meta`, so it is **excluded from contentHash**\n * (see hash.ts): provenance never affects execution identity or plan.\n * `file` is cwd-relative when compiled under Node, a URL under Vite dev.\n */\nexport const SourceLocIR = z.object({\n  file: z.string(),\n  line: z.number(),\n  column: z.number(),\n});\nexport type SourceLocIR = z.infer<typeof SourceLocIR>;\n\n/** Node-level metadata: provenance only, for now. Excluded from contentHash. */\nexport const NodeMetaIR = z.object({\n  loc: z.optional(SourceLocIR),\n});\nexport type NodeMetaIR = z.infer<typeof NodeMetaIR>;\n\n/* -------------------------------- Conditions -------------------------------- */\n\nexport const PropertyOperatorIR = z.enum([\n  'eq',\n  'ne',\n  'gt',\n  'gte',\n  'lt',\n  'lte',\n  'between',\n  'not_between',\n  'in_array',\n  'not_in_array',\n  'exists',\n  'not_exists',\n  'contains',\n  'not_contains',\n]);\nexport type PropertyOperatorIR = z.infer<typeof PropertyOperatorIR>;\n\n/**\n * Condition expression tree. The shape of value/values follows `op`:\n * eq/ne/gt/gte/lt/lte/contains/not_contains → value; in_array/not_in_array →\n * values; between/not_between → values = [min, max]; exists/not_exists → neither.\n *\n * `payload` predicates test the payload of an event (dotted paths reach nested\n * fields). They are only valid inside a `where` subtree — `performed.where`\n * and the event trigger's `where` — where an event row is in scope; the\n * compiler (compileBundle) and the evaluator both enforce the placement.\n * TODO: runtime refinement narrowing by op.\n */\n/**\n * Provenance rides on conditions too, so the studio can point at the exact\n * `eq(...)` / `and(...)` that produced a node — same rule as nodes: `meta` is\n * dropped before hashing, so carrying it never affects execution identity.\n */\ninterface ConditionBaseIR {\n  meta?: NodeMetaIR | undefined;\n}\n\nexport type ConditionIR =\n  | (ConditionBaseIR & { type: 'and'; conditions: ConditionIR[] })\n  | (ConditionBaseIR & { type: 'or'; conditions: ConditionIR[] })\n  | (ConditionBaseIR & { type: 'not'; condition: ConditionIR })\n  /** Reference a segment by id (defined in SegmentIR, versioned separately). */\n  | (ConditionBaseIR & { type: 'segment'; segment: string })\n  | (ConditionBaseIR & {\n      type: 'property';\n      path: string;\n      op: PropertyOperatorIR;\n      value?: ScalarIR | undefined;\n      values?: ScalarIR[] | undefined;\n    })\n  | (ConditionBaseIR & {\n      /** Event payload predicate; `path` is dotted for nested fields ('tags.utm_source'). */\n      type: 'payload';\n      path: string;\n      op: PropertyOperatorIR;\n      value?: ScalarIR | undefined;\n      values?: ScalarIR[] | undefined;\n    })\n  | (ConditionBaseIR & {\n      type: 'performed';\n      event: string;\n      /** Payload filter: only events matching it count (a payload-only subtree). */\n      where?: ConditionIR | undefined;\n      within?: DurationIR | undefined;\n      count?: number | undefined;\n    })\n  /**\n   * The user can be reached on the channel right now: for push, the host's\n   * device directory lists at least one device; for the others, the channel's\n   * recipient property (email, phone, …) is set.\n   */\n  | (ConditionBaseIR & { type: 'reachable'; channel: ChannelIR });\n\nconst conditionBase = { meta: z.optional(NodeMetaIR) };\n\nexport const ConditionIR: z.ZodMiniType<ConditionIR> = z.lazy(() =>\n  z.discriminatedUnion('type', [\n    z.object({ ...conditionBase, type: z.literal('and'), conditions: z.array(ConditionIR) }),\n    z.object({ ...conditionBase, type: z.literal('or'), conditions: z.array(ConditionIR) }),\n    z.object({ ...conditionBase, type: z.literal('not'), condition: ConditionIR }),\n    z.object({ ...conditionBase, type: z.literal('segment'), segment: z.string() }),\n    z.object({\n      ...conditionBase,\n      type: z.literal('property'),\n      path: z.string(),\n      op: PropertyOperatorIR,\n      value: z.optional(ScalarIR),\n      values: z.optional(z.array(ScalarIR)),\n    }),\n    z.object({\n      ...conditionBase,\n      type: z.literal('payload'),\n      path: z.string(),\n      op: PropertyOperatorIR,\n      value: z.optional(ScalarIR),\n      values: z.optional(z.array(ScalarIR)),\n    }),\n    z.object({\n      ...conditionBase,\n      type: z.literal('performed'),\n      event: z.string(),\n      where: z.optional(ConditionIR),\n      within: z.optional(DurationIR),\n      count: z.optional(z.number()),\n    }),\n    z.object({ ...conditionBase, type: z.literal('reachable'), channel: ChannelIR }),\n  ])\n);\n\n/* --------------------------------- Triggers --------------------------------- */\n\n/**\n * Trigger shapes. The event trigger has two independent gates: `where` tests\n * the triggering event's payload (payload-only subtree, evaluated against the\n * incoming event before anything else), `filter` tests the user's profile.\n */\nexport const TriggerIR = z.discriminatedUnion('type', [\n  z.object({\n    type: z.literal('event'),\n    event: z.string(),\n    where: z.optional(ConditionIR),\n    filter: z.optional(ConditionIR),\n    visitors: z.optional(z.literal(true)),\n  }),\n  z.object({ type: z.literal('segment'), segment: z.string() }),\n  z.object({ type: z.literal('date'), at: z.string() }),\n  z.object({ type: z.literal('webhook') }),\n]);\nexport type TriggerIR = z.infer<typeof TriggerIR>;\n\n/* ----------------------------------- Nodes ---------------------------------- */\n\ninterface NodeBaseIR {\n  /** Stable id derived from the structural path (rules in the file header). */\n  id: string;\n  /** Optional node name: UI title / observability handle (branch's optional first argument lands here). */\n  label?: string | undefined;\n  /** Metadata (provenance); excluded from contentHash. */\n  meta?: NodeMetaIR | undefined;\n}\n\nexport type NodeIR =\n  | (NodeBaseIR & {\n      type: 'message';\n      channel: ChannelIR;\n      template: string;\n      props: Record<string, PropValueIR>;\n      /**\n       * Push only: which of the user's devices get a copy. Absent means every\n       * device the directory lists; 'latest' only the most recently registered.\n       */\n      devices?: 'latest' | undefined;\n      /**\n       * Email and push: the template's subscription topic, or null for a transactional message\n       * (sent whatever the user opted out of). Absent for other channels, and in IR compiled\n       * before topics existed: such a step checks the channel-level opt-out only, as it always did.\n       */\n      topic?: string | null | undefined;\n    })\n  | (NodeBaseIR & { type: 'delay'; duration: DurationIR })\n  | (NodeBaseIR & { type: 'random_delay'; min: DurationIR; max: DurationIR })\n  | (NodeBaseIR & {\n      type: 'time_window';\n      days: WeekdayIR[];\n      between: [string, string];\n      tz: string;\n    })\n  | (NodeBaseIR & {\n      type: 'wait_until';\n      condition: ConditionIR;\n      timeout: DurationIR;\n      onTimeout: 'continue' | 'exit' | NodeIR[];\n    })\n  | (NodeBaseIR & {\n      type: 'branch';\n      cases: { label?: string | undefined; condition: ConditionIR; flow: NodeIR[] }[];\n      /** Default arm (the DSL's bare tail argument). Absent = fall through to the main line. */\n      otherwise?: NodeIR[] | undefined;\n    })\n  | (NodeBaseIR & {\n      type: 'filter';\n      /** Audit-log line for the users this gate drops. Metadata: excluded from contentHash. */\n      reason?: string | undefined;\n      condition: ConditionIR;\n    })\n  | (NodeBaseIR & {\n      type: 'cohort';\n      /**\n       * Explicit experiment key: bucketing hashes `userId:key` instead of the\n       * structural node id, so the assignment survives node insertion/moves and\n       * the experiment keeps one identity across workflow versions. Absent →\n       * the node id is used (fine for one-off splits).\n       */\n      key?: string | undefined;\n      /**\n       * Arms in authoring order — the order the interpreter accumulates weights\n       * in, so it decides which bucket range each arm owns. The DSL keeps that\n       * promise by rejecting integer-like arm names, which JavaScript would\n       * hoist to the front of the object in numeric order. Weights sum to 100.\n       */\n      arms: { name: string; weight: number; flow: NodeIR[] }[];\n    })\n  | (NodeBaseIR & {\n      /** `reason` is the audit-log line. Metadata: excluded from contentHash. */\n      type: 'exit';\n      reason?: string | undefined;\n    })\n  | (NodeBaseIR & { type: 'send_event'; event: string; payload: Record<string, PropValueIR> })\n  | (NodeBaseIR & {\n      type: 'action';\n      /** Registry name of the custom action; the code itself lives in the deployed Worker bundle. */\n      action: string;\n      /** Argument values; user_property references are resolved at run time, like message props. */\n      args: Record<string, PropValueIR>;\n    });\n\nconst nodeBase = { id: z.string(), label: z.optional(z.string()), meta: z.optional(NodeMetaIR) };\n\nexport const NodeIR: z.ZodMiniType<NodeIR> = z.lazy(() =>\n  z.discriminatedUnion('type', [\n    z.object({\n      ...nodeBase,\n      type: z.literal('message'),\n      channel: ChannelIR,\n      template: z.string(),\n      props: z.record(z.string(), PropValueIR),\n      devices: z.optional(z.literal('latest')),\n      topic: z.optional(z.nullable(z.string())),\n    }),\n    z.object({ ...nodeBase, type: z.literal('delay'), duration: DurationIR }),\n    z.object({ ...nodeBase, type: z.literal('random_delay'), min: DurationIR, max: DurationIR }),\n    z.object({\n      ...nodeBase,\n      type: z.literal('time_window'),\n      days: z.array(WeekdayIR),\n      between: z.tuple([z.string(), z.string()]),\n      tz: z.string(),\n    }),\n    z.object({\n      ...nodeBase,\n      type: z.literal('wait_until'),\n      condition: ConditionIR,\n      timeout: DurationIR,\n      onTimeout: z.union([z.literal('continue'), z.literal('exit'), z.array(NodeIR)]),\n    }),\n    z.object({\n      ...nodeBase,\n      type: z.literal('branch'),\n      cases: z.array(\n        z.object({\n          label: z.optional(z.string()),\n          condition: ConditionIR,\n          flow: z.array(NodeIR),\n        })\n      ),\n      otherwise: z.optional(z.array(NodeIR)),\n    }),\n    z.object({\n      ...nodeBase,\n      type: z.literal('filter'),\n      condition: ConditionIR,\n      reason: z.optional(z.string()),\n    }),\n    z.object({\n      ...nodeBase,\n      type: z.literal('cohort'),\n      key: z.optional(z.string()),\n      arms: z.array(z.object({ name: z.string(), weight: z.number(), flow: z.array(NodeIR) })),\n    }),\n    z.object({ ...nodeBase, type: z.literal('exit'), reason: z.optional(z.string()) }),\n    z.object({\n      ...nodeBase,\n      type: z.literal('send_event'),\n      event: z.string(),\n      payload: z.record(z.string(), PropValueIR),\n    }),\n    z.object({\n      ...nodeBase,\n      type: z.literal('action'),\n      action: z.string(),\n      args: z.record(z.string(), PropValueIR),\n    }),\n  ])\n);\n\n/* ---------------------- Top-level definitions and bundle --------------------- */\n\nexport const GoalIR = z.object({\n  condition: ConditionIR,\n  within: z.optional(DurationIR),\n  exitOnMatch: z.boolean(),\n});\nexport type GoalIR = z.infer<typeof GoalIR>;\n\n/**\n * Human-facing metadata: **excluded from contentHash** (see hash.ts).\n * Editing a name or description does not touch execution semantics, so it never\n * invalidates the version in-flight users are pinned to, nor shows up in plan.\n */\nexport const MetaIR = z.object({\n  /**\n   * Human label. The asset's `id` is its identity — a wire key that routing\n   * tables and the entry ledger are built on — so it is not something to\n   * rename for readability. This is: it is metadata, dropped before hashing,\n   * and the studio shows it in place of the key wherever it is set.\n   */\n  name: z.optional(z.string()),\n  description: z.optional(z.string()),\n  loc: z.optional(SourceLocIR),\n});\nexport type MetaIR = z.infer<typeof MetaIR>;\n\nexport const WorkflowIR = z.object({\n  irVersion: z.literal(IR_VERSION),\n  /** Wire identity (`workflow({ id })`): routing tables, the entry ledger and reporting are keyed on it. */\n  id: z.string(),\n  contentHash: z.string(),\n  meta: z.optional(MetaIR),\n  trigger: TriggerIR,\n  goal: z.optional(GoalIR),\n  exitWhen: z.optional(ConditionIR),\n  flow: z.array(NodeIR),\n});\nexport type WorkflowIR = z.infer<typeof WorkflowIR>;\n\nexport const SegmentIR = z.object({\n  irVersion: z.literal(IR_VERSION),\n  /** Wire identity (`segment({ id })`): segment references and the membership store are keyed on it. */\n  id: z.string(),\n  contentHash: z.string(),\n  /** Provenance plus the human label — MetaIR, same as a workflow's. */\n  meta: z.optional(MetaIR),\n  condition: ConditionIR,\n});\nexport type SegmentIR = z.infer<typeof SegmentIR>;\n\n/** Template manifest entry: IR records only the reference; the body lives in the template system. */\nexport const TemplateIR = z.object({\n  irVersion: z.literal(IR_VERSION),\n  key: z.string(),\n  channel: ChannelIR,\n});\nexport type TemplateIR = z.infer<typeof TemplateIR>;\n\n/**\n * Action manifest entry: IR records the name; the implementation solidifies\n * into the Worker bundle at deploy time, never into IR (custom code stays out\n * of the data plane by design).\n */\nexport const ActionIR = z.object({\n  irVersion: z.literal(IR_VERSION),\n  name: z.string(),\n});\nexport type ActionIR = z.infer<typeof ActionIR>;\n\n/**\n * Deployment unit: the complete snapshot one `deploy` produces (terraform\n * apply, same mental model). The server diffs each definition's contentHash to\n * decide publish / skip / retire.\n */\n/**\n * The subscription topics the contract declares, carried by the bundle so the engine validates\n * `/subscriptions` and the templates' topics against the deployed list, not the SDK's word.\n */\nexport const SubscriptionsIR = z.object({\n  topics: z.array(z.string()),\n});\nexport type SubscriptionsIR = z.infer<typeof SubscriptionsIR>;\n\nexport const BundleIR = z.object({\n  irVersion: z.literal(IR_VERSION),\n  workflows: z.array(WorkflowIR),\n  segments: z.array(SegmentIR),\n  templates: z.array(TemplateIR),\n  actions: z.array(ActionIR),\n  /** Absent in a bundle compiled before topics existed: no topics. */\n  subscriptions: z.optional(SubscriptionsIR),\n});\nexport type BundleIR = z.infer<typeof BundleIR>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6CA,MAAa,aAAa;AAI1B,MAAa,WAAWA,SAAE,MAAM;CAACA,SAAE,OAAO;CAAGA,SAAE,OAAO;CAAGA,SAAE,QAAQ;AAAC,CAAC;;AAWrE,MAAa,aAAaA,SAAE,OAAO;CAAE,OAAOA,SAAE,OAAO;CAAG,IAAIA,SAAE,OAAO;AAAE,CAAC;;AAIxE,MAAa,oBAAoBA,SAAE,OAAO;CACxC,MAAMA,SAAE,QAAQ,eAAe;CAC/B,MAAMA,SAAE,OAAO;AACjB,CAAC;;AAID,MAAa,cAAcA,SAAE,MAAM,CAAC,UAAU,iBAAiB,CAAC;AAGhE,MAAa,YAAYA,SAAE,KAAK;CAAC;CAAS;CAAO;CAAQ;CAAU;CAAS;CAAW;AAAQ,CAAC;AAGhG,MAAa,YAAYA,SAAE,KAAK;CAAC;CAAO;CAAO;CAAO;CAAO;CAAO;CAAO;AAAK,CAAC;;;;;;;AAWjF,MAAa,cAAcA,SAAE,OAAO;CAClC,MAAMA,SAAE,OAAO;CACf,MAAMA,SAAE,OAAO;CACf,QAAQA,SAAE,OAAO;AACnB,CAAC;;AAID,MAAa,aAAaA,SAAE,OAAO,EACjC,KAAKA,SAAE,SAAS,WAAW,EAC7B,CAAC;AAKD,MAAa,qBAAqBA,SAAE,KAAK;CACvC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AA2DD,MAAM,gBAAgB,EAAE,MAAMA,SAAE,SAAS,UAAU,EAAE;AAErD,MAAa,cAA0CA,SAAE,WACvDA,SAAE,mBAAmB,QAAQ;CAC3BA,SAAE,OAAO;EAAE,GAAG;EAAe,MAAMA,SAAE,QAAQ,KAAK;EAAG,YAAYA,SAAE,MAAM,WAAW;CAAE,CAAC;CACvFA,SAAE,OAAO;EAAE,GAAG;EAAe,MAAMA,SAAE,QAAQ,IAAI;EAAG,YAAYA,SAAE,MAAM,WAAW;CAAE,CAAC;CACtFA,SAAE,OAAO;EAAE,GAAG;EAAe,MAAMA,SAAE,QAAQ,KAAK;EAAG,WAAW;CAAY,CAAC;CAC7EA,SAAE,OAAO;EAAE,GAAG;EAAe,MAAMA,SAAE,QAAQ,SAAS;EAAG,SAASA,SAAE,OAAO;CAAE,CAAC;CAC9EA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,UAAU;EAC1B,MAAMA,SAAE,OAAO;EACf,IAAI;EACJ,OAAOA,SAAE,SAAS,QAAQ;EAC1B,QAAQA,SAAE,SAASA,SAAE,MAAM,QAAQ,CAAC;CACtC,CAAC;CACDA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,SAAS;EACzB,MAAMA,SAAE,OAAO;EACf,IAAI;EACJ,OAAOA,SAAE,SAAS,QAAQ;EAC1B,QAAQA,SAAE,SAASA,SAAE,MAAM,QAAQ,CAAC;CACtC,CAAC;CACDA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,WAAW;EAC3B,OAAOA,SAAE,OAAO;EAChB,OAAOA,SAAE,SAAS,WAAW;EAC7B,QAAQA,SAAE,SAAS,UAAU;EAC7B,OAAOA,SAAE,SAASA,SAAE,OAAO,CAAC;CAC9B,CAAC;CACDA,SAAE,OAAO;EAAE,GAAG;EAAe,MAAMA,SAAE,QAAQ,WAAW;EAAG,SAAS;CAAU,CAAC;AACjF,CAAC,CACH;;;;;;AASA,MAAa,YAAYA,SAAE,mBAAmB,QAAQ;CACpDA,SAAE,OAAO;EACP,MAAMA,SAAE,QAAQ,OAAO;EACvB,OAAOA,SAAE,OAAO;EAChB,OAAOA,SAAE,SAAS,WAAW;EAC7B,QAAQA,SAAE,SAAS,WAAW;EAC9B,UAAUA,SAAE,SAASA,SAAE,QAAQ,IAAI,CAAC;CACtC,CAAC;CACDA,SAAE,OAAO;EAAE,MAAMA,SAAE,QAAQ,SAAS;EAAG,SAASA,SAAE,OAAO;CAAE,CAAC;CAC5DA,SAAE,OAAO;EAAE,MAAMA,SAAE,QAAQ,MAAM;EAAG,IAAIA,SAAE,OAAO;CAAE,CAAC;CACpDA,SAAE,OAAO,EAAE,MAAMA,SAAE,QAAQ,SAAS,EAAE,CAAC;AACzC,CAAC;AAyFD,MAAM,WAAW;CAAE,IAAIA,SAAE,OAAO;CAAG,OAAOA,SAAE,SAASA,SAAE,OAAO,CAAC;CAAG,MAAMA,SAAE,SAAS,UAAU;AAAE;AAE/F,MAAa,SAAgCA,SAAE,WAC7CA,SAAE,mBAAmB,QAAQ;CAC3BA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,SAAS;EACzB,SAAS;EACT,UAAUA,SAAE,OAAO;EACnB,OAAOA,SAAE,OAAOA,SAAE,OAAO,GAAG,WAAW;EACvC,SAASA,SAAE,SAASA,SAAE,QAAQ,QAAQ,CAAC;EACvC,OAAOA,SAAE,SAASA,SAAE,SAASA,SAAE,OAAO,CAAC,CAAC;CAC1C,CAAC;CACDA,SAAE,OAAO;EAAE,GAAG;EAAU,MAAMA,SAAE,QAAQ,OAAO;EAAG,UAAU;CAAW,CAAC;CACxEA,SAAE,OAAO;EAAE,GAAG;EAAU,MAAMA,SAAE,QAAQ,cAAc;EAAG,KAAK;EAAY,KAAK;CAAW,CAAC;CAC3FA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,aAAa;EAC7B,MAAMA,SAAE,MAAM,SAAS;EACvB,SAASA,SAAE,MAAM,CAACA,SAAE,OAAO,GAAGA,SAAE,OAAO,CAAC,CAAC;EACzC,IAAIA,SAAE,OAAO;CACf,CAAC;CACDA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,YAAY;EAC5B,WAAW;EACX,SAAS;EACT,WAAWA,SAAE,MAAM;GAACA,SAAE,QAAQ,UAAU;GAAGA,SAAE,QAAQ,MAAM;GAAGA,SAAE,MAAM,MAAM;EAAC,CAAC;CAChF,CAAC;CACDA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,QAAQ;EACxB,OAAOA,SAAE,MACPA,SAAE,OAAO;GACP,OAAOA,SAAE,SAASA,SAAE,OAAO,CAAC;GAC5B,WAAW;GACX,MAAMA,SAAE,MAAM,MAAM;EACtB,CAAC,CACH;EACA,WAAWA,SAAE,SAASA,SAAE,MAAM,MAAM,CAAC;CACvC,CAAC;CACDA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,QAAQ;EACxB,WAAW;EACX,QAAQA,SAAE,SAASA,SAAE,OAAO,CAAC;CAC/B,CAAC;CACDA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,QAAQ;EACxB,KAAKA,SAAE,SAASA,SAAE,OAAO,CAAC;EAC1B,MAAMA,SAAE,MAAMA,SAAE,OAAO;GAAE,MAAMA,SAAE,OAAO;GAAG,QAAQA,SAAE,OAAO;GAAG,MAAMA,SAAE,MAAM,MAAM;EAAE,CAAC,CAAC;CACzF,CAAC;CACDA,SAAE,OAAO;EAAE,GAAG;EAAU,MAAMA,SAAE,QAAQ,MAAM;EAAG,QAAQA,SAAE,SAASA,SAAE,OAAO,CAAC;CAAE,CAAC;CACjFA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,YAAY;EAC5B,OAAOA,SAAE,OAAO;EAChB,SAASA,SAAE,OAAOA,SAAE,OAAO,GAAG,WAAW;CAC3C,CAAC;CACDA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,QAAQ;EACxB,QAAQA,SAAE,OAAO;EACjB,MAAMA,SAAE,OAAOA,SAAE,OAAO,GAAG,WAAW;CACxC,CAAC;AACH,CAAC,CACH;AAIA,MAAa,SAASA,SAAE,OAAO;CAC7B,WAAW;CACX,QAAQA,SAAE,SAAS,UAAU;CAC7B,aAAaA,SAAE,QAAQ;AACzB,CAAC;;;;;;AAQD,MAAa,SAASA,SAAE,OAAO;;;;;;;CAO7B,MAAMA,SAAE,SAASA,SAAE,OAAO,CAAC;CAC3B,aAAaA,SAAE,SAASA,SAAE,OAAO,CAAC;CAClC,KAAKA,SAAE,SAAS,WAAW;AAC7B,CAAC;AAGD,MAAa,aAAaA,SAAE,OAAO;CACjC,WAAWA,SAAE,QAAA,CAAkB;;CAE/B,IAAIA,SAAE,OAAO;CACb,aAAaA,SAAE,OAAO;CACtB,MAAMA,SAAE,SAAS,MAAM;CACvB,SAAS;CACT,MAAMA,SAAE,SAAS,MAAM;CACvB,UAAUA,SAAE,SAAS,WAAW;CAChC,MAAMA,SAAE,MAAM,MAAM;AACtB,CAAC;AAGD,MAAa,YAAYA,SAAE,OAAO;CAChC,WAAWA,SAAE,QAAA,CAAkB;;CAE/B,IAAIA,SAAE,OAAO;CACb,aAAaA,SAAE,OAAO;;CAEtB,MAAMA,SAAE,SAAS,MAAM;CACvB,WAAW;AACb,CAAC;;AAID,MAAa,aAAaA,SAAE,OAAO;CACjC,WAAWA,SAAE,QAAA,CAAkB;CAC/B,KAAKA,SAAE,OAAO;CACd,SAAS;AACX,CAAC;;;;;;AAQD,MAAa,WAAWA,SAAE,OAAO;CAC/B,WAAWA,SAAE,QAAA,CAAkB;CAC/B,MAAMA,SAAE,OAAO;AACjB,CAAC;;;;;;;;;;AAYD,MAAa,kBAAkBA,SAAE,OAAO,EACtC,QAAQA,SAAE,MAAMA,SAAE,OAAO,CAAC,EAC5B,CAAC;AAGD,MAAa,WAAWA,SAAE,OAAO;CAC/B,WAAWA,SAAE,QAAA,CAAkB;CAC/B,WAAWA,SAAE,MAAM,UAAU;CAC7B,UAAUA,SAAE,MAAM,SAAS;CAC3B,WAAWA,SAAE,MAAM,UAAU;CAC7B,SAASA,SAAE,MAAM,QAAQ;;CAEzB,eAAeA,SAAE,SAAS,eAAe;AAC3C,CAAC"}
+{"version":3,"file":"ir.cjs","names":["z"],"sources":["../src/ir.ts"],"sourcesContent":["import * as z from 'zod/mini';\n\n/**\n * IR (Intermediate Representation) — what the DSL compiles to: serializable\n * JSON. It is the three-way contract between the engine that interprets it,\n * the UI (react-flow) that renders it, and diff / audit tooling.\n *\n * Validation strategy: the zod/mini schemas are the authoritative definition.\n * TS types are either inferred from a schema or hand-written under the same\n * name (zod cannot infer recursive types; the hand-written type is anchored\n * with a ZodMiniType<T> annotation, so any drift fails to compile). IR crosses\n * process boundaries (database, network, UI), so runtime validation is a must.\n *\n * ## Versioning (two independent axes)\n *\n * 1. IR format version (irVersion): evolution of the IR schema itself. Adding\n *    optional fields does not bump it; only structurally incompatible changes\n *    do (changing a discriminant, dropping a field, altering semantics).\n *    Readers dispatch on irVersion to the matching schema/migrator; writers\n *    always write the current version.\n * 2. Content version (contentHash): a content-addressed id for a single\n *    definition's **execution semantics** — the canonical-JSON hash after\n *    metadata (meta / label / reason) is stripped, see hash.ts. It is used to:\n *    - pin a version when a user enters, so an in-flight journey runs the\n *      pinned version to completion (the default policy; compatible hot\n *      updates are a future explicit-migration topic). Known exception:\n *      segment conditions are resolved **by id at evaluation time** — a\n *      segment redeploy changes behaviour of in-flight journeys that\n *      reference it. Pinning covers the workflow's own structure; per-hash\n *      segment snapshots are future work;\n *    - diff on deploy: same hash means unchanged, skip publishing;\n *    - audit: answer \"which version was this user on\" at any point.\n *\n * ## Node ids\n *\n * Derived from the structural path at compile time — stable and deterministic:\n * root level '0', '1', …; the j-th child of a branch's i-th case is\n * '{branchId}.c{i}.{j}', the default arm '{branchId}.o.{j}'; cohort arms use\n * the arm name '{cohortId}.{armName}.{j}'; a waitUntil timeout flow '{id}.t.{j}'.\n * Editing a node's parameters keeps its id; inserting a node shifts the ids of\n * its later siblings (a known trade-off — locating in-flight users relies on\n * the pinned version rather than cross-version id alignment, and cross-version\n * mapping is an explicit migrator's job).\n */\n\nexport const IR_VERSION = 2;\n\n/* -------------------------------- Base values ------------------------------- */\n\nexport const ScalarIR = z.union([z.string(), z.number(), z.boolean()]);\nexport type ScalarIR = z.infer<typeof ScalarIR>;\n\n/** Duration: `value` keeps the DSL literal ('23 hours', for display), `ms` is what the engine uses. */\n/*\n * TODO: `value` is hashed alongside `ms`, so '7 days' / '1 week' / '168 hours'\n * — identical to the engine, which only reads ms — produce three different\n * contentHashes. Rewording a duration therefore reports as a semantic change in\n * plan and repins in-flight users. Moving `value` out of the hash (it is a\n * display string) would fix it; deferred because it changes existing hashes.\n */\nexport const DurationIR = z.object({ value: z.string(), ms: z.number() });\nexport type DurationIR = z.infer<typeof DurationIR>;\n\n/** User-property reference — isomorphic to the DSL's UserPropertyRef once serialized (phantom type dropped). */\nexport const UserPropertyRefIR = z.object({\n  type: z.literal('user_property'),\n  path: z.string(),\n});\nexport type UserPropertyRefIR = z.infer<typeof UserPropertyRefIR>;\n\n/** A message prop / event payload value: either a literal or a user-property reference. */\nexport const PropValueIR = z.union([ScalarIR, UserPropertyRefIR]);\nexport type PropValueIR = z.infer<typeof PropValueIR>;\n\nexport const ChannelIR = z.enum(['email', 'sms', 'push', 'in_app', 'slack', 'discord', 'survey']);\nexport type ChannelIR = z.infer<typeof ChannelIR>;\n\nexport const WeekdayIR = z.enum(['mon', 'tue', 'wed', 'thu', 'fri', 'sat', 'sun']);\nexport type WeekdayIR = z.infer<typeof WeekdayIR>;\n\n/* --------------------------------- Provenance -------------------------------- */\n\n/**\n * Source location of the builder call that produced a definition — the IR's\n * source map. Lives under `meta`, so it is **excluded from contentHash**\n * (see hash.ts): provenance never affects execution identity or plan.\n * `file` is cwd-relative when compiled under Node, a URL under Vite dev.\n */\nexport const SourceLocIR = z.object({\n  file: z.string(),\n  line: z.number(),\n  column: z.number(),\n});\nexport type SourceLocIR = z.infer<typeof SourceLocIR>;\n\n/** Node-level metadata: provenance only, for now. Excluded from contentHash. */\nexport const NodeMetaIR = z.object({\n  loc: z.optional(SourceLocIR),\n});\nexport type NodeMetaIR = z.infer<typeof NodeMetaIR>;\n\n/* -------------------------------- Conditions -------------------------------- */\n\nexport const PropertyOperatorIR = z.enum([\n  'eq',\n  'ne',\n  'gt',\n  'gte',\n  'lt',\n  'lte',\n  'between',\n  'not_between',\n  'in_array',\n  'not_in_array',\n  'exists',\n  'not_exists',\n  'contains',\n  'not_contains',\n]);\nexport type PropertyOperatorIR = z.infer<typeof PropertyOperatorIR>;\n\n/**\n * Condition expression tree. The shape of value/values follows `op`:\n * eq/ne/gt/gte/lt/lte/contains/not_contains → value; in_array/not_in_array →\n * values; between/not_between → values = [min, max]; exists/not_exists → neither.\n *\n * `payload` predicates test the payload of an event (dotted paths reach nested\n * fields). They are only valid inside a `where` subtree — `performed.where`\n * and the event trigger's `where` — where an event row is in scope; the\n * compiler (compileBundle) and the evaluator both enforce the placement.\n * TODO: runtime refinement narrowing by op.\n */\n/**\n * Provenance rides on conditions too, so the studio can point at the exact\n * `eq(...)` / `and(...)` that produced a node — same rule as nodes: `meta` is\n * dropped before hashing, so carrying it never affects execution identity.\n */\ninterface ConditionBaseIR {\n  meta?: NodeMetaIR | undefined;\n}\n\nexport type ConditionIR =\n  | (ConditionBaseIR & { type: 'and'; conditions: ConditionIR[] })\n  | (ConditionBaseIR & { type: 'or'; conditions: ConditionIR[] })\n  | (ConditionBaseIR & { type: 'not'; condition: ConditionIR })\n  /** Reference a segment by id (defined in SegmentIR, versioned separately). */\n  | (ConditionBaseIR & { type: 'segment'; segment: string })\n  | (ConditionBaseIR & {\n      type: 'property';\n      path: string;\n      op: PropertyOperatorIR;\n      value?: ScalarIR | undefined;\n      values?: ScalarIR[] | undefined;\n    })\n  | (ConditionBaseIR & {\n      /** Event payload predicate; `path` is dotted for nested fields ('tags.utm_source'). */\n      type: 'payload';\n      path: string;\n      op: PropertyOperatorIR;\n      value?: ScalarIR | undefined;\n      values?: ScalarIR[] | undefined;\n    })\n  | (ConditionBaseIR & {\n      type: 'performed';\n      event: string;\n      /** Payload filter: only events matching it count (a payload-only subtree). */\n      where?: ConditionIR | undefined;\n      within?: DurationIR | undefined;\n      count?: number | undefined;\n    })\n  /**\n   * The user can be reached on the channel right now: for push, the host's\n   * device directory lists at least one device; for the others, the channel's\n   * recipient property (email, phone, …) is set.\n   */\n  | (ConditionBaseIR & { type: 'reachable'; channel: ChannelIR });\n\nconst conditionBase = { meta: z.optional(NodeMetaIR) };\n\nexport const ConditionIR: z.ZodMiniType<ConditionIR> = z.lazy(() =>\n  z.discriminatedUnion('type', [\n    z.object({ ...conditionBase, type: z.literal('and'), conditions: z.array(ConditionIR) }),\n    z.object({ ...conditionBase, type: z.literal('or'), conditions: z.array(ConditionIR) }),\n    z.object({ ...conditionBase, type: z.literal('not'), condition: ConditionIR }),\n    z.object({ ...conditionBase, type: z.literal('segment'), segment: z.string() }),\n    z.object({\n      ...conditionBase,\n      type: z.literal('property'),\n      path: z.string(),\n      op: PropertyOperatorIR,\n      value: z.optional(ScalarIR),\n      values: z.optional(z.array(ScalarIR)),\n    }),\n    z.object({\n      ...conditionBase,\n      type: z.literal('payload'),\n      path: z.string(),\n      op: PropertyOperatorIR,\n      value: z.optional(ScalarIR),\n      values: z.optional(z.array(ScalarIR)),\n    }),\n    z.object({\n      ...conditionBase,\n      type: z.literal('performed'),\n      event: z.string(),\n      where: z.optional(ConditionIR),\n      within: z.optional(DurationIR),\n      count: z.optional(z.number()),\n    }),\n    z.object({ ...conditionBase, type: z.literal('reachable'), channel: ChannelIR }),\n  ])\n);\n\n/* --------------------------------- Triggers --------------------------------- */\n\n/**\n * Trigger shapes. The event trigger has two independent gates: `where` tests\n * the triggering event's payload (payload-only subtree, evaluated against the\n * incoming event before anything else), `filter` tests the user's profile.\n */\nexport const TriggerIR = z.discriminatedUnion('type', [\n  z.object({\n    type: z.literal('event'),\n    event: z.string(),\n    where: z.optional(ConditionIR),\n    filter: z.optional(ConditionIR),\n    visitors: z.optional(z.literal(true)),\n  }),\n  z.object({ type: z.literal('segment'), segment: z.string() }),\n  z.object({ type: z.literal('date'), at: z.string() }),\n  z.object({ type: z.literal('webhook') }),\n]);\nexport type TriggerIR = z.infer<typeof TriggerIR>;\n\n/* ----------------------------------- Nodes ---------------------------------- */\n\ninterface NodeBaseIR {\n  /** Stable id derived from the structural path (rules in the file header). */\n  id: string;\n  /** Optional node name: UI title / observability handle (branch's optional first argument lands here). */\n  label?: string | undefined;\n  /** Metadata (provenance); excluded from contentHash. */\n  meta?: NodeMetaIR | undefined;\n}\n\nexport type NodeIR =\n  | (NodeBaseIR & {\n      type: 'message';\n      channel: ChannelIR;\n      template: string;\n      props: Record<string, PropValueIR>;\n      /**\n       * Push only: which of the user's devices get a copy. Absent means every\n       * device the directory lists; 'latest' only the most recently registered.\n       */\n      devices?: 'latest' | undefined;\n      /**\n       * Email and push: the template's subscription topic, or null for a transactional message\n       * (sent whatever the user opted out of). Absent for other channels, and in IR compiled\n       * before topics existed: such a step checks the channel-level opt-out only, as it always did.\n       */\n      topic?: string | null | undefined;\n      /**\n       * The template opted into at-least-once: a replayed send step sends a copy an earlier run\n       * claimed but never settled again. Absent (the default, 'skip') the copy is not sent again\n       * — kept absent rather than written as 'skip', so adding the option changed no node hash.\n       */\n      redelivery?: 'resend' | undefined;\n    })\n  | (NodeBaseIR & { type: 'delay'; duration: DurationIR })\n  | (NodeBaseIR & { type: 'random_delay'; min: DurationIR; max: DurationIR })\n  | (NodeBaseIR & {\n      type: 'time_window';\n      days: WeekdayIR[];\n      between: [string, string];\n      tz: string;\n    })\n  | (NodeBaseIR & {\n      type: 'wait_until';\n      condition: ConditionIR;\n      timeout: DurationIR;\n      onTimeout: 'continue' | 'exit' | NodeIR[];\n    })\n  | (NodeBaseIR & {\n      type: 'branch';\n      cases: { label?: string | undefined; condition: ConditionIR; flow: NodeIR[] }[];\n      /** Default arm (the DSL's bare tail argument). Absent = fall through to the main line. */\n      otherwise?: NodeIR[] | undefined;\n    })\n  | (NodeBaseIR & {\n      type: 'filter';\n      /** Audit-log line for the users this gate drops. Metadata: excluded from contentHash. */\n      reason?: string | undefined;\n      condition: ConditionIR;\n    })\n  | (NodeBaseIR & {\n      type: 'cohort';\n      /**\n       * Explicit experiment key: bucketing hashes `userId:key` instead of the\n       * structural node id, so the assignment survives node insertion/moves and\n       * the experiment keeps one identity across workflow versions. Absent →\n       * the node id is used (fine for one-off splits).\n       */\n      key?: string | undefined;\n      /**\n       * Arms in authoring order — the order the interpreter accumulates weights\n       * in, so it decides which bucket range each arm owns. The DSL keeps that\n       * promise by rejecting integer-like arm names, which JavaScript would\n       * hoist to the front of the object in numeric order. Weights sum to 100.\n       */\n      arms: { name: string; weight: number; flow: NodeIR[] }[];\n    })\n  | (NodeBaseIR & {\n      /** `reason` is the audit-log line. Metadata: excluded from contentHash. */\n      type: 'exit';\n      reason?: string | undefined;\n    })\n  | (NodeBaseIR & { type: 'send_event'; event: string; payload: Record<string, PropValueIR> })\n  | (NodeBaseIR & {\n      type: 'action';\n      /** Registry name of the custom action; the code itself lives in the deployed Worker bundle. */\n      action: string;\n      /** Argument values; user_property references are resolved at run time, like message props. */\n      args: Record<string, PropValueIR>;\n    });\n\nconst nodeBase = { id: z.string(), label: z.optional(z.string()), meta: z.optional(NodeMetaIR) };\n\nexport const NodeIR: z.ZodMiniType<NodeIR> = z.lazy(() =>\n  z.discriminatedUnion('type', [\n    z.object({\n      ...nodeBase,\n      type: z.literal('message'),\n      channel: ChannelIR,\n      template: z.string(),\n      props: z.record(z.string(), PropValueIR),\n      devices: z.optional(z.literal('latest')),\n      topic: z.optional(z.nullable(z.string())),\n      redelivery: z.optional(z.literal('resend')),\n    }),\n    z.object({ ...nodeBase, type: z.literal('delay'), duration: DurationIR }),\n    z.object({ ...nodeBase, type: z.literal('random_delay'), min: DurationIR, max: DurationIR }),\n    z.object({\n      ...nodeBase,\n      type: z.literal('time_window'),\n      days: z.array(WeekdayIR),\n      between: z.tuple([z.string(), z.string()]),\n      tz: z.string(),\n    }),\n    z.object({\n      ...nodeBase,\n      type: z.literal('wait_until'),\n      condition: ConditionIR,\n      timeout: DurationIR,\n      onTimeout: z.union([z.literal('continue'), z.literal('exit'), z.array(NodeIR)]),\n    }),\n    z.object({\n      ...nodeBase,\n      type: z.literal('branch'),\n      cases: z.array(\n        z.object({\n          label: z.optional(z.string()),\n          condition: ConditionIR,\n          flow: z.array(NodeIR),\n        })\n      ),\n      otherwise: z.optional(z.array(NodeIR)),\n    }),\n    z.object({\n      ...nodeBase,\n      type: z.literal('filter'),\n      condition: ConditionIR,\n      reason: z.optional(z.string()),\n    }),\n    z.object({\n      ...nodeBase,\n      type: z.literal('cohort'),\n      key: z.optional(z.string()),\n      arms: z.array(z.object({ name: z.string(), weight: z.number(), flow: z.array(NodeIR) })),\n    }),\n    z.object({ ...nodeBase, type: z.literal('exit'), reason: z.optional(z.string()) }),\n    z.object({\n      ...nodeBase,\n      type: z.literal('send_event'),\n      event: z.string(),\n      payload: z.record(z.string(), PropValueIR),\n    }),\n    z.object({\n      ...nodeBase,\n      type: z.literal('action'),\n      action: z.string(),\n      args: z.record(z.string(), PropValueIR),\n    }),\n  ])\n);\n\n/* ---------------------- Top-level definitions and bundle --------------------- */\n\nexport const GoalIR = z.object({\n  condition: ConditionIR,\n  within: z.optional(DurationIR),\n  exitOnMatch: z.boolean(),\n});\nexport type GoalIR = z.infer<typeof GoalIR>;\n\n/**\n * Human-facing metadata: **excluded from contentHash** (see hash.ts).\n * Editing a name or description does not touch execution semantics, so it never\n * invalidates the version in-flight users are pinned to, nor shows up in plan.\n */\nexport const MetaIR = z.object({\n  /**\n   * Human label. The asset's `id` is its identity — a wire key that routing\n   * tables and the entry ledger are built on — so it is not something to\n   * rename for readability. This is: it is metadata, dropped before hashing,\n   * and the studio shows it in place of the key wherever it is set.\n   */\n  name: z.optional(z.string()),\n  description: z.optional(z.string()),\n  loc: z.optional(SourceLocIR),\n});\nexport type MetaIR = z.infer<typeof MetaIR>;\n\nexport const WorkflowIR = z.object({\n  irVersion: z.literal(IR_VERSION),\n  /** Wire identity (`workflow({ id })`): routing tables, the entry ledger and reporting are keyed on it. */\n  id: z.string(),\n  contentHash: z.string(),\n  meta: z.optional(MetaIR),\n  trigger: TriggerIR,\n  goal: z.optional(GoalIR),\n  exitWhen: z.optional(ConditionIR),\n  flow: z.array(NodeIR),\n});\nexport type WorkflowIR = z.infer<typeof WorkflowIR>;\n\nexport const SegmentIR = z.object({\n  irVersion: z.literal(IR_VERSION),\n  /** Wire identity (`segment({ id })`): segment references and the membership store are keyed on it. */\n  id: z.string(),\n  contentHash: z.string(),\n  /** Provenance plus the human label — MetaIR, same as a workflow's. */\n  meta: z.optional(MetaIR),\n  condition: ConditionIR,\n});\nexport type SegmentIR = z.infer<typeof SegmentIR>;\n\n/** Template manifest entry: IR records only the reference; the body lives in the template system. */\nexport const TemplateIR = z.object({\n  irVersion: z.literal(IR_VERSION),\n  key: z.string(),\n  channel: ChannelIR,\n});\nexport type TemplateIR = z.infer<typeof TemplateIR>;\n\n/**\n * Action manifest entry: IR records the name; the implementation solidifies\n * into the Worker bundle at deploy time, never into IR (custom code stays out\n * of the data plane by design).\n */\nexport const ActionIR = z.object({\n  irVersion: z.literal(IR_VERSION),\n  name: z.string(),\n});\nexport type ActionIR = z.infer<typeof ActionIR>;\n\n/**\n * Deployment unit: the complete snapshot one `deploy` produces (terraform\n * apply, same mental model). The server diffs each definition's contentHash to\n * decide publish / skip / retire.\n */\n/**\n * The subscription topics the contract declares, carried by the bundle so the engine validates\n * `/subscriptions` and the templates' topics against the deployed list, not the SDK's word.\n */\nexport const SubscriptionsIR = z.object({\n  topics: z.array(z.string()),\n});\nexport type SubscriptionsIR = z.infer<typeof SubscriptionsIR>;\n\nexport const BundleIR = z.object({\n  irVersion: z.literal(IR_VERSION),\n  workflows: z.array(WorkflowIR),\n  segments: z.array(SegmentIR),\n  templates: z.array(TemplateIR),\n  actions: z.array(ActionIR),\n  /** Absent in a bundle compiled before topics existed: no topics. */\n  subscriptions: z.optional(SubscriptionsIR),\n});\nexport type BundleIR = z.infer<typeof BundleIR>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6CA,MAAa,aAAa;AAI1B,MAAa,WAAWA,SAAE,MAAM;CAACA,SAAE,OAAO;CAAGA,SAAE,OAAO;CAAGA,SAAE,QAAQ;AAAC,CAAC;;AAWrE,MAAa,aAAaA,SAAE,OAAO;CAAE,OAAOA,SAAE,OAAO;CAAG,IAAIA,SAAE,OAAO;AAAE,CAAC;;AAIxE,MAAa,oBAAoBA,SAAE,OAAO;CACxC,MAAMA,SAAE,QAAQ,eAAe;CAC/B,MAAMA,SAAE,OAAO;AACjB,CAAC;;AAID,MAAa,cAAcA,SAAE,MAAM,CAAC,UAAU,iBAAiB,CAAC;AAGhE,MAAa,YAAYA,SAAE,KAAK;CAAC;CAAS;CAAO;CAAQ;CAAU;CAAS;CAAW;AAAQ,CAAC;AAGhG,MAAa,YAAYA,SAAE,KAAK;CAAC;CAAO;CAAO;CAAO;CAAO;CAAO;CAAO;AAAK,CAAC;;;;;;;AAWjF,MAAa,cAAcA,SAAE,OAAO;CAClC,MAAMA,SAAE,OAAO;CACf,MAAMA,SAAE,OAAO;CACf,QAAQA,SAAE,OAAO;AACnB,CAAC;;AAID,MAAa,aAAaA,SAAE,OAAO,EACjC,KAAKA,SAAE,SAAS,WAAW,EAC7B,CAAC;AAKD,MAAa,qBAAqBA,SAAE,KAAK;CACvC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AA2DD,MAAM,gBAAgB,EAAE,MAAMA,SAAE,SAAS,UAAU,EAAE;AAErD,MAAa,cAA0CA,SAAE,WACvDA,SAAE,mBAAmB,QAAQ;CAC3BA,SAAE,OAAO;EAAE,GAAG;EAAe,MAAMA,SAAE,QAAQ,KAAK;EAAG,YAAYA,SAAE,MAAM,WAAW;CAAE,CAAC;CACvFA,SAAE,OAAO;EAAE,GAAG;EAAe,MAAMA,SAAE,QAAQ,IAAI;EAAG,YAAYA,SAAE,MAAM,WAAW;CAAE,CAAC;CACtFA,SAAE,OAAO;EAAE,GAAG;EAAe,MAAMA,SAAE,QAAQ,KAAK;EAAG,WAAW;CAAY,CAAC;CAC7EA,SAAE,OAAO;EAAE,GAAG;EAAe,MAAMA,SAAE,QAAQ,SAAS;EAAG,SAASA,SAAE,OAAO;CAAE,CAAC;CAC9EA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,UAAU;EAC1B,MAAMA,SAAE,OAAO;EACf,IAAI;EACJ,OAAOA,SAAE,SAAS,QAAQ;EAC1B,QAAQA,SAAE,SAASA,SAAE,MAAM,QAAQ,CAAC;CACtC,CAAC;CACDA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,SAAS;EACzB,MAAMA,SAAE,OAAO;EACf,IAAI;EACJ,OAAOA,SAAE,SAAS,QAAQ;EAC1B,QAAQA,SAAE,SAASA,SAAE,MAAM,QAAQ,CAAC;CACtC,CAAC;CACDA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,WAAW;EAC3B,OAAOA,SAAE,OAAO;EAChB,OAAOA,SAAE,SAAS,WAAW;EAC7B,QAAQA,SAAE,SAAS,UAAU;EAC7B,OAAOA,SAAE,SAASA,SAAE,OAAO,CAAC;CAC9B,CAAC;CACDA,SAAE,OAAO;EAAE,GAAG;EAAe,MAAMA,SAAE,QAAQ,WAAW;EAAG,SAAS;CAAU,CAAC;AACjF,CAAC,CACH;;;;;;AASA,MAAa,YAAYA,SAAE,mBAAmB,QAAQ;CACpDA,SAAE,OAAO;EACP,MAAMA,SAAE,QAAQ,OAAO;EACvB,OAAOA,SAAE,OAAO;EAChB,OAAOA,SAAE,SAAS,WAAW;EAC7B,QAAQA,SAAE,SAAS,WAAW;EAC9B,UAAUA,SAAE,SAASA,SAAE,QAAQ,IAAI,CAAC;CACtC,CAAC;CACDA,SAAE,OAAO;EAAE,MAAMA,SAAE,QAAQ,SAAS;EAAG,SAASA,SAAE,OAAO;CAAE,CAAC;CAC5DA,SAAE,OAAO;EAAE,MAAMA,SAAE,QAAQ,MAAM;EAAG,IAAIA,SAAE,OAAO;CAAE,CAAC;CACpDA,SAAE,OAAO,EAAE,MAAMA,SAAE,QAAQ,SAAS,EAAE,CAAC;AACzC,CAAC;AA+FD,MAAM,WAAW;CAAE,IAAIA,SAAE,OAAO;CAAG,OAAOA,SAAE,SAASA,SAAE,OAAO,CAAC;CAAG,MAAMA,SAAE,SAAS,UAAU;AAAE;AAE/F,MAAa,SAAgCA,SAAE,WAC7CA,SAAE,mBAAmB,QAAQ;CAC3BA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,SAAS;EACzB,SAAS;EACT,UAAUA,SAAE,OAAO;EACnB,OAAOA,SAAE,OAAOA,SAAE,OAAO,GAAG,WAAW;EACvC,SAASA,SAAE,SAASA,SAAE,QAAQ,QAAQ,CAAC;EACvC,OAAOA,SAAE,SAASA,SAAE,SAASA,SAAE,OAAO,CAAC,CAAC;EACxC,YAAYA,SAAE,SAASA,SAAE,QAAQ,QAAQ,CAAC;CAC5C,CAAC;CACDA,SAAE,OAAO;EAAE,GAAG;EAAU,MAAMA,SAAE,QAAQ,OAAO;EAAG,UAAU;CAAW,CAAC;CACxEA,SAAE,OAAO;EAAE,GAAG;EAAU,MAAMA,SAAE,QAAQ,cAAc;EAAG,KAAK;EAAY,KAAK;CAAW,CAAC;CAC3FA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,aAAa;EAC7B,MAAMA,SAAE,MAAM,SAAS;EACvB,SAASA,SAAE,MAAM,CAACA,SAAE,OAAO,GAAGA,SAAE,OAAO,CAAC,CAAC;EACzC,IAAIA,SAAE,OAAO;CACf,CAAC;CACDA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,YAAY;EAC5B,WAAW;EACX,SAAS;EACT,WAAWA,SAAE,MAAM;GAACA,SAAE,QAAQ,UAAU;GAAGA,SAAE,QAAQ,MAAM;GAAGA,SAAE,MAAM,MAAM;EAAC,CAAC;CAChF,CAAC;CACDA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,QAAQ;EACxB,OAAOA,SAAE,MACPA,SAAE,OAAO;GACP,OAAOA,SAAE,SAASA,SAAE,OAAO,CAAC;GAC5B,WAAW;GACX,MAAMA,SAAE,MAAM,MAAM;EACtB,CAAC,CACH;EACA,WAAWA,SAAE,SAASA,SAAE,MAAM,MAAM,CAAC;CACvC,CAAC;CACDA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,QAAQ;EACxB,WAAW;EACX,QAAQA,SAAE,SAASA,SAAE,OAAO,CAAC;CAC/B,CAAC;CACDA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,QAAQ;EACxB,KAAKA,SAAE,SAASA,SAAE,OAAO,CAAC;EAC1B,MAAMA,SAAE,MAAMA,SAAE,OAAO;GAAE,MAAMA,SAAE,OAAO;GAAG,QAAQA,SAAE,OAAO;GAAG,MAAMA,SAAE,MAAM,MAAM;EAAE,CAAC,CAAC;CACzF,CAAC;CACDA,SAAE,OAAO;EAAE,GAAG;EAAU,MAAMA,SAAE,QAAQ,MAAM;EAAG,QAAQA,SAAE,SAASA,SAAE,OAAO,CAAC;CAAE,CAAC;CACjFA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,YAAY;EAC5B,OAAOA,SAAE,OAAO;EAChB,SAASA,SAAE,OAAOA,SAAE,OAAO,GAAG,WAAW;CAC3C,CAAC;CACDA,SAAE,OAAO;EACP,GAAG;EACH,MAAMA,SAAE,QAAQ,QAAQ;EACxB,QAAQA,SAAE,OAAO;EACjB,MAAMA,SAAE,OAAOA,SAAE,OAAO,GAAG,WAAW;CACxC,CAAC;AACH,CAAC,CACH;AAIA,MAAa,SAASA,SAAE,OAAO;CAC7B,WAAW;CACX,QAAQA,SAAE,SAAS,UAAU;CAC7B,aAAaA,SAAE,QAAQ;AACzB,CAAC;;;;;;AAQD,MAAa,SAASA,SAAE,OAAO;;;;;;;CAO7B,MAAMA,SAAE,SAASA,SAAE,OAAO,CAAC;CAC3B,aAAaA,SAAE,SAASA,SAAE,OAAO,CAAC;CAClC,KAAKA,SAAE,SAAS,WAAW;AAC7B,CAAC;AAGD,MAAa,aAAaA,SAAE,OAAO;CACjC,WAAWA,SAAE,QAAA,CAAkB;;CAE/B,IAAIA,SAAE,OAAO;CACb,aAAaA,SAAE,OAAO;CACtB,MAAMA,SAAE,SAAS,MAAM;CACvB,SAAS;CACT,MAAMA,SAAE,SAAS,MAAM;CACvB,UAAUA,SAAE,SAAS,WAAW;CAChC,MAAMA,SAAE,MAAM,MAAM;AACtB,CAAC;AAGD,MAAa,YAAYA,SAAE,OAAO;CAChC,WAAWA,SAAE,QAAA,CAAkB;;CAE/B,IAAIA,SAAE,OAAO;CACb,aAAaA,SAAE,OAAO;;CAEtB,MAAMA,SAAE,SAAS,MAAM;CACvB,WAAW;AACb,CAAC;;AAID,MAAa,aAAaA,SAAE,OAAO;CACjC,WAAWA,SAAE,QAAA,CAAkB;CAC/B,KAAKA,SAAE,OAAO;CACd,SAAS;AACX,CAAC;;;;;;AAQD,MAAa,WAAWA,SAAE,OAAO;CAC/B,WAAWA,SAAE,QAAA,CAAkB;CAC/B,MAAMA,SAAE,OAAO;AACjB,CAAC;;;;;;;;;;AAYD,MAAa,kBAAkBA,SAAE,OAAO,EACtC,QAAQA,SAAE,MAAMA,SAAE,OAAO,CAAC,EAC5B,CAAC;AAGD,MAAa,WAAWA,SAAE,OAAO;CAC/B,WAAWA,SAAE,QAAA,CAAkB;CAC/B,WAAWA,SAAE,MAAM,UAAU;CAC7B,UAAUA,SAAE,MAAM,SAAS;CAC3B,WAAWA,SAAE,MAAM,UAAU;CAC7B,SAASA,SAAE,MAAM,QAAQ;;CAEzB,eAAeA,SAAE,SAAS,eAAe;AAC3C,CAAC"}

package/dist/ir.d.cts

@@ -229,6 +229,12 @@ export type NodeIR = (NodeBaseIR & {
    * before topics existed: such a step checks the channel-level opt-out only, as it always did.
    */
   topic?: string | null | undefined;
+  /**
+   * The template opted into at-least-once: a replayed send step sends a copy an earlier run
+   * claimed but never settled again. Absent (the default, 'skip') the copy is not sent again
+   * — kept absent rather than written as 'skip', so adding the option changed no node hash.
+   */
+  redelivery?: 'resend' | undefined;
 }) | (NodeBaseIR & {
   type: 'delay';
   duration: DurationIR;

package/dist/ir.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"ir.d.cts","names":[],"sources":["../src/ir.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA6Ca;qBAIA,UAAQ,EAAA,uBAAA,EAAA,uBAAA,EAAA,uBAAA,EAAA;YACT,WAAW,EAAE,aAAa;;qBAUzB,YAAU,EAAA;;;GAAkD,EAAA,KAAA;YAC7D,aAAa,EAAE,aAAa;;qBAG3B,mBAAiB,EAAA;;;GAG5B,EAAA,KAAA;YACU,oBAAoB,EAAE,aAAa;;qBAGlC,aAAW,EAAA,uBAAA,EAAA,uBAAA,EAAA,uBAAA,EAAA,uBAAA,EAAA,2BAAA,EAAA;;;GAAyC,EAAA,KAAA;YACrD,cAAc,EAAE,aAAa;qBAE5B,WAAS,EAAA;;;;;;;;;YACV,YAAY,EAAE,aAAa;qBAE1B,WAAS,EAAA;;;;;;;;;YACV,YAAY,EAAE,aAAa;;;;;;;qBAU1B,aAAW,EAAA;;;;GAItB,EAAA,KAAA;YACU,cAAc,EAAE,aAAa;;qBAG5B,YAAU,EAAA;;;;;;GAErB,EAAA,KAAA;YACU,aAAa,EAAE,aAAa;qBAI3B,oBAAkB,EAAA;;;;;;;;;;;;;;;;YAgBnB,qBAAqB,EAAE,aAAa;;;;;;;;;;;;;;;;;UAkBtC;EACR,OAAO;;YAGG,eACP;EAAoB;EAAa,YAAY;MAC7C;EAAoB;EAAY,YAAY;MAC5C;EAAoB;EAAa,WAAW;;;CAE5C;EAAoB;EAAiB;MACrC;EACC;EACA;EACA,IAAI;EACJ,QAAQ;EACR,SAAS;MAEV;;EAEC;EACA;EACA,IAAI;EACJ,QAAQ;EACR,SAAS;MAEV;EACC;EACA;;EAEA,QAAQ;EACR,SAAS;EACT;;;;;;;CAOD;EAAoB;EAAmB,SAAS;;qBAIxC,aAAa,EAAE,YAAY;;;;;;qBAyC3B,WAAS,EAAA,2BAAA,EAAA;;;;;;;;;;;;;;GAWpB,EAAA,KAAA;YACU,YAAY,EAAE,aAAa;UAI7B;;EAER;;EAEA;;EAEA,OAAO;;YAGG,UACP;EACC;EACA,SAAS;EACT;EACA,OAAO,eAAe;;;;;EAKtB;;;;;;EAMA;MAED;EAAe;EAAe,UAAU;MACxC;EAAe;EAAsB,KAAK;EAAY,KAAK;MAC3D;EACC;EACA,MAAM;EACN;EACA;MAED;EACC;EACA,WAAW;EACX,SAAS;EACT,iCAAiC;MAElC;EACC;EACA;IAAS;IAA4B,WAAW;IAAa,MAAM;;;EAEnE,YAAY;MAEb;EACC;;EAEA;EACA,WAAW;MAEZ;EACC;;;;;;;EAOA;;;;;;;EAOA;IAAQ;IAAc;IAAgB,MAAM;;MAE7C;;EAEC;EACA;MAED;EAAe;EAAoB;EAAe,SAAS,eAAe;MAC1E;EACC;;EAEA;;EAEA,MAAM,eAAe;;qBAKd,QAAQ,EAAE,YAAY;qBAqEtB,QAAM,EAAA;;;;;;;GAIjB,EAAA,KAAA;YACU,SAAS,EAAE,aAAa;;;;;;qBAOvB,QAAM,EAAA;;;;;;;;GAUjB,EAAA,KAAA;YACU,SAAS,EAAE,aAAa;qBAEvB,YAAU,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAUrB,EAAA,KAAA;YACU,aAAa,EAAE,aAAa;qBAE3B,WAAS,EAAA;;;;;;;;;;;;;;GAQpB,EAAA,KAAA;YACU,YAAY,EAAE,aAAa;;qBAG1B,YAAU,EAAA;;;;;;;;;;;;GAIrB,EAAA,KAAA;YACU,aAAa,EAAE,aAAa;;;;;;qBAO3B,UAAQ,EAAA;;;GAGnB,EAAA,KAAA;YACU,WAAW,EAAE,aAAa;;;;;;;;;;qBAWzB,iBAAe,EAAA;;GAE1B,EAAA,KAAA;YACU,kBAAkB,EAAE,aAAa;qBAEhC,UAAQ,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAQnB,EAAA,KAAA;YACU,WAAW,EAAE,aAAa"}
+{"version":3,"file":"ir.d.cts","names":[],"sources":["../src/ir.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA6Ca;qBAIA,UAAQ,EAAA,uBAAA,EAAA,uBAAA,EAAA,uBAAA,EAAA;YACT,WAAW,EAAE,aAAa;;qBAUzB,YAAU,EAAA;;;GAAkD,EAAA,KAAA;YAC7D,aAAa,EAAE,aAAa;;qBAG3B,mBAAiB,EAAA;;;GAG5B,EAAA,KAAA;YACU,oBAAoB,EAAE,aAAa;;qBAGlC,aAAW,EAAA,uBAAA,EAAA,uBAAA,EAAA,uBAAA,EAAA,uBAAA,EAAA,2BAAA,EAAA;;;GAAyC,EAAA,KAAA;YACrD,cAAc,EAAE,aAAa;qBAE5B,WAAS,EAAA;;;;;;;;;YACV,YAAY,EAAE,aAAa;qBAE1B,WAAS,EAAA;;;;;;;;;YACV,YAAY,EAAE,aAAa;;;;;;;qBAU1B,aAAW,EAAA;;;;GAItB,EAAA,KAAA;YACU,cAAc,EAAE,aAAa;;qBAG5B,YAAU,EAAA;;;;;;GAErB,EAAA,KAAA;YACU,aAAa,EAAE,aAAa;qBAI3B,oBAAkB,EAAA;;;;;;;;;;;;;;;;YAgBnB,qBAAqB,EAAE,aAAa;;;;;;;;;;;;;;;;;UAkBtC;EACR,OAAO;;YAGG,eACP;EAAoB;EAAa,YAAY;MAC7C;EAAoB;EAAY,YAAY;MAC5C;EAAoB;EAAa,WAAW;;;CAE5C;EAAoB;EAAiB;MACrC;EACC;EACA;EACA,IAAI;EACJ,QAAQ;EACR,SAAS;MAEV;;EAEC;EACA;EACA,IAAI;EACJ,QAAQ;EACR,SAAS;MAEV;EACC;EACA;;EAEA,QAAQ;EACR,SAAS;EACT;;;;;;;CAOD;EAAoB;EAAmB,SAAS;;qBAIxC,aAAa,EAAE,YAAY;;;;;;qBAyC3B,WAAS,EAAA,2BAAA,EAAA;;;;;;;;;;;;;;GAWpB,EAAA,KAAA;YACU,YAAY,EAAE,aAAa;UAI7B;;EAER;;EAEA;;EAEA,OAAO;;YAGG,UACP;EACC;EACA,SAAS;EACT;EACA,OAAO,eAAe;;;;;EAKtB;;;;;;EAMA;;;;;;EAMA;MAED;EAAe;EAAe,UAAU;MACxC;EAAe;EAAsB,KAAK;EAAY,KAAK;MAC3D;EACC;EACA,MAAM;EACN;EACA;MAED;EACC;EACA,WAAW;EACX,SAAS;EACT,iCAAiC;MAElC;EACC;EACA;IAAS;IAA4B,WAAW;IAAa,MAAM;;;EAEnE,YAAY;MAEb;EACC;;EAEA;EACA,WAAW;MAEZ;EACC;;;;;;;EAOA;;;;;;;EAOA;IAAQ;IAAc;IAAgB,MAAM;;MAE7C;;EAEC;EACA;MAED;EAAe;EAAoB;EAAe,SAAS,eAAe;MAC1E;EACC;;EAEA;;EAEA,MAAM,eAAe;;qBAKd,QAAQ,EAAE,YAAY;qBAsEtB,QAAM,EAAA;;;;;;;GAIjB,EAAA,KAAA;YACU,SAAS,EAAE,aAAa;;;;;;qBAOvB,QAAM,EAAA;;;;;;;;GAUjB,EAAA,KAAA;YACU,SAAS,EAAE,aAAa;qBAEvB,YAAU,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAUrB,EAAA,KAAA;YACU,aAAa,EAAE,aAAa;qBAE3B,WAAS,EAAA;;;;;;;;;;;;;;GAQpB,EAAA,KAAA;YACU,YAAY,EAAE,aAAa;;qBAG1B,YAAU,EAAA;;;;;;;;;;;;GAIrB,EAAA,KAAA;YACU,aAAa,EAAE,aAAa;;;;;;qBAO3B,UAAQ,EAAA;;;GAGnB,EAAA,KAAA;YACU,WAAW,EAAE,aAAa;;;;;;;;;;qBAWzB,iBAAe,EAAA;;GAE1B,EAAA,KAAA;YACU,kBAAkB,EAAE,aAAa;qBAEhC,UAAQ,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAQnB,EAAA,KAAA;YACU,WAAW,EAAE,aAAa"}

package/dist/ir.d.mts

@@ -229,6 +229,12 @@ export type NodeIR = (NodeBaseIR & {
    * before topics existed: such a step checks the channel-level opt-out only, as it always did.
    */
   topic?: string | null | undefined;
+  /**
+   * The template opted into at-least-once: a replayed send step sends a copy an earlier run
+   * claimed but never settled again. Absent (the default, 'skip') the copy is not sent again
+   * — kept absent rather than written as 'skip', so adding the option changed no node hash.
+   */
+  redelivery?: 'resend' | undefined;
 }) | (NodeBaseIR & {
   type: 'delay';
   duration: DurationIR;

package/dist/ir.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"ir.d.mts","names":[],"sources":["../src/ir.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA6Ca;qBAIA,UAAQ,EAAA,uBAAA,EAAA,uBAAA,EAAA,uBAAA,EAAA;YACT,WAAW,EAAE,aAAa;;qBAUzB,YAAU,EAAA;;;GAAkD,EAAA,KAAA;YAC7D,aAAa,EAAE,aAAa;;qBAG3B,mBAAiB,EAAA;;;GAG5B,EAAA,KAAA;YACU,oBAAoB,EAAE,aAAa;;qBAGlC,aAAW,EAAA,uBAAA,EAAA,uBAAA,EAAA,uBAAA,EAAA,uBAAA,EAAA,2BAAA,EAAA;;;GAAyC,EAAA,KAAA;YACrD,cAAc,EAAE,aAAa;qBAE5B,WAAS,EAAA;;;;;;;;;YACV,YAAY,EAAE,aAAa;qBAE1B,WAAS,EAAA;;;;;;;;;YACV,YAAY,EAAE,aAAa;;;;;;;qBAU1B,aAAW,EAAA;;;;GAItB,EAAA,KAAA;YACU,cAAc,EAAE,aAAa;;qBAG5B,YAAU,EAAA;;;;;;GAErB,EAAA,KAAA;YACU,aAAa,EAAE,aAAa;qBAI3B,oBAAkB,EAAA;;;;;;;;;;;;;;;;YAgBnB,qBAAqB,EAAE,aAAa;;;;;;;;;;;;;;;;;UAkBtC;EACR,OAAO;;YAGG,eACP;EAAoB;EAAa,YAAY;MAC7C;EAAoB;EAAY,YAAY;MAC5C;EAAoB;EAAa,WAAW;;;CAE5C;EAAoB;EAAiB;MACrC;EACC;EACA;EACA,IAAI;EACJ,QAAQ;EACR,SAAS;MAEV;;EAEC;EACA;EACA,IAAI;EACJ,QAAQ;EACR,SAAS;MAEV;EACC;EACA;;EAEA,QAAQ;EACR,SAAS;EACT;;;;;;;CAOD;EAAoB;EAAmB,SAAS;;qBAIxC,aAAa,EAAE,YAAY;;;;;;qBAyC3B,WAAS,EAAA,2BAAA,EAAA;;;;;;;;;;;;;;GAWpB,EAAA,KAAA;YACU,YAAY,EAAE,aAAa;UAI7B;;EAER;;EAEA;;EAEA,OAAO;;YAGG,UACP;EACC;EACA,SAAS;EACT;EACA,OAAO,eAAe;;;;;EAKtB;;;;;;EAMA;MAED;EAAe;EAAe,UAAU;MACxC;EAAe;EAAsB,KAAK;EAAY,KAAK;MAC3D;EACC;EACA,MAAM;EACN;EACA;MAED;EACC;EACA,WAAW;EACX,SAAS;EACT,iCAAiC;MAElC;EACC;EACA;IAAS;IAA4B,WAAW;IAAa,MAAM;;;EAEnE,YAAY;MAEb;EACC;;EAEA;EACA,WAAW;MAEZ;EACC;;;;;;;EAOA;;;;;;;EAOA;IAAQ;IAAc;IAAgB,MAAM;;MAE7C;;EAEC;EACA;MAED;EAAe;EAAoB;EAAe,SAAS,eAAe;MAC1E;EACC;;EAEA;;EAEA,MAAM,eAAe;;qBAKd,QAAQ,EAAE,YAAY;qBAqEtB,QAAM,EAAA;;;;;;;GAIjB,EAAA,KAAA;YACU,SAAS,EAAE,aAAa;;;;;;qBAOvB,QAAM,EAAA;;;;;;;;GAUjB,EAAA,KAAA;YACU,SAAS,EAAE,aAAa;qBAEvB,YAAU,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAUrB,EAAA,KAAA;YACU,aAAa,EAAE,aAAa;qBAE3B,WAAS,EAAA;;;;;;;;;;;;;;GAQpB,EAAA,KAAA;YACU,YAAY,EAAE,aAAa;;qBAG1B,YAAU,EAAA;;;;;;;;;;;;GAIrB,EAAA,KAAA;YACU,aAAa,EAAE,aAAa;;;;;;qBAO3B,UAAQ,EAAA;;;GAGnB,EAAA,KAAA;YACU,WAAW,EAAE,aAAa;;;;;;;;;;qBAWzB,iBAAe,EAAA;;GAE1B,EAAA,KAAA;YACU,kBAAkB,EAAE,aAAa;qBAEhC,UAAQ,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAQnB,EAAA,KAAA;YACU,WAAW,EAAE,aAAa"}
+{"version":3,"file":"ir.d.mts","names":[],"sources":["../src/ir.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA6Ca;qBAIA,UAAQ,EAAA,uBAAA,EAAA,uBAAA,EAAA,uBAAA,EAAA;YACT,WAAW,EAAE,aAAa;;qBAUzB,YAAU,EAAA;;;GAAkD,EAAA,KAAA;YAC7D,aAAa,EAAE,aAAa;;qBAG3B,mBAAiB,EAAA;;;GAG5B,EAAA,KAAA;YACU,oBAAoB,EAAE,aAAa;;qBAGlC,aAAW,EAAA,uBAAA,EAAA,uBAAA,EAAA,uBAAA,EAAA,uBAAA,EAAA,2BAAA,EAAA;;;GAAyC,EAAA,KAAA;YACrD,cAAc,EAAE,aAAa;qBAE5B,WAAS,EAAA;;;;;;;;;YACV,YAAY,EAAE,aAAa;qBAE1B,WAAS,EAAA;;;;;;;;;YACV,YAAY,EAAE,aAAa;;;;;;;qBAU1B,aAAW,EAAA;;;;GAItB,EAAA,KAAA;YACU,cAAc,EAAE,aAAa;;qBAG5B,YAAU,EAAA;;;;;;GAErB,EAAA,KAAA;YACU,aAAa,EAAE,aAAa;qBAI3B,oBAAkB,EAAA;;;;;;;;;;;;;;;;YAgBnB,qBAAqB,EAAE,aAAa;;;;;;;;;;;;;;;;;UAkBtC;EACR,OAAO;;YAGG,eACP;EAAoB;EAAa,YAAY;MAC7C;EAAoB;EAAY,YAAY;MAC5C;EAAoB;EAAa,WAAW;;;CAE5C;EAAoB;EAAiB;MACrC;EACC;EACA;EACA,IAAI;EACJ,QAAQ;EACR,SAAS;MAEV;;EAEC;EACA;EACA,IAAI;EACJ,QAAQ;EACR,SAAS;MAEV;EACC;EACA;;EAEA,QAAQ;EACR,SAAS;EACT;;;;;;;CAOD;EAAoB;EAAmB,SAAS;;qBAIxC,aAAa,EAAE,YAAY;;;;;;qBAyC3B,WAAS,EAAA,2BAAA,EAAA;;;;;;;;;;;;;;GAWpB,EAAA,KAAA;YACU,YAAY,EAAE,aAAa;UAI7B;;EAER;;EAEA;;EAEA,OAAO;;YAGG,UACP;EACC;EACA,SAAS;EACT;EACA,OAAO,eAAe;;;;;EAKtB;;;;;;EAMA;;;;;;EAMA;MAED;EAAe;EAAe,UAAU;MACxC;EAAe;EAAsB,KAAK;EAAY,KAAK;MAC3D;EACC;EACA,MAAM;EACN;EACA;MAED;EACC;EACA,WAAW;EACX,SAAS;EACT,iCAAiC;MAElC;EACC;EACA;IAAS;IAA4B,WAAW;IAAa,MAAM;;;EAEnE,YAAY;MAEb;EACC;;EAEA;EACA,WAAW;MAEZ;EACC;;;;;;;EAOA;;;;;;;EAOA;IAAQ;IAAc;IAAgB,MAAM;;MAE7C;;EAEC;EACA;MAED;EAAe;EAAoB;EAAe,SAAS,eAAe;MAC1E;EACC;;EAEA;;EAEA,MAAM,eAAe;;qBAKd,QAAQ,EAAE,YAAY;qBAsEtB,QAAM,EAAA;;;;;;;GAIjB,EAAA,KAAA;YACU,SAAS,EAAE,aAAa;;;;;;qBAOvB,QAAM,EAAA;;;;;;;;GAUjB,EAAA,KAAA;YACU,SAAS,EAAE,aAAa;qBAEvB,YAAU,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAUrB,EAAA,KAAA;YACU,aAAa,EAAE,aAAa;qBAE3B,WAAS,EAAA;;;;;;;;;;;;;;GAQpB,EAAA,KAAA;YACU,YAAY,EAAE,aAAa;;qBAG1B,YAAU,EAAA;;;;;;;;;;;;GAIrB,EAAA,KAAA;YACU,aAAa,EAAE,aAAa;;;;;;qBAO3B,UAAQ,EAAA;;;GAGnB,EAAA,KAAA;YACU,WAAW,EAAE,aAAa;;;;;;;;;;qBAWzB,iBAAe,EAAA;;GAE1B,EAAA,KAAA;YACU,kBAAkB,EAAE,aAAa;qBAEhC,UAAQ,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAQnB,EAAA,KAAA;YACU,WAAW,EAAE,aAAa"}

package/dist/ir.mjs

@@ -195,7 +195,8 @@ const NodeIR = z.lazy(() => z.discriminatedUnion("type", [
 		template: z.string(),
 		props: z.record(z.string(), PropValueIR),
 		devices: z.optional(z.literal("latest")),
-		topic: z.optional(z.nullable(z.string()))
+		topic: z.optional(z.nullable(z.string())),
+		redelivery: z.optional(z.literal("resend"))
 	}),
 	z.object({
 		...nodeBase,