@smthrs/engine-store 0.0.0-stage → 1.0.0-rc.4

package/dist/esm/internal/EngineJj.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Engine-private Jujutsu authority.
+ *
+ * Action bodies resolve the public `Jj` tag from their guarded host context.
+ * Snapshot, restore, and diff bookkeeping resolve this distinct tag instead,
+ * so an engine operation never grants the same authority to user code.
+ *
+ * @since 1.0.0
+ */
+import { Jj } from "@smthrs/kernel";
+import * as Context from "effect/Context";
+import * as Layer from "effect/Layer";
+declare const EngineJj_base: Context.ServiceClass<EngineJj, "@smthrs/engine-store/internal/EngineJj", Jj.Jj>;
+/**
+ * Engine-owned repository operations, absent from public action context.
+ *
+ * @since 1.0.0
+ * @category services
+ */
+export declare class EngineJj extends EngineJj_base {
+}
+/**
+ * Captures the current public Jj implementation under the private engine tag.
+ *
+ * @since 1.0.0
+ * @category layers
+ */
+export declare const layerFromJj: Layer.Layer<EngineJj, never, Jj.Jj>;
+export {};
+//# sourceMappingURL=EngineJj.d.ts.map

package/dist/esm/internal/EngineJj.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EngineJj.d.ts","sourceRoot":"","sources":["../../../src/internal/EngineJj.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAA;AACnC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AAEzC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;;AAErC;;;;;GAKG;AACH,qBAAa,QAAS,SAAQ,aAA4E;CAAG;AAE7G;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAA0D,CAAA"}

package/dist/esm/internal/EngineJj.js

@@ -0,0 +1,29 @@
+/**
+ * Engine-private Jujutsu authority.
+ *
+ * Action bodies resolve the public `Jj` tag from their guarded host context.
+ * Snapshot, restore, and diff bookkeeping resolve this distinct tag instead,
+ * so an engine operation never grants the same authority to user code.
+ *
+ * @since 1.0.0
+ */
+import { Jj } from "@smthrs/kernel";
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+/**
+ * Engine-owned repository operations, absent from public action context.
+ *
+ * @since 1.0.0
+ * @category services
+ */
+export class EngineJj extends Context.Service()("@smthrs/engine-store/internal/EngineJj") {
+}
+/**
+ * Captures the current public Jj implementation under the private engine tag.
+ *
+ * @since 1.0.0
+ * @category layers
+ */
+export const layerFromJj = Layer.effect(EngineJj, Effect.map(Jj.Jj, EngineJj.of));
+//# sourceMappingURL=EngineJj.js.map

package/dist/esm/internal/EngineJj.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EngineJj.js","sourceRoot":"","sources":["../../../src/internal/EngineJj.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAA;AACnC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAErC;;;;;GAKG;AACH,MAAM,OAAO,QAAS,SAAQ,OAAO,CAAC,OAAO,EAAmB,CAAC,wCAAwC,CAAC;CAAG;AAE7G;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAwC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA","sourcesContent":["/**\n * Engine-private Jujutsu authority.\n *\n * Action bodies resolve the public `Jj` tag from their guarded host context.\n * Snapshot, restore, and diff bookkeeping resolve this distinct tag instead,\n * so an engine operation never grants the same authority to user code.\n *\n * @since 1.0.0\n */\n\nimport { Jj } from \"@smthrs/kernel\"\nimport * as Context from \"effect/Context\"\nimport * as Effect from \"effect/Effect\"\nimport * as Layer from \"effect/Layer\"\n\n/**\n * Engine-owned repository operations, absent from public action context.\n *\n * @since 1.0.0\n * @category services\n */\nexport class EngineJj extends Context.Service<EngineJj, Jj.Jj>()(\"@smthrs/engine-store/internal/EngineJj\") {}\n\n/**\n * Captures the current public Jj implementation under the private engine tag.\n *\n * @since 1.0.0\n * @category layers\n */\nexport const layerFromJj: Layer.Layer<EngineJj, never, Jj.Jj> = Layer.effect(EngineJj, Effect.map(Jj.Jj, EngineJj.of))\n"]}

package/dist/esm/internal/EngineStateSchema.d.ts

@@ -0,0 +1,68 @@
+/**
+ * The schema objects `DurableEngineState` creates outside the journal
+ * migration, and the inventory of what porting them to another
+ * dialect costs.
+ *
+ * Each durable package owns its migration ladder. Spawn edges and their GC
+ * trigger moved into engine-store migration 0006. The remaining
+ * statements are engine-store-owned storage created idempotently at
+ * construction instead (issues #40/#41/#79/#81). That is a deliberate lane
+ * boundary, not an oversight — but it left the statements invisible to the
+ * pg-porting plan in the database roadmap, which
+ * scoped only the journal migration's SQLite-specific DDL. Declaring them here
+ * makes the inventory machine-readable: a test diffs the database's schema
+ * objects across `make` against this list, so no engine-owned statement can
+ * be added without appearing in the porting inventory (issue #92).
+ *
+ * @since 0.1.0
+ */
+import type { Service as WriterService } from "@smthrs/database/DurableWriter";
+import * as Effect from "effect/Effect";
+import type * as SqlClient from "effect/unstable/sql/SqlClient";
+/**
+ * SQL dialects a statement is known to be accepted by, verbatim.
+ *
+ * @since 0.1.0
+ * @category models
+ */
+export type Dialect = "sqlite" | "postgres";
+/**
+ * One engine-store-owned schema object.
+ *
+ * @since 0.1.0
+ * @category models
+ */
+export interface Statement {
+    /** The schema object's name, as it appears in the catalog. */
+    readonly name: string;
+    /** Why the object exists, by issue. */
+    readonly reason: string;
+    /**
+     * Dialects that accept this statement unchanged. A statement listing only
+     * `"sqlite"` must be rewritten before a Postgres/PGlite `Database` layer
+     * can construct this service — `make` pipes every one of them through
+     * `Effect.orDie`, so an unported statement is a construction-time defect,
+     * not a recoverable error.
+     */
+    readonly dialects: ReadonlyArray<Dialect>;
+    readonly ddl: string;
+}
+/**
+ * The porting inventory: every engine-store-owned statement, in creation order.
+ *
+ * @since 0.1.0
+ * @category constants
+ */
+export declare const statements: ReadonlyArray<Statement>;
+/**
+ * Creates the engine-store-owned objects, idempotently, in inventory order.
+ *
+ * `flows_runs` must already exist — every query in this service assumes a
+ * migrated database, so `make` composes over one by construction. A read-only
+ * client installs nothing.
+ *
+ * @since 0.1.0
+ * @category constructors
+ */
+export declare const apply: (sql: SqlClient.SqlClient, writer: WriterService) => Effect.Effect<void>;
+//# sourceMappingURL=EngineStateSchema.d.ts.map

package/dist/esm/internal/EngineStateSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EngineStateSchema.d.ts","sourceRoot":"","sources":["../../../src/internal/EngineStateSchema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAC9E,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,SAAS,MAAM,+BAA+B,CAAA;AAE/D;;;;;GAKG;AACH,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAA;AAE3C;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,8DAA8D;IAC9D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,uCAAuC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,CAAA;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED;;;;;GAKG;AACH,eAAO,MAAM,UAAU,EAAE,aAAa,CAAC,SAAS,CAa/C,CAAA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,KAAK,GAAI,KAAK,SAAS,CAAC,SAAS,EAAE,QAAQ,aAAa,KAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAMvF,CAAA"}

package/dist/esm/internal/EngineStateSchema.js

@@ -0,0 +1,53 @@
+/**
+ * The schema objects `DurableEngineState` creates outside the journal
+ * migration, and the inventory of what porting them to another
+ * dialect costs.
+ *
+ * Each durable package owns its migration ladder. Spawn edges and their GC
+ * trigger moved into engine-store migration 0006. The remaining
+ * statements are engine-store-owned storage created idempotently at
+ * construction instead (issues #40/#41/#79/#81). That is a deliberate lane
+ * boundary, not an oversight — but it left the statements invisible to the
+ * pg-porting plan in the database roadmap, which
+ * scoped only the journal migration's SQLite-specific DDL. Declaring them here
+ * makes the inventory machine-readable: a test diffs the database's schema
+ * objects across `make` against this list, so no engine-owned statement can
+ * be added without appearing in the porting inventory (issue #92).
+ *
+ * @since 0.1.0
+ */
+import { isReadOnly } from "@smthrs/database/Dialect";
+import * as Effect from "effect/Effect";
+/**
+ * The porting inventory: every engine-store-owned statement, in creation order.
+ *
+ * @since 0.1.0
+ * @category constants
+ */
+export const statements = [
+    {
+        name: "flows_runs_stale_running_idx",
+        reason: "Serves the stale-running sweep's per-tick predicate (issue #79): `status = 'running' AND heartbeat_at_ms < cutoff`, ordered by heartbeat. A partial index keeps it tiny — only live running rows appear.",
+        // Partial indexes are valid Postgres since 9.5, so this one ports as-is.
+        dialects: ["sqlite", "postgres"],
+        ddl: `
+      CREATE INDEX IF NOT EXISTS flows_runs_stale_running_idx
+      ON flows_runs (heartbeat_at_ms)
+      WHERE status = 'running'
+    `
+    }
+];
+/**
+ * Creates the engine-store-owned objects, idempotently, in inventory order.
+ *
+ * `flows_runs` must already exist — every query in this service assumes a
+ * migrated database, so `make` composes over one by construction. A read-only
+ * client installs nothing.
+ *
+ * @since 0.1.0
+ * @category constructors
+ */
+export const apply = (sql, writer) => 
+// A read-only observer reads the schema it finds and installs nothing.
+isReadOnly(sql) ? Effect.void : Effect.forEach(statements, (statement) => writer.write(sql.unsafe(statement.ddl)).pipe(Effect.orDie), { discard: true });
+//# sourceMappingURL=EngineStateSchema.js.map

package/dist/esm/internal/EngineStateSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EngineStateSchema.js","sourceRoot":"","sources":["../../../src/internal/EngineStateSchema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAErD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAiCvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAA6B;IAClD;QACE,IAAI,EAAE,8BAA8B;QACpC,MAAM,EACJ,0MAA0M;QAC5M,yEAAyE;QACzE,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;QAChC,GAAG,EAAE;;;;KAIJ;KACF;CACF,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,GAAwB,EAAE,MAAqB,EAAuB,EAAE;AAC5F,uEAAuE;AACvE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAC5C,UAAU,EACV,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EACzE,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAA","sourcesContent":["/**\n * The schema objects `DurableEngineState` creates outside the journal\n * migration, and the inventory of what porting them to another\n * dialect costs.\n *\n * Each durable package owns its migration ladder. Spawn edges and their GC\n * trigger moved into engine-store migration 0006. The remaining\n * statements are engine-store-owned storage created idempotently at\n * construction instead (issues #40/#41/#79/#81). That is a deliberate lane\n * boundary, not an oversight — but it left the statements invisible to the\n * pg-porting plan in the database roadmap, which\n * scoped only the journal migration's SQLite-specific DDL. Declaring them here\n * makes the inventory machine-readable: a test diffs the database's schema\n * objects across `make` against this list, so no engine-owned statement can\n * be added without appearing in the porting inventory (issue #92).\n *\n * @since 0.1.0\n */\n\nimport { isReadOnly } from \"@smthrs/database/Dialect\"\nimport type { Service as WriterService } from \"@smthrs/database/DurableWriter\"\nimport * as Effect from \"effect/Effect\"\nimport type * as SqlClient from \"effect/unstable/sql/SqlClient\"\n\n/**\n * SQL dialects a statement is known to be accepted by, verbatim.\n *\n * @since 0.1.0\n * @category models\n */\nexport type Dialect = \"sqlite\" | \"postgres\"\n\n/**\n * One engine-store-owned schema object.\n *\n * @since 0.1.0\n * @category models\n */\nexport interface Statement {\n  /** The schema object's name, as it appears in the catalog. */\n  readonly name: string\n  /** Why the object exists, by issue. */\n  readonly reason: string\n  /**\n   * Dialects that accept this statement unchanged. A statement listing only\n   * `\"sqlite\"` must be rewritten before a Postgres/PGlite `Database` layer\n   * can construct this service — `make` pipes every one of them through\n   * `Effect.orDie`, so an unported statement is a construction-time defect,\n   * not a recoverable error.\n   */\n  readonly dialects: ReadonlyArray<Dialect>\n  readonly ddl: string\n}\n\n/**\n * The porting inventory: every engine-store-owned statement, in creation order.\n *\n * @since 0.1.0\n * @category constants\n */\nexport const statements: ReadonlyArray<Statement> = [\n  {\n    name: \"flows_runs_stale_running_idx\",\n    reason:\n      \"Serves the stale-running sweep's per-tick predicate (issue #79): `status = 'running' AND heartbeat_at_ms < cutoff`, ordered by heartbeat. A partial index keeps it tiny — only live running rows appear.\",\n    // Partial indexes are valid Postgres since 9.5, so this one ports as-is.\n    dialects: [\"sqlite\", \"postgres\"],\n    ddl: `\n      CREATE INDEX IF NOT EXISTS flows_runs_stale_running_idx\n      ON flows_runs (heartbeat_at_ms)\n      WHERE status = 'running'\n    `\n  }\n]\n\n/**\n * Creates the engine-store-owned objects, idempotently, in inventory order.\n *\n * `flows_runs` must already exist — every query in this service assumes a\n * migrated database, so `make` composes over one by construction. A read-only\n * client installs nothing.\n *\n * @since 0.1.0\n * @category constructors\n */\nexport const apply = (sql: SqlClient.SqlClient, writer: WriterService): Effect.Effect<void> =>\n  // A read-only observer reads the schema it finds and installs nothing.\n  isReadOnly(sql) ? Effect.void : Effect.forEach(\n    statements,\n    (statement) => writer.write(sql.unsafe(statement.ddl)).pipe(Effect.orDie),\n    { discard: true }\n  )\n"]}

package/dist/esm/internal/ExecutionSnapshotRead.d.ts

@@ -0,0 +1,162 @@
+/**
+ * Shared transactional execution decoding.
+ *
+ * @since 1.0.0
+ */
+import * as Sha256 from "@smthrs/crypto/Sha256";
+import { RunStoreError } from "@smthrs/run-store/RunStore";
+import { Effect, Schema } from "effect";
+import type * as SqlClient from "effect/unstable/sql/SqlClient";
+import type { Batch } from "../ExecutionSnapshot.ts";
+/**
+ * Non-negative safe integer for timestamps and revisions.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export declare const Natural: Schema.Int;
+/**
+ * Bounded identifier with a durable text encoding.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export declare const Identifier: Schema.NonEmptyString;
+/**
+ * Engine database source identity.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export declare const Source: Schema.String;
+/**
+ * Source identity and observed high-water mark.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export declare const Position: Schema.Struct<{
+    readonly source: Schema.String;
+    readonly revision: Schema.Int;
+}>;
+/**
+ * Source identity and observed high-water mark.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export type Position = typeof Position.Type;
+/**
+ * A deferred read transaction on the reserved engine connection. The normal
+ * writable client's transaction starts IMMEDIATE; a read needs only SQLite's
+ * snapshot and must allow a WAL writer to commit while it reads. PostgreSQL
+ * reads at REPEATABLE READ so every statement shares the snapshot the position
+ * was read from; READ COMMITTED would let a concurrent commit make a row look
+ * newer than its position. Reuse the SQL
+ * client's transaction service to join an existing transaction. No read body
+ * exposes a mutation callback. Connection reservation and interruption release
+ * remain scoped, including when BEGIN or the read fails.
+ * @since 1.0.0
+ * @private
+ */
+export declare const transaction: <A, E, R>(sql: SqlClient.SqlClient, effect: Effect.Effect<A, E, R>) => Effect.Effect<A, import("effect/unstable/sql/SqlError").SqlError | E, R>;
+/**
+ * Preserves failure causes and interruption at the read boundary.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export declare const boundary: <A, E, R>(method: string, effect: Effect.Effect<A, E, R>) => Effect.Effect<A, RunStoreError, R>;
+/**
+ * Decodes stored SQL values with the original schema error.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export declare const decode: <S extends Schema.Top>(schema: S, input: unknown) => Effect.Effect<S["Type"], RunStoreError, S["DecodingServices"]>;
+/**
+ * Reads the engine database identity and revision.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export declare const position: (sql: SqlClient.SqlClient) => Effect.Effect<{
+    readonly source: string;
+    readonly revision: number;
+}, import("effect/unstable/sql/SqlError").SqlError | RunStoreError, never>;
+/**
+ * Structured waiting condition; nullable fields preserve older unknown values.
+ * The opaque wake token leaves the engine only as its SHA-256 `tokenDigest`,
+ * the same digest `ExecutionFacts` records: a reader may correlate a wait but
+ * never holds the address that resolves it.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export interface Waiting {
+    readonly kind: "timer" | "signal" | "approval" | "quota" | "human" | "other";
+    readonly reason: string;
+    readonly wakeAtMs: number | null;
+    readonly tokenDigest: Sha256.Digest | null;
+    readonly request?: typeof Schema.Json.Type | undefined;
+}
+/**
+ * Page-scoped lifecycle fields and indexed earliest spawn edge.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export declare const selectColumns = "r.*, c.revision, c.deleted,\n  (SELECT parent_id FROM flows_run_parents WHERE child_id = r.run_id ORDER BY seq, parent_id LIMIT 1) AS spawn_parent_id,\n  (SELECT seq FROM flows_run_parents WHERE child_id = r.run_id ORDER BY seq, parent_id LIMIT 1) AS spawn_seq";
+/**
+ * Decodes a run row and validates observation invariants.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export declare const observed: (input: unknown, at: Position) => Effect.Effect<{
+    _tag: "Observed";
+    runId: string;
+    source: string;
+    revision: number;
+    status: "running" | "suspended" | "failed" | "completed" | "pending" | "cancelled";
+    flowName: string;
+    createdAtMs: number;
+    startedAtMs: number | null;
+    finishedAtMs: number | null;
+    parentRunId: string | null;
+    lineageId: string;
+    roundOrdinal: number;
+    cancellation: {
+        requestedAtMs: number | null;
+        acknowledgement: {
+            readonly observedAtMs: number;
+            readonly owner: {
+                readonly hostId: string;
+                readonly pid: number;
+                readonly nonce: string;
+            };
+        } | null;
+    };
+    waiting: {
+        request?: string | number | boolean | Schema.JsonArray | Schema.JsonObject;
+        kind: "approval" | "human" | "timer" | "signal" | "quota" | "other";
+        reason: string;
+        wakeAtMs: number | null;
+        tokenDigest: (string & import("effect/Brand").Brand<"@smthrs/crypto/Sha256/Digest">) | null;
+    } | null;
+}, RunStoreError, never>;
+/**
+ * The result of a successful execution observation.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export type Observed = Effect.Success<ReturnType<typeof observed>>;
+/**
+ * Validates source, identity, ordering and revision coherence at the batch boundary.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export declare const coherentBatch: (runIds: ReadonlyArray<string>, batch: Batch) => Effect.Effect<Batch, RunStoreError>;
+//# sourceMappingURL=ExecutionSnapshotRead.d.ts.map

package/dist/esm/internal/ExecutionSnapshotRead.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionSnapshotRead.d.ts","sourceRoot":"","sources":["../../../src/internal/ExecutionSnapshotRead.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,MAAM,uBAAuB,CAAA;AAE/C,OAAO,EAAa,aAAa,EAAE,MAAM,4BAA4B,CAAA;AACrE,OAAO,EAAS,MAAM,EAAgB,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC5D,OAAO,KAAK,KAAK,SAAS,MAAM,+BAA+B,CAAA;AAC/D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAGpD;;;;;GAKG;AACH,eAAO,MAAM,OAAO,YAAuF,CAAA;AAC3G;;;;;GAKG;AACH,eAAO,MAAM,UAAU,uBAKtB,CAAA;AACD;;;;;GAKG;AACH,eAAO,MAAM,MAAM,eAA0D,CAAA;AAC7E;;;;;GAKG;AACH,eAAO,MAAM,QAAQ;;;EAAuD,CAAA;AAC5E;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAA;AAE3C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,WAAW,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC,SAAS,EAAE,QAAQ,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,6EAiB1F,CAAA;AAEH;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,MAAM,EAAE,QAAQ,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAY/G,CAAA;AAEL;;;;;GAKG;AACH,eAAO,MAAM,MAAM,GAAI,CAAC,SAAS,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,OAAO,OAAO,mEAQlE,CAAA;AAEJ;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,GAAI,KAAK,SAAS,CAAC,SAAS;;;0EAG9C,CAAA;AAkCH;;;;;;;;GAQG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAA;IAC5E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,SAAS,CAAA;CACvD;AAiBD;;;;;GAKG;AACH,eAAO,MAAM,aAAa,yQAEmF,CAAA;AAE7G;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,GAAI,OAAO,OAAO,EAAE,IAAI,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAkDjD,CAAA;AAEJ;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAA;AAElE;;;;;GAKG;AACH,eAAO,MAAM,aAAa,GAAI,QAAQ,aAAa,CAAC,MAAM,CAAC,EAAE,OAAO,KAAK,KAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAmB7G,CAAA"}

package/dist/esm/internal/ExecutionSnapshotRead.js

@@ -0,0 +1,218 @@
+/**
+ * Shared transactional execution decoding.
+ *
+ * @since 1.0.0
+ */
+import * as Sha256 from "@smthrs/crypto/Sha256";
+import { OwnerId } from "@smthrs/journal/OwnerId";
+import { RunStatus, RunStoreError } from "@smthrs/run-store/RunStore";
+import { Cause, Effect, Exit, Option, Schema } from "effect";
+import { RunState } from "../RunState.js";
+/**
+ * Non-negative safe integer for timestamps and revisions.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export const Natural = Schema.Int.check(Schema.isBetween({ minimum: 0, maximum: Number.MAX_SAFE_INTEGER }));
+/**
+ * Bounded identifier with a durable text encoding.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export const Identifier = Schema.NonEmptyString.check(Schema.isMaxLength(1024), Schema.makeFilter((value) => !value.includes("\0") && !/[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/.test(value)));
+/**
+ * Engine database source identity.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export const Source = Schema.String.check(Schema.isPattern(/^[0-9a-f]{32}$/));
+/**
+ * Source identity and observed high-water mark.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export const Position = Schema.Struct({ source: Source, revision: Natural });
+/**
+ * A deferred read transaction on the reserved engine connection. The normal
+ * writable client's transaction starts IMMEDIATE; a read needs only SQLite's
+ * snapshot and must allow a WAL writer to commit while it reads. PostgreSQL
+ * reads at REPEATABLE READ so every statement shares the snapshot the position
+ * was read from; READ COMMITTED would let a concurrent commit make a row look
+ * newer than its position. Reuse the SQL
+ * client's transaction service to join an existing transaction. No read body
+ * exposes a mutation callback. Connection reservation and interruption release
+ * remain scoped, including when BEGIN or the read fails.
+ * @since 1.0.0
+ * @private
+ */
+export const transaction = (sql, effect) => Effect.flatMap(Effect.serviceOption(sql.transactionService), (existing) => Option.isSome(existing) ? effect : Effect.scoped(Effect.gen(function* () {
+    const connection = yield* sql.reserve;
+    return yield* Effect.acquireUseRelease(connection.executeUnprepared(sql.onDialectOrElse({ pg: () => "BEGIN ISOLATION LEVEL REPEATABLE READ READ ONLY", orElse: () => "BEGIN" }), [], undefined), () => effect.pipe(Effect.provideService(sql.transactionService, [connection, 0])), (_, exit) => connection.executeUnprepared(Exit.isSuccess(exit) ? "COMMIT" : "ROLLBACK", [], undefined).pipe(Effect.orDie));
+})));
+/**
+ * Preserves failure causes and interruption at the read boundary.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export const boundary = (method, effect) => effect.pipe(Effect.catchCause((cause) => {
+    if (Cause.hasInterruptsOnly(cause))
+        return Effect.failCause(cause);
+    const original = Cause.squash(cause);
+    return Effect.fail(original instanceof RunStoreError ? original : new RunStoreError({
+        method,
+        code: "persistence_failed",
+        message: "engine execution observation failed",
+        cause: original
+    }));
+}));
+/**
+ * Decodes stored SQL values with the original schema error.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export const decode = (schema, input) => Schema.decodeUnknownEffect(schema)(input).pipe(Effect.mapError((cause) => new RunStoreError({
+    method: "ExecutionSnapshot.decode",
+    code: "decode_failed",
+    message: "stored execution observation is malformed",
+    cause
+})));
+/**
+ * Reads the engine database identity and revision.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export const position = (sql) => sql `SELECT source, revision FROM flows_run_source WHERE singleton = 1`.pipe(Effect.flatMap((rows) => decode(Position, rows[0])));
+const Row = Schema.Struct({
+    run_id: Identifier,
+    status: RunStatus,
+    created_at_ms: Natural,
+    started_at_ms: Schema.NullOr(Natural),
+    finished_at_ms: Schema.NullOr(Natural),
+    owner_host_id: Schema.NullOr(Identifier),
+    owner_pid: Schema.NullOr(Natural),
+    owner_nonce: Schema.NullOr(Identifier),
+    heartbeat_at_ms: Schema.NullOr(Natural),
+    state_json: Schema.fromJsonString(RunState),
+    parent_run_id: Schema.NullOr(Identifier),
+    spawn_parent_id: Schema.NullOr(Identifier),
+    spawn_seq: Schema.NullOr(Natural),
+    execution_parent_id: Schema.NullOr(Identifier),
+    lineage_id: Schema.NullOr(Identifier),
+    round_ordinal: Schema.NullOr(Natural),
+    cancel_requested_at_ms: Schema.NullOr(Natural),
+    cancel_acknowledgement_json: Schema.NullOr(Schema.fromJsonString(Schema.Struct({
+        observedAtMs: Natural,
+        owner: OwnerId
+    }))),
+    // These opaque values use DurableEngineState's existing non-empty-string
+    // contract. They are not run IDs and must not acquire an identifier ceiling.
+    waiting_reason: Schema.NullOr(Schema.NonEmptyString),
+    waiting_wake_at_ms: Schema.NullOr(Natural),
+    waiting_token: Schema.NullOr(Schema.NonEmptyString),
+    waiting_request: Schema.optional(Schema.NullOr(Schema.fromJsonString(Schema.Json))),
+    revision: Natural,
+    deleted: Schema.Literal(0)
+});
+const waitingKind = (reason) => {
+    switch (reason) {
+        case "timer":
+        case "approval":
+        case "quota":
+        case "human":
+            return reason;
+        case "event":
+        case "signal":
+            return "signal";
+        default:
+            return "other";
+    }
+};
+/**
+ * Page-scoped lifecycle fields and indexed earliest spawn edge.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export const selectColumns = `r.*, c.revision, c.deleted,
+  (SELECT parent_id FROM flows_run_parents WHERE child_id = r.run_id ORDER BY seq, parent_id LIMIT 1) AS spawn_parent_id,
+  (SELECT seq FROM flows_run_parents WHERE child_id = r.run_id ORDER BY seq, parent_id LIMIT 1) AS spawn_seq`;
+/**
+ * Decodes a run row and validates observation invariants.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export const observed = (input, at) => Effect.gen(function* () {
+    const row = yield* decode(Row, input);
+    const parentRunId = row.parent_run_id ?? row.spawn_parent_id;
+    const ownerFields = [row.owner_host_id, row.owner_pid, row.owner_nonce, row.heartbeat_at_ms];
+    const validOwner = row.status === "running"
+        ? ownerFields.every((value) => value !== null)
+        : ownerFields.every((value) => value === null);
+    if (!validOwner || row.revision === 0 || row.revision > at.revision ||
+        parentRunId !== row.execution_parent_id || parentRunId === row.run_id ||
+        (row.lineage_id === null) !== (row.round_ordinal === null) ||
+        (row.waiting_reason === null && (row.waiting_wake_at_ms !== null || row.waiting_token !== null ||
+            row.waiting_request !== undefined && row.waiting_request !== null)) ||
+        (row.cancel_acknowledgement_json !== null && row.cancel_requested_at_ms === null)) {
+        return yield* Effect.fail(new RunStoreError({
+            method: "ExecutionSnapshot.decode",
+            code: "decode_failed",
+            message: "stored execution observation violates its invariants",
+            cause: new Error("inconsistent execution identity, wait, cancellation or revision")
+        }));
+    }
+    return {
+        _tag: "Observed",
+        runId: row.run_id,
+        source: at.source,
+        revision: row.revision,
+        status: row.status,
+        flowName: row.state_json.flowName,
+        createdAtMs: row.created_at_ms,
+        startedAtMs: row.started_at_ms,
+        finishedAtMs: row.finished_at_ms,
+        parentRunId,
+        lineageId: row.lineage_id ?? row.run_id,
+        roundOrdinal: row.round_ordinal ?? 0,
+        cancellation: {
+            requestedAtMs: row.cancel_requested_at_ms,
+            acknowledgement: row.cancel_acknowledgement_json
+        },
+        waiting: row.waiting_reason === null ? null : {
+            kind: waitingKind(row.waiting_reason),
+            reason: row.waiting_reason,
+            wakeAtMs: row.waiting_wake_at_ms,
+            tokenDigest: row.waiting_token === null ? null : Sha256.digestSync(row.waiting_token),
+            ...(row.waiting_request === undefined || row.waiting_request === null ? {} : { request: row.waiting_request })
+        }
+    };
+});
+/**
+ * Validates source, identity, ordering and revision coherence at the batch boundary.
+ *
+ * @private
+ * @since 1.0.0
+ */
+export const coherentBatch = (runIds, batch) => {
+    const validPosition = Schema.is(Position);
+    if (!validPosition(batch) || batch.snapshots.length !== runIds.length ||
+        batch.snapshots.some((row, index) => !validPosition(row) || row.runId !== runIds[index] || row.source !== batch.source ||
+            row.revision > batch.revision)) {
+        return Effect.fail(new RunStoreError({
+            method: "ExecutionSnapshot.read",
+            code: "persistence_failed",
+            message: "stored execution batch is incoherent: source, identity, order or revision mismatch",
+            cause: undefined
+        }));
+    }
+    return Effect.succeed(batch);
+};
+//# sourceMappingURL=ExecutionSnapshotRead.js.map

package/dist/esm/internal/ExecutionSnapshotRead.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionSnapshotRead.js","sourceRoot":"","sources":["../../../src/internal/ExecutionSnapshotRead.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,MAAM,uBAAuB,CAAA;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AACrE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAG5D,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAA;AAC3G;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CACnD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EACxB,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1B,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,wEAAwE,CAAC,IAAI,CAAC,KAAK,CAAC,CAC/G,CACF,CAAA;AACD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAA;AAC7E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;AAS5E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAU,GAAwB,EAAE,MAA8B,EAAE,EAAE,CAC/F,MAAM,CAAC,OAAO,CACZ,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAC5C,CAAC,QAAQ,EAAE,EAAE,CACX,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACnE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAA;IACrC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,iBAAiB,CACpC,UAAU,CAAC,iBAAiB,CAC1B,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,iDAAiD,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,EAC3G,EAAE,EACF,SAAS,CACV,EACD,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EACjF,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CACV,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAC/G,CAAA;AACH,CAAC,CAAC,CAAC,CACN,CAAA;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAU,MAAc,EAAE,MAA8B,EAAsC,EAAE,CACtH,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE;IACtC,IAAI,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,KAA2B,CAAC,CAAA;IACxF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO,MAAM,CAAC,IAAI,CAChB,QAAQ,YAAY,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC;QAC/D,MAAM;QACN,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,qCAAqC;QAC9C,KAAK,EAAE,QAAQ;KAChB,CAAC,CACH,CAAA;AACH,CAAC,CAAC,CAAC,CAAA;AAEL;;;;;GAKG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAuB,MAAS,EAAE,KAAc,EAAE,EAAE,CACxE,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACvE,IAAI,aAAa,CAAC;IAChB,MAAM,EAAE,0BAA0B;IAClC,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,2CAA2C;IACpD,KAAK;CACN,CAAC,CACH,CAAC,CAAA;AAEJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAwB,EAAE,EAAE,CACnD,GAAG,CAAA,mEAAmE,CAAC,IAAI,CACzE,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CACpD,CAAA;AAEH,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;IACxB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,SAAS;IACjB,aAAa,EAAE,OAAO;IACtB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;IACrC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;IACtC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;IACtC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC;IAC3C,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;IACxC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;IAC1C,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;IACjC,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;IACrC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;IACrC,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;IAC9C,2BAA2B,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7E,YAAY,EAAE,OAAO;QACrB,KAAK,EAAE,OAAO;KACf,CAAC,CAAC,CAAC;IACJ,yEAAyE;IACzE,6EAA6E;IAC7E,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;IACpD,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;IAC1C,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;IACnD,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACnF,QAAQ,EAAE,OAAO;IACjB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAA;AAmBF,MAAM,WAAW,GAAG,CAAC,MAAc,EAAmB,EAAE;IACtD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO,CAAC;QACb,KAAK,UAAU,CAAC;QAChB,KAAK,OAAO,CAAC;QACb,KAAK,OAAO;YACV,OAAO,MAAM,CAAA;QACf,KAAK,OAAO,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAA;QACjB;YACE,OAAO,OAAO,CAAA;IAClB,CAAC;AACH,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;;6GAEgF,CAAA;AAE7G;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,EAAY,EAAE,EAAE,CACvD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACrC,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,eAAe,CAAA;IAC5D,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,eAAe,CAAC,CAAA;IAC5F,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,KAAK,SAAS;QACzC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;QAC9C,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAA;IAChD,IACE,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ;QAC/D,WAAW,KAAK,GAAG,CAAC,mBAAmB,IAAI,WAAW,KAAK,GAAG,CAAC,MAAM;QACrE,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC;QAC1D,CAAC,GAAG,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,kBAAkB,KAAK,IAAI,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI;YAC5F,GAAG,CAAC,eAAe,KAAK,SAAS,IAAI,GAAG,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC;QACrE,CAAC,GAAG,CAAC,2BAA2B,KAAK,IAAI,IAAI,GAAG,CAAC,sBAAsB,KAAK,IAAI,CAAC,EACjF,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,aAAa,CAAC;YAChB,MAAM,EAAE,0BAA0B;YAClC,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,sDAAsD;YAC/D,KAAK,EAAE,IAAI,KAAK,CAAC,iEAAiE,CAAC;SACpF,CAAC,CACH,CAAA;IACH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,UAAmB;QACzB,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,QAAQ;QACjC,WAAW,EAAE,GAAG,CAAC,aAAa;QAC9B,WAAW,EAAE,GAAG,CAAC,aAAa;QAC9B,YAAY,EAAE,GAAG,CAAC,cAAc;QAChC,WAAW;QACX,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM;QACvC,YAAY,EAAE,GAAG,CAAC,aAAa,IAAI,CAAC;QACpC,YAAY,EAAE;YACZ,aAAa,EAAE,GAAG,CAAC,sBAAsB;YACzC,eAAe,EAAE,GAAG,CAAC,2BAA2B;SACjD;QACD,OAAO,EAAE,GAAG,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5C,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC;YACrC,MAAM,EAAE,GAAG,CAAC,cAAc;YAC1B,QAAQ,EAAE,GAAG,CAAC,kBAAkB;YAChC,WAAW,EAAE,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC;YACrF,GAAG,CAAC,GAAG,CAAC,eAAe,KAAK,SAAS,IAAI,GAAG,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC;SAC/G;KACF,CAAA;AACH,CAAC,CAAC,CAAA;AAUJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAA6B,EAAE,KAAY,EAAuC,EAAE;IAChH,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAA;IACzC,IACE,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QACjE,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAClC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YACjF,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAC9B,EACD,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,aAAa,CAAC;YAChB,MAAM,EAAE,wBAAwB;YAChC,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,oFAAoF;YAC7F,KAAK,EAAE,SAAS;SACjB,CAAC,CACH,CAAA;IACH,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC9B,CAAC,CAAA","sourcesContent":["/**\n * Shared transactional execution decoding.\n *\n * @since 1.0.0\n */\n\nimport * as Sha256 from \"@smthrs/crypto/Sha256\"\nimport { OwnerId } from \"@smthrs/journal/OwnerId\"\nimport { RunStatus, RunStoreError } from \"@smthrs/run-store/RunStore\"\nimport { Cause, Effect, Exit, Option, Schema } from \"effect\"\nimport type * as SqlClient from \"effect/unstable/sql/SqlClient\"\nimport type { Batch } from \"../ExecutionSnapshot.ts\"\nimport { RunState } from \"../RunState.ts\"\n\n/**\n * Non-negative safe integer for timestamps and revisions.\n *\n * @private\n * @since 1.0.0\n */\nexport const Natural = Schema.Int.check(Schema.isBetween({ minimum: 0, maximum: Number.MAX_SAFE_INTEGER }))\n/**\n * Bounded identifier with a durable text encoding.\n *\n * @private\n * @since 1.0.0\n */\nexport const Identifier = Schema.NonEmptyString.check(\n  Schema.isMaxLength(1024),\n  Schema.makeFilter((value) =>\n    !value.includes(\"\\0\") && !/[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])|(?<![\\uD800-\\uDBFF])[\\uDC00-\\uDFFF]/.test(value)\n  )\n)\n/**\n * Engine database source identity.\n *\n * @private\n * @since 1.0.0\n */\nexport const Source = Schema.String.check(Schema.isPattern(/^[0-9a-f]{32}$/))\n/**\n * Source identity and observed high-water mark.\n *\n * @private\n * @since 1.0.0\n */\nexport const Position = Schema.Struct({ source: Source, revision: Natural })\n/**\n * Source identity and observed high-water mark.\n *\n * @private\n * @since 1.0.0\n */\nexport type Position = typeof Position.Type\n\n/**\n * A deferred read transaction on the reserved engine connection. The normal\n * writable client's transaction starts IMMEDIATE; a read needs only SQLite's\n * snapshot and must allow a WAL writer to commit while it reads. PostgreSQL\n * reads at REPEATABLE READ so every statement shares the snapshot the position\n * was read from; READ COMMITTED would let a concurrent commit make a row look\n * newer than its position. Reuse the SQL\n * client's transaction service to join an existing transaction. No read body\n * exposes a mutation callback. Connection reservation and interruption release\n * remain scoped, including when BEGIN or the read fails.\n * @since 1.0.0\n * @private\n */\nexport const transaction = <A, E, R>(sql: SqlClient.SqlClient, effect: Effect.Effect<A, E, R>) =>\n  Effect.flatMap(\n    Effect.serviceOption(sql.transactionService),\n    (existing) =>\n      Option.isSome(existing) ? effect : Effect.scoped(Effect.gen(function*() {\n        const connection = yield* sql.reserve\n        return yield* Effect.acquireUseRelease(\n          connection.executeUnprepared(\n            sql.onDialectOrElse({ pg: () => \"BEGIN ISOLATION LEVEL REPEATABLE READ READ ONLY\", orElse: () => \"BEGIN\" }),\n            [],\n            undefined\n          ),\n          () => effect.pipe(Effect.provideService(sql.transactionService, [connection, 0])),\n          (_, exit) =>\n            connection.executeUnprepared(Exit.isSuccess(exit) ? \"COMMIT\" : \"ROLLBACK\", [], undefined).pipe(Effect.orDie)\n        )\n      }))\n  )\n\n/**\n * Preserves failure causes and interruption at the read boundary.\n *\n * @private\n * @since 1.0.0\n */\nexport const boundary = <A, E, R>(method: string, effect: Effect.Effect<A, E, R>): Effect.Effect<A, RunStoreError, R> =>\n  effect.pipe(Effect.catchCause((cause) => {\n    if (Cause.hasInterruptsOnly(cause)) return Effect.failCause(cause as Cause.Cause<never>)\n    const original = Cause.squash(cause)\n    return Effect.fail(\n      original instanceof RunStoreError ? original : new RunStoreError({\n        method,\n        code: \"persistence_failed\",\n        message: \"engine execution observation failed\",\n        cause: original\n      })\n    )\n  }))\n\n/**\n * Decodes stored SQL values with the original schema error.\n *\n * @private\n * @since 1.0.0\n */\nexport const decode = <S extends Schema.Top>(schema: S, input: unknown) =>\n  Schema.decodeUnknownEffect(schema)(input).pipe(Effect.mapError((cause) =>\n    new RunStoreError({\n      method: \"ExecutionSnapshot.decode\",\n      code: \"decode_failed\",\n      message: \"stored execution observation is malformed\",\n      cause\n    })\n  ))\n\n/**\n * Reads the engine database identity and revision.\n *\n * @private\n * @since 1.0.0\n */\nexport const position = (sql: SqlClient.SqlClient) =>\n  sql`SELECT source, revision FROM flows_run_source WHERE singleton = 1`.pipe(\n    Effect.flatMap((rows) => decode(Position, rows[0]))\n  )\n\nconst Row = Schema.Struct({\n  run_id: Identifier,\n  status: RunStatus,\n  created_at_ms: Natural,\n  started_at_ms: Schema.NullOr(Natural),\n  finished_at_ms: Schema.NullOr(Natural),\n  owner_host_id: Schema.NullOr(Identifier),\n  owner_pid: Schema.NullOr(Natural),\n  owner_nonce: Schema.NullOr(Identifier),\n  heartbeat_at_ms: Schema.NullOr(Natural),\n  state_json: Schema.fromJsonString(RunState),\n  parent_run_id: Schema.NullOr(Identifier),\n  spawn_parent_id: Schema.NullOr(Identifier),\n  spawn_seq: Schema.NullOr(Natural),\n  execution_parent_id: Schema.NullOr(Identifier),\n  lineage_id: Schema.NullOr(Identifier),\n  round_ordinal: Schema.NullOr(Natural),\n  cancel_requested_at_ms: Schema.NullOr(Natural),\n  cancel_acknowledgement_json: Schema.NullOr(Schema.fromJsonString(Schema.Struct({\n    observedAtMs: Natural,\n    owner: OwnerId\n  }))),\n  // These opaque values use DurableEngineState's existing non-empty-string\n  // contract. They are not run IDs and must not acquire an identifier ceiling.\n  waiting_reason: Schema.NullOr(Schema.NonEmptyString),\n  waiting_wake_at_ms: Schema.NullOr(Natural),\n  waiting_token: Schema.NullOr(Schema.NonEmptyString),\n  waiting_request: Schema.optional(Schema.NullOr(Schema.fromJsonString(Schema.Json))),\n  revision: Natural,\n  deleted: Schema.Literal(0)\n})\n\n/**\n * Structured waiting condition; nullable fields preserve older unknown values.\n * The opaque wake token leaves the engine only as its SHA-256 `tokenDigest`,\n * the same digest `ExecutionFacts` records: a reader may correlate a wait but\n * never holds the address that resolves it.\n *\n * @private\n * @since 1.0.0\n */\nexport interface Waiting {\n  readonly kind: \"timer\" | \"signal\" | \"approval\" | \"quota\" | \"human\" | \"other\"\n  readonly reason: string\n  readonly wakeAtMs: number | null\n  readonly tokenDigest: Sha256.Digest | null\n  readonly request?: typeof Schema.Json.Type | undefined\n}\n\nconst waitingKind = (reason: string): Waiting[\"kind\"] => {\n  switch (reason) {\n    case \"timer\":\n    case \"approval\":\n    case \"quota\":\n    case \"human\":\n      return reason\n    case \"event\":\n    case \"signal\":\n      return \"signal\"\n    default:\n      return \"other\"\n  }\n}\n\n/**\n * Page-scoped lifecycle fields and indexed earliest spawn edge.\n *\n * @private\n * @since 1.0.0\n */\nexport const selectColumns = `r.*, c.revision, c.deleted,\n  (SELECT parent_id FROM flows_run_parents WHERE child_id = r.run_id ORDER BY seq, parent_id LIMIT 1) AS spawn_parent_id,\n  (SELECT seq FROM flows_run_parents WHERE child_id = r.run_id ORDER BY seq, parent_id LIMIT 1) AS spawn_seq`\n\n/**\n * Decodes a run row and validates observation invariants.\n *\n * @private\n * @since 1.0.0\n */\nexport const observed = (input: unknown, at: Position) =>\n  Effect.gen(function*() {\n    const row = yield* decode(Row, input)\n    const parentRunId = row.parent_run_id ?? row.spawn_parent_id\n    const ownerFields = [row.owner_host_id, row.owner_pid, row.owner_nonce, row.heartbeat_at_ms]\n    const validOwner = row.status === \"running\"\n      ? ownerFields.every((value) => value !== null)\n      : ownerFields.every((value) => value === null)\n    if (\n      !validOwner || row.revision === 0 || row.revision > at.revision ||\n      parentRunId !== row.execution_parent_id || parentRunId === row.run_id ||\n      (row.lineage_id === null) !== (row.round_ordinal === null) ||\n      (row.waiting_reason === null && (row.waiting_wake_at_ms !== null || row.waiting_token !== null ||\n        row.waiting_request !== undefined && row.waiting_request !== null)) ||\n      (row.cancel_acknowledgement_json !== null && row.cancel_requested_at_ms === null)\n    ) {\n      return yield* Effect.fail(\n        new RunStoreError({\n          method: \"ExecutionSnapshot.decode\",\n          code: \"decode_failed\",\n          message: \"stored execution observation violates its invariants\",\n          cause: new Error(\"inconsistent execution identity, wait, cancellation or revision\")\n        })\n      )\n    }\n    return {\n      _tag: \"Observed\" as const,\n      runId: row.run_id,\n      source: at.source,\n      revision: row.revision,\n      status: row.status,\n      flowName: row.state_json.flowName,\n      createdAtMs: row.created_at_ms,\n      startedAtMs: row.started_at_ms,\n      finishedAtMs: row.finished_at_ms,\n      parentRunId,\n      lineageId: row.lineage_id ?? row.run_id,\n      roundOrdinal: row.round_ordinal ?? 0,\n      cancellation: {\n        requestedAtMs: row.cancel_requested_at_ms,\n        acknowledgement: row.cancel_acknowledgement_json\n      },\n      waiting: row.waiting_reason === null ? null : {\n        kind: waitingKind(row.waiting_reason),\n        reason: row.waiting_reason,\n        wakeAtMs: row.waiting_wake_at_ms,\n        tokenDigest: row.waiting_token === null ? null : Sha256.digestSync(row.waiting_token),\n        ...(row.waiting_request === undefined || row.waiting_request === null ? {} : { request: row.waiting_request })\n      }\n    }\n  })\n\n/**\n * The result of a successful execution observation.\n *\n * @private\n * @since 1.0.0\n */\nexport type Observed = Effect.Success<ReturnType<typeof observed>>\n\n/**\n * Validates source, identity, ordering and revision coherence at the batch boundary.\n *\n * @private\n * @since 1.0.0\n */\nexport const coherentBatch = (runIds: ReadonlyArray<string>, batch: Batch): Effect.Effect<Batch, RunStoreError> => {\n  const validPosition = Schema.is(Position)\n  if (\n    !validPosition(batch) || batch.snapshots.length !== runIds.length ||\n    batch.snapshots.some((row, index) =>\n      !validPosition(row) || row.runId !== runIds[index] || row.source !== batch.source ||\n      row.revision > batch.revision\n    )\n  ) {\n    return Effect.fail(\n      new RunStoreError({\n        method: \"ExecutionSnapshot.read\",\n        code: \"persistence_failed\",\n        message: \"stored execution batch is incoherent: source, identity, order or revision mismatch\",\n        cause: undefined\n      })\n    )\n  }\n  return Effect.succeed(batch)\n}\n"]}