@vendure/cloud 0.4.0 → 0.5.0-dev.20261016123507.ge07a06e

package/dist/local-durable-execution-plugin.js

@@ -1,32 +1,304 @@
-import { CLOUD_PLUGIN_COMPATIBILITY } from "@vendure/cloud-config";
+import { realpathSync } from "node:fs";
+import { createRequire } from "node:module";
+import { join } from "node:path";
+import { CLOUD_PLUGIN_COMPATIBILITY, DurableWorkflowNotFoundError, durableWorkflowSteps, installCloudDurableWorkflows, listDurableWorkflowStatuses, readDurableWorkflowStatus, } from "@vendure/cloud-config";
 import { PluginCommonModule, VendurePlugin } from "@vendure/core";
-// The local runtime's answer to the durable-execution capability, and today it is an empty module.
-//
-// **It runs nothing, and there is nothing yet for it to run.** `declareTenantWorkflows` is in
-// `@vendure/cloud-config`, so a customer can declare a workflow here and on the platform alike. The
-// half that starts one is not reachable from either: the managed submission path lives on
-// `TenantDurableExecution` in `@vendure-cloud/cloud-runtime`, which a customer never installs, and
-// nothing in this package offers an equivalent. So a declared workflow is a declaration and no more,
-// whichever runtime reads it, and this plugin exists to keep the capability inventory complete
-// rather than to behave.
-//
-// **What it will do when the submission half lands is run the workflow and record nothing.** On the
-// platform a workflow is a row in a `dbos` schema: it survives the process, resumes from its last
-// completed step, and starts exactly once for a given id. A local substitute cannot be that. Running
-// a real executor here was considered and is worse — `@vendure/cloud` supervises the server, the
-// worker and the migration run, so a substitute that created the schema would reproduce at laptop
-// scale the DDL race ADR-0060 removes on the platform side, and it would put the durable execution
-// SDK in the dependency tree of every application that installs this package.
-//
-// So recovery is not testable locally, by design, and the deployed environment is where it is
-// exercised. When the submission half lands, this header says what it does instead of what it will.
+const SCHEMA = "dbos";
+const QUEUE = "vendure-cloud.tenant-workflows";
+const APPLICATION_NAME = "vendure-dev";
+// Duplicates `TERMINAL_WORKFLOW_STATUSES` and the query in
+// `packages/cloud-runtime/src/durable-execution/unfinished-runs.ts`, which this published package
+// cannot import. `local-durable-workflows.test.ts` fails when the status lists differ.
+export const TERMINAL_WORKFLOW_STATUSES = [
+    "SUCCESS",
+    "ERROR",
+    "CANCELLED",
+    "MAX_RECOVERY_ATTEMPTS_EXCEEDED",
+];
+const UNFINISHED_RUNS_SQL = `
+  SELECT CASE WHEN COALESCE(class_name, '') = '' THEN name ELSE class_name || '.' || name END
+           AS workflow,
+         count(*)::int AS count
+    FROM ${SCHEMA}.workflow_status
+   WHERE (application_name = $1 OR application_name IS NULL)
+     AND status <> ALL ($2::text[])
+   GROUP BY 1`;
+// Fixed so a restarted worker recovers the workflows the previous one left running.
+const APPLICATION_VERSION = "local";
+export class LocalDurableWorkflowError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "LocalDurableWorkflowError";
+    }
+}
+const SDK = "@dbos-inc/dbos-sdk";
+// Resolved from this package. `durable-workflows.mdx` requires the project to install one copy, so
+// the copy found here is the one the application registers its workflows with. A second copy is
+// refused, because workflows registered on it would never run.
+export function findDbosSdk(resolveHere, resolveFromProject) {
+    const here = resolveOrNull(resolveHere);
+    const project = resolveOrNull(resolveFromProject);
+    if (here === null) {
+        if (project === null)
+            return null;
+        throw new LocalDurableWorkflowError(`Vendure Cloud: this project installs \`${SDK}\` at ${project}, and \`@vendure/cloud\` cannot resolve it from where it is installed, so durable workflows cannot run. Install both in the same \`node_modules\`; with pnpm, set \`node-linker=hoisted\` in \`.npmrc\`.\n`);
+    }
+    if (project !== null && realpathSync(project) !== realpathSync(here)) {
+        throw new LocalDurableWorkflowError(`Vendure Cloud: this project resolves two copies of \`${SDK}\`, at ${project} and at ${here}. Workflows registered with the first would never run. Install one copy; with pnpm, set \`node-linker=hoisted\` in \`.npmrc\`.\n`);
+    }
+    return here;
+}
+function resolveOrNull(resolve) {
+    try {
+        return resolve(SDK);
+    }
+    catch {
+        return null;
+    }
+}
+const requireHere = createRequire(import.meta.url);
+function sdkPath() {
+    return findDbosSdk(requireHere.resolve, createRequire(join(process.cwd(), "package.json")).resolve);
+}
+// Loading the SDK replaces `DBOS.setConfig` and `DBOS.launch` with refusals and keeps the originals
+// for the worker's launch.
+let sdk;
+function loadSdk() {
+    if (sdk !== undefined)
+        return sdk;
+    const path = sdkPath();
+    if (path === null) {
+        sdk = null;
+        return sdk;
+    }
+    const module = requireHere(path);
+    const { DBOS } = module;
+    sdk = { module, setConfig: DBOS.setConfig, launch: DBOS.launch };
+    DBOS.setConfig = () => {
+        throw launcherRefusal("DBOS.setConfig()");
+    };
+    DBOS.launch = async () => {
+        throw launcherRefusal("DBOS.launch()");
+    };
+    return sdk;
+}
+// Called before the Cloud Config is loaded, so a launch at a module's top level fails at its call.
+export function refuseOtherLocalDbosLaunchers() {
+    loadSdk();
+}
+// Resolves without loading, so the announcement patches nothing and agrees with the launch.
+export function localDurableWorkflowsAvailable() {
+    return sdkPath() !== null;
+}
+function requireSdk() {
+    const loaded = loadSdk();
+    if (!loaded) {
+        throw new LocalDurableWorkflowError("Vendure Cloud: durable workflows need `@dbos-inc/dbos-sdk`, and this project does not install it. Add it as a development dependency.\n");
+    }
+    return loaded.module;
+}
+// Duplicates `packages/cloud-runtime/src/durable-execution/dbos-ownership.ts`, which this published
+// package cannot import.
+function launcherRefusal(call) {
+    return new LocalDurableWorkflowError(`Vendure Cloud: ${call} was called by code in this application. Vendure Cloud configures and launches durable execution itself, in the local worker. Remove the call, or run the plugin that makes it in its Vendure Cloud hosted mode. Refusing to boot.\n`);
+}
+function systemDatabaseUrl(database) {
+    const user = encodeURIComponent(database.username);
+    const password = encodeURIComponent(database.password);
+    return `postgresql://${user}:${password}@${database.host}:${database.port}/${encodeURIComponent(database.database)}`;
+}
+class LocalDurableWorkflows {
+    database;
+    clientPromise;
+    // A client built against one database is kept until the application closes, so a second database
+    // while it is open is refused.
+    target(database) {
+        if (this.clientPromise &&
+            this.database &&
+            systemDatabaseUrl(this.database) !== systemDatabaseUrl(database)) {
+            throw new LocalDurableWorkflowError("Vendure Cloud: this process composed the local runtime against a second database while durable workflows were in use on the first. Close the first application before composing another.\n");
+        }
+        this.database = database;
+    }
+    systemDatabaseUrl() {
+        if (!this.database) {
+            throw new LocalDurableWorkflowError("Vendure Cloud: durable workflows were used before the local runtime composed its configuration, so there is no database to run them on.\n");
+        }
+        return systemDatabaseUrl(this.database);
+    }
+    async start(transaction, options, ...args) {
+        if (options.workflowId.trim() === "") {
+            throw new LocalDurableWorkflowError("Vendure Cloud: a durable workflow needs an id of your own choosing, which is what stops a retried request starting a second one. Pass a value derived from the work itself.\n");
+        }
+        const client = await transactionClient(transaction);
+        await (await this.connect())
+            .enqueueInTransaction(client, {
+            queueName: QUEUE,
+            workflowName: options.workflowName,
+            ...(options.workflowClassName ? { workflowClassName: options.workflowClassName } : {}),
+            ...(options.workflowConfigName ? { workflowConfigName: options.workflowConfigName } : {}),
+            workflowID: options.workflowId,
+            appVersion: APPLICATION_VERSION,
+        }, ...args)
+            .catch(explainMissingSchema);
+    }
+    async send(transaction, workflowId, message, options = {}) {
+        const client = await transactionClient(transaction);
+        await (await this.connect())
+            .sendInTransaction(client, workflowId, message, options.topic, options.idempotencyKey)
+            .catch(explainMissingSchema);
+    }
+    async unfinishedRuns() {
+        const rows = await this.query(UNFINISHED_RUNS_SQL, [
+            APPLICATION_NAME,
+            [...TERMINAL_WORKFLOW_STATUSES],
+        ]);
+        return Object.fromEntries(rows.map(({ workflow, count }) => [workflow, count]));
+    }
+    async retrieve(workflowId) {
+        return this.withDatabase((database) => readDurableWorkflowStatus(database, SCHEMA, APPLICATION_NAME, workflowId));
+    }
+    async steps(workflowId) {
+        return durableWorkflowSteps(await (await this.connect()).listWorkflowSteps(workflowId));
+    }
+    async event(workflowId, key, options = {}) {
+        return (await this.connect()).getEvent(workflowId, key, options);
+    }
+    // The SDK's handle waits for a row that never appears when no run has the id.
+    async result(workflowId) {
+        if (!(await this.retrieve(workflowId)))
+            throw new DurableWorkflowNotFoundError(workflowId);
+        return (await this.connect()).retrieveWorkflow(workflowId).getResult();
+    }
+    async list(filter = {}) {
+        return this.withDatabase((database) => listDurableWorkflowStatuses(database, SCHEMA, APPLICATION_NAME, filter));
+    }
+    // The SDK's cancel skips SUCCESS and ERROR only, so a run that finished any other way, or does
+    // not exist, is left alone here first. A run that recovery moves to MAX_RECOVERY_ATTEMPTS_EXCEEDED
+    // between the read and the update is still marked CANCELLED.
+    async cancel(workflowId, options = {}) {
+        const run = await this.retrieve(workflowId);
+        if (!run || TERMINAL_WORKFLOW_STATUSES.some((status) => status === run.status))
+            return;
+        await (await this.connect()).cancelWorkflow(workflowId, {
+            cancelChildren: options.cancelChildren ?? false,
+        });
+    }
+    async query(sql, values) {
+        return this.withDatabase(async (database) => (await database.query(sql, values)).rows);
+    }
+    // `pg` is loaded here because the local runtime checks it is installed before composing.
+    async withDatabase(work) {
+        requireSdk();
+        const { Client } = requireHere("pg");
+        const client = new Client({ connectionString: this.systemDatabaseUrl() });
+        await client.connect();
+        try {
+            return await work(client).catch(explainMissingSchema);
+        }
+        finally {
+            await client.end();
+        }
+    }
+    // Cached as a promise so two concurrent first submissions share one client.
+    async connect() {
+        if (this.clientPromise)
+            return this.clientPromise;
+        this.clientPromise = requireSdk().DBOSClient.create({
+            systemDatabaseUrl: this.systemDatabaseUrl(),
+            systemDatabaseSchemaName: SCHEMA,
+            applicationName: APPLICATION_NAME,
+        });
+        try {
+            return await this.clientPromise;
+        }
+        catch (error) {
+            this.clientPromise = undefined;
+            throw error;
+        }
+    }
+    async close() {
+        const pending = this.clientPromise;
+        this.clientPromise = undefined;
+        const client = await pending?.catch(() => undefined);
+        await client?.destroy();
+    }
+}
+// The worker's first launch creates the `dbos` schema, so on a new database a submission made before
+// it fails on a missing table (PostgreSQL code 42P01).
+export function explainMissingSchema(error) {
+    if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "42P01") {
+        throw new LocalDurableWorkflowError("Vendure Cloud: the local worker has not launched durable execution on this database yet, so its workflow tables do not exist. Wait for the worker to start, then try again.\n", { cause: error });
+    }
+    throw error;
+}
+// Duplicates `packages/cloud-runtime/src/durable-execution/query-runner-client.ts`, which this
+// published package cannot import.
+// `QueryRunner.connect()` inside an open transaction returns the `pg` client already checked out
+// for it, so the workflow row commits or rolls back with the caller's writes.
+async function transactionClient(transaction) {
+    const queryRunner = transaction.queryRunner;
+    if (!queryRunner?.isTransactionActive) {
+        throw new LocalDurableWorkflowError("Vendure Cloud: a durable workflow must be started or signalled inside an open transaction, so that the data it acts on and the workflow or its signal are committed together. Start or signal it with the entity manager of a transaction, such as `TransactionalConnection.getRepository(ctx, Entity).manager` inside `withTransaction`.\n");
+    }
+    const connection = await queryRunner.connect();
+    if (!isPgClient(connection)) {
+        throw new LocalDurableWorkflowError("Vendure Cloud: the local database connection did not yield the PostgreSQL client a durable workflow is started on.\n");
+    }
+    return connection;
+}
+function isPgClient(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const candidate = value;
+    return typeof candidate.query === "function";
+}
+const host = new LocalDurableWorkflows();
+let hostInstalled = false;
+// Every run mode installs the host before composing, so a plugin's `configure()` finds it in
+// `migrate` too.
+export function installLocalDurableWorkflows(database) {
+    refuseOtherLocalDbosLaunchers();
+    if (!hostInstalled) {
+        installCloudDurableWorkflows(host);
+        hostInstalled = true;
+    }
+    host.target(database);
+}
+let launched = false;
+// Called once the worker's bootstrap has resolved, after every plugin registered its workflows.
+// Only the worker launches, so only it runs the engine's schema migrations. A project that does not
+// install the SDK has no workflows to run.
+export async function launchLocalDurableExecution() {
+    const loaded = loadSdk();
+    if (!loaded)
+        return;
+    const { DBOS } = loaded.module;
+    if (DBOS.isInitialized()) {
+        throw new LocalDurableWorkflowError("Vendure Cloud: durable execution was already launched by code in this application before Vendure Cloud launched it. Vendure Cloud configures and launches durable execution itself; remove the other launch. Refusing to boot.\n");
+    }
+    loaded.setConfig.call(DBOS, {
+        name: APPLICATION_NAME,
+        applicationVersion: APPLICATION_VERSION,
+        systemDatabaseUrl: host.systemDatabaseUrl(),
+        systemDatabaseSchemaName: SCHEMA,
+    });
+    await loaded.launch.call(DBOS);
+    launched = true;
+    await DBOS.registerQueue(QUEUE);
+}
 export class LocalDurableExecutionPlugin {
+    async onApplicationShutdown() {
+        if (launched) {
+            launched = false;
+            await requireSdk().DBOS.shutdown();
+        }
+        await host.close();
+    }
 }
 VendurePlugin({
     imports: [PluginCommonModule],
-    // No entities, for the reason the managed binding declares none: the platform's workflow tables
-    // are created outside TypeORM's ledger, so a table declared on one side and not the other is a
-    // table nobody can write a migration for.
+    // No entities, as in the managed binding: the `dbos` schema is created outside TypeORM's ledger.
     entities: [],
     compatibility: CLOUD_PLUGIN_COMPATIBILITY,
 })(LocalDurableExecutionPlugin);

package/dist/local-durable-execution-plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"local-durable-execution-plugin.js","sourceRoot":"","sources":["../src/local-durable-execution-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAElE,mGAAmG;AACnG,EAAE;AACF,8FAA8F;AAC9F,oGAAoG;AACpG,0FAA0F;AAC1F,mGAAmG;AACnG,qGAAqG;AACrG,+FAA+F;AAC/F,yBAAyB;AACzB,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAClG,qGAAqG;AACrG,iGAAiG;AACjG,kGAAkG;AAClG,mGAAmG;AACnG,8EAA8E;AAC9E,EAAE;AACF,8FAA8F;AAC9F,oGAAoG;AAEpG,MAAM,OAAO,2BAA2B;CAAG;AAE3C,aAAa,CAAC;IACZ,OAAO,EAAE,CAAC,kBAAkB,CAAC;IAC7B,gGAAgG;IAChG,+FAA+F;IAC/F,0CAA0C;IAC1C,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,0BAA0B;CAC1C,CAAC,CAAC,2BAA2B,CAAC,CAAC"}
+{"version":3,"file":"local-durable-execution-plugin.js","sourceRoot":"","sources":["../src/local-durable-execution-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,0BAA0B,EAG1B,4BAA4B,EAQ5B,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAUlE,MAAM,MAAM,GAAG,MAAM,CAAC;AACtB,MAAM,KAAK,GAAG,gCAAgC,CAAC;AAC/C,MAAM,gBAAgB,GAAG,aAAa,CAAC;AACvC,2DAA2D;AAC3D,kGAAkG;AAClG,uFAAuF;AACvF,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,SAAS;IACT,OAAO;IACP,WAAW;IACX,gCAAgC;CACxB,CAAC;AACX,MAAM,mBAAmB,GAAG;;;;WAIjB,MAAM;;;cAGH,CAAC;AACf,oFAAoF;AACpF,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAEpC,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,OAAe,EAAE,OAAsB;QACjD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,GAAG,GAAG,oBAAoB,CAAC;AAEjC,mGAAmG;AACnG,gGAAgG;AAChG,+DAA+D;AAC/D,MAAM,UAAU,WAAW,CACzB,WAA0C,EAC1C,kBAAiD;IAEjD,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAClD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,GAAG,SAAS,OAAO,4MAA4M,CAC1Q,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,YAAY,CAAC,OAAO,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,yBAAyB,CACjC,wDAAwD,GAAG,UAAU,OAAO,WAAW,IAAI,kIAAkI,CAC9N,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,OAAsC;IAC3D,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEnD,SAAS,OAAO;IACd,OAAO,WAAW,CAChB,WAAW,CAAC,OAAO,EACnB,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAC3D,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,2BAA2B;AAC3B,IAAI,GAGS,CAAC;AACd,SAAS,OAAO;IACd,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,GAAG,GAAG,IAAI,CAAC;QACX,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,MAAM,GAAY,WAAW,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IACxB,GAAG,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IACjE,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE;QACpB,MAAM,eAAe,CAAC,kBAAkB,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,IAAI,CAAC,MAAM,GAAG,KAAK,IAAI,EAAE;QACvB,MAAM,eAAe,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,6BAA6B;IAC3C,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,8BAA8B;IAC5C,OAAO,OAAO,EAAE,KAAK,IAAI,CAAC;AAC5B,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;IACzB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,yBAAyB,CACjC,yIAAyI,CAC1I,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,oGAAoG;AACpG,yBAAyB;AACzB,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,yBAAyB,CAClC,kBAAkB,IAAI,sOAAsO,CAC7P,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAiC;IAC1D,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvD,OAAO,gBAAgB,IAAI,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,IAAI,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACvH,CAAC;AAED,MAAM,qBAAqB;IACjB,QAAQ,CAAsC;IAC9C,aAAa,CAAkC;IAEvD,iGAAiG;IACjG,+BAA+B;IAC/B,MAAM,CAAC,QAAiC;QACtC,IACE,IAAI,CAAC,aAAa;YAClB,IAAI,CAAC,QAAQ;YACb,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,iBAAiB,CAAC,QAAQ,CAAC,EAChE,CAAC;YACD,MAAM,IAAI,yBAAyB,CACjC,4LAA4L,CAC7L,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,iBAAiB;QACf,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,yBAAyB,CACjC,2IAA2I,CAC5I,CAAC;QACJ,CAAC;QACD,OAAO,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,KAAK,CACT,WAAuC,EACvC,OAAoC,EACpC,GAAG,IAAe;QAElB,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,yBAAyB,CACjC,+KAA+K,CAChL,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;aACzB,oBAAoB,CACnB,MAAM,EACN;YACE,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,mBAAmB;SAChC,EACD,GAAG,IAAI,CACR;aACA,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,WAAuC,EACvC,UAAkB,EAClB,OAAgB,EAChB,UAAsC,EAAE;QAExC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;aACzB,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC;aACrF,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAsC,mBAAmB,EAAE;YACtF,gBAAgB;YAChB,CAAC,GAAG,0BAA0B,CAAC;SAChC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,UAAkB;QAC/B,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,EAAE,CACpC,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAC1E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB;QAC5B,OAAO,oBAAoB,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,KAAK,CACT,UAAkB,EAClB,GAAW,EACX,UAAuC,EAAE;QAEzC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAI,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,MAAM,CAAI,UAAkB;QAChC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAAE,MAAM,IAAI,4BAA4B,CAAC,UAAU,CAAC,CAAC;QAC3F,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,gBAAgB,CAAI,UAAU,CAAC,CAAC,SAAS,EAAE,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAqC,EAAE;QAChD,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,EAAE,CACpC,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,CACxE,CAAC;IACJ,CAAC;IAED,+FAA+F;IAC/F,mGAAmG;IACnG,6DAA6D;IAC7D,KAAK,CAAC,MAAM,CAAC,UAAkB,EAAE,UAAwC,EAAE;QACzE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO;QACvF,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,cAAc,CAAC,UAAU,EAAE;YACtD,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,KAAK;SAChD,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,KAAK,CAAI,GAAW,EAAE,MAAiB;QACnD,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAW,CAAC,CAAC;IAChG,CAAC;IAED,yFAAyF;IACjF,KAAK,CAAC,YAAY,CAAI,IAAoD;QAChF,UAAU,EAAE,CAAC;QACb,MAAM,EAAE,MAAM,EAAE,GAAwB,WAAW,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAC1E,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,4EAA4E;IACpE,KAAK,CAAC,OAAO;QACnB,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC;QAClD,IAAI,CAAC,aAAa,GAAG,UAAU,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAClD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE;YAC3C,wBAAwB,EAAE,MAAM;YAChC,eAAe,EAAE,gBAAgB;SAClC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,MAAM,EAAE,OAAO,EAAE,CAAC;IAC1B,CAAC;CACF;AAED,qGAAqG;AACrG,uDAAuD;AACvD,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC;QAC1F,MAAM,IAAI,yBAAyB,CACjC,+KAA+K,EAC/K,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,CAAC;AACd,CAAC;AAED,+FAA+F;AAC/F,mCAAmC;AACnC,iGAAiG;AACjG,8EAA8E;AAC9E,KAAK,UAAU,iBAAiB,CAAC,WAAuC;IACtE,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;IAC5C,IAAI,CAAC,WAAW,EAAE,mBAAmB,EAAE,CAAC;QACtC,MAAM,IAAI,yBAAyB,CACjC,6UAA6U,CAC9U,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAY,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,yBAAyB,CACjC,sHAAsH,CACvH,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,SAAS,GAAwB,KAAK,CAAC;IAC7C,OAAO,OAAO,SAAS,CAAC,KAAK,KAAK,UAAU,CAAC;AAC/C,CAAC;AAED,MAAM,IAAI,GAAG,IAAI,qBAAqB,EAAE,CAAC;AACzC,IAAI,aAAa,GAAG,KAAK,CAAC;AAE1B,6FAA6F;AAC7F,iBAAiB;AACjB,MAAM,UAAU,4BAA4B,CAAC,QAAiC;IAC5E,6BAA6B,EAAE,CAAC;IAChC,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACnC,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACxB,CAAC;AAED,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB,gGAAgG;AAChG,oGAAoG;AACpG,2CAA2C;AAC3C,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;IACzB,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/B,IAAI,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,yBAAyB,CACjC,kOAAkO,CACnO,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;QAC1B,IAAI,EAAE,gBAAgB;QACtB,kBAAkB,EAAE,mBAAmB;QACvC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE;QAC3C,wBAAwB,EAAE,MAAM;KACjC,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,QAAQ,GAAG,IAAI,CAAC;IAChB,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,OAAO,2BAA2B;IACtC,KAAK,CAAC,qBAAqB;QACzB,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,GAAG,KAAK,CAAC;YACjB,MAAM,UAAU,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AAED,aAAa,CAAC;IACZ,OAAO,EAAE,CAAC,kBAAkB,CAAC;IAC7B,iGAAiG;IACjG,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,0BAA0B;CAC1C,CAAC,CAAC,2BAA2B,CAAC,CAAC"}

package/dist/local-runtime-guard.d.ts

@@ -1,2 +1,4 @@
+export declare const MANAGED_RUNTIME_ENV_NAMES: readonly ["VC_ENVIRONMENT_ID", "VC_VENDURE_CONFIG", "VC_SERVER_PORT", "VC_AWS_REGION", "VC_DATABASE_HOST", "VC_DATABASE_PORT", "VC_DATABASE_NAME", "VC_DATABASE_USER", "VC_SUPERADMIN_IDENTIFIER", "VC_SUPERADMIN_PASSWORD", "VC_ASSET_BUCKET_NAME", "VC_PLATFORM_HOSTNAME", "VC_CACHE_HOST", "VC_CACHE_PORT", "VC_CACHE_NAME", "VC_CACHE_USER", "VC_JOB_QUEUE_URL", "VC_WAKE_QUEUE_URL", "VC_WORKER_SERVICE_NAME", "VC_DURABLE_EXECUTION_ADMITTED", "VC_ARTIFACT_DIGEST"];
 export declare function assertLocalRuntimeAllowed(environment: NodeJS.ProcessEnv): void;
+export declare function isLoopbackHost(host: string): boolean;
 //# sourceMappingURL=local-runtime-guard.d.ts.map

package/dist/local-runtime-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-runtime-guard.d.ts","sourceRoot":"","sources":["../src/local-runtime-guard.ts"],"names":[],"mappings":"AAEA,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAM9E"}
+{"version":3,"file":"local-runtime-guard.d.ts","sourceRoot":"","sources":["../src/local-runtime-guard.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,yBAAyB,4cAsB5B,CAAC;AAEX,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAY9E;AAID,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAIpD"}

package/dist/local-runtime-guard.js

@@ -1,7 +1,44 @@
-const MANAGED_ENVIRONMENT_MARKER = "VC_ENVIRONMENT_ID";
+// The configuration a deployed VC Environment's runtime receives (ADR-0030). Not every `VC_*` name:
+// a workspace's own `.env` sets `VC_*` ports for its compose services. `local-runtime-guard.test.ts`
+// keeps this list equal to `CLOUD_RUNTIME_ENV` and `CLOUD_RUNTIME_OPTIONAL_ENV` in
+// `packages/runtime-contract`, which this published package cannot depend on.
+export const MANAGED_RUNTIME_ENV_NAMES = [
+    "VC_ENVIRONMENT_ID",
+    "VC_VENDURE_CONFIG",
+    "VC_SERVER_PORT",
+    "VC_AWS_REGION",
+    "VC_DATABASE_HOST",
+    "VC_DATABASE_PORT",
+    "VC_DATABASE_NAME",
+    "VC_DATABASE_USER",
+    "VC_SUPERADMIN_IDENTIFIER",
+    "VC_SUPERADMIN_PASSWORD",
+    "VC_ASSET_BUCKET_NAME",
+    "VC_PLATFORM_HOSTNAME",
+    "VC_CACHE_HOST",
+    "VC_CACHE_PORT",
+    "VC_CACHE_NAME",
+    "VC_CACHE_USER",
+    "VC_JOB_QUEUE_URL",
+    "VC_WAKE_QUEUE_URL",
+    "VC_WORKER_SERVICE_NAME",
+    "VC_DURABLE_EXECUTION_ADMITTED",
+    "VC_ARTIFACT_DIGEST",
+];
 export function assertLocalRuntimeAllowed(environment) {
-    if (environment[MANAGED_ENVIRONMENT_MARKER] === undefined)
+    const present = MANAGED_RUNTIME_ENV_NAMES.filter((name) => environment[name] !== undefined);
+    if (present.length === 0)
         return;
-    throw new Error("Vendure Cloud: managed configuration is present, but the platform runtime entrypoint is not running. Refusing to boot with local substitutes.");
+    throw new Error([
+        "Vendure Cloud: managed configuration is present, but the platform runtime entrypoint is not running. Refusing to boot with local substitutes.",
+        `  This process carries ${present.join(", ")}, which local substitutes do not accept.`,
+        "  Unset them, or start a new terminal without them, and run the command again.",
+        "",
+    ].join("\n"));
+}
+// A local substitute reaches only this machine. Any other host could be a deployed environment's
+// database or cache, and connecting to it would let a development run write to it.
+export function isLoopbackHost(host) {
+    return (host === "localhost" || host === "::1" || host === "[::1]" || /^127(\.\d{1,3}){3}$/.test(host));
 }
 //# sourceMappingURL=local-runtime-guard.js.map

package/dist/local-runtime-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"local-runtime-guard.js","sourceRoot":"","sources":["../src/local-runtime-guard.ts"],"names":[],"mappings":"AAAA,MAAM,0BAA0B,GAAG,mBAAmB,CAAC;AAEvD,MAAM,UAAU,yBAAyB,CAAC,WAA8B;IACtE,IAAI,WAAW,CAAC,0BAA0B,CAAC,KAAK,SAAS;QAAE,OAAO;IAElE,MAAM,IAAI,KAAK,CACb,+IAA+I,CAChJ,CAAC;AACJ,CAAC"}
+{"version":3,"file":"local-runtime-guard.js","sourceRoot":"","sources":["../src/local-runtime-guard.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,qGAAqG;AACrG,mFAAmF;AACnF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,mBAAmB;IACnB,mBAAmB;IACnB,gBAAgB;IAChB,eAAe;IACf,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,0BAA0B;IAC1B,wBAAwB;IACxB,sBAAsB;IACtB,sBAAsB;IACtB,eAAe;IACf,eAAe;IACf,eAAe;IACf,eAAe;IACf,kBAAkB;IAClB,mBAAmB;IACnB,wBAAwB;IACxB,+BAA+B;IAC/B,oBAAoB;CACZ,CAAC;AAEX,MAAM,UAAU,yBAAyB,CAAC,WAA8B;IACtE,MAAM,OAAO,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;IAC5F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEjC,MAAM,IAAI,KAAK,CACb;QACE,+IAA+I;QAC/I,0BAA0B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,0CAA0C;QACtF,gFAAgF;QAChF,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,CACL,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/F,CAAC;AACJ,CAAC"}

package/dist/local-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-runtime.d.ts","sourceRoot":"","sources":["../src/local-runtime.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EAWpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAKL,KAAK,aAAa,EAElB,SAAS,EACT,eAAe,EAEhB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,KAAK,oBAAoB,EAI1B,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,KAAK,uBAAuB,EAG7B,MAAM,qBAAqB,CAAC;AAS7B,MAAM,WAAW,mBAAmB;IAGlC,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IAInC,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAG7B,UAAU,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAGvC,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,mBAAwB,GAChC,UAAU,CAAC,OAAO,SAAS,CAAC,CAE9B;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,mBAAwB,GAChC,UAAU,CAAC,OAAO,eAAe,CAAC,CAEpC;AAID,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED,qBAAa,yBAA0B,SAAQ,KAAK;;CAOnD;AAED,qBAAa,yBAA0B,SAAQ,KAAK;;CAanD;AAsBD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,mBAAwB,GAChC,aAAa,CAyFf"}
+{"version":3,"file":"local-runtime.d.ts","sourceRoot":"","sources":["../src/local-runtime.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EAWpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAKL,KAAK,aAAa,EAElB,SAAS,EACT,eAAe,EAEhB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,KAAK,oBAAoB,EAI1B,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,KAAK,uBAAuB,EAG7B,MAAM,qBAAqB,CAAC;AAa7B,MAAM,WAAW,mBAAmB;IAGlC,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IAGnC,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAG7B,UAAU,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAGvC,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,mBAAwB,GAChC,UAAU,CAAC,OAAO,SAAS,CAAC,CAE9B;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,mBAAwB,GAChC,UAAU,CAAC,OAAO,eAAe,CAAC,CAUpC;AAID,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAED,qBAAa,yBAA0B,SAAQ,KAAK;;CAOnD;AAED,qBAAa,yBAA0B,SAAQ,KAAK;;CAanD;AA6BD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,mBAAwB,GAChC,aAAa,CAiFf"}

package/dist/local-runtime.js

@@ -7,38 +7,43 @@ import { localCachePlugin } from "./local-cache-plugin.js";
 import { assertLocalCacheDriverAvailable, describeLocalCache, resolveLocalCache, } from "./local-cache.js";
 import { DEFAULT_VITE_DEV_SERVER_PORT, localDashboardPlugin } from "./local-dashboard-plugin.js";
 import { assertLocalDatabaseDriverAvailable, resolveLocalDatabase, } from "./local-database.js";
-import { LocalDurableExecutionPlugin } from "./local-durable-execution-plugin.js";
+import { LocalDurableExecutionPlugin, installLocalDurableWorkflows, launchLocalDurableExecution, localDurableWorkflowsAvailable, } from "./local-durable-execution-plugin.js";
 import { assertLocalRuntimeAllowed } from "./local-runtime-guard.js";
-// Where the local runtime keeps the files it writes, relative to the working directory the
-// application was started from. One directory rather than several, so nothing the substitutes
-// produce lands among the customer's own files.
+// Where the local runtime keeps the files it writes, relative to the working directory, apart from
+// the customer's own files.
 const LOCAL_STATE_DIR = ".vendure-cloud";
 export async function bootstrapLocalServer(handle, options = {}) {
     return bootstrap(await composeWithDeclaredMigrations(handle, options));
 }
 export async function bootstrapLocalWorker(handle, options = {}) {
-    return bootstrapWorker(await composeWithDeclaredMigrations(handle, options));
+    const worker = await bootstrapWorker(await composeWithDeclaredMigrations(handle, options));
+    try {
+        await launchLocalDurableExecution();
+    }
+    catch (error) {
+        // The open app would otherwise keep the process alive, and the supervisor would not see it fail.
+        await worker.app.close();
+        throw error;
+    }
+    return worker;
 }
-// The local `migrate` run mode. The application's own migration chain is what builds its schema,
-// here and on a deploy alike, so this runs that chain and creates nothing outside it.
+// The local `migrate` run mode. It runs the application's migration chain and creates nothing
+// outside it.
 export async function runLocalMigrations(handle, options = {}) {
+    installDurableWorkflowHost(options);
     const migrations = options.migrations ?? (await declaredMigrations(handle));
-    // Checked here rather than during composition. Composition runs in all three run modes and knows
-    // nothing about the state of the database, and a server booting against a database its migrations
-    // already built is legitimate. This is the one run mode where an empty chain is actionable.
+    // Checked here, not during composition: a server booting against a database its migrations
+    // already built is legitimate.
     if (migrations.length === 0) {
         throw new NoDeclaredMigrationsError();
     }
-    // `runMigrations` reports a failed migration by setting the exit code and returning, rather than
-    // by throwing (`packages/core/src/migrate.ts`, read against `@vendure/core@3.7.2`: it rethrows
-    // only under Vendure's own CLI). Without the check below, a chain that stopped part of the way
-    // through returns normally and whatever called this carries on against a half-built schema.
+    // `runMigrations` reports a failed migration by setting the exit code and returning
+    // (`packages/core/src/migrate.ts` at `@vendure/core@3.7.2` rethrows only under Vendure's own
+    // CLI). Without the check below, a chain that stopped part way returns normally and the caller
+    // carries on against a half-built schema.
     //
-    // The exit code is put back rather than left set. Throwing is this function's signal, and the
-    // entrypoint's `main().catch` is what turns that into a non-zero exit for the CLI-shaped process
-    // — so the process still exits non-zero when nobody handles the failure. A supervisor that calls
-    // this in its own process and handles the failure would otherwise be left with a process marked
-    // as failed for something it had already dealt with.
+    // The exit code is restored so a supervisor that handles the thrown error is not left with a
+    // failed process.
     const exitCodeBeforeMigrations = process.exitCode;
     process.exitCode = undefined;
     try {
@@ -69,10 +74,10 @@ export class NoDeclaredMigrationsError extends Error {
         this.name = "NoDeclaredMigrationsError";
     }
 }
-// Loading the declared migrations reads the filesystem and composition is synchronous, so the two
-// are split here exactly as `createManagedRuntime` splits them. ADR-0048 is why the array is built
-// rather than a glob handed to TypeORM: the order is a property of the array.
+// Loading migrations reads the filesystem and composition is synchronous, so they are split as in
+// `createManagedRuntime`. ADR-0048 requires an array, since a glob does not fix the order.
 async function composeWithDeclaredMigrations(handle, options) {
+    installDurableWorkflowHost(options);
     if (options.migrations)
         return composeLocalConfig(handle, options);
     return composeLocalConfig(handle, {
@@ -80,13 +85,19 @@ async function composeWithDeclaredMigrations(handle, options) {
         migrations: await declaredMigrations(handle),
     });
 }
+// In the run modes and not in `composeLocalConfig`, so composing a configuration changes no
+// process-wide state.
+function installDurableWorkflowHost(options) {
+    assertLocalRuntimeAllowed(process.env);
+    installLocalDurableWorkflows(resolveLocalDatabase(options.database, process.env));
+}
 async function declaredMigrations(handle) {
     const loaded = await readCloudConfig(handle).loadMigrations();
     return loaded.map(({ migration }) => migration);
 }
 export function composeLocalConfig(handle, options = {}) {
-    // ADR-0043's fail-closed rule, checked at the composition boundary rather than only in the
-    // entrypoint, because every caller that reaches a substitute reaches it through here.
+    // ADR-0043 fail-closed rule. Every substitute is composed through this function, and the run modes
+    // also check it before installing the durable workflow host.
     assertLocalRuntimeAllowed(process.env);
     assertLocalDatabaseDriverAvailable();
     assertLocalCacheDriverAvailable();
@@ -95,24 +106,20 @@ export function composeLocalConfig(handle, options = {}) {
     const assetUploadDir = resolve(options.assetUploadDir ?? `${LOCAL_STATE_DIR}/assets`);
     const dashboardAppDir = resolve(options.dashboardAppDir ?? `${LOCAL_STATE_DIR}/dashboard`);
     const viteDevServerPort = options.dashboardViteDevServerPort ?? DEFAULT_VITE_DEV_SERVER_PORT;
-    // The wrapped plugins the customer may have declared, read before composition because
-    // composition drops the declaration markers from the array it hands core. The same two calls the
-    // managed runtime makes, so a route the platform would refuse is refused here too and a preset
-    // the platform would honour is honoured here.
+    // Read before composition, which drops the declaration markers from the array it hands core. The
+    // same calls as the managed runtime, so routes and presets are refused or honoured identically.
     const config = readCloudConfig(handle).config;
     const dashboard = resolveDashboardSettings(config);
     const assets = resolveAssetServerSettings(config);
     const substitutes = {
-        // A Valkey the server and the worker share, in place of the platform's own cache. Not
-        // `DefaultCachePlugin`: it keeps the cache in the customer's database and declares `CacheItem`
-        // and `CacheTag`, and a migration generated from this configuration is the one a deploy applies,
-        // so those two tables would reach a managed runtime that never reads them (CLO-645).
+        // A Valkey shared by the server and worker. `DefaultCachePlugin` declares `CacheItem` and
+        // `CacheTag`; a migration generated here is the one a deploy applies, so those tables would
+        // reach a managed runtime that never reads them (CLO-645).
         cache: localCachePlugin(cache),
-        // The job queue does live in the same database the store runs on. `JobRecord` is declared by
-        // the managed runtime too, so it is in the customer's migrations either way.
+        // The job queue lives in the store's database. `JobRecord` is also declared by the managed
+        // runtime, so it is in the customer's migrations either way.
         jobQueue: DefaultJobQueuePlugin.init({}),
-        // Vendure's own scheduler, which the managed runtime replaces because it has a worker that
-        // sleeps. Nothing sleeps locally, so the default is the substitute rather than a stand-in.
+        // Vendure's scheduler. The managed runtime replaces it because its worker sleeps.
         scheduler: DefaultSchedulerPlugin.init(),
         dashboard: localDashboardPlugin({
             route: dashboard.route,
@@ -120,8 +127,6 @@ export function composeLocalConfig(handle, options = {}) {
             viteDevServerPort,
         }),
         assets: AssetServerPlugin.init(localAssetServerOptions(assets, assetUploadDir)),
-        // An empty module. Nothing can start a workflow in either runtime yet, and the plugin's own
-        // header says why and what it will do when something can.
         durableExecution: LocalDurableExecutionPlugin,
     };
     const announcements = {
@@ -130,15 +135,15 @@ export function composeLocalConfig(handle, options = {}) {
         scheduler: "Vendure's default scheduler, running in this process",
         dashboard: `served at /${dashboard.route}, from a Vite development server on port ${viteDevServerPort} while one is listening and from ${dashboardAppDir} otherwise`,
         assets: `served at /${CLOUD_ASSET_ROUTE}, stored in ${assetUploadDir}`,
-        durableExecution: "no workflow can be started in either runtime yet; declaring one is supported",
+        durableExecution: localDurableWorkflowsAvailable()
+            ? "run by the worker, recorded in the dbos schema of the same database"
+            : "not run, because this project does not install @dbos-inc/dbos-sdk",
     };
     const values = {
         ...platformDefaultFieldValues(new DefaultSessionCacheStrategy()),
-        // The two settings a locally generated migration depends on, holding the values the managed
-        // runtime gives them. `synchronize: false` leaves the schema to the migration chain, so a
-        // comparison against this database is a comparison against what the migrations built —
-        // anything that created the schema on the way to serving would leave nothing to generate.
-        // `migrations` is the customer's own chain, run here in the order a deploy runs it in.
+        // `synchronize: false` leaves the schema to the migration chain, so a diff against this
+        // database is a diff against what the migrations built. `migrations` is the customer's chain
+        // in deploy order.
         dbConnectionOptions: {
             type: "postgres",
             host: database.host,
@@ -146,7 +151,6 @@ export function composeLocalConfig(handle, options = {}) {
             database: database.database,
             username: database.username,
             password: database.password,
-            // Keep migration progress and failures visible without printing every SQL statement.
             logging: ["error", "schema"],
             synchronize: false,
             migrations: [...(options.migrations ?? [])],
@@ -167,9 +171,8 @@ export function composeLocalConfig(handle, options = {}) {
         vendurePlugin: VendurePlugin,
     });
 }
-// One line per capability, read off the inventory rather than written out, so a capability added to
-// it cannot reach a developer's terminal unnamed. The database is named on its own line above them
-// because it is not one of the capabilities, and without its password because this is printed.
+// One line per capability, read off the inventory so a new capability cannot reach the terminal
+// unnamed. The database line omits the password.
 function substituteAnnouncement(database, substitutes) {
     return [
         "Vendure Cloud local substitutes are active; no cloud infrastructure is in use.",