@voltro/workflow 0.60.0 → 0.62.0

package/CHANGELOG.md

@@ -39,6 +39,49 @@ _Changes staged for the next release accumulate here (rolled up from
 
 ---
 
+## [0.62.0] — 2026-09-01
+
+### ⚠ BREAKING
+
+- **@voltro/workflow, @voltro/cli, @voltro/voltro** — `timeouts.finish` now filters running rows by the declared workflow, durably cancels each run before notification, and emits `onFailure` only for the successful terminal transition. Finish-timeout reports carry the run's stable `runId`, `executionId`, and original payload; handler-start logs expose the returned status instead of unconditionally claiming a new start.
+
+  Low-level adapters that construct `AdmissionDrainDeps` must update `cancelRun` to accept the run object and return whether it made the terminal transition, and return the run identity, workflow name, and payload from `listRunningRuns`. Ordinary workflow declarations need no source change; `voltro update` prints the adapter migration only when the project references this low-level surface.
+
+### Added
+
+- **@voltro/ai** — `streamText` and `resumableStreamText` now accept an opt-in `smooth` configuration for word- or line-based text and reasoning chunks. Smoothing runs before resumable journaling, preserves provider-native behavior when omitted, and shares the stream abort signal so cancellation also stops a pending smoothing delay.
+
+### Fixed
+
+- **@voltro/web** — Production `framework_debug` now enables local framework diagnostics without opening browser-to-inspect HTTP or SSE transports. Development log relays are single-flight and rate-limited, classify permanent response failures, back off transient failures, expose dropped-log counts, and open a page-scoped circuit after repeated failure; the SSE relay also probes the endpoint before creating an `EventSource` and closes failed sources before retrying.
+
+---
+
+## [0.61.0] — 2026-08-31
+
+### ⚠ BREAKING
+
+- **@voltro/client, @voltro/web, @voltro/cli** — `RpcError.kind` now distinguishes transport, handler, client, and unknown failures; manually emitted events must add the field, while `useConnectionStatus` now degrades only for transport failures and clears on the next rpc success.
+
+  **`voltro update` carries you across this** — codemod `0.61.0/01_rpc_errors_have_kinds`. If you pin versions by hand and never run it, print the notes without changing anything: `voltro update --codemods-only --from <your current version> --dry-run` (this one ships in 0.61.0).
+- **@voltro/plugin-sentry, @voltro/cli** — Browser RPC spans now join the active page/navigation transaction and link to the Effect/server trace instead of creating one root transaction per call; `tracesSampleRate`, `browserTracing`, and the new `rpcSpans` switch control the resulting browser trace volume.
+
+  **`voltro update` carries you across this** — codemod `0.61.0/02_sentry_rpc_spans_join_page`. If you pin versions by hand and never run it, print the notes without changing anything: `voltro update --codemods-only --from <your current version> --dry-run` (this one ships in 0.61.0).
+
+### Fixed
+
+- **@voltro/cli** — **Six SSR failure sites report to Sentry, not three.**
+
+  0.60.0 gave the web server its own Sentry and wired the three loud sites: the SSR shell throw, the SPA layout shell throw, and the general render error (which covers a loader throw). The docs said "shell throw, loader throw, PPR/SWR refresh" — and an enumeration in a claim is read as exhaustive.
+
+  The other three were `warn`-level and reported to nobody: a failed PPR hole pass, a failed background SWR refresh, and a `not-found.tsx` that throws while rendering. They are quieter because the request still serves something — stale HTML, an unfilled hole, a plain 404 — which says something about the REQUEST and nothing about who else could find out. The answer to that is nobody: none of them reaches a browser boundary, so the pod's stdout was the only record.
+
+  They carry their own `voltro.stage` (`not-found-render`, `ppr-holes`, `swr-refresh`), so a quota-conscious project can drop them by stage without losing the three that fail the request.
+
+  `webSentry.test.ts` now fails if a render-path `log.error`/`log.warn` gains no reporter beside it — the property, rather than the six call sites.
+
+---
+
 ## [0.60.0] — 2026-08-31
 
 ### ⚠ BREAKING

package/dist/clusterTestSuite.js

@@ -1,5 +1,5 @@
 import { I as e, P as t, S as n, g as r, v as i } from "./primitives-B-HlFCap.js";
-import { o as a } from "./src-CoPlQmC5.js";
+import { o as a } from "./src-B1XsZ6OO.js";
 import { i as o, p as s } from "./cluster-OUXsLZ2x.js";
 import { Cron as c, Deferred as l, Effect as u, Fiber as d, Layer as f, Schema as p } from "effect";
 import { SqlClient as m } from "@effect/sql";

package/dist/index.d.ts

@@ -81,11 +81,21 @@ export declare interface AdmissionDrainDeps {
      * `admitted` marker that skips the gate.
      */
     readonly startAdmitted: (workflowName: string, payload: unknown, callerContext: unknown) => Promise<AdmittedStart>;
-    /** Cancel a run — used by singleton eviction and by `timeouts.finish`. */
-    readonly cancelRun: (workflowName: string, executionId: string) => Promise<void>;
     /**
-     * A start that will never happen: `timeouts.start` elapsed, or the workflow
-     * was deleted while its intents were queued. Wired to the same `onFailure`
+     * Cancel a run through the durable run-state boundary — engine interrupt,
+     * terminal row, event, and child cleanup — used by singleton eviction and
+     * `timeouts.finish`. `false` means the run was already terminal or absent.
+     */
+    readonly cancelRun: (input: {
+        readonly workflowName: string;
+        readonly runId: string;
+        readonly executionId: string;
+        readonly reason: string;
+        readonly detail?: Record<string, unknown>;
+    }) => Promise<boolean>;
+    /**
+     * Work that will not complete: a queued start expired or lost its workflow,
+     * or `timeouts.finish` durably cancelled a run. Wired to the same `onFailure`
      * path an exhausted retry takes — a job that silently did not happen is the
      * failure this whole feature exists to remove, so it must not be the one
      * outcome with no notification.
@@ -95,10 +105,15 @@ export declare interface AdmissionDrainDeps {
         readonly payload: unknown;
         readonly callerContext: unknown;
         readonly reason: string;
+        readonly runId?: string | null;
+        readonly executionId?: string | null;
     }) => Promise<void>;
     /** Runs of a controlled workflow that are still running, for `timeouts.finish`. */
     readonly listRunningRuns?: (workflowName: string) => Promise<ReadonlyArray<{
+        readonly runId: string;
+        readonly workflowName: string;
         readonly executionId: string;
+        readonly payload: unknown;
         readonly startedAt: number;
     }>>;
     /**
@@ -2488,14 +2503,13 @@ export declare interface WorkflowExecuteRecordingOptions extends WorkflowRunReco
 export declare interface WorkflowFailureReport {
     /** The workflow that failed. */
     readonly workflow: string;
-    /** Its payload, as it was started with. Null when the failure happened before
-     *  a payload existed (a `timeouts.finish` sweep reads the run row, not the
-     *  intent). */
+    /** Its payload, as it was started with. */
     readonly payload: unknown;
     /** Tagged error name, when the failure carried one. */
     readonly errorTag: string | null;
     readonly errorMessage: string | null;
-    /** `_voltro_workflow_runs.id`, when a run existed. */
+    /** `_voltro_workflow_runs.id`, when a run existed. Always populated for
+     *  `timeouts.finish`, so the report has a stable identity. */
     readonly runId: string | null;
     readonly executionId: string | null;
     /** Human-readable, always present: which of the four paths this was. */
@@ -3113,10 +3127,11 @@ export declare interface WorkflowThrottle<Payload> {
  * concurrency-queued run that never gets a slot is a job that silently did not
  * happen. `finish` bounds the run itself once admitted.
  *
- * Both expire into the SAME path as an exhausted retry: the run is recorded
- * `failed` with an `errorTag` naming which bound was hit, and `onFailure` fires.
- * A timeout that expired quietly would be the sweep-instead-of-signal shape this
- * whole feature exists to remove.
+ * Both reach the same `onFailure` signal as an exhausted retry. `start` expires
+ * the queued intent before a run exists; `finish` durably cancels the running
+ * row and signals only when that transition wins. A timeout that expired
+ * quietly — or signalled again on every sweep — would make the notification
+ * path less trustworthy than the work it reports.
  */
 export declare interface WorkflowTimeouts {
     readonly start?: FlowDuration;

package/dist/index.js

@@ -1,3 +1,3 @@
 import { A as e, B as t, C as n, D as r, E as i, G as a, H as o, I as s, L as c, M as l, N as u, O as d, P as f, R as p, S as m, T as h, U as g, V as _, W as v, _ as y, a as b, b as x, c as S, d as C, f as w, g as T, h as E, i as D, j as O, k, l as A, m as j, n as M, o as N, p as P, r as F, s as I, t as L, u as R, v as z, w as B, x as V, y as H, z as U } from "./primitives-B-HlFCap.js";
-import { $ as W, A as G, At as K, B as q, C as J, Ct as Y, D as X, Dt as Z, E as Q, Et as $, F as ee, Ft as te, G as ne, H as re, I as ie, It as ae, J as oe, K as se, L as ce, Lt as le, M as ue, Mt as de, N as fe, Nt as pe, O as me, Ot as he, P as ge, Pt as _e, Q as ve, R as ye, Rt as be, S as xe, St as Se, T as Ce, Tt as we, U as Te, V as Ee, W as De, X as Oe, Y as ke, Z as Ae, _ as je, _t as Me, a as Ne, at as Pe, b as Fe, bt as Ie, c as Le, ct as Re, d as ze, dt as Be, et as Ve, f as He, ft as Ue, g as We, gt as Ge, h as Ke, ht as qe, i as Je, it as Ye, j as Xe, jt as Ze, k as Qe, kt as $e, l as et, lt as tt, m as nt, mt as rt, n as it, nt as at, o as ot, ot as st, p as ct, pt as lt, q as ut, r as dt, rt as ft, s as pt, st as mt, t as ht, tt as gt, u as _t, ut as vt, v as yt, vt as bt, w as xt, wt as St, x as Ct, xt as wt, y as Tt, yt as Et, z as Dt, zt as Ot } from "./src-CoPlQmC5.js";
+import { $ as W, A as G, At as K, B as q, C as J, Ct as Y, D as X, Dt as Z, E as Q, Et as $, F as ee, Ft as te, G as ne, H as re, I as ie, It as ae, J as oe, K as se, L as ce, Lt as le, M as ue, Mt as de, N as fe, Nt as pe, O as me, Ot as he, P as ge, Pt as _e, Q as ve, R as ye, Rt as be, S as xe, St as Se, T as Ce, Tt as we, U as Te, V as Ee, W as De, X as Oe, Y as ke, Z as Ae, _ as je, _t as Me, a as Ne, at as Pe, b as Fe, bt as Ie, c as Le, ct as Re, d as ze, dt as Be, et as Ve, f as He, ft as Ue, g as We, gt as Ge, h as Ke, ht as qe, i as Je, it as Ye, j as Xe, jt as Ze, k as Qe, kt as $e, l as et, lt as tt, m as nt, mt as rt, n as it, nt as at, o as ot, ot as st, p as ct, pt as lt, q as ut, r as dt, rt as ft, s as pt, st as mt, t as ht, tt as gt, u as _t, ut as vt, v as yt, vt as bt, w as xt, wt as St, x as Ct, xt as wt, y as Tt, yt as Et, z as Dt, zt as Ot } from "./src-B1XsZ6OO.js";
 export { ft as ADMISSIONS_TABLE, ct as BUDGET_HOLDS_TABLE, nt as BudgetHoldExpired, De as CANCEL_ON_WATERMARK, l as CurrentWorkflowExecutionId, u as CurrentWorkflowPatches, B as CurrentWorkflowReplayShape, f as CurrentWorkflowRunId, Ke as DEFAULT_BUDGET_HOLD_TIMEOUT_MS, ne as DEFAULT_COLD_LOOKBACK_MS, ye as DEFAULT_DRAIN_BATCH, se as DEFAULT_EVENT_BATCH, Ye as DEFAULT_LEASE_MS, Je as DEFAULT_MAX_RUN_RECLAIMS, Ne as DEFAULT_REPLAY_SHAPE_LIMIT, q as DEFAULT_STALL_AFTER_MS, Ee as DEFAULT_STALL_EVENT_LOOKBACK, re as DEFAULT_STALL_RUN_PAGE, fe as DEFAULT_SUSPEND_HINT_MS, d as DEFAULT_WORKFLOW_SCHEDULE_MAX_RUNTIME_MS, t as DEFERRING_CONTROLS, ut as EVENTS_TABLE, St as FlowControlKeyError, Pe as PAUSES_TABLE, st as PENDING_TABLE, oe as WATERMARKS_TABLE, L as WorkflowFlowControlProperty, M as WorkflowMessagesProperty, s as WorkflowRunRecorder, k as WorkflowScheduleProperty, c as WorkflowStepInterceptorTag, F as WorkflowVersionTypeId, D as WorkflowWorkerLayerTypeId, We as _voltroBudgetHoldsTable, de as _voltroWorkflowAdmissionsTable, pe as _voltroWorkflowPausesTable, _e as _voltroWorkflowPendingTable, ae as _voltroWorkflowRunEventsTable, le as _voltroWorkflowRunStepsTable, be as _voltroWorkflowRunsTable, te as _voltroWorkflowStartContextsTable, Ve as _voltroWorkflowWatermarksTable, gt as admitStart, mt as allIntents, _ as assertConsistentPools, Xe as awaitEvent, ue as awaitSignal, xt as awaitSignalSuspending, He as awaitUpdate, je as budgetHoldGeneration, yt as budgetHoldKey, Tt as budgetHoldSignalName, dt as closeWorkflowChildrenForParent, we as comparePendingOrder, Ce as completeSuspendingSignal, $ as decideAdmission, o as deferringControlsOf, Re as deleteIntent, tt as discardIntent, Dt as drainTick, vt as dueIntents, b as durableClock, N as durableQueue, I as durableQueueModule, S as durableRateLimiterModule, Be as evaluateAdmission, p as getCurrentWorkflowExecutionId, U as getCurrentWorkflowRunId, A as getWorkflowFlowControl, e as getWorkflowSchedule, R as getWorkflowVersionMetadata, g as hasCancelOn, v as hasFlowControl, Fe as heldBudgets, Ot as inMemoryWorkflowEngineLayer, it as inspectWorkflow, Z as isFinishExpired, he as isStartExpired, C as isWorkflowWorkerLayer, at as linkExecution, ht as makeInMemoryRecorder, h as makeReplayShapeTracker, ot as makeWorkflowRunRecorder, X as makeWorkflowUpdateId, ge as maybeHintSuspendingSignal, ve as newestEventAt, $e as nextSlotAt, i as nondeterminismEventPayload, pt as normaliseWorkflowPatches, Ue as noteIntentAttempt, lt as parkDelayedStart, w as patch, rt as pauseWorkflow, Ct as pendingBudgetHolds, qe as pendingSlotId, Ge as pendingWindow, Me as persistDefer, W as planCancellations, K as pooledConcurrencyKey, P as processQueue, bt as pruneAdmissions, j as queueWorker, E as rateLimit, Et as readAdmissionState, Ie as readPausedWorkflows, ke as readWatermark, wt as recordAdmission, xe as releaseBudgetHolds, Se as releaseLease, r as reportNondeterminism, ee as resetSuspendHintsForTest, Ze as resolveAdmissionKeys, Le as resolveRunGuardTuning, ie as resolveSuspendHintMs, me as resolveWorkflowMessageRun, Y as resumeWorkflow, Qe as sendWorkflowSignal, G as sendWorkflowUpdate, et as serialiseWorkflowRowForWire, ce as setSuspendSignalHintMs, T as sleep, y as sleepUntil, z as step, H as stepIdempotencyKey, x as stepModule, J as suspendForBudget, Q as suspendingSignalDeferredName, Oe as sweepCancelOn, Te as sweepStalledRuns, _t as truncateWorkflowValue, a as validateFlowControl, O as validateWorkflowSchedule, V as withCompensation, m as workflow, n as workflowModule, ze as wrapWorkflowExecuteWithRunRecording, Ae as writeWatermark };

package/dist/primitives.d.ts

@@ -737,14 +737,13 @@ export declare interface WorkflowDebounce<Payload> {
 export declare interface WorkflowFailureReport {
     /** The workflow that failed. */
     readonly workflow: string;
-    /** Its payload, as it was started with. Null when the failure happened before
-     *  a payload existed (a `timeouts.finish` sweep reads the run row, not the
-     *  intent). */
+    /** Its payload, as it was started with. */
     readonly payload: unknown;
     /** Tagged error name, when the failure carried one. */
     readonly errorTag: string | null;
     readonly errorMessage: string | null;
-    /** `_voltro_workflow_runs.id`, when a run existed. */
+    /** `_voltro_workflow_runs.id`, when a run existed. Always populated for
+     *  `timeouts.finish`, so the report has a stable identity. */
     readonly runId: string | null;
     readonly executionId: string | null;
     /** Human-readable, always present: which of the four paths this was. */
@@ -1045,10 +1044,11 @@ export declare interface WorkflowThrottle<Payload> {
  * concurrency-queued run that never gets a slot is a job that silently did not
  * happen. `finish` bounds the run itself once admitted.
  *
- * Both expire into the SAME path as an exhausted retry: the run is recorded
- * `failed` with an `errorTag` naming which bound was hit, and `onFailure` fires.
- * A timeout that expired quietly would be the sweep-instead-of-signal shape this
- * whole feature exists to remove.
+ * Both reach the same `onFailure` signal as an exhausted retry. `start` expires
+ * the queued intent before a run exists; `finish` durably cancels the running
+ * row and signals only when that transition wins. A timeout that expired
+ * quietly — or signalled again on every sweep — would make the notification
+ * path less trustworthy than the work it reports.
  */
 export declare interface WorkflowTimeouts {
     readonly start?: FlowDuration;

package/dist/{src-CoPlQmC5.js → src-B1XsZ6OO.js}

@@ -1213,7 +1213,16 @@ var le = f.layerMemory, P = j("_voltro_workflow_runs", {
 		return;
 	}
 	let s = await e.startAdmitted(a.workflowName, o.payload, t.callerContext);
-	o.evict !== void 0 && (await e.cancelRun(a.workflowName, o.evict.executionId).catch(() => {}), await W(e.store, o.evict.executionId, i).catch(() => {}), r.evicted++);
+	o.evict !== void 0 && (await e.cancelRun({
+		workflowName: a.workflowName,
+		runId: o.evict.runId,
+		executionId: o.evict.executionId,
+		reason: "cancelled to make room for a newer start (singleton mode 'cancel')",
+		detail: {
+			source: "flow-control",
+			mode: "singleton"
+		}
+	}).catch(() => !1), await W(e.store, o.evict.executionId, i).catch(() => {}), r.evicted++);
 	for (let t of o.consume) await G(e.store, t).catch(() => {});
 	o.ledgerId !== void 0 && await Ge(e.store, o.ledgerId, s.executionId, s.runId ?? null).catch(() => {}), await G(e.store, t.id), r.admitted++;
 }, yt = async (e, t, n, r, i) => {
@@ -1307,7 +1316,16 @@ var le = f.layerMemory, P = j("_voltro_workflow_runs", {
 		o.skipped++;
 		return;
 	}
-	i.evict !== void 0 && (await e.cancelRun(n.workflowName, i.evict.executionId), await W(e.store, i.evict.executionId, s), await U({
+	i.evict !== void 0 && (await e.cancelRun({
+		workflowName: n.workflowName,
+		runId: i.evict.runId,
+		executionId: i.evict.executionId,
+		reason: "cancelled to make room for a newer start (singleton mode 'cancel')",
+		detail: {
+			source: "flow-control",
+			mode: "singleton"
+		}
+	}), await W(e.store, i.evict.executionId, s), await U({
 		store: e.store,
 		control: n,
 		keys: a,
@@ -1344,15 +1362,30 @@ var le = f.layerMemory, P = j("_voltro_workflow_runs", {
 	for (let r of e.controls.values()) {
 		if (r.timeouts?.finishMs === void 0) continue;
 		let i = await e.listRunningRuns(r.workflowName);
-		for (let a of i) Se(r, {
-			startedAt: a.startedAt,
-			terminal: !1
-		}, t) && (await e.cancelRun(r.workflowName, a.executionId), await W(e.store, a.executionId, t), await e.onAbandoned({
-			workflowName: r.workflowName,
-			payload: null,
-			callerContext: null,
-			reason: `timeouts.finish (${r.timeouts.finishMs}ms) elapsed; the run was cancelled after ${t - a.startedAt}ms`
-		}), n++);
+		for (let a of i) {
+			if (!Se(r, {
+				startedAt: a.startedAt,
+				terminal: !1
+			}, t)) continue;
+			let i = `timeouts.finish (${r.timeouts.finishMs}ms) elapsed; the run was cancelled after ${t - a.startedAt}ms`;
+			await e.cancelRun({
+				workflowName: a.workflowName,
+				runId: a.runId,
+				executionId: a.executionId,
+				reason: i,
+				detail: {
+					source: "flow-control",
+					timeout: "finish"
+				}
+			}) && (await W(e.store, a.executionId, t), await e.onAbandoned({
+				workflowName: a.workflowName,
+				payload: a.payload,
+				callerContext: null,
+				reason: i,
+				runId: a.runId,
+				executionId: a.executionId
+			}), n++);
+		}
 	}
 	return n;
 }, St = 3e5, Ct, wt = (e) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/workflow",
-  "version": "0.60.0",
+  "version": "0.62.0",
   "description": "Durable workflows for Voltro — the workflow() descriptor + step() / awaitSignal primitives over @effect/cluster, with a browser-safe define subpath.",
   "keywords": [
     "voltro",
@@ -51,9 +51,9 @@
     "@effect/cluster": "^0.60.0",
     "@effect/sql": "^0.52.0",
     "@effect/workflow": "^0.19.0",
-    "@voltro/database": "0.60.0",
-    "@voltro/logger": "0.60.0",
-    "@voltro/protocol": "0.60.0"
+    "@voltro/database": "0.62.0",
+    "@voltro/logger": "0.62.0",
+    "@voltro/protocol": "0.62.0"
   },
   "peerDependencies": {
     "effect": "^3.22.0",