@voltro/workflow 0.85.0 → 0.86.0

package/dist/clusterMigrationGate.js

@@ -0,0 +1,61 @@
+import { webCryptoLayer as e } from "./webCrypto.js";
+import { Effect as t, Layer as n } from "effect";
+import { SqlClient as r } from "effect/sql";
+import { ShardingConfig as i, SqlMessageStorage as a, SqlRunnerStorage as o } from "effect/cluster";
+import { applyUndeclaredCharsetWork as s, fnv1a64 as c, readUndeclaredCharsetColumns as l, resolveMigrationLockSchema as u, sqlPoolCapacity as d, undeclaredCharsetWork as f } from "@voltro/database/sql";
+//#region src/clusterMigrationGate.ts
+var p = 6322741009312601n, m = () => {
+	let e = u();
+	return e === void 0 ? p : c(`voltro_cluster_migration_lock:${e}`) & 9223372036854775807n;
+}, h = () => {
+	let e = `voltro_cluster_migration_${p.toString(36)}`, t = u();
+	if (t === void 0) return e;
+	let n = `${e}_${t}`;
+	return /^[A-Za-z0-9_]+$/.test(t) && n.length <= 64 ? n : `${e}_h${c(`voltro_cluster_migration_lock:${t}`).toString(16)}`;
+}, g = () => {
+	let e = Number(process.env.VOLTRO_CLUSTER_MIGRATION_LOCK_TIMEOUT_MS);
+	return Number.isFinite(e) && e > 0 ? e : 6e4;
+}, _ = 250, v = (e) => e[0]?.[0], y = (e, n) => e.onDialectOrElse({
+	sqlite: () => t.void,
+	mysql: () => n.executeValues(`SELECT GET_LOCK('${h()}', ${Math.ceil(g() / 1e3)})`, []).pipe(t.flatMap((e) => v(e) === 1 || v(e) === "1" ? t.void : t.die(/* @__PURE__ */ Error(`could not acquire cluster migration lock '${h()}' (GET_LOCK timed out)`)))),
+	mssql: () => n.executeValues(`DECLARE @res int; EXEC @res = sp_getapplock @Resource = '${h()}', @LockMode = 'Exclusive', @LockOwner = 'Session', @LockTimeout = ${g()}; SELECT @res`, []).pipe(t.flatMap((e) => Number(v(e) ?? -999) >= 0 ? t.void : t.die(/* @__PURE__ */ Error(`could not acquire cluster migration lock '${h()}' (sp_getapplock ${String(v(e))})`)))),
+	orElse: () => {
+		let e = m().toString(), r = Date.now(), i = n.executeValues(`SELECT pg_try_advisory_lock(${e}::bigint)`, []).pipe(t.flatMap((e) => {
+			let n = v(e);
+			return n === !0 || n === "t" || n === 1 ? t.void : Date.now() - r >= g() ? t.die(/* @__PURE__ */ Error(`could not acquire the cluster migration advisory lock within ${Math.round(g() / 1e3)}s. Another runner is migrating the cluster schema, or a prior boot wedged while holding it. (Raise VOLTRO_CLUSTER_MIGRATION_LOCK_TIMEOUT_MS, or inspect pg_locks for the holder.)`)) : t.sleep(`${_} millis`).pipe(t.andThen(i));
+		}));
+		return i;
+	}
+}), b = (e, n) => e.onDialectOrElse({
+	sqlite: () => t.void,
+	mysql: () => t.asVoid(n.executeValues(`SELECT RELEASE_LOCK('${h()}')`, [])),
+	mssql: () => t.asVoid(n.executeValues(`EXEC sp_releaseapplock @Resource = '${h()}', @LockOwner = 'Session'`, [])),
+	orElse: () => t.asVoid(n.executeValues(`SELECT pg_advisory_unlock(${m().toString()}::bigint)`, []))
+}), x = (e, n) => e.onDialectOrElse({
+	sqlite: () => !0,
+	orElse: () => !1
+}) ? n : t.scoped(t.gen(function* () {
+	let r = yield* e.reserve;
+	return yield* t.acquireRelease(y(e, r), () => b(e, r).pipe(t.orDie)), yield* n;
+})), S = (e) => e === "sql" ? ["cluster_messages", "cluster_runners"] : ["cluster_messages"], C = (e, n) => e.onDialectOrElse({
+	pg: () => e`SELECT (to_regclass(${n}) IS NOT NULL) AS present`,
+	mysql: () => e`SELECT (COUNT(*) > 0) AS present FROM information_schema.tables WHERE table_schema = DATABASE() AND table_name = ${n}`,
+	mssql: () => e`SELECT CASE WHEN OBJECT_ID(${n}, 'U') IS NULL THEN 0 ELSE 1 END AS present`,
+	orElse: () => e`SELECT (COUNT(*) > 0) AS present FROM sqlite_master WHERE type = 'table' AND name = ${n}`
+}).pipe(t.map((e) => {
+	let t = e[0]?.present;
+	return t === !0 || t === 1 || t === "1" || t === "t" || typeof t == "bigint" && t === 1n;
+}), t.catch(() => t.succeed(!1))), w = (e, n) => t.forEach(S(n), (t) => C(e, t), { concurrency: 1 }).pipe(t.map((e) => e.every(Boolean))), T = (a, o) => t.scoped(t.asVoid(n.build(o.pipe(n.provide(i.layerDefaults), n.provide(n.succeed(r.SqlClient, a)), n.provide(e))))), E = (e, n) => T(e, a.layer).pipe(t.andThen(n === "sql" ? T(e, o.layer) : t.void)), D = (e) => t.map(e.unsafe("SELECT table_name AS t FROM information_schema.tables WHERE table_schema = DATABASE() AND table_name LIKE 'cluster\\_%'"), (e) => new Set(e.map((e) => String(e.t ?? e.T)))), O = (e, n, r) => r === void 0 || !e.onDialectOrElse({
+	mysql: () => !0,
+	orElse: () => !1
+}) ? E(e, n) : t.gen(function* () {
+	let t = yield* D(e);
+	yield* E(e, n);
+	let i = new Set([...yield* D(e)].filter((e) => !t.has(e)));
+	i.size !== 0 && (yield* s(e, f(yield* l(e), /* @__PURE__ */ new Set(), r, i)));
+}), k = (e) => e === "sql" ? 3 : 2, A = (e) => n.effect(r.SqlClient, t.gen(function* () {
+	let n = yield* r.SqlClient, i = k(e.runnerStorage), a = d(n);
+	return a !== void 0 && a < i ? yield* t.die(/* @__PURE__ */ Error(`the workflow runtime needs ${i} database connections at once and the pool has ${a}: ` + (e.runnerStorage === "sql" ? "on a first boot it holds its migration lock and its runner lock while the migration runs on a third, and once running it keeps the runner lock and needs one more to work. " : "on a first boot it holds its migration lock while the migration runs on a second. ") + `Set DB_MAX_CONNECTIONS (or PG_MAX_CONNECTIONS) to at least ${i}` + (e.runnerStorage === "sql" ? ", or VOLTRO_WORKFLOW_RUNNER_STORAGE=memory for a single-process runtime that needs 2 (no cross-pod shard handoff)." : "."))) : ((yield* w(n, e.runnerStorage)) || (yield* x(n, O(n, e.runnerStorage, e.charset))), n);
+}));
+//#endregion
+export { k as clusterConnectionFloor, A as clusterMigrationGateLayer, C as tableExists, x as withClusterMigrationLock };

package/dist/clusterRunnerLayer.js

@@ -0,0 +1,21 @@
+import { webCryptoLayer as e } from "./webCrypto.js";
+import { guardRunnerStorage as t } from "./runnerStorageGuard.js";
+import { Effect as n, Layer as r, Semaphore as i } from "effect";
+import { SqlClient as a } from "effect/sql";
+import { RunnerHealth as o, RunnerStorage as s, Runners as c, Sharding as l, ShardingConfig as u, SqlMessageStorage as d, SqlRunnerStorage as f } from "effect/cluster";
+//#region src/clusterRunnerLayer.ts
+var p = (e) => n.map(i.make(1), (t) => ({
+	...e,
+	release: (r, i) => t.withPermits(1)(n.suspend(() => e.release(r, i)))
+})), m = r.unwrap(n.map(a.SqlClient, (e) => e.onDialectOrElse({
+	sqlite: () => r.effect(s.RunnerStorage, n.flatMap(s.RunnerStorage, p)).pipe(r.provide(f.layer)),
+	orElse: () => f.layer
+}))), h = (e) => r.effect(s.RunnerStorage, n.gen(function* () {
+	let n = yield* a.SqlClient, r = yield* s.RunnerStorage;
+	return yield* t(r, {
+		...e,
+		probe: n`SELECT 1`
+	});
+})).pipe(r.provide(r.orDie(m))), g = (t) => l.layer.pipe(r.provideMerge(c.layerNoop), r.provideMerge(d.layer), r.provide([t.runnerStorage === "memory" ? s.layerMemory : h(t.guard), o.layerNoop]), r.provide(u.layerFromEnv(t.shardingConfig)), r.provide(e));
+//#endregion
+export { g as clusterRunnerLayer, p as limitSqliteShardReleases };

package/dist/clusterTestSuite.js

@@ -1,7 +1,11 @@
-import { E as e, O as t, a as n } from "./journalEncryption-DTyhUzaS.js";
-import { F as r, R as i, S as a, g as o, v as s } from "./primitives-DX04WTWh.js";
-import { C as c, r as l, w as u } from "./src-C2NEyUM8.js";
-import { t as d, u as f } from "./cluster-F_bhqVP7.js";
+import { failureMessage as e } from "./failureMessage.js";
+import { encryptionAwareActivity as t, setWorkflowJournalCipher as n } from "./journalEncryption.js";
+import { CurrentWorkflowRunId as r, WorkflowRunRecorder as i } from "./recorder.js";
+import { sleep as a, step as o, workflow as s } from "./primitives.js";
+import { awaitSignalSuspending as c, completeSuspendingSignal as l } from "./signalsSuspending.js";
+import { makeWorkflowRunRecorder as u } from "./runRecording.js";
+import { workflowEngineLayer as d } from "./clusterLayer.js";
+import { makeClusterCronLayer as f } from "./clusterCron.js";
 import { Cause as p, Cron as m, Deferred as h, Effect as g, Fiber as _, Layer as v, Option as y, Schema as b } from "effect";
 import { SqlClient as x } from "effect/sql";
 import { afterEach as S, beforeAll as C, describe as w, expect as T, test as E } from "vitest";
@@ -42,7 +46,7 @@ var D = async (e, t, n = 750) => {
 	}
 	return !0;
 }), N = (e) => {
-	let t = `${e.name}-${Date.now()}`, n = (t, n) => f({
+	let t = `${e.name}-${Date.now()}`, n = (t, n) => d({
 		sqlClientLayer: e.sqlClientLayer,
 		runnerStorage: e.runnerStorage,
 		runnerListenPort: t,
@@ -53,49 +57,45 @@ var D = async (e, t, n = 750) => {
 	w(`cluster workflow engine — ${e.name}`, () => {
 		let c = !1;
 		C(async () => {
-			if (c = await e.reachable(), !c) {
-				console.warn(`[skip] cluster suite — ${e.name} not reachable`);
-				return;
-			}
-			await k(e);
+			c = await e.reachable(), c ? await k(e) : console.warn(`[skip] cluster suite — ${e.name} not reachable`);
 		}, 3e4), E("a two-step workflow runs end-to-end", async () => {
 			if (!c) return;
-			let r = `clusterTwoStep_${t}`, i = a({
+			let r = `clusterTwoStep_${t}`, i = s({
 				name: r,
 				payload: { id: b.String },
 				success: b.Number,
 				idempotencyKey: ({ id: e }) => `${r}:${e}`
-			}), o = i.toLayer(() => g.gen(function* () {
-				let e = yield* s({
+			}), a = i.toLayer(() => g.gen(function* () {
+				let e = yield* o({
 					name: "first",
 					success: b.Number,
 					execute: g.succeed(40)
 				});
-				return yield* s({
+				return yield* o({
 					name: "second",
 					success: b.Number,
 					execute: g.succeed(e + 2)
 				});
-			})), l = await g.runPromise(g.scoped(i.execute({ id: `e2e-${t}` }).pipe(g.provide(o.pipe(v.provideMerge(n(e.runnerPort)))))));
+			})), l = await g.runPromise(g.scoped(i.execute({ id: `e2e-${t}` }).pipe(g.provide(a.pipe(v.provideMerge(n(e.runnerPort)))))));
 			T(l).toBe(42);
 		}, 3e4), E("idempotency-key journal — same payload returns same result", async () => {
 			if (!c) return;
-			let r = `clusterIdempotency_${t}`, i = 0, o = a({
+			let r = `clusterIdempotency_${t}`, i = 0, a = s({
 				name: r,
 				payload: { id: b.String },
 				success: b.Number,
 				idempotencyKey: ({ id: e }) => `${r}:${e}`
-			}), l = o.toLayer(() => s({
+			}), l = a.toLayer(() => o({
 				name: "compute",
 				success: b.Number,
 				execute: g.sync(() => (i++, i * 100))
 			})).pipe(v.provideMerge(n(e.runnerPort))), [u, d] = await g.runPromise(g.scoped(g.gen(function* () {
-				return [yield* o.execute({ id: `same-${t}` }), yield* o.execute({ id: `same-${t}` })];
+				return [yield* a.execute({ id: `same-${t}` }), yield* a.execute({ id: `same-${t}` })];
 			}).pipe(g.provide(l))));
 			T(u).toBe(d), T(i).toBe(1);
 		}, 3e4), E("ClusterCron fires its execute on the shard owner", async () => {
 			if (!c) return;
-			let r = await g.runPromise(h.make()), i = 0, a = d({
+			let r = await g.runPromise(h.make()), i = 0, a = f({
 				name: `clusterCron_${t}`,
 				cron: m.parseUnsafe("*/1 * * * * *", "UTC"),
 				execute: async () => {
@@ -106,31 +106,31 @@ var D = async (e, t, n = 750) => {
 			})));
 			T(o).toBe(!0), T(i).toBeGreaterThanOrEqual(1);
 		}, 35e3);
-		let u = e.clusterResume ? E : (() => {});
-		u("a sleeping workflow resumes on a fresh runner after the first is torn down", async () => {
+		let l = e.clusterResume ? E : (() => {});
+		l("a sleeping workflow resumes on a fresh runner after the first is torn down", async () => {
 			if (!c) return;
-			let r = `dormancyResume_${t}`, i = [], l = [], u = [], d = () => a({
+			let r = `dormancyResume_${t}`, i = [], l = [], u = [], d = () => s({
 				name: r,
 				payload: { id: b.String },
 				success: b.String,
 				idempotencyKey: ({ id: e }) => `${r}:${e}`
 			}), f = (e, t) => e.toLayer(() => g.gen(function* () {
-				return yield* s({
+				return yield* o({
 					name: "step1",
 					success: b.Void,
 					execute: g.sync(() => {
 						i.push(t);
 					})
-				}), yield* s({
+				}), yield* o({
 					name: "armed",
 					success: b.Void,
 					execute: g.sync(() => {
 						u.push(t);
 					})
-				}), yield* o({
+				}), yield* a({
 					name: "nap",
 					duration: A
-				}), yield* s({
+				}), yield* o({
 					name: "step2",
 					success: b.Void,
 					execute: g.sync(() => {
@@ -153,9 +153,9 @@ var D = async (e, t, n = 750) => {
 				return yield* e.execute(h).pipe(g.provide(n), g.timeout("240 seconds"), g.orElseSucceed(() => "TIMEOUT"));
 			})));
 			T(x).toBe("done"), T(i).toEqual(["A"]), T(l).toEqual(["B"]);
-		}, 48e4), u("dormancy loop: a wake signal survives teardown and is cleared on resume", async () => {
+		}, 48e4), l("dormancy loop: a wake signal survives teardown and is cleared on resume", async () => {
 			if (!c) return;
-			let u = `dormancyLoop_${t}`, d = `wr_${u}`, f = [], p = /* @__PURE__ */ new Map(), m = l({
+			let l = `dormancyLoop_${t}`, d = `wr_${l}`, f = [], p = /* @__PURE__ */ new Map(), m = u({
 				store: {
 					insert: async (e, t) => t,
 					update: async () => null,
@@ -169,20 +169,20 @@ var D = async (e, t, n = 750) => {
 						p.delete(e);
 					}
 				}
-			}), h = () => a({
-				name: u,
+			}), h = () => s({
+				name: l,
 				payload: { id: b.String },
 				success: b.String,
-				idempotencyKey: ({ id: e }) => `${u}:${e}`
+				idempotencyKey: ({ id: e }) => `${l}:${e}`
 			}), y = (e, t) => e.toLayer(() => g.gen(function* () {
-				return yield* s({
+				return yield* o({
 					name: "step1",
 					success: b.Void,
 					execute: g.void
-				}), yield* o({
+				}), yield* a({
 					name: "nap",
 					duration: j
-				}), yield* s({
+				}), yield* o({
 					name: "step2",
 					success: b.Void,
 					execute: g.sync(() => {
@@ -211,16 +211,16 @@ var D = async (e, t, n = 750) => {
 	encrypt: (e) => `enc:v2:c:${Buffer.from(e, "utf8").toString("base64")}`,
 	decrypt: (e) => Buffer.from(e.slice(9), "base64").toString("utf8")
 }, F = (r) => {
-	let i = `${r.name}-enc-${Date.now()}`, o = () => f({
+	let i = `${r.name}-enc-${Date.now()}`, a = () => d({
 		sqlClientLayer: r.sqlClientLayer,
 		runnerStorage: r.runnerStorage,
 		runnerListenPort: r.runnerPort + 7,
 		...r.dialectId ? { dialectId: r.dialectId } : {}
-	}), l = (e) => g.runPromise(g.gen(function* () {
+	}), u = (e) => g.runPromise(g.gen(function* () {
 		let t = yield* x.SqlClient, n = yield* t.unsafe("SELECT * FROM cluster_messages"), r = yield* t.unsafe("SELECT * FROM cluster_replies"), i = (e) => JSON.stringify(e, (e, t) => typeof t == "bigint" ? String(t) : t);
 		return [...n, ...r].filter((t) => i(t).includes(e)).length;
-	}).pipe(g.provideService(x.SafeIntegers, !0), g.scoped, g.provide(r.sqlClientLayer))), d = (e, t) => {
-		let n = a({
+	}).pipe(g.provideService(x.SafeIntegers, !0), g.scoped, g.provide(r.sqlClientLayer))), f = (e, t) => {
+		let n = s({
 			name: e,
 			payload: {
 				note: b.String,
@@ -233,7 +233,7 @@ var D = async (e, t, n = 750) => {
 		return {
 			wf: n,
 			handler: n.toLayer(({ note: e }) => g.gen(function* () {
-				return { summary: `RESULT-${yield* s({
+				return { summary: `RESULT-${yield* o({
 					name: "summarise",
 					success: b.String,
 					execute: g.sync(() => (r++, `STEP-${e}`))
@@ -241,39 +241,39 @@ var D = async (e, t, n = 750) => {
 			})),
 			executions: () => r
 		};
-	}, m = (e, t) => g.runPromise(g.scoped(e.wf.execute(t).pipe(g.provide(e.handler.pipe(v.provideMerge(o()))))));
+	}, m = (e, t) => g.runPromise(g.scoped(e.wf.execute(t).pipe(g.provide(e.handler.pipe(v.provideMerge(a()))))));
 	w(`encrypted workflow journal — ${r.name}`, () => {
-		let f = !1;
+		let d = !1;
 		C(async () => {
-			f = await r.reachable(), f && await k(r);
-		}, 3e4), S(() => e(void 0)), E("payload, step result and result are ciphertext; the unencrypted twin is found (control)", async (t) => {
-			f || t.skip(), e(P);
-			let n = d(`journalPlain_${i}`, !1), r = d(`journalSealed_${i}`, !0);
-			T(await m(n, {
+			d = await r.reachable(), d && await k(r);
+		}, 3e4), S(() => n(void 0)), E("payload, step result and result are ciphertext; the unencrypted twin is found (control)", async (e) => {
+			d || e.skip(), n(P);
+			let t = f(`journalPlain_${i}`, !1), r = f(`journalSealed_${i}`, !0);
+			T(await m(t, {
 				note: "PLAINMARK",
 				count: 1
 			})).toEqual({ summary: "RESULT-STEP-PLAINMARK" }), T(await m(r, {
 				note: "SEALMARK",
 				count: 1
-			})).toEqual({ summary: "RESULT-STEP-SEALMARK" }), T(await l("PLAINMARK"), "the probe finds plaintext").toBeGreaterThan(0), T(await l("SEALMARK"), "no journal row carries the encrypted run in plaintext").toBe(0), T(await l("enc:v2:c:"), "and the ciphertext is there").toBeGreaterThan(0);
-		}, 6e4), E("a second execute replays the result from the encrypted journal without re-running the step", async (t) => {
-			f || t.skip(), e(P);
-			let n = d(`journalReplay_${i}`, !0), r = await m(n, {
+			})).toEqual({ summary: "RESULT-STEP-SEALMARK" }), T(await u("PLAINMARK"), "the probe finds plaintext").toBeGreaterThan(0), T(await u("SEALMARK"), "no journal row carries the encrypted run in plaintext").toBe(0), T(await u("enc:v2:c:"), "and the ciphertext is there").toBeGreaterThan(0);
+		}, 6e4), E("a second execute replays the result from the encrypted journal without re-running the step", async (e) => {
+			d || e.skip(), n(P);
+			let t = f(`journalReplay_${i}`, !0), r = await m(t, {
 				note: "REPLAYMARK",
 				count: 7
-			}), a = await m(n, {
+			}), a = await m(t, {
 				note: "REPLAYMARK",
 				count: 7
 			});
-			T(a).toEqual(r), T(n.executions()).toBe(1);
-		}, 6e4), E("a run journaled in plaintext before the declaration is still read", async (t) => {
-			f || t.skip();
-			let n = `journalBefore_${i}`, r = await m(d(n, !1), {
+			T(a).toEqual(r), T(t.executions()).toBe(1);
+		}, 6e4), E("a run journaled in plaintext before the declaration is still read", async (e) => {
+			d || e.skip();
+			let t = `journalBefore_${i}`, r = await m(f(t, !1), {
 				note: "OLDMARK",
 				count: 3
 			});
-			e(P);
-			let a = d(n, !0);
+			n(P);
+			let a = f(t, !0);
 			T(await m(a, {
 				note: "OLDMARK",
 				count: 3
@@ -281,44 +281,44 @@ var D = async (e, t, n = 750) => {
 		}, 6e4);
 		let h = (e, t, n) => {
 			class r extends b.TaggedError()("Refused", { detail: b.String }) {}
-			let i = a({
+			let i = s({
 				name: e,
 				payload: { note: b.String },
 				error: r,
 				idempotencyKey: ({ note: t }) => `${e}:${t}`,
 				encrypted: t
-			}), c = i.toLayer(({ note: e }) => s({
+			}), c = i.toLayer(({ note: e }) => o({
 				name: "call-upstream",
 				success: b.String,
 				error: r,
 				execute: n === "defect" ? g.die(/* @__PURE__ */ Error(`upstream rejected FAILMARK-${e}`)) : g.fail(new r({ detail: `FAILMARK-${e}` }))
 			}));
-			return g.runPromiseExit(g.scoped(i.execute({ note: e }).pipe(g.provide(c.pipe(v.provideMerge(o()))))));
+			return g.runPromiseExit(g.scoped(i.execute({ note: e }).pipe(g.provide(c.pipe(v.provideMerge(a()))))));
 		};
-		for (let n of ["defect", "typed"]) E(`a ${n} failure of an encrypted run leaves no plaintext; the unencrypted twin does (control)`, async (r) => {
-			f || r.skip(), e(P);
-			let a = await h(`journalFailPlain_${n}_${i}`, !1, n);
-			T(a._tag).toBe("Failure"), T(await l(`FAILMARK-journalFailPlain_${n}`), "the probe finds plaintext").toBeGreaterThan(0);
-			let o = await h(`journalFailSealed_${n}_${i}`, !0, n);
-			T(o._tag).toBe("Failure"), T(await l(`FAILMARK-journalFailSealed_${n}`), "no journal row carries the failure in plaintext").toBe(0), T(t(p.squash(o.cause))).toContain(`FAILMARK-journalFailSealed_${n}`);
+		for (let t of ["defect", "typed"]) E(`a ${t} failure of an encrypted run leaves no plaintext; the unencrypted twin does (control)`, async (r) => {
+			d || r.skip(), n(P);
+			let a = await h(`journalFailPlain_${t}_${i}`, !1, t);
+			T(a._tag).toBe("Failure"), T(await u(`FAILMARK-journalFailPlain_${t}`), "the probe finds plaintext").toBeGreaterThan(0);
+			let o = await h(`journalFailSealed_${t}_${i}`, !0, t);
+			T(o._tag).toBe("Failure"), T(await u(`FAILMARK-journalFailSealed_${t}`), "no journal row carries the failure in plaintext").toBe(0), T(e(p.squash(o.cause))).toContain(`FAILMARK-journalFailSealed_${t}`);
 		}, 6e4);
-		E("a journaled wait value of an encrypted run is ciphertext; the unencrypted twin is found (control)", async (t) => {
-			f || t.skip(), e(P);
-			let r = (e, t) => {
-				let r = a({
+		E("a journaled wait value of an encrypted run is ciphertext; the unencrypted twin is found (control)", async (e) => {
+			d || e.skip(), n(P);
+			let r = (e, n) => {
+				let r = s({
 					name: e,
 					payload: { note: b.String },
 					success: b.String,
 					idempotencyKey: ({ note: t }) => `${e}:${t}`,
-					encrypted: t
-				}), i = r.toLayer(({ note: e }) => n({
+					encrypted: n
+				}), i = r.toLayer(({ note: e }) => t({
 					name: "await-signal:approval",
 					success: b.String,
 					execute: g.succeed(`WAITMARK-${e}`)
 				}));
-				return g.runPromise(g.scoped(r.execute({ note: e }).pipe(g.provide(i.pipe(v.provideMerge(o()))))));
+				return g.runPromise(g.scoped(r.execute({ note: e }).pipe(g.provide(i.pipe(v.provideMerge(a()))))));
 			};
-			T(await r(`journalWaitPlain_${i}`, !1)).toBe(`WAITMARK-journalWaitPlain_${i}`), T(await l(`WAITMARK-journalWaitPlain_${i}`), "the probe finds plaintext").toBeGreaterThan(0), T(await r(`journalWaitSealed_${i}`, !0)).toBe(`WAITMARK-journalWaitSealed_${i}`), T(await l(`WAITMARK-journalWaitSealed_${i}`), "no plaintext wait value in the journal").toBe(0);
+			T(await r(`journalWaitPlain_${i}`, !1)).toBe(`WAITMARK-journalWaitPlain_${i}`), T(await u(`WAITMARK-journalWaitPlain_${i}`), "the probe finds plaintext").toBeGreaterThan(0), T(await r(`journalWaitSealed_${i}`, !0)).toBe(`WAITMARK-journalWaitSealed_${i}`), T(await u(`WAITMARK-journalWaitSealed_${i}`), "no plaintext wait value in the journal").toBe(0);
 		}, 6e4);
 		let _ = (e, t, n) => g.gen(function* () {
 			for (let r = 0; r < 400; r++) {
@@ -328,59 +328,59 @@ var D = async (e, t, n = 750) => {
 			}
 			return yield* g.die(/* @__PURE__ */ Error("pollUntil: never satisfied"));
 		}), x = (e) => y.isOption(e) && y.isSome(e) ? e.value._tag : void 0;
-		for (let t of [!1, !0]) E(`a suspending signal's value is ${t ? "ciphertext" : "found (control)"} in the journal, and the run resumes with it`, async (n) => {
-			f || n.skip(), e(P);
-			let r = `journalSignal_${t ? "sealed" : "plain"}_${i}`, s = a({
+		for (let e of [!1, !0]) E(`a suspending signal's value is ${e ? "ciphertext" : "found (control)"} in the journal, and the run resumes with it`, async (t) => {
+			d || t.skip(), n(P);
+			let r = `journalSignal_${e ? "sealed" : "plain"}_${i}`, o = s({
 				name: r,
 				payload: { id: b.String },
 				success: b.Unknown,
 				idempotencyKey: ({ id: e }) => `${r}:${e}`,
-				encrypted: t
-			}), d = s.toLayer(() => c({ store: { query: () => Promise.resolve([]) } }, {
+				encrypted: e
+			}), f = o.toLayer(() => c({ store: { query: () => Promise.resolve([]) } }, {
 				name: "approval",
 				schema: b.Struct({ comment: b.String }),
 				timeoutMs: 36e5
 			})), p = `SIGNALMARK-${r}`, m = await g.runPromise(g.scoped(g.gen(function* () {
-				let e = yield* s.executionId({ id: "one" });
-				return yield* s.execute({ id: "one" }, { discard: !0 }), yield* _(s, e, (e) => x(e) === "Suspended"), yield* u({
+				let e = yield* o.executionId({ id: "one" });
+				return yield* o.execute({ id: "one" }, { discard: !0 }), yield* _(o, e, (e) => x(e) === "Suspended"), yield* l({
 					target: {
 						executionId: e,
 						workflowName: r
 					},
 					signalName: "approval",
 					payload: { comment: p }
-				}), yield* _(s, e, (e) => x(e) === "Complete");
-			}).pipe(g.provide(d.pipe(v.provideMerge(o()))))));
+				}), yield* _(o, e, (e) => x(e) === "Complete");
+			}).pipe(g.provide(f.pipe(v.provideMerge(a()))))));
 			T(JSON.stringify(y.getOrThrow(m).exit), "the body received the value").toContain(p);
-			let h = await l(p);
-			t ? T(h, "no plaintext signal value in the journal").toBe(0) : T(h, "the probe finds plaintext").toBeGreaterThan(0);
+			let h = await u(p);
+			e ? T(h, "no plaintext signal value in the journal").toBe(0) : T(h, "the probe finds plaintext").toBeGreaterThan(0);
 		}, 9e4);
-		E("an encrypted child's defect reaches its encrypted parent as thrown, and no journal row carries it", async (t) => {
-			f || t.skip(), e(P);
-			let n = `journalChild_${i}`, r = `journalParent_${i}`, s = `CHILDMARK-${i}`, c = a({
-				name: n,
+		E("an encrypted child's defect reaches its encrypted parent as thrown, and no journal row carries it", async (e) => {
+			d || e.skip(), n(P);
+			let t = `journalChild_${i}`, r = `journalParent_${i}`, o = `CHILDMARK-${i}`, c = s({
+				name: t,
 				payload: { id: b.String },
 				success: b.String,
 				idempotencyKey: ({ id: e }) => e,
 				encrypted: !0
-			}), u = a({
+			}), l = s({
 				name: r,
 				payload: { id: b.String },
 				success: b.String,
 				idempotencyKey: ({ id: e }) => e,
 				encrypted: !0
-			}), d = c.toLayer(() => g.die(/* @__PURE__ */ Error(`child failed ${s}`))), p = u.toLayer(({ id: e }) => c.execute({ id: `${e}-child` }).pipe(g.catchDefect((e) => g.succeed(`caught: ${e.message}`)))), m = await g.runPromise(g.scoped(u.execute({ id: "p1" }).pipe(g.provide(v.mergeAll(p, d).pipe(v.provideMerge(o()))))));
-			T(m).toBe(`caught: child failed ${s}`), T(await l(s)).toBe(0);
-		}, 6e4), E("an encrypted run that suspends on a failed step journals no plaintext", async (t) => {
-			f || t.skip(), e(P);
-			let n = `journalSuspendOnFailure_${i}`, r = `SOFMARK-${i}`, c = a({
-				name: n,
+			}), f = c.toLayer(() => g.die(/* @__PURE__ */ Error(`child failed ${o}`))), p = l.toLayer(({ id: e }) => c.execute({ id: `${e}-child` }).pipe(g.catchDefect((e) => g.succeed(`caught: ${e.message}`)))), m = await g.runPromise(g.scoped(l.execute({ id: "p1" }).pipe(g.provide(v.mergeAll(p, f).pipe(v.provideMerge(a()))))));
+			T(m).toBe(`caught: child failed ${o}`), T(await u(o)).toBe(0);
+		}, 6e4), E("an encrypted run that suspends on a failed step journals no plaintext", async (e) => {
+			d || e.skip(), n(P);
+			let t = `journalSuspendOnFailure_${i}`, r = `SOFMARK-${i}`, c = s({
+				name: t,
 				payload: { id: b.String },
 				success: b.String,
 				idempotencyKey: ({ id: e }) => e,
 				encrypted: !0,
 				suspendOnFailure: !0
-			}), u = c.toLayer(() => s({
+			}), l = c.toLayer(() => o({
 				name: "call",
 				success: b.String,
 				execute: g.die(/* @__PURE__ */ Error(`step failed ${r}`))
@@ -388,14 +388,14 @@ var D = async (e, t, n = 750) => {
 			await g.runPromise(g.scoped(g.gen(function* () {
 				let e = yield* c.executionId({ id: "s1" });
 				yield* c.execute({ id: "s1" }, { discard: !0 }), yield* _(c, e, (e) => x(e) === "Suspended");
-			}).pipe(g.provide(u.pipe(v.provideMerge(o())))))), T(await l(r)).toBe(0);
+			}).pipe(g.provide(l.pipe(v.provideMerge(a())))))), T(await u(r)).toBe(0);
 		}, 6e4), E("without a registered cipher an encrypted run fails instead of writing plaintext", async (e) => {
-			f || e.skip();
-			let t = d(`journalNoCipher_${i}`, !0);
+			d || e.skip();
+			let t = f(`journalNoCipher_${i}`, !0);
 			await T(m(t, {
 				note: "NOCIPHERMARK",
 				count: 1
-			})).rejects.toThrow(), T(await l("NOCIPHERMARK")).toBe(0);
+			})).rejects.toThrow(), T(await u("NOCIPHERMARK")).toBe(0);
 		}, 6e4);
 	});
 };

package/dist/controlMonitor.js

@@ -0,0 +1,13 @@
+import { readPendingWorkflowCancellation as e } from "./controlRequest.js";
+import { Effect as t } from "effect";
+import { WorkflowInstance as n } from "effect/workflow/WorkflowEngine";
+//#region src/controlMonitor.ts
+var r = (r, i, a) => t.gen(function* () {
+	let o = yield* n;
+	for (;;) {
+		if (yield* t.tryPromise(() => e(i, r)).pipe(t.catch(() => t.sync(() => (a(), !1))))) return o.interrupted = !0, yield* t.interrupt;
+		yield* t.sleep(1e3);
+	}
+});
+//#endregion
+export { r as awaitWorkflowCancellation };