@voltro/workflow 0.85.0 → 0.87.0

package/dist/clusterTestSuite.js

@@ -1,12 +1,17 @@
-import { E as e, O as t, a as n } from "./journalEncryption-DTyhUzaS.js";
-import { F as r, R as i, S as a, g as o, v as s } from "./primitives-DX04WTWh.js";
-import { C as c, r as l, w as u } from "./src-C2NEyUM8.js";
-import { t as d, u as f } from "./cluster-F_bhqVP7.js";
-import { Cause as p, Cron as m, Deferred as h, Effect as g, Fiber as _, Layer as v, Option as y, Schema as b } from "effect";
-import { SqlClient as x } from "effect/sql";
-import { afterEach as S, beforeAll as C, describe as w, expect as T, test as E } from "vitest";
+import { failureMessage as e } from "./failureMessage.js";
+import { encryptionAwareActivity as t, setWorkflowJournalCipher as n } from "./journalEncryption.js";
+import { CurrentWorkflowRunId as r, WorkflowRunRecorder as i } from "./recorder.js";
+import { sleep as a, step as o, workflow as s } from "./primitives.js";
+import { awaitSignalSuspending as c, completeSuspendingSignal as l } from "./signalsSuspending.js";
+import { makeWorkflowRunRecorder as u } from "./runRecording.js";
+import { workflowEngineLayer as d } from "./clusterLayer.js";
+import { makeClusterCronLayer as f } from "./clusterCron.js";
+import { Cause as p, Cron as m, Deferred as h, Effect as g, Fiber as _, Layer as v, ManagedRuntime as y, Option as b, Schema as x } from "effect";
+import { SqlClient as S } from "effect/sql";
+import { EntityId as C, Sharding as w } from "effect/cluster";
+import { afterEach as T, beforeAll as E, describe as D, expect as O, test as k } from "vitest";
 //#region src/clusterTestSuite.ts
-var D = async (e, t, n = 750) => {
+var A = async (e, t, n = 750) => {
 	try {
 		let r = await import("node:net");
 		return await new Promise((i) => {
@@ -22,27 +27,27 @@ var D = async (e, t, n = 750) => {
 	} catch {
 		return !1;
 	}
-}, O = [
+}, j = [
 	"cluster_messages",
 	"cluster_replies",
 	"cluster_locks",
 	"cluster_runners"
-], k = async (e) => {
+], M = async (e) => {
 	try {
 		await g.runPromise(g.gen(function* () {
-			let e = yield* x.SqlClient;
-			for (let t of O) yield* e.unsafe(`DELETE FROM ${t}`).pipe(g.ignore);
+			let e = yield* S.SqlClient;
+			for (let t of j) yield* e.unsafe(`DELETE FROM ${t}`).pipe(g.ignore);
 		}).pipe(g.scoped, g.provide(e.sqlClientLayer)));
 	} catch {}
-}, A = "10 seconds", j = "30 seconds", M = (e, t) => g.gen(function* () {
+}, N = "10 seconds", P = "30 seconds", F = (e, t) => g.gen(function* () {
 	let n = yield* g.sync(() => Date.now() + t);
 	for (; !e();) {
 		if (Date.now() > n) return !1;
 		yield* g.sleep("250 millis");
 	}
 	return !0;
-}), N = (e) => {
-	let t = `${e.name}-${Date.now()}`, n = (t, n) => f({
+}), I = (e) => {
+	let t = `${e.name}-${Date.now()}`, n = (t, n) => d({
 		sqlClientLayer: e.sqlClientLayer,
 		runnerStorage: e.runnerStorage,
 		runnerListenPort: t,
@@ -50,52 +55,77 @@ var D = async (e, t, n = 750) => {
 		...e.shardLockMode ? { shardLockMode: e.shardLockMode } : {},
 		...n && n.length > 0 ? { extraShardingLayers: n } : {}
 	});
-	w(`cluster workflow engine — ${e.name}`, () => {
+	D(`cluster workflow engine — ${e.name}`, () => {
 		let c = !1;
-		C(async () => {
-			if (c = await e.reachable(), !c) {
-				console.warn(`[skip] cluster suite — ${e.name} not reachable`);
+		E(async () => {
+			c = await e.reachable(), c ? await M(e) : console.warn(`[skip] cluster suite — ${e.name} not reachable`);
+		}, 3e4), (e.runnerStorage === "sql" && e.dialectId !== "sqlite" ? k : (() => {}))("client-only submission executes on a distinct worker and never owns its shard", async (r) => {
+			if (!c) {
+				r.skip();
 				return;
 			}
-			await k(e);
-		}, 3e4), E("a two-step workflow runs end-to-end", async () => {
+			let i = `roleClient_${t}`, a = s({
+				name: i,
+				payload: { id: x.String },
+				success: x.Number,
+				idempotencyKey: ({ id: e }) => `${i}:${e}`
+			}), o = 0, l = 0, u = y.make(a.toLayer(() => g.sync(() => (o++, 42))).pipe(v.provideMerge(n(e.runnerPort)))), f = y.make(a.toLayer(() => g.sync(() => (l++, -1))).pipe(v.provideMerge(d({
+				sqlClientLayer: e.sqlClientLayer,
+				runnerStorage: "sql",
+				runnerMode: "client",
+				runnerListenPort: e.runnerPort + 19,
+				...e.dialectId ? { dialectId: e.dialectId } : {},
+				...e.shardLockMode ? { shardLockMode: e.shardLockMode } : {}
+			}))));
+			try {
+				await u.runPromise(g.void), await f.runPromise(g.void);
+				let e = await f.runPromise(a.execute({ id: "from-client" }).pipe(g.timeout("60 seconds")));
+				O(e).toBe(42), O(o).toBe(1), O(l).toBe(0), O(await f.runPromise(g.map(w.Sharding, (e) => e.hasShardId(e.getShardId(C.make("client-probe"), "default"))))).toBe(!1), O(await f.runPromise(a.execute({ id: "from-client" }).pipe(g.timeout("60 seconds")))).toBe(42), O(o).toBe(1), O(l).toBe(0);
+			} finally {
+				try {
+					await f.dispose();
+				} finally {
+					await u.dispose();
+				}
+			}
+		}, 15e4), k("a two-step workflow runs end-to-end", async () => {
 			if (!c) return;
-			let r = `clusterTwoStep_${t}`, i = a({
+			let r = `clusterTwoStep_${t}`, i = s({
 				name: r,
-				payload: { id: b.String },
-				success: b.Number,
+				payload: { id: x.String },
+				success: x.Number,
 				idempotencyKey: ({ id: e }) => `${r}:${e}`
-			}), o = i.toLayer(() => g.gen(function* () {
-				let e = yield* s({
+			}), a = i.toLayer(() => g.gen(function* () {
+				let e = yield* o({
 					name: "first",
-					success: b.Number,
+					success: x.Number,
 					execute: g.succeed(40)
 				});
-				return yield* s({
+				return yield* o({
 					name: "second",
-					success: b.Number,
+					success: x.Number,
 					execute: g.succeed(e + 2)
 				});
-			})), l = await g.runPromise(g.scoped(i.execute({ id: `e2e-${t}` }).pipe(g.provide(o.pipe(v.provideMerge(n(e.runnerPort)))))));
-			T(l).toBe(42);
-		}, 3e4), E("idempotency-key journal — same payload returns same result", async () => {
+			})), l = await g.runPromise(g.scoped(i.execute({ id: `e2e-${t}` }).pipe(g.provide(a.pipe(v.provideMerge(n(e.runnerPort)))))));
+			O(l).toBe(42);
+		}, 3e4), k("idempotency-key journal — same payload returns same result", async () => {
 			if (!c) return;
-			let r = `clusterIdempotency_${t}`, i = 0, o = a({
+			let r = `clusterIdempotency_${t}`, i = 0, a = s({
 				name: r,
-				payload: { id: b.String },
-				success: b.Number,
+				payload: { id: x.String },
+				success: x.Number,
 				idempotencyKey: ({ id: e }) => `${r}:${e}`
-			}), l = o.toLayer(() => s({
+			}), l = a.toLayer(() => o({
 				name: "compute",
-				success: b.Number,
+				success: x.Number,
 				execute: g.sync(() => (i++, i * 100))
 			})).pipe(v.provideMerge(n(e.runnerPort))), [u, d] = await g.runPromise(g.scoped(g.gen(function* () {
-				return [yield* o.execute({ id: `same-${t}` }), yield* o.execute({ id: `same-${t}` })];
+				return [yield* a.execute({ id: `same-${t}` }), yield* a.execute({ id: `same-${t}` })];
 			}).pipe(g.provide(l))));
-			T(u).toBe(d), T(i).toBe(1);
-		}, 3e4), E("ClusterCron fires its execute on the shard owner", async () => {
+			O(u).toBe(d), O(i).toBe(1);
+		}, 3e4), k("ClusterCron fires its execute on the shard owner", async () => {
 			if (!c) return;
-			let r = await g.runPromise(h.make()), i = 0, a = d({
+			let r = await g.runPromise(h.make()), i = 0, a = f({
 				name: `clusterCron_${t}`,
 				cron: m.parseUnsafe("*/1 * * * * *", "UTC"),
 				execute: async () => {
@@ -104,35 +134,35 @@ var D = async (e, t, n = 750) => {
 			}), o = await g.runPromise(g.scoped(g.gen(function* () {
 				return yield* v.build(n(e.runnerPort + 1, [a])), yield* h.await(r).pipe(g.timeout("25 seconds"), g.orElseSucceed(() => !1));
 			})));
-			T(o).toBe(!0), T(i).toBeGreaterThanOrEqual(1);
+			O(o).toBe(!0), O(i).toBeGreaterThanOrEqual(1);
 		}, 35e3);
-		let u = e.clusterResume ? E : (() => {});
-		u("a sleeping workflow resumes on a fresh runner after the first is torn down", async () => {
+		let l = e.clusterResume ? k : (() => {});
+		l("a sleeping workflow resumes on a fresh runner after the first is torn down", async () => {
 			if (!c) return;
-			let r = `dormancyResume_${t}`, i = [], l = [], u = [], d = () => a({
+			let r = `dormancyResume_${t}`, i = [], l = [], u = [], d = () => s({
 				name: r,
-				payload: { id: b.String },
-				success: b.String,
+				payload: { id: x.String },
+				success: x.String,
 				idempotencyKey: ({ id: e }) => `${r}:${e}`
 			}), f = (e, t) => e.toLayer(() => g.gen(function* () {
-				return yield* s({
+				return yield* o({
 					name: "step1",
-					success: b.Void,
+					success: x.Void,
 					execute: g.sync(() => {
 						i.push(t);
 					})
-				}), yield* s({
+				}), yield* o({
 					name: "armed",
-					success: b.Void,
+					success: x.Void,
 					execute: g.sync(() => {
 						u.push(t);
 					})
-				}), yield* o({
+				}), yield* a({
 					name: "nap",
-					duration: A
-				}), yield* s({
+					duration: N
+				}), yield* o({
 					name: "step2",
-					success: b.Void,
+					success: x.Void,
 					execute: g.sync(() => {
 						l.push(t);
 					})
@@ -145,17 +175,17 @@ var D = async (e, t, n = 750) => {
 				};
 			}, h = { id: `resume-${t}` }, y = await g.runPromise(g.scoped(g.gen(function* () {
 				let { wf: e, layer: t } = m("A"), n = yield* v.build(t), r = yield* g.forkDetach(e.execute(h).pipe(g.provide(n), g.ignore));
-				return (yield* M(() => u.length > 0, 6e4)) ? r : yield* g.die(/* @__PURE__ */ Error("runner A never journaled step1"));
+				return (yield* F(() => u.length > 0, 6e4)) ? r : yield* g.die(/* @__PURE__ */ Error("runner A never journaled step1"));
 			})));
-			await g.runPromise(_.interrupt(y).pipe(g.ignore)), T(i).toEqual(["A"]), T(l).toEqual([]);
-			let x = await g.runPromise(g.scoped(g.gen(function* () {
+			await g.runPromise(_.interrupt(y).pipe(g.ignore)), O(i).toEqual(["A"]), O(l).toEqual([]);
+			let b = await g.runPromise(g.scoped(g.gen(function* () {
 				let { wf: e, layer: t } = m("B"), n = yield* v.build(t);
 				return yield* e.execute(h).pipe(g.provide(n), g.timeout("240 seconds"), g.orElseSucceed(() => "TIMEOUT"));
 			})));
-			T(x).toBe("done"), T(i).toEqual(["A"]), T(l).toEqual(["B"]);
-		}, 48e4), u("dormancy loop: a wake signal survives teardown and is cleared on resume", async () => {
+			O(b).toBe("done"), O(i).toEqual(["A"]), O(l).toEqual(["B"]);
+		}, 48e4), l("dormancy loop: a wake signal survives teardown and is cleared on resume", async () => {
 			if (!c) return;
-			let u = `dormancyLoop_${t}`, d = `wr_${u}`, f = [], p = /* @__PURE__ */ new Map(), m = l({
+			let l = `dormancyLoop_${t}`, d = `wr_${l}`, f = [], p = /* @__PURE__ */ new Map(), m = u({
 				store: {
 					insert: async (e, t) => t,
 					update: async () => null,
@@ -169,156 +199,156 @@ var D = async (e, t, n = 750) => {
 						p.delete(e);
 					}
 				}
-			}), h = () => a({
-				name: u,
-				payload: { id: b.String },
-				success: b.String,
-				idempotencyKey: ({ id: e }) => `${u}:${e}`
+			}), h = () => s({
+				name: l,
+				payload: { id: x.String },
+				success: x.String,
+				idempotencyKey: ({ id: e }) => `${l}:${e}`
 			}), y = (e, t) => e.toLayer(() => g.gen(function* () {
-				return yield* s({
+				return yield* o({
 					name: "step1",
-					success: b.Void,
+					success: x.Void,
 					execute: g.void
-				}), yield* o({
+				}), yield* a({
 					name: "nap",
-					duration: j
-				}), yield* s({
+					duration: P
+				}), yield* o({
 					name: "step2",
-					success: b.Void,
+					success: x.Void,
 					execute: g.sync(() => {
 						f.push(t);
 					})
 				}), "done";
-			}).pipe(g.provideService(r, d), g.provideService(i, m))), x = e.runnerPort + 2, S = (e) => {
+			}).pipe(g.provideService(r, d), g.provideService(i, m))), b = e.runnerPort + 2, S = (e) => {
 				let t = h();
 				return {
 					wf: t,
-					layer: y(t, e).pipe(v.provideMerge(n(x)))
+					layer: y(t, e).pipe(v.provideMerge(n(b)))
 				};
 			}, C = { id: `loop-${t}` }, w = await g.runPromise(g.scoped(g.gen(function* () {
 				let { wf: e, layer: t } = S("A"), n = yield* v.build(t), r = yield* g.forkDetach(e.execute(C).pipe(g.provide(n), g.ignore));
-				return (yield* M(() => p.has(d), 6e4)) ? (yield* g.sleep("1 second"), r) : yield* g.die(/* @__PURE__ */ Error("workflow never registered a wakeup"));
+				return (yield* F(() => p.has(d), 6e4)) ? (yield* g.sleep("1 second"), r) : yield* g.die(/* @__PURE__ */ Error("workflow never registered a wakeup"));
 			})));
-			await g.runPromise(_.interrupt(w).pipe(g.ignore)), T(p.has(d)).toBe(!0), T(f).toEqual([]);
-			let E = await g.runPromise(g.scoped(g.gen(function* () {
+			await g.runPromise(_.interrupt(w).pipe(g.ignore)), O(p.has(d)).toBe(!0), O(f).toEqual([]);
+			let T = await g.runPromise(g.scoped(g.gen(function* () {
 				let { wf: e, layer: t } = S("B"), n = yield* v.build(t);
 				return yield* e.execute(C).pipe(g.provide(n), g.timeout("600 seconds"), g.orElseSucceed(() => "TIMEOUT"));
 			})));
-			T(E).toBe("done"), T(f).toEqual(["B"]), T(p.has(d)).toBe(!1);
+			O(T).toBe("done"), O(f).toEqual(["B"]), O(p.has(d)).toBe(!1);
 		}, 9e5);
 	});
-}, P = {
+}, L = {
 	encrypt: (e) => `enc:v2:c:${Buffer.from(e, "utf8").toString("base64")}`,
 	decrypt: (e) => Buffer.from(e.slice(9), "base64").toString("utf8")
-}, F = (r) => {
-	let i = `${r.name}-enc-${Date.now()}`, o = () => f({
+}, R = (r) => {
+	let i = `${r.name}-enc-${Date.now()}`, a = () => d({
 		sqlClientLayer: r.sqlClientLayer,
 		runnerStorage: r.runnerStorage,
 		runnerListenPort: r.runnerPort + 7,
 		...r.dialectId ? { dialectId: r.dialectId } : {}
-	}), l = (e) => g.runPromise(g.gen(function* () {
-		let t = yield* x.SqlClient, n = yield* t.unsafe("SELECT * FROM cluster_messages"), r = yield* t.unsafe("SELECT * FROM cluster_replies"), i = (e) => JSON.stringify(e, (e, t) => typeof t == "bigint" ? String(t) : t);
+	}), u = (e) => g.runPromise(g.gen(function* () {
+		let t = yield* S.SqlClient, n = yield* t.unsafe("SELECT * FROM cluster_messages"), r = yield* t.unsafe("SELECT * FROM cluster_replies"), i = (e) => JSON.stringify(e, (e, t) => typeof t == "bigint" ? String(t) : t);
 		return [...n, ...r].filter((t) => i(t).includes(e)).length;
-	}).pipe(g.provideService(x.SafeIntegers, !0), g.scoped, g.provide(r.sqlClientLayer))), d = (e, t) => {
-		let n = a({
+	}).pipe(g.provideService(S.SafeIntegers, !0), g.scoped, g.provide(r.sqlClientLayer))), f = (e, t) => {
+		let n = s({
 			name: e,
 			payload: {
-				note: b.String,
-				count: b.Number
+				note: x.String,
+				count: x.Number
 			},
-			success: b.Struct({ summary: b.String }),
+			success: x.Struct({ summary: x.String }),
 			idempotencyKey: ({ count: t }) => `${e}:${t}`,
 			encrypted: t
 		}), r = 0;
 		return {
 			wf: n,
 			handler: n.toLayer(({ note: e }) => g.gen(function* () {
-				return { summary: `RESULT-${yield* s({
+				return { summary: `RESULT-${yield* o({
 					name: "summarise",
-					success: b.String,
+					success: x.String,
 					execute: g.sync(() => (r++, `STEP-${e}`))
 				})}` };
 			})),
 			executions: () => r
 		};
-	}, m = (e, t) => g.runPromise(g.scoped(e.wf.execute(t).pipe(g.provide(e.handler.pipe(v.provideMerge(o()))))));
-	w(`encrypted workflow journal — ${r.name}`, () => {
-		let f = !1;
-		C(async () => {
-			f = await r.reachable(), f && await k(r);
-		}, 3e4), S(() => e(void 0)), E("payload, step result and result are ciphertext; the unencrypted twin is found (control)", async (t) => {
-			f || t.skip(), e(P);
-			let n = d(`journalPlain_${i}`, !1), r = d(`journalSealed_${i}`, !0);
-			T(await m(n, {
+	}, m = (e, t) => g.runPromise(g.scoped(e.wf.execute(t).pipe(g.provide(e.handler.pipe(v.provideMerge(a()))))));
+	D(`encrypted workflow journal — ${r.name}`, () => {
+		let d = !1;
+		E(async () => {
+			d = await r.reachable(), d && await M(r);
+		}, 3e4), T(() => n(void 0)), k("payload, step result and result are ciphertext; the unencrypted twin is found (control)", async (e) => {
+			d || e.skip(), n(L);
+			let t = f(`journalPlain_${i}`, !1), r = f(`journalSealed_${i}`, !0);
+			O(await m(t, {
 				note: "PLAINMARK",
 				count: 1
-			})).toEqual({ summary: "RESULT-STEP-PLAINMARK" }), T(await m(r, {
+			})).toEqual({ summary: "RESULT-STEP-PLAINMARK" }), O(await m(r, {
 				note: "SEALMARK",
 				count: 1
-			})).toEqual({ summary: "RESULT-STEP-SEALMARK" }), T(await l("PLAINMARK"), "the probe finds plaintext").toBeGreaterThan(0), T(await l("SEALMARK"), "no journal row carries the encrypted run in plaintext").toBe(0), T(await l("enc:v2:c:"), "and the ciphertext is there").toBeGreaterThan(0);
-		}, 6e4), E("a second execute replays the result from the encrypted journal without re-running the step", async (t) => {
-			f || t.skip(), e(P);
-			let n = d(`journalReplay_${i}`, !0), r = await m(n, {
+			})).toEqual({ summary: "RESULT-STEP-SEALMARK" }), O(await u("PLAINMARK"), "the probe finds plaintext").toBeGreaterThan(0), O(await u("SEALMARK"), "no journal row carries the encrypted run in plaintext").toBe(0), O(await u("enc:v2:c:"), "and the ciphertext is there").toBeGreaterThan(0);
+		}, 6e4), k("a second execute replays the result from the encrypted journal without re-running the step", async (e) => {
+			d || e.skip(), n(L);
+			let t = f(`journalReplay_${i}`, !0), r = await m(t, {
 				note: "REPLAYMARK",
 				count: 7
-			}), a = await m(n, {
+			}), a = await m(t, {
 				note: "REPLAYMARK",
 				count: 7
 			});
-			T(a).toEqual(r), T(n.executions()).toBe(1);
-		}, 6e4), E("a run journaled in plaintext before the declaration is still read", async (t) => {
-			f || t.skip();
-			let n = `journalBefore_${i}`, r = await m(d(n, !1), {
+			O(a).toEqual(r), O(t.executions()).toBe(1);
+		}, 6e4), k("a run journaled in plaintext before the declaration is still read", async (e) => {
+			d || e.skip();
+			let t = `journalBefore_${i}`, r = await m(f(t, !1), {
 				note: "OLDMARK",
 				count: 3
 			});
-			e(P);
-			let a = d(n, !0);
-			T(await m(a, {
+			n(L);
+			let a = f(t, !0);
+			O(await m(a, {
 				note: "OLDMARK",
 				count: 3
-			})).toEqual(r), T(a.executions(), "answered from the plaintext journal, not re-run").toBe(0);
+			})).toEqual(r), O(a.executions(), "answered from the plaintext journal, not re-run").toBe(0);
 		}, 6e4);
 		let h = (e, t, n) => {
-			class r extends b.TaggedError()("Refused", { detail: b.String }) {}
-			let i = a({
+			class r extends x.TaggedError()("Refused", { detail: x.String }) {}
+			let i = s({
 				name: e,
-				payload: { note: b.String },
+				payload: { note: x.String },
 				error: r,
 				idempotencyKey: ({ note: t }) => `${e}:${t}`,
 				encrypted: t
-			}), c = i.toLayer(({ note: e }) => s({
+			}), c = i.toLayer(({ note: e }) => o({
 				name: "call-upstream",
-				success: b.String,
+				success: x.String,
 				error: r,
 				execute: n === "defect" ? g.die(/* @__PURE__ */ Error(`upstream rejected FAILMARK-${e}`)) : g.fail(new r({ detail: `FAILMARK-${e}` }))
 			}));
-			return g.runPromiseExit(g.scoped(i.execute({ note: e }).pipe(g.provide(c.pipe(v.provideMerge(o()))))));
+			return g.runPromiseExit(g.scoped(i.execute({ note: e }).pipe(g.provide(c.pipe(v.provideMerge(a()))))));
 		};
-		for (let n of ["defect", "typed"]) E(`a ${n} failure of an encrypted run leaves no plaintext; the unencrypted twin does (control)`, async (r) => {
-			f || r.skip(), e(P);
-			let a = await h(`journalFailPlain_${n}_${i}`, !1, n);
-			T(a._tag).toBe("Failure"), T(await l(`FAILMARK-journalFailPlain_${n}`), "the probe finds plaintext").toBeGreaterThan(0);
-			let o = await h(`journalFailSealed_${n}_${i}`, !0, n);
-			T(o._tag).toBe("Failure"), T(await l(`FAILMARK-journalFailSealed_${n}`), "no journal row carries the failure in plaintext").toBe(0), T(t(p.squash(o.cause))).toContain(`FAILMARK-journalFailSealed_${n}`);
+		for (let t of ["defect", "typed"]) k(`a ${t} failure of an encrypted run leaves no plaintext; the unencrypted twin does (control)`, async (r) => {
+			d || r.skip(), n(L);
+			let a = await h(`journalFailPlain_${t}_${i}`, !1, t);
+			O(a._tag).toBe("Failure"), O(await u(`FAILMARK-journalFailPlain_${t}`), "the probe finds plaintext").toBeGreaterThan(0);
+			let o = await h(`journalFailSealed_${t}_${i}`, !0, t);
+			O(o._tag).toBe("Failure"), O(await u(`FAILMARK-journalFailSealed_${t}`), "no journal row carries the failure in plaintext").toBe(0), O(e(p.squash(o.cause))).toContain(`FAILMARK-journalFailSealed_${t}`);
 		}, 6e4);
-		E("a journaled wait value of an encrypted run is ciphertext; the unencrypted twin is found (control)", async (t) => {
-			f || t.skip(), e(P);
-			let r = (e, t) => {
-				let r = a({
+		k("a journaled wait value of an encrypted run is ciphertext; the unencrypted twin is found (control)", async (e) => {
+			d || e.skip(), n(L);
+			let r = (e, n) => {
+				let r = s({
 					name: e,
-					payload: { note: b.String },
-					success: b.String,
+					payload: { note: x.String },
+					success: x.String,
 					idempotencyKey: ({ note: t }) => `${e}:${t}`,
-					encrypted: t
-				}), i = r.toLayer(({ note: e }) => n({
+					encrypted: n
+				}), i = r.toLayer(({ note: e }) => t({
 					name: "await-signal:approval",
-					success: b.String,
+					success: x.String,
 					execute: g.succeed(`WAITMARK-${e}`)
 				}));
-				return g.runPromise(g.scoped(r.execute({ note: e }).pipe(g.provide(i.pipe(v.provideMerge(o()))))));
+				return g.runPromise(g.scoped(r.execute({ note: e }).pipe(g.provide(i.pipe(v.provideMerge(a()))))));
 			};
-			T(await r(`journalWaitPlain_${i}`, !1)).toBe(`WAITMARK-journalWaitPlain_${i}`), T(await l(`WAITMARK-journalWaitPlain_${i}`), "the probe finds plaintext").toBeGreaterThan(0), T(await r(`journalWaitSealed_${i}`, !0)).toBe(`WAITMARK-journalWaitSealed_${i}`), T(await l(`WAITMARK-journalWaitSealed_${i}`), "no plaintext wait value in the journal").toBe(0);
+			O(await r(`journalWaitPlain_${i}`, !1)).toBe(`WAITMARK-journalWaitPlain_${i}`), O(await u(`WAITMARK-journalWaitPlain_${i}`), "the probe finds plaintext").toBeGreaterThan(0), O(await r(`journalWaitSealed_${i}`, !0)).toBe(`WAITMARK-journalWaitSealed_${i}`), O(await u(`WAITMARK-journalWaitSealed_${i}`), "no plaintext wait value in the journal").toBe(0);
 		}, 6e4);
 		let _ = (e, t, n) => g.gen(function* () {
 			for (let r = 0; r < 400; r++) {
@@ -327,77 +357,77 @@ var D = async (e, t, n = 750) => {
 				yield* g.sleep("50 millis");
 			}
 			return yield* g.die(/* @__PURE__ */ Error("pollUntil: never satisfied"));
-		}), x = (e) => y.isOption(e) && y.isSome(e) ? e.value._tag : void 0;
-		for (let t of [!1, !0]) E(`a suspending signal's value is ${t ? "ciphertext" : "found (control)"} in the journal, and the run resumes with it`, async (n) => {
-			f || n.skip(), e(P);
-			let r = `journalSignal_${t ? "sealed" : "plain"}_${i}`, s = a({
+		}), y = (e) => b.isOption(e) && b.isSome(e) ? e.value._tag : void 0;
+		for (let e of [!1, !0]) k(`a suspending signal's value is ${e ? "ciphertext" : "found (control)"} in the journal, and the run resumes with it`, async (t) => {
+			d || t.skip(), n(L);
+			let r = `journalSignal_${e ? "sealed" : "plain"}_${i}`, o = s({
 				name: r,
-				payload: { id: b.String },
-				success: b.Unknown,
+				payload: { id: x.String },
+				success: x.Unknown,
 				idempotencyKey: ({ id: e }) => `${r}:${e}`,
-				encrypted: t
-			}), d = s.toLayer(() => c({ store: { query: () => Promise.resolve([]) } }, {
+				encrypted: e
+			}), f = o.toLayer(() => c({ store: { query: () => Promise.resolve([]) } }, {
 				name: "approval",
-				schema: b.Struct({ comment: b.String }),
+				schema: x.Struct({ comment: x.String }),
 				timeoutMs: 36e5
 			})), p = `SIGNALMARK-${r}`, m = await g.runPromise(g.scoped(g.gen(function* () {
-				let e = yield* s.executionId({ id: "one" });
-				return yield* s.execute({ id: "one" }, { discard: !0 }), yield* _(s, e, (e) => x(e) === "Suspended"), yield* u({
+				let e = yield* o.executionId({ id: "one" });
+				return yield* o.execute({ id: "one" }, { discard: !0 }), yield* _(o, e, (e) => y(e) === "Suspended"), yield* l({
 					target: {
 						executionId: e,
 						workflowName: r
 					},
 					signalName: "approval",
 					payload: { comment: p }
-				}), yield* _(s, e, (e) => x(e) === "Complete");
-			}).pipe(g.provide(d.pipe(v.provideMerge(o()))))));
-			T(JSON.stringify(y.getOrThrow(m).exit), "the body received the value").toContain(p);
-			let h = await l(p);
-			t ? T(h, "no plaintext signal value in the journal").toBe(0) : T(h, "the probe finds plaintext").toBeGreaterThan(0);
+				}), yield* _(o, e, (e) => y(e) === "Complete");
+			}).pipe(g.provide(f.pipe(v.provideMerge(a()))))));
+			O(JSON.stringify(b.getOrThrow(m).exit), "the body received the value").toContain(p);
+			let h = await u(p);
+			e ? O(h, "no plaintext signal value in the journal").toBe(0) : O(h, "the probe finds plaintext").toBeGreaterThan(0);
 		}, 9e4);
-		E("an encrypted child's defect reaches its encrypted parent as thrown, and no journal row carries it", async (t) => {
-			f || t.skip(), e(P);
-			let n = `journalChild_${i}`, r = `journalParent_${i}`, s = `CHILDMARK-${i}`, c = a({
-				name: n,
-				payload: { id: b.String },
-				success: b.String,
+		k("an encrypted child's defect reaches its encrypted parent as thrown, and no journal row carries it", async (e) => {
+			d || e.skip(), n(L);
+			let t = `journalChild_${i}`, r = `journalParent_${i}`, o = `CHILDMARK-${i}`, c = s({
+				name: t,
+				payload: { id: x.String },
+				success: x.String,
 				idempotencyKey: ({ id: e }) => e,
 				encrypted: !0
-			}), u = a({
+			}), l = s({
 				name: r,
-				payload: { id: b.String },
-				success: b.String,
+				payload: { id: x.String },
+				success: x.String,
 				idempotencyKey: ({ id: e }) => e,
 				encrypted: !0
-			}), d = c.toLayer(() => g.die(/* @__PURE__ */ Error(`child failed ${s}`))), p = u.toLayer(({ id: e }) => c.execute({ id: `${e}-child` }).pipe(g.catchDefect((e) => g.succeed(`caught: ${e.message}`)))), m = await g.runPromise(g.scoped(u.execute({ id: "p1" }).pipe(g.provide(v.mergeAll(p, d).pipe(v.provideMerge(o()))))));
-			T(m).toBe(`caught: child failed ${s}`), T(await l(s)).toBe(0);
-		}, 6e4), E("an encrypted run that suspends on a failed step journals no plaintext", async (t) => {
-			f || t.skip(), e(P);
-			let n = `journalSuspendOnFailure_${i}`, r = `SOFMARK-${i}`, c = a({
-				name: n,
-				payload: { id: b.String },
-				success: b.String,
+			}), f = c.toLayer(() => g.die(/* @__PURE__ */ Error(`child failed ${o}`))), p = l.toLayer(({ id: e }) => c.execute({ id: `${e}-child` }).pipe(g.catchDefect((e) => g.succeed(`caught: ${e.message}`)))), m = await g.runPromise(g.scoped(l.execute({ id: "p1" }).pipe(g.provide(v.mergeAll(p, f).pipe(v.provideMerge(a()))))));
+			O(m).toBe(`caught: child failed ${o}`), O(await u(o)).toBe(0);
+		}, 6e4), k("an encrypted run that suspends on a failed step journals no plaintext", async (e) => {
+			d || e.skip(), n(L);
+			let t = `journalSuspendOnFailure_${i}`, r = `SOFMARK-${i}`, c = s({
+				name: t,
+				payload: { id: x.String },
+				success: x.String,
 				idempotencyKey: ({ id: e }) => e,
 				encrypted: !0,
 				suspendOnFailure: !0
-			}), u = c.toLayer(() => s({
+			}), l = c.toLayer(() => o({
 				name: "call",
-				success: b.String,
+				success: x.String,
 				execute: g.die(/* @__PURE__ */ Error(`step failed ${r}`))
 			}));
 			await g.runPromise(g.scoped(g.gen(function* () {
 				let e = yield* c.executionId({ id: "s1" });
-				yield* c.execute({ id: "s1" }, { discard: !0 }), yield* _(c, e, (e) => x(e) === "Suspended");
-			}).pipe(g.provide(u.pipe(v.provideMerge(o())))))), T(await l(r)).toBe(0);
-		}, 6e4), E("without a registered cipher an encrypted run fails instead of writing plaintext", async (e) => {
-			f || e.skip();
-			let t = d(`journalNoCipher_${i}`, !0);
-			await T(m(t, {
+				yield* c.execute({ id: "s1" }, { discard: !0 }), yield* _(c, e, (e) => y(e) === "Suspended");
+			}).pipe(g.provide(l.pipe(v.provideMerge(a())))))), O(await u(r)).toBe(0);
+		}, 6e4), k("without a registered cipher an encrypted run fails instead of writing plaintext", async (e) => {
+			d || e.skip();
+			let t = f(`journalNoCipher_${i}`, !0);
+			await O(m(t, {
 				note: "NOCIPHERMARK",
 				count: 1
-			})).rejects.toThrow(), T(await l("NOCIPHERMARK")).toBe(0);
+			})).rejects.toThrow(), O(await u("NOCIPHERMARK")).toBe(0);
 		}, 6e4);
 	});
 };
 //#endregion
-export { k as purgeClusterState, N as runClusterEngineSuite, F as runJournalEncryptionSuite, D as tcpReachable };
+export { M as purgeClusterState, I as runClusterEngineSuite, R as runJournalEncryptionSuite, A as tcpReachable };

package/dist/controlMonitor.js

@@ -0,0 +1,13 @@
+import { readPendingWorkflowCancellation as e } from "./controlRequest.js";
+import { Effect as t } from "effect";
+import { WorkflowInstance as n } from "effect/workflow/WorkflowEngine";
+//#region src/controlMonitor.ts
+var r = (r, i, a) => t.gen(function* () {
+	let o = yield* n;
+	for (;;) {
+		if (yield* t.tryPromise(() => e(i, r)).pipe(t.catch(() => t.sync(() => (a(), !1))))) return o.interrupted = !0, yield* t.interrupt;
+		yield* t.sleep(1e3);
+	}
+});
+//#endregion
+export { r as awaitWorkflowCancellation };