@voltro/workflow 0.85.0 → 0.87.0

package/dist/{journalEncryption-DTyhUzaS.js → journalEncryption.js}

@@ -1,17 +1,10 @@
-import { Activity as e } from "effect/workflow";
-import { Cause as t, Context as n, Effect as r, Effectable as i, Schema as a, SchemaAST as o, SchemaGetter as s, SchemaIssue as c } from "effect";
-//#region src/failureMessage.ts
-var l = (e) => {
-	let t = e?.message;
-	if (typeof t == "string" && t.length > 0) return t;
-	if (typeof e == "object" && e && typeof e.toJSON == "function") {
-		let { _tag: t, ...n } = e.toJSON(), r = typeof t == "string" ? t : String(e);
-		return Object.keys(n).length === 0 ? r : `${r}: ${JSON.stringify(n)}`;
-	}
-	return String(e);
-}, u = () => void 0, d = (e) => {
+import { failureMessage as e } from "./failureMessage.js";
+import { Activity as t } from "effect/workflow";
+import { Cause as n, Context as r, Effect as i, Effectable as a, Schema as o, SchemaAST as s, SchemaGetter as c, SchemaIssue as l } from "effect";
+//#region src/journalEncryption.ts
+var u = () => void 0, d = (e) => {
 	u = typeof e == "function" ? e : () => e;
-}, f = () => u(), p = n.Reference("@voltro/workflow/CurrentWorkflowEncrypted", { defaultValue: () => !1 }), m = { column: "workflow-journal" }, h = /* @__PURE__ */ new Set(), g = (e) => {
+}, f = () => u(), p = r.Reference("@voltro/workflow/CurrentWorkflowEncrypted", { defaultValue: () => !1 }), m = { column: "workflow-journal" }, h = /* @__PURE__ */ new Set(), g = (e) => {
 	h.add(e);
 }, _ = /* @__PURE__ */ new Set(), v = (e) => {
 	_.add(e);
@@ -25,21 +18,21 @@ var l = (e) => {
 	let r = u();
 	if (r === void 0) throw S(t);
 	return JSON.parse(r.decrypt(e, n));
-}, T = (e) => o.isVoid(e) || o.isNever(e) || o.isUndefined(e), E = (e, t) => {
+}, T = (e) => s.isVoid(e) || s.isNever(e) || s.isUndefined(e), E = (e, t) => {
 	if (T(e.ast)) return e;
 	let n = (e, t) => {
 		try {
-			return r.succeed(t());
+			return i.succeed(t());
 		} catch (t) {
-			return r.fail(new c.InvalidValue({ message: t.message }, e));
+			return i.fail(new l.InvalidValue({ message: t.message }, e));
 		}
 	};
-	return (e.ast.context?.isOptional === !0 ? a.optionalKey(a.Unknown) : a.Unknown).pipe(a.decodeTo(e, {
-		decode: s.transformEffect((e) => n(e, () => Array.isArray(e) ? e.map((e) => w(e, t)) : w(e, t))),
-		encode: s.transformEffect((e) => n(e, () => e === void 0 ? void 0 : C(e, t)))
+	return (e.ast.context?.isOptional === !0 ? o.optionalKey(o.Unknown) : o.Unknown).pipe(o.decodeTo(e, {
+		decode: c.transformEffect((e) => n(e, () => Array.isArray(e) ? e.map((e) => w(e, t)) : w(e, t))),
+		encode: c.transformEffect((e) => n(e, () => e === void 0 ? void 0 : C(e, t)))
 	}));
 }, D = (e, t) => {
-	let n = a.isSchema(t) ? t.fields : t, r = `workflow '${e}' payload`, i = {};
+	let n = o.isSchema(t) ? t.fields : t, r = `workflow '${e}' payload`, i = {};
 	for (let [e, t] of Object.entries(n)) i[e] = E(t, `${r}.${e}`);
 	return i;
 }, O = (e) => typeof e == "object" && !!e && !Array.isArray(e), k = (e, t) => {
@@ -102,21 +95,21 @@ var l = (e) => {
 	let t = { ...e };
 	for (let e of z) x(t[e]) && (t[e] = L(t[e], `workflow event ${e}`));
 	return t;
-}, H = (t) => {
-	let n = e.make({
-		...t,
-		error: a.Defect()
-	}), o, s = `wait '${t.name}'`, c = () => o ??= e.make({
-		...t,
-		success: E(t.success, `${s} value`),
-		error: a.Defect(),
-		execute: t.execute.pipe(r.catchDefect((e) => r.die(M(e, `${s} defect`))))
+}, H = (e) => {
+	let n = t.make({
+		...e,
+		error: o.Defect()
+	}), r, s = `wait '${e.name}'`, c = () => r ??= t.make({
+		...e,
+		success: E(e.success, `${s} value`),
+		error: o.Defect(),
+		execute: e.execute.pipe(i.catchDefect((e) => i.die(M(e, `${s} defect`))))
 	}), l = n;
 	return {
 		...n,
-		...i.Prototype({
+		...a.Prototype({
 			label: "Activity",
-			evaluate: () => r.flatMap(p, (e) => e ? c().pipe(r.catchDefect((e) => r.die(N(e, `${s} defect`)))) : l)
+			evaluate: () => i.flatMap(p, (e) => e ? c().pipe(i.catchDefect((e) => i.die(N(e, `${s} defect`)))) : l)
 		})
 	};
 }, U = { column: "_voltro_workflow_run_steps:payload" }, W = (e) => {
@@ -143,12 +136,12 @@ var l = (e) => {
 		t.payload = k(t.payload, "workflow run payload");
 	} catch {}
 	return "output" in t && (t.output = L(t.output, "workflow run result")), typeof t.errorMessage == "string" && (t.errorMessage = R(t.errorMessage)), t;
-}, K = (e, n) => {
-	if (e === void 0 || !b(e)) {
-		let e = t.isCause(n) ? t.squash(n) : n;
-		return e instanceof Error && e.message.length > 0 ? `${e.name}: ${e.message}` : l(e);
+}, K = (t, r) => {
+	if (t === void 0 || !b(t)) {
+		let t = n.isCause(r) ? n.squash(r) : r;
+		return t instanceof Error && t.message.length > 0 ? `${t.name}: ${t.message}` : e(t);
 	}
-	return `${n instanceof Error ? n.name : typeof n}: [withheld — workflow '${e}' is declared encrypted; the full cause is recorded sealed on its row]`;
+	return `${r instanceof Error ? r.name : typeof r}: [withheld — workflow '${t}' is declared encrypted; the full cause is recorded sealed on its row]`;
 };
 //#endregion
-export { A as C, L as D, d as E, l as O, C as S, E as T, k as _, H as a, I as b, x as c, v as d, g as f, w as g, V as h, F as i, b as l, R as m, U as n, f as o, N as p, m as r, y as s, p as t, K as u, G as v, D as w, B as x, M as y };
+export { p as CurrentWorkflowEncrypted, j as SEALED_DEFECT_NAME, U as STEP_JOURNAL_BINDING, m as WORKFLOW_JOURNAL_BINDING, F as anyWorkflowEncrypted, H as encryptionAwareActivity, f as getWorkflowJournalCipher, y as isQueueEncrypted, x as isSealedJournalValue, b as isWorkflowEncrypted, K as loggableCause, v as markQueueEncrypted, g as markWorkflowEncrypted, N as openDefect, R as openErrorText, V as openEventPayload, w as openJournalValue, k as openPayloadFields, G as openWorkflowRow, M as sealDefect, I as sealErrorText, B as sealEventPayload, C as sealJournalValue, A as sealPayloadFields, D as sealedPayloadFields, E as sealedSchema, d as setWorkflowJournalCipher, L as tryOpenJournalValue };

package/dist/journalRoutingGuard.js

@@ -0,0 +1,50 @@
+import { Context as e, Deferred as t, Effect as n, Option as r, Schedule as i, Semaphore as a } from "effect";
+//#region src/journalRoutingGuard.ts
+var o = (e) => n.gen(function* () {
+	let r = e.pollMs ?? 1e3, o = e.verify;
+	if (!Number.isSafeInteger(r) || r < 1 || r > 3e4) return yield* n.fail(/* @__PURE__ */ Error("Invalid journal routing probe interval"));
+	let s = yield* t.make(), c = /* @__PURE__ */ new Set(), l = yield* a.make(1), u = !1, d = (e) => n.gen(function* () {
+		u = !0, yield* t.fail(s, Error(e));
+	}), f = l.withPermits(1)(n.gen(function* () {
+		if (u) return yield* t.await(s);
+		let e = yield* n.interruptible(o).pipe(n.timeout(r), n.isSuccess);
+		if (u) return yield* t.await(s);
+		if (!e) return yield* d("Journal routing lock ownership was lost"), yield* t.await(s);
+	})), p = (e) => n.uninterruptibleMask((r) => n.gen(function* () {
+		if (u) return yield* t.await(s);
+		let i = yield* t.make();
+		return c.add(i), yield* r(f.pipe(n.andThen(n.suspend(() => u ? t.await(s) : n.raceFirst(e, n.interruptible(t.await(s))))))).pipe(n.ensuring(n.gen(function* () {
+			c.delete(i), yield* t.succeed(i, void 0);
+		})));
+	})), m = (e) => n.uninterruptibleMask((r) => n.gen(function* () {
+		if (u) return yield* t.await(s);
+		let i = yield* t.make();
+		c.add(i);
+		let a = new AbortController(), o = Promise.resolve().then(() => {
+			if (u) throw Error("Journal routing admission is closed");
+			return e(a.signal);
+		});
+		return yield* r(n.tryPromise({
+			try: () => o,
+			catch: (e) => e
+		})).pipe(n.ensuring(n.gen(function* () {
+			a.abort(), yield* n.promise(() => o.then(() => void 0, () => void 0)), c.delete(i), yield* t.succeed(i, void 0);
+		})));
+	})), h = n.gen(function* () {
+		yield* d("Journal routing admission is closed"), yield* n.forEach([...c], (e) => t.await(e), { discard: !0 });
+	});
+	return yield* n.addFinalizer(() => h), yield* f.pipe(n.ignore, n.repeat(i.spaced(r)), n.forkScoped), {
+		run: p,
+		ownPromise: m,
+		check: f,
+		close: h,
+		isClosed: () => u
+	};
+}), s = e.Service("@voltro/workflow/JournalRoutingGuard"), c = (e, t) => e === void 0 ? t : n.gen(function* () {
+	return yield* yield* e.run(n.exit(t.pipe(n.provideService(s, e)))).pipe(n.orDie);
+}), l = (e) => n.flatMap(n.serviceOption(s), (t) => r.isSome(t) ? t.value.ownPromise(e).pipe(n.orDie) : n.promise(e)), u = (e) => n.flatMap(n.serviceOption(s), (t) => r.isSome(t) ? t.value.ownPromise(e) : n.tryPromise({
+	try: e,
+	catch: (e) => e
+}));
+//#endregion
+export { s as JournalRoutingGuard, o as makeJournalRoutingGuard, l as ownedJournalRoutingPromise, c as protectJournalRoutingEffect, u as tryOwnedJournalRoutingPromise };

package/dist/journalRoutingLayout.js

@@ -0,0 +1,47 @@
+//#region src/journalRoutingLayout.ts
+var e = (e) => {
+	if (e !== "default" && e !== "api-workloads-v1") throw Error("Unknown journal routing layout");
+	let t = e === "api-workloads-v1";
+	return Object.freeze({
+		id: e,
+		workflowGroup: "default",
+		webhookGroup: t ? "voltro.webhooks" : "default",
+		cronGroup: t ? "voltro.schedules" : "default",
+		available: Object.freeze(t ? [
+			"default",
+			"voltro.webhooks",
+			"voltro.schedules"
+		] : ["default"])
+	});
+}, t = (t, n) => {
+	let r = e(t), i = e(n), a = [];
+	return r.webhookGroup !== i.webhookGroup && a.push({
+		entity: "workflow",
+		name: "voltro.deliverWebhook",
+		from: r.webhookGroup,
+		to: i.webhookGroup
+	}), r.cronGroup !== i.cronGroup && a.push({
+		entity: "cron",
+		name: "*",
+		from: r.cronGroup,
+		to: i.cronGroup
+	}), Object.freeze(a.map((e) => Object.freeze(e)));
+}, n = (t, n) => {
+	let r = e(t);
+	return n === "voltro.deliverWebhook" ? r.webhookGroup : r.workflowGroup;
+}, r = (t, n) => {
+	let r = e(t), i = [
+		n.workflows,
+		n.schedules,
+		n.webhooks
+	];
+	if (i.some((e) => typeof e != "boolean")) throw Error("Explicit executor selection is required");
+	if (t === "default" && i.some(Boolean) && !i.every(Boolean)) throw Error("Separate executor roles require the api-workloads-v1 journal routing transition");
+	let a = /* @__PURE__ */ new Set();
+	return n.workflows && a.add(r.workflowGroup), n.schedules && a.add(r.cronGroup), n.webhooks && a.add(r.webhookGroup), Object.freeze({
+		available: r.available,
+		assigned: Object.freeze([...a])
+	});
+};
+//#endregion
+export { r as journalExecutorGroups, e as journalRoutingLayout, t as journalRoutingTransitions, n as journalWorkflowGroup };

package/dist/journalRoutingLock.js

@@ -0,0 +1,39 @@
+import { Effect as e } from "effect";
+import { SqlClient as t } from "effect/sql";
+import { fnv1a64 as n } from "@voltro/database/sql";
+//#region src/journalRoutingLock.ts
+var r = (r) => e.gen(function* () {
+	let i = r.namespace, a = r.mode, o = r.timeoutMs ?? 3e4;
+	if (!i || i.length > 256 || !["shared", "exclusive"].includes(a) || !Number.isSafeInteger(o) || o < 1 || o > 3e5) return yield* e.fail(/* @__PURE__ */ Error("Invalid journal routing lock options"));
+	let s = yield* t.SqlClient, c = s.onDialectOrElse({
+		pg: () => "pg",
+		mssql: () => "mssql",
+		orElse: () => "unsupported"
+	});
+	if (c === "unsupported") return yield* e.fail(/* @__PURE__ */ Error("Journal routing locks require PostgreSQL or SQL Server"));
+	let l = (n("voltro:journal-routing:" + i) & 9223372036854775807n).toString(), u = "voltro-journal-routing-" + l, d = yield* s.reserve, f = a === "shared" ? "_shared" : "", p = c === "pg" ? `SELECT pg_try_advisory_lock${f}(${l}::bigint)` : `DECLARE @res int; EXEC @res = sp_getapplock @Resource = '${u}', @LockMode = '${a === "shared" ? "Shared" : "Exclusive"}', @LockOwner = 'Session', @LockTimeout = 0; SELECT @res`, m = c === "pg" ? `SELECT pg_advisory_unlock${f}(${l}::bigint)` : `DECLARE @res int; EXEC @res = sp_releaseapplock @Resource = '${u}', @LockOwner = 'Session'; SELECT @res`, h = performance.now(), g = e.gen(function* () {
+		for (;;) {
+			let t = (yield* d.executeValues(p, []))[0]?.[0];
+			if (c === "pg" ? t === !0 || t === "t" || t === 1 : typeof t == "number" && t >= 0) return;
+			if (c === "mssql" && t !== -1) return yield* e.fail(/* @__PURE__ */ Error("Journal routing application lock failed"));
+			let n = o - (performance.now() - h);
+			if (n <= 0) return yield* e.fail(/* @__PURE__ */ Error("Journal routing lock acquisition timed out"));
+			yield* e.sleep(Math.min(n, 100));
+		}
+	});
+	yield* e.acquireRelease(g, () => d.executeValues(m, []).pipe(e.flatMap((t) => {
+		let n = t[0]?.[0];
+		return (c === "pg" ? n === !0 || n === "t" || n === 1 : typeof n == "number" && n >= 0) ? e.void : e.die(/* @__PURE__ */ Error("Journal routing lock was lost before release"));
+	}), e.orDie));
+	let _ = c === "pg" ? `SELECT EXISTS (SELECT 1 FROM pg_locks WHERE locktype = 'advisory' AND pid = pg_backend_pid() AND granted AND classid = (${l}::bigint >> 32)::oid AND objid = (${l}::bigint & 4294967295)::oid AND objsubid = 1 AND mode = '${a === "shared" ? "ShareLock" : "ExclusiveLock"}')` : `SELECT APPLOCK_MODE('public', '${u}', 'Session')`;
+	return {
+		connection: d,
+		dialect: c,
+		verify: d.executeValues(_, []).pipe(e.flatMap((t) => {
+			let n = t[0]?.[0];
+			return (c === "pg" ? n === !0 || n === "t" || n === 1 : n === (a === "shared" ? "Shared" : "Exclusive")) ? e.void : e.fail(/* @__PURE__ */ Error("Journal routing lock ownership was lost"));
+		}))
+	};
+});
+//#endregion
+export { r as acquireJournalRoutingLock };

package/dist/journalRoutingMaintenance.js

@@ -0,0 +1,24 @@
+import { withJournalRoutingTransaction as e } from "./journalRoutingTransaction.js";
+import { acquireJournalRoutingLock as t } from "./journalRoutingLock.js";
+import { JournalRoutingMaintenance as n } from "./workflowShardRelocationSql.js";
+import { Effect as r, Option as i } from "effect";
+import { SqlClient as a } from "effect/sql";
+//#region src/journalRoutingMaintenance.ts
+var o = (o, s = 3e4) => r.gen(function* () {
+	let c = yield* a.SqlClient;
+	return c.onDialectOrElse({
+		pg: () => !0,
+		orElse: () => !1
+	}) ? n.of({ exclusive: (n) => r.scoped(r.gen(function* () {
+		let a = yield* r.serviceOption(c.transactionService);
+		if (i.isSome(a)) return yield* r.fail(/* @__PURE__ */ Error("Journal maintenance cannot enter an ambient transaction"));
+		let { connection: l } = yield* t({
+			namespace: o,
+			mode: "exclusive",
+			timeoutMs: s
+		});
+		return yield* e(c, l, n);
+	})).pipe(r.provideService(a.SqlClient, c)) }) : yield* r.fail(/* @__PURE__ */ Error("Pinned journal maintenance currently requires PostgreSQL"));
+});
+//#endregion
+export { o as makePostgresJournalRoutingMaintenance };

package/dist/journalRoutingMessageStorage.js

@@ -0,0 +1,32 @@
+import { protectJournalRoutingEffect as e } from "./journalRoutingGuard.js";
+import { Effect as t } from "effect";
+import { MessageStorage as n } from "effect/cluster";
+import { PersistenceError as r } from "effect/cluster/ClusterError";
+//#region src/journalRoutingMessageStorage.ts
+var i = (i, a) => {
+	let o = (e) => t.gen(function* () {
+		return yield* yield* a.run(t.exit(e)).pipe(t.mapError((e) => new r({ cause: e })));
+	});
+	return n.MessageStorage.of({
+		saveRequest: (e) => o(t.suspend(() => i.saveRequest(e))),
+		saveEnvelope: (e) => o(t.suspend(() => i.saveEnvelope(e))),
+		saveReply: (e) => o(t.suspend(() => i.saveReply(e))),
+		clearReplies: (e) => o(t.suspend(() => i.clearReplies(e))),
+		repliesFor: (e) => o(t.suspend(() => i.repliesFor(e))),
+		repliesForUnfiltered: (e) => o(t.suspend(() => i.repliesForUnfiltered(e))),
+		requestIdForPrimaryKey: (e) => o(t.suspend(() => i.requestIdForPrimaryKey(e))),
+		unprocessedMessages: (e) => o(t.suspend(() => i.unprocessedMessages(e))),
+		unprocessedMessagesById: (e) => o(t.suspend(() => i.unprocessedMessagesById(e))),
+		resetShards: (e) => o(t.suspend(() => i.resetShards(e))),
+		resetRequests: (e) => o(t.suspend(() => i.resetRequests(e))),
+		resetAddresses: (e) => o(t.suspend(() => i.resetAddresses(e))),
+		withTransaction: (t) => e(a, i.withTransaction(t)),
+		resetAddress: (e) => o(t.suspend(() => i.resetAddress(e))),
+		clearAddress: (e) => o(t.suspend(() => i.clearAddress(e))),
+		registerReplyHandler: (e) => i.registerReplyHandler(e),
+		unregisterReplyHandler: (e) => i.unregisterReplyHandler(e),
+		unregisterShardReplyHandlers: (e) => i.unregisterShardReplyHandlers(e)
+	});
+};
+//#endregion
+export { i as guardJournalMessageStorage };

package/dist/journalRoutingNamespace.js

@@ -0,0 +1,23 @@
+import { workflowJournalRoutingTable as e } from "./journalRoutingTable.js";
+import { Effect as t } from "effect";
+import { SqlClient as n } from "effect/sql";
+//#region src/journalRoutingNamespace.ts
+var r = t.gen(function* () {
+	let r = (yield* n.SqlClient).withoutTransforms();
+	if (!r.onDialectOrElse({
+		pg: () => !0,
+		orElse: () => !1
+	})) return yield* t.fail(/* @__PURE__ */ Error("Journal namespace resolution requires PostgreSQL"));
+	let i = yield* r`
+    SELECT n.nspname AS schema_name, current_schema() AS active_schema, c.relkind AS kind,
+      format('%I.%I', n.nspname, ${e.tableName}::text) AS routing_table
+    FROM pg_class c JOIN pg_namespace n ON n.oid = c.relnamespace
+    WHERE c.oid = to_regclass('cluster_messages')`, a = i[0];
+	return i.length !== 1 || !a || a.kind !== "r" || a.schema_name !== a.active_schema ? yield* t.fail(/* @__PURE__ */ Error("Journal table must exist in the active PostgreSQL schema without search-path fallback")) : Object.freeze({
+		namespace: `pg:${a.schema_name}:cluster_messages`,
+		schema: a.schema_name,
+		routingTable: r.literal(a.routing_table)
+	});
+}), i = r.pipe(t.map((e) => e.namespace));
+//#endregion
+export { r as resolvePostgresJournalLocation, i as resolvePostgresJournalNamespace };

package/dist/journalRoutingRuntime.js

@@ -0,0 +1,33 @@
+import { journalRoutingLayout as e, journalWorkflowGroup as t } from "./journalRoutingLayout.js";
+import { Context as n } from "effect";
+import { ClusterSchema as r } from "effect/cluster";
+//#region src/journalRoutingRuntime.ts
+var i = class extends n.Service()("@voltro/workflow/JournalRoutingLayout") {}, a = (e, i) => {
+	let a = n.add(e.annotations, r.ShardGroup, () => t(i, e._tag));
+	return new Proxy(e, { get(e, t, n) {
+		return t === "annotations" ? a : Reflect.get(e, t, n);
+	} });
+}, o = (t, n) => (e(n), {
+	...t,
+	register: (e, r) => t.register(a(e, n), r),
+	execute: (e, r) => t.execute(a(e, n), r),
+	poll: (e, r) => t.poll(a(e, n), r),
+	interrupt: (e, r) => t.interrupt(a(e, n), r),
+	resume: (e, r) => t.resume(a(e, n), r),
+	scheduleClock: (e, r) => t.scheduleClock(a(e, n), r)
+}), s = (n, i) => {
+	let a = e(i), o = (e) => e.startsWith("Workflow/") && !e.startsWith("Workflow/-/") ? t(i, e.slice(9)) : e.startsWith("ClusterCron/") ? a.cronGroup : void 0;
+	return {
+		...n,
+		makeClient: (e) => {
+			let t = o(e.type);
+			return n.makeClient(t === void 0 ? e : e.annotate(r.ShardGroup, () => t));
+		},
+		registerEntity: (e, t, i) => {
+			let a = o(e.type);
+			return n.registerEntity(a === void 0 ? e : e.annotate(r.ShardGroup, () => a), t, i);
+		}
+	};
+};
+//#endregion
+export { i as JournalRoutingLayout, a as routeJournalWorkflow, s as withJournalEntityRouting, o as withJournalWorkflowRouting };

package/dist/journalRoutingSharding.js

@@ -0,0 +1,28 @@
+import { protectJournalRoutingEffect as e } from "./journalRoutingGuard.js";
+import { Effect as t, Stream as n } from "effect";
+import { Rpc as r, RpcSchema as i } from "effect/rpc";
+//#region src/journalRoutingSharding.ts
+var a = (a, o) => {
+	let s = (i) => {
+		if (typeof i == "object" && i && r.isWrapper(i)) return {
+			...i,
+			value: s(i.value)
+		};
+		if (t.isEffect(i)) return e(o, i);
+		if (n.isStream(i)) {
+			let r = i;
+			return n.unwrap(t.map(e(o, n.toPull(r)), (r) => n.fromPull(t.succeed(e(o, r)))));
+		}
+		throw Error("Cluster handler must return an Effect, Stream or RPC wrapper");
+	};
+	return {
+		...a,
+		registerEntity: (r, c, l) => e(o, t.suspend(() => a.registerEntity(r, c.pipe(t.map((e) => new Proxy(e, { get(e, a, c) {
+			let l = Reflect.get(e, a, c), u = typeof a == "string" ? r.protocol.requests.get(a) : void 0;
+			return !u || typeof l != "function" ? l : (...r) => o.isClosed() ? i.isStreamSchema(u.successSchema) ? n.fromEffect(t.interrupt) : t.interrupt : s(Reflect.apply(l, e, r));
+		} }))), l))),
+		registerSingleton: (n, r, i) => e(o, t.suspend(() => a.registerSingleton(n, e(o, r), i)))
+	};
+};
+//#endregion
+export { a as withJournalRoutingGuard };

package/dist/journalRoutingState.js

@@ -0,0 +1,93 @@
+import { makeJournalRoutingGuard as e } from "./journalRoutingGuard.js";
+import { workflowJournalRoutingRowId as t, workflowJournalRoutingTable as n } from "./journalRoutingTable.js";
+import { journalRoutingLayout as r, journalRoutingTransitions as i } from "./journalRoutingLayout.js";
+import { withJournalRoutingTransaction as a } from "./journalRoutingTransaction.js";
+import { resolvePostgresJournalLocation as o, resolvePostgresJournalNamespace as s } from "./journalRoutingNamespace.js";
+import { acquireJournalRoutingLock as c } from "./journalRoutingLock.js";
+import { JournalRoutingMaintenance as l, relocateWorkflowJournal as u } from "./workflowShardRelocationSql.js";
+import { makePostgresJournalRoutingMaintenance as d } from "./journalRoutingMaintenance.js";
+import { Effect as f, Option as p } from "effect";
+import { SqlClient as m } from "effect/sql";
+//#region src/journalRoutingState.ts
+var h = (e, t) => f.gen(function* () {
+	let r = yield* e`SELECT c.relkind AS kind
+    FROM pg_class c JOIN pg_namespace n ON n.oid = c.relnamespace
+    WHERE n.nspname = ${t} AND c.relname = ${n.tableName}`;
+	return r.length === 0 ? !1 : r.length !== 1 || r[0]?.kind !== "r" ? yield* f.fail(/* @__PURE__ */ Error("Journal routing metadata must be a table in the journal schema")) : !0;
+}), g = (e) => {
+	if (!Number.isSafeInteger(e.generation) || e.generation < 0 || e.generation >= 2 ** 53 - 1 || !/^[a-z][a-z0-9._-]{0,63}$/.test(e.layout)) throw Error("Invalid journal routing state");
+	return r(e.layout), Object.freeze({
+		generation: e.generation,
+		layout: e.layout
+	});
+}, _ = (e) => f.gen(function* () {
+	let n = yield* f.sync(() => g(e.expected)), r = yield* f.sync(() => g({
+		generation: n.generation + 1,
+		layout: e.nextLayout
+	})), a = yield* f.sync(() => i(n.layout, r.layout)), c = yield* m.SqlClient, p = c.withoutTransforms(), _ = yield* s, v = yield* d(_), y = l.of({ exclusive: (e) => v.exclusive(f.gen(function* () {
+		let i = yield* o;
+		if (i.namespace !== _) return yield* f.fail(/* @__PURE__ */ Error("Journal namespace changed during maintenance acquisition"));
+		if (yield* p`SELECT pg_advisory_xact_lock(6322741009312602::bigint)`, !(yield* h(p, i.schema))) return yield* f.fail(/* @__PURE__ */ Error("Workflow journal routing table is missing; apply the app schema first"));
+		yield* p`INSERT INTO ${i.routingTable} (id, namespace, generation, layout, relocation)
+      VALUES (${t(_)}, ${_}, 0, 'default', '[]') ON CONFLICT (namespace) DO NOTHING`;
+		let [s] = yield* p`
+      SELECT generation, layout FROM ${i.routingTable} WHERE namespace = ${_} FOR UPDATE`;
+		if (!s || String(s.generation) !== String(n.generation) || s.layout !== n.layout) return yield* f.fail(/* @__PURE__ */ Error("Journal routing generation changed; transition refused"));
+		let c = yield* e;
+		return yield* p`UPDATE ${i.routingTable} SET generation = ${r.generation}, layout = ${r.layout},
+      relocation = ${JSON.stringify(a)} WHERE namespace = ${_}`, c;
+	}).pipe(f.provideService(m.SqlClient, c))) });
+	return {
+		...yield* u(a).pipe(f.provideService(l, y)),
+		state: r
+	};
+}), v = () => f.gen(function* () {
+	let e = yield* m.SqlClient;
+	if (p.isSome(yield* f.serviceOption(e.transactionService))) return yield* f.fail(/* @__PURE__ */ Error("Journal routing admission cannot enter an ambient transaction"));
+	if (!e.onDialectOrElse({
+		pg: () => !0,
+		orElse: () => !1
+	})) return yield* f.fail(/* @__PURE__ */ Error("Journal routing generation admission currently requires PostgreSQL"));
+	let t = yield* s, n = yield* c({
+		namespace: t,
+		mode: "shared"
+	}), r = yield* a(e, n.connection, f.gen(function* () {
+		let n = yield* o;
+		if (n.namespace !== t) return yield* f.fail(/* @__PURE__ */ Error("Journal namespace changed during runtime admission"));
+		if (!(yield* h(e, n.schema))) return {
+			generation: 0,
+			layout: "default"
+		};
+		let r = yield* e`
+        SELECT generation, layout FROM ${n.routingTable} WHERE namespace = ${t}`;
+		return r.length === 0 ? {
+			generation: 0,
+			layout: "default"
+		} : r.length === 1 ? yield* f.sync(() => g({
+			generation: Number(r[0]?.generation),
+			layout: String(r[0]?.layout)
+		})) : yield* f.fail(/* @__PURE__ */ Error("Journal routing metadata has duplicate namespace rows"));
+	}));
+	return {
+		...n,
+		state: r,
+		namespace: t
+	};
+}), y = f.gen(function* () {
+	let e = yield* v();
+	return {
+		namespace: e.namespace,
+		state: e.state
+	};
+}), b = (e) => f.gen(function* () {
+	let t = yield* f.sync(() => g(e)), n = yield* v();
+	return n.state.generation !== t.generation || n.state.layout !== t.layout ? yield* f.fail(/* @__PURE__ */ Error("Journal routing generation does not match this runtime")) : n;
+}), x = (t) => f.gen(function* () {
+	let n = yield* b(t), r = yield* e({ verify: n.verify });
+	return {
+		...n,
+		...r
+	};
+});
+//#endregion
+export { x as acquireGuardedPostgresJournalRoutingAdmission, b as acquirePostgresJournalRoutingAdmission, g as captureJournalRoutingState, y as readPostgresJournalRoutingState, _ as transitionPostgresJournalRouting };

package/dist/journalRoutingTable.js

@@ -0,0 +1,11 @@
+import { bigint as e, derivedRowId as t, id as n, table as r, text as i } from "@voltro/database";
+//#region src/journalRoutingTable.ts
+var a = r("_voltro_workflow_journal_routing", {
+	id: n({ prefix: "wfjr" }),
+	namespace: i(),
+	generation: e(),
+	layout: i(),
+	relocation: i()
+}).unique(["namespace"]).nonReactive(), o = (e) => t("wfjr", e);
+//#endregion
+export { o as workflowJournalRoutingRowId, a as workflowJournalRoutingTable };

package/dist/journalRoutingTransaction.js

@@ -0,0 +1,16 @@
+import { Effect as e } from "effect";
+import { SqlClient as t } from "effect/sql";
+//#region src/journalRoutingTransaction.ts
+var n = (n, r, i) => t.makeWithTransaction({
+	transactionService: n.transactionService,
+	spanAttributes: [],
+	acquireConnection: e.succeed([void 0, r]),
+	begin: (t) => t.executeUnprepared("BEGIN", [], void 0).pipe(e.asVoid),
+	commit: (t) => t.executeUnprepared("COMMIT", [], void 0).pipe(e.asVoid),
+	rollback: (t) => t.executeUnprepared("ROLLBACK", [], void 0).pipe(e.asVoid),
+	savepoint: (t, n) => t.executeUnprepared(`SAVEPOINT voltro_routing_${n}`, [], void 0).pipe(e.asVoid),
+	rollbackSavepoint: (t, n) => t.executeUnprepared(`ROLLBACK TO SAVEPOINT voltro_routing_${n}`, [], void 0).pipe(e.asVoid),
+	releaseSavepoint: (t, n) => t.executeUnprepared(`RELEASE SAVEPOINT voltro_routing_${n}`, [], void 0).pipe(e.asVoid)
+})(i);
+//#endregion
+export { n as withJournalRoutingTransaction };

package/dist/messages.js

@@ -0,0 +1,92 @@
+import { openEventPayload as e } from "./journalEncryption.js";
+import { eq as t } from "@voltro/database";
+//#region src/messages.ts
+var n = (e) => new Promise((t) => setTimeout(t, e)), r = () => {
+	let e = globalThis.crypto;
+	return typeof e?.randomUUID == "function" ? e.randomUUID() : `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`;
+}, i = () => `wfu_${r()}`, a = async (e, n) => {
+	let r = n.id ?? n.executionId;
+	if (!r) throw Error("workflow message target requires target.id or target.executionId");
+	let i = await e.query({
+		table: "_voltro_workflow_runs",
+		order: [],
+		predicate: t("id", r),
+		projection: void 0,
+		skip: void 0,
+		take: 1
+	});
+	if (i[0]) return i[0];
+	let a = (await e.query({
+		table: "_voltro_workflow_runs",
+		order: [],
+		predicate: t("executionId", r),
+		projection: void 0,
+		skip: void 0,
+		take: 1
+	}))[0];
+	if (!a) throw Error(`workflow message target not found: ${r}`);
+	return a;
+}, o = class extends Error {
+	runId;
+	eventType;
+	eventId;
+	_tag = "WorkflowMessageNotRecorded";
+	constructor(e, t, n) {
+		super(`workflow ${t} for run ${e} was NOT recorded (event ${n}): the run will not see it — the store refused the row, see the recorder's warning`), this.runId = e, this.eventType = t, this.eventId = n, this.name = "WorkflowMessageNotRecorded";
+	}
+}, s = async (e) => {
+	let t = await a(e.store, e.target), n = await e.recorder.recordEvent({
+		runId: t.id,
+		eventType: "signal-sent",
+		payload: {
+			signalName: e.signalName,
+			value: e.payload
+		}
+	});
+	if (n.recorded === !1) throw new o(t.id, "signal-sent", n.id);
+	return { eventId: n.id };
+}, c = async (r) => {
+	let s = await a(r.store, r.target), c = i(), l = await r.recorder.recordEvent({
+		runId: s.id,
+		eventType: "update-requested",
+		payload: {
+			updateId: c,
+			updateName: r.updateName,
+			value: r.payload
+		}
+	});
+	if (l.recorded === !1) throw new o(s.id, "update-requested", l.id);
+	let u = Date.now(), d = r.options?.timeoutMs ?? 3e4, f = r.options?.pollIntervalMs ?? 100;
+	for (;;) {
+		let i = {
+			table: "_voltro_workflow_run_events",
+			order: [{
+				column: "occurredAt",
+				direction: "asc"
+			}],
+			predicate: t("runId", s.id),
+			projection: void 0,
+			skip: void 0,
+			take: 1e3
+		}, a = await r.store.query(i), o = a.find((e) => e.eventType === "update-completed" && e.payload?.updateId === c);
+		if (o) return {
+			eventId: l.id,
+			updateId: c,
+			completedEventId: o.id,
+			result: e(o.payload)?.result
+		};
+		let p = a.find((e) => e.eventType === "update-failed" && e.payload?.updateId === c);
+		if (p) {
+			let t = Error(e(p.payload)?.errorMessage ?? `workflow update '${r.updateName}' failed`);
+			throw Object.assign(t, {
+				updateId: c,
+				eventId: l.id,
+				errorTag: p.payload?.errorTag ?? null
+			}), t;
+		}
+		if (Date.now() - u >= d) throw Error(`Timed out waiting for workflow update '${r.updateName}' (${c})`);
+		await n(f);
+	}
+};
+//#endregion
+export { o as WorkflowMessageNotRecorded, i as makeWorkflowUpdateId, a as resolveWorkflowMessageRun, s as sendWorkflowSignal, c as sendWorkflowUpdate };