veryfront 0.1.615 → 0.1.616

package/esm/src/workflow/backends/redis/index.d.ts

@@ -9,6 +9,8 @@ export declare class RedisBackend implements WorkflowBackend {
     private connectionPromise;
     private config;
     private initialized;
+    /** Per-run lock tokens for ownership-checked release/extend (Redlock pattern). */
+    private lockValues;
     constructor(config?: RedisBackendConfig);
     private runKey;
     private checkpointsKey;

package/esm/src/workflow/backends/redis/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/src/workflow/backends/redis/index.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,SAAS,EACT,iBAAiB,EACjB,WAAW,EAEZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAYnD,YAAY,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,OAAO,KAAK,EAAE,kBAAkB,EAA8B,MAAM,YAAY,CAAC;AAIjF,+BAA+B;AAC/B,qBAAa,YAAa,YAAW,eAAe;IAClD,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,iBAAiB,CAAsC;IAC/D,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,WAAW,CAAS;gBAEhB,MAAM,GAAE,kBAAuB;IAa3C,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,YAAY;IAqBpB,OAAO,CAAC,cAAc;IAqEtB,OAAO,CAAC,YAAY;YAcN,gBAAgB;IAiCxB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB3B,SAAS,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAY1C,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAUlD,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAmCpE,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBvC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAuCnD,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAK7C,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAWpE,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAS9D,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAUpD,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBlF,OAAO,CAAC,aAAa;IAUf,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAM9D,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAKtF,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAAC,IAAI,CAAC;IA8BV,oBAAoB,CAAC,MAAM,CAAC,EAAE;QAClC,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;KAChC,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAsC1D,OAAO,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAc9C,OAAO,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAwBlD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKnC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQ9D,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKzC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAW7D,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKzC,eAAe,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAWjE,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,OAAO,CAAC;IAmCb,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAW/B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAgB/B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/src/workflow/backends/redis/index.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,SAAS,EACT,iBAAiB,EACjB,WAAW,EAEZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAYnD,YAAY,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,OAAO,KAAK,EAAE,kBAAkB,EAA8B,MAAM,YAAY,CAAC;AAmBjF,+BAA+B;AAC/B,qBAAa,YAAa,YAAW,eAAe;IAClD,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,iBAAiB,CAAsC;IAC/D,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,WAAW,CAAS;IAC5B,kFAAkF;IAClF,OAAO,CAAC,UAAU,CAA6B;gBAEnC,MAAM,GAAE,kBAAuB;IAa3C,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,YAAY;IAqBpB,OAAO,CAAC,cAAc;IAqEtB,OAAO,CAAC,YAAY;YAcN,gBAAgB;IAiCxB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB3B,SAAS,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAY1C,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAUlD,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAmCpE,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBvC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAuCnD,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAK7C,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAWpE,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAS9D,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAUpD,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBlF,OAAO,CAAC,aAAa;IAUf,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAM9D,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAKtF,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAAC,IAAI,CAAC;IA8BV,oBAAoB,CAAC,MAAM,CAAC,EAAE;QAClC,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;KAChC,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAsC1D,OAAO,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAc9C,OAAO,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAwBlD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKnC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAa9D,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAezC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiB7D,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKzC,eAAe,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAWjE,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,OAAO,CAAC;IAmCb,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAW/B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAgB/B"}

package/esm/src/workflow/backends/redis/index.js

@@ -12,12 +12,25 @@ import { requeueRun } from "../shared/requeue-run.js";
 import { INITIALIZATION_ERROR, INVALID_ARGUMENT, RESOURCE_NOT_FOUND } from "../../../errors/index.js";
 import { DenoRedisAdapter, getRedisModule, NodeRedisAdapter, } from "../../../platform/adapters/redis/index.js";
 const logger = agentLogger.component("redis-backend");
+/**
+ * Atomic compare-and-delete: delete the lock only if it still holds our token.
+ * Server-side Lua (Redis EVAL) so the GET and DEL are one indivisible step,
+ * preventing a stale owner from deleting another worker's reacquired lock.
+ */
+const RELEASE_LOCK_SCRIPT = "if redis.call('get', KEYS[1]) == ARGV[1] then return redis.call('del', KEYS[1]) else return 0 end";
+/**
+ * Atomic compare-and-pexpire: extend the lock TTL only if it still holds our
+ * token. Same TOCTOU protection as the release script.
+ */
+const EXTEND_LOCK_SCRIPT = "if redis.call('get', KEYS[1]) == ARGV[1] then return redis.call('pexpire', KEYS[1], ARGV[2]) else return 0 end";
 /** Implement redis backend. */
 export class RedisBackend {
     client = null;
     connectionPromise = null;
     config;
     initialized = false;
+    /** Per-run lock tokens for ownership-checked release/extend (Redlock pattern). */
+    lockValues = new Map();
     constructor(config = {}) {
         this.config = {
             prefix: "vf:workflow:",
@@ -442,20 +455,40 @@ export class RedisBackend {
         const client = await this.ensureClient();
         const lockValue = dntShim.crypto.randomUUID();
         const result = await client.set(this.lockKey(runId), lockValue, { nx: true, px: duration });
-        return result === "OK";
+        if (result === "OK") {
+            // Remember our token so release/extend can verify ownership (Redlock).
+            this.lockValues.set(runId, lockValue);
+            return true;
+        }
+        return false;
     }
     async releaseLock(runId) {
         const client = await this.ensureClient();
-        await client.del(this.lockKey(runId));
+        const key = this.lockKey(runId);
+        const ourValue = this.lockValues.get(runId);
+        // Only release if we still own the lock (compare-and-delete). Without a
+        // known token we never owned it, so do nothing.
+        if (ourValue === undefined)
+            return;
+        // Atomic GET + DEL via Lua so a stale owner cannot delete a lock that was
+        // reacquired by another worker between the check and the delete (TOCTOU).
+        await client.eval(RELEASE_LOCK_SCRIPT, [key], [ourValue]);
+        this.lockValues.delete(runId);
     }
     async extendLock(runId, duration) {
         const client = await this.ensureClient();
         const key = this.lockKey(runId);
-        const exists = await client.exists(key);
-        if (exists === 0)
+        const ourValue = this.lockValues.get(runId);
+        // Only extend if we still own the lock (compare-and-pexpire).
+        if (ourValue === undefined)
             return false;
-        await client.expire(key, Math.ceil(duration / 1000));
-        return true;
+        // Atomic GET + PEXPIRE via Lua. PEXPIRE returns 1 when the key existed and
+        // the TTL was set, 0 otherwise (e.g. our token no longer owns the lock).
+        const result = await client.eval(EXTEND_LOCK_SCRIPT, [key], [
+            ourValue,
+            String(duration),
+        ]);
+        return Number(result) === 1;
     }
     async isLocked(runId) {
         const client = await this.ensureClient();

package/esm/src/workflow/executor/dag/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/src/workflow/executor/dag/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAYV,YAAY,EAEZ,WAAW,EACZ,MAAM,gBAAgB,CAAC;AAIxB,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE7F,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EAGlB,MAAM,YAAY,CAAC;AAIpB,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAA4B;gBAE9B,MAAM,EAAE,iBAAiB;IAQ/B,OAAO,CACX,KAAK,EAAE,YAAY,EAAE,EACrB,GAAG,EAAE,WAAW,EAChB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,kBAAkB,CAAC;YAsGhB,WAAW;YA8CX,eAAe;YA0Bf,mBAAmB;YA0CnB,cAAc;YAmGd,iBAAiB;YA6DjB,eAAe;YA8Bf,sBAAsB;YA+DtB,eAAe;YA6If,UAAU;CAoBzB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/src/workflow/executor/dag/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAYV,YAAY,EAEZ,WAAW,EACZ,MAAM,gBAAgB,CAAC;AAIxB,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE7F,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EAGlB,MAAM,YAAY,CAAC;AAIpB,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAA4B;gBAE9B,MAAM,EAAE,iBAAiB;IAQ/B,OAAO,CACX,KAAK,EAAE,YAAY,EAAE,EACrB,GAAG,EAAE,WAAW,EAChB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,kBAAkB,CAAC;YAsGhB,WAAW;YA8CX,eAAe;YA0Bf,mBAAmB;YA4CnB,cAAc;YAqGd,iBAAiB;YA+DjB,eAAe;YA8Bf,sBAAsB;YA+DtB,eAAe;YAsKf,UAAU;CAoBzB"}

package/esm/src/workflow/executor/dag/index.js

@@ -160,7 +160,9 @@ export class DAGExecutor {
             workflowId: "",
             status: "running",
             input: context.input,
-            nodeStates: {},
+            // Carry already-accumulated child states so completed children are
+            // skipped on resume instead of re-executing (H8).
+            nodeStates,
             currentNodes: [],
             context,
             checkpoints: [],
@@ -232,7 +234,9 @@ export class DAGExecutor {
                 workflowId: "",
                 status: "running",
                 input: context.input,
-                nodeStates: {},
+                // Carry already-accumulated child states so completed children are
+                // skipped on resume instead of re-executing (H8).
+                nodeStates,
                 currentNodes: [],
                 context: { ...context },
                 checkpoints: [],
@@ -281,7 +285,9 @@ export class DAGExecutor {
             workflowId: "",
             status: "running",
             input: context.input,
-            nodeStates: {},
+            // Carry already-accumulated child states so completed children are
+            // skipped on resume instead of re-executing (H8).
+            nodeStates,
             currentNodes: [],
             context,
             checkpoints: [],
@@ -384,9 +390,15 @@ export class DAGExecutor {
         let exitReason = "condition";
         let lastError;
         const existingLoopState = context[`${node.id}_loop_state`];
+        // Child node states for the in-flight (resumed) iteration, so its already
+        // completed steps are not re-executed on resume (H9).
+        let resumeIterationNodeStates;
+        let resumeIteration;
         if (existingLoopState) {
             iteration = existingLoopState.iteration;
             previousResults.push(...existingLoopState.previousResults);
+            resumeIterationNodeStates = existingLoopState.iterationNodeStates;
+            resumeIteration = existingLoopState.iteration;
         }
         while (iteration < config.maxIterations) {
             const loopContext = {
@@ -403,12 +415,19 @@ export class DAGExecutor {
             const steps = typeof config.steps === "function"
                 ? config.steps(context, loopContext)
                 : config.steps;
+            // On resume, rehydrate the in-flight iteration's child node states so its
+            // already-completed steps are skipped instead of re-executed (H9).
+            const iterationNodeStates = resumeIteration === iteration && resumeIterationNodeStates
+                ? { ...resumeIterationNodeStates }
+                : {};
+            // Only rehydrate once; subsequent iterations start fresh.
+            resumeIterationNodeStates = undefined;
             const result = await this.execute(steps, {
                 id: `${node.id}_iter_${iteration}`,
                 workflowId: "",
                 status: "running",
                 input: context.input,
-                nodeStates: {},
+                nodeStates: iterationNodeStates,
                 currentNodes: [],
                 context: { ...context, _loop: loopContext },
                 checkpoints: [],
@@ -428,7 +447,13 @@ export class DAGExecutor {
                     state,
                     contextUpdates: {
                         ...result.context,
-                        [`${node.id}_loop_state`]: { iteration, previousResults },
+                        [`${node.id}_loop_state`]: {
+                            iteration,
+                            previousResults,
+                            // Persist the in-flight iteration's child states so completed
+                            // steps are not re-executed when this iteration resumes (H9).
+                            iterationNodeStates: result.nodeStates,
+                        },
                     },
                     waiting: true,
                 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.615",
+  "version": "0.1.616",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",
@@ -73,6 +73,10 @@
       "import": "./esm/src/agent/index.js",
       "types": "./esm/src/agent/index.d.ts"
     },
+    "./agent/identity": {
+      "import": "./esm/src/agent/identity-contracts.js",
+      "types": "./esm/src/agent/identity-contracts.d.ts"
+    },
     "./agent/testing": {
       "import": "./esm/src/agent/testing/index.js",
       "types": "./esm/src/agent/testing/index.d.ts"