Module durable_orchestration 

Durable P3 checkpoint, recovery, wait, retry, and compensation controls. Host-owned durable orchestration controls (spec 111-durable-dynamic-orchestration).

This module deliberately stores only governing identities and redacted execution state. Hosts own persistence and checkpoint authentication; an invalid checkpoint is never partially recovered or replanned.

Structs

CompensationStep

DurableCheckpoint

DurableOrchestrationError

DurableWait

ExecutionLease

GoverningSnapshots

MemoryCheckpointStore

In-memory store for deterministic conformance tests. Production hosts provide authenticated durable storage through CheckpointStore.

RetryPolicy

Enums

DurableOrchestrationErrorCode

DurableWaitKind

Traits

CheckpointStore

Host boundary for authenticated persistence. Implementations must keep signing material outside DurableCheckpoint and atomically replace by fencing token.

Functions

acquire_lease

Transfers execution ownership only to a strictly newer fencing token.

authorize_retry

Enforces declared retryability, attempt and budget bounds, and a stable idempotency key.

authorized_compensation

Returns compensation in reverse completed order after authorization binding checks.

persist_checkpoint

Constructs and persists a secret-free checkpoint before a wait or effect is reported. The caller supplies no authentication tag; it is derived by the host store’s test implementation here and production stores replace it atomically.

recover_checkpoint

Recovers only when the authenticated stored checkpoint exactly binds the current governing snapshots and has a non-expired lease. It never re-resolves artifacts.

wake_wait

Records a bounded wake decision. Cancellation wins over wake; expired waits do not wake.