Interface IRunStore

Optional whole-run eviction for in-memory hosts after terminal cleanup and the retention grace. Durable stores omit it to retain their records. Call only after producers have stopped; forgetting removes fences too.

Adds a new run. A run id that exists is an error, and so is an idempotency key the owner already used: that insert stores nothing and rejects with DuplicateIdempotencyKeyError, so of two sends racing with one key only one run is made, and the other finds it with findByIdempotencyKey.

The run, or undefined when there is none.

Atomically re-reads the row, checks expectState and applies the patch; undefined on a mismatch. Postgres holds the shared run anchor and sets the content fence for a purge in the same transaction. In-memory comparison and update have no await between them.

Optional. Re-reads the row and applies the patch patchFor makes of it, atomically as update is: the patch is decided on the row as the store holds it when it writes, so a write another caller made since an earlier read is never overwritten by a patch decided on that read. Nothing is written when patchFor answers undefined, and then undefined is answered, as it is for a run that does not exist. patchFor runs while the row is held, so it is synchronous and does no I/O. The manager decides with it a usage report's time and total against the last ones taken, and a silent run's end against the run's last usage, so a manager given usageSilenceMs refuses a run store without it: a read and a later update would let another write slip between them.

Rewrites the whole row (the content-free form at the end of a purge).

The runs the filter selects, requestedAt descending, then runId ascending. Default limit 500; states: [] applies no state filter.

The run an owner sent with this idempotency key, if there is one (there is at most one: see insert).

Bounded keyset scan of unfinished funding cleanup, ordered by run id.