fix(workflows): make execution claims race-safe

Author: vladbisceanu

apps/api/src/controllers/__tests__/Actions.track-durability.test.ts

@@ -115,7 +115,7 @@ describe('POST /v1/track durability', () => {
       triggerConfig: {eventName: 'shipment.created'},
     });
     const completeStep = vi
-      .spyOn(servicePrisma.workflowStepExecution, 'update')
+      .spyOn(servicePrisma.workflowStepExecution, 'updateMany')
       .mockRejectedValueOnce(new Error('injected failure after workflow enrollment'));
 
     const response = await request(createTrackApp(projectId))
@@ -456,7 +456,9 @@ describe('POST /v1/track durability', () => {
       if (
         args.where?.workflowId === workflow.id &&
         args.where?.contactId === contact.id &&
-        args.where?.status === 'RUNNING'
+        args.where?.status &&
+        typeof args.where.status === 'object' &&
+        'in' in args.where.status
       ) {
         return null;
       }

apps/api/src/services/EventService.ts

@@ -695,16 +695,16 @@ export class EventService {
         return;
       }
     } else {
-      // If re-entry is allowed, only check if there's a currently RUNNING execution
-      const runningExecution = await prisma.workflowExecution.findFirst({
+      // Re-entry allows a later run, not overlap with a delay or event wait.
+      const activeExecution = await prisma.workflowExecution.findFirst({
         where: {
           workflowId,
           contactId,
-          status: 'RUNNING',
+          status: {in: ['RUNNING', 'WAITING']},
         },
       });
 
-      if (runningExecution) {
+      if (activeExecution) {
         return;
       }
     }