worker: make coder review routing durable

crates/worker-runtime/src/execution.rs

@@ -36,6 +36,16 @@ pub enum WorkerExecutionOperation {
     Cancel,
 }
 
+/// Evidence that a user input reached the durable Worker session boundary.
+///
+/// This is intentionally distinct from accepting a method on the Worker's
+/// in-memory channel. For Flow submissions, the committed UserInput entry also
+/// carries the initial Flow runtime-state extension.
+#[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
+pub struct WorkerInputCommitAck {
+    pub submission_id: String,
+}
+
 /// Typed execution result class. Results are transient operation outcomes and
 /// are not persisted as Worker lifecycle authority.
 #[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize)]
@@ -45,6 +55,8 @@ pub struct WorkerExecutionResult {
     pub run_state: WorkerExecutionRunState,
     #[serde(default, skip_serializing_if = "Option::is_none")]
     pub message: Option<String>,
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub input_commit: Option<WorkerInputCommitAck>,
 }
 
 /// Backend result class for a Worker execution operation.
@@ -68,6 +80,23 @@ impl WorkerExecutionResult {
             outcome: WorkerExecutionOutcome::Accepted,
             run_state,
             message: None,
+            input_commit: None,
+        }
+    }
+
+    pub fn accepted_input_committed(
+        operation: WorkerExecutionOperation,
+        run_state: WorkerExecutionRunState,
+        submission_id: impl Into<String>,
+    ) -> Self {
+        Self {
+            operation,
+            outcome: WorkerExecutionOutcome::Accepted,
+            run_state,
+            message: None,
+            input_commit: Some(WorkerInputCommitAck {
+                submission_id: submission_id.into(),
+            }),
         }
     }
 
@@ -77,6 +106,7 @@ impl WorkerExecutionResult {
             outcome: WorkerExecutionOutcome::Busy,
             run_state: WorkerExecutionRunState::Busy,
             message: Some(message.into()),
+            input_commit: None,
         }
     }
 
@@ -86,6 +116,7 @@ impl WorkerExecutionResult {
             outcome: WorkerExecutionOutcome::Rejected,
             run_state: WorkerExecutionRunState::Stopped,
             message: Some(message.into()),
+            input_commit: None,
         }
     }
 
@@ -95,6 +126,7 @@ impl WorkerExecutionResult {
             outcome: WorkerExecutionOutcome::Errored,
             run_state: WorkerExecutionRunState::Errored,
             message: Some(message.into()),
+            input_commit: None,
         }
     }
 
@@ -104,6 +136,7 @@ impl WorkerExecutionResult {
             outcome: WorkerExecutionOutcome::Unsupported,
             run_state: WorkerExecutionRunState::Stopped,
             message: Some(message.into()),
+            input_commit: None,
         }
     }
 
@@ -472,6 +505,27 @@ impl WorkerExecutionBackendRef {
     }
 }
 
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn input_commit_ack_survives_json_round_trip() {
+        let result = WorkerExecutionResult::accepted_input_committed(
+            WorkerExecutionOperation::Input,
+            WorkerExecutionRunState::Busy,
+            "submission-1",
+        );
+
+        let json = serde_json::to_string(&result).unwrap();
+        assert!(json.contains("\"submission_id\":\"submission-1\""));
+        assert_eq!(
+            serde_json::from_str::<WorkerExecutionResult>(&json).unwrap(),
+            result
+        );
+    }
+}
+
 impl fmt::Debug for WorkerExecutionBackendRef {
     fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
         f.debug_struct("WorkerExecutionBackendRef")