feat: persist workflow controls and settle stopped branches

internal/storage/mysql/workflow_runtime.go

@@ -152,6 +152,10 @@ func (r *WorkflowRuntime) process(ctx context.Context, c workflowCandidate, skip
 			_, err = tx.ExecContext(ctx, `DELETE FROM weave_pending_advances WHERE namespace_id=? AND id=?`, c.ns, c.id)
 			return err
 		}
+		if g.view.StopKind != nil {
+			done, err = r.settleWorkflow(ctx, tx, g, c, now)
+			return err
+		}
 		if !allow || g.view.State == weave.InstanceNeedsReview || g.view.State == weave.InstanceCancelling {
 			// 暂停/停用仍按原截止计时；核查和失败结清由控制运行器接续，不清除其状态。
 			if (g.view.State == weave.InstanceRunning || g.view.State == weave.InstanceWaiting) && !now.Before(g.view.DeadlineAt) {
@@ -192,7 +196,7 @@ func cloneWorkflowGraph(g *workflowGraph) *workflowGraph {
 
 // progress 在结果已保存后执行有限决策。额度不足只回滚后继决策，不撤销已确认的结果。
 func (r *WorkflowRuntime) progress(ctx context.Context, tx *sql.Tx, g *workflowGraph, allow bool, now time.Time) error {
-	if g.view.State.Terminal() || g.view.State == weave.InstanceNeedsReview || g.view.State == weave.InstanceCancelling {
+	if g.view.State.Terminal() || g.view.StopKind != nil || g.view.State == weave.InstanceNeedsReview || g.view.State == weave.InstanceCancelling {
 		return nil
 	}
 	allow = allow && now.Before(g.view.DeadlineAt)
@@ -232,6 +236,18 @@ func holdWorkflow(ctx context.Context, tx *sql.Tx, g *workflowGraph, state weave
 	if g.view.State.Terminal() {
 		return errors.New("cannot hold completed workflow")
 	}
+	if state == weave.InstanceCancelling || g.view.StopKind != nil || g.version.Specification.FailurePolicy == "FAIL_AFTER_SETTLED" {
+		kind := "FAILURE"
+		if g.view.CancelRequestedAt != nil {
+			kind = "CANCEL"
+		}
+		if err := recordWorkflowStop(ctx, tx, g, kind, now); err != nil {
+			return err
+		}
+		if err := saveWorkflowAdvance(ctx, tx, g, now); err != nil {
+			return err
+		}
+	}
 	if g.view.State == weave.InstanceNeedsReview {
 		state = weave.InstanceNeedsReview
 	}