fix: bind workflow samples to distinct task execution proofs

sdk/go/cmd/orbit-workflow-load/handler.go

@@ -0,0 +1,87 @@
+package main
+
+import (
+	"context"
+	"encoding/json"
+	orbit "git.yuntuo.hk/k2safe/orbit/sdk/go"
+	"sync"
+)
+
+// invocation 固定首次本地调用及其尝试身份。
+type invocation struct {
+	sequence  int    // sequence 输入中的实例序号。
+	attemptID string // attemptID 首次调用的尝试身份。
+	calls     int    // calls 同一任务实际调用次数。
+}
+
+// invocationLog 按任务身份记录，不能用同一分支的两次调用抵充两个分支。
+type invocationLog struct {
+	mu       sync.Mutex             // mu 保护并发Worker回调。
+	limit    int                    // limit 最多保存两倍计划实例数的任务身份。
+	calls    map[string]*invocation // calls 固定身份到首次尝试和计数。
+	invalid  int                    // invalid 不符合输入约束的调用。
+	overflow int                    // overflow 超过身份预算的调用。
+}
+
+func newInvocationLog(n int) *invocationLog {
+	return &invocationLog{limit: 2 * n, calls: map[string]*invocation{}}
+}
+func (l *invocationLog) handler(run context.Context, c config, runID string) orbit.WorkerHandler {
+	return orbit.WorkerHandler{Capability: orbit.WorkerCapability{Handler: handlerName(runID), HandlerVersion: "v1", PayloadVersion: "v1"}, Handle: func(ctx context.Context, e orbit.WorkerExecution) (json.RawMessage, error) {
+		p, ok := decodePayload(e.Task.Payload)
+		if !ok || p.Sequence < 0 || p.Sequence >= c.Requests || !matchesTask(e.Task, c, runID, p.Sequence) || !validID(e.AttemptID) || e.Epoch != 1 || e.ConcurrencyToken != 0 {
+			l.mu.Lock()
+			l.invalid++
+			l.mu.Unlock()
+			return nil, &orbit.WorkerFailure{Code: "WORKFLOW_INPUT_MISMATCH"}
+		}
+		l.mu.Lock()
+		if previous := l.calls[e.Task.ID]; previous != nil {
+			previous.calls++
+			l.mu.Unlock()
+			return nil, &orbit.WorkerFailure{Code: "DUPLICATE_INVOCATION"}
+		}
+		if len(l.calls) >= l.limit {
+			l.overflow++
+			l.mu.Unlock()
+			return nil, &orbit.WorkerFailure{Code: "INVOCATION_LIMIT"}
+		}
+		l.calls[e.Task.ID] = &invocation{sequence: p.Sequence, attemptID: e.AttemptID, calls: 1}
+		l.mu.Unlock()
+		select {
+		case <-ctx.Done():
+			return nil, ctx.Err()
+		case <-run.Done():
+			return nil, run.Err()
+		default:
+		}
+		return e.Task.Payload, nil
+	}}
+}
+func (l *invocationLog) summarize(r *workflowReport, proofs []verifiedTask) {
+	l.mu.Lock()
+	defer l.mu.Unlock()
+	known := map[string]verifiedTask{}
+	for _, p := range proofs {
+		if _, exists := known[p.taskID]; exists {
+			r.Errors["DUPLICATE_VERIFIED_TASK"]++
+		}
+		known[p.taskID] = p
+		call := l.calls[p.taskID]
+		if call == nil || call.sequence != p.sequence || call.attemptID != p.attemptID {
+			r.Errors["LOCAL_PROOF_MISMATCH"]++
+		}
+	}
+	for id, call := range l.calls {
+		r.HandlerCalls += call.calls
+		if call.calls > 1 {
+			r.DuplicateInvocations += call.calls - 1
+		}
+		p, ok := known[id]
+		if !ok || p.sequence != call.sequence || p.attemptID != call.attemptID {
+			r.UnconfirmedInvocations += call.calls
+		}
+	}
+	r.Errors["INVALID_HANDLER_INPUT"] += l.invalid
+	r.Errors["HANDLER_IDENTITY_LIMIT"] += l.overflow
+}