@effect-agent/platform-node 0.1.0-beta.96 → 0.1.0-beta.98

package/dist/NodeDurableHost-CG2xAhfb.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"NodeDurableHost-CG2xAhfb.mjs","names":[],"sources":["../src/internal/message-delivery.ts","../src/internal/prepared-admission.ts","../src/NodeDurableHost.ts"],"sourcesContent":["import { Cause, Clock, Effect, Exit, Option } from \"effect\";\nimport {\n  MessageDeliveryDriver,\n  type MessageDeliveryFailure,\n  MessageDeliveryStore,\n} from \"effect-agent/message-delivery\";\n\nconst reportFailure = (cause: Cause.Cause<MessageDeliveryFailure>): Effect.Effect<void> =>\n  Cause.hasInterruptsOnly(cause)\n    ? Effect.interrupt\n    : Effect.logWarning(\"Node message delivery pass failed\").pipe(\n        Effect.annotateLogs({\n          failureTag: Option.match(Cause.findErrorOption(cause), {\n            onNone: () => \"Defect\",\n            onSome: (failure) => failure._tag,\n          }),\n        }),\n      );\n\n/** Caller-owned loop. Indexed scans repair absent hints even when both Threads have settled. */\nexport const runNodeMessageDeliveries = Effect.fn(\"NodeMessageDelivery.run\")(function* (\n  scanInterval: number,\n) {\n  const driver = yield* MessageDeliveryDriver;\n  const store = yield* MessageDeliveryStore;\n\n  while (true) {\n    const pass = yield* driver.runDue().pipe(Effect.exit);\n\n    if (Exit.isFailure(pass)) {\n      yield* reportFailure(pass.cause);\n      yield* Effect.sleep(scanInterval);\n      continue;\n    }\n\n    const deadline = yield* store.nextDeadline().pipe(Effect.exit);\n\n    if (Exit.isFailure(deadline)) {\n      yield* reportFailure(deadline.cause);\n      yield* Effect.sleep(scanInterval);\n      continue;\n    }\n\n    const nowMillis = yield* Clock.currentTimeMillis;\n\n    const delay =\n      deadline.value === null\n        ? scanInterval\n        : Math.max(1, Math.min(deadline.value - nowMillis, scanInterval));\n\n    yield* Effect.sleep(delay);\n  }\n});\n","import { Context, Effect } from \"effect\";\nimport { type DurableSubmitAgent } from \"effect-agent/durable-agent-runtime\";\nimport { type AgentId } from \"effect-agent/identifiers\";\nimport { PreparedInputAdmission } from \"effect-agent/prepared-input-admission\";\nimport { PersistedJson } from \"effect-agent/records\";\nimport {\n  ScheduledInputRetryable,\n  ScheduledInputRefused,\n  ScheduleStorageError,\n} from \"effect-agent/schedule\";\n\nimport { type NodeDurableHost } from \"../NodeDurableHost.ts\";\n\nconst passthroughSubmitAgent = (agentId: AgentId): DurableSubmitAgent<typeof PersistedJson> => ({\n  definition: { id: agentId, input: PersistedJson },\n});\n\nconst ambiguous = (): ScheduledInputRetryable =>\n  ScheduledInputRetryable.make({ reason: \"ambiguous\" });\n\nconst corrupt = (operation: string): ScheduleStorageError =>\n  ScheduleStorageError.make({ operation, reason: \"corrupt\" });\n\n/** Host-owned admission gate, available while the host's worker pool is being assembled. */\nexport class NodeAdmission extends Context.Service<\n  NodeAdmission,\n  Pick<NodeDurableHost[\"Service\"], \"submit\" | \"submissionStatus\">\n>()(\"@effect-agent/platform-node/internal/NodeAdmission\") {}\n\n/** Acquire the gated source once; worker callers cannot replace its admission authority. */\nexport const makeNodePreparedInputAdmission = Effect.gen(function* () {\n  const host = yield* NodeAdmission;\n\n  return PreparedInputAdmission.of({\n    submissionStatus: (receipt) =>\n      host\n        .submissionStatus(receipt)\n        .pipe(Effect.mapError(() => ScheduledInputRetryable.make({ reason: \"storage\" }))),\n    submit: (envelope) =>\n      host\n        .submit(passthroughSubmitAgent(envelope.agentId), envelope.input, {\n          threadId: envelope.threadId,\n          principal: envelope.deliveryPrincipal,\n          idempotencyKey: envelope.admissionKey,\n          ...(envelope.admissionGroup === undefined\n            ? {}\n            : { admissionGroup: envelope.admissionGroup }),\n          ...(envelope.admissionFence === undefined\n            ? {}\n            : { admissionFence: envelope.admissionFence }),\n          ...(envelope.workerAdmission === undefined\n            ? {}\n            : { workerAdmission: envelope.workerAdmission }),\n          ...(envelope.messageAdmission === undefined\n            ? {}\n            : { messageAdmission: envelope.messageAdmission }),\n          definitions: envelope.definitions,\n        })\n        .pipe(\n          Effect.catchTags({\n            AdmissionClosed: () =>\n              Effect.fail(ScheduledInputRetryable.make({ reason: \"host-closed\" })),\n            AgentInputError: () => Effect.fail(corrupt(\"prepared admission input\")),\n            AdmissionConflict: () => Effect.fail(corrupt(\"prepared admission conflict\")),\n            DigestError: () => Effect.fail(ambiguous()),\n            AdmissionPolicyError: (error) =>\n              error.reason === \"refused\"\n                ? ScheduledInputRefused.make({ code: error.code })\n                : ScheduledInputRetryable.make({\n                    reason: error.reason === \"occupied\" ? \"capacity\" : \"storage\",\n                  }),\n            LedgerError: () => ScheduledInputRetryable.make({ reason: \"storage\" }),\n            ThreadStoreError: () => Effect.fail(ambiguous()),\n            ThreadNotMaterialized: () => Effect.fail(ambiguous()),\n            AppendConflict: () => Effect.fail(ambiguous()),\n            FenceRejected: () => Effect.fail(ambiguous()),\n            DurableRuntimeFailpointError: () => Effect.fail(ambiguous()),\n          }),\n        ),\n  });\n});\n","import { NodeCrypto } from \"@effect/platform-node\";\nimport { type Stream, Context, Effect, Fiber, Layer, Ref, Schema } from \"effect\";\nimport {\n  type IntegrityReport,\n  type ObligationReport,\n  type ObligationThresholds,\n  type RecoveryExplanation,\n  type RetryCommand,\n} from \"effect-agent/admin\";\nimport {\n  type AgentRegistration,\n  type ResolvedBinding,\n  type DurableBindingFailure,\n} from \"effect-agent/agent-registration\";\nimport {\n  DurableAgentRuntime,\n  type DurableAbortFailure,\n  type DurableAwaitFailure,\n  type DurableExplainFailure,\n  type DurableObserveOptions,\n  type DurableObligationFailure,\n  type DurableRetryFailure,\n  type DurableSubmitAgent,\n  type DurableSubmitFailure,\n  type DurableSubmitOptions,\n  type DurableVerifyFailure,\n  type DurableWorkerFailure,\n  type Receipt,\n  type RecoveryReport,\n} from \"effect-agent/durable-agent-runtime\";\nimport { type ThreadId, type SubmissionId } from \"effect-agent/identifiers\";\nimport {\n  type MessageDeliveryStore,\n  MessageDeliveryDriver,\n  type MessageDeliveryError,\n} from \"effect-agent/message-delivery\";\nimport { type OperationDenied } from \"effect-agent/operation-authorizer\";\nimport { PreparedInputAdmission } from \"effect-agent/prepared-input-admission\";\nimport { type CanonicalRecordEnvelope } from \"effect-agent/records\";\nimport {\n  type AbortCommand,\n  type AbortIntent,\n  type Settlement,\n} from \"effect-agent/submission-ledger\";\nimport { type ThreadNotMaterialized, type ThreadStoreError } from \"effect-agent/thread-store\";\n\nimport { runNodeMessageDeliveries } from \"./internal/message-delivery.ts\";\nimport { makeNodePreparedInputAdmission, NodeAdmission } from \"./internal/prepared-admission.ts\";\nimport {\n  NodeDurableAgentRuntime,\n  NodeDurableAgentRuntimeConfig,\n  type NodeDurableAgentRuntimeOptions,\n} from \"./NodeDurableAgentRuntime.ts\";\n\n/**\n * Admission is not open on this host: it is shutting down (deployment §6 step 1, DEPLOY-005).\n * Accepted work is unaffected — only NEW admissions are refused.\n */\nexport class AdmissionClosed extends Schema.TaggedError<AdmissionClosed>()(\"AdmissionClosed\", {\n  message: Schema.String,\n}) {}\n\nconst makeHost = Effect.fn(\"NodeDurableHost.make\")(function* (startWorkers: boolean) {\n  const runtime = yield* DurableAgentRuntime;\n  const config = yield* NodeDurableAgentRuntimeConfig;\n\n  // Startup gate (deployment §5, plan §host): configuration decoding and storage compatibility\n  // already gated this Layer's dependencies; the last gate before admission opens is recovering\n  // EVERY nonterminal Submission. Work needing a live Agent Binding is reported `deferred` and\n  // stays a visible obligation for `runWorkers`; lanes durably blocked on an Unknown Outcome are\n  // reported `unknown` and wait for the authorized `resolveUnknown` path (DUR-017) — they consume\n  // no worker permit while the settlement obligation stays owed.\n  const startupRecovery = yield* runtime.runRecovery;\n\n  const admission = yield* Ref.make(true);\n\n  const requireAdmission: Effect.Effect<void, AdmissionClosed> = Ref.get(admission).pipe(\n    Effect.flatMap((open) =>\n      open\n        ? Effect.void\n        : Effect.fail(\n            AdmissionClosed.make({ message: \"The host is shutting down; admission is closed.\" }),\n          ),\n    ),\n  );\n\n  const submit = <InputSchema extends Schema.Top>(\n    agent: DurableSubmitAgent<InputSchema>,\n    input: InputSchema[\"Type\"],\n    options: DurableSubmitOptions,\n  ): Effect.Effect<\n    Receipt,\n    AdmissionClosed | DurableSubmitFailure,\n    InputSchema[\"EncodingServices\"]\n  > => requireAdmission.pipe(Effect.andThen(runtime.submit(agent, input, options)));\n\n  const deliveryServices = yield* Effect.context<MessageDeliveryStore>();\n\n  const deliveryContext = yield* Layer.build(\n    MessageDeliveryDriver.layer({\n      batchSize: 100,\n      concurrency: Math.min(config.workerConcurrency, 32),\n    }).pipe(\n      Layer.provide(NodeCrypto.layer),\n      Layer.provide(\n        Layer.effect(PreparedInputAdmission, makeNodePreparedInputAdmission).pipe(\n          Layer.provide(\n            Layer.succeed(NodeAdmission, { submit, submissionStatus: runtime.submissionStatus }),\n          ),\n        ),\n      ),\n    ),\n  );\n\n  const runDeliveries = runNodeMessageDeliveries(config.wakeScanInterval).pipe(\n    Effect.provide(Context.merge(deliveryServices, deliveryContext)),\n  );\n\n  const runWorkers = <A, E, R>(worker: Effect.Effect<A, E, R>): Effect.Effect<void, E, R> =>\n    Effect.scoped(\n      // Either side exiting stops and joins the other; delivery interruption cannot leave\n      // an apparently healthy worker pool running without message recovery.\n      Effect.raceFirst(\n        Effect.forEach(\n          Array.from({ length: config.workerConcurrency }, (_, index) => index),\n          () => worker,\n          { concurrency: \"unbounded\", discard: true },\n        ),\n        runDeliveries,\n      ),\n    );\n\n  // S2 multi-binding pool: every claimed head resolves its exact registered Binding through\n  // the host's exact registrations, so one bounded\n  // pool serves parent and child lanes — the spec §12 smallest-pool suspension/wakeup proof\n  // runs `workerConcurrency: 1` over exactly this loop.\n  const runResolvedWorkers = runWorkers(runtime.runResolvedWorker);\n\n  const run = startWorkers\n    ? Fiber.join(\n        yield* runResolvedWorkers.pipe(\n          Effect.onExit(() => Ref.set(admission, false)),\n          Effect.forkScoped,\n        ),\n      )\n    : runResolvedWorkers;\n\n  // Register after the worker fiber: close admission, interrupt/join workers, drain\n  // runtime ownership, then close storage and captured application services.\n  yield* Effect.addFinalizer(() => Ref.set(admission, false));\n\n  return NodeDurableHost.of({\n    startupRecovery,\n    admissionOpen: Ref.get(admission),\n    submit,\n    awaitSettlement: runtime.awaitSettlement,\n    submissionStatus: runtime.submissionStatus,\n    observe: runtime.observe,\n    abort: runtime.abort,\n    explain: runtime.explain,\n    explainThread: runtime.explainThread,\n    verify: runtime.verify,\n    retry: runtime.retry,\n    wake: runtime.wake,\n    scanObligations: runtime.scanObligations,\n    runWorkers,\n    run,\n    runResolvedWorkers: run,\n  });\n});\n\n/**\n * Operational host service. Prefer the module's `layer` and `run` for managed workers.\n * The static constructors on this class retain explicit, manual worker ownership.\n *\n * Startup gates run during Layer construction, so the service existing implies readiness:\n * configuration was schema-decoded, the SQLite file passed the exact-version compatibility check,\n * and every nonterminal Submission went through one full recovery pass BEFORE admission opened.\n * `startupRecovery` is the auditable evidence of that reconciliation pass.\n *\n * Shutdown runs in reverse Layer order when the owning Scope closes: `submit` starts refusing\n * with `AdmissionClosed` first, then the runtime Layer's ownership drain releases every claim\n * still held so another host can take over the lanes immediately, then the SQLite resources\n * close. Forced termination at any point stays safe — the durability protocol, not graceful\n * shutdown, provides correctness (DEPLOY-006).\n */\nexport class NodeDurableHost extends Context.Service<\n  NodeDurableHost,\n  {\n    /**\n     * The recovery decisions executed (or deferred) by this host's startup reconciliation.\n     * Reports with the `unknown` disposition identify lanes blocked on Unknown Outcomes that\n     * only the authorized DUR-017 resolution path can release.\n     */\n    readonly startupRecovery: ReadonlyArray<RecoveryReport>;\n    /** Admission-role readiness (deployment §7): true until shutdown begins. */\n    readonly admissionOpen: Effect.Effect<boolean>;\n    /** Observe the managed worker pool, preserving its failure. Manual hosts start their pool here. */\n    readonly run: Effect.Effect<void, DurableWorkerFailure | DurableBindingFailure>;\n    /** `DurableAgentRuntime.submit` behind the host admission gate. */\n    readonly submit: <InputSchema extends Schema.Top>(\n      agent: DurableSubmitAgent<InputSchema>,\n      input: InputSchema[\"Type\"],\n      options: DurableSubmitOptions,\n    ) => Effect.Effect<\n      Receipt,\n      AdmissionClosed | DurableSubmitFailure,\n      InputSchema[\"EncodingServices\"]\n    >;\n    readonly submissionStatus: DurableAgentRuntime[\"Service\"][\"submissionStatus\"];\n    readonly awaitSettlement: (receipt: Receipt) => Effect.Effect<Settlement, DurableAwaitFailure>;\n    readonly observe: (\n      receipt: Receipt,\n      options?: DurableObserveOptions,\n    ) => Stream.Stream<\n      CanonicalRecordEnvelope,\n      ThreadStoreError | ThreadNotMaterialized | OperationDenied\n    >;\n    readonly abort: (command: AbortCommand) => Effect.Effect<AbortIntent, DurableAbortFailure>;\n    /** `DurableAgentRuntime.explain` — read-only recovery explanation of one Submission (P7). */\n    readonly explain: (\n      submissionId: SubmissionId,\n    ) => Effect.Effect<RecoveryExplanation, DurableExplainFailure>;\n    /** `DurableAgentRuntime.explainThread` — explain every nonterminal lane member. */\n    readonly explainThread: (\n      threadId: ThreadId,\n    ) => Effect.Effect<ReadonlyArray<RecoveryExplanation>, DurableExplainFailure>;\n    /** `DurableAgentRuntime.verify` — read-only integrity checks, never a repair (P7). */\n    readonly verify: (threadId: ThreadId) => Effect.Effect<IntegrityReport, DurableVerifyFailure>;\n    /** `DurableAgentRuntime.retry` — audited single-Submission re-drive with typed refusals. */\n    readonly retry: (command: RetryCommand) => Effect.Effect<RecoveryReport, DurableRetryFailure>;\n    /** `DurableAgentRuntime.wake` — the documented operator liveness nudge for one lane. */\n    readonly wake: (threadId: ThreadId) => Effect.Effect<void, OperationDenied>;\n    /** `DurableAgentRuntime.scanObligations` — the scan-based DUR-017/OPS-001 report. */\n    readonly scanObligations: (\n      thresholds: ObligationThresholds,\n    ) => Effect.Effect<ObligationReport, DurableObligationFailure>;\n    /**\n     * Run `workerConcurrency` copies of the given worker effect (typically\n     * `DurableAgentRuntime.runWorker(agent)`) until the caller's Scope interrupts them. The\n     * same Scope drives pending message admission and settlement observation independently\n     * of Submission liveness. The host never forks daemon fibers.\n     */\n    readonly runWorkers: <A, E, R>(worker: Effect.Effect<A, E, R>) => Effect.Effect<void, E, R>;\n    /**\n     * Run `workerConcurrency` copies of `DurableAgentRuntime.runResolvedWorker` over the host's\n     * registered Bindings (S2): every claimed head resolves its exact stored Binding before any\n     * code runs (SUB-023), so one bounded pool serves parent and attached-child lanes.\n     * Hosts built with the module-level `layer` instead join their existing pool.\n     */\n    readonly runResolvedWorkers: Effect.Effect<void, DurableWorkerFailure | DurableBindingFailure>;\n  }\n>()(\"@effect-agent/platform-node/NodeDurableHost\") {\n  /**\n   * Compile typed registrations and acquire the complete host in one Layer Scope.\n   * Node supplies Crypto; model, tool, instruction, and schema services remain required.\n   * Startup recovery and shutdown gates are unchanged. Workers start only when the caller\n   * runs runResolvedWorkers; this constructor never starts a background worker.\n   */\n  static layerRegistered<\n    const Entries extends ReadonlyArray<AgentRegistration>,\n    ContextError = never,\n    ContextRequirements = never,\n    AuthorizationError = never,\n    AuthorizationRequirements = never,\n    ReconcilerError = never,\n    ReconcilerRequirements = never,\n  >(\n    registrations: Entries,\n    options: NodeDurableAgentRuntimeOptions<\n      ContextError,\n      ContextRequirements,\n      AuthorizationError,\n      AuthorizationRequirements,\n      ReconcilerError,\n      ReconcilerRequirements\n    >,\n  ) {\n    return NodeDurableHost.layer.pipe(\n      Layer.provideMerge(NodeDurableAgentRuntime.layerRegistered(registrations, options)),\n    );\n  }\n\n  /**\n   * Host gates over an assembled `NodeDurableAgentRuntime` stack. The runtime Layer owns\n   * executable registrations; omission registers no Agents, so resolved work fails closed.\n   */\n  static readonly layer: Layer.Layer<\n    NodeDurableHost,\n    DurableWorkerFailure | MessageDeliveryError,\n    DurableAgentRuntime | NodeDurableAgentRuntimeConfig | MessageDeliveryStore\n  > = Layer.effect(NodeDurableHost)(makeHost(false));\n\n  /** The complete DN host: `NodeDurableAgentRuntime.layer(options)` plus the host lifecycle gates. */\n  static layerStack<\n    ContextError = never,\n    ContextRequirements = never,\n    AuthorizationError = never,\n    AuthorizationRequirements = never,\n    ReconcilerError = never,\n    ReconcilerRequirements = never,\n  >(\n    options: NodeDurableAgentRuntimeOptions<\n      ContextError,\n      ContextRequirements,\n      AuthorizationError,\n      AuthorizationRequirements,\n      ReconcilerError,\n      ReconcilerRequirements\n    > & { readonly bindings?: ReadonlyArray<ResolvedBinding> },\n  ) {\n    const { bindings = [], ...runtimeOptions } = options;\n\n    return NodeDurableHost.layer.pipe(\n      Layer.provideMerge(NodeDurableAgentRuntime.layerWithBindings(bindings, runtimeOptions)),\n    );\n  }\n}\n\n/**\n * Acquire a complete Node host and start one bounded, scoped worker pool after recovery.\n * Provide model, tool, instruction, and schema dependencies to this Layer. Reusing the Layer\n * shares the same pool. A worker failure closes admission; observe it with `run` at the process\n * boundary so the application exits and releases the host instead of remaining idle.\n */\nexport const layer = <\n  const Entries extends ReadonlyArray<AgentRegistration>,\n  ContextError = never,\n  ContextRequirements = never,\n  AuthorizationError = never,\n  AuthorizationRequirements = never,\n  ReconcilerError = never,\n  ReconcilerRequirements = never,\n>(\n  registrations: Entries,\n  options: NodeDurableAgentRuntimeOptions<\n    ContextError,\n    ContextRequirements,\n    AuthorizationError,\n    AuthorizationRequirements,\n    ReconcilerError,\n    ReconcilerRequirements\n  >,\n) =>\n  Layer.effect(NodeDurableHost)(makeHost(true)).pipe(\n    Layer.provideMerge(NodeDurableAgentRuntime.layerRegistered(registrations, options)),\n  );\n\n/**\n * Supervise the host's existing workers without starting another pool. Use with\n * `Effect.provide(HostLive)` and `NodeRuntime.runMain`; race it with a server Effect when\n * the same process also serves requests. Unlike `Layer.launch`, this observes worker failures.\n */\nexport const run = Effect.gen(function* () {\n  const host = yield* NodeDurableHost;\n\n  return yield* host.run;\n});\n"],"mappings":";;;;;;;;;;;;;;;;AAOA,MAAM,iBAAiB,UACrB,MAAM,kBAAkB,KAAK,IACzB,OAAO,YACP,OAAO,WAAW,mCAAmC,CAAC,CAAC,KACrD,OAAO,aAAa,EAClB,YAAY,OAAO,MAAM,MAAM,gBAAgB,KAAK,GAAG;CACrD,cAAc;CACd,SAAS,YAAY,QAAQ;AAC/B,CAAC,EACH,CAAC,CACH;;AAGN,MAAa,2BAA2B,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAC3E,cACA;CACA,MAAM,SAAS,OAAO;CACtB,MAAM,QAAQ,OAAO;CAErB,OAAO,MAAM;EACX,MAAM,OAAO,OAAO,OAAO,OAAO,CAAC,CAAC,KAAK,OAAO,IAAI;EAEpD,IAAI,KAAK,UAAU,IAAI,GAAG;GACxB,OAAO,cAAc,KAAK,KAAK;GAC/B,OAAO,OAAO,MAAM,YAAY;GAChC;EACF;EAEA,MAAM,WAAW,OAAO,MAAM,aAAa,CAAC,CAAC,KAAK,OAAO,IAAI;EAE7D,IAAI,KAAK,UAAU,QAAQ,GAAG;GAC5B,OAAO,cAAc,SAAS,KAAK;GACnC,OAAO,OAAO,MAAM,YAAY;GAChC;EACF;EAEA,MAAM,YAAY,OAAO,MAAM;EAE/B,MAAM,QACJ,SAAS,UAAU,OACf,eACA,KAAK,IAAI,GAAG,KAAK,IAAI,SAAS,QAAQ,WAAW,YAAY,CAAC;EAEpE,OAAO,OAAO,MAAM,KAAK;CAC3B;AACF,CAAC;;;ACvCD,MAAM,0BAA0B,aAAgE,EAC9F,YAAY;CAAE,IAAI;CAAS,OAAO;AAAc,EAClD;AAEA,MAAM,kBACJ,wBAAwB,KAAK,EAAE,QAAQ,YAAY,CAAC;AAEtD,MAAM,WAAW,cACf,qBAAqB,KAAK;CAAE;CAAW,QAAQ;AAAU,CAAC;;AAG5D,IAAa,gBAAb,cAAmC,QAAQ,QAGzC,CAAC,CAAC,oDAAoD,CAAC,CAAC,CAAC;;AAG3D,MAAa,iCAAiC,OAAO,IAAI,aAAa;CACpE,MAAM,OAAO,OAAO;CAEpB,OAAO,uBAAuB,GAAG;EAC/B,mBAAmB,YACjB,KACG,iBAAiB,OAAO,CAAC,CACzB,KAAK,OAAO,eAAe,wBAAwB,KAAK,EAAE,QAAQ,UAAU,CAAC,CAAC,CAAC;EACpF,SAAS,aACP,KACG,OAAO,uBAAuB,SAAS,OAAO,GAAG,SAAS,OAAO;GAChE,UAAU,SAAS;GACnB,WAAW,SAAS;GACpB,gBAAgB,SAAS;GACzB,GAAI,SAAS,mBAAmB,KAAA,IAC5B,CAAC,IACD,EAAE,gBAAgB,SAAS,eAAe;GAC9C,GAAI,SAAS,mBAAmB,KAAA,IAC5B,CAAC,IACD,EAAE,gBAAgB,SAAS,eAAe;GAC9C,GAAI,SAAS,oBAAoB,KAAA,IAC7B,CAAC,IACD,EAAE,iBAAiB,SAAS,gBAAgB;GAChD,GAAI,SAAS,qBAAqB,KAAA,IAC9B,CAAC,IACD,EAAE,kBAAkB,SAAS,iBAAiB;GAClD,aAAa,SAAS;EACxB,CAAC,CAAC,CACD,KACC,OAAO,UAAU;GACf,uBACE,OAAO,KAAK,wBAAwB,KAAK,EAAE,QAAQ,cAAc,CAAC,CAAC;GACrE,uBAAuB,OAAO,KAAK,QAAQ,0BAA0B,CAAC;GACtE,yBAAyB,OAAO,KAAK,QAAQ,6BAA6B,CAAC;GAC3E,mBAAmB,OAAO,KAAK,UAAU,CAAC;GAC1C,uBAAuB,UACrB,MAAM,WAAW,YACb,sBAAsB,KAAK,EAAE,MAAM,MAAM,KAAK,CAAC,IAC/C,wBAAwB,KAAK,EAC3B,QAAQ,MAAM,WAAW,aAAa,aAAa,UACrD,CAAC;GACP,mBAAmB,wBAAwB,KAAK,EAAE,QAAQ,UAAU,CAAC;GACrE,wBAAwB,OAAO,KAAK,UAAU,CAAC;GAC/C,6BAA6B,OAAO,KAAK,UAAU,CAAC;GACpD,sBAAsB,OAAO,KAAK,UAAU,CAAC;GAC7C,qBAAqB,OAAO,KAAK,UAAU,CAAC;GAC5C,oCAAoC,OAAO,KAAK,UAAU,CAAC;EAC7D,CAAC,CACH;CACN,CAAC;AACH,CAAC;;;;;;;;;;;;;ACtBD,IAAa,kBAAb,cAAqC,OAAO,YAA6B,CAAC,CAAC,mBAAmB,EAC5F,SAAS,OAAO,OAClB,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAM,WAAW,OAAO,GAAG,sBAAsB,CAAC,CAAC,WAAW,cAAuB;CACnF,MAAM,UAAU,OAAO;CACvB,MAAM,SAAS,OAAO;CAQtB,MAAM,kBAAkB,OAAO,QAAQ;CAEvC,MAAM,YAAY,OAAO,IAAI,KAAK,IAAI;CAEtC,MAAM,mBAAyD,IAAI,IAAI,SAAS,CAAC,CAAC,KAChF,OAAO,SAAS,SACd,OACI,OAAO,OACP,OAAO,KACL,gBAAgB,KAAK,EAAE,SAAS,kDAAkD,CAAC,CACrF,CACN,CACF;CAEA,MAAM,UACJ,OACA,OACA,YAKG,iBAAiB,KAAK,OAAO,QAAQ,QAAQ,OAAO,OAAO,OAAO,OAAO,CAAC,CAAC;CAEhF,MAAM,mBAAmB,OAAO,OAAO,QAA8B;CAErE,MAAM,kBAAkB,OAAO,MAAM,MACnC,sBAAsB,MAAM;EAC1B,WAAW;EACX,aAAa,KAAK,IAAI,OAAO,mBAAmB,EAAE;CACpD,CAAC,CAAC,CAAC,KACD,MAAM,QAAQ,WAAW,KAAK,GAC9B,MAAM,QACJ,MAAM,OAAO,wBAAwB,8BAA8B,CAAC,CAAC,KACnE,MAAM,QACJ,MAAM,QAAQ,eAAe;EAAE;EAAQ,kBAAkB,QAAQ;CAAiB,CAAC,CACrF,CACF,CACF,CACF,CACF;CAEA,MAAM,gBAAgB,yBAAyB,OAAO,gBAAgB,CAAC,CAAC,KACtE,OAAO,QAAQ,QAAQ,MAAM,kBAAkB,eAAe,CAAC,CACjE;CAEA,MAAM,cAAuB,WAC3B,OAAO,OAGL,OAAO,UACL,OAAO,QACL,MAAM,KAAK,EAAE,QAAQ,OAAO,kBAAkB,IAAI,GAAG,UAAU,KAAK,SAC9D,QACN;EAAE,aAAa;EAAa,SAAS;CAAK,CAC5C,GACA,aACF,CACF;CAMF,MAAM,qBAAqB,WAAW,QAAQ,iBAAiB;CAE/D,MAAM,MAAM,eACR,MAAM,KACJ,OAAO,mBAAmB,KACxB,OAAO,aAAa,IAAI,IAAI,WAAW,KAAK,CAAC,GAC7C,OAAO,UACT,CACF,IACA;CAIJ,OAAO,OAAO,mBAAmB,IAAI,IAAI,WAAW,KAAK,CAAC;CAE1D,OAAO,gBAAgB,GAAG;EACxB;EACA,eAAe,IAAI,IAAI,SAAS;EAChC;EACA,iBAAiB,QAAQ;EACzB,kBAAkB,QAAQ;EAC1B,SAAS,QAAQ;EACjB,OAAO,QAAQ;EACf,SAAS,QAAQ;EACjB,eAAe,QAAQ;EACvB,QAAQ,QAAQ;EAChB,OAAO,QAAQ;EACf,MAAM,QAAQ;EACd,iBAAiB,QAAQ;EACzB;EACA;EACA,oBAAoB;CACtB,CAAC;AACH,CAAC;;;;;;;;;;;;;;;;AAiBD,IAAa,kBAAb,MAAa,wBAAwB,QAAQ,QAkE3C,CAAC,CAAC,6CAA6C,CAAC,CAAC;;;;;;;CAOjD,OAAO,gBASL,eACA,SAQA;EACA,OAAO,gBAAgB,MAAM,KAC3B,MAAM,aAAa,wBAAwB,gBAAgB,eAAe,OAAO,CAAC,CACpF;CACF;;;;;CAMA,OAAgB,QAIZ,MAAM,OAAO,eAAe,CAAC,CAAC,SAAS,KAAK,CAAC;;CAGjD,OAAO,WAQL,SAQA;EACA,MAAM,EAAE,WAAW,CAAC,GAAG,GAAG,mBAAmB;EAE7C,OAAO,gBAAgB,MAAM,KAC3B,MAAM,aAAa,wBAAwB,kBAAkB,UAAU,cAAc,CAAC,CACxF;CACF;AACF;;;;;;;AAQA,MAAa,SASX,eACA,YASA,MAAM,OAAO,eAAe,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,KAC5C,MAAM,aAAa,wBAAwB,gBAAgB,eAAe,OAAO,CAAC,CACpF;;;;;;AAOF,MAAa,MAAM,OAAO,IAAI,aAAa;CAGzC,OAAO,QAAO,OAFM,gBAAA,CAED;AACrB,CAAC"}
+{"version":3,"file":"NodeDurableHost-CG2xAhfb.mjs","names":[],"sources":["../src/internal/message-delivery.ts","../src/internal/prepared-admission.ts","../src/NodeDurableHost.ts"],"sourcesContent":["import { Cause, Clock, Effect, Exit, Option } from \"effect\";\nimport {\n  MessageDeliveryDriver,\n  type MessageDeliveryFailure,\n  MessageDeliveryStore,\n} from \"effect-agent/message-delivery\";\n\nconst reportFailure = (cause: Cause.Cause<MessageDeliveryFailure>): Effect.Effect<void> =>\n  Cause.hasInterruptsOnly(cause)\n    ? Effect.interrupt\n    : Effect.logWarning(\"Node message delivery pass failed\").pipe(\n        Effect.annotateLogs({\n          failureTag: Option.match(Cause.findErrorOption(cause), {\n            onNone: () => \"Defect\",\n            onSome: (failure) => failure._tag,\n          }),\n        }),\n      );\n\n/** Caller-owned loop. Indexed scans repair absent hints even when both Threads have settled. */\nexport const runNodeMessageDeliveries = Effect.fn(\"NodeMessageDelivery.run\")(function* (\n  scanInterval: number,\n) {\n  const driver = yield* MessageDeliveryDriver;\n  const store = yield* MessageDeliveryStore;\n\n  while (true) {\n    const pass = yield* driver.runDue().pipe(Effect.exit);\n\n    if (Exit.isFailure(pass)) {\n      yield* reportFailure(pass.cause);\n      yield* Effect.sleep(scanInterval);\n      continue;\n    }\n\n    const deadline = yield* store.nextDeadline().pipe(Effect.exit);\n\n    if (Exit.isFailure(deadline)) {\n      yield* reportFailure(deadline.cause);\n      yield* Effect.sleep(scanInterval);\n      continue;\n    }\n\n    const nowMillis = yield* Clock.currentTimeMillis;\n\n    const delay =\n      deadline.value === null\n        ? scanInterval\n        : Math.max(1, Math.min(deadline.value - nowMillis, scanInterval));\n\n    yield* Effect.sleep(delay);\n  }\n});\n","import { Context, Effect } from \"effect\";\nimport { type DurableSubmitAgent } from \"effect-agent/durable-agent-runtime\";\nimport { type AgentId } from \"effect-agent/identifiers\";\nimport { PreparedInputAdmission } from \"effect-agent/prepared-input-admission\";\nimport { PersistedJson } from \"effect-agent/records\";\nimport {\n  ScheduledInputRetryable,\n  ScheduledInputRefused,\n  ScheduleStorageError,\n} from \"effect-agent/schedule\";\n\nimport { type NodeDurableHost } from \"../NodeDurableHost.ts\";\n\nconst passthroughSubmitAgent = (agentId: AgentId): DurableSubmitAgent<typeof PersistedJson> => ({\n  definition: { id: agentId, input: PersistedJson },\n});\n\nconst ambiguous = (): ScheduledInputRetryable =>\n  ScheduledInputRetryable.make({ reason: \"ambiguous\" });\n\nconst corrupt = (operation: string): ScheduleStorageError =>\n  ScheduleStorageError.make({ operation, reason: \"corrupt\" });\n\n/** Host-owned admission gate, available while the host's worker pool is being assembled. */\nexport class NodeAdmission extends Context.Service<\n  NodeAdmission,\n  Pick<NodeDurableHost[\"Service\"], \"submit\" | \"submissionStatus\">\n>()(\"@effect-agent/platform-node/internal/NodeAdmission\") {}\n\n/** Acquire the gated source once; worker callers cannot replace its admission authority. */\nexport const makeNodePreparedInputAdmission = Effect.gen(function* () {\n  const host = yield* NodeAdmission;\n\n  return PreparedInputAdmission.of({\n    submissionStatus: (receipt) =>\n      host\n        .submissionStatus(receipt)\n        .pipe(Effect.mapError(() => ScheduledInputRetryable.make({ reason: \"storage\" }))),\n    submit: (envelope) =>\n      host\n        .submit(passthroughSubmitAgent(envelope.agentId), envelope.input, {\n          threadId: envelope.threadId,\n          principal: envelope.deliveryPrincipal,\n          idempotencyKey: envelope.admissionKey,\n          ...(envelope.admissionGroup === undefined\n            ? {}\n            : { admissionGroup: envelope.admissionGroup }),\n          ...(envelope.admissionFence === undefined\n            ? {}\n            : { admissionFence: envelope.admissionFence }),\n          ...(envelope.workerAdmission === undefined\n            ? {}\n            : { workerAdmission: envelope.workerAdmission }),\n          ...(envelope.messageAdmission === undefined\n            ? {}\n            : { messageAdmission: envelope.messageAdmission }),\n          definitions: envelope.definitions,\n        })\n        .pipe(\n          Effect.catchTags({\n            AdmissionClosed: () =>\n              Effect.fail(ScheduledInputRetryable.make({ reason: \"host-closed\" })),\n            AgentInputError: () => Effect.fail(corrupt(\"prepared admission input\")),\n            AdmissionConflict: () => Effect.fail(corrupt(\"prepared admission conflict\")),\n            DigestError: () => Effect.fail(ambiguous()),\n            AdmissionPolicyError: (error) =>\n              error.reason === \"refused\"\n                ? ScheduledInputRefused.make({ code: error.code })\n                : ScheduledInputRetryable.make({\n                    reason: error.reason === \"occupied\" ? \"capacity\" : \"storage\",\n                  }),\n            LedgerError: () => ScheduledInputRetryable.make({ reason: \"storage\" }),\n            ThreadStoreError: () => Effect.fail(ambiguous()),\n            ThreadNotMaterialized: () => Effect.fail(ambiguous()),\n            AppendConflict: () => Effect.fail(ambiguous()),\n            FenceRejected: () => Effect.fail(ambiguous()),\n            DurableRuntimeFailpointError: () => Effect.fail(ambiguous()),\n          }),\n        ),\n  });\n});\n","import { NodeCrypto } from \"@effect/platform-node\";\nimport { type Stream, Context, Effect, Fiber, Layer, Ref, Schema } from \"effect\";\nimport {\n  type IntegrityReport,\n  type ObligationReport,\n  type ObligationThresholds,\n  type RecoveryExplanation,\n  type RetryCommand,\n} from \"effect-agent/admin\";\nimport {\n  type AgentRegistration,\n  type ResolvedBinding,\n  type DurableBindingFailure,\n} from \"effect-agent/agent-registration\";\nimport {\n  DurableAgentRuntime,\n  type DurableAbortFailure,\n  type DurableAwaitFailure,\n  type DurableExplainFailure,\n  type DurableObserveOptions,\n  type DurableObligationFailure,\n  type DurableRetryFailure,\n  type DurableSubmitAgent,\n  type DurableSubmitFailure,\n  type DurableSubmitOptions,\n  type DurableVerifyFailure,\n  type DurableWorkerFailure,\n  type Receipt,\n  type RecoveryReport,\n} from \"effect-agent/durable-agent-runtime\";\nimport { type ThreadId, type SubmissionId } from \"effect-agent/identifiers\";\nimport {\n  type MessageDeliveryStore,\n  MessageDeliveryDriver,\n  type MessageDeliveryError,\n} from \"effect-agent/message-delivery\";\nimport { type OperationDenied } from \"effect-agent/operation-authorizer\";\nimport { PreparedInputAdmission } from \"effect-agent/prepared-input-admission\";\nimport { type CanonicalRecordEnvelope } from \"effect-agent/records\";\nimport {\n  type AbortCommand,\n  type AbortIntent,\n  type Settlement,\n} from \"effect-agent/submission-ledger\";\nimport { type ThreadNotMaterialized, type ThreadStoreError } from \"effect-agent/thread-store\";\n\nimport { runNodeMessageDeliveries } from \"./internal/message-delivery.ts\";\nimport { makeNodePreparedInputAdmission, NodeAdmission } from \"./internal/prepared-admission.ts\";\nimport {\n  NodeDurableAgentRuntime,\n  NodeDurableAgentRuntimeConfig,\n  type NodeDurableAgentRuntimeOptions,\n} from \"./NodeDurableAgentRuntime.ts\";\n\n/**\n * Admission is not open on this host: it is shutting down (deployment §6 step 1, DEPLOY-005).\n * Accepted work is unaffected — only NEW admissions are refused.\n */\nexport class AdmissionClosed extends Schema.TaggedError<AdmissionClosed>()(\"AdmissionClosed\", {\n  message: Schema.String,\n}) {}\n\nconst makeHost = Effect.fn(\"NodeDurableHost.make\")(function* (startWorkers: boolean) {\n  const runtime = yield* DurableAgentRuntime;\n  const config = yield* NodeDurableAgentRuntimeConfig;\n\n  // Startup gate (deployment §5, plan §host): configuration decoding and storage compatibility\n  // already gated this Layer's dependencies; the last gate before admission opens is recovering\n  // EVERY nonterminal Submission. Work needing a live Agent Binding is reported `deferred` and\n  // stays a visible obligation for `runWorkers`; submissions parked on an Unknown Outcome are\n  // reported `unknown` and wait for the authorized `resolveUnknown` path (DUR-017) — they consume\n  // no worker permit while the settlement obligation stays owed and later input can run.\n  const startupRecovery = yield* runtime.runRecovery;\n\n  const admission = yield* Ref.make(true);\n\n  const requireAdmission: Effect.Effect<void, AdmissionClosed> = Ref.get(admission).pipe(\n    Effect.flatMap((open) =>\n      open\n        ? Effect.void\n        : Effect.fail(\n            AdmissionClosed.make({ message: \"The host is shutting down; admission is closed.\" }),\n          ),\n    ),\n  );\n\n  const submit = <InputSchema extends Schema.Top>(\n    agent: DurableSubmitAgent<InputSchema>,\n    input: InputSchema[\"Type\"],\n    options: DurableSubmitOptions,\n  ): Effect.Effect<\n    Receipt,\n    AdmissionClosed | DurableSubmitFailure,\n    InputSchema[\"EncodingServices\"]\n  > => requireAdmission.pipe(Effect.andThen(runtime.submit(agent, input, options)));\n\n  const deliveryServices = yield* Effect.context<MessageDeliveryStore>();\n\n  const deliveryContext = yield* Layer.build(\n    MessageDeliveryDriver.layer({\n      batchSize: 100,\n      concurrency: Math.min(config.workerConcurrency, 32),\n    }).pipe(\n      Layer.provide(NodeCrypto.layer),\n      Layer.provide(\n        Layer.effect(PreparedInputAdmission, makeNodePreparedInputAdmission).pipe(\n          Layer.provide(\n            Layer.succeed(NodeAdmission, { submit, submissionStatus: runtime.submissionStatus }),\n          ),\n        ),\n      ),\n    ),\n  );\n\n  const runDeliveries = runNodeMessageDeliveries(config.wakeScanInterval).pipe(\n    Effect.provide(Context.merge(deliveryServices, deliveryContext)),\n  );\n\n  const runWorkers = <A, E, R>(worker: Effect.Effect<A, E, R>): Effect.Effect<void, E, R> =>\n    Effect.scoped(\n      // Either side exiting stops and joins the other; delivery interruption cannot leave\n      // an apparently healthy worker pool running without message recovery.\n      Effect.raceFirst(\n        Effect.forEach(\n          Array.from({ length: config.workerConcurrency }, (_, index) => index),\n          () => worker,\n          { concurrency: \"unbounded\", discard: true },\n        ),\n        runDeliveries,\n      ),\n    );\n\n  // Every claimed head resolves the current Binding for its stable agentId, so one bounded\n  // pool serves parent and child lanes — the spec §12 smallest-pool suspension/wakeup proof\n  // runs `workerConcurrency: 1` over exactly this loop.\n  const runResolvedWorkers = runWorkers(runtime.runResolvedWorker);\n\n  const run = startWorkers\n    ? Fiber.join(\n        yield* runResolvedWorkers.pipe(\n          Effect.onExit(() => Ref.set(admission, false)),\n          Effect.forkScoped,\n        ),\n      )\n    : runResolvedWorkers;\n\n  // Register after the worker fiber: close admission, interrupt/join workers, drain\n  // runtime ownership, then close storage and captured application services.\n  yield* Effect.addFinalizer(() => Ref.set(admission, false));\n\n  return NodeDurableHost.of({\n    startupRecovery,\n    admissionOpen: Ref.get(admission),\n    submit,\n    awaitSettlement: runtime.awaitSettlement,\n    submissionStatus: runtime.submissionStatus,\n    observe: runtime.observe,\n    abort: runtime.abort,\n    explain: runtime.explain,\n    explainThread: runtime.explainThread,\n    verify: runtime.verify,\n    retry: runtime.retry,\n    wake: runtime.wake,\n    scanObligations: runtime.scanObligations,\n    runWorkers,\n    run,\n    runResolvedWorkers: run,\n  });\n});\n\n/**\n * Operational host service. Prefer the module's `layer` and `run` for managed workers.\n * The static constructors on this class retain explicit, manual worker ownership.\n *\n * Startup gates run during Layer construction, so the service existing implies readiness:\n * configuration was schema-decoded, the SQLite file passed the exact-version compatibility check,\n * and every nonterminal Submission went through one full recovery pass BEFORE admission opened.\n * `startupRecovery` is the auditable evidence of that reconciliation pass.\n *\n * Shutdown runs in reverse Layer order when the owning Scope closes: `submit` starts refusing\n * with `AdmissionClosed` first, then the runtime Layer's ownership drain releases every claim\n * still held so another host can take over the lanes immediately, then the SQLite resources\n * close. Forced termination at any point stays safe — the durability protocol, not graceful\n * shutdown, provides correctness (DEPLOY-006).\n */\nexport class NodeDurableHost extends Context.Service<\n  NodeDurableHost,\n  {\n    /**\n     * The recovery decisions executed (or deferred) by this host's startup reconciliation.\n     * Reports with the `unknown` disposition identify parked Submissions with Unknown Outcomes.\n     * They retain their settlement obligation while later input can run; authorized resolution\n     * or abort advances the parked Submission.\n     */\n    readonly startupRecovery: ReadonlyArray<RecoveryReport>;\n    /** Admission-role readiness (deployment §7): true until shutdown begins. */\n    readonly admissionOpen: Effect.Effect<boolean>;\n    /** Observe the managed worker pool, preserving its failure. Manual hosts start their pool here. */\n    readonly run: Effect.Effect<void, DurableWorkerFailure | DurableBindingFailure>;\n    /** `DurableAgentRuntime.submit` behind the host admission gate. */\n    readonly submit: <InputSchema extends Schema.Top>(\n      agent: DurableSubmitAgent<InputSchema>,\n      input: InputSchema[\"Type\"],\n      options: DurableSubmitOptions,\n    ) => Effect.Effect<\n      Receipt,\n      AdmissionClosed | DurableSubmitFailure,\n      InputSchema[\"EncodingServices\"]\n    >;\n    readonly submissionStatus: DurableAgentRuntime[\"Service\"][\"submissionStatus\"];\n    readonly awaitSettlement: (receipt: Receipt) => Effect.Effect<Settlement, DurableAwaitFailure>;\n    readonly observe: (\n      receipt: Receipt,\n      options?: DurableObserveOptions,\n    ) => Stream.Stream<\n      CanonicalRecordEnvelope,\n      ThreadStoreError | ThreadNotMaterialized | OperationDenied\n    >;\n    readonly abort: (command: AbortCommand) => Effect.Effect<AbortIntent, DurableAbortFailure>;\n    /** `DurableAgentRuntime.explain` — read-only recovery explanation of one Submission (P7). */\n    readonly explain: (\n      submissionId: SubmissionId,\n    ) => Effect.Effect<RecoveryExplanation, DurableExplainFailure>;\n    /** `DurableAgentRuntime.explainThread` — explain every nonterminal lane member. */\n    readonly explainThread: (\n      threadId: ThreadId,\n    ) => Effect.Effect<ReadonlyArray<RecoveryExplanation>, DurableExplainFailure>;\n    /** `DurableAgentRuntime.verify` — read-only integrity checks, never a repair (P7). */\n    readonly verify: (threadId: ThreadId) => Effect.Effect<IntegrityReport, DurableVerifyFailure>;\n    /** `DurableAgentRuntime.retry` — audited single-Submission re-drive with typed refusals. */\n    readonly retry: (command: RetryCommand) => Effect.Effect<RecoveryReport, DurableRetryFailure>;\n    /** `DurableAgentRuntime.wake` — the documented operator liveness nudge for one lane. */\n    readonly wake: (threadId: ThreadId) => Effect.Effect<void, OperationDenied>;\n    /** `DurableAgentRuntime.scanObligations` — the scan-based DUR-017/OPS-001 report. */\n    readonly scanObligations: (\n      thresholds: ObligationThresholds,\n    ) => Effect.Effect<ObligationReport, DurableObligationFailure>;\n    /**\n     * Run `workerConcurrency` copies of the given worker effect (typically\n     * `DurableAgentRuntime.runWorker(agent)`) until the caller's Scope interrupts them. The\n     * same Scope drives pending message admission and settlement observation independently\n     * of Submission liveness. The host never forks daemon fibers.\n     */\n    readonly runWorkers: <A, E, R>(worker: Effect.Effect<A, E, R>) => Effect.Effect<void, E, R>;\n    /**\n     * Run `workerConcurrency` copies of `DurableAgentRuntime.runResolvedWorker` over the host's\n     * registered Bindings: every claimed head resolves the current Binding for its stable\n     * agentId, so one bounded pool serves parent and attached-child lanes.\n     * Hosts built with the module-level `layer` instead join their existing pool.\n     */\n    readonly runResolvedWorkers: Effect.Effect<void, DurableWorkerFailure | DurableBindingFailure>;\n  }\n>()(\"@effect-agent/platform-node/NodeDurableHost\") {\n  /**\n   * Compile typed registrations and acquire the complete host in one Layer Scope.\n   * Node supplies Crypto; model, tool, instruction, and schema services remain required.\n   * Startup recovery and shutdown gates are unchanged. Workers start only when the caller\n   * runs runResolvedWorkers; this constructor never starts a background worker.\n   */\n  static layerRegistered<\n    const Entries extends ReadonlyArray<AgentRegistration>,\n    ContextError = never,\n    ContextRequirements = never,\n    AuthorizationError = never,\n    AuthorizationRequirements = never,\n    ReconcilerError = never,\n    ReconcilerRequirements = never,\n  >(\n    registrations: Entries,\n    options: NodeDurableAgentRuntimeOptions<\n      ContextError,\n      ContextRequirements,\n      AuthorizationError,\n      AuthorizationRequirements,\n      ReconcilerError,\n      ReconcilerRequirements\n    >,\n  ) {\n    return NodeDurableHost.layer.pipe(\n      Layer.provideMerge(NodeDurableAgentRuntime.layerRegistered(registrations, options)),\n    );\n  }\n\n  /**\n   * Host gates over an assembled `NodeDurableAgentRuntime` stack. The runtime Layer owns\n   * executable registrations; omission registers no Agents, so resolved work fails closed.\n   */\n  static readonly layer: Layer.Layer<\n    NodeDurableHost,\n    DurableWorkerFailure | MessageDeliveryError,\n    DurableAgentRuntime | NodeDurableAgentRuntimeConfig | MessageDeliveryStore\n  > = Layer.effect(NodeDurableHost)(makeHost(false));\n\n  /** The complete DN host: `NodeDurableAgentRuntime.layer(options)` plus the host lifecycle gates. */\n  static layerStack<\n    ContextError = never,\n    ContextRequirements = never,\n    AuthorizationError = never,\n    AuthorizationRequirements = never,\n    ReconcilerError = never,\n    ReconcilerRequirements = never,\n  >(\n    options: NodeDurableAgentRuntimeOptions<\n      ContextError,\n      ContextRequirements,\n      AuthorizationError,\n      AuthorizationRequirements,\n      ReconcilerError,\n      ReconcilerRequirements\n    > & { readonly bindings?: ReadonlyArray<ResolvedBinding> },\n  ) {\n    const { bindings = [], ...runtimeOptions } = options;\n\n    return NodeDurableHost.layer.pipe(\n      Layer.provideMerge(NodeDurableAgentRuntime.layerWithBindings(bindings, runtimeOptions)),\n    );\n  }\n}\n\n/**\n * Acquire a complete Node host and start one bounded, scoped worker pool after recovery.\n * Provide model, tool, instruction, and schema dependencies to this Layer. Reusing the Layer\n * shares the same pool. A worker failure closes admission; observe it with `run` at the process\n * boundary so the application exits and releases the host instead of remaining idle.\n */\nexport const layer = <\n  const Entries extends ReadonlyArray<AgentRegistration>,\n  ContextError = never,\n  ContextRequirements = never,\n  AuthorizationError = never,\n  AuthorizationRequirements = never,\n  ReconcilerError = never,\n  ReconcilerRequirements = never,\n>(\n  registrations: Entries,\n  options: NodeDurableAgentRuntimeOptions<\n    ContextError,\n    ContextRequirements,\n    AuthorizationError,\n    AuthorizationRequirements,\n    ReconcilerError,\n    ReconcilerRequirements\n  >,\n) =>\n  Layer.effect(NodeDurableHost)(makeHost(true)).pipe(\n    Layer.provideMerge(NodeDurableAgentRuntime.layerRegistered(registrations, options)),\n  );\n\n/**\n * Supervise the host's existing workers without starting another pool. Use with\n * `Effect.provide(HostLive)` and `NodeRuntime.runMain`; race it with a server Effect when\n * the same process also serves requests. Unlike `Layer.launch`, this observes worker failures.\n */\nexport const run = Effect.gen(function* () {\n  const host = yield* NodeDurableHost;\n\n  return yield* host.run;\n});\n"],"mappings":";;;;;;;;;;;;;;;;AAOA,MAAM,iBAAiB,UACrB,MAAM,kBAAkB,KAAK,IACzB,OAAO,YACP,OAAO,WAAW,mCAAmC,CAAC,CAAC,KACrD,OAAO,aAAa,EAClB,YAAY,OAAO,MAAM,MAAM,gBAAgB,KAAK,GAAG;CACrD,cAAc;CACd,SAAS,YAAY,QAAQ;AAC/B,CAAC,EACH,CAAC,CACH;;AAGN,MAAa,2BAA2B,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAC3E,cACA;CACA,MAAM,SAAS,OAAO;CACtB,MAAM,QAAQ,OAAO;CAErB,OAAO,MAAM;EACX,MAAM,OAAO,OAAO,OAAO,OAAO,CAAC,CAAC,KAAK,OAAO,IAAI;EAEpD,IAAI,KAAK,UAAU,IAAI,GAAG;GACxB,OAAO,cAAc,KAAK,KAAK;GAC/B,OAAO,OAAO,MAAM,YAAY;GAChC;EACF;EAEA,MAAM,WAAW,OAAO,MAAM,aAAa,CAAC,CAAC,KAAK,OAAO,IAAI;EAE7D,IAAI,KAAK,UAAU,QAAQ,GAAG;GAC5B,OAAO,cAAc,SAAS,KAAK;GACnC,OAAO,OAAO,MAAM,YAAY;GAChC;EACF;EAEA,MAAM,YAAY,OAAO,MAAM;EAE/B,MAAM,QACJ,SAAS,UAAU,OACf,eACA,KAAK,IAAI,GAAG,KAAK,IAAI,SAAS,QAAQ,WAAW,YAAY,CAAC;EAEpE,OAAO,OAAO,MAAM,KAAK;CAC3B;AACF,CAAC;;;ACvCD,MAAM,0BAA0B,aAAgE,EAC9F,YAAY;CAAE,IAAI;CAAS,OAAO;AAAc,EAClD;AAEA,MAAM,kBACJ,wBAAwB,KAAK,EAAE,QAAQ,YAAY,CAAC;AAEtD,MAAM,WAAW,cACf,qBAAqB,KAAK;CAAE;CAAW,QAAQ;AAAU,CAAC;;AAG5D,IAAa,gBAAb,cAAmC,QAAQ,QAGzC,CAAC,CAAC,oDAAoD,CAAC,CAAC,CAAC;;AAG3D,MAAa,iCAAiC,OAAO,IAAI,aAAa;CACpE,MAAM,OAAO,OAAO;CAEpB,OAAO,uBAAuB,GAAG;EAC/B,mBAAmB,YACjB,KACG,iBAAiB,OAAO,CAAC,CACzB,KAAK,OAAO,eAAe,wBAAwB,KAAK,EAAE,QAAQ,UAAU,CAAC,CAAC,CAAC;EACpF,SAAS,aACP,KACG,OAAO,uBAAuB,SAAS,OAAO,GAAG,SAAS,OAAO;GAChE,UAAU,SAAS;GACnB,WAAW,SAAS;GACpB,gBAAgB,SAAS;GACzB,GAAI,SAAS,mBAAmB,KAAA,IAC5B,CAAC,IACD,EAAE,gBAAgB,SAAS,eAAe;GAC9C,GAAI,SAAS,mBAAmB,KAAA,IAC5B,CAAC,IACD,EAAE,gBAAgB,SAAS,eAAe;GAC9C,GAAI,SAAS,oBAAoB,KAAA,IAC7B,CAAC,IACD,EAAE,iBAAiB,SAAS,gBAAgB;GAChD,GAAI,SAAS,qBAAqB,KAAA,IAC9B,CAAC,IACD,EAAE,kBAAkB,SAAS,iBAAiB;GAClD,aAAa,SAAS;EACxB,CAAC,CAAC,CACD,KACC,OAAO,UAAU;GACf,uBACE,OAAO,KAAK,wBAAwB,KAAK,EAAE,QAAQ,cAAc,CAAC,CAAC;GACrE,uBAAuB,OAAO,KAAK,QAAQ,0BAA0B,CAAC;GACtE,yBAAyB,OAAO,KAAK,QAAQ,6BAA6B,CAAC;GAC3E,mBAAmB,OAAO,KAAK,UAAU,CAAC;GAC1C,uBAAuB,UACrB,MAAM,WAAW,YACb,sBAAsB,KAAK,EAAE,MAAM,MAAM,KAAK,CAAC,IAC/C,wBAAwB,KAAK,EAC3B,QAAQ,MAAM,WAAW,aAAa,aAAa,UACrD,CAAC;GACP,mBAAmB,wBAAwB,KAAK,EAAE,QAAQ,UAAU,CAAC;GACrE,wBAAwB,OAAO,KAAK,UAAU,CAAC;GAC/C,6BAA6B,OAAO,KAAK,UAAU,CAAC;GACpD,sBAAsB,OAAO,KAAK,UAAU,CAAC;GAC7C,qBAAqB,OAAO,KAAK,UAAU,CAAC;GAC5C,oCAAoC,OAAO,KAAK,UAAU,CAAC;EAC7D,CAAC,CACH;CACN,CAAC;AACH,CAAC;;;;;;;;;;;;;ACtBD,IAAa,kBAAb,cAAqC,OAAO,YAA6B,CAAC,CAAC,mBAAmB,EAC5F,SAAS,OAAO,OAClB,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAM,WAAW,OAAO,GAAG,sBAAsB,CAAC,CAAC,WAAW,cAAuB;CACnF,MAAM,UAAU,OAAO;CACvB,MAAM,SAAS,OAAO;CAQtB,MAAM,kBAAkB,OAAO,QAAQ;CAEvC,MAAM,YAAY,OAAO,IAAI,KAAK,IAAI;CAEtC,MAAM,mBAAyD,IAAI,IAAI,SAAS,CAAC,CAAC,KAChF,OAAO,SAAS,SACd,OACI,OAAO,OACP,OAAO,KACL,gBAAgB,KAAK,EAAE,SAAS,kDAAkD,CAAC,CACrF,CACN,CACF;CAEA,MAAM,UACJ,OACA,OACA,YAKG,iBAAiB,KAAK,OAAO,QAAQ,QAAQ,OAAO,OAAO,OAAO,OAAO,CAAC,CAAC;CAEhF,MAAM,mBAAmB,OAAO,OAAO,QAA8B;CAErE,MAAM,kBAAkB,OAAO,MAAM,MACnC,sBAAsB,MAAM;EAC1B,WAAW;EACX,aAAa,KAAK,IAAI,OAAO,mBAAmB,EAAE;CACpD,CAAC,CAAC,CAAC,KACD,MAAM,QAAQ,WAAW,KAAK,GAC9B,MAAM,QACJ,MAAM,OAAO,wBAAwB,8BAA8B,CAAC,CAAC,KACnE,MAAM,QACJ,MAAM,QAAQ,eAAe;EAAE;EAAQ,kBAAkB,QAAQ;CAAiB,CAAC,CACrF,CACF,CACF,CACF,CACF;CAEA,MAAM,gBAAgB,yBAAyB,OAAO,gBAAgB,CAAC,CAAC,KACtE,OAAO,QAAQ,QAAQ,MAAM,kBAAkB,eAAe,CAAC,CACjE;CAEA,MAAM,cAAuB,WAC3B,OAAO,OAGL,OAAO,UACL,OAAO,QACL,MAAM,KAAK,EAAE,QAAQ,OAAO,kBAAkB,IAAI,GAAG,UAAU,KAAK,SAC9D,QACN;EAAE,aAAa;EAAa,SAAS;CAAK,CAC5C,GACA,aACF,CACF;CAKF,MAAM,qBAAqB,WAAW,QAAQ,iBAAiB;CAE/D,MAAM,MAAM,eACR,MAAM,KACJ,OAAO,mBAAmB,KACxB,OAAO,aAAa,IAAI,IAAI,WAAW,KAAK,CAAC,GAC7C,OAAO,UACT,CACF,IACA;CAIJ,OAAO,OAAO,mBAAmB,IAAI,IAAI,WAAW,KAAK,CAAC;CAE1D,OAAO,gBAAgB,GAAG;EACxB;EACA,eAAe,IAAI,IAAI,SAAS;EAChC;EACA,iBAAiB,QAAQ;EACzB,kBAAkB,QAAQ;EAC1B,SAAS,QAAQ;EACjB,OAAO,QAAQ;EACf,SAAS,QAAQ;EACjB,eAAe,QAAQ;EACvB,QAAQ,QAAQ;EAChB,OAAO,QAAQ;EACf,MAAM,QAAQ;EACd,iBAAiB,QAAQ;EACzB;EACA;EACA,oBAAoB;CACtB,CAAC;AACH,CAAC;;;;;;;;;;;;;;;;AAiBD,IAAa,kBAAb,MAAa,wBAAwB,QAAQ,QAmE3C,CAAC,CAAC,6CAA6C,CAAC,CAAC;;;;;;;CAOjD,OAAO,gBASL,eACA,SAQA;EACA,OAAO,gBAAgB,MAAM,KAC3B,MAAM,aAAa,wBAAwB,gBAAgB,eAAe,OAAO,CAAC,CACpF;CACF;;;;;CAMA,OAAgB,QAIZ,MAAM,OAAO,eAAe,CAAC,CAAC,SAAS,KAAK,CAAC;;CAGjD,OAAO,WAQL,SAQA;EACA,MAAM,EAAE,WAAW,CAAC,GAAG,GAAG,mBAAmB;EAE7C,OAAO,gBAAgB,MAAM,KAC3B,MAAM,aAAa,wBAAwB,kBAAkB,UAAU,cAAc,CAAC,CACxF;CACF;AACF;;;;;;;AAQA,MAAa,SASX,eACA,YASA,MAAM,OAAO,eAAe,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,KAC5C,MAAM,aAAa,wBAAwB,gBAAgB,eAAe,OAAO,CAAC,CACpF;;;;;;AAOF,MAAa,MAAM,OAAO,IAAI,aAAa;CAGzC,OAAO,QAAO,OAFM,gBAAA,CAED;AACrB,CAAC"}

package/dist/NodeDurableHost.d.mts

@@ -24,8 +24,9 @@ declare class AdmissionClosed extends AdmissionClosed_base {}
 declare const NodeDurableHost_base: Context.ServiceClass<NodeDurableHost, "@effect-agent/platform-node/NodeDurableHost", {
   /**
    * The recovery decisions executed (or deferred) by this host's startup reconciliation.
-   * Reports with the `unknown` disposition identify lanes blocked on Unknown Outcomes that
-   * only the authorized DUR-017 resolution path can release.
+   * Reports with the `unknown` disposition identify parked Submissions with Unknown Outcomes.
+   * They retain their settlement obligation while later input can run; authorized resolution
+   * or abort advances the parked Submission.
    */
   readonly startupRecovery: ReadonlyArray<RecoveryReport>;
   /** Admission-role readiness (deployment §7): true until shutdown begins. */
@@ -59,8 +60,8 @@ declare const NodeDurableHost_base: Context.ServiceClass<NodeDurableHost, "@effe
   readonly runWorkers: <A, E, R>(worker: Effect.Effect<A, E, R>) => Effect.Effect<void, E, R>;
   /**
    * Run `workerConcurrency` copies of `DurableAgentRuntime.runResolvedWorker` over the host's
-   * registered Bindings (S2): every claimed head resolves its exact stored Binding before any
-   * code runs (SUB-023), so one bounded pool serves parent and attached-child lanes.
+   * registered Bindings: every claimed head resolves the current Binding for its stable
+   * agentId, so one bounded pool serves parent and attached-child lanes.
    * Hosts built with the module-level `layer` instead join their existing pool.
    */
   readonly runResolvedWorkers: Effect.Effect<void, DurableWorkerFailure | DurableBindingFailure>;
@@ -154,7 +155,7 @@ declare const layer: <const Entries extends ReadonlyArray<AgentRegistration>, Co
  * `Effect.provide(HostLive)` and `NodeRuntime.runMain`; race it with a server Effect when
  * the same process also serves requests. Unlike `Layer.launch`, this observes worker failures.
  */
-declare const run: Effect.Effect<void, DurableBindingFailure | DurableWorkerFailure, NodeDurableHost>;
+declare const run: Effect.Effect<void, import("effect-agent/agent-registration").BindingUnavailable | DurableWorkerFailure, NodeDurableHost>;
 //#endregion
 export { AdmissionClosed, NodeDurableHost, layer, run, NodeDurableHost_d_exports as t };
 //# sourceMappingURL=NodeDurableHost.d.mts.map

package/package.json

@@ -1 +1 @@
-{"name":"@effect-agent/platform-node","version":"0.1.0-beta.96","dependencies":{"@effect-agent/storage-sqlite":"0.1.0-beta.96","@effect-agent/workflow":"0.1.0-beta.96","@effect/platform-node":"4.0.0-rc.115","@effect/sql-sqlite-node":"4.0.0-rc.115","effect-agent":"0.1.0-beta.96"},"devDependencies":{"@effect/vitest":"4.0.0-rc.115","effect":"4.0.0-rc.115","typescript":"7.0.2","vite-plus":"0.3.0"},"peerDependencies":{"effect":"^4.0.0-rc.115"},"exports":{".":{"types":"./dist/index.d.mts","default":"./dist/index.mjs"},"./node-durable-agent-runtime":{"types":"./dist/NodeDurableAgentRuntime.d.mts","default":"./dist/NodeDurableAgentRuntime.mjs"},"./node-durable-host":{"types":"./dist/NodeDurableHost.d.mts","default":"./dist/NodeDurableHost.mjs"},"./node-scheduling":{"types":"./dist/NodeScheduling.d.mts","default":"./dist/NodeScheduling.mjs"},"./node-subscriptions":{"types":"./dist/NodeSubscriptions.d.mts","default":"./dist/NodeSubscriptions.mjs"},"./node-wake-scheduler":{"types":"./dist/NodeWakeScheduler.d.mts","default":"./dist/NodeWakeScheduler.mjs"},"./node-workflow":{"types":"./dist/NodeWorkflow.d.mts","default":"./dist/NodeWorkflow.mjs"}},"description":"Class DN layer assembly for Effect Agent: the durable Node/SQLite runtime host, wake scheduler, and ownership drain.","license":"MIT","repository":{"type":"git","url":"git+https://github.com/danieljvdm/effect-agent.git","directory":"packages/platform-node"},"files":["dist","src"],"type":"module","sideEffects":[],"publishConfig":{"access":"public"},"scripts":{"build":"vp pack","check":"tsc --noEmit -p tsconfig.json"}}
+{"name":"@effect-agent/platform-node","version":"0.1.0-beta.98","dependencies":{"@effect-agent/storage-sqlite":"0.1.0-beta.98","@effect-agent/workflow":"0.1.0-beta.98","@effect/platform-node":"4.0.0-rc.115","@effect/sql-sqlite-node":"4.0.0-rc.115","effect-agent":"0.1.0-beta.98"},"devDependencies":{"@effect/vitest":"4.0.0-rc.115","effect":"4.0.0-rc.115","typescript":"7.0.2","vite-plus":"0.3.0"},"peerDependencies":{"effect":"^4.0.0-rc.115"},"exports":{".":{"types":"./dist/index.d.mts","default":"./dist/index.mjs"},"./node-durable-agent-runtime":{"types":"./dist/NodeDurableAgentRuntime.d.mts","default":"./dist/NodeDurableAgentRuntime.mjs"},"./node-durable-host":{"types":"./dist/NodeDurableHost.d.mts","default":"./dist/NodeDurableHost.mjs"},"./node-scheduling":{"types":"./dist/NodeScheduling.d.mts","default":"./dist/NodeScheduling.mjs"},"./node-subscriptions":{"types":"./dist/NodeSubscriptions.d.mts","default":"./dist/NodeSubscriptions.mjs"},"./node-wake-scheduler":{"types":"./dist/NodeWakeScheduler.d.mts","default":"./dist/NodeWakeScheduler.mjs"},"./node-workflow":{"types":"./dist/NodeWorkflow.d.mts","default":"./dist/NodeWorkflow.mjs"}},"description":"Class DN layer assembly for Effect Agent: the durable Node/SQLite runtime host, wake scheduler, and ownership drain.","license":"MIT","repository":{"type":"git","url":"git+https://github.com/danieljvdm/effect-agent.git","directory":"packages/platform-node"},"files":["dist","src"],"type":"module","sideEffects":[],"publishConfig":{"access":"public"},"scripts":{"build":"vp pack","check":"tsc --noEmit -p tsconfig.json"}}

package/src/NodeDurableHost.ts

@@ -67,9 +67,9 @@ const makeHost = Effect.fn("NodeDurableHost.make")(function* (startWorkers: bool
   // Startup gate (deployment §5, plan §host): configuration decoding and storage compatibility
   // already gated this Layer's dependencies; the last gate before admission opens is recovering
   // EVERY nonterminal Submission. Work needing a live Agent Binding is reported `deferred` and
-  // stays a visible obligation for `runWorkers`; lanes durably blocked on an Unknown Outcome are
+  // stays a visible obligation for `runWorkers`; submissions parked on an Unknown Outcome are
   // reported `unknown` and wait for the authorized `resolveUnknown` path (DUR-017) — they consume
-  // no worker permit while the settlement obligation stays owed.
+  // no worker permit while the settlement obligation stays owed and later input can run.
   const startupRecovery = yield* runtime.runRecovery;
 
   const admission = yield* Ref.make(true);
@@ -130,8 +130,7 @@ const makeHost = Effect.fn("NodeDurableHost.make")(function* (startWorkers: bool
       ),
     );
 
-  // S2 multi-binding pool: every claimed head resolves its exact registered Binding through
-  // the host's exact registrations, so one bounded
+  // Every claimed head resolves the current Binding for its stable agentId, so one bounded
   // pool serves parent and child lanes — the spec §12 smallest-pool suspension/wakeup proof
   // runs `workerConcurrency: 1` over exactly this loop.
   const runResolvedWorkers = runWorkers(runtime.runResolvedWorker);
@@ -189,8 +188,9 @@ export class NodeDurableHost extends Context.Service<
   {
     /**
      * The recovery decisions executed (or deferred) by this host's startup reconciliation.
-     * Reports with the `unknown` disposition identify lanes blocked on Unknown Outcomes that
-     * only the authorized DUR-017 resolution path can release.
+     * Reports with the `unknown` disposition identify parked Submissions with Unknown Outcomes.
+     * They retain their settlement obligation while later input can run; authorized resolution
+     * or abort advances the parked Submission.
      */
     readonly startupRecovery: ReadonlyArray<RecoveryReport>;
     /** Admission-role readiness (deployment §7): true until shutdown begins. */
@@ -244,8 +244,8 @@ export class NodeDurableHost extends Context.Service<
     readonly runWorkers: <A, E, R>(worker: Effect.Effect<A, E, R>) => Effect.Effect<void, E, R>;
     /**
      * Run `workerConcurrency` copies of `DurableAgentRuntime.runResolvedWorker` over the host's
-     * registered Bindings (S2): every claimed head resolves its exact stored Binding before any
-     * code runs (SUB-023), so one bounded pool serves parent and attached-child lanes.
+     * registered Bindings: every claimed head resolves the current Binding for its stable
+     * agentId, so one bounded pool serves parent and attached-child lanes.
      * Hosts built with the module-level `layer` instead join their existing pool.
      */
     readonly runResolvedWorkers: Effect.Effect<void, DurableWorkerFailure | DurableBindingFailure>;