@effect-agent/storage-cloudflare 0.1.0-beta.45 → 0.1.0-beta.46

package/dist/DoStorageConfig.mjs

@@ -0,0 +1,52 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+import { Context, Schema } from "effect";
+//#region src/DoStorageConfig.ts
+var DoStorageConfig_exports = /* @__PURE__ */ __exportAll({
+	DEFAULT_MAX_STORED_VALUE_BYTES: () => DEFAULT_MAX_STORED_VALUE_BYTES,
+	DoStorageConfig: () => DoStorageConfig,
+	DoStorageConfigValue: () => DoStorageConfigValue
+});
+const ObservationPollInterval = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));
+const OwnershipLeaseMillis = Schema.Int.check(Schema.isGreaterThan(0));
+/**
+* Default per-value byte bound, kept under the Durable Object platform's 2 MB SQLite value
+* limit with a safety margin. This is the DC analogue of Node's 16 MB `BoundedStoredText`
+* bound: both fail typed before mutating, only the threshold differs (a documented DN/DC
+* behavioral difference; Travel Planner payloads sit orders of magnitude below both).
+*/
+const DEFAULT_MAX_STORED_VALUE_BYTES = 19e5;
+/** The hard schema ceiling for the configurable bound: never at or above the platform limit. */
+const MaxStoredValueBytes = Schema.Int.check(Schema.isGreaterThan(0), Schema.isLessThanOrEqualTo(2e6));
+/**
+* Validated construction configuration consumed by the Durable Object storage Layers. The
+* storage identity itself belongs to the SqlClient Layer (built from `ctx.storage`);
+* duplicating it here could silently diverge from the handle actually in use.
+*/
+var DoStorageConfigValue = class extends Schema.Class("@effect-agent/storage-cloudflare/DoStorageConfigValue")({
+	observationPollInterval: ObservationPollInterval,
+	/**
+	* Submission ownership lease duration in milliseconds (D5). Inside one Durable Object the
+	* object itself is the serialized owner, so the lease's primary DC role is fencing work
+	* across DO incarnations (an evicted incarnation's claim becomes reclaimable); correctness
+	* never depends on it because every canonical append is fenced by producer epoch.
+	*/
+	ownershipLeaseDuration: OwnershipLeaseMillis,
+	/**
+	* Maximum bytes for any single stored text value (canonical batch/record JSON, admission
+	* input payload, checkpoint JSON). Enforced typed BEFORE any write; must stay under the
+	* platform's 2 MB per-value limit.
+	*/
+	maxStoredValueBytes: MaxStoredValueBytes,
+	/**
+	* Re-verify every stored payload and digest chain while opening the store. Per-operation
+	* Schema decoding and the digest chain already fail clearly on corrupt rows, so the full
+	* scan is an explicit opt-in integrity audit rather than a startup requirement.
+	*/
+	verifyOnOpen: Schema.Boolean
+}) {};
+/** Explicit Durable Object storage configuration authority. */
+var DoStorageConfig = class extends Context.Service()("@effect-agent/storage-cloudflare/DoStorageConfig") {};
+//#endregion
+export { DEFAULT_MAX_STORED_VALUE_BYTES, DoStorageConfig, DoStorageConfigValue, DoStorageConfig_exports as t };
+
+//# sourceMappingURL=DoStorageConfig.mjs.map

package/dist/DoStorageConfig.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DoStorageConfig.mjs","names":[],"sources":["../src/DoStorageConfig.ts"],"sourcesContent":["import { Context, Schema } from \"effect\";\n\nconst ObservationPollInterval = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));\nconst OwnershipLeaseMillis = Schema.Int.check(Schema.isGreaterThan(0));\n\n/**\n * Default per-value byte bound, kept under the Durable Object platform's 2 MB SQLite value\n * limit with a safety margin. This is the DC analogue of Node's 16 MB `BoundedStoredText`\n * bound: both fail typed before mutating, only the threshold differs (a documented DN/DC\n * behavioral difference; Travel Planner payloads sit orders of magnitude below both).\n */\nexport const DEFAULT_MAX_STORED_VALUE_BYTES = 1_900_000;\n\n/** The hard schema ceiling for the configurable bound: never at or above the platform limit. */\nconst MaxStoredValueBytes = Schema.Int.check(\n  Schema.isGreaterThan(0),\n  Schema.isLessThanOrEqualTo(2_000_000),\n);\n\n/**\n * Validated construction configuration consumed by the Durable Object storage Layers. The\n * storage identity itself belongs to the SqlClient Layer (built from `ctx.storage`);\n * duplicating it here could silently diverge from the handle actually in use.\n */\nexport class DoStorageConfigValue extends Schema.Class<DoStorageConfigValue>(\n  \"@effect-agent/storage-cloudflare/DoStorageConfigValue\",\n)({\n  observationPollInterval: ObservationPollInterval,\n  /**\n   * Submission ownership lease duration in milliseconds (D5). Inside one Durable Object the\n   * object itself is the serialized owner, so the lease's primary DC role is fencing work\n   * across DO incarnations (an evicted incarnation's claim becomes reclaimable); correctness\n   * never depends on it because every canonical append is fenced by producer epoch.\n   */\n  ownershipLeaseDuration: OwnershipLeaseMillis,\n  /**\n   * Maximum bytes for any single stored text value (canonical batch/record JSON, admission\n   * input payload, checkpoint JSON). Enforced typed BEFORE any write; must stay under the\n   * platform's 2 MB per-value limit.\n   */\n  maxStoredValueBytes: MaxStoredValueBytes,\n  /**\n   * Re-verify every stored payload and digest chain while opening the store. Per-operation\n   * Schema decoding and the digest chain already fail clearly on corrupt rows, so the full\n   * scan is an explicit opt-in integrity audit rather than a startup requirement.\n   */\n  verifyOnOpen: Schema.Boolean,\n}) {}\n\n/** Explicit Durable Object storage configuration authority. */\nexport class DoStorageConfig extends Context.Service<DoStorageConfig, DoStorageConfigValue>()(\n  \"@effect-agent/storage-cloudflare/DoStorageConfig\",\n) {}\n"],"mappings":";;;;;;;;AAEA,MAAM,0BAA0B,OAAO,IAAI,MAAM,OAAO,uBAAuB,CAAC,CAAC;AACjF,MAAM,uBAAuB,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC;;;;;;;AAQrE,MAAa,iCAAiC;;AAG9C,MAAM,sBAAsB,OAAO,IAAI,MACrC,OAAO,cAAc,CAAC,GACtB,OAAO,oBAAoB,GAAS,CACtC;;;;;;AAOA,IAAa,uBAAb,cAA0C,OAAO,MAC/C,uDACF,CAAC,CAAC;CACA,yBAAyB;;;;;;;CAOzB,wBAAwB;;;;;;CAMxB,qBAAqB;;;;;;CAMrB,cAAc,OAAO;AACvB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,kBAAb,cAAqC,QAAQ,QAA+C,CAAC,CAC3F,kDACF,CAAC,CAAC,CAAC"}

package/dist/{do-storage-failpoint-9XB9tuif.d.mts → DoStorageError-Qwybzk0O.d.mts}

@@ -1,5 +1,7 @@
-import { Context, Effect, Layer, Schema } from "effect";
-//#region src/errors.d.ts
+import { Schema } from "effect";
+declare namespace DoStorageError_d_exports {
+  export { DoAppendConflict, DoCheckpointConflict, DoFenceRejected, DoLedgerError, DoStorageCompatibilityError, DoStorageCorruptionError, DoStorageError, DoStorageFailpointError, DoStorageFailpointLocation, DoValueBoundExceeded };
+}
 declare const DoStorageCompatibilityError_base: Schema.Class<DoStorageCompatibilityError, Schema.TaggedStruct<"DoStorageCompatibilityError", {
   readonly actualVersion: Schema.Int;
   readonly message: Schema.String;
@@ -92,16 +94,5 @@ declare class DoStorageFailpointError extends DoStorageFailpointError_base {
   get message(): string;
 }
 //#endregion
-//#region src/do-storage-failpoint.d.ts
-type DoStorageFailpointHandler = (location: DoStorageFailpointLocation) => Effect.Effect<void, DoStorageFailpointError>;
-declare const DoStorageFailpoint_base: Context.ServiceClass<DoStorageFailpoint, "@effect-agent/storage-cloudflare/DoStorageFailpoint", {
-  readonly hit: DoStorageFailpointHandler;
-}>;
-/** Explicit fault-injection authority used at Durable Object storage operation boundaries. */
-declare class DoStorageFailpoint extends DoStorageFailpoint_base {
-  /** Production default: no fault injection. */
-  static readonly layer: Layer.Layer<DoStorageFailpoint, never, never>;
-}
-//#endregion
-export { DoFenceRejected as a, DoStorageCorruptionError as c, DoStorageFailpointLocation as d, DoValueBoundExceeded as f, DoCheckpointConflict as i, DoStorageError as l, DoStorageFailpointHandler as n, DoLedgerError as o, DoAppendConflict as r, DoStorageCompatibilityError as s, DoStorageFailpoint as t, DoStorageFailpointError as u };
-//# sourceMappingURL=do-storage-failpoint-9XB9tuif.d.mts.map
+export { DoStorageCompatibilityError as a, DoStorageError_d_exports as c, DoValueBoundExceeded as d, DoLedgerError as i, DoStorageFailpointError as l, DoCheckpointConflict as n, DoStorageCorruptionError as o, DoFenceRejected as r, DoStorageError as s, DoAppendConflict as t, DoStorageFailpointLocation as u };
+//# sourceMappingURL=DoStorageError-Qwybzk0O.d.mts.map

package/dist/DoStorageError.d.mts

@@ -0,0 +1,2 @@
+import { a as DoStorageCompatibilityError, d as DoValueBoundExceeded, i as DoLedgerError, l as DoStorageFailpointError, n as DoCheckpointConflict, o as DoStorageCorruptionError, r as DoFenceRejected, s as DoStorageError, t as DoAppendConflict, u as DoStorageFailpointLocation } from "./DoStorageError-Qwybzk0O.mjs";
+export { DoAppendConflict, DoCheckpointConflict, DoFenceRejected, DoLedgerError, DoStorageCompatibilityError, DoStorageCorruptionError, DoStorageError, DoStorageFailpointError, DoStorageFailpointLocation, DoValueBoundExceeded };

package/dist/DoStorageError.mjs

@@ -0,0 +1,158 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+import { Schema } from "effect";
+import { CanonicalSequence, ProducerEpoch } from "@effect-agent/thread/Records";
+//#region src/DoStorageError.ts
+var DoStorageError_exports = /* @__PURE__ */ __exportAll({
+	DoAppendConflict: () => DoAppendConflict,
+	DoCheckpointConflict: () => DoCheckpointConflict,
+	DoFenceRejected: () => DoFenceRejected,
+	DoLedgerError: () => DoLedgerError,
+	DoStorageCompatibilityError: () => DoStorageCompatibilityError,
+	DoStorageCorruptionError: () => DoStorageCorruptionError,
+	DoStorageError: () => DoStorageError,
+	DoStorageFailpointError: () => DoStorageFailpointError,
+	DoStorageFailpointLocation: () => DoStorageFailpointLocation,
+	DoValueBoundExceeded: () => DoValueBoundExceeded
+});
+/** The Durable Object's SQLite storage uses a private-development format this adapter cannot read. */
+var DoStorageCompatibilityError = class extends Schema.TaggedError()("DoStorageCompatibilityError", {
+	actualVersion: Schema.Int,
+	message: Schema.String,
+	supportedVersion: Schema.Int
+}) {};
+/** Stored bytes failed the current Schema and cannot be used as recovery truth. */
+var DoStorageCorruptionError = class extends Schema.TaggedError()("DoStorageCorruptionError", {
+	message: Schema.String,
+	rowKey: Schema.String,
+	table: Schema.String
+}) {};
+/** Durable Object SQLite infrastructure failed while opening or operating the store. */
+var DoStorageError = class extends Schema.TaggedError()("DoStorageError", {
+	cause: Schema.optionalKey(Schema.Defect()),
+	message: Schema.String,
+	operation: Schema.String
+}) {};
+/**
+* Durable Object SQLite infrastructure failed while operating the Submission Ledger. Surfaces
+* at the SubmissionLedger port as the typed `LedgerError` with this error preserved as its
+* cause, so the adapter-level tag is never erased.
+*/
+var DoLedgerError = class extends Schema.TaggedError()("DoLedgerError", {
+	cause: Schema.optionalKey(Schema.Defect()),
+	message: Schema.String,
+	operation: Schema.String
+}) {};
+/**
+* A value to be stored exceeds the configured Durable Object per-value bound
+* (`DoStorageConfigValue.maxStoredValueBytes`, kept under the platform's 2 MB SQLite value
+* limit). The refusal happens typed BEFORE any durable mutation; no partial state is written.
+* Payloads of this size are the designed overflow case for a future R2-backed AttachmentStore
+* (deployment spec §3.1, deferred until a real attachment requirement exists).
+*/
+var DoValueBoundExceeded = class extends Schema.TaggedError()("DoValueBoundExceeded", {
+	actualBytes: Schema.Int,
+	maxBytes: Schema.Int,
+	operation: Schema.String
+}) {
+	get message() {
+		return `A stored value of ${this.actualBytes} bytes exceeds the Durable Object per-value bound of ${this.maxBytes} bytes during ${this.operation}. Nothing was written. Values of this size are the designed R2 AttachmentStore overflow path (deferred, deployment spec §3.1).`;
+	}
+};
+/**
+* A canonical batch retry conflicts with existing append state. Tail conflicts carry the
+* actual committed tail as a diagnostic resume hint.
+*/
+var DoAppendConflict = class extends Schema.TaggedError()("DoAppendConflict", {
+	message: Schema.String,
+	reason: Schema.Literals([
+		"batch-digest",
+		"record-identity",
+		"tail"
+	]),
+	actualTailSequence: Schema.optionalKey(CanonicalSequence),
+	actualTailDigest: Schema.optionalKey(Schema.String)
+}) {};
+/**
+* A producer epoch does not match the Thread's current writer registration. Appends
+* require the exact registered epoch, so both older and newer unregistered epochs are fenced;
+* a newer epoch takes over by materializing first.
+*/
+var DoFenceRejected = class extends Schema.TaggedError()("DoFenceRejected", {
+	actualEpoch: ProducerEpoch,
+	message: Schema.String,
+	producerEpoch: ProducerEpoch
+}) {};
+/** A checkpoint conflicts with a previously stored checkpoint at the same offset. */
+var DoCheckpointConflict = class extends Schema.TaggedError()("DoCheckpointConflict", { message: Schema.String }) {};
+/**
+* Deterministic fault-injection locations at Durable Object storage operation boundaries.
+*
+* The string list is copied VERBATIM from `SqliteStorageFailpointLocation`
+* (`packages/storage-sqlite/src/errors.ts`) so every crash-matrix row keeps the same name on
+* both platforms — the DN process-kill evidence and the DC eviction evidence address identical
+* locations. There is intentionally no Cloudflare-only location.
+*/
+const DoStorageFailpointLocation = Schema.Literals([
+	"materialize:before",
+	"materialize:after",
+	"append:before",
+	"append:after-batch-insert",
+	"append:after-record-insert",
+	"append:after-tail-update",
+	"append:after",
+	"export:after-thread-read",
+	"save-checkpoint:before",
+	"save-checkpoint:after",
+	"ledger:admit:before",
+	"ledger:admit:after",
+	"ledger:mark-ready:before",
+	"ledger:mark-ready:after",
+	"ledger:claim:before",
+	"ledger:claim:after",
+	"ledger:mark-input-applied:before",
+	"ledger:mark-input-applied:after",
+	"ledger:renew:before",
+	"ledger:renew:after",
+	"ledger:reserve-settlement:before",
+	"ledger:reserve-settlement:after",
+	"ledger:finalize-settlement:before",
+	"ledger:finalize-settlement:after",
+	"ledger:request-abort:before",
+	"ledger:request-abort:after",
+	"ledger:release:before",
+	"ledger:release:after",
+	"ledger:claim-joining:before",
+	"ledger:claim-joining:after",
+	"ledger:mark-joined:before",
+	"ledger:mark-joined:after",
+	"ledger:revert-joining:before",
+	"ledger:revert-joining:after",
+	"ledger:suspend:before",
+	"ledger:suspend:after",
+	"ledger:approval-decision:before",
+	"ledger:approval-decision:after",
+	"ledger:mark-unknown:before",
+	"ledger:mark-unknown:after",
+	"ledger:unknown-resolution:before",
+	"ledger:unknown-resolution:after",
+	"ledger:child-reservation:before",
+	"ledger:child-reservation:after",
+	"ledger:child-attach:before",
+	"ledger:child-attach:after",
+	"ledger:child-release-pending:before",
+	"ledger:child-release-pending:after",
+	"ledger:child-release:before",
+	"ledger:child-release:after",
+	"ledger:child-settled:before",
+	"ledger:child-settled:after"
+]);
+/** Deterministic test-only fault or pause injected at a Durable Object storage boundary. */
+var DoStorageFailpointError = class extends Schema.TaggedError()("DoStorageFailpointError", { location: DoStorageFailpointLocation }) {
+	get message() {
+		return `Injected Durable Object storage failure at ${this.location}.`;
+	}
+};
+//#endregion
+export { DoAppendConflict, DoCheckpointConflict, DoFenceRejected, DoLedgerError, DoStorageCompatibilityError, DoStorageCorruptionError, DoStorageError, DoStorageFailpointError, DoStorageFailpointLocation, DoValueBoundExceeded, DoStorageError_exports as t };
+
+//# sourceMappingURL=DoStorageError.mjs.map

package/dist/DoStorageError.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DoStorageError.mjs","names":[],"sources":["../src/DoStorageError.ts"],"sourcesContent":["import { CanonicalSequence, ProducerEpoch } from \"@effect-agent/thread/Records\";\nimport { Schema } from \"effect\";\n\n/** The Durable Object's SQLite storage uses a private-development format this adapter cannot read. */\nexport class DoStorageCompatibilityError extends Schema.TaggedError<DoStorageCompatibilityError>()(\n  \"DoStorageCompatibilityError\",\n  {\n    actualVersion: Schema.Int,\n    message: Schema.String,\n    supportedVersion: Schema.Int,\n  },\n) {}\n\n/** Stored bytes failed the current Schema and cannot be used as recovery truth. */\nexport class DoStorageCorruptionError extends Schema.TaggedError<DoStorageCorruptionError>()(\n  \"DoStorageCorruptionError\",\n  {\n    message: Schema.String,\n    rowKey: Schema.String,\n    table: Schema.String,\n  },\n) {}\n\n/** Durable Object SQLite infrastructure failed while opening or operating the store. */\nexport class DoStorageError extends Schema.TaggedError<DoStorageError>()(\"DoStorageError\", {\n  cause: Schema.optionalKey(Schema.Defect()),\n  message: Schema.String,\n  operation: Schema.String,\n}) {}\n\n/**\n * Durable Object SQLite infrastructure failed while operating the Submission Ledger. Surfaces\n * at the SubmissionLedger port as the typed `LedgerError` with this error preserved as its\n * cause, so the adapter-level tag is never erased.\n */\nexport class DoLedgerError extends Schema.TaggedError<DoLedgerError>()(\"DoLedgerError\", {\n  cause: Schema.optionalKey(Schema.Defect()),\n  message: Schema.String,\n  operation: Schema.String,\n}) {}\n\n/**\n * A value to be stored exceeds the configured Durable Object per-value bound\n * (`DoStorageConfigValue.maxStoredValueBytes`, kept under the platform's 2 MB SQLite value\n * limit). The refusal happens typed BEFORE any durable mutation; no partial state is written.\n * Payloads of this size are the designed overflow case for a future R2-backed AttachmentStore\n * (deployment spec §3.1, deferred until a real attachment requirement exists).\n */\nexport class DoValueBoundExceeded extends Schema.TaggedError<DoValueBoundExceeded>()(\n  \"DoValueBoundExceeded\",\n  {\n    actualBytes: Schema.Int,\n    maxBytes: Schema.Int,\n    operation: Schema.String,\n  },\n) {\n  override get message() {\n    return (\n      `A stored value of ${this.actualBytes} bytes exceeds the Durable Object per-value bound ` +\n      `of ${this.maxBytes} bytes during ${this.operation}. Nothing was written. Values of this ` +\n      \"size are the designed R2 AttachmentStore overflow path (deferred, deployment spec §3.1).\"\n    );\n  }\n}\n\n/**\n * A canonical batch retry conflicts with existing append state. Tail conflicts carry the\n * actual committed tail as a diagnostic resume hint.\n */\nexport class DoAppendConflict extends Schema.TaggedError<DoAppendConflict>()(\"DoAppendConflict\", {\n  message: Schema.String,\n  reason: Schema.Literals([\"batch-digest\", \"record-identity\", \"tail\"]),\n  actualTailSequence: Schema.optionalKey(CanonicalSequence),\n  actualTailDigest: Schema.optionalKey(Schema.String),\n}) {}\n\n/**\n * A producer epoch does not match the Thread's current writer registration. Appends\n * require the exact registered epoch, so both older and newer unregistered epochs are fenced;\n * a newer epoch takes over by materializing first.\n */\nexport class DoFenceRejected extends Schema.TaggedError<DoFenceRejected>()(\"DoFenceRejected\", {\n  actualEpoch: ProducerEpoch,\n  message: Schema.String,\n  producerEpoch: ProducerEpoch,\n}) {}\n\n/** A checkpoint conflicts with a previously stored checkpoint at the same offset. */\nexport class DoCheckpointConflict extends Schema.TaggedError<DoCheckpointConflict>()(\n  \"DoCheckpointConflict\",\n  {\n    message: Schema.String,\n  },\n) {}\n\n/**\n * Deterministic fault-injection locations at Durable Object storage operation boundaries.\n *\n * The string list is copied VERBATIM from `SqliteStorageFailpointLocation`\n * (`packages/storage-sqlite/src/errors.ts`) so every crash-matrix row keeps the same name on\n * both platforms — the DN process-kill evidence and the DC eviction evidence address identical\n * locations. There is intentionally no Cloudflare-only location.\n */\nexport const DoStorageFailpointLocation = Schema.Literals([\n  \"materialize:before\",\n  \"materialize:after\",\n  \"append:before\",\n  \"append:after-batch-insert\",\n  \"append:after-record-insert\",\n  \"append:after-tail-update\",\n  \"append:after\",\n  \"export:after-thread-read\",\n  \"save-checkpoint:before\",\n  \"save-checkpoint:after\",\n  \"ledger:admit:before\",\n  \"ledger:admit:after\",\n  \"ledger:mark-ready:before\",\n  \"ledger:mark-ready:after\",\n  \"ledger:claim:before\",\n  \"ledger:claim:after\",\n  \"ledger:mark-input-applied:before\",\n  \"ledger:mark-input-applied:after\",\n  \"ledger:renew:before\",\n  \"ledger:renew:after\",\n  \"ledger:reserve-settlement:before\",\n  \"ledger:reserve-settlement:after\",\n  \"ledger:finalize-settlement:before\",\n  \"ledger:finalize-settlement:after\",\n  \"ledger:request-abort:before\",\n  \"ledger:request-abort:after\",\n  \"ledger:release:before\",\n  \"ledger:release:after\",\n  \"ledger:claim-joining:before\",\n  \"ledger:claim-joining:after\",\n  \"ledger:mark-joined:before\",\n  \"ledger:mark-joined:after\",\n  \"ledger:revert-joining:before\",\n  \"ledger:revert-joining:after\",\n  \"ledger:suspend:before\",\n  \"ledger:suspend:after\",\n  \"ledger:approval-decision:before\",\n  \"ledger:approval-decision:after\",\n  \"ledger:mark-unknown:before\",\n  \"ledger:mark-unknown:after\",\n  \"ledger:unknown-resolution:before\",\n  \"ledger:unknown-resolution:after\",\n  \"ledger:child-reservation:before\",\n  \"ledger:child-reservation:after\",\n  \"ledger:child-attach:before\",\n  \"ledger:child-attach:after\",\n  \"ledger:child-release-pending:before\",\n  \"ledger:child-release-pending:after\",\n  \"ledger:child-release:before\",\n  \"ledger:child-release:after\",\n  \"ledger:child-settled:before\",\n  \"ledger:child-settled:after\",\n]);\n\nexport type DoStorageFailpointLocation = typeof DoStorageFailpointLocation.Type;\n\n/** Deterministic test-only fault or pause injected at a Durable Object storage boundary. */\nexport class DoStorageFailpointError extends Schema.TaggedError<DoStorageFailpointError>()(\n  \"DoStorageFailpointError\",\n  {\n    location: DoStorageFailpointLocation,\n  },\n) {\n  override get message() {\n    return `Injected Durable Object storage failure at ${this.location}.`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAIA,IAAa,8BAAb,cAAiD,OAAO,YAAyC,CAAC,CAChG,+BACA;CACE,eAAe,OAAO;CACtB,SAAS,OAAO;CAChB,kBAAkB,OAAO;AAC3B,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,2BAAb,cAA8C,OAAO,YAAsC,CAAC,CAC1F,4BACA;CACE,SAAS,OAAO;CAChB,QAAQ,OAAO;CACf,OAAO,OAAO;AAChB,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,iBAAb,cAAoC,OAAO,YAA4B,CAAC,CAAC,kBAAkB;CACzF,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;CACzC,SAAS,OAAO;CAChB,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;;;;;AAOJ,IAAa,gBAAb,cAAmC,OAAO,YAA2B,CAAC,CAAC,iBAAiB;CACtF,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;CACzC,SAAS,OAAO;CAChB,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;;;;;;;AASJ,IAAa,uBAAb,cAA0C,OAAO,YAAkC,CAAC,CAClF,wBACA;CACE,aAAa,OAAO;CACpB,UAAU,OAAO;CACjB,WAAW,OAAO;AACpB,CACF,CAAC,CAAC;CACA,IAAa,UAAU;EACrB,OACE,qBAAqB,KAAK,YAAY,uDAChC,KAAK,SAAS,gBAAgB,KAAK,UAAU;CAGvD;AACF;;;;;AAMA,IAAa,mBAAb,cAAsC,OAAO,YAA8B,CAAC,CAAC,oBAAoB;CAC/F,SAAS,OAAO;CAChB,QAAQ,OAAO,SAAS;EAAC;EAAgB;EAAmB;CAAM,CAAC;CACnE,oBAAoB,OAAO,YAAY,iBAAiB;CACxD,kBAAkB,OAAO,YAAY,OAAO,MAAM;AACpD,CAAC,CAAC,CAAC,CAAC;;;;;;AAOJ,IAAa,kBAAb,cAAqC,OAAO,YAA6B,CAAC,CAAC,mBAAmB;CAC5F,aAAa;CACb,SAAS,OAAO;CAChB,eAAe;AACjB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,uBAAb,cAA0C,OAAO,YAAkC,CAAC,CAClF,wBACA,EACE,SAAS,OAAO,OAClB,CACF,CAAC,CAAC,CAAC;;;;;;;;;AAUH,MAAa,6BAA6B,OAAO,SAAS;CACxD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;AAKD,IAAa,0BAAb,cAA6C,OAAO,YAAqC,CAAC,CACxF,2BACA,EACE,UAAU,2BACZ,CACF,CAAC,CAAC;CACA,IAAa,UAAU;EACrB,OAAO,8CAA8C,KAAK,SAAS;CACrE;AACF"}

package/dist/DoStorageFailpoint.d.mts

@@ -0,0 +1,17 @@
+import { l as DoStorageFailpointError, u as DoStorageFailpointLocation } from "./DoStorageError-Qwybzk0O.mjs";
+import { Context, Effect, Layer } from "effect";
+declare namespace DoStorageFailpoint_d_exports {
+  export { DoStorageFailpoint, DoStorageFailpointHandler };
+}
+type DoStorageFailpointHandler = (location: DoStorageFailpointLocation) => Effect.Effect<void, DoStorageFailpointError>;
+declare const DoStorageFailpoint_base: Context.ServiceClass<DoStorageFailpoint, "@effect-agent/storage-cloudflare/DoStorageFailpoint", {
+  readonly hit: DoStorageFailpointHandler;
+}>;
+/** Explicit fault-injection authority used at Durable Object storage operation boundaries. */
+declare class DoStorageFailpoint extends DoStorageFailpoint_base {
+  /** Production default: no fault injection. */
+  static readonly layer: Layer.Layer<DoStorageFailpoint, never, never>;
+}
+//#endregion
+export { DoStorageFailpoint, DoStorageFailpointHandler, DoStorageFailpoint_d_exports as t };
+//# sourceMappingURL=DoStorageFailpoint.d.mts.map

package/dist/{do-storage-failpoint-C-Qtchs7.mjs → DoStorageFailpoint.mjs}

@@ -1,5 +1,7 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
 import { Context, Effect, Layer } from "effect";
-//#region src/do-storage-failpoint.ts
+//#region src/DoStorageFailpoint.ts
+var DoStorageFailpoint_exports = /* @__PURE__ */ __exportAll({ DoStorageFailpoint: () => DoStorageFailpoint });
 const noFailpoint = () => Effect.void;
 /** Explicit fault-injection authority used at Durable Object storage operation boundaries. */
 var DoStorageFailpoint = class extends Context.Service()("@effect-agent/storage-cloudflare/DoStorageFailpoint") {
@@ -7,6 +9,6 @@ var DoStorageFailpoint = class extends Context.Service()("@effect-agent/storage-
 	static layer = Layer.succeed(this)({ hit: noFailpoint });
 };
 //#endregion
-export { DoStorageFailpoint as t };
+export { DoStorageFailpoint, DoStorageFailpoint_exports as t };
 
-//# sourceMappingURL=do-storage-failpoint-C-Qtchs7.mjs.map
+//# sourceMappingURL=DoStorageFailpoint.mjs.map

package/dist/DoStorageFailpoint.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DoStorageFailpoint.mjs","names":[],"sources":["../src/DoStorageFailpoint.ts"],"sourcesContent":["import { Context, Effect, Layer } from \"effect\";\n\nimport type { DoStorageFailpointError, DoStorageFailpointLocation } from \"./DoStorageError.ts\";\n\nexport type DoStorageFailpointHandler = (\n  location: DoStorageFailpointLocation,\n) => Effect.Effect<void, DoStorageFailpointError>;\n\nconst noFailpoint: DoStorageFailpointHandler = () => Effect.void;\n\n/** Explicit fault-injection authority used at Durable Object storage operation boundaries. */\nexport class DoStorageFailpoint extends Context.Service<\n  DoStorageFailpoint,\n  {\n    readonly hit: DoStorageFailpointHandler;\n  }\n>()(\"@effect-agent/storage-cloudflare/DoStorageFailpoint\") {\n  /** Production default: no fault injection. */\n  static readonly layer = Layer.succeed(this)({ hit: noFailpoint });\n}\n"],"mappings":";;;;AAQA,MAAM,oBAA+C,OAAO;;AAG5D,IAAa,qBAAb,cAAwC,QAAQ,QAK9C,CAAC,CAAC,qDAAqD,CAAC,CAAC;;CAEzD,OAAgB,QAAQ,MAAM,QAAQ,IAAI,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC;AAClE"}

package/dist/{testing.d.mts → DoStorageFailpointTesting.d.mts}

@@ -1,6 +1,7 @@
-import { d as DoStorageFailpointLocation, n as DoStorageFailpointHandler, t as DoStorageFailpoint } from "./do-storage-failpoint-9XB9tuif.mjs";
+import { u as DoStorageFailpointLocation } from "./DoStorageError-Qwybzk0O.mjs";
+import { DoStorageFailpoint, DoStorageFailpointHandler } from "./DoStorageFailpoint.mjs";
 import { Context, Effect, Layer } from "effect";
-//#region src/do-storage-failpoint-testing.d.ts
+//#region src/DoStorageFailpointTesting.d.ts
 declare const DoStorageFailpointTestControl_base: Context.ServiceClass<DoStorageFailpointTestControl, "@effect-agent/storage-cloudflare/DoStorageFailpointTestControl", {
   readonly clear: Effect.Effect<void>;
   readonly setHandler: (handler: DoStorageFailpointHandler) => Effect.Effect<void>;
@@ -30,4 +31,4 @@ declare const evictionFailpointHandler: (options: {
 }) => DoStorageFailpointHandler;
 //#endregion
 export { DoStorageFailpointTestControl, evictionFailpointHandler };
-//# sourceMappingURL=testing.d.mts.map
+//# sourceMappingURL=DoStorageFailpointTesting.d.mts.map

package/dist/{testing.mjs → DoStorageFailpointTesting.mjs}

@@ -1,6 +1,6 @@
-import { t as DoStorageFailpoint } from "./do-storage-failpoint-C-Qtchs7.mjs";
+import { DoStorageFailpoint } from "./DoStorageFailpoint.mjs";
 import { Context, Effect, Layer, Ref } from "effect";
-//#region src/do-storage-failpoint-testing.ts
+//#region src/DoStorageFailpointTesting.ts
 const noFailpoint = () => Effect.void;
 /** Test-only control for replacing the active Durable Object failpoint handler. */
 var DoStorageFailpointTestControl = class DoStorageFailpointTestControl extends Context.Service()("@effect-agent/storage-cloudflare/DoStorageFailpointTestControl") {
@@ -32,4 +32,4 @@ const evictionFailpointHandler = (options) => (location) => options.isArmed(loca
 //#endregion
 export { DoStorageFailpointTestControl, evictionFailpointHandler };
 
-//# sourceMappingURL=testing.mjs.map
+//# sourceMappingURL=DoStorageFailpointTesting.mjs.map

package/dist/DoStorageFailpointTesting.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DoStorageFailpointTesting.mjs","names":[],"sources":["../src/DoStorageFailpointTesting.ts"],"sourcesContent":["import { Context, Effect, Layer, Ref } from \"effect\";\n\nimport type { DoStorageFailpointLocation } from \"./DoStorageError.ts\";\nimport { DoStorageFailpoint, type DoStorageFailpointHandler } from \"./DoStorageFailpoint.ts\";\n\nconst noFailpoint: DoStorageFailpointHandler = () => Effect.void;\n\n/** Test-only control for replacing the active Durable Object failpoint handler. */\nexport class DoStorageFailpointTestControl extends Context.Service<\n  DoStorageFailpointTestControl,\n  {\n    readonly clear: Effect.Effect<void>;\n    readonly setHandler: (handler: DoStorageFailpointHandler) => Effect.Effect<void>;\n  }\n>()(\"@effect-agent/storage-cloudflare/DoStorageFailpointTestControl\") {\n  /** Reusable test Layer with a control service backed by the same handler Ref. */\n  static readonly layer = Layer.effectContext(\n    Effect.gen(function* () {\n      const handler = yield* Ref.make<DoStorageFailpointHandler>(noFailpoint);\n\n      return Context.make(\n        DoStorageFailpoint,\n        DoStorageFailpoint.of({\n          hit: (location) => Ref.get(handler).pipe(Effect.flatMap((current) => current(location))),\n        }),\n      ).pipe(\n        Context.add(\n          DoStorageFailpointTestControl,\n          DoStorageFailpointTestControl.of({\n            clear: Ref.set(handler, noFailpoint),\n            setHandler: (next) => Ref.set(handler, next),\n          }),\n        ),\n      );\n    }),\n  );\n}\n\n/**\n * The DC-specific eviction failpoint mode: instead of failing typed, an armed hit evicts the\n * Durable Object through an injected `evict` thunk — in production-shaped harnesses that thunk\n * is `() => ctx.abort()`, the platform's real failure mode. `ctx.abort()` never returns (it\n * throws while destroying the in-memory instance and every in-flight implicit or explicit\n * storage transaction rolls back), so an armed hit ends the current Attempt exactly like an\n * unannounced platform eviction; DO storage — the only correctness-critical state — survives\n * for the next incarnation, which the persisted alarm wakes without any incoming request.\n *\n * The handles stay injected: this package never imports `cloudflare:workers`, so the harness\n * that owns a `DurableObjectState` supplies the thunk.\n */\nexport const evictionFailpointHandler =\n  (options: {\n    readonly isArmed: (location: DoStorageFailpointLocation) => Effect.Effect<boolean>;\n    /** Kills the incarnation — e.g. `() => ctx.abort()`. Typed `void` because the platform\n     * declares `abort` as returning, but it throws while destroying the instance. */\n    readonly evict: (location: DoStorageFailpointLocation) => void;\n  }): DoStorageFailpointHandler =>\n  (location) =>\n    options.isArmed(location).pipe(\n      Effect.flatMap((armed) =>\n        armed\n          ? // `ctx.abort()` throws while destroying the instance; that throw surfaces as a\n            // defect in the (already dying) incarnation. The defensive throw below keeps the\n            // guarantee — nothing after an armed hit may observe in-memory state — even if a\n            // harness supplies an evict thunk that returns.\n            Effect.sync((): never => {\n              options.evict(location);\n              throw new Error(\n                `Durable Object eviction did not interrupt execution at ${location}.`,\n              );\n            })\n          : Effect.void,\n      ),\n    );\n"],"mappings":";;;AAKA,MAAM,oBAA+C,OAAO;;AAG5D,IAAa,gCAAb,MAAa,sCAAsC,QAAQ,QAMzD,CAAC,CAAC,gEAAgE,CAAC,CAAC;;CAEpE,OAAgB,QAAQ,MAAM,cAC5B,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO,IAAI,KAAgC,WAAW;EAEtE,OAAO,QAAQ,KACb,oBACA,mBAAmB,GAAG,EACpB,MAAM,aAAa,IAAI,IAAI,OAAO,CAAC,CAAC,KAAK,OAAO,SAAS,YAAY,QAAQ,QAAQ,CAAC,CAAC,EACzF,CAAC,CACH,CAAC,CAAC,KACA,QAAQ,IACN,+BACA,8BAA8B,GAAG;GAC/B,OAAO,IAAI,IAAI,SAAS,WAAW;GACnC,aAAa,SAAS,IAAI,IAAI,SAAS,IAAI;EAC7C,CAAC,CACH,CACF;CACF,CAAC,CACH;AACF;;;;;;;;;;;;;AAcA,MAAa,4BACV,aAMA,aACC,QAAQ,QAAQ,QAAQ,CAAC,CAAC,KACxB,OAAO,SAAS,UACd,QAKI,OAAO,WAAkB;CACvB,QAAQ,MAAM,QAAQ;CACtB,MAAM,IAAI,MACR,0DAA0D,SAAS,EACrE;AACF,CAAC,IACD,OAAO,IACb,CACF"}

package/dist/DoStorageVersion-KrYUXqeJ.d.mts

@@ -0,0 +1,10 @@
+import { SqliteMigrator } from "@effect/sql-sqlite-do";
+//#region src/internal/migrations.d.ts
+/** The current storage version recorded in `effect_agent_meta`. */
+declare const CurrentDoStorageVersion = 2;
+declare namespace DoStorageVersion_d_exports {
+  export { CurrentDoStorageVersion };
+}
+//#endregion
+export { CurrentDoStorageVersion as n, DoStorageVersion_d_exports as t };
+//# sourceMappingURL=DoStorageVersion-KrYUXqeJ.d.mts.map

package/dist/DoStorageVersion.d.mts

@@ -0,0 +1,2 @@
+import { n as CurrentDoStorageVersion } from "./DoStorageVersion-KrYUXqeJ.mjs";
+export { CurrentDoStorageVersion };

package/dist/DoStorageVersion.mjs

@@ -0,0 +1,8 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+import { t as CurrentDoStorageVersion } from "./migrations-Bo4GU-pp.mjs";
+//#region src/DoStorageVersion.ts
+var DoStorageVersion_exports = /* @__PURE__ */ __exportAll({ CurrentDoStorageVersion: () => 2 });
+//#endregion
+export { CurrentDoStorageVersion, DoStorageVersion_exports as t };
+
+//# sourceMappingURL=DoStorageVersion.mjs.map

package/dist/DoStorageVersion.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DoStorageVersion.mjs","names":[],"sources":["../src/DoStorageVersion.ts"],"sourcesContent":["/** Public DoStorageVersion API. Implementation helpers remain private. */\nexport { CurrentDoStorageVersion } from \"./internal/migrations.ts\";\n"],"mappings":""}

package/dist/DoSubmissionLedger.d.mts

@@ -0,0 +1,23 @@
+import { DoStorageConfig } from "./DoStorageConfig.mjs";
+import { DoStorageFailpoint } from "./DoStorageFailpoint.mjs";
+import { DoStorageInitializationError, DoStorageOptions } from "./DoThreadStore.mjs";
+import { Crypto, Layer } from "effect";
+import * as SqlClientService from "effect/unstable/sql/SqlClient";
+import { SubmissionLedger } from "@effect-agent/thread/SubmissionLedger";
+declare namespace DoSubmissionLedger_d_exports {
+  export { ledgerLayer, submissionLedgerLayer };
+}
+/**
+ * Durable Object SubmissionLedger implementation sharing the journal's private SQLite
+ * database, storage-backed transaction discipline, and producer-epoch fencing substrate.
+ * Configuration, failpoint, SQL, and Crypto authority stay visible in the input channel.
+ */
+declare const submissionLedgerLayer: Layer.Layer<SubmissionLedger, DoStorageInitializationError, DoStorageConfig | DoStorageFailpoint | SqlClientService.SqlClient | Crypto.Crypto>;
+/**
+ * A composition-root convenience Layer for the durable Submission Ledger. Point it at the
+ * same `ctx.storage` as the ThreadStore so claims fence the same producer epochs.
+ */
+declare const ledgerLayer: (options: DoStorageOptions) => Layer.Layer<SubmissionLedger, DoStorageInitializationError>;
+//#endregion
+export { ledgerLayer, submissionLedgerLayer, DoSubmissionLedger_d_exports as t };
+//# sourceMappingURL=DoSubmissionLedger.d.mts.map