@effect-agent/storage-cloudflare 0.1.0-beta.63 → 0.1.0-beta.65

package/dist/DoMessageDeliveryStore.d.mts

@@ -1,4 +1,4 @@
-import { a as DoStorageCompatibilityError, o as DoStorageCorruptionError, s as DoStorageError } from "./DoStorageError-UrxrvbnF.mjs";
+import { a as DoStorageCompatibilityError, o as DoStorageCorruptionError, s as DoStorageError } from "./DoStorageError-Cmhvl4TQ.mjs";
 import { DoStorageConfig } from "./DoStorageConfig.mjs";
 import { DoStorageFailpoint } from "./DoStorageFailpoint.mjs";
 import { MessageDeliveryError, MessageDeliveryStore, MessageDeliveryStoreLimits } from "@effect-agent/thread/MessageDelivery";

package/dist/DoMessageDeliveryStore.mjs

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
 import { DoStorageConfig } from "./DoStorageConfig.mjs";
 import { DoStorageFailpoint } from "./DoStorageFailpoint.mjs";
-import { a as initializeDoJournal } from "./do-journal-Brv7xSH5.mjs";
+import { a as initializeDoJournal } from "./do-journal-CllwJfgW.mjs";
 import { MessageDeliveryError, MessageDeliveryStore } from "@effect-agent/thread/MessageDelivery";
 import { SqlMessageDeliveryTransaction, makeSqlMessageDeliveryStore } from "@effect-agent/thread/SqlMessageDeliveryStore";
 import { Effect, Layer } from "effect";

package/dist/{DoStorageError-UrxrvbnF.d.mts → DoStorageError-Cmhvl4TQ.d.mts}

@@ -84,10 +84,10 @@ declare class DoCheckpointConflict extends DoCheckpointConflict_base {}
  * both platforms — the DN process-kill evidence and the DC eviction evidence address identical
  * locations. There is intentionally no Cloudflare-only location.
  */
-declare const DoStorageFailpointLocation: Schema.Literals<readonly ["upgrade:before-mutation", "upgrade:after-mutation", "upgrade:before-version", "upgrade:after-version", "materialize:before", "materialize:after", "append:before", "append:after-batch-insert", "append:after-record-insert", "append:after-tail-update", "append:after", "export:after-thread-read", "save-checkpoint:before", "save-checkpoint:after", "ledger:admit:before", "ledger:admit:after", "ledger:mark-ready:before", "ledger:mark-ready:after", "ledger:claim:before", "ledger:claim:after", "ledger:mark-input-applied:before", "ledger:mark-input-applied:after", "ledger:renew:before", "ledger:renew:after", "ledger:reserve-settlement:before", "ledger:reserve-settlement:after", "ledger:finalize-settlement:before", "ledger:finalize-settlement:after", "ledger:request-abort:before", "ledger:request-abort:after", "ledger:release:before", "ledger:release:after", "ledger:claim-joining:before", "ledger:claim-joining:after", "ledger:mark-joined:before", "ledger:mark-joined:after", "ledger:revert-joining:before", "ledger:revert-joining:after", "ledger:suspend:before", "ledger:suspend:after", "ledger:approval-decision:before", "ledger:approval-decision:after", "ledger:mark-unknown:before", "ledger:mark-unknown:after", "ledger:unknown-resolution:before", "ledger:unknown-resolution:after", "ledger:child-reservation:before", "ledger:child-reservation:after", "ledger:child-attach:before", "ledger:child-attach:after", "ledger:child-release-pending:before", "ledger:child-release-pending:after", "ledger:child-release:before", "ledger:child-release:after", "ledger:child-settled:before", "ledger:child-settled:after"]>;
+declare const DoStorageFailpointLocation: Schema.Literals<readonly ["upgrade:before-mutation", "upgrade:after-mutation", "upgrade:before-version", "upgrade:after-version", "materialize:before", "materialize:after", "append:before", "append:after-batch-insert", "append:after-record-insert", "append:after-tail-update", "append:after", "export:after-thread-read", "save-checkpoint:before", "save-checkpoint:after", "save-recovery-checkpoint:before", "save-recovery-checkpoint:after", "ledger:admit:before", "ledger:admit:after", "ledger:mark-ready:before", "ledger:mark-ready:after", "ledger:claim:before", "ledger:claim:after", "ledger:mark-input-applied:before", "ledger:mark-input-applied:after", "ledger:renew:before", "ledger:renew:after", "ledger:reserve-settlement:before", "ledger:reserve-settlement:after", "ledger:finalize-settlement:before", "ledger:finalize-settlement:after", "ledger:request-abort:before", "ledger:request-abort:after", "ledger:release:before", "ledger:release:after", "ledger:claim-joining:before", "ledger:claim-joining:after", "ledger:mark-joined:before", "ledger:mark-joined:after", "ledger:revert-joining:before", "ledger:revert-joining:after", "ledger:suspend:before", "ledger:suspend:after", "ledger:approval-decision:before", "ledger:approval-decision:after", "ledger:mark-unknown:before", "ledger:mark-unknown:after", "ledger:unknown-resolution:before", "ledger:unknown-resolution:after", "ledger:child-reservation:before", "ledger:child-reservation:after", "ledger:child-attach:before", "ledger:child-attach:after", "ledger:child-release-pending:before", "ledger:child-release-pending:after", "ledger:child-release:before", "ledger:child-release:after", "ledger:child-settled:before", "ledger:child-settled:after"]>;
 type DoStorageFailpointLocation = typeof DoStorageFailpointLocation.Type;
 declare const DoStorageFailpointError_base: Schema.Class<DoStorageFailpointError, Schema.TaggedStruct<"DoStorageFailpointError", {
-  readonly location: Schema.Literals<readonly ["upgrade:before-mutation", "upgrade:after-mutation", "upgrade:before-version", "upgrade:after-version", "materialize:before", "materialize:after", "append:before", "append:after-batch-insert", "append:after-record-insert", "append:after-tail-update", "append:after", "export:after-thread-read", "save-checkpoint:before", "save-checkpoint:after", "ledger:admit:before", "ledger:admit:after", "ledger:mark-ready:before", "ledger:mark-ready:after", "ledger:claim:before", "ledger:claim:after", "ledger:mark-input-applied:before", "ledger:mark-input-applied:after", "ledger:renew:before", "ledger:renew:after", "ledger:reserve-settlement:before", "ledger:reserve-settlement:after", "ledger:finalize-settlement:before", "ledger:finalize-settlement:after", "ledger:request-abort:before", "ledger:request-abort:after", "ledger:release:before", "ledger:release:after", "ledger:claim-joining:before", "ledger:claim-joining:after", "ledger:mark-joined:before", "ledger:mark-joined:after", "ledger:revert-joining:before", "ledger:revert-joining:after", "ledger:suspend:before", "ledger:suspend:after", "ledger:approval-decision:before", "ledger:approval-decision:after", "ledger:mark-unknown:before", "ledger:mark-unknown:after", "ledger:unknown-resolution:before", "ledger:unknown-resolution:after", "ledger:child-reservation:before", "ledger:child-reservation:after", "ledger:child-attach:before", "ledger:child-attach:after", "ledger:child-release-pending:before", "ledger:child-release-pending:after", "ledger:child-release:before", "ledger:child-release:after", "ledger:child-settled:before", "ledger:child-settled:after"]>;
+  readonly location: Schema.Literals<readonly ["upgrade:before-mutation", "upgrade:after-mutation", "upgrade:before-version", "upgrade:after-version", "materialize:before", "materialize:after", "append:before", "append:after-batch-insert", "append:after-record-insert", "append:after-tail-update", "append:after", "export:after-thread-read", "save-checkpoint:before", "save-checkpoint:after", "save-recovery-checkpoint:before", "save-recovery-checkpoint:after", "ledger:admit:before", "ledger:admit:after", "ledger:mark-ready:before", "ledger:mark-ready:after", "ledger:claim:before", "ledger:claim:after", "ledger:mark-input-applied:before", "ledger:mark-input-applied:after", "ledger:renew:before", "ledger:renew:after", "ledger:reserve-settlement:before", "ledger:reserve-settlement:after", "ledger:finalize-settlement:before", "ledger:finalize-settlement:after", "ledger:request-abort:before", "ledger:request-abort:after", "ledger:release:before", "ledger:release:after", "ledger:claim-joining:before", "ledger:claim-joining:after", "ledger:mark-joined:before", "ledger:mark-joined:after", "ledger:revert-joining:before", "ledger:revert-joining:after", "ledger:suspend:before", "ledger:suspend:after", "ledger:approval-decision:before", "ledger:approval-decision:after", "ledger:mark-unknown:before", "ledger:mark-unknown:after", "ledger:unknown-resolution:before", "ledger:unknown-resolution:after", "ledger:child-reservation:before", "ledger:child-reservation:after", "ledger:child-attach:before", "ledger:child-attach:after", "ledger:child-release-pending:before", "ledger:child-release-pending:after", "ledger:child-release:before", "ledger:child-release:after", "ledger:child-settled:before", "ledger:child-settled:after"]>;
 }>, import("effect/Cause").YieldableError>;
 /** Deterministic test-only fault or pause injected at a Durable Object storage boundary. */
 declare class DoStorageFailpointError extends DoStorageFailpointError_base {
@@ -95,4 +95,4 @@ declare class DoStorageFailpointError extends DoStorageFailpointError_base {
 }
 //#endregion
 export { DoStorageCompatibilityError as a, DoStorageError_d_exports as c, DoValueBoundExceeded as d, DoLedgerError as i, DoStorageFailpointError as l, DoCheckpointConflict as n, DoStorageCorruptionError as o, DoFenceRejected as r, DoStorageError as s, DoAppendConflict as t, DoStorageFailpointLocation as u };
-//# sourceMappingURL=DoStorageError-UrxrvbnF.d.mts.map
+//# sourceMappingURL=DoStorageError-Cmhvl4TQ.d.mts.map

package/dist/DoStorageError.d.mts

@@ -1,2 +1,2 @@
-import { a as DoStorageCompatibilityError, d as DoValueBoundExceeded, i as DoLedgerError, l as DoStorageFailpointError, n as DoCheckpointConflict, o as DoStorageCorruptionError, r as DoFenceRejected, s as DoStorageError, t as DoAppendConflict, u as DoStorageFailpointLocation } from "./DoStorageError-UrxrvbnF.mjs";
+import { a as DoStorageCompatibilityError, d as DoValueBoundExceeded, i as DoLedgerError, l as DoStorageFailpointError, n as DoCheckpointConflict, o as DoStorageCorruptionError, r as DoFenceRejected, s as DoStorageError, t as DoAppendConflict, u as DoStorageFailpointLocation } from "./DoStorageError-Cmhvl4TQ.mjs";
 export { DoAppendConflict, DoCheckpointConflict, DoFenceRejected, DoLedgerError, DoStorageCompatibilityError, DoStorageCorruptionError, DoStorageError, DoStorageFailpointError, DoStorageFailpointLocation, DoValueBoundExceeded };

package/dist/DoStorageError.mjs

@@ -107,6 +107,8 @@ const DoStorageFailpointLocation = Schema.Literals([
 	"export:after-thread-read",
 	"save-checkpoint:before",
 	"save-checkpoint:after",
+	"save-recovery-checkpoint:before",
+	"save-recovery-checkpoint:after",
 	"ledger:admit:before",
 	"ledger:admit:after",
 	"ledger:mark-ready:before",

package/dist/DoStorageError.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"DoStorageError.mjs","names":[],"sources":["../src/DoStorageError.ts"],"sourcesContent":["import { CanonicalSequence, ProducerEpoch } from \"@effect-agent/thread/Records\";\nimport { Schema } from \"effect\";\n\n/** The Durable Object's SQLite storage uses a private-development format this adapter cannot read. */\nexport class DoStorageCompatibilityError extends Schema.TaggedError<DoStorageCompatibilityError>()(\n  \"DoStorageCompatibilityError\",\n  {\n    actualVersion: Schema.Int,\n    message: Schema.String,\n    supportedVersion: Schema.Int,\n  },\n) {}\n\n/** Stored bytes failed the current Schema and cannot be used as recovery truth. */\nexport class DoStorageCorruptionError extends Schema.TaggedError<DoStorageCorruptionError>()(\n  \"DoStorageCorruptionError\",\n  {\n    message: Schema.String,\n    rowKey: Schema.String,\n    table: Schema.String,\n  },\n) {}\n\n/** Durable Object SQLite infrastructure failed while opening or operating the store. */\nexport class DoStorageError extends Schema.TaggedError<DoStorageError>()(\"DoStorageError\", {\n  cause: Schema.optionalKey(Schema.Defect()),\n  message: Schema.String,\n  operation: Schema.String,\n}) {}\n\n/**\n * Durable Object SQLite infrastructure failed while operating the Submission Ledger. Surfaces\n * at the SubmissionLedger port as the typed `LedgerError` with this error preserved as its\n * cause, so the adapter-level tag is never erased.\n */\nexport class DoLedgerError extends Schema.TaggedError<DoLedgerError>()(\"DoLedgerError\", {\n  cause: Schema.optionalKey(Schema.Defect()),\n  message: Schema.String,\n  operation: Schema.String,\n}) {}\n\n/**\n * A value to be stored exceeds the configured Durable Object per-value bound\n * (`DoStorageConfigValue.maxStoredValueBytes`, kept under the platform's 2 MB SQLite value\n * limit). The refusal happens typed BEFORE any durable mutation; no partial state is written.\n * Payloads of this size are the designed overflow case for a future R2-backed AttachmentStore\n * (deployment spec §3.1, deferred until a real attachment requirement exists).\n */\nexport class DoValueBoundExceeded extends Schema.TaggedError<DoValueBoundExceeded>()(\n  \"DoValueBoundExceeded\",\n  {\n    actualBytes: Schema.Int,\n    maxBytes: Schema.Int,\n    operation: Schema.String,\n  },\n) {\n  override get message() {\n    return (\n      `A stored value of ${this.actualBytes} bytes exceeds the Durable Object per-value bound ` +\n      `of ${this.maxBytes} bytes during ${this.operation}. Nothing was written. Values of this ` +\n      \"size are the designed R2 AttachmentStore overflow path (deferred, deployment spec §3.1).\"\n    );\n  }\n}\n\n/**\n * A canonical batch retry conflicts with existing append state. Tail conflicts carry the\n * actual committed tail as a diagnostic resume hint.\n */\nexport class DoAppendConflict extends Schema.TaggedError<DoAppendConflict>()(\"DoAppendConflict\", {\n  message: Schema.String,\n  reason: Schema.Literals([\"batch-digest\", \"record-identity\", \"tail\"]),\n  actualTailSequence: Schema.optionalKey(CanonicalSequence),\n  actualTailDigest: Schema.optionalKey(Schema.String),\n}) {}\n\n/**\n * A producer epoch does not match the Thread's current writer registration. Appends\n * require the exact registered epoch, so both older and newer unregistered epochs are fenced;\n * a newer epoch takes over by materializing first.\n */\nexport class DoFenceRejected extends Schema.TaggedError<DoFenceRejected>()(\"DoFenceRejected\", {\n  actualEpoch: ProducerEpoch,\n  message: Schema.String,\n  producerEpoch: ProducerEpoch,\n}) {}\n\n/** A checkpoint conflicts with a previously stored checkpoint at the same offset. */\nexport class DoCheckpointConflict extends Schema.TaggedError<DoCheckpointConflict>()(\n  \"DoCheckpointConflict\",\n  {\n    message: Schema.String,\n  },\n) {}\n\n/**\n * Deterministic fault-injection locations at Durable Object storage operation boundaries.\n *\n * The string list is copied VERBATIM from `SqliteStorageFailpointLocation`\n * (`packages/storage-sqlite/src/errors.ts`) so every crash-matrix row keeps the same name on\n * both platforms — the DN process-kill evidence and the DC eviction evidence address identical\n * locations. There is intentionally no Cloudflare-only location.\n */\nexport const DoStorageFailpointLocation = Schema.Literals([\n  \"upgrade:before-mutation\",\n  \"upgrade:after-mutation\",\n  \"upgrade:before-version\",\n  \"upgrade:after-version\",\n  \"materialize:before\",\n  \"materialize:after\",\n  \"append:before\",\n  \"append:after-batch-insert\",\n  \"append:after-record-insert\",\n  \"append:after-tail-update\",\n  \"append:after\",\n  \"export:after-thread-read\",\n  \"save-checkpoint:before\",\n  \"save-checkpoint:after\",\n  \"ledger:admit:before\",\n  \"ledger:admit:after\",\n  \"ledger:mark-ready:before\",\n  \"ledger:mark-ready:after\",\n  \"ledger:claim:before\",\n  \"ledger:claim:after\",\n  \"ledger:mark-input-applied:before\",\n  \"ledger:mark-input-applied:after\",\n  \"ledger:renew:before\",\n  \"ledger:renew:after\",\n  \"ledger:reserve-settlement:before\",\n  \"ledger:reserve-settlement:after\",\n  \"ledger:finalize-settlement:before\",\n  \"ledger:finalize-settlement:after\",\n  \"ledger:request-abort:before\",\n  \"ledger:request-abort:after\",\n  \"ledger:release:before\",\n  \"ledger:release:after\",\n  \"ledger:claim-joining:before\",\n  \"ledger:claim-joining:after\",\n  \"ledger:mark-joined:before\",\n  \"ledger:mark-joined:after\",\n  \"ledger:revert-joining:before\",\n  \"ledger:revert-joining:after\",\n  \"ledger:suspend:before\",\n  \"ledger:suspend:after\",\n  \"ledger:approval-decision:before\",\n  \"ledger:approval-decision:after\",\n  \"ledger:mark-unknown:before\",\n  \"ledger:mark-unknown:after\",\n  \"ledger:unknown-resolution:before\",\n  \"ledger:unknown-resolution:after\",\n  \"ledger:child-reservation:before\",\n  \"ledger:child-reservation:after\",\n  \"ledger:child-attach:before\",\n  \"ledger:child-attach:after\",\n  \"ledger:child-release-pending:before\",\n  \"ledger:child-release-pending:after\",\n  \"ledger:child-release:before\",\n  \"ledger:child-release:after\",\n  \"ledger:child-settled:before\",\n  \"ledger:child-settled:after\",\n]);\n\nexport type DoStorageFailpointLocation = typeof DoStorageFailpointLocation.Type;\n\n/** Deterministic test-only fault or pause injected at a Durable Object storage boundary. */\nexport class DoStorageFailpointError extends Schema.TaggedError<DoStorageFailpointError>()(\n  \"DoStorageFailpointError\",\n  {\n    location: DoStorageFailpointLocation,\n  },\n) {\n  override get message() {\n    return `Injected Durable Object storage failure at ${this.location}.`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAIA,IAAa,8BAAb,cAAiD,OAAO,YAAyC,CAAC,CAChG,+BACA;CACE,eAAe,OAAO;CACtB,SAAS,OAAO;CAChB,kBAAkB,OAAO;AAC3B,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,2BAAb,cAA8C,OAAO,YAAsC,CAAC,CAC1F,4BACA;CACE,SAAS,OAAO;CAChB,QAAQ,OAAO;CACf,OAAO,OAAO;AAChB,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,iBAAb,cAAoC,OAAO,YAA4B,CAAC,CAAC,kBAAkB;CACzF,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;CACzC,SAAS,OAAO;CAChB,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;;;;;AAOJ,IAAa,gBAAb,cAAmC,OAAO,YAA2B,CAAC,CAAC,iBAAiB;CACtF,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;CACzC,SAAS,OAAO;CAChB,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;;;;;;;AASJ,IAAa,uBAAb,cAA0C,OAAO,YAAkC,CAAC,CAClF,wBACA;CACE,aAAa,OAAO;CACpB,UAAU,OAAO;CACjB,WAAW,OAAO;AACpB,CACF,CAAC,CAAC;CACA,IAAa,UAAU;EACrB,OACE,qBAAqB,KAAK,YAAY,uDAChC,KAAK,SAAS,gBAAgB,KAAK,UAAU;CAGvD;AACF;;;;;AAMA,IAAa,mBAAb,cAAsC,OAAO,YAA8B,CAAC,CAAC,oBAAoB;CAC/F,SAAS,OAAO;CAChB,QAAQ,OAAO,SAAS;EAAC;EAAgB;EAAmB;CAAM,CAAC;CACnE,oBAAoB,OAAO,YAAY,iBAAiB;CACxD,kBAAkB,OAAO,YAAY,OAAO,MAAM;AACpD,CAAC,CAAC,CAAC,CAAC;;;;;;AAOJ,IAAa,kBAAb,cAAqC,OAAO,YAA6B,CAAC,CAAC,mBAAmB;CAC5F,aAAa;CACb,SAAS,OAAO;CAChB,eAAe;AACjB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,uBAAb,cAA0C,OAAO,YAAkC,CAAC,CAClF,wBACA,EACE,SAAS,OAAO,OAClB,CACF,CAAC,CAAC,CAAC;;;;;;;;;AAUH,MAAa,6BAA6B,OAAO,SAAS;CACxD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;AAKD,IAAa,0BAAb,cAA6C,OAAO,YAAqC,CAAC,CACxF,2BACA,EACE,UAAU,2BACZ,CACF,CAAC,CAAC;CACA,IAAa,UAAU;EACrB,OAAO,8CAA8C,KAAK,SAAS;CACrE;AACF"}
+{"version":3,"file":"DoStorageError.mjs","names":[],"sources":["../src/DoStorageError.ts"],"sourcesContent":["import { CanonicalSequence, ProducerEpoch } from \"@effect-agent/thread/Records\";\nimport { Schema } from \"effect\";\n\n/** The Durable Object's SQLite storage uses a private-development format this adapter cannot read. */\nexport class DoStorageCompatibilityError extends Schema.TaggedError<DoStorageCompatibilityError>()(\n  \"DoStorageCompatibilityError\",\n  {\n    actualVersion: Schema.Int,\n    message: Schema.String,\n    supportedVersion: Schema.Int,\n  },\n) {}\n\n/** Stored bytes failed the current Schema and cannot be used as recovery truth. */\nexport class DoStorageCorruptionError extends Schema.TaggedError<DoStorageCorruptionError>()(\n  \"DoStorageCorruptionError\",\n  {\n    message: Schema.String,\n    rowKey: Schema.String,\n    table: Schema.String,\n  },\n) {}\n\n/** Durable Object SQLite infrastructure failed while opening or operating the store. */\nexport class DoStorageError extends Schema.TaggedError<DoStorageError>()(\"DoStorageError\", {\n  cause: Schema.optionalKey(Schema.Defect()),\n  message: Schema.String,\n  operation: Schema.String,\n}) {}\n\n/**\n * Durable Object SQLite infrastructure failed while operating the Submission Ledger. Surfaces\n * at the SubmissionLedger port as the typed `LedgerError` with this error preserved as its\n * cause, so the adapter-level tag is never erased.\n */\nexport class DoLedgerError extends Schema.TaggedError<DoLedgerError>()(\"DoLedgerError\", {\n  cause: Schema.optionalKey(Schema.Defect()),\n  message: Schema.String,\n  operation: Schema.String,\n}) {}\n\n/**\n * A value to be stored exceeds the configured Durable Object per-value bound\n * (`DoStorageConfigValue.maxStoredValueBytes`, kept under the platform's 2 MB SQLite value\n * limit). The refusal happens typed BEFORE any durable mutation; no partial state is written.\n * Payloads of this size are the designed overflow case for a future R2-backed AttachmentStore\n * (deployment spec §3.1, deferred until a real attachment requirement exists).\n */\nexport class DoValueBoundExceeded extends Schema.TaggedError<DoValueBoundExceeded>()(\n  \"DoValueBoundExceeded\",\n  {\n    actualBytes: Schema.Int,\n    maxBytes: Schema.Int,\n    operation: Schema.String,\n  },\n) {\n  override get message() {\n    return (\n      `A stored value of ${this.actualBytes} bytes exceeds the Durable Object per-value bound ` +\n      `of ${this.maxBytes} bytes during ${this.operation}. Nothing was written. Values of this ` +\n      \"size are the designed R2 AttachmentStore overflow path (deferred, deployment spec §3.1).\"\n    );\n  }\n}\n\n/**\n * A canonical batch retry conflicts with existing append state. Tail conflicts carry the\n * actual committed tail as a diagnostic resume hint.\n */\nexport class DoAppendConflict extends Schema.TaggedError<DoAppendConflict>()(\"DoAppendConflict\", {\n  message: Schema.String,\n  reason: Schema.Literals([\"batch-digest\", \"record-identity\", \"tail\"]),\n  actualTailSequence: Schema.optionalKey(CanonicalSequence),\n  actualTailDigest: Schema.optionalKey(Schema.String),\n}) {}\n\n/**\n * A producer epoch does not match the Thread's current writer registration. Appends\n * require the exact registered epoch, so both older and newer unregistered epochs are fenced;\n * a newer epoch takes over by materializing first.\n */\nexport class DoFenceRejected extends Schema.TaggedError<DoFenceRejected>()(\"DoFenceRejected\", {\n  actualEpoch: ProducerEpoch,\n  message: Schema.String,\n  producerEpoch: ProducerEpoch,\n}) {}\n\n/** A checkpoint conflicts with a previously stored checkpoint at the same offset. */\nexport class DoCheckpointConflict extends Schema.TaggedError<DoCheckpointConflict>()(\n  \"DoCheckpointConflict\",\n  {\n    message: Schema.String,\n  },\n) {}\n\n/**\n * Deterministic fault-injection locations at Durable Object storage operation boundaries.\n *\n * The string list is copied VERBATIM from `SqliteStorageFailpointLocation`\n * (`packages/storage-sqlite/src/errors.ts`) so every crash-matrix row keeps the same name on\n * both platforms — the DN process-kill evidence and the DC eviction evidence address identical\n * locations. There is intentionally no Cloudflare-only location.\n */\nexport const DoStorageFailpointLocation = Schema.Literals([\n  \"upgrade:before-mutation\",\n  \"upgrade:after-mutation\",\n  \"upgrade:before-version\",\n  \"upgrade:after-version\",\n  \"materialize:before\",\n  \"materialize:after\",\n  \"append:before\",\n  \"append:after-batch-insert\",\n  \"append:after-record-insert\",\n  \"append:after-tail-update\",\n  \"append:after\",\n  \"export:after-thread-read\",\n  \"save-checkpoint:before\",\n  \"save-checkpoint:after\",\n  \"save-recovery-checkpoint:before\",\n  \"save-recovery-checkpoint:after\",\n  \"ledger:admit:before\",\n  \"ledger:admit:after\",\n  \"ledger:mark-ready:before\",\n  \"ledger:mark-ready:after\",\n  \"ledger:claim:before\",\n  \"ledger:claim:after\",\n  \"ledger:mark-input-applied:before\",\n  \"ledger:mark-input-applied:after\",\n  \"ledger:renew:before\",\n  \"ledger:renew:after\",\n  \"ledger:reserve-settlement:before\",\n  \"ledger:reserve-settlement:after\",\n  \"ledger:finalize-settlement:before\",\n  \"ledger:finalize-settlement:after\",\n  \"ledger:request-abort:before\",\n  \"ledger:request-abort:after\",\n  \"ledger:release:before\",\n  \"ledger:release:after\",\n  \"ledger:claim-joining:before\",\n  \"ledger:claim-joining:after\",\n  \"ledger:mark-joined:before\",\n  \"ledger:mark-joined:after\",\n  \"ledger:revert-joining:before\",\n  \"ledger:revert-joining:after\",\n  \"ledger:suspend:before\",\n  \"ledger:suspend:after\",\n  \"ledger:approval-decision:before\",\n  \"ledger:approval-decision:after\",\n  \"ledger:mark-unknown:before\",\n  \"ledger:mark-unknown:after\",\n  \"ledger:unknown-resolution:before\",\n  \"ledger:unknown-resolution:after\",\n  \"ledger:child-reservation:before\",\n  \"ledger:child-reservation:after\",\n  \"ledger:child-attach:before\",\n  \"ledger:child-attach:after\",\n  \"ledger:child-release-pending:before\",\n  \"ledger:child-release-pending:after\",\n  \"ledger:child-release:before\",\n  \"ledger:child-release:after\",\n  \"ledger:child-settled:before\",\n  \"ledger:child-settled:after\",\n]);\n\nexport type DoStorageFailpointLocation = typeof DoStorageFailpointLocation.Type;\n\n/** Deterministic test-only fault or pause injected at a Durable Object storage boundary. */\nexport class DoStorageFailpointError extends Schema.TaggedError<DoStorageFailpointError>()(\n  \"DoStorageFailpointError\",\n  {\n    location: DoStorageFailpointLocation,\n  },\n) {\n  override get message() {\n    return `Injected Durable Object storage failure at ${this.location}.`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAIA,IAAa,8BAAb,cAAiD,OAAO,YAAyC,CAAC,CAChG,+BACA;CACE,eAAe,OAAO;CACtB,SAAS,OAAO;CAChB,kBAAkB,OAAO;AAC3B,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,2BAAb,cAA8C,OAAO,YAAsC,CAAC,CAC1F,4BACA;CACE,SAAS,OAAO;CAChB,QAAQ,OAAO;CACf,OAAO,OAAO;AAChB,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,iBAAb,cAAoC,OAAO,YAA4B,CAAC,CAAC,kBAAkB;CACzF,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;CACzC,SAAS,OAAO;CAChB,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;;;;;AAOJ,IAAa,gBAAb,cAAmC,OAAO,YAA2B,CAAC,CAAC,iBAAiB;CACtF,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;CACzC,SAAS,OAAO;CAChB,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;;;;;;;AASJ,IAAa,uBAAb,cAA0C,OAAO,YAAkC,CAAC,CAClF,wBACA;CACE,aAAa,OAAO;CACpB,UAAU,OAAO;CACjB,WAAW,OAAO;AACpB,CACF,CAAC,CAAC;CACA,IAAa,UAAU;EACrB,OACE,qBAAqB,KAAK,YAAY,uDAChC,KAAK,SAAS,gBAAgB,KAAK,UAAU;CAGvD;AACF;;;;;AAMA,IAAa,mBAAb,cAAsC,OAAO,YAA8B,CAAC,CAAC,oBAAoB;CAC/F,SAAS,OAAO;CAChB,QAAQ,OAAO,SAAS;EAAC;EAAgB;EAAmB;CAAM,CAAC;CACnE,oBAAoB,OAAO,YAAY,iBAAiB;CACxD,kBAAkB,OAAO,YAAY,OAAO,MAAM;AACpD,CAAC,CAAC,CAAC,CAAC;;;;;;AAOJ,IAAa,kBAAb,cAAqC,OAAO,YAA6B,CAAC,CAAC,mBAAmB;CAC5F,aAAa;CACb,SAAS,OAAO;CAChB,eAAe;AACjB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,uBAAb,cAA0C,OAAO,YAAkC,CAAC,CAClF,wBACA,EACE,SAAS,OAAO,OAClB,CACF,CAAC,CAAC,CAAC;;;;;;;;;AAUH,MAAa,6BAA6B,OAAO,SAAS;CACxD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;AAKD,IAAa,0BAAb,cAA6C,OAAO,YAAqC,CAAC,CACxF,2BACA,EACE,UAAU,2BACZ,CACF,CAAC,CAAC;CACA,IAAa,UAAU;EACrB,OAAO,8CAA8C,KAAK,SAAS;CACrE;AACF"}

package/dist/DoStorageFailpoint.d.mts

@@ -1,4 +1,4 @@
-import { l as DoStorageFailpointError, u as DoStorageFailpointLocation } from "./DoStorageError-UrxrvbnF.mjs";
+import { l as DoStorageFailpointError, u as DoStorageFailpointLocation } from "./DoStorageError-Cmhvl4TQ.mjs";
 import { Context, Effect, Layer } from "effect";
 declare namespace DoStorageFailpoint_d_exports {
   export { DoStorageFailpoint, DoStorageFailpointHandler };

package/dist/DoStorageFailpointTesting.d.mts

@@ -1,4 +1,4 @@
-import { u as DoStorageFailpointLocation } from "./DoStorageError-UrxrvbnF.mjs";
+import { u as DoStorageFailpointLocation } from "./DoStorageError-Cmhvl4TQ.mjs";
 import { DoStorageFailpoint, DoStorageFailpointHandler } from "./DoStorageFailpoint.mjs";
 import { Context, Effect, Layer } from "effect";
 //#region src/DoStorageFailpointTesting.d.ts

package/dist/{DoStorageVersion-Pt3jEHdW.d.mts → DoStorageVersion-C05M2uDX.d.mts}

@@ -1,10 +1,10 @@
 import { SqliteMigrator } from "@effect/sql-sqlite-do";
 //#region src/internal/migrations.d.ts
 /** The current storage version recorded in `effect_agent_meta`. */
-declare const CurrentDoStorageVersion = 4;
+declare const CurrentDoStorageVersion = 5;
 declare namespace DoStorageVersion_d_exports {
   export { CurrentDoStorageVersion };
 }
 //#endregion
 export { CurrentDoStorageVersion as n, DoStorageVersion_d_exports as t };
-//# sourceMappingURL=DoStorageVersion-Pt3jEHdW.d.mts.map
+//# sourceMappingURL=DoStorageVersion-C05M2uDX.d.mts.map

package/dist/DoStorageVersion.d.mts

@@ -1,2 +1,2 @@
-import { n as CurrentDoStorageVersion } from "./DoStorageVersion-Pt3jEHdW.mjs";
+import { n as CurrentDoStorageVersion } from "./DoStorageVersion-C05M2uDX.mjs";
 export { CurrentDoStorageVersion };

package/dist/DoStorageVersion.mjs

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { t as CurrentDoStorageVersion } from "./migrations-soC86CQA.mjs";
+import { t as CurrentDoStorageVersion } from "./migrations-BK3kMBdI.mjs";
 //#region src/DoStorageVersion.ts
-var DoStorageVersion_exports = /* @__PURE__ */ __exportAll({ CurrentDoStorageVersion: () => 4 });
+var DoStorageVersion_exports = /* @__PURE__ */ __exportAll({ CurrentDoStorageVersion: () => 5 });
 //#endregion
 export { CurrentDoStorageVersion, DoStorageVersion_exports as t };
 

package/dist/DoSubmissionLedger.mjs

@@ -2,14 +2,14 @@ import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
 import { DoStorageConfig } from "./DoStorageConfig.mjs";
 import { DoStorageFailpoint } from "./DoStorageFailpoint.mjs";
 import { DoLedgerError, DoStorageCorruptionError, DoStorageError } from "./DoStorageError.mjs";
-import { a as initializeDoJournal, i as decodeRows } from "./do-journal-Brv7xSH5.mjs";
+import { a as initializeDoJournal, i as decodeRows } from "./do-journal-CllwJfgW.mjs";
 import { storageConfigLayer, storageFailpointLayer } from "./DoThreadStore.mjs";
 import { Clock, Context, Crypto, DateTime, Effect, Layer, Option, Schema, Stream } from "effect";
 import * as SqlClientService from "effect/unstable/sql/SqlClient";
+import { EMPTY_TAIL_DIGEST } from "@effect-agent/thread/Digest";
 import { ApprovalDecision, CanonicalSequence, DefinitionDigests, Digest, PersistedJson, ProducerEpoch, RecordEnvelope, SettlementOutcome, WorkerAdmission } from "@effect-agent/thread/Records";
 import { SqliteClient } from "@effect/sql-sqlite-do";
 import { MessageAdmission } from "@effect-agent/core/Messaging";
-import { EMPTY_TAIL_DIGEST } from "@effect-agent/thread/Digest";
 import { AbortCommand, AbortIntent, AbortIntentRequest, AdmissionAdmitted, AdmissionConflict, AdmissionFence, AdmissionGroup, AdmissionNotAdmitted, AdmissionPolicyError, AdmissionRequest, AdmissionResult, ApprovalConflict, ApprovalDecisionCommand, ApprovalDecisionIntent, AttachChildToReservationRequest, BeginChildBudgetReleaseRequest, ChildAttachmentSnapshot, ChildBudgetReservationRequest, ChildBudgetReservationSnapshot, ChildReservationConflict, ChildReservationStatus, ChildSettledNotification, Claim, ClaimJoiningRequest, ClaimRequest, InputAppliedMarker, JoinSnapshot, JoinedToHost, JoiningClaim, LedgerCapabilities, LedgerError, MarkInputAppliedRequest, MarkJoinedRequest, MarkReadyRequest, MarkUnknownRequest, OwnershipLost, OwnershipRenewal, OwnershipSnapshot, ParentLinkage, QueueSequence, RecoverySnapshot, RecoverySnapshotRequest, ReleaseChildBudgetRequest, ReleaseOwnershipRequest, RenewOwnershipRequest, ReservedChildBudget, ReservedSettlement, RevertJoiningRequest, Settlement, SettlementConflict, SettlementFinalization, SettlementReservation, SettlementReservationSnapshot, SubmissionAdmissionFence, SubmissionLedger, SubmissionLookup, SubmissionLookupByKey, SubmissionSnapshot, SubmissionState, SuspendRequest, SuspensionReason, SuspensionSnapshot, UnknownResolution, UnknownResolutionCommand, UnknownResolutionConflict, UnknownResolutionIntent, settlementFailureFromRecord, submissionAbortRecordId } from "@effect-agent/thread/SubmissionLedger";
 import { BrowserCrypto } from "@effect/platform-browser";
 //#region src/DoSubmissionLedger.ts

package/dist/DoThreadStore.d.mts

@@ -1,4 +1,4 @@
-import { a as DoStorageCompatibilityError, o as DoStorageCorruptionError, s as DoStorageError } from "./DoStorageError-UrxrvbnF.mjs";
+import { a as DoStorageCompatibilityError, o as DoStorageCorruptionError, s as DoStorageError } from "./DoStorageError-Cmhvl4TQ.mjs";
 import { DoStorageConfig } from "./DoStorageConfig.mjs";
 import { DoStorageFailpoint, DoStorageFailpointHandler } from "./DoStorageFailpoint.mjs";
 import { Crypto, Layer } from "effect";

package/dist/DoThreadStore.mjs

@@ -2,15 +2,15 @@ import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
 import { DoStorageConfig, DoStorageConfigValue } from "./DoStorageConfig.mjs";
 import { DoStorageFailpoint } from "./DoStorageFailpoint.mjs";
 import { DoAppendConflict, DoCheckpointConflict, DoFenceRejected, DoStorageCorruptionError, DoStorageError } from "./DoStorageError.mjs";
-import { a as initializeDoJournal, n as RawCheckpoint, r as RawReadRequest, t as RawAppendRequest } from "./do-journal-Brv7xSH5.mjs";
+import { a as initializeDoJournal, n as RawCheckpoint, r as RawReadRequest, t as RawAppendRequest } from "./do-journal-CllwJfgW.mjs";
 import { Clock, Context, Crypto, Duration, Effect, Layer, Option, Ref, Schema, Stream } from "effect";
 import * as SqlClientService from "effect/unstable/sql/SqlClient";
+import { EMPTY_TAIL_DIGEST, digestCanonicalBatch } from "@effect-agent/thread/Digest";
 import { CanonicalBatch, CanonicalRecord, CanonicalRecordEnvelope, CanonicalSequence, Digest, ObservationOffset } from "@effect-agent/thread/Records";
+import { AppendConflict, AppendResult, CheckpointRejected, FenceRejected, FencedAppendRequest, LoadCheckpointRequest, MAX_THREAD_EXPORT_RECORDS, SaveCheckpointRequest, SaveRecoveryCheckpointRequest, ThreadCheckpoint, ThreadExport, ThreadExportRequest, ThreadMaterialization, ThreadNotMaterialized, ThreadObservation, ThreadRead, ThreadStore, ThreadStoreError, ThreadTail, ThreadTailRequest } from "@effect-agent/thread/ThreadStore";
 import { SqliteClient } from "@effect/sql-sqlite-do";
-import { EMPTY_TAIL_DIGEST, digestCanonicalBatch } from "@effect-agent/thread/Digest";
 import { DEFAULT_OWNERSHIP_LEASE_DURATION } from "@effect-agent/thread/SubmissionLedger";
 import { BrowserCrypto } from "@effect/platform-browser";
-import { AppendConflict, AppendResult, CheckpointRejected, FenceRejected, FencedAppendRequest, LoadCheckpointRequest, SaveCheckpointRequest, ThreadCheckpoint, ThreadExport, ThreadExportRequest, ThreadMaterialization, ThreadNotMaterialized, ThreadObservation, ThreadRead, ThreadStore, ThreadStoreError, ThreadTail, ThreadTailRequest } from "@effect-agent/thread/ThreadStore";
 //#region src/DoThreadStore.ts
 var DoThreadStore_exports = /* @__PURE__ */ __exportAll({
 	layer: () => layer,
@@ -110,9 +110,9 @@ const groupByKey = (rows, key) => {
 	return grouped;
 };
 /**
-* Opt-in full integrity audit (`verifyOnOpen`). Every stored payload is decoded, re-encoded,
-* and re-digested against the canonical chain. Routine opens skip this scan: per-operation
-* Schema decoding plus the digest chain already fail clearly on corrupt rows.
+* Opt-in integrity audit (`verifyOnOpen`) of canonical payloads, their digest chains and generic
+* projection checkpoints. Disposable recovery checkpoints are validated when loaded. Routine opens
+* skip this scan: per-operation Schema decoding fails clearly on corrupt canonical rows.
 */
 const decodeStartupPayloads = Effect.fn("DoThreadStore.decodeStartupPayloads")(function* (journal, crypto) {
 	const stored = yield* journal.scanStoredPayloads();
@@ -313,7 +313,7 @@ const makeServices = Effect.fn("DoThreadStore.makeServices")(function* () {
 		yield* requireThread(journal, validated.threadId);
 		const exported = yield* journal.exportThread(validated.threadId).pipe(Effect.mapError((error) => storeError("export thread", error)));
 		const records = yield* Effect.forEach(exported.records, decodeEnvelope);
-		if (records.length > 65536) return yield* ThreadStoreError.make({
+		if (records.length > MAX_THREAD_EXPORT_RECORDS) return yield* ThreadStoreError.make({
 			operation: "decode thread export",
 			message: "The thread exceeds the current export record limit."
 		});
@@ -383,6 +383,35 @@ const makeServices = Effect.fn("DoThreadStore.makeServices")(function* () {
 		});
 		return Option.some(checkpoint);
 	});
+	const saveRecoveryCheckpoint = Effect.fn("DoThreadStore.saveRecoveryCheckpoint")(function* (request) {
+		const validated = yield* Schema.decodeUnknownEffect(Schema.toType(SaveRecoveryCheckpointRequest))(request).pipe(Effect.mapError((error) => schemaStoreError("validate recovery checkpoint", error)));
+		const checkpointJson = yield* encodeCheckpoint(validated.checkpoint);
+		yield* journal.saveRecoveryCheckpoint(validated, checkpointJson).pipe(Effect.mapError((error) => error._tag === "CheckpointRejected" || error._tag === "FenceRejected" || error._tag === "ThreadNotMaterialized" ? error : storeError("save recovery checkpoint", error)));
+	});
+	const loadRecoveryCheckpoint = Effect.fn("DoThreadStore.loadRecoveryCheckpoint")(function* (request) {
+		const validated = yield* Schema.decodeUnknownEffect(Schema.toType(LoadCheckpointRequest))(request).pipe(Effect.mapError((error) => schemaStoreError("validate recovery checkpoint lookup", error)));
+		const thread = yield* requireThread(journal, validated.threadId);
+		const corrupt = () => CheckpointRejected.make({
+			threadId: validated.threadId,
+			reason: "corrupt"
+		});
+		const rows = yield* journal.loadRecoveryCheckpoint(validated.threadId).pipe(Effect.mapError((error) => error._tag === "DoStorageCorruptionError" ? corrupt() : storeError("load recovery checkpoint", error)));
+		if (rows.length === 0) return Option.none();
+		if (rows.length !== 1) return yield* corrupt();
+		const row = rows[0];
+		const checkpoint = yield* Schema.decodeEffect(Schema.fromJsonString(ThreadCheckpoint))(row.checkpoint_json).pipe(Effect.mapError(corrupt));
+		if (row.thread_id !== validated.threadId || checkpoint.threadId !== row.thread_id || checkpoint.throughSequence !== row.through_sequence || checkpoint.tailDigest !== row.tail_digest) return yield* corrupt();
+		if (checkpoint.throughSequence > thread.tail_sequence) return yield* CheckpointRejected.make({
+			threadId: validated.threadId,
+			reason: "ahead-of-tail"
+		});
+		if (checkpoint.throughSequence > (validated.atOrBeforeSequence ?? thread.tail_sequence)) return Option.none();
+		if ((yield* tailDigestAt(journal, checkpoint.threadId, checkpoint.throughSequence)) !== checkpoint.tailDigest) return yield* CheckpointRejected.make({
+			threadId: validated.threadId,
+			reason: "digest-mismatch"
+		});
+		return Option.some(checkpoint);
+	});
 	const threadStore = ThreadStore.of({
 		append,
 		export: exportThread,
@@ -393,6 +422,10 @@ const makeServices = Effect.fn("DoThreadStore.makeServices")(function* () {
 		checkpoints: {
 			save: saveCheckpoint,
 			load: loadCheckpoint
+		},
+		recoveryCheckpoints: {
+			save: saveRecoveryCheckpoint,
+			load: loadRecoveryCheckpoint
 		}
 	});
 	return Context.make(ThreadStore, threadStore);

package/dist/DoThreadStore.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"DoThreadStore.mjs","names":[],"sources":["../src/DoThreadStore.ts"],"sourcesContent":["import { digestCanonicalBatch, EMPTY_TAIL_DIGEST } from \"@effect-agent/thread/Digest\";\nimport {\n  CanonicalBatch,\n  CanonicalRecord,\n  CanonicalRecordEnvelope,\n  CanonicalSequence,\n  Digest,\n  ObservationOffset,\n} from \"@effect-agent/thread/Records\";\nimport { DEFAULT_OWNERSHIP_LEASE_DURATION } from \"@effect-agent/thread/SubmissionLedger\";\nimport {\n  AppendConflict,\n  AppendResult,\n  CheckpointRejected,\n  ThreadCheckpoint,\n  ThreadExport,\n  ThreadExportRequest,\n  ThreadMaterialization,\n  ThreadNotMaterialized,\n  ThreadObservation,\n  ThreadRead,\n  ThreadStore,\n  type ThreadCheckpoints,\n  ThreadStoreError,\n  ThreadTail,\n  ThreadTailRequest,\n  FenceRejected,\n  FencedAppendRequest,\n  LoadCheckpointRequest,\n  SaveCheckpointRequest,\n} from \"@effect-agent/thread/ThreadStore\";\nimport { BrowserCrypto } from \"@effect/platform-browser\";\nimport { SqliteClient } from \"@effect/sql-sqlite-do\";\nimport {\n  Clock,\n  Context,\n  Crypto,\n  Duration,\n  Effect,\n  Layer,\n  Option,\n  Ref,\n  Schema,\n  Stream,\n} from \"effect\";\nimport * as SqlClientService from \"effect/unstable/sql/SqlClient\";\n\nimport {\n  DEFAULT_MAX_STORED_VALUE_BYTES,\n  DoStorageConfig,\n  DoStorageConfigValue,\n} from \"./DoStorageConfig.ts\";\nimport {\n  type DoStorageCompatibilityError,\n  DoAppendConflict,\n  DoCheckpointConflict,\n  DoFenceRejected,\n  type DoStorageFailpointLocation,\n  DoStorageCorruptionError,\n  DoStorageError,\n} from \"./DoStorageError.ts\";\nimport { DoStorageFailpoint, type DoStorageFailpointHandler } from \"./DoStorageFailpoint.ts\";\nimport {\n  initializeDoJournal,\n  RawAppendRequest,\n  RawCheckpoint,\n  RawReadRequest,\n  type DoJournal,\n} from \"./internal/do-journal.ts\";\n\n/**\n * Convenience-layer construction options. `storage` is the Durable Object's own\n * `ctx.storage` handle, injected as a value (DEPLOY-010: platform bindings enter only\n * through Layers; this package never imports `cloudflare:workers`).\n */\nexport interface DoStorageOptions {\n  readonly storage: DurableObjectStorage;\n  readonly observationPollInterval?: number | undefined;\n  /**\n   * Submission ownership lease duration in milliseconds (D5). Defaults to\n   * `DEFAULT_OWNERSHIP_LEASE_DURATION` from `@effect-agent/thread`.\n   */\n  readonly ownershipLeaseDuration?: number | undefined;\n  /**\n   * Maximum bytes for any single stored value; must stay under the platform's 2 MB\n   * per-value limit. Defaults to `DEFAULT_MAX_STORED_VALUE_BYTES`.\n   */\n  readonly maxStoredValueBytes?: number | undefined;\n  /**\n   * Re-verify every stored payload and digest chain while opening the store. Defaults to\n   * off: per-operation Schema decoding and the digest chain already fail clearly on corrupt\n   * rows without scanning the whole database on every open.\n   */\n  readonly verifyOnOpen?: boolean | undefined;\n  readonly failpoint?: DoStorageFailpointHandler | undefined;\n}\n\nexport type DoStorageInitializationError =\n  | DoStorageCompatibilityError\n  | DoStorageCorruptionError\n  | DoStorageError;\n\nconst OffsetText = Schema.String.check(Schema.isMaxLength(4 * 1024));\nconst DO_OFFSET_PREFIX = \"effect-agent-do@1:\";\nconst ZERO_CANONICAL_SEQUENCE = Schema.decodeSync(CanonicalSequence)(0);\nconst isDigest = Schema.is(Digest);\nconst isDoFenceRejected = Schema.is(DoFenceRejected);\nconst isDoAppendConflict = Schema.is(DoAppendConflict);\nconst isDoCheckpointConflict = Schema.is(DoCheckpointConflict);\n\nconst storeError = (operation: string, error: { readonly message: string }) =>\n  ThreadStoreError.make({\n    cause: error,\n    operation,\n    message: error.message,\n  });\n\nconst schemaStoreError = (operation: string, error: { readonly message: string }) =>\n  ThreadStoreError.make({\n    cause: error,\n    operation,\n    message: error.message,\n  });\n\nconst makeOffset = Effect.fn(function* (\n  threadId: ThreadMaterialization[\"threadId\"],\n  sequence: number,\n): Effect.fn.Return<ObservationOffset, ThreadStoreError> {\n  return yield* Schema.decodeUnknownEffect(CanonicalSequence)(sequence).pipe(\n    Effect.flatMap((validatedSequence) =>\n      Schema.decodeUnknownEffect(ObservationOffset)(\n        `${DO_OFFSET_PREFIX}${encodeURIComponent(threadId)}:${validatedSequence}`,\n      ),\n    ),\n    Effect.mapError((error) => schemaStoreError(\"encode observation offset\", error)),\n  );\n});\n\nconst parseOffset = Effect.fn(function* (\n  threadId: ThreadMaterialization[\"threadId\"],\n  offset: ObservationOffset | undefined,\n): Effect.fn.Return<CanonicalSequence, ThreadStoreError> {\n  if (offset === undefined) return ZERO_CANONICAL_SEQUENCE;\n\n  const text = yield* Schema.decodeUnknownEffect(OffsetText)(offset).pipe(\n    Effect.mapError((error) => schemaStoreError(\"decode observation offset\", error)),\n  );\n\n  const threadPrefix = `${DO_OFFSET_PREFIX}${encodeURIComponent(threadId)}:`;\n\n  if (!text.startsWith(threadPrefix)) {\n    return yield* ThreadStoreError.make({\n      operation: \"decode observation offset\",\n      message: \"The observation offset belongs to a different adapter, storage version, or Thread.\",\n    });\n  }\n  const sequenceText = text.slice(threadPrefix.length);\n\n  if (!/^(0|[1-9][0-9]*)$/.test(sequenceText)) {\n    return yield* ThreadStoreError.make({\n      operation: \"decode observation offset\",\n      message: \"The observation offset is malformed.\",\n    });\n  }\n\n  return yield* Schema.decodeUnknownEffect(CanonicalSequence)(Number(sequenceText)).pipe(\n    Effect.mapError((error) => schemaStoreError(\"decode observation offset\", error)),\n  );\n});\n\nconst mapFence = (threadId: ThreadMaterialization[\"threadId\"], error: DoFenceRejected) =>\n  FenceRejected.make({\n    threadId,\n    actualEpoch: error.actualEpoch,\n    attemptedEpoch: error.producerEpoch,\n  });\n\nconst encodeCanonicalRecord = Effect.fn(function* (\n  record: CanonicalRecord,\n): Effect.fn.Return<string, ThreadStoreError> {\n  return yield* Schema.encodeEffect(Schema.fromJsonString(CanonicalRecord))(record).pipe(\n    Effect.mapError((error) => schemaStoreError(\"encode canonical record\", error)),\n  );\n});\n\nconst encodeCanonicalBatch = Effect.fn(function* (\n  batch: CanonicalBatch,\n): Effect.fn.Return<string, ThreadStoreError> {\n  return yield* Schema.encodeEffect(Schema.fromJsonString(CanonicalBatch))(batch).pipe(\n    Effect.mapError((error) => schemaStoreError(\"encode canonical batch\", error)),\n  );\n});\n\nconst encodeCheckpoint = Effect.fn(function* (\n  checkpoint: ThreadCheckpoint,\n): Effect.fn.Return<string, ThreadStoreError> {\n  return yield* Schema.encodeEffect(Schema.fromJsonString(ThreadCheckpoint))(checkpoint).pipe(\n    Effect.mapError((error) => schemaStoreError(\"encode checkpoint\", error)),\n  );\n});\n\nconst decodeEnvelope = Effect.fn(function* (row: {\n  readonly batch_id: string;\n  readonly thread_id: string;\n  readonly record_json: string;\n  readonly sequence: CanonicalSequence;\n}) {\n  const record = yield* Schema.decodeEffect(Schema.fromJsonString(CanonicalRecord))(\n    row.record_json,\n  ).pipe(\n    Effect.mapError((error) =>\n      ThreadStoreError.make({\n        operation: \"decode canonical record\",\n        message: error.message,\n      }),\n    ),\n  );\n\n  const threadId = yield* Schema.decodeUnknownEffect(CanonicalRecordEnvelope.fields.threadId)(\n    row.thread_id,\n  ).pipe(Effect.mapError((error) => schemaStoreError(\"decode thread identity\", error)));\n\n  const offset = yield* makeOffset(threadId, row.sequence);\n\n  const batchId = yield* Schema.decodeUnknownEffect(CanonicalRecordEnvelope.fields.batchId)(\n    row.batch_id,\n  ).pipe(Effect.mapError((error) => schemaStoreError(\"decode batch identity\", error)));\n\n  return CanonicalRecordEnvelope.make({\n    threadId,\n    batchId,\n    sequence: row.sequence,\n    offset,\n    record,\n  });\n});\n\nconst decodeCheckpoint = Effect.fn(function* (\n  checkpointJson: string,\n): Effect.fn.Return<ThreadCheckpoint, ThreadStoreError> {\n  return yield* Schema.decodeEffect(Schema.fromJsonString(ThreadCheckpoint))(checkpointJson).pipe(\n    Effect.mapError((error) => schemaStoreError(\"decode checkpoint\", error)),\n  );\n});\n\nconst requireThread = Effect.fn(\"DoThreadStore.requireThread\")(function* (\n  journal: DoJournal,\n  threadId: ThreadMaterialization[\"threadId\"],\n) {\n  const rows = yield* journal\n    .getThread(threadId)\n    .pipe(Effect.mapError((error) => storeError(\"read thread\", error)));\n\n  if (rows.length === 0) {\n    return yield* ThreadNotMaterialized.make({ threadId });\n  }\n\n  return rows[0];\n});\n\nconst tailDigestAt = Effect.fn(\"DoThreadStore.tailDigestAt\")(function* (\n  journal: DoJournal,\n  threadId: ThreadMaterialization[\"threadId\"],\n  sequence: CanonicalSequence,\n) {\n  if (sequence === 0) return EMPTY_TAIL_DIGEST;\n\n  const digests = yield* journal\n    .getTailDigestAt(threadId, sequence)\n    .pipe(Effect.mapError((error) => storeError(\"read checkpoint digest\", error)));\n\n  if (digests.length !== 1) {\n    return yield* CheckpointRejected.make({\n      threadId,\n      reason: \"digest-mismatch\",\n    });\n  }\n\n  return yield* Schema.decodeUnknownEffect(Digest)(digests[0]).pipe(\n    Effect.mapError((error) => schemaStoreError(\"decode checkpoint digest\", error)),\n  );\n});\n\nconst groupByKey = <A>(\n  rows: ReadonlyArray<A>,\n  key: (row: A) => string,\n): ReadonlyMap<string, ReadonlyArray<A>> => {\n  const grouped = new Map<string, Array<A>>();\n\n  for (const row of rows) {\n    const existing = grouped.get(key(row));\n\n    if (existing === undefined) {\n      grouped.set(key(row), [row]);\n    } else {\n      existing.push(row);\n    }\n  }\n\n  return grouped;\n};\n\n/**\n * Opt-in full integrity audit (`verifyOnOpen`). Every stored payload is decoded, re-encoded,\n * and re-digested against the canonical chain. Routine opens skip this scan: per-operation\n * Schema decoding plus the digest chain already fail clearly on corrupt rows.\n */\nconst decodeStartupPayloads = Effect.fn(\"DoThreadStore.decodeStartupPayloads\")(function* (\n  journal: DoJournal,\n  crypto: Crypto.Crypto,\n) {\n  const stored = yield* journal.scanStoredPayloads();\n\n  const batches = yield* Effect.forEach(stored.batches, (batch) =>\n    Schema.decodeEffect(Schema.fromJsonString(CanonicalBatch))(batch.batch_json).pipe(\n      Effect.map((decoded) => ({ decoded, row: batch })),\n      Effect.mapError((error) =>\n        DoStorageCorruptionError.make({\n          table: \"effect_agent_canonical_batches\",\n          rowKey: `${batch.thread_id}/${batch.batch_id}`,\n          message: error.message,\n        }),\n      ),\n    ),\n  );\n\n  const records = yield* Effect.forEach(stored.records, (record) =>\n    Schema.decodeEffect(Schema.fromJsonString(CanonicalRecord))(record.record_json).pipe(\n      Effect.map((decoded) => ({ decoded, row: record })),\n      Effect.mapError((error) =>\n        DoStorageCorruptionError.make({\n          table: \"effect_agent_canonical_records\",\n          rowKey: `${record.thread_id}/${record.sequence}`,\n          message: error.message,\n        }),\n      ),\n    ),\n  );\n\n  const checkpoints = yield* Effect.forEach(stored.checkpoints, (checkpoint) =>\n    Schema.decodeEffect(Schema.fromJsonString(ThreadCheckpoint))(checkpoint.checkpoint_json).pipe(\n      Effect.map((decoded) => ({ decoded, row: checkpoint })),\n      Effect.mapError((error) =>\n        DoStorageCorruptionError.make({\n          table: \"effect_agent_checkpoints\",\n          rowKey: `${checkpoint.thread_id}/${checkpoint.through_sequence}`,\n          message: error.message,\n        }),\n      ),\n    ),\n  );\n\n  const batchesByThread = groupByKey(batches, ({ row }) => row.thread_id);\n  const recordsByThread = groupByKey(records, ({ row }) => row.thread_id);\n  const checkpointsByThread = groupByKey(checkpoints, ({ row }) => row.thread_id);\n  const materializedIds = new Set(stored.threads.map((thread) => thread.thread_id));\n\n  for (const thread of stored.threads) {\n    const threadBatches = batchesByThread.get(thread.thread_id) ?? [];\n    const threadRecords = recordsByThread.get(thread.thread_id) ?? [];\n    const threadCheckpoints = checkpointsByThread.get(thread.thread_id) ?? [];\n    const recordsByBatch = groupByKey(threadRecords, ({ row }) => row.batch_id);\n    let previousDigest = EMPTY_TAIL_DIGEST;\n    let expectedSequence = 1;\n    const tailDigests = new Map<number, string>([[0, EMPTY_TAIL_DIGEST]]);\n\n    for (const { decoded: canonicalBatch, row: batchRow } of threadBatches) {\n      const key = `${batchRow.thread_id}/${batchRow.batch_id}`;\n\n      if (\n        canonicalBatch.batchId !== batchRow.batch_id ||\n        batchRow.first_sequence !== expectedSequence ||\n        batchRow.last_sequence !== batchRow.first_sequence + canonicalBatch.records.length - 1\n      ) {\n        return yield* DoStorageCorruptionError.make({\n          table: \"effect_agent_canonical_batches\",\n          rowKey: key,\n          message: \"Canonical batch identity, sequence, or record count is inconsistent.\",\n        });\n      }\n\n      const digest = yield* digestCanonicalBatch(previousDigest, canonicalBatch).pipe(\n        Effect.provideService(Crypto.Crypto, crypto),\n        Effect.mapError((error) =>\n          DoStorageCorruptionError.make({\n            table: \"effect_agent_canonical_batches\",\n            rowKey: key,\n            message: error.message,\n          }),\n        ),\n      );\n\n      if (batchRow.batch_digest !== digest || batchRow.tail_digest !== digest) {\n        return yield* DoStorageCorruptionError.make({\n          table: \"effect_agent_canonical_batches\",\n          rowKey: key,\n          message: \"Canonical batch digest does not match its decoded content and prior tail.\",\n        });\n      }\n\n      const batchRecords = recordsByBatch.get(batchRow.batch_id) ?? [];\n\n      if (batchRecords.length !== canonicalBatch.records.length) {\n        return yield* DoStorageCorruptionError.make({\n          table: \"effect_agent_canonical_records\",\n          rowKey: key,\n          message: \"Canonical batch and record-table counts differ.\",\n        });\n      }\n      for (let index = 0; index < canonicalBatch.records.length; index++) {\n        const expectedRecord = canonicalBatch.records[index];\n        const storedRecord = batchRecords[index];\n\n        const expectedJson = yield* Schema.encodeEffect(Schema.fromJsonString(CanonicalRecord))(\n          expectedRecord,\n        ).pipe(\n          Effect.mapError((error) =>\n            DoStorageCorruptionError.make({\n              table: \"effect_agent_canonical_batches\",\n              rowKey: key,\n              message: error.message,\n            }),\n          ),\n        );\n\n        const storedJson = yield* Schema.encodeEffect(Schema.fromJsonString(CanonicalRecord))(\n          storedRecord.decoded,\n        ).pipe(\n          Effect.mapError((error) =>\n            DoStorageCorruptionError.make({\n              table: \"effect_agent_canonical_records\",\n              rowKey: `${key}/${storedRecord.row.sequence}`,\n              message: error.message,\n            }),\n          ),\n        );\n\n        if (\n          storedRecord.row.sequence !== batchRow.first_sequence + index ||\n          storedRecord.row.record_id !== expectedRecord.recordId ||\n          expectedJson !== storedJson\n        ) {\n          return yield* DoStorageCorruptionError.make({\n            table: \"effect_agent_canonical_records\",\n            rowKey: `${key}/${storedRecord.row.sequence}`,\n            message: \"Canonical record identity, sequence, or payload differs from its batch.\",\n          });\n        }\n      }\n\n      previousDigest = digest;\n      expectedSequence = batchRow.last_sequence + 1;\n      tailDigests.set(batchRow.last_sequence, digest);\n    }\n\n    if (\n      threadRecords.length !== thread.tail_sequence ||\n      thread.tail_sequence !== expectedSequence - 1 ||\n      thread.tail_digest !== previousDigest\n    ) {\n      return yield* DoStorageCorruptionError.make({\n        table: \"effect_agent_threads\",\n        rowKey: thread.thread_id,\n        message: \"Thread tail does not match its canonical batch chain.\",\n      });\n    }\n\n    for (const checkpoint of threadCheckpoints) {\n      if (\n        checkpoint.decoded.threadId !== thread.thread_id ||\n        checkpoint.decoded.throughSequence !== checkpoint.row.through_sequence ||\n        checkpoint.decoded.tailDigest !== checkpoint.row.tail_digest ||\n        tailDigests.get(checkpoint.row.through_sequence) !== checkpoint.row.tail_digest\n      ) {\n        return yield* DoStorageCorruptionError.make({\n          table: \"effect_agent_checkpoints\",\n          rowKey: `${thread.thread_id}/${checkpoint.row.through_sequence}`,\n          message: \"Checkpoint identity or digest is not bound to a canonical batch tail.\",\n        });\n      }\n    }\n  }\n\n  if (\n    batches.some(({ row }) => !materializedIds.has(row.thread_id)) ||\n    records.some(({ row }) => !materializedIds.has(row.thread_id)) ||\n    checkpoints.some(({ row }) => !materializedIds.has(row.thread_id))\n  ) {\n    return yield* DoStorageCorruptionError.make({\n      table: \"effect_agent_threads\",\n      rowKey: \"startup_scan\",\n      message: \"Canonical rows exist without a materialized Thread.\",\n    });\n  }\n});\n\nconst makeServices = Effect.fn(\"DoThreadStore.makeServices\")(function* () {\n  const config = yield* DoStorageConfig;\n  const failpoint = yield* DoStorageFailpoint;\n  const sql = yield* SqlClientService.SqlClient;\n  const crypto = yield* Crypto.Crypto;\n  const journal = yield* initializeDoJournal(sql, failpoint.hit, config.maxStoredValueBytes);\n\n  if (config.verifyOnOpen) {\n    yield* decodeStartupPayloads(journal, crypto);\n  }\n\n  const provideCrypto = <A, E>(effect: Effect.Effect<A, E, Crypto.Crypto>) =>\n    Effect.provideService(effect, Crypto.Crypto, crypto);\n\n  const hitFailpoint = Effect.fn(\n    (location: DoStorageFailpointLocation): Effect.Effect<void, ThreadStoreError> =>\n      failpoint\n        .hit(location)\n        .pipe(Effect.mapError((error) => storeError(`storage failpoint ${location}`, error))),\n  );\n\n  const materialize: ThreadStore[\"Service\"][\"materialize\"] = Effect.fn(\"DoThreadStore.materialize\")(\n    function* (request: ThreadMaterialization) {\n      const validated = yield* Schema.decodeUnknownEffect(Schema.toType(ThreadMaterialization))(\n        request,\n      ).pipe(Effect.mapError((error) => schemaStoreError(\"validate materialization\", error)));\n\n      const now = yield* Clock.currentTimeMillis;\n\n      yield* hitFailpoint(\"materialize:before\");\n      yield* journal\n        .materialize(\n          validated.threadId,\n          new Date(now).toISOString(),\n          EMPTY_TAIL_DIGEST,\n          validated.producerEpoch,\n        )\n        .pipe(\n          Effect.mapError((error) =>\n            error._tag === \"DoFenceRejected\"\n              ? mapFence(validated.threadId, error)\n              : storeError(\"materialize thread\", error),\n          ),\n        );\n      yield* hitFailpoint(\"materialize:after\");\n    },\n  );\n\n  const append: ThreadStore[\"Service\"][\"append\"] = Effect.fn(\"DoThreadStore.append\")(function* (\n    request: FencedAppendRequest,\n  ) {\n    const validated = yield* Schema.decodeUnknownEffect(Schema.toType(FencedAppendRequest))(\n      request,\n    ).pipe(Effect.mapError((error) => schemaStoreError(\"validate canonical append\", error)));\n\n    yield* requireThread(journal, validated.threadId);\n\n    const tailDigest = yield* provideCrypto(\n      digestCanonicalBatch(validated.expectedTailDigest, validated.batch),\n    ).pipe(Effect.mapError((error) => storeError(\"digest canonical append\", error)));\n\n    const batchJson = yield* encodeCanonicalBatch(validated.batch);\n\n    const rawRecords = yield* Effect.forEach(validated.batch.records, (record) =>\n      encodeCanonicalRecord(record).pipe(\n        Effect.map((recordJson) => ({\n          recordId: record.recordId,\n          recordJson,\n        })),\n      ),\n    );\n\n    const rawRequest = yield* Schema.decodeUnknownEffect(RawAppendRequest)({\n      threadId: validated.threadId,\n      batchId: validated.batch.batchId,\n      batchDigest: tailDigest,\n      batchJson,\n      expectedTailSequence: validated.expectedTailSequence,\n      expectedTailDigest: validated.expectedTailDigest,\n      producerEpoch: validated.producerEpoch,\n      records: rawRecords,\n      tailDigest,\n    }).pipe(Effect.mapError((error) => schemaStoreError(\"encode canonical append\", error)));\n\n    yield* hitFailpoint(\"append:before\");\n\n    const result = yield* journal.append(rawRequest).pipe(\n      Effect.mapError((error) => {\n        if (isDoFenceRejected(error)) {\n          return mapFence(validated.threadId, error);\n        }\n        if (isDoAppendConflict(error)) {\n          return error.actualTailSequence !== undefined && isDigest(error.actualTailDigest)\n            ? AppendConflict.make({\n                threadId: validated.threadId,\n                batchId: validated.batch.batchId,\n                reason: error.reason,\n                actualTailSequence: error.actualTailSequence,\n                actualTailDigest: error.actualTailDigest,\n              })\n            : AppendConflict.make({\n                threadId: validated.threadId,\n                batchId: validated.batch.batchId,\n                reason: error.reason,\n              });\n        }\n\n        return storeError(\"append canonical batch\", error);\n      }),\n      Effect.flatMap((result) =>\n        Schema.decodeUnknownEffect(AppendResult)(result).pipe(\n          Effect.mapError((error) => schemaStoreError(\"decode append result\", error)),\n        ),\n      ),\n    );\n\n    yield* hitFailpoint(\"append:after\");\n\n    return result;\n  });\n\n  const loadRecords = Effect.fn(\"DoThreadStore.loadRecords\")(function* (request: RawReadRequest) {\n    const result = yield* journal\n      .read(request)\n      .pipe(Effect.mapError((error) => storeError(\"read canonical records\", error)));\n\n    return {\n      count: result.count,\n      records: result.records.pipe(\n        Stream.mapError((error) => storeError(\"read canonical records\", error)),\n        Stream.mapEffect(decodeEnvelope),\n      ),\n    };\n  });\n\n  const readEffect = Effect.fn(\"DoThreadStore.read\")(function* (request: ThreadRead) {\n    const validated = yield* Schema.decodeUnknownEffect(Schema.toType(ThreadRead))(request).pipe(\n      Effect.mapError((error) => schemaStoreError(\"validate thread read\", error)),\n    );\n\n    yield* requireThread(journal, validated.threadId);\n\n    const result = yield* loadRecords(\n      RawReadRequest.make({\n        threadId: validated.threadId,\n        fromSequenceExclusive: validated.afterSequence ?? ZERO_CANONICAL_SEQUENCE,\n        limit: validated.limit,\n      }),\n    );\n\n    return result.records;\n  });\n\n  const read: ThreadStore[\"Service\"][\"read\"] = (request) => Stream.unwrap(readEffect(request));\n\n  const observeEffect = Effect.fn(\"DoThreadStore.observe\")(function* (request: ThreadObservation) {\n    const validated = yield* Schema.decodeUnknownEffect(Schema.toType(ThreadObservation))(\n      request,\n    ).pipe(Effect.mapError((error) => schemaStoreError(\"validate thread observation\", error)));\n\n    yield* requireThread(journal, validated.threadId);\n    const initialSequence = yield* parseOffset(validated.threadId, validated.afterOffset);\n    const cursor = yield* Ref.make(initialSequence);\n\n    const poll = Effect.fn(\"DoThreadStore.observePoll\")(function* () {\n      const fromSequenceExclusive = yield* Ref.get(cursor);\n\n      const result = yield* loadRecords(\n        RawReadRequest.make({\n          threadId: validated.threadId,\n          fromSequenceExclusive,\n          limit: 1_024,\n        }),\n      );\n\n      if (result.count === 0) {\n        yield* Effect.sleep(config.observationPollInterval);\n\n        return Stream.empty;\n      }\n\n      return result.records.pipe(Stream.tap((record) => Ref.set(cursor, record.sequence)));\n    });\n\n    return Stream.fromEffectRepeat(poll()).pipe(Stream.flatten);\n  });\n\n  const observe: ThreadStore[\"Service\"][\"observe\"] = (request) =>\n    Stream.unwrap(observeEffect(request));\n\n  const exportThread: ThreadStore[\"Service\"][\"export\"] = Effect.fn(\"DoThreadStore.export\")(\n    function* (request: ThreadExportRequest) {\n      const validated = yield* Schema.decodeUnknownEffect(Schema.toType(ThreadExportRequest))(\n        request,\n      ).pipe(Effect.mapError((error) => schemaStoreError(\"validate thread export\", error)));\n\n      yield* requireThread(journal, validated.threadId);\n\n      const exported = yield* journal\n        .exportThread(validated.threadId)\n        .pipe(Effect.mapError((error) => storeError(\"export thread\", error)));\n\n      const records = yield* Effect.forEach(exported.records, decodeEnvelope);\n\n      if (records.length > 65_536) {\n        return yield* ThreadStoreError.make({\n          operation: \"decode thread export\",\n          message: \"The thread exceeds the current export record limit.\",\n        });\n      }\n\n      const tailDigest = yield* Schema.decodeUnknownEffect(Digest)(\n        exported.thread.tail_digest,\n      ).pipe(Effect.mapError((error) => schemaStoreError(\"decode export tail digest\", error)));\n\n      return ThreadExport.make({\n        format: \"effect-agent/thread@1\",\n        threadId: validated.threadId,\n        tailSequence: exported.thread.tail_sequence,\n        tailDigest,\n        records,\n      });\n    },\n  );\n\n  const inspectTail: ThreadStore[\"Service\"][\"inspectTail\"] = Effect.fn(\"DoThreadStore.inspectTail\")(\n    function* (request: ThreadTailRequest) {\n      const validated = yield* Schema.decodeUnknownEffect(Schema.toType(ThreadTailRequest))(\n        request,\n      ).pipe(Effect.mapError((error) => schemaStoreError(\"validate tail inspection\", error)));\n\n      const thread = yield* requireThread(journal, validated.threadId);\n\n      const tailDigest = yield* Schema.decodeUnknownEffect(Digest)(thread.tail_digest).pipe(\n        Effect.mapError((error) => schemaStoreError(\"decode tail digest\", error)),\n      );\n\n      return ThreadTail.make({\n        threadId: validated.threadId,\n        tailSequence: thread.tail_sequence,\n        tailDigest,\n        producerEpoch: thread.producer_epoch,\n      });\n    },\n  );\n\n  const saveCheckpoint: ThreadCheckpoints[\"save\"] = Effect.fn(\"DoThreadStore.saveCheckpoint\")(\n    function* (request: SaveCheckpointRequest) {\n      const validated = yield* Schema.decodeUnknownEffect(Schema.toType(SaveCheckpointRequest))(\n        request,\n      ).pipe(Effect.mapError((error) => schemaStoreError(\"validate checkpoint\", error)));\n\n      const thread = yield* requireThread(journal, validated.checkpoint.threadId);\n\n      if (validated.checkpoint.throughSequence > thread.tail_sequence) {\n        return yield* CheckpointRejected.make({\n          threadId: validated.checkpoint.threadId,\n          reason: \"ahead-of-tail\",\n        });\n      }\n\n      const canonicalDigest = yield* tailDigestAt(\n        journal,\n        validated.checkpoint.threadId,\n        validated.checkpoint.throughSequence,\n      );\n\n      if (canonicalDigest !== validated.checkpoint.tailDigest) {\n        return yield* CheckpointRejected.make({\n          threadId: validated.checkpoint.threadId,\n          reason: \"digest-mismatch\",\n        });\n      }\n      const checkpointJson = yield* encodeCheckpoint(validated.checkpoint);\n\n      const raw = RawCheckpoint.make({\n        threadId: validated.checkpoint.threadId,\n        throughSequence: validated.checkpoint.throughSequence,\n        tailDigest: validated.checkpoint.tailDigest,\n        checkpointJson,\n      });\n\n      yield* hitFailpoint(\"save-checkpoint:before\");\n      yield* journal.saveCheckpoint(raw).pipe(\n        Effect.mapError((error) =>\n          isDoCheckpointConflict(error)\n            ? CheckpointRejected.make({\n                threadId: validated.checkpoint.threadId,\n                reason: \"digest-mismatch\",\n              })\n            : storeError(\"save checkpoint\", error),\n        ),\n      );\n      yield* hitFailpoint(\"save-checkpoint:after\");\n    },\n  );\n\n  const loadCheckpoint: ThreadCheckpoints[\"load\"] = Effect.fn(\"DoThreadStore.loadCheckpoint\")(\n    function* (request: LoadCheckpointRequest) {\n      const validated = yield* Schema.decodeUnknownEffect(Schema.toType(LoadCheckpointRequest))(\n        request,\n      ).pipe(Effect.mapError((error) => schemaStoreError(\"validate checkpoint lookup\", error)));\n\n      const thread = yield* requireThread(journal, validated.threadId);\n\n      const rows = yield* journal\n        .loadCheckpoint(validated.threadId, validated.atOrBeforeSequence ?? thread.tail_sequence)\n        .pipe(Effect.mapError((error) => storeError(\"load checkpoint\", error)));\n\n      if (rows.length === 0) return Option.none();\n      if (rows.length !== 1) {\n        return yield* ThreadStoreError.make({\n          operation: \"load checkpoint\",\n          message: `Expected at most one checkpoint row but found ${rows.length}.`,\n        });\n      }\n      const row = rows[0];\n      const checkpoint = yield* decodeCheckpoint(row.checkpoint_json);\n\n      if (\n        row.thread_id !== validated.threadId ||\n        checkpoint.threadId !== row.thread_id ||\n        checkpoint.throughSequence !== row.through_sequence ||\n        checkpoint.tailDigest !== row.tail_digest\n      ) {\n        return yield* ThreadStoreError.make({\n          operation: \"load checkpoint\",\n          message: \"Stored checkpoint metadata does not match its canonical row.\",\n        });\n      }\n\n      const canonicalDigest = yield* tailDigestAt(\n        journal,\n        checkpoint.threadId,\n        checkpoint.throughSequence,\n      );\n\n      if (canonicalDigest !== checkpoint.tailDigest) {\n        return yield* CheckpointRejected.make({\n          threadId: checkpoint.threadId,\n          reason: \"digest-mismatch\",\n        });\n      }\n\n      return Option.some(checkpoint);\n    },\n  );\n\n  const threadStore = ThreadStore.of({\n    append,\n    export: exportThread,\n    inspectTail,\n    materialize,\n    observe,\n    read,\n    checkpoints: { save: saveCheckpoint, load: loadCheckpoint },\n  });\n\n  return Context.make(ThreadStore, threadStore);\n});\n\n/**\n * Durable Object Thread Store implementation with configuration, failpoint, SQL, and\n * Crypto authority kept visible in its input channel.\n */\nexport const threadStoreLayer: Layer.Layer<\n  ThreadStore,\n  DoStorageInitializationError,\n  DoStorageConfig | DoStorageFailpoint | SqlClientService.SqlClient | Crypto.Crypto\n> = Layer.effectContext(makeServices());\n\n/**\n * Validated Durable Object storage configuration Layer with the documented defaults applied.\n * Shared by the ThreadStore and SubmissionLedger convenience layers so their defaults\n * cannot drift.\n */\nexport const storageConfigLayer = (\n  options: DoStorageOptions,\n): Layer.Layer<DoStorageConfig, DoStorageError> =>\n  Layer.effect(DoStorageConfig)(\n    Schema.decodeUnknownEffect(DoStorageConfigValue)({\n      observationPollInterval: options.observationPollInterval ?? 25,\n      ownershipLeaseDuration:\n        options.ownershipLeaseDuration ?? Duration.toMillis(DEFAULT_OWNERSHIP_LEASE_DURATION),\n      maxStoredValueBytes: options.maxStoredValueBytes ?? DEFAULT_MAX_STORED_VALUE_BYTES,\n      verifyOnOpen: options.verifyOnOpen ?? false,\n    }).pipe(\n      Effect.mapError((error) =>\n        DoStorageError.make({\n          cause: error,\n          operation: \"configure Durable Object storage\",\n          message: error.message,\n        }),\n      ),\n    ),\n  );\n\n/** The failpoint Layer selected by convenience options: explicit handler or the no-op default. */\nexport const storageFailpointLayer = (\n  options: DoStorageOptions,\n): Layer.Layer<DoStorageFailpoint> =>\n  options.failpoint === undefined\n    ? DoStorageFailpoint.layer\n    : Layer.succeed(DoStorageFailpoint)({ hit: options.failpoint });\n\n/**\n * A composition-root convenience Layer for canonical Threads inside one Durable Object,\n * built over `ctx.storage`. Durable accepted work is served by the separate SubmissionLedger\n * port; point both at the SAME `ctx.storage` so claims fence the same producer epochs\n * (ADR-0011 D7's \"same file\" rule, transposed to one object's private database).\n */\nexport const layer = (\n  options: DoStorageOptions,\n): Layer.Layer<ThreadStore, DoStorageInitializationError> =>\n  Layer.unwrap(\n    Effect.map(DoStorageConfig, (config) =>\n      threadStoreLayer.pipe(\n        Layer.provide(\n          Layer.mergeAll(\n            Layer.succeed(DoStorageConfig)(config),\n            storageFailpointLayer(options),\n            SqliteClient.layer({ storage: options.storage }),\n            BrowserCrypto.layer,\n          ),\n        ),\n      ),\n    ),\n  ).pipe(Layer.provide(storageConfigLayer(options)));\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsGA,MAAM,aAAa,OAAO,OAAO,MAAM,OAAO,YAAY,IAAQ,CAAC;AACnE,MAAM,mBAAmB;AACzB,MAAM,0BAA0B,OAAO,WAAW,iBAAiB,CAAC,CAAC,CAAC;AACtE,MAAM,WAAW,OAAO,GAAG,MAAM;AACjC,MAAM,oBAAoB,OAAO,GAAG,eAAe;AACnD,MAAM,qBAAqB,OAAO,GAAG,gBAAgB;AACrD,MAAM,yBAAyB,OAAO,GAAG,oBAAoB;AAE7D,MAAM,cAAc,WAAmB,UACrC,iBAAiB,KAAK;CACpB,OAAO;CACP;CACA,SAAS,MAAM;AACjB,CAAC;AAEH,MAAM,oBAAoB,WAAmB,UAC3C,iBAAiB,KAAK;CACpB,OAAO;CACP;CACA,SAAS,MAAM;AACjB,CAAC;AAEH,MAAM,aAAa,OAAO,GAAG,WAC3B,UACA,UACuD;CACvD,OAAO,OAAO,OAAO,oBAAoB,iBAAiB,CAAC,CAAC,QAAQ,CAAC,CAAC,KACpE,OAAO,SAAS,sBACd,OAAO,oBAAoB,iBAAiB,CAAC,CAC3C,GAAG,mBAAmB,mBAAmB,QAAQ,EAAE,GAAG,mBACxD,CACF,GACA,OAAO,UAAU,UAAU,iBAAiB,6BAA6B,KAAK,CAAC,CACjF;AACF,CAAC;AAED,MAAM,cAAc,OAAO,GAAG,WAC5B,UACA,QACuD;CACvD,IAAI,WAAW,KAAA,GAAW,OAAO;CAEjC,MAAM,OAAO,OAAO,OAAO,oBAAoB,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,KACjE,OAAO,UAAU,UAAU,iBAAiB,6BAA6B,KAAK,CAAC,CACjF;CAEA,MAAM,eAAe,GAAG,mBAAmB,mBAAmB,QAAQ,EAAE;CAExE,IAAI,CAAC,KAAK,WAAW,YAAY,GAC/B,OAAO,OAAO,iBAAiB,KAAK;EAClC,WAAW;EACX,SAAS;CACX,CAAC;CAEH,MAAM,eAAe,KAAK,MAAM,aAAa,MAAM;CAEnD,IAAI,CAAC,oBAAoB,KAAK,YAAY,GACxC,OAAO,OAAO,iBAAiB,KAAK;EAClC,WAAW;EACX,SAAS;CACX,CAAC;CAGH,OAAO,OAAO,OAAO,oBAAoB,iBAAiB,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,KAChF,OAAO,UAAU,UAAU,iBAAiB,6BAA6B,KAAK,CAAC,CACjF;AACF,CAAC;AAED,MAAM,YAAY,UAA6C,UAC7D,cAAc,KAAK;CACjB;CACA,aAAa,MAAM;CACnB,gBAAgB,MAAM;AACxB,CAAC;AAEH,MAAM,wBAAwB,OAAO,GAAG,WACtC,QAC4C;CAC5C,OAAO,OAAO,OAAO,aAAa,OAAO,eAAe,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAChF,OAAO,UAAU,UAAU,iBAAiB,2BAA2B,KAAK,CAAC,CAC/E;AACF,CAAC;AAED,MAAM,uBAAuB,OAAO,GAAG,WACrC,OAC4C;CAC5C,OAAO,OAAO,OAAO,aAAa,OAAO,eAAe,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAC9E,OAAO,UAAU,UAAU,iBAAiB,0BAA0B,KAAK,CAAC,CAC9E;AACF,CAAC;AAED,MAAM,mBAAmB,OAAO,GAAG,WACjC,YAC4C;CAC5C,OAAO,OAAO,OAAO,aAAa,OAAO,eAAe,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KACrF,OAAO,UAAU,UAAU,iBAAiB,qBAAqB,KAAK,CAAC,CACzE;AACF,CAAC;AAED,MAAM,iBAAiB,OAAO,GAAG,WAAW,KAKzC;CACD,MAAM,SAAS,OAAO,OAAO,aAAa,OAAO,eAAe,eAAe,CAAC,CAAC,CAC/E,IAAI,WACN,CAAC,CAAC,KACA,OAAO,UAAU,UACf,iBAAiB,KAAK;EACpB,WAAW;EACX,SAAS,MAAM;CACjB,CAAC,CACH,CACF;CAEA,MAAM,WAAW,OAAO,OAAO,oBAAoB,wBAAwB,OAAO,QAAQ,CAAC,CACzF,IAAI,SACN,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,0BAA0B,KAAK,CAAC,CAAC;CAEpF,MAAM,SAAS,OAAO,WAAW,UAAU,IAAI,QAAQ;CAEvD,MAAM,UAAU,OAAO,OAAO,oBAAoB,wBAAwB,OAAO,OAAO,CAAC,CACvF,IAAI,QACN,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,yBAAyB,KAAK,CAAC,CAAC;CAEnF,OAAO,wBAAwB,KAAK;EAClC;EACA;EACA,UAAU,IAAI;EACd;EACA;CACF,CAAC;AACH,CAAC;AAED,MAAM,mBAAmB,OAAO,GAAG,WACjC,gBACsD;CACtD,OAAO,OAAO,OAAO,aAAa,OAAO,eAAe,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,KACzF,OAAO,UAAU,UAAU,iBAAiB,qBAAqB,KAAK,CAAC,CACzE;AACF,CAAC;AAED,MAAM,gBAAgB,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAC7D,SACA,UACA;CACA,MAAM,OAAO,OAAO,QACjB,UAAU,QAAQ,CAAC,CACnB,KAAK,OAAO,UAAU,UAAU,WAAW,eAAe,KAAK,CAAC,CAAC;CAEpE,IAAI,KAAK,WAAW,GAClB,OAAO,OAAO,sBAAsB,KAAK,EAAE,SAAS,CAAC;CAGvD,OAAO,KAAK;AACd,CAAC;AAED,MAAM,eAAe,OAAO,GAAG,4BAA4B,CAAC,CAAC,WAC3D,SACA,UACA,UACA;CACA,IAAI,aAAa,GAAG,OAAO;CAE3B,MAAM,UAAU,OAAO,QACpB,gBAAgB,UAAU,QAAQ,CAAC,CACnC,KAAK,OAAO,UAAU,UAAU,WAAW,0BAA0B,KAAK,CAAC,CAAC;CAE/E,IAAI,QAAQ,WAAW,GACrB,OAAO,OAAO,mBAAmB,KAAK;EACpC;EACA,QAAQ;CACV,CAAC;CAGH,OAAO,OAAO,OAAO,oBAAoB,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAC3D,OAAO,UAAU,UAAU,iBAAiB,4BAA4B,KAAK,CAAC,CAChF;AACF,CAAC;AAED,MAAM,cACJ,MACA,QAC0C;CAC1C,MAAM,0BAAU,IAAI,IAAsB;CAE1C,KAAK,MAAM,OAAO,MAAM;EACtB,MAAM,WAAW,QAAQ,IAAI,IAAI,GAAG,CAAC;EAErC,IAAI,aAAa,KAAA,GACf,QAAQ,IAAI,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC;OAE3B,SAAS,KAAK,GAAG;CAErB;CAEA,OAAO;AACT;;;;;;AAOA,MAAM,wBAAwB,OAAO,GAAG,qCAAqC,CAAC,CAAC,WAC7E,SACA,QACA;CACA,MAAM,SAAS,OAAO,QAAQ,mBAAmB;CAEjD,MAAM,UAAU,OAAO,OAAO,QAAQ,OAAO,UAAU,UACrD,OAAO,aAAa,OAAO,eAAe,cAAc,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC,KAC3E,OAAO,KAAK,aAAa;EAAE;EAAS,KAAK;CAAM,EAAE,GACjD,OAAO,UAAU,UACf,yBAAyB,KAAK;EAC5B,OAAO;EACP,QAAQ,GAAG,MAAM,UAAU,GAAG,MAAM;EACpC,SAAS,MAAM;CACjB,CAAC,CACH,CACF,CACF;CAEA,MAAM,UAAU,OAAO,OAAO,QAAQ,OAAO,UAAU,WACrD,OAAO,aAAa,OAAO,eAAe,eAAe,CAAC,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,KAC9E,OAAO,KAAK,aAAa;EAAE;EAAS,KAAK;CAAO,EAAE,GAClD,OAAO,UAAU,UACf,yBAAyB,KAAK;EAC5B,OAAO;EACP,QAAQ,GAAG,OAAO,UAAU,GAAG,OAAO;EACtC,SAAS,MAAM;CACjB,CAAC,CACH,CACF,CACF;CAEA,MAAM,cAAc,OAAO,OAAO,QAAQ,OAAO,cAAc,eAC7D,OAAO,aAAa,OAAO,eAAe,gBAAgB,CAAC,CAAC,CAAC,WAAW,eAAe,CAAC,CAAC,KACvF,OAAO,KAAK,aAAa;EAAE;EAAS,KAAK;CAAW,EAAE,GACtD,OAAO,UAAU,UACf,yBAAyB,KAAK;EAC5B,OAAO;EACP,QAAQ,GAAG,WAAW,UAAU,GAAG,WAAW;EAC9C,SAAS,MAAM;CACjB,CAAC,CACH,CACF,CACF;CAEA,MAAM,kBAAkB,WAAW,UAAU,EAAE,UAAU,IAAI,SAAS;CACtE,MAAM,kBAAkB,WAAW,UAAU,EAAE,UAAU,IAAI,SAAS;CACtE,MAAM,sBAAsB,WAAW,cAAc,EAAE,UAAU,IAAI,SAAS;CAC9E,MAAM,kBAAkB,IAAI,IAAI,OAAO,QAAQ,KAAK,WAAW,OAAO,SAAS,CAAC;CAEhF,KAAK,MAAM,UAAU,OAAO,SAAS;EACnC,MAAM,gBAAgB,gBAAgB,IAAI,OAAO,SAAS,KAAK,CAAC;EAChE,MAAM,gBAAgB,gBAAgB,IAAI,OAAO,SAAS,KAAK,CAAC;EAChE,MAAM,oBAAoB,oBAAoB,IAAI,OAAO,SAAS,KAAK,CAAC;EACxE,MAAM,iBAAiB,WAAW,gBAAgB,EAAE,UAAU,IAAI,QAAQ;EAC1E,IAAI,iBAAiB;EACrB,IAAI,mBAAmB;EACvB,MAAM,8BAAc,IAAI,IAAoB,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC;EAEpE,KAAK,MAAM,EAAE,SAAS,gBAAgB,KAAK,cAAc,eAAe;GACtE,MAAM,MAAM,GAAG,SAAS,UAAU,GAAG,SAAS;GAE9C,IACE,eAAe,YAAY,SAAS,YACpC,SAAS,mBAAmB,oBAC5B,SAAS,kBAAkB,SAAS,iBAAiB,eAAe,QAAQ,SAAS,GAErF,OAAO,OAAO,yBAAyB,KAAK;IAC1C,OAAO;IACP,QAAQ;IACR,SAAS;GACX,CAAC;GAGH,MAAM,SAAS,OAAO,qBAAqB,gBAAgB,cAAc,CAAC,CAAC,KACzE,OAAO,eAAe,OAAO,QAAQ,MAAM,GAC3C,OAAO,UAAU,UACf,yBAAyB,KAAK;IAC5B,OAAO;IACP,QAAQ;IACR,SAAS,MAAM;GACjB,CAAC,CACH,CACF;GAEA,IAAI,SAAS,iBAAiB,UAAU,SAAS,gBAAgB,QAC/D,OAAO,OAAO,yBAAyB,KAAK;IAC1C,OAAO;IACP,QAAQ;IACR,SAAS;GACX,CAAC;GAGH,MAAM,eAAe,eAAe,IAAI,SAAS,QAAQ,KAAK,CAAC;GAE/D,IAAI,aAAa,WAAW,eAAe,QAAQ,QACjD,OAAO,OAAO,yBAAyB,KAAK;IAC1C,OAAO;IACP,QAAQ;IACR,SAAS;GACX,CAAC;GAEH,KAAK,IAAI,QAAQ,GAAG,QAAQ,eAAe,QAAQ,QAAQ,SAAS;IAClE,MAAM,iBAAiB,eAAe,QAAQ;IAC9C,MAAM,eAAe,aAAa;IAElC,MAAM,eAAe,OAAO,OAAO,aAAa,OAAO,eAAe,eAAe,CAAC,CAAC,CACrF,cACF,CAAC,CAAC,KACA,OAAO,UAAU,UACf,yBAAyB,KAAK;KAC5B,OAAO;KACP,QAAQ;KACR,SAAS,MAAM;IACjB,CAAC,CACH,CACF;IAEA,MAAM,aAAa,OAAO,OAAO,aAAa,OAAO,eAAe,eAAe,CAAC,CAAC,CACnF,aAAa,OACf,CAAC,CAAC,KACA,OAAO,UAAU,UACf,yBAAyB,KAAK;KAC5B,OAAO;KACP,QAAQ,GAAG,IAAI,GAAG,aAAa,IAAI;KACnC,SAAS,MAAM;IACjB,CAAC,CACH,CACF;IAEA,IACE,aAAa,IAAI,aAAa,SAAS,iBAAiB,SACxD,aAAa,IAAI,cAAc,eAAe,YAC9C,iBAAiB,YAEjB,OAAO,OAAO,yBAAyB,KAAK;KAC1C,OAAO;KACP,QAAQ,GAAG,IAAI,GAAG,aAAa,IAAI;KACnC,SAAS;IACX,CAAC;GAEL;GAEA,iBAAiB;GACjB,mBAAmB,SAAS,gBAAgB;GAC5C,YAAY,IAAI,SAAS,eAAe,MAAM;EAChD;EAEA,IACE,cAAc,WAAW,OAAO,iBAChC,OAAO,kBAAkB,mBAAmB,KAC5C,OAAO,gBAAgB,gBAEvB,OAAO,OAAO,yBAAyB,KAAK;GAC1C,OAAO;GACP,QAAQ,OAAO;GACf,SAAS;EACX,CAAC;EAGH,KAAK,MAAM,cAAc,mBACvB,IACE,WAAW,QAAQ,aAAa,OAAO,aACvC,WAAW,QAAQ,oBAAoB,WAAW,IAAI,oBACtD,WAAW,QAAQ,eAAe,WAAW,IAAI,eACjD,YAAY,IAAI,WAAW,IAAI,gBAAgB,MAAM,WAAW,IAAI,aAEpE,OAAO,OAAO,yBAAyB,KAAK;GAC1C,OAAO;GACP,QAAQ,GAAG,OAAO,UAAU,GAAG,WAAW,IAAI;GAC9C,SAAS;EACX,CAAC;CAGP;CAEA,IACE,QAAQ,MAAM,EAAE,UAAU,CAAC,gBAAgB,IAAI,IAAI,SAAS,CAAC,KAC7D,QAAQ,MAAM,EAAE,UAAU,CAAC,gBAAgB,IAAI,IAAI,SAAS,CAAC,KAC7D,YAAY,MAAM,EAAE,UAAU,CAAC,gBAAgB,IAAI,IAAI,SAAS,CAAC,GAEjE,OAAO,OAAO,yBAAyB,KAAK;EAC1C,OAAO;EACP,QAAQ;EACR,SAAS;CACX,CAAC;AAEL,CAAC;AAED,MAAM,eAAe,OAAO,GAAG,4BAA4B,CAAC,CAAC,aAAa;CACxE,MAAM,SAAS,OAAO;CACtB,MAAM,YAAY,OAAO;CACzB,MAAM,MAAM,OAAO,iBAAiB;CACpC,MAAM,SAAS,OAAO,OAAO;CAC7B,MAAM,UAAU,OAAO,oBAAoB,KAAK,UAAU,KAAK,OAAO,mBAAmB;CAEzF,IAAI,OAAO,cACT,OAAO,sBAAsB,SAAS,MAAM;CAG9C,MAAM,iBAAuB,WAC3B,OAAO,eAAe,QAAQ,OAAO,QAAQ,MAAM;CAErD,MAAM,eAAe,OAAO,IACzB,aACC,UACG,IAAI,QAAQ,CAAC,CACb,KAAK,OAAO,UAAU,UAAU,WAAW,qBAAqB,YAAY,KAAK,CAAC,CAAC,CAC1F;CAEA,MAAM,cAAqD,OAAO,GAAG,2BAA2B,CAAC,CAC/F,WAAW,SAAgC;EACzC,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,qBAAqB,CAAC,CAAC,CACvF,OACF,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,4BAA4B,KAAK,CAAC,CAAC;EAEtF,MAAM,MAAM,OAAO,MAAM;EAEzB,OAAO,aAAa,oBAAoB;EACxC,OAAO,QACJ,YACC,UAAU,UACV,IAAI,KAAK,GAAG,CAAC,CAAC,YAAY,GAC1B,mBACA,UAAU,aACZ,CAAC,CACA,KACC,OAAO,UAAU,UACf,MAAM,SAAS,oBACX,SAAS,UAAU,UAAU,KAAK,IAClC,WAAW,sBAAsB,KAAK,CAC5C,CACF;EACF,OAAO,aAAa,mBAAmB;CACzC,CACF;CAEA,MAAM,SAA2C,OAAO,GAAG,sBAAsB,CAAC,CAAC,WACjF,SACA;EACA,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,mBAAmB,CAAC,CAAC,CACrF,OACF,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,6BAA6B,KAAK,CAAC,CAAC;EAEvF,OAAO,cAAc,SAAS,UAAU,QAAQ;EAEhD,MAAM,aAAa,OAAO,cACxB,qBAAqB,UAAU,oBAAoB,UAAU,KAAK,CACpE,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,WAAW,2BAA2B,KAAK,CAAC,CAAC;EAE/E,MAAM,YAAY,OAAO,qBAAqB,UAAU,KAAK;EAE7D,MAAM,aAAa,OAAO,OAAO,QAAQ,UAAU,MAAM,UAAU,WACjE,sBAAsB,MAAM,CAAC,CAAC,KAC5B,OAAO,KAAK,gBAAgB;GAC1B,UAAU,OAAO;GACjB;EACF,EAAE,CACJ,CACF;EAEA,MAAM,aAAa,OAAO,OAAO,oBAAoB,gBAAgB,CAAC,CAAC;GACrE,UAAU,UAAU;GACpB,SAAS,UAAU,MAAM;GACzB,aAAa;GACb;GACA,sBAAsB,UAAU;GAChC,oBAAoB,UAAU;GAC9B,eAAe,UAAU;GACzB,SAAS;GACT;EACF,CAAC,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,2BAA2B,KAAK,CAAC,CAAC;EAEtF,OAAO,aAAa,eAAe;EAEnC,MAAM,SAAS,OAAO,QAAQ,OAAO,UAAU,CAAC,CAAC,KAC/C,OAAO,UAAU,UAAU;GACzB,IAAI,kBAAkB,KAAK,GACzB,OAAO,SAAS,UAAU,UAAU,KAAK;GAE3C,IAAI,mBAAmB,KAAK,GAC1B,OAAO,MAAM,uBAAuB,KAAA,KAAa,SAAS,MAAM,gBAAgB,IAC5E,eAAe,KAAK;IAClB,UAAU,UAAU;IACpB,SAAS,UAAU,MAAM;IACzB,QAAQ,MAAM;IACd,oBAAoB,MAAM;IAC1B,kBAAkB,MAAM;GAC1B,CAAC,IACD,eAAe,KAAK;IAClB,UAAU,UAAU;IACpB,SAAS,UAAU,MAAM;IACzB,QAAQ,MAAM;GAChB,CAAC;GAGP,OAAO,WAAW,0BAA0B,KAAK;EACnD,CAAC,GACD,OAAO,SAAS,WACd,OAAO,oBAAoB,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,KAC/C,OAAO,UAAU,UAAU,iBAAiB,wBAAwB,KAAK,CAAC,CAC5E,CACF,CACF;EAEA,OAAO,aAAa,cAAc;EAElC,OAAO;CACT,CAAC;CAED,MAAM,cAAc,OAAO,GAAG,2BAA2B,CAAC,CAAC,WAAW,SAAyB;EAC7F,MAAM,SAAS,OAAO,QACnB,KAAK,OAAO,CAAC,CACb,KAAK,OAAO,UAAU,UAAU,WAAW,0BAA0B,KAAK,CAAC,CAAC;EAE/E,OAAO;GACL,OAAO,OAAO;GACd,SAAS,OAAO,QAAQ,KACtB,OAAO,UAAU,UAAU,WAAW,0BAA0B,KAAK,CAAC,GACtE,OAAO,UAAU,cAAc,CACjC;EACF;CACF,CAAC;CAED,MAAM,aAAa,OAAO,GAAG,oBAAoB,CAAC,CAAC,WAAW,SAAqB;EACjF,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KACtF,OAAO,UAAU,UAAU,iBAAiB,wBAAwB,KAAK,CAAC,CAC5E;EAEA,OAAO,cAAc,SAAS,UAAU,QAAQ;EAUhD,QAAO,OARe,YACpB,eAAe,KAAK;GAClB,UAAU,UAAU;GACpB,uBAAuB,UAAU,iBAAiB;GAClD,OAAO,UAAU;EACnB,CAAC,CACH,EAAA,CAEc;CAChB,CAAC;CAED,MAAM,QAAwC,YAAY,OAAO,OAAO,WAAW,OAAO,CAAC;CAE3F,MAAM,gBAAgB,OAAO,GAAG,uBAAuB,CAAC,CAAC,WAAW,SAA4B;EAC9F,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,iBAAiB,CAAC,CAAC,CACnF,OACF,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,+BAA+B,KAAK,CAAC,CAAC;EAEzF,OAAO,cAAc,SAAS,UAAU,QAAQ;EAChD,MAAM,kBAAkB,OAAO,YAAY,UAAU,UAAU,UAAU,WAAW;EACpF,MAAM,SAAS,OAAO,IAAI,KAAK,eAAe;EAE9C,MAAM,OAAO,OAAO,GAAG,2BAA2B,CAAC,CAAC,aAAa;GAC/D,MAAM,wBAAwB,OAAO,IAAI,IAAI,MAAM;GAEnD,MAAM,SAAS,OAAO,YACpB,eAAe,KAAK;IAClB,UAAU,UAAU;IACpB;IACA,OAAO;GACT,CAAC,CACH;GAEA,IAAI,OAAO,UAAU,GAAG;IACtB,OAAO,OAAO,MAAM,OAAO,uBAAuB;IAElD,OAAO,OAAO;GAChB;GAEA,OAAO,OAAO,QAAQ,KAAK,OAAO,KAAK,WAAW,IAAI,IAAI,QAAQ,OAAO,QAAQ,CAAC,CAAC;EACrF,CAAC;EAED,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,OAAO;CAC5D,CAAC;CAED,MAAM,WAA8C,YAClD,OAAO,OAAO,cAAc,OAAO,CAAC;CAEtC,MAAM,eAAiD,OAAO,GAAG,sBAAsB,CAAC,CACtF,WAAW,SAA8B;EACvC,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,mBAAmB,CAAC,CAAC,CACrF,OACF,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,0BAA0B,KAAK,CAAC,CAAC;EAEpF,OAAO,cAAc,SAAS,UAAU,QAAQ;EAEhD,MAAM,WAAW,OAAO,QACrB,aAAa,UAAU,QAAQ,CAAC,CAChC,KAAK,OAAO,UAAU,UAAU,WAAW,iBAAiB,KAAK,CAAC,CAAC;EAEtE,MAAM,UAAU,OAAO,OAAO,QAAQ,SAAS,SAAS,cAAc;EAEtE,IAAI,QAAQ,SAAS,OACnB,OAAO,OAAO,iBAAiB,KAAK;GAClC,WAAW;GACX,SAAS;EACX,CAAC;EAGH,MAAM,aAAa,OAAO,OAAO,oBAAoB,MAAM,CAAC,CAC1D,SAAS,OAAO,WAClB,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,6BAA6B,KAAK,CAAC,CAAC;EAEvF,OAAO,aAAa,KAAK;GACvB,QAAQ;GACR,UAAU,UAAU;GACpB,cAAc,SAAS,OAAO;GAC9B;GACA;EACF,CAAC;CACH,CACF;CAEA,MAAM,cAAqD,OAAO,GAAG,2BAA2B,CAAC,CAC/F,WAAW,SAA4B;EACrC,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,iBAAiB,CAAC,CAAC,CACnF,OACF,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,4BAA4B,KAAK,CAAC,CAAC;EAEtF,MAAM,SAAS,OAAO,cAAc,SAAS,UAAU,QAAQ;EAE/D,MAAM,aAAa,OAAO,OAAO,oBAAoB,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,KAC/E,OAAO,UAAU,UAAU,iBAAiB,sBAAsB,KAAK,CAAC,CAC1E;EAEA,OAAO,WAAW,KAAK;GACrB,UAAU,UAAU;GACpB,cAAc,OAAO;GACrB;GACA,eAAe,OAAO;EACxB,CAAC;CACH,CACF;CAEA,MAAM,iBAA4C,OAAO,GAAG,8BAA8B,CAAC,CACzF,WAAW,SAAgC;EACzC,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,qBAAqB,CAAC,CAAC,CACvF,OACF,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,uBAAuB,KAAK,CAAC,CAAC;EAEjF,MAAM,SAAS,OAAO,cAAc,SAAS,UAAU,WAAW,QAAQ;EAE1E,IAAI,UAAU,WAAW,kBAAkB,OAAO,eAChD,OAAO,OAAO,mBAAmB,KAAK;GACpC,UAAU,UAAU,WAAW;GAC/B,QAAQ;EACV,CAAC;EASH,KAAI,OAN2B,aAC7B,SACA,UAAU,WAAW,UACrB,UAAU,WAAW,eACvB,OAEwB,UAAU,WAAW,YAC3C,OAAO,OAAO,mBAAmB,KAAK;GACpC,UAAU,UAAU,WAAW;GAC/B,QAAQ;EACV,CAAC;EAEH,MAAM,iBAAiB,OAAO,iBAAiB,UAAU,UAAU;EAEnE,MAAM,MAAM,cAAc,KAAK;GAC7B,UAAU,UAAU,WAAW;GAC/B,iBAAiB,UAAU,WAAW;GACtC,YAAY,UAAU,WAAW;GACjC;EACF,CAAC;EAED,OAAO,aAAa,wBAAwB;EAC5C,OAAO,QAAQ,eAAe,GAAG,CAAC,CAAC,KACjC,OAAO,UAAU,UACf,uBAAuB,KAAK,IACxB,mBAAmB,KAAK;GACtB,UAAU,UAAU,WAAW;GAC/B,QAAQ;EACV,CAAC,IACD,WAAW,mBAAmB,KAAK,CACzC,CACF;EACA,OAAO,aAAa,uBAAuB;CAC7C,CACF;CAEA,MAAM,iBAA4C,OAAO,GAAG,8BAA8B,CAAC,CACzF,WAAW,SAAgC;EACzC,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,qBAAqB,CAAC,CAAC,CACvF,OACF,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,8BAA8B,KAAK,CAAC,CAAC;EAExF,MAAM,SAAS,OAAO,cAAc,SAAS,UAAU,QAAQ;EAE/D,MAAM,OAAO,OAAO,QACjB,eAAe,UAAU,UAAU,UAAU,sBAAsB,OAAO,aAAa,CAAC,CACxF,KAAK,OAAO,UAAU,UAAU,WAAW,mBAAmB,KAAK,CAAC,CAAC;EAExE,IAAI,KAAK,WAAW,GAAG,OAAO,OAAO,KAAK;EAC1C,IAAI,KAAK,WAAW,GAClB,OAAO,OAAO,iBAAiB,KAAK;GAClC,WAAW;GACX,SAAS,iDAAiD,KAAK,OAAO;EACxE,CAAC;EAEH,MAAM,MAAM,KAAK;EACjB,MAAM,aAAa,OAAO,iBAAiB,IAAI,eAAe;EAE9D,IACE,IAAI,cAAc,UAAU,YAC5B,WAAW,aAAa,IAAI,aAC5B,WAAW,oBAAoB,IAAI,oBACnC,WAAW,eAAe,IAAI,aAE9B,OAAO,OAAO,iBAAiB,KAAK;GAClC,WAAW;GACX,SAAS;EACX,CAAC;EASH,KAAI,OAN2B,aAC7B,SACA,WAAW,UACX,WAAW,eACb,OAEwB,WAAW,YACjC,OAAO,OAAO,mBAAmB,KAAK;GACpC,UAAU,WAAW;GACrB,QAAQ;EACV,CAAC;EAGH,OAAO,OAAO,KAAK,UAAU;CAC/B,CACF;CAEA,MAAM,cAAc,YAAY,GAAG;EACjC;EACA,QAAQ;EACR;EACA;EACA;EACA;EACA,aAAa;GAAE,MAAM;GAAgB,MAAM;EAAe;CAC5D,CAAC;CAED,OAAO,QAAQ,KAAK,aAAa,WAAW;AAC9C,CAAC;;;;;AAMD,MAAa,mBAIT,MAAM,cAAc,aAAa,CAAC;;;;;;AAOtC,MAAa,sBACX,YAEA,MAAM,OAAO,eAAe,CAAC,CAC3B,OAAO,oBAAoB,oBAAoB,CAAC,CAAC;CAC/C,yBAAyB,QAAQ,2BAA2B;CAC5D,wBACE,QAAQ,0BAA0B,SAAS,SAAS,gCAAgC;CACtF,qBAAqB,QAAQ,uBAAA;CAC7B,cAAc,QAAQ,gBAAgB;AACxC,CAAC,CAAC,CAAC,KACD,OAAO,UAAU,UACf,eAAe,KAAK;CAClB,OAAO;CACP,WAAW;CACX,SAAS,MAAM;AACjB,CAAC,CACH,CACF,CACF;;AAGF,MAAa,yBACX,YAEA,QAAQ,cAAc,KAAA,IAClB,mBAAmB,QACnB,MAAM,QAAQ,kBAAkB,CAAC,CAAC,EAAE,KAAK,QAAQ,UAAU,CAAC;;;;;;;AAQlE,MAAa,SACX,YAEA,MAAM,OACJ,OAAO,IAAI,kBAAkB,WAC3B,iBAAiB,KACf,MAAM,QACJ,MAAM,SACJ,MAAM,QAAQ,eAAe,CAAC,CAAC,MAAM,GACrC,sBAAsB,OAAO,GAC7B,aAAa,MAAM,EAAE,SAAS,QAAQ,QAAQ,CAAC,GAC/C,cAAc,KAChB,CACF,CACF,CACF,CACF,CAAC,CAAC,KAAK,MAAM,QAAQ,mBAAmB,OAAO,CAAC,CAAC"}
+{"version":3,"file":"DoThreadStore.mjs","names":[],"sources":["../src/DoThreadStore.ts"],"sourcesContent":["import { digestCanonicalBatch, EMPTY_TAIL_DIGEST } from \"@effect-agent/thread/Digest\";\nimport {\n  CanonicalBatch,\n  CanonicalRecord,\n  CanonicalRecordEnvelope,\n  CanonicalSequence,\n  Digest,\n  ObservationOffset,\n} from \"@effect-agent/thread/Records\";\nimport { DEFAULT_OWNERSHIP_LEASE_DURATION } from \"@effect-agent/thread/SubmissionLedger\";\nimport {\n  AppendConflict,\n  AppendResult,\n  CheckpointRejected,\n  ThreadCheckpoint,\n  ThreadExport,\n  ThreadExportRequest,\n  ThreadMaterialization,\n  ThreadNotMaterialized,\n  ThreadObservation,\n  ThreadRead,\n  ThreadStore,\n  type ThreadCheckpoints,\n  ThreadStoreError,\n  ThreadTail,\n  ThreadTailRequest,\n  FenceRejected,\n  FencedAppendRequest,\n  LoadCheckpointRequest,\n  SaveCheckpointRequest,\n  SaveRecoveryCheckpointRequest,\n  MAX_THREAD_EXPORT_RECORDS,\n  type ThreadRecoveryCheckpoints,\n} from \"@effect-agent/thread/ThreadStore\";\nimport { BrowserCrypto } from \"@effect/platform-browser\";\nimport { SqliteClient } from \"@effect/sql-sqlite-do\";\nimport {\n  Clock,\n  Context,\n  Crypto,\n  Duration,\n  Effect,\n  Layer,\n  Option,\n  Ref,\n  Schema,\n  Stream,\n} from \"effect\";\nimport * as SqlClientService from \"effect/unstable/sql/SqlClient\";\n\nimport {\n  DEFAULT_MAX_STORED_VALUE_BYTES,\n  DoStorageConfig,\n  DoStorageConfigValue,\n} from \"./DoStorageConfig.ts\";\nimport {\n  type DoStorageCompatibilityError,\n  DoAppendConflict,\n  DoCheckpointConflict,\n  DoFenceRejected,\n  type DoStorageFailpointLocation,\n  DoStorageCorruptionError,\n  DoStorageError,\n} from \"./DoStorageError.ts\";\nimport { DoStorageFailpoint, type DoStorageFailpointHandler } from \"./DoStorageFailpoint.ts\";\nimport {\n  initializeDoJournal,\n  RawAppendRequest,\n  RawCheckpoint,\n  RawReadRequest,\n  type DoJournal,\n} from \"./internal/do-journal.ts\";\n\n/**\n * Convenience-layer construction options. `storage` is the Durable Object's own\n * `ctx.storage` handle, injected as a value (DEPLOY-010: platform bindings enter only\n * through Layers; this package never imports `cloudflare:workers`).\n */\nexport interface DoStorageOptions {\n  readonly storage: DurableObjectStorage;\n  readonly observationPollInterval?: number | undefined;\n  /**\n   * Submission ownership lease duration in milliseconds (D5). Defaults to\n   * `DEFAULT_OWNERSHIP_LEASE_DURATION` from `@effect-agent/thread`.\n   */\n  readonly ownershipLeaseDuration?: number | undefined;\n  /**\n   * Maximum bytes for any single stored value; must stay under the platform's 2 MB\n   * per-value limit. Defaults to `DEFAULT_MAX_STORED_VALUE_BYTES`.\n   */\n  readonly maxStoredValueBytes?: number | undefined;\n  /**\n   * Re-verify every stored payload and digest chain while opening the store. Defaults to\n   * off: per-operation Schema decoding and the digest chain already fail clearly on corrupt\n   * rows without scanning the whole database on every open.\n   */\n  readonly verifyOnOpen?: boolean | undefined;\n  readonly failpoint?: DoStorageFailpointHandler | undefined;\n}\n\nexport type DoStorageInitializationError =\n  | DoStorageCompatibilityError\n  | DoStorageCorruptionError\n  | DoStorageError;\n\nconst OffsetText = Schema.String.check(Schema.isMaxLength(4 * 1024));\nconst DO_OFFSET_PREFIX = \"effect-agent-do@1:\";\nconst ZERO_CANONICAL_SEQUENCE = Schema.decodeSync(CanonicalSequence)(0);\nconst isDigest = Schema.is(Digest);\nconst isDoFenceRejected = Schema.is(DoFenceRejected);\nconst isDoAppendConflict = Schema.is(DoAppendConflict);\nconst isDoCheckpointConflict = Schema.is(DoCheckpointConflict);\n\nconst storeError = (operation: string, error: { readonly message: string }) =>\n  ThreadStoreError.make({\n    cause: error,\n    operation,\n    message: error.message,\n  });\n\nconst schemaStoreError = (operation: string, error: { readonly message: string }) =>\n  ThreadStoreError.make({\n    cause: error,\n    operation,\n    message: error.message,\n  });\n\nconst makeOffset = Effect.fn(function* (\n  threadId: ThreadMaterialization[\"threadId\"],\n  sequence: number,\n): Effect.fn.Return<ObservationOffset, ThreadStoreError> {\n  return yield* Schema.decodeUnknownEffect(CanonicalSequence)(sequence).pipe(\n    Effect.flatMap((validatedSequence) =>\n      Schema.decodeUnknownEffect(ObservationOffset)(\n        `${DO_OFFSET_PREFIX}${encodeURIComponent(threadId)}:${validatedSequence}`,\n      ),\n    ),\n    Effect.mapError((error) => schemaStoreError(\"encode observation offset\", error)),\n  );\n});\n\nconst parseOffset = Effect.fn(function* (\n  threadId: ThreadMaterialization[\"threadId\"],\n  offset: ObservationOffset | undefined,\n): Effect.fn.Return<CanonicalSequence, ThreadStoreError> {\n  if (offset === undefined) return ZERO_CANONICAL_SEQUENCE;\n\n  const text = yield* Schema.decodeUnknownEffect(OffsetText)(offset).pipe(\n    Effect.mapError((error) => schemaStoreError(\"decode observation offset\", error)),\n  );\n\n  const threadPrefix = `${DO_OFFSET_PREFIX}${encodeURIComponent(threadId)}:`;\n\n  if (!text.startsWith(threadPrefix)) {\n    return yield* ThreadStoreError.make({\n      operation: \"decode observation offset\",\n      message: \"The observation offset belongs to a different adapter, storage version, or Thread.\",\n    });\n  }\n  const sequenceText = text.slice(threadPrefix.length);\n\n  if (!/^(0|[1-9][0-9]*)$/.test(sequenceText)) {\n    return yield* ThreadStoreError.make({\n      operation: \"decode observation offset\",\n      message: \"The observation offset is malformed.\",\n    });\n  }\n\n  return yield* Schema.decodeUnknownEffect(CanonicalSequence)(Number(sequenceText)).pipe(\n    Effect.mapError((error) => schemaStoreError(\"decode observation offset\", error)),\n  );\n});\n\nconst mapFence = (threadId: ThreadMaterialization[\"threadId\"], error: DoFenceRejected) =>\n  FenceRejected.make({\n    threadId,\n    actualEpoch: error.actualEpoch,\n    attemptedEpoch: error.producerEpoch,\n  });\n\nconst encodeCanonicalRecord = Effect.fn(function* (\n  record: CanonicalRecord,\n): Effect.fn.Return<string, ThreadStoreError> {\n  return yield* Schema.encodeEffect(Schema.fromJsonString(CanonicalRecord))(record).pipe(\n    Effect.mapError((error) => schemaStoreError(\"encode canonical record\", error)),\n  );\n});\n\nconst encodeCanonicalBatch = Effect.fn(function* (\n  batch: CanonicalBatch,\n): Effect.fn.Return<string, ThreadStoreError> {\n  return yield* Schema.encodeEffect(Schema.fromJsonString(CanonicalBatch))(batch).pipe(\n    Effect.mapError((error) => schemaStoreError(\"encode canonical batch\", error)),\n  );\n});\n\nconst encodeCheckpoint = Effect.fn(function* (\n  checkpoint: ThreadCheckpoint,\n): Effect.fn.Return<string, ThreadStoreError> {\n  return yield* Schema.encodeEffect(Schema.fromJsonString(ThreadCheckpoint))(checkpoint).pipe(\n    Effect.mapError((error) => schemaStoreError(\"encode checkpoint\", error)),\n  );\n});\n\nconst decodeEnvelope = Effect.fn(function* (row: {\n  readonly batch_id: string;\n  readonly thread_id: string;\n  readonly record_json: string;\n  readonly sequence: CanonicalSequence;\n}) {\n  const record = yield* Schema.decodeEffect(Schema.fromJsonString(CanonicalRecord))(\n    row.record_json,\n  ).pipe(\n    Effect.mapError((error) =>\n      ThreadStoreError.make({\n        operation: \"decode canonical record\",\n        message: error.message,\n      }),\n    ),\n  );\n\n  const threadId = yield* Schema.decodeUnknownEffect(CanonicalRecordEnvelope.fields.threadId)(\n    row.thread_id,\n  ).pipe(Effect.mapError((error) => schemaStoreError(\"decode thread identity\", error)));\n\n  const offset = yield* makeOffset(threadId, row.sequence);\n\n  const batchId = yield* Schema.decodeUnknownEffect(CanonicalRecordEnvelope.fields.batchId)(\n    row.batch_id,\n  ).pipe(Effect.mapError((error) => schemaStoreError(\"decode batch identity\", error)));\n\n  return CanonicalRecordEnvelope.make({\n    threadId,\n    batchId,\n    sequence: row.sequence,\n    offset,\n    record,\n  });\n});\n\nconst decodeCheckpoint = Effect.fn(function* (\n  checkpointJson: string,\n): Effect.fn.Return<ThreadCheckpoint, ThreadStoreError> {\n  return yield* Schema.decodeEffect(Schema.fromJsonString(ThreadCheckpoint))(checkpointJson).pipe(\n    Effect.mapError((error) => schemaStoreError(\"decode checkpoint\", error)),\n  );\n});\n\nconst requireThread = Effect.fn(\"DoThreadStore.requireThread\")(function* (\n  journal: DoJournal,\n  threadId: ThreadMaterialization[\"threadId\"],\n) {\n  const rows = yield* journal\n    .getThread(threadId)\n    .pipe(Effect.mapError((error) => storeError(\"read thread\", error)));\n\n  if (rows.length === 0) {\n    return yield* ThreadNotMaterialized.make({ threadId });\n  }\n\n  return rows[0];\n});\n\nconst tailDigestAt = Effect.fn(\"DoThreadStore.tailDigestAt\")(function* (\n  journal: DoJournal,\n  threadId: ThreadMaterialization[\"threadId\"],\n  sequence: CanonicalSequence,\n) {\n  if (sequence === 0) return EMPTY_TAIL_DIGEST;\n\n  const digests = yield* journal\n    .getTailDigestAt(threadId, sequence)\n    .pipe(Effect.mapError((error) => storeError(\"read checkpoint digest\", error)));\n\n  if (digests.length !== 1) {\n    return yield* CheckpointRejected.make({\n      threadId,\n      reason: \"digest-mismatch\",\n    });\n  }\n\n  return yield* Schema.decodeUnknownEffect(Digest)(digests[0]).pipe(\n    Effect.mapError((error) => schemaStoreError(\"decode checkpoint digest\", error)),\n  );\n});\n\nconst groupByKey = <A>(\n  rows: ReadonlyArray<A>,\n  key: (row: A) => string,\n): ReadonlyMap<string, ReadonlyArray<A>> => {\n  const grouped = new Map<string, Array<A>>();\n\n  for (const row of rows) {\n    const existing = grouped.get(key(row));\n\n    if (existing === undefined) {\n      grouped.set(key(row), [row]);\n    } else {\n      existing.push(row);\n    }\n  }\n\n  return grouped;\n};\n\n/**\n * Opt-in integrity audit (`verifyOnOpen`) of canonical payloads, their digest chains and generic\n * projection checkpoints. Disposable recovery checkpoints are validated when loaded. Routine opens\n * skip this scan: per-operation Schema decoding fails clearly on corrupt canonical rows.\n */\nconst decodeStartupPayloads = Effect.fn(\"DoThreadStore.decodeStartupPayloads\")(function* (\n  journal: DoJournal,\n  crypto: Crypto.Crypto,\n) {\n  const stored = yield* journal.scanStoredPayloads();\n\n  const batches = yield* Effect.forEach(stored.batches, (batch) =>\n    Schema.decodeEffect(Schema.fromJsonString(CanonicalBatch))(batch.batch_json).pipe(\n      Effect.map((decoded) => ({ decoded, row: batch })),\n      Effect.mapError((error) =>\n        DoStorageCorruptionError.make({\n          table: \"effect_agent_canonical_batches\",\n          rowKey: `${batch.thread_id}/${batch.batch_id}`,\n          message: error.message,\n        }),\n      ),\n    ),\n  );\n\n  const records = yield* Effect.forEach(stored.records, (record) =>\n    Schema.decodeEffect(Schema.fromJsonString(CanonicalRecord))(record.record_json).pipe(\n      Effect.map((decoded) => ({ decoded, row: record })),\n      Effect.mapError((error) =>\n        DoStorageCorruptionError.make({\n          table: \"effect_agent_canonical_records\",\n          rowKey: `${record.thread_id}/${record.sequence}`,\n          message: error.message,\n        }),\n      ),\n    ),\n  );\n\n  const checkpoints = yield* Effect.forEach(stored.checkpoints, (checkpoint) =>\n    Schema.decodeEffect(Schema.fromJsonString(ThreadCheckpoint))(checkpoint.checkpoint_json).pipe(\n      Effect.map((decoded) => ({ decoded, row: checkpoint })),\n      Effect.mapError((error) =>\n        DoStorageCorruptionError.make({\n          table: \"effect_agent_checkpoints\",\n          rowKey: `${checkpoint.thread_id}/${checkpoint.through_sequence}`,\n          message: error.message,\n        }),\n      ),\n    ),\n  );\n\n  const batchesByThread = groupByKey(batches, ({ row }) => row.thread_id);\n  const recordsByThread = groupByKey(records, ({ row }) => row.thread_id);\n  const checkpointsByThread = groupByKey(checkpoints, ({ row }) => row.thread_id);\n  const materializedIds = new Set(stored.threads.map((thread) => thread.thread_id));\n\n  for (const thread of stored.threads) {\n    const threadBatches = batchesByThread.get(thread.thread_id) ?? [];\n    const threadRecords = recordsByThread.get(thread.thread_id) ?? [];\n    const threadCheckpoints = checkpointsByThread.get(thread.thread_id) ?? [];\n    const recordsByBatch = groupByKey(threadRecords, ({ row }) => row.batch_id);\n    let previousDigest = EMPTY_TAIL_DIGEST;\n    let expectedSequence = 1;\n    const tailDigests = new Map<number, string>([[0, EMPTY_TAIL_DIGEST]]);\n\n    for (const { decoded: canonicalBatch, row: batchRow } of threadBatches) {\n      const key = `${batchRow.thread_id}/${batchRow.batch_id}`;\n\n      if (\n        canonicalBatch.batchId !== batchRow.batch_id ||\n        batchRow.first_sequence !== expectedSequence ||\n        batchRow.last_sequence !== batchRow.first_sequence + canonicalBatch.records.length - 1\n      ) {\n        return yield* DoStorageCorruptionError.make({\n          table: \"effect_agent_canonical_batches\",\n          rowKey: key,\n          message: \"Canonical batch identity, sequence, or record count is inconsistent.\",\n        });\n      }\n\n      const digest = yield* digestCanonicalBatch(previousDigest, canonicalBatch).pipe(\n        Effect.provideService(Crypto.Crypto, crypto),\n        Effect.mapError((error) =>\n          DoStorageCorruptionError.make({\n            table: \"effect_agent_canonical_batches\",\n            rowKey: key,\n            message: error.message,\n          }),\n        ),\n      );\n\n      if (batchRow.batch_digest !== digest || batchRow.tail_digest !== digest) {\n        return yield* DoStorageCorruptionError.make({\n          table: \"effect_agent_canonical_batches\",\n          rowKey: key,\n          message: \"Canonical batch digest does not match its decoded content and prior tail.\",\n        });\n      }\n\n      const batchRecords = recordsByBatch.get(batchRow.batch_id) ?? [];\n\n      if (batchRecords.length !== canonicalBatch.records.length) {\n        return yield* DoStorageCorruptionError.make({\n          table: \"effect_agent_canonical_records\",\n          rowKey: key,\n          message: \"Canonical batch and record-table counts differ.\",\n        });\n      }\n      for (let index = 0; index < canonicalBatch.records.length; index++) {\n        const expectedRecord = canonicalBatch.records[index];\n        const storedRecord = batchRecords[index];\n\n        const expectedJson = yield* Schema.encodeEffect(Schema.fromJsonString(CanonicalRecord))(\n          expectedRecord,\n        ).pipe(\n          Effect.mapError((error) =>\n            DoStorageCorruptionError.make({\n              table: \"effect_agent_canonical_batches\",\n              rowKey: key,\n              message: error.message,\n            }),\n          ),\n        );\n\n        const storedJson = yield* Schema.encodeEffect(Schema.fromJsonString(CanonicalRecord))(\n          storedRecord.decoded,\n        ).pipe(\n          Effect.mapError((error) =>\n            DoStorageCorruptionError.make({\n              table: \"effect_agent_canonical_records\",\n              rowKey: `${key}/${storedRecord.row.sequence}`,\n              message: error.message,\n            }),\n          ),\n        );\n\n        if (\n          storedRecord.row.sequence !== batchRow.first_sequence + index ||\n          storedRecord.row.record_id !== expectedRecord.recordId ||\n          expectedJson !== storedJson\n        ) {\n          return yield* DoStorageCorruptionError.make({\n            table: \"effect_agent_canonical_records\",\n            rowKey: `${key}/${storedRecord.row.sequence}`,\n            message: \"Canonical record identity, sequence, or payload differs from its batch.\",\n          });\n        }\n      }\n\n      previousDigest = digest;\n      expectedSequence = batchRow.last_sequence + 1;\n      tailDigests.set(batchRow.last_sequence, digest);\n    }\n\n    if (\n      threadRecords.length !== thread.tail_sequence ||\n      thread.tail_sequence !== expectedSequence - 1 ||\n      thread.tail_digest !== previousDigest\n    ) {\n      return yield* DoStorageCorruptionError.make({\n        table: \"effect_agent_threads\",\n        rowKey: thread.thread_id,\n        message: \"Thread tail does not match its canonical batch chain.\",\n      });\n    }\n\n    for (const checkpoint of threadCheckpoints) {\n      if (\n        checkpoint.decoded.threadId !== thread.thread_id ||\n        checkpoint.decoded.throughSequence !== checkpoint.row.through_sequence ||\n        checkpoint.decoded.tailDigest !== checkpoint.row.tail_digest ||\n        tailDigests.get(checkpoint.row.through_sequence) !== checkpoint.row.tail_digest\n      ) {\n        return yield* DoStorageCorruptionError.make({\n          table: \"effect_agent_checkpoints\",\n          rowKey: `${thread.thread_id}/${checkpoint.row.through_sequence}`,\n          message: \"Checkpoint identity or digest is not bound to a canonical batch tail.\",\n        });\n      }\n    }\n  }\n\n  if (\n    batches.some(({ row }) => !materializedIds.has(row.thread_id)) ||\n    records.some(({ row }) => !materializedIds.has(row.thread_id)) ||\n    checkpoints.some(({ row }) => !materializedIds.has(row.thread_id))\n  ) {\n    return yield* DoStorageCorruptionError.make({\n      table: \"effect_agent_threads\",\n      rowKey: \"startup_scan\",\n      message: \"Canonical rows exist without a materialized Thread.\",\n    });\n  }\n});\n\nconst makeServices = Effect.fn(\"DoThreadStore.makeServices\")(function* () {\n  const config = yield* DoStorageConfig;\n  const failpoint = yield* DoStorageFailpoint;\n  const sql = yield* SqlClientService.SqlClient;\n  const crypto = yield* Crypto.Crypto;\n  const journal = yield* initializeDoJournal(sql, failpoint.hit, config.maxStoredValueBytes);\n\n  if (config.verifyOnOpen) {\n    yield* decodeStartupPayloads(journal, crypto);\n  }\n\n  const provideCrypto = <A, E>(effect: Effect.Effect<A, E, Crypto.Crypto>) =>\n    Effect.provideService(effect, Crypto.Crypto, crypto);\n\n  const hitFailpoint = Effect.fn(\n    (location: DoStorageFailpointLocation): Effect.Effect<void, ThreadStoreError> =>\n      failpoint\n        .hit(location)\n        .pipe(Effect.mapError((error) => storeError(`storage failpoint ${location}`, error))),\n  );\n\n  const materialize: ThreadStore[\"Service\"][\"materialize\"] = Effect.fn(\"DoThreadStore.materialize\")(\n    function* (request: ThreadMaterialization) {\n      const validated = yield* Schema.decodeUnknownEffect(Schema.toType(ThreadMaterialization))(\n        request,\n      ).pipe(Effect.mapError((error) => schemaStoreError(\"validate materialization\", error)));\n\n      const now = yield* Clock.currentTimeMillis;\n\n      yield* hitFailpoint(\"materialize:before\");\n      yield* journal\n        .materialize(\n          validated.threadId,\n          new Date(now).toISOString(),\n          EMPTY_TAIL_DIGEST,\n          validated.producerEpoch,\n        )\n        .pipe(\n          Effect.mapError((error) =>\n            error._tag === \"DoFenceRejected\"\n              ? mapFence(validated.threadId, error)\n              : storeError(\"materialize thread\", error),\n          ),\n        );\n      yield* hitFailpoint(\"materialize:after\");\n    },\n  );\n\n  const append: ThreadStore[\"Service\"][\"append\"] = Effect.fn(\"DoThreadStore.append\")(function* (\n    request: FencedAppendRequest,\n  ) {\n    const validated = yield* Schema.decodeUnknownEffect(Schema.toType(FencedAppendRequest))(\n      request,\n    ).pipe(Effect.mapError((error) => schemaStoreError(\"validate canonical append\", error)));\n\n    yield* requireThread(journal, validated.threadId);\n\n    const tailDigest = yield* provideCrypto(\n      digestCanonicalBatch(validated.expectedTailDigest, validated.batch),\n    ).pipe(Effect.mapError((error) => storeError(\"digest canonical append\", error)));\n\n    const batchJson = yield* encodeCanonicalBatch(validated.batch);\n\n    const rawRecords = yield* Effect.forEach(validated.batch.records, (record) =>\n      encodeCanonicalRecord(record).pipe(\n        Effect.map((recordJson) => ({\n          recordId: record.recordId,\n          recordJson,\n        })),\n      ),\n    );\n\n    const rawRequest = yield* Schema.decodeUnknownEffect(RawAppendRequest)({\n      threadId: validated.threadId,\n      batchId: validated.batch.batchId,\n      batchDigest: tailDigest,\n      batchJson,\n      expectedTailSequence: validated.expectedTailSequence,\n      expectedTailDigest: validated.expectedTailDigest,\n      producerEpoch: validated.producerEpoch,\n      records: rawRecords,\n      tailDigest,\n    }).pipe(Effect.mapError((error) => schemaStoreError(\"encode canonical append\", error)));\n\n    yield* hitFailpoint(\"append:before\");\n\n    const result = yield* journal.append(rawRequest).pipe(\n      Effect.mapError((error) => {\n        if (isDoFenceRejected(error)) {\n          return mapFence(validated.threadId, error);\n        }\n        if (isDoAppendConflict(error)) {\n          return error.actualTailSequence !== undefined && isDigest(error.actualTailDigest)\n            ? AppendConflict.make({\n                threadId: validated.threadId,\n                batchId: validated.batch.batchId,\n                reason: error.reason,\n                actualTailSequence: error.actualTailSequence,\n                actualTailDigest: error.actualTailDigest,\n              })\n            : AppendConflict.make({\n                threadId: validated.threadId,\n                batchId: validated.batch.batchId,\n                reason: error.reason,\n              });\n        }\n\n        return storeError(\"append canonical batch\", error);\n      }),\n      Effect.flatMap((result) =>\n        Schema.decodeUnknownEffect(AppendResult)(result).pipe(\n          Effect.mapError((error) => schemaStoreError(\"decode append result\", error)),\n        ),\n      ),\n    );\n\n    yield* hitFailpoint(\"append:after\");\n\n    return result;\n  });\n\n  const loadRecords = Effect.fn(\"DoThreadStore.loadRecords\")(function* (request: RawReadRequest) {\n    const result = yield* journal\n      .read(request)\n      .pipe(Effect.mapError((error) => storeError(\"read canonical records\", error)));\n\n    return {\n      count: result.count,\n      records: result.records.pipe(\n        Stream.mapError((error) => storeError(\"read canonical records\", error)),\n        Stream.mapEffect(decodeEnvelope),\n      ),\n    };\n  });\n\n  const readEffect = Effect.fn(\"DoThreadStore.read\")(function* (request: ThreadRead) {\n    const validated = yield* Schema.decodeUnknownEffect(Schema.toType(ThreadRead))(request).pipe(\n      Effect.mapError((error) => schemaStoreError(\"validate thread read\", error)),\n    );\n\n    yield* requireThread(journal, validated.threadId);\n\n    const result = yield* loadRecords(\n      RawReadRequest.make({\n        threadId: validated.threadId,\n        fromSequenceExclusive: validated.afterSequence ?? ZERO_CANONICAL_SEQUENCE,\n        limit: validated.limit,\n      }),\n    );\n\n    return result.records;\n  });\n\n  const read: ThreadStore[\"Service\"][\"read\"] = (request) => Stream.unwrap(readEffect(request));\n\n  const observeEffect = Effect.fn(\"DoThreadStore.observe\")(function* (request: ThreadObservation) {\n    const validated = yield* Schema.decodeUnknownEffect(Schema.toType(ThreadObservation))(\n      request,\n    ).pipe(Effect.mapError((error) => schemaStoreError(\"validate thread observation\", error)));\n\n    yield* requireThread(journal, validated.threadId);\n    const initialSequence = yield* parseOffset(validated.threadId, validated.afterOffset);\n    const cursor = yield* Ref.make(initialSequence);\n\n    const poll = Effect.fn(\"DoThreadStore.observePoll\")(function* () {\n      const fromSequenceExclusive = yield* Ref.get(cursor);\n\n      const result = yield* loadRecords(\n        RawReadRequest.make({\n          threadId: validated.threadId,\n          fromSequenceExclusive,\n          limit: 1_024,\n        }),\n      );\n\n      if (result.count === 0) {\n        yield* Effect.sleep(config.observationPollInterval);\n\n        return Stream.empty;\n      }\n\n      return result.records.pipe(Stream.tap((record) => Ref.set(cursor, record.sequence)));\n    });\n\n    return Stream.fromEffectRepeat(poll()).pipe(Stream.flatten);\n  });\n\n  const observe: ThreadStore[\"Service\"][\"observe\"] = (request) =>\n    Stream.unwrap(observeEffect(request));\n\n  const exportThread: ThreadStore[\"Service\"][\"export\"] = Effect.fn(\"DoThreadStore.export\")(\n    function* (request: ThreadExportRequest) {\n      const validated = yield* Schema.decodeUnknownEffect(Schema.toType(ThreadExportRequest))(\n        request,\n      ).pipe(Effect.mapError((error) => schemaStoreError(\"validate thread export\", error)));\n\n      yield* requireThread(journal, validated.threadId);\n\n      const exported = yield* journal\n        .exportThread(validated.threadId)\n        .pipe(Effect.mapError((error) => storeError(\"export thread\", error)));\n\n      const records = yield* Effect.forEach(exported.records, decodeEnvelope);\n\n      if (records.length > MAX_THREAD_EXPORT_RECORDS) {\n        return yield* ThreadStoreError.make({\n          operation: \"decode thread export\",\n          message: \"The thread exceeds the current export record limit.\",\n        });\n      }\n\n      const tailDigest = yield* Schema.decodeUnknownEffect(Digest)(\n        exported.thread.tail_digest,\n      ).pipe(Effect.mapError((error) => schemaStoreError(\"decode export tail digest\", error)));\n\n      return ThreadExport.make({\n        format: \"effect-agent/thread@1\",\n        threadId: validated.threadId,\n        tailSequence: exported.thread.tail_sequence,\n        tailDigest,\n        records,\n      });\n    },\n  );\n\n  const inspectTail: ThreadStore[\"Service\"][\"inspectTail\"] = Effect.fn(\"DoThreadStore.inspectTail\")(\n    function* (request: ThreadTailRequest) {\n      const validated = yield* Schema.decodeUnknownEffect(Schema.toType(ThreadTailRequest))(\n        request,\n      ).pipe(Effect.mapError((error) => schemaStoreError(\"validate tail inspection\", error)));\n\n      const thread = yield* requireThread(journal, validated.threadId);\n\n      const tailDigest = yield* Schema.decodeUnknownEffect(Digest)(thread.tail_digest).pipe(\n        Effect.mapError((error) => schemaStoreError(\"decode tail digest\", error)),\n      );\n\n      return ThreadTail.make({\n        threadId: validated.threadId,\n        tailSequence: thread.tail_sequence,\n        tailDigest,\n        producerEpoch: thread.producer_epoch,\n      });\n    },\n  );\n\n  const saveCheckpoint: ThreadCheckpoints[\"save\"] = Effect.fn(\"DoThreadStore.saveCheckpoint\")(\n    function* (request: SaveCheckpointRequest) {\n      const validated = yield* Schema.decodeUnknownEffect(Schema.toType(SaveCheckpointRequest))(\n        request,\n      ).pipe(Effect.mapError((error) => schemaStoreError(\"validate checkpoint\", error)));\n\n      const thread = yield* requireThread(journal, validated.checkpoint.threadId);\n\n      if (validated.checkpoint.throughSequence > thread.tail_sequence) {\n        return yield* CheckpointRejected.make({\n          threadId: validated.checkpoint.threadId,\n          reason: \"ahead-of-tail\",\n        });\n      }\n\n      const canonicalDigest = yield* tailDigestAt(\n        journal,\n        validated.checkpoint.threadId,\n        validated.checkpoint.throughSequence,\n      );\n\n      if (canonicalDigest !== validated.checkpoint.tailDigest) {\n        return yield* CheckpointRejected.make({\n          threadId: validated.checkpoint.threadId,\n          reason: \"digest-mismatch\",\n        });\n      }\n      const checkpointJson = yield* encodeCheckpoint(validated.checkpoint);\n\n      const raw = RawCheckpoint.make({\n        threadId: validated.checkpoint.threadId,\n        throughSequence: validated.checkpoint.throughSequence,\n        tailDigest: validated.checkpoint.tailDigest,\n        checkpointJson,\n      });\n\n      yield* hitFailpoint(\"save-checkpoint:before\");\n      yield* journal.saveCheckpoint(raw).pipe(\n        Effect.mapError((error) =>\n          isDoCheckpointConflict(error)\n            ? CheckpointRejected.make({\n                threadId: validated.checkpoint.threadId,\n                reason: \"digest-mismatch\",\n              })\n            : storeError(\"save checkpoint\", error),\n        ),\n      );\n      yield* hitFailpoint(\"save-checkpoint:after\");\n    },\n  );\n\n  const loadCheckpoint: ThreadCheckpoints[\"load\"] = Effect.fn(\"DoThreadStore.loadCheckpoint\")(\n    function* (request: LoadCheckpointRequest) {\n      const validated = yield* Schema.decodeUnknownEffect(Schema.toType(LoadCheckpointRequest))(\n        request,\n      ).pipe(Effect.mapError((error) => schemaStoreError(\"validate checkpoint lookup\", error)));\n\n      const thread = yield* requireThread(journal, validated.threadId);\n\n      const rows = yield* journal\n        .loadCheckpoint(validated.threadId, validated.atOrBeforeSequence ?? thread.tail_sequence)\n        .pipe(Effect.mapError((error) => storeError(\"load checkpoint\", error)));\n\n      if (rows.length === 0) return Option.none();\n      if (rows.length !== 1) {\n        return yield* ThreadStoreError.make({\n          operation: \"load checkpoint\",\n          message: `Expected at most one checkpoint row but found ${rows.length}.`,\n        });\n      }\n      const row = rows[0];\n      const checkpoint = yield* decodeCheckpoint(row.checkpoint_json);\n\n      if (\n        row.thread_id !== validated.threadId ||\n        checkpoint.threadId !== row.thread_id ||\n        checkpoint.throughSequence !== row.through_sequence ||\n        checkpoint.tailDigest !== row.tail_digest\n      ) {\n        return yield* ThreadStoreError.make({\n          operation: \"load checkpoint\",\n          message: \"Stored checkpoint metadata does not match its canonical row.\",\n        });\n      }\n\n      const canonicalDigest = yield* tailDigestAt(\n        journal,\n        checkpoint.threadId,\n        checkpoint.throughSequence,\n      );\n\n      if (canonicalDigest !== checkpoint.tailDigest) {\n        return yield* CheckpointRejected.make({\n          threadId: checkpoint.threadId,\n          reason: \"digest-mismatch\",\n        });\n      }\n\n      return Option.some(checkpoint);\n    },\n  );\n\n  const saveRecoveryCheckpoint: ThreadRecoveryCheckpoints[\"save\"] = Effect.fn(\n    \"DoThreadStore.saveRecoveryCheckpoint\",\n  )(function* (request) {\n    const validated = yield* Schema.decodeUnknownEffect(\n      Schema.toType(SaveRecoveryCheckpointRequest),\n    )(request).pipe(\n      Effect.mapError((error) => schemaStoreError(\"validate recovery checkpoint\", error)),\n    );\n\n    const checkpointJson = yield* encodeCheckpoint(validated.checkpoint);\n\n    yield* journal\n      .saveRecoveryCheckpoint(validated, checkpointJson)\n      .pipe(\n        Effect.mapError((error) =>\n          error._tag === \"CheckpointRejected\" ||\n          error._tag === \"FenceRejected\" ||\n          error._tag === \"ThreadNotMaterialized\"\n            ? error\n            : storeError(\"save recovery checkpoint\", error),\n        ),\n      );\n  });\n\n  const loadRecoveryCheckpoint: ThreadRecoveryCheckpoints[\"load\"] = Effect.fn(\n    \"DoThreadStore.loadRecoveryCheckpoint\",\n  )(function* (request) {\n    const validated = yield* Schema.decodeUnknownEffect(Schema.toType(LoadCheckpointRequest))(\n      request,\n    ).pipe(\n      Effect.mapError((error) => schemaStoreError(\"validate recovery checkpoint lookup\", error)),\n    );\n\n    const thread = yield* requireThread(journal, validated.threadId);\n\n    const corrupt = () =>\n      CheckpointRejected.make({ threadId: validated.threadId, reason: \"corrupt\" });\n\n    const rows = yield* journal\n      .loadRecoveryCheckpoint(validated.threadId)\n      .pipe(\n        Effect.mapError((error) =>\n          error._tag === \"DoStorageCorruptionError\"\n            ? corrupt()\n            : storeError(\"load recovery checkpoint\", error),\n        ),\n      );\n\n    if (rows.length === 0) return Option.none();\n    if (rows.length !== 1) return yield* corrupt();\n    const row = rows[0];\n\n    const checkpoint = yield* Schema.decodeEffect(Schema.fromJsonString(ThreadCheckpoint))(\n      row.checkpoint_json,\n    ).pipe(Effect.mapError(corrupt));\n\n    if (\n      row.thread_id !== validated.threadId ||\n      checkpoint.threadId !== row.thread_id ||\n      checkpoint.throughSequence !== row.through_sequence ||\n      checkpoint.tailDigest !== row.tail_digest\n    )\n      return yield* corrupt();\n    if (checkpoint.throughSequence > thread.tail_sequence)\n      return yield* CheckpointRejected.make({\n        threadId: validated.threadId,\n        reason: \"ahead-of-tail\",\n      });\n    if (checkpoint.throughSequence > (validated.atOrBeforeSequence ?? thread.tail_sequence))\n      return Option.none();\n\n    const canonicalDigest = yield* tailDigestAt(\n      journal,\n      checkpoint.threadId,\n      checkpoint.throughSequence,\n    );\n\n    if (canonicalDigest !== checkpoint.tailDigest)\n      return yield* CheckpointRejected.make({\n        threadId: validated.threadId,\n        reason: \"digest-mismatch\",\n      });\n\n    return Option.some(checkpoint);\n  });\n\n  const threadStore = ThreadStore.of({\n    append,\n    export: exportThread,\n    inspectTail,\n    materialize,\n    observe,\n    read,\n    checkpoints: { save: saveCheckpoint, load: loadCheckpoint },\n    recoveryCheckpoints: { save: saveRecoveryCheckpoint, load: loadRecoveryCheckpoint },\n  });\n\n  return Context.make(ThreadStore, threadStore);\n});\n\n/**\n * Durable Object Thread Store implementation with configuration, failpoint, SQL, and\n * Crypto authority kept visible in its input channel.\n */\nexport const threadStoreLayer: Layer.Layer<\n  ThreadStore,\n  DoStorageInitializationError,\n  DoStorageConfig | DoStorageFailpoint | SqlClientService.SqlClient | Crypto.Crypto\n> = Layer.effectContext(makeServices());\n\n/**\n * Validated Durable Object storage configuration Layer with the documented defaults applied.\n * Shared by the ThreadStore and SubmissionLedger convenience layers so their defaults\n * cannot drift.\n */\nexport const storageConfigLayer = (\n  options: DoStorageOptions,\n): Layer.Layer<DoStorageConfig, DoStorageError> =>\n  Layer.effect(DoStorageConfig)(\n    Schema.decodeUnknownEffect(DoStorageConfigValue)({\n      observationPollInterval: options.observationPollInterval ?? 25,\n      ownershipLeaseDuration:\n        options.ownershipLeaseDuration ?? Duration.toMillis(DEFAULT_OWNERSHIP_LEASE_DURATION),\n      maxStoredValueBytes: options.maxStoredValueBytes ?? DEFAULT_MAX_STORED_VALUE_BYTES,\n      verifyOnOpen: options.verifyOnOpen ?? false,\n    }).pipe(\n      Effect.mapError((error) =>\n        DoStorageError.make({\n          cause: error,\n          operation: \"configure Durable Object storage\",\n          message: error.message,\n        }),\n      ),\n    ),\n  );\n\n/** The failpoint Layer selected by convenience options: explicit handler or the no-op default. */\nexport const storageFailpointLayer = (\n  options: DoStorageOptions,\n): Layer.Layer<DoStorageFailpoint> =>\n  options.failpoint === undefined\n    ? DoStorageFailpoint.layer\n    : Layer.succeed(DoStorageFailpoint)({ hit: options.failpoint });\n\n/**\n * A composition-root convenience Layer for canonical Threads inside one Durable Object,\n * built over `ctx.storage`. Durable accepted work is served by the separate SubmissionLedger\n * port; point both at the SAME `ctx.storage` so claims fence the same producer epochs\n * (ADR-0011 D7's \"same file\" rule, transposed to one object's private database).\n */\nexport const layer = (\n  options: DoStorageOptions,\n): Layer.Layer<ThreadStore, DoStorageInitializationError> =>\n  Layer.unwrap(\n    Effect.map(DoStorageConfig, (config) =>\n      threadStoreLayer.pipe(\n        Layer.provide(\n          Layer.mergeAll(\n            Layer.succeed(DoStorageConfig)(config),\n            storageFailpointLayer(options),\n            SqliteClient.layer({ storage: options.storage }),\n            BrowserCrypto.layer,\n          ),\n        ),\n      ),\n    ),\n  ).pipe(Layer.provide(storageConfigLayer(options)));\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAyGA,MAAM,aAAa,OAAO,OAAO,MAAM,OAAO,YAAY,IAAQ,CAAC;AACnE,MAAM,mBAAmB;AACzB,MAAM,0BAA0B,OAAO,WAAW,iBAAiB,CAAC,CAAC,CAAC;AACtE,MAAM,WAAW,OAAO,GAAG,MAAM;AACjC,MAAM,oBAAoB,OAAO,GAAG,eAAe;AACnD,MAAM,qBAAqB,OAAO,GAAG,gBAAgB;AACrD,MAAM,yBAAyB,OAAO,GAAG,oBAAoB;AAE7D,MAAM,cAAc,WAAmB,UACrC,iBAAiB,KAAK;CACpB,OAAO;CACP;CACA,SAAS,MAAM;AACjB,CAAC;AAEH,MAAM,oBAAoB,WAAmB,UAC3C,iBAAiB,KAAK;CACpB,OAAO;CACP;CACA,SAAS,MAAM;AACjB,CAAC;AAEH,MAAM,aAAa,OAAO,GAAG,WAC3B,UACA,UACuD;CACvD,OAAO,OAAO,OAAO,oBAAoB,iBAAiB,CAAC,CAAC,QAAQ,CAAC,CAAC,KACpE,OAAO,SAAS,sBACd,OAAO,oBAAoB,iBAAiB,CAAC,CAC3C,GAAG,mBAAmB,mBAAmB,QAAQ,EAAE,GAAG,mBACxD,CACF,GACA,OAAO,UAAU,UAAU,iBAAiB,6BAA6B,KAAK,CAAC,CACjF;AACF,CAAC;AAED,MAAM,cAAc,OAAO,GAAG,WAC5B,UACA,QACuD;CACvD,IAAI,WAAW,KAAA,GAAW,OAAO;CAEjC,MAAM,OAAO,OAAO,OAAO,oBAAoB,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,KACjE,OAAO,UAAU,UAAU,iBAAiB,6BAA6B,KAAK,CAAC,CACjF;CAEA,MAAM,eAAe,GAAG,mBAAmB,mBAAmB,QAAQ,EAAE;CAExE,IAAI,CAAC,KAAK,WAAW,YAAY,GAC/B,OAAO,OAAO,iBAAiB,KAAK;EAClC,WAAW;EACX,SAAS;CACX,CAAC;CAEH,MAAM,eAAe,KAAK,MAAM,aAAa,MAAM;CAEnD,IAAI,CAAC,oBAAoB,KAAK,YAAY,GACxC,OAAO,OAAO,iBAAiB,KAAK;EAClC,WAAW;EACX,SAAS;CACX,CAAC;CAGH,OAAO,OAAO,OAAO,oBAAoB,iBAAiB,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,KAChF,OAAO,UAAU,UAAU,iBAAiB,6BAA6B,KAAK,CAAC,CACjF;AACF,CAAC;AAED,MAAM,YAAY,UAA6C,UAC7D,cAAc,KAAK;CACjB;CACA,aAAa,MAAM;CACnB,gBAAgB,MAAM;AACxB,CAAC;AAEH,MAAM,wBAAwB,OAAO,GAAG,WACtC,QAC4C;CAC5C,OAAO,OAAO,OAAO,aAAa,OAAO,eAAe,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAChF,OAAO,UAAU,UAAU,iBAAiB,2BAA2B,KAAK,CAAC,CAC/E;AACF,CAAC;AAED,MAAM,uBAAuB,OAAO,GAAG,WACrC,OAC4C;CAC5C,OAAO,OAAO,OAAO,aAAa,OAAO,eAAe,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAC9E,OAAO,UAAU,UAAU,iBAAiB,0BAA0B,KAAK,CAAC,CAC9E;AACF,CAAC;AAED,MAAM,mBAAmB,OAAO,GAAG,WACjC,YAC4C;CAC5C,OAAO,OAAO,OAAO,aAAa,OAAO,eAAe,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KACrF,OAAO,UAAU,UAAU,iBAAiB,qBAAqB,KAAK,CAAC,CACzE;AACF,CAAC;AAED,MAAM,iBAAiB,OAAO,GAAG,WAAW,KAKzC;CACD,MAAM,SAAS,OAAO,OAAO,aAAa,OAAO,eAAe,eAAe,CAAC,CAAC,CAC/E,IAAI,WACN,CAAC,CAAC,KACA,OAAO,UAAU,UACf,iBAAiB,KAAK;EACpB,WAAW;EACX,SAAS,MAAM;CACjB,CAAC,CACH,CACF;CAEA,MAAM,WAAW,OAAO,OAAO,oBAAoB,wBAAwB,OAAO,QAAQ,CAAC,CACzF,IAAI,SACN,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,0BAA0B,KAAK,CAAC,CAAC;CAEpF,MAAM,SAAS,OAAO,WAAW,UAAU,IAAI,QAAQ;CAEvD,MAAM,UAAU,OAAO,OAAO,oBAAoB,wBAAwB,OAAO,OAAO,CAAC,CACvF,IAAI,QACN,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,yBAAyB,KAAK,CAAC,CAAC;CAEnF,OAAO,wBAAwB,KAAK;EAClC;EACA;EACA,UAAU,IAAI;EACd;EACA;CACF,CAAC;AACH,CAAC;AAED,MAAM,mBAAmB,OAAO,GAAG,WACjC,gBACsD;CACtD,OAAO,OAAO,OAAO,aAAa,OAAO,eAAe,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,KACzF,OAAO,UAAU,UAAU,iBAAiB,qBAAqB,KAAK,CAAC,CACzE;AACF,CAAC;AAED,MAAM,gBAAgB,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAC7D,SACA,UACA;CACA,MAAM,OAAO,OAAO,QACjB,UAAU,QAAQ,CAAC,CACnB,KAAK,OAAO,UAAU,UAAU,WAAW,eAAe,KAAK,CAAC,CAAC;CAEpE,IAAI,KAAK,WAAW,GAClB,OAAO,OAAO,sBAAsB,KAAK,EAAE,SAAS,CAAC;CAGvD,OAAO,KAAK;AACd,CAAC;AAED,MAAM,eAAe,OAAO,GAAG,4BAA4B,CAAC,CAAC,WAC3D,SACA,UACA,UACA;CACA,IAAI,aAAa,GAAG,OAAO;CAE3B,MAAM,UAAU,OAAO,QACpB,gBAAgB,UAAU,QAAQ,CAAC,CACnC,KAAK,OAAO,UAAU,UAAU,WAAW,0BAA0B,KAAK,CAAC,CAAC;CAE/E,IAAI,QAAQ,WAAW,GACrB,OAAO,OAAO,mBAAmB,KAAK;EACpC;EACA,QAAQ;CACV,CAAC;CAGH,OAAO,OAAO,OAAO,oBAAoB,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAC3D,OAAO,UAAU,UAAU,iBAAiB,4BAA4B,KAAK,CAAC,CAChF;AACF,CAAC;AAED,MAAM,cACJ,MACA,QAC0C;CAC1C,MAAM,0BAAU,IAAI,IAAsB;CAE1C,KAAK,MAAM,OAAO,MAAM;EACtB,MAAM,WAAW,QAAQ,IAAI,IAAI,GAAG,CAAC;EAErC,IAAI,aAAa,KAAA,GACf,QAAQ,IAAI,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC;OAE3B,SAAS,KAAK,GAAG;CAErB;CAEA,OAAO;AACT;;;;;;AAOA,MAAM,wBAAwB,OAAO,GAAG,qCAAqC,CAAC,CAAC,WAC7E,SACA,QACA;CACA,MAAM,SAAS,OAAO,QAAQ,mBAAmB;CAEjD,MAAM,UAAU,OAAO,OAAO,QAAQ,OAAO,UAAU,UACrD,OAAO,aAAa,OAAO,eAAe,cAAc,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC,KAC3E,OAAO,KAAK,aAAa;EAAE;EAAS,KAAK;CAAM,EAAE,GACjD,OAAO,UAAU,UACf,yBAAyB,KAAK;EAC5B,OAAO;EACP,QAAQ,GAAG,MAAM,UAAU,GAAG,MAAM;EACpC,SAAS,MAAM;CACjB,CAAC,CACH,CACF,CACF;CAEA,MAAM,UAAU,OAAO,OAAO,QAAQ,OAAO,UAAU,WACrD,OAAO,aAAa,OAAO,eAAe,eAAe,CAAC,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,KAC9E,OAAO,KAAK,aAAa;EAAE;EAAS,KAAK;CAAO,EAAE,GAClD,OAAO,UAAU,UACf,yBAAyB,KAAK;EAC5B,OAAO;EACP,QAAQ,GAAG,OAAO,UAAU,GAAG,OAAO;EACtC,SAAS,MAAM;CACjB,CAAC,CACH,CACF,CACF;CAEA,MAAM,cAAc,OAAO,OAAO,QAAQ,OAAO,cAAc,eAC7D,OAAO,aAAa,OAAO,eAAe,gBAAgB,CAAC,CAAC,CAAC,WAAW,eAAe,CAAC,CAAC,KACvF,OAAO,KAAK,aAAa;EAAE;EAAS,KAAK;CAAW,EAAE,GACtD,OAAO,UAAU,UACf,yBAAyB,KAAK;EAC5B,OAAO;EACP,QAAQ,GAAG,WAAW,UAAU,GAAG,WAAW;EAC9C,SAAS,MAAM;CACjB,CAAC,CACH,CACF,CACF;CAEA,MAAM,kBAAkB,WAAW,UAAU,EAAE,UAAU,IAAI,SAAS;CACtE,MAAM,kBAAkB,WAAW,UAAU,EAAE,UAAU,IAAI,SAAS;CACtE,MAAM,sBAAsB,WAAW,cAAc,EAAE,UAAU,IAAI,SAAS;CAC9E,MAAM,kBAAkB,IAAI,IAAI,OAAO,QAAQ,KAAK,WAAW,OAAO,SAAS,CAAC;CAEhF,KAAK,MAAM,UAAU,OAAO,SAAS;EACnC,MAAM,gBAAgB,gBAAgB,IAAI,OAAO,SAAS,KAAK,CAAC;EAChE,MAAM,gBAAgB,gBAAgB,IAAI,OAAO,SAAS,KAAK,CAAC;EAChE,MAAM,oBAAoB,oBAAoB,IAAI,OAAO,SAAS,KAAK,CAAC;EACxE,MAAM,iBAAiB,WAAW,gBAAgB,EAAE,UAAU,IAAI,QAAQ;EAC1E,IAAI,iBAAiB;EACrB,IAAI,mBAAmB;EACvB,MAAM,8BAAc,IAAI,IAAoB,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC;EAEpE,KAAK,MAAM,EAAE,SAAS,gBAAgB,KAAK,cAAc,eAAe;GACtE,MAAM,MAAM,GAAG,SAAS,UAAU,GAAG,SAAS;GAE9C,IACE,eAAe,YAAY,SAAS,YACpC,SAAS,mBAAmB,oBAC5B,SAAS,kBAAkB,SAAS,iBAAiB,eAAe,QAAQ,SAAS,GAErF,OAAO,OAAO,yBAAyB,KAAK;IAC1C,OAAO;IACP,QAAQ;IACR,SAAS;GACX,CAAC;GAGH,MAAM,SAAS,OAAO,qBAAqB,gBAAgB,cAAc,CAAC,CAAC,KACzE,OAAO,eAAe,OAAO,QAAQ,MAAM,GAC3C,OAAO,UAAU,UACf,yBAAyB,KAAK;IAC5B,OAAO;IACP,QAAQ;IACR,SAAS,MAAM;GACjB,CAAC,CACH,CACF;GAEA,IAAI,SAAS,iBAAiB,UAAU,SAAS,gBAAgB,QAC/D,OAAO,OAAO,yBAAyB,KAAK;IAC1C,OAAO;IACP,QAAQ;IACR,SAAS;GACX,CAAC;GAGH,MAAM,eAAe,eAAe,IAAI,SAAS,QAAQ,KAAK,CAAC;GAE/D,IAAI,aAAa,WAAW,eAAe,QAAQ,QACjD,OAAO,OAAO,yBAAyB,KAAK;IAC1C,OAAO;IACP,QAAQ;IACR,SAAS;GACX,CAAC;GAEH,KAAK,IAAI,QAAQ,GAAG,QAAQ,eAAe,QAAQ,QAAQ,SAAS;IAClE,MAAM,iBAAiB,eAAe,QAAQ;IAC9C,MAAM,eAAe,aAAa;IAElC,MAAM,eAAe,OAAO,OAAO,aAAa,OAAO,eAAe,eAAe,CAAC,CAAC,CACrF,cACF,CAAC,CAAC,KACA,OAAO,UAAU,UACf,yBAAyB,KAAK;KAC5B,OAAO;KACP,QAAQ;KACR,SAAS,MAAM;IACjB,CAAC,CACH,CACF;IAEA,MAAM,aAAa,OAAO,OAAO,aAAa,OAAO,eAAe,eAAe,CAAC,CAAC,CACnF,aAAa,OACf,CAAC,CAAC,KACA,OAAO,UAAU,UACf,yBAAyB,KAAK;KAC5B,OAAO;KACP,QAAQ,GAAG,IAAI,GAAG,aAAa,IAAI;KACnC,SAAS,MAAM;IACjB,CAAC,CACH,CACF;IAEA,IACE,aAAa,IAAI,aAAa,SAAS,iBAAiB,SACxD,aAAa,IAAI,cAAc,eAAe,YAC9C,iBAAiB,YAEjB,OAAO,OAAO,yBAAyB,KAAK;KAC1C,OAAO;KACP,QAAQ,GAAG,IAAI,GAAG,aAAa,IAAI;KACnC,SAAS;IACX,CAAC;GAEL;GAEA,iBAAiB;GACjB,mBAAmB,SAAS,gBAAgB;GAC5C,YAAY,IAAI,SAAS,eAAe,MAAM;EAChD;EAEA,IACE,cAAc,WAAW,OAAO,iBAChC,OAAO,kBAAkB,mBAAmB,KAC5C,OAAO,gBAAgB,gBAEvB,OAAO,OAAO,yBAAyB,KAAK;GAC1C,OAAO;GACP,QAAQ,OAAO;GACf,SAAS;EACX,CAAC;EAGH,KAAK,MAAM,cAAc,mBACvB,IACE,WAAW,QAAQ,aAAa,OAAO,aACvC,WAAW,QAAQ,oBAAoB,WAAW,IAAI,oBACtD,WAAW,QAAQ,eAAe,WAAW,IAAI,eACjD,YAAY,IAAI,WAAW,IAAI,gBAAgB,MAAM,WAAW,IAAI,aAEpE,OAAO,OAAO,yBAAyB,KAAK;GAC1C,OAAO;GACP,QAAQ,GAAG,OAAO,UAAU,GAAG,WAAW,IAAI;GAC9C,SAAS;EACX,CAAC;CAGP;CAEA,IACE,QAAQ,MAAM,EAAE,UAAU,CAAC,gBAAgB,IAAI,IAAI,SAAS,CAAC,KAC7D,QAAQ,MAAM,EAAE,UAAU,CAAC,gBAAgB,IAAI,IAAI,SAAS,CAAC,KAC7D,YAAY,MAAM,EAAE,UAAU,CAAC,gBAAgB,IAAI,IAAI,SAAS,CAAC,GAEjE,OAAO,OAAO,yBAAyB,KAAK;EAC1C,OAAO;EACP,QAAQ;EACR,SAAS;CACX,CAAC;AAEL,CAAC;AAED,MAAM,eAAe,OAAO,GAAG,4BAA4B,CAAC,CAAC,aAAa;CACxE,MAAM,SAAS,OAAO;CACtB,MAAM,YAAY,OAAO;CACzB,MAAM,MAAM,OAAO,iBAAiB;CACpC,MAAM,SAAS,OAAO,OAAO;CAC7B,MAAM,UAAU,OAAO,oBAAoB,KAAK,UAAU,KAAK,OAAO,mBAAmB;CAEzF,IAAI,OAAO,cACT,OAAO,sBAAsB,SAAS,MAAM;CAG9C,MAAM,iBAAuB,WAC3B,OAAO,eAAe,QAAQ,OAAO,QAAQ,MAAM;CAErD,MAAM,eAAe,OAAO,IACzB,aACC,UACG,IAAI,QAAQ,CAAC,CACb,KAAK,OAAO,UAAU,UAAU,WAAW,qBAAqB,YAAY,KAAK,CAAC,CAAC,CAC1F;CAEA,MAAM,cAAqD,OAAO,GAAG,2BAA2B,CAAC,CAC/F,WAAW,SAAgC;EACzC,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,qBAAqB,CAAC,CAAC,CACvF,OACF,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,4BAA4B,KAAK,CAAC,CAAC;EAEtF,MAAM,MAAM,OAAO,MAAM;EAEzB,OAAO,aAAa,oBAAoB;EACxC,OAAO,QACJ,YACC,UAAU,UACV,IAAI,KAAK,GAAG,CAAC,CAAC,YAAY,GAC1B,mBACA,UAAU,aACZ,CAAC,CACA,KACC,OAAO,UAAU,UACf,MAAM,SAAS,oBACX,SAAS,UAAU,UAAU,KAAK,IAClC,WAAW,sBAAsB,KAAK,CAC5C,CACF;EACF,OAAO,aAAa,mBAAmB;CACzC,CACF;CAEA,MAAM,SAA2C,OAAO,GAAG,sBAAsB,CAAC,CAAC,WACjF,SACA;EACA,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,mBAAmB,CAAC,CAAC,CACrF,OACF,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,6BAA6B,KAAK,CAAC,CAAC;EAEvF,OAAO,cAAc,SAAS,UAAU,QAAQ;EAEhD,MAAM,aAAa,OAAO,cACxB,qBAAqB,UAAU,oBAAoB,UAAU,KAAK,CACpE,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,WAAW,2BAA2B,KAAK,CAAC,CAAC;EAE/E,MAAM,YAAY,OAAO,qBAAqB,UAAU,KAAK;EAE7D,MAAM,aAAa,OAAO,OAAO,QAAQ,UAAU,MAAM,UAAU,WACjE,sBAAsB,MAAM,CAAC,CAAC,KAC5B,OAAO,KAAK,gBAAgB;GAC1B,UAAU,OAAO;GACjB;EACF,EAAE,CACJ,CACF;EAEA,MAAM,aAAa,OAAO,OAAO,oBAAoB,gBAAgB,CAAC,CAAC;GACrE,UAAU,UAAU;GACpB,SAAS,UAAU,MAAM;GACzB,aAAa;GACb;GACA,sBAAsB,UAAU;GAChC,oBAAoB,UAAU;GAC9B,eAAe,UAAU;GACzB,SAAS;GACT;EACF,CAAC,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,2BAA2B,KAAK,CAAC,CAAC;EAEtF,OAAO,aAAa,eAAe;EAEnC,MAAM,SAAS,OAAO,QAAQ,OAAO,UAAU,CAAC,CAAC,KAC/C,OAAO,UAAU,UAAU;GACzB,IAAI,kBAAkB,KAAK,GACzB,OAAO,SAAS,UAAU,UAAU,KAAK;GAE3C,IAAI,mBAAmB,KAAK,GAC1B,OAAO,MAAM,uBAAuB,KAAA,KAAa,SAAS,MAAM,gBAAgB,IAC5E,eAAe,KAAK;IAClB,UAAU,UAAU;IACpB,SAAS,UAAU,MAAM;IACzB,QAAQ,MAAM;IACd,oBAAoB,MAAM;IAC1B,kBAAkB,MAAM;GAC1B,CAAC,IACD,eAAe,KAAK;IAClB,UAAU,UAAU;IACpB,SAAS,UAAU,MAAM;IACzB,QAAQ,MAAM;GAChB,CAAC;GAGP,OAAO,WAAW,0BAA0B,KAAK;EACnD,CAAC,GACD,OAAO,SAAS,WACd,OAAO,oBAAoB,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,KAC/C,OAAO,UAAU,UAAU,iBAAiB,wBAAwB,KAAK,CAAC,CAC5E,CACF,CACF;EAEA,OAAO,aAAa,cAAc;EAElC,OAAO;CACT,CAAC;CAED,MAAM,cAAc,OAAO,GAAG,2BAA2B,CAAC,CAAC,WAAW,SAAyB;EAC7F,MAAM,SAAS,OAAO,QACnB,KAAK,OAAO,CAAC,CACb,KAAK,OAAO,UAAU,UAAU,WAAW,0BAA0B,KAAK,CAAC,CAAC;EAE/E,OAAO;GACL,OAAO,OAAO;GACd,SAAS,OAAO,QAAQ,KACtB,OAAO,UAAU,UAAU,WAAW,0BAA0B,KAAK,CAAC,GACtE,OAAO,UAAU,cAAc,CACjC;EACF;CACF,CAAC;CAED,MAAM,aAAa,OAAO,GAAG,oBAAoB,CAAC,CAAC,WAAW,SAAqB;EACjF,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KACtF,OAAO,UAAU,UAAU,iBAAiB,wBAAwB,KAAK,CAAC,CAC5E;EAEA,OAAO,cAAc,SAAS,UAAU,QAAQ;EAUhD,QAAO,OARe,YACpB,eAAe,KAAK;GAClB,UAAU,UAAU;GACpB,uBAAuB,UAAU,iBAAiB;GAClD,OAAO,UAAU;EACnB,CAAC,CACH,EAAA,CAEc;CAChB,CAAC;CAED,MAAM,QAAwC,YAAY,OAAO,OAAO,WAAW,OAAO,CAAC;CAE3F,MAAM,gBAAgB,OAAO,GAAG,uBAAuB,CAAC,CAAC,WAAW,SAA4B;EAC9F,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,iBAAiB,CAAC,CAAC,CACnF,OACF,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,+BAA+B,KAAK,CAAC,CAAC;EAEzF,OAAO,cAAc,SAAS,UAAU,QAAQ;EAChD,MAAM,kBAAkB,OAAO,YAAY,UAAU,UAAU,UAAU,WAAW;EACpF,MAAM,SAAS,OAAO,IAAI,KAAK,eAAe;EAE9C,MAAM,OAAO,OAAO,GAAG,2BAA2B,CAAC,CAAC,aAAa;GAC/D,MAAM,wBAAwB,OAAO,IAAI,IAAI,MAAM;GAEnD,MAAM,SAAS,OAAO,YACpB,eAAe,KAAK;IAClB,UAAU,UAAU;IACpB;IACA,OAAO;GACT,CAAC,CACH;GAEA,IAAI,OAAO,UAAU,GAAG;IACtB,OAAO,OAAO,MAAM,OAAO,uBAAuB;IAElD,OAAO,OAAO;GAChB;GAEA,OAAO,OAAO,QAAQ,KAAK,OAAO,KAAK,WAAW,IAAI,IAAI,QAAQ,OAAO,QAAQ,CAAC,CAAC;EACrF,CAAC;EAED,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,OAAO;CAC5D,CAAC;CAED,MAAM,WAA8C,YAClD,OAAO,OAAO,cAAc,OAAO,CAAC;CAEtC,MAAM,eAAiD,OAAO,GAAG,sBAAsB,CAAC,CACtF,WAAW,SAA8B;EACvC,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,mBAAmB,CAAC,CAAC,CACrF,OACF,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,0BAA0B,KAAK,CAAC,CAAC;EAEpF,OAAO,cAAc,SAAS,UAAU,QAAQ;EAEhD,MAAM,WAAW,OAAO,QACrB,aAAa,UAAU,QAAQ,CAAC,CAChC,KAAK,OAAO,UAAU,UAAU,WAAW,iBAAiB,KAAK,CAAC,CAAC;EAEtE,MAAM,UAAU,OAAO,OAAO,QAAQ,SAAS,SAAS,cAAc;EAEtE,IAAI,QAAQ,SAAS,2BACnB,OAAO,OAAO,iBAAiB,KAAK;GAClC,WAAW;GACX,SAAS;EACX,CAAC;EAGH,MAAM,aAAa,OAAO,OAAO,oBAAoB,MAAM,CAAC,CAC1D,SAAS,OAAO,WAClB,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,6BAA6B,KAAK,CAAC,CAAC;EAEvF,OAAO,aAAa,KAAK;GACvB,QAAQ;GACR,UAAU,UAAU;GACpB,cAAc,SAAS,OAAO;GAC9B;GACA;EACF,CAAC;CACH,CACF;CAEA,MAAM,cAAqD,OAAO,GAAG,2BAA2B,CAAC,CAC/F,WAAW,SAA4B;EACrC,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,iBAAiB,CAAC,CAAC,CACnF,OACF,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,4BAA4B,KAAK,CAAC,CAAC;EAEtF,MAAM,SAAS,OAAO,cAAc,SAAS,UAAU,QAAQ;EAE/D,MAAM,aAAa,OAAO,OAAO,oBAAoB,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,KAC/E,OAAO,UAAU,UAAU,iBAAiB,sBAAsB,KAAK,CAAC,CAC1E;EAEA,OAAO,WAAW,KAAK;GACrB,UAAU,UAAU;GACpB,cAAc,OAAO;GACrB;GACA,eAAe,OAAO;EACxB,CAAC;CACH,CACF;CAEA,MAAM,iBAA4C,OAAO,GAAG,8BAA8B,CAAC,CACzF,WAAW,SAAgC;EACzC,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,qBAAqB,CAAC,CAAC,CACvF,OACF,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,uBAAuB,KAAK,CAAC,CAAC;EAEjF,MAAM,SAAS,OAAO,cAAc,SAAS,UAAU,WAAW,QAAQ;EAE1E,IAAI,UAAU,WAAW,kBAAkB,OAAO,eAChD,OAAO,OAAO,mBAAmB,KAAK;GACpC,UAAU,UAAU,WAAW;GAC/B,QAAQ;EACV,CAAC;EASH,KAAI,OAN2B,aAC7B,SACA,UAAU,WAAW,UACrB,UAAU,WAAW,eACvB,OAEwB,UAAU,WAAW,YAC3C,OAAO,OAAO,mBAAmB,KAAK;GACpC,UAAU,UAAU,WAAW;GAC/B,QAAQ;EACV,CAAC;EAEH,MAAM,iBAAiB,OAAO,iBAAiB,UAAU,UAAU;EAEnE,MAAM,MAAM,cAAc,KAAK;GAC7B,UAAU,UAAU,WAAW;GAC/B,iBAAiB,UAAU,WAAW;GACtC,YAAY,UAAU,WAAW;GACjC;EACF,CAAC;EAED,OAAO,aAAa,wBAAwB;EAC5C,OAAO,QAAQ,eAAe,GAAG,CAAC,CAAC,KACjC,OAAO,UAAU,UACf,uBAAuB,KAAK,IACxB,mBAAmB,KAAK;GACtB,UAAU,UAAU,WAAW;GAC/B,QAAQ;EACV,CAAC,IACD,WAAW,mBAAmB,KAAK,CACzC,CACF;EACA,OAAO,aAAa,uBAAuB;CAC7C,CACF;CAEA,MAAM,iBAA4C,OAAO,GAAG,8BAA8B,CAAC,CACzF,WAAW,SAAgC;EACzC,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,qBAAqB,CAAC,CAAC,CACvF,OACF,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,iBAAiB,8BAA8B,KAAK,CAAC,CAAC;EAExF,MAAM,SAAS,OAAO,cAAc,SAAS,UAAU,QAAQ;EAE/D,MAAM,OAAO,OAAO,QACjB,eAAe,UAAU,UAAU,UAAU,sBAAsB,OAAO,aAAa,CAAC,CACxF,KAAK,OAAO,UAAU,UAAU,WAAW,mBAAmB,KAAK,CAAC,CAAC;EAExE,IAAI,KAAK,WAAW,GAAG,OAAO,OAAO,KAAK;EAC1C,IAAI,KAAK,WAAW,GAClB,OAAO,OAAO,iBAAiB,KAAK;GAClC,WAAW;GACX,SAAS,iDAAiD,KAAK,OAAO;EACxE,CAAC;EAEH,MAAM,MAAM,KAAK;EACjB,MAAM,aAAa,OAAO,iBAAiB,IAAI,eAAe;EAE9D,IACE,IAAI,cAAc,UAAU,YAC5B,WAAW,aAAa,IAAI,aAC5B,WAAW,oBAAoB,IAAI,oBACnC,WAAW,eAAe,IAAI,aAE9B,OAAO,OAAO,iBAAiB,KAAK;GAClC,WAAW;GACX,SAAS;EACX,CAAC;EASH,KAAI,OAN2B,aAC7B,SACA,WAAW,UACX,WAAW,eACb,OAEwB,WAAW,YACjC,OAAO,OAAO,mBAAmB,KAAK;GACpC,UAAU,WAAW;GACrB,QAAQ;EACV,CAAC;EAGH,OAAO,OAAO,KAAK,UAAU;CAC/B,CACF;CAEA,MAAM,yBAA4D,OAAO,GACvE,sCACF,CAAC,CAAC,WAAW,SAAS;EACpB,MAAM,YAAY,OAAO,OAAO,oBAC9B,OAAO,OAAO,6BAA6B,CAC7C,CAAC,CAAC,OAAO,CAAC,CAAC,KACT,OAAO,UAAU,UAAU,iBAAiB,gCAAgC,KAAK,CAAC,CACpF;EAEA,MAAM,iBAAiB,OAAO,iBAAiB,UAAU,UAAU;EAEnE,OAAO,QACJ,uBAAuB,WAAW,cAAc,CAAC,CACjD,KACC,OAAO,UAAU,UACf,MAAM,SAAS,wBACf,MAAM,SAAS,mBACf,MAAM,SAAS,0BACX,QACA,WAAW,4BAA4B,KAAK,CAClD,CACF;CACJ,CAAC;CAED,MAAM,yBAA4D,OAAO,GACvE,sCACF,CAAC,CAAC,WAAW,SAAS;EACpB,MAAM,YAAY,OAAO,OAAO,oBAAoB,OAAO,OAAO,qBAAqB,CAAC,CAAC,CACvF,OACF,CAAC,CAAC,KACA,OAAO,UAAU,UAAU,iBAAiB,uCAAuC,KAAK,CAAC,CAC3F;EAEA,MAAM,SAAS,OAAO,cAAc,SAAS,UAAU,QAAQ;EAE/D,MAAM,gBACJ,mBAAmB,KAAK;GAAE,UAAU,UAAU;GAAU,QAAQ;EAAU,CAAC;EAE7E,MAAM,OAAO,OAAO,QACjB,uBAAuB,UAAU,QAAQ,CAAC,CAC1C,KACC,OAAO,UAAU,UACf,MAAM,SAAS,6BACX,QAAQ,IACR,WAAW,4BAA4B,KAAK,CAClD,CACF;EAEF,IAAI,KAAK,WAAW,GAAG,OAAO,OAAO,KAAK;EAC1C,IAAI,KAAK,WAAW,GAAG,OAAO,OAAO,QAAQ;EAC7C,MAAM,MAAM,KAAK;EAEjB,MAAM,aAAa,OAAO,OAAO,aAAa,OAAO,eAAe,gBAAgB,CAAC,CAAC,CACpF,IAAI,eACN,CAAC,CAAC,KAAK,OAAO,SAAS,OAAO,CAAC;EAE/B,IACE,IAAI,cAAc,UAAU,YAC5B,WAAW,aAAa,IAAI,aAC5B,WAAW,oBAAoB,IAAI,oBACnC,WAAW,eAAe,IAAI,aAE9B,OAAO,OAAO,QAAQ;EACxB,IAAI,WAAW,kBAAkB,OAAO,eACtC,OAAO,OAAO,mBAAmB,KAAK;GACpC,UAAU,UAAU;GACpB,QAAQ;EACV,CAAC;EACH,IAAI,WAAW,mBAAmB,UAAU,sBAAsB,OAAO,gBACvE,OAAO,OAAO,KAAK;EAQrB,KAAI,OAN2B,aAC7B,SACA,WAAW,UACX,WAAW,eACb,OAEwB,WAAW,YACjC,OAAO,OAAO,mBAAmB,KAAK;GACpC,UAAU,UAAU;GACpB,QAAQ;EACV,CAAC;EAEH,OAAO,OAAO,KAAK,UAAU;CAC/B,CAAC;CAED,MAAM,cAAc,YAAY,GAAG;EACjC;EACA,QAAQ;EACR;EACA;EACA;EACA;EACA,aAAa;GAAE,MAAM;GAAgB,MAAM;EAAe;EAC1D,qBAAqB;GAAE,MAAM;GAAwB,MAAM;EAAuB;CACpF,CAAC;CAED,OAAO,QAAQ,KAAK,aAAa,WAAW;AAC9C,CAAC;;;;;AAMD,MAAa,mBAIT,MAAM,cAAc,aAAa,CAAC;;;;;;AAOtC,MAAa,sBACX,YAEA,MAAM,OAAO,eAAe,CAAC,CAC3B,OAAO,oBAAoB,oBAAoB,CAAC,CAAC;CAC/C,yBAAyB,QAAQ,2BAA2B;CAC5D,wBACE,QAAQ,0BAA0B,SAAS,SAAS,gCAAgC;CACtF,qBAAqB,QAAQ,uBAAA;CAC7B,cAAc,QAAQ,gBAAgB;AACxC,CAAC,CAAC,CAAC,KACD,OAAO,UAAU,UACf,eAAe,KAAK;CAClB,OAAO;CACP,WAAW;CACX,SAAS,MAAM;AACjB,CAAC,CACH,CACF,CACF;;AAGF,MAAa,yBACX,YAEA,QAAQ,cAAc,KAAA,IAClB,mBAAmB,QACnB,MAAM,QAAQ,kBAAkB,CAAC,CAAC,EAAE,KAAK,QAAQ,UAAU,CAAC;;;;;;;AAQlE,MAAa,SACX,YAEA,MAAM,OACJ,OAAO,IAAI,kBAAkB,WAC3B,iBAAiB,KACf,MAAM,QACJ,MAAM,SACJ,MAAM,QAAQ,eAAe,CAAC,CAAC,MAAM,GACrC,sBAAsB,OAAO,GAC7B,aAAa,MAAM,EAAE,SAAS,QAAQ,QAAQ,CAAC,GAC/C,cAAc,KAChB,CACF,CACF,CACF,CACF,CAAC,CAAC,KAAK,MAAM,QAAQ,mBAAmB,OAAO,CAAC,CAAC"}

package/dist/PortProtocol.d.mts

@@ -1,7 +1,7 @@
 import { Schema } from "effect";
 import { CanonicalRecordEnvelope } from "@effect-agent/thread/Records";
-import { AbortCommand, AbortIntent, AdmissionConflict, AdmissionPolicyError, AdmissionRequest, AdmissionResult, ChildSettledNotification, JoinedToHost, LedgerError, MarkReadyRequest, SettlementConflict, SubmissionLookupByKey, SubmissionSnapshot } from "@effect-agent/thread/SubmissionLedger";
 import { AppendConflict, AppendResult, FenceRejected, FencedAppendRequest, ThreadExport, ThreadExportRequest, ThreadMaterialization, ThreadNotMaterialized, ThreadRead, ThreadStoreError, ThreadTail, ThreadTailRequest } from "@effect-agent/thread/ThreadStore";
+import { AbortCommand, AbortIntent, AdmissionConflict, AdmissionPolicyError, AdmissionRequest, AdmissionResult, ChildSettledNotification, JoinedToHost, LedgerError, MarkReadyRequest, SettlementConflict, SubmissionLookupByKey, SubmissionSnapshot } from "@effect-agent/thread/SubmissionLedger";
 declare namespace PortProtocol_d_exports {
   export { LedgerAdmitCall, LedgerAdmitResult, LedgerLookupCall, LedgerLookupResult, LedgerMarkReadyCall, LedgerMarkReadyResult, LedgerRecordChildSettledCall, LedgerRecordChildSettledResult, LedgerRequestAbortCall, LedgerRequestAbortResult, LedgerResolveAdmissionCall, LedgerResolveAdmissionResult, MAX_PORT_DIAGNOSTIC_LENGTH, PortFailed, PortFailure, PortProtocolError, PortRequest, PortRequestEnvelope, PortResponse, PortResponseEnvelope, PortResult, PortSucceeded, StoreAppendCall, StoreAppendResult, StoreExportCall, StoreExportResult, StoreInspectTailCall, StoreInspectTailResult, StoreMaterializeCall, StoreMaterializeResult, StoreReadPageCall, StoreReadPageResult, boundPortDiagnostic, decodePortRequest, decodePortResponse, encodePortRequest, encodePortResponse };
 }
@@ -22,9 +22,9 @@ declare namespace PortProtocol_d_exports {
  *   `recordChildSettled`;
  * - store: `materialize`, `append`, `read` (one page), `inspectTail`, `export`.
  *
- * Every other port operation is lane-local by construction and is NOT given an envelope:
- * honesty over accidental distribution — the routing layer fails such calls fast and typed
- * instead of quietly widening the distributed surface.
+ * Every other port operation is lane-local and has no envelope. A foreign disposable
+ * recovery-cache load returns a miss so the caller can replay canonical history. Other
+ * foreign operations fail fast and typed instead of widening the distributed surface.
  *
  * Failures cross the boundary as the `PortFailure` union and re-decode on the caller side to
  * the SAME tagged error types the local facet would have produced, so routed calls keep
@@ -3047,6 +3047,14 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
   readonly failure: {
     readonly _tag: "PortProtocolError";
     readonly message: string;
+  } | {
+    readonly _tag: "ThreadNotMaterialized";
+    readonly threadId: string;
+  } | {
+    readonly _tag: "FenceRejected";
+    readonly threadId: string;
+    readonly actualEpoch: number;
+    readonly attemptedEpoch: number;
   } | {
     readonly _tag: "AdmissionConflict";
     readonly threadId: string;
@@ -3076,9 +3084,6 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
     readonly operation: string;
     readonly message: string;
     readonly cause?: Schema.Json | undefined;
-  } | {
-    readonly _tag: "ThreadNotMaterialized";
-    readonly threadId: string;
   } | {
     readonly _tag: "AppendConflict";
     readonly threadId: string;
@@ -3086,11 +3091,6 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
     readonly reason: "batch-digest" | "record-identity" | "tail";
     readonly actualTailSequence?: number | undefined;
     readonly actualTailDigest?: string | undefined;
-  } | {
-    readonly _tag: "FenceRejected";
-    readonly threadId: string;
-    readonly actualEpoch: number;
-    readonly attemptedEpoch: number;
   };
 }, Schema.SchemaError, never>;
 declare const decodePortResponse: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => import("effect/Effect").Effect<PortFailed | PortSucceeded, Schema.SchemaError, never>;