@effect-agent/storage-cloudflare 0.1.0-beta.8 → 0.1.0-beta.80

package/dist/DoScheduleStore.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DoScheduleStore.mjs","names":[],"sources":["../src/DoScheduleStore.ts"],"sourcesContent":["import {\n  ScheduleCapacityError,\n  ScheduleDueCursor,\n  defaultSchedulingLimits,\n  ScheduleChange,\n  ScheduleConflict,\n  ScheduleFailpoint,\n  type ScheduleFailpointError,\n  ScheduleKey,\n  ScheduleId,\n  ScheduleInstant,\n  ScheduleNotFound,\n  ScheduleOwner,\n  type SchedulePage,\n  SchedulePageRequest,\n  ScheduleRecord,\n  ScheduleStorageError,\n  ScheduleStore,\n} from \"@effect-agent/thread/Schedule\";\nimport {\n  applyScheduleChange,\n  scheduleUsesCapacity,\n  scheduleDeadline,\n} from \"@effect-agent/thread/ScheduleTransition\";\nimport { upgradeV2Schedules } from \"@effect-agent/thread/SqlStorageV2Upgrade\";\nimport { Context, Effect, Layer, Result, Schema } from \"effect\";\nimport * as SqlClientService from \"effect/unstable/sql/SqlClient\";\n\nconst CURRENT_SCHEDULE_STORE_VERSION = 3;\nconst MAX_STORED_SCHEDULE_BYTES = 1_900_000;\n\nconst StoredScheduleJson = Schema.String.check(Schema.isMaxLength(MAX_STORED_SCHEDULE_BYTES));\nconst StoredDeadline = Schema.NullOr(ScheduleInstant);\n\nclass ScheduleRow extends Schema.Class<ScheduleRow>(\"@effect-agent/storage-cloudflare/ScheduleRow\")(\n  {\n    tenant_id: ScheduleOwner.fields.tenantId,\n    owner_id: ScheduleOwner.fields.ownerId,\n    schedule_id: ScheduleId,\n    deadline_at_millis: StoredDeadline,\n    record_json: StoredScheduleJson,\n  },\n) {}\n\nconst ScheduleDueRow = Schema.Struct({\n  tenant_id: ScheduleOwner.fields.tenantId,\n  owner_id: ScheduleOwner.fields.ownerId,\n  schedule_id: ScheduleId,\n  deadline_at_millis: ScheduleInstant,\n});\n\nclass ScheduleCountRow extends Schema.Class<ScheduleCountRow>(\n  \"@effect-agent/storage-cloudflare/ScheduleCountRow\",\n)({\n  schedule_count: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0)),\n}) {}\n\nclass ScheduleDeadlineRow extends Schema.Class<ScheduleDeadlineRow>(\n  \"@effect-agent/storage-cloudflare/ScheduleDeadlineRow\",\n)({\n  deadline_at_millis: StoredDeadline,\n}) {}\n\nclass ScheduleStoreStateRow extends Schema.Class<ScheduleStoreStateRow>(\n  \"@effect-agent/storage-cloudflare/ScheduleStoreStateRow\",\n)({\n  storage_version: Schema.Int.check(Schema.isGreaterThan(0)),\n  alarm_generation: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0)),\n}) {}\n\nclass ScheduleTableNameRow extends Schema.Class<ScheduleTableNameRow>(\n  \"@effect-agent/storage-cloudflare/ScheduleTableNameRow\",\n)({\n  name: Schema.String,\n}) {}\n\nexport interface DoScheduleAlarmReplacement {\n  readonly deadlineAtMillis: number | null;\n  /** Included in every logical alarm payload so equal-time replacement stays distinguishable. */\n  readonly generation: number;\n}\n\nexport type DoScheduleReplaceAlarm = (\n  replacement: DoScheduleAlarmReplacement,\n) => Effect.Effect<void, ScheduleStorageError>;\n\n/**\n * Platform-owned transaction boundary for schedule SQL and logical alarm mutation. The callback\n * and its `replaceAlarm` capability belong to one fiber and must not escape or fork.\n */\nexport class DoScheduleTransaction extends Context.Service<\n  DoScheduleTransaction,\n  {\n    readonly run: <A, E, R>(\n      body: (replaceAlarm: DoScheduleReplaceAlarm) => Effect.Effect<A, E, R>,\n    ) => Effect.Effect<A, E | ScheduleStorageError, R>;\n  }\n>()(\"@effect-agent/storage-cloudflare/DoScheduleTransaction\") {}\n\n/** Platform driver operations that use the same schedule-state and alarm transaction. */\nexport class DoScheduleAlarmControl extends Context.Service<\n  DoScheduleAlarmControl,\n  {\n    /** Establish a future recovery wake before cross-Object admission starts. */\n    readonly prearm: (\n      deadlineAtMillis: number,\n    ) => Effect.Effect<void, ScheduleStorageError | ScheduleFailpointError>;\n    /** Replace or cancel the wake from the object's authoritative indexed deadline. */\n    readonly reconcile: Effect.Effect<void, ScheduleStorageError | ScheduleFailpointError>;\n  }\n>()(\"@effect-agent/storage-cloudflare/DoScheduleAlarmControl\") {}\n\nconst unavailable = (operation: string): ScheduleStorageError =>\n  ScheduleStorageError.make({ operation, reason: \"unavailable\" });\n\nconst corrupt = (operation: string): ScheduleStorageError =>\n  ScheduleStorageError.make({ operation, reason: \"corrupt\" });\n\nconst decodeRows = Effect.fn(\"DoScheduleStore.decodeRows\")(function* <A, I, R>(\n  schema: Schema.Codec<A, I, R>,\n  rows: ReadonlyArray<unknown>,\n  operation: string,\n): Effect.fn.Return<A, ScheduleStorageError, R> {\n  return yield* Schema.decodeUnknownEffect(schema)(rows).pipe(\n    Effect.mapError(() => corrupt(operation)),\n  );\n});\n\nconst decodeBoundary = <A, I, R>(\n  schema: Schema.Codec<A, I, R>,\n  value: unknown,\n  operation: string,\n): Effect.Effect<A, ScheduleStorageError, R> =>\n  Schema.decodeUnknownEffect(schema)(value).pipe(Effect.mapError(() => corrupt(operation)));\n\nconst decodeRecord = Effect.fn(\"DoScheduleStore.decodeRecord\")(function* (\n  row: ScheduleRow,\n): Effect.fn.Return<ScheduleRecord, ScheduleStorageError> {\n  const record = yield* Schema.decodeEffect(Schema.fromJsonString(ScheduleRecord))(\n    row.record_json,\n  ).pipe(Effect.mapError(() => corrupt(\"decode schedule\")));\n\n  if (\n    record.owner.tenantId !== row.tenant_id ||\n    record.owner.ownerId !== row.owner_id ||\n    record.scheduleId !== row.schedule_id ||\n    scheduleDeadline(record) !== row.deadline_at_millis\n  ) {\n    return yield* corrupt(\"decode schedule index\");\n  }\n\n  return record;\n});\n\nconst encodeRecord = Effect.fn(\"DoScheduleStore.encodeRecord\")(function* (\n  record: ScheduleRecord,\n): Effect.fn.Return<string, ScheduleStorageError> {\n  const encoded = yield* Schema.encodeEffect(Schema.fromJsonString(ScheduleRecord))(record).pipe(\n    Effect.mapError(() => corrupt(\"encode schedule\")),\n  );\n\n  return yield* Schema.decodeUnknownEffect(StoredScheduleJson)(encoded).pipe(\n    Effect.mapError(() => corrupt(\"encode schedule bounds\")),\n  );\n});\n\nconst initializeScheduleStore = Effect.fn(\"DoScheduleStore.initialize\")(function* () {\n  const sql = yield* SqlClientService.SqlClient;\n  const operation = \"initialize schedule store\";\n\n  const rawTables = yield* sql<Record<string, unknown>>`\n    SELECT name\n    FROM sqlite_master\n    WHERE type = 'table'\n      AND name IN (\n        'effect_agent_schedule_store_state',\n        'effect_agent_schedules'\n      )\n    ORDER BY name\n  `.pipe(Effect.mapError(() => unavailable(operation)));\n\n  const tables = yield* decodeRows(Schema.Array(ScheduleTableNameRow), rawTables, operation);\n  const hasState = tables.some((row) => row.name === \"effect_agent_schedule_store_state\");\n  const hasSchedules = tables.some((row) => row.name === \"effect_agent_schedules\");\n\n  if (!hasState) {\n    if (hasSchedules) return yield* corrupt(operation);\n    yield* sql\n      .withTransaction(\n        Effect.gen(function* () {\n          yield* sql`\n            CREATE TABLE effect_agent_schedule_store_state (\n              singleton INTEGER PRIMARY KEY NOT NULL CHECK (singleton = 1),\n              storage_version INTEGER NOT NULL,\n              alarm_generation INTEGER NOT NULL\n            )\n          `.withoutTransform;\n          yield* sql`\n            CREATE TABLE effect_agent_schedules (\n              tenant_id TEXT NOT NULL,\n              owner_id TEXT NOT NULL,\n              schedule_id TEXT NOT NULL,\n              deadline_at_millis INTEGER,\n              record_json TEXT NOT NULL,\n              PRIMARY KEY (tenant_id, owner_id, schedule_id)\n            )\n          `.withoutTransform;\n          yield* sql`\n            CREATE INDEX effect_agent_schedules_deadline\n              ON effect_agent_schedules (deadline_at_millis, tenant_id, owner_id, schedule_id)\n              WHERE deadline_at_millis IS NOT NULL\n          `.withoutTransform;\n          yield* sql`\n            CREATE INDEX effect_agent_schedules_owner_deadline\n              ON effect_agent_schedules (tenant_id, owner_id, deadline_at_millis, schedule_id)\n              WHERE deadline_at_millis IS NOT NULL\n          `.withoutTransform;\n          yield* sql`\n            INSERT INTO effect_agent_schedule_store_state (\n              singleton, storage_version, alarm_generation\n            ) VALUES (1, ${CURRENT_SCHEDULE_STORE_VERSION}, 0)\n          `.withoutTransform;\n        }),\n      )\n      .pipe(Effect.mapError(() => unavailable(operation)));\n\n    return;\n  }\n\n  if (!hasSchedules) return yield* corrupt(operation);\n\n  const rawState = yield* sql<Record<string, unknown>>`\n    SELECT storage_version, alarm_generation\n    FROM effect_agent_schedule_store_state\n    WHERE singleton = 1\n  `.pipe(Effect.mapError(() => unavailable(operation)));\n\n  const state = yield* decodeRows(Schema.Array(ScheduleStoreStateRow), rawState, operation);\n\n  if (state.length === 1 && state[0].storage_version === 2) {\n    const failpoint = yield* ScheduleFailpoint;\n\n    yield* sql\n      .withTransaction(\n        Effect.gen(function* () {\n          const current = yield* sql<{\n            storage_version: number;\n          }>`SELECT storage_version FROM effect_agent_schedule_store_state WHERE singleton=1`;\n\n          if (current.length === 1 && current[0].storage_version === 3) return;\n          if (current.length !== 1 || current[0].storage_version !== 2)\n            return yield* corrupt(\"schedule version changed during upgrade\");\n          yield* upgradeV2Schedules(MAX_STORED_SCHEDULE_BYTES);\n          yield* failpoint.hit(\"upgrade:before-version\");\n          yield* sql`UPDATE effect_agent_schedule_store_state SET storage_version=3 WHERE singleton=1`;\n          yield* failpoint.hit(\"upgrade:after-version\");\n        }),\n      )\n      .pipe(\n        Effect.catchTag(\"StorageUpgradeError\", (error) =>\n          ScheduleStorageError.make({\n            reason: \"corrupt\",\n            operation: \"upgrade v2 schedules\",\n            cause: error,\n          }),\n        ),\n        Effect.catchTag(\"SqlError\", () => unavailable(\"upgrade v2 schedules\")),\n        Effect.catchTag(\"ScheduleFailpointError\", () =>\n          unavailable(\"upgrade v2 schedules failpoint\"),\n        ),\n      );\n\n    return;\n  }\n\n  if (state.length !== 1 || state[0].storage_version !== CURRENT_SCHEDULE_STORE_VERSION) {\n    return yield* corrupt(\n      state.length === 1\n        ? `${operation}: incompatible storage version ${state[0].storage_version}; expected ${CURRENT_SCHEDULE_STORE_VERSION}`\n        : `${operation}: invalid storage version row`,\n    );\n  }\n});\n\nconst makeServices = Effect.gen(function* () {\n  const sql = yield* SqlClientService.SqlClient;\n  const transactions = yield* DoScheduleTransaction;\n  const scheduleFailpoint = yield* ScheduleFailpoint;\n\n  yield* initializeScheduleStore();\n\n  const readRows = Effect.fn(\"DoScheduleStore.readRows\")(function* (\n    key: ScheduleKey,\n    operation: string,\n  ): Effect.fn.Return<ReadonlyArray<ScheduleRow>, ScheduleStorageError> {\n    const rows = yield* sql<Record<string, unknown>>`\n      SELECT tenant_id, owner_id, schedule_id, deadline_at_millis, record_json\n      FROM effect_agent_schedules\n      WHERE tenant_id = ${key.owner.tenantId}\n        AND owner_id = ${key.owner.ownerId}\n        AND schedule_id = ${key.scheduleId}\n    `.pipe(Effect.mapError(() => unavailable(operation)));\n\n    return yield* decodeRows(Schema.Array(ScheduleRow), rows, operation);\n  });\n\n  const readOne = Effect.fn(\"DoScheduleStore.readOne\")(function* (\n    key: ScheduleKey,\n    operation: string,\n  ): Effect.fn.Return<ScheduleRecord | null, ScheduleStorageError> {\n    const rows = yield* readRows(key, operation);\n\n    if (rows.length === 0) return null;\n    if (rows.length !== 1) return yield* corrupt(operation);\n\n    return yield* decodeRecord(rows[0]);\n  });\n\n  const readNextDeadline = Effect.fn(\"DoScheduleStore.readNextDeadline\")(function* (\n    owner: ScheduleOwner | undefined,\n    operation: string,\n  ): Effect.fn.Return<number | null, ScheduleStorageError> {\n    const rows =\n      owner === undefined\n        ? yield* sql<Record<string, unknown>>`\n            SELECT MIN(deadline_at_millis) AS deadline_at_millis\n            FROM effect_agent_schedules\n            WHERE deadline_at_millis IS NOT NULL\n          `.pipe(Effect.mapError(() => unavailable(operation)))\n        : yield* sql<Record<string, unknown>>`\n            SELECT MIN(deadline_at_millis) AS deadline_at_millis\n            FROM effect_agent_schedules\n            WHERE tenant_id = ${owner.tenantId}\n              AND owner_id = ${owner.ownerId}\n              AND deadline_at_millis IS NOT NULL\n          `.pipe(Effect.mapError(() => unavailable(operation)));\n\n    const decoded = yield* decodeRows(Schema.Array(ScheduleDeadlineRow), rows, operation);\n\n    if (decoded.length !== 1) return yield* corrupt(operation);\n\n    return decoded[0].deadline_at_millis;\n  });\n\n  const replaceAlarm = Effect.fn(\"DoScheduleStore.replaceAlarm\")(function* (\n    replace: DoScheduleReplaceAlarm,\n    deadlineAtMillis: number | null,\n    operation: string,\n  ) {\n    const rawState = yield* sql<Record<string, unknown>>`\n      UPDATE effect_agent_schedule_store_state\n      SET alarm_generation = alarm_generation + 1\n      WHERE singleton = 1\n      RETURNING storage_version, alarm_generation\n    `.pipe(Effect.mapError(() => unavailable(operation)));\n\n    const state = yield* decodeRows(Schema.Array(ScheduleStoreStateRow), rawState, operation);\n\n    if (state.length !== 1 || state[0].storage_version !== CURRENT_SCHEDULE_STORE_VERSION) {\n      return yield* corrupt(operation);\n    }\n    yield* scheduleFailpoint.hit(\"schedule:alarm:before\");\n    yield* replace({ deadlineAtMillis, generation: state[0].alarm_generation });\n    yield* scheduleFailpoint.hit(\"schedule:alarm:after\");\n  });\n\n  const insert: ScheduleStore[\"Service\"][\"insert\"] = Effect.fn(\"DoScheduleStore.insert\")(\n    function* (record, ownerLimit) {\n      const operation = \"insert schedule\";\n      const canonical = yield* decodeBoundary(ScheduleRecord, record, operation);\n      const recordJson = yield* encodeRecord(canonical);\n\n      const result = yield* transactions.run((replace) =>\n        Effect.gen(function* () {\n          const existing = yield* readOne(canonical, operation);\n\n          if (existing !== null) {\n            if (existing.creationFingerprint === canonical.creationFingerprint) {\n              return { record: existing, inserted: false } as const;\n            }\n\n            return yield* ScheduleConflict.make({ reason: \"creation\", key: canonical });\n          }\n\n          const rawCounts = yield* sql<Record<string, unknown>>`\n            SELECT COUNT(*) AS schedule_count\n            FROM effect_agent_schedules\n            WHERE tenant_id = ${canonical.owner.tenantId}\n              AND owner_id = ${canonical.owner.ownerId}\n              AND (json_extract(record_json, '$.pending') IS NOT NULL OR\n                (json_extract(record_json, '$.state') != 'cancelled' AND json_extract(record_json, '$.nextAtMillis') IS NOT NULL))\n          `.pipe(Effect.mapError(() => unavailable(operation)));\n\n          const counts = yield* decodeRows(Schema.Array(ScheduleCountRow), rawCounts, operation);\n\n          if (counts.length !== 1) return yield* corrupt(operation);\n          if (counts[0].schedule_count >= ownerLimit) {\n            return yield* ScheduleCapacityError.make({ limit: ownerLimit });\n          }\n          yield* scheduleFailpoint.hit(\"schedule:insert:before\");\n          yield* sql`\n            INSERT INTO effect_agent_schedules (\n              tenant_id, owner_id, schedule_id, deadline_at_millis, record_json\n            ) VALUES (\n              ${canonical.owner.tenantId},\n              ${canonical.owner.ownerId},\n              ${canonical.scheduleId},\n              ${scheduleDeadline(canonical)},\n              ${recordJson}\n            )\n          `.pipe(Effect.mapError(() => unavailable(operation)));\n          const deadline = yield* readNextDeadline(undefined, operation);\n\n          yield* replaceAlarm(replace, deadline, operation);\n\n          return { record: canonical, inserted: true } as const;\n        }),\n      );\n\n      if (result.inserted) yield* scheduleFailpoint.hit(\"schedule:insert:after\");\n\n      return result.record;\n    },\n  );\n\n  const get: ScheduleStore[\"Service\"][\"get\"] = Effect.fn(\"DoScheduleStore.get\")(function* (key) {\n    const canonical = yield* decodeBoundary(ScheduleKey, key, \"get schedule\");\n\n    return yield* readOne(canonical, \"get schedule\");\n  });\n\n  const list: ScheduleStore[\"Service\"][\"list\"] = Effect.fn(\"DoScheduleStore.list\")(function* (\n    requestValue: SchedulePageRequest,\n  ): Effect.fn.Return<SchedulePage, ScheduleStorageError> {\n    const operation = \"list schedules\";\n    const request = yield* decodeBoundary(SchedulePageRequest, requestValue, operation);\n\n    const rows =\n      request.after === undefined\n        ? yield* sql<Record<string, unknown>>`\n            SELECT tenant_id, owner_id, schedule_id, deadline_at_millis, record_json\n            FROM effect_agent_schedules\n            WHERE tenant_id = ${request.owner.tenantId}\n              AND owner_id = ${request.owner.ownerId}\n            ORDER BY schedule_id\n            LIMIT ${request.limit + 1}\n          `.pipe(Effect.mapError(() => unavailable(operation)))\n        : yield* sql<Record<string, unknown>>`\n            SELECT tenant_id, owner_id, schedule_id, deadline_at_millis, record_json\n            FROM effect_agent_schedules\n            WHERE tenant_id = ${request.owner.tenantId}\n              AND owner_id = ${request.owner.ownerId}\n              AND schedule_id > ${request.after}\n            ORDER BY schedule_id\n            LIMIT ${request.limit + 1}\n          `.pipe(Effect.mapError(() => unavailable(operation)));\n\n    const decoded = yield* decodeRows(Schema.Array(ScheduleRow), rows, operation);\n    const records = yield* Effect.forEach(decoded, decodeRecord);\n    const hasNext = records.length > request.limit;\n    const items = hasNext ? records.slice(0, request.limit) : records;\n\n    return { items, next: hasNext ? (items.at(-1)?.scheduleId ?? null) : null };\n  });\n\n  const change: ScheduleStore[\"Service\"][\"change\"] = Effect.fn(\"DoScheduleStore.change\")(function* (\n    key,\n    change,\n    ownerLimit = defaultSchedulingLimits.maxSchedulesPerOwner,\n  ) {\n    const operation = \"change schedule\";\n    const canonicalKey = yield* decodeBoundary(ScheduleKey, key, operation);\n    const canonicalChange = yield* decodeBoundary(ScheduleChange, change, operation);\n\n    const result = yield* transactions.run((replace) =>\n      Effect.gen(function* () {\n        const current = yield* readOne(canonicalKey, operation);\n\n        if (current === null) return yield* ScheduleNotFound.make({ key: canonicalKey });\n        const transition = applyScheduleChange(current, canonicalChange);\n\n        if (Result.isFailure(transition)) return yield* transition.failure;\n        const next = transition.success;\n\n        if (!scheduleUsesCapacity(current) && scheduleUsesCapacity(next)) {\n          const rawCounts = yield* sql<Record<string, unknown>>`\n              SELECT COUNT(*) AS schedule_count FROM effect_agent_schedules\n              WHERE tenant_id = ${key.owner.tenantId} AND owner_id = ${key.owner.ownerId}\n                AND (json_extract(record_json, '$.pending') IS NOT NULL OR\n                  (json_extract(record_json, '$.state') != 'cancelled' AND json_extract(record_json, '$.nextAtMillis') IS NOT NULL))\n            `.pipe(Effect.mapError(() => unavailable(operation)));\n\n          const counts = yield* decodeRows(Schema.Array(ScheduleCountRow), rawCounts, operation);\n\n          if (counts.length !== 1) return yield* corrupt(operation);\n          if (counts[0].schedule_count >= ownerLimit)\n            return yield* ScheduleCapacityError.make({ limit: ownerLimit });\n        }\n        if (next === current) return { record: current, changed: false } as const;\n        const recordJson = yield* encodeRecord(next);\n\n        yield* scheduleFailpoint.hit(`schedule:${canonicalChange._tag.toLowerCase()}:before`);\n        yield* sql`\n            UPDATE effect_agent_schedules\n            SET deadline_at_millis = ${scheduleDeadline(next)}, record_json = ${recordJson}\n            WHERE tenant_id = ${canonicalKey.owner.tenantId}\n              AND owner_id = ${canonicalKey.owner.ownerId}\n              AND schedule_id = ${canonicalKey.scheduleId}\n          `.pipe(Effect.mapError(() => unavailable(operation)));\n        const deadline = yield* readNextDeadline(undefined, operation);\n\n        yield* replaceAlarm(replace, deadline, operation);\n\n        return { record: next, changed: true } as const;\n      }),\n    );\n\n    if (result.changed) {\n      yield* scheduleFailpoint.hit(`schedule:${canonicalChange._tag.toLowerCase()}:after`);\n    }\n\n    return result.record;\n  });\n\n  const due: ScheduleStore[\"Service\"][\"due\"] = Effect.fn(\"DoScheduleStore.due\")(function* (\n    nowMillis,\n    limit,\n    owner?: ScheduleOwner,\n    after?: ScheduleDueCursor,\n  ) {\n    const operation = \"query due schedules\";\n\n    const cursor =\n      after === undefined\n        ? undefined\n        : yield* Schema.decodeUnknownEffect(ScheduleDueCursor)(after).pipe(\n            Effect.mapError(() => corrupt(operation)),\n          );\n\n    const continuation =\n      cursor === undefined\n        ? sql`1 = 1`\n        : sql`\n      (deadline_at_millis, tenant_id, owner_id, schedule_id) >\n      (${cursor.deadlineAtMillis}, ${cursor.owner.tenantId}, ${cursor.owner.ownerId}, ${cursor.scheduleId})`;\n\n    const rows =\n      owner === undefined\n        ? yield* sql<Record<string, unknown>>`\n            SELECT tenant_id, owner_id, schedule_id, deadline_at_millis\n            FROM effect_agent_schedules\n            WHERE deadline_at_millis <= ${nowMillis} AND ${continuation}\n            ORDER BY deadline_at_millis, tenant_id, owner_id, schedule_id\n            LIMIT ${limit}\n          `.pipe(Effect.mapError(() => unavailable(operation)))\n        : yield* sql<Record<string, unknown>>`\n            SELECT tenant_id, owner_id, schedule_id, deadline_at_millis\n            FROM effect_agent_schedules\n            WHERE tenant_id = ${owner.tenantId}\n              AND owner_id = ${owner.ownerId}\n              AND deadline_at_millis <= ${nowMillis} AND ${continuation}\n            ORDER BY deadline_at_millis, schedule_id\n            LIMIT ${limit}\n          `.pipe(Effect.mapError(() => unavailable(operation)));\n\n    const decoded = yield* decodeRows(Schema.Array(ScheduleDueRow), rows, operation);\n\n    return decoded.map((row) => ({\n      owner: { tenantId: row.tenant_id, ownerId: row.owner_id },\n      scheduleId: row.schedule_id,\n      deadlineAtMillis: row.deadline_at_millis,\n    }));\n  });\n\n  const nextDeadline: ScheduleStore[\"Service\"][\"nextDeadline\"] = Effect.fn(\n    \"DoScheduleStore.nextDeadline\",\n  )(function* (owner?: ScheduleOwner) {\n    const operation = \"query next schedule deadline\";\n\n    return yield* readNextDeadline(owner, operation);\n  });\n\n  const prearm = Effect.fn(\"DoScheduleStore.prearm\")(function* (\n    deadlineAtMillis: number,\n  ): Effect.fn.Return<void, ScheduleStorageError | ScheduleFailpointError> {\n    yield* decodeBoundary(ScheduleInstant, deadlineAtMillis, \"pre-arm schedule recovery\");\n    yield* transactions.run((replace) =>\n      replaceAlarm(replace, deadlineAtMillis, \"pre-arm schedule recovery\"),\n    );\n    yield* scheduleFailpoint.hit(\"schedule:prearm:after\");\n  });\n\n  const reconcile = Effect.gen(function* () {\n    yield* transactions.run((replace) =>\n      Effect.gen(function* () {\n        const deadline = yield* readNextDeadline(undefined, \"reconcile schedule alarm\");\n\n        yield* replaceAlarm(replace, deadline, \"reconcile schedule alarm\");\n      }),\n    );\n    yield* scheduleFailpoint.hit(\"schedule:reconcile:after\");\n  });\n\n  return Context.make(ScheduleStore, {\n    insert,\n    get,\n    list,\n    change,\n    due,\n    nextDeadline,\n  }).pipe(Context.add(DoScheduleAlarmControl, { prearm, reconcile }));\n});\n\n/**\n * Durable Object SQLite ScheduleStore. Platform code supplies the one transaction owner that\n * combines these SQL mutations with its logical and native alarm lifecycle.\n */\nexport const scheduleStoreLayer: Layer.Layer<\n  ScheduleStore | DoScheduleAlarmControl,\n  ScheduleStorageError,\n  SqlClientService.SqlClient | DoScheduleTransaction\n> = Layer.effectContext(makeServices);\n"],"mappings":";;;;;;;;;;;;AA4BA,MAAM,iCAAiC;AACvC,MAAM,4BAA4B;AAElC,MAAM,qBAAqB,OAAO,OAAO,MAAM,OAAO,YAAY,yBAAyB,CAAC;AAC5F,MAAM,iBAAiB,OAAO,OAAO,eAAe;AAEpD,IAAM,cAAN,cAA0B,OAAO,MAAmB,8CAA8C,CAAC,CACjG;CACE,WAAW,cAAc,OAAO;CAChC,UAAU,cAAc,OAAO;CAC/B,aAAa;CACb,oBAAoB;CACpB,aAAa;AACf,CACF,CAAC,CAAC,CAAC;AAEH,MAAM,iBAAiB,OAAO,OAAO;CACnC,WAAW,cAAc,OAAO;CAChC,UAAU,cAAc,OAAO;CAC/B,aAAa;CACb,oBAAoB;AACtB,CAAC;AAED,IAAM,mBAAN,cAA+B,OAAO,MACpC,mDACF,CAAC,CAAC,EACA,gBAAgB,OAAO,IAAI,MAAM,OAAO,uBAAuB,CAAC,CAAC,EACnE,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAM,sBAAN,cAAkC,OAAO,MACvC,sDACF,CAAC,CAAC,EACA,oBAAoB,eACtB,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAM,wBAAN,cAAoC,OAAO,MACzC,wDACF,CAAC,CAAC;CACA,iBAAiB,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC;CACzD,kBAAkB,OAAO,IAAI,MAAM,OAAO,uBAAuB,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAM,uBAAN,cAAmC,OAAO,MACxC,uDACF,CAAC,CAAC,EACA,MAAM,OAAO,OACf,CAAC,CAAC,CAAC,CAAC;;;;;AAgBJ,IAAa,wBAAb,cAA2C,QAAQ,QAOjD,CAAC,CAAC,wDAAwD,CAAC,CAAC,CAAC;;AAG/D,IAAa,yBAAb,cAA4C,QAAQ,QAUlD,CAAC,CAAC,yDAAyD,CAAC,CAAC,CAAC;AAEhE,MAAM,eAAe,cACnB,qBAAqB,KAAK;CAAE;CAAW,QAAQ;AAAc,CAAC;AAEhE,MAAM,WAAW,cACf,qBAAqB,KAAK;CAAE;CAAW,QAAQ;AAAU,CAAC;AAE5D,MAAM,aAAa,OAAO,GAAG,4BAA4B,CAAC,CAAC,WACzD,QACA,MACA,WAC8C;CAC9C,OAAO,OAAO,OAAO,oBAAoB,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KACrD,OAAO,eAAe,QAAQ,SAAS,CAAC,CAC1C;AACF,CAAC;AAED,MAAM,kBACJ,QACA,OACA,cAEA,OAAO,oBAAoB,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO,eAAe,QAAQ,SAAS,CAAC,CAAC;AAE1F,MAAM,eAAe,OAAO,GAAG,8BAA8B,CAAC,CAAC,WAC7D,KACwD;CACxD,MAAM,SAAS,OAAO,OAAO,aAAa,OAAO,eAAe,cAAc,CAAC,CAAC,CAC9E,IAAI,WACN,CAAC,CAAC,KAAK,OAAO,eAAe,QAAQ,iBAAiB,CAAC,CAAC;CAExD,IACE,OAAO,MAAM,aAAa,IAAI,aAC9B,OAAO,MAAM,YAAY,IAAI,YAC7B,OAAO,eAAe,IAAI,eAC1B,iBAAiB,MAAM,MAAM,IAAI,oBAEjC,OAAO,OAAO,QAAQ,uBAAuB;CAG/C,OAAO;AACT,CAAC;AAED,MAAM,eAAe,OAAO,GAAG,8BAA8B,CAAC,CAAC,WAC7D,QACgD;CAChD,MAAM,UAAU,OAAO,OAAO,aAAa,OAAO,eAAe,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KACxF,OAAO,eAAe,QAAQ,iBAAiB,CAAC,CAClD;CAEA,OAAO,OAAO,OAAO,oBAAoB,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,KACpE,OAAO,eAAe,QAAQ,wBAAwB,CAAC,CACzD;AACF,CAAC;AAED,MAAM,0BAA0B,OAAO,GAAG,4BAA4B,CAAC,CAAC,aAAa;CACnF,MAAM,MAAM,OAAO,iBAAiB;CACpC,MAAM,YAAY;CAElB,MAAM,YAAY,OAAO,GAA4B;;;;;;;;;IASnD,KAAK,OAAO,eAAe,YAAY,SAAS,CAAC,CAAC;CAEpD,MAAM,SAAS,OAAO,WAAW,OAAO,MAAM,oBAAoB,GAAG,WAAW,SAAS;CACzF,MAAM,WAAW,OAAO,MAAM,QAAQ,IAAI,SAAS,mCAAmC;CACtF,MAAM,eAAe,OAAO,MAAM,QAAQ,IAAI,SAAS,wBAAwB;CAE/E,IAAI,CAAC,UAAU;EACb,IAAI,cAAc,OAAO,OAAO,QAAQ,SAAS;EACjD,OAAO,IACJ,gBACC,OAAO,IAAI,aAAa;GACtB,OAAO,GAAG;;;;;;YAMR;GACF,OAAO,GAAG;;;;;;;;;YASR;GACF,OAAO,GAAG;;;;YAIR;GACF,OAAO,GAAG;;;;YAIR;GACF,OAAO,GAAG;;;2BAGO,+BAA+B;YAC9C;EACJ,CAAC,CACH,CAAC,CACA,KAAK,OAAO,eAAe,YAAY,SAAS,CAAC,CAAC;EAErD;CACF;CAEA,IAAI,CAAC,cAAc,OAAO,OAAO,QAAQ,SAAS;CAElD,MAAM,WAAW,OAAO,GAA4B;;;;IAIlD,KAAK,OAAO,eAAe,YAAY,SAAS,CAAC,CAAC;CAEpD,MAAM,QAAQ,OAAO,WAAW,OAAO,MAAM,qBAAqB,GAAG,UAAU,SAAS;CAExF,IAAI,MAAM,WAAW,KAAK,MAAM,EAAE,CAAC,oBAAoB,GAAG;EACxD,MAAM,YAAY,OAAO;EAEzB,OAAO,IACJ,gBACC,OAAO,IAAI,aAAa;GACtB,MAAM,UAAU,OAAO,GAErB;GAEF,IAAI,QAAQ,WAAW,KAAK,QAAQ,EAAE,CAAC,oBAAoB,GAAG;GAC9D,IAAI,QAAQ,WAAW,KAAK,QAAQ,EAAE,CAAC,oBAAoB,GACzD,OAAO,OAAO,QAAQ,yCAAyC;GACjE,OAAO,mBAAmB,yBAAyB;GACnD,OAAO,UAAU,IAAI,wBAAwB;GAC7C,OAAO,GAAG;GACV,OAAO,UAAU,IAAI,uBAAuB;EAC9C,CAAC,CACH,CAAC,CACA,KACC,OAAO,SAAS,wBAAwB,UACtC,qBAAqB,KAAK;GACxB,QAAQ;GACR,WAAW;GACX,OAAO;EACT,CAAC,CACH,GACA,OAAO,SAAS,kBAAkB,YAAY,sBAAsB,CAAC,GACrE,OAAO,SAAS,gCACd,YAAY,gCAAgC,CAC9C,CACF;EAEF;CACF;CAEA,IAAI,MAAM,WAAW,KAAK,MAAM,EAAE,CAAC,oBAAoB,gCACrD,OAAO,OAAO,QACZ,MAAM,WAAW,IACb,GAAG,UAAU,iCAAiC,MAAM,EAAE,CAAC,gBAAgB,aAAa,mCACpF,GAAG,UAAU,8BACnB;AAEJ,CAAC;AAED,MAAM,eAAe,OAAO,IAAI,aAAa;CAC3C,MAAM,MAAM,OAAO,iBAAiB;CACpC,MAAM,eAAe,OAAO;CAC5B,MAAM,oBAAoB,OAAO;CAEjC,OAAO,wBAAwB;CAE/B,MAAM,WAAW,OAAO,GAAG,0BAA0B,CAAC,CAAC,WACrD,KACA,WACoE;EACpE,MAAM,OAAO,OAAO,GAA4B;;;0BAG1B,IAAI,MAAM,SAAS;yBACpB,IAAI,MAAM,QAAQ;4BACf,IAAI,WAAW;MACrC,KAAK,OAAO,eAAe,YAAY,SAAS,CAAC,CAAC;EAEpD,OAAO,OAAO,WAAW,OAAO,MAAM,WAAW,GAAG,MAAM,SAAS;CACrE,CAAC;CAED,MAAM,UAAU,OAAO,GAAG,yBAAyB,CAAC,CAAC,WACnD,KACA,WAC+D;EAC/D,MAAM,OAAO,OAAO,SAAS,KAAK,SAAS;EAE3C,IAAI,KAAK,WAAW,GAAG,OAAO;EAC9B,IAAI,KAAK,WAAW,GAAG,OAAO,OAAO,QAAQ,SAAS;EAEtD,OAAO,OAAO,aAAa,KAAK,EAAE;CACpC,CAAC;CAED,MAAM,mBAAmB,OAAO,GAAG,kCAAkC,CAAC,CAAC,WACrE,OACA,WACuD;EACvD,MAAM,OACJ,UAAU,KAAA,IACN,OAAO,GAA4B;;;;YAIjC,KAAK,OAAO,eAAe,YAAY,SAAS,CAAC,CAAC,IACpD,OAAO,GAA4B;;;gCAGb,MAAM,SAAS;+BAChB,MAAM,QAAQ;;YAEjC,KAAK,OAAO,eAAe,YAAY,SAAS,CAAC,CAAC;EAE1D,MAAM,UAAU,OAAO,WAAW,OAAO,MAAM,mBAAmB,GAAG,MAAM,SAAS;EAEpF,IAAI,QAAQ,WAAW,GAAG,OAAO,OAAO,QAAQ,SAAS;EAEzD,OAAO,QAAQ,EAAE,CAAC;CACpB,CAAC;CAED,MAAM,eAAe,OAAO,GAAG,8BAA8B,CAAC,CAAC,WAC7D,SACA,kBACA,WACA;EACA,MAAM,WAAW,OAAO,GAA4B;;;;;MAKlD,KAAK,OAAO,eAAe,YAAY,SAAS,CAAC,CAAC;EAEpD,MAAM,QAAQ,OAAO,WAAW,OAAO,MAAM,qBAAqB,GAAG,UAAU,SAAS;EAExF,IAAI,MAAM,WAAW,KAAK,MAAM,EAAE,CAAC,oBAAoB,gCACrD,OAAO,OAAO,QAAQ,SAAS;EAEjC,OAAO,kBAAkB,IAAI,uBAAuB;EACpD,OAAO,QAAQ;GAAE;GAAkB,YAAY,MAAM,EAAE,CAAC;EAAiB,CAAC;EAC1E,OAAO,kBAAkB,IAAI,sBAAsB;CACrD,CAAC;CAED,MAAM,SAA6C,OAAO,GAAG,wBAAwB,CAAC,CACpF,WAAW,QAAQ,YAAY;EAC7B,MAAM,YAAY;EAClB,MAAM,YAAY,OAAO,eAAe,gBAAgB,QAAQ,SAAS;EACzE,MAAM,aAAa,OAAO,aAAa,SAAS;EAEhD,MAAM,SAAS,OAAO,aAAa,KAAK,YACtC,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO,QAAQ,WAAW,SAAS;GAEpD,IAAI,aAAa,MAAM;IACrB,IAAI,SAAS,wBAAwB,UAAU,qBAC7C,OAAO;KAAE,QAAQ;KAAU,UAAU;IAAM;IAG7C,OAAO,OAAO,iBAAiB,KAAK;KAAE,QAAQ;KAAY,KAAK;IAAU,CAAC;GAC5E;GAEA,MAAM,YAAY,OAAO,GAA4B;;;gCAG/B,UAAU,MAAM,SAAS;+BAC1B,UAAU,MAAM,QAAQ;;;YAG3C,KAAK,OAAO,eAAe,YAAY,SAAS,CAAC,CAAC;GAEpD,MAAM,SAAS,OAAO,WAAW,OAAO,MAAM,gBAAgB,GAAG,WAAW,SAAS;GAErF,IAAI,OAAO,WAAW,GAAG,OAAO,OAAO,QAAQ,SAAS;GACxD,IAAI,OAAO,EAAE,CAAC,kBAAkB,YAC9B,OAAO,OAAO,sBAAsB,KAAK,EAAE,OAAO,WAAW,CAAC;GAEhE,OAAO,kBAAkB,IAAI,wBAAwB;GACrD,OAAO,GAAG;;;;gBAIJ,UAAU,MAAM,SAAS;gBACzB,UAAU,MAAM,QAAQ;gBACxB,UAAU,WAAW;gBACrB,iBAAiB,SAAS,EAAE;gBAC5B,WAAW;;YAEf,KAAK,OAAO,eAAe,YAAY,SAAS,CAAC,CAAC;GACpD,MAAM,WAAW,OAAO,iBAAiB,KAAA,GAAW,SAAS;GAE7D,OAAO,aAAa,SAAS,UAAU,SAAS;GAEhD,OAAO;IAAE,QAAQ;IAAW,UAAU;GAAK;EAC7C,CAAC,CACH;EAEA,IAAI,OAAO,UAAU,OAAO,kBAAkB,IAAI,uBAAuB;EAEzE,OAAO,OAAO;CAChB,CACF;CAEA,MAAM,MAAuC,OAAO,GAAG,qBAAqB,CAAC,CAAC,WAAW,KAAK;EAC5F,MAAM,YAAY,OAAO,eAAe,aAAa,KAAK,cAAc;EAExE,OAAO,OAAO,QAAQ,WAAW,cAAc;CACjD,CAAC;CAED,MAAM,OAAyC,OAAO,GAAG,sBAAsB,CAAC,CAAC,WAC/E,cACsD;EACtD,MAAM,YAAY;EAClB,MAAM,UAAU,OAAO,eAAe,qBAAqB,cAAc,SAAS;EAElF,MAAM,OACJ,QAAQ,UAAU,KAAA,IACd,OAAO,GAA4B;;;gCAGb,QAAQ,MAAM,SAAS;+BACxB,QAAQ,MAAM,QAAQ;;oBAEjC,QAAQ,QAAQ,EAAE;YAC1B,KAAK,OAAO,eAAe,YAAY,SAAS,CAAC,CAAC,IACpD,OAAO,GAA4B;;;gCAGb,QAAQ,MAAM,SAAS;+BACxB,QAAQ,MAAM,QAAQ;kCACnB,QAAQ,MAAM;;oBAE5B,QAAQ,QAAQ,EAAE;YAC1B,KAAK,OAAO,eAAe,YAAY,SAAS,CAAC,CAAC;EAE1D,MAAM,UAAU,OAAO,WAAW,OAAO,MAAM,WAAW,GAAG,MAAM,SAAS;EAC5E,MAAM,UAAU,OAAO,OAAO,QAAQ,SAAS,YAAY;EAC3D,MAAM,UAAU,QAAQ,SAAS,QAAQ;EACzC,MAAM,QAAQ,UAAU,QAAQ,MAAM,GAAG,QAAQ,KAAK,IAAI;EAE1D,OAAO;GAAE;GAAO,MAAM,UAAW,MAAM,GAAG,EAAE,CAAC,EAAE,cAAc,OAAQ;EAAK;CAC5E,CAAC;CAED,MAAM,SAA6C,OAAO,GAAG,wBAAwB,CAAC,CAAC,WACrF,KACA,QACA,aAAa,wBAAwB,sBACrC;EACA,MAAM,YAAY;EAClB,MAAM,eAAe,OAAO,eAAe,aAAa,KAAK,SAAS;EACtE,MAAM,kBAAkB,OAAO,eAAe,gBAAgB,QAAQ,SAAS;EAE/E,MAAM,SAAS,OAAO,aAAa,KAAK,YACtC,OAAO,IAAI,aAAa;GACtB,MAAM,UAAU,OAAO,QAAQ,cAAc,SAAS;GAEtD,IAAI,YAAY,MAAM,OAAO,OAAO,iBAAiB,KAAK,EAAE,KAAK,aAAa,CAAC;GAC/E,MAAM,aAAa,oBAAoB,SAAS,eAAe;GAE/D,IAAI,OAAO,UAAU,UAAU,GAAG,OAAO,OAAO,WAAW;GAC3D,MAAM,OAAO,WAAW;GAExB,IAAI,CAAC,qBAAqB,OAAO,KAAK,qBAAqB,IAAI,GAAG;IAChE,MAAM,YAAY,OAAO,GAA4B;;kCAE7B,IAAI,MAAM,SAAS,kBAAkB,IAAI,MAAM,QAAQ;;;cAG3E,KAAK,OAAO,eAAe,YAAY,SAAS,CAAC,CAAC;IAEtD,MAAM,SAAS,OAAO,WAAW,OAAO,MAAM,gBAAgB,GAAG,WAAW,SAAS;IAErF,IAAI,OAAO,WAAW,GAAG,OAAO,OAAO,QAAQ,SAAS;IACxD,IAAI,OAAO,EAAE,CAAC,kBAAkB,YAC9B,OAAO,OAAO,sBAAsB,KAAK,EAAE,OAAO,WAAW,CAAC;GAClE;GACA,IAAI,SAAS,SAAS,OAAO;IAAE,QAAQ;IAAS,SAAS;GAAM;GAC/D,MAAM,aAAa,OAAO,aAAa,IAAI;GAE3C,OAAO,kBAAkB,IAAI,YAAY,gBAAgB,KAAK,YAAY,EAAE,QAAQ;GACpF,OAAO,GAAG;;uCAEqB,iBAAiB,IAAI,EAAE,kBAAkB,WAAW;gCAC3D,aAAa,MAAM,SAAS;+BAC7B,aAAa,MAAM,QAAQ;kCACxB,aAAa,WAAW;YAC9C,KAAK,OAAO,eAAe,YAAY,SAAS,CAAC,CAAC;GACtD,MAAM,WAAW,OAAO,iBAAiB,KAAA,GAAW,SAAS;GAE7D,OAAO,aAAa,SAAS,UAAU,SAAS;GAEhD,OAAO;IAAE,QAAQ;IAAM,SAAS;GAAK;EACvC,CAAC,CACH;EAEA,IAAI,OAAO,SACT,OAAO,kBAAkB,IAAI,YAAY,gBAAgB,KAAK,YAAY,EAAE,OAAO;EAGrF,OAAO,OAAO;CAChB,CAAC;CAED,MAAM,MAAuC,OAAO,GAAG,qBAAqB,CAAC,CAAC,WAC5E,WACA,OACA,OACA,OACA;EACA,MAAM,YAAY;EAElB,MAAM,SACJ,UAAU,KAAA,IACN,KAAA,IACA,OAAO,OAAO,oBAAoB,iBAAiB,CAAC,CAAC,KAAK,CAAC,CAAC,KAC1D,OAAO,eAAe,QAAQ,SAAS,CAAC,CAC1C;EAEN,MAAM,eACJ,WAAW,KAAA,IACP,GAAG,UACH,GAAG;;SAEJ,OAAO,iBAAiB,IAAI,OAAO,MAAM,SAAS,IAAI,OAAO,MAAM,QAAQ,IAAI,OAAO,WAAW;EAEtG,MAAM,OACJ,UAAU,KAAA,IACN,OAAO,GAA4B;;;0CAGH,UAAU,OAAO,aAAa;;oBAEpD,MAAM;YACd,KAAK,OAAO,eAAe,YAAY,SAAS,CAAC,CAAC,IACpD,OAAO,GAA4B;;;gCAGb,MAAM,SAAS;+BAChB,MAAM,QAAQ;0CACH,UAAU,OAAO,aAAa;;oBAEpD,MAAM;YACd,KAAK,OAAO,eAAe,YAAY,SAAS,CAAC,CAAC;EAI1D,QAAO,OAFgB,WAAW,OAAO,MAAM,cAAc,GAAG,MAAM,SAAS,EAAA,CAEhE,KAAK,SAAS;GAC3B,OAAO;IAAE,UAAU,IAAI;IAAW,SAAS,IAAI;GAAS;GACxD,YAAY,IAAI;GAChB,kBAAkB,IAAI;EACxB,EAAE;CACJ,CAAC;CAED,MAAM,eAAyD,OAAO,GACpE,8BACF,CAAC,CAAC,WAAW,OAAuB;EAGlC,OAAO,OAAO,iBAAiB,OAAO,8BAAS;CACjD,CAAC;CAED,MAAM,SAAS,OAAO,GAAG,wBAAwB,CAAC,CAAC,WACjD,kBACuE;EACvE,OAAO,eAAe,iBAAiB,kBAAkB,2BAA2B;EACpF,OAAO,aAAa,KAAK,YACvB,aAAa,SAAS,kBAAkB,2BAA2B,CACrE;EACA,OAAO,kBAAkB,IAAI,uBAAuB;CACtD,CAAC;CAED,MAAM,YAAY,OAAO,IAAI,aAAa;EACxC,OAAO,aAAa,KAAK,YACvB,OAAO,IAAI,aAAa;GACtB,MAAM,WAAW,OAAO,iBAAiB,KAAA,GAAW,0BAA0B;GAE9E,OAAO,aAAa,SAAS,UAAU,0BAA0B;EACnE,CAAC,CACH;EACA,OAAO,kBAAkB,IAAI,0BAA0B;CACzD,CAAC;CAED,OAAO,QAAQ,KAAK,eAAe;EACjC;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,wBAAwB;EAAE;EAAQ;CAAU,CAAC,CAAC;AACpE,CAAC;;;;;AAMD,MAAa,qBAIT,MAAM,cAAc,YAAY"}

package/dist/DoStorageConfig.d.mts

@@ -0,0 +1,45 @@
+import { Context, Schema } from "effect";
+declare namespace DoStorageConfig_d_exports {
+  export { DEFAULT_MAX_STORED_VALUE_BYTES, DoStorageConfig, DoStorageConfigValue };
+}
+/**
+ * Default per-value byte bound, kept under the Durable Object platform's 2 MB SQLite value
+ * limit with a safety margin. This is the DC analogue of Node's 16 MB `BoundedStoredText`
+ * bound: both fail typed before mutating, only the threshold differs (a documented DN/DC
+ * behavioral difference; Travel Planner payloads sit orders of magnitude below both).
+ */
+declare const DEFAULT_MAX_STORED_VALUE_BYTES = 1900000;
+declare const DoStorageConfigValue_base: Schema.Class<DoStorageConfigValue, Schema.Struct<{
+  readonly observationPollInterval: Schema.Int;
+  /**
+   * Submission ownership lease duration in milliseconds (D5). Inside one Durable Object the
+   * object itself is the serialized owner, so the lease's primary DC role is fencing work
+   * across DO incarnations (an evicted incarnation's claim becomes reclaimable); correctness
+   * never depends on it because every canonical append is fenced by producer epoch.
+   */
+  readonly ownershipLeaseDuration: Schema.Int;
+  /**
+   * Maximum bytes for any single stored text value (canonical batch/record JSON, admission
+   * input payload, checkpoint JSON). Enforced typed BEFORE any write; must stay under the
+   * platform's 2 MB per-value limit.
+   */
+  readonly maxStoredValueBytes: Schema.Int;
+  /**
+   * Re-verify every stored payload and digest chain while opening the store. Per-operation
+   * Schema decoding and the digest chain already fail clearly on corrupt rows, so the full
+   * scan is an explicit opt-in integrity audit rather than a startup requirement.
+   */
+  readonly verifyOnOpen: Schema.Boolean;
+}>, {}>;
+/**
+ * Validated construction configuration consumed by the Durable Object storage Layers. The
+ * storage identity itself belongs to the SqlClient Layer (built from `ctx.storage`);
+ * duplicating it here could silently diverge from the handle actually in use.
+ */
+declare class DoStorageConfigValue extends DoStorageConfigValue_base {}
+declare const DoStorageConfig_base: Context.ServiceClass<DoStorageConfig, "@effect-agent/storage-cloudflare/DoStorageConfig", DoStorageConfigValue>;
+/** Explicit Durable Object storage configuration authority. */
+declare class DoStorageConfig extends DoStorageConfig_base {}
+//#endregion
+export { DEFAULT_MAX_STORED_VALUE_BYTES, DoStorageConfig, DoStorageConfigValue, DoStorageConfig_d_exports as t };
+//# sourceMappingURL=DoStorageConfig.d.mts.map

package/dist/DoStorageConfig.mjs

@@ -0,0 +1,52 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+import { Context, Schema } from "effect";
+//#region src/DoStorageConfig.ts
+var DoStorageConfig_exports = /* @__PURE__ */ __exportAll({
+	DEFAULT_MAX_STORED_VALUE_BYTES: () => DEFAULT_MAX_STORED_VALUE_BYTES,
+	DoStorageConfig: () => DoStorageConfig,
+	DoStorageConfigValue: () => DoStorageConfigValue
+});
+const ObservationPollInterval = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));
+const OwnershipLeaseMillis = Schema.Int.check(Schema.isGreaterThan(0));
+/**
+* Default per-value byte bound, kept under the Durable Object platform's 2 MB SQLite value
+* limit with a safety margin. This is the DC analogue of Node's 16 MB `BoundedStoredText`
+* bound: both fail typed before mutating, only the threshold differs (a documented DN/DC
+* behavioral difference; Travel Planner payloads sit orders of magnitude below both).
+*/
+const DEFAULT_MAX_STORED_VALUE_BYTES = 19e5;
+/** The hard schema ceiling for the configurable bound: never at or above the platform limit. */
+const MaxStoredValueBytes = Schema.Int.check(Schema.isGreaterThan(0), Schema.isLessThanOrEqualTo(2e6));
+/**
+* Validated construction configuration consumed by the Durable Object storage Layers. The
+* storage identity itself belongs to the SqlClient Layer (built from `ctx.storage`);
+* duplicating it here could silently diverge from the handle actually in use.
+*/
+var DoStorageConfigValue = class extends Schema.Class("@effect-agent/storage-cloudflare/DoStorageConfigValue")({
+	observationPollInterval: ObservationPollInterval,
+	/**
+	* Submission ownership lease duration in milliseconds (D5). Inside one Durable Object the
+	* object itself is the serialized owner, so the lease's primary DC role is fencing work
+	* across DO incarnations (an evicted incarnation's claim becomes reclaimable); correctness
+	* never depends on it because every canonical append is fenced by producer epoch.
+	*/
+	ownershipLeaseDuration: OwnershipLeaseMillis,
+	/**
+	* Maximum bytes for any single stored text value (canonical batch/record JSON, admission
+	* input payload, checkpoint JSON). Enforced typed BEFORE any write; must stay under the
+	* platform's 2 MB per-value limit.
+	*/
+	maxStoredValueBytes: MaxStoredValueBytes,
+	/**
+	* Re-verify every stored payload and digest chain while opening the store. Per-operation
+	* Schema decoding and the digest chain already fail clearly on corrupt rows, so the full
+	* scan is an explicit opt-in integrity audit rather than a startup requirement.
+	*/
+	verifyOnOpen: Schema.Boolean
+}) {};
+/** Explicit Durable Object storage configuration authority. */
+var DoStorageConfig = class extends Context.Service()("@effect-agent/storage-cloudflare/DoStorageConfig") {};
+//#endregion
+export { DEFAULT_MAX_STORED_VALUE_BYTES, DoStorageConfig, DoStorageConfigValue, DoStorageConfig_exports as t };
+
+//# sourceMappingURL=DoStorageConfig.mjs.map

package/dist/DoStorageConfig.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DoStorageConfig.mjs","names":[],"sources":["../src/DoStorageConfig.ts"],"sourcesContent":["import { Context, Schema } from \"effect\";\n\nconst ObservationPollInterval = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));\nconst OwnershipLeaseMillis = Schema.Int.check(Schema.isGreaterThan(0));\n\n/**\n * Default per-value byte bound, kept under the Durable Object platform's 2 MB SQLite value\n * limit with a safety margin. This is the DC analogue of Node's 16 MB `BoundedStoredText`\n * bound: both fail typed before mutating, only the threshold differs (a documented DN/DC\n * behavioral difference; Travel Planner payloads sit orders of magnitude below both).\n */\nexport const DEFAULT_MAX_STORED_VALUE_BYTES = 1_900_000;\n\n/** The hard schema ceiling for the configurable bound: never at or above the platform limit. */\nconst MaxStoredValueBytes = Schema.Int.check(\n  Schema.isGreaterThan(0),\n  Schema.isLessThanOrEqualTo(2_000_000),\n);\n\n/**\n * Validated construction configuration consumed by the Durable Object storage Layers. The\n * storage identity itself belongs to the SqlClient Layer (built from `ctx.storage`);\n * duplicating it here could silently diverge from the handle actually in use.\n */\nexport class DoStorageConfigValue extends Schema.Class<DoStorageConfigValue>(\n  \"@effect-agent/storage-cloudflare/DoStorageConfigValue\",\n)({\n  observationPollInterval: ObservationPollInterval,\n  /**\n   * Submission ownership lease duration in milliseconds (D5). Inside one Durable Object the\n   * object itself is the serialized owner, so the lease's primary DC role is fencing work\n   * across DO incarnations (an evicted incarnation's claim becomes reclaimable); correctness\n   * never depends on it because every canonical append is fenced by producer epoch.\n   */\n  ownershipLeaseDuration: OwnershipLeaseMillis,\n  /**\n   * Maximum bytes for any single stored text value (canonical batch/record JSON, admission\n   * input payload, checkpoint JSON). Enforced typed BEFORE any write; must stay under the\n   * platform's 2 MB per-value limit.\n   */\n  maxStoredValueBytes: MaxStoredValueBytes,\n  /**\n   * Re-verify every stored payload and digest chain while opening the store. Per-operation\n   * Schema decoding and the digest chain already fail clearly on corrupt rows, so the full\n   * scan is an explicit opt-in integrity audit rather than a startup requirement.\n   */\n  verifyOnOpen: Schema.Boolean,\n}) {}\n\n/** Explicit Durable Object storage configuration authority. */\nexport class DoStorageConfig extends Context.Service<DoStorageConfig, DoStorageConfigValue>()(\n  \"@effect-agent/storage-cloudflare/DoStorageConfig\",\n) {}\n"],"mappings":";;;;;;;;AAEA,MAAM,0BAA0B,OAAO,IAAI,MAAM,OAAO,uBAAuB,CAAC,CAAC;AACjF,MAAM,uBAAuB,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC;;;;;;;AAQrE,MAAa,iCAAiC;;AAG9C,MAAM,sBAAsB,OAAO,IAAI,MACrC,OAAO,cAAc,CAAC,GACtB,OAAO,oBAAoB,GAAS,CACtC;;;;;;AAOA,IAAa,uBAAb,cAA0C,OAAO,MAC/C,uDACF,CAAC,CAAC;CACA,yBAAyB;;;;;;;CAOzB,wBAAwB;;;;;;CAMxB,qBAAqB;;;;;;CAMrB,cAAc,OAAO;AACvB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,kBAAb,cAAqC,QAAQ,QAA+C,CAAC,CAC3F,kDACF,CAAC,CAAC,CAAC"}

package/dist/DoStorageError-Cmhvl4TQ.d.mts

@@ -0,0 +1,98 @@
+import { Schema } from "effect";
+declare namespace DoStorageError_d_exports {
+  export { DoAppendConflict, DoCheckpointConflict, DoFenceRejected, DoLedgerError, DoStorageCompatibilityError, DoStorageCorruptionError, DoStorageError, DoStorageFailpointError, DoStorageFailpointLocation, DoValueBoundExceeded };
+}
+declare const DoStorageCompatibilityError_base: Schema.Class<DoStorageCompatibilityError, Schema.TaggedStruct<"DoStorageCompatibilityError", {
+  readonly actualVersion: Schema.Int;
+  readonly message: Schema.String;
+  readonly supportedVersion: Schema.Int;
+}>, import("effect/Cause").YieldableError>;
+/** The Durable Object's SQLite storage uses a private-development format this adapter cannot read. */
+declare class DoStorageCompatibilityError extends DoStorageCompatibilityError_base {}
+declare const DoStorageCorruptionError_base: Schema.Class<DoStorageCorruptionError, Schema.TaggedStruct<"DoStorageCorruptionError", {
+  readonly message: Schema.String;
+  readonly rowKey: Schema.String;
+  readonly table: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/** Stored bytes failed the current Schema and cannot be used as recovery truth. */
+declare class DoStorageCorruptionError extends DoStorageCorruptionError_base {}
+declare const DoStorageError_base: Schema.Class<DoStorageError, Schema.TaggedStruct<"DoStorageError", {
+  readonly cause: Schema.optionalKey<Schema.Defect>;
+  readonly message: Schema.String;
+  readonly operation: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/** Durable Object SQLite infrastructure failed while opening or operating the store. */
+declare class DoStorageError extends DoStorageError_base {}
+declare const DoLedgerError_base: Schema.Class<DoLedgerError, Schema.TaggedStruct<"DoLedgerError", {
+  readonly cause: Schema.optionalKey<Schema.Defect>;
+  readonly message: Schema.String;
+  readonly operation: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * Durable Object SQLite infrastructure failed while operating the Submission Ledger. Surfaces
+ * at the SubmissionLedger port as the typed `LedgerError` with this error preserved as its
+ * cause, so the adapter-level tag is never erased.
+ */
+declare class DoLedgerError extends DoLedgerError_base {}
+declare const DoValueBoundExceeded_base: Schema.Class<DoValueBoundExceeded, Schema.TaggedStruct<"DoValueBoundExceeded", {
+  readonly actualBytes: Schema.Int;
+  readonly maxBytes: Schema.Int;
+  readonly operation: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * A value to be stored exceeds the configured Durable Object per-value bound
+ * (`DoStorageConfigValue.maxStoredValueBytes`, kept under the platform's 2 MB SQLite value
+ * limit). The refusal happens typed BEFORE any durable mutation; no partial state is written.
+ * Payloads of this size are the designed overflow case for a future R2-backed AttachmentStore
+ * (deployment spec §3.1, deferred until a real attachment requirement exists).
+ */
+declare class DoValueBoundExceeded extends DoValueBoundExceeded_base {
+  get message(): string;
+}
+declare const DoAppendConflict_base: Schema.Class<DoAppendConflict, Schema.TaggedStruct<"DoAppendConflict", {
+  readonly message: Schema.String;
+  readonly reason: Schema.Literals<readonly ["batch-digest", "record-identity", "tail"]>;
+  readonly actualTailSequence: Schema.optionalKey<Schema.brand<Schema.Natural, "@effect-agent/thread/CanonicalSequence">>;
+  readonly actualTailDigest: Schema.optionalKey<Schema.String>;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * A canonical batch retry conflicts with existing append state. Tail conflicts carry the
+ * actual committed tail as a diagnostic resume hint.
+ */
+declare class DoAppendConflict extends DoAppendConflict_base {}
+declare const DoFenceRejected_base: Schema.Class<DoFenceRejected, Schema.TaggedStruct<"DoFenceRejected", {
+  readonly actualEpoch: Schema.brand<Schema.Natural, "@effect-agent/thread/ProducerEpoch">;
+  readonly message: Schema.String;
+  readonly producerEpoch: Schema.brand<Schema.Natural, "@effect-agent/thread/ProducerEpoch">;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * A producer epoch does not match the Thread's current writer registration. Appends
+ * require the exact registered epoch, so both older and newer unregistered epochs are fenced;
+ * a newer epoch takes over by materializing first.
+ */
+declare class DoFenceRejected extends DoFenceRejected_base {}
+declare const DoCheckpointConflict_base: Schema.Class<DoCheckpointConflict, Schema.TaggedStruct<"DoCheckpointConflict", {
+  readonly message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/** A checkpoint conflicts with a previously stored checkpoint at the same offset. */
+declare class DoCheckpointConflict extends DoCheckpointConflict_base {}
+/**
+ * Deterministic fault-injection locations at Durable Object storage operation boundaries.
+ *
+ * The string list is copied VERBATIM from `SqliteStorageFailpointLocation`
+ * (`packages/storage-sqlite/src/errors.ts`) so every crash-matrix row keeps the same name on
+ * both platforms — the DN process-kill evidence and the DC eviction evidence address identical
+ * locations. There is intentionally no Cloudflare-only location.
+ */
+declare const DoStorageFailpointLocation: Schema.Literals<readonly ["upgrade:before-mutation", "upgrade:after-mutation", "upgrade:before-version", "upgrade:after-version", "materialize:before", "materialize:after", "append:before", "append:after-batch-insert", "append:after-record-insert", "append:after-tail-update", "append:after", "export:after-thread-read", "save-checkpoint:before", "save-checkpoint:after", "save-recovery-checkpoint:before", "save-recovery-checkpoint:after", "ledger:admit:before", "ledger:admit:after", "ledger:mark-ready:before", "ledger:mark-ready:after", "ledger:claim:before", "ledger:claim:after", "ledger:mark-input-applied:before", "ledger:mark-input-applied:after", "ledger:renew:before", "ledger:renew:after", "ledger:reserve-settlement:before", "ledger:reserve-settlement:after", "ledger:finalize-settlement:before", "ledger:finalize-settlement:after", "ledger:request-abort:before", "ledger:request-abort:after", "ledger:release:before", "ledger:release:after", "ledger:claim-joining:before", "ledger:claim-joining:after", "ledger:mark-joined:before", "ledger:mark-joined:after", "ledger:revert-joining:before", "ledger:revert-joining:after", "ledger:suspend:before", "ledger:suspend:after", "ledger:approval-decision:before", "ledger:approval-decision:after", "ledger:mark-unknown:before", "ledger:mark-unknown:after", "ledger:unknown-resolution:before", "ledger:unknown-resolution:after", "ledger:child-reservation:before", "ledger:child-reservation:after", "ledger:child-attach:before", "ledger:child-attach:after", "ledger:child-release-pending:before", "ledger:child-release-pending:after", "ledger:child-release:before", "ledger:child-release:after", "ledger:child-settled:before", "ledger:child-settled:after"]>;
+type DoStorageFailpointLocation = typeof DoStorageFailpointLocation.Type;
+declare const DoStorageFailpointError_base: Schema.Class<DoStorageFailpointError, Schema.TaggedStruct<"DoStorageFailpointError", {
+  readonly location: Schema.Literals<readonly ["upgrade:before-mutation", "upgrade:after-mutation", "upgrade:before-version", "upgrade:after-version", "materialize:before", "materialize:after", "append:before", "append:after-batch-insert", "append:after-record-insert", "append:after-tail-update", "append:after", "export:after-thread-read", "save-checkpoint:before", "save-checkpoint:after", "save-recovery-checkpoint:before", "save-recovery-checkpoint:after", "ledger:admit:before", "ledger:admit:after", "ledger:mark-ready:before", "ledger:mark-ready:after", "ledger:claim:before", "ledger:claim:after", "ledger:mark-input-applied:before", "ledger:mark-input-applied:after", "ledger:renew:before", "ledger:renew:after", "ledger:reserve-settlement:before", "ledger:reserve-settlement:after", "ledger:finalize-settlement:before", "ledger:finalize-settlement:after", "ledger:request-abort:before", "ledger:request-abort:after", "ledger:release:before", "ledger:release:after", "ledger:claim-joining:before", "ledger:claim-joining:after", "ledger:mark-joined:before", "ledger:mark-joined:after", "ledger:revert-joining:before", "ledger:revert-joining:after", "ledger:suspend:before", "ledger:suspend:after", "ledger:approval-decision:before", "ledger:approval-decision:after", "ledger:mark-unknown:before", "ledger:mark-unknown:after", "ledger:unknown-resolution:before", "ledger:unknown-resolution:after", "ledger:child-reservation:before", "ledger:child-reservation:after", "ledger:child-attach:before", "ledger:child-attach:after", "ledger:child-release-pending:before", "ledger:child-release-pending:after", "ledger:child-release:before", "ledger:child-release:after", "ledger:child-settled:before", "ledger:child-settled:after"]>;
+}>, import("effect/Cause").YieldableError>;
+/** Deterministic test-only fault or pause injected at a Durable Object storage boundary. */
+declare class DoStorageFailpointError extends DoStorageFailpointError_base {
+  get message(): string;
+}
+//#endregion
+export { DoStorageCompatibilityError as a, DoStorageError_d_exports as c, DoValueBoundExceeded as d, DoLedgerError as i, DoStorageFailpointError as l, DoCheckpointConflict as n, DoStorageCorruptionError as o, DoFenceRejected as r, DoStorageError as s, DoAppendConflict as t, DoStorageFailpointLocation as u };
+//# sourceMappingURL=DoStorageError-Cmhvl4TQ.d.mts.map

package/dist/DoStorageError.d.mts

@@ -0,0 +1,2 @@
+import { a as DoStorageCompatibilityError, d as DoValueBoundExceeded, i as DoLedgerError, l as DoStorageFailpointError, n as DoCheckpointConflict, o as DoStorageCorruptionError, r as DoFenceRejected, s as DoStorageError, t as DoAppendConflict, u as DoStorageFailpointLocation } from "./DoStorageError-Cmhvl4TQ.mjs";
+export { DoAppendConflict, DoCheckpointConflict, DoFenceRejected, DoLedgerError, DoStorageCompatibilityError, DoStorageCorruptionError, DoStorageError, DoStorageFailpointError, DoStorageFailpointLocation, DoValueBoundExceeded };

package/dist/DoStorageError.mjs

@@ -0,0 +1,164 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+import { Schema } from "effect";
+import { CanonicalSequence, ProducerEpoch } from "@effect-agent/thread/Records";
+//#region src/DoStorageError.ts
+var DoStorageError_exports = /* @__PURE__ */ __exportAll({
+	DoAppendConflict: () => DoAppendConflict,
+	DoCheckpointConflict: () => DoCheckpointConflict,
+	DoFenceRejected: () => DoFenceRejected,
+	DoLedgerError: () => DoLedgerError,
+	DoStorageCompatibilityError: () => DoStorageCompatibilityError,
+	DoStorageCorruptionError: () => DoStorageCorruptionError,
+	DoStorageError: () => DoStorageError,
+	DoStorageFailpointError: () => DoStorageFailpointError,
+	DoStorageFailpointLocation: () => DoStorageFailpointLocation,
+	DoValueBoundExceeded: () => DoValueBoundExceeded
+});
+/** The Durable Object's SQLite storage uses a private-development format this adapter cannot read. */
+var DoStorageCompatibilityError = class extends Schema.TaggedError()("DoStorageCompatibilityError", {
+	actualVersion: Schema.Int,
+	message: Schema.String,
+	supportedVersion: Schema.Int
+}) {};
+/** Stored bytes failed the current Schema and cannot be used as recovery truth. */
+var DoStorageCorruptionError = class extends Schema.TaggedError()("DoStorageCorruptionError", {
+	message: Schema.String,
+	rowKey: Schema.String,
+	table: Schema.String
+}) {};
+/** Durable Object SQLite infrastructure failed while opening or operating the store. */
+var DoStorageError = class extends Schema.TaggedError()("DoStorageError", {
+	cause: Schema.optionalKey(Schema.Defect()),
+	message: Schema.String,
+	operation: Schema.String
+}) {};
+/**
+* Durable Object SQLite infrastructure failed while operating the Submission Ledger. Surfaces
+* at the SubmissionLedger port as the typed `LedgerError` with this error preserved as its
+* cause, so the adapter-level tag is never erased.
+*/
+var DoLedgerError = class extends Schema.TaggedError()("DoLedgerError", {
+	cause: Schema.optionalKey(Schema.Defect()),
+	message: Schema.String,
+	operation: Schema.String
+}) {};
+/**
+* A value to be stored exceeds the configured Durable Object per-value bound
+* (`DoStorageConfigValue.maxStoredValueBytes`, kept under the platform's 2 MB SQLite value
+* limit). The refusal happens typed BEFORE any durable mutation; no partial state is written.
+* Payloads of this size are the designed overflow case for a future R2-backed AttachmentStore
+* (deployment spec §3.1, deferred until a real attachment requirement exists).
+*/
+var DoValueBoundExceeded = class extends Schema.TaggedError()("DoValueBoundExceeded", {
+	actualBytes: Schema.Int,
+	maxBytes: Schema.Int,
+	operation: Schema.String
+}) {
+	get message() {
+		return `A stored value of ${this.actualBytes} bytes exceeds the Durable Object per-value bound of ${this.maxBytes} bytes during ${this.operation}. Nothing was written. Values of this size are the designed R2 AttachmentStore overflow path (deferred, deployment spec §3.1).`;
+	}
+};
+/**
+* A canonical batch retry conflicts with existing append state. Tail conflicts carry the
+* actual committed tail as a diagnostic resume hint.
+*/
+var DoAppendConflict = class extends Schema.TaggedError()("DoAppendConflict", {
+	message: Schema.String,
+	reason: Schema.Literals([
+		"batch-digest",
+		"record-identity",
+		"tail"
+	]),
+	actualTailSequence: Schema.optionalKey(CanonicalSequence),
+	actualTailDigest: Schema.optionalKey(Schema.String)
+}) {};
+/**
+* A producer epoch does not match the Thread's current writer registration. Appends
+* require the exact registered epoch, so both older and newer unregistered epochs are fenced;
+* a newer epoch takes over by materializing first.
+*/
+var DoFenceRejected = class extends Schema.TaggedError()("DoFenceRejected", {
+	actualEpoch: ProducerEpoch,
+	message: Schema.String,
+	producerEpoch: ProducerEpoch
+}) {};
+/** A checkpoint conflicts with a previously stored checkpoint at the same offset. */
+var DoCheckpointConflict = class extends Schema.TaggedError()("DoCheckpointConflict", { message: Schema.String }) {};
+/**
+* Deterministic fault-injection locations at Durable Object storage operation boundaries.
+*
+* The string list is copied VERBATIM from `SqliteStorageFailpointLocation`
+* (`packages/storage-sqlite/src/errors.ts`) so every crash-matrix row keeps the same name on
+* both platforms — the DN process-kill evidence and the DC eviction evidence address identical
+* locations. There is intentionally no Cloudflare-only location.
+*/
+const DoStorageFailpointLocation = Schema.Literals([
+	"upgrade:before-mutation",
+	"upgrade:after-mutation",
+	"upgrade:before-version",
+	"upgrade:after-version",
+	"materialize:before",
+	"materialize:after",
+	"append:before",
+	"append:after-batch-insert",
+	"append:after-record-insert",
+	"append:after-tail-update",
+	"append:after",
+	"export:after-thread-read",
+	"save-checkpoint:before",
+	"save-checkpoint:after",
+	"save-recovery-checkpoint:before",
+	"save-recovery-checkpoint:after",
+	"ledger:admit:before",
+	"ledger:admit:after",
+	"ledger:mark-ready:before",
+	"ledger:mark-ready:after",
+	"ledger:claim:before",
+	"ledger:claim:after",
+	"ledger:mark-input-applied:before",
+	"ledger:mark-input-applied:after",
+	"ledger:renew:before",
+	"ledger:renew:after",
+	"ledger:reserve-settlement:before",
+	"ledger:reserve-settlement:after",
+	"ledger:finalize-settlement:before",
+	"ledger:finalize-settlement:after",
+	"ledger:request-abort:before",
+	"ledger:request-abort:after",
+	"ledger:release:before",
+	"ledger:release:after",
+	"ledger:claim-joining:before",
+	"ledger:claim-joining:after",
+	"ledger:mark-joined:before",
+	"ledger:mark-joined:after",
+	"ledger:revert-joining:before",
+	"ledger:revert-joining:after",
+	"ledger:suspend:before",
+	"ledger:suspend:after",
+	"ledger:approval-decision:before",
+	"ledger:approval-decision:after",
+	"ledger:mark-unknown:before",
+	"ledger:mark-unknown:after",
+	"ledger:unknown-resolution:before",
+	"ledger:unknown-resolution:after",
+	"ledger:child-reservation:before",
+	"ledger:child-reservation:after",
+	"ledger:child-attach:before",
+	"ledger:child-attach:after",
+	"ledger:child-release-pending:before",
+	"ledger:child-release-pending:after",
+	"ledger:child-release:before",
+	"ledger:child-release:after",
+	"ledger:child-settled:before",
+	"ledger:child-settled:after"
+]);
+/** Deterministic test-only fault or pause injected at a Durable Object storage boundary. */
+var DoStorageFailpointError = class extends Schema.TaggedError()("DoStorageFailpointError", { location: DoStorageFailpointLocation }) {
+	get message() {
+		return `Injected Durable Object storage failure at ${this.location}.`;
+	}
+};
+//#endregion
+export { DoAppendConflict, DoCheckpointConflict, DoFenceRejected, DoLedgerError, DoStorageCompatibilityError, DoStorageCorruptionError, DoStorageError, DoStorageFailpointError, DoStorageFailpointLocation, DoValueBoundExceeded, DoStorageError_exports as t };
+
+//# sourceMappingURL=DoStorageError.mjs.map

package/dist/DoStorageError.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DoStorageError.mjs","names":[],"sources":["../src/DoStorageError.ts"],"sourcesContent":["import { CanonicalSequence, ProducerEpoch } from \"@effect-agent/thread/Records\";\nimport { Schema } from \"effect\";\n\n/** The Durable Object's SQLite storage uses a private-development format this adapter cannot read. */\nexport class DoStorageCompatibilityError extends Schema.TaggedError<DoStorageCompatibilityError>()(\n  \"DoStorageCompatibilityError\",\n  {\n    actualVersion: Schema.Int,\n    message: Schema.String,\n    supportedVersion: Schema.Int,\n  },\n) {}\n\n/** Stored bytes failed the current Schema and cannot be used as recovery truth. */\nexport class DoStorageCorruptionError extends Schema.TaggedError<DoStorageCorruptionError>()(\n  \"DoStorageCorruptionError\",\n  {\n    message: Schema.String,\n    rowKey: Schema.String,\n    table: Schema.String,\n  },\n) {}\n\n/** Durable Object SQLite infrastructure failed while opening or operating the store. */\nexport class DoStorageError extends Schema.TaggedError<DoStorageError>()(\"DoStorageError\", {\n  cause: Schema.optionalKey(Schema.Defect()),\n  message: Schema.String,\n  operation: Schema.String,\n}) {}\n\n/**\n * Durable Object SQLite infrastructure failed while operating the Submission Ledger. Surfaces\n * at the SubmissionLedger port as the typed `LedgerError` with this error preserved as its\n * cause, so the adapter-level tag is never erased.\n */\nexport class DoLedgerError extends Schema.TaggedError<DoLedgerError>()(\"DoLedgerError\", {\n  cause: Schema.optionalKey(Schema.Defect()),\n  message: Schema.String,\n  operation: Schema.String,\n}) {}\n\n/**\n * A value to be stored exceeds the configured Durable Object per-value bound\n * (`DoStorageConfigValue.maxStoredValueBytes`, kept under the platform's 2 MB SQLite value\n * limit). The refusal happens typed BEFORE any durable mutation; no partial state is written.\n * Payloads of this size are the designed overflow case for a future R2-backed AttachmentStore\n * (deployment spec §3.1, deferred until a real attachment requirement exists).\n */\nexport class DoValueBoundExceeded extends Schema.TaggedError<DoValueBoundExceeded>()(\n  \"DoValueBoundExceeded\",\n  {\n    actualBytes: Schema.Int,\n    maxBytes: Schema.Int,\n    operation: Schema.String,\n  },\n) {\n  override get message() {\n    return (\n      `A stored value of ${this.actualBytes} bytes exceeds the Durable Object per-value bound ` +\n      `of ${this.maxBytes} bytes during ${this.operation}. Nothing was written. Values of this ` +\n      \"size are the designed R2 AttachmentStore overflow path (deferred, deployment spec §3.1).\"\n    );\n  }\n}\n\n/**\n * A canonical batch retry conflicts with existing append state. Tail conflicts carry the\n * actual committed tail as a diagnostic resume hint.\n */\nexport class DoAppendConflict extends Schema.TaggedError<DoAppendConflict>()(\"DoAppendConflict\", {\n  message: Schema.String,\n  reason: Schema.Literals([\"batch-digest\", \"record-identity\", \"tail\"]),\n  actualTailSequence: Schema.optionalKey(CanonicalSequence),\n  actualTailDigest: Schema.optionalKey(Schema.String),\n}) {}\n\n/**\n * A producer epoch does not match the Thread's current writer registration. Appends\n * require the exact registered epoch, so both older and newer unregistered epochs are fenced;\n * a newer epoch takes over by materializing first.\n */\nexport class DoFenceRejected extends Schema.TaggedError<DoFenceRejected>()(\"DoFenceRejected\", {\n  actualEpoch: ProducerEpoch,\n  message: Schema.String,\n  producerEpoch: ProducerEpoch,\n}) {}\n\n/** A checkpoint conflicts with a previously stored checkpoint at the same offset. */\nexport class DoCheckpointConflict extends Schema.TaggedError<DoCheckpointConflict>()(\n  \"DoCheckpointConflict\",\n  {\n    message: Schema.String,\n  },\n) {}\n\n/**\n * Deterministic fault-injection locations at Durable Object storage operation boundaries.\n *\n * The string list is copied VERBATIM from `SqliteStorageFailpointLocation`\n * (`packages/storage-sqlite/src/errors.ts`) so every crash-matrix row keeps the same name on\n * both platforms — the DN process-kill evidence and the DC eviction evidence address identical\n * locations. There is intentionally no Cloudflare-only location.\n */\nexport const DoStorageFailpointLocation = Schema.Literals([\n  \"upgrade:before-mutation\",\n  \"upgrade:after-mutation\",\n  \"upgrade:before-version\",\n  \"upgrade:after-version\",\n  \"materialize:before\",\n  \"materialize:after\",\n  \"append:before\",\n  \"append:after-batch-insert\",\n  \"append:after-record-insert\",\n  \"append:after-tail-update\",\n  \"append:after\",\n  \"export:after-thread-read\",\n  \"save-checkpoint:before\",\n  \"save-checkpoint:after\",\n  \"save-recovery-checkpoint:before\",\n  \"save-recovery-checkpoint:after\",\n  \"ledger:admit:before\",\n  \"ledger:admit:after\",\n  \"ledger:mark-ready:before\",\n  \"ledger:mark-ready:after\",\n  \"ledger:claim:before\",\n  \"ledger:claim:after\",\n  \"ledger:mark-input-applied:before\",\n  \"ledger:mark-input-applied:after\",\n  \"ledger:renew:before\",\n  \"ledger:renew:after\",\n  \"ledger:reserve-settlement:before\",\n  \"ledger:reserve-settlement:after\",\n  \"ledger:finalize-settlement:before\",\n  \"ledger:finalize-settlement:after\",\n  \"ledger:request-abort:before\",\n  \"ledger:request-abort:after\",\n  \"ledger:release:before\",\n  \"ledger:release:after\",\n  \"ledger:claim-joining:before\",\n  \"ledger:claim-joining:after\",\n  \"ledger:mark-joined:before\",\n  \"ledger:mark-joined:after\",\n  \"ledger:revert-joining:before\",\n  \"ledger:revert-joining:after\",\n  \"ledger:suspend:before\",\n  \"ledger:suspend:after\",\n  \"ledger:approval-decision:before\",\n  \"ledger:approval-decision:after\",\n  \"ledger:mark-unknown:before\",\n  \"ledger:mark-unknown:after\",\n  \"ledger:unknown-resolution:before\",\n  \"ledger:unknown-resolution:after\",\n  \"ledger:child-reservation:before\",\n  \"ledger:child-reservation:after\",\n  \"ledger:child-attach:before\",\n  \"ledger:child-attach:after\",\n  \"ledger:child-release-pending:before\",\n  \"ledger:child-release-pending:after\",\n  \"ledger:child-release:before\",\n  \"ledger:child-release:after\",\n  \"ledger:child-settled:before\",\n  \"ledger:child-settled:after\",\n]);\n\nexport type DoStorageFailpointLocation = typeof DoStorageFailpointLocation.Type;\n\n/** Deterministic test-only fault or pause injected at a Durable Object storage boundary. */\nexport class DoStorageFailpointError extends Schema.TaggedError<DoStorageFailpointError>()(\n  \"DoStorageFailpointError\",\n  {\n    location: DoStorageFailpointLocation,\n  },\n) {\n  override get message() {\n    return `Injected Durable Object storage failure at ${this.location}.`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAIA,IAAa,8BAAb,cAAiD,OAAO,YAAyC,CAAC,CAChG,+BACA;CACE,eAAe,OAAO;CACtB,SAAS,OAAO;CAChB,kBAAkB,OAAO;AAC3B,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,2BAAb,cAA8C,OAAO,YAAsC,CAAC,CAC1F,4BACA;CACE,SAAS,OAAO;CAChB,QAAQ,OAAO;CACf,OAAO,OAAO;AAChB,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,iBAAb,cAAoC,OAAO,YAA4B,CAAC,CAAC,kBAAkB;CACzF,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;CACzC,SAAS,OAAO;CAChB,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;;;;;AAOJ,IAAa,gBAAb,cAAmC,OAAO,YAA2B,CAAC,CAAC,iBAAiB;CACtF,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;CACzC,SAAS,OAAO;CAChB,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;;;;;;;AASJ,IAAa,uBAAb,cAA0C,OAAO,YAAkC,CAAC,CAClF,wBACA;CACE,aAAa,OAAO;CACpB,UAAU,OAAO;CACjB,WAAW,OAAO;AACpB,CACF,CAAC,CAAC;CACA,IAAa,UAAU;EACrB,OACE,qBAAqB,KAAK,YAAY,uDAChC,KAAK,SAAS,gBAAgB,KAAK,UAAU;CAGvD;AACF;;;;;AAMA,IAAa,mBAAb,cAAsC,OAAO,YAA8B,CAAC,CAAC,oBAAoB;CAC/F,SAAS,OAAO;CAChB,QAAQ,OAAO,SAAS;EAAC;EAAgB;EAAmB;CAAM,CAAC;CACnE,oBAAoB,OAAO,YAAY,iBAAiB;CACxD,kBAAkB,OAAO,YAAY,OAAO,MAAM;AACpD,CAAC,CAAC,CAAC,CAAC;;;;;;AAOJ,IAAa,kBAAb,cAAqC,OAAO,YAA6B,CAAC,CAAC,mBAAmB;CAC5F,aAAa;CACb,SAAS,OAAO;CAChB,eAAe;AACjB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,uBAAb,cAA0C,OAAO,YAAkC,CAAC,CAClF,wBACA,EACE,SAAS,OAAO,OAClB,CACF,CAAC,CAAC,CAAC;;;;;;;;;AAUH,MAAa,6BAA6B,OAAO,SAAS;CACxD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;AAKD,IAAa,0BAAb,cAA6C,OAAO,YAAqC,CAAC,CACxF,2BACA,EACE,UAAU,2BACZ,CACF,CAAC,CAAC;CACA,IAAa,UAAU;EACrB,OAAO,8CAA8C,KAAK,SAAS;CACrE;AACF"}

package/dist/DoStorageFailpoint.d.mts

@@ -0,0 +1,17 @@
+import { l as DoStorageFailpointError, u as DoStorageFailpointLocation } from "./DoStorageError-Cmhvl4TQ.mjs";
+import { Context, Effect, Layer } from "effect";
+declare namespace DoStorageFailpoint_d_exports {
+  export { DoStorageFailpoint, DoStorageFailpointHandler };
+}
+type DoStorageFailpointHandler = (location: DoStorageFailpointLocation) => Effect.Effect<void, DoStorageFailpointError>;
+declare const DoStorageFailpoint_base: Context.ServiceClass<DoStorageFailpoint, "@effect-agent/storage-cloudflare/DoStorageFailpoint", {
+  readonly hit: DoStorageFailpointHandler;
+}>;
+/** Explicit fault-injection authority used at Durable Object storage operation boundaries. */
+declare class DoStorageFailpoint extends DoStorageFailpoint_base {
+  /** Production default: no fault injection. */
+  static readonly layer: Layer.Layer<DoStorageFailpoint, never, never>;
+}
+//#endregion
+export { DoStorageFailpoint, DoStorageFailpointHandler, DoStorageFailpoint_d_exports as t };
+//# sourceMappingURL=DoStorageFailpoint.d.mts.map

package/dist/DoStorageFailpoint.mjs

@@ -0,0 +1,14 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+import { Context, Effect, Layer } from "effect";
+//#region src/DoStorageFailpoint.ts
+var DoStorageFailpoint_exports = /* @__PURE__ */ __exportAll({ DoStorageFailpoint: () => DoStorageFailpoint });
+const noFailpoint = () => Effect.void;
+/** Explicit fault-injection authority used at Durable Object storage operation boundaries. */
+var DoStorageFailpoint = class extends Context.Service()("@effect-agent/storage-cloudflare/DoStorageFailpoint") {
+	/** Production default: no fault injection. */
+	static layer = Layer.succeed(this)({ hit: noFailpoint });
+};
+//#endregion
+export { DoStorageFailpoint, DoStorageFailpoint_exports as t };
+
+//# sourceMappingURL=DoStorageFailpoint.mjs.map

package/dist/DoStorageFailpoint.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DoStorageFailpoint.mjs","names":[],"sources":["../src/DoStorageFailpoint.ts"],"sourcesContent":["import { Context, Effect, Layer } from \"effect\";\n\nimport type { DoStorageFailpointError, DoStorageFailpointLocation } from \"./DoStorageError.ts\";\n\nexport type DoStorageFailpointHandler = (\n  location: DoStorageFailpointLocation,\n) => Effect.Effect<void, DoStorageFailpointError>;\n\nconst noFailpoint: DoStorageFailpointHandler = () => Effect.void;\n\n/** Explicit fault-injection authority used at Durable Object storage operation boundaries. */\nexport class DoStorageFailpoint extends Context.Service<\n  DoStorageFailpoint,\n  {\n    readonly hit: DoStorageFailpointHandler;\n  }\n>()(\"@effect-agent/storage-cloudflare/DoStorageFailpoint\") {\n  /** Production default: no fault injection. */\n  static readonly layer = Layer.succeed(this)({ hit: noFailpoint });\n}\n"],"mappings":";;;;AAQA,MAAM,oBAA+C,OAAO;;AAG5D,IAAa,qBAAb,cAAwC,QAAQ,QAK9C,CAAC,CAAC,qDAAqD,CAAC,CAAC;;CAEzD,OAAgB,QAAQ,MAAM,QAAQ,IAAI,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC;AAClE"}

package/dist/DoStorageFailpointTesting.d.mts

@@ -0,0 +1,34 @@
+import { u as DoStorageFailpointLocation } from "./DoStorageError-Cmhvl4TQ.mjs";
+import { DoStorageFailpoint, DoStorageFailpointHandler } from "./DoStorageFailpoint.mjs";
+import { Context, Effect, Layer } from "effect";
+//#region src/DoStorageFailpointTesting.d.ts
+declare const DoStorageFailpointTestControl_base: Context.ServiceClass<DoStorageFailpointTestControl, "@effect-agent/storage-cloudflare/DoStorageFailpointTestControl", {
+  readonly clear: Effect.Effect<void>;
+  readonly setHandler: (handler: DoStorageFailpointHandler) => Effect.Effect<void>;
+}>;
+/** Test-only control for replacing the active Durable Object failpoint handler. */
+declare class DoStorageFailpointTestControl extends DoStorageFailpointTestControl_base {
+  /** Reusable test Layer with a control service backed by the same handler Ref. */
+  static readonly layer: Layer.Layer<DoStorageFailpoint | DoStorageFailpointTestControl, never, never>;
+}
+/**
+ * The DC-specific eviction failpoint mode: instead of failing typed, an armed hit evicts the
+ * Durable Object through an injected `evict` thunk — in production-shaped harnesses that thunk
+ * is `() => ctx.abort()`, the platform's real failure mode. `ctx.abort()` never returns (it
+ * throws while destroying the in-memory instance and every in-flight implicit or explicit
+ * storage transaction rolls back), so an armed hit ends the current Attempt exactly like an
+ * unannounced platform eviction; DO storage — the only correctness-critical state — survives
+ * for the next incarnation, which the persisted alarm wakes without any incoming request.
+ *
+ * The handles stay injected: this package never imports `cloudflare:workers`, so the harness
+ * that owns a `DurableObjectState` supplies the thunk.
+ */
+declare const evictionFailpointHandler: (options: {
+  readonly isArmed: (location: DoStorageFailpointLocation) => Effect.Effect<boolean>;
+  /** Kills the incarnation — e.g. `() => ctx.abort()`. Typed `void` because the platform
+   * declares `abort` as returning, but it throws while destroying the instance. */
+  readonly evict: (location: DoStorageFailpointLocation) => void;
+}) => DoStorageFailpointHandler;
+//#endregion
+export { DoStorageFailpointTestControl, evictionFailpointHandler };
+//# sourceMappingURL=DoStorageFailpointTesting.d.mts.map

package/dist/DoStorageFailpointTesting.mjs

@@ -0,0 +1,35 @@
+import { DoStorageFailpoint } from "./DoStorageFailpoint.mjs";
+import { Context, Effect, Layer, Ref } from "effect";
+//#region src/DoStorageFailpointTesting.ts
+const noFailpoint = () => Effect.void;
+/** Test-only control for replacing the active Durable Object failpoint handler. */
+var DoStorageFailpointTestControl = class DoStorageFailpointTestControl extends Context.Service()("@effect-agent/storage-cloudflare/DoStorageFailpointTestControl") {
+	/** Reusable test Layer with a control service backed by the same handler Ref. */
+	static layer = Layer.effectContext(Effect.gen(function* () {
+		const handler = yield* Ref.make(noFailpoint);
+		return Context.make(DoStorageFailpoint, DoStorageFailpoint.of({ hit: (location) => Ref.get(handler).pipe(Effect.flatMap((current) => current(location))) })).pipe(Context.add(DoStorageFailpointTestControl, DoStorageFailpointTestControl.of({
+			clear: Ref.set(handler, noFailpoint),
+			setHandler: (next) => Ref.set(handler, next)
+		})));
+	}));
+};
+/**
+* The DC-specific eviction failpoint mode: instead of failing typed, an armed hit evicts the
+* Durable Object through an injected `evict` thunk — in production-shaped harnesses that thunk
+* is `() => ctx.abort()`, the platform's real failure mode. `ctx.abort()` never returns (it
+* throws while destroying the in-memory instance and every in-flight implicit or explicit
+* storage transaction rolls back), so an armed hit ends the current Attempt exactly like an
+* unannounced platform eviction; DO storage — the only correctness-critical state — survives
+* for the next incarnation, which the persisted alarm wakes without any incoming request.
+*
+* The handles stay injected: this package never imports `cloudflare:workers`, so the harness
+* that owns a `DurableObjectState` supplies the thunk.
+*/
+const evictionFailpointHandler = (options) => (location) => options.isArmed(location).pipe(Effect.flatMap((armed) => armed ? Effect.sync(() => {
+	options.evict(location);
+	throw new Error(`Durable Object eviction did not interrupt execution at ${location}.`);
+}) : Effect.void));
+//#endregion
+export { DoStorageFailpointTestControl, evictionFailpointHandler };
+
+//# sourceMappingURL=DoStorageFailpointTesting.mjs.map

package/dist/DoStorageFailpointTesting.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DoStorageFailpointTesting.mjs","names":[],"sources":["../src/DoStorageFailpointTesting.ts"],"sourcesContent":["import { Context, Effect, Layer, Ref } from \"effect\";\n\nimport type { DoStorageFailpointLocation } from \"./DoStorageError.ts\";\nimport { DoStorageFailpoint, type DoStorageFailpointHandler } from \"./DoStorageFailpoint.ts\";\n\nconst noFailpoint: DoStorageFailpointHandler = () => Effect.void;\n\n/** Test-only control for replacing the active Durable Object failpoint handler. */\nexport class DoStorageFailpointTestControl extends Context.Service<\n  DoStorageFailpointTestControl,\n  {\n    readonly clear: Effect.Effect<void>;\n    readonly setHandler: (handler: DoStorageFailpointHandler) => Effect.Effect<void>;\n  }\n>()(\"@effect-agent/storage-cloudflare/DoStorageFailpointTestControl\") {\n  /** Reusable test Layer with a control service backed by the same handler Ref. */\n  static readonly layer = Layer.effectContext(\n    Effect.gen(function* () {\n      const handler = yield* Ref.make<DoStorageFailpointHandler>(noFailpoint);\n\n      return Context.make(\n        DoStorageFailpoint,\n        DoStorageFailpoint.of({\n          hit: (location) => Ref.get(handler).pipe(Effect.flatMap((current) => current(location))),\n        }),\n      ).pipe(\n        Context.add(\n          DoStorageFailpointTestControl,\n          DoStorageFailpointTestControl.of({\n            clear: Ref.set(handler, noFailpoint),\n            setHandler: (next) => Ref.set(handler, next),\n          }),\n        ),\n      );\n    }),\n  );\n}\n\n/**\n * The DC-specific eviction failpoint mode: instead of failing typed, an armed hit evicts the\n * Durable Object through an injected `evict` thunk — in production-shaped harnesses that thunk\n * is `() => ctx.abort()`, the platform's real failure mode. `ctx.abort()` never returns (it\n * throws while destroying the in-memory instance and every in-flight implicit or explicit\n * storage transaction rolls back), so an armed hit ends the current Attempt exactly like an\n * unannounced platform eviction; DO storage — the only correctness-critical state — survives\n * for the next incarnation, which the persisted alarm wakes without any incoming request.\n *\n * The handles stay injected: this package never imports `cloudflare:workers`, so the harness\n * that owns a `DurableObjectState` supplies the thunk.\n */\nexport const evictionFailpointHandler =\n  (options: {\n    readonly isArmed: (location: DoStorageFailpointLocation) => Effect.Effect<boolean>;\n    /** Kills the incarnation — e.g. `() => ctx.abort()`. Typed `void` because the platform\n     * declares `abort` as returning, but it throws while destroying the instance. */\n    readonly evict: (location: DoStorageFailpointLocation) => void;\n  }): DoStorageFailpointHandler =>\n  (location) =>\n    options.isArmed(location).pipe(\n      Effect.flatMap((armed) =>\n        armed\n          ? // `ctx.abort()` throws while destroying the instance; that throw surfaces as a\n            // defect in the (already dying) incarnation. The defensive throw below keeps the\n            // guarantee — nothing after an armed hit may observe in-memory state — even if a\n            // harness supplies an evict thunk that returns.\n            Effect.sync((): never => {\n              options.evict(location);\n              throw new Error(\n                `Durable Object eviction did not interrupt execution at ${location}.`,\n              );\n            })\n          : Effect.void,\n      ),\n    );\n"],"mappings":";;;AAKA,MAAM,oBAA+C,OAAO;;AAG5D,IAAa,gCAAb,MAAa,sCAAsC,QAAQ,QAMzD,CAAC,CAAC,gEAAgE,CAAC,CAAC;;CAEpE,OAAgB,QAAQ,MAAM,cAC5B,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,OAAO,IAAI,KAAgC,WAAW;EAEtE,OAAO,QAAQ,KACb,oBACA,mBAAmB,GAAG,EACpB,MAAM,aAAa,IAAI,IAAI,OAAO,CAAC,CAAC,KAAK,OAAO,SAAS,YAAY,QAAQ,QAAQ,CAAC,CAAC,EACzF,CAAC,CACH,CAAC,CAAC,KACA,QAAQ,IACN,+BACA,8BAA8B,GAAG;GAC/B,OAAO,IAAI,IAAI,SAAS,WAAW;GACnC,aAAa,SAAS,IAAI,IAAI,SAAS,IAAI;EAC7C,CAAC,CACH,CACF;CACF,CAAC,CACH;AACF;;;;;;;;;;;;;AAcA,MAAa,4BACV,aAMA,aACC,QAAQ,QAAQ,QAAQ,CAAC,CAAC,KACxB,OAAO,SAAS,UACd,QAKI,OAAO,WAAkB;CACvB,QAAQ,MAAM,QAAQ;CACtB,MAAM,IAAI,MACR,0DAA0D,SAAS,EACrE;AACF,CAAC,IACD,OAAO,IACb,CACF"}

package/dist/DoStorageVersion-x5OOurvZ.d.mts

@@ -0,0 +1,12 @@
+import { Effect } from "effect";
+import "effect/unstable/sql/SqlClient";
+import { SqliteMigrator } from "@effect/sql-sqlite-do";
+//#region src/internal/migrations.d.ts
+/** The current storage version recorded in `effect_agent_meta`. */
+declare const CurrentDoStorageVersion = 6;
+declare namespace DoStorageVersion_d_exports {
+  export { CurrentDoStorageVersion };
+}
+//#endregion
+export { CurrentDoStorageVersion as n, DoStorageVersion_d_exports as t };
+//# sourceMappingURL=DoStorageVersion-x5OOurvZ.d.mts.map