@effect-agent/storage-cloudflare 0.1.0-beta.8 → 0.1.0-beta.81

package/dist/DoSubscriptionStore.mjs

@@ -0,0 +1,183 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+import { Context, Effect, Layer, Schema } from "effect";
+import * as SqlClientService from "effect/unstable/sql/SqlClient";
+import { upgradeV2Subscriptions } from "@effect-agent/thread/SqlStorageV2Upgrade";
+import { BrowserCrypto } from "@effect/platform-browser";
+import { SqlSubscriptionTransaction, makeSqlSubscriptionStore } from "@effect-agent/thread/SqlSubscriptionStore";
+import { SourcePartition, SubscriptionError, SubscriptionFailpoint, SubscriptionStore } from "@effect-agent/thread/Subscription";
+//#region src/DoSubscriptionStore.ts
+var DoSubscriptionStore_exports = /* @__PURE__ */ __exportAll({
+	DoSubscriptionAlarmControl: () => DoSubscriptionAlarmControl,
+	DoSubscriptionTransaction: () => DoSubscriptionTransaction,
+	doSubscriptionStoreLayer: () => doSubscriptionStoreLayer
+});
+const CURRENT_SUBSCRIPTION_STORE_VERSION = 3;
+const ScanRow = Schema.Struct({
+	event_scan_cursor: Schema.String,
+	delivery_scan_cursor: Schema.String,
+	recovery_scan_cursor: Schema.Natural
+});
+const StoreStateRow = Schema.Struct({
+	storage_version: Schema.Int,
+	alarm_generation: Schema.Natural
+});
+/** One Durable Object transaction combining subscription SQL and its single native alarm. */
+var DoSubscriptionTransaction = class extends Context.Service()("@effect-agent/storage-cloudflare/DoSubscriptionTransaction") {};
+var DoSubscriptionAlarmControl = class extends Context.Service()("@effect-agent/storage-cloudflare/DoSubscriptionAlarmControl") {};
+const error = (reason, code) => SubscriptionError.make({
+	reason,
+	code
+});
+const unavailable = (operation) => error("storage", operation);
+const corrupt = (operation) => error("corrupt", operation);
+const validate = (schema, value, code) => Schema.decodeUnknownEffect(schema)(value).pipe(Effect.mapError(() => error("validation", code)));
+const decodeRows = (schema, rows, code) => Schema.decodeUnknownEffect(Schema.Array(schema))(rows).pipe(Effect.mapError(() => corrupt(code)));
+const initializeDoSubscriptionStore = Effect.fn("DoSubscriptionStore.initialize")(function* () {
+	const sql = yield* SqlClientService.SqlClient;
+	const names = yield* sql`
+    SELECT name FROM sqlite_master WHERE type='table' AND name LIKE 'effect_agent_subscription_%'
+  `.pipe(Effect.mapError(() => unavailable("inspect subscription storage")));
+	const decodedNames = yield* decodeRows(Schema.Struct({ name: Schema.String }), names, "inspect subscription storage");
+	const expected = /* @__PURE__ */ new Set([
+		"effect_agent_subscription_store_state",
+		"effect_agent_subscription_sequences",
+		"effect_agent_subscriptions",
+		"effect_agent_subscription_events",
+		"effect_agent_subscription_deliveries"
+	]);
+	const hasState = decodedNames.some(({ name }) => name === "effect_agent_subscription_store_state");
+	if (!hasState && decodedNames.length > 0) return yield* corrupt("partial subscription storage");
+	if (!hasState) {
+		yield* sql.withTransaction(Effect.gen(function* () {
+			yield* sql`CREATE TABLE effect_agent_subscription_store_state (
+        singleton INTEGER PRIMARY KEY NOT NULL CHECK(singleton=1), storage_version INTEGER NOT NULL, alarm_generation INTEGER NOT NULL
+      )`.withoutTransform;
+			yield* sql`CREATE TABLE effect_agent_subscription_sequences (
+        tenant_id TEXT NOT NULL, source_address TEXT NOT NULL, sequence INTEGER NOT NULL,
+        event_scan_cursor TEXT NOT NULL, delivery_scan_cursor TEXT NOT NULL, recovery_scan_cursor INTEGER NOT NULL,
+        PRIMARY KEY (tenant_id, source_address)
+      )`.withoutTransform;
+			yield* sql`CREATE TABLE effect_agent_subscriptions (
+        tenant_id TEXT NOT NULL, source_address TEXT NOT NULL, owner_id TEXT NOT NULL, subscription_id TEXT NOT NULL,
+        ordinal INTEGER NOT NULL, source_name TEXT NOT NULL, source_version TEXT NOT NULL, matching_key TEXT NOT NULL,
+        state TEXT NOT NULL, expires_at_millis INTEGER, recovery_at_millis INTEGER, recovery_present INTEGER NOT NULL DEFAULT 0, record_json TEXT NOT NULL,
+        PRIMARY KEY (tenant_id, source_address, owner_id, subscription_id), UNIQUE (tenant_id, source_address, ordinal)
+      )`.withoutTransform;
+			yield* sql`CREATE INDEX effect_agent_subscriptions_owner ON effect_agent_subscriptions (tenant_id, source_address, owner_id, ordinal)`.withoutTransform;
+			yield* sql`CREATE INDEX effect_agent_subscriptions_candidates ON effect_agent_subscriptions (tenant_id, source_address, source_name, source_version, matching_key, ordinal)`.withoutTransform;
+			yield* sql`CREATE INDEX effect_agent_subscriptions_recovery ON effect_agent_subscriptions (tenant_id, source_address, recovery_at_millis, ordinal) WHERE recovery_at_millis IS NOT NULL`.withoutTransform;
+			yield* sql`CREATE TABLE effect_agent_subscription_events (
+        tenant_id TEXT NOT NULL, source_address TEXT NOT NULL, event_id TEXT NOT NULL, source_name TEXT NOT NULL,
+        source_version TEXT NOT NULL, matching_key TEXT NOT NULL, payload_digest TEXT NOT NULL, cutoff INTEGER NOT NULL,
+        cursor INTEGER NOT NULL, routing_complete INTEGER NOT NULL, tombstone INTEGER NOT NULL DEFAULT 0, next_attempt_at_millis INTEGER NOT NULL, record_json TEXT NOT NULL,
+        PRIMARY KEY (tenant_id, source_address, event_id)
+      )`.withoutTransform;
+			yield* sql`CREATE INDEX effect_agent_subscription_events_pending ON effect_agent_subscription_events (tenant_id, source_address, routing_complete, next_attempt_at_millis, event_id)`.withoutTransform;
+			yield* sql`CREATE TABLE effect_agent_subscription_deliveries (
+        tenant_id TEXT NOT NULL, source_address TEXT NOT NULL, owner_id TEXT NOT NULL, subscription_id TEXT NOT NULL,
+        event_id TEXT NOT NULL, delivery_key TEXT NOT NULL, state TEXT NOT NULL, next_attempt_at_millis INTEGER NOT NULL,
+        record_json TEXT NOT NULL, PRIMARY KEY (tenant_id, source_address, owner_id, subscription_id, event_id),
+        UNIQUE (tenant_id, source_address, delivery_key)
+      )`.withoutTransform;
+			yield* sql`CREATE INDEX effect_agent_subscription_deliveries_pending ON effect_agent_subscription_deliveries (tenant_id, source_address, state, next_attempt_at_millis, delivery_key)`.withoutTransform;
+			yield* sql`CREATE INDEX effect_agent_subscription_deliveries_registration ON effect_agent_subscription_deliveries (tenant_id, source_address, owner_id, subscription_id, delivery_key)`.withoutTransform;
+			yield* sql`INSERT INTO effect_agent_subscription_store_state (singleton, storage_version, alarm_generation)
+        VALUES (1, ${CURRENT_SUBSCRIPTION_STORE_VERSION}, 0)`.withoutTransform;
+		})).pipe(Effect.mapError(() => unavailable("initialize subscription storage")));
+		return;
+	}
+	if (decodedNames.length !== expected.size || decodedNames.some(({ name }) => !expected.has(name))) return yield* corrupt("subscription storage tables");
+	const rows = yield* sql`SELECT storage_version, alarm_generation FROM effect_agent_subscription_store_state WHERE singleton=1`.pipe(Effect.mapError(() => unavailable("read subscription storage version")));
+	const state = yield* decodeRows(StoreStateRow, rows, "read subscription storage version");
+	if (state.length === 1 && state[0].storage_version === 2) {
+		const failpoint = yield* SubscriptionFailpoint;
+		yield* sql.withTransaction(Effect.gen(function* () {
+			const current = yield* sql`SELECT storage_version FROM effect_agent_subscription_store_state WHERE singleton=1`;
+			if (current.length === 1 && current[0].storage_version === 3) return;
+			if (current.length !== 1 || current[0].storage_version !== 2) return yield* corrupt("subscription version changed during upgrade");
+			yield* upgradeV2Subscriptions(19e5);
+			yield* failpoint.hit("upgrade:before-version");
+			yield* sql`UPDATE effect_agent_subscription_store_state SET storage_version=3 WHERE singleton=1`;
+			yield* failpoint.hit("upgrade:after-version");
+		})).pipe(Effect.provide(BrowserCrypto.layer), Effect.catchTag("StorageUpgradeError", (error) => SubscriptionError.make({
+			reason: "corrupt",
+			code: "upgrade-v2-subscriptions",
+			cause: error
+		})), Effect.catchTag("SqlError", () => unavailable("upgrade v2 subscriptions")), Effect.catchTag("SchemaError", () => corrupt("upgrade v2 subscription encoding")), Effect.catchTag("SubscriptionFailpointError", () => unavailable("upgrade v2 subscriptions failpoint")));
+		return;
+	}
+	if (state.length !== 1 || state[0].storage_version !== CURRENT_SUBSCRIPTION_STORE_VERSION) return yield* corrupt(state.length === 1 ? `incompatible subscription storage version ${state[0].storage_version}; expected ${CURRENT_SUBSCRIPTION_STORE_VERSION}` : "invalid subscription storage version row");
+});
+const makeSubscriptionStore = Effect.fn("DoSubscriptionStore.make")(function* (owned) {
+	const partition = yield* validate(SourcePartition, owned, "partition");
+	const sql = yield* SqlClientService.SqlClient;
+	const failpoint = yield* SubscriptionFailpoint;
+	const transactions = yield* DoSubscriptionTransaction;
+	yield* initializeDoSubscriptionStore();
+	const query = (effect, code) => effect.pipe(Effect.mapError(() => unavailable(code)));
+	const readIndexedDeadline = Effect.fn("DoSubscriptionStore.readIndexedDeadline")(function* () {
+		const scanRows = yield* query(sql`
+      SELECT event_scan_cursor, delivery_scan_cursor, recovery_scan_cursor FROM effect_agent_subscription_sequences
+      WHERE tenant_id=${partition.tenantId} AND source_address=${partition.address}
+    `, "read scan cursor deadline");
+		const scans = yield* decodeRows(ScanRow, scanRows, "read scan cursor deadline");
+		if (scans.length !== 1) return yield* corrupt("scan cursor deadline");
+		if (scans[0].event_scan_cursor !== "" || scans[0].delivery_scan_cursor !== "" || scans[0].recovery_scan_cursor !== 0) return 0;
+		const rows = yield* query(sql`
+      SELECT MIN(deadline) AS deadline FROM (
+        SELECT next_attempt_at_millis AS deadline FROM effect_agent_subscription_events
+          WHERE tenant_id=${partition.tenantId} AND source_address=${partition.address} AND routing_complete=0
+        UNION ALL SELECT next_attempt_at_millis FROM effect_agent_subscription_deliveries
+          WHERE tenant_id=${partition.tenantId} AND source_address=${partition.address} AND CASE WHEN json_valid(record_json) THEN
+          ((state NOT IN ('delivered','refused') AND COALESCE(json_extract(record_json, '$.retry.parked'), 0)=0) OR (state='delivered' AND json_extract(record_json, '$.observeSettlement')=1))
+          ELSE state<>'refused' END
+        UNION ALL SELECT next_maintenance_at_millis FROM effect_agent_event_retention
+          WHERE tenant_id=${partition.tenantId} AND source_address=${partition.address}
+        UNION ALL SELECT recovery_at_millis FROM effect_agent_subscriptions
+          WHERE tenant_id=${partition.tenantId} AND source_address=${partition.address} AND state='active' AND recovery_at_millis IS NOT NULL
+      )
+    `, "read subscription deadline");
+		const decoded = yield* decodeRows(Schema.Struct({ deadline: Schema.NullOr(Schema.Number) }), rows, "read subscription deadline");
+		if (decoded.length !== 1) return yield* corrupt("subscription deadline");
+		return decoded[0].deadline;
+	});
+	const replaceAlarm = Effect.fn("DoSubscriptionStore.replaceAlarm")(function* (replace, deadlineAtMillis) {
+		const rows = yield* query(sql`
+      UPDATE effect_agent_subscription_store_state SET alarm_generation=alarm_generation+1
+      WHERE singleton=1 RETURNING storage_version, alarm_generation
+    `, "advance subscription alarm generation");
+		const state = yield* decodeRows(StoreStateRow, rows, "advance subscription alarm generation");
+		if (state.length !== 1 || state[0].storage_version !== CURRENT_SUBSCRIPTION_STORE_VERSION) return yield* corrupt("subscription alarm state");
+		yield* failpoint.hit("subscription:alarm:before");
+		yield* replace({
+			deadlineAtMillis,
+			generation: state[0].alarm_generation
+		});
+		yield* failpoint.hit("subscription:alarm:after");
+	});
+	const transact = (effect) => transactions.run((replace) => Effect.gen(function* () {
+		const value = yield* effect;
+		yield* replaceAlarm(replace, yield* readIndexedDeadline());
+		return value;
+	}));
+	const store = yield* makeSqlSubscriptionStore(partition, { maxStoredJsonLength: 19e5 }).pipe(Effect.provide(Layer.succeed(SqlSubscriptionTransaction)({ run: transact })));
+	const prearm = Effect.fn("DoSubscriptionStore.prearm")(function* (deadlineAtMillis) {
+		yield* transactions.run((replace) => replaceAlarm(replace, deadlineAtMillis));
+		yield* failpoint.hit("subscription:prearm:after");
+	});
+	const reconcile = Effect.gen(function* () {
+		yield* transactions.run((replace) => Effect.gen(function* () {
+			yield* replaceAlarm(replace, yield* readIndexedDeadline());
+		}));
+		yield* failpoint.hit("subscription:reconcile:after");
+	});
+	return Context.make(SubscriptionStore, store).pipe(Context.add(DoSubscriptionAlarmControl, {
+		prearm,
+		reconcile
+	}));
+});
+const doSubscriptionStoreLayer = (partition) => Layer.effectContext(makeSubscriptionStore(partition));
+//#endregion
+export { DoSubscriptionAlarmControl, DoSubscriptionTransaction, doSubscriptionStoreLayer, DoSubscriptionStore_exports as t };
+
+//# sourceMappingURL=DoSubscriptionStore.mjs.map

package/dist/DoSubscriptionStore.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DoSubscriptionStore.mjs","names":[],"sources":["../src/DoSubscriptionStore.ts"],"sourcesContent":["import { upgradeV2Subscriptions } from \"@effect-agent/thread/SqlStorageV2Upgrade\";\nimport {\n  makeSqlSubscriptionStore,\n  SqlSubscriptionTransaction,\n} from \"@effect-agent/thread/SqlSubscriptionStore\";\nimport {\n  SourcePartition,\n  SubscriptionError,\n  SubscriptionFailpoint,\n  type SubscriptionFailpointError,\n  SubscriptionStore,\n} from \"@effect-agent/thread/Subscription\";\nimport { BrowserCrypto } from \"@effect/platform-browser\";\nimport { Context, Effect, Layer, Schema } from \"effect\";\nimport * as SqlClientService from \"effect/unstable/sql/SqlClient\";\nimport type { SqlError } from \"effect/unstable/sql/SqlError\";\n\nconst CURRENT_SUBSCRIPTION_STORE_VERSION = 3;\n\nconst ScanRow = Schema.Struct({\n  event_scan_cursor: Schema.String,\n  delivery_scan_cursor: Schema.String,\n  recovery_scan_cursor: Schema.Natural,\n});\n\nconst StoreStateRow = Schema.Struct({\n  storage_version: Schema.Int,\n  alarm_generation: Schema.Natural,\n});\n\nexport interface DoSubscriptionAlarmReplacement {\n  readonly deadlineAtMillis: number | null;\n  readonly generation: number;\n}\n\nexport type DoSubscriptionReplaceAlarm = (\n  replacement: DoSubscriptionAlarmReplacement,\n) => Effect.Effect<void, SubscriptionError>;\n\n/** One Durable Object transaction combining subscription SQL and its single native alarm. */\nexport class DoSubscriptionTransaction extends Context.Service<\n  DoSubscriptionTransaction,\n  {\n    readonly run: <A, E, R>(\n      body: (replaceAlarm: DoSubscriptionReplaceAlarm) => Effect.Effect<A, E, R>,\n    ) => Effect.Effect<A, E | SubscriptionError, R>;\n  }\n>()(\"@effect-agent/storage-cloudflare/DoSubscriptionTransaction\") {}\n\nexport class DoSubscriptionAlarmControl extends Context.Service<\n  DoSubscriptionAlarmControl,\n  {\n    readonly prearm: (\n      deadlineAtMillis: number,\n    ) => Effect.Effect<void, SubscriptionError | SubscriptionFailpointError>;\n    readonly reconcile: Effect.Effect<void, SubscriptionError | SubscriptionFailpointError>;\n  }\n>()(\"@effect-agent/storage-cloudflare/DoSubscriptionAlarmControl\") {}\n\nconst error = (reason: SubscriptionError[\"reason\"], code: string) =>\n  SubscriptionError.make({ reason, code });\n\nconst unavailable = (operation: string) => error(\"storage\", operation);\nconst corrupt = (operation: string) => error(\"corrupt\", operation);\n\nconst validate = <A, I>(schema: Schema.Codec<A, I>, value: unknown, code: string) =>\n  Schema.decodeUnknownEffect(schema)(value).pipe(Effect.mapError(() => error(\"validation\", code)));\n\nconst decodeRows = <A, I>(schema: Schema.Codec<A, I>, rows: unknown, code: string) =>\n  Schema.decodeUnknownEffect(Schema.Array(schema))(rows).pipe(Effect.mapError(() => corrupt(code)));\n\nconst initializeDoSubscriptionStore = Effect.fn(\"DoSubscriptionStore.initialize\")(function* () {\n  const sql = yield* SqlClientService.SqlClient;\n\n  const names = yield* sql<Record<string, unknown>>`\n    SELECT name FROM sqlite_master WHERE type='table' AND name LIKE 'effect_agent_subscription_%'\n  `.pipe(Effect.mapError(() => unavailable(\"inspect subscription storage\")));\n\n  const decodedNames = yield* decodeRows(\n    Schema.Struct({ name: Schema.String }),\n    names,\n    \"inspect subscription storage\",\n  );\n\n  const expected = new Set([\n    \"effect_agent_subscription_store_state\",\n    \"effect_agent_subscription_sequences\",\n    \"effect_agent_subscriptions\",\n    \"effect_agent_subscription_events\",\n    \"effect_agent_subscription_deliveries\",\n  ]);\n\n  const hasState = decodedNames.some(\n    ({ name }) => name === \"effect_agent_subscription_store_state\",\n  );\n\n  if (!hasState && decodedNames.length > 0) return yield* corrupt(\"partial subscription storage\");\n  if (!hasState) {\n    yield* sql\n      .withTransaction(\n        Effect.gen(function* () {\n          yield* sql`CREATE TABLE effect_agent_subscription_store_state (\n        singleton INTEGER PRIMARY KEY NOT NULL CHECK(singleton=1), storage_version INTEGER NOT NULL, alarm_generation INTEGER NOT NULL\n      )`.withoutTransform;\n          yield* sql`CREATE TABLE effect_agent_subscription_sequences (\n        tenant_id TEXT NOT NULL, source_address TEXT NOT NULL, sequence INTEGER NOT NULL,\n        event_scan_cursor TEXT NOT NULL, delivery_scan_cursor TEXT NOT NULL, recovery_scan_cursor INTEGER NOT NULL,\n        PRIMARY KEY (tenant_id, source_address)\n      )`.withoutTransform;\n          yield* sql`CREATE TABLE effect_agent_subscriptions (\n        tenant_id TEXT NOT NULL, source_address TEXT NOT NULL, owner_id TEXT NOT NULL, subscription_id TEXT NOT NULL,\n        ordinal INTEGER NOT NULL, source_name TEXT NOT NULL, source_version TEXT NOT NULL, matching_key TEXT NOT NULL,\n        state TEXT NOT NULL, expires_at_millis INTEGER, recovery_at_millis INTEGER, recovery_present INTEGER NOT NULL DEFAULT 0, record_json TEXT NOT NULL,\n        PRIMARY KEY (tenant_id, source_address, owner_id, subscription_id), UNIQUE (tenant_id, source_address, ordinal)\n      )`.withoutTransform;\n          yield* sql`CREATE INDEX effect_agent_subscriptions_owner ON effect_agent_subscriptions (tenant_id, source_address, owner_id, ordinal)`\n            .withoutTransform;\n          yield* sql`CREATE INDEX effect_agent_subscriptions_candidates ON effect_agent_subscriptions (tenant_id, source_address, source_name, source_version, matching_key, ordinal)`\n            .withoutTransform;\n          yield* sql`CREATE INDEX effect_agent_subscriptions_recovery ON effect_agent_subscriptions (tenant_id, source_address, recovery_at_millis, ordinal) WHERE recovery_at_millis IS NOT NULL`\n            .withoutTransform;\n          yield* sql`CREATE TABLE effect_agent_subscription_events (\n        tenant_id TEXT NOT NULL, source_address TEXT NOT NULL, event_id TEXT NOT NULL, source_name TEXT NOT NULL,\n        source_version TEXT NOT NULL, matching_key TEXT NOT NULL, payload_digest TEXT NOT NULL, cutoff INTEGER NOT NULL,\n        cursor INTEGER NOT NULL, routing_complete INTEGER NOT NULL, tombstone INTEGER NOT NULL DEFAULT 0, next_attempt_at_millis INTEGER NOT NULL, record_json TEXT NOT NULL,\n        PRIMARY KEY (tenant_id, source_address, event_id)\n      )`.withoutTransform;\n          yield* sql`CREATE INDEX effect_agent_subscription_events_pending ON effect_agent_subscription_events (tenant_id, source_address, routing_complete, next_attempt_at_millis, event_id)`\n            .withoutTransform;\n          yield* sql`CREATE TABLE effect_agent_subscription_deliveries (\n        tenant_id TEXT NOT NULL, source_address TEXT NOT NULL, owner_id TEXT NOT NULL, subscription_id TEXT NOT NULL,\n        event_id TEXT NOT NULL, delivery_key TEXT NOT NULL, state TEXT NOT NULL, next_attempt_at_millis INTEGER NOT NULL,\n        record_json TEXT NOT NULL, PRIMARY KEY (tenant_id, source_address, owner_id, subscription_id, event_id),\n        UNIQUE (tenant_id, source_address, delivery_key)\n      )`.withoutTransform;\n          yield* sql`CREATE INDEX effect_agent_subscription_deliveries_pending ON effect_agent_subscription_deliveries (tenant_id, source_address, state, next_attempt_at_millis, delivery_key)`\n            .withoutTransform;\n          yield* sql`CREATE INDEX effect_agent_subscription_deliveries_registration ON effect_agent_subscription_deliveries (tenant_id, source_address, owner_id, subscription_id, delivery_key)`\n            .withoutTransform;\n          yield* sql`INSERT INTO effect_agent_subscription_store_state (singleton, storage_version, alarm_generation)\n        VALUES (1, ${CURRENT_SUBSCRIPTION_STORE_VERSION}, 0)`.withoutTransform;\n        }),\n      )\n      .pipe(Effect.mapError(() => unavailable(\"initialize subscription storage\")));\n\n    return;\n  }\n  if (decodedNames.length !== expected.size || decodedNames.some(({ name }) => !expected.has(name)))\n    return yield* corrupt(\"subscription storage tables\");\n\n  const rows = yield* sql<\n    Record<string, unknown>\n  >`SELECT storage_version, alarm_generation FROM effect_agent_subscription_store_state WHERE singleton=1`.pipe(\n    Effect.mapError(() => unavailable(\"read subscription storage version\")),\n  );\n\n  const state = yield* decodeRows(StoreStateRow, rows, \"read subscription storage version\");\n\n  if (state.length === 1 && state[0].storage_version === 2) {\n    const failpoint = yield* SubscriptionFailpoint;\n\n    yield* sql\n      .withTransaction(\n        Effect.gen(function* () {\n          const current = yield* sql<{\n            storage_version: number;\n          }>`SELECT storage_version FROM effect_agent_subscription_store_state WHERE singleton=1`;\n\n          if (current.length === 1 && current[0].storage_version === 3) return;\n          if (current.length !== 1 || current[0].storage_version !== 2)\n            return yield* corrupt(\"subscription version changed during upgrade\");\n          yield* upgradeV2Subscriptions(1_900_000);\n          yield* failpoint.hit(\"upgrade:before-version\");\n          yield* sql`UPDATE effect_agent_subscription_store_state SET storage_version=3 WHERE singleton=1`;\n          yield* failpoint.hit(\"upgrade:after-version\");\n        }),\n      )\n      .pipe(\n        Effect.provide(BrowserCrypto.layer),\n        Effect.catchTag(\"StorageUpgradeError\", (error) =>\n          SubscriptionError.make({\n            reason: \"corrupt\",\n            code: \"upgrade-v2-subscriptions\",\n            cause: error,\n          }),\n        ),\n        Effect.catchTag(\"SqlError\", () => unavailable(\"upgrade v2 subscriptions\")),\n        Effect.catchTag(\"SchemaError\", () => corrupt(\"upgrade v2 subscription encoding\")),\n        Effect.catchTag(\"SubscriptionFailpointError\", () =>\n          unavailable(\"upgrade v2 subscriptions failpoint\"),\n        ),\n      );\n\n    return;\n  }\n\n  if (state.length !== 1 || state[0].storage_version !== CURRENT_SUBSCRIPTION_STORE_VERSION)\n    return yield* corrupt(\n      state.length === 1\n        ? `incompatible subscription storage version ${state[0].storage_version}; expected ${CURRENT_SUBSCRIPTION_STORE_VERSION}`\n        : \"invalid subscription storage version row\",\n    );\n});\n\nconst makeSubscriptionStore = Effect.fn(\"DoSubscriptionStore.make\")(function* (\n  owned: SourcePartition,\n) {\n  const partition = yield* validate(SourcePartition, owned, \"partition\");\n  const sql = yield* SqlClientService.SqlClient;\n  const failpoint = yield* SubscriptionFailpoint;\n  const transactions = yield* DoSubscriptionTransaction;\n\n  yield* initializeDoSubscriptionStore();\n\n  const query = <A extends object>(\n    effect: Effect.Effect<ReadonlyArray<A>, SqlError>,\n    code: string,\n  ) => effect.pipe(Effect.mapError(() => unavailable(code)));\n\n  const readIndexedDeadline = Effect.fn(\"DoSubscriptionStore.readIndexedDeadline\")(function* () {\n    const scanRows = yield* query(\n      sql<Record<string, unknown>>`\n      SELECT event_scan_cursor, delivery_scan_cursor, recovery_scan_cursor FROM effect_agent_subscription_sequences\n      WHERE tenant_id=${partition.tenantId} AND source_address=${partition.address}\n    `,\n      \"read scan cursor deadline\",\n    );\n\n    const scans = yield* decodeRows(ScanRow, scanRows, \"read scan cursor deadline\");\n\n    if (scans.length !== 1) return yield* corrupt(\"scan cursor deadline\");\n    if (\n      scans[0].event_scan_cursor !== \"\" ||\n      scans[0].delivery_scan_cursor !== \"\" ||\n      scans[0].recovery_scan_cursor !== 0\n    )\n      return 0;\n\n    const rows = yield* query(\n      sql<Record<string, unknown>>`\n      SELECT MIN(deadline) AS deadline FROM (\n        SELECT next_attempt_at_millis AS deadline FROM effect_agent_subscription_events\n          WHERE tenant_id=${partition.tenantId} AND source_address=${partition.address} AND routing_complete=0\n        UNION ALL SELECT next_attempt_at_millis FROM effect_agent_subscription_deliveries\n          WHERE tenant_id=${partition.tenantId} AND source_address=${partition.address} AND CASE WHEN json_valid(record_json) THEN\n          ((state NOT IN ('delivered','refused') AND COALESCE(json_extract(record_json, '$.retry.parked'), 0)=0) OR (state='delivered' AND json_extract(record_json, '$.observeSettlement')=1))\n          ELSE state<>'refused' END\n        UNION ALL SELECT next_maintenance_at_millis FROM effect_agent_event_retention\n          WHERE tenant_id=${partition.tenantId} AND source_address=${partition.address}\n        UNION ALL SELECT recovery_at_millis FROM effect_agent_subscriptions\n          WHERE tenant_id=${partition.tenantId} AND source_address=${partition.address} AND state='active' AND recovery_at_millis IS NOT NULL\n      )\n    `,\n      \"read subscription deadline\",\n    );\n\n    const decoded = yield* decodeRows(\n      Schema.Struct({ deadline: Schema.NullOr(Schema.Number) }),\n      rows,\n      \"read subscription deadline\",\n    );\n\n    if (decoded.length !== 1) return yield* corrupt(\"subscription deadline\");\n\n    return decoded[0].deadline;\n  });\n\n  const replaceAlarm = Effect.fn(\"DoSubscriptionStore.replaceAlarm\")(function* (\n    replace: DoSubscriptionReplaceAlarm,\n    deadlineAtMillis: number | null,\n  ) {\n    const rows = yield* query(\n      sql<Record<string, unknown>>`\n      UPDATE effect_agent_subscription_store_state SET alarm_generation=alarm_generation+1\n      WHERE singleton=1 RETURNING storage_version, alarm_generation\n    `,\n      \"advance subscription alarm generation\",\n    );\n\n    const state = yield* decodeRows(StoreStateRow, rows, \"advance subscription alarm generation\");\n\n    if (state.length !== 1 || state[0].storage_version !== CURRENT_SUBSCRIPTION_STORE_VERSION)\n      return yield* corrupt(\"subscription alarm state\");\n    yield* failpoint.hit(\"subscription:alarm:before\");\n    yield* replace({ deadlineAtMillis, generation: state[0].alarm_generation });\n    yield* failpoint.hit(\"subscription:alarm:after\");\n  });\n\n  const transact = <A>(effect: Effect.Effect<A, SubscriptionError | SubscriptionFailpointError>) =>\n    transactions.run((replace) =>\n      Effect.gen(function* () {\n        const value = yield* effect;\n\n        yield* replaceAlarm(replace, yield* readIndexedDeadline());\n\n        return value;\n      }),\n    );\n\n  const store = yield* makeSqlSubscriptionStore(partition, {\n    maxStoredJsonLength: 1_900_000,\n  }).pipe(Effect.provide(Layer.succeed(SqlSubscriptionTransaction)({ run: transact })));\n\n  const prearm = Effect.fn(\"DoSubscriptionStore.prearm\")(function* (deadlineAtMillis: number) {\n    yield* transactions.run((replace) => replaceAlarm(replace, deadlineAtMillis));\n    yield* failpoint.hit(\"subscription:prearm:after\");\n  });\n\n  const reconcile = Effect.gen(function* () {\n    yield* transactions.run((replace) =>\n      Effect.gen(function* () {\n        yield* replaceAlarm(replace, yield* readIndexedDeadline());\n      }),\n    );\n    yield* failpoint.hit(\"subscription:reconcile:after\");\n  });\n\n  return Context.make(SubscriptionStore, store).pipe(\n    Context.add(DoSubscriptionAlarmControl, { prearm, reconcile }),\n  );\n});\n\nexport const doSubscriptionStoreLayer = (\n  partition: SourcePartition,\n): Layer.Layer<\n  SubscriptionStore | DoSubscriptionAlarmControl,\n  SubscriptionError,\n  DoSubscriptionTransaction | SqlClientService.SqlClient\n> => Layer.effectContext(makeSubscriptionStore(partition));\n"],"mappings":";;;;;;;;;;;;;AAiBA,MAAM,qCAAqC;AAE3C,MAAM,UAAU,OAAO,OAAO;CAC5B,mBAAmB,OAAO;CAC1B,sBAAsB,OAAO;CAC7B,sBAAsB,OAAO;AAC/B,CAAC;AAED,MAAM,gBAAgB,OAAO,OAAO;CAClC,iBAAiB,OAAO;CACxB,kBAAkB,OAAO;AAC3B,CAAC;;AAYD,IAAa,4BAAb,cAA+C,QAAQ,QAOrD,CAAC,CAAC,4DAA4D,CAAC,CAAC,CAAC;AAEnE,IAAa,6BAAb,cAAgD,QAAQ,QAQtD,CAAC,CAAC,6DAA6D,CAAC,CAAC,CAAC;AAEpE,MAAM,SAAS,QAAqC,SAClD,kBAAkB,KAAK;CAAE;CAAQ;AAAK,CAAC;AAEzC,MAAM,eAAe,cAAsB,MAAM,WAAW,SAAS;AACrE,MAAM,WAAW,cAAsB,MAAM,WAAW,SAAS;AAEjE,MAAM,YAAkB,QAA4B,OAAgB,SAClE,OAAO,oBAAoB,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,OAAO,eAAe,MAAM,cAAc,IAAI,CAAC,CAAC;AAEjG,MAAM,cAAoB,QAA4B,MAAe,SACnE,OAAO,oBAAoB,OAAO,MAAM,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,OAAO,eAAe,QAAQ,IAAI,CAAC,CAAC;AAElG,MAAM,gCAAgC,OAAO,GAAG,gCAAgC,CAAC,CAAC,aAAa;CAC7F,MAAM,MAAM,OAAO,iBAAiB;CAEpC,MAAM,QAAQ,OAAO,GAA4B;;IAE/C,KAAK,OAAO,eAAe,YAAY,8BAA8B,CAAC,CAAC;CAEzE,MAAM,eAAe,OAAO,WAC1B,OAAO,OAAO,EAAE,MAAM,OAAO,OAAO,CAAC,GACrC,OACA,8BACF;CAEA,MAAM,2BAAW,IAAI,IAAI;EACvB;EACA;EACA;EACA;EACA;CACF,CAAC;CAED,MAAM,WAAW,aAAa,MAC3B,EAAE,WAAW,SAAS,uCACzB;CAEA,IAAI,CAAC,YAAY,aAAa,SAAS,GAAG,OAAO,OAAO,QAAQ,8BAA8B;CAC9F,IAAI,CAAC,UAAU;EACb,OAAO,IACJ,gBACC,OAAO,IAAI,aAAa;GACtB,OAAO,GAAG;;SAEX;GACC,OAAO,GAAG;;;;SAIX;GACC,OAAO,GAAG;;;;;SAKX;GACC,OAAO,GAAG,6HACP;GACH,OAAO,GAAG,mKACP;GACH,OAAO,GAAG,+KACP;GACH,OAAO,GAAG;;;;;SAKX;GACC,OAAO,GAAG,4KACP;GACH,OAAO,GAAG;;;;;SAKX;GACC,OAAO,GAAG,6KACP;GACH,OAAO,GAAG,8KACP;GACH,OAAO,GAAG;qBACC,mCAAmC,MAAM;EACtD,CAAC,CACH,CAAC,CACA,KAAK,OAAO,eAAe,YAAY,iCAAiC,CAAC,CAAC;EAE7E;CACF;CACA,IAAI,aAAa,WAAW,SAAS,QAAQ,aAAa,MAAM,EAAE,WAAW,CAAC,SAAS,IAAI,IAAI,CAAC,GAC9F,OAAO,OAAO,QAAQ,6BAA6B;CAErD,MAAM,OAAO,OAAO,GAEnB,wGAAwG,KACvG,OAAO,eAAe,YAAY,mCAAmC,CAAC,CACxE;CAEA,MAAM,QAAQ,OAAO,WAAW,eAAe,MAAM,mCAAmC;CAExF,IAAI,MAAM,WAAW,KAAK,MAAM,EAAE,CAAC,oBAAoB,GAAG;EACxD,MAAM,YAAY,OAAO;EAEzB,OAAO,IACJ,gBACC,OAAO,IAAI,aAAa;GACtB,MAAM,UAAU,OAAO,GAErB;GAEF,IAAI,QAAQ,WAAW,KAAK,QAAQ,EAAE,CAAC,oBAAoB,GAAG;GAC9D,IAAI,QAAQ,WAAW,KAAK,QAAQ,EAAE,CAAC,oBAAoB,GACzD,OAAO,OAAO,QAAQ,6CAA6C;GACrE,OAAO,uBAAuB,IAAS;GACvC,OAAO,UAAU,IAAI,wBAAwB;GAC7C,OAAO,GAAG;GACV,OAAO,UAAU,IAAI,uBAAuB;EAC9C,CAAC,CACH,CAAC,CACA,KACC,OAAO,QAAQ,cAAc,KAAK,GAClC,OAAO,SAAS,wBAAwB,UACtC,kBAAkB,KAAK;GACrB,QAAQ;GACR,MAAM;GACN,OAAO;EACT,CAAC,CACH,GACA,OAAO,SAAS,kBAAkB,YAAY,0BAA0B,CAAC,GACzE,OAAO,SAAS,qBAAqB,QAAQ,kCAAkC,CAAC,GAChF,OAAO,SAAS,oCACd,YAAY,oCAAoC,CAClD,CACF;EAEF;CACF;CAEA,IAAI,MAAM,WAAW,KAAK,MAAM,EAAE,CAAC,oBAAoB,oCACrD,OAAO,OAAO,QACZ,MAAM,WAAW,IACb,6CAA6C,MAAM,EAAE,CAAC,gBAAgB,aAAa,uCACnF,0CACN;AACJ,CAAC;AAED,MAAM,wBAAwB,OAAO,GAAG,0BAA0B,CAAC,CAAC,WAClE,OACA;CACA,MAAM,YAAY,OAAO,SAAS,iBAAiB,OAAO,WAAW;CACrE,MAAM,MAAM,OAAO,iBAAiB;CACpC,MAAM,YAAY,OAAO;CACzB,MAAM,eAAe,OAAO;CAE5B,OAAO,8BAA8B;CAErC,MAAM,SACJ,QACA,SACG,OAAO,KAAK,OAAO,eAAe,YAAY,IAAI,CAAC,CAAC;CAEzD,MAAM,sBAAsB,OAAO,GAAG,yCAAyC,CAAC,CAAC,aAAa;EAC5F,MAAM,WAAW,OAAO,MACtB,GAA4B;;wBAEV,UAAU,SAAS,sBAAsB,UAAU,QAAQ;OAE7E,2BACF;EAEA,MAAM,QAAQ,OAAO,WAAW,SAAS,UAAU,2BAA2B;EAE9E,IAAI,MAAM,WAAW,GAAG,OAAO,OAAO,QAAQ,sBAAsB;EACpE,IACE,MAAM,EAAE,CAAC,sBAAsB,MAC/B,MAAM,EAAE,CAAC,yBAAyB,MAClC,MAAM,EAAE,CAAC,yBAAyB,GAElC,OAAO;EAET,MAAM,OAAO,OAAO,MAClB,GAA4B;;;4BAGN,UAAU,SAAS,sBAAsB,UAAU,QAAQ;;4BAE3D,UAAU,SAAS,sBAAsB,UAAU,QAAQ;;;;4BAI3D,UAAU,SAAS,sBAAsB,UAAU,QAAQ;;4BAE3D,UAAU,SAAS,sBAAsB,UAAU,QAAQ;;OAGjF,4BACF;EAEA,MAAM,UAAU,OAAO,WACrB,OAAO,OAAO,EAAE,UAAU,OAAO,OAAO,OAAO,MAAM,EAAE,CAAC,GACxD,MACA,4BACF;EAEA,IAAI,QAAQ,WAAW,GAAG,OAAO,OAAO,QAAQ,uBAAuB;EAEvE,OAAO,QAAQ,EAAE,CAAC;CACpB,CAAC;CAED,MAAM,eAAe,OAAO,GAAG,kCAAkC,CAAC,CAAC,WACjE,SACA,kBACA;EACA,MAAM,OAAO,OAAO,MAClB,GAA4B;;;OAI5B,uCACF;EAEA,MAAM,QAAQ,OAAO,WAAW,eAAe,MAAM,uCAAuC;EAE5F,IAAI,MAAM,WAAW,KAAK,MAAM,EAAE,CAAC,oBAAoB,oCACrD,OAAO,OAAO,QAAQ,0BAA0B;EAClD,OAAO,UAAU,IAAI,2BAA2B;EAChD,OAAO,QAAQ;GAAE;GAAkB,YAAY,MAAM,EAAE,CAAC;EAAiB,CAAC;EAC1E,OAAO,UAAU,IAAI,0BAA0B;CACjD,CAAC;CAED,MAAM,YAAe,WACnB,aAAa,KAAK,YAChB,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO;EAErB,OAAO,aAAa,SAAS,OAAO,oBAAoB,CAAC;EAEzD,OAAO;CACT,CAAC,CACH;CAEF,MAAM,QAAQ,OAAO,yBAAyB,WAAW,EACvD,qBAAqB,KACvB,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQ,MAAM,QAAQ,0BAA0B,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC;CAEpF,MAAM,SAAS,OAAO,GAAG,4BAA4B,CAAC,CAAC,WAAW,kBAA0B;EAC1F,OAAO,aAAa,KAAK,YAAY,aAAa,SAAS,gBAAgB,CAAC;EAC5E,OAAO,UAAU,IAAI,2BAA2B;CAClD,CAAC;CAED,MAAM,YAAY,OAAO,IAAI,aAAa;EACxC,OAAO,aAAa,KAAK,YACvB,OAAO,IAAI,aAAa;GACtB,OAAO,aAAa,SAAS,OAAO,oBAAoB,CAAC;EAC3D,CAAC,CACH;EACA,OAAO,UAAU,IAAI,8BAA8B;CACrD,CAAC;CAED,OAAO,QAAQ,KAAK,mBAAmB,KAAK,CAAC,CAAC,KAC5C,QAAQ,IAAI,4BAA4B;EAAE;EAAQ;CAAU,CAAC,CAC/D;AACF,CAAC;AAED,MAAa,4BACX,cAKG,MAAM,cAAc,sBAAsB,SAAS,CAAC"}

package/dist/DoThreadStore.d.mts

@@ -0,0 +1,59 @@
+import { a as DoStorageCompatibilityError, o as DoStorageCorruptionError, s as DoStorageError } from "./DoStorageError-Cmhvl4TQ.mjs";
+import { DoStorageConfig } from "./DoStorageConfig.mjs";
+import { DoStorageFailpoint, DoStorageFailpointHandler } from "./DoStorageFailpoint.mjs";
+import { Crypto, Layer } from "effect";
+import * as SqlClientService from "effect/unstable/sql/SqlClient";
+import { ThreadStore } from "@effect-agent/thread/ThreadStore";
+declare namespace DoThreadStore_d_exports {
+  export { DoStorageInitializationError, DoStorageOptions, layer, storageConfigLayer, storageFailpointLayer, threadStoreLayer };
+}
+/**
+ * Convenience-layer construction options. `storage` is the Durable Object's own
+ * `ctx.storage` handle, injected as a value (DEPLOY-010: platform bindings enter only
+ * through Layers; this package never imports `cloudflare:workers`).
+ */
+interface DoStorageOptions {
+  readonly storage: DurableObjectStorage;
+  readonly observationPollInterval?: number | undefined;
+  /**
+   * Submission ownership lease duration in milliseconds (D5). Defaults to
+   * `DEFAULT_OWNERSHIP_LEASE_DURATION` from `@effect-agent/thread`.
+   */
+  readonly ownershipLeaseDuration?: number | undefined;
+  /**
+   * Maximum bytes for any single stored value; must stay under the platform's 2 MB
+   * per-value limit. Defaults to `DEFAULT_MAX_STORED_VALUE_BYTES`.
+   */
+  readonly maxStoredValueBytes?: number | undefined;
+  /**
+   * Re-verify every stored payload and digest chain while opening the store. Defaults to
+   * off: per-operation Schema decoding and the digest chain already fail clearly on corrupt
+   * rows without scanning the whole database on every open.
+   */
+  readonly verifyOnOpen?: boolean | undefined;
+  readonly failpoint?: DoStorageFailpointHandler | undefined;
+}
+type DoStorageInitializationError = DoStorageCompatibilityError | DoStorageCorruptionError | DoStorageError;
+/**
+ * Durable Object Thread Store implementation with configuration, failpoint, SQL, and
+ * Crypto authority kept visible in its input channel.
+ */
+declare const threadStoreLayer: Layer.Layer<ThreadStore, DoStorageInitializationError, DoStorageConfig | DoStorageFailpoint | SqlClientService.SqlClient | Crypto.Crypto>;
+/**
+ * Validated Durable Object storage configuration Layer with the documented defaults applied.
+ * Shared by the ThreadStore and SubmissionLedger convenience layers so their defaults
+ * cannot drift.
+ */
+declare const storageConfigLayer: (options: DoStorageOptions) => Layer.Layer<DoStorageConfig, DoStorageError>;
+/** The failpoint Layer selected by convenience options: explicit handler or the no-op default. */
+declare const storageFailpointLayer: (options: DoStorageOptions) => Layer.Layer<DoStorageFailpoint>;
+/**
+ * A composition-root convenience Layer for canonical Threads inside one Durable Object,
+ * built over `ctx.storage`. Durable accepted work is served by the separate SubmissionLedger
+ * port; point both at the SAME `ctx.storage` so claims fence the same producer epochs
+ * (ADR-0011 D7's "same file" rule, transposed to one object's private database).
+ */
+declare const layer: (options: DoStorageOptions) => Layer.Layer<ThreadStore, DoStorageInitializationError>;
+//#endregion
+export { DoStorageInitializationError, DoStorageOptions, layer, storageConfigLayer, storageFailpointLayer, DoThreadStore_d_exports as t, threadStoreLayer };
+//# sourceMappingURL=DoThreadStore.d.mts.map