@smthrs/engine-store 0.0.0-stage → 1.0.0-rc.4

package/dist/esm/PlanInputStore.js

@@ -0,0 +1,207 @@
+/**
+ * Authoritative source observations for one durable plan execution. These are
+ * replay state, not approval data, journal projections, or evictable cache rows.
+ * @since 1.0.0
+ */
+import { Sha256 } from "@smthrs/crypto";
+import { DurableWriter } from "@smthrs/database/DurableWriter";
+import { FileSet, Plan } from "@smthrs/plan";
+import { OwnerId } from "@smthrs/run-store/Ownership";
+import { Context, Effect, Layer, Option, Schema } from "effect";
+import * as SqlClient from "effect/unstable/sql/SqlClient";
+const Natural = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));
+/**
+ * Address of an append-only observation generation. `environmentDigest` comes
+ * from `StepKey.environmentIdentity` and binds every generation of the run.
+ * @since 1.0.0
+ * @category schemas
+ */
+export const Address = Schema.Struct({
+    runId: Schema.NonEmptyString,
+    planId: Schema.NonEmptyString,
+    baseDigest: Schema.NonEmptyString,
+    environmentDigest: Schema.NonEmptyString,
+    generation: Natural
+});
+/**
+ * Maximum encoded snapshot size, in JavaScript string code units.
+ * @since 1.0.0
+ * @category constants
+ */
+export const maximumSnapshotCharacters = 16 * 1024 * 1024;
+/**
+ * Frozen membership and newly pinned source digests for one generation.
+ * @since 1.0.0
+ * @category schemas
+ */
+export const Snapshot = Schema.Struct({
+    version: Schema.Literal(1),
+    generation: Natural,
+    nodes: Schema.Array(Schema.Struct({
+        id: Schema.NonEmptyString,
+        key: Schema.NonEmptyString,
+        reads: Schema.Array(Schema.Struct({
+            entry: FileSet.ReadEntry,
+            sourcePaths: Schema.Array(FileSet.Pattern)
+        }))
+    })).check(Schema.isMaxLength(Plan.maximumPlanNodes)),
+    pins: Schema.Array(Schema.Struct({ path: FileSet.Pattern, digest: Schema.NonEmptyString }))
+});
+/**
+ * A durable observation cannot be read or safely admitted.
+ * @since 1.0.0
+ * @category errors
+ */
+export class PlanInputError extends Schema.TaggedError()("@smthrs/engine-store/PlanInputError", {
+    code: Schema.Literals([
+        "invalid_input",
+        "corrupt_state",
+        "incompatible_state",
+        "fence_lost",
+        "transaction_open",
+        "persistence_failed"
+    ]),
+    message: Schema.String,
+    cause: Schema.optional(Schema.Unknown)
+}) {
+}
+/**
+ * Durable plan-input service.
+ * @since 1.0.0
+ * @category services
+ */
+export class PlanInputStore extends Context.Service()("@smthrs/engine-store/PlanInputStore") {
+}
+const failure = (code, message, cause) => new PlanInputError({ code, message, ...(cause === undefined ? {} : { cause }) });
+const persistError = (cause) => cause instanceof PlanInputError ?
+    cause :
+    failure("persistence_failed", "could not access durable plan inputs", cause);
+const decode = (schema, value, code) => Effect.try({
+    try: () => Schema.decodeUnknownSync(schema)(value, { onExcessProperty: "error" }),
+    catch: (cause) => failure(code, "invalid plan input observation", cause)
+});
+const validateSnapshot = (snapshot, generation, code) => {
+    if (snapshot.generation !== generation ||
+        new Set(snapshot.nodes.map((node) => node.id)).size !== snapshot.nodes.length ||
+        new Set(snapshot.pins.map((pin) => pin.path)).size !== snapshot.pins.length ||
+        snapshot.nodes.some((node) => node.reads.some((read) => new Set(read.sourcePaths).size !== read.sourcePaths.length ||
+            read.sourcePaths.some((path) => typeof read.entry === "string" ? path !== read.entry : !FileSet.matchesGlob(read.entry, path))))) {
+        return Effect.fail(failure(code, "plan input observation has inconsistent membership or generation"));
+    }
+    return Effect.void;
+};
+/**
+ * Builds the SQL-backed, owner-fenced store.
+ * @since 1.0.0
+ * @category constructors
+ */
+export const make = Effect.gen(function* () {
+    const sql = yield* SqlClient.SqlClient;
+    const writer = yield* DurableWriter;
+    const crypto = yield* Effect.context();
+    const checksum = (value) => Schema.decodeUnknownEffect(Sha256)(value).pipe(Effect.provide(crypto));
+    const fence = (address, owner) => Effect.gen(function* () {
+        const owned = yield* sql `SELECT run_id FROM flows_runs WHERE run_id = ${address.runId}
+      AND status = 'running' AND cancel_requested_at_ms IS NULL
+      AND owner_host_id = ${owner.hostId} AND owner_pid = ${owner.pid} AND owner_nonce = ${owner.nonce}`;
+        if (owned.length !== 1) {
+            return yield* Effect.fail(failure("fence_lost", "plan input owner no longer owns the run"));
+        }
+        const legacy = yield* sql `SELECT run_id FROM flows_plan_input_legacy_runs WHERE run_id = ${address.runId}`;
+        if (legacy.length > 0) {
+            return yield* Effect.fail(failure("incompatible_state", "this run executed before durable plan inputs were recorded; its original sources cannot be reconstructed"));
+        }
+    });
+    const load = (address) => Effect.gen(function* () {
+        const heads = yield* sql `SELECT plan_id AS "planId", base_digest AS "baseDigest", environment_digest AS "environmentDigest", generation
+      FROM flows_plan_input_heads WHERE run_id = ${address.runId}`;
+        const head = heads[0];
+        if (head === undefined) {
+            const orphan = yield* sql `SELECT 1 FROM flows_plan_input_generations
+        WHERE run_id = ${address.runId} AND plan_id = ${address.planId} LIMIT 1`;
+            if (address.generation !== 0 || orphan.length > 0) {
+                return yield* Effect.fail(failure("corrupt_state", "plan input history has no initial generation"));
+            }
+            return Option.none();
+        }
+        yield* decode(Schema.Struct({
+            planId: Schema.NonEmptyString,
+            baseDigest: Schema.NonEmptyString,
+            environmentDigest: Schema.NullOr(Schema.NonEmptyString),
+            generation: Natural
+        }), head, "corrupt_state");
+        if (head.planId !== address.planId || head.baseDigest !== address.baseDigest) {
+            return yield* Effect.fail(failure("incompatible_state", "this run already observed a different approved plan"));
+        }
+        if (head.environmentDigest === null || head.environmentDigest !== address.environmentDigest) {
+            return yield* Effect.fail(failure("incompatible_state", "this run has a different or unrecorded execution environment; recover with its original runtime or explicitly reconcile before starting a new run"));
+        }
+        const counts = yield* sql `SELECT COUNT(*) AS count,
+      MIN(generation) AS first, MAX(generation) AS last FROM flows_plan_input_generations
+      WHERE run_id = ${address.runId} AND plan_id = ${address.planId}`;
+        if (counts[0].count !== head.generation + 1 || counts[0].first !== 0 || counts[0].last !== head.generation ||
+            address.generation > head.generation + 1) {
+            return yield* Effect.fail(failure("corrupt_state", "plan input history has a missing generation"));
+        }
+        if (address.generation > head.generation)
+            return Option.none();
+        const rows = yield* sql `SELECT snapshot_json AS "snapshotJson", checksum
+      FROM flows_plan_input_generations WHERE run_id = ${address.runId} AND plan_id = ${address.planId}
+      AND generation = ${address.generation}`;
+        const row = rows[0];
+        if (row.snapshotJson.length > maximumSnapshotCharacters || (yield* checksum(row.snapshotJson)) !== row.checksum) {
+            return yield* Effect.fail(failure("corrupt_state", "plan input snapshot failed its size or integrity check"));
+        }
+        const snapshot = yield* decode(Schema.fromJsonString(Snapshot), row.snapshotJson, "corrupt_state");
+        yield* validateSnapshot(snapshot, address.generation, "corrupt_state");
+        return Option.some(snapshot);
+    });
+    const get = Effect.fn("PlanInputStore.get")((input, ownerInput) => Effect.gen(function* () {
+        const address = yield* decode(Address, input, "invalid_input");
+        const owner = yield* decode(OwnerId, ownerInput, "invalid_input");
+        if (Option.isSome(yield* Effect.serviceOption(sql.transactionService))) {
+            return yield* Effect.fail(failure("transaction_open", "plan execution requires committed source observations"));
+        }
+        return yield* writer.write(Effect.gen(function* () {
+            yield* fence(address, owner);
+            return yield* load(address);
+        }));
+    }).pipe(Effect.mapError(persistError)));
+    const record = Effect.fn("PlanInputStore.record")((input, value, ownerInput) => Effect.gen(function* () {
+        const address = yield* decode(Address, input, "invalid_input");
+        const owner = yield* decode(OwnerId, ownerInput, "invalid_input");
+        const snapshot = yield* decode(Snapshot, value, "invalid_input");
+        yield* validateSnapshot(snapshot, address.generation, "invalid_input");
+        const encoded = JSON.stringify(snapshot);
+        if (encoded.length > maximumSnapshotCharacters) {
+            return yield* Effect.fail(failure("invalid_input", "plan input snapshot exceeds the durable size limit"));
+        }
+        const hash = yield* checksum(encoded);
+        return yield* writer.write(Effect.gen(function* () {
+            yield* fence(address, owner);
+            const existing = yield* load(address);
+            if (Option.isSome(existing))
+                return existing.value;
+            if (address.generation === 0) {
+                yield* sql `INSERT INTO flows_plan_input_heads (run_id, plan_id, base_digest, environment_digest, merge_state_version, generation)
+          VALUES (${address.runId}, ${address.planId}, ${address.baseDigest}, ${address.environmentDigest}, 1, 0)`;
+            }
+            else {
+                yield* sql `UPDATE flows_plan_input_heads SET generation = ${address.generation}
+          WHERE run_id = ${address.runId} AND plan_id = ${address.planId}`;
+            }
+            yield* sql `INSERT INTO flows_plan_input_generations (run_id, plan_id, generation, snapshot_json, checksum)
+        VALUES (${address.runId}, ${address.planId}, ${address.generation}, ${encoded}, ${hash})`;
+            return snapshot;
+        }));
+    }).pipe(Effect.mapError(persistError)));
+    return { get, record };
+});
+/**
+ * Provides the SQL-backed input store over the same database as the run/attempt stores.
+ * @since 1.0.0
+ * @category layers
+ */
+export const layer = Layer
+    .effect(PlanInputStore)(make);
+//# sourceMappingURL=PlanInputStore.js.map

package/dist/esm/PlanInputStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PlanInputStore.js","sourceRoot":"","sources":["../../src/PlanInputStore.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/D,OAAO,KAAK,SAAS,MAAM,+BAA+B,CAAA;AAE1D,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAA;AAElE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,MAAM,CAAC,cAAc;IAC5B,MAAM,EAAE,MAAM,CAAC,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC,cAAc;IACjC,iBAAiB,EAAE,MAAM,CAAC,cAAc;IACxC,UAAU,EAAE,OAAO;CACpB,CAAC,CAAA;AAQF;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAEzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1B,UAAU,EAAE,OAAO;IACnB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QAChC,EAAE,EAAE,MAAM,CAAC,cAAc;QACzB,GAAG,EAAE,MAAM,CAAC,cAAc;QAC1B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;YAChC,KAAK,EAAE,OAAO,CAAC,SAAS;YACxB,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;SAC3C,CAAC,CAAC;KACJ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACpD,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;CAC5F,CAAC,CAAA;AAQF;;;;GAIG;AACH,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,WAAW,EAAkB,CAAC,qCAAqC,EAAE;IAC9G,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC;QACpB,eAAe;QACf,eAAe;QACf,oBAAoB;QACpB,YAAY;QACZ,kBAAkB;QAClB,oBAAoB;KACrB,CAAC;IACF,OAAO,EAAE,MAAM,CAAC,MAAM;IACtB,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;CACvC,CAAC;CAAG;AAcL;;;;GAIG;AACH,MAAM,OAAO,cAAe,SAAQ,OAAO,CAAC,OAAO,EAA2B,CAAC,qCAAqC,CAAC;CAAG;AAExH,MAAM,OAAO,GAAG,CAAC,IAA4B,EAAE,OAAe,EAAE,KAAe,EAAE,EAAE,CACjF,IAAI,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;AAClF,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,EAAE,CACtC,KAAK,YAAY,cAAc,CAAC,CAAC;IAC/B,KAAK,CAAC,CAAC;IACP,OAAO,CAAC,oBAAoB,EAAE,sCAAsC,EAAE,KAAK,CAAC,CAAA;AAEhF,MAAM,MAAM,GAAG,CACb,MAAS,EACT,KAAc,EACd,IAAuC,EACvC,EAAE,CACF,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC;IACjF,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,gCAAgC,EAAE,KAAK,CAAC;CACzE,CAAC,CAAA;AAEJ,MAAM,gBAAgB,GAAG,CAAC,QAAkB,EAAE,UAAkB,EAAE,IAAuC,EAAE,EAAE;IAC3G,IACE,QAAQ,CAAC,UAAU,KAAK,UAAU;QAClC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,MAAM;QAC7E,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM;QAC3E,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACvB,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,MAAM;YAC1D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC7B,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAC9F,CACF,CACF,EACD,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,kEAAkE,CAAC,CAAC,CAAA;IACvG,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAA;AACpB,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAuF,MAAM,CAAC,GAAG,CAChH,QAAQ,CAAC;IACP,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,SAAS,CAAA;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAA;IACnC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAiB,CAAA;IACrD,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;IAE1G,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAE,KAAc,EAAE,EAAE,CACjD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAA,gDAAgD,OAAO,CAAC,KAAK;;4BAEjE,KAAK,CAAC,MAAM,oBAAoB,KAAK,CAAC,GAAG,sBAAsB,KAAK,CAAC,KAAK,EAAE,CAAA;QAChG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,yCAAyC,CAAC,CAAC,CAAA;QAC7F,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAA,kEAAkE,OAAO,CAAC,KAAK,EAAE,CAAA;QAC1G,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,OAAO,CACL,oBAAoB,EACpB,0GAA0G,CAC3G,CACF,CAAA;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEJ,MAAM,IAAI,GAAG,CAAC,OAAgB,EAAE,EAAE,CAChC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAEvB;mDAC0C,OAAO,CAAC,KAAK,EAAE,CAAA;QAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAA;yBACV,OAAO,CAAC,KAAK,kBAAkB,OAAO,CAAC,MAAM,UAAU,CAAA;YACtE,IAAI,OAAO,CAAC,UAAU,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,8CAA8C,CAAC,CAAC,CAAA;YACrG,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,EAAY,CAAA;QAChC,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CACX,MAAM,CAAC,MAAM,CAAC;YACZ,MAAM,EAAE,MAAM,CAAC,cAAc;YAC7B,UAAU,EAAE,MAAM,CAAC,cAAc;YACjC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;YACvD,UAAU,EAAE,OAAO;SACpB,CAAC,EACF,IAAI,EACJ,eAAe,CAChB,CAAA;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;YAC7E,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,OAAO,CAAC,oBAAoB,EAAE,qDAAqD,CAAC,CACrF,CAAA;QACH,CAAC;QACD,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI,IAAI,IAAI,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC5F,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAC/B,oBAAoB,EACpB,mJAAmJ,CACpJ,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAgD;;uBAE1D,OAAO,CAAC,KAAK,kBAAkB,OAAO,CAAC,MAAM,EAAE,CAAA;QAC9D,IACE,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,KAAK,IAAI,CAAC,UAAU,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,IAAI,CAAC,UAAU;YACzG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,EACxC,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,6CAA6C,CAAC,CAAC,CAAA;QACpG,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU;YAAE,OAAO,MAAM,CAAC,IAAI,EAAY,CAAA;QACxE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAEtB;yDACgD,OAAO,CAAC,KAAK,kBAAkB,OAAO,CAAC,MAAM;yBAC7E,OAAO,CAAC,UAAU,EAAE,CAAA;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAA;QACpB,IACE,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,yBAAyB,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,GAAG,CAAC,QAAQ,EAC3G,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,wDAAwD,CAAC,CAAC,CAAA;QAC/G,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;QAClG,KAAK,CAAC,CAAC,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;QACtE,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEJ,MAAM,GAAG,GAAmB,MAAM,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAChF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,CAAA;QAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC,CAAA;QACjE,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,OAAO,CAAC,kBAAkB,EAAE,uDAAuD,CAAC,CACrF,CAAA;QACH,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7C,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YAC5B,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC7B,CAAC,CAAC,CAAC,CAAA;IACL,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACvC,CAAA;IAED,MAAM,MAAM,GAAsB,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAChG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,CAAA;QAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC,CAAA;QACjE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,eAAe,CAAC,CAAA;QAChE,KAAK,CAAC,CAAC,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACxC,IAAI,OAAO,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,oDAAoD,CAAC,CAAC,CAAA;QAC3G,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QACrC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7C,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACrC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,OAAO,QAAQ,CAAC,KAAK,CAAA;YAClD,IAAI,OAAO,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;gBAC7B,KAAK,CAAC,CAAC,GAAG,CAAA;oBACF,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,iBAAiB,SAAS,CAAA;YACxG,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,CAAC,GAAG,CAAA,kDAAkD,OAAO,CAAC,UAAU;2BAC/D,OAAO,CAAC,KAAK,kBAAkB,OAAO,CAAC,MAAM,EAAE,CAAA;YAChE,CAAC;YACD,KAAK,CAAC,CAAC,GAAG,CAAA;kBACF,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,UAAU,KAAK,OAAO,KAAK,IAAI,GAAG,CAAA;YACvF,OAAO,QAAQ,CAAA;QACjB,CAAC,CAAC,CAAC,CAAA;IACL,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACvC,CAAA;IAED,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;AACxB,CAAC,CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,KAAK,GAA4F,KAAK;KAChH,MAAM,CACL,cAAc,CACf,CAAC,IAAI,CAAC,CAAA","sourcesContent":["/**\n * Authoritative source observations for one durable plan execution. These are\n * replay state, not approval data, journal projections, or evictable cache rows.\n * @since 1.0.0\n */\n\nimport { Sha256 } from \"@smthrs/crypto\"\nimport { DurableWriter } from \"@smthrs/database/DurableWriter\"\nimport { FileSet, Plan } from \"@smthrs/plan\"\nimport { OwnerId } from \"@smthrs/run-store/Ownership\"\nimport { Context, Effect, Layer, Option, Schema } from \"effect\"\nimport type * as Crypto from \"effect/Crypto\"\nimport * as SqlClient from \"effect/unstable/sql/SqlClient\"\n\nconst Natural = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0))\n\n/**\n * Address of an append-only observation generation. `environmentDigest` comes\n * from `StepKey.environmentIdentity` and binds every generation of the run.\n * @since 1.0.0\n * @category schemas\n */\nexport const Address = Schema.Struct({\n  runId: Schema.NonEmptyString,\n  planId: Schema.NonEmptyString,\n  baseDigest: Schema.NonEmptyString,\n  environmentDigest: Schema.NonEmptyString,\n  generation: Natural\n})\n/**\n * Address of an append-only observation generation.\n * @since 1.0.0\n * @category models\n */\nexport type Address = typeof Address.Type\n\n/**\n * Maximum encoded snapshot size, in JavaScript string code units.\n * @since 1.0.0\n * @category constants\n */\nexport const maximumSnapshotCharacters = 16 * 1024 * 1024\n\n/**\n * Frozen membership and newly pinned source digests for one generation.\n * @since 1.0.0\n * @category schemas\n */\nexport const Snapshot = Schema.Struct({\n  version: Schema.Literal(1),\n  generation: Natural,\n  nodes: Schema.Array(Schema.Struct({\n    id: Schema.NonEmptyString,\n    key: Schema.NonEmptyString,\n    reads: Schema.Array(Schema.Struct({\n      entry: FileSet.ReadEntry,\n      sourcePaths: Schema.Array(FileSet.Pattern)\n    }))\n  })).check(Schema.isMaxLength(Plan.maximumPlanNodes)),\n  pins: Schema.Array(Schema.Struct({ path: FileSet.Pattern, digest: Schema.NonEmptyString }))\n})\n/**\n * Frozen membership and newly pinned source digests for one generation.\n * @since 1.0.0\n * @category models\n */\nexport type Snapshot = typeof Snapshot.Type\n\n/**\n * A durable observation cannot be read or safely admitted.\n * @since 1.0.0\n * @category errors\n */\nexport class PlanInputError extends Schema.TaggedError<PlanInputError>()(\"@smthrs/engine-store/PlanInputError\", {\n  code: Schema.Literals([\n    \"invalid_input\",\n    \"corrupt_state\",\n    \"incompatible_state\",\n    \"fence_lost\",\n    \"transaction_open\",\n    \"persistence_failed\"\n  ]),\n  message: Schema.String,\n  cause: Schema.optional(Schema.Unknown)\n}) {}\n\n/**\n * `get` is a committed-state admission gate and refuses an enclosing SQL\n * transaction. `record` is first-writer-wins and may join a write transaction;\n * callers must wait for its outer commit before executing affected actions.\n * @since 1.0.0\n * @category models\n */\nexport interface Service {\n  readonly get: (address: Address, owner: OwnerId) => Effect.Effect<Option.Option<Snapshot>, PlanInputError>\n  readonly record: (address: Address, snapshot: Snapshot, owner: OwnerId) => Effect.Effect<Snapshot, PlanInputError>\n}\n\n/**\n * Durable plan-input service.\n * @since 1.0.0\n * @category services\n */\nexport class PlanInputStore extends Context.Service<PlanInputStore, Service>()(\"@smthrs/engine-store/PlanInputStore\") {}\n\nconst failure = (code: PlanInputError[\"code\"], message: string, cause?: unknown) =>\n  new PlanInputError({ code, message, ...(cause === undefined ? {} : { cause }) })\nconst persistError = (cause: unknown) =>\n  cause instanceof PlanInputError ?\n    cause :\n    failure(\"persistence_failed\", \"could not access durable plan inputs\", cause)\n\nconst decode = <S extends Schema.Top & { readonly DecodingServices: never }>(\n  schema: S,\n  value: unknown,\n  code: \"invalid_input\" | \"corrupt_state\"\n) =>\n  Effect.try({\n    try: () => Schema.decodeUnknownSync(schema)(value, { onExcessProperty: \"error\" }),\n    catch: (cause) => failure(code, \"invalid plan input observation\", cause)\n  })\n\nconst validateSnapshot = (snapshot: Snapshot, generation: number, code: \"invalid_input\" | \"corrupt_state\") => {\n  if (\n    snapshot.generation !== generation ||\n    new Set(snapshot.nodes.map((node) => node.id)).size !== snapshot.nodes.length ||\n    new Set(snapshot.pins.map((pin) => pin.path)).size !== snapshot.pins.length ||\n    snapshot.nodes.some((node) =>\n      node.reads.some((read) =>\n        new Set(read.sourcePaths).size !== read.sourcePaths.length ||\n        read.sourcePaths.some((path) =>\n          typeof read.entry === \"string\" ? path !== read.entry : !FileSet.matchesGlob(read.entry, path)\n        )\n      )\n    )\n  ) {\n    return Effect.fail(failure(code, \"plan input observation has inconsistent membership or generation\"))\n  }\n  return Effect.void\n}\n\n/**\n * Builds the SQL-backed, owner-fenced store.\n * @since 1.0.0\n * @category constructors\n */\nexport const make: Effect.Effect<Service, never, SqlClient.SqlClient | DurableWriter | Crypto.Crypto> = Effect.gen(\n  function*() {\n    const sql = yield* SqlClient.SqlClient\n    const writer = yield* DurableWriter\n    const crypto = yield* Effect.context<Crypto.Crypto>()\n    const checksum = (value: string) => Schema.decodeUnknownEffect(Sha256)(value).pipe(Effect.provide(crypto))\n\n    const fence = (address: Address, owner: OwnerId) =>\n      Effect.gen(function*() {\n        const owned = yield* sql`SELECT run_id FROM flows_runs WHERE run_id = ${address.runId}\n      AND status = 'running' AND cancel_requested_at_ms IS NULL\n      AND owner_host_id = ${owner.hostId} AND owner_pid = ${owner.pid} AND owner_nonce = ${owner.nonce}`\n        if (owned.length !== 1) {\n          return yield* Effect.fail(failure(\"fence_lost\", \"plan input owner no longer owns the run\"))\n        }\n        const legacy = yield* sql`SELECT run_id FROM flows_plan_input_legacy_runs WHERE run_id = ${address.runId}`\n        if (legacy.length > 0) {\n          return yield* Effect.fail(\n            failure(\n              \"incompatible_state\",\n              \"this run executed before durable plan inputs were recorded; its original sources cannot be reconstructed\"\n            )\n          )\n        }\n      })\n\n    const load = (address: Address) =>\n      Effect.gen(function*() {\n        const heads = yield* sql<\n          { planId: string; baseDigest: string; environmentDigest: string | null; generation: number }\n        >`SELECT plan_id AS \"planId\", base_digest AS \"baseDigest\", environment_digest AS \"environmentDigest\", generation\n      FROM flows_plan_input_heads WHERE run_id = ${address.runId}`\n        const head = heads[0]\n        if (head === undefined) {\n          const orphan = yield* sql`SELECT 1 FROM flows_plan_input_generations\n        WHERE run_id = ${address.runId} AND plan_id = ${address.planId} LIMIT 1`\n          if (address.generation !== 0 || orphan.length > 0) {\n            return yield* Effect.fail(failure(\"corrupt_state\", \"plan input history has no initial generation\"))\n          }\n          return Option.none<Snapshot>()\n        }\n        yield* decode(\n          Schema.Struct({\n            planId: Schema.NonEmptyString,\n            baseDigest: Schema.NonEmptyString,\n            environmentDigest: Schema.NullOr(Schema.NonEmptyString),\n            generation: Natural\n          }),\n          head,\n          \"corrupt_state\"\n        )\n        if (head.planId !== address.planId || head.baseDigest !== address.baseDigest) {\n          return yield* Effect.fail(\n            failure(\"incompatible_state\", \"this run already observed a different approved plan\")\n          )\n        }\n        if (head.environmentDigest === null || head.environmentDigest !== address.environmentDigest) {\n          return yield* Effect.fail(failure(\n            \"incompatible_state\",\n            \"this run has a different or unrecorded execution environment; recover with its original runtime or explicitly reconcile before starting a new run\"\n          ))\n        }\n        const counts = yield* sql<{ count: number; first: number; last: number }>`SELECT COUNT(*) AS count,\n      MIN(generation) AS first, MAX(generation) AS last FROM flows_plan_input_generations\n      WHERE run_id = ${address.runId} AND plan_id = ${address.planId}`\n        if (\n          counts[0]!.count !== head.generation + 1 || counts[0]!.first !== 0 || counts[0]!.last !== head.generation ||\n          address.generation > head.generation + 1\n        ) {\n          return yield* Effect.fail(failure(\"corrupt_state\", \"plan input history has a missing generation\"))\n        }\n        if (address.generation > head.generation) return Option.none<Snapshot>()\n        const rows = yield* sql<\n          { snapshotJson: string; checksum: string }\n        >`SELECT snapshot_json AS \"snapshotJson\", checksum\n      FROM flows_plan_input_generations WHERE run_id = ${address.runId} AND plan_id = ${address.planId}\n      AND generation = ${address.generation}`\n        const row = rows[0]!\n        if (\n          row.snapshotJson.length > maximumSnapshotCharacters || (yield* checksum(row.snapshotJson)) !== row.checksum\n        ) {\n          return yield* Effect.fail(failure(\"corrupt_state\", \"plan input snapshot failed its size or integrity check\"))\n        }\n        const snapshot = yield* decode(Schema.fromJsonString(Snapshot), row.snapshotJson, \"corrupt_state\")\n        yield* validateSnapshot(snapshot, address.generation, \"corrupt_state\")\n        return Option.some(snapshot)\n      })\n\n    const get: Service[\"get\"] = Effect.fn(\"PlanInputStore.get\")((input, ownerInput) =>\n      Effect.gen(function*() {\n        const address = yield* decode(Address, input, \"invalid_input\")\n        const owner = yield* decode(OwnerId, ownerInput, \"invalid_input\")\n        if (Option.isSome(yield* Effect.serviceOption(sql.transactionService))) {\n          return yield* Effect.fail(\n            failure(\"transaction_open\", \"plan execution requires committed source observations\")\n          )\n        }\n        return yield* writer.write(Effect.gen(function*() {\n          yield* fence(address, owner)\n          return yield* load(address)\n        }))\n      }).pipe(Effect.mapError(persistError))\n    )\n\n    const record: Service[\"record\"] = Effect.fn(\"PlanInputStore.record\")((input, value, ownerInput) =>\n      Effect.gen(function*() {\n        const address = yield* decode(Address, input, \"invalid_input\")\n        const owner = yield* decode(OwnerId, ownerInput, \"invalid_input\")\n        const snapshot = yield* decode(Snapshot, value, \"invalid_input\")\n        yield* validateSnapshot(snapshot, address.generation, \"invalid_input\")\n        const encoded = JSON.stringify(snapshot)\n        if (encoded.length > maximumSnapshotCharacters) {\n          return yield* Effect.fail(failure(\"invalid_input\", \"plan input snapshot exceeds the durable size limit\"))\n        }\n        const hash = yield* checksum(encoded)\n        return yield* writer.write(Effect.gen(function*() {\n          yield* fence(address, owner)\n          const existing = yield* load(address)\n          if (Option.isSome(existing)) return existing.value\n          if (address.generation === 0) {\n            yield* sql`INSERT INTO flows_plan_input_heads (run_id, plan_id, base_digest, environment_digest, merge_state_version, generation)\n          VALUES (${address.runId}, ${address.planId}, ${address.baseDigest}, ${address.environmentDigest}, 1, 0)`\n          } else {\n            yield* sql`UPDATE flows_plan_input_heads SET generation = ${address.generation}\n          WHERE run_id = ${address.runId} AND plan_id = ${address.planId}`\n          }\n          yield* sql`INSERT INTO flows_plan_input_generations (run_id, plan_id, generation, snapshot_json, checksum)\n        VALUES (${address.runId}, ${address.planId}, ${address.generation}, ${encoded}, ${hash})`\n          return snapshot\n        }))\n      }).pipe(Effect.mapError(persistError))\n    )\n\n    return { get, record }\n  }\n)\n\n/**\n * Provides the SQL-backed input store over the same database as the run/attempt stores.\n * @since 1.0.0\n * @category layers\n */\nexport const layer: Layer.Layer<PlanInputStore, never, SqlClient.SqlClient | DurableWriter | Crypto.Crypto> = Layer\n  .effect(\n    PlanInputStore\n  )(make)\n"]}

package/dist/esm/PlanMergeStore.d.ts

@@ -0,0 +1,113 @@
+/**
+ * Owner-fenced scheduler decisions, distinct from action failure evidence and
+ * redacted journal projections. Intent survives before a merge is appended.
+ * @since 1.0.0
+ */
+import { DurableWriter } from "@smthrs/database/DurableWriter";
+import { OwnerId } from "@smthrs/run-store/Ownership";
+import { Context, Effect, Layer, Schema } from "effect";
+import type * as Crypto from "effect/Crypto";
+import * as SqlClient from "effect/unstable/sql/SqlClient";
+/** Execution binding shared by every decision of one plan run.
+ * @since 1.0.0
+ * @category schemas
+ */
+export declare const Identity: Schema.Struct<{
+    readonly runId: Schema.NonEmptyString;
+    readonly planId: Schema.NonEmptyString;
+    readonly baseDigest: Schema.NonEmptyString;
+    readonly environmentDigest: Schema.NonEmptyString;
+}>;
+/** Execution binding.
+ * @since 1.0.0
+ * @category models
+ */
+export type Identity = typeof Identity.Type;
+/** A stopped attempt and the exact cohort eligible to supply merge winners.
+ * @since 1.0.0
+ * @category schemas
+ */
+export declare const Intent: Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly nodeId: Schema.NonEmptyString;
+    readonly nodeKey: Schema.NonEmptyString;
+    readonly dispatchKey: Schema.NonEmptyString;
+    readonly attempts: Schema.Int;
+    readonly rebases: Schema.Int;
+    readonly peers: Schema.$Array<Schema.NonEmptyString>;
+}>;
+/** Durable stopped-attempt decision.
+ * @since 1.0.0
+ * @category models
+ */
+export type Intent = typeof Intent.Type;
+/** The plan extension committed for an intent.
+ * @since 1.0.0
+ * @category schemas
+ */
+export declare const Completion: Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly generation: Schema.Int;
+    readonly parentDigest: Schema.NonEmptyString;
+    readonly planDigest: Schema.NonEmptyString;
+    readonly mergeId: Schema.NonEmptyString;
+    readonly mergeKey: Schema.NonEmptyString;
+    readonly winners: Schema.$Array<Schema.NonEmptyString>;
+}>;
+/** Committed merge extension.
+ * @since 1.0.0
+ * @category models
+ */
+export type Completion = typeof Completion.Type;
+/** Intent with its optional committed extension.
+ * @since 1.0.0
+ * @category models
+ */
+export interface Decision {
+    readonly intent: Intent;
+    readonly completion?: Completion;
+}
+declare const PlanMergeError_base: Schema.Class<PlanMergeError, Schema.TaggedStruct<"@smthrs/engine-store/PlanMergeError", {
+    readonly code: Schema.Literals<readonly ["invalid_input", "corrupt_state", "incompatible_state", "fence_lost", "transaction_open", "transaction_required", "persistence_failed"]>;
+    readonly message: Schema.String;
+    readonly cause: Schema.optional<Schema.Unknown>;
+}>, import("effect/Cause").YieldableError>;
+/** Typed admission/storage refusal.
+ * @since 1.0.0
+ * @category errors
+ */
+export declare class PlanMergeError extends PlanMergeError_base {
+}
+/** Store operations; writes may join the owning transaction, reads require committed state.
+ * @since 1.0.0
+ * @category models
+ */
+export interface Service {
+    readonly list: (identity: Identity, owner: OwnerId) => Effect.Effect<ReadonlyArray<Decision>, PlanMergeError>;
+    readonly intend: (identity: Identity, intent: Intent, owner: OwnerId) => Effect.Effect<Intent, PlanMergeError>;
+    readonly complete: (identity: Identity, nodeId: string, completion: Completion, owner: OwnerId) => Effect.Effect<Completion, PlanMergeError>;
+}
+declare const PlanMergeStore_base: Context.ServiceClass<PlanMergeStore, "@smthrs/engine-store/PlanMergeStore", Service>;
+/** Durable merge decision service.
+ * @since 1.0.0
+ * @category services
+ */
+export declare class PlanMergeStore extends PlanMergeStore_base {
+}
+/** Encoded decision limit, in JavaScript code units.
+ * @since 1.0.0
+ * @category constants
+ */
+export declare const maximumDecisionCharacters: number;
+/** SQL constructor; all collaborating stores must use the same database/writer.
+ * @since 1.0.0
+ * @category constructors
+ */
+export declare const make: Effect.Effect<Service, never, SqlClient.SqlClient | DurableWriter | Crypto.Crypto>;
+/** SQL-backed merge decisions; migrations must run first.
+ * @since 1.0.0
+ * @category layers
+ */
+export declare const layer: Layer.Layer<PlanMergeStore, never, SqlClient.SqlClient | DurableWriter | Crypto.Crypto>;
+export {};
+//# sourceMappingURL=PlanMergeStore.d.ts.map

package/dist/esm/PlanMergeStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PlanMergeStore.d.ts","sourceRoot":"","sources":["../../src/PlanMergeStore.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAE9D,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAU,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAA;AAC5C,OAAO,KAAK,SAAS,MAAM,+BAA+B,CAAA;AAM1D;;;GAGG;AACH,eAAO,MAAM,QAAQ;;;;;EAKnB,CAAA;AACF;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAA;AAC3C;;;GAGG;AACH,eAAO,MAAM,MAAM;;;;;;;;EAQjB,CAAA;AACF;;;GAGG;AACH,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,IAAI,CAAA;AACvC;;;GAGG;AACH,eAAO,MAAM,UAAU;;;;;;;;EAQrB,CAAA;AACF;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAA;AAC/C;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAA;CACjC;;;;;;AACD;;;GAGG;AACH,qBAAa,cAAe,SAAQ,mBAYlC;CAAG;AACL;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,CAAA;IAC7G,QAAQ,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IAC9G,QAAQ,CAAC,QAAQ,EAAE,CACjB,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,OAAO,KACX,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;CAC/C;;AACD;;;GAGG;AACH,qBAAa,cAAe,SAAQ,mBAAiF;CAAG;AACxH;;;GAGG;AACH,eAAO,MAAM,yBAAyB,QAAmB,CAAA;AAiBzD;;;GAGG;AACH,eAAO,MAAM,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,SAAS,GAAG,aAAa,GAAG,MAAM,CAAC,MAAM,CAyLnG,CAAA;AACD;;;GAGG;AACH,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,EAAE,SAAS,CAAC,SAAS,GAAG,aAAa,GAAG,MAAM,CAAC,MAAM,CAC3E,CAAA"}

package/dist/esm/PlanMergeStore.js

@@ -0,0 +1,244 @@
+/**
+ * Owner-fenced scheduler decisions, distinct from action failure evidence and
+ * redacted journal projections. Intent survives before a merge is appended.
+ * @since 1.0.0
+ */
+import { Sha256 } from "@smthrs/crypto";
+import { DurableWriter } from "@smthrs/database/DurableWriter";
+import { Plan } from "@smthrs/plan";
+import { OwnerId } from "@smthrs/run-store/Ownership";
+import { Context, Effect, Layer, Option, Schema } from "effect";
+import * as SqlClient from "effect/unstable/sql/SqlClient";
+const Natural = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));
+const Positive = Schema.Int.check(Schema.isGreaterThan(0));
+const Names = Schema.Array(Schema.NonEmptyString).check(Schema.isMaxLength(Plan.maximumPlanNodes));
+/** Execution binding shared by every decision of one plan run.
+ * @since 1.0.0
+ * @category schemas
+ */
+export const Identity = Schema.Struct({
+    runId: Schema.NonEmptyString,
+    planId: Schema.NonEmptyString,
+    baseDigest: Schema.NonEmptyString,
+    environmentDigest: Schema.NonEmptyString
+});
+/** A stopped attempt and the exact cohort eligible to supply merge winners.
+ * @since 1.0.0
+ * @category schemas
+ */
+export const Intent = Schema.Struct({
+    version: Schema.Literal(1),
+    nodeId: Schema.NonEmptyString,
+    nodeKey: Schema.NonEmptyString,
+    dispatchKey: Schema.NonEmptyString,
+    attempts: Positive,
+    rebases: Natural,
+    peers: Names
+});
+/** The plan extension committed for an intent.
+ * @since 1.0.0
+ * @category schemas
+ */
+export const Completion = Schema.Struct({
+    version: Schema.Literal(1),
+    generation: Positive,
+    parentDigest: Schema.NonEmptyString,
+    planDigest: Schema.NonEmptyString,
+    mergeId: Schema.NonEmptyString,
+    mergeKey: Schema.NonEmptyString,
+    winners: Names
+});
+/** Typed admission/storage refusal.
+ * @since 1.0.0
+ * @category errors
+ */
+export class PlanMergeError extends Schema.TaggedError()("@smthrs/engine-store/PlanMergeError", {
+    code: Schema.Literals([
+        "invalid_input",
+        "corrupt_state",
+        "incompatible_state",
+        "fence_lost",
+        "transaction_open",
+        "transaction_required",
+        "persistence_failed"
+    ]),
+    message: Schema.String,
+    cause: Schema.optional(Schema.Unknown)
+}) {
+}
+/** Durable merge decision service.
+ * @since 1.0.0
+ * @category services
+ */
+export class PlanMergeStore extends Context.Service()("@smthrs/engine-store/PlanMergeStore") {
+}
+/** Encoded decision limit, in JavaScript code units.
+ * @since 1.0.0
+ * @category constants
+ */
+export const maximumDecisionCharacters = 16 * 1024 * 1024;
+const error = (code, message, cause) => new PlanMergeError({ code, message, ...(cause === undefined ? {} : { cause }) });
+const storageError = (cause) => cause instanceof PlanMergeError ? cause : error("persistence_failed", "could not access plan merge decisions", cause);
+const decode = (schema, value, code) => Effect.try({
+    try: () => Schema.decodeUnknownSync(schema)(value, { onExcessProperty: "error" }),
+    catch: (cause) => error(code, "invalid plan merge decision", cause)
+});
+const unique = (names, code) => new Set(names).size === names.length ? Effect.void : Effect.fail(error(code, "duplicate merge peer identity"));
+/** SQL constructor; all collaborating stores must use the same database/writer.
+ * @since 1.0.0
+ * @category constructors
+ */
+export const make = Effect.gen(function* () {
+    const sql = yield* SqlClient.SqlClient;
+    const writer = yield* DurableWriter;
+    const crypto = yield* Effect.context();
+    const hash = (value) => Schema.decodeUnknownEffect(Sha256)(value).pipe(Effect.provide(crypto));
+    const fence = (identity, owner, requireHead) => Effect.gen(function* () {
+        const owned = yield* sql `SELECT run_id FROM flows_runs WHERE run_id = ${identity.runId}
+      AND status = 'running' AND cancel_requested_at_ms IS NULL
+      AND owner_host_id = ${owner.hostId} AND owner_pid = ${owner.pid} AND owner_nonce = ${owner.nonce}`;
+        if (owned.length !== 1) {
+            return yield* Effect.fail(error("fence_lost", "merge decision owner no longer owns the run"));
+        }
+        const heads = yield* sql `SELECT
+      plan_id AS "planId", base_digest AS "baseDigest", environment_digest AS "environmentDigest", merge_state_version AS version
+      FROM flows_plan_input_heads WHERE run_id = ${identity.runId}`;
+        const head = heads[0];
+        if (head === undefined) {
+            const orphan = yield* sql `SELECT 1 FROM flows_plan_merge_intents WHERE run_id = ${identity.runId} LIMIT 1`;
+            if (requireHead || orphan.length > 0) {
+                return yield* Effect.fail(error("corrupt_state", "merge intent has no admitted input generation"));
+            }
+            return;
+        }
+        if (head.version !== 1 || head.planId !== identity.planId || head.baseDigest !== identity.baseDigest ||
+            head.environmentDigest !== identity.environmentDigest) {
+            return yield* Effect.fail(error("incompatible_state", "this run has different or unrecorded merge execution state; recover with its original runtime or reconcile before starting a new run"));
+        }
+    });
+    const encoded = (value) => Effect.gen(function* () {
+        const json = JSON.stringify(value);
+        if (json.length > maximumDecisionCharacters) {
+            return yield* Effect.fail(error("invalid_input", "merge decision exceeds its durable size limit"));
+        }
+        return { json, checksum: yield* hash(json) };
+    });
+    const stored = (schema, row) => Effect.gen(function* () {
+        if (row.json.length > maximumDecisionCharacters || (yield* hash(row.json)) !== row.checksum) {
+            return yield* Effect.fail(error("corrupt_state", "merge decision failed its size or integrity check"));
+        }
+        return yield* decode(Schema.fromJsonString(schema), row.json, "corrupt_state");
+    });
+    const load = (identity, nodeId) => Effect.gen(function* () {
+        const rows = yield* sql `SELECT i.stopped_node_id AS "nodeId", i.intent_json AS json, i.checksum,
+        c.generation, c.merge_node_id AS "mergeId", c.completion_json AS "completionJson",
+        c.checksum AS "completionChecksum"
+      FROM flows_plan_merge_intents i LEFT JOIN flows_plan_merge_completions c
+        ON c.run_id = i.run_id AND c.stopped_node_id = i.stopped_node_id
+      WHERE i.run_id = ${identity.runId} ${nodeId === undefined ? sql `` : sql `AND i.stopped_node_id = ${nodeId}`}
+      ORDER BY i.stopped_node_id LIMIT ${Plan.maximumPlanNodes + 1}`;
+        if (rows.length > Plan.maximumPlanNodes) {
+            return yield* Effect.fail(error("corrupt_state", "too many merge decisions for one plan"));
+        }
+        return yield* Effect.forEach(rows, (row) => Effect.gen(function* () {
+            const intent = yield* stored(Intent, row);
+            yield* unique(intent.peers, "corrupt_state");
+            if (intent.nodeId !== row.nodeId || intent.peers.includes(intent.nodeId)) {
+                return yield* Effect.fail(error("corrupt_state", "merge intent identity is inconsistent"));
+            }
+            if (row.completionJson === null)
+                return { intent };
+            const completion = yield* stored(Completion, {
+                json: row.completionJson,
+                checksum: row.completionChecksum
+            });
+            yield* unique(completion.winners, "corrupt_state");
+            if (completion.generation !== row.generation || completion.mergeId !== row.mergeId ||
+                completion.winners.some((id) => !intent.peers.includes(id))) {
+                return yield* Effect.fail(error("corrupt_state", "merge completion does not match its intent"));
+            }
+            return { intent, completion };
+        }));
+    });
+    const list = (input, ownerInput) => Effect.gen(function* () {
+        const identity = yield* decode(Identity, input, "invalid_input");
+        const owner = yield* decode(OwnerId, ownerInput, "invalid_input");
+        if (Option.isSome(yield* Effect.serviceOption(sql.transactionService))) {
+            return yield* Effect.fail(error("transaction_open", "merge recovery requires committed decisions"));
+        }
+        return yield* writer.write(Effect.gen(function* () {
+            yield* fence(identity, owner, false);
+            return yield* load(identity);
+        }));
+    }).pipe(Effect.mapError(storageError));
+    const intend = (input, value, ownerInput) => Effect.gen(function* () {
+        const identity = yield* decode(Identity, input, "invalid_input");
+        const owner = yield* decode(OwnerId, ownerInput, "invalid_input");
+        const intent = yield* decode(Intent, value, "invalid_input");
+        yield* unique(intent.peers, "invalid_input");
+        if (intent.peers.includes(intent.nodeId)) {
+            return yield* Effect.fail(error("invalid_input", "a merge cannot stop its own peer"));
+        }
+        const data = yield* encoded(intent);
+        return yield* writer.write(Effect.gen(function* () {
+            yield* fence(identity, owner, true);
+            const [existing] = yield* load(identity, intent.nodeId);
+            if (existing !== undefined)
+                return existing.intent;
+            const [count] = yield* sql `SELECT count(*) AS count
+        FROM flows_plan_merge_intents WHERE run_id = ${identity.runId}`;
+            if (count.count >= Plan.maximumPlanNodes) {
+                return yield* Effect.fail(error("invalid_input", "too many merge intents for one plan"));
+            }
+            yield* sql `INSERT INTO flows_plan_merge_intents (run_id, stopped_node_id, intent_json, checksum)
+        VALUES (${identity.runId}, ${intent.nodeId}, ${data.json}, ${data.checksum})`;
+            return intent;
+        }));
+    }).pipe(Effect.mapError(storageError));
+    const complete = (input, nodeIdInput, value, ownerInput) => Effect.gen(function* () {
+        if (Option.isNone(yield* Effect.serviceOption(sql.transactionService))) {
+            return yield* Effect.fail(error("transaction_required", "merge completion must join the plan/input append transaction"));
+        }
+        const identity = yield* decode(Identity, input, "invalid_input");
+        const owner = yield* decode(OwnerId, ownerInput, "invalid_input");
+        const nodeId = yield* decode(Schema.NonEmptyString, nodeIdInput, "invalid_input");
+        const completion = yield* decode(Completion, value, "invalid_input");
+        yield* unique(completion.winners, "invalid_input");
+        const data = yield* encoded(completion);
+        return yield* writer.write(Effect.gen(function* () {
+            yield* fence(identity, owner, true);
+            const [decision] = yield* load(identity, nodeId);
+            if (decision === undefined) {
+                return yield* Effect.fail(error("corrupt_state", "merge completion has no intent"));
+            }
+            if (decision.completion !== undefined) {
+                if (JSON.stringify(decision.completion) !== JSON.stringify(completion)) {
+                    return yield* Effect.fail(error("incompatible_state", "a merge intent already committed a different extension"));
+                }
+                return decision.completion;
+            }
+            if (completion.winners.some((id) => !decision.intent.peers.includes(id))) {
+                return yield* Effect.fail(error("invalid_input", "merge winner was not an admitted peer"));
+            }
+            const appended = yield* sql `SELECT p.plan_id FROM flows_plans p JOIN flows_plan_input_generations i ON i.plan_id = p.plan_id
+        JOIN flows_plan_nodes n ON n.plan_id = p.plan_id AND n.generation = p.generation
+        WHERE p.plan_id = ${identity.planId} AND p.digest = ${completion.planDigest} AND p.generation = ${completion.generation}
+        AND i.run_id = ${identity.runId} AND i.generation = ${completion.generation}
+        AND n.node_id = ${completion.mergeId} AND n.key_digest = ${completion.mergeKey} AND n.kind = 'merge'`;
+            if (appended.length !== 1) {
+                return yield* Effect.fail(error("corrupt_state", "merge completion requires its plan and input generation in the same transaction"));
+            }
+            yield* sql `INSERT INTO flows_plan_merge_completions (run_id, stopped_node_id, generation, merge_node_id, completion_json, checksum)
+        VALUES (${identity.runId}, ${nodeId}, ${completion.generation}, ${completion.mergeId}, ${data.json}, ${data.checksum})`;
+            return completion;
+        }));
+    }).pipe(Effect.mapError(storageError));
+    return { list, intend, complete };
+});
+/** SQL-backed merge decisions; migrations must run first.
+ * @since 1.0.0
+ * @category layers
+ */
+export const layer = Layer
+    .effect(PlanMergeStore)(make);
+//# sourceMappingURL=PlanMergeStore.js.map