@yielded/agent-storage-cloudflare 0.1.0-beta.166

package/dist/do-journal-DUhjZkOf.mjs

@@ -0,0 +1,1352 @@
+import { DoAppendConflict, DoCheckpointConflict, DoFenceRejected, DoStorageCompatibilityError, DoStorageCorruptionError, DoStorageError, DoValueBoundExceeded } from "./DoStorageError.mjs";
+import { a as createRecoveryCheckpointTable, i as doMigrations, n as createNonterminalIndex, o as createMessageDeliveryTables, r as createWorkerStops } from "./migrations-DtKz_Gxr.mjs";
+import { n as ownedRows, r as ownedState } from "./owned-state-DHm2aRXx.mjs";
+import { SqlLifecycleRetainer, SqlLifecycleSource, makeSqlLifecyclePublication } from "@yielded/agent-storage-sql/sql-lifecycle-publication";
+import { createMessageDeliveryPendingIndex } from "@yielded/agent-storage-sql/sql-message-delivery-store";
+import { SqlStorageOwner } from "@yielded/agent/sql-memory-store";
+import { Cause, Clock, Effect, Option, Predicate, Result, Schema, Stream } from "effect";
+import * as SqlClient$1 from "effect/sql/SqlClient";
+import { SqliteMigrator } from "@effect/sql-sqlite-do";
+import { SqlStorageProgress } from "@yielded/agent-storage-sql/sql-storage-progress";
+import { checkV2ThreadLayout } from "@yielded/agent-storage-sql/sql-storage-v2-upgrade";
+import { canonicalRecordOutstanding, createNativeReadIndexes, indexCanonicalRecord, seedNativeReadIndexes } from "@yielded/agent-storage-sql/sql-thread-native-reads";
+import { EMPTY_TAIL_DIGEST } from "@yielded/agent/digest";
+import { ThreadId } from "@yielded/agent/identifiers";
+import { LifecyclePublicationError, LifecyclePublicationFact } from "@yielded/agent/lifecycle-publication";
+import { CanonicalRecord, CanonicalSequence, ProducerEpoch } from "@yielded/agent/records";
+import { CheckpointRejected, FenceRejected, MAX_THREAD_EXPORT_RECORDS, ThreadNotMaterialized, ThreadStoreDiagnostic } from "@yielded/agent/thread-store";
+import { SqlError } from "effect/sql/SqlError";
+//#region src/internal/storage-span.ts
+const isAppendContention = (error) => error._tag === "DoFenceRejected" || error._tag === "FenceRejected" || (error._tag === "DoAppendConflict" || error._tag === "AppendConflict") && error.reason === "tail";
+/** Expected refusals remain typed at the port, but are outcomes of the storage operation. */
+const storageResult = (effect, expected) => effect.pipe(Effect.map(Result.succeed), Effect.catchIf(expected, (error) => Effect.succeed(Result.fail(error))));
+/** Only error discriminants enter telemetry; messages, SQL, identities and payloads do not. */
+const annotateStorageError = (error) => Effect.annotateCurrentSpan({
+	"error.type": error._tag,
+	...Predicate.hasProperty(error, "cause") && Predicate.hasProperty(error.cause, "_tag") && typeof error.cause._tag === "string" ? { "error.cause.type": error.cause._tag } : {}
+});
+const withStorageSpan = (name, expected) => (effect) => storageResult(effect, expected).pipe(Effect.tap((result) => Result.isFailure(result) ? Effect.annotateCurrentSpan({ "storage.outcome": result.failure._tag }) : Effect.void), Effect.tapError(annotateStorageError), Effect.withSpan(name), Effect.flatMap(Effect.fromResult));
+//#endregion
+//#region src/internal/do-journal.ts
+/**
+* Static schema ceiling for stored text columns. Writes are bounded in BYTES by the
+* configured `maxStoredValueBytes` (always ≤ 2,000,000); UTF-8 byte length is never smaller
+* than UTF-16 string length, so any value that passed the byte bound also passes this
+* decode-side character ceiling.
+*/
+const BoundedStoredText = Schema.String.check(Schema.isMaxLength(2e6));
+const BoundedIdentifier = Schema.NonEmptyString.check(Schema.isMaxLength(1024));
+const MAX_RECORDS_PER_THREAD = MAX_THREAD_EXPORT_RECORDS;
+const ZERO_SEQUENCE = Schema.decodeSync(CanonicalSequence)(0);
+const MAX_IDENTIFIER_LENGTH = 1024;
+const MAX_READ_PAGE_JSON_BYTES = 4194304;
+const MAX_RECORD_CACHE_JSON_BYTES = 8388608;
+const MAX_RECORD_CACHE_ENTRIES = 4096;
+/** Durable Object SQL storage allows at most 100 bound parameters per statement. */
+const MAX_BOUND_PARAMETERS = 100;
+const isSqlError = Schema.is(SqlError);
+const storedTextBytes = (value) => new TextEncoder().encode(value).byteLength;
+const chunked = (values, size) => {
+	const chunks = [];
+	for (let index = 0; index < values.length; index += size) chunks.push(values.slice(index, index + size));
+	return chunks;
+};
+var DoMetaRow = class extends Schema.Class("DoMetaRow")({ value: Schema.NonEmptyString.check(Schema.isMaxLength(128)) }) {};
+var DoNameRow = class extends Schema.Class("DoNameRow")({ name: BoundedIdentifier }) {};
+var ThreadRow = class extends Schema.Class("ThreadRow")({
+	thread_id: BoundedIdentifier,
+	created_at: Schema.NonEmptyString.check(Schema.isMaxLength(128)),
+	producer_epoch: ProducerEpoch,
+	tail_digest: BoundedStoredText,
+	tail_sequence: CanonicalSequence
+}) {};
+const threadRows = ownedRows(ThreadRow, "effect_agent_threads", (row) => row.thread_id, "thread_id");
+var BatchRow = class extends Schema.Class("BatchRow")({
+	batch_digest: BoundedStoredText,
+	batch_id: BoundedIdentifier,
+	batch_json: BoundedStoredText,
+	thread_id: BoundedIdentifier,
+	first_sequence: CanonicalSequence,
+	last_sequence: CanonicalSequence,
+	tail_digest: BoundedStoredText
+}) {};
+var RecordRow = class extends Schema.Class("RecordRow")({
+	batch_id: BoundedIdentifier,
+	thread_id: BoundedIdentifier,
+	record_id: BoundedIdentifier,
+	record_json: BoundedStoredText,
+	sequence: CanonicalSequence
+}) {};
+const isolateRecords = /* @__PURE__ */ new Map();
+let isolateRecordBytes = 0;
+const releaseRecord = (entry) => {
+	if (!isolateRecords.delete(entry)) return;
+	isolateRecordBytes -= entry.bytes;
+	entry.evict();
+};
+const recordCaches = /* @__PURE__ */ new WeakMap();
+const makeRecordCache = () => {
+	const records = /* @__PURE__ */ new Map();
+	const key = (thread, sequence) => JSON.stringify([thread, sequence]);
+	return {
+		clear: () => {
+			for (const entry of records.values()) releaseRecord(entry);
+		},
+		get: (thread, sequence) => records.get(key(thread, sequence))?.row,
+		prefix: (thread, through) => {
+			const prefix = [];
+			for (let sequence = 1; sequence <= through; sequence++) {
+				const row = records.get(key(thread, sequence));
+				if (row === void 0) return void 0;
+				prefix.push(row.row);
+			}
+			return prefix;
+		},
+		put: (row) => {
+			const id = key(row.thread_id, row.sequence);
+			const prior = records.get(id);
+			if (prior?.row === row) return;
+			const size = storedTextBytes(row.record_json);
+			if (prior !== void 0) releaseRecord(prior);
+			const entry = {
+				row,
+				bytes: size,
+				evict: () => records.delete(id)
+			};
+			records.set(id, entry);
+			isolateRecords.set(entry, true);
+			isolateRecordBytes += size;
+			while (isolateRecordBytes > MAX_RECORD_CACHE_JSON_BYTES || isolateRecords.size > MAX_RECORD_CACHE_ENTRIES) {
+				const oldest = isolateRecords.keys().next().value;
+				if (oldest === void 0) break;
+				releaseRecord(oldest);
+			}
+		}
+	};
+};
+const ReadPlanRow = Schema.Struct({
+	sequence: CanonicalSequence,
+	record_json_bytes: Schema.Natural.check(Schema.isLessThanOrEqualTo(MAX_READ_PAGE_JSON_BYTES))
+});
+var CheckpointRow = class extends Schema.Class("CheckpointRow")({
+	checkpoint_json: BoundedStoredText,
+	thread_id: BoundedIdentifier,
+	tail_digest: BoundedStoredText,
+	through_sequence: CanonicalSequence
+}) {};
+const recoveryRows = ownedRows(CheckpointRow, "effect_agent_recovery_checkpoints", (row) => row.thread_id, "thread_id");
+const LifecycleCursorRow = Schema.Struct({
+	thread_id: BoundedIdentifier,
+	through_sequence: CanonicalSequence
+});
+const lifecycleCursorRows = ownedRows(LifecycleCursorRow, "effect_agent_lifecycle_cursors", (row) => row.thread_id, "thread_id");
+const initializedLifecycleSources = /* @__PURE__ */ new WeakSet();
+var RawRecord = class extends Schema.Class("@effect-agent/storage-cloudflare/RawRecord")({
+	recordId: BoundedIdentifier,
+	recordJson: BoundedStoredText
+}) {};
+var RawAppendRequest = class extends Schema.Class("@effect-agent/storage-cloudflare/RawAppendRequest")({
+	batchDigest: BoundedStoredText,
+	batchId: BoundedIdentifier,
+	batchJson: BoundedStoredText,
+	threadId: BoundedIdentifier,
+	expectedTailDigest: BoundedStoredText,
+	expectedTailSequence: CanonicalSequence,
+	producerEpoch: ProducerEpoch,
+	records: Schema.NonEmptyArray(RawRecord).check(Schema.isMaxLength(256)),
+	tailDigest: BoundedStoredText
+}) {};
+var RawAppendResult = class extends Schema.Class("@effect-agent/storage-cloudflare/RawAppendResult")({
+	firstSequence: CanonicalSequence,
+	lastSequence: CanonicalSequence,
+	replayed: Schema.Boolean,
+	tailDigest: BoundedStoredText
+}) {};
+var RawReadRequest = class extends Schema.Class("@effect-agent/storage-cloudflare/RawReadRequest")({
+	threadId: BoundedIdentifier,
+	fromSequenceExclusive: CanonicalSequence,
+	limit: Schema.Int.check(Schema.isGreaterThan(0), Schema.isLessThanOrEqualTo(1024))
+}) {};
+var RawCheckpoint = class extends Schema.Class("@effect-agent/storage-cloudflare/RawCheckpoint")({
+	checkpointJson: BoundedStoredText,
+	threadId: BoundedIdentifier,
+	tailDigest: BoundedStoredText,
+	throughSequence: CanonicalSequence
+}) {};
+var RawThreadExport = class extends Schema.Class("@effect-agent/storage-cloudflare/RawThreadExport")({
+	thread: ThreadRow,
+	records: Schema.Array(RecordRow)
+}) {};
+const noFailpoint = () => Effect.void;
+const storageError = (operation) => (error) => DoStorageError.make({
+	cause: error,
+	operation,
+	message: error.message,
+	diagnostic: ThreadStoreDiagnostic.make({
+		causeTag: error._tag,
+		operation,
+		issueTag: error.reason._tag
+	})
+});
+/** Decode raw Durable Object SQLite rows against a Schema, reporting failures as typed corruption. */
+const decodeRows = Effect.fn((schema, table, rowKey, rows, decoder = table) => Schema.decodeUnknownEffect(schema)(rows).pipe(Effect.mapError((error) => DoStorageCorruptionError.make({
+	table,
+	rowKey,
+	message: "Stored rows do not satisfy the storage schema",
+	diagnostic: ThreadStoreDiagnostic.make({
+		causeTag: error._tag,
+		operation: "decode storage rows",
+		decoder,
+		issueTag: error.issue._tag
+	})
+})), Effect.tapError((error) => Effect.annotateCurrentSpan({
+	"storage.failure.operation": error.diagnostic?.operation,
+	"storage.failure.cause": error.diagnostic?.causeTag,
+	"storage.failure.decoder": decoder,
+	"storage.failure.issue": error.diagnostic?.issueTag
+}))));
+/** Decode exactly one raw row against a Schema, reporting failures as typed corruption. */
+const decodeSingleRow = Effect.fn((schema, table, rowKey, rows) => decodeRows(schema, table, rowKey, rows).pipe(Effect.flatMap((decoded) => decoded.length === 1 ? Effect.succeed(decoded[0]) : Effect.fail(DoStorageCorruptionError.make({
+	table,
+	rowKey,
+	message: `Expected exactly one row but found ${decoded.length}.`
+})))));
+/** Column inventory of the supported v3 predecessor, independent of physical column order. */
+const predecessorColumns = {
+	effect_agent_threads: [
+		"thread_id",
+		"created_at",
+		"tail_sequence",
+		"tail_digest",
+		"producer_epoch"
+	],
+	effect_agent_canonical_batches: [
+		"thread_id",
+		"batch_id",
+		"first_sequence",
+		"last_sequence",
+		"batch_digest",
+		"tail_digest",
+		"batch_json"
+	],
+	effect_agent_canonical_records: [
+		"thread_id",
+		"sequence",
+		"record_id",
+		"batch_id",
+		"record_json"
+	],
+	effect_agent_checkpoints: [
+		"thread_id",
+		"through_sequence",
+		"tail_digest",
+		"checkpoint_json"
+	],
+	effect_agent_submissions: [
+		"submission_id",
+		"thread_id",
+		"queue_sequence",
+		"principal",
+		"idempotency_key",
+		"agent_id",
+		"agent_digests_json",
+		"deployment_id",
+		"input_json",
+		"input_digest",
+		"receipt_id",
+		"state",
+		"settled_outcome",
+		"created_at",
+		"ready_at",
+		"input_applied_record_id",
+		"input_applied_sequence",
+		"joined_host_submission_id",
+		"suspended_reason_json",
+		"suspended_at",
+		"unknown_reason",
+		"unknown_tool_call_ids_json",
+		"parent_submission_id",
+		"parent_tool_call_id",
+		"admission_group",
+		"admission_fence_json"
+	],
+	effect_agent_submission_ownership: [
+		"submission_id",
+		"attempt_id",
+		"ownership_token",
+		"producer_epoch",
+		"owner_producer_id",
+		"lease_expires_at"
+	],
+	effect_agent_attempts: [
+		"attempt_id",
+		"submission_id",
+		"thread_id",
+		"owner_producer_id",
+		"producer_epoch",
+		"claimed_at"
+	],
+	effect_agent_settlement_reservations: [
+		"submission_id",
+		"settlement_id",
+		"outcome",
+		"record_id",
+		"record_json",
+		"record_digest",
+		"reserved_at",
+		"finalized_at"
+	],
+	effect_agent_abort_intents: [
+		"submission_id",
+		"author",
+		"reason",
+		"requested_at",
+		"canonical_record_id"
+	],
+	effect_agent_approval_decisions: [
+		"submission_id",
+		"tool_call_id",
+		"decision",
+		"resolver",
+		"reason",
+		"decided_at"
+	],
+	effect_agent_unknown_resolutions: [
+		"submission_id",
+		"tool_call_id",
+		"author",
+		"reason",
+		"resolution_json",
+		"resolved_at"
+	],
+	effect_agent_child_reservations: [
+		"reservation_id",
+		"parent_submission_id",
+		"parent_tool_call_id",
+		"child_submission_id",
+		"status",
+		"allocation_json",
+		"allocation_digest",
+		"accounting_json",
+		"reserved_at",
+		"release_began_at",
+		"released_at"
+	],
+	effect_agent_meta: ["key", "value"],
+	effect_agent_child_settlements: [
+		"parent_submission_id",
+		"child_submission_id",
+		"child_outcome",
+		"recorded_at"
+	]
+};
+const checkPredecessorLayout = Effect.fn("DoJournal.checkPredecessorLayout")(function* (version) {
+	const sql = (yield* SqlClient$1.SqlClient).withoutTransforms();
+	const expectedColumns = {
+		...version === 3 ? predecessorColumns : {
+			...predecessorColumns,
+			effect_agent_submissions: [
+				...predecessorColumns.effect_agent_submissions,
+				"worker_admission_json",
+				"message_admission_json"
+			],
+			effect_agent_message_deliveries: [
+				"owner_thread_id",
+				"message_id",
+				"version",
+				"state",
+				"deadline_at_millis",
+				"record_json"
+			]
+		},
+		...version === 7 ? { effect_agent_canonical_records: [...predecessorColumns.effect_agent_canonical_records, "outstanding"] } : {},
+		...version >= 5 ? { effect_agent_recovery_checkpoints: [
+			"thread_id",
+			"through_sequence",
+			"tail_digest",
+			"checkpoint_json"
+		] } : {}
+	};
+	for (const [table, expected] of Object.entries(expectedColumns)) {
+		const columns = yield* decodeRows(Schema.Array(Schema.Struct({ name: BoundedIdentifier })), table, "schema", yield* sql.unsafe(`PRAGMA table_info(${table})`));
+		const names = new Set(expected);
+		if (columns.length !== names.size || columns.some((column) => !names.has(column.name))) return yield* DoStorageCompatibilityError.make({
+			actualVersion: version,
+			supportedVersion: 9,
+			message: `The v${version} ${table} columns do not match the supported predecessor; no upgrade was committed.`
+		});
+	}
+});
+const REQUIRED_TABLES = [
+	"effect_agent_abort_intents",
+	"effect_agent_approval_decisions",
+	"effect_agent_attempts",
+	"effect_agent_canonical_batches",
+	"effect_agent_canonical_records",
+	"effect_agent_checkpoints",
+	"effect_agent_child_reservations",
+	"effect_agent_child_settlements",
+	"effect_agent_threads",
+	"effect_agent_meta",
+	"effect_agent_settlement_reservations",
+	"effect_agent_submission_ownership",
+	"effect_agent_submissions",
+	"effect_agent_unknown_resolutions"
+];
+/**
+* Supported-predecessor or fresh storage gate (DEPLOY-008) over `effect_agent_meta` instead of
+* `PRAGMA user_version` (unverified on Durable Object SQL storage; a meta table is portable
+* regardless). No WAL check (Durable Object storage owns durability and confirms writes
+* through output gates) and no busy timeout (a Durable Object has exactly one writer): the
+* Node machinery those served has no DC analogue and is deliberately absent.
+*/
+const ensureCurrentStorage = Effect.fn("DoJournal.ensureCurrentStorage")(function* (sql, failpoint = noFailpoint, maxStoredValueBytes) {
+	const verifyWorkerPredecessor = Effect.fnUntraced(function* (workerContract) {
+		const requiredRows = yield* sql`
+    SELECT name
+    FROM sqlite_master
+    WHERE (type = 'table'
+      AND name IN ${sql.in([
+			...REQUIRED_TABLES,
+			"effect_agent_message_deliveries",
+			"effect_agent_recovery_checkpoints"
+		])}
+    ) OR (type = 'index' AND name IN ('effect_agent_submissions_nonterminal', 'effect_agent_records_subtree', 'effect_agent_message_deliveries_pending', 'effect_agent_records_outstanding', 'effect_agent_records_call', 'effect_agent_records_run_input', 'effect_agent_records_worker_input'))
+    OR (${workerContract ? 1 : 0} = 1 AND name IN ('effect_agent_worker_stops', 'effect_agent_worker_starts', 'effect_agent_worker_pending', 'effect_agent_worker_execution'))
+    ORDER BY name
+  `.pipe(Effect.mapError(storageError("verify storage tables")));
+		if ((yield* decodeRows(Schema.Array(DoNameRow), "sqlite_master", "required_tables", requiredRows)).length !== REQUIRED_TABLES.length + 9 + (workerContract ? 4 : 0)) return yield* DoStorageCompatibilityError.make({
+			actualVersion: 9,
+			supportedVersion: 9,
+			message: "The Durable Object claims the current format but is missing required tables or its nonterminal index. Retain the original store for inspection."
+		});
+	});
+	const metaTableRows = yield* sql`
+    SELECT name
+    FROM sqlite_master
+    WHERE type = 'table'
+      AND name = 'effect_agent_meta'
+  `.pipe(Effect.mapError(storageError("read storage version table")));
+	if ((yield* decodeRows(Schema.Array(DoNameRow), "sqlite_master", "effect_agent_meta", metaTableRows)).length === 0) {
+		const existingRows = yield* sql`
+      SELECT name
+      FROM sqlite_master
+      WHERE type = 'table'
+        AND name LIKE 'effect_agent_%'
+      ORDER BY name
+    `.pipe(Effect.mapError(storageError("inspect unversioned storage")));
+		if ((yield* decodeRows(Schema.Array(DoNameRow), "sqlite_master", "effect_agent_%", existingRows)).length > 0) return yield* DoStorageCompatibilityError.make({
+			actualVersion: 0,
+			supportedVersion: 9,
+			message: "The Durable Object contains unversioned Effect Agent tables. Refusing to mutate ambiguous stored data; retain it for inspection with its original writer."
+		});
+		yield* SqliteMigrator.run({
+			loader: doMigrations,
+			table: "effect_sql_migrations_agent_threads"
+		}).pipe(Effect.provideService(SqlClient$1.SqlClient, sql), Effect.mapError((error) => DoStorageError.make({
+			cause: error,
+			operation: "initialize current storage",
+			message: error.message
+		})));
+	} else {
+		const versionRows = yield* sql`
+      SELECT value
+      FROM effect_agent_meta
+      WHERE key = 'storage_version'
+    `.pipe(Effect.mapError(storageError("read storage version")));
+		const version = yield* decodeSingleRow(Schema.Array(DoMetaRow), "effect_agent_meta", "storage_version", versionRows);
+		if (version.value === "2" || version.value === "3" || version.value === "4" || version.value === "5") yield* sql.withTransaction(Effect.gen(function* () {
+			const current = yield* sql`SELECT value FROM effect_agent_meta WHERE key='storage_version'`;
+			if (current.length === 1 && current[0].value === String(9)) return;
+			if (current.length !== 1 || current[0].value !== "2" && current[0].value !== "3" && current[0].value !== "4" && current[0].value !== "5") return yield* DoStorageCompatibilityError.make({
+				actualVersion: -1,
+				supportedVersion: 9,
+				message: "Storage version changed while acquiring the upgrade transaction."
+			});
+			if ((yield* decodeRows(Schema.Array(DoNameRow), "sqlite_master", "required_tables", yield* sql`SELECT name FROM sqlite_master WHERE type='table' AND name IN ${sql.in([...REQUIRED_TABLES])}`)).length !== REQUIRED_TABLES.length) return yield* DoStorageCompatibilityError.make({
+				actualVersion: Number(current[0].value),
+				supportedVersion: 9,
+				message: "The predecessor store is missing required tables. Retain the original store for inspection; no upgrade was committed."
+			});
+			if ((yield* sql`SELECT name FROM sqlite_master WHERE type='table' AND name='effect_agent_recovery_checkpoints'`).length !== (current[0].value === "5" ? 1 : 0)) return yield* DoStorageCompatibilityError.make({
+				actualVersion: Number(current[0].value),
+				supportedVersion: 9,
+				message: "The predecessor recovery checkpoint storage does not match its version; refusing ambiguous data without mutation."
+			});
+			if ((yield* sql`SELECT name FROM sqlite_master WHERE name='effect_agent_submissions_nonterminal'`).length !== 0) return yield* DoStorageCompatibilityError.make({
+				actualVersion: Number(current[0].value),
+				supportedVersion: 9,
+				message: "The predecessor already contains the nonterminal index; refusing ambiguous storage without mutation."
+			});
+			if (current[0].value === "2") {
+				yield* checkV2ThreadLayout();
+				for (const statement of [
+					sql`ALTER TABLE effect_agent_submissions ADD COLUMN admission_group TEXT`,
+					sql`ALTER TABLE effect_agent_submissions ADD COLUMN admission_fence_json TEXT`,
+					sql`CREATE INDEX effect_agent_submissions_group ON effect_agent_submissions (thread_id, admission_group, state)`
+				]) {
+					yield* failpoint("upgrade:before-mutation");
+					yield* statement;
+					yield* failpoint("upgrade:after-mutation");
+				}
+			}
+			if (current[0].value === "3") yield* checkPredecessorLayout(3);
+			if (current[0].value === "4") yield* checkPredecessorLayout(4);
+			if (current[0].value === "5") yield* checkPredecessorLayout(5);
+			if (current[0].value === "2" || current[0].value === "3") {
+				yield* failpoint("upgrade:before-mutation");
+				yield* sql`ALTER TABLE effect_agent_submissions ADD COLUMN worker_admission_json TEXT`;
+				yield* failpoint("upgrade:after-mutation");
+				yield* failpoint("upgrade:before-mutation");
+				yield* sql`ALTER TABLE effect_agent_submissions ADD COLUMN message_admission_json TEXT`;
+				yield* failpoint("upgrade:after-mutation");
+				yield* failpoint("upgrade:before-mutation");
+				yield* createMessageDeliveryTables;
+				yield* failpoint("upgrade:after-mutation");
+			}
+			if (current[0].value !== "5") {
+				yield* failpoint("upgrade:before-mutation");
+				yield* createRecoveryCheckpointTable;
+				yield* failpoint("upgrade:after-mutation");
+			}
+			yield* failpoint("upgrade:before-mutation");
+			yield* createNonterminalIndex;
+			yield* failpoint("upgrade:after-mutation");
+			yield* failpoint("upgrade:before-version");
+			yield* createNativeReadIndexes();
+			yield* createMessageDeliveryPendingIndex();
+			yield* seedNativeReadIndexes.pipe(Effect.catchTag("ThreadStoreError", (error) => DoStorageCorruptionError.make({
+				table: "effect_agent_canonical_records",
+				rowKey: "upgrade",
+				message: error.message
+			})));
+			yield* createWorkerStops;
+			yield* sql`UPDATE effect_agent_meta SET value='9' WHERE key='storage_version'`;
+			yield* failpoint("upgrade:after-version");
+		})).pipe(Effect.catchTag("DoStorageFailpointError", (error) => DoStorageError.make({
+			cause: error,
+			operation: "upgrade storage",
+			message: error.message
+		})), Effect.catchTag("StorageUpgradeError", (error) => DoStorageCorruptionError.make({
+			table: error.table,
+			rowKey: error.rowKey,
+			message: error.message
+		})), Effect.catchTag("SchemaError", (error) => DoStorageCorruptionError.make({
+			table: "effect_agent_canonical_records",
+			rowKey: "upgrade",
+			message: error.message
+		})), Effect.catchTag("SqlError", storageError("upgrade supported thread storage")));
+		else if (version.value === "6") yield* sql.withTransaction(Effect.gen(function* () {
+			const current = yield* sql`SELECT value FROM effect_agent_meta WHERE key = 'storage_version'`;
+			if (current[0]?.value === "9") return;
+			if (current[0]?.value !== "6") return yield* DoStorageCompatibilityError.make({
+				actualVersion: -1,
+				supportedVersion: 9,
+				message: "Storage version changed during native index upgrade"
+			});
+			yield* checkPredecessorLayout(5);
+			if ((yield* sql`SELECT name FROM sqlite_master WHERE type = 'index' AND name = 'effect_agent_submissions_nonterminal'`).length !== 1) return yield* DoStorageCompatibilityError.make({
+				actualVersion: 6,
+				supportedVersion: 9,
+				message: "Predecessor storage is missing its required nonterminal index"
+			});
+			yield* failpoint("upgrade:before-mutation");
+			yield* createNativeReadIndexes();
+			yield* createMessageDeliveryPendingIndex();
+			yield* seedNativeReadIndexes.pipe(Effect.catchTag("ThreadStoreError", (error) => DoStorageCorruptionError.make({
+				table: "effect_agent_canonical_records",
+				rowKey: "upgrade",
+				message: error.message
+			})));
+			yield* failpoint("upgrade:after-mutation");
+			yield* failpoint("upgrade:before-version");
+			yield* createWorkerStops;
+			yield* sql`UPDATE effect_agent_meta SET value='9' WHERE key='storage_version'`;
+			yield* failpoint("upgrade:after-version");
+		})).pipe(Effect.mapError((error) => DoStorageError.make({
+			operation: "upgrade native indexes",
+			message: error.message,
+			cause: error
+		})));
+		else if (version.value === "7") yield* sql.withTransaction(Effect.gen(function* () {
+			const current = yield* sql`SELECT value FROM effect_agent_meta WHERE key = 'storage_version'`;
+			if (current[0]?.value === "9") return;
+			if (current[0]?.value !== "7") return yield* DoStorageCompatibilityError.make({
+				actualVersion: -1,
+				supportedVersion: 9,
+				message: "Storage version changed during worker stop upgrade"
+			});
+			yield* checkPredecessorLayout(7);
+			yield* verifyWorkerPredecessor(false);
+			yield* failpoint("upgrade:before-mutation");
+			yield* createWorkerStops;
+			yield* failpoint("upgrade:after-mutation");
+			yield* failpoint("upgrade:before-version");
+			yield* sql`UPDATE effect_agent_meta SET value='9' WHERE key='storage_version'`;
+			yield* failpoint("upgrade:after-version");
+		})).pipe(Effect.mapError((cause) => DoStorageError.make({
+			operation: "upgrade worker stop",
+			message: "Worker stop upgrade failed",
+			cause
+		})));
+		else if (version.value === "8") yield* sql.withTransaction(Effect.gen(function* () {
+			const current = yield* sql`SELECT value FROM effect_agent_meta WHERE key = 'storage_version'`;
+			if (current[0]?.value === "9") return;
+			if (current[0]?.value !== "8") return yield* DoStorageCompatibilityError.make({
+				actualVersion: -1,
+				supportedVersion: 9,
+				message: "Storage version changed during assignment seal upgrade"
+			});
+			yield* checkPredecessorLayout(7);
+			yield* verifyWorkerPredecessor(true);
+			const columns = yield* sql`PRAGMA table_info(effect_agent_worker_stops)`;
+			yield* Schema.decodeUnknownEffect(Schema.Tuple([Schema.Struct({
+				cid: Schema.Literal(0),
+				name: Schema.Literal("thread_id"),
+				type: Schema.Literal("TEXT"),
+				notnull: Schema.Literal(1),
+				dflt_value: Schema.Null,
+				pk: Schema.Literal(1)
+			})]))(columns).pipe(Effect.mapError(() => DoStorageCompatibilityError.make({
+				actualVersion: 8,
+				supportedVersion: 9,
+				message: "Unsupported worker seal layout; no upgrade was committed"
+			})));
+			yield* failpoint("upgrade:before-mutation");
+			yield* sql`ALTER TABLE effect_agent_worker_stops ADD COLUMN terminal TEXT`;
+			yield* failpoint("upgrade:after-mutation");
+			yield* failpoint("upgrade:before-version");
+			yield* sql`UPDATE effect_agent_meta SET value='9' WHERE key='storage_version'`;
+			yield* failpoint("upgrade:after-version");
+		})).pipe(Effect.mapError((cause) => DoStorageError.make({
+			operation: "upgrade assignment seals",
+			message: "Assignment seal upgrade failed",
+			cause
+		})));
+		else if (version.value !== String(9)) {
+			const actualVersion = Number.parseInt(version.value, 10);
+			return yield* DoStorageCompatibilityError.make({
+				actualVersion: Number.isSafeInteger(actualVersion) ? actualVersion : -1,
+				supportedVersion: 9,
+				message: `The Durable Object uses unsupported storage version ${version.value}; this build supports exactly version 9. Only supported v2, v3, v4, v5, v6, v7 and v8 can be upgraded automatically. Keep the original store and use a compatible library version.`
+			});
+		}
+	}
+	yield* verifyWorkerPredecessor(true);
+	const state = yield* ownedState(sql);
+	const owner = (yield* SqlStorageOwner) ?? state;
+	let journal;
+	const lifecycle = yield* makeSqlLifecyclePublication(void 0, maxStoredValueBytes).pipe(Effect.provideService(SqlStorageOwner, owner), Effect.provideService(SqlLifecycleSource, {
+		beforeRetain: (threadId) => Effect.suspend(() => journal === void 0 ? Effect.fail(LifecyclePublicationError.make({ reason: "unavailable" })) : journal.flushCanonical(threadId)),
+		beforePending: Effect.suspend(() => journal === void 0 ? Effect.fail(LifecyclePublicationError.make({ reason: "unavailable" })) : journal.flushPublications())
+	}), Effect.provideService(SqlClient$1.SqlClient, sql), Effect.mapError((cause) => DoStorageError.make({
+		operation: "initialize lifecycle publication",
+		message: "Native publication storage unavailable",
+		cause
+	})));
+	journal = yield* makeJournal(sql, failpoint, maxStoredValueBytes, lifecycle, state).pipe(Effect.provideService(SqlStorageOwner, owner));
+	if (lifecycle !== void 0) yield* journal.initializeLifecycleSource();
+	return journal;
+});
+const makeJournal = (sql, failpoint, maxStoredValueBytes, lifecycle, state) => Effect.gen(function* () {
+	const owner = (yield* SqlStorageOwner) ?? state;
+	const progress = yield* SqlStorageProgress;
+	const threads = threadRows(state, sql);
+	const recovery = recoveryRows(state, sql);
+	const cursors = lifecycleCursorRows(state, sql);
+	let records = recordCaches.get(state);
+	if (records === void 0) {
+		records = makeRecordCache();
+		recordCaches.set(state, records);
+		state.invalidators.add(records.clear);
+	}
+	const recordCache = records;
+	/** Typed pre-write refusal for any single value over the configured byte bound. */
+	const checkValueBound = (operation, value) => {
+		const actualBytes = storedTextBytes(value);
+		return actualBytes > maxStoredValueBytes ? Effect.fail(DoValueBoundExceeded.make({
+			actualBytes,
+			maxBytes: maxStoredValueBytes,
+			operation
+		})) : Effect.void;
+	};
+	/**
+	* Runs one journal write transaction on the Durable Object storage-backed
+	* `withTransaction` (`ctx.storage.transaction()` under the hood). Within one Durable
+	* Object there is exactly ONE writer, so the Node `BEGIN IMMEDIATE` + busy-retry +
+	* `SqliteWriteContention` machinery has no analogue here and is deliberately absent.
+	* Ownership-token and epoch checks still run INSIDE the transaction, so fencing atomicity
+	* (DUR-006) is preserved identically.
+	*
+	* Journal write transactions are always top level: the Durable Object client rejects
+	* nested transactions, so new journal operations must not wrap this helper inside another
+	* transaction. Expected outcomes may be captured only when every such refusal precedes
+	* mutation; real faults still roll back. Successful preflight reads never authorize a write.
+	*/
+	const withWriteTransaction = (operation, expected = () => false) => (effect) => owner.transaction(storageResult(effect, expected)).pipe(Effect.provideService(SqlClient$1.SqlClient, sql), Effect.mapError((error) => isSqlError(error) ? storageError(operation)(error) : error), Effect.tapError(annotateStorageError), Effect.withSpan("DoJournal.withWriteTransaction", { attributes: { operation } }), Effect.flatMap(Effect.fromResult));
+	const materialize = Effect.fnUntraced(function* (threadId, createdAt, emptyTailDigest, producerEpoch) {
+		if (threadId.length > MAX_IDENTIFIER_LENGTH) return yield* DoStorageError.make({
+			operation: "materialize thread",
+			message: "Thread identity exceeds the Durable Object storage bounds."
+		});
+		yield* checkValueBound("materialize thread", emptyTailDigest);
+		const current = yield* getThread(threadId);
+		if (current.length === 1 && producerEpoch <= current[0].producer_epoch) {
+			if (producerEpoch === current[0].producer_epoch) return;
+			return yield* DoFenceRejected.make({
+				producerEpoch,
+				actualEpoch: current[0].producer_epoch,
+				message: "The materialization producer epoch is stale."
+			});
+		}
+		yield* withWriteTransaction("materialize transaction", (error) => error._tag === "DoFenceRejected")(Effect.gen(function* () {
+			const existingRows = yield* getThread(threadId);
+			const existing = yield* decodeRows(Schema.Array(ThreadRow), "effect_agent_threads", threadId, existingRows);
+			if (existing.length > 1) return yield* DoStorageCorruptionError.make({
+				table: "effect_agent_threads",
+				rowKey: threadId,
+				message: "A thread primary key returned more than one row."
+			});
+			if (existing.length === 0) {
+				yield* sql`
+            INSERT INTO effect_agent_threads (
+              thread_id,
+              created_at,
+              tail_sequence,
+              tail_digest,
+              producer_epoch
+            ) VALUES (
+              ${threadId},
+              ${createdAt},
+              0,
+              ${emptyTailDigest},
+              ${producerEpoch}
+            )
+           RETURNING *`.pipe(threads.write, Effect.mapError((error) => error._tag === "SqlError" ? storageError("materialize thread")(error) : error));
+				if (lifecycle !== void 0) yield* sql`INSERT INTO effect_agent_lifecycle_cursors (thread_id, through_sequence)
+              VALUES (${threadId}, 0) RETURNING *`.pipe(cursors.write, Effect.mapError((error) => error._tag === "SqlError" ? storageError("initialize lifecycle source")(error) : error));
+				return;
+			}
+			if (producerEpoch < existing[0].producer_epoch) return yield* DoFenceRejected.make({
+				producerEpoch,
+				actualEpoch: existing[0].producer_epoch,
+				message: `Producer epoch ${producerEpoch} is stale; current epoch is ${existing[0].producer_epoch}.`
+			});
+			if (producerEpoch > existing[0].producer_epoch) yield* sql`
+            UPDATE effect_agent_threads
+            SET producer_epoch = ${producerEpoch}
+            WHERE thread_id = ${threadId}
+           RETURNING *`.pipe(threads.write, Effect.mapError((error) => error._tag === "SqlError" ? storageError("advance materialization epoch")(error) : error));
+		}));
+	}, withStorageSpan("DoJournal.materialize", (error) => error._tag === "DoFenceRejected"));
+	const getThread = Effect.fn("DoJournal.getThread")(function* (threadId) {
+		return (yield* threads.by("thread_id", threadId).pipe(Effect.mapError((error) => error._tag === "SqlError" ? storageError("read thread")(error) : error))).filter((row) => row.thread_id === threadId);
+	});
+	const hasRecord = Effect.fnUntraced(function* (threadId, recordId) {
+		const thread = (yield* getThread(threadId))[0];
+		const prefix = recordCache.prefix(threadId, thread?.tail_sequence ?? 0);
+		if (prefix !== void 0) return prefix.some((row) => row.record_id === recordId);
+		return (yield* sql`SELECT record_id FROM effect_agent_canonical_records
+      WHERE thread_id = ${threadId} AND record_id = ${recordId}`.pipe(Effect.mapError(storageError("read canonical record identity")))).length > 0;
+	});
+	const append = Effect.fnUntraced(function* (request, observed) {
+		if (request.threadId.length > MAX_IDENTIFIER_LENGTH || request.batchId.length > MAX_IDENTIFIER_LENGTH || request.records.some((record) => record.recordId.length > MAX_IDENTIFIER_LENGTH)) return yield* DoStorageError.make({
+			operation: "append canonical batch",
+			message: "Canonical identifiers exceed the Durable Object storage bounds."
+		});
+		yield* checkValueBound("append canonical batch", request.batchJson);
+		yield* checkValueBound("append canonical batch", request.batchDigest);
+		yield* checkValueBound("append canonical batch", request.tailDigest);
+		yield* Effect.forEach(request.records, (record) => checkValueBound("append canonical record", record.recordJson), { discard: true });
+		const recordIds = request.records.map((record) => record.recordId);
+		if (new Set(recordIds).size !== recordIds.length) return yield* DoAppendConflict.make({
+			message: `Batch ${request.batchId} contains duplicate canonical record IDs.`,
+			reason: "record-identity"
+		});
+		if (request.producerEpoch !== observed.producer_epoch) return yield* DoFenceRejected.make({
+			producerEpoch: request.producerEpoch,
+			actualEpoch: observed.producer_epoch,
+			message: "The append producer epoch is not current."
+		});
+		if (request.expectedTailSequence !== observed.tail_sequence || request.expectedTailDigest !== observed.tail_digest) {
+			if ((yield* sql`
+          SELECT batch_id FROM effect_agent_canonical_batches
+          WHERE thread_id = ${request.threadId} AND batch_id = ${request.batchId}
+        `.pipe(Effect.mapError(storageError("preflight append replay")))).length === 0) return yield* DoAppendConflict.make({
+				reason: "tail",
+				message: "The canonical tail has advanced.",
+				actualTailSequence: observed.tail_sequence,
+				actualTailDigest: observed.tail_digest
+			});
+		}
+		return yield* withWriteTransaction("append transaction", isAppendContention)(Effect.gen(function* () {
+			const threadRows = yield* getThread(request.threadId);
+			const thread = yield* decodeSingleRow(Schema.Array(ThreadRow), "effect_agent_threads", request.threadId, threadRows);
+			if (request.producerEpoch !== thread.producer_epoch) return yield* DoFenceRejected.make({
+				producerEpoch: request.producerEpoch,
+				actualEpoch: thread.producer_epoch,
+				message: `Producer epoch ${request.producerEpoch} is not the current epoch ${thread.producer_epoch}.`
+			});
+			const prefix = recordCache.prefix(request.threadId, thread.tail_sequence);
+			const batchRows = prefix !== void 0 && !prefix.some((row) => row.batch_id === request.batchId) ? [] : yield* sql`
+          SELECT
+            thread_id,
+            batch_id,
+            first_sequence,
+            last_sequence,
+            batch_digest,
+            tail_digest,
+            batch_json
+          FROM effect_agent_canonical_batches
+          WHERE thread_id = ${request.threadId}
+            AND batch_id = ${request.batchId}
+        `.pipe(Effect.mapError(storageError("read idempotent batch")));
+			const batches = yield* decodeRows(Schema.Array(BatchRow), "effect_agent_canonical_batches", `${request.threadId}/${request.batchId}`, batchRows);
+			if (batches.length > 1) return yield* DoStorageCorruptionError.make({
+				table: "effect_agent_canonical_batches",
+				rowKey: `${request.threadId}/${request.batchId}`,
+				message: "A canonical batch primary key returned more than one row."
+			});
+			if (batches.length === 1) {
+				const existing = batches[0];
+				if (existing.batch_digest !== request.batchDigest) return yield* DoAppendConflict.make({
+					message: `Batch ${request.batchId} already exists with different canonical content.`,
+					reason: "batch-digest"
+				});
+				return RawAppendResult.make({
+					firstSequence: existing.first_sequence,
+					lastSequence: existing.last_sequence,
+					replayed: true,
+					tailDigest: existing.tail_digest
+				});
+			}
+			if (request.expectedTailSequence !== thread.tail_sequence || request.expectedTailDigest !== thread.tail_digest) return yield* DoAppendConflict.make({
+				message: `Expected tail ${request.expectedTailSequence}/${request.expectedTailDigest} but found ${thread.tail_sequence}/${thread.tail_digest}.`,
+				reason: "tail",
+				actualTailSequence: thread.tail_sequence,
+				actualTailDigest: thread.tail_digest
+			});
+			if (thread.tail_sequence + request.records.length > MAX_RECORDS_PER_THREAD) return yield* DoStorageError.make({
+				operation: "append canonical batch",
+				message: `Thread record limit ${MAX_RECORDS_PER_THREAD} would be exceeded.`
+			});
+			const existingRecords = prefix === void 0 ? [] : prefix.filter((row) => recordIds.includes(row.record_id));
+			for (const chunk of prefix === void 0 ? chunked(recordIds, 90) : []) {
+				const existingRecordRows = yield* sql`
+            SELECT
+              thread_id,
+              sequence,
+              record_id,
+              batch_id,
+              record_json
+            FROM effect_agent_canonical_records
+            WHERE thread_id = ${request.threadId}
+              AND record_id IN ${sql.in([...chunk])}
+            ORDER BY sequence
+          `.pipe(Effect.mapError(storageError("check canonical record identities")));
+				existingRecords.push(...yield* decodeRows(Schema.Array(RecordRow), "effect_agent_canonical_records", `${request.threadId}/record_ids`, existingRecordRows));
+			}
+			if (existingRecords.length > 0) return yield* DoAppendConflict.make({
+				message: `Canonical record ID ${existingRecords[0].record_id} already exists.`,
+				reason: "record-identity"
+			});
+			const firstSequence = yield* Schema.decodeEffect(CanonicalSequence)(thread.tail_sequence + 1).pipe(Effect.mapError((error) => DoStorageError.make({
+				cause: error,
+				operation: "append canonical batch",
+				message: error.message
+			})));
+			const lastSequence = yield* Schema.decodeEffect(CanonicalSequence)(firstSequence + request.records.length - 1).pipe(Effect.mapError((error) => DoStorageError.make({
+				cause: error,
+				operation: "append canonical batch",
+				message: error.message
+			})));
+			yield* sql`
+          INSERT INTO effect_agent_canonical_batches (
+            thread_id,
+            batch_id,
+            first_sequence,
+            last_sequence,
+            batch_digest,
+            tail_digest,
+            batch_json
+          ) VALUES (
+            ${request.threadId},
+            ${request.batchId},
+            ${firstSequence},
+            ${lastSequence},
+            ${request.batchDigest},
+            ${request.tailDigest},
+            ${request.batchJson}
+          )
+        `.pipe(Effect.mapError(storageError("insert canonical batch")));
+			yield* failpoint("append:after-batch-insert");
+			const records = yield* Effect.forEach(request.records, (record, index) => Effect.gen(function* () {
+				const canonical = yield* Schema.decodeEffect(Schema.fromJsonString(CanonicalRecord))(record.recordJson).pipe(Effect.mapError((error) => DoStorageCorruptionError.make({
+					table: "effect_agent_canonical_records",
+					rowKey: record.recordId,
+					message: error.message
+				})));
+				return {
+					record,
+					canonical,
+					row: {
+						thread_id: request.threadId,
+						sequence: firstSequence + index,
+						record_id: record.recordId,
+						batch_id: request.batchId,
+						record_json: record.recordJson,
+						outstanding: canonicalRecordOutstanding(canonical)
+					}
+				};
+			}));
+			for (const group of chunked(records, Math.floor(MAX_BOUND_PARAMETERS / 6))) {
+				yield* sql`INSERT INTO effect_agent_canonical_records ${sql.insert(group.map(({ row }) => row))}`.pipe(Effect.mapError(storageError("insert canonical records")));
+				for (const { canonical, row } of group) {
+					yield* indexCanonicalRecord(request.threadId, canonical, void 0, { sequence: row.sequence }).pipe(Effect.provideService(SqlClient$1.SqlClient, sql), Effect.mapError(storageError("index canonical record")));
+					recordCache.put(RecordRow.make({
+						...row,
+						sequence: Schema.decodeSync(CanonicalSequence)(row.sequence)
+					}));
+					yield* failpoint("append:after-record-insert");
+				}
+			}
+			yield* sql`
+          UPDATE effect_agent_threads
+          SET
+            tail_sequence = ${lastSequence},
+            tail_digest = ${request.tailDigest},
+            producer_epoch = ${request.producerEpoch}
+          WHERE thread_id = ${request.threadId}
+         RETURNING *`.pipe(threads.write, Effect.mapError((error) => error._tag === "SqlError" ? storageError("advance thread tail")(error) : error));
+			yield* failpoint("append:after-tail-update");
+			if (lifecycle !== void 0 && records.some(({ canonical: { payload } }) => payload._tag === "RunStarted" || payload._tag === "SubagentStarted")) yield* flushCanonical(request.threadId).pipe(Effect.provideService(SqlLifecycleRetainer, { retainMany: lifecycle.retainMany }), Effect.mapError((cause) => DoStorageError.make({
+				operation: "retain lifecycle start prefix",
+				message: "Lifecycle start intent could not be retained",
+				cause
+			})));
+			yield* progress.committed("canonical").pipe(Effect.catchCause((cause) => Effect.failCause(Cause.map(cause, (error) => DoStorageError.make({
+				operation: "enroll canonical progress",
+				message: error.message,
+				cause: error
+			})))));
+			return RawAppendResult.make({
+				firstSequence,
+				lastSequence,
+				replayed: false,
+				tailDigest: request.tailDigest
+			});
+		}));
+	}, withStorageSpan("DoJournal.append", isAppendContention));
+	const read = Effect.fnUntraced(function* (request) {
+		const thread = (yield* getThread(request.threadId))[0];
+		const through = Math.min(thread?.tail_sequence ?? 0, request.fromSequenceExclusive + request.limit);
+		const cached = [];
+		for (let sequence = request.fromSequenceExclusive + 1; sequence <= through; sequence++) {
+			const record = recordCache.get(request.threadId, sequence);
+			if (record === void 0) break;
+			cached.push(record);
+		}
+		if (cached.length === Math.max(0, through - request.fromSequenceExclusive)) return {
+			count: cached.length,
+			records: Stream.fromIterable(cached)
+		};
+		const planRows = yield* sql`
+      SELECT
+        sequence,
+        length(CAST(record_json AS BLOB)) AS record_json_bytes
+      FROM effect_agent_canonical_records
+      WHERE thread_id = ${request.threadId}
+        AND sequence > ${request.fromSequenceExclusive}
+      ORDER BY sequence
+      LIMIT ${request.limit}
+    `.pipe(Effect.mapError(storageError("read canonical records")));
+		const plan = yield* decodeRows(Schema.Array(ReadPlanRow), "effect_agent_canonical_records", `${request.threadId}>${request.fromSequenceExclusive}`, planRows, "ReadPlanRow");
+		const mismatch = () => DoStorageCorruptionError.make({
+			table: "effect_agent_canonical_records",
+			rowKey: `${request.threadId}>${request.fromSequenceExclusive}`,
+			message: "Canonical read membership, sequence, or payload size changed from its read plan."
+		});
+		if (plan.length > request.limit) return yield* mismatch();
+		const pages = [];
+		let page;
+		let pageBytes = 0;
+		let previousSequence = request.fromSequenceExclusive;
+		for (const row of plan) {
+			if (row.sequence !== previousSequence + 1) return yield* mismatch();
+			previousSequence = row.sequence;
+			if (page === void 0 || pageBytes + row.record_json_bytes > MAX_READ_PAGE_JSON_BYTES) {
+				page = [row];
+				pages.push(page);
+				pageBytes = row.record_json_bytes;
+			} else {
+				page.push(row);
+				pageBytes += row.record_json_bytes;
+			}
+		}
+		const readPage = Effect.fn("DoJournal.readPage")(function* (page) {
+			const rows = yield* sql`
+        SELECT thread_id, sequence, record_id, batch_id, record_json
+        FROM effect_agent_canonical_records
+        WHERE thread_id = ${request.threadId}
+          AND sequence >= ${page[0].sequence}
+          AND sequence <= ${page[page.length - 1].sequence}
+        ORDER BY sequence
+      `.pipe(Effect.mapError(storageError("read canonical records")));
+			const decoded = yield* decodeRows(Schema.Array(RecordRow), "effect_agent_canonical_records", `${request.threadId}/${page[0].sequence}`, rows, "RecordRow");
+			if (decoded.length !== page.length || decoded.some((row, index) => row.thread_id !== request.threadId || row.sequence !== page[index].sequence || storedTextBytes(row.record_json) !== page[index].record_json_bytes)) return yield* mismatch();
+			for (const row of decoded) recordCache.put(row);
+			return decoded;
+		});
+		return {
+			count: plan.length,
+			records: Stream.fromIterable(pages).pipe(Stream.flatMap((page) => Stream.fromIterableEffect(state.read(readPage(page)))))
+		};
+	});
+	const exportThread = Effect.fn("DoJournal.exportThread")(function* (threadId) {
+		return yield* state.transaction(Effect.gen(function* () {
+			const threadRows = yield* getThread(threadId);
+			const thread = yield* decodeSingleRow(Schema.Array(ThreadRow), "effect_agent_threads", threadId, threadRows);
+			yield* failpoint("export:after-thread-read");
+			if (thread.tail_sequence > MAX_RECORDS_PER_THREAD) return yield* DoStorageError.make({
+				operation: "export thread",
+				message: "The thread exceeds the current export record limit."
+			});
+			const records = [];
+			let afterSequence = ZERO_SEQUENCE;
+			while (afterSequence < thread.tail_sequence) {
+				const limit = Math.min(1024, thread.tail_sequence - afterSequence);
+				const request = RawReadRequest.make({
+					threadId,
+					fromSequenceExclusive: afterSequence,
+					limit
+				});
+				const plan = yield* read(request);
+				const page = yield* Stream.runCollect(plan.records);
+				if (page.length !== limit || page.some((record, index) => record.sequence !== afterSequence + index + 1)) return yield* DoStorageCorruptionError.make({
+					table: "effect_agent_canonical_records",
+					rowKey: threadId,
+					message: "The exported canonical prefix is not contiguous through its captured tail."
+				});
+				records.push(...page);
+				afterSequence = page[page.length - 1].sequence;
+			}
+			if ((yield* sql`SELECT sequence FROM effect_agent_canonical_records WHERE thread_id=${threadId} AND sequence > ${thread.tail_sequence} LIMIT 1`.pipe(Effect.mapError(storageError("verify export tail")))).length !== 0) return yield* DoStorageCorruptionError.make({
+				table: "effect_agent_canonical_records",
+				rowKey: threadId,
+				message: "Canonical records exist beyond the captured thread tail."
+			});
+			return RawThreadExport.make({
+				thread,
+				records
+			});
+		})).pipe(Effect.provideService(SqlClient$1.SqlClient, sql), Effect.catchTag("SqlError", (error) => Effect.fail(storageError("export transaction")(error))));
+	});
+	const saveCheckpoint = Effect.fn("DoJournal.saveCheckpoint")(function* (checkpoint) {
+		if (checkpoint.threadId.length > MAX_IDENTIFIER_LENGTH) return yield* DoStorageError.make({
+			operation: "save checkpoint",
+			message: "Checkpoint identity exceeds the Durable Object storage bounds."
+		});
+		yield* checkValueBound("save checkpoint", checkpoint.checkpointJson);
+		yield* withWriteTransaction("checkpoint transaction")(Effect.gen(function* () {
+			const threadRows = yield* getThread(checkpoint.threadId);
+			const thread = yield* decodeSingleRow(Schema.Array(ThreadRow), "effect_agent_threads", checkpoint.threadId, threadRows);
+			if (checkpoint.throughSequence > thread.tail_sequence) return yield* DoCheckpointConflict.make({ message: `Checkpoint sequence ${checkpoint.throughSequence} is after canonical tail ${thread.tail_sequence}.` });
+			const checkpointRows = yield* sql`
+          SELECT
+            thread_id,
+            through_sequence,
+            tail_digest,
+            checkpoint_json
+          FROM effect_agent_checkpoints
+          WHERE thread_id = ${checkpoint.threadId}
+            AND through_sequence = ${checkpoint.throughSequence}
+        `.pipe(Effect.mapError(storageError("read idempotent checkpoint")));
+			const existing = yield* decodeRows(Schema.Array(CheckpointRow), "effect_agent_checkpoints", `${checkpoint.threadId}/${checkpoint.throughSequence}`, checkpointRows);
+			if (existing.length > 1) return yield* DoStorageCorruptionError.make({
+				table: "effect_agent_checkpoints",
+				rowKey: `${checkpoint.threadId}/${checkpoint.throughSequence}`,
+				message: "A checkpoint primary key returned more than one row."
+			});
+			if (existing.length === 1) {
+				if (existing[0].tail_digest !== checkpoint.tailDigest || existing[0].checkpoint_json !== checkpoint.checkpointJson) return yield* DoCheckpointConflict.make({ message: "A different checkpoint already exists at this canonical sequence." });
+				return;
+			}
+			yield* sql`
+          INSERT INTO effect_agent_checkpoints (
+            thread_id,
+            through_sequence,
+            tail_digest,
+            checkpoint_json
+          ) VALUES (
+            ${checkpoint.threadId},
+            ${checkpoint.throughSequence},
+            ${checkpoint.tailDigest},
+            ${checkpoint.checkpointJson}
+          )
+        `.pipe(Effect.mapError(storageError("insert checkpoint")));
+		}));
+	});
+	const saveRecoveryCheckpoint = Effect.fn("DoJournal.saveRecoveryCheckpoint")(function* (request, checkpointJson) {
+		const { checkpoint } = request;
+		if (checkpoint.threadId.length > MAX_IDENTIFIER_LENGTH) return yield* DoStorageError.make({
+			operation: "save recovery checkpoint",
+			message: "Checkpoint identity exceeds the Durable Object storage bounds."
+		});
+		yield* checkValueBound("save recovery checkpoint", checkpointJson);
+		yield* failpoint("save-recovery-checkpoint:before");
+		yield* withWriteTransaction("recovery checkpoint transaction")(Effect.gen(function* () {
+			const thread = (yield* getThread(checkpoint.threadId))[0];
+			if (thread === void 0) return yield* ThreadNotMaterialized.make({ threadId: checkpoint.threadId });
+			if (request.producerEpoch !== thread.producer_epoch) return yield* FenceRejected.make({
+				threadId: checkpoint.threadId,
+				actualEpoch: thread.producer_epoch,
+				attemptedEpoch: request.producerEpoch
+			});
+			if (checkpoint.throughSequence > thread.tail_sequence) return yield* CheckpointRejected.make({
+				threadId: checkpoint.threadId,
+				reason: "ahead-of-tail"
+			});
+			const digests = checkpoint.throughSequence === 0 ? [EMPTY_TAIL_DIGEST] : yield* getTailDigestAt(checkpoint.threadId, checkpoint.throughSequence);
+			if (digests.length !== 1 || digests[0] !== checkpoint.tailDigest) return yield* CheckpointRejected.make({
+				threadId: checkpoint.threadId,
+				reason: "digest-mismatch"
+			});
+			yield* sql`
+          INSERT INTO effect_agent_recovery_checkpoints (thread_id, through_sequence, tail_digest, checkpoint_json)
+          VALUES (${checkpoint.threadId}, ${checkpoint.throughSequence}, ${checkpoint.tailDigest}, ${checkpointJson})
+          ON CONFLICT (thread_id) DO UPDATE SET
+            through_sequence = excluded.through_sequence,
+            tail_digest = excluded.tail_digest,
+            checkpoint_json = excluded.checkpoint_json
+          WHERE excluded.through_sequence >= effect_agent_recovery_checkpoints.through_sequence
+          RETURNING *
+        `.pipe(recovery.write, Effect.mapError((error) => error._tag === "SqlError" ? storageError("save recovery checkpoint")(error) : error));
+		}));
+		yield* failpoint("save-recovery-checkpoint:after");
+	});
+	const loadRecoveryCheckpoint = Effect.fn("DoJournal.loadRecoveryCheckpoint")(function* (threadId) {
+		return yield* recovery.by("thread_id", threadId).pipe(Effect.mapError((error) => error._tag === "SqlError" ? storageError("load recovery checkpoint")(error) : error));
+	});
+	const loadCheckpoint = Effect.fn("DoJournal.loadCheckpoint")(function* (threadId, atOrBeforeSequence) {
+		const rows = yield* sql`
+      SELECT
+        thread_id,
+        through_sequence,
+        tail_digest,
+        checkpoint_json
+      FROM effect_agent_checkpoints
+      WHERE thread_id = ${threadId}
+        AND through_sequence <= ${atOrBeforeSequence}
+      ORDER BY through_sequence DESC
+      LIMIT 1
+    `.pipe(Effect.mapError(storageError("load checkpoint")));
+		return yield* decodeRows(Schema.Array(CheckpointRow), "effect_agent_checkpoints", `${threadId}<=${atOrBeforeSequence}`, rows);
+	});
+	const getTailDigestAt = Effect.fn("DoJournal.getTailDigestAt")(function* (threadId, sequence) {
+		const thread = (yield* getThread(threadId))[0];
+		if (thread !== void 0 && sequence === thread.tail_sequence) return [thread.tail_digest];
+		if (sequence === 0) {
+			const threads = yield* getThread(threadId);
+			return threads.length === 0 ? [] : [threads[0].tail_sequence === 0 ? threads[0].tail_digest : void 0].filter((value) => value !== void 0);
+		}
+		const rows = yield* sql`
+      SELECT
+        thread_id,
+        batch_id,
+        first_sequence,
+        last_sequence,
+        batch_digest,
+        tail_digest,
+        batch_json
+      FROM effect_agent_canonical_batches
+      WHERE thread_id = ${threadId}
+        AND batch_id = (
+          SELECT batch_id FROM effect_agent_canonical_records
+          WHERE thread_id = ${threadId} AND sequence = ${sequence}
+        )
+        AND last_sequence = ${sequence}
+    `.pipe(Effect.mapError(storageError("read canonical digest at sequence")));
+		return (yield* decodeRows(Schema.Array(BatchRow), "effect_agent_canonical_batches", `${threadId}/${sequence}`, rows)).map((batch) => batch.tail_digest);
+	});
+	const scanStoredPayloads = Effect.fn("DoJournal.scanStoredPayloads")(function* () {
+		return yield* state.transaction(Effect.gen(function* () {
+			const threads = yield* sql`
+            SELECT
+              thread_id,
+              created_at,
+              tail_sequence,
+              tail_digest,
+              producer_epoch
+            FROM effect_agent_threads
+            ORDER BY thread_id
+          `.pipe(Effect.mapError(storageError("scan threads")));
+			const batches = yield* sql`
+            SELECT
+              thread_id,
+              batch_id,
+              first_sequence,
+              last_sequence,
+              batch_digest,
+              tail_digest,
+              batch_json
+            FROM effect_agent_canonical_batches
+            ORDER BY thread_id, first_sequence
+          `.pipe(Effect.mapError(storageError("scan canonical batches")));
+			const records = yield* sql`
+            SELECT
+              thread_id,
+              sequence,
+              record_id,
+              batch_id,
+              record_json
+            FROM effect_agent_canonical_records
+            ORDER BY thread_id, sequence
+          `.pipe(Effect.mapError(storageError("scan canonical records")));
+			const checkpoints = yield* sql`
+            SELECT
+              thread_id,
+              through_sequence,
+              tail_digest,
+              checkpoint_json
+            FROM effect_agent_checkpoints
+            ORDER BY thread_id, through_sequence
+          `.pipe(Effect.mapError(storageError("scan checkpoints")));
+			return {
+				threads: yield* decodeRows(Schema.Array(ThreadRow), "effect_agent_threads", "startup_scan", threads),
+				batches: yield* decodeRows(Schema.Array(BatchRow), "effect_agent_canonical_batches", "startup_scan", batches),
+				records: yield* decodeRows(Schema.Array(RecordRow), "effect_agent_canonical_records", "startup_scan", records),
+				checkpoints: yield* decodeRows(Schema.Array(CheckpointRow), "effect_agent_checkpoints", "startup_scan", checkpoints)
+			};
+		})).pipe(Effect.provideService(SqlClient$1.SqlClient, sql), Effect.catchTag("SqlError", (error) => Effect.fail(storageError("startup scan transaction")(error))));
+	});
+	const sourceFailure = (cause) => LifecyclePublicationError.make({
+		reason: "unavailable",
+		cause
+	});
+	const sourceThreads = Effect.fnUntraced(function* () {
+		const all = yield* threads.matching("lifecycle-owners", () => true, sql`SELECT * FROM effect_agent_threads LIMIT 129`, 128);
+		if (all.length <= 128) return all;
+		return yield* Schema.decodeUnknownEffect(Schema.Array(ThreadRow))(yield* sql`SELECT t.* FROM effect_agent_threads t LEFT JOIN effect_agent_lifecycle_cursors c ON c.thread_id=t.thread_id
+        WHERE c.thread_id IS NULL OR t.tail_sequence > c.through_sequence ORDER BY t.thread_id LIMIT 128`);
+	});
+	const initializeLifecycleSource = Effect.fnUntraced(function* () {
+		if (initializedLifecycleSources.has(state)) return;
+		yield* state.transaction(Effect.gen(function* () {
+			if ((yield* sql`SELECT name FROM sqlite_master WHERE name='effect_agent_lifecycle_cursors'`).length === 0) yield* sql`CREATE TABLE effect_agent_lifecycle_cursors (
+        thread_id TEXT PRIMARY KEY, through_sequence INTEGER NOT NULL
+      )`;
+			yield* sql`INSERT INTO effect_agent_lifecycle_cursors(thread_id, through_sequence)
+        SELECT thread_id, tail_sequence FROM effect_agent_threads WHERE true
+        ON CONFLICT(thread_id) DO NOTHING`;
+			yield* sourceThreads();
+		})).pipe(Effect.provideService(SqlClient$1.SqlClient, sql), Effect.mapError((cause) => DoStorageError.make({
+			operation: "initialize lifecycle source",
+			message: "Lifecycle source cursor unavailable",
+			cause
+		})));
+		initializedLifecycleSources.add(state);
+	});
+	/** The journal is durable intent; only the bounded publication wave materializes a write set. */
+	const flushCanonical = Effect.fnUntraced(function* (threadId, maxRecords = Infinity) {
+		const { retainMany } = yield* SqlLifecycleRetainer;
+		const thread = (yield* getThread(threadId))[0];
+		if (thread === void 0) return;
+		const cursor = (yield* cursors.by("thread_id", threadId))[0];
+		if (cursor === void 0 || cursor.through_sequence > thread.tail_sequence) return yield* LifecyclePublicationError.make({ reason: "corrupt" });
+		let through = cursor.through_sequence;
+		const bound = Math.min(thread.tail_sequence, through + maxRecords);
+		while (through < bound) {
+			const page = yield* read(RawReadRequest.make({
+				threadId,
+				fromSequenceExclusive: through,
+				limit: Math.min(128, bound - through)
+			}));
+			const facts = [];
+			let bytes = 0;
+			yield* Stream.runForEach(page.records, (row) => Effect.gen(function* () {
+				const record = yield* Schema.decodeEffect(Schema.fromJsonString(CanonicalRecord))(row.record_json);
+				if (record.recordId !== row.record_id || row.sequence !== through + 1) return yield* LifecyclePublicationError.make({ reason: "corrupt" });
+				if (Schema.is(Schema.toType(LifecyclePublicationFact))(record.payload)) {
+					if (bytes + storedTextBytes(row.record_json) > MAX_READ_PAGE_JSON_BYTES && facts.length > 0) {
+						yield* retainMany(facts);
+						facts.length = 0;
+						bytes = 0;
+					}
+					facts.push({
+						id: JSON.stringify([
+							threadId,
+							"record",
+							record.recordId
+						]),
+						ownerThreadId: yield* Schema.decodeEffect(ThreadId)(threadId),
+						canonicalSequence: row.sequence,
+						createdAt: record.createdAt,
+						fact: record.payload
+					});
+					bytes += storedTextBytes(row.record_json);
+				}
+				through = row.sequence;
+			}));
+			if (page.count === 0) return yield* LifecyclePublicationError.make({ reason: "corrupt" });
+			yield* retainMany(facts);
+			yield* sql`UPDATE effect_agent_lifecycle_cursors SET through_sequence=${through} WHERE thread_id=${threadId} RETURNING *`.pipe(cursors.write);
+		}
+	}, Effect.mapError(sourceFailure));
+	const flushPublications = Effect.fnUntraced(function* () {
+		let owners = 0;
+		for (const thread of yield* sourceThreads()) {
+			const cursor = (yield* cursors.by("thread_id", thread.thread_id))[0];
+			if (cursor !== void 0 && cursor.through_sequence === thread.tail_sequence) continue;
+			yield* flushCanonical(thread.thread_id, 1024);
+			if (++owners === 4) break;
+		}
+	}, Effect.mapError(sourceFailure));
+	const sourcePending = Effect.gen(function* () {
+		for (const thread of yield* sourceThreads()) {
+			const cursor = (yield* cursors.by("thread_id", thread.thread_id))[0];
+			if (cursor === void 0 || cursor.through_sequence > thread.tail_sequence) return yield* LifecyclePublicationError.make({ reason: "corrupt" });
+			if (cursor.through_sequence < thread.tail_sequence) return true;
+		}
+		return false;
+	}).pipe(Effect.mapError(sourceFailure));
+	return {
+		state,
+		owner,
+		threads,
+		lifecycle: lifecycle === void 0 ? void 0 : {
+			...lifecycle,
+			storage: {
+				...lifecycle.storage,
+				retainedPendingDeadline: lifecycle.storage.pendingDeadline,
+				pendingDeadline: state.read(Effect.gen(function* () {
+					const deadline = yield* lifecycle.storage.pendingDeadline;
+					if (!(yield* sourcePending)) return deadline;
+					const now = yield* Clock.currentTimeMillis;
+					return Option.some(Option.isSome(deadline) ? Math.min(now, deadline.value) : now);
+				}))
+			}
+		},
+		initializeLifecycleSource,
+		flushCanonical,
+		flushPublications,
+		append,
+		checkValueBound,
+		exportThread,
+		getThread,
+		hasRecord,
+		getTailDigestAt,
+		loadCheckpoint,
+		loadRecoveryCheckpoint,
+		saveRecoveryCheckpoint,
+		materialize,
+		read: (request) => state.read(read(request)),
+		saveCheckpoint,
+		scanStoredPayloads,
+		withWriteTransaction
+	};
+});
+const initializeDoJournal = ensureCurrentStorage;
+//#endregion
+export { initializeDoJournal as a, decodeRows as i, RawCheckpoint as n, isAppendContention as o, RawReadRequest as r, withStorageSpan as s, RawAppendRequest as t };
+
+//# sourceMappingURL=do-journal-DUhjZkOf.mjs.map