@yielded/agent-storage-cloudflare 0.1.0-beta.167 → 0.1.0-beta.168

package/dist/DoThreadStore.mjs

@@ -1,529 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { DoStorageConfig, DoStorageConfigValue } from "./DoStorageConfig.mjs";
-import { DoStorageFailpoint } from "./DoStorageFailpoint.mjs";
-import { DoAppendConflict, DoCheckpointConflict, DoFenceRejected, DoStorageCorruptionError, DoStorageError } from "./DoStorageError.mjs";
-import { r as ownedState, t as invalidateOwnedState } from "./owned-state-DHm2aRXx.mjs";
-import { a as initializeDoJournal, n as RawCheckpoint, o as isAppendContention, r as RawReadRequest, s as withStorageSpan, t as RawAppendRequest } from "./do-journal-DUhjZkOf.mjs";
-import { SqlStorageOwner } from "@yielded/agent/sql-memory-store";
-import { Clock, Context, Crypto, Duration, Effect, Layer, Option, Ref, Schema, Stream } from "effect";
-import * as SqlClientService from "effect/sql/SqlClient";
-import { SqliteClient } from "@effect/sql-sqlite-do";
-import { SelectedReadOwner, makeSelectedReads } from "@yielded/agent-storage-sql/sql-thread-native-reads";
-import { EMPTY_TAIL_DIGEST, digestCanonicalBatch } from "@yielded/agent/digest";
-import { CanonicalBatch, CanonicalRecord, CanonicalRecordEnvelope, CanonicalSequence, Digest, ObservationOffset } from "@yielded/agent/records";
-import { AppendConflict, AppendResult, CheckpointRejected, FenceRejected, FencedAppendRequest, LoadCheckpointRequest, MAX_THREAD_EXPORT_RECORDS, SaveCheckpointRequest, SaveRecoveryCheckpointRequest, ThreadCheckpoint, ThreadExport, ThreadExportRequest, ThreadMaterialization, ThreadNotMaterialized, ThreadObservation, ThreadReadRequest, ThreadStore, ThreadStoreDiagnostic, ThreadStoreError, ThreadTail, ThreadTailRequest } from "@yielded/agent/thread-store";
-import { BrowserCrypto } from "@effect/platform-browser";
-import { DEFAULT_OWNERSHIP_LEASE_DURATION } from "@yielded/agent/submission-ledger";
-//#region src/DoThreadStore.ts
-var DoThreadStore_exports = /* @__PURE__ */ __exportAll({
-	invalidate: () => invalidate,
-	layer: () => layer,
-	sqlOwnerLayer: () => sqlOwnerLayer,
-	storageConfigLayer: () => storageConfigLayer,
-	storageFailpointLayer: () => storageFailpointLayer,
-	threadStoreLayer: () => threadStoreLayer
-});
-const OffsetText = Schema.String.check(Schema.isMaxLength(4096));
-const DO_OFFSET_PREFIX = "effect-agent-do@1:";
-const ZERO_CANONICAL_SEQUENCE = Schema.decodeSync(CanonicalSequence)(0);
-const isDigest = Schema.is(Digest);
-const isDoFenceRejected = Schema.is(DoFenceRejected);
-const isDoAppendConflict = Schema.is(DoAppendConflict);
-const isDoCheckpointConflict = Schema.is(DoCheckpointConflict);
-const CanonicalRecordJson = Schema.fromJsonString(CanonicalRecord);
-const CanonicalBatchJson = Schema.fromJsonString(CanonicalBatch);
-const ThreadCheckpointJson = Schema.fromJsonString(ThreadCheckpoint);
-const decodeCanonicalRecord = Schema.decodeEffect(CanonicalRecordJson);
-const storeError = (operation, error) => ThreadStoreError.make({
-	cause: error,
-	operation,
-	message: error.message,
-	...error.diagnostic === void 0 ? {} : { diagnostic: error.diagnostic }
-});
-const schemaStoreError = (operation, error) => ThreadStoreError.make({
-	operation,
-	message: "A Thread storage value does not satisfy its schema",
-	diagnostic: ThreadStoreDiagnostic.make({
-		causeTag: error._tag,
-		operation,
-		issueTag: error.issue._tag
-	})
-});
-const makeOffset = Effect.fn(function* (threadId, sequence) {
-	return yield* Schema.decodeEffect(CanonicalSequence)(sequence).pipe(Effect.flatMap((validatedSequence) => Schema.decodeEffect(ObservationOffset)(`${DO_OFFSET_PREFIX}${encodeURIComponent(threadId)}:${validatedSequence}`)), Effect.mapError((error) => schemaStoreError("encode observation offset", error)));
-});
-const parseOffset = Effect.fn(function* (threadId, offset) {
-	if (offset === void 0) return ZERO_CANONICAL_SEQUENCE;
-	const text = yield* Schema.decodeEffect(OffsetText)(offset).pipe(Effect.mapError((error) => schemaStoreError("decode observation offset", error)));
-	const threadPrefix = `${DO_OFFSET_PREFIX}${encodeURIComponent(threadId)}:`;
-	if (!text.startsWith(threadPrefix)) return yield* ThreadStoreError.make({
-		operation: "decode observation offset",
-		message: "The observation offset belongs to a different adapter, storage version, or Thread."
-	});
-	const sequenceText = text.slice(threadPrefix.length);
-	if (!/^(0|[1-9][0-9]*)$/.test(sequenceText)) return yield* ThreadStoreError.make({
-		operation: "decode observation offset",
-		message: "The observation offset is malformed."
-	});
-	return yield* Schema.decodeEffect(CanonicalSequence)(Number(sequenceText)).pipe(Effect.mapError((error) => schemaStoreError("decode observation offset", error)));
-});
-const mapFence = (threadId, error) => FenceRejected.make({
-	threadId,
-	actualEpoch: error.actualEpoch,
-	attemptedEpoch: error.producerEpoch
-});
-const encodeCanonicalRecord = Effect.fn(function* (record) {
-	return yield* Schema.encodeEffect(CanonicalRecordJson)(record).pipe(Effect.mapError((error) => schemaStoreError("encode canonical record", error)));
-});
-const encodeCanonicalBatch = Effect.fn(function* (batch) {
-	return yield* Schema.encodeEffect(CanonicalBatchJson)(batch).pipe(Effect.mapError((error) => schemaStoreError("encode canonical batch", error)));
-});
-const encodeCheckpoint = Effect.fn(function* (checkpoint) {
-	return yield* Schema.encodeEffect(ThreadCheckpointJson)(checkpoint).pipe(Effect.mapError((error) => schemaStoreError("encode checkpoint", error)));
-});
-const envelopes = /* @__PURE__ */ new WeakMap();
-const decodeEnvelope = Effect.fnUntraced(function* (row) {
-	const cached = envelopes.get(row);
-	if (cached !== void 0) return cached;
-	const record = yield* decodeCanonicalRecord(row.record_json).pipe(Effect.mapError((error) => ThreadStoreError.make({
-		operation: "decode canonical record",
-		message: "The canonical record does not satisfy its schema",
-		diagnostic: ThreadStoreDiagnostic.make({
-			causeTag: error._tag,
-			operation: "decode canonical record",
-			decoder: "CanonicalRecord",
-			sequence: row.sequence,
-			issueTag: error.issue._tag
-		})
-	})), Effect.tapError((error) => Effect.annotateCurrentSpan({
-		"storage.failure.operation": error.diagnostic?.operation,
-		"storage.failure.cause": error.diagnostic?.causeTag,
-		"storage.failure.decoder": error.diagnostic?.decoder,
-		"storage.failure.sequence": row.sequence,
-		"storage.failure.issue": error.diagnostic?.issueTag
-	})));
-	const threadId = yield* Schema.decodeEffect(CanonicalRecordEnvelope.fields.threadId)(row.thread_id).pipe(Effect.mapError((error) => schemaStoreError("decode thread identity", error)));
-	const offset = yield* makeOffset(threadId, row.sequence);
-	const batchId = yield* Schema.decodeEffect(CanonicalRecordEnvelope.fields.batchId)(row.batch_id).pipe(Effect.mapError((error) => schemaStoreError("decode batch identity", error)));
-	const envelope = CanonicalRecordEnvelope.make({
-		threadId,
-		batchId,
-		sequence: row.sequence,
-		offset,
-		record
-	});
-	envelopes.set(row, envelope);
-	return envelope;
-});
-const decodeCheckpoint = Effect.fn(function* (checkpointJson) {
-	return yield* Schema.decodeEffect(Schema.fromJsonString(ThreadCheckpoint))(checkpointJson).pipe(Effect.mapError((error) => schemaStoreError("decode checkpoint", error)));
-});
-const requireThread = Effect.fn("DoThreadStore.requireThread")(function* (journal, threadId) {
-	const rows = yield* journal.getThread(threadId).pipe(Effect.mapError((error) => storeError("read thread", error)));
-	if (rows.length === 0) return yield* ThreadNotMaterialized.make({ threadId });
-	return rows[0];
-});
-const tailDigestAt = Effect.fn("DoThreadStore.tailDigestAt")(function* (journal, threadId, sequence) {
-	if (sequence === 0) return EMPTY_TAIL_DIGEST;
-	const digests = yield* journal.getTailDigestAt(threadId, sequence).pipe(Effect.mapError((error) => storeError("read checkpoint digest", error)));
-	if (digests.length !== 1) return yield* CheckpointRejected.make({
-		threadId,
-		reason: "digest-mismatch"
-	});
-	return yield* Schema.decodeEffect(Digest)(digests[0]).pipe(Effect.mapError((error) => schemaStoreError("decode checkpoint digest", error)));
-});
-const groupByKey = (rows, key) => {
-	const grouped = /* @__PURE__ */ new Map();
-	for (const row of rows) {
-		const existing = grouped.get(key(row));
-		if (existing === void 0) grouped.set(key(row), [row]);
-		else existing.push(row);
-	}
-	return grouped;
-};
-/**
-* Opt-in integrity audit (`verifyOnOpen`) of canonical payloads, their digest chains and generic
-* projection checkpoints. Disposable recovery checkpoints are validated when loaded. Routine opens
-* skip this scan: per-operation Schema decoding fails clearly on corrupt canonical rows.
-*/
-const decodeStartupPayloads = Effect.fn("DoThreadStore.decodeStartupPayloads")(function* (journal, crypto) {
-	const stored = yield* journal.scanStoredPayloads();
-	const batches = yield* Effect.forEach(stored.batches, (batch) => Schema.decodeEffect(Schema.fromJsonString(CanonicalBatch))(batch.batch_json).pipe(Effect.map((decoded) => ({
-		decoded,
-		row: batch
-	})), Effect.mapError((error) => DoStorageCorruptionError.make({
-		table: "effect_agent_canonical_batches",
-		rowKey: `${batch.thread_id}/${batch.batch_id}`,
-		message: error.message
-	}))));
-	const records = yield* Effect.forEach(stored.records, (record) => Schema.decodeEffect(Schema.fromJsonString(CanonicalRecord))(record.record_json).pipe(Effect.map((decoded) => ({
-		decoded,
-		row: record
-	})), Effect.mapError((error) => DoStorageCorruptionError.make({
-		table: "effect_agent_canonical_records",
-		rowKey: `${record.thread_id}/${record.sequence}`,
-		message: error.message
-	}))));
-	const checkpoints = yield* Effect.forEach(stored.checkpoints, (checkpoint) => Schema.decodeEffect(Schema.fromJsonString(ThreadCheckpoint))(checkpoint.checkpoint_json).pipe(Effect.map((decoded) => ({
-		decoded,
-		row: checkpoint
-	})), Effect.mapError((error) => DoStorageCorruptionError.make({
-		table: "effect_agent_checkpoints",
-		rowKey: `${checkpoint.thread_id}/${checkpoint.through_sequence}`,
-		message: error.message
-	}))));
-	const batchesByThread = groupByKey(batches, ({ row }) => row.thread_id);
-	const recordsByThread = groupByKey(records, ({ row }) => row.thread_id);
-	const checkpointsByThread = groupByKey(checkpoints, ({ row }) => row.thread_id);
-	const materializedIds = new Set(stored.threads.map((thread) => thread.thread_id));
-	for (const thread of stored.threads) {
-		const threadBatches = batchesByThread.get(thread.thread_id) ?? [];
-		const threadRecords = recordsByThread.get(thread.thread_id) ?? [];
-		const threadCheckpoints = checkpointsByThread.get(thread.thread_id) ?? [];
-		const recordsByBatch = groupByKey(threadRecords, ({ row }) => row.batch_id);
-		let previousDigest = EMPTY_TAIL_DIGEST;
-		let expectedSequence = 1;
-		const tailDigests = /* @__PURE__ */ new Map([[0, EMPTY_TAIL_DIGEST]]);
-		for (const { decoded: canonicalBatch, row: batchRow } of threadBatches) {
-			const key = `${batchRow.thread_id}/${batchRow.batch_id}`;
-			if (canonicalBatch.batchId !== batchRow.batch_id || batchRow.first_sequence !== expectedSequence || batchRow.last_sequence !== batchRow.first_sequence + canonicalBatch.records.length - 1) return yield* DoStorageCorruptionError.make({
-				table: "effect_agent_canonical_batches",
-				rowKey: key,
-				message: "Canonical batch identity, sequence, or record count is inconsistent."
-			});
-			const digest = yield* digestCanonicalBatch(previousDigest, canonicalBatch).pipe(Effect.provideService(Crypto.Crypto, crypto), Effect.mapError((error) => DoStorageCorruptionError.make({
-				table: "effect_agent_canonical_batches",
-				rowKey: key,
-				message: error.message
-			})));
-			if (batchRow.batch_digest !== digest || batchRow.tail_digest !== digest) return yield* DoStorageCorruptionError.make({
-				table: "effect_agent_canonical_batches",
-				rowKey: key,
-				message: "Canonical batch digest does not match its decoded content and prior tail."
-			});
-			const batchRecords = recordsByBatch.get(batchRow.batch_id) ?? [];
-			if (batchRecords.length !== canonicalBatch.records.length) return yield* DoStorageCorruptionError.make({
-				table: "effect_agent_canonical_records",
-				rowKey: key,
-				message: "Canonical batch and record-table counts differ."
-			});
-			for (let index = 0; index < canonicalBatch.records.length; index++) {
-				const expectedRecord = canonicalBatch.records[index];
-				const storedRecord = batchRecords[index];
-				const expectedJson = yield* Schema.encodeEffect(Schema.fromJsonString(CanonicalRecord))(expectedRecord).pipe(Effect.mapError((error) => DoStorageCorruptionError.make({
-					table: "effect_agent_canonical_batches",
-					rowKey: key,
-					message: error.message
-				})));
-				const storedJson = yield* Schema.encodeEffect(Schema.fromJsonString(CanonicalRecord))(storedRecord.decoded).pipe(Effect.mapError((error) => DoStorageCorruptionError.make({
-					table: "effect_agent_canonical_records",
-					rowKey: `${key}/${storedRecord.row.sequence}`,
-					message: error.message
-				})));
-				if (storedRecord.row.sequence !== batchRow.first_sequence + index || storedRecord.row.record_id !== expectedRecord.recordId || expectedJson !== storedJson) return yield* DoStorageCorruptionError.make({
-					table: "effect_agent_canonical_records",
-					rowKey: `${key}/${storedRecord.row.sequence}`,
-					message: "Canonical record identity, sequence, or payload differs from its batch."
-				});
-			}
-			previousDigest = digest;
-			expectedSequence = batchRow.last_sequence + 1;
-			tailDigests.set(batchRow.last_sequence, digest);
-		}
-		if (threadRecords.length !== thread.tail_sequence || thread.tail_sequence !== expectedSequence - 1 || thread.tail_digest !== previousDigest) return yield* DoStorageCorruptionError.make({
-			table: "effect_agent_threads",
-			rowKey: thread.thread_id,
-			message: "Thread tail does not match its canonical batch chain."
-		});
-		for (const checkpoint of threadCheckpoints) if (checkpoint.decoded.threadId !== thread.thread_id || checkpoint.decoded.throughSequence !== checkpoint.row.through_sequence || checkpoint.decoded.tailDigest !== checkpoint.row.tail_digest || tailDigests.get(checkpoint.row.through_sequence) !== checkpoint.row.tail_digest) return yield* DoStorageCorruptionError.make({
-			table: "effect_agent_checkpoints",
-			rowKey: `${thread.thread_id}/${checkpoint.row.through_sequence}`,
-			message: "Checkpoint identity or digest is not bound to a canonical batch tail."
-		});
-	}
-	if (batches.some(({ row }) => !materializedIds.has(row.thread_id)) || records.some(({ row }) => !materializedIds.has(row.thread_id)) || checkpoints.some(({ row }) => !materializedIds.has(row.thread_id))) return yield* DoStorageCorruptionError.make({
-		table: "effect_agent_threads",
-		rowKey: "startup_scan",
-		message: "Canonical rows exist without a materialized Thread."
-	});
-});
-const makeServices = Effect.fn("DoThreadStore.makeServices")(function* () {
-	const config = yield* DoStorageConfig;
-	const failpoint = yield* DoStorageFailpoint;
-	const sql = yield* SqlClientService.SqlClient;
-	const crypto = yield* Crypto.Crypto;
-	const journal = yield* initializeDoJournal(sql, failpoint.hit, config.maxStoredValueBytes);
-	if (config.verifyOnOpen) yield* decodeStartupPayloads(journal, crypto);
-	const provideCrypto = (effect) => Effect.provideService(effect, Crypto.Crypto, crypto);
-	const hitFailpoint = Effect.fn((location) => failpoint.hit(location).pipe(Effect.mapError((error) => storeError(`storage failpoint ${location}`, error))));
-	const materialize = Effect.fnUntraced(function* (request) {
-		const validated = yield* Schema.decodeEffect(Schema.toType(ThreadMaterialization))(request).pipe(Effect.mapError((error) => schemaStoreError("validate materialization", error)));
-		const now = yield* Clock.currentTimeMillis;
-		yield* hitFailpoint("materialize:before");
-		yield* journal.materialize(validated.threadId, new Date(now).toISOString(), EMPTY_TAIL_DIGEST, validated.producerEpoch).pipe(Effect.mapError((error) => error._tag === "DoFenceRejected" ? mapFence(validated.threadId, error) : storeError("materialize thread", error)));
-		yield* hitFailpoint("materialize:after");
-	}, withStorageSpan("DoThreadStore.materialize", (error) => error._tag === "FenceRejected"));
-	const append = Effect.fnUntraced(function* (request) {
-		const validated = yield* Schema.decodeEffect(Schema.toType(FencedAppendRequest))(request).pipe(Effect.mapError((error) => schemaStoreError("validate canonical append", error)));
-		const observed = yield* requireThread(journal, validated.threadId);
-		const tailDigest = yield* provideCrypto(digestCanonicalBatch(validated.expectedTailDigest, validated.batch)).pipe(Effect.mapError((error) => storeError("digest canonical append", error)));
-		const batchJson = yield* encodeCanonicalBatch(validated.batch);
-		const rawRecords = yield* Effect.forEach(validated.batch.records, (record) => encodeCanonicalRecord(record).pipe(Effect.map((recordJson) => ({
-			recordId: record.recordId,
-			recordJson
-		}))));
-		const rawRequest = yield* Schema.decodeEffect(RawAppendRequest)({
-			threadId: validated.threadId,
-			batchId: validated.batch.batchId,
-			batchDigest: tailDigest,
-			batchJson,
-			expectedTailSequence: validated.expectedTailSequence,
-			expectedTailDigest: validated.expectedTailDigest,
-			producerEpoch: validated.producerEpoch,
-			records: rawRecords,
-			tailDigest
-		}).pipe(Effect.mapError((error) => schemaStoreError("encode canonical append", error)));
-		yield* hitFailpoint("append:before");
-		const result = yield* journal.append(rawRequest, observed).pipe(Effect.mapError((error) => {
-			if (isDoFenceRejected(error)) return mapFence(validated.threadId, error);
-			if (isDoAppendConflict(error)) return error.actualTailSequence !== void 0 && isDigest(error.actualTailDigest) ? AppendConflict.make({
-				threadId: validated.threadId,
-				batchId: validated.batch.batchId,
-				reason: error.reason,
-				actualTailSequence: error.actualTailSequence,
-				actualTailDigest: error.actualTailDigest
-			}) : AppendConflict.make({
-				threadId: validated.threadId,
-				batchId: validated.batch.batchId,
-				reason: error.reason
-			});
-			return storeError("append canonical batch", error);
-		}), Effect.flatMap((result) => Schema.decodeEffect(AppendResult)(result).pipe(Effect.mapError((error) => schemaStoreError("decode append result", error)))));
-		yield* hitFailpoint("append:after");
-		return result;
-	}, withStorageSpan("DoThreadStore.append", isAppendContention));
-	const loadRecords = Effect.fnUntraced(function* (request) {
-		const result = yield* journal.read(request).pipe(Effect.mapError((error) => storeError("read canonical records", error)));
-		return {
-			count: result.count,
-			records: result.records.pipe(Stream.mapError((error) => storeError("read canonical records", error)), Stream.mapEffect(decodeEnvelope))
-		};
-	});
-	const readEffect = Effect.fn("DoThreadStore.read")(function* (request) {
-		const validated = yield* Schema.decodeEffect(Schema.toType(ThreadReadRequest))(request).pipe(Effect.mapError((error) => schemaStoreError("validate thread read", error)));
-		if ("selection" in validated) return Stream.fromIterable(yield* selectedReads.read(validated));
-		yield* requireThread(journal, validated.threadId);
-		return (yield* loadRecords(RawReadRequest.make({
-			threadId: validated.threadId,
-			fromSequenceExclusive: validated.afterSequence ?? ZERO_CANONICAL_SEQUENCE,
-			limit: validated.limit
-		}))).records;
-	});
-	const read = (request) => Stream.unwrap(readEffect(request));
-	const observeEffect = Effect.fnUntraced(function* (request) {
-		const validated = yield* Schema.decodeEffect(Schema.toType(ThreadObservation))(request).pipe(Effect.mapError((error) => schemaStoreError("validate thread observation", error)));
-		yield* requireThread(journal, validated.threadId);
-		const initialSequence = yield* parseOffset(validated.threadId, validated.afterOffset);
-		const cursor = yield* Ref.make(initialSequence);
-		let polls = 0;
-		let emptyPolls = 0;
-		let deliveredRecords = 0;
-		const poll = Effect.fnUntraced(function* () {
-			polls++;
-			const fromSequenceExclusive = yield* Ref.get(cursor);
-			const result = yield* loadRecords(RawReadRequest.make({
-				threadId: validated.threadId,
-				fromSequenceExclusive,
-				limit: 1024
-			}));
-			if (result.count === 0) {
-				emptyPolls++;
-				yield* Effect.sleep(config.observationPollInterval);
-				return Stream.empty;
-			}
-			return result.records.pipe(Stream.tap((record) => {
-				deliveredRecords++;
-				return Ref.set(cursor, record.sequence);
-			}));
-		});
-		return Stream.fromEffectRepeat(poll()).pipe(Stream.flatten, Stream.ensuring(Effect.suspend(() => Effect.annotateCurrentSpan({
-			"effect_agent.observation.polls": polls,
-			"effect_agent.observation.empty_polls": emptyPolls,
-			"effect_agent.observation.records": deliveredRecords
-		}))));
-	});
-	const observe = (request) => Stream.unwrap(observeEffect(request)).pipe(Stream.withSpan("DoThreadStore.observe"));
-	const exportThread = Effect.fn("DoThreadStore.export")(function* (request) {
-		const validated = yield* Schema.decodeEffect(Schema.toType(ThreadExportRequest))(request).pipe(Effect.mapError((error) => schemaStoreError("validate thread export", error)));
-		yield* requireThread(journal, validated.threadId);
-		const exported = yield* journal.exportThread(validated.threadId).pipe(Effect.mapError((error) => storeError("export thread", error)));
-		const records = yield* Effect.forEach(exported.records, decodeEnvelope);
-		if (records.length > MAX_THREAD_EXPORT_RECORDS) return yield* ThreadStoreError.make({
-			operation: "decode thread export",
-			message: "The thread exceeds the current export record limit."
-		});
-		const tailDigest = yield* Schema.decodeEffect(Digest)(exported.thread.tail_digest).pipe(Effect.mapError((error) => schemaStoreError("decode export tail digest", error)));
-		return ThreadExport.make({
-			format: "effect-agent/thread@1",
-			threadId: validated.threadId,
-			tailSequence: exported.thread.tail_sequence,
-			tailDigest,
-			records
-		});
-	});
-	const inspectTail = Effect.fn("DoThreadStore.inspectTail")(function* (request) {
-		const validated = yield* Schema.decodeEffect(Schema.toType(ThreadTailRequest))(request).pipe(Effect.mapError((error) => schemaStoreError("validate tail inspection", error)));
-		const thread = yield* requireThread(journal, validated.threadId);
-		const tailDigest = yield* Schema.decodeEffect(Digest)(thread.tail_digest).pipe(Effect.mapError((error) => schemaStoreError("decode tail digest", error)));
-		return ThreadTail.make({
-			threadId: validated.threadId,
-			tailSequence: thread.tail_sequence,
-			tailDigest,
-			producerEpoch: thread.producer_epoch
-		});
-	});
-	const saveCheckpoint = Effect.fn("DoThreadStore.saveCheckpoint")(function* (request) {
-		const validated = yield* Schema.decodeEffect(Schema.toType(SaveCheckpointRequest))(request).pipe(Effect.mapError((error) => schemaStoreError("validate checkpoint", error)));
-		const thread = yield* requireThread(journal, validated.checkpoint.threadId);
-		if (validated.checkpoint.throughSequence > thread.tail_sequence) return yield* CheckpointRejected.make({
-			threadId: validated.checkpoint.threadId,
-			reason: "ahead-of-tail"
-		});
-		if ((yield* tailDigestAt(journal, validated.checkpoint.threadId, validated.checkpoint.throughSequence)) !== validated.checkpoint.tailDigest) return yield* CheckpointRejected.make({
-			threadId: validated.checkpoint.threadId,
-			reason: "digest-mismatch"
-		});
-		const checkpointJson = yield* encodeCheckpoint(validated.checkpoint);
-		const raw = RawCheckpoint.make({
-			threadId: validated.checkpoint.threadId,
-			throughSequence: validated.checkpoint.throughSequence,
-			tailDigest: validated.checkpoint.tailDigest,
-			checkpointJson
-		});
-		yield* hitFailpoint("save-checkpoint:before");
-		yield* journal.saveCheckpoint(raw).pipe(Effect.mapError((error) => isDoCheckpointConflict(error) ? CheckpointRejected.make({
-			threadId: validated.checkpoint.threadId,
-			reason: "digest-mismatch"
-		}) : storeError("save checkpoint", error)));
-		yield* hitFailpoint("save-checkpoint:after");
-	});
-	const loadCheckpoint = Effect.fn("DoThreadStore.loadCheckpoint")(function* (request) {
-		const validated = yield* Schema.decodeEffect(Schema.toType(LoadCheckpointRequest))(request).pipe(Effect.mapError((error) => schemaStoreError("validate checkpoint lookup", error)));
-		const thread = yield* requireThread(journal, validated.threadId);
-		const rows = yield* journal.loadCheckpoint(validated.threadId, validated.atOrBeforeSequence ?? thread.tail_sequence).pipe(Effect.mapError((error) => storeError("load checkpoint", error)));
-		if (rows.length === 0) return Option.none();
-		if (rows.length !== 1) return yield* ThreadStoreError.make({
-			operation: "load checkpoint",
-			message: `Expected at most one checkpoint row but found ${rows.length}.`
-		});
-		const row = rows[0];
-		const checkpoint = yield* decodeCheckpoint(row.checkpoint_json);
-		if (row.thread_id !== validated.threadId || checkpoint.threadId !== row.thread_id || checkpoint.throughSequence !== row.through_sequence || checkpoint.tailDigest !== row.tail_digest) return yield* ThreadStoreError.make({
-			operation: "load checkpoint",
-			message: "Stored checkpoint metadata does not match its canonical row."
-		});
-		if ((yield* tailDigestAt(journal, checkpoint.threadId, checkpoint.throughSequence)) !== checkpoint.tailDigest) return yield* CheckpointRejected.make({
-			threadId: checkpoint.threadId,
-			reason: "digest-mismatch"
-		});
-		return Option.some(checkpoint);
-	});
-	const saveRecoveryCheckpoint = Effect.fn("DoThreadStore.saveRecoveryCheckpoint")(function* (request) {
-		const validated = yield* Schema.decodeEffect(Schema.toType(SaveRecoveryCheckpointRequest))(request).pipe(Effect.mapError((error) => schemaStoreError("validate recovery checkpoint", error)));
-		const checkpointJson = yield* encodeCheckpoint(validated.checkpoint);
-		yield* journal.saveRecoveryCheckpoint(validated, checkpointJson).pipe(Effect.mapError((error) => error._tag === "CheckpointRejected" || error._tag === "FenceRejected" || error._tag === "ThreadNotMaterialized" ? error : storeError("save recovery checkpoint", error)));
-	});
-	const loadRecoveryCheckpoint = Effect.fn("DoThreadStore.loadRecoveryCheckpoint")(function* (request) {
-		const validated = yield* Schema.decodeEffect(Schema.toType(LoadCheckpointRequest))(request).pipe(Effect.mapError((error) => schemaStoreError("validate recovery checkpoint lookup", error)));
-		const thread = yield* requireThread(journal, validated.threadId);
-		const corrupt = () => CheckpointRejected.make({
-			threadId: validated.threadId,
-			reason: "corrupt"
-		});
-		const rows = yield* journal.loadRecoveryCheckpoint(validated.threadId).pipe(Effect.mapError((error) => error._tag === "DoStorageCorruptionError" ? corrupt() : storeError("load recovery checkpoint", error)));
-		if (rows.length === 0) return Option.none();
-		if (rows.length !== 1) return yield* corrupt();
-		const row = rows[0];
-		const checkpoint = yield* Schema.decodeEffect(Schema.fromJsonString(ThreadCheckpoint))(row.checkpoint_json).pipe(Effect.mapError(corrupt));
-		if (row.thread_id !== validated.threadId || checkpoint.threadId !== row.thread_id || checkpoint.throughSequence !== row.through_sequence || checkpoint.tailDigest !== row.tail_digest) return yield* corrupt();
-		if (checkpoint.throughSequence > thread.tail_sequence) return yield* CheckpointRejected.make({
-			threadId: validated.threadId,
-			reason: "ahead-of-tail"
-		});
-		if (checkpoint.throughSequence > (validated.atOrBeforeSequence ?? thread.tail_sequence)) return Option.none();
-		if ((yield* tailDigestAt(journal, checkpoint.threadId, checkpoint.throughSequence)) !== checkpoint.tailDigest) return yield* CheckpointRejected.make({
-			threadId: validated.threadId,
-			reason: "digest-mismatch"
-		});
-		return Option.some(checkpoint);
-	});
-	const selectedReads = yield* makeSelectedReads(decodeEnvelope).pipe(Effect.provideService(SelectedReadOwner, {
-		snapshot: journal.state.read,
-		tail: (threadId) => journal.getThread(threadId).pipe(Effect.flatMap((rows) => Schema.decodeEffect(Schema.UndefinedOr(Schema.Struct({
-			tail_sequence: CanonicalSequence,
-			tail_digest: Digest,
-			producer_epoch: ThreadMaterialization.fields.producerEpoch
-		})))(rows[0])), Effect.mapError((error) => storeError("native thread tail", error)))
-	}));
-	const threadStore = ThreadStore.of({
-		...journal.lifecycle === void 0 ? {} : { lifecyclePublications: journal.lifecycle.storage },
-		readIdentity: selectedReads.readIdentity,
-		countPeerMessages: selectedReads.countPeerMessages,
-		append,
-		export: exportThread,
-		inspectTail,
-		materialize,
-		observe,
-		read,
-		checkpoints: {
-			save: saveCheckpoint,
-			load: loadCheckpoint
-		},
-		recoveryCheckpoints: {
-			save: saveRecoveryCheckpoint,
-			load: loadRecoveryCheckpoint
-		}
-	});
-	return Context.make(ThreadStore, threadStore);
-});
-/**
-* Durable Object Thread Store implementation with configuration, failpoint, SQL, and
-* Crypto authority kept visible in its input channel.
-*/
-const threadStoreLayer = Layer.effectContext(makeServices());
-/**
-* Validated Durable Object storage configuration Layer with the documented defaults applied.
-* Shared by the ThreadStore and SubmissionLedger convenience layers so their defaults
-* cannot drift.
-*/
-const storageConfigLayer = (options) => Layer.effect(DoStorageConfig)(Schema.decodeEffect(DoStorageConfigValue)({
-	observationPollInterval: options.observationPollInterval ?? 25,
-	ownershipLeaseDuration: options.ownershipLeaseDuration ?? Duration.toMillis(DEFAULT_OWNERSHIP_LEASE_DURATION),
-	maxStoredValueBytes: options.maxStoredValueBytes ?? 19e5,
-	verifyOnOpen: options.verifyOnOpen ?? false
-}).pipe(Effect.mapError((error) => DoStorageError.make({
-	cause: error,
-	operation: "configure Durable Object storage",
-	message: error.message
-}))));
-/** The failpoint Layer selected by convenience options: explicit handler or the no-op default. */
-const storageFailpointLayer = (options) => options.failpoint === void 0 ? DoStorageFailpoint.layer : Layer.succeed(DoStorageFailpoint)({ hit: options.failpoint });
-/**
-* A composition-root convenience Layer for canonical Threads inside one Durable Object,
-* built over `ctx.storage`. Durable accepted work is served by the separate SubmissionLedger
-* port; point both at the SAME `ctx.storage` so claims fence the same producer epochs
-* (ADR-0011 D7's "same file" rule, transposed to one object's private database).
-*/
-const layer = (options) => Layer.unwrap(Effect.map(DoStorageConfig, (config) => threadStoreLayer.pipe(Layer.provide(Layer.mergeAll(Layer.succeed(DoStorageConfig)(config), storageFailpointLayer(options), SqliteClient.layer({ storage: options.storage }), BrowserCrypto.layer))))).pipe(Layer.provide(storageConfigLayer(options)));
-/**
-* Discard the Object's derived thread and ledger state after direct SQL maintenance.
-* Quiesce port operations during the raw write and invalidation, and enroll the write with
-* the host mutation gate. Ordinary ThreadStore/SubmissionLedger writes maintain this view.
-*/
-const invalidate = invalidateOwnedState;
-/** Share the Object's transaction gate with owner-local SQL Memory compositions. */
-const sqlOwnerLayer = Layer.effect(SqlStorageOwner)(Effect.flatMap(SqlClientService.SqlClient, ownedState));
-//#endregion
-export { invalidate, layer, sqlOwnerLayer, storageConfigLayer, storageFailpointLayer, DoThreadStore_exports as t, threadStoreLayer };
-
-//# sourceMappingURL=DoThreadStore.mjs.map
+import "./DoStorageConfig.mjs";
+import "./DoStorageFailpoint.mjs";
+import { a as sqlOwnerLayer, c as threadStoreLayer, i as layer, n as exportThread, o as storageConfigLayer, r as invalidate, s as storageFailpointLayer } from "./DoThreadStore-CwBvTLoq.mjs";
+export { exportThread, invalidate, layer, sqlOwnerLayer, storageConfigLayer, storageFailpointLayer, threadStoreLayer };

package/dist/MemoryProtocol.mjs

@@ -129,18 +129,18 @@ var MemoryOwnerAuthorizer = class extends Context.Service()("@effect-agent/stora
 /** Canonical namespace derived from this object's idFromName identity, never its request. */
 var MemoryOwnerIdentity = class extends Context.Service()("@effect-agent/storage-cloudflare/MemoryOwnerIdentity") {};
 const memoryWireBytes = (text) => new TextEncoder().encode(text).byteLength;
-const decodeMemoryWire = Effect.fn("decodeMemoryWire")(function* (schema, raw, maxBytes) {
+const decodeMemoryWire = Effect.fnUntraced(function* (schema, raw, maxBytes) {
 	const text = yield* Schema.decodeUnknownEffect(Schema.String)(raw).pipe(Effect.mapError(() => MemoryRpcError.make({ reason: "protocol" })));
 	if (text.length > maxBytes || memoryWireBytes(text) > maxBytes) return yield* MemoryRpcError.make({ reason: "budget" });
 	return yield* Schema.decodeEffect(Schema.fromJsonString(schema))(text).pipe(Effect.mapError(() => MemoryRpcError.make({ reason: "protocol" })));
 });
-const encodeMemoryWire = Effect.fn("encodeMemoryWire")(function* (schema, value, maxBytes) {
+const encodeMemoryWire = Effect.fnUntraced(function* (schema, value, maxBytes) {
 	const encoded = yield* Schema.encodeEffect(Schema.fromJsonString(schema))(value).pipe(Effect.mapError(() => MemoryRpcError.make({ reason: "protocol" })));
 	if (encoded.length > maxBytes || memoryWireBytes(encoded) > maxBytes) return yield* MemoryRpcError.make({ reason: "budget" });
 	return encoded;
 });
 /** One local read for Get, or per distinct candidate source. No discovery or background work. */
-const handleMemoryOwnerRequest = Effect.fn("MemoryOwner.handleRequest")(function* (raw, limits = defaultMemoryRpcLimits) {
+const handleMemoryOwnerRequest = Effect.fnUntraced(function* (raw, limits = defaultMemoryRpcLimits) {
 	const result = yield* Effect.gen(function* () {
 		limits = yield* Schema.decodeEffect(MemoryRpcLimits)(limits).pipe(Effect.mapError(() => MemoryRpcError.make({ reason: "protocol" })));
 		const request = yield* decodeMemoryWire(MemoryOwnerRequest, raw, limits.maxRequestBytes);

package/dist/MemoryProtocol.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"MemoryProtocol.mjs","names":[],"sources":["../src/MemoryProtocol.ts"],"sourcesContent":["import * as MemoryNamespace from \"@yielded/agent/memory-namespace\";\nimport {\n  MemoryLookup,\n  MemoryRecallError,\n  MemoryRecallLimits,\n} from \"@yielded/agent/memory-reference\";\nimport { MemoryAccess, revalidateMemoryLookup } from \"@yielded/agent/memory-revalidation\";\nimport {\n  MemoryKey,\n  MemoryReader,\n  MemoryConflict,\n  MemoryDocument,\n  MemoryMutationFailure,\n  MemoryOperationConflict,\n  MemoryStorageError,\n  MemoryWithdrawn,\n  MemoryWrite,\n  MemoryWriter,\n} from \"@yielded/agent/memory-store\";\nimport {\n  MemoryIndexSearch,\n  MemoryIndexError,\n  SemanticMemoryProfile,\n} from \"@yielded/agent/semantic-memory-index\";\nimport {\n  SemanticMemoryError,\n  SemanticCandidateLimits,\n  SemanticCandidateResult,\n  revalidateSemanticMemoryCandidates,\n} from \"@yielded/agent/semantic-memory-revalidation\";\nimport { Principal } from \"@yielded/agent/submission-ledger\";\nimport { Clock, Context, Effect, Schema } from \"effect\";\n\nexport class MemoryRpcError extends Schema.TaggedError<MemoryRpcError>()(\"MemoryRpcError\", {\n  reason: Schema.Literals([\"denied\", \"protocol\", \"budget\", \"timeout\", \"unavailable\"]),\n}) {}\n\nexport class MemoryRpcLimits extends Schema.Class<MemoryRpcLimits>(\n  \"@effect-agent/storage-cloudflare/MemoryRpcLimits\",\n)({\n  maxRequestBytes: Schema.Int.check(Schema.isBetween({ minimum: 256, maximum: 4_194_304 })),\n  maxResponseBytes: Schema.Int.check(Schema.isBetween({ minimum: 256, maximum: 16_777_216 })),\n  maxSourceBytes: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 67_108_864 })),\n  maxSources: MemoryRecallLimits.fields.maxSources,\n  timeoutMillis: MemoryRecallLimits.fields.timeoutMillis,\n}) {}\n\nexport const defaultMemoryRpcLimits = MemoryRpcLimits.make({\n  maxRequestBytes: 1_048_576,\n  maxResponseBytes: 4_194_304,\n  maxSourceBytes: 16_777_216,\n  maxSources: 16,\n  timeoutMillis: 10_000,\n});\n\nconst RequestFields = {\n  version: Schema.Literal(1),\n  access: MemoryAccess.Wire,\n  /** Host-authenticated identity, never copied from model input. The owner still authorizes it. */\n  principal: Principal,\n  deadlineMillis: Schema.Finite.check(Schema.isGreaterThanOrEqualTo(0)),\n};\n\nconst RevalidateRequest = Schema.TaggedStruct(\"Revalidate\", {\n  ...RequestFields,\n  lookup: MemoryLookup,\n  limits: MemoryRecallLimits,\n});\n\nconst ChangeRequest = Schema.TaggedStruct(\"Change\", { ...RequestFields, write: MemoryWrite.Wire });\n\nconst GetRequest = Schema.TaggedStruct(\"Get\", { ...RequestFields, key: MemoryKey.Wire });\n\nconst SemanticRequest: Schema.TaggedStruct<\n  \"RevalidateSemantic\",\n  typeof RequestFields & {\n    readonly found: typeof MemoryIndexSearch.Wire;\n    readonly profile: typeof SemanticMemoryProfile;\n    readonly limits: typeof SemanticCandidateLimits;\n  }\n> = Schema.TaggedStruct(\"RevalidateSemantic\", {\n  ...RequestFields,\n  found: MemoryIndexSearch.Wire,\n  profile: SemanticMemoryProfile,\n  limits: SemanticCandidateLimits,\n});\n\nexport const MemoryOwnerRequest: Schema.Union<\n  [typeof RevalidateRequest, typeof ChangeRequest, typeof SemanticRequest, typeof GetRequest]\n> = Schema.Union([RevalidateRequest, ChangeRequest, SemanticRequest, GetRequest]);\n\nexport type MemoryOwnerRequest = typeof MemoryOwnerRequest.Type;\n\nexport const MemoryOwnerFailure = Schema.Union([\n  MemoryRpcError,\n  MemoryStorageError,\n  MemoryRecallError,\n  MemoryConflict,\n  MemoryWithdrawn,\n  MemoryOperationConflict,\n  MemoryMutationFailure,\n  MemoryIndexError,\n  SemanticMemoryError,\n]);\n\nexport type MemoryOwnerFailure = typeof MemoryOwnerFailure.Type;\n\nconst LookupResponse = Schema.TaggedStruct(\"Lookup\", {\n  access: MemoryAccess.Wire,\n  lookup: MemoryLookup,\n});\n\nconst ChangedResponse = Schema.TaggedStruct(\"Changed\", {\n  access: MemoryAccess.Wire,\n  document: MemoryDocument.Wire,\n});\n\nconst SemanticResponse = Schema.TaggedStruct(\"Semantic\", {\n  access: MemoryAccess.Wire,\n  result: SemanticCandidateResult,\n});\n\nconst DocumentResponse = Schema.TaggedStruct(\"Document\", {\n  access: MemoryAccess.Wire,\n  key: MemoryKey.Wire,\n  document: Schema.NullOr(MemoryDocument.Wire),\n});\n\nconst FailedResponse = Schema.TaggedStruct(\"Failed\", { failure: MemoryOwnerFailure });\n\nexport const MemoryOwnerResponse: Schema.Union<\n  [\n    typeof LookupResponse,\n    typeof ChangedResponse,\n    typeof SemanticResponse,\n    typeof DocumentResponse,\n    typeof FailedResponse,\n  ]\n> = Schema.Union([\n  LookupResponse,\n  ChangedResponse,\n  SemanticResponse,\n  DocumentResponse,\n  FailedResponse,\n]);\n\nexport type MemoryOwnerResponse = typeof MemoryOwnerResponse.Type;\n\n/**\n * Fail-closed application policy. Authorize the namespace, principal, scope, and full command.\n * Get requires exact-key authority, including application source/provenance checks where needed.\n * Possession of a key or scope is not authorization, including for absent or withdrawn documents.\n */\nexport class MemoryOwnerAuthorizer extends Context.Service<\n  MemoryOwnerAuthorizer,\n  {\n    readonly authorize: (request: MemoryOwnerRequest) => Effect.Effect<void, MemoryRpcError>;\n  }\n>()(\"@effect-agent/storage-cloudflare/MemoryOwnerAuthorizer\") {}\n\n/** Canonical namespace derived from this object's idFromName identity, never its request. */\nexport class MemoryOwnerIdentity extends Context.Service<\n  MemoryOwnerIdentity,\n  {\n    readonly namespace: MemoryNamespace.Any;\n  }\n>()(\"@effect-agent/storage-cloudflare/MemoryOwnerIdentity\") {}\n\nexport const memoryWireBytes = (text: string): number => new TextEncoder().encode(text).byteLength;\n\nexport const decodeMemoryWire = Effect.fn(\"decodeMemoryWire\")(function* <A, I>(\n  schema: Schema.Codec<A, I, never>,\n  raw: unknown,\n  maxBytes: number,\n) {\n  const text = yield* Schema.decodeUnknownEffect(Schema.String)(raw).pipe(\n    Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n  );\n\n  if (text.length > maxBytes || memoryWireBytes(text) > maxBytes)\n    return yield* MemoryRpcError.make({ reason: \"budget\" });\n\n  return yield* Schema.decodeEffect(Schema.fromJsonString(schema))(text).pipe(\n    Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n  );\n});\n\nexport const encodeMemoryWire = Effect.fn(\"encodeMemoryWire\")(function* <A, I>(\n  schema: Schema.Codec<A, I, never, never>,\n  value: A,\n  maxBytes: number,\n) {\n  const encoded = yield* Schema.encodeEffect(Schema.fromJsonString(schema))(value).pipe(\n    Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n  );\n\n  if (encoded.length > maxBytes || memoryWireBytes(encoded) > maxBytes)\n    return yield* MemoryRpcError.make({ reason: \"budget\" });\n\n  return encoded;\n});\n\n/** One local read for Get, or per distinct candidate source. No discovery or background work. */\nexport const handleMemoryOwnerRequest = Effect.fn(\"MemoryOwner.handleRequest\")(function* (\n  raw: unknown,\n  limits: MemoryRpcLimits = defaultMemoryRpcLimits,\n): Effect.fn.Return<\n  string,\n  never,\n  MemoryOwnerIdentity | MemoryOwnerAuthorizer | MemoryReader | MemoryWriter\n> {\n  const result = yield* Effect.gen(function* (): Effect.fn.Return<\n    MemoryOwnerResponse,\n    MemoryOwnerFailure,\n    MemoryOwnerIdentity | MemoryOwnerAuthorizer | MemoryReader | MemoryWriter\n  > {\n    limits = yield* Schema.decodeEffect(MemoryRpcLimits)(limits).pipe(\n      Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n    );\n    const request = yield* decodeMemoryWire(MemoryOwnerRequest, raw, limits.maxRequestBytes);\n    const { namespace } = yield* MemoryOwnerIdentity;\n\n    if (\n      !MemoryNamespace.equals(namespace, request.access.namespace) ||\n      (request._tag === \"Get\" && !MemoryNamespace.equals(namespace, request.key.namespace)) ||\n      (request._tag === \"Change\" &&\n        !MemoryNamespace.equals(namespace, request.write.key.namespace)) ||\n      (request._tag === \"RevalidateSemantic\" &&\n        request.found.candidates.some(\n          (candidate) => !MemoryNamespace.equals(namespace, candidate.key.namespace),\n        ))\n    )\n      return yield* MemoryRpcError.make({ reason: \"denied\" });\n\n    const remaining = Math.min(\n      limits.timeoutMillis,\n      request.deadlineMillis - (yield* Clock.currentTimeMillis),\n    );\n\n    if (remaining <= 0) return yield* MemoryRpcError.make({ reason: \"timeout\" });\n\n    return yield* Effect.gen(function* (): Effect.fn.Return<\n      MemoryOwnerResponse,\n      MemoryOwnerFailure,\n      MemoryOwnerAuthorizer | MemoryReader | MemoryWriter\n    > {\n      const authorizer = yield* MemoryOwnerAuthorizer;\n\n      yield* authorizer.authorize(request);\n      if (request._tag === \"Get\") {\n        const reader = yield* MemoryReader;\n        const current = yield* reader.get(request.key);\n\n        const document =\n          current === null ? null : yield* MemoryDocument.restore(namespace, current);\n\n        if (document !== null) {\n          if (document.key.id !== request.key.id || document.source.id !== request.key.id)\n            return yield* MemoryStorageError.make({\n              operation: \"validate memory read identity\",\n              reason: \"corrupt\",\n            });\n          if (\n            document._tag === \"ActiveMemoryDocument\" &&\n            !document.scopes.includes(request.access.scope)\n          )\n            return yield* MemoryRpcError.make({ reason: \"denied\" });\n\n          yield* encodeMemoryWire(MemoryDocument.Wire, document, limits.maxSourceBytes);\n        }\n\n        return { _tag: \"Document\", access: request.access, key: request.key, document };\n      }\n      if (request._tag === \"Change\") {\n        const writer = yield* MemoryWriter;\n\n        return {\n          _tag: \"Changed\",\n          access: request.access,\n          document: yield* writer.change(request.write),\n        };\n      }\n      if (request._tag === \"RevalidateSemantic\") {\n        if (\n          new Set(request.found.candidates.map((candidate) => candidate.key.id)).size >\n          limits.maxSources\n        )\n          return yield* MemoryRpcError.make({ reason: \"budget\" });\n\n        const result = yield* revalidateSemanticMemoryCandidates(\n          request.found,\n          request.access,\n          request.profile,\n          {\n            ...request.limits,\n            maxSourceBytes: Math.min(\n              limits.maxSourceBytes,\n              request.limits.maxSourceBytes ?? 16_777_216,\n            ),\n            maxOutputBytes: Math.min(\n              limits.maxResponseBytes,\n              request.limits.maxOutputBytes ?? 16_777_216,\n            ),\n          },\n        );\n\n        return { _tag: \"Semantic\", access: request.access, result };\n      }\n\n      const count =\n        request.lookup._tag === \"Found\"\n          ? new Set(request.lookup.passages.map((passage) => passage.source.id)).size\n          : 0;\n\n      if (count > Math.min(limits.maxSources, request.limits.maxSources))\n        return yield* MemoryRpcError.make({ reason: \"budget\" });\n\n      const lookup = yield* revalidateMemoryLookup(request.lookup, request.access, {\n        maxSourceBytes: limits.maxSourceBytes,\n        maxInputBytes: Math.min(limits.maxSourceBytes, request.limits.maxInputBytes ?? 16_777_216),\n      });\n\n      return { _tag: \"Lookup\", access: request.access, lookup };\n    }).pipe(\n      Effect.scoped,\n      Effect.timeoutOrElse({\n        duration: remaining,\n        orElse: () => Effect.fail(MemoryRpcError.make({ reason: \"timeout\" })),\n      }),\n    );\n  }).pipe(\n    Effect.flatMap((response) =>\n      encodeMemoryWire(MemoryOwnerResponse, response, limits.maxResponseBytes),\n    ),\n    Effect.result,\n  );\n\n  if (result._tag === \"Success\") return result.success;\n\n  return yield* encodeMemoryWire(\n    MemoryOwnerResponse,\n    {\n      _tag: \"Failed\",\n      failure: result.failure,\n    },\n    limits.maxResponseBytes,\n  ).pipe(\n    Effect.catch(() =>\n      Schema.encodeEffect(Schema.fromJsonString(MemoryOwnerResponse))({\n        _tag: \"Failed\",\n        failure: MemoryRpcError.make({ reason: \"budget\" }),\n      }).pipe(Effect.orDie),\n    ),\n  );\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAiCA,IAAa,iBAAb,cAAoC,OAAO,YAA4B,CAAC,CAAC,kBAAkB,EACzF,QAAQ,OAAO,SAAS;CAAC;CAAU;CAAY;CAAU;CAAW;AAAa,CAAC,EACpF,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,kBAAb,cAAqC,OAAO,MAC1C,kDACF,CAAC,CAAC;CACA,iBAAiB,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAK,SAAS;CAAU,CAAC,CAAC;CACxF,kBAAkB,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAK,SAAS;CAAW,CAAC,CAAC;CAC1F,gBAAgB,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAW,CAAC,CAAC;CACtF,YAAY,mBAAmB,OAAO;CACtC,eAAe,mBAAmB,OAAO;AAC3C,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,yBAAyB,gBAAgB,KAAK;CACzD,iBAAiB;CACjB,kBAAkB;CAClB,gBAAgB;CAChB,YAAY;CACZ,eAAe;AACjB,CAAC;AAED,MAAM,gBAAgB;CACpB,SAAS,OAAO,QAAQ,CAAC;CACzB,QAAQ,aAAa;;CAErB,WAAW;CACX,gBAAgB,OAAO,OAAO,MAAM,OAAO,uBAAuB,CAAC,CAAC;AACtE;AAEA,MAAM,oBAAoB,OAAO,aAAa,cAAc;CAC1D,GAAG;CACH,QAAQ;CACR,QAAQ;AACV,CAAC;AAED,MAAM,gBAAgB,OAAO,aAAa,UAAU;CAAE,GAAG;CAAe,OAAO,YAAY;AAAK,CAAC;AAEjG,MAAM,aAAa,OAAO,aAAa,OAAO;CAAE,GAAG;CAAe,KAAK,UAAU;AAAK,CAAC;AAEvF,MAAM,kBAOF,OAAO,aAAa,sBAAsB;CAC5C,GAAG;CACH,OAAO,kBAAkB;CACzB,SAAS;CACT,QAAQ;AACV,CAAC;AAED,MAAa,qBAET,OAAO,MAAM;CAAC;CAAmB;CAAe;CAAiB;AAAU,CAAC;AAIhF,MAAa,qBAAqB,OAAO,MAAM;CAC7C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAID,MAAM,iBAAiB,OAAO,aAAa,UAAU;CACnD,QAAQ,aAAa;CACrB,QAAQ;AACV,CAAC;AAED,MAAM,kBAAkB,OAAO,aAAa,WAAW;CACrD,QAAQ,aAAa;CACrB,UAAU,eAAe;AAC3B,CAAC;AAED,MAAM,mBAAmB,OAAO,aAAa,YAAY;CACvD,QAAQ,aAAa;CACrB,QAAQ;AACV,CAAC;AAED,MAAM,mBAAmB,OAAO,aAAa,YAAY;CACvD,QAAQ,aAAa;CACrB,KAAK,UAAU;CACf,UAAU,OAAO,OAAO,eAAe,IAAI;AAC7C,CAAC;AAED,MAAM,iBAAiB,OAAO,aAAa,UAAU,EAAE,SAAS,mBAAmB,CAAC;AAEpF,MAAa,sBAQT,OAAO,MAAM;CACf;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;;AASD,IAAa,wBAAb,cAA2C,QAAQ,QAKjD,CAAC,CAAC,wDAAwD,CAAC,CAAC,CAAC;;AAG/D,IAAa,sBAAb,cAAyC,QAAQ,QAK/C,CAAC,CAAC,sDAAsD,CAAC,CAAC,CAAC;AAE7D,MAAa,mBAAmB,SAAyB,IAAI,YAAY,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;AAExF,MAAa,mBAAmB,OAAO,GAAG,kBAAkB,CAAC,CAAC,WAC5D,QACA,KACA,UACA;CACA,MAAM,OAAO,OAAO,OAAO,oBAAoB,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KACjE,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;CAEA,IAAI,KAAK,SAAS,YAAY,gBAAgB,IAAI,IAAI,UACpD,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;CAExD,OAAO,OAAO,OAAO,aAAa,OAAO,eAAe,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KACrE,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;AACF,CAAC;AAED,MAAa,mBAAmB,OAAO,GAAG,kBAAkB,CAAC,CAAC,WAC5D,QACA,OACA,UACA;CACA,MAAM,UAAU,OAAO,OAAO,aAAa,OAAO,eAAe,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAC/E,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;CAEA,IAAI,QAAQ,SAAS,YAAY,gBAAgB,OAAO,IAAI,UAC1D,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;CAExD,OAAO;AACT,CAAC;;AAGD,MAAa,2BAA2B,OAAO,GAAG,2BAA2B,CAAC,CAAC,WAC7E,KACA,SAA0B,wBAK1B;CACA,MAAM,SAAS,OAAO,OAAO,IAAI,aAI/B;EACA,SAAS,OAAO,OAAO,aAAa,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,KAC3D,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;EACA,MAAM,UAAU,OAAO,iBAAiB,oBAAoB,KAAK,OAAO,eAAe;EACvF,MAAM,EAAE,cAAc,OAAO;EAE7B,IACE,CAAC,gBAAgB,OAAO,WAAW,QAAQ,OAAO,SAAS,KAC1D,QAAQ,SAAS,SAAS,CAAC,gBAAgB,OAAO,WAAW,QAAQ,IAAI,SAAS,KAClF,QAAQ,SAAS,YAChB,CAAC,gBAAgB,OAAO,WAAW,QAAQ,MAAM,IAAI,SAAS,KAC/D,QAAQ,SAAS,wBAChB,QAAQ,MAAM,WAAW,MACtB,cAAc,CAAC,gBAAgB,OAAO,WAAW,UAAU,IAAI,SAAS,CAC3E,GAEF,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;EAExD,MAAM,YAAY,KAAK,IACrB,OAAO,eACP,QAAQ,kBAAkB,OAAO,MAAM,kBACzC;EAEA,IAAI,aAAa,GAAG,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,UAAU,CAAC;EAE3E,OAAO,OAAO,OAAO,IAAI,aAIvB;GAGA,QAAO,OAFmB,sBAAA,CAER,UAAU,OAAO;GACnC,IAAI,QAAQ,SAAS,OAAO;IAE1B,MAAM,UAAU,QAAO,OADD,aAAA,CACQ,IAAI,QAAQ,GAAG;IAE7C,MAAM,WACJ,YAAY,OAAO,OAAO,OAAO,eAAe,QAAQ,WAAW,OAAO;IAE5E,IAAI,aAAa,MAAM;KACrB,IAAI,SAAS,IAAI,OAAO,QAAQ,IAAI,MAAM,SAAS,OAAO,OAAO,QAAQ,IAAI,IAC3E,OAAO,OAAO,mBAAmB,KAAK;MACpC,WAAW;MACX,QAAQ;KACV,CAAC;KACH,IACE,SAAS,SAAS,0BAClB,CAAC,SAAS,OAAO,SAAS,QAAQ,OAAO,KAAK,GAE9C,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;KAExD,OAAO,iBAAiB,eAAe,MAAM,UAAU,OAAO,cAAc;IAC9E;IAEA,OAAO;KAAE,MAAM;KAAY,QAAQ,QAAQ;KAAQ,KAAK,QAAQ;KAAK;IAAS;GAChF;GACA,IAAI,QAAQ,SAAS,UAAU;IAC7B,MAAM,SAAS,OAAO;IAEtB,OAAO;KACL,MAAM;KACN,QAAQ,QAAQ;KAChB,UAAU,OAAO,OAAO,OAAO,QAAQ,KAAK;IAC9C;GACF;GACA,IAAI,QAAQ,SAAS,sBAAsB;IACzC,IACE,IAAI,IAAI,QAAQ,MAAM,WAAW,KAAK,cAAc,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,OACvE,OAAO,YAEP,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;IAExD,MAAM,SAAS,OAAO,mCACpB,QAAQ,OACR,QAAQ,QACR,QAAQ,SACR;KACE,GAAG,QAAQ;KACX,gBAAgB,KAAK,IACnB,OAAO,gBACP,QAAQ,OAAO,kBAAkB,QACnC;KACA,gBAAgB,KAAK,IACnB,OAAO,kBACP,QAAQ,OAAO,kBAAkB,QACnC;IACF,CACF;IAEA,OAAO;KAAE,MAAM;KAAY,QAAQ,QAAQ;KAAQ;IAAO;GAC5D;GAOA,KAJE,QAAQ,OAAO,SAAS,UACpB,IAAI,IAAI,QAAQ,OAAO,SAAS,KAAK,YAAY,QAAQ,OAAO,EAAE,CAAC,CAAC,CAAC,OACrE,KAEM,KAAK,IAAI,OAAO,YAAY,QAAQ,OAAO,UAAU,GAC/D,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;GAExD,MAAM,SAAS,OAAO,uBAAuB,QAAQ,QAAQ,QAAQ,QAAQ;IAC3E,gBAAgB,OAAO;IACvB,eAAe,KAAK,IAAI,OAAO,gBAAgB,QAAQ,OAAO,iBAAiB,QAAU;GAC3F,CAAC;GAED,OAAO;IAAE,MAAM;IAAU,QAAQ,QAAQ;IAAQ;GAAO;EAC1D,CAAC,CAAC,CAAC,KACD,OAAO,QACP,OAAO,cAAc;GACnB,UAAU;GACV,cAAc,OAAO,KAAK,eAAe,KAAK,EAAE,QAAQ,UAAU,CAAC,CAAC;EACtE,CAAC,CACH;CACF,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,aACd,iBAAiB,qBAAqB,UAAU,OAAO,gBAAgB,CACzE,GACA,OAAO,MACT;CAEA,IAAI,OAAO,SAAS,WAAW,OAAO,OAAO;CAE7C,OAAO,OAAO,iBACZ,qBACA;EACE,MAAM;EACN,SAAS,OAAO;CAClB,GACA,OAAO,gBACT,CAAC,CAAC,KACA,OAAO,YACL,OAAO,aAAa,OAAO,eAAe,mBAAmB,CAAC,CAAC,CAAC;EAC9D,MAAM;EACN,SAAS,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;CACnD,CAAC,CAAC,CAAC,KAAK,OAAO,KAAK,CACtB,CACF;AACF,CAAC"}
+{"version":3,"file":"MemoryProtocol.mjs","names":[],"sources":["../src/MemoryProtocol.ts"],"sourcesContent":["import * as MemoryNamespace from \"@yielded/agent/memory-namespace\";\nimport {\n  MemoryLookup,\n  MemoryRecallError,\n  MemoryRecallLimits,\n} from \"@yielded/agent/memory-reference\";\nimport { MemoryAccess, revalidateMemoryLookup } from \"@yielded/agent/memory-revalidation\";\nimport {\n  MemoryKey,\n  MemoryReader,\n  MemoryConflict,\n  MemoryDocument,\n  MemoryMutationFailure,\n  MemoryOperationConflict,\n  MemoryStorageError,\n  MemoryWithdrawn,\n  MemoryWrite,\n  MemoryWriter,\n} from \"@yielded/agent/memory-store\";\nimport {\n  MemoryIndexSearch,\n  MemoryIndexError,\n  SemanticMemoryProfile,\n} from \"@yielded/agent/semantic-memory-index\";\nimport {\n  SemanticMemoryError,\n  SemanticCandidateLimits,\n  SemanticCandidateResult,\n  revalidateSemanticMemoryCandidates,\n} from \"@yielded/agent/semantic-memory-revalidation\";\nimport { Principal } from \"@yielded/agent/submission-ledger\";\nimport { Clock, Context, Effect, Schema } from \"effect\";\n\nexport class MemoryRpcError extends Schema.TaggedError<MemoryRpcError>()(\"MemoryRpcError\", {\n  reason: Schema.Literals([\"denied\", \"protocol\", \"budget\", \"timeout\", \"unavailable\"]),\n}) {}\n\nexport class MemoryRpcLimits extends Schema.Class<MemoryRpcLimits>(\n  \"@effect-agent/storage-cloudflare/MemoryRpcLimits\",\n)({\n  maxRequestBytes: Schema.Int.check(Schema.isBetween({ minimum: 256, maximum: 4_194_304 })),\n  maxResponseBytes: Schema.Int.check(Schema.isBetween({ minimum: 256, maximum: 16_777_216 })),\n  maxSourceBytes: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 67_108_864 })),\n  maxSources: MemoryRecallLimits.fields.maxSources,\n  timeoutMillis: MemoryRecallLimits.fields.timeoutMillis,\n}) {}\n\nexport const defaultMemoryRpcLimits = MemoryRpcLimits.make({\n  maxRequestBytes: 1_048_576,\n  maxResponseBytes: 4_194_304,\n  maxSourceBytes: 16_777_216,\n  maxSources: 16,\n  timeoutMillis: 10_000,\n});\n\nconst RequestFields = {\n  version: Schema.Literal(1),\n  access: MemoryAccess.Wire,\n  /** Host-authenticated identity, never copied from model input. The owner still authorizes it. */\n  principal: Principal,\n  deadlineMillis: Schema.Finite.check(Schema.isGreaterThanOrEqualTo(0)),\n};\n\nconst RevalidateRequest = Schema.TaggedStruct(\"Revalidate\", {\n  ...RequestFields,\n  lookup: MemoryLookup,\n  limits: MemoryRecallLimits,\n});\n\nconst ChangeRequest = Schema.TaggedStruct(\"Change\", { ...RequestFields, write: MemoryWrite.Wire });\n\nconst GetRequest = Schema.TaggedStruct(\"Get\", { ...RequestFields, key: MemoryKey.Wire });\n\nconst SemanticRequest: Schema.TaggedStruct<\n  \"RevalidateSemantic\",\n  typeof RequestFields & {\n    readonly found: typeof MemoryIndexSearch.Wire;\n    readonly profile: typeof SemanticMemoryProfile;\n    readonly limits: typeof SemanticCandidateLimits;\n  }\n> = Schema.TaggedStruct(\"RevalidateSemantic\", {\n  ...RequestFields,\n  found: MemoryIndexSearch.Wire,\n  profile: SemanticMemoryProfile,\n  limits: SemanticCandidateLimits,\n});\n\nexport const MemoryOwnerRequest: Schema.Union<\n  [typeof RevalidateRequest, typeof ChangeRequest, typeof SemanticRequest, typeof GetRequest]\n> = Schema.Union([RevalidateRequest, ChangeRequest, SemanticRequest, GetRequest]);\n\nexport type MemoryOwnerRequest = typeof MemoryOwnerRequest.Type;\n\nexport const MemoryOwnerFailure = Schema.Union([\n  MemoryRpcError,\n  MemoryStorageError,\n  MemoryRecallError,\n  MemoryConflict,\n  MemoryWithdrawn,\n  MemoryOperationConflict,\n  MemoryMutationFailure,\n  MemoryIndexError,\n  SemanticMemoryError,\n]);\n\nexport type MemoryOwnerFailure = typeof MemoryOwnerFailure.Type;\n\nconst LookupResponse = Schema.TaggedStruct(\"Lookup\", {\n  access: MemoryAccess.Wire,\n  lookup: MemoryLookup,\n});\n\nconst ChangedResponse = Schema.TaggedStruct(\"Changed\", {\n  access: MemoryAccess.Wire,\n  document: MemoryDocument.Wire,\n});\n\nconst SemanticResponse = Schema.TaggedStruct(\"Semantic\", {\n  access: MemoryAccess.Wire,\n  result: SemanticCandidateResult,\n});\n\nconst DocumentResponse = Schema.TaggedStruct(\"Document\", {\n  access: MemoryAccess.Wire,\n  key: MemoryKey.Wire,\n  document: Schema.NullOr(MemoryDocument.Wire),\n});\n\nconst FailedResponse = Schema.TaggedStruct(\"Failed\", { failure: MemoryOwnerFailure });\n\nexport const MemoryOwnerResponse: Schema.Union<\n  [\n    typeof LookupResponse,\n    typeof ChangedResponse,\n    typeof SemanticResponse,\n    typeof DocumentResponse,\n    typeof FailedResponse,\n  ]\n> = Schema.Union([\n  LookupResponse,\n  ChangedResponse,\n  SemanticResponse,\n  DocumentResponse,\n  FailedResponse,\n]);\n\nexport type MemoryOwnerResponse = typeof MemoryOwnerResponse.Type;\n\n/**\n * Fail-closed application policy. Authorize the namespace, principal, scope, and full command.\n * Get requires exact-key authority, including application source/provenance checks where needed.\n * Possession of a key or scope is not authorization, including for absent or withdrawn documents.\n */\nexport class MemoryOwnerAuthorizer extends Context.Service<\n  MemoryOwnerAuthorizer,\n  {\n    readonly authorize: (request: MemoryOwnerRequest) => Effect.Effect<void, MemoryRpcError>;\n  }\n>()(\"@effect-agent/storage-cloudflare/MemoryOwnerAuthorizer\") {}\n\n/** Canonical namespace derived from this object's idFromName identity, never its request. */\nexport class MemoryOwnerIdentity extends Context.Service<\n  MemoryOwnerIdentity,\n  {\n    readonly namespace: MemoryNamespace.Any;\n  }\n>()(\"@effect-agent/storage-cloudflare/MemoryOwnerIdentity\") {}\n\nexport const memoryWireBytes = (text: string): number => new TextEncoder().encode(text).byteLength;\n\nexport const decodeMemoryWire = Effect.fnUntraced(function* <A, I>(\n  schema: Schema.Codec<A, I, never>,\n  raw: unknown,\n  maxBytes: number,\n) {\n  const text = yield* Schema.decodeUnknownEffect(Schema.String)(raw).pipe(\n    Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n  );\n\n  if (text.length > maxBytes || memoryWireBytes(text) > maxBytes)\n    return yield* MemoryRpcError.make({ reason: \"budget\" });\n\n  return yield* Schema.decodeEffect(Schema.fromJsonString(schema))(text).pipe(\n    Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n  );\n});\n\nexport const encodeMemoryWire = Effect.fnUntraced(function* <A, I>(\n  schema: Schema.Codec<A, I, never, never>,\n  value: A,\n  maxBytes: number,\n) {\n  const encoded = yield* Schema.encodeEffect(Schema.fromJsonString(schema))(value).pipe(\n    Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n  );\n\n  if (encoded.length > maxBytes || memoryWireBytes(encoded) > maxBytes)\n    return yield* MemoryRpcError.make({ reason: \"budget\" });\n\n  return encoded;\n});\n\n/** One local read for Get, or per distinct candidate source. No discovery or background work. */\nexport const handleMemoryOwnerRequest = Effect.fnUntraced(function* (\n  raw: unknown,\n  limits: MemoryRpcLimits = defaultMemoryRpcLimits,\n): Effect.fn.Return<\n  string,\n  never,\n  MemoryOwnerIdentity | MemoryOwnerAuthorizer | MemoryReader | MemoryWriter\n> {\n  const result = yield* Effect.gen(function* (): Effect.fn.Return<\n    MemoryOwnerResponse,\n    MemoryOwnerFailure,\n    MemoryOwnerIdentity | MemoryOwnerAuthorizer | MemoryReader | MemoryWriter\n  > {\n    limits = yield* Schema.decodeEffect(MemoryRpcLimits)(limits).pipe(\n      Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n    );\n    const request = yield* decodeMemoryWire(MemoryOwnerRequest, raw, limits.maxRequestBytes);\n    const { namespace } = yield* MemoryOwnerIdentity;\n\n    if (\n      !MemoryNamespace.equals(namespace, request.access.namespace) ||\n      (request._tag === \"Get\" && !MemoryNamespace.equals(namespace, request.key.namespace)) ||\n      (request._tag === \"Change\" &&\n        !MemoryNamespace.equals(namespace, request.write.key.namespace)) ||\n      (request._tag === \"RevalidateSemantic\" &&\n        request.found.candidates.some(\n          (candidate) => !MemoryNamespace.equals(namespace, candidate.key.namespace),\n        ))\n    )\n      return yield* MemoryRpcError.make({ reason: \"denied\" });\n\n    const remaining = Math.min(\n      limits.timeoutMillis,\n      request.deadlineMillis - (yield* Clock.currentTimeMillis),\n    );\n\n    if (remaining <= 0) return yield* MemoryRpcError.make({ reason: \"timeout\" });\n\n    return yield* Effect.gen(function* (): Effect.fn.Return<\n      MemoryOwnerResponse,\n      MemoryOwnerFailure,\n      MemoryOwnerAuthorizer | MemoryReader | MemoryWriter\n    > {\n      const authorizer = yield* MemoryOwnerAuthorizer;\n\n      yield* authorizer.authorize(request);\n      if (request._tag === \"Get\") {\n        const reader = yield* MemoryReader;\n        const current = yield* reader.get(request.key);\n\n        const document =\n          current === null ? null : yield* MemoryDocument.restore(namespace, current);\n\n        if (document !== null) {\n          if (document.key.id !== request.key.id || document.source.id !== request.key.id)\n            return yield* MemoryStorageError.make({\n              operation: \"validate memory read identity\",\n              reason: \"corrupt\",\n            });\n          if (\n            document._tag === \"ActiveMemoryDocument\" &&\n            !document.scopes.includes(request.access.scope)\n          )\n            return yield* MemoryRpcError.make({ reason: \"denied\" });\n\n          yield* encodeMemoryWire(MemoryDocument.Wire, document, limits.maxSourceBytes);\n        }\n\n        return { _tag: \"Document\", access: request.access, key: request.key, document };\n      }\n      if (request._tag === \"Change\") {\n        const writer = yield* MemoryWriter;\n\n        return {\n          _tag: \"Changed\",\n          access: request.access,\n          document: yield* writer.change(request.write),\n        };\n      }\n      if (request._tag === \"RevalidateSemantic\") {\n        if (\n          new Set(request.found.candidates.map((candidate) => candidate.key.id)).size >\n          limits.maxSources\n        )\n          return yield* MemoryRpcError.make({ reason: \"budget\" });\n\n        const result = yield* revalidateSemanticMemoryCandidates(\n          request.found,\n          request.access,\n          request.profile,\n          {\n            ...request.limits,\n            maxSourceBytes: Math.min(\n              limits.maxSourceBytes,\n              request.limits.maxSourceBytes ?? 16_777_216,\n            ),\n            maxOutputBytes: Math.min(\n              limits.maxResponseBytes,\n              request.limits.maxOutputBytes ?? 16_777_216,\n            ),\n          },\n        );\n\n        return { _tag: \"Semantic\", access: request.access, result };\n      }\n\n      const count =\n        request.lookup._tag === \"Found\"\n          ? new Set(request.lookup.passages.map((passage) => passage.source.id)).size\n          : 0;\n\n      if (count > Math.min(limits.maxSources, request.limits.maxSources))\n        return yield* MemoryRpcError.make({ reason: \"budget\" });\n\n      const lookup = yield* revalidateMemoryLookup(request.lookup, request.access, {\n        maxSourceBytes: limits.maxSourceBytes,\n        maxInputBytes: Math.min(limits.maxSourceBytes, request.limits.maxInputBytes ?? 16_777_216),\n      });\n\n      return { _tag: \"Lookup\", access: request.access, lookup };\n    }).pipe(\n      Effect.scoped,\n      Effect.timeoutOrElse({\n        duration: remaining,\n        orElse: () => Effect.fail(MemoryRpcError.make({ reason: \"timeout\" })),\n      }),\n    );\n  }).pipe(\n    Effect.flatMap((response) =>\n      encodeMemoryWire(MemoryOwnerResponse, response, limits.maxResponseBytes),\n    ),\n    Effect.result,\n  );\n\n  if (result._tag === \"Success\") return result.success;\n\n  return yield* encodeMemoryWire(\n    MemoryOwnerResponse,\n    {\n      _tag: \"Failed\",\n      failure: result.failure,\n    },\n    limits.maxResponseBytes,\n  ).pipe(\n    Effect.catch(() =>\n      Schema.encodeEffect(Schema.fromJsonString(MemoryOwnerResponse))({\n        _tag: \"Failed\",\n        failure: MemoryRpcError.make({ reason: \"budget\" }),\n      }).pipe(Effect.orDie),\n    ),\n  );\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAiCA,IAAa,iBAAb,cAAoC,OAAO,YAA4B,CAAC,CAAC,kBAAkB,EACzF,QAAQ,OAAO,SAAS;CAAC;CAAU;CAAY;CAAU;CAAW;AAAa,CAAC,EACpF,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,kBAAb,cAAqC,OAAO,MAC1C,kDACF,CAAC,CAAC;CACA,iBAAiB,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAK,SAAS;CAAU,CAAC,CAAC;CACxF,kBAAkB,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAK,SAAS;CAAW,CAAC,CAAC;CAC1F,gBAAgB,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAW,CAAC,CAAC;CACtF,YAAY,mBAAmB,OAAO;CACtC,eAAe,mBAAmB,OAAO;AAC3C,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,yBAAyB,gBAAgB,KAAK;CACzD,iBAAiB;CACjB,kBAAkB;CAClB,gBAAgB;CAChB,YAAY;CACZ,eAAe;AACjB,CAAC;AAED,MAAM,gBAAgB;CACpB,SAAS,OAAO,QAAQ,CAAC;CACzB,QAAQ,aAAa;;CAErB,WAAW;CACX,gBAAgB,OAAO,OAAO,MAAM,OAAO,uBAAuB,CAAC,CAAC;AACtE;AAEA,MAAM,oBAAoB,OAAO,aAAa,cAAc;CAC1D,GAAG;CACH,QAAQ;CACR,QAAQ;AACV,CAAC;AAED,MAAM,gBAAgB,OAAO,aAAa,UAAU;CAAE,GAAG;CAAe,OAAO,YAAY;AAAK,CAAC;AAEjG,MAAM,aAAa,OAAO,aAAa,OAAO;CAAE,GAAG;CAAe,KAAK,UAAU;AAAK,CAAC;AAEvF,MAAM,kBAOF,OAAO,aAAa,sBAAsB;CAC5C,GAAG;CACH,OAAO,kBAAkB;CACzB,SAAS;CACT,QAAQ;AACV,CAAC;AAED,MAAa,qBAET,OAAO,MAAM;CAAC;CAAmB;CAAe;CAAiB;AAAU,CAAC;AAIhF,MAAa,qBAAqB,OAAO,MAAM;CAC7C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAID,MAAM,iBAAiB,OAAO,aAAa,UAAU;CACnD,QAAQ,aAAa;CACrB,QAAQ;AACV,CAAC;AAED,MAAM,kBAAkB,OAAO,aAAa,WAAW;CACrD,QAAQ,aAAa;CACrB,UAAU,eAAe;AAC3B,CAAC;AAED,MAAM,mBAAmB,OAAO,aAAa,YAAY;CACvD,QAAQ,aAAa;CACrB,QAAQ;AACV,CAAC;AAED,MAAM,mBAAmB,OAAO,aAAa,YAAY;CACvD,QAAQ,aAAa;CACrB,KAAK,UAAU;CACf,UAAU,OAAO,OAAO,eAAe,IAAI;AAC7C,CAAC;AAED,MAAM,iBAAiB,OAAO,aAAa,UAAU,EAAE,SAAS,mBAAmB,CAAC;AAEpF,MAAa,sBAQT,OAAO,MAAM;CACf;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;;AASD,IAAa,wBAAb,cAA2C,QAAQ,QAKjD,CAAC,CAAC,wDAAwD,CAAC,CAAC,CAAC;;AAG/D,IAAa,sBAAb,cAAyC,QAAQ,QAK/C,CAAC,CAAC,sDAAsD,CAAC,CAAC,CAAC;AAE7D,MAAa,mBAAmB,SAAyB,IAAI,YAAY,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;AAExF,MAAa,mBAAmB,OAAO,WAAW,WAChD,QACA,KACA,UACA;CACA,MAAM,OAAO,OAAO,OAAO,oBAAoB,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KACjE,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;CAEA,IAAI,KAAK,SAAS,YAAY,gBAAgB,IAAI,IAAI,UACpD,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;CAExD,OAAO,OAAO,OAAO,aAAa,OAAO,eAAe,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KACrE,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;AACF,CAAC;AAED,MAAa,mBAAmB,OAAO,WAAW,WAChD,QACA,OACA,UACA;CACA,MAAM,UAAU,OAAO,OAAO,aAAa,OAAO,eAAe,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAC/E,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;CAEA,IAAI,QAAQ,SAAS,YAAY,gBAAgB,OAAO,IAAI,UAC1D,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;CAExD,OAAO;AACT,CAAC;;AAGD,MAAa,2BAA2B,OAAO,WAAW,WACxD,KACA,SAA0B,wBAK1B;CACA,MAAM,SAAS,OAAO,OAAO,IAAI,aAI/B;EACA,SAAS,OAAO,OAAO,aAAa,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,KAC3D,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;EACA,MAAM,UAAU,OAAO,iBAAiB,oBAAoB,KAAK,OAAO,eAAe;EACvF,MAAM,EAAE,cAAc,OAAO;EAE7B,IACE,CAAC,gBAAgB,OAAO,WAAW,QAAQ,OAAO,SAAS,KAC1D,QAAQ,SAAS,SAAS,CAAC,gBAAgB,OAAO,WAAW,QAAQ,IAAI,SAAS,KAClF,QAAQ,SAAS,YAChB,CAAC,gBAAgB,OAAO,WAAW,QAAQ,MAAM,IAAI,SAAS,KAC/D,QAAQ,SAAS,wBAChB,QAAQ,MAAM,WAAW,MACtB,cAAc,CAAC,gBAAgB,OAAO,WAAW,UAAU,IAAI,SAAS,CAC3E,GAEF,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;EAExD,MAAM,YAAY,KAAK,IACrB,OAAO,eACP,QAAQ,kBAAkB,OAAO,MAAM,kBACzC;EAEA,IAAI,aAAa,GAAG,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,UAAU,CAAC;EAE3E,OAAO,OAAO,OAAO,IAAI,aAIvB;GAGA,QAAO,OAFmB,sBAAA,CAER,UAAU,OAAO;GACnC,IAAI,QAAQ,SAAS,OAAO;IAE1B,MAAM,UAAU,QAAO,OADD,aAAA,CACQ,IAAI,QAAQ,GAAG;IAE7C,MAAM,WACJ,YAAY,OAAO,OAAO,OAAO,eAAe,QAAQ,WAAW,OAAO;IAE5E,IAAI,aAAa,MAAM;KACrB,IAAI,SAAS,IAAI,OAAO,QAAQ,IAAI,MAAM,SAAS,OAAO,OAAO,QAAQ,IAAI,IAC3E,OAAO,OAAO,mBAAmB,KAAK;MACpC,WAAW;MACX,QAAQ;KACV,CAAC;KACH,IACE,SAAS,SAAS,0BAClB,CAAC,SAAS,OAAO,SAAS,QAAQ,OAAO,KAAK,GAE9C,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;KAExD,OAAO,iBAAiB,eAAe,MAAM,UAAU,OAAO,cAAc;IAC9E;IAEA,OAAO;KAAE,MAAM;KAAY,QAAQ,QAAQ;KAAQ,KAAK,QAAQ;KAAK;IAAS;GAChF;GACA,IAAI,QAAQ,SAAS,UAAU;IAC7B,MAAM,SAAS,OAAO;IAEtB,OAAO;KACL,MAAM;KACN,QAAQ,QAAQ;KAChB,UAAU,OAAO,OAAO,OAAO,QAAQ,KAAK;IAC9C;GACF;GACA,IAAI,QAAQ,SAAS,sBAAsB;IACzC,IACE,IAAI,IAAI,QAAQ,MAAM,WAAW,KAAK,cAAc,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,OACvE,OAAO,YAEP,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;IAExD,MAAM,SAAS,OAAO,mCACpB,QAAQ,OACR,QAAQ,QACR,QAAQ,SACR;KACE,GAAG,QAAQ;KACX,gBAAgB,KAAK,IACnB,OAAO,gBACP,QAAQ,OAAO,kBAAkB,QACnC;KACA,gBAAgB,KAAK,IACnB,OAAO,kBACP,QAAQ,OAAO,kBAAkB,QACnC;IACF,CACF;IAEA,OAAO;KAAE,MAAM;KAAY,QAAQ,QAAQ;KAAQ;IAAO;GAC5D;GAOA,KAJE,QAAQ,OAAO,SAAS,UACpB,IAAI,IAAI,QAAQ,OAAO,SAAS,KAAK,YAAY,QAAQ,OAAO,EAAE,CAAC,CAAC,CAAC,OACrE,KAEM,KAAK,IAAI,OAAO,YAAY,QAAQ,OAAO,UAAU,GAC/D,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;GAExD,MAAM,SAAS,OAAO,uBAAuB,QAAQ,QAAQ,QAAQ,QAAQ;IAC3E,gBAAgB,OAAO;IACvB,eAAe,KAAK,IAAI,OAAO,gBAAgB,QAAQ,OAAO,iBAAiB,QAAU;GAC3F,CAAC;GAED,OAAO;IAAE,MAAM;IAAU,QAAQ,QAAQ;IAAQ;GAAO;EAC1D,CAAC,CAAC,CAAC,KACD,OAAO,QACP,OAAO,cAAc;GACnB,UAAU;GACV,cAAc,OAAO,KAAK,eAAe,KAAK,EAAE,QAAQ,UAAU,CAAC,CAAC;EACtE,CAAC,CACH;CACF,CAAC,CAAC,CAAC,KACD,OAAO,SAAS,aACd,iBAAiB,qBAAqB,UAAU,OAAO,gBAAgB,CACzE,GACA,OAAO,MACT;CAEA,IAAI,OAAO,SAAS,WAAW,OAAO,OAAO;CAE7C,OAAO,OAAO,iBACZ,qBACA;EACE,MAAM;EACN,SAAS,OAAO;CAClB,GACA,OAAO,gBACT,CAAC,CAAC,KACA,OAAO,YACL,OAAO,aAAa,OAAO,eAAe,mBAAmB,CAAC,CAAC,CAAC;EAC9D,MAAM;EACN,SAAS,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;CACnD,CAAC,CAAC,CAAC,KAAK,OAAO,KAAK,CACtB,CACF;AACF,CAAC"}