domainkit 0.14.1 → 0.16.0

package/dist/internal/storage-memory.mjs

@@ -1,9 +1,9 @@
 import { PlanId } from "../Plan.mjs";
-import { Busy, Expired, InvalidInput, NotFound, Stale } from "../Reason.mjs";
+import { BatchStale, Busy, Expired, InvalidInput, NotFound, Stale } from "../Reason.mjs";
 import { fail } from "./error.mjs";
 import { fresh } from "./ids.mjs";
 import { Service } from "../Principal.mjs";
-import { Attachment, Attempt, Authorization, Connection, ContinuationHeader } from "../Storage.mjs";
+import { Attachment, Attempt, Authorization, Batch, BatchId, BatchItem, Connection, ContinuationHeader, batchStatusOf } from "../Storage.mjs";
 import { DateTime, Effect, Option, Semaphore } from "effect";
 //#region src/internal/storage-memory.ts
 const notFound = (entity, id) => fail(new NotFound({
@@ -22,6 +22,8 @@ function makeMemory(options = {}) {
 		attachments: /* @__PURE__ */ new Map(),
 		continuations: /* @__PURE__ */ new Map(),
 		attempts: /* @__PURE__ */ new Map(),
+		batches: /* @__PURE__ */ new Map(),
+		batchItems: /* @__PURE__ */ new Map(),
 		readiness: /* @__PURE__ */ new Map(),
 		locks: /* @__PURE__ */ new Set()
 	};
@@ -54,6 +56,52 @@ function makeMemory(options = {}) {
 		const row = ownedRows(state.attempts, principal).find(predicate);
 		return row === void 0 ? notFound(entity, id) : Effect.succeed(row);
 	});
+	const batch = (principal, id) => Effect.suspend(() => {
+		const row = owned(state.batches, principal, id);
+		return row === void 0 ? notFound("batch", id) : Effect.succeed(row);
+	});
+	const itemsOf = (batchId) => [...state.batchItems.get(batchId) ?? []].sort((left, right) => left.position - right.position);
+	const aggregateOf = (row) => ({
+		batch: row,
+		items: itemsOf(row.id)
+	});
+	const batchStale = (row) => fail(new BatchStale({
+		batchId: row.id,
+		status: row.status,
+		digest: row.digest
+	}));
+	const statusOf = (row, items) => batchStatusOf({
+		approved: row.approval !== null,
+		rejected: row.rejection !== null,
+		items: items.map((item) => item.attemptId === null ? null : state.attempts.get(item.attemptId)?.status ?? null)
+	});
+	/** Store `row` with its status recomputed from the items' attempts, and return the aggregate. */
+	const settle = (row, now) => {
+		const items = itemsOf(row.id);
+		const status = statusOf(row, items);
+		const next = new Batch({
+			...row,
+			status,
+			completedAt: status === "complete" || status === "rejected" ? now : null,
+			updatedAt: now
+		});
+		state.batches.set(row.id, next);
+		return {
+			batch: next,
+			items
+		};
+	};
+	const replaceItem = (item) => {
+		const items = state.batchItems.get(item.batchId) ?? [];
+		const index = items.findIndex((row) => row.attachmentId === item.attachmentId);
+		if (index >= 0) items[index] = item;
+	};
+	/** Only a batch still being planned accepts plan state, an approval, or a rejection. */
+	const openForPlanning = (row) => row.status === "planning" || row.status === "planned" ? Effect.void : batchStale(row);
+	const itemAt = (row, attachmentId) => Effect.suspend(() => {
+		const item = itemsOf(row.id).find((entry) => entry.attachmentId === attachmentId);
+		return item === void 0 ? notFound("attachment", attachmentId) : Effect.succeed(item);
+	});
 	const finishRevocation = (principal, row, revoke) => Effect.gen(function* () {
 		yield* commit("authorizations.prepareRevocation");
 		state.authorizations.set(row.id, new Authorization({
@@ -289,6 +337,141 @@ function makeMemory(options = {}) {
 				return next;
 			}))
 		},
+		batches: {
+			create: (input) => write((principal) => Effect.gen(function* () {
+				const replay = ownedRows(state.batches, principal).find((row) => row.idempotencyKey === input.idempotencyKey);
+				if (replay !== void 0) return aggregateOf(replay);
+				if (input.attachmentIds.length === 0) return yield* invalid("A batch needs at least one attachment", "attachmentIds");
+				if (new Set(input.attachmentIds).size !== input.attachmentIds.length) return yield* invalid("A batch holds one item per attachment", "attachmentIds");
+				for (const attachmentId of input.attachmentIds) yield* attachment(principal, attachmentId);
+				const now = yield* DateTime.now;
+				const id = BatchId.make(yield* fresh("batch"));
+				const row = new Batch({
+					id,
+					ownerId: principal.ownerId,
+					kind: input.kind,
+					status: "planning",
+					digest: null,
+					approval: null,
+					rejection: null,
+					idempotencyKey: input.idempotencyKey,
+					createdBy: principal.actorId,
+					createdAt: now,
+					updatedAt: now,
+					completedAt: null
+				});
+				yield* commit("batches.create");
+				state.batches.set(id, row);
+				state.batchItems.set(id, input.attachmentIds.map((attachmentId, position) => new BatchItem({
+					batchId: id,
+					attachmentId,
+					position,
+					attemptId: null,
+					planFailure: null
+				})));
+				return aggregateOf(row);
+			})),
+			get: (id) => read((principal) => Effect.map(batch(principal, id), aggregateOf)),
+			byIdempotencyKey: (key) => read((principal) => Effect.sync(() => Option.map(Option.fromNullishOr(ownedRows(state.batches, principal).find((row) => row.idempotencyKey === key)), aggregateOf))),
+			listUnfinished: () => read((principal) => Effect.sync(() => ownedRows(state.batches, principal).filter((row) => row.status !== "complete" && row.status !== "rejected").sort((left, right) => DateTime.toEpochMillis(right.updatedAt) - DateTime.toEpochMillis(left.updatedAt)).map(aggregateOf))),
+			recordItemPlan: (id, attachmentId, attemptId) => write((principal) => Effect.gen(function* () {
+				const row = yield* batch(principal, id);
+				yield* openForPlanning(row);
+				const item = yield* itemAt(row, attachmentId);
+				const planned = yield* attempt(principal, attemptId);
+				if (planned.attachmentId !== attachmentId || planned.kind !== row.kind) return yield* invalid(`Plan ${attemptId} does not belong to attachment ${attachmentId} in this batch`, "attemptId");
+				yield* commit("batches.recordItemPlan");
+				replaceItem(new BatchItem({
+					...item,
+					attemptId,
+					planFailure: null
+				}));
+				return settle(row, yield* DateTime.now);
+			})),
+			recordItemPlanFailure: (id, attachmentId, message) => write((principal) => Effect.gen(function* () {
+				const row = yield* batch(principal, id);
+				yield* openForPlanning(row);
+				const item = yield* itemAt(row, attachmentId);
+				yield* commit("batches.recordItemPlanFailure");
+				replaceItem(new BatchItem({
+					...item,
+					attemptId: null,
+					planFailure: message
+				}));
+				return settle(row, yield* DateTime.now);
+			})),
+			approve: (id, input) => write((principal) => Effect.gen(function* () {
+				const row = yield* batch(principal, id);
+				if (row.approval !== null) return row.digest === input.digest ? aggregateOf(row) : yield* batchStale(row);
+				if (row.status !== "planned") return yield* batchStale(row);
+				const items = itemsOf(id);
+				const pairs = [];
+				for (const item of items) {
+					const supplied = input.approvals.find((entry) => entry.attachmentId === item.attachmentId);
+					if (supplied === void 0) return yield* invalid(`Batch ${id} has no approval for attachment ${item.attachmentId}`, "approvals");
+					const stored = item.attemptId === null ? void 0 : state.attempts.get(item.attemptId);
+					if (stored === void 0 || stored.id !== supplied.approval.planId) return yield* batchStale(row);
+					if (stored.approval?.id !== supplied.approval.id && stored.status !== "planned") return yield* stale(stored);
+					pairs.push({
+						attempt: stored,
+						approval: supplied.approval
+					});
+				}
+				const now = yield* DateTime.now;
+				yield* commit("batches.approve");
+				for (const { attempt: stored, approval } of pairs) {
+					if (stored.approval?.id === approval.id) continue;
+					state.attempts.set(stored.id, new Attempt({
+						...stored,
+						status: "approved",
+						approval,
+						updatedAt: now
+					}));
+				}
+				return settle(new Batch({
+					...row,
+					digest: input.digest,
+					approval: {
+						actorId: input.actorId,
+						at: now
+					}
+				}), now);
+			})),
+			reject: (id, input) => write((principal) => Effect.gen(function* () {
+				const row = yield* batch(principal, id);
+				if (row.rejection !== null) return aggregateOf(row);
+				yield* openForPlanning(row);
+				const now = yield* DateTime.now;
+				yield* commit("batches.reject");
+				for (const item of itemsOf(id)) {
+					const stored = item.attemptId === null ? void 0 : state.attempts.get(item.attemptId);
+					if (stored === void 0 || stored.status !== "planned") continue;
+					state.attempts.set(stored.id, new Attempt({
+						...stored,
+						status: "rejected",
+						rejection: {
+							actorId: input.actorId,
+							reason: input.reason,
+							at: now
+						},
+						updatedAt: now
+					}));
+				}
+				return settle(new Batch({
+					...row,
+					rejection: {
+						actorId: input.actorId,
+						reason: input.reason,
+						at: now
+					}
+				}), now);
+			})),
+			refresh: (id) => write((principal) => Effect.gen(function* () {
+				const row = yield* batch(principal, id);
+				yield* commit("batches.refresh");
+				return settle(row, yield* DateTime.now);
+			}))
+		},
 		readiness: {
 			put: (readiness) => write((principal) => Effect.gen(function* () {
 				if (readiness.ownerId !== principal.ownerId) return yield* invalid("Readiness owner does not match the principal", "ownerId");

package/dist/internal/storage-memory.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"storage-memory.mjs","names":["Errors.fail","Reason.NotFound","Reason.InvalidInput","Principal.Service","Storage.Authorization","Reason.Busy","Storage.Connection","Storage.Attachment","Reason.Expired","Storage.ContinuationHeader","Storage.Attempt","Reason.Stale"],"sources":["../../src/internal/storage-memory.ts"],"sourcesContent":["import { DateTime, Effect, Option, Semaphore } from \"effect\";\n\nimport type * as Approval from \"../Approval.ts\";\nimport * as Errors from \"./error.ts\";\nimport * as Reason from \"../Reason.ts\";\nimport * as Plan from \"../Plan.ts\";\nimport * as Principal from \"../Principal.ts\";\nimport type * as Receipt from \"../Receipt.ts\";\nimport * as Storage from \"../Storage.ts\";\nimport { fresh } from \"./ids.ts\";\n\ninterface State {\n  readonly authorizations: Map<string, Storage.Authorization>;\n  readonly credentials: Map<string, Storage.Credential>;\n  readonly connections: Map<string, Storage.Connection>;\n  readonly attachments: Map<string, Storage.Attachment>;\n  readonly continuations: Map<string, Storage.Continuation>;\n  readonly attempts: Map<string, Storage.Attempt>;\n  readonly readiness: Map<string, Storage.Readiness>;\n  readonly locks: Set<string>;\n}\n\nconst notFound = (entity: Reason.NotFound[\"entity\"], id: string) =>\n  Errors.fail(new Reason.NotFound({ entity, id }));\nconst invalid = (message: string, field?: string) =>\n  Errors.fail(new Reason.InvalidInput({ message, ...(field === undefined ? {} : { field }) }));\n\nexport function makeMemory(options: Storage.MemoryOptions = {}): Storage.Interface {\n  const state: State = {\n    authorizations: new Map(),\n    credentials: new Map(),\n    connections: new Map(),\n    attachments: new Map(),\n    continuations: new Map(),\n    attempts: new Map(),\n    readiness: new Map(),\n    locks: new Set(),\n  };\n  const mutations = Semaphore.makeUnsafe(1);\n  const commit = (operation: string) =>\n    options.beforeCommit === undefined ? Effect.void : options.beforeCommit(operation);\n\n  const read = <A, E, R = never>(\n    run: (principal: Principal.Interface) => Effect.Effect<A, E, R>,\n  ): Effect.Effect<A, E, Principal.Service | R> => Effect.flatMap(Principal.Service, run);\n  const write = <A, E>(\n    run: (principal: Principal.Interface) => Effect.Effect<A, E>,\n  ): Effect.Effect<A, E, Principal.Service> =>\n    Effect.flatMap(Principal.Service, (principal) => mutations.withPermit(run(principal)));\n\n  const owned = <Row extends { readonly ownerId: string }>(\n    rows: Map<string, Row>,\n    principal: Principal.Interface,\n    id: string,\n  ): Row | undefined => {\n    const row = rows.get(id);\n    return row !== undefined && row.ownerId === principal.ownerId ? row : undefined;\n  };\n  const ownedRows = <Row extends { readonly ownerId: string }>(\n    rows: Map<string, Row>,\n    principal: Principal.Interface,\n  ) => [...rows.values()].filter((row) => row.ownerId === principal.ownerId);\n\n  const authorization = (principal: Principal.Interface, id: string) =>\n    Effect.suspend(() => {\n      const row = owned(state.authorizations, principal, id);\n      return row === undefined ? notFound(\"authorization\", id) : Effect.succeed(row);\n    });\n  const connection = (principal: Principal.Interface, id: string) =>\n    Effect.suspend(() => {\n      const row = owned(state.connections, principal, id);\n      return row === undefined ? notFound(\"connection\", id) : Effect.succeed(row);\n    });\n  const attachment = (principal: Principal.Interface, id: string) =>\n    Effect.suspend(() => {\n      const row = owned(state.attachments, principal, id);\n      return row === undefined ? notFound(\"attachment\", id) : Effect.succeed(row);\n    });\n  const attempt = (principal: Principal.Interface, id: string) =>\n    Effect.suspend(() => {\n      const row = owned(state.attempts, principal, id);\n      return row === undefined ? notFound(\"plan\", id) : Effect.succeed(row);\n    });\n  const attemptWhere = (\n    principal: Principal.Interface,\n    entity: Reason.NotFound[\"entity\"],\n    id: string,\n    predicate: (row: Storage.Attempt) => boolean,\n  ) =>\n    Effect.suspend(() => {\n      const row = ownedRows(state.attempts, principal).find(predicate);\n      return row === undefined ? notFound(entity, id) : Effect.succeed(row);\n    });\n\n  const finishRevocation = <E, R>(\n    principal: Principal.Interface,\n    row: Storage.Authorization,\n    revoke: Effect.Effect<void, E, R>,\n  ): Effect.Effect<void, Errors.DomainKitError | E, R> =>\n    Effect.gen(function* () {\n      yield* commit(\"authorizations.prepareRevocation\");\n      state.authorizations.set(\n        row.id,\n        new Storage.Authorization({ ...row, revocation: \"pending\" }),\n      );\n      yield* revoke;\n      yield* commit(\"authorizations.completeRevocation\");\n      if (owned(state.authorizations, principal, row.id) !== undefined) {\n        state.authorizations.delete(row.id);\n        state.credentials.delete(row.id);\n      }\n    });\n\n  return {\n    authorizations: {\n      upsert: ({ authorization: input, credential, expectedId }) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            if (input.ownerId !== principal.ownerId) {\n              return yield* invalid(\"Authorization owner does not match the principal\", \"ownerId\");\n            }\n            if (expectedId !== undefined) {\n              const current = yield* authorization(principal, expectedId);\n              if (current.revocation !== \"active\") {\n                return yield* Errors.fail(new Reason.Busy({ key: `authorization:${expectedId}` }));\n              }\n              if (input.id !== expectedId) {\n                return yield* invalid(\"Authorization id must match expectedId\", \"id\");\n              }\n            } else if (state.authorizations.has(input.id)) {\n              return yield* invalid(`Authorization ${input.id} already exists`, \"id\");\n            }\n            yield* commit(\"authorizations.upsert\");\n            state.authorizations.set(input.id, input);\n            state.credentials.set(input.id, credential);\n            return input;\n          }),\n        ),\n      get: (id) => read((principal) => authorization(principal, id)),\n      credential: (id) =>\n        read((principal) =>\n          authorization(principal, id).pipe(\n            Effect.flatMap(() => {\n              const row = state.credentials.get(id);\n              return row === undefined ? notFound(\"authorization\", id) : Effect.succeed(row);\n            }),\n          ),\n        ),\n      rotate: (id, credential) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            yield* authorization(principal, id);\n            yield* commit(\"authorizations.rotate\");\n            state.credentials.set(id, credential);\n          }),\n        ),\n      promoteCapabilities: (id, capabilities) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* authorization(principal, id);\n            yield* commit(\"authorizations.promoteCapabilities\");\n            state.authorizations.set(\n              id,\n              new Storage.Authorization({\n                ...row,\n                capabilities: [...new Set([...row.capabilities, ...capabilities])],\n              }),\n            );\n          }),\n        ),\n      revoke: (id, revoke) =>\n        read((principal) =>\n          authorization(principal, id).pipe(\n            Effect.flatMap((row) => finishRevocation(principal, row, revoke)),\n          ),\n        ),\n      recoverRevocations: (revoke) =>\n        read((principal) =>\n          Effect.forEach(\n            ownedRows(state.authorizations, principal).filter(\n              (row) => row.revocation === \"pending\",\n            ),\n            (row) => finishRevocation(principal, row, revoke(row)),\n          ).pipe(Effect.map((finished) => finished.length)),\n        ),\n    },\n    connections: {\n      create: (authorizationId) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            yield* authorization(principal, authorizationId);\n            const row = new Storage.Connection({\n              id: yield* fresh(\"conn\"),\n              ownerId: principal.ownerId,\n              authorizationId,\n              createdAt: yield* DateTime.now,\n            });\n            yield* commit(\"connections.create\");\n            state.connections.set(row.id, row);\n            return row;\n          }),\n        ),\n      get: (id) => read((principal) => connection(principal, id)),\n      list: (filter) =>\n        read((principal) =>\n          Effect.sync(() =>\n            ownedRows(state.connections, principal).filter(\n              (row) =>\n                filter?.provider === undefined ||\n                state.authorizations.get(row.authorizationId)?.provider === filter.provider,\n            ),\n          ),\n        ),\n      remove: (id) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            yield* connection(principal, id);\n            if (ownedRows(state.attachments, principal).some((row) => row.connectionId === id)) {\n              return yield* invalid(`Connection ${id} still has attachments`, \"connectionId\");\n            }\n            yield* commit(\"connections.remove\");\n            state.connections.delete(id);\n          }),\n        ),\n    },\n    attachments: {\n      create: (input) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            yield* connection(principal, input.connectionId);\n            if (\n              ownedRows(state.attachments, principal).some((row) => row.domain === input.domain)\n            ) {\n              return yield* invalid(`${input.domain} is already attached`, \"domain\");\n            }\n            const row = new Storage.Attachment({\n              id: yield* fresh(\"att\"),\n              ownerId: principal.ownerId,\n              connectionId: input.connectionId,\n              domain: input.domain,\n              zone: input.zone,\n              label: input.label,\n              target: input.target,\n              createdAt: yield* DateTime.now,\n            });\n            yield* commit(\"attachments.create\");\n            state.attachments.set(row.id, row);\n            return row;\n          }),\n        ),\n      get: (id) => read((principal) => attachment(principal, id)),\n      byDomain: (domain) =>\n        read((principal) =>\n          Effect.sync(() =>\n            Option.fromNullishOr(\n              ownedRows(state.attachments, principal).find((row) => row.domain === domain),\n            ),\n          ),\n        ),\n      list: (connectionId) =>\n        read((principal) =>\n          connection(principal, connectionId).pipe(\n            Effect.map(() =>\n              ownedRows(state.attachments, principal).filter(\n                (row) => row.connectionId === connectionId,\n              ),\n            ),\n          ),\n        ),\n      remove: (id) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            yield* attachment(principal, id);\n            yield* commit(\"attachments.remove\");\n            state.attachments.delete(id);\n          }),\n        ),\n    },\n    continuations: {\n      put: (continuation) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            if (continuation.ownerId !== principal.ownerId) {\n              return yield* invalid(\"Continuation owner does not match the principal\", \"ownerId\");\n            }\n            yield* commit(\"continuations.put\");\n            state.continuations.set(continuation.id, continuation);\n          }),\n        ),\n      get: (id) =>\n        read((principal) =>\n          Effect.gen(function* () {\n            const row = owned(state.continuations, principal, id);\n            if (row === undefined) return yield* notFound(\"continuation\", id);\n            const now = yield* DateTime.now;\n            if (DateTime.toEpochMillis(row.expiresAt) <= DateTime.toEpochMillis(now)) {\n              return yield* Errors.fail(new Reason.Expired({ entity: \"continuation\", id }));\n            }\n            return row;\n          }),\n        ),\n      header: (id) =>\n        Effect.gen(function* () {\n          // Unscoped on purpose, unlike every other read here: the provider callback has to learn\n          // whose flow it is finishing before it can resolve a principal to scope by. Header\n          // fields only; `payload` stays behind `get`.\n          const row = state.continuations.get(id);\n          if (row === undefined) return yield* notFound(\"continuation\", id);\n          const now = yield* DateTime.now;\n          if (DateTime.toEpochMillis(row.expiresAt) <= DateTime.toEpochMillis(now)) {\n            return yield* Errors.fail(new Reason.Expired({ entity: \"continuation\", id }));\n          }\n          return new Storage.ContinuationHeader({\n            ownerId: row.ownerId,\n            actorId: row.actorId,\n            provider: row.provider,\n            expiresAt: row.expiresAt,\n          });\n        }),\n      consume: (id) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = owned(state.continuations, principal, id);\n            if (row === undefined) return yield* notFound(\"continuation\", id);\n            yield* commit(\"continuations.consume\");\n            state.continuations.delete(id);\n            const now = yield* DateTime.now;\n            if (DateTime.toEpochMillis(row.expiresAt) <= DateTime.toEpochMillis(now)) {\n              return yield* Errors.fail(new Reason.Expired({ entity: \"continuation\", id }));\n            }\n            return row;\n          }),\n        ),\n    },\n    attempts: {\n      create: (input) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            if (input.ownerId !== principal.ownerId) {\n              return yield* invalid(\"Attempt owner does not match the principal\", \"ownerId\");\n            }\n            if (state.attempts.has(input.id)) {\n              return yield* invalid(`Plan ${input.id} already exists`, \"id\");\n            }\n            yield* commit(\"attempts.create\");\n            state.attempts.set(input.id, input);\n            return input;\n          }),\n        ),\n      get: (id) => read((principal) => attempt(principal, id)),\n      byApproval: (id) =>\n        read((principal) =>\n          attemptWhere(principal, \"approval\", id, (row) => row.approval?.id === id),\n        ),\n      byReceipt: (id) =>\n        read((principal) =>\n          attemptWhere(principal, \"receipt\", id, (row) => row.receipt?.id === id),\n        ),\n      latest: (attachmentId, kind) =>\n        read((principal) =>\n          Effect.sync(() =>\n            Option.fromNullishOr(\n              ownedRows(state.attempts, principal)\n                .filter((row) => row.attachmentId === attachmentId && row.kind === kind)\n                .reduce<Storage.Attempt | undefined>(\n                  (best, row) =>\n                    best === undefined ||\n                    DateTime.toEpochMillis(row.plan.createdAt) >=\n                      DateTime.toEpochMillis(best.plan.createdAt)\n                      ? row\n                      : best,\n                  undefined,\n                ),\n            ),\n          ),\n        ),\n      approve: (id, approval: Approval.Model) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* attempt(principal, id);\n            if (row.approval?.id === approval.id) return row;\n            if (row.status !== \"planned\") return yield* stale(row);\n            const next = new Storage.Attempt({\n              ...row,\n              status: \"approved\",\n              approval,\n              updatedAt: yield* DateTime.now,\n            });\n            yield* commit(\"attempts.approve\");\n            state.attempts.set(id, next);\n            return next;\n          }),\n        ),\n      reject: (id, input) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* attempt(principal, id);\n            if (row.status === \"rejected\") return row;\n            if (row.status === \"expired\") {\n              return yield* Errors.fail(new Reason.Expired({ entity: \"plan\", id }));\n            }\n            if (row.status !== \"planned\" || row.plan.digest !== input.digest)\n              return yield* stale(row);\n            const now = yield* DateTime.now;\n            const next = new Storage.Attempt({\n              ...row,\n              status: \"rejected\",\n              rejection: { actorId: input.actorId, reason: input.reason, at: now },\n              updatedAt: now,\n            });\n            yield* commit(\"attempts.reject\");\n            state.attempts.set(id, next);\n            return next;\n          }),\n        ),\n      claim: (id, lease) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* attempt(principal, id);\n            const now = yield* DateTime.now;\n            if (row.status === \"applying\") {\n              const held =\n                row.leaseExpiresAt !== null &&\n                DateTime.toEpochMillis(row.leaseExpiresAt) > DateTime.toEpochMillis(now);\n              if (held) {\n                return yield* Errors.fail(new Reason.Busy({ key: `apply:${id}` }));\n              }\n            } else if (row.status !== \"approved\" && row.status !== \"failed\") {\n              return yield* stale(row);\n            }\n            const next = new Storage.Attempt({\n              ...row,\n              status: \"applying\",\n              leaseExpiresAt: lease,\n              failure: null,\n              updatedAt: now,\n            });\n            yield* commit(\"attempts.claim\");\n            state.attempts.set(id, next);\n            return next;\n          }),\n        ),\n      complete: (id, receipt: Receipt.Model) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* attempt(principal, id);\n            if (row.status !== \"applying\") return yield* stale(row);\n            const next = new Storage.Attempt({\n              ...row,\n              status: receipt.status,\n              receipt,\n              leaseExpiresAt: null,\n              updatedAt: yield* DateTime.now,\n            });\n            yield* commit(\"attempts.complete\");\n            state.attempts.set(id, next);\n            return next;\n          }),\n        ),\n      fail: (id, message) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* attempt(principal, id);\n            if (row.status !== \"applying\") return yield* stale(row);\n            const next = new Storage.Attempt({\n              ...row,\n              status: \"failed\",\n              failure: message,\n              leaseExpiresAt: null,\n              updatedAt: yield* DateTime.now,\n            });\n            yield* commit(\"attempts.fail\");\n            state.attempts.set(id, next);\n            return next;\n          }),\n        ),\n    },\n    readiness: {\n      put: (readiness) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            if (readiness.ownerId !== principal.ownerId) {\n              return yield* invalid(\"Readiness owner does not match the principal\", \"ownerId\");\n            }\n            if (readiness.attachmentId !== null)\n              yield* attachment(principal, readiness.attachmentId);\n            yield* commit(\"readiness.put\");\n            state.readiness.set(`${principal.ownerId}:${readiness.domain}`, readiness);\n          }),\n        ),\n      get: (domain) =>\n        read((principal) =>\n          Effect.sync(() =>\n            Option.fromNullishOr(state.readiness.get(`${principal.ownerId}:${domain}`)),\n          ),\n        ),\n    },\n    withLock: (key, effect) =>\n      Effect.flatMap(Principal.Service, (principal) => {\n        const scoped = `${principal.ownerId}:${key}`;\n        return Effect.acquireRelease(\n          Effect.suspend(() => {\n            if (state.locks.has(scoped)) {\n              return Errors.fail(new Reason.Busy({ key }));\n            }\n            state.locks.add(scoped);\n            return Effect.void;\n          }),\n          () => Effect.sync(() => void state.locks.delete(scoped)),\n        ).pipe(\n          Effect.flatMap(() => effect),\n          Effect.scoped,\n        );\n      }),\n  };\n}\n\nconst stale = (row: Storage.Attempt) =>\n  Errors.fail(new Reason.Stale({ planId: Plan.PlanId.make(row.id), digest: row.plan.digest }));\n"],"mappings":";;;;;;;;AAsBA,MAAM,YAAY,QAAmC,OACnDA,KAAY,IAAIC,SAAgB;CAAE;CAAQ;AAAG,CAAC,CAAC;AACjD,MAAM,WAAW,SAAiB,UAChCD,KAAY,IAAIE,aAAoB;CAAE;CAAS,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;AAAG,CAAC,CAAC;AAE7F,SAAgB,WAAW,UAAiC,CAAC,GAAsB;CACjF,MAAM,QAAe;EACnB,gCAAgB,IAAI,IAAI;EACxB,6BAAa,IAAI,IAAI;EACrB,6BAAa,IAAI,IAAI;EACrB,6BAAa,IAAI,IAAI;EACrB,+BAAe,IAAI,IAAI;EACvB,0BAAU,IAAI,IAAI;EAClB,2BAAW,IAAI,IAAI;EACnB,uBAAO,IAAI,IAAI;CACjB;CACA,MAAM,YAAY,UAAU,WAAW,CAAC;CACxC,MAAM,UAAU,cACd,QAAQ,iBAAiB,KAAA,IAAY,OAAO,OAAO,QAAQ,aAAa,SAAS;CAEnF,MAAM,QACJ,QAC+C,OAAO,QAAQC,SAAmB,GAAG;CACtF,MAAM,SACJ,QAEA,OAAO,QAAQA,UAAoB,cAAc,UAAU,WAAW,IAAI,SAAS,CAAC,CAAC;CAEvF,MAAM,SACJ,MACA,WACA,OACoB;EACpB,MAAM,MAAM,KAAK,IAAI,EAAE;EACvB,OAAO,QAAQ,KAAA,KAAa,IAAI,YAAY,UAAU,UAAU,MAAM,KAAA;CACxE;CACA,MAAM,aACJ,MACA,cACG,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,QAAQ,IAAI,YAAY,UAAU,OAAO;CAEzE,MAAM,iBAAiB,WAAgC,OACrD,OAAO,cAAc;EACnB,MAAM,MAAM,MAAM,MAAM,gBAAgB,WAAW,EAAE;EACrD,OAAO,QAAQ,KAAA,IAAY,SAAS,iBAAiB,EAAE,IAAI,OAAO,QAAQ,GAAG;CAC/E,CAAC;CACH,MAAM,cAAc,WAAgC,OAClD,OAAO,cAAc;EACnB,MAAM,MAAM,MAAM,MAAM,aAAa,WAAW,EAAE;EAClD,OAAO,QAAQ,KAAA,IAAY,SAAS,cAAc,EAAE,IAAI,OAAO,QAAQ,GAAG;CAC5E,CAAC;CACH,MAAM,cAAc,WAAgC,OAClD,OAAO,cAAc;EACnB,MAAM,MAAM,MAAM,MAAM,aAAa,WAAW,EAAE;EAClD,OAAO,QAAQ,KAAA,IAAY,SAAS,cAAc,EAAE,IAAI,OAAO,QAAQ,GAAG;CAC5E,CAAC;CACH,MAAM,WAAW,WAAgC,OAC/C,OAAO,cAAc;EACnB,MAAM,MAAM,MAAM,MAAM,UAAU,WAAW,EAAE;EAC/C,OAAO,QAAQ,KAAA,IAAY,SAAS,QAAQ,EAAE,IAAI,OAAO,QAAQ,GAAG;CACtE,CAAC;CACH,MAAM,gBACJ,WACA,QACA,IACA,cAEA,OAAO,cAAc;EACnB,MAAM,MAAM,UAAU,MAAM,UAAU,SAAS,CAAC,CAAC,KAAK,SAAS;EAC/D,OAAO,QAAQ,KAAA,IAAY,SAAS,QAAQ,EAAE,IAAI,OAAO,QAAQ,GAAG;CACtE,CAAC;CAEH,MAAM,oBACJ,WACA,KACA,WAEA,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,kCAAkC;EAChD,MAAM,eAAe,IACnB,IAAI,IACJ,IAAIC,cAAsB;GAAE,GAAG;GAAK,YAAY;EAAU,CAAC,CAC7D;EACA,OAAO;EACP,OAAO,OAAO,mCAAmC;EACjD,IAAI,MAAM,MAAM,gBAAgB,WAAW,IAAI,EAAE,MAAM,KAAA,GAAW;GAChE,MAAM,eAAe,OAAO,IAAI,EAAE;GAClC,MAAM,YAAY,OAAO,IAAI,EAAE;EACjC;CACF,CAAC;CAEH,OAAO;EACL,gBAAgB;GACd,SAAS,EAAE,eAAe,OAAO,YAAY,iBAC3C,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,IAAI,MAAM,YAAY,UAAU,SAC9B,OAAO,OAAO,QAAQ,oDAAoD,SAAS;IAErF,IAAI,eAAe,KAAA,GAAW;KAE5B,KAAI,OADmB,cAAc,WAAW,UAAU,EAAA,CAC9C,eAAe,UACzB,OAAO,OAAOJ,KAAY,IAAIK,KAAY,EAAE,KAAK,iBAAiB,aAAa,CAAC,CAAC;KAEnF,IAAI,MAAM,OAAO,YACf,OAAO,OAAO,QAAQ,0CAA0C,IAAI;IAExE,OAAO,IAAI,MAAM,eAAe,IAAI,MAAM,EAAE,GAC1C,OAAO,OAAO,QAAQ,iBAAiB,MAAM,GAAG,kBAAkB,IAAI;IAExE,OAAO,OAAO,uBAAuB;IACrC,MAAM,eAAe,IAAI,MAAM,IAAI,KAAK;IACxC,MAAM,YAAY,IAAI,MAAM,IAAI,UAAU;IAC1C,OAAO;GACT,CAAC,CACH;GACF,MAAM,OAAO,MAAM,cAAc,cAAc,WAAW,EAAE,CAAC;GAC7D,aAAa,OACX,MAAM,cACJ,cAAc,WAAW,EAAE,CAAC,CAAC,KAC3B,OAAO,cAAc;IACnB,MAAM,MAAM,MAAM,YAAY,IAAI,EAAE;IACpC,OAAO,QAAQ,KAAA,IAAY,SAAS,iBAAiB,EAAE,IAAI,OAAO,QAAQ,GAAG;GAC/E,CAAC,CACH,CACF;GACF,SAAS,IAAI,eACX,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,OAAO,cAAc,WAAW,EAAE;IAClC,OAAO,OAAO,uBAAuB;IACrC,MAAM,YAAY,IAAI,IAAI,UAAU;GACtC,CAAC,CACH;GACF,sBAAsB,IAAI,iBACxB,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,cAAc,WAAW,EAAE;IAC9C,OAAO,OAAO,oCAAoC;IAClD,MAAM,eAAe,IACnB,IACA,IAAID,cAAsB;KACxB,GAAG;KACH,cAAc,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAG,IAAI,cAAc,GAAG,YAAY,CAAC,CAAC;IACnE,CAAC,CACH;GACF,CAAC,CACH;GACF,SAAS,IAAI,WACX,MAAM,cACJ,cAAc,WAAW,EAAE,CAAC,CAAC,KAC3B,OAAO,SAAS,QAAQ,iBAAiB,WAAW,KAAK,MAAM,CAAC,CAClE,CACF;GACF,qBAAqB,WACnB,MAAM,cACJ,OAAO,QACL,UAAU,MAAM,gBAAgB,SAAS,CAAC,CAAC,QACxC,QAAQ,IAAI,eAAe,SAC9B,IACC,QAAQ,iBAAiB,WAAW,KAAK,OAAO,GAAG,CAAC,CACvD,CAAC,CAAC,KAAK,OAAO,KAAK,aAAa,SAAS,MAAM,CAAC,CAClD;EACJ;EACA,aAAa;GACX,SAAS,oBACP,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,OAAO,cAAc,WAAW,eAAe;IAC/C,MAAM,MAAM,IAAIE,WAAmB;KACjC,IAAI,OAAO,MAAM,MAAM;KACvB,SAAS,UAAU;KACnB;KACA,WAAW,OAAO,SAAS;IAC7B,CAAC;IACD,OAAO,OAAO,oBAAoB;IAClC,MAAM,YAAY,IAAI,IAAI,IAAI,GAAG;IACjC,OAAO;GACT,CAAC,CACH;GACF,MAAM,OAAO,MAAM,cAAc,WAAW,WAAW,EAAE,CAAC;GAC1D,OAAO,WACL,MAAM,cACJ,OAAO,WACL,UAAU,MAAM,aAAa,SAAS,CAAC,CAAC,QACrC,QACC,QAAQ,aAAa,KAAA,KACrB,MAAM,eAAe,IAAI,IAAI,eAAe,CAAC,EAAE,aAAa,OAAO,QACvE,CACF,CACF;GACF,SAAS,OACP,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,OAAO,WAAW,WAAW,EAAE;IAC/B,IAAI,UAAU,MAAM,aAAa,SAAS,CAAC,CAAC,MAAM,QAAQ,IAAI,iBAAiB,EAAE,GAC/E,OAAO,OAAO,QAAQ,cAAc,GAAG,yBAAyB,cAAc;IAEhF,OAAO,OAAO,oBAAoB;IAClC,MAAM,YAAY,OAAO,EAAE;GAC7B,CAAC,CACH;EACJ;EACA,aAAa;GACX,SAAS,UACP,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,OAAO,WAAW,WAAW,MAAM,YAAY;IAC/C,IACE,UAAU,MAAM,aAAa,SAAS,CAAC,CAAC,MAAM,QAAQ,IAAI,WAAW,MAAM,MAAM,GAEjF,OAAO,OAAO,QAAQ,GAAG,MAAM,OAAO,uBAAuB,QAAQ;IAEvE,MAAM,MAAM,IAAIC,WAAmB;KACjC,IAAI,OAAO,MAAM,KAAK;KACtB,SAAS,UAAU;KACnB,cAAc,MAAM;KACpB,QAAQ,MAAM;KACd,MAAM,MAAM;KACZ,OAAO,MAAM;KACb,QAAQ,MAAM;KACd,WAAW,OAAO,SAAS;IAC7B,CAAC;IACD,OAAO,OAAO,oBAAoB;IAClC,MAAM,YAAY,IAAI,IAAI,IAAI,GAAG;IACjC,OAAO;GACT,CAAC,CACH;GACF,MAAM,OAAO,MAAM,cAAc,WAAW,WAAW,EAAE,CAAC;GAC1D,WAAW,WACT,MAAM,cACJ,OAAO,WACL,OAAO,cACL,UAAU,MAAM,aAAa,SAAS,CAAC,CAAC,MAAM,QAAQ,IAAI,WAAW,MAAM,CAC7E,CACF,CACF;GACF,OAAO,iBACL,MAAM,cACJ,WAAW,WAAW,YAAY,CAAC,CAAC,KAClC,OAAO,UACL,UAAU,MAAM,aAAa,SAAS,CAAC,CAAC,QACrC,QAAQ,IAAI,iBAAiB,YAChC,CACF,CACF,CACF;GACF,SAAS,OACP,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,OAAO,WAAW,WAAW,EAAE;IAC/B,OAAO,OAAO,oBAAoB;IAClC,MAAM,YAAY,OAAO,EAAE;GAC7B,CAAC,CACH;EACJ;EACA,eAAe;GACb,MAAM,iBACJ,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,IAAI,aAAa,YAAY,UAAU,SACrC,OAAO,OAAO,QAAQ,mDAAmD,SAAS;IAEpF,OAAO,OAAO,mBAAmB;IACjC,MAAM,cAAc,IAAI,aAAa,IAAI,YAAY;GACvD,CAAC,CACH;GACF,MAAM,OACJ,MAAM,cACJ,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,MAAM,MAAM,eAAe,WAAW,EAAE;IACpD,IAAI,QAAQ,KAAA,GAAW,OAAO,OAAO,SAAS,gBAAgB,EAAE;IAChE,MAAM,MAAM,OAAO,SAAS;IAC5B,IAAI,SAAS,cAAc,IAAI,SAAS,KAAK,SAAS,cAAc,GAAG,GACrE,OAAO,OAAOP,KAAY,IAAIQ,QAAe;KAAE,QAAQ;KAAgB;IAAG,CAAC,CAAC;IAE9E,OAAO;GACT,CAAC,CACH;GACF,SAAS,OACP,OAAO,IAAI,aAAa;IAItB,MAAM,MAAM,MAAM,cAAc,IAAI,EAAE;IACtC,IAAI,QAAQ,KAAA,GAAW,OAAO,OAAO,SAAS,gBAAgB,EAAE;IAChE,MAAM,MAAM,OAAO,SAAS;IAC5B,IAAI,SAAS,cAAc,IAAI,SAAS,KAAK,SAAS,cAAc,GAAG,GACrE,OAAO,OAAOR,KAAY,IAAIQ,QAAe;KAAE,QAAQ;KAAgB;IAAG,CAAC,CAAC;IAE9E,OAAO,IAAIC,mBAA2B;KACpC,SAAS,IAAI;KACb,SAAS,IAAI;KACb,UAAU,IAAI;KACd,WAAW,IAAI;IACjB,CAAC;GACH,CAAC;GACH,UAAU,OACR,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,MAAM,MAAM,eAAe,WAAW,EAAE;IACpD,IAAI,QAAQ,KAAA,GAAW,OAAO,OAAO,SAAS,gBAAgB,EAAE;IAChE,OAAO,OAAO,uBAAuB;IACrC,MAAM,cAAc,OAAO,EAAE;IAC7B,MAAM,MAAM,OAAO,SAAS;IAC5B,IAAI,SAAS,cAAc,IAAI,SAAS,KAAK,SAAS,cAAc,GAAG,GACrE,OAAO,OAAOT,KAAY,IAAIQ,QAAe;KAAE,QAAQ;KAAgB;IAAG,CAAC,CAAC;IAE9E,OAAO;GACT,CAAC,CACH;EACJ;EACA,UAAU;GACR,SAAS,UACP,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,IAAI,MAAM,YAAY,UAAU,SAC9B,OAAO,OAAO,QAAQ,8CAA8C,SAAS;IAE/E,IAAI,MAAM,SAAS,IAAI,MAAM,EAAE,GAC7B,OAAO,OAAO,QAAQ,QAAQ,MAAM,GAAG,kBAAkB,IAAI;IAE/D,OAAO,OAAO,iBAAiB;IAC/B,MAAM,SAAS,IAAI,MAAM,IAAI,KAAK;IAClC,OAAO;GACT,CAAC,CACH;GACF,MAAM,OAAO,MAAM,cAAc,QAAQ,WAAW,EAAE,CAAC;GACvD,aAAa,OACX,MAAM,cACJ,aAAa,WAAW,YAAY,KAAK,QAAQ,IAAI,UAAU,OAAO,EAAE,CAC1E;GACF,YAAY,OACV,MAAM,cACJ,aAAa,WAAW,WAAW,KAAK,QAAQ,IAAI,SAAS,OAAO,EAAE,CACxE;GACF,SAAS,cAAc,SACrB,MAAM,cACJ,OAAO,WACL,OAAO,cACL,UAAU,MAAM,UAAU,SAAS,CAAC,CACjC,QAAQ,QAAQ,IAAI,iBAAiB,gBAAgB,IAAI,SAAS,IAAI,CAAC,CACvE,QACE,MAAM,QACL,SAAS,KAAA,KACT,SAAS,cAAc,IAAI,KAAK,SAAS,KACvC,SAAS,cAAc,KAAK,KAAK,SAAS,IACxC,MACA,MACN,KAAA,CACF,CACJ,CACF,CACF;GACF,UAAU,IAAI,aACZ,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,QAAQ,WAAW,EAAE;IACxC,IAAI,IAAI,UAAU,OAAO,SAAS,IAAI,OAAO;IAC7C,IAAI,IAAI,WAAW,WAAW,OAAO,OAAO,MAAM,GAAG;IACrD,MAAM,OAAO,IAAIE,QAAgB;KAC/B,GAAG;KACH,QAAQ;KACR;KACA,WAAW,OAAO,SAAS;IAC7B,CAAC;IACD,OAAO,OAAO,kBAAkB;IAChC,MAAM,SAAS,IAAI,IAAI,IAAI;IAC3B,OAAO;GACT,CAAC,CACH;GACF,SAAS,IAAI,UACX,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,QAAQ,WAAW,EAAE;IACxC,IAAI,IAAI,WAAW,YAAY,OAAO;IACtC,IAAI,IAAI,WAAW,WACjB,OAAO,OAAOV,KAAY,IAAIQ,QAAe;KAAE,QAAQ;KAAQ;IAAG,CAAC,CAAC;IAEtE,IAAI,IAAI,WAAW,aAAa,IAAI,KAAK,WAAW,MAAM,QACxD,OAAO,OAAO,MAAM,GAAG;IACzB,MAAM,MAAM,OAAO,SAAS;IAC5B,MAAM,OAAO,IAAIE,QAAgB;KAC/B,GAAG;KACH,QAAQ;KACR,WAAW;MAAE,SAAS,MAAM;MAAS,QAAQ,MAAM;MAAQ,IAAI;KAAI;KACnE,WAAW;IACb,CAAC;IACD,OAAO,OAAO,iBAAiB;IAC/B,MAAM,SAAS,IAAI,IAAI,IAAI;IAC3B,OAAO;GACT,CAAC,CACH;GACF,QAAQ,IAAI,UACV,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,QAAQ,WAAW,EAAE;IACxC,MAAM,MAAM,OAAO,SAAS;IAC5B,IAAI,IAAI,WAAW,YAEf;SAAA,IAAI,mBAAmB,QACvB,SAAS,cAAc,IAAI,cAAc,IAAI,SAAS,cAAc,GAAG,GAEvE,OAAO,OAAOV,KAAY,IAAIK,KAAY,EAAE,KAAK,SAAS,KAAK,CAAC,CAAC;IAAA,OAE9D,IAAI,IAAI,WAAW,cAAc,IAAI,WAAW,UACrD,OAAO,OAAO,MAAM,GAAG;IAEzB,MAAM,OAAO,IAAIK,QAAgB;KAC/B,GAAG;KACH,QAAQ;KACR,gBAAgB;KAChB,SAAS;KACT,WAAW;IACb,CAAC;IACD,OAAO,OAAO,gBAAgB;IAC9B,MAAM,SAAS,IAAI,IAAI,IAAI;IAC3B,OAAO;GACT,CAAC,CACH;GACF,WAAW,IAAI,YACb,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,QAAQ,WAAW,EAAE;IACxC,IAAI,IAAI,WAAW,YAAY,OAAO,OAAO,MAAM,GAAG;IACtD,MAAM,OAAO,IAAIA,QAAgB;KAC/B,GAAG;KACH,QAAQ,QAAQ;KAChB;KACA,gBAAgB;KAChB,WAAW,OAAO,SAAS;IAC7B,CAAC;IACD,OAAO,OAAO,mBAAmB;IACjC,MAAM,SAAS,IAAI,IAAI,IAAI;IAC3B,OAAO;GACT,CAAC,CACH;GACF,OAAO,IAAI,YACT,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,QAAQ,WAAW,EAAE;IACxC,IAAI,IAAI,WAAW,YAAY,OAAO,OAAO,MAAM,GAAG;IACtD,MAAM,OAAO,IAAIA,QAAgB;KAC/B,GAAG;KACH,QAAQ;KACR,SAAS;KACT,gBAAgB;KAChB,WAAW,OAAO,SAAS;IAC7B,CAAC;IACD,OAAO,OAAO,eAAe;IAC7B,MAAM,SAAS,IAAI,IAAI,IAAI;IAC3B,OAAO;GACT,CAAC,CACH;EACJ;EACA,WAAW;GACT,MAAM,cACJ,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,IAAI,UAAU,YAAY,UAAU,SAClC,OAAO,OAAO,QAAQ,gDAAgD,SAAS;IAEjF,IAAI,UAAU,iBAAiB,MAC7B,OAAO,WAAW,WAAW,UAAU,YAAY;IACrD,OAAO,OAAO,eAAe;IAC7B,MAAM,UAAU,IAAI,GAAG,UAAU,QAAQ,GAAG,UAAU,UAAU,SAAS;GAC3E,CAAC,CACH;GACF,MAAM,WACJ,MAAM,cACJ,OAAO,WACL,OAAO,cAAc,MAAM,UAAU,IAAI,GAAG,UAAU,QAAQ,GAAG,QAAQ,CAAC,CAC5E,CACF;EACJ;EACA,WAAW,KAAK,WACd,OAAO,QAAQP,UAAoB,cAAc;GAC/C,MAAM,SAAS,GAAG,UAAU,QAAQ,GAAG;GACvC,OAAO,OAAO,eACZ,OAAO,cAAc;IACnB,IAAI,MAAM,MAAM,IAAI,MAAM,GACxB,OAAOH,KAAY,IAAIK,KAAY,EAAE,IAAI,CAAC,CAAC;IAE7C,MAAM,MAAM,IAAI,MAAM;IACtB,OAAO,OAAO;GAChB,CAAC,SACK,OAAO,WAAW,KAAK,MAAM,MAAM,OAAO,MAAM,CAAC,CACzD,CAAC,CAAC,KACA,OAAO,cAAc,MAAM,GAC3B,OAAO,MACT;EACF,CAAC;CACL;AACF;AAEA,MAAM,SAAS,QACbL,KAAY,IAAIW,MAAa;CAAE,QAAA,OAAoB,KAAK,IAAI,EAAE;CAAG,QAAQ,IAAI,KAAK;AAAO,CAAC,CAAC"}
+{"version":3,"file":"storage-memory.mjs","names":["Errors.fail","Reason.NotFound","Reason.InvalidInput","Principal.Service","Reason.BatchStale","Storage.batchStatusOf","Storage.Batch","Storage.Authorization","Reason.Busy","Storage.Connection","Storage.Attachment","Reason.Expired","Storage.ContinuationHeader","Storage.Attempt","Storage.BatchItem","Reason.Stale"],"sources":["../../src/internal/storage-memory.ts"],"sourcesContent":["import { DateTime, Effect, Option, Semaphore } from \"effect\";\n\nimport type * as Approval from \"../Approval.ts\";\nimport * as Errors from \"./error.ts\";\nimport * as Reason from \"../Reason.ts\";\nimport * as Plan from \"../Plan.ts\";\nimport * as Principal from \"../Principal.ts\";\nimport type * as Receipt from \"../Receipt.ts\";\nimport * as Storage from \"../Storage.ts\";\nimport { fresh } from \"./ids.ts\";\n\ninterface State {\n  readonly authorizations: Map<string, Storage.Authorization>;\n  readonly credentials: Map<string, Storage.Credential>;\n  readonly connections: Map<string, Storage.Connection>;\n  readonly attachments: Map<string, Storage.Attachment>;\n  readonly continuations: Map<string, Storage.Continuation>;\n  readonly attempts: Map<string, Storage.Attempt>;\n  readonly batches: Map<string, Storage.Batch>;\n  /** Items by batch id, kept in `position` order. */\n  readonly batchItems: Map<string, Array<Storage.BatchItem>>;\n  readonly readiness: Map<string, Storage.Readiness>;\n  readonly locks: Set<string>;\n}\n\nconst notFound = (entity: Reason.NotFound[\"entity\"], id: string) =>\n  Errors.fail(new Reason.NotFound({ entity, id }));\nconst invalid = (message: string, field?: string) =>\n  Errors.fail(new Reason.InvalidInput({ message, ...(field === undefined ? {} : { field }) }));\n\nexport function makeMemory(options: Storage.MemoryOptions = {}): Storage.Interface {\n  const state: State = {\n    authorizations: new Map(),\n    credentials: new Map(),\n    connections: new Map(),\n    attachments: new Map(),\n    continuations: new Map(),\n    attempts: new Map(),\n    batches: new Map(),\n    batchItems: new Map(),\n    readiness: new Map(),\n    locks: new Set(),\n  };\n  const mutations = Semaphore.makeUnsafe(1);\n  const commit = (operation: string) =>\n    options.beforeCommit === undefined ? Effect.void : options.beforeCommit(operation);\n\n  const read = <A, E, R = never>(\n    run: (principal: Principal.Interface) => Effect.Effect<A, E, R>,\n  ): Effect.Effect<A, E, Principal.Service | R> => Effect.flatMap(Principal.Service, run);\n  const write = <A, E>(\n    run: (principal: Principal.Interface) => Effect.Effect<A, E>,\n  ): Effect.Effect<A, E, Principal.Service> =>\n    Effect.flatMap(Principal.Service, (principal) => mutations.withPermit(run(principal)));\n\n  const owned = <Row extends { readonly ownerId: string }>(\n    rows: Map<string, Row>,\n    principal: Principal.Interface,\n    id: string,\n  ): Row | undefined => {\n    const row = rows.get(id);\n    return row !== undefined && row.ownerId === principal.ownerId ? row : undefined;\n  };\n  const ownedRows = <Row extends { readonly ownerId: string }>(\n    rows: Map<string, Row>,\n    principal: Principal.Interface,\n  ) => [...rows.values()].filter((row) => row.ownerId === principal.ownerId);\n\n  const authorization = (principal: Principal.Interface, id: string) =>\n    Effect.suspend(() => {\n      const row = owned(state.authorizations, principal, id);\n      return row === undefined ? notFound(\"authorization\", id) : Effect.succeed(row);\n    });\n  const connection = (principal: Principal.Interface, id: string) =>\n    Effect.suspend(() => {\n      const row = owned(state.connections, principal, id);\n      return row === undefined ? notFound(\"connection\", id) : Effect.succeed(row);\n    });\n  const attachment = (principal: Principal.Interface, id: string) =>\n    Effect.suspend(() => {\n      const row = owned(state.attachments, principal, id);\n      return row === undefined ? notFound(\"attachment\", id) : Effect.succeed(row);\n    });\n  const attempt = (principal: Principal.Interface, id: string) =>\n    Effect.suspend(() => {\n      const row = owned(state.attempts, principal, id);\n      return row === undefined ? notFound(\"plan\", id) : Effect.succeed(row);\n    });\n  const attemptWhere = (\n    principal: Principal.Interface,\n    entity: Reason.NotFound[\"entity\"],\n    id: string,\n    predicate: (row: Storage.Attempt) => boolean,\n  ) =>\n    Effect.suspend(() => {\n      const row = ownedRows(state.attempts, principal).find(predicate);\n      return row === undefined ? notFound(entity, id) : Effect.succeed(row);\n    });\n\n  const batch = (principal: Principal.Interface, id: string) =>\n    Effect.suspend(() => {\n      const row = owned(state.batches, principal, id);\n      return row === undefined ? notFound(\"batch\", id) : Effect.succeed(row);\n    });\n\n  const itemsOf = (batchId: string): ReadonlyArray<Storage.BatchItem> =>\n    [...(state.batchItems.get(batchId) ?? [])].sort(\n      (left, right) => left.position - right.position,\n    );\n\n  const aggregateOf = (row: Storage.Batch): Storage.BatchAggregate => ({\n    batch: row,\n    items: itemsOf(row.id),\n  });\n\n  const batchStale = (row: Storage.Batch) =>\n    Errors.fail(new Reason.BatchStale({ batchId: row.id, status: row.status, digest: row.digest }));\n\n  const statusOf = (row: Storage.Batch, items: ReadonlyArray<Storage.BatchItem>) =>\n    Storage.batchStatusOf({\n      approved: row.approval !== null,\n      rejected: row.rejection !== null,\n      items: items.map((item) =>\n        item.attemptId === null ? null : (state.attempts.get(item.attemptId)?.status ?? null),\n      ),\n    });\n\n  /** Store `row` with its status recomputed from the items' attempts, and return the aggregate. */\n  const settle = (row: Storage.Batch, now: DateTime.Utc): Storage.BatchAggregate => {\n    const items = itemsOf(row.id);\n    const status = statusOf(row, items);\n    const next = new Storage.Batch({\n      ...row,\n      status,\n      completedAt: status === \"complete\" || status === \"rejected\" ? now : null,\n      updatedAt: now,\n    });\n    state.batches.set(row.id, next);\n    return { batch: next, items };\n  };\n\n  const replaceItem = (item: Storage.BatchItem) => {\n    const items = state.batchItems.get(item.batchId) ?? [];\n    const index = items.findIndex((row) => row.attachmentId === item.attachmentId);\n    if (index >= 0) items[index] = item;\n  };\n\n  /** Only a batch still being planned accepts plan state, an approval, or a rejection. */\n  const openForPlanning = (row: Storage.Batch) =>\n    row.status === \"planning\" || row.status === \"planned\" ? Effect.void : batchStale(row);\n\n  const itemAt = (row: Storage.Batch, attachmentId: string) =>\n    Effect.suspend(() => {\n      const item = itemsOf(row.id).find((entry) => entry.attachmentId === attachmentId);\n      return item === undefined ? notFound(\"attachment\", attachmentId) : Effect.succeed(item);\n    });\n\n  const finishRevocation = <E, R>(\n    principal: Principal.Interface,\n    row: Storage.Authorization,\n    revoke: Effect.Effect<void, E, R>,\n  ): Effect.Effect<void, Errors.DomainKitError | E, R> =>\n    Effect.gen(function* () {\n      yield* commit(\"authorizations.prepareRevocation\");\n      state.authorizations.set(\n        row.id,\n        new Storage.Authorization({ ...row, revocation: \"pending\" }),\n      );\n      yield* revoke;\n      yield* commit(\"authorizations.completeRevocation\");\n      if (owned(state.authorizations, principal, row.id) !== undefined) {\n        state.authorizations.delete(row.id);\n        state.credentials.delete(row.id);\n      }\n    });\n\n  return {\n    authorizations: {\n      upsert: ({ authorization: input, credential, expectedId }) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            if (input.ownerId !== principal.ownerId) {\n              return yield* invalid(\"Authorization owner does not match the principal\", \"ownerId\");\n            }\n            if (expectedId !== undefined) {\n              const current = yield* authorization(principal, expectedId);\n              if (current.revocation !== \"active\") {\n                return yield* Errors.fail(new Reason.Busy({ key: `authorization:${expectedId}` }));\n              }\n              if (input.id !== expectedId) {\n                return yield* invalid(\"Authorization id must match expectedId\", \"id\");\n              }\n            } else if (state.authorizations.has(input.id)) {\n              return yield* invalid(`Authorization ${input.id} already exists`, \"id\");\n            }\n            yield* commit(\"authorizations.upsert\");\n            state.authorizations.set(input.id, input);\n            state.credentials.set(input.id, credential);\n            return input;\n          }),\n        ),\n      get: (id) => read((principal) => authorization(principal, id)),\n      credential: (id) =>\n        read((principal) =>\n          authorization(principal, id).pipe(\n            Effect.flatMap(() => {\n              const row = state.credentials.get(id);\n              return row === undefined ? notFound(\"authorization\", id) : Effect.succeed(row);\n            }),\n          ),\n        ),\n      rotate: (id, credential) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            yield* authorization(principal, id);\n            yield* commit(\"authorizations.rotate\");\n            state.credentials.set(id, credential);\n          }),\n        ),\n      promoteCapabilities: (id, capabilities) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* authorization(principal, id);\n            yield* commit(\"authorizations.promoteCapabilities\");\n            state.authorizations.set(\n              id,\n              new Storage.Authorization({\n                ...row,\n                capabilities: [...new Set([...row.capabilities, ...capabilities])],\n              }),\n            );\n          }),\n        ),\n      revoke: (id, revoke) =>\n        read((principal) =>\n          authorization(principal, id).pipe(\n            Effect.flatMap((row) => finishRevocation(principal, row, revoke)),\n          ),\n        ),\n      recoverRevocations: (revoke) =>\n        read((principal) =>\n          Effect.forEach(\n            ownedRows(state.authorizations, principal).filter(\n              (row) => row.revocation === \"pending\",\n            ),\n            (row) => finishRevocation(principal, row, revoke(row)),\n          ).pipe(Effect.map((finished) => finished.length)),\n        ),\n    },\n    connections: {\n      create: (authorizationId) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            yield* authorization(principal, authorizationId);\n            const row = new Storage.Connection({\n              id: yield* fresh(\"conn\"),\n              ownerId: principal.ownerId,\n              authorizationId,\n              createdAt: yield* DateTime.now,\n            });\n            yield* commit(\"connections.create\");\n            state.connections.set(row.id, row);\n            return row;\n          }),\n        ),\n      get: (id) => read((principal) => connection(principal, id)),\n      list: (filter) =>\n        read((principal) =>\n          Effect.sync(() =>\n            ownedRows(state.connections, principal).filter(\n              (row) =>\n                filter?.provider === undefined ||\n                state.authorizations.get(row.authorizationId)?.provider === filter.provider,\n            ),\n          ),\n        ),\n      remove: (id) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            yield* connection(principal, id);\n            if (ownedRows(state.attachments, principal).some((row) => row.connectionId === id)) {\n              return yield* invalid(`Connection ${id} still has attachments`, \"connectionId\");\n            }\n            yield* commit(\"connections.remove\");\n            state.connections.delete(id);\n          }),\n        ),\n    },\n    attachments: {\n      create: (input) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            yield* connection(principal, input.connectionId);\n            if (\n              ownedRows(state.attachments, principal).some((row) => row.domain === input.domain)\n            ) {\n              return yield* invalid(`${input.domain} is already attached`, \"domain\");\n            }\n            const row = new Storage.Attachment({\n              id: yield* fresh(\"att\"),\n              ownerId: principal.ownerId,\n              connectionId: input.connectionId,\n              domain: input.domain,\n              zone: input.zone,\n              label: input.label,\n              target: input.target,\n              createdAt: yield* DateTime.now,\n            });\n            yield* commit(\"attachments.create\");\n            state.attachments.set(row.id, row);\n            return row;\n          }),\n        ),\n      get: (id) => read((principal) => attachment(principal, id)),\n      byDomain: (domain) =>\n        read((principal) =>\n          Effect.sync(() =>\n            Option.fromNullishOr(\n              ownedRows(state.attachments, principal).find((row) => row.domain === domain),\n            ),\n          ),\n        ),\n      list: (connectionId) =>\n        read((principal) =>\n          connection(principal, connectionId).pipe(\n            Effect.map(() =>\n              ownedRows(state.attachments, principal).filter(\n                (row) => row.connectionId === connectionId,\n              ),\n            ),\n          ),\n        ),\n      remove: (id) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            yield* attachment(principal, id);\n            yield* commit(\"attachments.remove\");\n            state.attachments.delete(id);\n          }),\n        ),\n    },\n    continuations: {\n      put: (continuation) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            if (continuation.ownerId !== principal.ownerId) {\n              return yield* invalid(\"Continuation owner does not match the principal\", \"ownerId\");\n            }\n            yield* commit(\"continuations.put\");\n            state.continuations.set(continuation.id, continuation);\n          }),\n        ),\n      get: (id) =>\n        read((principal) =>\n          Effect.gen(function* () {\n            const row = owned(state.continuations, principal, id);\n            if (row === undefined) return yield* notFound(\"continuation\", id);\n            const now = yield* DateTime.now;\n            if (DateTime.toEpochMillis(row.expiresAt) <= DateTime.toEpochMillis(now)) {\n              return yield* Errors.fail(new Reason.Expired({ entity: \"continuation\", id }));\n            }\n            return row;\n          }),\n        ),\n      header: (id) =>\n        Effect.gen(function* () {\n          // Unscoped on purpose, unlike every other read here: the provider callback has to learn\n          // whose flow it is finishing before it can resolve a principal to scope by. Header\n          // fields only; `payload` stays behind `get`.\n          const row = state.continuations.get(id);\n          if (row === undefined) return yield* notFound(\"continuation\", id);\n          const now = yield* DateTime.now;\n          if (DateTime.toEpochMillis(row.expiresAt) <= DateTime.toEpochMillis(now)) {\n            return yield* Errors.fail(new Reason.Expired({ entity: \"continuation\", id }));\n          }\n          return new Storage.ContinuationHeader({\n            ownerId: row.ownerId,\n            actorId: row.actorId,\n            provider: row.provider,\n            expiresAt: row.expiresAt,\n          });\n        }),\n      consume: (id) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = owned(state.continuations, principal, id);\n            if (row === undefined) return yield* notFound(\"continuation\", id);\n            yield* commit(\"continuations.consume\");\n            state.continuations.delete(id);\n            const now = yield* DateTime.now;\n            if (DateTime.toEpochMillis(row.expiresAt) <= DateTime.toEpochMillis(now)) {\n              return yield* Errors.fail(new Reason.Expired({ entity: \"continuation\", id }));\n            }\n            return row;\n          }),\n        ),\n    },\n    attempts: {\n      create: (input) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            if (input.ownerId !== principal.ownerId) {\n              return yield* invalid(\"Attempt owner does not match the principal\", \"ownerId\");\n            }\n            if (state.attempts.has(input.id)) {\n              return yield* invalid(`Plan ${input.id} already exists`, \"id\");\n            }\n            yield* commit(\"attempts.create\");\n            state.attempts.set(input.id, input);\n            return input;\n          }),\n        ),\n      get: (id) => read((principal) => attempt(principal, id)),\n      byApproval: (id) =>\n        read((principal) =>\n          attemptWhere(principal, \"approval\", id, (row) => row.approval?.id === id),\n        ),\n      byReceipt: (id) =>\n        read((principal) =>\n          attemptWhere(principal, \"receipt\", id, (row) => row.receipt?.id === id),\n        ),\n      latest: (attachmentId, kind) =>\n        read((principal) =>\n          Effect.sync(() =>\n            Option.fromNullishOr(\n              ownedRows(state.attempts, principal)\n                .filter((row) => row.attachmentId === attachmentId && row.kind === kind)\n                .reduce<Storage.Attempt | undefined>(\n                  (best, row) =>\n                    best === undefined ||\n                    DateTime.toEpochMillis(row.plan.createdAt) >=\n                      DateTime.toEpochMillis(best.plan.createdAt)\n                      ? row\n                      : best,\n                  undefined,\n                ),\n            ),\n          ),\n        ),\n      approve: (id, approval: Approval.Model) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* attempt(principal, id);\n            if (row.approval?.id === approval.id) return row;\n            if (row.status !== \"planned\") return yield* stale(row);\n            const next = new Storage.Attempt({\n              ...row,\n              status: \"approved\",\n              approval,\n              updatedAt: yield* DateTime.now,\n            });\n            yield* commit(\"attempts.approve\");\n            state.attempts.set(id, next);\n            return next;\n          }),\n        ),\n      reject: (id, input) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* attempt(principal, id);\n            if (row.status === \"rejected\") return row;\n            if (row.status === \"expired\") {\n              return yield* Errors.fail(new Reason.Expired({ entity: \"plan\", id }));\n            }\n            if (row.status !== \"planned\" || row.plan.digest !== input.digest)\n              return yield* stale(row);\n            const now = yield* DateTime.now;\n            const next = new Storage.Attempt({\n              ...row,\n              status: \"rejected\",\n              rejection: { actorId: input.actorId, reason: input.reason, at: now },\n              updatedAt: now,\n            });\n            yield* commit(\"attempts.reject\");\n            state.attempts.set(id, next);\n            return next;\n          }),\n        ),\n      claim: (id, lease) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* attempt(principal, id);\n            const now = yield* DateTime.now;\n            if (row.status === \"applying\") {\n              const held =\n                row.leaseExpiresAt !== null &&\n                DateTime.toEpochMillis(row.leaseExpiresAt) > DateTime.toEpochMillis(now);\n              if (held) {\n                return yield* Errors.fail(new Reason.Busy({ key: `apply:${id}` }));\n              }\n            } else if (row.status !== \"approved\" && row.status !== \"failed\") {\n              return yield* stale(row);\n            }\n            const next = new Storage.Attempt({\n              ...row,\n              status: \"applying\",\n              leaseExpiresAt: lease,\n              failure: null,\n              updatedAt: now,\n            });\n            yield* commit(\"attempts.claim\");\n            state.attempts.set(id, next);\n            return next;\n          }),\n        ),\n      complete: (id, receipt: Receipt.Model) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* attempt(principal, id);\n            if (row.status !== \"applying\") return yield* stale(row);\n            const next = new Storage.Attempt({\n              ...row,\n              status: receipt.status,\n              receipt,\n              leaseExpiresAt: null,\n              updatedAt: yield* DateTime.now,\n            });\n            yield* commit(\"attempts.complete\");\n            state.attempts.set(id, next);\n            return next;\n          }),\n        ),\n      fail: (id, message) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* attempt(principal, id);\n            if (row.status !== \"applying\") return yield* stale(row);\n            const next = new Storage.Attempt({\n              ...row,\n              status: \"failed\",\n              failure: message,\n              leaseExpiresAt: null,\n              updatedAt: yield* DateTime.now,\n            });\n            yield* commit(\"attempts.fail\");\n            state.attempts.set(id, next);\n            return next;\n          }),\n        ),\n    },\n    batches: {\n      create: (input) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const replay = ownedRows(state.batches, principal).find(\n              (row) => row.idempotencyKey === input.idempotencyKey,\n            );\n            if (replay !== undefined) return aggregateOf(replay);\n            if (input.attachmentIds.length === 0) {\n              return yield* invalid(\"A batch needs at least one attachment\", \"attachmentIds\");\n            }\n            if (new Set(input.attachmentIds).size !== input.attachmentIds.length) {\n              return yield* invalid(\"A batch holds one item per attachment\", \"attachmentIds\");\n            }\n            for (const attachmentId of input.attachmentIds) {\n              yield* attachment(principal, attachmentId);\n            }\n            const now = yield* DateTime.now;\n            const id = Storage.BatchId.make(yield* fresh(\"batch\"));\n            const row = new Storage.Batch({\n              id,\n              ownerId: principal.ownerId,\n              kind: input.kind,\n              status: \"planning\",\n              digest: null,\n              approval: null,\n              rejection: null,\n              idempotencyKey: input.idempotencyKey,\n              createdBy: principal.actorId,\n              createdAt: now,\n              updatedAt: now,\n              completedAt: null,\n            });\n            yield* commit(\"batches.create\");\n            state.batches.set(id, row);\n            state.batchItems.set(\n              id,\n              input.attachmentIds.map(\n                (attachmentId, position) =>\n                  new Storage.BatchItem({\n                    batchId: id,\n                    attachmentId,\n                    position,\n                    attemptId: null,\n                    planFailure: null,\n                  }),\n              ),\n            );\n            return aggregateOf(row);\n          }),\n        ),\n      get: (id) => read((principal) => Effect.map(batch(principal, id), aggregateOf)),\n      byIdempotencyKey: (key) =>\n        read((principal) =>\n          Effect.sync(() =>\n            Option.map(\n              Option.fromNullishOr(\n                ownedRows(state.batches, principal).find((row) => row.idempotencyKey === key),\n              ),\n              aggregateOf,\n            ),\n          ),\n        ),\n      listUnfinished: () =>\n        read((principal) =>\n          Effect.sync(() =>\n            ownedRows(state.batches, principal)\n              .filter((row) => row.status !== \"complete\" && row.status !== \"rejected\")\n              .sort(\n                (left, right) =>\n                  DateTime.toEpochMillis(right.updatedAt) - DateTime.toEpochMillis(left.updatedAt),\n              )\n              .map(aggregateOf),\n          ),\n        ),\n      recordItemPlan: (id, attachmentId, attemptId) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* batch(principal, id);\n            yield* openForPlanning(row);\n            const item = yield* itemAt(row, attachmentId);\n            const planned = yield* attempt(principal, attemptId);\n            if (planned.attachmentId !== attachmentId || planned.kind !== row.kind) {\n              return yield* invalid(\n                `Plan ${attemptId} does not belong to attachment ${attachmentId} in this batch`,\n                \"attemptId\",\n              );\n            }\n            yield* commit(\"batches.recordItemPlan\");\n            replaceItem(new Storage.BatchItem({ ...item, attemptId, planFailure: null }));\n            return settle(row, yield* DateTime.now);\n          }),\n        ),\n      recordItemPlanFailure: (id, attachmentId, message) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* batch(principal, id);\n            yield* openForPlanning(row);\n            const item = yield* itemAt(row, attachmentId);\n            yield* commit(\"batches.recordItemPlanFailure\");\n            replaceItem(new Storage.BatchItem({ ...item, attemptId: null, planFailure: message }));\n            return settle(row, yield* DateTime.now);\n          }),\n        ),\n      approve: (id, input) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* batch(principal, id);\n            // Replaying the same approval is how a retried request stays safe.\n            if (row.approval !== null) {\n              return row.digest === input.digest ? aggregateOf(row) : yield* batchStale(row);\n            }\n            if (row.status !== \"planned\") return yield* batchStale(row);\n            const items = itemsOf(id);\n            const pairs: Array<{\n              readonly attempt: Storage.Attempt;\n              readonly approval: Approval.Model;\n            }> = [];\n            for (const item of items) {\n              const supplied = input.approvals.find(\n                (entry) => entry.attachmentId === item.attachmentId,\n              );\n              if (supplied === undefined) {\n                return yield* invalid(\n                  `Batch ${id} has no approval for attachment ${item.attachmentId}`,\n                  \"approvals\",\n                );\n              }\n              // The item has to still point at the attempt this approval names: anything else\n              // means the batch was re-planned after the principal reviewed it.\n              const stored =\n                item.attemptId === null ? undefined : state.attempts.get(item.attemptId);\n              if (stored === undefined || stored.id !== supplied.approval.planId) {\n                return yield* batchStale(row);\n              }\n              // The attempt has to still be open: one declined or applied through the\n              // single-domain API is not something a batch approval may reopen.\n              if (stored.approval?.id !== supplied.approval.id && stored.status !== \"planned\") {\n                return yield* stale(stored);\n              }\n              pairs.push({ attempt: stored, approval: supplied.approval });\n            }\n            const now = yield* DateTime.now;\n            yield* commit(\"batches.approve\");\n            for (const { attempt: stored, approval } of pairs) {\n              if (stored.approval?.id === approval.id) continue;\n              state.attempts.set(\n                stored.id,\n                new Storage.Attempt({\n                  ...stored,\n                  status: \"approved\",\n                  approval,\n                  updatedAt: now,\n                }),\n              );\n            }\n            return settle(\n              new Storage.Batch({\n                ...row,\n                digest: input.digest,\n                approval: { actorId: input.actorId, at: now },\n              }),\n              now,\n            );\n          }),\n        ),\n      reject: (id, input) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* batch(principal, id);\n            // Terminal: a second rejection is the same outcome, so it returns the first one.\n            if (row.rejection !== null) return aggregateOf(row);\n            yield* openForPlanning(row);\n            const now = yield* DateTime.now;\n            yield* commit(\"batches.reject\");\n            for (const item of itemsOf(id)) {\n              const stored =\n                item.attemptId === null ? undefined : state.attempts.get(item.attemptId);\n              if (stored === undefined || stored.status !== \"planned\") continue;\n              state.attempts.set(\n                stored.id,\n                new Storage.Attempt({\n                  ...stored,\n                  status: \"rejected\",\n                  rejection: { actorId: input.actorId, reason: input.reason, at: now },\n                  updatedAt: now,\n                }),\n              );\n            }\n            return settle(\n              new Storage.Batch({\n                ...row,\n                rejection: { actorId: input.actorId, reason: input.reason, at: now },\n              }),\n              now,\n            );\n          }),\n        ),\n      refresh: (id) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            const row = yield* batch(principal, id);\n            yield* commit(\"batches.refresh\");\n            return settle(row, yield* DateTime.now);\n          }),\n        ),\n    },\n    readiness: {\n      put: (readiness) =>\n        write((principal) =>\n          Effect.gen(function* () {\n            if (readiness.ownerId !== principal.ownerId) {\n              return yield* invalid(\"Readiness owner does not match the principal\", \"ownerId\");\n            }\n            if (readiness.attachmentId !== null)\n              yield* attachment(principal, readiness.attachmentId);\n            yield* commit(\"readiness.put\");\n            state.readiness.set(`${principal.ownerId}:${readiness.domain}`, readiness);\n          }),\n        ),\n      get: (domain) =>\n        read((principal) =>\n          Effect.sync(() =>\n            Option.fromNullishOr(state.readiness.get(`${principal.ownerId}:${domain}`)),\n          ),\n        ),\n    },\n    withLock: (key, effect) =>\n      Effect.flatMap(Principal.Service, (principal) => {\n        const scoped = `${principal.ownerId}:${key}`;\n        return Effect.acquireRelease(\n          Effect.suspend(() => {\n            if (state.locks.has(scoped)) {\n              return Errors.fail(new Reason.Busy({ key }));\n            }\n            state.locks.add(scoped);\n            return Effect.void;\n          }),\n          () => Effect.sync(() => void state.locks.delete(scoped)),\n        ).pipe(\n          Effect.flatMap(() => effect),\n          Effect.scoped,\n        );\n      }),\n  };\n}\n\nconst stale = (row: Storage.Attempt) =>\n  Errors.fail(new Reason.Stale({ planId: Plan.PlanId.make(row.id), digest: row.plan.digest }));\n"],"mappings":";;;;;;;;AAyBA,MAAM,YAAY,QAAmC,OACnDA,KAAY,IAAIC,SAAgB;CAAE;CAAQ;AAAG,CAAC,CAAC;AACjD,MAAM,WAAW,SAAiB,UAChCD,KAAY,IAAIE,aAAoB;CAAE;CAAS,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;AAAG,CAAC,CAAC;AAE7F,SAAgB,WAAW,UAAiC,CAAC,GAAsB;CACjF,MAAM,QAAe;EACnB,gCAAgB,IAAI,IAAI;EACxB,6BAAa,IAAI,IAAI;EACrB,6BAAa,IAAI,IAAI;EACrB,6BAAa,IAAI,IAAI;EACrB,+BAAe,IAAI,IAAI;EACvB,0BAAU,IAAI,IAAI;EAClB,yBAAS,IAAI,IAAI;EACjB,4BAAY,IAAI,IAAI;EACpB,2BAAW,IAAI,IAAI;EACnB,uBAAO,IAAI,IAAI;CACjB;CACA,MAAM,YAAY,UAAU,WAAW,CAAC;CACxC,MAAM,UAAU,cACd,QAAQ,iBAAiB,KAAA,IAAY,OAAO,OAAO,QAAQ,aAAa,SAAS;CAEnF,MAAM,QACJ,QAC+C,OAAO,QAAQC,SAAmB,GAAG;CACtF,MAAM,SACJ,QAEA,OAAO,QAAQA,UAAoB,cAAc,UAAU,WAAW,IAAI,SAAS,CAAC,CAAC;CAEvF,MAAM,SACJ,MACA,WACA,OACoB;EACpB,MAAM,MAAM,KAAK,IAAI,EAAE;EACvB,OAAO,QAAQ,KAAA,KAAa,IAAI,YAAY,UAAU,UAAU,MAAM,KAAA;CACxE;CACA,MAAM,aACJ,MACA,cACG,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,QAAQ,IAAI,YAAY,UAAU,OAAO;CAEzE,MAAM,iBAAiB,WAAgC,OACrD,OAAO,cAAc;EACnB,MAAM,MAAM,MAAM,MAAM,gBAAgB,WAAW,EAAE;EACrD,OAAO,QAAQ,KAAA,IAAY,SAAS,iBAAiB,EAAE,IAAI,OAAO,QAAQ,GAAG;CAC/E,CAAC;CACH,MAAM,cAAc,WAAgC,OAClD,OAAO,cAAc;EACnB,MAAM,MAAM,MAAM,MAAM,aAAa,WAAW,EAAE;EAClD,OAAO,QAAQ,KAAA,IAAY,SAAS,cAAc,EAAE,IAAI,OAAO,QAAQ,GAAG;CAC5E,CAAC;CACH,MAAM,cAAc,WAAgC,OAClD,OAAO,cAAc;EACnB,MAAM,MAAM,MAAM,MAAM,aAAa,WAAW,EAAE;EAClD,OAAO,QAAQ,KAAA,IAAY,SAAS,cAAc,EAAE,IAAI,OAAO,QAAQ,GAAG;CAC5E,CAAC;CACH,MAAM,WAAW,WAAgC,OAC/C,OAAO,cAAc;EACnB,MAAM,MAAM,MAAM,MAAM,UAAU,WAAW,EAAE;EAC/C,OAAO,QAAQ,KAAA,IAAY,SAAS,QAAQ,EAAE,IAAI,OAAO,QAAQ,GAAG;CACtE,CAAC;CACH,MAAM,gBACJ,WACA,QACA,IACA,cAEA,OAAO,cAAc;EACnB,MAAM,MAAM,UAAU,MAAM,UAAU,SAAS,CAAC,CAAC,KAAK,SAAS;EAC/D,OAAO,QAAQ,KAAA,IAAY,SAAS,QAAQ,EAAE,IAAI,OAAO,QAAQ,GAAG;CACtE,CAAC;CAEH,MAAM,SAAS,WAAgC,OAC7C,OAAO,cAAc;EACnB,MAAM,MAAM,MAAM,MAAM,SAAS,WAAW,EAAE;EAC9C,OAAO,QAAQ,KAAA,IAAY,SAAS,SAAS,EAAE,IAAI,OAAO,QAAQ,GAAG;CACvE,CAAC;CAEH,MAAM,WAAW,YACf,CAAC,GAAI,MAAM,WAAW,IAAI,OAAO,KAAK,CAAC,CAAE,CAAC,CAAC,MACxC,MAAM,UAAU,KAAK,WAAW,MAAM,QACzC;CAEF,MAAM,eAAe,SAAgD;EACnE,OAAO;EACP,OAAO,QAAQ,IAAI,EAAE;CACvB;CAEA,MAAM,cAAc,QAClBH,KAAY,IAAII,WAAkB;EAAE,SAAS,IAAI;EAAI,QAAQ,IAAI;EAAQ,QAAQ,IAAI;CAAO,CAAC,CAAC;CAEhG,MAAM,YAAY,KAAoB,UACpCC,cAAsB;EACpB,UAAU,IAAI,aAAa;EAC3B,UAAU,IAAI,cAAc;EAC5B,OAAO,MAAM,KAAK,SAChB,KAAK,cAAc,OAAO,OAAQ,MAAM,SAAS,IAAI,KAAK,SAAS,CAAC,EAAE,UAAU,IAClF;CACF,CAAC;;CAGH,MAAM,UAAU,KAAoB,QAA8C;EAChF,MAAM,QAAQ,QAAQ,IAAI,EAAE;EAC5B,MAAM,SAAS,SAAS,KAAK,KAAK;EAClC,MAAM,OAAO,IAAIC,MAAc;GAC7B,GAAG;GACH;GACA,aAAa,WAAW,cAAc,WAAW,aAAa,MAAM;GACpE,WAAW;EACb,CAAC;EACD,MAAM,QAAQ,IAAI,IAAI,IAAI,IAAI;EAC9B,OAAO;GAAE,OAAO;GAAM;EAAM;CAC9B;CAEA,MAAM,eAAe,SAA4B;EAC/C,MAAM,QAAQ,MAAM,WAAW,IAAI,KAAK,OAAO,KAAK,CAAC;EACrD,MAAM,QAAQ,MAAM,WAAW,QAAQ,IAAI,iBAAiB,KAAK,YAAY;EAC7E,IAAI,SAAS,GAAG,MAAM,SAAS;CACjC;;CAGA,MAAM,mBAAmB,QACvB,IAAI,WAAW,cAAc,IAAI,WAAW,YAAY,OAAO,OAAO,WAAW,GAAG;CAEtF,MAAM,UAAU,KAAoB,iBAClC,OAAO,cAAc;EACnB,MAAM,OAAO,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,UAAU,MAAM,iBAAiB,YAAY;EAChF,OAAO,SAAS,KAAA,IAAY,SAAS,cAAc,YAAY,IAAI,OAAO,QAAQ,IAAI;CACxF,CAAC;CAEH,MAAM,oBACJ,WACA,KACA,WAEA,OAAO,IAAI,aAAa;EACtB,OAAO,OAAO,kCAAkC;EAChD,MAAM,eAAe,IACnB,IAAI,IACJ,IAAIC,cAAsB;GAAE,GAAG;GAAK,YAAY;EAAU,CAAC,CAC7D;EACA,OAAO;EACP,OAAO,OAAO,mCAAmC;EACjD,IAAI,MAAM,MAAM,gBAAgB,WAAW,IAAI,EAAE,MAAM,KAAA,GAAW;GAChE,MAAM,eAAe,OAAO,IAAI,EAAE;GAClC,MAAM,YAAY,OAAO,IAAI,EAAE;EACjC;CACF,CAAC;CAEH,OAAO;EACL,gBAAgB;GACd,SAAS,EAAE,eAAe,OAAO,YAAY,iBAC3C,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,IAAI,MAAM,YAAY,UAAU,SAC9B,OAAO,OAAO,QAAQ,oDAAoD,SAAS;IAErF,IAAI,eAAe,KAAA,GAAW;KAE5B,KAAI,OADmB,cAAc,WAAW,UAAU,EAAA,CAC9C,eAAe,UACzB,OAAO,OAAOP,KAAY,IAAIQ,KAAY,EAAE,KAAK,iBAAiB,aAAa,CAAC,CAAC;KAEnF,IAAI,MAAM,OAAO,YACf,OAAO,OAAO,QAAQ,0CAA0C,IAAI;IAExE,OAAO,IAAI,MAAM,eAAe,IAAI,MAAM,EAAE,GAC1C,OAAO,OAAO,QAAQ,iBAAiB,MAAM,GAAG,kBAAkB,IAAI;IAExE,OAAO,OAAO,uBAAuB;IACrC,MAAM,eAAe,IAAI,MAAM,IAAI,KAAK;IACxC,MAAM,YAAY,IAAI,MAAM,IAAI,UAAU;IAC1C,OAAO;GACT,CAAC,CACH;GACF,MAAM,OAAO,MAAM,cAAc,cAAc,WAAW,EAAE,CAAC;GAC7D,aAAa,OACX,MAAM,cACJ,cAAc,WAAW,EAAE,CAAC,CAAC,KAC3B,OAAO,cAAc;IACnB,MAAM,MAAM,MAAM,YAAY,IAAI,EAAE;IACpC,OAAO,QAAQ,KAAA,IAAY,SAAS,iBAAiB,EAAE,IAAI,OAAO,QAAQ,GAAG;GAC/E,CAAC,CACH,CACF;GACF,SAAS,IAAI,eACX,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,OAAO,cAAc,WAAW,EAAE;IAClC,OAAO,OAAO,uBAAuB;IACrC,MAAM,YAAY,IAAI,IAAI,UAAU;GACtC,CAAC,CACH;GACF,sBAAsB,IAAI,iBACxB,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,cAAc,WAAW,EAAE;IAC9C,OAAO,OAAO,oCAAoC;IAClD,MAAM,eAAe,IACnB,IACA,IAAID,cAAsB;KACxB,GAAG;KACH,cAAc,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAG,IAAI,cAAc,GAAG,YAAY,CAAC,CAAC;IACnE,CAAC,CACH;GACF,CAAC,CACH;GACF,SAAS,IAAI,WACX,MAAM,cACJ,cAAc,WAAW,EAAE,CAAC,CAAC,KAC3B,OAAO,SAAS,QAAQ,iBAAiB,WAAW,KAAK,MAAM,CAAC,CAClE,CACF;GACF,qBAAqB,WACnB,MAAM,cACJ,OAAO,QACL,UAAU,MAAM,gBAAgB,SAAS,CAAC,CAAC,QACxC,QAAQ,IAAI,eAAe,SAC9B,IACC,QAAQ,iBAAiB,WAAW,KAAK,OAAO,GAAG,CAAC,CACvD,CAAC,CAAC,KAAK,OAAO,KAAK,aAAa,SAAS,MAAM,CAAC,CAClD;EACJ;EACA,aAAa;GACX,SAAS,oBACP,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,OAAO,cAAc,WAAW,eAAe;IAC/C,MAAM,MAAM,IAAIE,WAAmB;KACjC,IAAI,OAAO,MAAM,MAAM;KACvB,SAAS,UAAU;KACnB;KACA,WAAW,OAAO,SAAS;IAC7B,CAAC;IACD,OAAO,OAAO,oBAAoB;IAClC,MAAM,YAAY,IAAI,IAAI,IAAI,GAAG;IACjC,OAAO;GACT,CAAC,CACH;GACF,MAAM,OAAO,MAAM,cAAc,WAAW,WAAW,EAAE,CAAC;GAC1D,OAAO,WACL,MAAM,cACJ,OAAO,WACL,UAAU,MAAM,aAAa,SAAS,CAAC,CAAC,QACrC,QACC,QAAQ,aAAa,KAAA,KACrB,MAAM,eAAe,IAAI,IAAI,eAAe,CAAC,EAAE,aAAa,OAAO,QACvE,CACF,CACF;GACF,SAAS,OACP,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,OAAO,WAAW,WAAW,EAAE;IAC/B,IAAI,UAAU,MAAM,aAAa,SAAS,CAAC,CAAC,MAAM,QAAQ,IAAI,iBAAiB,EAAE,GAC/E,OAAO,OAAO,QAAQ,cAAc,GAAG,yBAAyB,cAAc;IAEhF,OAAO,OAAO,oBAAoB;IAClC,MAAM,YAAY,OAAO,EAAE;GAC7B,CAAC,CACH;EACJ;EACA,aAAa;GACX,SAAS,UACP,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,OAAO,WAAW,WAAW,MAAM,YAAY;IAC/C,IACE,UAAU,MAAM,aAAa,SAAS,CAAC,CAAC,MAAM,QAAQ,IAAI,WAAW,MAAM,MAAM,GAEjF,OAAO,OAAO,QAAQ,GAAG,MAAM,OAAO,uBAAuB,QAAQ;IAEvE,MAAM,MAAM,IAAIC,WAAmB;KACjC,IAAI,OAAO,MAAM,KAAK;KACtB,SAAS,UAAU;KACnB,cAAc,MAAM;KACpB,QAAQ,MAAM;KACd,MAAM,MAAM;KACZ,OAAO,MAAM;KACb,QAAQ,MAAM;KACd,WAAW,OAAO,SAAS;IAC7B,CAAC;IACD,OAAO,OAAO,oBAAoB;IAClC,MAAM,YAAY,IAAI,IAAI,IAAI,GAAG;IACjC,OAAO;GACT,CAAC,CACH;GACF,MAAM,OAAO,MAAM,cAAc,WAAW,WAAW,EAAE,CAAC;GAC1D,WAAW,WACT,MAAM,cACJ,OAAO,WACL,OAAO,cACL,UAAU,MAAM,aAAa,SAAS,CAAC,CAAC,MAAM,QAAQ,IAAI,WAAW,MAAM,CAC7E,CACF,CACF;GACF,OAAO,iBACL,MAAM,cACJ,WAAW,WAAW,YAAY,CAAC,CAAC,KAClC,OAAO,UACL,UAAU,MAAM,aAAa,SAAS,CAAC,CAAC,QACrC,QAAQ,IAAI,iBAAiB,YAChC,CACF,CACF,CACF;GACF,SAAS,OACP,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,OAAO,WAAW,WAAW,EAAE;IAC/B,OAAO,OAAO,oBAAoB;IAClC,MAAM,YAAY,OAAO,EAAE;GAC7B,CAAC,CACH;EACJ;EACA,eAAe;GACb,MAAM,iBACJ,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,IAAI,aAAa,YAAY,UAAU,SACrC,OAAO,OAAO,QAAQ,mDAAmD,SAAS;IAEpF,OAAO,OAAO,mBAAmB;IACjC,MAAM,cAAc,IAAI,aAAa,IAAI,YAAY;GACvD,CAAC,CACH;GACF,MAAM,OACJ,MAAM,cACJ,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,MAAM,MAAM,eAAe,WAAW,EAAE;IACpD,IAAI,QAAQ,KAAA,GAAW,OAAO,OAAO,SAAS,gBAAgB,EAAE;IAChE,MAAM,MAAM,OAAO,SAAS;IAC5B,IAAI,SAAS,cAAc,IAAI,SAAS,KAAK,SAAS,cAAc,GAAG,GACrE,OAAO,OAAOV,KAAY,IAAIW,QAAe;KAAE,QAAQ;KAAgB;IAAG,CAAC,CAAC;IAE9E,OAAO;GACT,CAAC,CACH;GACF,SAAS,OACP,OAAO,IAAI,aAAa;IAItB,MAAM,MAAM,MAAM,cAAc,IAAI,EAAE;IACtC,IAAI,QAAQ,KAAA,GAAW,OAAO,OAAO,SAAS,gBAAgB,EAAE;IAChE,MAAM,MAAM,OAAO,SAAS;IAC5B,IAAI,SAAS,cAAc,IAAI,SAAS,KAAK,SAAS,cAAc,GAAG,GACrE,OAAO,OAAOX,KAAY,IAAIW,QAAe;KAAE,QAAQ;KAAgB;IAAG,CAAC,CAAC;IAE9E,OAAO,IAAIC,mBAA2B;KACpC,SAAS,IAAI;KACb,SAAS,IAAI;KACb,UAAU,IAAI;KACd,WAAW,IAAI;IACjB,CAAC;GACH,CAAC;GACH,UAAU,OACR,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,MAAM,MAAM,eAAe,WAAW,EAAE;IACpD,IAAI,QAAQ,KAAA,GAAW,OAAO,OAAO,SAAS,gBAAgB,EAAE;IAChE,OAAO,OAAO,uBAAuB;IACrC,MAAM,cAAc,OAAO,EAAE;IAC7B,MAAM,MAAM,OAAO,SAAS;IAC5B,IAAI,SAAS,cAAc,IAAI,SAAS,KAAK,SAAS,cAAc,GAAG,GACrE,OAAO,OAAOZ,KAAY,IAAIW,QAAe;KAAE,QAAQ;KAAgB;IAAG,CAAC,CAAC;IAE9E,OAAO;GACT,CAAC,CACH;EACJ;EACA,UAAU;GACR,SAAS,UACP,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,IAAI,MAAM,YAAY,UAAU,SAC9B,OAAO,OAAO,QAAQ,8CAA8C,SAAS;IAE/E,IAAI,MAAM,SAAS,IAAI,MAAM,EAAE,GAC7B,OAAO,OAAO,QAAQ,QAAQ,MAAM,GAAG,kBAAkB,IAAI;IAE/D,OAAO,OAAO,iBAAiB;IAC/B,MAAM,SAAS,IAAI,MAAM,IAAI,KAAK;IAClC,OAAO;GACT,CAAC,CACH;GACF,MAAM,OAAO,MAAM,cAAc,QAAQ,WAAW,EAAE,CAAC;GACvD,aAAa,OACX,MAAM,cACJ,aAAa,WAAW,YAAY,KAAK,QAAQ,IAAI,UAAU,OAAO,EAAE,CAC1E;GACF,YAAY,OACV,MAAM,cACJ,aAAa,WAAW,WAAW,KAAK,QAAQ,IAAI,SAAS,OAAO,EAAE,CACxE;GACF,SAAS,cAAc,SACrB,MAAM,cACJ,OAAO,WACL,OAAO,cACL,UAAU,MAAM,UAAU,SAAS,CAAC,CACjC,QAAQ,QAAQ,IAAI,iBAAiB,gBAAgB,IAAI,SAAS,IAAI,CAAC,CACvE,QACE,MAAM,QACL,SAAS,KAAA,KACT,SAAS,cAAc,IAAI,KAAK,SAAS,KACvC,SAAS,cAAc,KAAK,KAAK,SAAS,IACxC,MACA,MACN,KAAA,CACF,CACJ,CACF,CACF;GACF,UAAU,IAAI,aACZ,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,QAAQ,WAAW,EAAE;IACxC,IAAI,IAAI,UAAU,OAAO,SAAS,IAAI,OAAO;IAC7C,IAAI,IAAI,WAAW,WAAW,OAAO,OAAO,MAAM,GAAG;IACrD,MAAM,OAAO,IAAIE,QAAgB;KAC/B,GAAG;KACH,QAAQ;KACR;KACA,WAAW,OAAO,SAAS;IAC7B,CAAC;IACD,OAAO,OAAO,kBAAkB;IAChC,MAAM,SAAS,IAAI,IAAI,IAAI;IAC3B,OAAO;GACT,CAAC,CACH;GACF,SAAS,IAAI,UACX,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,QAAQ,WAAW,EAAE;IACxC,IAAI,IAAI,WAAW,YAAY,OAAO;IACtC,IAAI,IAAI,WAAW,WACjB,OAAO,OAAOb,KAAY,IAAIW,QAAe;KAAE,QAAQ;KAAQ;IAAG,CAAC,CAAC;IAEtE,IAAI,IAAI,WAAW,aAAa,IAAI,KAAK,WAAW,MAAM,QACxD,OAAO,OAAO,MAAM,GAAG;IACzB,MAAM,MAAM,OAAO,SAAS;IAC5B,MAAM,OAAO,IAAIE,QAAgB;KAC/B,GAAG;KACH,QAAQ;KACR,WAAW;MAAE,SAAS,MAAM;MAAS,QAAQ,MAAM;MAAQ,IAAI;KAAI;KACnE,WAAW;IACb,CAAC;IACD,OAAO,OAAO,iBAAiB;IAC/B,MAAM,SAAS,IAAI,IAAI,IAAI;IAC3B,OAAO;GACT,CAAC,CACH;GACF,QAAQ,IAAI,UACV,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,QAAQ,WAAW,EAAE;IACxC,MAAM,MAAM,OAAO,SAAS;IAC5B,IAAI,IAAI,WAAW,YAEf;SAAA,IAAI,mBAAmB,QACvB,SAAS,cAAc,IAAI,cAAc,IAAI,SAAS,cAAc,GAAG,GAEvE,OAAO,OAAOb,KAAY,IAAIQ,KAAY,EAAE,KAAK,SAAS,KAAK,CAAC,CAAC;IAAA,OAE9D,IAAI,IAAI,WAAW,cAAc,IAAI,WAAW,UACrD,OAAO,OAAO,MAAM,GAAG;IAEzB,MAAM,OAAO,IAAIK,QAAgB;KAC/B,GAAG;KACH,QAAQ;KACR,gBAAgB;KAChB,SAAS;KACT,WAAW;IACb,CAAC;IACD,OAAO,OAAO,gBAAgB;IAC9B,MAAM,SAAS,IAAI,IAAI,IAAI;IAC3B,OAAO;GACT,CAAC,CACH;GACF,WAAW,IAAI,YACb,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,QAAQ,WAAW,EAAE;IACxC,IAAI,IAAI,WAAW,YAAY,OAAO,OAAO,MAAM,GAAG;IACtD,MAAM,OAAO,IAAIA,QAAgB;KAC/B,GAAG;KACH,QAAQ,QAAQ;KAChB;KACA,gBAAgB;KAChB,WAAW,OAAO,SAAS;IAC7B,CAAC;IACD,OAAO,OAAO,mBAAmB;IACjC,MAAM,SAAS,IAAI,IAAI,IAAI;IAC3B,OAAO;GACT,CAAC,CACH;GACF,OAAO,IAAI,YACT,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,QAAQ,WAAW,EAAE;IACxC,IAAI,IAAI,WAAW,YAAY,OAAO,OAAO,MAAM,GAAG;IACtD,MAAM,OAAO,IAAIA,QAAgB;KAC/B,GAAG;KACH,QAAQ;KACR,SAAS;KACT,gBAAgB;KAChB,WAAW,OAAO,SAAS;IAC7B,CAAC;IACD,OAAO,OAAO,eAAe;IAC7B,MAAM,SAAS,IAAI,IAAI,IAAI;IAC3B,OAAO;GACT,CAAC,CACH;EACJ;EACA,SAAS;GACP,SAAS,UACP,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,SAAS,UAAU,MAAM,SAAS,SAAS,CAAC,CAAC,MAChD,QAAQ,IAAI,mBAAmB,MAAM,cACxC;IACA,IAAI,WAAW,KAAA,GAAW,OAAO,YAAY,MAAM;IACnD,IAAI,MAAM,cAAc,WAAW,GACjC,OAAO,OAAO,QAAQ,yCAAyC,eAAe;IAEhF,IAAI,IAAI,IAAI,MAAM,aAAa,CAAC,CAAC,SAAS,MAAM,cAAc,QAC5D,OAAO,OAAO,QAAQ,yCAAyC,eAAe;IAEhF,KAAK,MAAM,gBAAgB,MAAM,eAC/B,OAAO,WAAW,WAAW,YAAY;IAE3C,MAAM,MAAM,OAAO,SAAS;IAC5B,MAAM,KAAA,QAAqB,KAAK,OAAO,MAAM,OAAO,CAAC;IACrD,MAAM,MAAM,IAAIP,MAAc;KAC5B;KACA,SAAS,UAAU;KACnB,MAAM,MAAM;KACZ,QAAQ;KACR,QAAQ;KACR,UAAU;KACV,WAAW;KACX,gBAAgB,MAAM;KACtB,WAAW,UAAU;KACrB,WAAW;KACX,WAAW;KACX,aAAa;IACf,CAAC;IACD,OAAO,OAAO,gBAAgB;IAC9B,MAAM,QAAQ,IAAI,IAAI,GAAG;IACzB,MAAM,WAAW,IACf,IACA,MAAM,cAAc,KACjB,cAAc,aACb,IAAIQ,UAAkB;KACpB,SAAS;KACT;KACA;KACA,WAAW;KACX,aAAa;IACf,CAAC,CACL,CACF;IACA,OAAO,YAAY,GAAG;GACxB,CAAC,CACH;GACF,MAAM,OAAO,MAAM,cAAc,OAAO,IAAI,MAAM,WAAW,EAAE,GAAG,WAAW,CAAC;GAC9E,mBAAmB,QACjB,MAAM,cACJ,OAAO,WACL,OAAO,IACL,OAAO,cACL,UAAU,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,QAAQ,IAAI,mBAAmB,GAAG,CAC9E,GACA,WACF,CACF,CACF;GACF,sBACE,MAAM,cACJ,OAAO,WACL,UAAU,MAAM,SAAS,SAAS,CAAC,CAChC,QAAQ,QAAQ,IAAI,WAAW,cAAc,IAAI,WAAW,UAAU,CAAC,CACvE,MACE,MAAM,UACL,SAAS,cAAc,MAAM,SAAS,IAAI,SAAS,cAAc,KAAK,SAAS,CACnF,CAAC,CACA,IAAI,WAAW,CACpB,CACF;GACF,iBAAiB,IAAI,cAAc,cACjC,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,MAAM,WAAW,EAAE;IACtC,OAAO,gBAAgB,GAAG;IAC1B,MAAM,OAAO,OAAO,OAAO,KAAK,YAAY;IAC5C,MAAM,UAAU,OAAO,QAAQ,WAAW,SAAS;IACnD,IAAI,QAAQ,iBAAiB,gBAAgB,QAAQ,SAAS,IAAI,MAChE,OAAO,OAAO,QACZ,QAAQ,UAAU,iCAAiC,aAAa,iBAChE,WACF;IAEF,OAAO,OAAO,wBAAwB;IACtC,YAAY,IAAIA,UAAkB;KAAE,GAAG;KAAM;KAAW,aAAa;IAAK,CAAC,CAAC;IAC5E,OAAO,OAAO,KAAK,OAAO,SAAS,GAAG;GACxC,CAAC,CACH;GACF,wBAAwB,IAAI,cAAc,YACxC,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,MAAM,WAAW,EAAE;IACtC,OAAO,gBAAgB,GAAG;IAC1B,MAAM,OAAO,OAAO,OAAO,KAAK,YAAY;IAC5C,OAAO,OAAO,+BAA+B;IAC7C,YAAY,IAAIA,UAAkB;KAAE,GAAG;KAAM,WAAW;KAAM,aAAa;IAAQ,CAAC,CAAC;IACrF,OAAO,OAAO,KAAK,OAAO,SAAS,GAAG;GACxC,CAAC,CACH;GACF,UAAU,IAAI,UACZ,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,MAAM,WAAW,EAAE;IAEtC,IAAI,IAAI,aAAa,MACnB,OAAO,IAAI,WAAW,MAAM,SAAS,YAAY,GAAG,IAAI,OAAO,WAAW,GAAG;IAE/E,IAAI,IAAI,WAAW,WAAW,OAAO,OAAO,WAAW,GAAG;IAC1D,MAAM,QAAQ,QAAQ,EAAE;IACxB,MAAM,QAGD,CAAC;IACN,KAAK,MAAM,QAAQ,OAAO;KACxB,MAAM,WAAW,MAAM,UAAU,MAC9B,UAAU,MAAM,iBAAiB,KAAK,YACzC;KACA,IAAI,aAAa,KAAA,GACf,OAAO,OAAO,QACZ,SAAS,GAAG,kCAAkC,KAAK,gBACnD,WACF;KAIF,MAAM,SACJ,KAAK,cAAc,OAAO,KAAA,IAAY,MAAM,SAAS,IAAI,KAAK,SAAS;KACzE,IAAI,WAAW,KAAA,KAAa,OAAO,OAAO,SAAS,SAAS,QAC1D,OAAO,OAAO,WAAW,GAAG;KAI9B,IAAI,OAAO,UAAU,OAAO,SAAS,SAAS,MAAM,OAAO,WAAW,WACpE,OAAO,OAAO,MAAM,MAAM;KAE5B,MAAM,KAAK;MAAE,SAAS;MAAQ,UAAU,SAAS;KAAS,CAAC;IAC7D;IACA,MAAM,MAAM,OAAO,SAAS;IAC5B,OAAO,OAAO,iBAAiB;IAC/B,KAAK,MAAM,EAAE,SAAS,QAAQ,cAAc,OAAO;KACjD,IAAI,OAAO,UAAU,OAAO,SAAS,IAAI;KACzC,MAAM,SAAS,IACb,OAAO,IACP,IAAID,QAAgB;MAClB,GAAG;MACH,QAAQ;MACR;MACA,WAAW;KACb,CAAC,CACH;IACF;IACA,OAAO,OACL,IAAIP,MAAc;KAChB,GAAG;KACH,QAAQ,MAAM;KACd,UAAU;MAAE,SAAS,MAAM;MAAS,IAAI;KAAI;IAC9C,CAAC,GACD,GACF;GACF,CAAC,CACH;GACF,SAAS,IAAI,UACX,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,MAAM,WAAW,EAAE;IAEtC,IAAI,IAAI,cAAc,MAAM,OAAO,YAAY,GAAG;IAClD,OAAO,gBAAgB,GAAG;IAC1B,MAAM,MAAM,OAAO,SAAS;IAC5B,OAAO,OAAO,gBAAgB;IAC9B,KAAK,MAAM,QAAQ,QAAQ,EAAE,GAAG;KAC9B,MAAM,SACJ,KAAK,cAAc,OAAO,KAAA,IAAY,MAAM,SAAS,IAAI,KAAK,SAAS;KACzE,IAAI,WAAW,KAAA,KAAa,OAAO,WAAW,WAAW;KACzD,MAAM,SAAS,IACb,OAAO,IACP,IAAIO,QAAgB;MAClB,GAAG;MACH,QAAQ;MACR,WAAW;OAAE,SAAS,MAAM;OAAS,QAAQ,MAAM;OAAQ,IAAI;MAAI;MACnE,WAAW;KACb,CAAC,CACH;IACF;IACA,OAAO,OACL,IAAIP,MAAc;KAChB,GAAG;KACH,WAAW;MAAE,SAAS,MAAM;MAAS,QAAQ,MAAM;MAAQ,IAAI;KAAI;IACrE,CAAC,GACD,GACF;GACF,CAAC,CACH;GACF,UAAU,OACR,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,MAAM,WAAW,EAAE;IACtC,OAAO,OAAO,iBAAiB;IAC/B,OAAO,OAAO,KAAK,OAAO,SAAS,GAAG;GACxC,CAAC,CACH;EACJ;EACA,WAAW;GACT,MAAM,cACJ,OAAO,cACL,OAAO,IAAI,aAAa;IACtB,IAAI,UAAU,YAAY,UAAU,SAClC,OAAO,OAAO,QAAQ,gDAAgD,SAAS;IAEjF,IAAI,UAAU,iBAAiB,MAC7B,OAAO,WAAW,WAAW,UAAU,YAAY;IACrD,OAAO,OAAO,eAAe;IAC7B,MAAM,UAAU,IAAI,GAAG,UAAU,QAAQ,GAAG,UAAU,UAAU,SAAS;GAC3E,CAAC,CACH;GACF,MAAM,WACJ,MAAM,cACJ,OAAO,WACL,OAAO,cAAc,MAAM,UAAU,IAAI,GAAG,UAAU,QAAQ,GAAG,QAAQ,CAAC,CAC5E,CACF;EACJ;EACA,WAAW,KAAK,WACd,OAAO,QAAQH,UAAoB,cAAc;GAC/C,MAAM,SAAS,GAAG,UAAU,QAAQ,GAAG;GACvC,OAAO,OAAO,eACZ,OAAO,cAAc;IACnB,IAAI,MAAM,MAAM,IAAI,MAAM,GACxB,OAAOH,KAAY,IAAIQ,KAAY,EAAE,IAAI,CAAC,CAAC;IAE7C,MAAM,MAAM,IAAI,MAAM;IACtB,OAAO,OAAO;GAChB,CAAC,SACK,OAAO,WAAW,KAAK,MAAM,MAAM,OAAO,MAAM,CAAC,CACzD,CAAC,CAAC,KACA,OAAO,cAAc,MAAM,GAC3B,OAAO,MACT;EACF,CAAC;CACL;AACF;AAEA,MAAM,SAAS,QACbR,KAAY,IAAIe,MAAa;CAAE,QAAA,OAAoB,KAAK,IAAI,EAAE;CAAG,QAAQ,IAAI,KAAK;AAAO,CAAC,CAAC"}

package/dist/package.mjs

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.14.1";
+var version = "0.16.0";
 //#endregion
 export { version };
 

package/dist/types/Connect.d.ts

@@ -111,7 +111,7 @@ export interface Snapshot {
     readonly domain: string;
     readonly attachment: Storage.Attachment | null;
     readonly connection: Storage.Connection | null;
-    readonly authorization: Pick<Storage.Authorization, "id" | "provider" | "method" | "capabilities" | "revocation"> | null;
+    readonly authorization: Pick<Storage.Authorization, "id" | "provider" | "method" | "capabilities" | "revocation" | "label"> | null;
     readonly lastReceiptId: string | null;
     /** How many domains this domain's connection serves, including this one; `0` without one. */
     readonly connectionDomains: number;
@@ -425,6 +425,8 @@ export interface Zone {
 export interface ZoneConnection {
     readonly connectionId: string;
     readonly provider: string;
+    /** What the provider called the account at connect time; `null` when it named none. */
+    readonly label: string | null;
     readonly status: "connected" | "reconnect";
 }
 /** Every zone the principal's connections reach, and how each connection is standing. */

package/dist/types/Provider.d.ts

@@ -128,6 +128,12 @@ export interface Credential {
 /** A credential the provider just issued or refreshed; `null` expiry means it does not expire. */
 export interface IssuedCredential extends Credential {
     readonly expiresAt: DateTime.Utc | null;
+    /**
+     * What the provider calls the account this credential reaches, so a UI names the connection
+     * without a provider call. Omit it, or answer `null`, when the provider cannot name one: a
+     * credential that spans several accounts has no single name.
+     */
+    readonly label?: string | null;
 }
 /** Raw token-method input keyed by the provider's declared field names. */
 export type TokenValues = Readonly<Record<string, Redacted.Redacted<string> | undefined>>;

package/dist/types/Provision.d.ts

@@ -3,14 +3,14 @@
  * plan in one request, collect consent in another, and apply in a third, and a retry of any step
  * is idempotent.
  */
-import { Context, Effect, Layer } from "effect";
+import { Context, type DateTime, Effect, Layer } from "effect";
 import type * as Approval from "./Approval.ts";
 import * as Connect from "./Connect.ts";
 import type * as DnsRecord from "./DnsRecord.ts";
 import * as Errors from "./internal/error.ts";
 import * as Attempts from "./internal/attempts.ts";
-import type * as Plan from "./Plan.ts";
-import type * as Principal from "./Principal.ts";
+import * as Plan from "./Plan.ts";
+import * as Principal from "./Principal.ts";
 import type * as Receipt from "./Receipt.ts";
 import * as Storage from "./Storage.ts";
 type Fx<A> = Effect.Effect<A, Errors.DomainKitError, Principal.Service>;
@@ -24,6 +24,101 @@ export interface Attempt {
 export interface RejectOptions {
     readonly reason?: string;
 }
+/** One domain to plan inside a batch. The domain must already be attached. */
+export interface BatchInput {
+    readonly domain: string;
+    readonly requirements: ReadonlyArray<DnsRecord.Model>;
+}
+/**
+ * One domain's place in a batch, with whatever its attempt holds.
+ *
+ * Everything but `planFailure` is read from the attempt the item points at, so a batch never
+ * shows a customer a plan, receipt, or failure that disagrees with the attempt it came from.
+ */
+export interface BatchItem {
+    readonly attachmentId: string;
+    readonly position: number;
+    /** Null while the item has no plan; `planFailure` then says why. */
+    readonly plan: Plan.Model | null;
+    readonly status: Storage.AttemptStatus | null;
+    readonly approval: Approval.Model | null;
+    readonly receipt: Receipt.Model | null;
+    readonly rejection: Storage.Rejection | null;
+    /** Why the last apply stopped before any write. */
+    readonly failure: string | null;
+    /** Why the last planning pass could not build this item's plan. */
+    readonly planFailure: string | null;
+}
+/** Many domains planned together, approved once, and applied with bounded concurrency. */
+export interface Batch {
+    readonly id: Storage.BatchId;
+    readonly status: Storage.BatchStatus;
+    /**
+     * What `approve` binds: SHA-256 over the items' sorted `attachmentId:planDigest` pairs. The
+     * digest the batch was approved at once it is approved, the digest its current plans produce
+     * before that, and null while any item is still unplanned.
+     */
+    readonly digest: Plan.Digest | null;
+    readonly approval: Storage.BatchApproval | null;
+    readonly rejection: Storage.Rejection | null;
+    readonly createdAt: DateTime.Utc;
+    readonly updatedAt: DateTime.Utc;
+    readonly completedAt: DateTime.Utc | null;
+    readonly items: ReadonlyArray<BatchItem>;
+}
+/** A batch without its plans, for the index a host renders as a banner. */
+export interface BatchSummary {
+    readonly id: Storage.BatchId;
+    readonly status: Storage.BatchStatus;
+    readonly itemCount: number;
+    readonly createdAt: DateTime.Utc;
+    readonly updatedAt: DateTime.Utc;
+    readonly completedAt: DateTime.Utc | null;
+}
+export interface BatchInterface {
+    /**
+     * Plan every domain in `items` as one batch, with `Policy.batchConcurrency` in flight.
+     *
+     * `idempotencyKey` is unique per owner: a retried create returns the batch the first call made,
+     * plans whatever is still unplanned, and ignores items that batch does not hold. An item whose
+     * plan fails records the reason and leaves the batch `planning` for `resumePlanning`.
+     */
+    readonly create: (input: {
+        readonly items: ReadonlyArray<BatchInput>;
+        readonly idempotencyKey: string;
+    }) => Fx<Batch>;
+    /**
+     * Plan the items that still have none, with the requirements supplied again. A batch stores
+     * pointers, not requirements, so the host owns them across the retry.
+     */
+    readonly resumePlanning: (id: Storage.BatchId, input: {
+        readonly items: ReadonlyArray<BatchInput>;
+    }) => Fx<Batch>;
+    /**
+     * Record the principal's consent to the whole batch. Fails `BatchStale` unless `digest` is the
+     * one the batch's current plans produce. Approving an approved batch at its digest returns it.
+     */
+    readonly approve: (id: Storage.BatchId, options: {
+        readonly digest: Plan.Digest;
+    }) => Fx<Batch>;
+    /**
+     * Apply every approved item that has no receipt yet, with `Policy.batchConcurrency` in flight
+     * and each item under its own attempt lease. An item another apply holds is skipped this round,
+     * and an item that fails records its failure on its attempt rather than stopping the others, so
+     * calling `apply` again resumes the batch. Applying a complete batch returns it unchanged.
+     */
+    readonly apply: (id: Storage.BatchId) => Fx<Batch>;
+    /**
+     * Decline the batch and every plan under it; terminal. Rejecting again returns the same batch;
+     * a batch that was approved fails `BatchStale`.
+     */
+    readonly reject: (id: Storage.BatchId, options?: RejectOptions) => Fx<Batch>;
+    readonly get: (id: Storage.BatchId) => Fx<Batch>;
+    /** Every batch this owner still owes a move on, most recently touched first. */
+    readonly list: (filter: {
+        readonly unfinished: true;
+    }) => Fx<ReadonlyArray<BatchSummary>>;
+}
 export interface Interface {
     /** Read provider state and build an additive plan. Fails `NotFound` when the domain is not attached. */
     readonly plan: (input: {
@@ -47,6 +142,8 @@ export interface Interface {
     readonly apply: (approval: Approval.Model | Approval.ApprovalId) => Fx<Receipt.Model>;
     readonly get: (planId: Plan.PlanId) => Fx<Attempt>;
     readonly latest: (domain: string) => Fx<Attempt | null>;
+    /** Many domains as one reviewable unit: plan together, approve once, apply bounded. */
+    readonly batch: BatchInterface;
 }
 declare const Service_base: Context.ServiceClass<Service, "@domainkit/Provision", Interface>;
 export declare class Service extends Service_base {
@@ -56,6 +153,8 @@ export interface PolicyShape {
     readonly planTtlMs: number;
     /** Apply lease; a crashed apply can be retried after this. Default 2 minutes. */
     readonly applyLeaseMs: number;
+    /** How many of a batch's domains are planned or applied at once. Default 4. */
+    readonly batchConcurrency: number;
 }
 export declare const defaults: PolicyShape;
 declare const Policy_base: Context.Reference<PolicyShape>;
@@ -72,4 +171,26 @@ export declare const reject: (plan: Plan.Model | (string & import("effect/Brand"
 export declare const apply: (approval: Approval.Model | (string & import("effect/Brand").Brand<"@domainkit/ApprovalId">)) => Effect.Effect<Receipt.Model, Errors.DomainKitError, Principal.Service | Service>;
 export declare const get: (planId: string & import("effect/Brand").Brand<"@domainkit/PlanId">) => Effect.Effect<Attempt, Errors.DomainKitError, Principal.Service | Service>;
 export declare const latest: (domain: string) => Effect.Effect<Attempt | null, Errors.DomainKitError, Principal.Service | Service>;
+/**
+ * Many domains as one reviewable unit. Every operation needs `Provision.Service` and `Principal`,
+ * exactly like the single-domain accessors above.
+ */
+export declare const batch: {
+    create: (input: {
+        readonly items: ReadonlyArray<BatchInput>;
+        readonly idempotencyKey: string;
+    }) => Effect.Effect<Batch, Errors.DomainKitError, Principal.Service | Service>;
+    resumePlanning: (id: string & import("effect/Brand").Brand<"@domainkit/BatchId">, input: {
+        readonly items: ReadonlyArray<BatchInput>;
+    }) => Effect.Effect<Batch, Errors.DomainKitError, Principal.Service | Service>;
+    approve: (id: string & import("effect/Brand").Brand<"@domainkit/BatchId">, options: {
+        readonly digest: Plan.Digest;
+    }) => Effect.Effect<Batch, Errors.DomainKitError, Principal.Service | Service>;
+    apply: (id: string & import("effect/Brand").Brand<"@domainkit/BatchId">) => Effect.Effect<Batch, Errors.DomainKitError, Principal.Service | Service>;
+    reject: (id: string & import("effect/Brand").Brand<"@domainkit/BatchId">, options?: RejectOptions | undefined) => Effect.Effect<Batch, Errors.DomainKitError, Principal.Service | Service>;
+    get: (id: string & import("effect/Brand").Brand<"@domainkit/BatchId">) => Effect.Effect<Batch, Errors.DomainKitError, Principal.Service | Service>;
+    list: (filter: {
+        readonly unfinished: true;
+    }) => Effect.Effect<readonly BatchSummary[], Errors.DomainKitError, Principal.Service | Service>;
+};
 export {};