effect-agent 0.1.0-beta.12 → 0.1.0-beta.121

package/dist/durable/MessageDelivery.mjs

@@ -0,0 +1,557 @@
+import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.mjs";
+import { AgentId, DelegationId, ThreadId } from "../core/Identifiers.mjs";
+import { IdempotencyKey, Receipt } from "../core/Receipt.mjs";
+import { o as Value, r as Diagnostic, s as capture } from "../FailureDiagnostic-BElLOoED.mjs";
+import { b as WorkerUpdate } from "../Worker-CfwzMZEK.mjs";
+import { Digest } from "./Records.mjs";
+import { Settlement } from "./SubmissionLedger.mjs";
+import { digestJson } from "./Digest.mjs";
+import { ScheduleInstant, ScheduleRetry, ScheduleRetryReason } from "./Schedule.mjs";
+import { PreparedInputAdmission, admitPreparedInput } from "./PreparedInputAdmission.mjs";
+import { PreparedInput } from "./Subscription.mjs";
+import { Clock, Context, Crypto, Effect, Layer, Result, Schema, Semaphore } from "effect";
+//#region src/durable/MessageDelivery.ts
+var MessageDelivery_exports = /* @__PURE__ */ __exportAll({
+	MessageDeliveryChange: () => MessageDeliveryChange,
+	MessageDeliveryDriver: () => MessageDeliveryDriver,
+	MessageDeliveryDriverLimits: () => MessageDeliveryDriverLimits,
+	MessageDeliveryError: () => MessageDeliveryError,
+	MessageDeliveryFailpoint: () => MessageDeliveryFailpoint,
+	MessageDeliveryFailpointError: () => MessageDeliveryFailpointError,
+	MessageDeliveryKey: () => MessageDeliveryKey,
+	MessageDeliveryPage: () => MessageDeliveryPage,
+	MessageDeliveryPageRequest: () => MessageDeliveryPageRequest,
+	MessageDeliveryPolicy: () => MessageDeliveryPolicy,
+	MessageDeliveryRecord: () => MessageDeliveryRecord,
+	MessageDeliveryStore: () => MessageDeliveryStore,
+	MessageDeliveryStoreLimits: () => MessageDeliveryStoreLimits,
+	applyMessageDeliveryChange: () => applyMessageDeliveryChange,
+	defaultMessageDeliveryPolicy: () => defaultMessageDeliveryPolicy,
+	defaultMessageDeliveryStoreLimits: () => defaultMessageDeliveryStoreLimits,
+	isWorkerUpdateDelivery: () => isWorkerUpdateDelivery,
+	messageDeliveryCapacity: () => messageDeliveryCapacity,
+	messageDeliveryDeadline: () => messageDeliveryDeadline,
+	messageDeliveryKeyString: () => messageDeliveryKeyString,
+	messageDeliveryUsesCapacity: () => messageDeliveryUsesCapacity,
+	prepareMessageDelivery: () => prepareMessageDelivery,
+	readPending: () => readPending,
+	sameMessageDeliveryIdentity: () => sameMessageDeliveryIdentity,
+	validateMessageDelivery: () => validateMessageDelivery
+});
+const Positive = Schema.Int.check(Schema.isGreaterThan(0));
+const BoundedName = Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(256));
+/** An owner is always a source Thread. Destination admission has its own frozen key. */
+const MessageDeliveryKey = Schema.Struct({
+	ownerThreadId: ThreadId,
+	messageId: IdempotencyKey
+});
+const MessageDeliveryPolicy = Schema.Struct({
+	maxAutomaticAttempts: Positive.check(Schema.isLessThanOrEqualTo(100)),
+	attemptTimeoutMillis: Positive.check(Schema.isLessThanOrEqualTo(3e5)),
+	retryBaseMillis: Positive,
+	retryMaxMillis: Positive,
+	settlementPollMillis: Positive
+}).check(Schema.makeFilter((value) => value.retryBaseMillis <= value.retryMaxMillis));
+const defaultMessageDeliveryPolicy = {
+	maxAutomaticAttempts: 8,
+	attemptTimeoutMillis: 3e4,
+	retryBaseMillis: 1e3,
+	retryMaxMillis: 6e4,
+	settlementPollMillis: 5e3
+};
+const MessageDeliveryStoreLimits = Schema.Struct({
+	maxPendingPerOwner: Positive,
+	maxRetainedPerOwner: Positive,
+	maxEnvelopeBytes: Positive,
+	/** Separate update capacity preserves the full ordinary allowance for terminal reports. */
+	maxPendingUpdatesPerOwner: Schema.optionalKey(Positive),
+	maxRetainedUpdatesPerOwner: Schema.optionalKey(Positive)
+}).check(Schema.makeFilter((value) => value.maxPendingPerOwner <= value.maxRetainedPerOwner && (value.maxPendingUpdatesPerOwner ?? 32) <= (value.maxRetainedUpdatesPerOwner ?? 256)));
+const defaultMessageDeliveryStoreLimits = {
+	maxPendingPerOwner: 100,
+	maxRetainedPerOwner: 1e3,
+	maxEnvelopeBytes: 262144,
+	maxPendingUpdatesPerOwner: 32,
+	maxRetainedUpdatesPerOwner: 256
+};
+const ParkReason = Schema.Literals([
+	"exhausted",
+	"deadline",
+	"status-unavailable"
+]);
+const MessageDeliveryRecord = Schema.Struct({
+	schemaVersion: Schema.Literal(1),
+	key: MessageDeliveryKey,
+	envelope: PreparedInput,
+	envelopeDigest: Digest,
+	/** Same-owner predecessor whose admission must be known before this message is submitted. */
+	predecessor: Schema.optionalKey(IdempotencyKey),
+	createdAtMillis: ScheduleInstant,
+	/** Immutable creation identity; explicit recovery only renews deadlineAtMillis. */
+	initialDeadlineAtMillis: ScheduleInstant,
+	deadlineAtMillis: ScheduleInstant,
+	policy: MessageDeliveryPolicy,
+	version: Positive,
+	status: Schema.Literals([
+		"pending",
+		"accepted",
+		"processed",
+		"refused",
+		"parked"
+	]),
+	receipt: Schema.NullOr(Receipt),
+	settlement: Schema.NullOr(Settlement),
+	refusal: Schema.NullOr(BoundedName),
+	parkReason: Schema.NullOr(ParkReason),
+	leaseUntilMillis: Schema.NullOr(ScheduleInstant),
+	retry: ScheduleRetry,
+	/** Last failed admission/status check, retained across retries and successful recovery. */
+	lastFailureDiagnostic: Schema.optionalKey(Diagnostic)
+}).check(Schema.makeFilter((record) => record.deadlineAtMillis > record.createdAtMillis && record.initialDeadlineAtMillis > record.createdAtMillis && record.predecessor !== record.key.messageId && record.status === "processed" === (record.settlement !== null) && record.status === "refused" === (record.refusal !== null) && record.status === "parked" === (record.parkReason !== null) && record.status === "parked" === record.retry.parked && (record.status === "accepted" || record.status === "processed" ? record.receipt !== null : true) && (record.status === "pending" || record.status === "refused" ? record.receipt === null : true) && (record.receipt === null || record.receipt.threadId === record.envelope.threadId) && (record.settlement === null || record.settlement.receiptId === record.receipt?.receiptId && record.settlement.submissionId === record.receipt.submissionId) && (record.status === "processed" || record.status === "refused" || record.status === "parked" ? record.leaseUntilMillis === null : true)));
+var MessageDeliveryError = class extends Schema.TaggedError()("MessageDeliveryError", {
+	cause: Schema.optionalKey(Value),
+	stack: Schema.optionalKey(Schema.String),
+	reason: Schema.Literals([
+		"validation",
+		"conflict",
+		"capacity",
+		"not-found",
+		"storage",
+		"corrupt"
+	]),
+	operation: Schema.String
+}) {};
+var MessageDeliveryFailpointError = class extends Schema.TaggedError()("MessageDeliveryFailpointError", { point: Schema.String }) {};
+const MessageDeliveryFailpoint = Context.Reference("@effect-agent/thread/MessageDeliveryFailpoint", { defaultValue: () => ({ hit: () => Effect.void }) });
+const fence = {
+	expectedVersion: Positive,
+	nowMillis: ScheduleInstant
+};
+const MessageDeliveryChange = Schema.Union([
+	Schema.Struct({
+		_tag: Schema.Literal("Claim"),
+		...fence
+	}),
+	Schema.Struct({
+		_tag: Schema.Literal("Accept"),
+		...fence,
+		receipt: Receipt
+	}),
+	Schema.Struct({
+		_tag: Schema.Literal("Process"),
+		...fence,
+		settlement: Settlement
+	}),
+	Schema.Struct({
+		_tag: Schema.Literal("ObservePending"),
+		...fence
+	}),
+	Schema.Struct({
+		_tag: Schema.Literal("Refuse"),
+		...fence,
+		code: BoundedName,
+		diagnostic: Schema.optionalKey(Diagnostic)
+	}),
+	Schema.Struct({
+		_tag: Schema.Literal("Retry"),
+		...fence,
+		reason: ScheduleRetryReason,
+		diagnostic: Schema.optionalKey(Diagnostic)
+	}),
+	Schema.Struct({
+		_tag: Schema.Literal("Park"),
+		...fence,
+		reason: ParkReason,
+		diagnostic: Schema.optionalKey(Diagnostic)
+	}),
+	Schema.Struct({
+		_tag: Schema.Literal("Recover"),
+		...fence,
+		deadlineAtMillis: ScheduleInstant
+	}),
+	Schema.Struct({
+		_tag: Schema.Literal("Defer"),
+		...fence,
+		untilMillis: ScheduleInstant
+	})
+]);
+/** Select one native index per page; index filters cannot be combined. */
+const MessageDeliveryPageRequest = Schema.Struct({
+	ownerThreadId: ThreadId,
+	limit: Positive.check(Schema.isLessThanOrEqualTo(4096)),
+	after: Schema.optionalKey(IdempotencyKey),
+	/** Native pending index, including accepted, future-due and parked obligations. */
+	pendingOnly: Schema.optionalKey(Schema.Boolean),
+	/** First retained envelopes, including starts not admitted at the destination. */
+	workerStarts: Schema.optionalKey(Schema.Struct({
+		delegationId: DelegationId,
+		targetAgentId: AgentId
+	})),
+	/** Retained inputs not yet acknowledged by one destination worker. */
+	pendingWorker: Schema.optionalKey(ThreadId)
+}).check(Schema.makeFilter((request) => Number(request.pendingOnly === true) + Number(request.workerStarts !== void 0) + Number(request.pendingWorker !== void 0) <= 1));
+const MessageDeliveryPage = Schema.Struct({
+	items: Schema.Array(MessageDeliveryRecord),
+	next: Schema.NullOr(IdempotencyKey)
+});
+/**
+* Trusted host port, independent of either Thread's active Submission. List/get require an owner.
+* Inserts and changes are atomic; identical inserts return current state even after completion.
+* No automatic deletion: completed rows retain deduplication evidence and count toward retention.
+* `due`/`nextDeadline` are bounded host recovery seams, never model-facing management operations.
+*/
+var MessageDeliveryStore = class extends Context.Service()("@effect-agent/thread/MessageDeliveryStore") {};
+/**
+* Read current source-owned obligations without acquiring a runtime or scanning completed history.
+* A retained receipt is native accepted-admission evidence, not proof of destination materialization.
+* Shipped worker admission reserves the source input before returning that receipt. Policy can
+* therefore leave accepted worker discovery to canonical outstanding inputs; a no-receipt action
+* delivery remains uncertain, including when parked or due in the future.
+*/
+const readPending = Effect.fn("MessageDelivery.readPending")(function* (request) {
+	const store = yield* MessageDeliveryStore;
+	const input = yield* validateMessageDelivery(MessageDeliveryPageRequest, {
+		ownerThreadId: request.ownerThreadId,
+		limit: request.limit,
+		pendingOnly: true
+	}, "read-pending");
+	const page = yield* validateMessageDelivery(MessageDeliveryPage, yield* store.list(input), "read-pending result");
+	if (page.next !== null || page.items.length > input.limit) return yield* MessageDeliveryError.make({
+		reason: "capacity",
+		operation: "read-pending"
+	});
+	const records = page.items;
+	if (records.some((record) => record.key.ownerThreadId !== input.ownerThreadId || !messageDeliveryUsesCapacity(record)) || new Set(records.map((record) => record.key.messageId)).size !== records.length) return yield* MessageDeliveryError.make({
+		reason: "corrupt",
+		operation: "read-pending result"
+	});
+	return records;
+});
+const messageDeliveryKeyString = (key) => JSON.stringify([key.ownerThreadId, key.messageId]);
+const messageDeliveryUsesCapacity = (record) => record.status !== "processed" && record.status !== "refused";
+const isWorkerUpdateDelivery = (record) => Schema.is(WorkerUpdate)(record.envelope.messageAdmission);
+const messageDeliveryCapacity = (limits, update) => ({
+	pending: update ? limits.maxPendingUpdatesPerOwner ?? 32 : limits.maxPendingPerOwner,
+	retained: update ? limits.maxRetainedUpdatesPerOwner ?? 256 : limits.maxRetainedPerOwner
+});
+const messageDeliveryDeadline = (record) => record.status === "pending" || record.status === "accepted" ? Math.min(record.deadlineAtMillis, record.leaseUntilMillis ?? record.retry.nextAttemptAtMillis) : null;
+/** Creation identity deliberately excludes operational counters and renewed recovery deadlines. */
+const sameMessageDeliveryIdentity = (left, right) => messageDeliveryKeyString(left.key) === messageDeliveryKeyString(right.key) && left.envelopeDigest === right.envelopeDigest && left.predecessor === right.predecessor && Schema.toEquivalence(PreparedInput)(left.envelope, right.envelope) && Schema.toEquivalence(MessageDeliveryPolicy)(left.policy, right.policy) && left.createdAtMillis === right.createdAtMillis && left.initialDeadlineAtMillis === right.initialDeadlineAtMillis;
+const error = (reason, operation, cause) => MessageDeliveryError.make({
+	reason,
+	operation,
+	...cause === void 0 ? {} : { cause }
+});
+const validateMessageDelivery = (schema, value, operation) => Schema.decodeUnknownEffect(Schema.toType(schema))(value).pipe(Effect.mapError(() => error("validation", operation)));
+const MessageDeliveryPreparation = Schema.Struct({
+	key: MessageDeliveryKey,
+	envelope: PreparedInput,
+	createdAtMillis: ScheduleInstant,
+	deadlineAtMillis: ScheduleInstant,
+	policy: MessageDeliveryPolicy,
+	predecessor: Schema.optionalKey(IdempotencyKey)
+});
+/** Freeze and digest the complete admission envelope before publishing the obligation. */
+const prepareMessageDelivery = Effect.fn("MessageDelivery.prepare")(function* (options) {
+	const snapshot = yield* Schema.encodeEffect(Schema.fromJsonString(MessageDeliveryPreparation))({
+		...options,
+		policy: options.policy ?? defaultMessageDeliveryPolicy
+	}).pipe(Effect.flatMap(Schema.decodeEffect(Schema.fromJsonString(MessageDeliveryPreparation))), Effect.mapError((cause) => error("validation", "prepare", cause)));
+	const envelope = snapshot.envelope;
+	const encoded = yield* Schema.encodeEffect(PreparedInput)(envelope).pipe(Effect.mapError((cause) => error("validation", "prepare", cause)));
+	if ((yield* digestJson(encoded.input).pipe(Effect.mapError((cause) => error("storage", "digest", cause)))) !== envelope.inputDigest) return yield* error("corrupt", "input-digest");
+	const envelopeDigest = yield* digestJson(encoded).pipe(Effect.mapError((cause) => error("storage", "digest", cause)));
+	return yield* validateMessageDelivery(MessageDeliveryRecord, {
+		schemaVersion: 1,
+		key: snapshot.key,
+		envelope,
+		envelopeDigest,
+		...snapshot.predecessor === void 0 ? {} : { predecessor: snapshot.predecessor },
+		createdAtMillis: snapshot.createdAtMillis,
+		initialDeadlineAtMillis: snapshot.deadlineAtMillis,
+		deadlineAtMillis: snapshot.deadlineAtMillis,
+		policy: snapshot.policy,
+		version: 1,
+		status: "pending",
+		receipt: null,
+		settlement: null,
+		refusal: null,
+		parkReason: null,
+		leaseUntilMillis: null,
+		retry: {
+			attempts: 0,
+			generation: 0,
+			automaticAttempts: 0,
+			parked: false,
+			nextAttemptAtMillis: snapshot.createdAtMillis,
+			lastAttemptAtMillis: null,
+			lastFailure: null
+		}
+	}, "prepare");
+});
+/** Pure reducer used under the adapter's atomic compare-and-swap boundary. */
+const applyMessageDeliveryChange = (record, change) => {
+	const conflict = () => Result.fail(error("conflict", change._tag));
+	if (record.version !== change.expectedVersion) return conflict();
+	if (record.status === "processed" || record.status === "refused") return conflict();
+	const now = change.nowMillis;
+	const base = {
+		...record,
+		version: record.version + 1,
+		..."diagnostic" in change && change.diagnostic !== void 0 ? { lastFailureDiagnostic: change.diagnostic } : {}
+	};
+	const parked = (reason) => ({
+		...base,
+		status: "parked",
+		parkReason: reason,
+		leaseUntilMillis: null,
+		retry: {
+			...record.retry,
+			parked: true
+		}
+	});
+	if (change._tag === "Defer") {
+		if (record.status !== "pending" || record.leaseUntilMillis !== null && record.leaseUntilMillis > now) return conflict();
+		if (now >= record.deadlineAtMillis) return Result.succeed(parked("deadline"));
+		if (change.untilMillis <= now) return conflict();
+		return Result.succeed({
+			...base,
+			leaseUntilMillis: null,
+			retry: {
+				...record.retry,
+				nextAttemptAtMillis: Math.min(change.untilMillis, record.deadlineAtMillis)
+			}
+		});
+	}
+	if (change._tag === "Recover") {
+		if (record.status !== "parked" || change.deadlineAtMillis <= now) return conflict();
+		return Result.succeed({
+			...base,
+			deadlineAtMillis: change.deadlineAtMillis,
+			status: record.receipt === null ? "pending" : "accepted",
+			parkReason: null,
+			retry: {
+				...record.retry,
+				generation: record.retry.generation + 1,
+				automaticAttempts: 0,
+				parked: false,
+				nextAttemptAtMillis: now
+			}
+		});
+	}
+	if (record.status === "parked") return conflict();
+	if (change._tag === "Park") return Result.succeed(parked(change.reason));
+	if (change._tag === "Claim") {
+		const due = messageDeliveryDeadline(record);
+		if (due === null || due > now) return conflict();
+		if (now >= record.deadlineAtMillis) return Result.succeed(parked("deadline"));
+		if (record.retry.automaticAttempts >= record.policy.maxAutomaticAttempts) return Result.succeed(parked("exhausted"));
+		return Result.succeed({
+			...base,
+			leaseUntilMillis: Math.min(now + record.policy.attemptTimeoutMillis, record.deadlineAtMillis),
+			retry: {
+				...record.retry,
+				attempts: record.retry.attempts + 1,
+				automaticAttempts: record.retry.automaticAttempts + 1,
+				lastAttemptAtMillis: now
+			}
+		});
+	}
+	if (record.leaseUntilMillis === null || now > record.leaseUntilMillis) return conflict();
+	if (change._tag === "Accept") {
+		if (record.status !== "pending") return conflict();
+		if (change.receipt.threadId !== record.envelope.threadId) return Result.fail(error("corrupt", "receipt-identity"));
+		return Result.succeed({
+			...base,
+			status: "accepted",
+			receipt: change.receipt,
+			leaseUntilMillis: null,
+			retry: {
+				...record.retry,
+				automaticAttempts: 0,
+				nextAttemptAtMillis: Math.min(now + record.policy.settlementPollMillis, record.deadlineAtMillis),
+				lastFailure: null
+			}
+		});
+	}
+	if (change._tag === "Process") {
+		if (record.status !== "accepted") return conflict();
+		if (change.settlement.submissionId !== record.receipt?.submissionId || change.settlement.receiptId !== record.receipt.receiptId) return Result.fail(error("corrupt", "settlement-identity"));
+		return Result.succeed({
+			...base,
+			status: "processed",
+			settlement: change.settlement,
+			leaseUntilMillis: null
+		});
+	}
+	if (change._tag === "ObservePending") {
+		if (record.status !== "accepted") return conflict();
+		if (now >= record.deadlineAtMillis) return Result.succeed(parked("deadline"));
+		return Result.succeed({
+			...base,
+			leaseUntilMillis: null,
+			retry: {
+				...record.retry,
+				automaticAttempts: 0,
+				lastFailure: null,
+				nextAttemptAtMillis: Math.min(now + record.policy.settlementPollMillis, record.deadlineAtMillis)
+			}
+		});
+	}
+	if (change._tag === "Refuse") {
+		if (record.status !== "pending") return conflict();
+		return Result.succeed({
+			...base,
+			status: "refused",
+			refusal: change.code,
+			leaseUntilMillis: null
+		});
+	}
+	if (now >= record.deadlineAtMillis) return Result.succeed(parked("deadline"));
+	if (record.retry.automaticAttempts >= record.policy.maxAutomaticAttempts) return Result.succeed(parked("exhausted"));
+	const delay = Math.min(record.policy.retryBaseMillis * 2 ** Math.min(record.retry.automaticAttempts - 1, 52), record.policy.retryMaxMillis);
+	return Result.succeed({
+		...base,
+		leaseUntilMillis: null,
+		retry: {
+			...record.retry,
+			nextAttemptAtMillis: Math.min(now + (record.status === "accepted" ? record.policy.settlementPollMillis : delay), record.deadlineAtMillis),
+			lastFailure: change.reason
+		}
+	});
+};
+const MessageDeliveryDriverLimits = Schema.Struct({
+	batchSize: Positive.check(Schema.isLessThanOrEqualTo(100)),
+	concurrency: Positive.check(Schema.isLessThanOrEqualTo(32))
+});
+/**
+* Finite, structured host pump. The host owns its Scope and wakes it from nextDeadline even
+* after source/receiver settlement. Failed or interrupted calls retain their expiring claim;
+* no ordinary tool is replayed here, only idempotent PreparedInput admission/status lookup.
+* Spans expose operation names; envelopes, principals, and message contents are never logged.
+*/
+var MessageDeliveryDriver = class MessageDeliveryDriver extends Context.Service()("@effect-agent/thread/MessageDeliveryDriver") {
+	static layer(limits = {
+		batchSize: 100,
+		concurrency: 4
+	}) {
+		return Layer.effect(MessageDeliveryDriver, Effect.gen(function* () {
+			const config = yield* validateMessageDelivery(MessageDeliveryDriverLimits, limits, "driver-limits");
+			const store = yield* MessageDeliveryStore;
+			const admission = yield* PreparedInputAdmission;
+			const crypto = yield* Crypto.Crypto;
+			const failpoint = yield* MessageDeliveryFailpoint;
+			const semaphore = yield* Semaphore.make(config.concurrency);
+			const process = Effect.fn("MessageDelivery.process")((key) => semaphore.withPermit(Effect.gen(function* () {
+				const current = yield* store.get(key);
+				if (current === null) return yield* error("not-found", "process");
+				const nowMillis = yield* Clock.currentTimeMillis;
+				const due = messageDeliveryDeadline(current);
+				if (due === null || due > nowMillis) return current;
+				if (current.status === "pending" && current.predecessor !== void 0) {
+					const previous = yield* store.get({
+						ownerThreadId: key.ownerThreadId,
+						messageId: current.predecessor
+					});
+					if (previous === null || previous.receipt === null && previous.status !== "refused") return yield* store.change(key, {
+						_tag: "Defer",
+						expectedVersion: current.version,
+						nowMillis,
+						untilMillis: nowMillis + current.policy.settlementPollMillis
+					});
+				}
+				const claimed = yield* store.change(key, {
+					_tag: "Claim",
+					expectedVersion: current.version,
+					nowMillis
+				});
+				if (claimed.status === "parked") return claimed;
+				const envelope = yield* Schema.encodeEffect(PreparedInput)(claimed.envelope).pipe(Effect.mapError((cause) => error("corrupt", "envelope", cause)));
+				if ((yield* digestJson(envelope).pipe(Effect.provideService(Crypto.Crypto, crypto), Effect.mapError((cause) => error("storage", "digest", cause)))) !== claimed.envelopeDigest) return yield* error("corrupt", "envelope-digest");
+				const timeout = Math.min(claimed.policy.attemptTimeoutMillis, (claimed.leaseUntilMillis ?? claimed.deadlineAtMillis) - (yield* Clock.currentTimeMillis));
+				if (timeout <= 0) return claimed;
+				const commit = (change) => Clock.currentTimeMillis.pipe(Effect.flatMap((time) => store.change(key, {
+					...change,
+					expectedVersion: claimed.version,
+					nowMillis: time
+				})));
+				if (claimed.status === "pending") {
+					const outcome = yield* admitPreparedInput(admission.submit(claimed.envelope), timeout).pipe(Effect.mapError((cause) => error("corrupt", "admission", cause)));
+					yield* failpoint.hit("message-delivery:admission:after");
+					if (outcome._tag === "Receipt") return yield* commit({
+						_tag: "Accept",
+						receipt: outcome.receipt
+					});
+					if (outcome._tag === "Refused") return yield* commit({
+						_tag: "Refuse",
+						code: outcome.error.code,
+						diagnostic: capture(outcome.error)
+					});
+					return yield* commit({
+						_tag: "Retry",
+						reason: outcome.reason,
+						diagnostic: outcome.diagnostic
+					});
+				}
+				if (claimed.receipt === null) return yield* error("corrupt", "receipt");
+				if (admission.submissionStatus === void 0) return yield* commit({
+					_tag: "Park",
+					reason: "status-unavailable"
+				});
+				const status = yield* admission.submissionStatus(claimed.receipt).pipe(Effect.timeout(timeout), Effect.map((status) => ({
+					_tag: "Status",
+					status
+				})), Effect.catchTag("ScheduledInputRetryable", (failure) => Effect.succeed({
+					_tag: "Retry",
+					reason: failure.reason,
+					diagnostic: capture(failure)
+				})), Effect.catchTag("ScheduledInputRefused", (failure) => Effect.succeed({
+					_tag: "Unavailable",
+					diagnostic: capture(failure)
+				})), Effect.catchTag("TimeoutError", (failure) => Effect.succeed({
+					_tag: "Retry",
+					reason: "timeout",
+					diagnostic: capture(failure)
+				})), Effect.catchTag("ScheduleStorageError", (failure) => failure.reason === "unavailable" ? Effect.succeed({
+					_tag: "Retry",
+					reason: "storage",
+					diagnostic: capture(failure)
+				}) : Effect.fail(error("corrupt", "status", failure))));
+				if (status._tag === "Unavailable") return yield* commit({
+					_tag: "Park",
+					reason: "status-unavailable",
+					diagnostic: status.diagnostic
+				});
+				if (status._tag === "Status" && status.status._tag === "settled") return yield* commit({
+					_tag: "Process",
+					settlement: status.status.settlement
+				});
+				if (status._tag === "Status") return yield* commit({ _tag: "ObservePending" });
+				return yield* commit({
+					_tag: "Retry",
+					reason: status.reason,
+					diagnostic: status.diagnostic
+				});
+			})).pipe(Effect.catchTag("MessageDeliveryError", (failure) => failure.reason === "conflict" ? store.get(key).pipe(Effect.filterOrFail((record) => record !== null, () => failure)) : Effect.fail(failure))));
+			return MessageDeliveryDriver.of({
+				process,
+				runDue: Effect.fn("MessageDelivery.runDue")(function* (ownerThreadId) {
+					const keys = yield* store.due(yield* Clock.currentTimeMillis, config.batchSize, ownerThreadId);
+					return yield* Effect.forEach(keys, process, { concurrency: config.concurrency });
+				}),
+				retry: Effect.fn("MessageDelivery.retry")(function* (key, expectedVersion, deadlineAtMillis) {
+					return yield* store.change(key, {
+						_tag: "Recover",
+						expectedVersion,
+						deadlineAtMillis,
+						nowMillis: yield* Clock.currentTimeMillis
+					});
+				})
+			});
+		}));
+	}
+};
+//#endregion
+export { MessageDeliveryChange, MessageDeliveryDriver, MessageDeliveryDriverLimits, MessageDeliveryError, MessageDeliveryFailpoint, MessageDeliveryFailpointError, MessageDeliveryKey, MessageDeliveryPage, MessageDeliveryPageRequest, MessageDeliveryPolicy, MessageDeliveryRecord, MessageDeliveryStore, MessageDeliveryStoreLimits, applyMessageDeliveryChange, defaultMessageDeliveryPolicy, defaultMessageDeliveryStoreLimits, isWorkerUpdateDelivery, messageDeliveryCapacity, messageDeliveryDeadline, messageDeliveryKeyString, messageDeliveryUsesCapacity, prepareMessageDelivery, readPending, sameMessageDeliveryIdentity, MessageDelivery_exports as t, validateMessageDelivery };
+
+//# sourceMappingURL=MessageDelivery.mjs.map

package/dist/durable/MessageDelivery.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"MessageDelivery.mjs","names":["FailureDiagnostic.Diagnostic","FailureDiagnostic.Value","FailureDiagnostic.capture"],"sources":["../../src/durable/MessageDelivery.ts"],"sourcesContent":["import { Clock, Context, Crypto, Effect, Layer, Result, Schema, Semaphore } from \"effect\";\n\nimport * as FailureDiagnostic from \"../core/FailureDiagnostic.ts\";\nimport { AgentId, DelegationId, ThreadId } from \"../core/Identifiers.ts\";\nimport { Receipt } from \"../core/Receipt.ts\";\nimport { WorkerUpdate } from \"../core/Worker.ts\";\nimport { digestJson } from \"./Digest.ts\";\nimport { admitPreparedInput, PreparedInputAdmission } from \"./PreparedInputAdmission.ts\";\nimport { Digest } from \"./Records.ts\";\nimport { ScheduleInstant, ScheduleRetry, ScheduleRetryReason } from \"./Schedule.ts\";\nimport { IdempotencyKey, Settlement } from \"./SubmissionLedger.ts\";\nimport { PreparedInput } from \"./Subscription.ts\";\n\nconst Positive = Schema.Int.check(Schema.isGreaterThan(0));\nconst BoundedName = Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(256));\n\n/** An owner is always a source Thread. Destination admission has its own frozen key. */\nexport const MessageDeliveryKey = Schema.Struct({\n  ownerThreadId: ThreadId,\n  messageId: IdempotencyKey,\n});\n\nexport type MessageDeliveryKey = typeof MessageDeliveryKey.Type;\n\nexport const MessageDeliveryPolicy = Schema.Struct({\n  maxAutomaticAttempts: Positive.check(Schema.isLessThanOrEqualTo(100)),\n  attemptTimeoutMillis: Positive.check(Schema.isLessThanOrEqualTo(300_000)),\n  retryBaseMillis: Positive,\n  retryMaxMillis: Positive,\n  settlementPollMillis: Positive,\n}).check(Schema.makeFilter((value) => value.retryBaseMillis <= value.retryMaxMillis));\n\nexport type MessageDeliveryPolicy = typeof MessageDeliveryPolicy.Type;\n\nexport const defaultMessageDeliveryPolicy: MessageDeliveryPolicy = {\n  maxAutomaticAttempts: 8,\n  attemptTimeoutMillis: 30_000,\n  retryBaseMillis: 1_000,\n  retryMaxMillis: 60_000,\n  settlementPollMillis: 5_000,\n};\n\nexport const MessageDeliveryStoreLimits = Schema.Struct({\n  maxPendingPerOwner: Positive,\n  maxRetainedPerOwner: Positive,\n  maxEnvelopeBytes: Positive,\n  /** Separate update capacity preserves the full ordinary allowance for terminal reports. */\n  maxPendingUpdatesPerOwner: Schema.optionalKey(Positive),\n  maxRetainedUpdatesPerOwner: Schema.optionalKey(Positive),\n}).check(\n  Schema.makeFilter(\n    (value) =>\n      value.maxPendingPerOwner <= value.maxRetainedPerOwner &&\n      (value.maxPendingUpdatesPerOwner ?? 32) <= (value.maxRetainedUpdatesPerOwner ?? 256),\n  ),\n);\n\nexport type MessageDeliveryStoreLimits = typeof MessageDeliveryStoreLimits.Type;\n\nexport const defaultMessageDeliveryStoreLimits: MessageDeliveryStoreLimits = {\n  maxPendingPerOwner: 100,\n  maxRetainedPerOwner: 1_000,\n  maxEnvelopeBytes: 262_144,\n  maxPendingUpdatesPerOwner: 32,\n  maxRetainedUpdatesPerOwner: 256,\n};\n\nconst ParkReason = Schema.Literals([\"exhausted\", \"deadline\", \"status-unavailable\"]);\n\nexport const MessageDeliveryRecord = Schema.Struct({\n  schemaVersion: Schema.Literal(1),\n  key: MessageDeliveryKey,\n  envelope: PreparedInput,\n  envelopeDigest: Digest,\n  /** Same-owner predecessor whose admission must be known before this message is submitted. */\n  predecessor: Schema.optionalKey(IdempotencyKey),\n  createdAtMillis: ScheduleInstant,\n  /** Immutable creation identity; explicit recovery only renews deadlineAtMillis. */\n  initialDeadlineAtMillis: ScheduleInstant,\n  deadlineAtMillis: ScheduleInstant,\n  policy: MessageDeliveryPolicy,\n  version: Positive,\n  status: Schema.Literals([\"pending\", \"accepted\", \"processed\", \"refused\", \"parked\"]),\n  receipt: Schema.NullOr(Receipt),\n  settlement: Schema.NullOr(Settlement),\n  refusal: Schema.NullOr(BoundedName),\n  parkReason: Schema.NullOr(ParkReason),\n  leaseUntilMillis: Schema.NullOr(ScheduleInstant),\n  retry: ScheduleRetry,\n  /** Last failed admission/status check, retained across retries and successful recovery. */\n  lastFailureDiagnostic: Schema.optionalKey(FailureDiagnostic.Diagnostic),\n}).check(\n  Schema.makeFilter(\n    (record) =>\n      record.deadlineAtMillis > record.createdAtMillis &&\n      record.initialDeadlineAtMillis > record.createdAtMillis &&\n      record.predecessor !== record.key.messageId &&\n      (record.status === \"processed\") === (record.settlement !== null) &&\n      (record.status === \"refused\") === (record.refusal !== null) &&\n      (record.status === \"parked\") === (record.parkReason !== null) &&\n      (record.status === \"parked\") === record.retry.parked &&\n      (record.status === \"accepted\" || record.status === \"processed\"\n        ? record.receipt !== null\n        : true) &&\n      (record.status === \"pending\" || record.status === \"refused\"\n        ? record.receipt === null\n        : true) &&\n      (record.receipt === null || record.receipt.threadId === record.envelope.threadId) &&\n      (record.settlement === null ||\n        (record.settlement.receiptId === record.receipt?.receiptId &&\n          record.settlement.submissionId === record.receipt.submissionId)) &&\n      (record.status === \"processed\" || record.status === \"refused\" || record.status === \"parked\"\n        ? record.leaseUntilMillis === null\n        : true),\n  ),\n);\n\nexport type MessageDeliveryRecord = typeof MessageDeliveryRecord.Type;\n\nexport class MessageDeliveryError extends Schema.TaggedError<MessageDeliveryError>()(\n  \"MessageDeliveryError\",\n  {\n    cause: Schema.optionalKey(FailureDiagnostic.Value),\n    stack: Schema.optionalKey(Schema.String),\n    reason: Schema.Literals([\n      \"validation\",\n      \"conflict\",\n      \"capacity\",\n      \"not-found\",\n      \"storage\",\n      \"corrupt\",\n    ]),\n    operation: Schema.String,\n  },\n) {}\n\nexport class MessageDeliveryFailpointError extends Schema.TaggedError<MessageDeliveryFailpointError>()(\n  \"MessageDeliveryFailpointError\",\n  {\n    point: Schema.String,\n  },\n) {}\n\nexport type MessageDeliveryFailure = MessageDeliveryError | MessageDeliveryFailpointError;\n\nexport const MessageDeliveryFailpoint = Context.Reference<{\n  readonly hit: (point: string) => Effect.Effect<void, MessageDeliveryFailpointError>;\n}>(\"@effect-agent/thread/MessageDeliveryFailpoint\", {\n  defaultValue: () => ({ hit: () => Effect.void }),\n});\n\nconst fence = { expectedVersion: Positive, nowMillis: ScheduleInstant };\n\nexport const MessageDeliveryChange = Schema.Union([\n  Schema.Struct({ _tag: Schema.Literal(\"Claim\"), ...fence }),\n  Schema.Struct({ _tag: Schema.Literal(\"Accept\"), ...fence, receipt: Receipt }),\n  Schema.Struct({ _tag: Schema.Literal(\"Process\"), ...fence, settlement: Settlement }),\n  Schema.Struct({ _tag: Schema.Literal(\"ObservePending\"), ...fence }),\n  Schema.Struct({\n    _tag: Schema.Literal(\"Refuse\"),\n    ...fence,\n    code: BoundedName,\n    diagnostic: Schema.optionalKey(FailureDiagnostic.Diagnostic),\n  }),\n  Schema.Struct({\n    _tag: Schema.Literal(\"Retry\"),\n    ...fence,\n    reason: ScheduleRetryReason,\n    diagnostic: Schema.optionalKey(FailureDiagnostic.Diagnostic),\n  }),\n  Schema.Struct({\n    _tag: Schema.Literal(\"Park\"),\n    ...fence,\n    reason: ParkReason,\n    diagnostic: Schema.optionalKey(FailureDiagnostic.Diagnostic),\n  }),\n  Schema.Struct({ _tag: Schema.Literal(\"Recover\"), ...fence, deadlineAtMillis: ScheduleInstant }),\n  /** Waiting for earlier admission never spends an automatic transport attempt. */\n  Schema.Struct({ _tag: Schema.Literal(\"Defer\"), ...fence, untilMillis: ScheduleInstant }),\n]);\n\nexport type MessageDeliveryChange = typeof MessageDeliveryChange.Type;\n\n/** Select one native index per page; index filters cannot be combined. */\nexport const MessageDeliveryPageRequest = Schema.Struct({\n  ownerThreadId: ThreadId,\n  limit: Positive.check(Schema.isLessThanOrEqualTo(4096)),\n  after: Schema.optionalKey(IdempotencyKey),\n  /** Native pending index, including accepted, future-due and parked obligations. */\n  pendingOnly: Schema.optionalKey(Schema.Boolean),\n  /** First retained envelopes, including starts not admitted at the destination. */\n  workerStarts: Schema.optionalKey(\n    Schema.Struct({ delegationId: DelegationId, targetAgentId: AgentId }),\n  ),\n  /** Retained inputs not yet acknowledged by one destination worker. */\n  pendingWorker: Schema.optionalKey(ThreadId),\n}).check(\n  Schema.makeFilter(\n    (request) =>\n      Number(request.pendingOnly === true) +\n        Number(request.workerStarts !== undefined) +\n        Number(request.pendingWorker !== undefined) <=\n      1,\n  ),\n);\n\nexport type MessageDeliveryPageRequest = typeof MessageDeliveryPageRequest.Type;\n\nexport const MessageDeliveryPage = Schema.Struct({\n  items: Schema.Array(MessageDeliveryRecord),\n  next: Schema.NullOr(IdempotencyKey),\n});\n\nexport type MessageDeliveryPage = typeof MessageDeliveryPage.Type;\n\n/**\n * Trusted host port, independent of either Thread's active Submission. List/get require an owner.\n * Inserts and changes are atomic; identical inserts return current state even after completion.\n * No automatic deletion: completed rows retain deduplication evidence and count toward retention.\n * `due`/`nextDeadline` are bounded host recovery seams, never model-facing management operations.\n */\nexport class MessageDeliveryStore extends Context.Service<\n  MessageDeliveryStore,\n  {\n    readonly limits: MessageDeliveryStoreLimits;\n    readonly maxStoredValueBytes: number;\n    readonly insert: (\n      record: MessageDeliveryRecord,\n    ) => Effect.Effect<MessageDeliveryRecord, MessageDeliveryFailure>;\n    readonly get: (\n      key: MessageDeliveryKey,\n    ) => Effect.Effect<MessageDeliveryRecord | null, MessageDeliveryError>;\n    readonly list: (\n      request: MessageDeliveryPageRequest,\n    ) => Effect.Effect<MessageDeliveryPage, MessageDeliveryError>;\n    readonly change: (\n      key: MessageDeliveryKey,\n      change: MessageDeliveryChange,\n    ) => Effect.Effect<MessageDeliveryRecord, MessageDeliveryFailure>;\n    readonly due: (\n      nowMillis: number,\n      limit: number,\n      ownerThreadId?: ThreadId,\n    ) => Effect.Effect<ReadonlyArray<MessageDeliveryKey>, MessageDeliveryError>;\n    readonly nextDeadline: (\n      ownerThreadId?: ThreadId,\n    ) => Effect.Effect<number | null, MessageDeliveryError>;\n  }\n>()(\"@effect-agent/thread/MessageDeliveryStore\") {}\n\n/**\n * Read current source-owned obligations without acquiring a runtime or scanning completed history.\n * A retained receipt is native accepted-admission evidence, not proof of destination materialization.\n * Shipped worker admission reserves the source input before returning that receipt. Policy can\n * therefore leave accepted worker discovery to canonical outstanding inputs; a no-receipt action\n * delivery remains uncertain, including when parked or due in the future.\n */\nexport const readPending = Effect.fn(\"MessageDelivery.readPending\")(function* (\n  request: Pick<MessageDeliveryPageRequest, \"ownerThreadId\" | \"limit\">,\n) {\n  const store = yield* MessageDeliveryStore;\n\n  const input = yield* validateMessageDelivery(\n    MessageDeliveryPageRequest,\n    {\n      ownerThreadId: request.ownerThreadId,\n      limit: request.limit,\n      pendingOnly: true,\n    },\n    \"read-pending\",\n  );\n\n  const page = yield* validateMessageDelivery(\n    MessageDeliveryPage,\n    yield* store.list(input),\n    \"read-pending result\",\n  );\n\n  if (page.next !== null || page.items.length > input.limit)\n    return yield* MessageDeliveryError.make({ reason: \"capacity\", operation: \"read-pending\" });\n  const records = page.items;\n\n  if (\n    records.some(\n      (record) =>\n        record.key.ownerThreadId !== input.ownerThreadId || !messageDeliveryUsesCapacity(record),\n    ) ||\n    new Set(records.map((record) => record.key.messageId)).size !== records.length\n  )\n    return yield* MessageDeliveryError.make({\n      reason: \"corrupt\",\n      operation: \"read-pending result\",\n    });\n\n  return records;\n});\n\nexport const messageDeliveryKeyString = (key: MessageDeliveryKey): string =>\n  JSON.stringify([key.ownerThreadId, key.messageId]);\n\nexport const messageDeliveryUsesCapacity = (record: MessageDeliveryRecord): boolean =>\n  record.status !== \"processed\" && record.status !== \"refused\";\n\nexport const isWorkerUpdateDelivery = (record: MessageDeliveryRecord): boolean =>\n  Schema.is(WorkerUpdate)(record.envelope.messageAdmission);\n\nexport const messageDeliveryCapacity = (limits: MessageDeliveryStoreLimits, update: boolean) => ({\n  pending: update ? (limits.maxPendingUpdatesPerOwner ?? 32) : limits.maxPendingPerOwner,\n  retained: update ? (limits.maxRetainedUpdatesPerOwner ?? 256) : limits.maxRetainedPerOwner,\n});\n\nexport const messageDeliveryDeadline = (record: MessageDeliveryRecord): number | null =>\n  record.status === \"pending\" || record.status === \"accepted\"\n    ? Math.min(record.deadlineAtMillis, record.leaseUntilMillis ?? record.retry.nextAttemptAtMillis)\n    : null;\n\n/** Creation identity deliberately excludes operational counters and renewed recovery deadlines. */\nexport const sameMessageDeliveryIdentity = (\n  left: MessageDeliveryRecord,\n  right: MessageDeliveryRecord,\n): boolean =>\n  messageDeliveryKeyString(left.key) === messageDeliveryKeyString(right.key) &&\n  left.envelopeDigest === right.envelopeDigest &&\n  left.predecessor === right.predecessor &&\n  Schema.toEquivalence(PreparedInput)(left.envelope, right.envelope) &&\n  Schema.toEquivalence(MessageDeliveryPolicy)(left.policy, right.policy) &&\n  left.createdAtMillis === right.createdAtMillis &&\n  left.initialDeadlineAtMillis === right.initialDeadlineAtMillis;\n\nconst error = (reason: MessageDeliveryError[\"reason\"], operation: string, cause?: unknown) =>\n  MessageDeliveryError.make({ reason, operation, ...(cause === undefined ? {} : { cause }) });\n\nexport const validateMessageDelivery = <A, I>(\n  schema: Schema.Codec<A, I>,\n  value: unknown,\n  operation: string,\n) =>\n  Schema.decodeUnknownEffect(Schema.toType(schema))(value).pipe(\n    Effect.mapError(() => error(\"validation\", operation)),\n  );\n\nconst MessageDeliveryPreparation = Schema.Struct({\n  key: MessageDeliveryKey,\n  envelope: PreparedInput,\n  createdAtMillis: ScheduleInstant,\n  deadlineAtMillis: ScheduleInstant,\n  policy: MessageDeliveryPolicy,\n  predecessor: Schema.optionalKey(IdempotencyKey),\n});\n\n/** Freeze and digest the complete admission envelope before publishing the obligation. */\nexport const prepareMessageDelivery = Effect.fn(\"MessageDelivery.prepare\")(function* (options: {\n  readonly key: MessageDeliveryKey;\n  readonly envelope: PreparedInput;\n  readonly createdAtMillis: number;\n  readonly deadlineAtMillis: number;\n  readonly policy?: MessageDeliveryPolicy;\n  readonly predecessor?: IdempotencyKey;\n}): Effect.fn.Return<MessageDeliveryRecord, MessageDeliveryError, Crypto.Crypto> {\n  // JSON detaches every caller-owned value before Crypto can suspend preparation.\n  const snapshot = yield* Schema.encodeEffect(Schema.fromJsonString(MessageDeliveryPreparation))({\n    ...options,\n    policy: options.policy ?? defaultMessageDeliveryPolicy,\n  }).pipe(\n    Effect.flatMap(Schema.decodeEffect(Schema.fromJsonString(MessageDeliveryPreparation))),\n    Effect.mapError((cause) => error(\"validation\", \"prepare\", cause)),\n  );\n\n  const envelope = snapshot.envelope;\n\n  const encoded = yield* Schema.encodeEffect(PreparedInput)(envelope).pipe(\n    Effect.mapError((cause) => error(\"validation\", \"prepare\", cause)),\n  );\n\n  const inputDigest = yield* digestJson(encoded.input).pipe(\n    Effect.mapError((cause) => error(\"storage\", \"digest\", cause)),\n  );\n\n  if (inputDigest !== envelope.inputDigest) return yield* error(\"corrupt\", \"input-digest\");\n\n  const envelopeDigest = yield* digestJson(encoded).pipe(\n    Effect.mapError((cause) => error(\"storage\", \"digest\", cause)),\n  );\n\n  return yield* validateMessageDelivery(\n    MessageDeliveryRecord,\n    {\n      schemaVersion: 1,\n      key: snapshot.key,\n      envelope,\n      envelopeDigest,\n      ...(snapshot.predecessor === undefined ? {} : { predecessor: snapshot.predecessor }),\n      createdAtMillis: snapshot.createdAtMillis,\n      initialDeadlineAtMillis: snapshot.deadlineAtMillis,\n      deadlineAtMillis: snapshot.deadlineAtMillis,\n      policy: snapshot.policy,\n      version: 1,\n      status: \"pending\",\n      receipt: null,\n      settlement: null,\n      refusal: null,\n      parkReason: null,\n      leaseUntilMillis: null,\n      retry: {\n        attempts: 0,\n        generation: 0,\n        automaticAttempts: 0,\n        parked: false,\n        nextAttemptAtMillis: snapshot.createdAtMillis,\n        lastAttemptAtMillis: null,\n        lastFailure: null,\n      },\n    },\n    \"prepare\",\n  );\n});\n\n/** Pure reducer used under the adapter's atomic compare-and-swap boundary. */\nexport const applyMessageDeliveryChange = (\n  record: MessageDeliveryRecord,\n  change: MessageDeliveryChange,\n): Result.Result<MessageDeliveryRecord, MessageDeliveryError> => {\n  const conflict = () => Result.fail(error(\"conflict\", change._tag));\n\n  if (record.version !== change.expectedVersion) return conflict();\n  if (record.status === \"processed\" || record.status === \"refused\") return conflict();\n  const now = change.nowMillis;\n\n  const base = {\n    ...record,\n    version: record.version + 1,\n    ...(\"diagnostic\" in change && change.diagnostic !== undefined\n      ? { lastFailureDiagnostic: change.diagnostic }\n      : {}),\n  };\n\n  const parked = (reason: typeof ParkReason.Type): MessageDeliveryRecord => ({\n    ...base,\n    status: \"parked\",\n    parkReason: reason,\n    leaseUntilMillis: null,\n    retry: { ...record.retry, parked: true },\n  });\n\n  if (change._tag === \"Defer\") {\n    if (\n      record.status !== \"pending\" ||\n      (record.leaseUntilMillis !== null && record.leaseUntilMillis > now)\n    )\n      return conflict();\n    if (now >= record.deadlineAtMillis) return Result.succeed(parked(\"deadline\"));\n    if (change.untilMillis <= now) return conflict();\n\n    return Result.succeed({\n      ...base,\n      leaseUntilMillis: null,\n      retry: {\n        ...record.retry,\n        nextAttemptAtMillis: Math.min(change.untilMillis, record.deadlineAtMillis),\n      },\n    });\n  }\n\n  if (change._tag === \"Recover\") {\n    if (record.status !== \"parked\" || change.deadlineAtMillis <= now) return conflict();\n\n    return Result.succeed({\n      ...base,\n      deadlineAtMillis: change.deadlineAtMillis,\n      status: record.receipt === null ? \"pending\" : \"accepted\",\n      parkReason: null,\n      retry: {\n        ...record.retry,\n        generation: record.retry.generation + 1,\n        automaticAttempts: 0,\n        parked: false,\n        nextAttemptAtMillis: now,\n      },\n    });\n  }\n  if (record.status === \"parked\") return conflict();\n  if (change._tag === \"Park\") return Result.succeed(parked(change.reason));\n  if (change._tag === \"Claim\") {\n    const due = messageDeliveryDeadline(record);\n\n    if (due === null || due > now) return conflict();\n    if (now >= record.deadlineAtMillis) return Result.succeed(parked(\"deadline\"));\n    if (record.retry.automaticAttempts >= record.policy.maxAutomaticAttempts)\n      return Result.succeed(parked(\"exhausted\"));\n\n    return Result.succeed({\n      ...base,\n      leaseUntilMillis: Math.min(now + record.policy.attemptTimeoutMillis, record.deadlineAtMillis),\n      retry: {\n        ...record.retry,\n        attempts: record.retry.attempts + 1,\n        automaticAttempts: record.retry.automaticAttempts + 1,\n        lastAttemptAtMillis: now,\n      },\n    });\n  }\n  if (record.leaseUntilMillis === null || now > record.leaseUntilMillis) return conflict();\n  if (change._tag === \"Accept\") {\n    if (record.status !== \"pending\") return conflict();\n    if (change.receipt.threadId !== record.envelope.threadId)\n      return Result.fail(error(\"corrupt\", \"receipt-identity\"));\n\n    return Result.succeed({\n      ...base,\n      status: \"accepted\",\n      receipt: change.receipt,\n      leaseUntilMillis: null,\n      retry: {\n        ...record.retry,\n        automaticAttempts: 0,\n        nextAttemptAtMillis: Math.min(\n          now + record.policy.settlementPollMillis,\n          record.deadlineAtMillis,\n        ),\n        lastFailure: null,\n      },\n    });\n  }\n  if (change._tag === \"Process\") {\n    if (record.status !== \"accepted\") return conflict();\n    if (\n      change.settlement.submissionId !== record.receipt?.submissionId ||\n      change.settlement.receiptId !== record.receipt.receiptId\n    )\n      return Result.fail(error(\"corrupt\", \"settlement-identity\"));\n\n    return Result.succeed({\n      ...base,\n      status: \"processed\",\n      settlement: change.settlement,\n      leaseUntilMillis: null,\n    });\n  }\n  if (change._tag === \"ObservePending\") {\n    if (record.status !== \"accepted\") return conflict();\n    if (now >= record.deadlineAtMillis) return Result.succeed(parked(\"deadline\"));\n\n    return Result.succeed({\n      ...base,\n      leaseUntilMillis: null,\n      retry: {\n        ...record.retry,\n        automaticAttempts: 0,\n        lastFailure: null,\n        nextAttemptAtMillis: Math.min(\n          now + record.policy.settlementPollMillis,\n          record.deadlineAtMillis,\n        ),\n      },\n    });\n  }\n  if (change._tag === \"Refuse\") {\n    if (record.status !== \"pending\") return conflict();\n\n    return Result.succeed({\n      ...base,\n      status: \"refused\",\n      refusal: change.code,\n      leaseUntilMillis: null,\n    });\n  }\n  if (now >= record.deadlineAtMillis) return Result.succeed(parked(\"deadline\"));\n  if (record.retry.automaticAttempts >= record.policy.maxAutomaticAttempts)\n    return Result.succeed(parked(\"exhausted\"));\n\n  const delay = Math.min(\n    record.policy.retryBaseMillis * 2 ** Math.min(record.retry.automaticAttempts - 1, 52),\n    record.policy.retryMaxMillis,\n  );\n\n  return Result.succeed({\n    ...base,\n    leaseUntilMillis: null,\n    retry: {\n      ...record.retry,\n      nextAttemptAtMillis: Math.min(\n        now + (record.status === \"accepted\" ? record.policy.settlementPollMillis : delay),\n        record.deadlineAtMillis,\n      ),\n      lastFailure: change.reason,\n    },\n  });\n};\n\nexport const MessageDeliveryDriverLimits = Schema.Struct({\n  batchSize: Positive.check(Schema.isLessThanOrEqualTo(100)),\n  concurrency: Positive.check(Schema.isLessThanOrEqualTo(32)),\n});\n\nexport type MessageDeliveryDriverLimits = typeof MessageDeliveryDriverLimits.Type;\n\n/**\n * Finite, structured host pump. The host owns its Scope and wakes it from nextDeadline even\n * after source/receiver settlement. Failed or interrupted calls retain their expiring claim;\n * no ordinary tool is replayed here, only idempotent PreparedInput admission/status lookup.\n * Spans expose operation names; envelopes, principals, and message contents are never logged.\n */\nexport class MessageDeliveryDriver extends Context.Service<\n  MessageDeliveryDriver,\n  {\n    readonly process: (\n      key: MessageDeliveryKey,\n    ) => Effect.Effect<MessageDeliveryRecord, MessageDeliveryFailure>;\n    readonly runDue: (\n      ownerThreadId?: ThreadId,\n    ) => Effect.Effect<ReadonlyArray<MessageDeliveryRecord>, MessageDeliveryFailure>;\n    readonly retry: (\n      key: MessageDeliveryKey,\n      expectedVersion: number,\n      deadlineAtMillis: number,\n    ) => Effect.Effect<MessageDeliveryRecord, MessageDeliveryFailure>;\n  }\n>()(\"@effect-agent/thread/MessageDeliveryDriver\") {\n  static layer(\n    limits: MessageDeliveryDriverLimits = { batchSize: 100, concurrency: 4 },\n  ): Layer.Layer<\n    MessageDeliveryDriver,\n    MessageDeliveryError,\n    MessageDeliveryStore | PreparedInputAdmission | Crypto.Crypto\n  > {\n    return Layer.effect(\n      MessageDeliveryDriver,\n      Effect.gen(function* () {\n        const config = yield* validateMessageDelivery(\n          MessageDeliveryDriverLimits,\n          limits,\n          \"driver-limits\",\n        );\n\n        const store = yield* MessageDeliveryStore;\n        const admission = yield* PreparedInputAdmission;\n        const crypto = yield* Crypto.Crypto;\n        const failpoint = yield* MessageDeliveryFailpoint;\n        const semaphore = yield* Semaphore.make(config.concurrency);\n\n        const process = Effect.fn(\"MessageDelivery.process\")((key: MessageDeliveryKey) =>\n          semaphore\n            .withPermit(\n              Effect.gen(function* () {\n                const current = yield* store.get(key);\n\n                if (current === null) return yield* error(\"not-found\", \"process\");\n                const nowMillis = yield* Clock.currentTimeMillis;\n                const due = messageDeliveryDeadline(current);\n\n                if (due === null || due > nowMillis) return current;\n\n                if (current.status === \"pending\" && current.predecessor !== undefined) {\n                  const previous = yield* store.get({\n                    ownerThreadId: key.ownerThreadId,\n                    messageId: current.predecessor,\n                  });\n\n                  if (\n                    previous === null ||\n                    (previous.receipt === null && previous.status !== \"refused\")\n                  ) {\n                    return yield* store.change(key, {\n                      _tag: \"Defer\",\n                      expectedVersion: current.version,\n                      nowMillis,\n                      untilMillis: nowMillis + current.policy.settlementPollMillis,\n                    });\n                  }\n                }\n\n                const claimed = yield* store.change(key, {\n                  _tag: \"Claim\",\n                  expectedVersion: current.version,\n                  nowMillis,\n                });\n\n                if (claimed.status === \"parked\") return claimed;\n\n                const envelope = yield* Schema.encodeEffect(PreparedInput)(claimed.envelope).pipe(\n                  Effect.mapError((cause) => error(\"corrupt\", \"envelope\", cause)),\n                );\n\n                const digest = yield* digestJson(envelope).pipe(\n                  Effect.provideService(Crypto.Crypto, crypto),\n                  Effect.mapError((cause) => error(\"storage\", \"digest\", cause)),\n                );\n\n                if (digest !== claimed.envelopeDigest)\n                  return yield* error(\"corrupt\", \"envelope-digest\");\n\n                const timeout = Math.min(\n                  claimed.policy.attemptTimeoutMillis,\n                  (claimed.leaseUntilMillis ?? claimed.deadlineAtMillis) -\n                    (yield* Clock.currentTimeMillis),\n                );\n\n                // Digest computation cannot extend this claim's admission authority.\n                if (timeout <= 0) return claimed;\n\n                type WithoutFence<T> = T extends MessageDeliveryChange\n                  ? Omit<T, \"expectedVersion\" | \"nowMillis\">\n                  : never;\n\n                const commit = (change: WithoutFence<MessageDeliveryChange>) =>\n                  Clock.currentTimeMillis.pipe(\n                    Effect.flatMap((time) =>\n                      store.change(key, {\n                        ...change,\n                        expectedVersion: claimed.version,\n                        nowMillis: time,\n                      }),\n                    ),\n                  );\n\n                if (claimed.status === \"pending\") {\n                  const outcome = yield* admitPreparedInput(\n                    admission.submit(claimed.envelope),\n                    timeout,\n                  ).pipe(Effect.mapError((cause) => error(\"corrupt\", \"admission\", cause)));\n\n                  yield* failpoint.hit(\"message-delivery:admission:after\");\n                  if (outcome._tag === \"Receipt\")\n                    return yield* commit({ _tag: \"Accept\", receipt: outcome.receipt });\n                  if (outcome._tag === \"Refused\")\n                    return yield* commit({\n                      _tag: \"Refuse\",\n                      code: outcome.error.code,\n                      diagnostic: FailureDiagnostic.capture(outcome.error),\n                    });\n\n                  return yield* commit({\n                    _tag: \"Retry\",\n                    reason: outcome.reason,\n                    diagnostic: outcome.diagnostic,\n                  });\n                }\n                if (claimed.receipt === null) return yield* error(\"corrupt\", \"receipt\");\n                if (admission.submissionStatus === undefined)\n                  return yield* commit({ _tag: \"Park\", reason: \"status-unavailable\" });\n\n                const status = yield* admission.submissionStatus(claimed.receipt).pipe(\n                  Effect.timeout(timeout),\n                  Effect.map((status) => ({ _tag: \"Status\" as const, status })),\n                  Effect.catchTag(\"ScheduledInputRetryable\", (failure) =>\n                    Effect.succeed({\n                      _tag: \"Retry\" as const,\n                      reason: failure.reason,\n                      diagnostic: FailureDiagnostic.capture(failure),\n                    }),\n                  ),\n                  Effect.catchTag(\"ScheduledInputRefused\", (failure) =>\n                    Effect.succeed({\n                      _tag: \"Unavailable\" as const,\n                      diagnostic: FailureDiagnostic.capture(failure),\n                    }),\n                  ),\n                  Effect.catchTag(\"TimeoutError\", (failure) =>\n                    Effect.succeed({\n                      _tag: \"Retry\" as const,\n                      reason: \"timeout\" as const,\n                      diagnostic: FailureDiagnostic.capture(failure),\n                    }),\n                  ),\n                  Effect.catchTag(\"ScheduleStorageError\", (failure) =>\n                    failure.reason === \"unavailable\"\n                      ? Effect.succeed({\n                          _tag: \"Retry\" as const,\n                          reason: \"storage\" as const,\n                          diagnostic: FailureDiagnostic.capture(failure),\n                        })\n                      : Effect.fail(error(\"corrupt\", \"status\", failure)),\n                  ),\n                );\n\n                if (status._tag === \"Unavailable\")\n                  return yield* commit({\n                    _tag: \"Park\",\n                    reason: \"status-unavailable\",\n                    diagnostic: status.diagnostic,\n                  });\n                if (status._tag === \"Status\" && status.status._tag === \"settled\")\n                  return yield* commit({ _tag: \"Process\", settlement: status.status.settlement });\n                if (status._tag === \"Status\") return yield* commit({ _tag: \"ObservePending\" });\n\n                return yield* commit({\n                  _tag: \"Retry\",\n                  reason: status.reason,\n                  diagnostic: status.diagnostic,\n                });\n              }),\n            )\n            .pipe(\n              Effect.catchTag(\"MessageDeliveryError\", (failure) =>\n                failure.reason === \"conflict\"\n                  ? store.get(key).pipe(\n                      Effect.filterOrFail(\n                        (record) => record !== null,\n                        () => failure,\n                      ),\n                    )\n                  : Effect.fail(failure),\n              ),\n            ),\n        );\n\n        return MessageDeliveryDriver.of({\n          process,\n          runDue: Effect.fn(\"MessageDelivery.runDue\")(function* (ownerThreadId) {\n            const keys = yield* store.due(\n              yield* Clock.currentTimeMillis,\n              config.batchSize,\n              ownerThreadId,\n            );\n\n            return yield* Effect.forEach(keys, process, { concurrency: config.concurrency });\n          }),\n          retry: Effect.fn(\"MessageDelivery.retry\")(\n            function* (key, expectedVersion, deadlineAtMillis) {\n              return yield* store.change(key, {\n                _tag: \"Recover\",\n                expectedVersion,\n                deadlineAtMillis,\n                nowMillis: yield* Clock.currentTimeMillis,\n              });\n            },\n          ),\n        });\n      }),\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAaA,MAAM,WAAW,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC;AACzD,MAAM,cAAc,OAAO,OAAO,MAAM,OAAO,YAAY,CAAC,GAAG,OAAO,YAAY,GAAG,CAAC;;AAGtF,MAAa,qBAAqB,OAAO,OAAO;CAC9C,eAAe;CACf,WAAW;AACb,CAAC;AAID,MAAa,wBAAwB,OAAO,OAAO;CACjD,sBAAsB,SAAS,MAAM,OAAO,oBAAoB,GAAG,CAAC;CACpE,sBAAsB,SAAS,MAAM,OAAO,oBAAoB,GAAO,CAAC;CACxE,iBAAiB;CACjB,gBAAgB;CAChB,sBAAsB;AACxB,CAAC,CAAC,CAAC,MAAM,OAAO,YAAY,UAAU,MAAM,mBAAmB,MAAM,cAAc,CAAC;AAIpF,MAAa,+BAAsD;CACjE,sBAAsB;CACtB,sBAAsB;CACtB,iBAAiB;CACjB,gBAAgB;CAChB,sBAAsB;AACxB;AAEA,MAAa,6BAA6B,OAAO,OAAO;CACtD,oBAAoB;CACpB,qBAAqB;CACrB,kBAAkB;;CAElB,2BAA2B,OAAO,YAAY,QAAQ;CACtD,4BAA4B,OAAO,YAAY,QAAQ;AACzD,CAAC,CAAC,CAAC,MACD,OAAO,YACJ,UACC,MAAM,sBAAsB,MAAM,wBACjC,MAAM,6BAA6B,QAAQ,MAAM,8BAA8B,IACpF,CACF;AAIA,MAAa,oCAAgE;CAC3E,oBAAoB;CACpB,qBAAqB;CACrB,kBAAkB;CAClB,2BAA2B;CAC3B,4BAA4B;AAC9B;AAEA,MAAM,aAAa,OAAO,SAAS;CAAC;CAAa;CAAY;AAAoB,CAAC;AAElF,MAAa,wBAAwB,OAAO,OAAO;CACjD,eAAe,OAAO,QAAQ,CAAC;CAC/B,KAAK;CACL,UAAU;CACV,gBAAgB;;CAEhB,aAAa,OAAO,YAAY,cAAc;CAC9C,iBAAiB;;CAEjB,yBAAyB;CACzB,kBAAkB;CAClB,QAAQ;CACR,SAAS;CACT,QAAQ,OAAO,SAAS;EAAC;EAAW;EAAY;EAAa;EAAW;CAAQ,CAAC;CACjF,SAAS,OAAO,OAAO,OAAO;CAC9B,YAAY,OAAO,OAAO,UAAU;CACpC,SAAS,OAAO,OAAO,WAAW;CAClC,YAAY,OAAO,OAAO,UAAU;CACpC,kBAAkB,OAAO,OAAO,eAAe;CAC/C,OAAO;;CAEP,uBAAuB,OAAO,YAAYA,UAA4B;AACxE,CAAC,CAAC,CAAC,MACD,OAAO,YACJ,WACC,OAAO,mBAAmB,OAAO,mBACjC,OAAO,0BAA0B,OAAO,mBACxC,OAAO,gBAAgB,OAAO,IAAI,aACjC,OAAO,WAAW,iBAAkB,OAAO,eAAe,SAC1D,OAAO,WAAW,eAAgB,OAAO,YAAY,SACrD,OAAO,WAAW,cAAe,OAAO,eAAe,SACvD,OAAO,WAAW,aAAc,OAAO,MAAM,WAC7C,OAAO,WAAW,cAAc,OAAO,WAAW,cAC/C,OAAO,YAAY,OACnB,UACH,OAAO,WAAW,aAAa,OAAO,WAAW,YAC9C,OAAO,YAAY,OACnB,UACH,OAAO,YAAY,QAAQ,OAAO,QAAQ,aAAa,OAAO,SAAS,cACvE,OAAO,eAAe,QACpB,OAAO,WAAW,cAAc,OAAO,SAAS,aAC/C,OAAO,WAAW,iBAAiB,OAAO,QAAQ,kBACrD,OAAO,WAAW,eAAe,OAAO,WAAW,aAAa,OAAO,WAAW,WAC/E,OAAO,qBAAqB,OAC5B,KACR,CACF;AAIA,IAAa,uBAAb,cAA0C,OAAO,YAAkC,CAAC,CAClF,wBACA;CACE,OAAO,OAAO,YAAYC,KAAuB;CACjD,OAAO,OAAO,YAAY,OAAO,MAAM;CACvC,QAAQ,OAAO,SAAS;EACtB;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;CACD,WAAW,OAAO;AACpB,CACF,CAAC,CAAC,CAAC;AAEH,IAAa,gCAAb,cAAmD,OAAO,YAA2C,CAAC,CACpG,iCACA,EACE,OAAO,OAAO,OAChB,CACF,CAAC,CAAC,CAAC;AAIH,MAAa,2BAA2B,QAAQ,UAE7C,iDAAiD,EAClD,qBAAqB,EAAE,WAAW,OAAO,KAAK,GAChD,CAAC;AAED,MAAM,QAAQ;CAAE,iBAAiB;CAAU,WAAW;AAAgB;AAEtE,MAAa,wBAAwB,OAAO,MAAM;CAChD,OAAO,OAAO;EAAE,MAAM,OAAO,QAAQ,OAAO;EAAG,GAAG;CAAM,CAAC;CACzD,OAAO,OAAO;EAAE,MAAM,OAAO,QAAQ,QAAQ;EAAG,GAAG;EAAO,SAAS;CAAQ,CAAC;CAC5E,OAAO,OAAO;EAAE,MAAM,OAAO,QAAQ,SAAS;EAAG,GAAG;EAAO,YAAY;CAAW,CAAC;CACnF,OAAO,OAAO;EAAE,MAAM,OAAO,QAAQ,gBAAgB;EAAG,GAAG;CAAM,CAAC;CAClE,OAAO,OAAO;EACZ,MAAM,OAAO,QAAQ,QAAQ;EAC7B,GAAG;EACH,MAAM;EACN,YAAY,OAAO,YAAYD,UAA4B;CAC7D,CAAC;CACD,OAAO,OAAO;EACZ,MAAM,OAAO,QAAQ,OAAO;EAC5B,GAAG;EACH,QAAQ;EACR,YAAY,OAAO,YAAYA,UAA4B;CAC7D,CAAC;CACD,OAAO,OAAO;EACZ,MAAM,OAAO,QAAQ,MAAM;EAC3B,GAAG;EACH,QAAQ;EACR,YAAY,OAAO,YAAYA,UAA4B;CAC7D,CAAC;CACD,OAAO,OAAO;EAAE,MAAM,OAAO,QAAQ,SAAS;EAAG,GAAG;EAAO,kBAAkB;CAAgB,CAAC;CAE9F,OAAO,OAAO;EAAE,MAAM,OAAO,QAAQ,OAAO;EAAG,GAAG;EAAO,aAAa;CAAgB,CAAC;AACzF,CAAC;;AAKD,MAAa,6BAA6B,OAAO,OAAO;CACtD,eAAe;CACf,OAAO,SAAS,MAAM,OAAO,oBAAoB,IAAI,CAAC;CACtD,OAAO,OAAO,YAAY,cAAc;;CAExC,aAAa,OAAO,YAAY,OAAO,OAAO;;CAE9C,cAAc,OAAO,YACnB,OAAO,OAAO;EAAE,cAAc;EAAc,eAAe;CAAQ,CAAC,CACtE;;CAEA,eAAe,OAAO,YAAY,QAAQ;AAC5C,CAAC,CAAC,CAAC,MACD,OAAO,YACJ,YACC,OAAO,QAAQ,gBAAgB,IAAI,IACjC,OAAO,QAAQ,iBAAiB,KAAA,CAAS,IACzC,OAAO,QAAQ,kBAAkB,KAAA,CAAS,KAC5C,CACJ,CACF;AAIA,MAAa,sBAAsB,OAAO,OAAO;CAC/C,OAAO,OAAO,MAAM,qBAAqB;CACzC,MAAM,OAAO,OAAO,cAAc;AACpC,CAAC;;;;;;;AAUD,IAAa,uBAAb,cAA0C,QAAQ,QA2BhD,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC;;;;;;;;AASlD,MAAa,cAAc,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAClE,SACA;CACA,MAAM,QAAQ,OAAO;CAErB,MAAM,QAAQ,OAAO,wBACnB,4BACA;EACE,eAAe,QAAQ;EACvB,OAAO,QAAQ;EACf,aAAa;CACf,GACA,cACF;CAEA,MAAM,OAAO,OAAO,wBAClB,qBACA,OAAO,MAAM,KAAK,KAAK,GACvB,qBACF;CAEA,IAAI,KAAK,SAAS,QAAQ,KAAK,MAAM,SAAS,MAAM,OAClD,OAAO,OAAO,qBAAqB,KAAK;EAAE,QAAQ;EAAY,WAAW;CAAe,CAAC;CAC3F,MAAM,UAAU,KAAK;CAErB,IACE,QAAQ,MACL,WACC,OAAO,IAAI,kBAAkB,MAAM,iBAAiB,CAAC,4BAA4B,MAAM,CAC3F,KACA,IAAI,IAAI,QAAQ,KAAK,WAAW,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,QAAQ,QAExE,OAAO,OAAO,qBAAqB,KAAK;EACtC,QAAQ;EACR,WAAW;CACb,CAAC;CAEH,OAAO;AACT,CAAC;AAED,MAAa,4BAA4B,QACvC,KAAK,UAAU,CAAC,IAAI,eAAe,IAAI,SAAS,CAAC;AAEnD,MAAa,+BAA+B,WAC1C,OAAO,WAAW,eAAe,OAAO,WAAW;AAErD,MAAa,0BAA0B,WACrC,OAAO,GAAG,YAAY,CAAC,CAAC,OAAO,SAAS,gBAAgB;AAE1D,MAAa,2BAA2B,QAAoC,YAAqB;CAC/F,SAAS,SAAU,OAAO,6BAA6B,KAAM,OAAO;CACpE,UAAU,SAAU,OAAO,8BAA8B,MAAO,OAAO;AACzE;AAEA,MAAa,2BAA2B,WACtC,OAAO,WAAW,aAAa,OAAO,WAAW,aAC7C,KAAK,IAAI,OAAO,kBAAkB,OAAO,oBAAoB,OAAO,MAAM,mBAAmB,IAC7F;;AAGN,MAAa,+BACX,MACA,UAEA,yBAAyB,KAAK,GAAG,MAAM,yBAAyB,MAAM,GAAG,KACzE,KAAK,mBAAmB,MAAM,kBAC9B,KAAK,gBAAgB,MAAM,eAC3B,OAAO,cAAc,aAAa,CAAC,CAAC,KAAK,UAAU,MAAM,QAAQ,KACjE,OAAO,cAAc,qBAAqB,CAAC,CAAC,KAAK,QAAQ,MAAM,MAAM,KACrE,KAAK,oBAAoB,MAAM,mBAC/B,KAAK,4BAA4B,MAAM;AAEzC,MAAM,SAAS,QAAwC,WAAmB,UACxE,qBAAqB,KAAK;CAAE;CAAQ;CAAW,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;AAAG,CAAC;AAE5F,MAAa,2BACX,QACA,OACA,cAEA,OAAO,oBAAoB,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KACvD,OAAO,eAAe,MAAM,cAAc,SAAS,CAAC,CACtD;AAEF,MAAM,6BAA6B,OAAO,OAAO;CAC/C,KAAK;CACL,UAAU;CACV,iBAAiB;CACjB,kBAAkB;CAClB,QAAQ;CACR,aAAa,OAAO,YAAY,cAAc;AAChD,CAAC;;AAGD,MAAa,yBAAyB,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAAW,SAOL;CAE/E,MAAM,WAAW,OAAO,OAAO,aAAa,OAAO,eAAe,0BAA0B,CAAC,CAAC,CAAC;EAC7F,GAAG;EACH,QAAQ,QAAQ,UAAU;CAC5B,CAAC,CAAC,CAAC,KACD,OAAO,QAAQ,OAAO,aAAa,OAAO,eAAe,0BAA0B,CAAC,CAAC,GACrF,OAAO,UAAU,UAAU,MAAM,cAAc,WAAW,KAAK,CAAC,CAClE;CAEA,MAAM,WAAW,SAAS;CAE1B,MAAM,UAAU,OAAO,OAAO,aAAa,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,KAClE,OAAO,UAAU,UAAU,MAAM,cAAc,WAAW,KAAK,CAAC,CAClE;CAMA,KAAI,OAJuB,WAAW,QAAQ,KAAK,CAAC,CAAC,KACnD,OAAO,UAAU,UAAU,MAAM,WAAW,UAAU,KAAK,CAAC,CAC9D,OAEoB,SAAS,aAAa,OAAO,OAAO,MAAM,WAAW,cAAc;CAEvF,MAAM,iBAAiB,OAAO,WAAW,OAAO,CAAC,CAAC,KAChD,OAAO,UAAU,UAAU,MAAM,WAAW,UAAU,KAAK,CAAC,CAC9D;CAEA,OAAO,OAAO,wBACZ,uBACA;EACE,eAAe;EACf,KAAK,SAAS;EACd;EACA;EACA,GAAI,SAAS,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,SAAS,YAAY;EAClF,iBAAiB,SAAS;EAC1B,yBAAyB,SAAS;EAClC,kBAAkB,SAAS;EAC3B,QAAQ,SAAS;EACjB,SAAS;EACT,QAAQ;EACR,SAAS;EACT,YAAY;EACZ,SAAS;EACT,YAAY;EACZ,kBAAkB;EAClB,OAAO;GACL,UAAU;GACV,YAAY;GACZ,mBAAmB;GACnB,QAAQ;GACR,qBAAqB,SAAS;GAC9B,qBAAqB;GACrB,aAAa;EACf;CACF,GACA,SACF;AACF,CAAC;;AAGD,MAAa,8BACX,QACA,WAC+D;CAC/D,MAAM,iBAAiB,OAAO,KAAK,MAAM,YAAY,OAAO,IAAI,CAAC;CAEjE,IAAI,OAAO,YAAY,OAAO,iBAAiB,OAAO,SAAS;CAC/D,IAAI,OAAO,WAAW,eAAe,OAAO,WAAW,WAAW,OAAO,SAAS;CAClF,MAAM,MAAM,OAAO;CAEnB,MAAM,OAAO;EACX,GAAG;EACH,SAAS,OAAO,UAAU;EAC1B,GAAI,gBAAgB,UAAU,OAAO,eAAe,KAAA,IAChD,EAAE,uBAAuB,OAAO,WAAW,IAC3C,CAAC;CACP;CAEA,MAAM,UAAU,YAA2D;EACzE,GAAG;EACH,QAAQ;EACR,YAAY;EACZ,kBAAkB;EAClB,OAAO;GAAE,GAAG,OAAO;GAAO,QAAQ;EAAK;CACzC;CAEA,IAAI,OAAO,SAAS,SAAS;EAC3B,IACE,OAAO,WAAW,aACjB,OAAO,qBAAqB,QAAQ,OAAO,mBAAmB,KAE/D,OAAO,SAAS;EAClB,IAAI,OAAO,OAAO,kBAAkB,OAAO,OAAO,QAAQ,OAAO,UAAU,CAAC;EAC5E,IAAI,OAAO,eAAe,KAAK,OAAO,SAAS;EAE/C,OAAO,OAAO,QAAQ;GACpB,GAAG;GACH,kBAAkB;GAClB,OAAO;IACL,GAAG,OAAO;IACV,qBAAqB,KAAK,IAAI,OAAO,aAAa,OAAO,gBAAgB;GAC3E;EACF,CAAC;CACH;CAEA,IAAI,OAAO,SAAS,WAAW;EAC7B,IAAI,OAAO,WAAW,YAAY,OAAO,oBAAoB,KAAK,OAAO,SAAS;EAElF,OAAO,OAAO,QAAQ;GACpB,GAAG;GACH,kBAAkB,OAAO;GACzB,QAAQ,OAAO,YAAY,OAAO,YAAY;GAC9C,YAAY;GACZ,OAAO;IACL,GAAG,OAAO;IACV,YAAY,OAAO,MAAM,aAAa;IACtC,mBAAmB;IACnB,QAAQ;IACR,qBAAqB;GACvB;EACF,CAAC;CACH;CACA,IAAI,OAAO,WAAW,UAAU,OAAO,SAAS;CAChD,IAAI,OAAO,SAAS,QAAQ,OAAO,OAAO,QAAQ,OAAO,OAAO,MAAM,CAAC;CACvE,IAAI,OAAO,SAAS,SAAS;EAC3B,MAAM,MAAM,wBAAwB,MAAM;EAE1C,IAAI,QAAQ,QAAQ,MAAM,KAAK,OAAO,SAAS;EAC/C,IAAI,OAAO,OAAO,kBAAkB,OAAO,OAAO,QAAQ,OAAO,UAAU,CAAC;EAC5E,IAAI,OAAO,MAAM,qBAAqB,OAAO,OAAO,sBAClD,OAAO,OAAO,QAAQ,OAAO,WAAW,CAAC;EAE3C,OAAO,OAAO,QAAQ;GACpB,GAAG;GACH,kBAAkB,KAAK,IAAI,MAAM,OAAO,OAAO,sBAAsB,OAAO,gBAAgB;GAC5F,OAAO;IACL,GAAG,OAAO;IACV,UAAU,OAAO,MAAM,WAAW;IAClC,mBAAmB,OAAO,MAAM,oBAAoB;IACpD,qBAAqB;GACvB;EACF,CAAC;CACH;CACA,IAAI,OAAO,qBAAqB,QAAQ,MAAM,OAAO,kBAAkB,OAAO,SAAS;CACvF,IAAI,OAAO,SAAS,UAAU;EAC5B,IAAI,OAAO,WAAW,WAAW,OAAO,SAAS;EACjD,IAAI,OAAO,QAAQ,aAAa,OAAO,SAAS,UAC9C,OAAO,OAAO,KAAK,MAAM,WAAW,kBAAkB,CAAC;EAEzD,OAAO,OAAO,QAAQ;GACpB,GAAG;GACH,QAAQ;GACR,SAAS,OAAO;GAChB,kBAAkB;GAClB,OAAO;IACL,GAAG,OAAO;IACV,mBAAmB;IACnB,qBAAqB,KAAK,IACxB,MAAM,OAAO,OAAO,sBACpB,OAAO,gBACT;IACA,aAAa;GACf;EACF,CAAC;CACH;CACA,IAAI,OAAO,SAAS,WAAW;EAC7B,IAAI,OAAO,WAAW,YAAY,OAAO,SAAS;EAClD,IACE,OAAO,WAAW,iBAAiB,OAAO,SAAS,gBACnD,OAAO,WAAW,cAAc,OAAO,QAAQ,WAE/C,OAAO,OAAO,KAAK,MAAM,WAAW,qBAAqB,CAAC;EAE5D,OAAO,OAAO,QAAQ;GACpB,GAAG;GACH,QAAQ;GACR,YAAY,OAAO;GACnB,kBAAkB;EACpB,CAAC;CACH;CACA,IAAI,OAAO,SAAS,kBAAkB;EACpC,IAAI,OAAO,WAAW,YAAY,OAAO,SAAS;EAClD,IAAI,OAAO,OAAO,kBAAkB,OAAO,OAAO,QAAQ,OAAO,UAAU,CAAC;EAE5E,OAAO,OAAO,QAAQ;GACpB,GAAG;GACH,kBAAkB;GAClB,OAAO;IACL,GAAG,OAAO;IACV,mBAAmB;IACnB,aAAa;IACb,qBAAqB,KAAK,IACxB,MAAM,OAAO,OAAO,sBACpB,OAAO,gBACT;GACF;EACF,CAAC;CACH;CACA,IAAI,OAAO,SAAS,UAAU;EAC5B,IAAI,OAAO,WAAW,WAAW,OAAO,SAAS;EAEjD,OAAO,OAAO,QAAQ;GACpB,GAAG;GACH,QAAQ;GACR,SAAS,OAAO;GAChB,kBAAkB;EACpB,CAAC;CACH;CACA,IAAI,OAAO,OAAO,kBAAkB,OAAO,OAAO,QAAQ,OAAO,UAAU,CAAC;CAC5E,IAAI,OAAO,MAAM,qBAAqB,OAAO,OAAO,sBAClD,OAAO,OAAO,QAAQ,OAAO,WAAW,CAAC;CAE3C,MAAM,QAAQ,KAAK,IACjB,OAAO,OAAO,kBAAkB,KAAK,KAAK,IAAI,OAAO,MAAM,oBAAoB,GAAG,EAAE,GACpF,OAAO,OAAO,cAChB;CAEA,OAAO,OAAO,QAAQ;EACpB,GAAG;EACH,kBAAkB;EAClB,OAAO;GACL,GAAG,OAAO;GACV,qBAAqB,KAAK,IACxB,OAAO,OAAO,WAAW,aAAa,OAAO,OAAO,uBAAuB,QAC3E,OAAO,gBACT;GACA,aAAa,OAAO;EACtB;CACF,CAAC;AACH;AAEA,MAAa,8BAA8B,OAAO,OAAO;CACvD,WAAW,SAAS,MAAM,OAAO,oBAAoB,GAAG,CAAC;CACzD,aAAa,SAAS,MAAM,OAAO,oBAAoB,EAAE,CAAC;AAC5D,CAAC;;;;;;;AAUD,IAAa,wBAAb,MAAa,8BAA8B,QAAQ,QAejD,CAAC,CAAC,4CAA4C,CAAC,CAAC;CAChD,OAAO,MACL,SAAsC;EAAE,WAAW;EAAK,aAAa;CAAE,GAKvE;EACA,OAAO,MAAM,OACX,uBACA,OAAO,IAAI,aAAa;GACtB,MAAM,SAAS,OAAO,wBACpB,6BACA,QACA,eACF;GAEA,MAAM,QAAQ,OAAO;GACrB,MAAM,YAAY,OAAO;GACzB,MAAM,SAAS,OAAO,OAAO;GAC7B,MAAM,YAAY,OAAO;GACzB,MAAM,YAAY,OAAO,UAAU,KAAK,OAAO,WAAW;GAE1D,MAAM,UAAU,OAAO,GAAG,yBAAyB,CAAC,EAAE,QACpD,UACG,WACC,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,MAAM,IAAI,GAAG;IAEpC,IAAI,YAAY,MAAM,OAAO,OAAO,MAAM,aAAa,SAAS;IAChE,MAAM,YAAY,OAAO,MAAM;IAC/B,MAAM,MAAM,wBAAwB,OAAO;IAE3C,IAAI,QAAQ,QAAQ,MAAM,WAAW,OAAO;IAE5C,IAAI,QAAQ,WAAW,aAAa,QAAQ,gBAAgB,KAAA,GAAW;KACrE,MAAM,WAAW,OAAO,MAAM,IAAI;MAChC,eAAe,IAAI;MACnB,WAAW,QAAQ;KACrB,CAAC;KAED,IACE,aAAa,QACZ,SAAS,YAAY,QAAQ,SAAS,WAAW,WAElD,OAAO,OAAO,MAAM,OAAO,KAAK;MAC9B,MAAM;MACN,iBAAiB,QAAQ;MACzB;MACA,aAAa,YAAY,QAAQ,OAAO;KAC1C,CAAC;IAEL;IAEA,MAAM,UAAU,OAAO,MAAM,OAAO,KAAK;KACvC,MAAM;KACN,iBAAiB,QAAQ;KACzB;IACF,CAAC;IAED,IAAI,QAAQ,WAAW,UAAU,OAAO;IAExC,MAAM,WAAW,OAAO,OAAO,aAAa,aAAa,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,KAC3E,OAAO,UAAU,UAAU,MAAM,WAAW,YAAY,KAAK,CAAC,CAChE;IAOA,KAAI,OALkB,WAAW,QAAQ,CAAC,CAAC,KACzC,OAAO,eAAe,OAAO,QAAQ,MAAM,GAC3C,OAAO,UAAU,UAAU,MAAM,WAAW,UAAU,KAAK,CAAC,CAC9D,OAEe,QAAQ,gBACrB,OAAO,OAAO,MAAM,WAAW,iBAAiB;IAElD,MAAM,UAAU,KAAK,IACnB,QAAQ,OAAO,uBACd,QAAQ,oBAAoB,QAAQ,qBAClC,OAAO,MAAM,kBAClB;IAGA,IAAI,WAAW,GAAG,OAAO;IAMzB,MAAM,UAAU,WACd,MAAM,kBAAkB,KACtB,OAAO,SAAS,SACd,MAAM,OAAO,KAAK;KAChB,GAAG;KACH,iBAAiB,QAAQ;KACzB,WAAW;IACb,CAAC,CACH,CACF;IAEF,IAAI,QAAQ,WAAW,WAAW;KAChC,MAAM,UAAU,OAAO,mBACrB,UAAU,OAAO,QAAQ,QAAQ,GACjC,OACF,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,MAAM,WAAW,aAAa,KAAK,CAAC,CAAC;KAEvE,OAAO,UAAU,IAAI,kCAAkC;KACvD,IAAI,QAAQ,SAAS,WACnB,OAAO,OAAO,OAAO;MAAE,MAAM;MAAU,SAAS,QAAQ;KAAQ,CAAC;KACnE,IAAI,QAAQ,SAAS,WACnB,OAAO,OAAO,OAAO;MACnB,MAAM;MACN,MAAM,QAAQ,MAAM;MACpB,YAAYE,QAA0B,QAAQ,KAAK;KACrD,CAAC;KAEH,OAAO,OAAO,OAAO;MACnB,MAAM;MACN,QAAQ,QAAQ;MAChB,YAAY,QAAQ;KACtB,CAAC;IACH;IACA,IAAI,QAAQ,YAAY,MAAM,OAAO,OAAO,MAAM,WAAW,SAAS;IACtE,IAAI,UAAU,qBAAqB,KAAA,GACjC,OAAO,OAAO,OAAO;KAAE,MAAM;KAAQ,QAAQ;IAAqB,CAAC;IAErE,MAAM,SAAS,OAAO,UAAU,iBAAiB,QAAQ,OAAO,CAAC,CAAC,KAChE,OAAO,QAAQ,OAAO,GACtB,OAAO,KAAK,YAAY;KAAE,MAAM;KAAmB;IAAO,EAAE,GAC5D,OAAO,SAAS,4BAA4B,YAC1C,OAAO,QAAQ;KACb,MAAM;KACN,QAAQ,QAAQ;KAChB,YAAYA,QAA0B,OAAO;IAC/C,CAAC,CACH,GACA,OAAO,SAAS,0BAA0B,YACxC,OAAO,QAAQ;KACb,MAAM;KACN,YAAYA,QAA0B,OAAO;IAC/C,CAAC,CACH,GACA,OAAO,SAAS,iBAAiB,YAC/B,OAAO,QAAQ;KACb,MAAM;KACN,QAAQ;KACR,YAAYA,QAA0B,OAAO;IAC/C,CAAC,CACH,GACA,OAAO,SAAS,yBAAyB,YACvC,QAAQ,WAAW,gBACf,OAAO,QAAQ;KACb,MAAM;KACN,QAAQ;KACR,YAAYA,QAA0B,OAAO;IAC/C,CAAC,IACD,OAAO,KAAK,MAAM,WAAW,UAAU,OAAO,CAAC,CACrD,CACF;IAEA,IAAI,OAAO,SAAS,eAClB,OAAO,OAAO,OAAO;KACnB,MAAM;KACN,QAAQ;KACR,YAAY,OAAO;IACrB,CAAC;IACH,IAAI,OAAO,SAAS,YAAY,OAAO,OAAO,SAAS,WACrD,OAAO,OAAO,OAAO;KAAE,MAAM;KAAW,YAAY,OAAO,OAAO;IAAW,CAAC;IAChF,IAAI,OAAO,SAAS,UAAU,OAAO,OAAO,OAAO,EAAE,MAAM,iBAAiB,CAAC;IAE7E,OAAO,OAAO,OAAO;KACnB,MAAM;KACN,QAAQ,OAAO;KACf,YAAY,OAAO;IACrB,CAAC;GACH,CAAC,CACH,CAAC,CACA,KACC,OAAO,SAAS,yBAAyB,YACvC,QAAQ,WAAW,aACf,MAAM,IAAI,GAAG,CAAC,CAAC,KACb,OAAO,cACJ,WAAW,WAAW,YACjB,OACR,CACF,IACA,OAAO,KAAK,OAAO,CACzB,CACF,CACJ;GAEA,OAAO,sBAAsB,GAAG;IAC9B;IACA,QAAQ,OAAO,GAAG,wBAAwB,CAAC,CAAC,WAAW,eAAe;KACpE,MAAM,OAAO,OAAO,MAAM,IACxB,OAAO,MAAM,mBACb,OAAO,WACP,aACF;KAEA,OAAO,OAAO,OAAO,QAAQ,MAAM,SAAS,EAAE,aAAa,OAAO,YAAY,CAAC;IACjF,CAAC;IACD,OAAO,OAAO,GAAG,uBAAuB,CAAC,CACvC,WAAW,KAAK,iBAAiB,kBAAkB;KACjD,OAAO,OAAO,MAAM,OAAO,KAAK;MAC9B,MAAM;MACN;MACA;MACA,WAAW,OAAO,MAAM;KAC1B,CAAC;IACH,CACF;GACF,CAAC;EACH,CAAC,CACH;CACF;AACF"}