@cat-factory/worker 0.137.0 → 0.138.0

package/dist/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAU/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAU3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACrC,mFAAmF;IACnF,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,gFAAgF;IAChF,aAAa,CAAC,EAAE,qBAAqB,CAAA;CACtC;AAqBD;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,CA6EtE"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAU/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAU3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACrC,mFAAmF;IACnF,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,gFAAgF;IAChF,aAAa,CAAC,EAAE,qBAAqB,CAAA;CACtC;AAqBD;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,CA8GtE"}

package/dist/app.js

@@ -82,6 +82,39 @@ export function createApp(options = {}) {
         await next();
     });
     app.get('/health', (c) => c.json({ status: 'ok' }));
+    // Readiness (slice 4.3). The Worker has no long-lived process to drain and no rotation to be
+    // taken out of — Cloudflare routes every request to a fresh isolate and there is nothing an
+    // operator could do with a red answer — so `/ready` here is deliberately NOT the Node
+    // facade's drain signal. What it IS: a bindings probe, answering the one question an operator
+    // actually asks of a fresh deployment ("is D1 reachable, is TELEMETRY_DB bound"), which on
+    // this runtime is a genuinely separate database rather than a schema in the same one.
+    //
+    // Reported per binding rather than as one boolean, and a failure is 503 so a smoke test can
+    // assert on the status alone. Public, before the auth gate, like `/health`.
+    app.get('/ready', async (c) => {
+        const env = c.env;
+        const probe = async (run) => {
+            try {
+                await run();
+                return { ok: true };
+            }
+            catch (err) {
+                // Kept to a short diagnostic: this endpoint is unauthenticated, so it must never carry
+                // a connection string or a binding's internals — the same rule as the Node twin's.
+                return { ok: false, error: err instanceof Error ? err.message : String(err) };
+            }
+        };
+        const checks = {
+            database: await probe(() => c.env.DB.prepare('SELECT 1').first()),
+        };
+        // TELEMETRY_DB is REQUIRED (the build fails without it), so an absent binding is a real
+        // failure to report rather than a capability to skip.
+        checks.telemetry = env.TELEMETRY_DB
+            ? await probe(() => env.TELEMETRY_DB.prepare('SELECT 1').first())
+            : { ok: false, error: 'TELEMETRY_DB is not bound' };
+        const ready = Object.values(checks).every((check) => check.ok);
+        return c.json({ status: ready ? 'ready' : 'not_ready', checks }, ready ? 200 : 503);
+    });
     // Default-deny session gate + per-workspace authz, shared verbatim with the Node
     // service (one implementation in @cat-factory/server so the runtimes can't drift).
     mountAuthGate(app);

package/dist/app.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,0BAA0B,EAC1B,uBAAuB,EACvB,MAAM,EACN,aAAa,EACb,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AAYhE,+FAA+F;AAC/F,6FAA6F;AAC7F,6FAA6F;AAC7F,iFAAiF;AACjF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAA;AAC1C,SAAS,oBAAoB,CAAC,QAAyB;IACrD,MAAM,SAAS,GAAG,QAAQ;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;SACjB,IAAI,EAAE;SACN,IAAI,CAAC,GAAG,CAAC,CAAA;IACZ,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAM;IAC3C,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC/B,MAAM,CAAC,KAAK,CACV,yFAAyF;QACvF,0EAA0E,EAC5E,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CACzC,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,OAAO,GAAqB,EAAE;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,4FAA4F;IAC5F,6FAA6F;IAC7F,kCAAkC;IAClC,mBAAmB,CAAC,GAAG,CAAC,CAAA;IAExB,6EAA6E;IAC7E,yEAAyE;IACzE,mFAAmF;IACnF,2EAA2E;IAC3E,yFAAyF;IACzF,GAAG,CAAC,GAAG,CACL,GAAG,EACH,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CACpB,iBAAiB,CACf,MAAM,EACN,CAAC,CAAC,GAAG,CAAC,oBAAoB,EAC1B,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CACzC;QACH,iFAAiF;QACjF,mFAAmF;QACnF,kFAAkF;QAClF,wEAAwE;QACxE,YAAY,EAAE,CAAC,GAAG,oBAAoB,CAAC;QACvC,uFAAuF;QACvF,aAAa,EAAE,CAAC,GAAG,oBAAoB,CAAC;KACzC,CAAC,CACH,CAAA;IACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,CAAC,CAAC,GAAG,CACH,WAAW,EACX,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE;gBACvC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;gBACxD,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CACH,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6FAA6F;YAC7F,8FAA8F;YAC9F,+FAA+F;YAC/F,sFAAsF;YACtF,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAClC,MAAM,GAAG,GAAG,0BAA0B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;gBACjF,yEAAyE;gBACzE,0FAA0F;gBAC1F,2FAA2F;gBAC3F,yFAAyF;gBACzF,0FAA0F;gBAC1F,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBACrC,IAAI,MAAM;oBAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;gBAClE,OAAO,GAAG,CAAA;YACZ,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEnD,iFAAiF;IACjF,mFAAmF;IACnF,aAAa,CAAC,GAAG,CAAC,CAAA;IAElB,mFAAmF;IACnF,mFAAmF;IACnF,8EAA8E;IAC9E,gCAAgC;IAChC,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAE5B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAExB,OAAO,GAAG,CAAA;AACZ,CAAC"}
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,0BAA0B,EAC1B,uBAAuB,EACvB,MAAM,EACN,aAAa,EACb,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AAYhE,+FAA+F;AAC/F,6FAA6F;AAC7F,6FAA6F;AAC7F,iFAAiF;AACjF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAA;AAC1C,SAAS,oBAAoB,CAAC,QAAyB;IACrD,MAAM,SAAS,GAAG,QAAQ;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;SACjB,IAAI,EAAE;SACN,IAAI,CAAC,GAAG,CAAC,CAAA;IACZ,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAM;IAC3C,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC/B,MAAM,CAAC,KAAK,CACV,yFAAyF;QACvF,0EAA0E,EAC5E,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CACzC,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,OAAO,GAAqB,EAAE;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,4FAA4F;IAC5F,6FAA6F;IAC7F,kCAAkC;IAClC,mBAAmB,CAAC,GAAG,CAAC,CAAA;IAExB,6EAA6E;IAC7E,yEAAyE;IACzE,mFAAmF;IACnF,2EAA2E;IAC3E,yFAAyF;IACzF,GAAG,CAAC,GAAG,CACL,GAAG,EACH,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CACpB,iBAAiB,CACf,MAAM,EACN,CAAC,CAAC,GAAG,CAAC,oBAAoB,EAC1B,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CACzC;QACH,iFAAiF;QACjF,mFAAmF;QACnF,kFAAkF;QAClF,wEAAwE;QACxE,YAAY,EAAE,CAAC,GAAG,oBAAoB,CAAC;QACvC,uFAAuF;QACvF,aAAa,EAAE,CAAC,GAAG,oBAAoB,CAAC;KACzC,CAAC,CACH,CAAA;IACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,CAAC,CAAC,GAAG,CACH,WAAW,EACX,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE;gBACvC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;gBACxD,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CACH,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6FAA6F;YAC7F,8FAA8F;YAC9F,+FAA+F;YAC/F,sFAAsF;YACtF,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAClC,MAAM,GAAG,GAAG,0BAA0B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;gBACjF,yEAAyE;gBACzE,0FAA0F;gBAC1F,2FAA2F;gBAC3F,yFAAyF;gBACzF,0FAA0F;gBAC1F,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBACrC,IAAI,MAAM;oBAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;gBAClE,OAAO,GAAG,CAAA;YACZ,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEnD,6FAA6F;IAC7F,4FAA4F;IAC5F,sFAAsF;IACtF,8FAA8F;IAC9F,2FAA2F;IAC3F,sFAAsF;IACtF,EAAE;IACF,4FAA4F;IAC5F,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAA;QACjB,MAAM,KAAK,GAAG,KAAK,EAAE,GAA2B,EAA4C,EAAE;YAC5F,IAAI,CAAC;gBACH,MAAM,GAAG,EAAE,CAAA;gBACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;YACrB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uFAAuF;gBACvF,mFAAmF;gBACnF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;YAC/E,CAAC;QACH,CAAC,CAAA;QACD,MAAM,MAAM,GAAoD;YAC9D,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;SAClE,CAAA;QACD,wFAAwF;QACxF,sDAAsD;QACtD,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,YAAY;YACjC,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,YAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;YAClE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAA;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,iFAAiF;IACjF,mFAAmF;IACnF,aAAa,CAAC,GAAG,CAAC,CAAA;IAElB,mFAAmF;IACnF,mFAAmF;IACnF,8EAA8E;IAC9E,gCAAgC;IAChC,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAE5B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAExB,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/index.d.ts

@@ -16,12 +16,13 @@ export { InitiativePresetRegistry, type InitiativePresetRegistration } from '@ca
 export { PipelineRegistry, defaultPipelineRegistry } from '@cat-factory/kernel';
 export { TaskTypeRegistry, defaultTaskTypeRegistry } from '@cat-factory/kernel';
 export { FoundationalServiceRegistry, type FoundationalServiceDefinition, defaultFoundationalServiceRegistry, } from '@cat-factory/kernel';
+export { BinaryGeneratorRegistry, type BinaryGeneratorDefinition, defaultBinaryGeneratorRegistry, } from '@cat-factory/kernel';
 export type { CreateAppOptions } from './app';
 export { DEFAULT_MODEL_PRESET_ID, MODEL_PRESET_SEED_IDS } from '@cat-factory/kernel';
 /** The cron sweeper. Module-level (not closed over the app) so {@link createWorker} stays thin. */
 declare function handleScheduled(controller: ScheduledController, env: Env, ctx: ExecutionContext): Promise<void>;
 /** The queue consumer multiplexing the three queues. Module-level, like {@link handleScheduled}. */
-declare function handleQueue(batch: MessageBatch<ExecutionStartMessage | GitHubSyncMessage | TrackerSyncMessage>, env: Env): Promise<void>;
+declare function handleQueue(batch: MessageBatch<ExecutionStartMessage | GitHubSyncMessage | TrackerSyncMessage>, env: Env, ctx: ExecutionContext): Promise<void>;
 /** The Worker's exported handler shape (fetch + the cron and queue consumers). */
 export type WorkerHandler = ExportedHandler<Env, ExecutionStartMessage | GitHubSyncMessage | TrackerSyncMessage>;
 /**

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,mBAAmB,EACpB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,KAAK,gBAAgB,EAAa,MAAM,OAAO,CAAA;AAExD,OAAO,KAAK,EACV,GAAG,EACH,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,sBAAsB,CAAA;AA+E7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAA;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mDAAmD,CAAA;AAC1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAA;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAA;AAC5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAA;AAE5F,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAA;AAGnF,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAA;AAE7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qDAAqD,CAAA;AAKxF,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,oBAAoB,GAC1B,MAAM,gCAAgC,CAAA;AAOvC,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAA;AAK5B,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAA;AACrE,OAAO,EAAE,wBAAwB,EAAE,KAAK,4BAA4B,EAAE,MAAM,qBAAqB,CAAA;AAIjG,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAK/E,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAO/E,OAAO,EACL,2BAA2B,EAC3B,KAAK,6BAA6B,EAClC,kCAAkC,GACnC,MAAM,qBAAqB,CAAA;AAG5B,YAAY,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAA;AAK7C,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAumBpF,mGAAmG;AACnG,iBAAe,eAAe,CAC5B,UAAU,EAAE,mBAAmB,EAC/B,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED,oGAAoG;AACpG,iBAAe,WAAW,CACxB,KAAK,EAAE,YAAY,CAAC,qBAAqB,GAAG,iBAAiB,GAAG,kBAAkB,CAAC,EACnF,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,IAAI,CAAC,CA0Cf;AAED,kFAAkF;AAClF,MAAM,MAAM,aAAa,GAAG,eAAe,CACzC,GAAG,EACH,qBAAqB,GAAG,iBAAiB,GAAG,kBAAkB,CAC/D,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,gBAAqB,GAAG,aAAa,CA0B1E;AAiBD;;;;;;GAMG;;qBAIgB,UAAU,CAAC,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,mBAAmB,EACpB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,KAAK,gBAAgB,EAAa,MAAM,OAAO,CAAA;AAExD,OAAO,KAAK,EACV,GAAG,EACH,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,sBAAsB,CAAA;AAmF7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAA;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mDAAmD,CAAA;AAC1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAA;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAA;AAC5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAA;AAE5F,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAA;AAGnF,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAA;AAE7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qDAAqD,CAAA;AAKxF,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,oBAAoB,GAC1B,MAAM,gCAAgC,CAAA;AAOvC,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAA;AAK5B,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAA;AACrE,OAAO,EAAE,wBAAwB,EAAE,KAAK,4BAA4B,EAAE,MAAM,qBAAqB,CAAA;AAIjG,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAK/E,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAO/E,OAAO,EACL,2BAA2B,EAC3B,KAAK,6BAA6B,EAClC,kCAAkC,GACnC,MAAM,qBAAqB,CAAA;AAO5B,OAAO,EACL,uBAAuB,EACvB,KAAK,yBAAyB,EAC9B,8BAA8B,GAC/B,MAAM,qBAAqB,CAAA;AAG5B,YAAY,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAA;AAK7C,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAyiBpF,mGAAmG;AACnG,iBAAe,eAAe,CAC5B,UAAU,EAAE,mBAAmB,EAC/B,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,IAAI,CAAC,CAsBf;AAwBD,oGAAoG;AACpG,iBAAe,WAAW,CACxB,KAAK,EAAE,YAAY,CAAC,qBAAqB,GAAG,iBAAiB,GAAG,kBAAkB,CAAC,EACnF,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,IAAI,CAAC,CAKf;AAiDD,kFAAkF;AAClF,MAAM,MAAM,aAAa,GAAG,eAAe,CACzC,GAAG,EACH,qBAAqB,GAAG,iBAAiB,GAAG,kBAAkB,CAC/D,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,gBAAqB,GAAG,aAAa,CA8B1E;AAiBD;;;;;;GAMG;;qBAIgB,UAAU,CAAC,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC"}

package/dist/index.js

@@ -17,7 +17,7 @@ import { D1SubscriptionQuotaCycleRepository } from './infrastructure/repositorie
 import { D1PasswordResetTokenRepository } from './infrastructure/repositories/D1PasswordResetTokenRepository';
 import { D1NotificationRepository } from './infrastructure/repositories/D1NotificationRepository';
 import { buildContainer, buildCloudflareArtifactStoreResolver } from './infrastructure/container';
-import { GITHUB_RECONCILE_STALE_MS, escalateStaleNotifications, FOUNDATIONAL_SOURCE_STALE_MS, shouldRunReachabilityPass, sweepFoundationalSources, sweepInfraReachability, sweepPlatformHealth, } from '@cat-factory/server';
+import { GITHUB_RECONCILE_STALE_MS, escalateStaleNotifications, FOUNDATIONAL_SOURCE_STALE_MS, shouldRunReachabilityPass, sweepFoundationalSources, sweepInfraReachability, sweepPlatformHealth, operationalMetrics, } from '@cat-factory/server';
 import { CryptoIdGenerator, SystemClock } from './infrastructure/runtime';
 import { WorkflowsWorkRunner } from './infrastructure/workflows/WorkflowsWorkRunner';
 import { WorkflowsBootstrapRunner } from './infrastructure/workflows/WorkflowsBootstrapRunner';
@@ -30,10 +30,12 @@ import { handleGitHubSyncBatch, handleTrackerSyncBatch, reconcileStaleRepos, } f
 import { sweepExpiredEnvironments } from './infrastructure/environments/sweep';
 import { logger } from './infrastructure/observability/logger';
 import { runPlatformMetricsSweep } from './infrastructure/observability/platformMetrics';
+import { flushOperationalMetricsForIsolate } from './infrastructure/observability/operationalFlush';
+import { SweepTick } from './infrastructure/observability/cronSweep';
 import { defaultJudgeRegistry, defaultStepResolverRegistry, sweepBinaryArtifactRetention, validateRegistrationsOnce, } from '@cat-factory/orchestration';
 import { defaultAgentKindRegistry, defaultInitiativePresetRegistry } from '@cat-factory/agents';
 import { gateRegistryWithBuiltins } from '@cat-factory/gates';
-import { DEFAULT_WORKSPACE_SETTINGS, defaultFoundationalServiceRegistry, defaultPipelineRegistry, defaultTaskTypeRegistry, describeError, } from '@cat-factory/kernel';
+import { DEFAULT_WORKSPACE_SETTINGS, defaultBinaryGeneratorRegistry, defaultFoundationalServiceRegistry, defaultPipelineRegistry, defaultTaskTypeRegistry, describeError, } from '@cat-factory/kernel';
 import { D1WorkspaceRepository } from './infrastructure/repositories/D1WorkspaceRepository';
 import { D1WorkspaceSettingsRepository } from './infrastructure/repositories/D1WorkspaceSettingsRepository';
 import { D1KeyFingerprintStore } from './infrastructure/repositories/D1KeyFingerprintStore';
@@ -87,6 +89,13 @@ export { TaskTypeRegistry, defaultTaskTypeRegistry } from '@cat-factory/kernel';
 // against the estate from its first request and an account/board can still override or suppress
 // any of them. See backend/docs/adr/0031-foundational-services.md.
 export { FoundationalServiceRegistry, defaultFoundationalServiceRegistry, } from '@cat-factory/kernel';
+// Installation-level extension point for GENERATIVE BINARY INTEGRATIONS (the same DI seam once
+// more): a deployment news a `defaultBinaryGeneratorRegistry()`, registers the image / music /
+// video generation APIs it pays for on it by reference, and injects it via the
+// `binaryGeneratorRegistry` override. A pipeline step whose kind carries the `binary-output`
+// trait then SELECTS from them (`stepOptions.binaryOutput.generatorIds`), and the engine briefs
+// the agent on each one's content types, contract and credential variable.
+export { BinaryGeneratorRegistry, defaultBinaryGeneratorRegistry, } from '@cat-factory/kernel';
 // The built-in model-preset ids + the catalog fallback default. A custom Worker entry that builds
 // its own app can seed a different out-of-the-box default with
 // `createApp({ overrides: { defaultModelPresetId: MODEL_PRESET_SEED_IDS.claude } })` (a
@@ -125,6 +134,10 @@ function resolveEntryRegistries(overrides) {
         // capabilities); registered ones are the `builtin` tier of every workspace catalog, and a
         // malformed contract document fails boot rather than a design dispatch.
         foundationalServiceRegistry: overrides.foundationalServiceRegistry ?? defaultFoundationalServiceRegistry(),
+        // Generative binary integrations (empty by default — the platform ships none). Registered
+        // ones are what a binary-generating step may produce with, and a malformed definition or a
+        // cleartext endpoint fails boot rather than a dispatch.
+        binaryGeneratorRegistry: overrides.binaryGeneratorRegistry ?? defaultBinaryGeneratorRegistry(),
     };
 }
 /** The boot/cron key-fingerprint check's logger, tagged so its lines are greppable by cron. */
@@ -179,29 +192,26 @@ const FREQUENT_CRON_PERIOD_MS = 2 * 60_000;
  * windows. The tables exist regardless of whether GitHub/agents are
  * configured, so this runs unconditionally; an unused table reclaims nothing.
  */
-function runDailyRetentionSweeps(env, ctx, clock) {
+function runDailyRetentionSweeps(env, tick, clock) {
     // ADR 0026 D6.1: the Worker has no boot moment, so the O(1) ENCRYPTION_KEY drift check
     // rides the daily cron. It seeds the fingerprint on first run and logs a definitive
     // drift signal on a key change. Independent of (and cheaper than) the retention work.
     if (env.ENCRYPTION_KEY) {
         const encryptionKey = env.ENCRYPTION_KEY;
-        ctx.waitUntil(checkKeyFingerprint({
+        tick.run({ name: 'key-fingerprint', failureMessage: 'key fingerprint check failed' }, checkKeyFingerprint({
             store: new D1KeyFingerprintStore({ db: env.DB }),
             masterKeyBase64: encryptionKey,
             logger: keyFingerprintLogger,
-        }).catch((error) => logger.error('key fingerprint check failed', {
-            cron: 'key-fingerprint',
-            ...describeError(error),
-        })));
+        }));
         // ADR 0026 D6.2: the drift sweep — decrypt every sealed credential and raise/clear ONE
         // `key_drift` card per affected workspace. Rides the same daily cron as the fingerprint.
-        ctx.waitUntil(sweepKeyDriftAndRaise(buildContainer(env), (info) => new WebCryptoSecretCipher({ masterKeyBase64: encryptionKey, info }), keyFingerprintLogger).catch((error) => logger.error('key drift sweep failed', { cron: 'key-drift', ...describeError(error) })));
+        tick.run({ name: 'key-drift', failureMessage: 'key drift sweep failed' }, sweepKeyDriftAndRaise(buildContainer(env), (info) => new WebCryptoSecretCipher({ masterKeyBase64: encryptionKey, info }), keyFingerprintLogger));
     }
     // This branch never calls buildContainer (no request container is built for the
     // sweep), so do the same fail-fast the build does: a clear error beats an opaque
     // NPE deep in a telemetry repo when the binding is unbound.
     const telemetryDb = requireTelemetryDb(env);
-    ctx.waitUntil(sweepRetention({
+    tick.run({ name: 'retention', failureMessage: 'retention sweep failed' }, sweepRetention({
         tokenUsageRepository: new D1TokenUsageRepository({ db: env.DB }),
         rateLimitRepository: new D1RateLimitRepository({
             db: env.DB,
@@ -229,16 +239,25 @@ function runDailyRetentionSweeps(env, ctx, clock) {
             : {}),
         clock,
         policy: loadConfig(env).retention,
-    })
-        .then((result) => logger.info('retention sweep complete', { cron: 'retention', ...result }))
-        .catch((error) => logger.error('retention sweep failed', { cron: 'retention', ...describeError(error) })));
+        logger,
+    }).then(({ failedTables, ...reclaimed }) => {
+        logger.info('retention sweep complete', { cron: 'retention', ...reclaimed });
+        // Each failure was already warned at its table; this names the SET, so a table that
+        // has been failing every night is one greppable line rather than a pattern to notice.
+        if (failedTables.length > 0) {
+            logger.warn('retention sweep could not prune every table', {
+                cron: 'retention',
+                failedTables,
+            });
+        }
+    }));
     // Binary-artifact retention (UI screenshots + reference designs) is per-workspace, and
     // the blob backend is per-account (R2 or S3), so it resolves each workspace's store. Run
     // whenever storage could be configured: the R2 default (ARTIFACT_BUCKET) OR a per-account
     // S3 backend (which needs the encryption key to unseal its credentials).
     if (env.ARTIFACT_BUCKET || env.ENCRYPTION_KEY) {
         const settingsRepo = new D1WorkspaceSettingsRepository({ db: env.DB });
-        ctx.waitUntil(sweepBinaryArtifactRetention({
+        tick.run({ name: 'artifact-retention', failureMessage: 'artifact retention sweep failed' }, sweepBinaryArtifactRetention({
             resolveStore: buildCloudflareArtifactStoreResolver(env, env.DB, clock, new CryptoIdGenerator()),
             listWorkspaceIds: () => new D1WorkspaceRepository({ db: env.DB })
                 .listVisible(null)
@@ -247,14 +266,9 @@ function runDailyRetentionSweeps(env, ctx, clock) {
                 .get(workspaceId)
                 .then((s) => s?.artifactRetentionDays ?? DEFAULT_WORKSPACE_SETTINGS.artifactRetentionDays),
             now: clock.now(),
-        })
-            .then((removed) => logger.info('artifact retention sweep complete', {
+        }).then((removed) => logger.info('artifact retention sweep complete', {
             cron: 'retention',
             binaryArtifacts: removed,
-        }))
-            .catch((error) => logger.error('artifact retention sweep failed', {
-            cron: 'retention',
-            ...describeError(error),
         })));
     }
 }
@@ -262,7 +276,7 @@ function runDailyRetentionSweeps(env, ctx, clock) {
  * Re-drive any agent run — execution OR bootstrap — whose Workflows instance
  * died. One sweep over the unified agent_runs table dispatches by kind.
  */
-function redriveStuckAgentRuns(env, ctx, clock) {
+function redriveStuckAgentRuns(env, tick, clock) {
     if (env.EXECUTION_WORKFLOW || env.BOOTSTRAP_WORKFLOW || env.ENV_CONFIG_REPAIR_WORKFLOW) {
         const execLookup = env.EXECUTION_WORKFLOW ? new WorkflowsLookup(env.EXECUTION_WORKFLOW) : null;
         const bootLookup = env.BOOTSTRAP_WORKFLOW ? new WorkflowsLookup(env.BOOTSTRAP_WORKFLOW) : null;
@@ -278,7 +292,7 @@ function redriveStuckAgentRuns(env, ctx, clock) {
         const repairRunner = env.ENV_CONFIG_REPAIR_WORKFLOW
             ? new WorkflowsEnvConfigRepairRunner(env.ENV_CONFIG_REPAIR_WORKFLOW)
             : null;
-        ctx.waitUntil(sweepStuckRuns({
+        tick.run({ name: 'stale-run', failureMessage: 'run sweep failed' }, sweepStuckRuns({
             agentRunRepository: new D1AgentRunRepository({ db: env.DB }),
             instanceState: (ref) => {
                 const lookup = ref.kind === 'bootstrap'
@@ -336,15 +350,16 @@ function redriveStuckAgentRuns(env, ctx, clock) {
             leaseMs: SWEEP_LEASE_MS,
             hardStallMs: SWEEP_HARD_STALL_MS,
             orphanedSince: runSweepOrphanedSince,
+            metrics: operationalMetrics,
+            logger,
         })
             // Surface what the sweep did — the key signal for "are runs getting stuck?"
             // Only log when it actually acted.
             .then(({ redriven, finalized, stalled }) => {
             if (redriven > 0 || finalized > 0 || stalled > 0) {
-                logger.warn('swept stuck runs', { cron: 'run-sweeper', redriven, finalized, stalled });
+                logger.warn('swept stuck runs', { cron: 'stale-run', redriven, finalized, stalled });
             }
-        })
-            .catch((error) => logger.error('run sweep failed', { cron: 'run-sweeper', ...describeError(error) })));
+        }));
     }
 }
 /**
@@ -352,11 +367,11 @@ function redriveStuckAgentRuns(env, ctx, clock) {
  * sweep never sees them — this sibling sweep re-drives a run whose Workflows instance
  * was lost and finalizes (cleanup + failed) one whose instance is terminal.
  */
-function redriveStuckEnvTests(env, ctx, clock) {
+function redriveStuckEnvTests(env, tick, clock) {
     if (env.ENV_TEST_WORKFLOW) {
         const envTestLookup = new WorkflowsLookup(env.ENV_TEST_WORKFLOW);
         const envTestRunner = new WorkflowsEnvironmentTestRunner(env.ENV_TEST_WORKFLOW);
-        ctx.waitUntil(sweepStuckEnvTests({
+        tick.run({ name: 'env-test-sweeper', failureMessage: 'env-test sweep failed' }, sweepStuckEnvTests({
             repository: new D1EnvironmentTestRunRepository({ db: env.DB }),
             instanceState: (runId) => envTestLookup.instanceState(runId),
             redrive: (workspaceId, runId) => envTestRunner.startRun(workspaceId, runId),
@@ -366,8 +381,7 @@ function redriveStuckEnvTests(env, ctx, clock) {
             },
             clock,
             leaseMs: SWEEP_LEASE_MS,
-        })
-            .then(({ redriven, finalized }) => {
+        }).then(({ redriven, finalized }) => {
             if (redriven > 0 || finalized > 0) {
                 logger.warn('swept stuck env-test runs', {
                     cron: 'env-test-sweeper',
@@ -375,11 +389,7 @@ function redriveStuckEnvTests(env, ctx, clock) {
                     finalized,
                 });
             }
-        })
-            .catch((error) => logger.error('env-test sweep failed', {
-            cron: 'env-test-sweeper',
-            ...describeError(error),
-        })));
+        }));
     }
 }
 /**
@@ -388,18 +398,12 @@ function redriveStuckEnvTests(env, ctx, clock) {
  * bounds standing exposure and a finished run's rows are deleted at completion, but
  * this backstop also clears any that outlived their TTL. The table always exists.
  */
-function reclaimExpiredActivations(env, ctx, clock) {
+function reclaimExpiredActivations(env, tick, clock) {
     const activations = new D1SubscriptionActivationRepository({ db: env.DB });
-    ctx.waitUntil(activations
-        .deleteExpired(clock.now())
-        .then((reclaimed) => {
+    tick.run({ name: 'activation-sweeper', failureMessage: 'activation sweep failed' }, activations.deleteExpired(clock.now()).then((reclaimed) => {
         if (reclaimed > 0)
             logger.info('reclaimed activations', { cron: 'activation-sweeper', reclaimed });
-    })
-        .catch((error) => logger.error('activation sweep failed', {
-        cron: 'activation-sweeper',
-        ...describeError(error),
-    })));
+    }));
 }
 /**
  * Instance-level container reaper: kill any per-run container that outlived its
@@ -410,20 +414,14 @@ function reclaimExpiredActivations(env, ctx, clock) {
  * EXEC_CONTAINER binding (no Cloudflare API token). With normal runs now self-
  * reclaiming, a reaped container is a genuine leak — the registry logs each loudly.
  */
-function reapStaleContainers(env, ctx, clock) {
+function reapStaleContainers(env, tick, clock) {
     if (env.EXEC_CONTAINER) {
         const reaper = new ContainerInstanceRegistry(env.EXEC_CONTAINER, new D1LiveContainerRepository({ db: env.DB }), clock);
         const maxAgeMs = loadConfig(env).execution.containerMaxAgeMs;
-        ctx.waitUntil(reaper
-            .reapStaleBefore(clock.now() - maxAgeMs)
-            .then(({ reaped }) => {
+        tick.run({ name: 'container-reaper', failureMessage: 'container reap failed' }, reaper.reapStaleBefore(clock.now() - maxAgeMs).then(({ reaped }) => {
             if (reaped > 0)
                 logger.warn('reaped leaked containers', { cron: 'container-reaper', reaped });
-        })
-            .catch((error) => logger.error('container reap failed', {
-            cron: 'container-reaper',
-            ...describeError(error),
-        })));
+        }));
     }
 }
 /**
@@ -431,45 +429,30 @@ function reapStaleContainers(env, ctx, clock) {
  * the initiative loop, Kaizen gradings, GitHub reconcile, environment teardown, and the
  * platform observability/health sweeps. Each is an independent, no-op-when-unwired sweep.
  */
-function runPeriodicBackstops(env, ctx, clock, scheduledTime) {
+function runPeriodicBackstops(env, tick, clock, scheduledTime) {
     // Escalate long-waiting notifications yellow → red (every 2 min). Runs no longer
     // time out waiting for a human, so the escalating notification — past each
     // workspace's `waitingEscalationMinutes` threshold — is the overdue-human signal.
-    ctx.waitUntil(escalateStaleNotifications(buildContainer(env), clock.now())
-        .then((escalated) => {
+    tick.run({ name: 'notification-escalation', failureMessage: 'notification escalation failed' }, escalateStaleNotifications(buildContainer(env), clock.now()).then((escalated) => {
         if (escalated > 0)
             logger.info('escalated notifications', { cron: 'notification-escalation', escalated });
-    })
-        .catch((error) => logger.error('notification escalation failed', {
-        cron: 'notification-escalation',
-        ...describeError(error),
-    })));
+    }));
     // Fire any due recurring pipelines (every 2 min; the actual cadence is hours).
     // Each due schedule starts its pipeline against its reused block, skipping any
     // whose block already has an active run. No-op when the feature isn't wired.
-    ctx.waitUntil(Promise.resolve(buildContainer(env).recurring?.service.runDue(clock.now()))
-        .then((result) => {
+    tick.run({ name: 'recurring-pipelines', failureMessage: 'recurring-pipeline sweep failed' }, Promise.resolve(buildContainer(env).recurring?.service.runDue(clock.now())).then((result) => {
         if (result && (result.fired > 0 || result.skipped > 0)) {
             logger.info('fired recurring pipelines', { cron: 'recurring-pipelines', ...result });
         }
-    })
-        .catch((error) => logger.error('recurring-pipeline sweep failed', {
-        cron: 'recurring-pipelines',
-        ...describeError(error),
-    })));
+    }));
     // Tick the initiative execution loop (every 2 min): reconcile each executing initiative's
     // spawned tasks and spawn the next wave up to its concurrency cap. Terminal child runs poke
     // the loop directly, so this is the backstop cadence. No-op when initiatives aren't wired.
-    ctx.waitUntil(Promise.resolve(buildContainer(env).initiatives?.loop.runDue(clock.now()))
-        .then((result) => {
+    tick.run({ name: 'initiative-loop', failureMessage: 'initiative-loop sweep failed' }, Promise.resolve(buildContainer(env).initiatives?.loop.runDue(clock.now())).then((result) => {
         if (result && (result.spawned > 0 || result.completed > 0)) {
             logger.info('ticked initiative loop', { cron: 'initiative-loop', ...result });
         }
-    })
-        .catch((error) => logger.error('initiative-loop sweep failed', {
-        cron: 'initiative-loop',
-        ...describeError(error),
-    })));
+    }));
     // Run any pending Kaizen gradings (every 2 min): the engine only inserts `scheduled`
     // rows at run completion, so this background pass does the actual LLM grading (and
     // re-drives `running` rows orphaned by a crashed sweep). Bounded per pass to stay
@@ -477,29 +460,26 @@ function runPeriodicBackstops(env, ctx, clock, scheduledTime) {
     // model is resolved per-workspace (Model Configuration), so this is workspace-wide.
     if (!kaizenSweeping) {
         kaizenSweeping = true;
-        ctx.waitUntil(Promise.resolve(buildContainer(env).kaizen?.service.runPending(clock.now() - KAIZEN_STALE_MS, KAIZEN_SWEEP_BATCH))
+        tick.run({ name: 'kaizen-sweeper', failureMessage: 'kaizen sweep failed' }, Promise.resolve(buildContainer(env).kaizen?.service.runPending(clock.now() - KAIZEN_STALE_MS, KAIZEN_SWEEP_BATCH))
             .then((processed) => {
             if (processed && processed > 0)
                 logger.info('ran pending kaizen gradings', { cron: 'kaizen-sweeper', processed });
         })
-            .catch((error) => logger.error('kaizen sweep failed', { cron: 'kaizen-sweeper', ...describeError(error) }))
+            // Released on BOTH paths, and it has to stay inside the promise handed to `tick.run`:
+            // the in-flight latch is what stops a second tick piling onto a slow grading pass, so a
+            // failed pass that never cleared it would wedge Kaizen until the isolate was recycled.
             .finally(() => {
             kaizenSweeping = false;
         }));
     }
     // Reconcile GitHub projections that may have missed a webhook (no-op unless
     // the integration is configured).
-    ctx.waitUntil(reconcileStaleRepos(env, clock, GITHUB_RECONCILE_STALE_MS)
-        .then((scheduled) => {
+    tick.run({ name: 'github-reconcile', failureMessage: 'github reconcile failed' }, reconcileStaleRepos(env, clock, GITHUB_RECONCILE_STALE_MS).then((scheduled) => {
         if (scheduled > 0)
             // `sweep:` (not `cron:`) so the summary shares a field with the pass's
             // per-repo lines, which the shared reconcile core emits on both facades.
             logger.info('scheduled repo resyncs', { sweep: 'github-reconcile', scheduled });
-    })
-        .catch((error) => logger.error('github reconcile failed', {
-        sweep: 'github-reconcile',
-        ...describeError(error),
-    })));
+    }));
     // Refresh repo-linked FOUNDATIONAL-SERVICE sources whose last sync has aged out, so a merged
     // OpenAPI change reaches the catalog without anyone opening the management surface. Runs on the
     // same hourly cadence as its staleness window through the stateless window gate — a cron isolate
@@ -507,14 +487,11 @@ function runPeriodicBackstops(env, ctx, clock, scheduledTime) {
     // by 30 for a source that can only go stale once an hour. No-op unless the catalog + GitHub are
     // both wired (nothing is linked to refresh).
     if (shouldRunReachabilityPass(scheduledTime, FREQUENT_CRON_PERIOD_MS, FOUNDATIONAL_SOURCE_STALE_MS)) {
-        ctx.waitUntil(sweepFoundationalSources(buildContainer(env).foundationalServices, logger).catch((error) => logger.error('foundational-source sweep failed', {
-            sweep: 'foundational-sources',
-            ...describeError(error),
-        })));
+        tick.run({ name: 'foundational-sources', failureMessage: 'foundational-source sweep failed' }, sweepFoundationalSources(buildContainer(env).foundationalServices, logger));
     }
     // Tear down ephemeral environments whose TTL has elapsed (no-op unless the
     // environment integration is configured).
-    ctx.waitUntil(sweepExpiredEnvironments(env, clock).catch((error) => logger.error('environment sweep failed', { cron: 'env-sweeper', ...describeError(error) })));
+    tick.run({ name: 'env-sweeper', failureMessage: 'environment sweep failed' }, sweepExpiredEnvironments(env, clock));
     // Push deployment-level (platform-operator) observability aggregates to the OTLP
     // endpoint as OpenTelemetry gauge metrics, once per cron tick. Opt-in on top of the base
     // OTel exporter (OTEL_PLATFORM_METRICS); a no-op otherwise. Per account, enumerated from
@@ -531,7 +508,7 @@ function runPeriodicBackstops(env, ctx, clock, scheduledTime) {
             logger,
         });
         if (sweep)
-            ctx.waitUntil(sweep);
+            tick.run({ name: 'platform-metrics', failureMessage: 'platform metrics sweep failed' }, sweep);
     }
     // Probe each workspace's CONFIGURED infrastructure connections and report a dead one as
     // `unreachable` — raising/clearing an `infra_unreachable` card and pushing an `infraSetup` event
@@ -544,55 +521,67 @@ function runPeriodicBackstops(env, ctx, clock, scheduledTime) {
     const reachability = loadConfig(env).infraReachability;
     if (reachability.enabled &&
         shouldRunReachabilityPass(scheduledTime, FREQUENT_CRON_PERIOD_MS, reachability.intervalMs)) {
-        ctx.waitUntil(sweepInfraReachability(buildContainer(env), logger)
-            .then(({ raised, cleared }) => {
+        tick.run({ name: 'infra-reachability', failureMessage: 'infra reachability sweep failed' }, sweepInfraReachability(buildContainer(env), logger).then(({ raised, cleared }) => {
             if (raised > 0 || cleared > 0)
-                logger.info('infra reachability sweep', {
-                    cron: 'infra-reachability',
-                    raised,
-                    cleared,
-                });
-        })
-            .catch((error) => logger.error('infra reachability sweep failed', {
-            cron: 'infra-reachability',
-            ...describeError(error),
-        })));
+                logger.info('infra reachability sweep', { cron: 'infra-reachability', raised, cleared });
+        }));
     }
     // Raise/clear `platform_health` notifications when the deployment's OWN run health crosses
     // an operator threshold, per account (the push counterpart to the operator dashboard read).
     // Opt-in (`PLATFORM_ALERTS`); the container (hence the platform-observability read) is built
     // only when opted in so a deployment that hasn't opted in pays nothing.
     if (loadConfig(env).platformAlerts.enabled) {
-        ctx.waitUntil(sweepPlatformHealth(buildContainer(env), logger)
-            .then(({ raised, cleared }) => {
+        tick.run({ name: 'platform-health', failureMessage: 'platform health sweep failed' }, sweepPlatformHealth(buildContainer(env), logger).then(({ raised, cleared }) => {
             if (raised > 0 || cleared > 0)
                 logger.info('platform health sweep', { cron: 'platform-health', raised, cleared });
-        })
-            .catch((error) => logger.error('platform health sweep failed', {
-            cron: 'platform-health',
-            ...describeError(error),
-        })));
+        }));
     }
 }
 /** The cron sweeper. Module-level (not closed over the app) so {@link createWorker} stays thin. */
 async function handleScheduled(controller, env, ctx) {
     setLogLevel(parseLogLevel(env.LOG_LEVEL));
     const clock = new SystemClock();
+    const tick = new SweepTick(ctx);
     // Daily pass: prune the unbounded ledgers/projections to their retention windows.
     if (controller.cron === RETENTION_CRON) {
-        runDailyRetentionSweeps(env, ctx, clock);
-        return;
+        runDailyRetentionSweeps(env, tick, clock);
+    }
+    else {
+        // Frequent pass (every 2 min): time-sensitive backstops.
+        redriveStuckAgentRuns(env, tick, clock);
+        redriveStuckEnvTests(env, tick, clock);
+        reclaimExpiredActivations(env, tick, clock);
+        reapStaleContainers(env, tick, clock);
+        runPeriodicBackstops(env, tick, clock, controller.scheduledTime);
     }
-    // Frequent pass (every 2 min): time-sensitive backstops.
-    redriveStuckAgentRuns(env, ctx, clock);
-    redriveStuckEnvTests(env, ctx, clock);
-    reclaimExpiredActivations(env, ctx, clock);
-    reapStaleContainers(env, ctx, clock);
-    runPeriodicBackstops(env, ctx, clock, controller.scheduledTime);
+    // This tick's own counters, flushed once its passes have SETTLED. The ordering is the whole
+    // point: the collector is per ISOLATE, so a counter a cron pass records can only be exported
+    // by a flush that runs after it. Draining while the passes were still in flight meant a cron
+    // tick drained an empty collector and left its own counters waiting for a next tick in the
+    // same isolate — which for the daily retention cron is a tick that never comes.
+    flushOperationalMetricsAfter(tick.settled(), env, ctx, clock);
+}
+/**
+ * Flush THIS ISOLATE's operational counters once `work` settles, as a post-response
+ * `waitUntil`. Every entry point calls it, because a Worker's collector is per-isolate and an
+ * isolate is discarded without warning — see `observability/operationalFlush.ts` for why that
+ * makes per-invocation flushing the correct shape rather than a wasteful one.
+ *
+ * `allSettled` rather than a catch: a FAILED invocation is exactly the one whose counters
+ * matter, and its rejection is the caller's to propagate, not this bookkeeping's to observe.
+ */
+function flushOperationalMetricsAfter(work, env, ctx, clock) {
+    ctx.waitUntil(Promise.allSettled([work]).then(() => flushOperationalMetricsForIsolate(loadConfig(env).otel, clock.now()) ?? undefined));
 }
 /** The queue consumer multiplexing the three queues. Module-level, like {@link handleScheduled}. */
-async function handleQueue(batch, env) {
+async function handleQueue(batch, env, ctx) {
     setLogLevel(parseLogLevel(env.LOG_LEVEL));
+    const work = routeQueueBatch(batch, env);
+    flushOperationalMetricsAfter(work, env, ctx, new SystemClock());
+    await work;
+}
+/** The routing half of {@link handleQueue}, split out so the flush can bracket the whole batch. */
+async function routeQueueBatch(batch, env) {
     // Route by source queue — the single handler serves all three queues.
     if (batch.queue === GITHUB_SYNC_QUEUE_NAME) {
         await handleGitHubSyncBatch(batch, env);
@@ -673,9 +662,13 @@ export function createWorker(options = {}) {
                 pipelineRegistry: registries.pipelineRegistry,
                 taskTypeRegistry: registries.taskTypeRegistry,
                 foundationalServiceRegistry: registries.foundationalServiceRegistry,
+                binaryGeneratorRegistry: registries.binaryGeneratorRegistry,
                 onWarn: (problem) => logger.warn(problem.message, { code: problem.code }),
             });
-            return app.fetch(request, env, ctx);
+            const response = Promise.resolve(app.fetch(request, env, ctx));
+            // Flush whatever THIS isolate counted while serving the request, after the response.
+            flushOperationalMetricsAfter(response, env, ctx, new SystemClock());
+            return response;
         },
         scheduled: handleScheduled,
         queue: handleQueue,