@effect-agent/platform-cloudflare 0.0.1-beta.5 → 0.1.0-beta.6

package/dist/index.d.mts

@@ -2,7 +2,9 @@ import { Context, Effect, Layer, Option, Schema } from "effect";
 import { AbortCommand, AbortIntent, AdmissionConflict, AgentBindingResolver, AppendConflict, ApprovalConflict, ApprovalDecisionCommand, ApprovalDecisionIntent, CanonicalRecordEnvelope, CanonicalSequence, ConversationNotMaterialized, ConversationStore, ConversationStoreError, DefinitionDigests, DigestError, DurableAgentRuntime, DurableBindingFailure, DurableRuntimeConfig, DurableRuntimeFailpointError, DurableRuntimeFailpointHandler, DurableSubmitAgent, DurableSubmitOptions, DurableWorkerFailure, FenceRejected, IntegrityReport, JoinedToHost, LedgerError, ObligationReport, ObligationThresholds, OperationDenied, OwnershipLost, ProducerId, Receipt, RecoveryExplanation, RecoveryReport, ResolvedBinding, RetryCommand, RetryRefused, RunJournalError, Settlement, SettlementConflict, SubmissionLedger, ToolReconciler, UnknownResolutionCommand, UnknownResolutionConflict, UnknownResolutionIntent, WakeScheduler } from "@effect-agent/session";
 import { ConversationPortTransport, DoStorageFailpointHandler, DoStorageInitializationError } from "@effect-agent/storage-cloudflare";
 import { AgentInputError, ConversationId } from "@effect-agent/core";
-import { DurableObject } from "cloudflare:workers";
+import { DurableObjectState as DurableObjectState$1, WorkerEnvironment } from "effect-cf";
+import { CodeExecutor, SandboxImplementation } from "@effect-agent/sandbox";
+import { DurableObject as DurableObject$1, WorkerEntrypoint } from "cloudflare:workers";
 //#region src/bindings.d.ts
 declare const CloudflareBindingError_base: Schema.Class<CloudflareBindingError, Schema.TaggedStruct<"CloudflareBindingError", {
   readonly binding: Schema.String;
@@ -701,6 +703,7 @@ declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorded | Hos
         readonly outcome: "aborted" | "completed" | "failed";
         readonly runId?: string | undefined;
         readonly result?: Schema.Json | undefined;
+        readonly finishReason?: "budget-exhausted" | undefined;
       } | {
         readonly _tag: "SubagentRequested";
         readonly runId: string;
@@ -924,7 +927,8 @@ declare class CloudflareConversationClient extends CloudflareConversationClient_
 //#endregion
 //#region src/conversation-object.d.ts
 /**
- * `makeConversationObjectClass(options)` — the Conversation Durable Object (plan §1.4,
+ * `makeConversationObjectClass(options, observability?)` — the Conversation Durable Object
+ * (plan §1.4,
  * D-P6-1): a factory returning a class that applications export from their Worker entry.
  * One SQLite-backed Object per Conversation is the serialized owner (durability §6); the
  * Object never runs `runResolvedWorker`'s infinite loop — each ingress event or alarm runs
@@ -1397,21 +1401,38 @@ declare const encodeAdminResponse: (input: AdminFailed | ExplainedRecovery | Obl
 } | {
   readonly _tag: "AdminFailed";
   readonly failure: {
-    readonly _tag: "HostProtocolError";
+    readonly _tag: "OperationDenied";
+    readonly operation: "explain" | "observe" | "resolveApproval" | "resolveUnknown" | "retry" | "scanObligations" | "verify" | "wake";
+    readonly reason: string;
+    readonly conversationId?: string | undefined;
+    readonly submissionId?: string | undefined;
+  } | {
+    readonly _tag: "RetryRefused";
+    readonly submissionId: string;
+    readonly refusal: "await-approval-decision" | "await-unknown-resolution" | "settled";
+    readonly decisionTag: string;
     readonly message: string;
+  } | {
+    readonly _tag: "LedgerError";
+    readonly operation: string;
+    readonly message: string;
+    readonly cause?: Schema.Json | undefined;
+  } | {
+    readonly _tag: "RunJournalError";
+    readonly message: string;
+    readonly cause?: Schema.Json | undefined;
   } | {
     readonly _tag: "DigestError";
     readonly message: string;
     readonly cause?: Schema.Json | undefined;
+  } | {
+    readonly _tag: "OwnershipLost";
+    readonly submissionId: string;
+    readonly actualEpoch: number;
   } | {
     readonly _tag: "SettlementConflict";
     readonly submissionId: string;
     readonly existingOutcome: "aborted" | "completed" | "failed";
-  } | {
-    readonly _tag: "LedgerError";
-    readonly operation: string;
-    readonly message: string;
-    readonly cause?: Schema.Json | undefined;
   } | {
     readonly _tag: "ConversationStoreError";
     readonly operation: string;
@@ -1441,30 +1462,13 @@ declare const encodeAdminResponse: (input: AdminFailed | ExplainedRecovery | Obl
     readonly message: string;
     readonly cause?: Schema.Json | undefined;
   } | {
-    readonly _tag: "OperationDenied";
-    readonly operation: "explain" | "observe" | "resolveApproval" | "resolveUnknown" | "retry" | "scanObligations" | "verify" | "wake";
-    readonly reason: string;
-    readonly conversationId?: string | undefined;
-    readonly submissionId?: string | undefined;
-  } | {
-    readonly _tag: "RetryRefused";
-    readonly submissionId: string;
-    readonly refusal: "await-approval-decision" | "await-unknown-resolution" | "settled";
-    readonly decisionTag: string;
-    readonly message: string;
-  } | {
-    readonly _tag: "RunJournalError";
+    readonly _tag: "HostProtocolError";
     readonly message: string;
-    readonly cause?: Schema.Json | undefined;
-  } | {
-    readonly _tag: "OwnershipLost";
-    readonly submissionId: string;
-    readonly actualEpoch: number;
   };
 }, Schema.SchemaError, never>;
 declare const decodeAdminResponse: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<AdminFailed | ExplainedRecovery | ObligationsScanned | RetryExecuted | VerifiedIntegrity, Schema.SchemaError, never>;
 /** The public endpoint surface of one Conversation Object instance. */
-interface ConversationObjectInstance extends DurableObject {
+interface ConversationObjectInstance extends DurableObject$1 {
   submitEncoded(encoded: unknown): Promise<unknown>;
   awaitSettlementEncoded(encoded: unknown): Promise<unknown>;
   observePage(encoded: unknown): Promise<unknown>;
@@ -1477,19 +1481,63 @@ interface ConversationObjectInstance extends DurableObject {
   obligationsEncoded(encoded: unknown): Promise<unknown>;
   portCall(encoded: unknown): Promise<unknown>;
   wake(): Promise<void>;
-  alarm(): Promise<void>;
+  alarm(alarmInfo?: AlarmInvocationInfo): Promise<void> | void;
 }
 /** The constructor shape workerd instantiates for each Conversation Object. */
 interface ConversationObjectClass {
   new (ctx: DurableObjectState, env: Cloudflare.Env): ConversationObjectInstance;
 }
 /**
- * Build the application's Conversation Object class (export it from the
- * Worker entry). The explicit return type is what makes declaration emit
- * possible: the class body carries a private runtime field, and TS4094
- * rejects inferring an exported anonymous class type around it.
+ * Build the application's Conversation Object class (export it from the Worker entry).
+ * effect-cf owns the cached ManagedRuntime, native RPC methods, event scopes, and post-handler
+ * OTLP flush scheduling for RPC and alarm events. The optional outer Layer is built per native
+ * event, so a host can install Tracer/Logger/Metric services and `OtlpExporter.Flusher` without
+ * Effect Agent owning exporter lifecycle machinery.
+ */
+declare const makeConversationObjectClass: <EventLayerError = never, EventServices = never>(options: ConversationObjectOptions, observability?: Layer.Layer<EventServices, EventLayerError, DurableObjectContext | ConversationObjectNamespace | DurableObjectState$1.DurableObjectState | WorkerEnvironment>) => ConversationObjectClass;
+//#endregion
+//#region src/code-mode-executor.d.ts
+/**
+ * The Cloudflare Dynamic Worker `CodeExecutor` adapter (C4 of ADR-0017;
+ * DEPLOY-011). Each pass loads one fresh Worker through the Worker Loader
+ * with `globalOutbound: null`, so generated code has no ambient network,
+ * bindings, or secrets; its only authority is the pass-scoped host stub that
+ * routes back to `CodeModeHostEntrypoint` and, from there, into the pass's
+ * `CodeExecutionHost` service. Platform CPU limits stop synchronous runaway
+ * programs; the executor-owned wall-clock deadline interrupts asynchronously
+ * suspended passes. Deployment class `E` only: the adapter records no
+ * persistent state and a later pass may run in a completely different
+ * isolate.
+ */
+declare const dynamicWorkerImplementation: SandboxImplementation;
+/** The narrow host stub the dynamic worker receives (Workers RPC). */
+interface CodeModeHostStub {
+  readonly call: (passId: string, hostCall: unknown) => Promise<unknown>;
+}
+/**
+ * The host-side RPC target for dynamic workers. The application exposes it
+ * from its Worker entry (`export { CodeModeHostEntrypoint }`) and hands the
+ * adapter a same-instance stub — `ctx.exports.CodeModeHostEntrypoint()` in
+ * production (a self service binding may reach a different instance and must
+ * not be used there); tests bind it through Miniflare's `kCurrentWorker`.
  */
-declare const makeConversationObjectClass: (options: ConversationObjectOptions) => ConversationObjectClass;
+declare class CodeModeHostEntrypoint extends WorkerEntrypoint {
+  call(passId: unknown, hostCall: unknown): Promise<unknown>;
+}
+interface DynamicWorkerCodeExecutorOptions {
+  /** The `worker_loader` binding. */
+  readonly loader: WorkerLoader;
+  /**
+   * A SAME-INSTANCE stub of `CodeModeHostEntrypoint`. In production create it
+   * with `ctx.exports.CodeModeHostEntrypoint()`; a cross-instance stub would
+   * dispatch host calls into an isolate without this pass's registry entry.
+   */
+  readonly hostStub: CodeModeHostStub;
+  /** Compatibility date for dynamic workers; defaults to `2025-05-01`. */
+  readonly compatibilityDate?: string | undefined;
+}
+/** Layer building the Dynamic Worker `CodeExecutor` from resolved bindings. */
+declare const dynamicWorkerCodeExecutorLayer: (options: DynamicWorkerCodeExecutorOptions) => Layer.Layer<CodeExecutor>;
 //#endregion
-export { AbortRecorded, AdminExplainRequest, AdminFailed, AdminFailure, AdminResponse, AdminVerifyRequest, AdmissionLimitExceeded, ApprovalRecorded, CLOUDFLARE_DATABASE_CAP_BYTES, CLOUDFLARE_RUNTIME_DEFAULTS, ClientAbortFailure, ClientApprovalFailure, ClientAwaitFailure, ClientObserveFailure, ClientSubmitFailure, ClientUnknownFailure, CloudflareAdmissionLimitsValue, CloudflareBindingError, CloudflareBindingSource, CloudflareBindingSourceContext, CloudflareConversationClient, CloudflareDurableRuntime, CloudflareDurableRuntimeConfig, CloudflareDurableRuntimeConfigValue, CloudflareDurableRuntimeInitializationError, CloudflareDurableRuntimeOptions, CloudflareDurableRuntimeServices, CloudflarePlatformConfigError, ConversationClientError, ConversationMaintenance, ConversationObjectClass, ConversationObjectIdentity, ConversationObjectInstance, ConversationObjectNamespace, ConversationObjectOptions, ConversationObjectPorts, ConversationObjectRpc, DEFAULT_MAX_DATABASE_BYTES, DurableAlarmError, DurableAlarmService, DurableObjectContext, ExplainedRecovery, HostFailed, HostFailure, HostProtocolError, HostResponse, MaintenancePassFailure, MaintenancePassReport, ObligationsScanned, ObservePageRequest, ObservedPage, RetryExecuted, SettlementReached, SubmitRequest, SubmitSucceeded, UnknownResolutionRecorded, VerifiedIntegrity, boundHostDiagnostic, cloudflareWakeSchedulerLayer, conversationNamespaceFromEnv, conversationNamespaceLayer, conversationPortTransportLayer, decodeAbortCommand, decodeAdminExplainRequest, decodeAdminResponse, decodeAdminVerifyRequest, decodeApprovalDecisionCommand, decodeHostResponse, decodeObligationThresholds, decodeObservePageRequest, decodeReceipt, decodeRetryCommand, decodeSubmitRequest, decodeUnknownResolutionCommand, encodeAbortCommand, encodeAdminResponse, encodeApprovalDecisionCommand, encodeHostResponse, encodeObservePageRequest, encodeReceipt, encodeSubmitRequest, encodeUnknownResolutionCommand, makeConversationObjectClass };
+export { AbortRecorded, AdminExplainRequest, AdminFailed, AdminFailure, AdminResponse, AdminVerifyRequest, AdmissionLimitExceeded, ApprovalRecorded, CLOUDFLARE_DATABASE_CAP_BYTES, CLOUDFLARE_RUNTIME_DEFAULTS, ClientAbortFailure, ClientApprovalFailure, ClientAwaitFailure, ClientObserveFailure, ClientSubmitFailure, ClientUnknownFailure, CloudflareAdmissionLimitsValue, CloudflareBindingError, CloudflareBindingSource, CloudflareBindingSourceContext, CloudflareConversationClient, CloudflareDurableRuntime, CloudflareDurableRuntimeConfig, CloudflareDurableRuntimeConfigValue, CloudflareDurableRuntimeInitializationError, CloudflareDurableRuntimeOptions, CloudflareDurableRuntimeServices, CloudflarePlatformConfigError, CodeModeHostEntrypoint, CodeModeHostStub, ConversationClientError, ConversationMaintenance, ConversationObjectClass, ConversationObjectIdentity, ConversationObjectInstance, ConversationObjectNamespace, ConversationObjectOptions, ConversationObjectPorts, ConversationObjectRpc, DEFAULT_MAX_DATABASE_BYTES, DurableAlarmError, DurableAlarmService, DurableObjectContext, DynamicWorkerCodeExecutorOptions, ExplainedRecovery, HostFailed, HostFailure, HostProtocolError, HostResponse, MaintenancePassFailure, MaintenancePassReport, ObligationsScanned, ObservePageRequest, ObservedPage, RetryExecuted, SettlementReached, SubmitRequest, SubmitSucceeded, UnknownResolutionRecorded, VerifiedIntegrity, boundHostDiagnostic, cloudflareWakeSchedulerLayer, conversationNamespaceFromEnv, conversationNamespaceLayer, conversationPortTransportLayer, decodeAbortCommand, decodeAdminExplainRequest, decodeAdminResponse, decodeAdminVerifyRequest, decodeApprovalDecisionCommand, decodeHostResponse, decodeObligationThresholds, decodeObservePageRequest, decodeReceipt, decodeRetryCommand, decodeSubmitRequest, decodeUnknownResolutionCommand, dynamicWorkerCodeExecutorLayer, dynamicWorkerImplementation, encodeAbortCommand, encodeAdminResponse, encodeApprovalDecisionCommand, encodeHostResponse, encodeObservePageRequest, encodeReceipt, encodeSubmitRequest, encodeUnknownResolutionCommand, makeConversationObjectClass };
 //# sourceMappingURL=index.d.mts.map