@effect-agent/platform-cloudflare 0.0.1-beta.6 → 0.1.0-beta.100

package/dist/index.d.mts

@@ -1,1580 +1,13 @@
-import { Context, Effect, Layer, Option, Schema } from "effect";
-import { AbortCommand, AbortIntent, AdmissionConflict, AgentBindingResolver, AppendConflict, ApprovalConflict, ApprovalDecisionCommand, ApprovalDecisionIntent, CanonicalRecordEnvelope, CanonicalSequence, ConversationNotMaterialized, ConversationStore, ConversationStoreError, DefinitionDigests, DigestError, DurableAgentRuntime, DurableBindingFailure, DurableRuntimeConfig, DurableRuntimeFailpointError, DurableRuntimeFailpointHandler, DurableSubmitAgent, DurableSubmitOptions, DurableWorkerFailure, FenceRejected, IntegrityReport, JoinedToHost, LedgerError, ObligationReport, ObligationThresholds, OperationDenied, OwnershipLost, ProducerId, Receipt, RecoveryExplanation, RecoveryReport, ResolvedBinding, RetryCommand, RetryRefused, RunJournalError, Settlement, SettlementConflict, SubmissionLedger, ToolReconciler, UnknownResolutionCommand, UnknownResolutionConflict, UnknownResolutionIntent, WakeScheduler } from "@effect-agent/session";
-import { ConversationPortTransport, DoStorageFailpointHandler, DoStorageInitializationError } from "@effect-agent/storage-cloudflare";
-import { AgentInputError, ConversationId } from "@effect-agent/core";
-import { DurableObject, WorkerEntrypoint } from "cloudflare:workers";
-import { CodeExecutor, SandboxImplementation } from "@effect-agent/sandbox";
-//#region src/bindings.d.ts
-declare const CloudflareBindingError_base: Schema.Class<CloudflareBindingError, Schema.TaggedStruct<"CloudflareBindingError", {
-  readonly binding: Schema.String;
-  readonly message: Schema.String;
-}>, import("effect/Cause").YieldableError>;
-/**
- * Cloudflare platform bindings as Effect services (DEPLOY-010: "Cloudflare platform bindings
- * are supplied as Effect services/Layers"). Application code never reads `env` or touches a
- * `DurableObjectState` directly — the Conversation Object class constructs these Layers once
- * per incarnation and everything downstream consumes the services.
- */
-/** A Cloudflare platform binding was missing or carried the wrong shape (DEPLOY-003/010). */
-declare class CloudflareBindingError extends CloudflareBindingError_base {}
-/**
- * The RPC surface one Conversation Durable Object exposes to Workers and to sibling
- * Conversation Objects. `makeConversationObjectClass` implements it; the Worker-side client
- * and the cross-Object transport call it through `DurableObjectNamespace` stubs. Every
- * `encoded` value is a Schema-encoded envelope (`client.ts` wire schemas for host entry
- * points, `@effect-agent/storage-cloudflare` port envelopes for `portCall`), so the RPC
- * boundary carries only structured-cloneable JSON.
- */
-interface ConversationObjectRpc extends Rpc.DurableObjectBranded {
-  /** Admission-limits gate + `DurableAgentRuntime.submit`; answers a `SubmitResponse`. */
-  submitEncoded(encoded: unknown): Promise<unknown>;
-  /** Wake-hinted, poll-guaranteed settlement wait; answers an `AwaitSettlementResponse`. */
-  awaitSettlementEncoded(encoded: unknown): Promise<unknown>;
-  /** One bounded page of canonical records; answers an `ObservePageResponse`. */
-  observePage(encoded: unknown): Promise<unknown>;
-  /** Durable abort intent; answers an `AbortResponse`. */
-  abortEncoded(encoded: unknown): Promise<unknown>;
-  /** Durable approval decision (plan §2.6); answers a `ResolveApprovalResponse`. */
-  resolveApprovalEncoded(encoded: unknown): Promise<unknown>;
-  /** Authorized DUR-017 Unknown-Outcome resolution; answers a `ResolveUnknownResponse`. */
-  resolveUnknownEncoded(encoded: unknown): Promise<unknown>;
-  /** Owner-side cross-Object port endpoint (WP2 envelopes, executed on LOCAL facets). */
-  portCall(encoded: unknown): Promise<unknown>;
-  /** Droppable liveness hint from another Object: arms an immediate alarm. */
-  wake(): Promise<void>;
-}
-declare const ConversationObjectNamespace_base: Context.ServiceClass<ConversationObjectNamespace, "@effect-agent/platform-cloudflare/ConversationObjectNamespace", {
-  readonly namespace: DurableObjectNamespace<ConversationObjectRpc>;
-}>;
-/**
- * The `DurableObjectNamespace` binding that addresses Conversation Objects. The Object
- * identity rule is `namespace.idFromName(conversationId)` (plan §1.2): Conversation IDs are
- * globally unique, so the mapping is total and deterministic and no directory service exists.
- */
-declare class ConversationObjectNamespace extends ConversationObjectNamespace_base {
-  static layer(namespace: DurableObjectNamespace<ConversationObjectRpc>): Layer.Layer<ConversationObjectNamespace>;
-}
-/**
- * Narrow one `env` member to a `DurableObjectNamespace`. `env` is an untyped platform value,
- * and a namespace binding is a host object no Schema can decode, so this is the documented
- * narrowest-boundary check (structural probe for the namespace surface the transport uses);
- * a missing or misshaped binding fails typed before any Layer is built.
- */
-declare const conversationNamespaceFromEnv: (env: unknown, binding: string) => Effect.Effect<DurableObjectNamespace<ConversationObjectRpc>, CloudflareBindingError>;
-/** `ConversationObjectNamespace` built from the untyped Worker `env` (fails typed). */
-declare const conversationNamespaceLayer: (env: unknown, binding: string) => Layer.Layer<ConversationObjectNamespace, CloudflareBindingError>;
-declare const DurableObjectContext_base: Context.ServiceClass<DurableObjectContext, "@effect-agent/platform-cloudflare/DurableObjectContext", {
-  readonly ctx: DurableObjectState;
-  readonly env: unknown;
-}>;
-/**
- * The live Durable Object execution context of THIS incarnation. Only Layer construction and
- * the alarm service consume it; important state never lives on it (`ctx.storage` is truth,
- * everything in memory is a cache — deployment spec §11).
- */
-declare class DurableObjectContext extends DurableObjectContext_base {
-  static layer(ctx: DurableObjectState, env: unknown): Layer.Layer<DurableObjectContext>;
-}
-declare const ConversationObjectIdentity_base: Context.ServiceClass<ConversationObjectIdentity, "@effect-agent/platform-cloudflare/ConversationObjectIdentity", {
-  readonly conversationId: ConversationId;
-  readonly producerId: ProducerId;
-}>;
-/**
- * The Conversation identity this Object serializes and the producer identity its Attempts
- * write with (`{producerPrefix}:{conversationId}`, plan §1.4). Derived once per incarnation
- * from `ctx.id.name` — the Object identity rule guarantees the name IS the Conversation ID.
- */
-declare class ConversationObjectIdentity extends ConversationObjectIdentity_base {}
-//#endregion
-//#region src/config.d.ts
-declare const CloudflarePlatformConfigError_base: Schema.Class<CloudflarePlatformConfigError, Schema.TaggedStruct<"CloudflarePlatformConfigError", {
-  readonly message: Schema.String;
-  readonly cause: Schema.optionalKey<Schema.Defect>;
-}>, import("effect/Cause").YieldableError>;
-/** The supplied Cloudflare durable runtime configuration failed validation (DEPLOY-003). */
-declare class CloudflarePlatformConfigError extends CloudflarePlatformConfigError_base {}
-declare const AdmissionLimitExceeded_base: Schema.Class<AdmissionLimitExceeded, Schema.TaggedStruct<"AdmissionLimitExceeded", {
-  readonly limit: Schema.Literals<readonly ["queue-depth", "input-bytes", "database-bytes"]>;
-  readonly actual: Schema.Int;
-  readonly maximum: Schema.Int;
-}>, import("effect/Cause").YieldableError>;
-/**
- * An admission was refused by a host resource limit BEFORE any ledger row existed
- * (deployment spec §8, DEPLOY-007: "Admission has explicit bounded quota and overload
- * behavior... a typed rejection"). This is the DC analogue of `NodeDurableHost`'s
- * `AdmissionClosed` host gate: the port surface stays untouched, the refusal happens in the
- * Conversation Object's submit entry point before `DurableAgentRuntime.submit` runs, and
- * nothing was admitted or written.
- */
-declare class AdmissionLimitExceeded extends AdmissionLimitExceeded_base {
-  get message(): string;
-}
-/** The platform's hard per-Object database cap (10 GB, developers.cloudflare.com limits). */
-declare const CLOUDFLARE_DATABASE_CAP_BYTES = 10000000000;
-/** Default database-size admission ceiling: a 1 GB safety margin under the platform cap. */
-declare const DEFAULT_MAX_DATABASE_BYTES = 9000000000;
-declare const CloudflareAdmissionLimitsValue_base: Schema.Class<CloudflareAdmissionLimitsValue, Schema.Struct<{
-  /** Maximum nonterminal Submissions per Conversation lane before new admissions refuse. */
-  readonly maxQueueDepthPerLane: Schema.Int;
-  /** Maximum encoded input bytes; never above the storage per-value bound. */
-  readonly maxInputBytes: Schema.Int;
-  /** Maximum `ctx.storage.sql.databaseSize` at admission; stays under the 10 GB platform cap. */
-  readonly maxDatabaseBytes: Schema.Int;
-}>, {}>;
-/**
- * Explicit bounded admission quotas checked by the Conversation Object BEFORE admission
- * (exit gate "resource limits are checked before admission").
- */
-declare class CloudflareAdmissionLimitsValue extends CloudflareAdmissionLimitsValue_base {}
-declare const CloudflareDurableRuntimeConfigValue_base: Schema.Class<CloudflareDurableRuntimeConfigValue, Schema.Struct<{
-  readonly deploymentId: Schema.brand<Schema.NonEmptyString, "@effect-agent/session/DeploymentId">;
-  /** Head of the minted producer identity `{producerPrefix}:{conversationId}`. */
-  readonly producerPrefix: Schema.NonEmptyString;
-  /** Submission ownership lease duration (D5); fences work across Object incarnations. */
-  readonly ownershipLeaseDuration: Schema.Int;
-  /** Base delay of the alarm re-arm backoff when a pass makes no progress. */
-  readonly alarmBackoffBase: Schema.Int;
-  /** Ceiling of the alarm re-arm backoff. */
-  readonly alarmBackoffCap: Schema.Int;
-  /**
-   * The maintenance-pass scan cadence and the ceiling of every re-arm delay: nonterminal
-   * work is revisited at least this often (wake/scan pairing, persistence §14).
-   */
-  readonly wakeScanInterval: Schema.Int;
-  /** `awaitSettlement` ledger re-check cadence when no wake arrives. */
-  readonly settlementPollInterval: Schema.Int;
-  /** Worker ownership-lease renewal cadence during an active Attempt. */
-  readonly leaseRenewalInterval: Schema.Int;
-  /** Active-Run abort-intent poll cadence. */
-  readonly abortPollInterval: Schema.Int;
-  /** Canonical observation poll cadence of the Durable Object store. */
-  readonly observationPollInterval: Schema.Int;
-  /** Cooperative background-export budget; native Object delivery never awaits the flush. */
-  readonly telemetryFlushTimeout: Schema.Int;
-  /** Per-value byte bound; must stay under the platform's 2 MB SQLite value limit. */
-  readonly maxStoredValueBytes: Schema.Int;
-  /** Opt-in full payload/digest-chain audit while opening the store. */
-  readonly verifyOnOpen: Schema.Boolean;
-  readonly limits: typeof CloudflareAdmissionLimitsValue;
-}>, {}>;
-/**
- * Validated Cloudflare durable runtime configuration. The producer identity of one
- * Conversation Object is `{producerPrefix}:{conversationId}` — stable across incarnations of
- * the same deployment, distinct across deployments — and producer-epoch fencing (not the
- * producer name) remains the correctness authority (DUR-006).
- */
-declare class CloudflareDurableRuntimeConfigValue extends CloudflareDurableRuntimeConfigValue_base {}
-declare const CloudflareDurableRuntimeConfig_base: Context.ServiceClass<CloudflareDurableRuntimeConfig, "@effect-agent/platform-cloudflare/CloudflareDurableRuntimeConfig", CloudflareDurableRuntimeConfigValue>;
-/** Explicit configuration authority for the assembled Cloudflare durable runtime. */
-declare class CloudflareDurableRuntimeConfig extends CloudflareDurableRuntimeConfig_base {}
-/** Documented production defaults applied by `CloudflareDurableRuntime.layer`. */
-declare const CLOUDFLARE_RUNTIME_DEFAULTS: {
-  readonly ownershipLeaseDuration: number;
-  readonly alarmBackoffBase: 100;
-  readonly alarmBackoffCap: 5000;
-  readonly wakeScanInterval: 1000;
-  readonly settlementPollInterval: 500;
-  readonly leaseRenewalInterval: 10000;
-  readonly abortPollInterval: 500;
-  readonly observationPollInterval: 25;
-  readonly telemetryFlushTimeout: 2000;
-  readonly maxStoredValueBytes: 1900000;
-  readonly verifyOnOpen: false;
-  readonly maxQueueDepthPerLane: 256;
-  readonly maxInputBytes: 1900000;
-  readonly maxDatabaseBytes: 9000000000;
-};
-//#endregion
-//#region src/alarm.d.ts
-declare const DurableAlarmError_base: Schema.Class<DurableAlarmError, Schema.TaggedStruct<"DurableAlarmError", {
-  readonly operation: Schema.String;
-  readonly message: Schema.String;
-  readonly cause: Schema.optionalKey<Schema.Defect>;
-}>, import("effect/Cause").YieldableError>;
-/**
- * The single multiplexed Durable Object alarm (decision D-P6-2). A Durable Object has ONE
- * alarm slot; every cadence the Node host ran on fibers (wake scan, lease expiry, settlement
- * and abort re-checks, retry backoff) multiplexes into one idempotent maintenance pass, and
- * the slot always holds the EARLIEST deadline any caller asked for.
- *
- * The alarm invariant (plan §1.4): committed nonterminal work implies a committed alarm.
- * It is established by pre-arming — every mutating entry point and every pass arms the alarm
- * BEFORE its durable mutations — so an eviction at any failpoint leaves a persisted alarm
- * that workerd re-delivers to a fresh incarnation WITHOUT any incoming request. Spurious
- * alarms are harmless by design: a pass over an all-settled lane simply deletes the slot.
- */
-/** The Durable Object alarm API failed; surfaces on host entry points as a typed refusal. */
-declare class DurableAlarmError extends DurableAlarmError_base {}
-declare const DurableAlarmService_base: Context.ServiceClass<DurableAlarmService, "@effect-agent/platform-cloudflare/DurableAlarmService", {
-  /** The scheduled deadline in epoch milliseconds, if any. */
-  readonly scheduled: Effect.Effect<Option.Option<number>, DurableAlarmError>;
-  /** Replace the slot with this deadline. */
-  readonly scheduleAt: (epochMillis: number) => Effect.Effect<void, DurableAlarmError>;
-  /** Keep the EARLIER of the existing deadline and this one (the multiplexing rule). */
-  readonly ensureScheduledBy: (epochMillis: number) => Effect.Effect<void, DurableAlarmError>;
-  /**
-   * Arm an immediate alarm (the durable, coalescing local wake) — DEFERRED while a
-   * maintenance pass is executing. Workerd cancels an in-flight alarm handler when a new
-   * EARLIER deadline is written during its execution (`requestScheduledAlarm`), and the
-   * maintenance pass runs INSIDE the alarm handler: an immediate wake landing mid-pass
-   * (a routed port mutation, a sibling's `wake()`, the coordinator's own local notify)
-   * would kill the running Attempt — manufacturing an ownership loss no real eviction
-   * caused, and routing open uncertain-class Tool Calls into spurious Unknown Outcomes.
-   * Deferral is contract-safe: wakes are droppable hints, every mutating entry point
-   * pre-arms BEFORE its first durable mutation (the alarm invariant never rests on this
-   * call), and the deferred wake is flushed when the pass completes.
-   */
-  readonly scheduleNow: Effect.Effect<void, DurableAlarmError>;
-  /**
-   * Run one maintenance pass with wake deferral (see `scheduleNow`): `scheduleNow` calls
-   * while `body` executes coalesce into one flag, flushed as an immediate re-arm after the
-   * pass — failures of the flush are logged and swallowed (hints are droppable; the pass's
-   * own re-arm policy already bounded the next delivery).
-   */
-  readonly withWakesDeferred: <A, E, R>(body: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
-  /** Clear the slot; only the maintenance pass does this, and only when all work settled. */
-  readonly cancel: Effect.Effect<void, DurableAlarmError>;
-}>;
-/** `ctx.storage` alarm slot as an Effect service; storage is truth, never a memory field. */
-declare class DurableAlarmService extends DurableAlarmService_base {
-  static readonly layer: Layer.Layer<DurableAlarmService, never, DurableObjectContext>;
-}
-declare const MaintenancePassReport_base: Schema.Class<MaintenancePassReport, Schema.Struct<{
-  /** Recovery decisions executed (or deferred) BEFORE any new claim in this pass. */
-  readonly recovered: Schema.Int;
-  /** Settlements the drain pass finalized. */
-  readonly settled: Schema.Int;
-  /** Submissions still nonterminal after the pass (suspended/unknown lanes stay honest). */
-  readonly nonterminal: Schema.Int;
-  /** `rearmed` while nonterminal work remains, `cleared` once everything settled. */
-  readonly alarm: Schema.Literals<readonly ["rearmed", "cleared"]>;
-}>, {}>;
-/** What one maintenance pass did — auditable evidence mirroring `NodeDurableHost`'s report. */
-declare class MaintenancePassReport extends MaintenancePassReport_base {}
-type MaintenancePassFailure = DurableWorkerFailure | DurableBindingFailure | DurableAlarmError;
-declare const ConversationMaintenance_base: Context.ServiceClass<ConversationMaintenance, "@effect-agent/platform-cloudflare/ConversationMaintenance", {
-  /** One idempotent maintenance pass; failures propagate so workerd retries the alarm. */
-  readonly pass: Effect.Effect<MaintenancePassReport, MaintenancePassFailure>;
-  /**
-   * Defensive half of the alarm invariant, run by the constructor gate: if any local
-   * Submission is nonterminal and no alarm is scheduled, arm one within the scan interval.
-   * Local-only (one ledger scan + the alarm slot) — never a recovery pass, never transport.
-   */
-  readonly ensureAlarm: Effect.Effect<void, MaintenancePassFailure>;
-  /**
-   * The pre-arm every mutating entry point runs BEFORE its first durable mutation: with
-   * the alarm committed first, a committed admission (or any other committed nonterminal
-   * transition) can never be observed without the alarm that will finish it.
-   */
-  readonly preArm: Effect.Effect<void, DurableAlarmError>;
-}>;
-/**
- * The idempotent maintenance pass and the alarm-invariant helpers (plan §1.4, D-P6-1/2).
- *
- * `pass` = pre-arm → `runRecovery` → `processConversationResolved` → re-arm-or-clear:
- *
- * 1. **Pre-arm**: the alarm is re-armed at `now + wakeScanInterval` BEFORE any work, so an
- *    eviction (or thrown failure → workerd alarm retry) at any point of the pass leaves a
- *    committed alarm and the fresh incarnation converges without an incoming request.
- * 2. **Reconcile before new work** (exit gate): every pass classifies and repairs every
- *    nonterminal Submission before the drain claims anything; the pure classifier and the
- *    repair executors are idempotent, so at-least-once alarm delivery re-runs them safely.
- * 3. **Drain**: one bounded `processConversationResolved` pass over this Object's lane — the
- *    D-P6-1 shape; no infinite `runResolvedWorker` loop ever pins the Object.
- * 4. **Re-arm policy**: nonterminal work re-arms at `now + min(backoff-with-jitter,
- *    wakeScanInterval)` — the scan interval bounds every wait (lease expiry of a dead
- *    incarnation included, since claims retry each pass) and the backoff (reset on progress,
- *    grown otherwise) keeps stuck lanes from busy-spinning; all settled clears the slot.
- *
- * Every step is a durability-protocol step that already tolerates re-execution, which is
- * what makes double-fired alarms harmless (the alarm.test.ts gate).
- */
-declare class ConversationMaintenance extends ConversationMaintenance_base {
-  static readonly layer: Layer.Layer<ConversationMaintenance, never, DurableAgentRuntime | AgentBindingResolver | SubmissionLedger | DurableAlarmService | CloudflareDurableRuntimeConfig | ConversationObjectIdentity>;
-}
-//#endregion
-//#region src/wake-scheduler.d.ts
-/**
- * The DC `WakeScheduler` (plan §1.4):
- *
- * - `notify(local)` → `setAlarm(now)` — durable, cheap, coalescing (the alarm slot keeps the
- *   earliest deadline) — plus a same-incarnation PubSub hint for `awaitSettlement` waiters.
- * - `notify(remote)` → fire-and-forget `wake()` on the owning Object's stub with every error
- *   swallowed and logged: hints are droppable, and the target's own alarm/scan pairing (the
- *   maintenance pass re-polls unsettled children) guarantees liveness without this call.
- * - `wakes` → the bounded sliding PubSub only. No important state lives in memory: the
- *   subscription accelerates waiters within one incarnation and the settlement poll interval
- *   is the correctness path.
- */
-declare const cloudflareWakeSchedulerLayer: Layer.Layer<WakeScheduler, never, DurableAlarmService | ConversationObjectIdentity | ConversationObjectNamespace>;
-//#endregion
-//#region src/transport.d.ts
-/**
- * `ConversationPortTransport` over native Durable Object JS RPC (decision D-P6-3): one
- * `portCall(envelope)` on the stub of the Object that owns the addressed Conversation
- * (`namespace.idFromName(conversationId)` — the identity rule, plan §1.2). The envelopes are
- * already Schema-encoded JSON, so the RPC boundary carries only structured-cloneable values;
- * the protocol module stays transport-agnostic and fetch-with-JSON remains the documented
- * fallback carrier.
- *
- * Every delivery problem — stub construction, RPC rejection, overload, deploy-in-progress —
- * surfaces as `PortTransportError` (preserving the platform stub's own `retryable` signal
- * when present) and NEVER as a fabricated answer: on `resolveAdmission` the routing layer
- * turns exactly this error into `AdmissionIndeterminate` (SUB-031).
- */
-declare const conversationPortTransportLayer: Layer.Layer<ConversationPortTransport, never, ConversationObjectNamespace>;
-//#endregion
-//#region src/telemetry.d.ts
-declare const CloudflareTelemetryExportError_base: Schema.Class<CloudflareTelemetryExportError, Schema.TaggedStruct<"CloudflareTelemetryExportError", {
-  /** The original exporter failure, retained for host-side diagnostics. */
-  readonly cause: Schema.Defect;
-}>, import("effect/Cause").YieldableError>;
-/** A host exporter failed during one coalesced background export attempt. */
-declare class CloudflareTelemetryExportError extends CloudflareTelemetryExportError_base {}
-declare const CloudflareRuntimeTelemetry_base: Context.ServiceClass<CloudflareRuntimeTelemetry, "@effect-agent/platform-cloudflare/CloudflareRuntimeTelemetry", {
-  readonly flush: Effect.Effect<void, CloudflareTelemetryExportError>;
-}>;
-/**
- * Host-owned exporter lifecycle for one Cloudflare Conversation Object incarnation.
- *
- * The platform package creates measurements but deliberately does not select an exporter or
- * vendor. Native entrypoint instrumentation consumes this service at the Worker composition edge;
- * applications pass its provider as the second `makeConversationObjectClass` argument together
- * with their Effect Logger, Tracer, and Metric layers. That provider may read `DurableObjectContext` or
- * `ConversationObjectNamespace`, and its typed acquisition error remains visible in construction.
- * `flush` must attempt to export every configured signal. After the native span closes, the
- * Conversation Object reserves it into a shared post-settlement batch before `ctx.waitUntil` under
- * a cooperative timeout. Only each pending/trailing/queued batch's first owner registers its
- * shared Promise. Cycles remain capped at one first exporter attempt plus at most one trailing
- * attempt, with one queued cycle while trailing runs; exporter completion never holds endpoint
- * delivery open and exporter failure never replaces endpoint behavior.
- */
-declare class CloudflareRuntimeTelemetry extends CloudflareRuntimeTelemetry_base {
-  /** Content-free default selected by `makeConversationObjectClass` when no host Layer is passed. */
-  static readonly layerNoop: Layer.Layer<CloudflareRuntimeTelemetry, never, never>;
-}
-//#endregion
-//#region src/layers.d.ts
-/**
- * Raw (unvalidated) construction options for `CloudflareDurableRuntime.layer`, mirroring
- * `NodeDurableRuntimeOptions`. Optional fields default to the documented production values
- * (`CLOUDFLARE_RUNTIME_DEFAULTS`); everything is schema-decoded into
- * `CloudflareDurableRuntimeConfigValue` before any resource opens (deployment §5 gate 1).
- */
-interface CloudflareDurableRuntimeOptions {
-  readonly deploymentId: string;
-  /** Head of the minted producer identity `{producerPrefix}:{conversationId}`. */
-  readonly producerPrefix: string;
-  /** Milliseconds; default 30s (D5). */
-  readonly ownershipLeaseDuration?: number | undefined;
-  /** Milliseconds; default 100. */
-  readonly alarmBackoffBase?: number | undefined;
-  /** Milliseconds; default 5000. */
-  readonly alarmBackoffCap?: number | undefined;
-  /** Milliseconds; default 1000. Bounds every alarm re-arm delay. */
-  readonly wakeScanInterval?: number | undefined;
-  /** Milliseconds; default 500. */
-  readonly settlementPollInterval?: number | undefined;
-  /** Milliseconds; default 10000. */
-  readonly leaseRenewalInterval?: number | undefined;
-  /** Milliseconds; default 500. */
-  readonly abortPollInterval?: number | undefined;
-  /** Milliseconds; default 25. */
-  readonly observationPollInterval?: number | undefined;
-  /**
-   * Milliseconds; default 2000. Cooperative budget for the background exporter flush registered
-   * after each native RPC, wake, or alarm span. Delivery never awaits the flush.
-   */
-  readonly telemetryFlushTimeout?: number | undefined;
-  /** Bytes; default just under the 2 MB platform value limit. */
-  readonly maxStoredValueBytes?: number | undefined;
-  /** Default false. */
-  readonly verifyOnOpen?: boolean | undefined;
-  /** Nonterminal Submissions per lane before admission refuses; default 256. */
-  readonly maxQueueDepthPerLane?: number | undefined;
-  /** Encoded input bytes per Submission; default = the stored-value bound. */
-  readonly maxInputBytes?: number | undefined;
-  /** `ctx.storage.sql.databaseSize` ceiling at admission; default 9 GB (10 GB platform cap). */
-  readonly maxDatabaseBytes?: number | undefined;
-  /**
-   * Durable Object storage fault injection (`ledger:*` / `append:*` locations). Handlers are
-   * constructed per incarnation WITH the live `DurableObjectState`, so eviction harnesses can
-   * map an armed hit to `ctx.abort()` — the platform's real failure mode. Default none.
-   */
-  readonly storageFailpoint?: ((ctx: DurableObjectState) => DoStorageFailpointHandler) | undefined;
-  /** Coordinator fault injection (`submit:*` / `terminalize:*` locations); default none. */
-  readonly runtimeFailpoint?: ((ctx: DurableObjectState) => DurableRuntimeFailpointHandler) | undefined;
-  /**
-   * Reconciliation policy consulted for open ordinary Tool Calls before an Unknown Outcome
-   * is recorded (durability §10, DUR-009). Defaults to the fail-closed
-   * `ToolReconciler.uncertain`.
-   */
-  readonly toolReconciler?: Layer.Layer<ToolReconciler> | undefined;
-  /**
-   * Registered worker Bindings resolved at durable claim time (S2, spec/subagents.md §11):
-   * build each with `DurableWorkerBinding.make(binding, digests)`. An Effect or callback form is
-   * accepted because capture can be effectful. The callback receives the live Object context and
-   * derived identities and is evaluated once per incarnation during Layer construction. Defaults
-   * to the empty registration (every resolved claim fails closed).
-   */
-  readonly bindings?: CloudflareBindingSource | undefined;
-}
-/** Per-incarnation host values available while registered worker Bindings are captured. */
-interface CloudflareBindingSourceContext {
-  readonly ctx: DurableObjectState;
-  readonly env: unknown;
-  readonly conversationId: ConversationId;
-  readonly producerId: ProducerId;
-}
-/**
- * Registered worker Bindings, or a closed Effect/callback that captures them once for each
- * Durable Object incarnation. Callback Effects cannot require services or fail typed.
- */
-type CloudflareBindingSource = ReadonlyArray<ResolvedBinding> | Effect.Effect<ReadonlyArray<ResolvedBinding>, never, never> | ((context: CloudflareBindingSourceContext) => ReadonlyArray<ResolvedBinding> | Effect.Effect<ReadonlyArray<ResolvedBinding>, never, never>);
-/** Every construction failure of the assembled Cloudflare durable runtime stack. */
-type CloudflareDurableRuntimeInitializationError = CloudflarePlatformConfigError | DoStorageInitializationError;
-/** The services `CloudflareDurableRuntime.layer` provides. */
-type CloudflareDurableRuntimeServices = DurableAgentRuntime | SubmissionLedger | ConversationStore | WakeScheduler | DurableRuntimeConfig | AgentBindingResolver | CloudflareDurableRuntimeConfig | ConversationObjectIdentity | DurableAlarmService | ConversationMaintenance | ConversationObjectPorts;
-declare const ConversationObjectPorts_base: Context.ServiceClass<ConversationObjectPorts, "@effect-agent/platform-cloudflare/ConversationObjectPorts", {
-  readonly handle: (encoded: unknown) => Effect.Effect<unknown>;
-}>;
-/**
- * Owner-side endpoint body for the Conversation Object's `portCall` (plan §1.3): decode,
- * execute against THIS Object's LOCAL port facets — never the routed decorators, so a
- * request cannot bounce between Objects — and answer the encoded response envelope. Total by
- * construction (protocol anomalies answer `PortFailed(PortProtocolError)`).
- */
-declare class ConversationObjectPorts extends ConversationObjectPorts_base {}
-/**
- * The DC Layer assembly (deployment §12: a Layer-assembly library, not an app entrypoint;
- * plan §1.4). `layer(options)` decodes the configuration, derives this Object's Conversation
- * and producer identities, opens the Object's private SQLite database through
- * `@effect/sql-sqlite-do` for BOTH the Conversation Log and the Submission Ledger (so claims
- * fence the same producer epochs — ADR-0011 D7 transposed), wraps the local port facets with
- * the WP2 cross-Object routing decorators over the Durable Object RPC transport, wires the
- * alarm-backed wake scheduler and the maintenance pass, defaults reconciliation to the
- * fail-closed `ToolReconciler.uncertain`, and provides a ready `DurableAgentRuntime` on top.
- *
- * Storage compatibility is verified during construction: an incompatible database fails the
- * Layer typed (`DoStorageCompatibilityError`) before anything is mutated (DEPLOY-008).
- *
- * Requires the two binding services (`DurableObjectContext`, `ConversationObjectNamespace`).
- * Host observability belongs to the Worker composition edge because native entrypoint lifecycle
- * instrumentation, rather than this durable runtime assembly, consumes it (DEPLOY-010).
- */
-declare class CloudflareDurableRuntime {
-  static layer(options: CloudflareDurableRuntimeOptions): Layer.Layer<CloudflareDurableRuntimeServices, CloudflareDurableRuntimeInitializationError, DurableObjectContext | ConversationObjectNamespace>;
-}
-//#endregion
-//#region src/client.d.ts
-/** Truncate a diagnostic string to the host protocol's bounded length. */
-declare const boundHostDiagnostic: (value: string) => string;
-declare const HostProtocolError_base: Schema.Class<HostProtocolError, Schema.TaggedStruct<"HostProtocolError", {
-  readonly message: Schema.String;
-}>, import("effect/Cause").YieldableError>;
-/**
- * The envelope itself could not be honored: the Object could not decode the request, or a
- * response could not be encoded/decoded. Never carries operation semantics.
- */
-declare class HostProtocolError extends HostProtocolError_base {}
-declare const ConversationClientError_base: Schema.Class<ConversationClientError, Schema.TaggedStruct<"ConversationClientError", {
-  readonly conversationId: Schema.String;
-  readonly message: Schema.String;
-  readonly cause: Schema.optionalKey<Schema.Defect>;
-}>, import("effect/Cause").YieldableError>;
-/** The Worker-side stub call itself failed (RPC rejection, overload, eviction mid-call). */
-declare class ConversationClientError extends ConversationClientError_base {}
-declare const SubmitRequest_base: Schema.Class<SubmitRequest, Schema.Struct<{
-  readonly agentId: Schema.brand<Schema.NonEmptyString, "@effect-agent/core/AgentId">;
-  readonly principal: Schema.brand<Schema.NonEmptyString, "@effect-agent/session/Principal">;
-  readonly idempotencyKey: Schema.brand<Schema.NonEmptyString, "@effect-agent/session/IdempotencyKey">;
-  readonly definitions: typeof DefinitionDigests;
-  readonly inputPayload: Schema.declare<Schema.Json, Schema.Json>;
-}>, {}>;
-/**
- * One durable submission, input ALREADY encoded by the caller through the Agent Binding's
- * input schema (the Worker bundles the same Agent definitions as the Object, so schema
- * validation happens client-side; the resolved Binding re-validates at claim time). The
- * Conversation identity is deliberately absent — the addressed Object IS the lane.
- */
-declare class SubmitRequest extends SubmitRequest_base {}
-declare const ObservePageRequest_base: Schema.Class<ObservePageRequest, Schema.Struct<{
-  readonly afterSequence: Schema.optionalKey<Schema.brand<Schema.Natural, "@effect-agent/session/CanonicalSequence">>;
-  readonly limit: Schema.Int;
-}>, {}>;
-/** One bounded page of canonical records after an optional sequence. */
-declare class ObservePageRequest extends ObservePageRequest_base {}
-/**
- * Every typed failure a host entry point can produce, plus the protocol's own errors. Same
- * closed-union discipline as the WP2 `PortFailure`: members re-decode to the SAME tagged
- * classes on the Worker side; `cause` chains travel as Schema defects without instance
- * fidelity (plan §2.8).
- */
-declare const HostFailure: Schema.Union<readonly [typeof AgentInputError, typeof DigestError, typeof AdmissionConflict, typeof SettlementConflict, typeof ApprovalConflict, typeof UnknownResolutionConflict, typeof JoinedToHost, typeof LedgerError, typeof ConversationStoreError, typeof ConversationNotMaterialized, typeof AppendConflict, typeof FenceRejected, typeof DurableRuntimeFailpointError, typeof AdmissionLimitExceeded, typeof DurableAlarmError, typeof HostProtocolError]>;
-type HostFailure = typeof HostFailure.Type;
-declare const SubmitSucceeded_base: Schema.Class<SubmitSucceeded, Schema.TaggedStruct<"SubmitSucceeded", {
-  readonly receipt: typeof Receipt;
-}>, {}>;
-declare class SubmitSucceeded extends SubmitSucceeded_base {}
-declare const SettlementReached_base: Schema.Class<SettlementReached, Schema.TaggedStruct<"SettlementReached", {
-  readonly settlement: typeof Settlement;
-}>, {}>;
-declare class SettlementReached extends SettlementReached_base {}
-declare const ObservedPage_base: Schema.Class<ObservedPage, Schema.TaggedStruct<"ObservedPage", {
-  readonly records: Schema.$Array<typeof CanonicalRecordEnvelope>;
-}>, {}>;
-declare class ObservedPage extends ObservedPage_base {}
-declare const AbortRecorded_base: Schema.Class<AbortRecorded, Schema.TaggedStruct<"AbortRecorded", {
-  readonly intent: typeof AbortIntent;
-}>, {}>;
-declare class AbortRecorded extends AbortRecorded_base {}
-declare const ApprovalRecorded_base: Schema.Class<ApprovalRecorded, Schema.TaggedStruct<"ApprovalRecorded", {
-  readonly intent: typeof ApprovalDecisionIntent;
-}>, {}>;
-declare class ApprovalRecorded extends ApprovalRecorded_base {}
-declare const UnknownResolutionRecorded_base: Schema.Class<UnknownResolutionRecorded, Schema.TaggedStruct<"UnknownResolutionRecorded", {
-  readonly intent: typeof UnknownResolutionIntent;
-}>, {}>;
-declare class UnknownResolutionRecorded extends UnknownResolutionRecorded_base {}
-declare const HostFailed_base: Schema.Class<HostFailed, Schema.TaggedStruct<"HostFailed", {
-  readonly failure: Schema.Union<readonly [typeof AgentInputError, typeof DigestError, typeof AdmissionConflict, typeof SettlementConflict, typeof ApprovalConflict, typeof UnknownResolutionConflict, typeof JoinedToHost, typeof LedgerError, typeof ConversationStoreError, typeof ConversationNotMaterialized, typeof AppendConflict, typeof FenceRejected, typeof DurableRuntimeFailpointError, typeof AdmissionLimitExceeded, typeof DurableAlarmError, typeof HostProtocolError]>;
-}>, {}>;
-/** The entry point failed TYPED on the Object; the failure re-decodes verbatim. */
-declare class HostFailed extends HostFailed_base {}
-/** The uniform answer of one host entry point. Callers narrow by the tag their call implies. */
-declare const HostResponse: Schema.Union<readonly [typeof SubmitSucceeded, typeof SettlementReached, typeof ObservedPage, typeof AbortRecorded, typeof ApprovalRecorded, typeof UnknownResolutionRecorded, typeof HostFailed]>;
-type HostResponse = typeof HostResponse.Type;
-declare const decodeSubmitRequest: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<SubmitRequest, Schema.SchemaError, never>;
-declare const encodeSubmitRequest: (input: SubmitRequest, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<{
-  readonly agentId: string;
-  readonly principal: string;
-  readonly idempotencyKey: string;
-  readonly definitions: {
-    readonly agent: string;
-    readonly model: string;
-    readonly tools: string;
-  };
-  readonly inputPayload: Schema.Json;
-}, Schema.SchemaError, never>;
-declare const decodeReceipt: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<Receipt, Schema.SchemaError, never>;
-declare const encodeReceipt: (input: Receipt, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<{
-  readonly receiptId: string;
-  readonly submissionId: string;
-  readonly conversationId: string;
-  readonly queueSequence: number;
-}, Schema.SchemaError, never>;
-declare const decodeObservePageRequest: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<ObservePageRequest, Schema.SchemaError, never>;
-declare const encodeObservePageRequest: (input: ObservePageRequest, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<{
-  readonly afterSequence?: number | undefined;
-  readonly limit: number;
-}, Schema.SchemaError, never>;
-declare const decodeAbortCommand: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<AbortCommand, Schema.SchemaError, never>;
-declare const encodeAbortCommand: (input: AbortCommand, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<{
-  readonly submissionId: string;
-  readonly author: string;
-  readonly reason: string;
-}, Schema.SchemaError, never>;
-declare const decodeApprovalDecisionCommand: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<ApprovalDecisionCommand, Schema.SchemaError, never>;
-declare const encodeApprovalDecisionCommand: (input: ApprovalDecisionCommand, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<{
-  readonly submissionId: string;
-  readonly toolCallId: string;
-  readonly decision: "approved" | "denied";
-  readonly resolver: string;
-  readonly reason: string;
-}, Schema.SchemaError, never>;
-declare const decodeUnknownResolutionCommand: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<UnknownResolutionCommand, Schema.SchemaError, never>;
-declare const encodeUnknownResolutionCommand: (input: UnknownResolutionCommand, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<{
-  readonly submissionId: string;
-  readonly toolCallId: string;
-  readonly author: string;
-  readonly reason: string;
-  readonly resolution: {
-    readonly _tag: "CompletedWithResult";
-    readonly result: Schema.Json;
-    readonly isFailure: boolean;
-  } | {
-    readonly _tag: "NeverHappened";
-  } | {
-    readonly _tag: "SafeToRetry";
-  } | {
-    readonly _tag: "AbortSubmission";
-  };
-}, Schema.SchemaError, never>;
-declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorded | HostFailed | ObservedPage | SettlementReached | SubmitSucceeded | UnknownResolutionRecorded, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<{
-  readonly _tag: "SubmitSucceeded";
-  readonly receipt: {
-    readonly receiptId: string;
-    readonly submissionId: string;
-    readonly conversationId: string;
-    readonly queueSequence: number;
-  };
-} | {
-  readonly _tag: "SettlementReached";
-  readonly settlement: {
-    readonly submissionId: string;
-    readonly settlementId: string;
-    readonly receiptId: string;
-    readonly outcome: "aborted" | "completed" | "failed";
-    readonly settledAt: string;
-  };
-} | {
-  readonly _tag: "ObservedPage";
-  readonly records: readonly {
-    readonly conversationId: string;
-    readonly batchId: string;
-    readonly sequence: number;
-    readonly offset: string;
-    readonly record: {
-      readonly recordId: string;
-      readonly family: "conversation";
-      readonly schemaVersion: 1;
-      readonly createdAt: string;
-      readonly deploymentId: string;
-      readonly payload: {
-        readonly _tag: "ConversationCreated";
-        readonly agentId: string;
-        readonly definitions: {
-          readonly agent: string;
-          readonly model: string;
-          readonly tools: string;
-        };
-      } | {
-        readonly _tag: "UserInputRecorded";
-        readonly submissionId: string;
-        readonly kind: "follow-up" | "steering" | "user";
-        readonly runId?: string | undefined;
-        readonly input: Schema.Json;
-      } | {
-        readonly _tag: "ModelCompleted";
-        readonly runId: string;
-        readonly output: Schema.Json;
-      } | {
-        readonly _tag: "ModelResponseRecorded";
-        readonly runId: string;
-        readonly turnId: string;
-        readonly turn: number;
-        readonly messages: Schema.Json;
-        readonly messagesDigest: string;
-      } | {
-        readonly _tag: "ToolCallPrepared";
-        readonly runId: string;
-        readonly turnId: string;
-        readonly turn: number;
-        readonly toolCallId: string;
-        readonly toolName: string;
-        readonly parameters: Schema.Json;
-        readonly parametersDigest: string;
-      } | {
-        readonly _tag: "ToolCallSettled";
-        readonly runId: string;
-        readonly toolCallId: string;
-        readonly toolName: string;
-        readonly result: Schema.Json;
-        readonly isFailure: boolean;
-      } | {
-        readonly _tag: "ToolCallUnknown";
-        readonly runId: string;
-        readonly turn: number;
-        readonly toolCallId: string;
-        readonly toolName: string;
-        readonly reason: string;
-      } | {
-        readonly _tag: "ToolCallResolved";
-        readonly runId: string;
-        readonly toolCallId: string;
-        readonly resolution: "completed-with-result" | "failed-with-error" | "never-started" | "safe-retry";
-        readonly author: string;
-        readonly reason: string;
-      } | {
-        readonly _tag: "ToolStepSettled";
-        readonly runId: string;
-        readonly toolCallId: string;
-        readonly stepName: string;
-        readonly output: Schema.Json;
-        readonly outputDigest: string;
-      } | {
-        readonly _tag: "ToolApprovalRequested";
-        readonly runId: string;
-        readonly turnId: string;
-        readonly turn: number;
-        readonly toolCallId: string;
-        readonly toolName: string;
-        readonly parametersDigest: string;
-      } | {
-        readonly _tag: "ToolApprovalDecided";
-        readonly runId: string;
-        readonly turn: number;
-        readonly toolCallId: string;
-        readonly decision: "approved" | "denied";
-        readonly resolver: string;
-        readonly reason: string;
-      } | {
-        readonly _tag: "ModelResponseInterrupted";
-        readonly runId: string;
-        readonly supersededEpoch: number;
-        readonly attemptId: string;
-        readonly reason: string;
-      } | {
-        readonly _tag: "CompactionCreated";
-        readonly runId: string;
-        readonly sourceDigest: string;
-        readonly summary: string;
-      } | {
-        readonly _tag: "RunFailed";
-        readonly runId: string;
-        readonly failure: Schema.Json;
-      } | {
-        readonly _tag: "RunCompleted";
-        readonly runId: string;
-        readonly output: Schema.Json;
-      } | {
-        readonly _tag: "AbortRequested";
-        readonly submissionId: string;
-        readonly author: string;
-        readonly reason: string;
-      } | {
-        readonly _tag: "SubmissionSettled";
-        readonly submissionId: string;
-        readonly settlementId: string;
-        readonly receiptId: string;
-        readonly outcome: "aborted" | "completed" | "failed";
-        readonly runId?: string | undefined;
-        readonly result?: Schema.Json | undefined;
-      } | {
-        readonly _tag: "SubagentRequested";
-        readonly runId: string;
-        readonly turnId: string;
-        readonly turn: number;
-        readonly toolCallId: string;
-        readonly delegationId: string;
-        readonly targetAgentId: string;
-        readonly targetDigests: {
-          readonly agent: string;
-          readonly model: string;
-          readonly tools: string;
-        };
-        readonly childInput: Schema.Json;
-        readonly childInputDigest: string;
-        readonly grantDigest: string;
-        readonly reservationId: string;
-        readonly reservationDigest: string;
-        readonly childConversationId: string;
-        readonly childPrincipal: string;
-        readonly childIdempotencyKey: string;
-      } | {
-        readonly _tag: "SubagentStarted";
-        readonly runId: string;
-        readonly toolCallId: string;
-        readonly childConversationId: string;
-        readonly childSubmissionId: string;
-        readonly childReceiptId: string;
-        readonly childRunId: string;
-      } | {
-        readonly _tag: "SubagentJoined";
-        readonly runId: string;
-        readonly toolCallId: string;
-        readonly childSubmissionId: string;
-        readonly childSettlementId: string;
-        readonly childOutcome: "aborted" | "completed" | "failed";
-        readonly childResultDigest: string;
-        readonly projectedResultDigest: string;
-        readonly usageSummary: Schema.Json;
-        readonly reservationId: string;
-        readonly finalAccounting: Schema.Json;
-      } | {
-        readonly _tag: "SubagentLineageRecorded";
-        readonly parentLink: {
-          readonly delegationId: string;
-          readonly parentAgentId: string;
-          readonly parentConversationId: string;
-          readonly parentRunId: string;
-          readonly parentToolCallId: string;
-          readonly depth: number;
-        };
-        readonly parentSubmissionId: string;
-        readonly childDefinitionDigests: {
-          readonly agent: string;
-          readonly model: string;
-          readonly tools: string;
-        };
-        readonly childInputDigest: string;
-        readonly grantDigest: string;
-      } | {
-        readonly _tag: "RepairAnnotated";
-        readonly reason: string;
-        readonly details: Schema.Json;
-      };
-    };
-  }[];
-} | {
-  readonly _tag: "AbortRecorded";
-  readonly intent: {
-    readonly submissionId: string;
-    readonly author: string;
-    readonly reason: string;
-    readonly requestedAt: string;
-    readonly canonicalRecordId?: string | undefined;
-  };
-} | {
-  readonly _tag: "ApprovalRecorded";
-  readonly intent: {
-    readonly submissionId: string;
-    readonly toolCallId: string;
-    readonly decision: "approved" | "denied";
-    readonly resolver: string;
-    readonly reason: string;
-    readonly decidedAt: string;
-    readonly canonicalRecordId?: string | undefined;
-  };
-} | {
-  readonly _tag: "UnknownResolutionRecorded";
-  readonly intent: {
-    readonly submissionId: string;
-    readonly toolCallId: string;
-    readonly author: string;
-    readonly reason: string;
-    readonly resolution: {
-      readonly _tag: "CompletedWithResult";
-      readonly result: Schema.Json;
-      readonly isFailure: boolean;
-    } | {
-      readonly _tag: "NeverHappened";
-    } | {
-      readonly _tag: "SafeToRetry";
-    } | {
-      readonly _tag: "AbortSubmission";
-    };
-    readonly resolvedAt: string;
-    readonly canonicalRecordId?: string | undefined;
-  };
-} | {
-  readonly _tag: "HostFailed";
-  readonly failure: {
-    readonly _tag: "HostProtocolError";
-    readonly message: string;
-  } | {
-    readonly _tag: "AgentInputError";
-    readonly message: string;
-  } | {
-    readonly _tag: "DigestError";
-    readonly message: string;
-    readonly cause?: Schema.Json | undefined;
-  } | {
-    readonly _tag: "AdmissionConflict";
-    readonly conversationId: string;
-    readonly principal: string;
-    readonly idempotencyKey: string;
-    readonly existingInputDigest: string;
-    readonly attemptedInputDigest: string;
-  } | {
-    readonly _tag: "SettlementConflict";
-    readonly submissionId: string;
-    readonly existingOutcome: "aborted" | "completed" | "failed";
-  } | {
-    readonly _tag: "ApprovalConflict";
-    readonly submissionId: string;
-    readonly toolCallId: string;
-    readonly existingDecision: "approved" | "denied";
-  } | {
-    readonly _tag: "UnknownResolutionConflict";
-    readonly submissionId: string;
-    readonly toolCallId: string;
-  } | {
-    readonly _tag: "JoinedToHost";
-    readonly submissionId: string;
-    readonly hostSubmissionId: string;
-  } | {
-    readonly _tag: "LedgerError";
-    readonly operation: string;
-    readonly message: string;
-    readonly cause?: Schema.Json | undefined;
-  } | {
-    readonly _tag: "ConversationStoreError";
-    readonly operation: string;
-    readonly message: string;
-    readonly cause?: Schema.Json | undefined;
-  } | {
-    readonly _tag: "ConversationNotMaterialized";
-    readonly conversationId: string;
-  } | {
-    readonly _tag: "AppendConflict";
-    readonly conversationId: string;
-    readonly batchId: string;
-    readonly reason: "batch-digest" | "record-identity" | "tail";
-    readonly actualTailSequence?: number | undefined;
-    readonly actualTailDigest?: string | undefined;
-  } | {
-    readonly _tag: "FenceRejected";
-    readonly conversationId: string;
-    readonly actualEpoch: number;
-    readonly attemptedEpoch: number;
-  } | {
-    readonly _tag: "DurableRuntimeFailpointError";
-    readonly location: "abort:after-intent" | "approval:after-request-append" | "approval:after-suspend" | "claim:after-claim" | "input:after-canonical-append" | "join:after-canonical-append" | "join:after-claim" | "resolve:after-intent" | "step:after-step-append" | "subagent:after-admit" | "subagent:after-child-abort-intent" | "subagent:after-child-ready" | "subagent:after-join-append" | "subagent:after-release" | "subagent:after-release-pending" | "subagent:after-request-append" | "subagent:after-reserve" | "subagent:after-sibling-settle" | "subagent:after-start-append" | "subagent:after-suspend" | "submit:after-admit" | "submit:after-materialize" | "terminalize:after-canonical-append" | "terminalize:after-reserve" | "tools:after-prepared-append" | "turn:after-canonical-append" | "turn:after-response-append" | "turn:after-results-append";
-  } | {
-    readonly _tag: "AdmissionLimitExceeded";
-    readonly limit: "database-bytes" | "input-bytes" | "queue-depth";
-    readonly actual: number;
-    readonly maximum: number;
-  } | {
-    readonly _tag: "DurableAlarmError";
-    readonly operation: string;
-    readonly message: string;
-    readonly cause?: Schema.Json | undefined;
-  };
-}, Schema.SchemaError, never>;
-declare const decodeHostResponse: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<AbortRecorded | ApprovalRecorded | HostFailed | ObservedPage | SettlementReached | SubmitSucceeded | UnknownResolutionRecorded, Schema.SchemaError, never>;
-/** Failure surface of `CloudflareConversationClient.submit`. */
-type ClientSubmitFailure = AgentInputError | DigestError | AdmissionConflict | LedgerError | ConversationStoreError | ConversationNotMaterialized | AppendConflict | FenceRejected | DurableRuntimeFailpointError | AdmissionLimitExceeded | DurableAlarmError | HostProtocolError | ConversationClientError;
-type ClientAwaitFailure = LedgerError | SettlementConflict | HostProtocolError | ConversationClientError;
-type ClientObserveFailure = ConversationStoreError | ConversationNotMaterialized | HostProtocolError | ConversationClientError;
-type ClientAbortFailure = LedgerError | SettlementConflict | JoinedToHost | DurableRuntimeFailpointError | DurableAlarmError | HostProtocolError | ConversationClientError;
-type ClientApprovalFailure = LedgerError | SettlementConflict | ApprovalConflict | DurableAlarmError | HostProtocolError | ConversationClientError;
-type ClientUnknownFailure = LedgerError | SettlementConflict | UnknownResolutionConflict | JoinedToHost | DurableRuntimeFailpointError | DurableAlarmError | HostProtocolError | ConversationClientError;
-declare const CloudflareConversationClient_base: Context.ServiceClass<CloudflareConversationClient, "@effect-agent/platform-cloudflare/CloudflareConversationClient", {
-  /** Encode the input client-side, then durably submit to the owning Object. */
-  readonly submit: <InputSchema extends Schema.Top>(agent: DurableSubmitAgent<InputSchema>, input: InputSchema["Type"], options: DurableSubmitOptions) => Effect.Effect<Receipt, ClientSubmitFailure, InputSchema["EncodingServices"]>;
-  /** Wake-hinted, poll-guaranteed settlement wait executed inside the owning Object. */
-  readonly awaitSettlement: (receipt: Receipt) => Effect.Effect<Settlement, ClientAwaitFailure>;
-  /** One bounded page of canonical records. */
-  readonly readPage: (conversationId: ConversationId, options?: {
-    readonly afterSequence?: CanonicalSequence | undefined;
-    readonly limit?: number | undefined;
-  }) => Effect.Effect<ReadonlyArray<CanonicalRecordEnvelope>, ClientObserveFailure>;
-  /**
-   * Every canonical record up to the CURRENT committed tail, via repeated pages. A
-   * snapshot read, not a live observation — callers wanting liveness re-read after
-   * `awaitSettlement`.
-   */
-  readonly readAll: (conversationId: ConversationId) => Effect.Effect<ReadonlyArray<CanonicalRecordEnvelope>, ClientObserveFailure>;
-  /**
-   * Submission-addressed operations take the owning Conversation explicitly (from the
-   * Receipt): minted Submission identities stay OPAQUE outside the storage adapter that
-   * minted them (D-P6-5), so the client never parses one to find the lane.
-   */
-  readonly abort: (conversationId: ConversationId, command: AbortCommand) => Effect.Effect<AbortIntent, ClientAbortFailure>;
-  readonly resolveApproval: (conversationId: ConversationId, command: ApprovalDecisionCommand) => Effect.Effect<ApprovalDecisionIntent, ClientApprovalFailure>;
-  readonly resolveUnknown: (conversationId: ConversationId, command: UnknownResolutionCommand) => Effect.Effect<UnknownResolutionIntent, ClientUnknownFailure>;
-}>;
-/** Worker-side client over the Conversation Object namespace (DEPLOY-010). */
-declare class CloudflareConversationClient extends CloudflareConversationClient_base {
-  static readonly layer: Layer.Layer<CloudflareConversationClient, never, ConversationObjectNamespace>;
-}
-//#endregion
-//#region src/conversation-object.d.ts
-/**
- * `makeConversationObjectClass(options, telemetry?)` — the Conversation Durable Object (plan §1.4,
- * D-P6-1): a factory returning a class that applications export from their Worker entry.
- * One SQLite-backed Object per Conversation is the serialized owner (durability §6); the
- * Object never runs `runResolvedWorker`'s infinite loop — each ingress event or alarm runs
- * ONE bounded `runRecovery` + `processConversationResolved` pass, and the persisted alarm
- * (the single multiplexed slot, D-P6-2) finishes accepted work across evictions WITHOUT any
- * incoming request.
- *
- * Constructor gate (`blockConcurrencyWhile`) is LOCAL-ONLY: schema migration and the
- * exact-version check, configuration decode, and the defensive ensure-alarm half of the
- * alarm invariant. It deliberately does NOT run the recovery pass: parent recovery can
- * require child-Object reads and vice versa, and two Objects blocked in constructor gates
- * awaiting each other's RPC would deadlock (plan §1.4). Instead every pass runs
- * `runRecovery` BEFORE any claim, so reconciliation still strictly precedes new work.
- */
-/** Construction options for one deployed Conversation Object class. */
-interface ConversationObjectOptions extends CloudflareDurableRuntimeOptions {
-  /**
-   * Name of the Worker `env` binding carrying THIS class's `DurableObjectNamespace` — the
-   * Object's route back to sibling Conversation Objects for the WP2 cross-Object port calls
-   * and remote wakes (DEPLOY-010: the binding enters through a Layer, never ambiently).
-   */
-  readonly namespaceBinding: string;
-}
-declare const AdminExplainRequest_base: Schema.Class<AdminExplainRequest, Schema.Struct<{
-  readonly submissionId: Schema.optionalKey<Schema.brand<Schema.NonEmptyString, "@effect-agent/core/SubmissionId">>;
-}>, {}>;
-/** Explain one Submission (`submissionId` present) or every nonterminal lane member. */
-declare class AdminExplainRequest extends AdminExplainRequest_base {}
-declare const AdminVerifyRequest_base: Schema.Class<AdminVerifyRequest, Schema.Struct<{}>, {}>;
-/** Verify carries no parameters — the addressed Object IS the lane. */
-declare class AdminVerifyRequest extends AdminVerifyRequest_base {}
-/** Every typed failure of the four admin entry points, plus the protocol's own errors. */
-declare const AdminFailure: Schema.Union<readonly [typeof OperationDenied, typeof RetryRefused, typeof LedgerError, typeof RunJournalError, typeof DigestError, typeof OwnershipLost, typeof SettlementConflict, typeof ConversationStoreError, typeof ConversationNotMaterialized, typeof AppendConflict, typeof FenceRejected, typeof DurableRuntimeFailpointError, typeof DurableAlarmError, typeof HostProtocolError]>;
-type AdminFailure = typeof AdminFailure.Type;
-declare const ExplainedRecovery_base: Schema.Class<ExplainedRecovery, Schema.TaggedStruct<"ExplainedRecovery", {
-  readonly explanations: Schema.$Array<typeof RecoveryExplanation>;
-}>, {}>;
-declare class ExplainedRecovery extends ExplainedRecovery_base {}
-declare const VerifiedIntegrity_base: Schema.Class<VerifiedIntegrity, Schema.TaggedStruct<"VerifiedIntegrity", {
-  readonly report: typeof IntegrityReport;
-}>, {}>;
-declare class VerifiedIntegrity extends VerifiedIntegrity_base {}
-declare const RetryExecuted_base: Schema.Class<RetryExecuted, Schema.TaggedStruct<"RetryExecuted", {
-  readonly report: typeof RecoveryReport;
-}>, {}>;
-declare class RetryExecuted extends RetryExecuted_base {}
-declare const ObligationsScanned_base: Schema.Class<ObligationsScanned, Schema.TaggedStruct<"ObligationsScanned", {
-  readonly report: typeof ObligationReport;
-}>, {}>;
-declare class ObligationsScanned extends ObligationsScanned_base {}
-declare const AdminFailed_base: Schema.Class<AdminFailed, Schema.TaggedStruct<"AdminFailed", {
-  readonly failure: Schema.Union<readonly [typeof OperationDenied, typeof RetryRefused, typeof LedgerError, typeof RunJournalError, typeof DigestError, typeof OwnershipLost, typeof SettlementConflict, typeof ConversationStoreError, typeof ConversationNotMaterialized, typeof AppendConflict, typeof FenceRejected, typeof DurableRuntimeFailpointError, typeof DurableAlarmError, typeof HostProtocolError]>;
-}>, {}>;
-/** The admin entry point failed TYPED on the Object; the failure re-decodes verbatim. */
-declare class AdminFailed extends AdminFailed_base {}
-/** The uniform answer of one admin entry point. Callers narrow by the tag their call implies. */
-declare const AdminResponse: Schema.Union<readonly [typeof ExplainedRecovery, typeof VerifiedIntegrity, typeof RetryExecuted, typeof ObligationsScanned, typeof AdminFailed]>;
-type AdminResponse = typeof AdminResponse.Type;
-declare const decodeAdminExplainRequest: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<AdminExplainRequest, Schema.SchemaError, never>;
-declare const decodeAdminVerifyRequest: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<AdminVerifyRequest, Schema.SchemaError, never>;
-declare const decodeRetryCommand: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<RetryCommand, Schema.SchemaError, never>;
-declare const decodeObligationThresholds: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<ObligationThresholds, Schema.SchemaError, never>;
-declare const encodeAdminResponse: (input: AdminFailed | ExplainedRecovery | ObligationsScanned | RetryExecuted | VerifiedIntegrity, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<{
-  readonly _tag: "ExplainedRecovery";
-  readonly explanations: readonly {
-    readonly submission: {
-      readonly submissionId: string;
-      readonly conversationId: string;
-      readonly state: "admitted" | "input-applied" | "joined" | "joining" | "ready" | "running" | "settled" | "suspended" | "terminalizing" | "unknown";
-      readonly queueSequence: number;
-      readonly createdAt: string;
-      readonly readyAt?: string | undefined;
-      readonly ageSeconds: number;
-      readonly readyAgeSeconds?: number | undefined;
-      readonly parentLinkage?: {
-        readonly parentSubmissionId: string;
-        readonly parentToolCallId: string;
-      } | undefined;
-    };
-    readonly evidence: {
-      readonly conversationMaterialized: boolean;
-      readonly inputRecorded: boolean;
-      readonly abortRecorded: boolean;
-      readonly recordedSettlementOutcome?: "aborted" | "completed" | "failed" | undefined;
-      readonly openToolCalls: readonly {
-        readonly toolCallId: string;
-        readonly toolName: string;
-        readonly turn: number;
-      }[];
-      readonly openDelegationCalls: readonly {
-        readonly toolCallId: string;
-        readonly toolName: string;
-        readonly turn: number;
-        readonly requested: boolean;
-        readonly started: boolean;
-        readonly joined: boolean;
-        readonly childConversationId?: string | undefined;
-        readonly childSubmissionId?: string | undefined;
-        readonly admission?: "admitted" | "indeterminate" | "not-admitted" | undefined;
-      }[];
-      readonly approvalsPending: readonly {
-        readonly toolCallId: string;
-        readonly turn: number;
-      }[];
-      readonly unknownCalls: readonly {
-        readonly toolCallId: string;
-        readonly toolName: string;
-        readonly reason: string;
-        readonly recordedAt: string;
-        readonly resolved: boolean;
-      }[];
-      readonly approvalDecisions: readonly {
-        readonly submissionId: string;
-        readonly toolCallId: string;
-        readonly decision: "approved" | "denied";
-        readonly resolver: string;
-        readonly reason: string;
-        readonly decidedAt: string;
-        readonly canonicalRecordId?: string | undefined;
-      }[];
-      readonly unknownResolutions: readonly {
-        readonly submissionId: string;
-        readonly toolCallId: string;
-        readonly author: string;
-        readonly reason: string;
-        readonly resolution: {
-          readonly _tag: "CompletedWithResult";
-          readonly result: Schema.Json;
-          readonly isFailure: boolean;
-        } | {
-          readonly _tag: "NeverHappened";
-        } | {
-          readonly _tag: "SafeToRetry";
-        } | {
-          readonly _tag: "AbortSubmission";
-        };
-        readonly resolvedAt: string;
-        readonly canonicalRecordId?: string | undefined;
-      }[];
-      readonly childAttachments: readonly {
-        readonly toolCallId: string;
-        readonly childSubmissionId: string;
-        readonly childState: "admitted" | "input-applied" | "joined" | "joining" | "ready" | "running" | "settled" | "suspended" | "terminalizing" | "unknown";
-        readonly childOutcome?: "aborted" | "completed" | "failed" | undefined;
-      }[];
-      readonly joins: readonly {
-        readonly submissionId: string;
-        readonly state: "admitted" | "input-applied" | "joined" | "joining" | "ready" | "running" | "settled" | "suspended" | "terminalizing" | "unknown";
-        readonly hostSubmissionId: string;
-      }[];
-      readonly hostSubmissionId?: string | undefined;
-      readonly suspension?: {
-        readonly reason: {
-          readonly _tag: "ApprovalPending";
-          readonly toolCallIds: readonly [string, ...string[]];
-        } | {
-          readonly _tag: "WaitingForChild";
-          readonly children: readonly [{
-            readonly toolCallId: string;
-            readonly childSubmissionId: string;
-          }, ...{
-            readonly toolCallId: string;
-            readonly childSubmissionId: string;
-          }[]];
-        };
-        readonly suspendedAt: string;
-      } | undefined;
-      readonly abortIntent?: {
-        readonly submissionId: string;
-        readonly author: string;
-        readonly reason: string;
-        readonly requestedAt: string;
-        readonly canonicalRecordId?: string | undefined;
-      } | undefined;
-    };
-    readonly decision: {
-      readonly _tag: "CompleteMaterialization";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "RepairReadiness";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "ApplyInput";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "RepairInputMarker";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "ResumeFromTurnBoundary";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "AppendReservedSettlement";
-      readonly submissionId: string;
-      readonly settlementId: string;
-      readonly outcome: "aborted" | "completed" | "failed";
-    } | {
-      readonly _tag: "FinalizeLedgerFromHistory";
-      readonly submissionId: string;
-      readonly settlementId: string;
-      readonly outcome: "aborted" | "completed" | "failed";
-    } | {
-      readonly _tag: "SettleAborted";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "MarkUnknown";
-      readonly submissionId: string;
-      readonly reason: string;
-      readonly openToolCallIds: readonly string[];
-    } | {
-      readonly _tag: "ResumePendingToolBatch";
-      readonly submissionId: string;
-      readonly turn: number;
-    } | {
-      readonly _tag: "AwaitApprovalDecision";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "ResumeSuspended";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "AwaitUnknownResolution";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "ApplyUnknownResolutions";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "RevertJoining";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "RepairJoinMarker";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "SettleJoinedWithHost";
-      readonly submissionId: string;
-      readonly outcome: "aborted" | "completed" | "failed";
-    } | {
-      readonly _tag: "AwaitHostSettlement";
-      readonly submissionId: string;
-      readonly hostSubmissionId?: string | undefined;
-    } | {
-      readonly _tag: "CompleteChildAdmission";
-      readonly submissionId: string;
-      readonly toolCallId: string;
-    } | {
-      readonly _tag: "AwaitChildAdmissionResolution";
-      readonly submissionId: string;
-      readonly toolCallId: string;
-    } | {
-      readonly _tag: "RepairSubagentStartLink";
-      readonly submissionId: string;
-      readonly toolCallId: string;
-    } | {
-      readonly _tag: "EnsureWaitingForChild";
-      readonly submissionId: string;
-      readonly children: readonly [{
-        readonly toolCallId: string;
-        readonly childSubmissionId: string;
-      }, ...{
-        readonly toolCallId: string;
-        readonly childSubmissionId: string;
-      }[]];
-    } | {
-      readonly _tag: "AwaitChildSettlement";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "ResumeWaitingParent";
-      readonly submissionId: string;
-      readonly children: readonly [{
-        readonly toolCallId: string;
-        readonly childSubmissionId: string;
-      }, ...{
-        readonly toolCallId: string;
-        readonly childSubmissionId: string;
-      }[]];
-    } | {
-      readonly _tag: "ApplyJoinAccounting";
-      readonly submissionId: string;
-      readonly toolCallId: string;
-      readonly reservationId: string;
-    } | {
-      readonly _tag: "PropagateChildAbort";
-      readonly submissionId: string;
-      readonly children: readonly [{
-        readonly toolCallId: string;
-        readonly childSubmissionId: string;
-      }, ...{
-        readonly toolCallId: string;
-        readonly childSubmissionId: string;
-      }[]];
-    } | {
-      readonly _tag: "ReleaseOrphanChildReservation";
-      readonly submissionId: string;
-      readonly reservationIds: readonly [string, ...string[]];
-    } | {
-      readonly _tag: "AwaitParentEstablishment";
-      readonly submissionId: string;
-      readonly parentSubmissionId: string;
-      readonly parentToolCallId: string;
-    } | {
-      readonly _tag: "NoAction";
-      readonly submissionId: string;
-    };
-    readonly decisionMeaning: string;
-    readonly disposition: "deferred" | "none" | "repaired" | "unknown";
-    readonly explainedAt: string;
-  }[];
-} | {
-  readonly _tag: "VerifiedIntegrity";
-  readonly report: {
-    readonly conversationId: string;
-    readonly tailSequence: number;
-    readonly recordCount: number;
-    readonly submissionCount: number;
-    readonly checks: readonly {
-      readonly name: "all-settled" | "checkpoint-binding" | "digest-chain" | "fifo-input-order" | "fifo-settlement-order" | "ledger-canonical-agreement" | "record-identity" | "schema-round-trip" | "sequence-contiguity" | "terminal-uniqueness";
-      readonly status: "failed" | "passed" | "skipped";
-      readonly detail?: string | undefined;
-    }[];
-    readonly ok: boolean;
-  };
-} | {
-  readonly _tag: "RetryExecuted";
-  readonly report: {
-    readonly submissionId: string;
-    readonly conversationId: string;
-    readonly decision: {
-      readonly _tag: "CompleteMaterialization";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "RepairReadiness";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "ApplyInput";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "RepairInputMarker";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "ResumeFromTurnBoundary";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "AppendReservedSettlement";
-      readonly submissionId: string;
-      readonly settlementId: string;
-      readonly outcome: "aborted" | "completed" | "failed";
-    } | {
-      readonly _tag: "FinalizeLedgerFromHistory";
-      readonly submissionId: string;
-      readonly settlementId: string;
-      readonly outcome: "aborted" | "completed" | "failed";
-    } | {
-      readonly _tag: "SettleAborted";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "MarkUnknown";
-      readonly submissionId: string;
-      readonly reason: string;
-      readonly openToolCallIds: readonly string[];
-    } | {
-      readonly _tag: "ResumePendingToolBatch";
-      readonly submissionId: string;
-      readonly turn: number;
-    } | {
-      readonly _tag: "AwaitApprovalDecision";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "ResumeSuspended";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "AwaitUnknownResolution";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "ApplyUnknownResolutions";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "RevertJoining";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "RepairJoinMarker";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "SettleJoinedWithHost";
-      readonly submissionId: string;
-      readonly outcome: "aborted" | "completed" | "failed";
-    } | {
-      readonly _tag: "AwaitHostSettlement";
-      readonly submissionId: string;
-      readonly hostSubmissionId?: string | undefined;
-    } | {
-      readonly _tag: "CompleteChildAdmission";
-      readonly submissionId: string;
-      readonly toolCallId: string;
-    } | {
-      readonly _tag: "AwaitChildAdmissionResolution";
-      readonly submissionId: string;
-      readonly toolCallId: string;
-    } | {
-      readonly _tag: "RepairSubagentStartLink";
-      readonly submissionId: string;
-      readonly toolCallId: string;
-    } | {
-      readonly _tag: "EnsureWaitingForChild";
-      readonly submissionId: string;
-      readonly children: readonly [{
-        readonly toolCallId: string;
-        readonly childSubmissionId: string;
-      }, ...{
-        readonly toolCallId: string;
-        readonly childSubmissionId: string;
-      }[]];
-    } | {
-      readonly _tag: "AwaitChildSettlement";
-      readonly submissionId: string;
-    } | {
-      readonly _tag: "ResumeWaitingParent";
-      readonly submissionId: string;
-      readonly children: readonly [{
-        readonly toolCallId: string;
-        readonly childSubmissionId: string;
-      }, ...{
-        readonly toolCallId: string;
-        readonly childSubmissionId: string;
-      }[]];
-    } | {
-      readonly _tag: "ApplyJoinAccounting";
-      readonly submissionId: string;
-      readonly toolCallId: string;
-      readonly reservationId: string;
-    } | {
-      readonly _tag: "PropagateChildAbort";
-      readonly submissionId: string;
-      readonly children: readonly [{
-        readonly toolCallId: string;
-        readonly childSubmissionId: string;
-      }, ...{
-        readonly toolCallId: string;
-        readonly childSubmissionId: string;
-      }[]];
-    } | {
-      readonly _tag: "ReleaseOrphanChildReservation";
-      readonly submissionId: string;
-      readonly reservationIds: readonly [string, ...string[]];
-    } | {
-      readonly _tag: "AwaitParentEstablishment";
-      readonly submissionId: string;
-      readonly parentSubmissionId: string;
-      readonly parentToolCallId: string;
-    } | {
-      readonly _tag: "NoAction";
-      readonly submissionId: string;
-    };
-    readonly disposition: "deferred" | "none" | "repaired" | "unknown";
-  };
-} | {
-  readonly _tag: "ObligationsScanned";
-  readonly report: {
-    readonly thresholds: {
-      readonly agingSeconds: number;
-      readonly overdueSeconds: number;
-    };
-    readonly entries: readonly {
-      readonly submissionId: string;
-      readonly conversationId: string;
-      readonly state: "admitted" | "input-applied" | "joined" | "joining" | "ready" | "running" | "settled" | "suspended" | "terminalizing" | "unknown";
-      readonly blockedOn: "approval" | "ready-aged" | "running-aged" | "unknown" | "waitingForChild";
-      readonly ageSeconds: number;
-      readonly severity: "aging" | "ok" | "overdue";
-    }[];
-    readonly generatedAt: string;
-  };
-} | {
-  readonly _tag: "AdminFailed";
-  readonly failure: {
-    readonly _tag: "OperationDenied";
-    readonly operation: "explain" | "observe" | "resolveApproval" | "resolveUnknown" | "retry" | "scanObligations" | "verify" | "wake";
-    readonly reason: string;
-    readonly conversationId?: string | undefined;
-    readonly submissionId?: string | undefined;
-  } | {
-    readonly _tag: "RetryRefused";
-    readonly submissionId: string;
-    readonly refusal: "await-approval-decision" | "await-unknown-resolution" | "settled";
-    readonly decisionTag: string;
-    readonly message: string;
-  } | {
-    readonly _tag: "LedgerError";
-    readonly operation: string;
-    readonly message: string;
-    readonly cause?: Schema.Json | undefined;
-  } | {
-    readonly _tag: "RunJournalError";
-    readonly message: string;
-    readonly cause?: Schema.Json | undefined;
-  } | {
-    readonly _tag: "DigestError";
-    readonly message: string;
-    readonly cause?: Schema.Json | undefined;
-  } | {
-    readonly _tag: "OwnershipLost";
-    readonly submissionId: string;
-    readonly actualEpoch: number;
-  } | {
-    readonly _tag: "SettlementConflict";
-    readonly submissionId: string;
-    readonly existingOutcome: "aborted" | "completed" | "failed";
-  } | {
-    readonly _tag: "ConversationStoreError";
-    readonly operation: string;
-    readonly message: string;
-    readonly cause?: Schema.Json | undefined;
-  } | {
-    readonly _tag: "ConversationNotMaterialized";
-    readonly conversationId: string;
-  } | {
-    readonly _tag: "AppendConflict";
-    readonly conversationId: string;
-    readonly batchId: string;
-    readonly reason: "batch-digest" | "record-identity" | "tail";
-    readonly actualTailSequence?: number | undefined;
-    readonly actualTailDigest?: string | undefined;
-  } | {
-    readonly _tag: "FenceRejected";
-    readonly conversationId: string;
-    readonly actualEpoch: number;
-    readonly attemptedEpoch: number;
-  } | {
-    readonly _tag: "DurableRuntimeFailpointError";
-    readonly location: "abort:after-intent" | "approval:after-request-append" | "approval:after-suspend" | "claim:after-claim" | "input:after-canonical-append" | "join:after-canonical-append" | "join:after-claim" | "resolve:after-intent" | "step:after-step-append" | "subagent:after-admit" | "subagent:after-child-abort-intent" | "subagent:after-child-ready" | "subagent:after-join-append" | "subagent:after-release" | "subagent:after-release-pending" | "subagent:after-request-append" | "subagent:after-reserve" | "subagent:after-sibling-settle" | "subagent:after-start-append" | "subagent:after-suspend" | "submit:after-admit" | "submit:after-materialize" | "terminalize:after-canonical-append" | "terminalize:after-reserve" | "tools:after-prepared-append" | "turn:after-canonical-append" | "turn:after-response-append" | "turn:after-results-append";
-  } | {
-    readonly _tag: "DurableAlarmError";
-    readonly operation: string;
-    readonly message: string;
-    readonly cause?: Schema.Json | undefined;
-  } | {
-    readonly _tag: "HostProtocolError";
-    readonly message: string;
-  };
-}, Schema.SchemaError, never>;
-declare const decodeAdminResponse: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => Effect.Effect<AdminFailed | ExplainedRecovery | ObligationsScanned | RetryExecuted | VerifiedIntegrity, Schema.SchemaError, never>;
-/** The public endpoint surface of one Conversation Object instance. */
-interface ConversationObjectInstance extends DurableObject {
-  submitEncoded(encoded: unknown): Promise<unknown>;
-  awaitSettlementEncoded(encoded: unknown): Promise<unknown>;
-  observePage(encoded: unknown): Promise<unknown>;
-  abortEncoded(encoded: unknown): Promise<unknown>;
-  resolveApprovalEncoded(encoded: unknown): Promise<unknown>;
-  resolveUnknownEncoded(encoded: unknown): Promise<unknown>;
-  explainEncoded(encoded: unknown): Promise<unknown>;
-  verifyEncoded(encoded: unknown): Promise<unknown>;
-  retryEncoded(encoded: unknown): Promise<unknown>;
-  obligationsEncoded(encoded: unknown): Promise<unknown>;
-  portCall(encoded: unknown): Promise<unknown>;
-  wake(): Promise<void>;
-  alarm(): Promise<void>;
-}
-/** The constructor shape workerd instantiates for each Conversation Object. */
-interface ConversationObjectClass {
-  new (ctx: DurableObjectState, env: Cloudflare.Env): ConversationObjectInstance;
-}
-/**
- * Build the application's Conversation Object class (export it from the Worker entry).
- * `telemetry` is the host composition boundary: it may require the Object context/namespace and
- * retain a typed acquisition error, while any additional output services remain available to the
- * cached runtime. `TelemetryError` stays the first explicit generic for source compatibility;
- * additional outputs infer from the Layer. Omitting it installs the content-free no-op service.
- * The explicit return type is what makes declaration emit possible: the class body carries a
- * private runtime field, and TS4094 rejects inferring an exported anonymous class type around it.
- */
-declare const makeConversationObjectClass: <TelemetryError = never, AdditionalTelemetryOutputs = never>(options: ConversationObjectOptions, telemetry?: Layer.Layer<CloudflareRuntimeTelemetry | AdditionalTelemetryOutputs, TelemetryError, DurableObjectContext | ConversationObjectNamespace>) => ConversationObjectClass;
-//#endregion
-//#region src/code-mode-executor.d.ts
-/**
- * The Cloudflare Dynamic Worker `CodeExecutor` adapter (C4 of ADR-0017;
- * DEPLOY-011). Each pass loads one fresh Worker through the Worker Loader
- * with `globalOutbound: null`, so generated code has no ambient network,
- * bindings, or secrets; its only authority is the pass-scoped host stub that
- * routes back to `CodeModeHostEntrypoint` and, from there, into the pass's
- * `CodeExecutionHost` service. Platform CPU limits stop synchronous runaway
- * programs; the executor-owned wall-clock deadline interrupts asynchronously
- * suspended passes. Deployment class `E` only: the adapter records no
- * persistent state and a later pass may run in a completely different
- * isolate.
- */
-declare const dynamicWorkerImplementation: SandboxImplementation;
-/** The narrow host stub the dynamic worker receives (Workers RPC). */
-interface CodeModeHostStub {
-  readonly call: (passId: string, hostCall: unknown) => Promise<unknown>;
-}
-/**
- * The host-side RPC target for dynamic workers. The application exposes it
- * from its Worker entry (`export { CodeModeHostEntrypoint }`) and hands the
- * adapter a same-instance stub — `ctx.exports.CodeModeHostEntrypoint()` in
- * production (a self service binding may reach a different instance and must
- * not be used there); tests bind it through Miniflare's `kCurrentWorker`.
- */
-declare class CodeModeHostEntrypoint extends WorkerEntrypoint {
-  call(passId: unknown, hostCall: unknown): Promise<unknown>;
-}
-interface DynamicWorkerCodeExecutorOptions {
-  /** The `worker_loader` binding. */
-  readonly loader: WorkerLoader;
-  /**
-   * A SAME-INSTANCE stub of `CodeModeHostEntrypoint`. In production create it
-   * with `ctx.exports.CodeModeHostEntrypoint()`; a cross-instance stub would
-   * dispatch host calls into an isolate without this pass's registry entry.
-   */
-  readonly hostStub: CodeModeHostStub;
-  /** Compatibility date for dynamic workers; defaults to `2025-05-01`. */
-  readonly compatibilityDate?: string | undefined;
-}
-/** Layer building the Dynamic Worker `CodeExecutor` from resolved bindings. */
-declare const dynamicWorkerCodeExecutorLayer: (options: DynamicWorkerCodeExecutorOptions) => Layer.Layer<CodeExecutor>;
-//#endregion
-export { AbortRecorded, AdminExplainRequest, AdminFailed, AdminFailure, AdminResponse, AdminVerifyRequest, AdmissionLimitExceeded, ApprovalRecorded, CLOUDFLARE_DATABASE_CAP_BYTES, CLOUDFLARE_RUNTIME_DEFAULTS, ClientAbortFailure, ClientApprovalFailure, ClientAwaitFailure, ClientObserveFailure, ClientSubmitFailure, ClientUnknownFailure, CloudflareAdmissionLimitsValue, CloudflareBindingError, CloudflareBindingSource, CloudflareBindingSourceContext, CloudflareConversationClient, CloudflareDurableRuntime, CloudflareDurableRuntimeConfig, CloudflareDurableRuntimeConfigValue, CloudflareDurableRuntimeInitializationError, CloudflareDurableRuntimeOptions, CloudflareDurableRuntimeServices, CloudflarePlatformConfigError, CloudflareRuntimeTelemetry, CloudflareTelemetryExportError, CodeModeHostEntrypoint, CodeModeHostStub, ConversationClientError, ConversationMaintenance, ConversationObjectClass, ConversationObjectIdentity, ConversationObjectInstance, ConversationObjectNamespace, ConversationObjectOptions, ConversationObjectPorts, ConversationObjectRpc, DEFAULT_MAX_DATABASE_BYTES, DurableAlarmError, DurableAlarmService, DurableObjectContext, DynamicWorkerCodeExecutorOptions, ExplainedRecovery, HostFailed, HostFailure, HostProtocolError, HostResponse, MaintenancePassFailure, MaintenancePassReport, ObligationsScanned, ObservePageRequest, ObservedPage, RetryExecuted, SettlementReached, SubmitRequest, SubmitSucceeded, UnknownResolutionRecorded, VerifiedIntegrity, boundHostDiagnostic, cloudflareWakeSchedulerLayer, conversationNamespaceFromEnv, conversationNamespaceLayer, conversationPortTransportLayer, decodeAbortCommand, decodeAdminExplainRequest, decodeAdminResponse, decodeAdminVerifyRequest, decodeApprovalDecisionCommand, decodeHostResponse, decodeObligationThresholds, decodeObservePageRequest, decodeReceipt, decodeRetryCommand, decodeSubmitRequest, decodeUnknownResolutionCommand, dynamicWorkerCodeExecutorLayer, dynamicWorkerImplementation, encodeAbortCommand, encodeAdminResponse, encodeApprovalDecisionCommand, encodeHostResponse, encodeObservePageRequest, encodeReceipt, encodeSubmitRequest, encodeUnknownResolutionCommand, makeConversationObjectClass };
-//# sourceMappingURL=index.d.mts.map
+import { t as CloudflareBindings_d_exports } from "./CloudflareBindings.mjs";
+import { o as CloudflareConfig_d_exports } from "./CloudflareConfig-DKXGo8L3.mjs";
+import { t as Alarm_d_exports } from "./Alarm.mjs";
+import { t as CloudflareBrowser_d_exports } from "./CloudflareBrowser-Doe1M7R5.mjs";
+import { t as CloudflareAiGateway_d_exports } from "./CloudflareAiGateway.mjs";
+import { t as CloudflareCodeMode_d_exports } from "./CloudflareCodeMode.mjs";
+import { t as CloudflareMemory_d_exports } from "./CloudflareMemory.mjs";
+import { t as CloudflareScheduling_d_exports } from "./CloudflareScheduling.mjs";
+import { t as CloudflareSubscriptions_d_exports } from "./CloudflareSubscriptions.mjs";
+import { t as CloudflareThreadClient_d_exports } from "./CloudflareThreadClient.mjs";
+import { f as ThreadObject_d_exports } from "./ThreadObject-CMQiW2uX.mjs";
+import { t as WakeScheduler_d_exports } from "./WakeScheduler.mjs";
+export { Alarm_d_exports as Alarm, CloudflareAiGateway_d_exports as CloudflareAiGateway, CloudflareBindings_d_exports as CloudflareBindings, CloudflareBrowser_d_exports as CloudflareBrowser, CloudflareCodeMode_d_exports as CloudflareCodeMode, CloudflareConfig_d_exports as CloudflareConfig, CloudflareMemory_d_exports as CloudflareMemory, CloudflareScheduling_d_exports as CloudflareScheduling, CloudflareSubscriptions_d_exports as CloudflareSubscriptions, CloudflareThreadClient_d_exports as CloudflareThreadClient, ThreadObject_d_exports as ThreadObject, WakeScheduler_d_exports as WakeScheduler };