@effect-agent/platform-cloudflare 0.1.0-beta.122 → 0.1.0-beta.124

package/dist/ProtectedBrowser.d.mts

@@ -1,142 +0,0 @@
-import { _ as BrowserRunLiveViewRequest, i as BrowserRunHandoffState, k as BrowserRunSessionLifecycle, n as BrowserRunHandoffRequest, v as BrowserRunLiveViewResult } from "./InteractiveBrowser-Cm4xgiGy.mjs";
-import { Cause, Context, Crypto, Effect, Layer, Redacted, Schema, Scope } from "effect";
-import { InteractiveBrowserPolicy } from "effect-agent/interactive-browser";
-import { BrowserCredentialAccess, CredentialFieldRole, CredentialOrigin, ProtectedBrowser, ProtectedBrowserCheckpoint, ProtectedBrowserControl, ProtectedBrowserError, ProtectedBrowserHandle, ProtectedCleanup } from "effect-agent/protected-browser";
-//#region src/protected-browser/policy.d.ts
-declare const ProtectedTransportError_base: Schema.Class<ProtectedTransportError, Schema.TaggedStruct<"ProtectedTransportError", {
-  readonly reason: Schema.Literals<readonly ["stale-reference", "needs-attention", "unsupported", "provider"]>;
-}>, Cause.YieldableError>;
-declare class ProtectedTransportError extends ProtectedTransportError_base {}
-declare const ProtectedBrowserDispatch_base: Context.ServiceClass<ProtectedBrowserDispatch, "@effect-agent/platform-cloudflare/ProtectedBrowserDispatch", {
-  readonly mark: Effect.Effect<void>;
-  /** Only an acknowledged reply before assignment may restore the preceding dispatch evidence. */
-  readonly confirmNoWrite: Effect.Effect<void>;
-}>;
-/** Per-write evidence authority, provided by the policy immediately around a transport fill. */
-declare class ProtectedBrowserDispatch extends ProtectedBrowserDispatch_base {}
-/** Decoded adapter boundary. SDK exceptions and page diagnostics never cross this port. */
-interface ProtectedBrowserTransport {
-  /** Select observation/target origins; undefined restores all network-permitted HTTPS frames. */
-  readonly restrictObservation: (origins: ReadonlyArray<typeof CredentialOrigin.Type> | undefined) => Effect.Effect<void, ProtectedTransportError>;
-  readonly context: Effect.Effect<typeof ProtectedPageContext.Type, ProtectedTransportError>;
-  readonly discover: Effect.Effect<typeof ProtectedDiscovery.Type, ProtectedTransportError>;
-  readonly target: (ref: string) => Effect.Effect<ProtectedBrowserControl, ProtectedTransportError>;
-  readonly navigate: (url: string) => Effect.Effect<void, ProtectedTransportError>;
-  readonly click: (ref: string) => Effect.Effect<void, ProtectedTransportError>;
-  readonly fill: (ref: string, role: typeof CredentialFieldRole.Type | "text" | "select", value: Redacted.Redacted<string>) => Effect.Effect<void, ProtectedTransportError, ProtectedBrowserDispatch>;
-  /** Invalidates local references synchronously before bounded exact-session cleanup. */
-  readonly invalidate: () => void;
-  /** Forget all discovered controls on a controller transition. */
-  readonly resetReferences: () => void;
-  /** Host attachment release, available only for transferable provider sessions. */
-  readonly detach?: Effect.Effect<void, ProtectedBrowserError>;
-  readonly close: Effect.Effect<typeof ProtectedCleanup.Type>;
-}
-declare const BrowserRunProtectedTransport_base: Context.ServiceClass<BrowserRunProtectedTransport, "@effect-agent/platform-cloudflare/BrowserRunProtectedTransport", {
-  readonly open: (policy: InteractiveBrowserPolicy) => Effect.Effect<ProtectedBrowserTransport, ProtectedBrowserError, Scope.Scope>;
-}>;
-/** Adapter-private injection seam for deterministic tests, not a model capability. */
-declare class BrowserRunProtectedTransport extends BrowserRunProtectedTransport_base {}
-declare const ProtectedPageContext: Schema.Struct<{
-  readonly document: Schema.String;
-  readonly topOrigin: Schema.String;
-  readonly frameOrigins: Schema.$Array<Schema.String>;
-}>;
-declare const ProtectedDiscovery: Schema.Struct<{
-  readonly document: Schema.String;
-  readonly topOrigin: Schema.String;
-  readonly frameOrigins: Schema.$Array<Schema.String>;
-  readonly text: Schema.String;
-  readonly controls: Schema.$Array<typeof ProtectedBrowserControl>;
-  readonly truncated: Schema.Boolean;
-}>;
-/** Fresh private passes; scoped release confirms exact-session termination. */
-export declare const browserRunProtectedLayer: () => Layer.Layer<ProtectedBrowser, never, BrowserRunProtectedTransport | Crypto.Crypto>;
-//#endregion
-//#region src/protected-browser/binding.d.ts
-/** Host-private exact page identity; never include it in model-visible results. */
-declare const ProtectedProviderIdentity: Schema.Struct<{
-  readonly sessionId: Schema.Redacted<Schema.String>;
-  readonly contextId: Schema.Redacted<Schema.NonEmptyString>;
-  readonly targetId: Schema.Redacted<Schema.NonEmptyString>;
-}>;
-type ProtectedProviderIdentity = typeof ProtectedProviderIdentity.Type;
-interface ProtectedProviderSession {
-  readonly identity: ProtectedProviderIdentity;
-  readonly driver: ProtectedBrowserTransport;
-  readonly command: (method: "Cloudflare.getLiveView" | "Cloudflare.handoff" | "Cloudflare.getHandoffState", parameters: Readonly<Record<string, string | number>>) => Effect.Effect<unknown, ProtectedBrowserError>;
-  readonly detach: Effect.Effect<void, ProtectedBrowserError>;
-}
-declare const BrowserRunProtectedBinding_base: Context.ServiceClass<BrowserRunProtectedBinding, "@effect-agent/platform-cloudflare/BrowserRunProtectedBinding", {
-  readonly open: (policy: InteractiveBrowserPolicy, identity?: ProtectedProviderIdentity) => Effect.Effect<ProtectedProviderSession, ProtectedBrowserError, Scope.Scope>;
-  readonly keepAlive: (sessionId: Redacted.Redacted<string>) => Effect.Effect<void, ProtectedBrowserError>;
-}>;
-declare class BrowserRunProtectedBinding extends BrowserRunProtectedBinding_base {}
-/** One binding implementation serves scoped tools and host-managed protected handoffs. */
-export declare const browserRunProtectedBindingLayer: (options: {
-  readonly browser: Pick<BrowserRun, "fetch">;
-}) => Layer.Layer<BrowserRunProtectedBinding | BrowserRunProtectedTransport, never, BrowserRunSessionLifecycle | Crypto.Crypto>;
-//#endregion
-//#region src/protected-browser/host.d.ts
-declare const BrowserRunProtectedCheckpoint_base: Schema.Class<BrowserRunProtectedCheckpoint, Schema.Struct<{
-  readonly sessionId: Schema.Redacted<Schema.String>;
-  readonly contextId: Schema.Redacted<Schema.NonEmptyString>;
-  readonly targetId: Schema.Redacted<Schema.NonEmptyString>;
-  readonly protected: typeof ProtectedBrowserCheckpoint;
-  readonly handoffId: Schema.optionalKey<Schema.Redacted<Schema.NonEmptyString>>;
-}>, {}>;
-/** Host-only receipt. Store atomically with the controller lease; never return it to a model. */
-export declare class BrowserRunProtectedCheckpoint extends BrowserRunProtectedCheckpoint_base {}
-interface BrowserRunProtectedSession {
-  readonly handle: ProtectedBrowserHandle;
-  readonly sessionId: Redacted.Redacted<string>;
-  /** Quiesce for a durable workflow pause or human-control request. Persist before detaching. */
-  readonly suspend: Effect.Effect<BrowserRunProtectedCheckpoint, ProtectedBrowserError>;
-  /** Fences agent tools before dispatch. Persist the returned receipt before detaching. */
-  readonly handoff: (request: BrowserRunHandoffRequest) => Effect.Effect<BrowserRunProtectedCheckpoint, ProtectedBrowserError>;
-  /** Available only while human control is held; the host must authorize the specific human. */
-  readonly getLiveView: (request: BrowserRunLiveViewRequest) => Effect.Effect<BrowserRunLiveViewResult, ProtectedBrowserError>;
-  readonly getHandoffState: Effect.Effect<BrowserRunHandoffState, ProtectedBrowserError>;
-  /** Read only the exact page’s current origin after its recorded handoff completes; tools remain paused. */
-  readonly getReturnOrigin: Effect.Effect<typeof CredentialOrigin.Type, ProtectedBrowserError>;
-  /**
-   * Resume a committed pause; human handoffs also require provider completion. Returns no page data.
-   * A fresh authorized observation must succeed before page actions or credential operations.
-   */
-  readonly returnControl: Effect.Effect<void, ProtectedBrowserError>;
-  /** Release this attachment only after committing its suspended checkpoint; preserve the remote browser. */
-  readonly detach: Effect.Effect<void, ProtectedBrowserError>;
-  readonly close: Effect.Effect<typeof ProtectedCleanup.Type>;
-}
-declare const BrowserRunProtectedHost_base: Context.ServiceClass<BrowserRunProtectedHost, "@effect-agent/platform-cloudflare/BrowserRunProtectedHost", {
-  /**
-   * Refresh provider inactivity on an exact retained session with one browser-level command.
-   * Internally scoped and bounded to ten seconds; releases only its own connection on every exit.
-   * Does not acquire a page, transfer control, extend host expiry, or close the provider on failure.
-   */
-  readonly keepAlive: (sessionId: Redacted.Redacted<string>) => Effect.Effect<void, ProtectedBrowserError>;
-  readonly open: (policy: InteractiveBrowserPolicy) => Effect.Effect<BrowserRunProtectedSession, ProtectedBrowserError, Scope.Scope | BrowserCredentialAccess>;
-  /**
-   * A pure pre-handle provider failure with not-dispatched/none/not-requested evidence
-   * retires this attempt's SDK callbacks and confirms local socket closure before returning
-   * (or never starts SDK initialization). Raw retirement failure remains a mixed defect.
-   * This does not confirm provider health or undo already-sent CDP; the host still owns
-   * atomic claim restoration and must exclude defects, interruption, and post-handle errors.
-   */
-  readonly resume: (checkpoint: BrowserRunProtectedCheckpoint) => Effect.Effect<BrowserRunProtectedSession, ProtectedBrowserError, Scope.Scope | BrowserCredentialAccess>;
-  readonly closeSession: (sessionId: Redacted.Redacted<string>) => Effect.Effect<typeof ProtectedCleanup.Type>;
-}>;
-/**
- * Host authority for one protected page. The consumer owns durable generation fencing, authorized
- * human recipients, checkpoint integrity, vault exposure metadata, and expiry cleanup. Resume only
- * the latest committed suspended receipt; it never replays browser mutations or creates a page.
- * Hosted passes require Unrestricted network policy: attachment-local request interception
- * cannot enforce an ExactHosts policy during detachment. Current credential grants still apply.
- * Provider inactivity/session deadlines still apply while the host is detached.
- */
-export declare class BrowserRunProtectedHost extends BrowserRunProtectedHost_base {}
-/** Compose with browserRunProtectedBindingLayer and BrowserRunSessionLifecycle. */
-export declare const browserRunProtectedHostLayer: () => Layer.Layer<BrowserRunProtectedHost, never, BrowserRunProtectedBinding | BrowserRunSessionLifecycle | Crypto.Crypto>;
-//#endregion
-export type { BrowserRunProtectedSession };
-//# sourceMappingURL=ProtectedBrowser.d.mts.map