@effect-agent/platform-cloudflare 0.1.0-beta.25 → 0.1.0-beta.26

package/dist/index.d.mts

@@ -5,7 +5,7 @@ import { AgentInputError, ConversationId } from "@effect-agent/core";
 import { RunContextPreparation } from "@effect-agent/engine";
 import { DurableObjectState as DurableObjectState$1, WorkerEnvironment } from "effect-cf";
 import { CodeExecutor, SandboxImplementation } from "@effect-agent/sandbox";
-import { DurableObject as DurableObject$1, WorkerEntrypoint } from "cloudflare:workers";
+import { DurableObject as DurableObject$1 } from "cloudflare:workers";
 //#region src/bindings.d.ts
 declare const CloudflareBindingError_base: Schema.Class<CloudflareBindingError, Schema.TaggedStruct<"CloudflareBindingError", {
   readonly binding: Schema.String;
@@ -1603,45 +1603,24 @@ declare const makeConversationObjectClass: <EventLayerError = never, EventServic
  * The Cloudflare Dynamic Worker `CodeExecutor` adapter (C4 of ADR-0017;
  * DEPLOY-011). Each pass loads one fresh Worker through the Worker Loader
  * with `globalOutbound: null`, so generated code has no ambient network,
- * bindings, or secrets; its only authority is the pass-scoped host stub that
- * routes back to `CodeModeHostEntrypoint` and, from there, into the pass's
- * `CodeExecutionHost` service. Platform CPU limits stop synchronous runaway
- * programs; the executor-owned wall-clock deadline interrupts asynchronously
- * suspended passes. Deployment class `E` only: the adapter records no
- * persistent state and a later pass may run in a completely different
- * isolate.
+ * bindings, or secrets; its only authority is the pass-scoped RPC target that
+ * routes back into the owning event's `CodeExecutionHost` service. Platform
+ * CPU limits stop synchronous runaway programs; the executor-owned wall-clock
+ * deadline interrupts asynchronously suspended passes. Deployment class `E`
+ * only: the adapter records no persistent state and a later pass may run in a
+ * completely different isolate.
  */
 declare const dynamicWorkerImplementation: SandboxImplementation;
-/** The narrow host stub the dynamic worker receives (Workers RPC). */
-interface CodeModeHostStub {
-  readonly call: (passId: string, hostCall: unknown) => Promise<unknown>;
-}
-/**
- * The host-side RPC target for dynamic workers. The application exposes it
- * from its Worker entry (`export { CodeModeHostEntrypoint }`) and hands the
- * adapter a same-instance stub — `ctx.exports.CodeModeHostEntrypoint()` in
- * production (a self service binding may reach a different instance and must
- * not be used there); tests bind it through Miniflare's `kCurrentWorker`.
- */
-declare class CodeModeHostEntrypoint extends WorkerEntrypoint {
-  call(passId: unknown, hostCall: unknown): Promise<unknown>;
-}
 /** Dispose a Cloudflare RPC handle when the runtime supplies its untyped disposal hook. @internal */
 declare const disposeRpcHandle: (handle: unknown) => Effect.Effect<void>;
 interface DynamicWorkerCodeExecutorOptions {
   /** The `worker_loader` binding. */
   readonly loader: WorkerLoader;
-  /**
-   * A SAME-INSTANCE stub of `CodeModeHostEntrypoint`. In production create it
-   * with `ctx.exports.CodeModeHostEntrypoint()`; a cross-instance stub would
-   * dispatch host calls into an isolate without this pass's registry entry.
-   */
-  readonly hostStub: CodeModeHostStub;
   /** Compatibility date for dynamic workers; defaults to `2025-05-01`. */
   readonly compatibilityDate?: string | undefined;
 }
 /** Layer building the Dynamic Worker `CodeExecutor` from resolved bindings. */
 declare const dynamicWorkerCodeExecutorLayer: (options: DynamicWorkerCodeExecutorOptions) => Layer.Layer<CodeExecutor>;
 //#endregion
-export { AbortRecorded, AdminExplainRequest, AdminFailed, AdminFailure, AdminResponse, AdminVerifyRequest, AdmissionLimitExceeded, ApprovalRecorded, AwaitProgressRequest, CLOUDFLARE_DATABASE_CAP_BYTES, CLOUDFLARE_RUNTIME_DEFAULTS, CancelProgressRequest, ClientAbortFailure, ClientApprovalFailure, ClientAwaitFailure, ClientObserveFailure, ClientProgressFailure, ClientSubmitFailure, ClientUnknownFailure, CloudflareAdmissionLimitsValue, CloudflareBindingError, CloudflareBindingSource, CloudflareBindingSourceContext, CloudflareConversationClient, CloudflareDurableRuntime, CloudflareDurableRuntimeConfig, CloudflareDurableRuntimeConfigValue, CloudflareDurableRuntimeInitializationError, CloudflareDurableRuntimeOptions, CloudflareDurableRuntimeServices, CloudflarePlatformConfigError, CloudflareRunContextLayer, CloudflareRunContextSource, CloudflareRuntimeSourceContext, CodeModeHostEntrypoint, CodeModeHostStub, ConversationClientError, ConversationMaintenance, ConversationMaintenanceFailpoint, ConversationMaintenanceFailpointHandler, ConversationMaintenanceFailpointLocation, ConversationObjectClass, ConversationObjectIdentity, ConversationObjectInstance, ConversationObjectNamespace, ConversationObjectOptions, ConversationObjectPorts, ConversationObjectRpc, DEFAULT_MAX_DATABASE_BYTES, DurableAlarmError, DurableAlarmService, DurableObjectContext, DynamicWorkerCodeExecutorOptions, ExplainedRecovery, HostFailed, HostFailure, HostProtocolError, HostResponse, MaintenancePassFailure, MaintenancePassReport, ObligationsScanned, ObservePageRequest, ObservedPage, ProgressCancelled, ProgressObserved, ProgressWaitRegistry, RetryExecuted, SettlementReached, SubmitRequest, SubmitSucceeded, UnknownResolutionRecorded, VerifiedIntegrity, boundHostDiagnostic, cloudflareWakeSchedulerLayer, conversationNamespaceFromEnv, conversationNamespaceLayer, conversationPortTransportLayer, decodeAbortCommand, decodeAdminExplainRequest, decodeAdminResponse, decodeAdminVerifyRequest, decodeApprovalDecisionCommand, decodeAwaitProgressRequest, decodeCancelProgressRequest, decodeHostResponse, decodeObligationThresholds, decodeObservePageRequest, decodeReceipt, decodeRetryCommand, decodeSubmitRequest, decodeUnknownResolutionCommand, disposeRpcHandle, dynamicWorkerCodeExecutorLayer, dynamicWorkerImplementation, encodeAbortCommand, encodeAdminResponse, encodeApprovalDecisionCommand, encodeAwaitProgressRequest, encodeCancelProgressRequest, encodeHostResponse, encodeObservePageRequest, encodeReceipt, encodeSubmitRequest, encodeUnknownResolutionCommand, makeConversationObjectClass };
+export { AbortRecorded, AdminExplainRequest, AdminFailed, AdminFailure, AdminResponse, AdminVerifyRequest, AdmissionLimitExceeded, ApprovalRecorded, AwaitProgressRequest, CLOUDFLARE_DATABASE_CAP_BYTES, CLOUDFLARE_RUNTIME_DEFAULTS, CancelProgressRequest, ClientAbortFailure, ClientApprovalFailure, ClientAwaitFailure, ClientObserveFailure, ClientProgressFailure, ClientSubmitFailure, ClientUnknownFailure, CloudflareAdmissionLimitsValue, CloudflareBindingError, CloudflareBindingSource, CloudflareBindingSourceContext, CloudflareConversationClient, CloudflareDurableRuntime, CloudflareDurableRuntimeConfig, CloudflareDurableRuntimeConfigValue, CloudflareDurableRuntimeInitializationError, CloudflareDurableRuntimeOptions, CloudflareDurableRuntimeServices, CloudflarePlatformConfigError, CloudflareRunContextLayer, CloudflareRunContextSource, CloudflareRuntimeSourceContext, ConversationClientError, ConversationMaintenance, ConversationMaintenanceFailpoint, ConversationMaintenanceFailpointHandler, ConversationMaintenanceFailpointLocation, ConversationObjectClass, ConversationObjectIdentity, ConversationObjectInstance, ConversationObjectNamespace, ConversationObjectOptions, ConversationObjectPorts, ConversationObjectRpc, DEFAULT_MAX_DATABASE_BYTES, DurableAlarmError, DurableAlarmService, DurableObjectContext, DynamicWorkerCodeExecutorOptions, ExplainedRecovery, HostFailed, HostFailure, HostProtocolError, HostResponse, MaintenancePassFailure, MaintenancePassReport, ObligationsScanned, ObservePageRequest, ObservedPage, ProgressCancelled, ProgressObserved, ProgressWaitRegistry, RetryExecuted, SettlementReached, SubmitRequest, SubmitSucceeded, UnknownResolutionRecorded, VerifiedIntegrity, boundHostDiagnostic, cloudflareWakeSchedulerLayer, conversationNamespaceFromEnv, conversationNamespaceLayer, conversationPortTransportLayer, decodeAbortCommand, decodeAdminExplainRequest, decodeAdminResponse, decodeAdminVerifyRequest, decodeApprovalDecisionCommand, decodeAwaitProgressRequest, decodeCancelProgressRequest, decodeHostResponse, decodeObligationThresholds, decodeObservePageRequest, decodeReceipt, decodeRetryCommand, decodeSubmitRequest, decodeUnknownResolutionCommand, disposeRpcHandle, dynamicWorkerCodeExecutorLayer, dynamicWorkerImplementation, encodeAbortCommand, encodeAdminResponse, encodeApprovalDecisionCommand, encodeAwaitProgressRequest, encodeCancelProgressRequest, encodeHostResponse, encodeObservePageRequest, encodeReceipt, encodeSubmitRequest, encodeUnknownResolutionCommand, makeConversationObjectClass };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.mjs

@@ -7,7 +7,7 @@ import { BrowserCrypto } from "@effect/platform-browser";
 import { SqliteClient } from "@effect/sql-sqlite-do";
 import { DurableObject, DurableObjectState, WorkerEnvironment } from "effect-cf";
 import { CodeExecutionHost, CodeExecutionProtocolError, CodeExecutionResourceUse, CodeExecutionResult, CodeExecutionTimeoutError, CodeExecutor, CodeExecutorStartError, CodeExecutorTerminatedError, CodeExecutorUnsupportedError, CodeHostCall, CodeHostCallLimitError, CodeHostCallResult, CodeOutputLimitError, CodeProgramFailedError, CodeSourceError, SandboxImplementation } from "@effect-agent/sandbox";
-import { WorkerEntrypoint } from "cloudflare:workers";
+import { RpcTarget } from "cloudflare:workers";
 //#region src/bindings.ts
 /**
 * Cloudflare platform bindings as Effect services (DEPLOY-010: "Cloudflare platform bindings
@@ -1386,37 +1386,32 @@ const makeConversationObjectClass = (options, observability) => {
 * The Cloudflare Dynamic Worker `CodeExecutor` adapter (C4 of ADR-0017;
 * DEPLOY-011). Each pass loads one fresh Worker through the Worker Loader
 * with `globalOutbound: null`, so generated code has no ambient network,
-* bindings, or secrets; its only authority is the pass-scoped host stub that
-* routes back to `CodeModeHostEntrypoint` and, from there, into the pass's
-* `CodeExecutionHost` service. Platform CPU limits stop synchronous runaway
-* programs; the executor-owned wall-clock deadline interrupts asynchronously
-* suspended passes. Deployment class `E` only: the adapter records no
-* persistent state and a later pass may run in a completely different
-* isolate.
+* bindings, or secrets; its only authority is the pass-scoped RPC target that
+* routes back into the owning event's `CodeExecutionHost` service. Platform
+* CPU limits stop synchronous runaway programs; the executor-owned wall-clock
+* deadline interrupts asynchronously suspended passes. Deployment class `E`
+* only: the adapter records no persistent state and a later pass may run in a
+* completely different isolate.
 */
 const dynamicWorkerImplementation = SandboxImplementation.make({
 	isolation: "isolated",
 	identity: "cloudflare-dynamic-worker"
 });
 /**
-* Live passes by identity. Entries are Scope-managed: registered when a pass
-* opens and removed by its finalizer, so a stale harness (or a forged
-* `passId`) cannot reach any host authority.
-*/
-const passRegistry = /* @__PURE__ */ new Map();
-/**
-* The host-side RPC target for dynamic workers. The application exposes it
-* from its Worker entry (`export { CodeModeHostEntrypoint }`) and hands the
-* adapter a same-instance stub — `ctx.exports.CodeModeHostEntrypoint()` in
-* production (a self service binding may reach a different instance and must
-* not be used there); tests bind it through Miniflare's `kCurrentWorker`.
+* One object-capability endpoint for one execution pass. Workers RPC invokes
+* the target in the request context where it was created, so the native
+* Promise returned by `dispatch` and the Effect fiber that settles it share
+* one I/O owner. Passing the target as `run()`'s argument also scopes the
+* remote stub to that RPC call; no request state lives at module scope.
 */
-var CodeModeHostEntrypoint = class extends WorkerEntrypoint {
-	async call(passId, hostCall) {
-		if (typeof passId !== "string") throw new TypeError("Code Mode pass identities must be strings");
-		const pass = passRegistry.get(passId);
-		if (pass === void 0) throw new Error("Unknown Code Mode pass");
-		return pass.dispatch(hostCall);
+var CodeModePassHostTarget = class extends RpcTarget {
+	#dispatch;
+	constructor(dispatch) {
+		super();
+		this.#dispatch = dispatch;
+	}
+	call(hostCall) {
+		return this.#dispatch(hostCall);
 	}
 };
 /**
@@ -1451,9 +1446,8 @@ const safeJson = (value) => {
 };
 
 export default class CodeModeHarness extends WorkerEntrypoint {
-  async run() {
+  async run(host) {
     const config = this.env.CODE_MODE_PASS;
-    const host = this.env.CODE_MODE_HOST;
     const limits = config.limits;
     const logs = [];
     let logBytes = 0;
@@ -1491,7 +1485,7 @@ export default class CodeModeHarness extends WorkerEntrypoint {
         };
         throw new Error("code-mode host-call argument limit exceeded");
       }
-      const outcome = await host.call(config.passId, {
+      const outcome = await host.call({
         namespace,
         method,
         argument: JSON.parse(argText),
@@ -1616,7 +1610,6 @@ const HarnessOutcome = Schema.Union([
 	HarnessProtocol
 ]);
 const HarnessPassConfig = Schema.Struct({
-	passId: Schema.NonEmptyString,
 	namespaces: Schema.Array(Schema.Struct({
 		name: Schema.NonEmptyString,
 		methods: Schema.Array(Schema.NonEmptyString).check(Schema.isMaxLength(64))
@@ -1684,7 +1677,7 @@ const utf8ByteLength = (value) => {
 };
 /** Reserved global names the harness owns inside the dynamic worker. */
 const reservedHarnessGlobals = /* @__PURE__ */ new Set(["console"]);
-const makeExecute = (options, crypto, clock) => Effect.fn("DynamicWorkerCodeExecutor.execute")(function* (request) {
+const makeExecute = (options, clock) => Effect.fn("DynamicWorkerCodeExecutor.execute")(function* (request) {
 	if (request.network._tag !== "NetworkDisabled") return yield* CodeExecutorUnsupportedError.make({
 		implementation: dynamicWorkerImplementation,
 		feature: "network",
@@ -1702,11 +1695,6 @@ const makeExecute = (options, crypto, clock) => Effect.fn("DynamicWorkerCodeExec
 		message: `Namespace ${namespace.name} collides with a harness binding`
 	});
 	const host = yield* CodeExecutionHost;
-	const passId = yield* crypto.randomUUIDv4.pipe(Effect.mapError((cause) => CodeExecutorStartError.make({
-		implementation: dynamicWorkerImplementation,
-		message: `Could not mint the Code Mode pass identity: ${safeCauseMessage(cause, "the crypto service failed without a diagnostic")}`.slice(0, 8e3),
-		cause
-	})), Effect.map((uuid) => `code-mode-pass-${uuid}`));
 	const startedAt = clock.monotonicTimeNanosUnsafe();
 	const passDeadline = startedAt + Duration.toNanosUnsafe(request.limits.maxWallTime);
 	const remainingPassWallTime = () => {
@@ -1821,12 +1809,9 @@ const makeExecute = (options, crypto, clock) => Effect.fn("DynamicWorkerCodeExec
 	};
 	const closeAdmission = Effect.sync(() => {
 		passOpen = false;
-		passRegistry.delete(passId);
 		rejectQueuedHostCalls(/* @__PURE__ */ new Error("Code Mode pass is closing"));
 	});
-	yield* Effect.acquireRelease(Effect.sync(() => {
-		passRegistry.set(passId, { dispatch });
-	}), () => closeAdmission.pipe(Effect.andThen(Fiber.interrupt(server))));
+	yield* Effect.addFinalizer(() => closeAdmission.pipe(Effect.andThen(Fiber.interrupt(server))));
 	const workerCode = {
 		compatibilityDate: options.compatibilityDate ?? "2025-05-01",
 		mainModule: "harness.js",
@@ -1834,22 +1819,18 @@ const makeExecute = (options, crypto, clock) => Effect.fn("DynamicWorkerCodeExec
 			"harness.js": HARNESS_MODULE,
 			"program.js": `export default (\n${request.source}\n);`
 		},
-		env: {
-			CODE_MODE_HOST: options.hostStub,
-			CODE_MODE_PASS: encodeHarnessPassConfig({
-				passId,
-				namespaces: request.namespaces.map((namespace) => ({
-					name: namespace.name,
-					methods: namespace.methods
-				})),
-				limits: {
-					maxLogBytes: request.limits.maxLogBytes,
-					maxResultBytes: request.limits.maxResultBytes,
-					maxHostCalls: request.limits.maxHostCalls,
-					maxHostCallArgumentBytes: request.limits.maxHostCallArgumentBytes
-				}
-			})
-		},
+		env: { CODE_MODE_PASS: encodeHarnessPassConfig({
+			namespaces: request.namespaces.map((namespace) => ({
+				name: namespace.name,
+				methods: namespace.methods
+			})),
+			limits: {
+				maxLogBytes: request.limits.maxLogBytes,
+				maxResultBytes: request.limits.maxResultBytes,
+				maxHostCalls: request.limits.maxHostCalls,
+				maxHostCallArgumentBytes: request.limits.maxHostCallArgumentBytes
+			}
+		}) },
 		globalOutbound: null,
 		...request.limits.cpuMillis === void 0 ? {} : { limits: {
 			cpuMs: request.limits.cpuMillis,
@@ -1877,7 +1858,7 @@ const makeExecute = (options, crypto, clock) => Effect.fn("DynamicWorkerCodeExec
 		catch: (cause) => classifyWorkerFailure(cause, request.limits.maxWallTime)
 	}), disposeRpcHandle);
 	const rpc = Effect.tryPromise({
-		try: () => entrypoint.run(),
+		try: () => entrypoint.run(new CodeModePassHostTarget(dispatch)),
 		catch: (cause) => classifyWorkerFailure(cause, request.limits.maxWallTime)
 	});
 	const exit = yield* Effect.raceFirst(rpc.pipe(Effect.timeoutOrElse({
@@ -1991,11 +1972,10 @@ const classifyWorkerFailure = (cause, maxWallTime) => {
 };
 /** Layer building the Dynamic Worker `CodeExecutor` from resolved bindings. */
 const dynamicWorkerCodeExecutorLayer = (options) => Layer.effect(CodeExecutor, Effect.gen(function* () {
-	const crypto = yield* Crypto.Crypto;
 	const clock = yield* Clock.Clock;
-	return CodeExecutor.of({ execute: makeExecute(options, crypto, clock) });
-})).pipe(Layer.provide(BrowserCrypto.layer));
+	return CodeExecutor.of({ execute: makeExecute(options, clock) });
+}));
 //#endregion
-export { AbortRecorded, AdminExplainRequest, AdminFailed, AdminFailure, AdminResponse, AdminVerifyRequest, AdmissionLimitExceeded, ApprovalRecorded, AwaitProgressRequest, CLOUDFLARE_DATABASE_CAP_BYTES, CLOUDFLARE_RUNTIME_DEFAULTS, CancelProgressRequest, CloudflareAdmissionLimitsValue, CloudflareBindingError, CloudflareConversationClient, CloudflareDurableRuntime, CloudflareDurableRuntimeConfig, CloudflareDurableRuntimeConfigValue, CloudflarePlatformConfigError, CodeModeHostEntrypoint, ConversationClientError, ConversationMaintenance, ConversationMaintenanceFailpoint, ConversationObjectIdentity, ConversationObjectNamespace, ConversationObjectPorts, DEFAULT_MAX_DATABASE_BYTES, DurableAlarmError, DurableAlarmService, DurableObjectContext, ExplainedRecovery, HostFailed, HostFailure, HostProtocolError, HostResponse, MaintenancePassReport, ObligationsScanned, ObservePageRequest, ObservedPage, ProgressCancelled, ProgressObserved, ProgressWaitRegistry, RetryExecuted, SettlementReached, SubmitRequest, SubmitSucceeded, UnknownResolutionRecorded, VerifiedIntegrity, boundHostDiagnostic, cloudflareWakeSchedulerLayer, conversationNamespaceFromEnv, conversationNamespaceLayer, conversationPortTransportLayer, decodeAbortCommand, decodeAdminExplainRequest, decodeAdminResponse, decodeAdminVerifyRequest, decodeApprovalDecisionCommand, decodeAwaitProgressRequest, decodeCancelProgressRequest, decodeHostResponse, decodeObligationThresholds, decodeObservePageRequest, decodeReceipt, decodeRetryCommand, decodeSubmitRequest, decodeUnknownResolutionCommand, disposeRpcHandle, dynamicWorkerCodeExecutorLayer, dynamicWorkerImplementation, encodeAbortCommand, encodeAdminResponse, encodeApprovalDecisionCommand, encodeAwaitProgressRequest, encodeCancelProgressRequest, encodeHostResponse, encodeObservePageRequest, encodeReceipt, encodeSubmitRequest, encodeUnknownResolutionCommand, makeConversationObjectClass };
+export { AbortRecorded, AdminExplainRequest, AdminFailed, AdminFailure, AdminResponse, AdminVerifyRequest, AdmissionLimitExceeded, ApprovalRecorded, AwaitProgressRequest, CLOUDFLARE_DATABASE_CAP_BYTES, CLOUDFLARE_RUNTIME_DEFAULTS, CancelProgressRequest, CloudflareAdmissionLimitsValue, CloudflareBindingError, CloudflareConversationClient, CloudflareDurableRuntime, CloudflareDurableRuntimeConfig, CloudflareDurableRuntimeConfigValue, CloudflarePlatformConfigError, ConversationClientError, ConversationMaintenance, ConversationMaintenanceFailpoint, ConversationObjectIdentity, ConversationObjectNamespace, ConversationObjectPorts, DEFAULT_MAX_DATABASE_BYTES, DurableAlarmError, DurableAlarmService, DurableObjectContext, ExplainedRecovery, HostFailed, HostFailure, HostProtocolError, HostResponse, MaintenancePassReport, ObligationsScanned, ObservePageRequest, ObservedPage, ProgressCancelled, ProgressObserved, ProgressWaitRegistry, RetryExecuted, SettlementReached, SubmitRequest, SubmitSucceeded, UnknownResolutionRecorded, VerifiedIntegrity, boundHostDiagnostic, cloudflareWakeSchedulerLayer, conversationNamespaceFromEnv, conversationNamespaceLayer, conversationPortTransportLayer, decodeAbortCommand, decodeAdminExplainRequest, decodeAdminResponse, decodeAdminVerifyRequest, decodeApprovalDecisionCommand, decodeAwaitProgressRequest, decodeCancelProgressRequest, decodeHostResponse, decodeObligationThresholds, decodeObservePageRequest, decodeReceipt, decodeRetryCommand, decodeSubmitRequest, decodeUnknownResolutionCommand, disposeRpcHandle, dynamicWorkerCodeExecutorLayer, dynamicWorkerImplementation, encodeAbortCommand, encodeAdminResponse, encodeApprovalDecisionCommand, encodeAwaitProgressRequest, encodeCancelProgressRequest, encodeHostResponse, encodeObservePageRequest, encodeReceipt, encodeSubmitRequest, encodeUnknownResolutionCommand, makeConversationObjectClass };
 
 //# sourceMappingURL=index.mjs.map