@effect-agent/platform-cloudflare 0.1.0-beta.25 → 0.1.0-beta.27

package/dist/index.d.mts

@@ -1,11 +1,12 @@
+import { BrowserQuickActionBrowserBinding, BrowserQuickActionCaptureOptions, BrowserQuickActionClient, BrowserQuickActionRpcError, BrowserQuickActionWorkersAi, BrowserQuickActionWorkersAiPolicy, BrowserQuickActionWorkersAiPolicyError, browserQuickActionCaptureLayer, browserQuickActionImplementation, browserQuickActionWorkersAiCaptureLayer } from "./browser-quick-action.mjs";
 import { Context, Crypto, Effect, Layer, Option, Schema, Scope } from "effect";
 import { AbortCommand, AbortIntent, AdmissionConflict, AgentBindingResolver, AppendConflict, ApprovalConflict, ApprovalDecisionCommand, ApprovalDecisionIntent, CanonicalRecordEnvelope, CanonicalSequence, ConversationNotMaterialized, ConversationStore, ConversationStoreError, DefinitionDigests, DigestError, DurableAgentRuntime, DurableBindingFailure, DurableRuntimeConfig, DurableRuntimeFailpointError, DurableRuntimeFailpointHandler, DurableSubmitAgent, DurableSubmitOptions, DurableWorkerFailure, FenceRejected, IntegrityReport, JoinedToHost, LedgerError, ObligationReport, ObligationThresholds, OperationAuthorizerService, OperationDenied, OwnershipLost, ProducerId, Receipt, RecoveryExplanation, RecoveryReport, ResolvedBinding, RetryCommand, RetryRefused, RunJournalError, Settlement, SettlementConflict, SubmissionLedger, ToolReconciler, UnknownResolutionCommand, UnknownResolutionConflict, UnknownResolutionIntent, WakeScheduler } from "@effect-agent/session";
 import { ConversationPortTransport, DoStorageFailpointHandler, DoStorageInitializationError, PortRequest, PortResponse } from "@effect-agent/storage-cloudflare";
 import { AgentInputError, ConversationId } from "@effect-agent/core";
-import { RunContextPreparation } from "@effect-agent/engine";
+import { RunContextPreparation, RunCostEstimator } from "@effect-agent/engine";
 import { DurableObjectState as DurableObjectState$1, WorkerEnvironment } from "effect-cf";
 import { CodeExecutor, SandboxImplementation } from "@effect-agent/sandbox";
-import { DurableObject as DurableObject$1, WorkerEntrypoint } from "cloudflare:workers";
+import { DurableObject as DurableObject$1 } from "cloudflare:workers";
 //#region src/bindings.d.ts
 declare const CloudflareBindingError_base: Schema.Class<CloudflareBindingError, Schema.TaggedStruct<"CloudflareBindingError", {
   readonly binding: Schema.String;
@@ -369,6 +370,8 @@ interface CloudflareDurableRuntimeOptions {
   readonly leaseRenewalInterval?: number | undefined;
   /** Milliseconds; default 500. */
   readonly abortPollInterval?: number | undefined;
+  /** Deployment-owned pricing authority used by durable cost budgets and settlements. */
+  readonly estimateCostMicrousd?: RunCostEstimator | undefined;
   /** Milliseconds; default 25. */
   readonly observationPollInterval?: number | undefined;
   /** Bytes; default just under the 2 MB platform value limit. */
@@ -644,6 +647,40 @@ declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorded | Hos
     readonly receiptId: string;
     readonly outcome: "aborted" | "completed" | "failed";
     readonly runDisposition?: Schema.Json | undefined;
+    readonly usageSummary?: {
+      readonly modelCalls: number;
+      readonly inputTokens: {
+        readonly total: number;
+        readonly uncached: number;
+        readonly cacheRead: number;
+        readonly cacheWrite: number;
+      };
+      readonly outputTokens: {
+        readonly total: number;
+        readonly text: number;
+        readonly reasoning: number;
+      };
+      readonly costMicrousd: number;
+      readonly byModel: readonly {
+        readonly provider: string;
+        readonly model: string;
+        readonly serviceTier?: string | undefined;
+        readonly pricingVersion?: string | undefined;
+        readonly modelCalls: number;
+        readonly inputTokens: {
+          readonly total: number;
+          readonly uncached: number;
+          readonly cacheRead: number;
+          readonly cacheWrite: number;
+        };
+        readonly outputTokens: {
+          readonly total: number;
+          readonly text: number;
+          readonly reasoning: number;
+        };
+        readonly costMicrousd: number;
+      }[];
+    } | undefined;
     readonly failure?: {
       readonly errorTag: string;
       readonly message: string;
@@ -688,6 +725,25 @@ declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorded | Hos
         readonly turn: number;
         readonly messages: Schema.Json;
         readonly messagesDigest: string;
+        readonly runScopedPrefixLength?: number | undefined;
+        readonly modelUsage?: readonly {
+          readonly provider: string;
+          readonly model: string;
+          readonly serviceTier?: string | undefined;
+          readonly pricingVersion?: string | undefined;
+          readonly inputTokens: {
+            readonly total: number;
+            readonly uncached: number;
+            readonly cacheRead: number;
+            readonly cacheWrite: number;
+          };
+          readonly outputTokens: {
+            readonly total: number;
+            readonly text: number;
+            readonly reasoning: number;
+          };
+          readonly costMicrousd: number;
+        }[] | undefined;
         readonly inputTokens?: number | undefined;
         readonly outputTokens?: number | undefined;
         readonly costMicrousd?: number | undefined;
@@ -765,6 +821,9 @@ declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorded | Hos
         readonly _tag: "RunCompleted";
         readonly runId: string;
         readonly output: Schema.Json;
+        readonly runDisposition?: Schema.Json | undefined;
+        readonly finishReason?: "budget-exhausted" | undefined;
+        readonly exhausted?: "tokens" | "tool-calls" | "turns" | undefined;
       } | {
         readonly _tag: "AbortRequested";
         readonly submissionId: string;
@@ -782,6 +841,40 @@ declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorded | Hos
         readonly finishReason?: "budget-exhausted" | undefined;
         readonly exhausted?: "tokens" | "tool-calls" | "turns" | undefined;
         readonly policyLimit?: "cost" | "duration" | "repeated-failures" | "tokens" | "tool-calls" | "turns" | "usage" | undefined;
+        readonly usageSummary?: {
+          readonly modelCalls: number;
+          readonly inputTokens: {
+            readonly total: number;
+            readonly uncached: number;
+            readonly cacheRead: number;
+            readonly cacheWrite: number;
+          };
+          readonly outputTokens: {
+            readonly total: number;
+            readonly text: number;
+            readonly reasoning: number;
+          };
+          readonly costMicrousd: number;
+          readonly byModel: readonly {
+            readonly provider: string;
+            readonly model: string;
+            readonly serviceTier?: string | undefined;
+            readonly pricingVersion?: string | undefined;
+            readonly modelCalls: number;
+            readonly inputTokens: {
+              readonly total: number;
+              readonly uncached: number;
+              readonly cacheRead: number;
+              readonly cacheWrite: number;
+            };
+            readonly outputTokens: {
+              readonly total: number;
+              readonly text: number;
+              readonly reasoning: number;
+            };
+            readonly costMicrousd: number;
+          }[];
+        } | undefined;
       } | {
         readonly _tag: "SubagentRequested";
         readonly runId: string;
@@ -896,6 +989,11 @@ declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorded | Hos
 } | {
   readonly _tag: "HostFailed";
   readonly failure: {
+    readonly _tag: "AdmissionLimitExceeded";
+    readonly limit: "database-bytes" | "input-bytes" | "queue-depth";
+    readonly actual: number;
+    readonly maximum: number;
+  } | {
     readonly _tag: "HostProtocolError";
     readonly message: string;
   } | {
@@ -957,11 +1055,6 @@ declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorded | Hos
   } | {
     readonly _tag: "DurableRuntimeFailpointError";
     readonly location: "abort:after-intent" | "approval:after-request-append" | "approval:after-suspend" | "claim:after-claim" | "compaction:after-canonical-append" | "input:after-canonical-append" | "join:after-canonical-append" | "join:after-claim" | "resolve:after-intent" | "step:after-step-append" | "subagent:after-admit" | "subagent:after-child-abort-intent" | "subagent:after-child-ready" | "subagent:after-join-append" | "subagent:after-release" | "subagent:after-release-pending" | "subagent:after-request-append" | "subagent:after-reserve" | "subagent:after-sibling-settle" | "subagent:after-start-append" | "subagent:after-suspend" | "submit:after-admit" | "submit:after-materialize" | "terminalize:after-canonical-append" | "terminalize:after-reserve" | "tools:after-prepared-append" | "turn:after-canonical-append" | "turn:after-response-append" | "turn:after-results-append";
-  } | {
-    readonly _tag: "AdmissionLimitExceeded";
-    readonly limit: "database-bytes" | "input-bytes" | "queue-depth";
-    readonly actual: number;
-    readonly maximum: number;
   } | {
     readonly _tag: "DurableAlarmError";
     readonly operation: string;
@@ -1603,45 +1696,24 @@ declare const makeConversationObjectClass: <EventLayerError = never, EventServic
  * The Cloudflare Dynamic Worker `CodeExecutor` adapter (C4 of ADR-0017;
  * DEPLOY-011). Each pass loads one fresh Worker through the Worker Loader
  * with `globalOutbound: null`, so generated code has no ambient network,
- * bindings, or secrets; its only authority is the pass-scoped host stub that
- * routes back to `CodeModeHostEntrypoint` and, from there, into the pass's
- * `CodeExecutionHost` service. Platform CPU limits stop synchronous runaway
- * programs; the executor-owned wall-clock deadline interrupts asynchronously
- * suspended passes. Deployment class `E` only: the adapter records no
- * persistent state and a later pass may run in a completely different
- * isolate.
+ * bindings, or secrets; its only authority is the pass-scoped RPC target that
+ * routes back into the owning event's `CodeExecutionHost` service. Platform
+ * CPU limits stop synchronous runaway programs; the executor-owned wall-clock
+ * deadline interrupts asynchronously suspended passes. Deployment class `E`
+ * only: the adapter records no persistent state and a later pass may run in a
+ * completely different isolate.
  */
 declare const dynamicWorkerImplementation: SandboxImplementation;
-/** The narrow host stub the dynamic worker receives (Workers RPC). */
-interface CodeModeHostStub {
-  readonly call: (passId: string, hostCall: unknown) => Promise<unknown>;
-}
-/**
- * The host-side RPC target for dynamic workers. The application exposes it
- * from its Worker entry (`export { CodeModeHostEntrypoint }`) and hands the
- * adapter a same-instance stub — `ctx.exports.CodeModeHostEntrypoint()` in
- * production (a self service binding may reach a different instance and must
- * not be used there); tests bind it through Miniflare's `kCurrentWorker`.
- */
-declare class CodeModeHostEntrypoint extends WorkerEntrypoint {
-  call(passId: unknown, hostCall: unknown): Promise<unknown>;
-}
 /** Dispose a Cloudflare RPC handle when the runtime supplies its untyped disposal hook. @internal */
 declare const disposeRpcHandle: (handle: unknown) => Effect.Effect<void>;
 interface DynamicWorkerCodeExecutorOptions {
   /** The `worker_loader` binding. */
   readonly loader: WorkerLoader;
-  /**
-   * A SAME-INSTANCE stub of `CodeModeHostEntrypoint`. In production create it
-   * with `ctx.exports.CodeModeHostEntrypoint()`; a cross-instance stub would
-   * dispatch host calls into an isolate without this pass's registry entry.
-   */
-  readonly hostStub: CodeModeHostStub;
   /** Compatibility date for dynamic workers; defaults to `2025-05-01`. */
   readonly compatibilityDate?: string | undefined;
 }
 /** Layer building the Dynamic Worker `CodeExecutor` from resolved bindings. */
 declare const dynamicWorkerCodeExecutorLayer: (options: DynamicWorkerCodeExecutorOptions) => Layer.Layer<CodeExecutor>;
 //#endregion
-export { AbortRecorded, AdminExplainRequest, AdminFailed, AdminFailure, AdminResponse, AdminVerifyRequest, AdmissionLimitExceeded, ApprovalRecorded, AwaitProgressRequest, CLOUDFLARE_DATABASE_CAP_BYTES, CLOUDFLARE_RUNTIME_DEFAULTS, CancelProgressRequest, ClientAbortFailure, ClientApprovalFailure, ClientAwaitFailure, ClientObserveFailure, ClientProgressFailure, ClientSubmitFailure, ClientUnknownFailure, CloudflareAdmissionLimitsValue, CloudflareBindingError, CloudflareBindingSource, CloudflareBindingSourceContext, CloudflareConversationClient, CloudflareDurableRuntime, CloudflareDurableRuntimeConfig, CloudflareDurableRuntimeConfigValue, CloudflareDurableRuntimeInitializationError, CloudflareDurableRuntimeOptions, CloudflareDurableRuntimeServices, CloudflarePlatformConfigError, CloudflareRunContextLayer, CloudflareRunContextSource, CloudflareRuntimeSourceContext, CodeModeHostEntrypoint, CodeModeHostStub, ConversationClientError, ConversationMaintenance, ConversationMaintenanceFailpoint, ConversationMaintenanceFailpointHandler, ConversationMaintenanceFailpointLocation, ConversationObjectClass, ConversationObjectIdentity, ConversationObjectInstance, ConversationObjectNamespace, ConversationObjectOptions, ConversationObjectPorts, ConversationObjectRpc, DEFAULT_MAX_DATABASE_BYTES, DurableAlarmError, DurableAlarmService, DurableObjectContext, DynamicWorkerCodeExecutorOptions, ExplainedRecovery, HostFailed, HostFailure, HostProtocolError, HostResponse, MaintenancePassFailure, MaintenancePassReport, ObligationsScanned, ObservePageRequest, ObservedPage, ProgressCancelled, ProgressObserved, ProgressWaitRegistry, RetryExecuted, SettlementReached, SubmitRequest, SubmitSucceeded, UnknownResolutionRecorded, VerifiedIntegrity, boundHostDiagnostic, cloudflareWakeSchedulerLayer, conversationNamespaceFromEnv, conversationNamespaceLayer, conversationPortTransportLayer, decodeAbortCommand, decodeAdminExplainRequest, decodeAdminResponse, decodeAdminVerifyRequest, decodeApprovalDecisionCommand, decodeAwaitProgressRequest, decodeCancelProgressRequest, decodeHostResponse, decodeObligationThresholds, decodeObservePageRequest, decodeReceipt, decodeRetryCommand, decodeSubmitRequest, decodeUnknownResolutionCommand, disposeRpcHandle, dynamicWorkerCodeExecutorLayer, dynamicWorkerImplementation, encodeAbortCommand, encodeAdminResponse, encodeApprovalDecisionCommand, encodeAwaitProgressRequest, encodeCancelProgressRequest, encodeHostResponse, encodeObservePageRequest, encodeReceipt, encodeSubmitRequest, encodeUnknownResolutionCommand, makeConversationObjectClass };
+export { AbortRecorded, AdminExplainRequest, AdminFailed, AdminFailure, AdminResponse, AdminVerifyRequest, AdmissionLimitExceeded, ApprovalRecorded, AwaitProgressRequest, BrowserQuickActionBrowserBinding, BrowserQuickActionCaptureOptions, BrowserQuickActionClient, BrowserQuickActionRpcError, BrowserQuickActionWorkersAi, BrowserQuickActionWorkersAiPolicy, BrowserQuickActionWorkersAiPolicyError, CLOUDFLARE_DATABASE_CAP_BYTES, CLOUDFLARE_RUNTIME_DEFAULTS, CancelProgressRequest, ClientAbortFailure, ClientApprovalFailure, ClientAwaitFailure, ClientObserveFailure, ClientProgressFailure, ClientSubmitFailure, ClientUnknownFailure, CloudflareAdmissionLimitsValue, CloudflareBindingError, CloudflareBindingSource, CloudflareBindingSourceContext, CloudflareConversationClient, CloudflareDurableRuntime, CloudflareDurableRuntimeConfig, CloudflareDurableRuntimeConfigValue, CloudflareDurableRuntimeInitializationError, CloudflareDurableRuntimeOptions, CloudflareDurableRuntimeServices, CloudflarePlatformConfigError, CloudflareRunContextLayer, CloudflareRunContextSource, CloudflareRuntimeSourceContext, ConversationClientError, ConversationMaintenance, ConversationMaintenanceFailpoint, ConversationMaintenanceFailpointHandler, ConversationMaintenanceFailpointLocation, ConversationObjectClass, ConversationObjectIdentity, ConversationObjectInstance, ConversationObjectNamespace, ConversationObjectOptions, ConversationObjectPorts, ConversationObjectRpc, DEFAULT_MAX_DATABASE_BYTES, DurableAlarmError, DurableAlarmService, DurableObjectContext, DynamicWorkerCodeExecutorOptions, ExplainedRecovery, HostFailed, HostFailure, HostProtocolError, HostResponse, MaintenancePassFailure, MaintenancePassReport, ObligationsScanned, ObservePageRequest, ObservedPage, ProgressCancelled, ProgressObserved, ProgressWaitRegistry, RetryExecuted, SettlementReached, SubmitRequest, SubmitSucceeded, UnknownResolutionRecorded, VerifiedIntegrity, boundHostDiagnostic, browserQuickActionCaptureLayer, browserQuickActionImplementation, browserQuickActionWorkersAiCaptureLayer, cloudflareWakeSchedulerLayer, conversationNamespaceFromEnv, conversationNamespaceLayer, conversationPortTransportLayer, decodeAbortCommand, decodeAdminExplainRequest, decodeAdminResponse, decodeAdminVerifyRequest, decodeApprovalDecisionCommand, decodeAwaitProgressRequest, decodeCancelProgressRequest, decodeHostResponse, decodeObligationThresholds, decodeObservePageRequest, decodeReceipt, decodeRetryCommand, decodeSubmitRequest, decodeUnknownResolutionCommand, disposeRpcHandle, dynamicWorkerCodeExecutorLayer, dynamicWorkerImplementation, encodeAbortCommand, encodeAdminResponse, encodeApprovalDecisionCommand, encodeAwaitProgressRequest, encodeCancelProgressRequest, encodeHostResponse, encodeObservePageRequest, encodeReceipt, encodeSubmitRequest, encodeUnknownResolutionCommand, makeConversationObjectClass };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.mjs

@@ -1,3 +1,4 @@
+import { BrowserQuickActionBrowserBinding, BrowserQuickActionRpcError, BrowserQuickActionWorkersAi, BrowserQuickActionWorkersAiPolicyError, browserQuickActionCaptureLayer, browserQuickActionImplementation, browserQuickActionWorkersAiCaptureLayer } from "./browser-quick-action.mjs";
 import { Clock, Context, Crypto, Deferred, Duration, Effect, Exit, Fiber, Layer, Option, Predicate, PubSub, Queue, Random, Ref, Schema, Semaphore, Stream } from "effect";
 import { AbortCommand, AbortIntent, AdmissionConflict, AgentBindingResolver, AppendConflict, ApprovalConflict, ApprovalDecisionCommand, ApprovalDecisionIntent, CanonicalRecordEnvelope, CanonicalSequence, ConversationNotMaterialized, ConversationRead, ConversationStore, ConversationStoreError, DEFAULT_OWNERSHIP_LEASE_DURATION, DefinitionDigests, DeploymentId, DigestError, DurableAgentRuntime, DurableRuntimeConfig, DurableRuntimeFailpoint, DurableRuntimeFailpointError, FenceRejected, IdempotencyKey, IntegrityReport, JoinedToHost, LedgerError, ObligationReport, ObligationThresholds, OperationAuthorizationRequest, OperationAuthorizer, OperationDenied, OwnershipLost, PersistedJson, Principal, ProducerId, Receipt, RecoveryExplanation, RecoveryReport, RetryCommand, RetryRefused, RunJournalError, Settlement, SettlementConflict, SubmissionLedger, SubmissionLookupByKey, ToolReconciler, UnknownResolutionCommand, UnknownResolutionConflict, UnknownResolutionIntent, WakeScheduler, makeWakeSubscriptionHub, operationAuthorizerLayer } from "@effect-agent/session";
 import { ConversationPortTransport, DEFAULT_MAX_STORED_VALUE_BYTES, conversationStoreLayer, decodePortRequest, encodePortResponse, executePortRequest, portTransportFailure, routedConversationStoreLayer, routedSubmissionLedgerLayer, storageConfigLayer, storageFailpointLayer, submissionLedgerLayer } from "@effect-agent/storage-cloudflare";
@@ -7,7 +8,7 @@ import { BrowserCrypto } from "@effect/platform-browser";
 import { SqliteClient } from "@effect/sql-sqlite-do";
 import { DurableObject, DurableObjectState, WorkerEnvironment } from "effect-cf";
 import { CodeExecutionHost, CodeExecutionProtocolError, CodeExecutionResourceUse, CodeExecutionResult, CodeExecutionTimeoutError, CodeExecutor, CodeExecutorStartError, CodeExecutorTerminatedError, CodeExecutorUnsupportedError, CodeHostCall, CodeHostCallLimitError, CodeHostCallResult, CodeOutputLimitError, CodeProgramFailedError, CodeSourceError, SandboxImplementation } from "@effect-agent/sandbox";
-import { WorkerEntrypoint } from "cloudflare:workers";
+import { RpcTarget } from "cloudflare:workers";
 //#region src/bindings.ts
 /**
 * Cloudflare platform bindings as Effect services (DEPLOY-010: "Cloudflare platform bindings
@@ -754,7 +755,8 @@ var CloudflareDurableRuntime = class {
 				producerId,
 				settlementPollInterval: Duration.millis(config.settlementPollInterval),
 				leaseRenewalInterval: Duration.millis(config.leaseRenewalInterval),
-				abortPollInterval: Duration.millis(config.abortPollInterval)
+				abortPollInterval: Duration.millis(config.abortPollInterval),
+				...options.estimateCostMicrousd === void 0 ? {} : { estimateCostMicrousd: options.estimateCostMicrousd }
 			}));
 			const runtimeFailpointLayer = options.runtimeFailpoint === void 0 ? DurableRuntimeFailpoint.layer : Layer.succeed(DurableRuntimeFailpoint)({ hit: options.runtimeFailpoint(ctx) });
 			const maintenanceFailpointLayer = options.maintenanceFailpoint === void 0 ? ConversationMaintenanceFailpoint.layer : Layer.succeed(ConversationMaintenanceFailpoint)({ hit: options.maintenanceFailpoint(ctx) });
@@ -1386,37 +1388,32 @@ const makeConversationObjectClass = (options, observability) => {
 * The Cloudflare Dynamic Worker `CodeExecutor` adapter (C4 of ADR-0017;
 * DEPLOY-011). Each pass loads one fresh Worker through the Worker Loader
 * with `globalOutbound: null`, so generated code has no ambient network,
-* bindings, or secrets; its only authority is the pass-scoped host stub that
-* routes back to `CodeModeHostEntrypoint` and, from there, into the pass's
-* `CodeExecutionHost` service. Platform CPU limits stop synchronous runaway
-* programs; the executor-owned wall-clock deadline interrupts asynchronously
-* suspended passes. Deployment class `E` only: the adapter records no
-* persistent state and a later pass may run in a completely different
-* isolate.
+* bindings, or secrets; its only authority is the pass-scoped RPC target that
+* routes back into the owning event's `CodeExecutionHost` service. Platform
+* CPU limits stop synchronous runaway programs; the executor-owned wall-clock
+* deadline interrupts asynchronously suspended passes. Deployment class `E`
+* only: the adapter records no persistent state and a later pass may run in a
+* completely different isolate.
 */
 const dynamicWorkerImplementation = SandboxImplementation.make({
 	isolation: "isolated",
 	identity: "cloudflare-dynamic-worker"
 });
 /**
-* Live passes by identity. Entries are Scope-managed: registered when a pass
-* opens and removed by its finalizer, so a stale harness (or a forged
-* `passId`) cannot reach any host authority.
-*/
-const passRegistry = /* @__PURE__ */ new Map();
-/**
-* The host-side RPC target for dynamic workers. The application exposes it
-* from its Worker entry (`export { CodeModeHostEntrypoint }`) and hands the
-* adapter a same-instance stub — `ctx.exports.CodeModeHostEntrypoint()` in
-* production (a self service binding may reach a different instance and must
-* not be used there); tests bind it through Miniflare's `kCurrentWorker`.
+* One object-capability endpoint for one execution pass. Workers RPC invokes
+* the target in the request context where it was created, so the native
+* Promise returned by `dispatch` and the Effect fiber that settles it share
+* one I/O owner. Passing the target as `run()`'s argument also scopes the
+* remote stub to that RPC call; no request state lives at module scope.
 */
-var CodeModeHostEntrypoint = class extends WorkerEntrypoint {
-	async call(passId, hostCall) {
-		if (typeof passId !== "string") throw new TypeError("Code Mode pass identities must be strings");
-		const pass = passRegistry.get(passId);
-		if (pass === void 0) throw new Error("Unknown Code Mode pass");
-		return pass.dispatch(hostCall);
+var CodeModePassHostTarget = class extends RpcTarget {
+	#dispatch;
+	constructor(dispatch) {
+		super();
+		this.#dispatch = dispatch;
+	}
+	call(hostCall) {
+		return this.#dispatch(hostCall);
 	}
 };
 /**
@@ -1451,9 +1448,8 @@ const safeJson = (value) => {
 };
 
 export default class CodeModeHarness extends WorkerEntrypoint {
-  async run() {
+  async run(host) {
     const config = this.env.CODE_MODE_PASS;
-    const host = this.env.CODE_MODE_HOST;
     const limits = config.limits;
     const logs = [];
     let logBytes = 0;
@@ -1491,7 +1487,7 @@ export default class CodeModeHarness extends WorkerEntrypoint {
         };
         throw new Error("code-mode host-call argument limit exceeded");
       }
-      const outcome = await host.call(config.passId, {
+      const outcome = await host.call({
         namespace,
         method,
         argument: JSON.parse(argText),
@@ -1616,7 +1612,6 @@ const HarnessOutcome = Schema.Union([
 	HarnessProtocol
 ]);
 const HarnessPassConfig = Schema.Struct({
-	passId: Schema.NonEmptyString,
 	namespaces: Schema.Array(Schema.Struct({
 		name: Schema.NonEmptyString,
 		methods: Schema.Array(Schema.NonEmptyString).check(Schema.isMaxLength(64))
@@ -1684,7 +1679,7 @@ const utf8ByteLength = (value) => {
 };
 /** Reserved global names the harness owns inside the dynamic worker. */
 const reservedHarnessGlobals = /* @__PURE__ */ new Set(["console"]);
-const makeExecute = (options, crypto, clock) => Effect.fn("DynamicWorkerCodeExecutor.execute")(function* (request) {
+const makeExecute = (options, clock) => Effect.fn("DynamicWorkerCodeExecutor.execute")(function* (request) {
 	if (request.network._tag !== "NetworkDisabled") return yield* CodeExecutorUnsupportedError.make({
 		implementation: dynamicWorkerImplementation,
 		feature: "network",
@@ -1702,11 +1697,6 @@ const makeExecute = (options, crypto, clock) => Effect.fn("DynamicWorkerCodeExec
 		message: `Namespace ${namespace.name} collides with a harness binding`
 	});
 	const host = yield* CodeExecutionHost;
-	const passId = yield* crypto.randomUUIDv4.pipe(Effect.mapError((cause) => CodeExecutorStartError.make({
-		implementation: dynamicWorkerImplementation,
-		message: `Could not mint the Code Mode pass identity: ${safeCauseMessage(cause, "the crypto service failed without a diagnostic")}`.slice(0, 8e3),
-		cause
-	})), Effect.map((uuid) => `code-mode-pass-${uuid}`));
 	const startedAt = clock.monotonicTimeNanosUnsafe();
 	const passDeadline = startedAt + Duration.toNanosUnsafe(request.limits.maxWallTime);
 	const remainingPassWallTime = () => {
@@ -1821,12 +1811,9 @@ const makeExecute = (options, crypto, clock) => Effect.fn("DynamicWorkerCodeExec
 	};
 	const closeAdmission = Effect.sync(() => {
 		passOpen = false;
-		passRegistry.delete(passId);
 		rejectQueuedHostCalls(/* @__PURE__ */ new Error("Code Mode pass is closing"));
 	});
-	yield* Effect.acquireRelease(Effect.sync(() => {
-		passRegistry.set(passId, { dispatch });
-	}), () => closeAdmission.pipe(Effect.andThen(Fiber.interrupt(server))));
+	yield* Effect.addFinalizer(() => closeAdmission.pipe(Effect.andThen(Fiber.interrupt(server))));
 	const workerCode = {
 		compatibilityDate: options.compatibilityDate ?? "2025-05-01",
 		mainModule: "harness.js",
@@ -1834,22 +1821,18 @@ const makeExecute = (options, crypto, clock) => Effect.fn("DynamicWorkerCodeExec
 			"harness.js": HARNESS_MODULE,
 			"program.js": `export default (\n${request.source}\n);`
 		},
-		env: {
-			CODE_MODE_HOST: options.hostStub,
-			CODE_MODE_PASS: encodeHarnessPassConfig({
-				passId,
-				namespaces: request.namespaces.map((namespace) => ({
-					name: namespace.name,
-					methods: namespace.methods
-				})),
-				limits: {
-					maxLogBytes: request.limits.maxLogBytes,
-					maxResultBytes: request.limits.maxResultBytes,
-					maxHostCalls: request.limits.maxHostCalls,
-					maxHostCallArgumentBytes: request.limits.maxHostCallArgumentBytes
-				}
-			})
-		},
+		env: { CODE_MODE_PASS: encodeHarnessPassConfig({
+			namespaces: request.namespaces.map((namespace) => ({
+				name: namespace.name,
+				methods: namespace.methods
+			})),
+			limits: {
+				maxLogBytes: request.limits.maxLogBytes,
+				maxResultBytes: request.limits.maxResultBytes,
+				maxHostCalls: request.limits.maxHostCalls,
+				maxHostCallArgumentBytes: request.limits.maxHostCallArgumentBytes
+			}
+		}) },
 		globalOutbound: null,
 		...request.limits.cpuMillis === void 0 ? {} : { limits: {
 			cpuMs: request.limits.cpuMillis,
@@ -1877,7 +1860,7 @@ const makeExecute = (options, crypto, clock) => Effect.fn("DynamicWorkerCodeExec
 		catch: (cause) => classifyWorkerFailure(cause, request.limits.maxWallTime)
 	}), disposeRpcHandle);
 	const rpc = Effect.tryPromise({
-		try: () => entrypoint.run(),
+		try: () => entrypoint.run(new CodeModePassHostTarget(dispatch)),
 		catch: (cause) => classifyWorkerFailure(cause, request.limits.maxWallTime)
 	});
 	const exit = yield* Effect.raceFirst(rpc.pipe(Effect.timeoutOrElse({
@@ -1991,11 +1974,10 @@ const classifyWorkerFailure = (cause, maxWallTime) => {
 };
 /** Layer building the Dynamic Worker `CodeExecutor` from resolved bindings. */
 const dynamicWorkerCodeExecutorLayer = (options) => Layer.effect(CodeExecutor, Effect.gen(function* () {
-	const crypto = yield* Crypto.Crypto;
 	const clock = yield* Clock.Clock;
-	return CodeExecutor.of({ execute: makeExecute(options, crypto, clock) });
-})).pipe(Layer.provide(BrowserCrypto.layer));
+	return CodeExecutor.of({ execute: makeExecute(options, clock) });
+}));
 //#endregion
-export { AbortRecorded, AdminExplainRequest, AdminFailed, AdminFailure, AdminResponse, AdminVerifyRequest, AdmissionLimitExceeded, ApprovalRecorded, AwaitProgressRequest, CLOUDFLARE_DATABASE_CAP_BYTES, CLOUDFLARE_RUNTIME_DEFAULTS, CancelProgressRequest, CloudflareAdmissionLimitsValue, CloudflareBindingError, CloudflareConversationClient, CloudflareDurableRuntime, CloudflareDurableRuntimeConfig, CloudflareDurableRuntimeConfigValue, CloudflarePlatformConfigError, CodeModeHostEntrypoint, ConversationClientError, ConversationMaintenance, ConversationMaintenanceFailpoint, ConversationObjectIdentity, ConversationObjectNamespace, ConversationObjectPorts, DEFAULT_MAX_DATABASE_BYTES, DurableAlarmError, DurableAlarmService, DurableObjectContext, ExplainedRecovery, HostFailed, HostFailure, HostProtocolError, HostResponse, MaintenancePassReport, ObligationsScanned, ObservePageRequest, ObservedPage, ProgressCancelled, ProgressObserved, ProgressWaitRegistry, RetryExecuted, SettlementReached, SubmitRequest, SubmitSucceeded, UnknownResolutionRecorded, VerifiedIntegrity, boundHostDiagnostic, cloudflareWakeSchedulerLayer, conversationNamespaceFromEnv, conversationNamespaceLayer, conversationPortTransportLayer, decodeAbortCommand, decodeAdminExplainRequest, decodeAdminResponse, decodeAdminVerifyRequest, decodeApprovalDecisionCommand, decodeAwaitProgressRequest, decodeCancelProgressRequest, decodeHostResponse, decodeObligationThresholds, decodeObservePageRequest, decodeReceipt, decodeRetryCommand, decodeSubmitRequest, decodeUnknownResolutionCommand, disposeRpcHandle, dynamicWorkerCodeExecutorLayer, dynamicWorkerImplementation, encodeAbortCommand, encodeAdminResponse, encodeApprovalDecisionCommand, encodeAwaitProgressRequest, encodeCancelProgressRequest, encodeHostResponse, encodeObservePageRequest, encodeReceipt, encodeSubmitRequest, encodeUnknownResolutionCommand, makeConversationObjectClass };
+export { AbortRecorded, AdminExplainRequest, AdminFailed, AdminFailure, AdminResponse, AdminVerifyRequest, AdmissionLimitExceeded, ApprovalRecorded, AwaitProgressRequest, BrowserQuickActionBrowserBinding, BrowserQuickActionRpcError, BrowserQuickActionWorkersAi, BrowserQuickActionWorkersAiPolicyError, CLOUDFLARE_DATABASE_CAP_BYTES, CLOUDFLARE_RUNTIME_DEFAULTS, CancelProgressRequest, CloudflareAdmissionLimitsValue, CloudflareBindingError, CloudflareConversationClient, CloudflareDurableRuntime, CloudflareDurableRuntimeConfig, CloudflareDurableRuntimeConfigValue, CloudflarePlatformConfigError, ConversationClientError, ConversationMaintenance, ConversationMaintenanceFailpoint, ConversationObjectIdentity, ConversationObjectNamespace, ConversationObjectPorts, DEFAULT_MAX_DATABASE_BYTES, DurableAlarmError, DurableAlarmService, DurableObjectContext, ExplainedRecovery, HostFailed, HostFailure, HostProtocolError, HostResponse, MaintenancePassReport, ObligationsScanned, ObservePageRequest, ObservedPage, ProgressCancelled, ProgressObserved, ProgressWaitRegistry, RetryExecuted, SettlementReached, SubmitRequest, SubmitSucceeded, UnknownResolutionRecorded, VerifiedIntegrity, boundHostDiagnostic, browserQuickActionCaptureLayer, browserQuickActionImplementation, browserQuickActionWorkersAiCaptureLayer, cloudflareWakeSchedulerLayer, conversationNamespaceFromEnv, conversationNamespaceLayer, conversationPortTransportLayer, decodeAbortCommand, decodeAdminExplainRequest, decodeAdminResponse, decodeAdminVerifyRequest, decodeApprovalDecisionCommand, decodeAwaitProgressRequest, decodeCancelProgressRequest, decodeHostResponse, decodeObligationThresholds, decodeObservePageRequest, decodeReceipt, decodeRetryCommand, decodeSubmitRequest, decodeUnknownResolutionCommand, disposeRpcHandle, dynamicWorkerCodeExecutorLayer, dynamicWorkerImplementation, encodeAbortCommand, encodeAdminResponse, encodeApprovalDecisionCommand, encodeAwaitProgressRequest, encodeCancelProgressRequest, encodeHostResponse, encodeObservePageRequest, encodeReceipt, encodeSubmitRequest, encodeUnknownResolutionCommand, makeConversationObjectClass };
 
 //# sourceMappingURL=index.mjs.map