@effect-agent/platform-cloudflare 0.1.0-beta.52 → 0.1.0-beta.54

package/dist/CloudflareBrowser-Bj22nNUT.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudflareBrowser-Bj22nNUT.mjs","names":[],"sources":["../src/internal/browser-quick-action.ts","../src/CloudflareBrowser.ts"],"sourcesContent":["/// <reference types=\"@cloudflare/workers-types\" />\n\nimport {\n  PageCapture,\n  PageCaptureInferenceUse,\n  PageCaptureInferencePolicyError,\n  PageCaptureNavigationError,\n  PageCaptureOutputLimitError,\n  PageCaptureProtocolError,\n  PageCaptureRateLimitedError,\n  PageCaptureResourceUse,\n  PageCaptureResult,\n  PageCaptureUnsupportedError,\n  PageContentCaptured,\n  PageLinksCaptured,\n  PageMarkdownCaptured,\n  PageScrapeCaptured,\n  PageStructuredCaptured,\n  type PageCaptureAction,\n  type PageCaptureCapture,\n  type PageCaptureError,\n  type PageCaptureOutput,\n  type PageCaptureRequest,\n} from \"@effect-agent/sandbox/PageCapture\";\nimport {\n  PageScreenshot,\n  PageScreenshotOutputLimitError,\n  PageScreenshotResult,\n  type PageScreenshotCapture,\n  type PageScreenshotError,\n  type PageScreenshotRequest,\n} from \"@effect-agent/sandbox/PageScreenshot\";\nimport { SandboxImplementation } from \"@effect-agent/sandbox/Sandbox\";\nimport { Context, Effect, Layer, Option, Schema } from \"effect\";\n\n/**\n * The Cloudflare Browser Run Quick Action `PageCapture` adapter (capability\n * spec §9.2). Each capture is one stateless `quickAction()` RPC on the\n * Wrangler `browser` binding: the platform renders the target in a managed\n * headless browser and returns one bounded output; the adapter holds no\n * session and no state between passes. The binding requires a Worker\n * compatibility date of `2026-03-24` or later, and local `wrangler dev` needs\n * remote mode (`\"remote\": true` on the binding) because `quickAction` has no\n * local implementation.\n *\n * Rendered output is untrusted, attacker-influenced content; this adapter\n * only bounds and types it. Deployment class `E` only: no durability claim.\n */\nexport const browserQuickActionImplementation = SandboxImplementation.make({\n  isolation: \"isolated\",\n  identity: \"cloudflare-browser-quick-action\",\n});\n\n/**\n * Effect-native client captured by the binding service. Its option types come\n * directly from the pinned Workers declarations rather than a local copy.\n */\nexport interface BrowserQuickActionClient {\n  readonly screenshot: (\n    options: BrowserRunScreenshotOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n  readonly content: (\n    options: BrowserRunContentOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n  readonly markdown: (\n    options: BrowserRunMarkdownOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n  readonly links: (\n    options: BrowserRunLinksOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n  readonly scrape: (\n    options: BrowserRunScrapeOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n  readonly json: (\n    options: BrowserRunJsonOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n}\n\n/** A native binding RPC rejected before it returned an HTTP response. */\nexport class BrowserQuickActionRpcError extends Schema.TaggedError<BrowserQuickActionRpcError>()(\n  \"BrowserQuickActionRpcError\",\n  {\n    action: Schema.Literals([\"screenshot\", \"content\", \"markdown\", \"links\", \"scrape\", \"json\"]),\n    cause: Schema.Defect(),\n  },\n) {}\n\nexport interface BrowserQuickActionCaptureOptions {\n  /** The resolved Wrangler `browser` binding (DEPLOY-014: supplied, never ambient). */\n  readonly browser: BrowserRun;\n}\n\n/** Host-owned browser binding authority, supplied explicitly at the composition root. */\nexport class BrowserQuickActionBrowserBinding extends Context.Service<\n  BrowserQuickActionBrowserBinding,\n  BrowserQuickActionClient\n>()(\"@effect-agent/platform-cloudflare/BrowserQuickActionBrowserBinding\") {\n  static layer(\n    options: BrowserQuickActionCaptureOptions,\n  ): Layer.Layer<BrowserQuickActionBrowserBinding> {\n    const browser = options.browser;\n\n    const invoke = Effect.fn(\"BrowserQuickActionBrowserBinding.invoke\")(function* (\n      action: \"screenshot\" | \"content\" | \"markdown\" | \"links\" | \"scrape\" | \"json\",\n      evaluate: () => Promise<Response>,\n    ): Effect.fn.Return<Response, BrowserQuickActionRpcError> {\n      return yield* Effect.tryPromise({\n        try: evaluate,\n        catch: (cause) => BrowserQuickActionRpcError.make({ action, cause }),\n      });\n    });\n\n    return Layer.succeed(BrowserQuickActionBrowserBinding)({\n      screenshot: (request) =>\n        invoke(\"screenshot\", () => browser.quickAction(\"screenshot\", request)),\n      content: (request) => invoke(\"content\", () => browser.quickAction(\"content\", request)),\n      markdown: (request) => invoke(\"markdown\", () => browser.quickAction(\"markdown\", request)),\n      links: (request) => invoke(\"links\", () => browser.quickAction(\"links\", request)),\n      scrape: (request) => invoke(\"scrape\", () => browser.quickAction(\"scrape\", request)),\n      json: (request) => invoke(\"json\", () => browser.quickAction(\"json\", request)),\n    });\n  }\n}\n\n/** Host-owned authorization and accounting for one Workers AI extraction. */\nexport interface BrowserQuickActionWorkersAiPolicy {\n  readonly authorizeAndAccount: (\n    request: PageCaptureRequest,\n  ) => Effect.Effect<void, BrowserQuickActionWorkersAiPolicyError>;\n}\n\n/** Host-only diagnostic for a denied or unaccounted Workers AI extraction. */\nexport class BrowserQuickActionWorkersAiPolicyError extends Schema.TaggedError<BrowserQuickActionWorkersAiPolicyError>()(\n  \"BrowserQuickActionWorkersAiPolicyError\",\n  {\n    reason: Schema.Literals([\"authorization\", \"accounting\"]),\n    message: Schema.String.check(Schema.isMaxLength(8_000)),\n    cause: Schema.optionalKey(Schema.Defect()),\n  },\n) {}\n\n/** Explicit host-owned authority and accounting for separately billed Workers AI extraction. */\nexport class BrowserQuickActionWorkersAi extends Context.Service<\n  BrowserQuickActionWorkersAi,\n  BrowserQuickActionWorkersAiPolicy\n>()(\"@effect-agent/platform-cloudflare/BrowserQuickActionWorkersAi\") {\n  static layer(\n    policy: BrowserQuickActionWorkersAiPolicy,\n  ): Layer.Layer<BrowserQuickActionWorkersAi> {\n    return Layer.succeed(BrowserQuickActionWorkersAi)(policy);\n  }\n}\n\nconst MAX_DIAGNOSTIC_LENGTH = 8_000;\nconst boundedDiagnostic = (message: string): string => message.slice(0, MAX_DIAGNOSTIC_LENGTH);\n\nconst QuickActionSuccessEnvelope = Schema.Struct({\n  success: Schema.Literal(true),\n  result: Schema.Json,\n});\n\nconst QuickActionErrorEnvelope = Schema.Struct({\n  success: Schema.Literal(false),\n  errors: Schema.Array(\n    Schema.Struct({\n      message: Schema.String,\n      code: Schema.optionalKey(Schema.Number),\n      detail: Schema.optionalKey(Schema.String),\n      path: Schema.optionalKey(Schema.String),\n    }),\n  ),\n  rawAiResponse: Schema.optionalKey(Schema.String),\n});\n\nconst QuickActionEnvelope = Schema.Union([QuickActionSuccessEnvelope, QuickActionErrorEnvelope]);\nconst decodeEnvelope = Schema.decodeUnknownOption(Schema.fromJsonString(QuickActionEnvelope));\n\n/** Project the schema-validated request onto Cloudflare's native common options. */\nconst quickActionCommonOptions = (request: PageCaptureRequest): BrowserRunCommonOptions => {\n  const options: BrowserRunBaseOptions = {};\n  const navigation = request.navigation;\n\n  if (navigation !== undefined) {\n    const goto: NonNullable<BrowserRunBaseOptions[\"gotoOptions\"]> = {};\n\n    if (navigation.waitUntil !== undefined) goto.waitUntil = navigation.waitUntil;\n    if (navigation.timeoutMillis !== undefined) goto.timeout = navigation.timeoutMillis;\n    if (Object.keys(goto).length > 0) options.gotoOptions = goto;\n    if (navigation.waitForSelector !== undefined) {\n      options.waitForSelector = {\n        selector: navigation.waitForSelector.selector,\n        ...(navigation.waitForSelector.timeoutMillis === undefined\n          ? {}\n          : { timeout: navigation.waitForSelector.timeoutMillis }),\n      };\n    }\n  }\n  if (request.viewport !== undefined) {\n    options.viewport = { width: request.viewport.width, height: request.viewport.height };\n  }\n  if (request.resourcePolicy !== undefined) {\n    if (request.resourcePolicy.rejectResourceTypes !== undefined) {\n      options.rejectResourceTypes = [...request.resourcePolicy.rejectResourceTypes];\n    }\n    if (request.resourcePolicy.allowRequestPatterns !== undefined) {\n      options.allowRequestPattern = [...request.resourcePolicy.allowRequestPatterns];\n    }\n  }\n\n  return request.target._tag === \"PageUrlTarget\"\n    ? { ...options, url: request.target.url }\n    : { ...options, html: request.target.html };\n};\n\n/** Dispatch through Cloudflare's native action-specific overloads. */\nconst executeQuickAction = (\n  browser: BrowserQuickActionClient,\n  request: PageCaptureRequest,\n): Effect.Effect<Response, BrowserQuickActionRpcError> => {\n  const options = quickActionCommonOptions(request);\n\n  switch (request.action._tag) {\n    case \"CapturePageContent\": {\n      return browser.content(options);\n    }\n    case \"CapturePageMarkdown\": {\n      return browser.markdown(options);\n    }\n    case \"CapturePageLinks\": {\n      return browser.links({\n        ...options,\n        ...(request.action.visibleLinksOnly === undefined\n          ? {}\n          : { visibleLinksOnly: request.action.visibleLinksOnly }),\n      });\n    }\n    case \"CapturePageScrape\": {\n      return browser.scrape({\n        ...options,\n        elements: request.action.selectors.map((selector) => ({ selector })),\n      });\n    }\n    case \"CapturePageStructured\": {\n      return browser.json({\n        ...options,\n        response_format: {\n          type: \"json_schema\",\n          json_schema: request.action.responseFormat,\n        },\n        ...(request.action.prompt === undefined ? {} : { prompt: request.action.prompt }),\n      });\n    }\n  }\n};\n\nconst protocolError = (message: string, cause?: unknown): PageCaptureProtocolError =>\n  PageCaptureProtocolError.make({\n    implementation: browserQuickActionImplementation,\n    message: boundedDiagnostic(message),\n    ...(cause === undefined ? {} : { cause }),\n  });\n\nconst navigationError = (message: string, cause?: unknown): PageCaptureNavigationError =>\n  PageCaptureNavigationError.make({\n    implementation: browserQuickActionImplementation,\n    message: boundedDiagnostic(message),\n    ...(cause === undefined ? {} : { cause }),\n  });\n\n/** Preserve bounded remote diagnostics for the host without exposing their text to a model. */\nconst privateResponseCause = (bodyText: string): Error | undefined =>\n  bodyText.length === 0 ? undefined : new Error(boundedDiagnostic(bodyText));\n\n/** Foreign cancellation must not keep a response Scope open indefinitely. */\nconst cancelResponse = (cancel: () => Promise<void>, warning: string): Effect.Effect<void> =>\n  Effect.tryPromise({ try: cancel, catch: () => undefined }).pipe(\n    Effect.interruptible,\n    Effect.timeoutOrElse({\n      duration: \"1 second\",\n      orElse: () => Effect.fail(undefined),\n    }),\n    Effect.catch(() => Effect.logWarning(warning)),\n  );\n\nconst releaseResponseReader = (\n  reader: ReadableStreamDefaultReader<Uint8Array>,\n): Effect.Effect<void> =>\n  cancelResponse(() => reader.cancel(), \"Canceling the Quick Action response failed\").pipe(\n    Effect.ensuring(\n      Effect.try({\n        try: () => reader.releaseLock(),\n        catch: (cause) => protocolError(\"Releasing the Quick Action response failed\", cause),\n      }).pipe(Effect.catch((error) => Effect.logWarning(error.message))),\n    ),\n  );\n\nconst readBoundedResponse = Effect.fn(\"BrowserQuickActionCapture.readResponse\")(function* (\n  response: Response,\n  request: PageCaptureRequest,\n) {\n  const body = response.body;\n\n  if (body === null) return \"\";\n\n  const reader = yield* Effect.acquireRelease(\n    Effect.try({\n      try: () => body.getReader(),\n      catch: (cause) => protocolError(\"Opening the Quick Action response failed\", cause),\n    }),\n    releaseResponseReader,\n  );\n\n  const decoder = new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: false });\n  let observedBytes = 0;\n  let bodyText = \"\";\n\n  while (true) {\n    const chunk = yield* Effect.tryPromise({\n      try: () => reader.read(),\n      catch: (cause) => protocolError(\"Reading the Quick Action response failed\", cause),\n    });\n\n    if (chunk.done) break;\n\n    observedBytes += chunk.value.byteLength;\n    if (observedBytes > request.limits.maxOutputBytes) {\n      return yield* PageCaptureOutputLimitError.make({\n        implementation: browserQuickActionImplementation,\n        limit: request.limits.maxOutputBytes,\n        observed: observedBytes,\n      });\n    }\n\n    bodyText += yield* Effect.try({\n      try: () => decoder.decode(chunk.value, { stream: true }),\n      catch: (cause) => protocolError(\"Decoding the Quick Action response failed\", cause),\n    });\n  }\n\n  return (\n    bodyText +\n    (yield* Effect.try({\n      try: () => decoder.decode(),\n      catch: (cause) => protocolError(\"Decoding the Quick Action response failed\", cause),\n    }))\n  );\n}, Effect.scoped);\n\n/**\n * Retry-After arrives in whole seconds; a non-integer form (an HTTP date) is\n * dropped rather than guessed at.\n */\nconst retryAfterMillis = (response: Response): number | undefined => {\n  const header = response.headers.get(\"Retry-After\");\n\n  if (header === null) return undefined;\n  const seconds = Number(header);\n\n  if (!Number.isSafeInteger(seconds) || seconds < 0) return undefined;\n  const millis = seconds * 1_000;\n\n  return Number.isSafeInteger(millis) ? millis : undefined;\n};\n\nconst browserMillis = (response: Response): number | undefined => {\n  const header = response.headers.get(\"X-Browser-Ms-Used\");\n\n  if (header === null) return undefined;\n  const millis = Number(header);\n\n  return Number.isSafeInteger(millis) && millis >= 0 ? millis : undefined;\n};\n\n/** Only trusted response metadata chooses transport framing; page text never does. */\nconst isJsonResponse = (response: Response): boolean => {\n  const contentType = response.headers.get(\"Content-Type\");\n\n  if (contentType === null) return false;\n  const mediaType = contentType.split(\";\", 1)[0]?.trim().toLowerCase();\n\n  return mediaType === \"application/json\" || mediaType?.endsWith(\"+json\") === true;\n};\n\nconst parseOutput = (\n  action: PageCaptureAction,\n  bodyText: string,\n  response: Response,\n): PageCaptureOutput | PageCaptureNavigationError | PageCaptureProtocolError => {\n  if (!isJsonResponse(response)) {\n    return protocolError(\n      \"The Quick Action success response was not a JSON response envelope\",\n      privateResponseCause(bodyText),\n    );\n  }\n  const envelope = decodeEnvelope(bodyText);\n\n  if (Option.isNone(envelope)) {\n    return protocolError(\n      \"The JSON Quick Action response did not carry a valid response envelope\",\n      privateResponseCause(bodyText),\n    );\n  }\n  if (!envelope.value.success) {\n    return navigationError(\n      \"The Quick Action reported a navigation failure\",\n      privateResponseCause(bodyText),\n    );\n  }\n  switch (action._tag) {\n    case \"CapturePageContent\":\n    case \"CapturePageMarkdown\": {\n      if (typeof envelope.value.result !== \"string\") {\n        return protocolError(\"The Quick Action envelope carried a non-text result\");\n      }\n\n      return action._tag === \"CapturePageContent\"\n        ? PageContentCaptured.make({ html: envelope.value.result })\n        : PageMarkdownCaptured.make({ markdown: envelope.value.result });\n    }\n    case \"CapturePageLinks\": {\n      const decoded = Schema.decodeUnknownOption(PageLinksCaptured)({\n        _tag: \"PageLinksCaptured\",\n        links: envelope.value.result,\n      });\n\n      if (Option.isNone(decoded)) {\n        return protocolError(\"The links Quick Action did not return a bounded array of valid URLs\");\n      }\n\n      return decoded.value;\n    }\n    case \"CapturePageScrape\": {\n      const decoded = Schema.decodeUnknownOption(PageScrapeCaptured)({\n        _tag: \"PageScrapeCaptured\",\n        groups: envelope.value.result,\n      });\n\n      if (Option.isNone(decoded)) {\n        return protocolError(\n          \"The scrape Quick Action did not return bounded grouped element records\",\n        );\n      }\n\n      return decoded.value;\n    }\n    case \"CapturePageStructured\": {\n      return PageStructuredCaptured.make({ value: envelope.value.result });\n    }\n  }\n};\n\nconst isQuotaMessage = (text: string): boolean => /time limit|daily|quota/i.test(text);\n\nconst makeCapture = (\n  browser: BrowserQuickActionClient,\n  workersAi?: BrowserQuickActionWorkersAiPolicy,\n): PageCaptureCapture =>\n  Effect.fn(\"BrowserQuickActionCapture.capture\")(function* (\n    request: PageCaptureRequest,\n  ): Effect.fn.Return<PageCaptureResult, PageCaptureError> {\n    if (request.engine !== \"chromium\") {\n      return yield* PageCaptureUnsupportedError.make({\n        implementation: browserQuickActionImplementation,\n        feature: \"engine\",\n        message:\n          \"The browser binding's quickAction() exposes no engine selector; kitesurf requires the REST or CDP surface\",\n      });\n    }\n\n    const usesWorkersAi = request.action._tag === \"CapturePageStructured\";\n\n    if (usesWorkersAi) {\n      if (workersAi === undefined) {\n        return yield* PageCaptureUnsupportedError.make({\n          implementation: browserQuickActionImplementation,\n          feature: \"action\",\n          message:\n            \"Structured capture invokes separately billed Workers AI and requires an explicit authorization and accounting policy\",\n        });\n      }\n      yield* workersAi.authorizeAndAccount(request).pipe(\n        Effect.mapError((cause) =>\n          PageCaptureInferencePolicyError.make({\n            implementation: browserQuickActionImplementation,\n            provider: \"cloudflare-workers-ai\",\n            reason: cause.reason,\n            message:\n              cause.reason === \"authorization\"\n                ? \"Workers AI extraction was not authorized\"\n                : \"Workers AI extraction could not be accounted for\",\n            cause,\n          }),\n        ),\n      );\n    }\n\n    const response = yield* executeQuickAction(browser, request).pipe(\n      Effect.mapError((error) =>\n        protocolError(\"The browser binding rejected the Quick Action\", error.cause),\n      ),\n    );\n\n    const bodyText = yield* readBoundedResponse(response, request);\n\n    if (response.status === 429) {\n      const retryAfter = retryAfterMillis(response);\n      const reason = isQuotaMessage(bodyText) ? \"quota\" : \"rate\";\n      const cause = privateResponseCause(bodyText);\n\n      return yield* PageCaptureRateLimitedError.make({\n        implementation: browserQuickActionImplementation,\n        reason,\n        ...(retryAfter === undefined ? {} : { retryAfterMillis: retryAfter }),\n        ...(cause === undefined ? {} : { cause }),\n        message:\n          reason === \"quota\"\n            ? \"The Quick Action exceeded its browser quota\"\n            : \"The Quick Action was rate limited\",\n      });\n    }\n    if (!response.ok) {\n      const message = `The Quick Action answered HTTP ${response.status}`;\n      const cause = privateResponseCause(bodyText);\n\n      if (response.status >= 500) {\n        return yield* protocolError(message, cause);\n      }\n\n      return yield* navigationError(message, cause);\n    }\n    const output = parseOutput(request.action, bodyText, response);\n\n    if (\n      output._tag === \"PageCaptureNavigationError\" ||\n      output._tag === \"PageCaptureProtocolError\"\n    ) {\n      return yield* output;\n    }\n    const millis = browserMillis(response);\n\n    return PageCaptureResult.make({\n      implementation: browserQuickActionImplementation,\n      output,\n      resourceUse: PageCaptureResourceUse.make({\n        ...(millis === undefined ? {} : { browserMillis: millis }),\n        ...(usesWorkersAi\n          ? {\n              inference: PageCaptureInferenceUse.make({\n                provider: \"cloudflare-workers-ai\",\n                modelCalls: 1,\n              }),\n            }\n          : {}),\n      }),\n    });\n  });\n\n/**\n * Ordinary Quick Actions require host-owned browser binding authority. Workers\n * AI stays unavailable unless the host deliberately selects its separate Layer.\n */\nexport const browserQuickActionCaptureLayer = (): Layer.Layer<\n  PageCapture,\n  never,\n  BrowserQuickActionBrowserBinding\n> =>\n  Layer.effect(\n    PageCapture,\n    Effect.map(BrowserQuickActionBrowserBinding, (browser) =>\n      PageCapture.of({ capture: makeCapture(browser) }),\n    ),\n  );\n\n/** Structured Quick Actions require host-owned browser and Workers AI authority. */\nexport const browserQuickActionWorkersAiCaptureLayer = (): Layer.Layer<\n  PageCapture,\n  never,\n  BrowserQuickActionBrowserBinding | BrowserQuickActionWorkersAi\n> =>\n  Layer.effect(\n    PageCapture,\n    Effect.gen(function* () {\n      const browser = yield* BrowserQuickActionBrowserBinding;\n      const workersAi = yield* BrowserQuickActionWorkersAi;\n\n      return PageCapture.of({ capture: makeCapture(browser, workersAi) });\n    }),\n  );\n\n/** Host-owned Quick Action binding and optional, separately billed extraction authority. */\nexport interface CloudflareBrowserOptions extends BrowserQuickActionCaptureOptions {\n  readonly workersAi?: BrowserQuickActionWorkersAiPolicy;\n}\n\n/** Compose WebCapture handlers with the Cloudflare Quick Action adapter. */\nexport const CloudflareBrowser = {\n  /**\n   * Supply a WebCapture definition and the resolved Worker browser binding.\n   * Supports capture, scrape, and extraction definitions without importing capabilities.\n   * Only PageCapture is provided; other handler requirements and errors stay visible.\n   * Extraction fails closed unless workersAi explicitly authorizes and accounts for it.\n   * Capture limits, typed failures, tracing, and scoped response cleanup are unchanged.\n   */\n  layer: <A, E, R>(\n    definition: { readonly handlers: Layer.Layer<A, E, R> },\n    options: CloudflareBrowserOptions,\n  ): Layer.Layer<A, E, Exclude<R, PageCapture>> => {\n    const capture =\n      options.workersAi === undefined\n        ? browserQuickActionCaptureLayer()\n        : browserQuickActionWorkersAiCaptureLayer().pipe(\n            Layer.provide(BrowserQuickActionWorkersAi.layer(options.workersAi)),\n          );\n\n    return definition.handlers.pipe(\n      Layer.provide(capture.pipe(Layer.provide(BrowserQuickActionBrowserBinding.layer(options)))),\n    );\n  },\n};\n\nconst screenshotOptions = (request: PageScreenshotRequest): BrowserRunScreenshotOptions => {\n  const options: BrowserRunBaseOptions = {};\n\n  if (\n    request.navigation?.waitUntil !== undefined ||\n    request.navigation?.timeoutMillis !== undefined\n  ) {\n    options.gotoOptions = {\n      ...(request.navigation.waitUntil === undefined\n        ? {}\n        : { waitUntil: request.navigation.waitUntil }),\n      ...(request.navigation.timeoutMillis === undefined\n        ? {}\n        : { timeout: request.navigation.timeoutMillis }),\n    };\n  }\n  if (request.navigation?.waitForSelector !== undefined) {\n    options.waitForSelector = {\n      selector: request.navigation.waitForSelector.selector,\n      ...(request.navigation.waitForSelector.timeoutMillis === undefined\n        ? {}\n        : { timeout: request.navigation.waitForSelector.timeoutMillis }),\n    };\n  }\n  if (request.viewport !== undefined) {\n    options.viewport = { width: request.viewport.width, height: request.viewport.height };\n  }\n  if (request.resourcePolicy?.rejectResourceTypes !== undefined) {\n    options.rejectResourceTypes = [...request.resourcePolicy.rejectResourceTypes];\n  }\n  if (request.resourcePolicy?.allowRequestPatterns !== undefined) {\n    options.allowRequestPattern = [...request.resourcePolicy.allowRequestPatterns];\n  }\n\n  return {\n    ...options,\n    ...(request.target._tag === \"PageUrlTarget\"\n      ? { url: request.target.url }\n      : { html: request.target.html }),\n    screenshotOptions: { type: \"png\", encoding: \"binary\", fullPage: request.fullPage },\n  };\n};\n\nconst cancelBody = (body: ReadableStream<Uint8Array>): Effect.Effect<void> =>\n  cancelResponse(() => body.cancel(), \"Canceling the screenshot response failed\");\n\nconst releaseScreenshotReader = (\n  reader: ReadableStreamDefaultReader<Uint8Array>,\n): Effect.Effect<void> =>\n  cancelResponse(() => reader.cancel(), \"Canceling the screenshot response failed\").pipe(\n    Effect.ensuring(\n      Effect.try({\n        try: () => reader.releaseLock(),\n        catch: () => undefined,\n      }).pipe(Effect.catch(() => Effect.logWarning(\"Releasing the screenshot response failed\"))),\n    ),\n  );\n\nconst pngResponse = (response: Response): boolean =>\n  response.headers.get(\"Content-Type\")?.split(\";\", 1)[0]?.trim().toLowerCase() === \"image/png\";\n\nconst declaredLength = (response: Response): number | undefined => {\n  const raw = response.headers.get(\"Content-Length\");\n\n  if (raw === null || !/^(0|[1-9][0-9]*)$/.test(raw)) return undefined;\n  const length = Number(raw);\n\n  return Number.isSafeInteger(length) ? length : undefined;\n};\n\nconst readScreenshot = Effect.fn(\"BrowserQuickActionScreenshot.read\")(function* (\n  response: Response,\n  request: PageScreenshotRequest,\n) {\n  const body = response.body;\n\n  if (body === null) {\n    return yield* protocolError(\"The screenshot response had no body\");\n  }\n  if (!pngResponse(response)) {\n    yield* cancelBody(body);\n\n    return yield* protocolError(\"The screenshot response was not image/png\");\n  }\n  const length = declaredLength(response);\n\n  if (length !== undefined && length > request.limits.maxOutputBytes) {\n    yield* cancelBody(body);\n\n    return yield* PageScreenshotOutputLimitError.make({\n      implementation: browserQuickActionImplementation,\n      limit: request.limits.maxOutputBytes,\n      observed: length,\n    });\n  }\n\n  const reader = yield* Effect.acquireRelease(\n    Effect.try({\n      try: () => body.getReader(),\n      catch: (cause) => protocolError(\"Opening the screenshot response failed\", cause),\n    }),\n    releaseScreenshotReader,\n  );\n\n  const chunks: Array<Uint8Array> = [];\n  let observed = 0;\n\n  while (true) {\n    const next = yield* Effect.tryPromise({\n      try: () => reader.read(),\n      catch: (cause) => protocolError(\"Reading the screenshot response failed\", cause),\n    });\n\n    if (next.done) break;\n    observed += next.value.byteLength;\n    if (observed > request.limits.maxOutputBytes) {\n      return yield* PageScreenshotOutputLimitError.make({\n        implementation: browserQuickActionImplementation,\n        limit: request.limits.maxOutputBytes,\n        observed,\n      });\n    }\n    chunks.push(next.value);\n  }\n  const bytes = new Uint8Array(observed);\n  let offset = 0;\n\n  for (const chunk of chunks) {\n    bytes.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n\n  return bytes;\n}, Effect.scoped);\n\nconst makeScreenshot = (browser: BrowserQuickActionClient): PageScreenshotCapture =>\n  Effect.fn(\"BrowserQuickActionScreenshot.capture\")(function* (\n    request: PageScreenshotRequest,\n  ): Effect.fn.Return<PageScreenshotResult, PageScreenshotError> {\n    if (request.engine !== \"chromium\") {\n      return yield* PageCaptureUnsupportedError.make({\n        implementation: browserQuickActionImplementation,\n        feature: \"engine\",\n        message: \"The browser binding's screenshot action exposes no engine selector\",\n      });\n    }\n\n    const response = yield* browser\n      .screenshot(screenshotOptions(request))\n      .pipe(\n        Effect.mapError((error) =>\n          protocolError(\"The browser binding rejected the screenshot\", error.cause),\n        ),\n      );\n\n    if (response.status === 429) {\n      const body = response.body;\n\n      if (body !== null) yield* cancelBody(body);\n\n      return yield* PageCaptureRateLimitedError.make({\n        implementation: browserQuickActionImplementation,\n        reason: \"rate\",\n        ...(retryAfterMillis(response) === undefined\n          ? {}\n          : { retryAfterMillis: retryAfterMillis(response) }),\n        message: \"The screenshot Quick Action was rate limited\",\n      });\n    }\n    if (!response.ok) {\n      const body = response.body;\n\n      if (body !== null) yield* cancelBody(body);\n      const message = `The screenshot Quick Action answered HTTP ${response.status}`;\n\n      return yield* response.status >= 500 ? protocolError(message) : navigationError(message);\n    }\n    const bytes = yield* readScreenshot(response, request);\n\n    return PageScreenshotResult.make({\n      implementation: browserQuickActionImplementation,\n      mediaType: \"image/png\",\n      bytes,\n    });\n  });\n\n/** Native Browser Run screenshot adapter. It retains PNG bytes only for the caller's result. */\nexport const browserQuickActionScreenshotLayer = (): Layer.Layer<\n  PageScreenshot,\n  never,\n  BrowserQuickActionBrowserBinding\n> =>\n  Layer.effect(\n    PageScreenshot,\n    Effect.map(BrowserQuickActionBrowserBinding, (browser) =>\n      PageScreenshot.of({ capture: makeScreenshot(browser) }),\n    ),\n  );\n","/** Public CloudflareBrowser API. Implementation helpers remain private. */\nexport {\n  BrowserQuickActionBrowserBinding,\n  BrowserQuickActionRpcError,\n  BrowserQuickActionWorkersAi,\n  BrowserQuickActionWorkersAiPolicyError,\n  browserQuickActionCaptureLayer,\n  browserQuickActionWorkersAiCaptureLayer,\n  browserQuickActionScreenshotLayer,\n  CloudflareBrowser,\n  type BrowserQuickActionCaptureOptions,\n  type BrowserQuickActionClient,\n  type BrowserQuickActionWorkersAiPolicy,\n  type CloudflareBrowserOptions,\n} from \"./internal/browser-quick-action.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAgDA,MAAa,mCAAmC,sBAAsB,KAAK;CACzE,WAAW;CACX,UAAU;AACZ,CAAC;;AA4BD,IAAa,6BAAb,cAAgD,OAAO,YAAwC,CAAC,CAC9F,8BACA;CACE,QAAQ,OAAO,SAAS;EAAC;EAAc;EAAW;EAAY;EAAS;EAAU;CAAM,CAAC;CACxF,OAAO,OAAO,OAAO;AACvB,CACF,CAAC,CAAC,CAAC;;AAQH,IAAa,mCAAb,MAAa,yCAAyC,QAAQ,QAG5D,CAAC,CAAC,oEAAoE,CAAC,CAAC;CACxE,OAAO,MACL,SAC+C;EAC/C,MAAM,UAAU,QAAQ;EAExB,MAAM,SAAS,OAAO,GAAG,yCAAyC,CAAC,CAAC,WAClE,QACA,UACwD;GACxD,OAAO,OAAO,OAAO,WAAW;IAC9B,KAAK;IACL,QAAQ,UAAU,2BAA2B,KAAK;KAAE;KAAQ;IAAM,CAAC;GACrE,CAAC;EACH,CAAC;EAED,OAAO,MAAM,QAAQ,gCAAgC,CAAC,CAAC;GACrD,aAAa,YACX,OAAO,oBAAoB,QAAQ,YAAY,cAAc,OAAO,CAAC;GACvE,UAAU,YAAY,OAAO,iBAAiB,QAAQ,YAAY,WAAW,OAAO,CAAC;GACrF,WAAW,YAAY,OAAO,kBAAkB,QAAQ,YAAY,YAAY,OAAO,CAAC;GACxF,QAAQ,YAAY,OAAO,eAAe,QAAQ,YAAY,SAAS,OAAO,CAAC;GAC/E,SAAS,YAAY,OAAO,gBAAgB,QAAQ,YAAY,UAAU,OAAO,CAAC;GAClF,OAAO,YAAY,OAAO,cAAc,QAAQ,YAAY,QAAQ,OAAO,CAAC;EAC9E,CAAC;CACH;AACF;;AAUA,IAAa,yCAAb,cAA4D,OAAO,YAAoD,CAAC,CACtH,0CACA;CACE,QAAQ,OAAO,SAAS,CAAC,iBAAiB,YAAY,CAAC;CACvD,SAAS,OAAO,OAAO,MAAM,OAAO,YAAY,GAAK,CAAC;CACtD,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;AAC3C,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,8BAAb,MAAa,oCAAoC,QAAQ,QAGvD,CAAC,CAAC,+DAA+D,CAAC,CAAC;CACnE,OAAO,MACL,QAC0C;EAC1C,OAAO,MAAM,QAAQ,2BAA2B,CAAC,CAAC,MAAM;CAC1D;AACF;AAEA,MAAM,wBAAwB;AAC9B,MAAM,qBAAqB,YAA4B,QAAQ,MAAM,GAAG,qBAAqB;AAE7F,MAAM,6BAA6B,OAAO,OAAO;CAC/C,SAAS,OAAO,QAAQ,IAAI;CAC5B,QAAQ,OAAO;AACjB,CAAC;AAED,MAAM,2BAA2B,OAAO,OAAO;CAC7C,SAAS,OAAO,QAAQ,KAAK;CAC7B,QAAQ,OAAO,MACb,OAAO,OAAO;EACZ,SAAS,OAAO;EAChB,MAAM,OAAO,YAAY,OAAO,MAAM;EACtC,QAAQ,OAAO,YAAY,OAAO,MAAM;EACxC,MAAM,OAAO,YAAY,OAAO,MAAM;CACxC,CAAC,CACH;CACA,eAAe,OAAO,YAAY,OAAO,MAAM;AACjD,CAAC;AAED,MAAM,sBAAsB,OAAO,MAAM,CAAC,4BAA4B,wBAAwB,CAAC;AAC/F,MAAM,iBAAiB,OAAO,oBAAoB,OAAO,eAAe,mBAAmB,CAAC;;AAG5F,MAAM,4BAA4B,YAAyD;CACzF,MAAM,UAAiC,CAAC;CACxC,MAAM,aAAa,QAAQ;CAE3B,IAAI,eAAe,KAAA,GAAW;EAC5B,MAAM,OAA0D,CAAC;EAEjE,IAAI,WAAW,cAAc,KAAA,GAAW,KAAK,YAAY,WAAW;EACpE,IAAI,WAAW,kBAAkB,KAAA,GAAW,KAAK,UAAU,WAAW;EACtE,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,SAAS,GAAG,QAAQ,cAAc;EACxD,IAAI,WAAW,oBAAoB,KAAA,GACjC,QAAQ,kBAAkB;GACxB,UAAU,WAAW,gBAAgB;GACrC,GAAI,WAAW,gBAAgB,kBAAkB,KAAA,IAC7C,CAAC,IACD,EAAE,SAAS,WAAW,gBAAgB,cAAc;EAC1D;CAEJ;CACA,IAAI,QAAQ,aAAa,KAAA,GACvB,QAAQ,WAAW;EAAE,OAAO,QAAQ,SAAS;EAAO,QAAQ,QAAQ,SAAS;CAAO;CAEtF,IAAI,QAAQ,mBAAmB,KAAA,GAAW;EACxC,IAAI,QAAQ,eAAe,wBAAwB,KAAA,GACjD,QAAQ,sBAAsB,CAAC,GAAG,QAAQ,eAAe,mBAAmB;EAE9E,IAAI,QAAQ,eAAe,yBAAyB,KAAA,GAClD,QAAQ,sBAAsB,CAAC,GAAG,QAAQ,eAAe,oBAAoB;CAEjF;CAEA,OAAO,QAAQ,OAAO,SAAS,kBAC3B;EAAE,GAAG;EAAS,KAAK,QAAQ,OAAO;CAAI,IACtC;EAAE,GAAG;EAAS,MAAM,QAAQ,OAAO;CAAK;AAC9C;;AAGA,MAAM,sBACJ,SACA,YACwD;CACxD,MAAM,UAAU,yBAAyB,OAAO;CAEhD,QAAQ,QAAQ,OAAO,MAAvB;EACE,KAAK,sBACH,OAAO,QAAQ,QAAQ,OAAO;EAEhC,KAAK,uBACH,OAAO,QAAQ,SAAS,OAAO;EAEjC,KAAK,oBACH,OAAO,QAAQ,MAAM;GACnB,GAAG;GACH,GAAI,QAAQ,OAAO,qBAAqB,KAAA,IACpC,CAAC,IACD,EAAE,kBAAkB,QAAQ,OAAO,iBAAiB;EAC1D,CAAC;EAEH,KAAK,qBACH,OAAO,QAAQ,OAAO;GACpB,GAAG;GACH,UAAU,QAAQ,OAAO,UAAU,KAAK,cAAc,EAAE,SAAS,EAAE;EACrE,CAAC;EAEH,KAAK,yBACH,OAAO,QAAQ,KAAK;GAClB,GAAG;GACH,iBAAiB;IACf,MAAM;IACN,aAAa,QAAQ,OAAO;GAC9B;GACA,GAAI,QAAQ,OAAO,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO,OAAO;EACjF,CAAC;CAEL;AACF;AAEA,MAAM,iBAAiB,SAAiB,UACtC,yBAAyB,KAAK;CAC5B,gBAAgB;CAChB,SAAS,kBAAkB,OAAO;CAClC,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;AACzC,CAAC;AAEH,MAAM,mBAAmB,SAAiB,UACxC,2BAA2B,KAAK;CAC9B,gBAAgB;CAChB,SAAS,kBAAkB,OAAO;CAClC,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;AACzC,CAAC;;AAGH,MAAM,wBAAwB,aAC5B,SAAS,WAAW,IAAI,KAAA,IAAY,IAAI,MAAM,kBAAkB,QAAQ,CAAC;;AAG3E,MAAM,kBAAkB,QAA6B,YACnD,OAAO,WAAW;CAAE,KAAK;CAAQ,aAAa,KAAA;AAAU,CAAC,CAAC,CAAC,KACzD,OAAO,eACP,OAAO,cAAc;CACnB,UAAU;CACV,cAAc,OAAO,KAAK,KAAA,CAAS;AACrC,CAAC,GACD,OAAO,YAAY,OAAO,WAAW,OAAO,CAAC,CAC/C;AAEF,MAAM,yBACJ,WAEA,qBAAqB,OAAO,OAAO,GAAG,4CAA4C,CAAC,CAAC,KAClF,OAAO,SACL,OAAO,IAAI;CACT,WAAW,OAAO,YAAY;CAC9B,QAAQ,UAAU,cAAc,8CAA8C,KAAK;AACrF,CAAC,CAAC,CAAC,KAAK,OAAO,OAAO,UAAU,OAAO,WAAW,MAAM,OAAO,CAAC,CAAC,CACnE,CACF;AAEF,MAAM,sBAAsB,OAAO,GAAG,wCAAwC,CAAC,CAAC,WAC9E,UACA,SACA;CACA,MAAM,OAAO,SAAS;CAEtB,IAAI,SAAS,MAAM,OAAO;CAE1B,MAAM,SAAS,OAAO,OAAO,eAC3B,OAAO,IAAI;EACT,WAAW,KAAK,UAAU;EAC1B,QAAQ,UAAU,cAAc,4CAA4C,KAAK;CACnF,CAAC,GACD,qBACF;CAEA,MAAM,UAAU,IAAI,YAAY,SAAS;EAAE,OAAO;EAAM,WAAW;CAAM,CAAC;CAC1E,IAAI,gBAAgB;CACpB,IAAI,WAAW;CAEf,OAAO,MAAM;EACX,MAAM,QAAQ,OAAO,OAAO,WAAW;GACrC,WAAW,OAAO,KAAK;GACvB,QAAQ,UAAU,cAAc,4CAA4C,KAAK;EACnF,CAAC;EAED,IAAI,MAAM,MAAM;EAEhB,iBAAiB,MAAM,MAAM;EAC7B,IAAI,gBAAgB,QAAQ,OAAO,gBACjC,OAAO,OAAO,4BAA4B,KAAK;GAC7C,gBAAgB;GAChB,OAAO,QAAQ,OAAO;GACtB,UAAU;EACZ,CAAC;EAGH,YAAY,OAAO,OAAO,IAAI;GAC5B,WAAW,QAAQ,OAAO,MAAM,OAAO,EAAE,QAAQ,KAAK,CAAC;GACvD,QAAQ,UAAU,cAAc,6CAA6C,KAAK;EACpF,CAAC;CACH;CAEA,OACE,YACC,OAAO,OAAO,IAAI;EACjB,WAAW,QAAQ,OAAO;EAC1B,QAAQ,UAAU,cAAc,6CAA6C,KAAK;CACpF,CAAC;AAEL,GAAG,OAAO,MAAM;;;;;AAMhB,MAAM,oBAAoB,aAA2C;CACnE,MAAM,SAAS,SAAS,QAAQ,IAAI,aAAa;CAEjD,IAAI,WAAW,MAAM,OAAO,KAAA;CAC5B,MAAM,UAAU,OAAO,MAAM;CAE7B,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,GAAG,OAAO,KAAA;CAC1D,MAAM,SAAS,UAAU;CAEzB,OAAO,OAAO,cAAc,MAAM,IAAI,SAAS,KAAA;AACjD;AAEA,MAAM,iBAAiB,aAA2C;CAChE,MAAM,SAAS,SAAS,QAAQ,IAAI,mBAAmB;CAEvD,IAAI,WAAW,MAAM,OAAO,KAAA;CAC5B,MAAM,SAAS,OAAO,MAAM;CAE5B,OAAO,OAAO,cAAc,MAAM,KAAK,UAAU,IAAI,SAAS,KAAA;AAChE;;AAGA,MAAM,kBAAkB,aAAgC;CACtD,MAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;CAEvD,IAAI,gBAAgB,MAAM,OAAO;CACjC,MAAM,YAAY,YAAY,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,YAAY;CAEnE,OAAO,cAAc,sBAAsB,WAAW,SAAS,OAAO,MAAM;AAC9E;AAEA,MAAM,eACJ,QACA,UACA,aAC8E;CAC9E,IAAI,CAAC,eAAe,QAAQ,GAC1B,OAAO,cACL,sEACA,qBAAqB,QAAQ,CAC/B;CAEF,MAAM,WAAW,eAAe,QAAQ;CAExC,IAAI,OAAO,OAAO,QAAQ,GACxB,OAAO,cACL,0EACA,qBAAqB,QAAQ,CAC/B;CAEF,IAAI,CAAC,SAAS,MAAM,SAClB,OAAO,gBACL,kDACA,qBAAqB,QAAQ,CAC/B;CAEF,QAAQ,OAAO,MAAf;EACE,KAAK;EACL,KAAK;GACH,IAAI,OAAO,SAAS,MAAM,WAAW,UACnC,OAAO,cAAc,qDAAqD;GAG5E,OAAO,OAAO,SAAS,uBACnB,oBAAoB,KAAK,EAAE,MAAM,SAAS,MAAM,OAAO,CAAC,IACxD,qBAAqB,KAAK,EAAE,UAAU,SAAS,MAAM,OAAO,CAAC;EAEnE,KAAK,oBAAoB;GACvB,MAAM,UAAU,OAAO,oBAAoB,iBAAiB,CAAC,CAAC;IAC5D,MAAM;IACN,OAAO,SAAS,MAAM;GACxB,CAAC;GAED,IAAI,OAAO,OAAO,OAAO,GACvB,OAAO,cAAc,qEAAqE;GAG5F,OAAO,QAAQ;EACjB;EACA,KAAK,qBAAqB;GACxB,MAAM,UAAU,OAAO,oBAAoB,kBAAkB,CAAC,CAAC;IAC7D,MAAM;IACN,QAAQ,SAAS,MAAM;GACzB,CAAC;GAED,IAAI,OAAO,OAAO,OAAO,GACvB,OAAO,cACL,wEACF;GAGF,OAAO,QAAQ;EACjB;EACA,KAAK,yBACH,OAAO,uBAAuB,KAAK,EAAE,OAAO,SAAS,MAAM,OAAO,CAAC;CAEvE;AACF;AAEA,MAAM,kBAAkB,SAA0B,0BAA0B,KAAK,IAAI;AAErF,MAAM,eACJ,SACA,cAEA,OAAO,GAAG,mCAAmC,CAAC,CAAC,WAC7C,SACuD;CACvD,IAAI,QAAQ,WAAW,YACrB,OAAO,OAAO,4BAA4B,KAAK;EAC7C,gBAAgB;EAChB,SAAS;EACT,SACE;CACJ,CAAC;CAGH,MAAM,gBAAgB,QAAQ,OAAO,SAAS;CAE9C,IAAI,eAAe;EACjB,IAAI,cAAc,KAAA,GAChB,OAAO,OAAO,4BAA4B,KAAK;GAC7C,gBAAgB;GAChB,SAAS;GACT,SACE;EACJ,CAAC;EAEH,OAAO,UAAU,oBAAoB,OAAO,CAAC,CAAC,KAC5C,OAAO,UAAU,UACf,gCAAgC,KAAK;GACnC,gBAAgB;GAChB,UAAU;GACV,QAAQ,MAAM;GACd,SACE,MAAM,WAAW,kBACb,6CACA;GACN;EACF,CAAC,CACH,CACF;CACF;CAEA,MAAM,WAAW,OAAO,mBAAmB,SAAS,OAAO,CAAC,CAAC,KAC3D,OAAO,UAAU,UACf,cAAc,iDAAiD,MAAM,KAAK,CAC5E,CACF;CAEA,MAAM,WAAW,OAAO,oBAAoB,UAAU,OAAO;CAE7D,IAAI,SAAS,WAAW,KAAK;EAC3B,MAAM,aAAa,iBAAiB,QAAQ;EAC5C,MAAM,SAAS,eAAe,QAAQ,IAAI,UAAU;EACpD,MAAM,QAAQ,qBAAqB,QAAQ;EAE3C,OAAO,OAAO,4BAA4B,KAAK;GAC7C,gBAAgB;GAChB;GACA,GAAI,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,kBAAkB,WAAW;GACnE,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;GACvC,SACE,WAAW,UACP,gDACA;EACR,CAAC;CACH;CACA,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,UAAU,kCAAkC,SAAS;EAC3D,MAAM,QAAQ,qBAAqB,QAAQ;EAE3C,IAAI,SAAS,UAAU,KACrB,OAAO,OAAO,cAAc,SAAS,KAAK;EAG5C,OAAO,OAAO,gBAAgB,SAAS,KAAK;CAC9C;CACA,MAAM,SAAS,YAAY,QAAQ,QAAQ,UAAU,QAAQ;CAE7D,IACE,OAAO,SAAS,gCAChB,OAAO,SAAS,4BAEhB,OAAO,OAAO;CAEhB,MAAM,SAAS,cAAc,QAAQ;CAErC,OAAO,kBAAkB,KAAK;EAC5B,gBAAgB;EAChB;EACA,aAAa,uBAAuB,KAAK;GACvC,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,eAAe,OAAO;GACxD,GAAI,gBACA,EACE,WAAW,wBAAwB,KAAK;IACtC,UAAU;IACV,YAAY;GACd,CAAC,EACH,IACA,CAAC;EACP,CAAC;CACH,CAAC;AACH,CAAC;;;;;AAMH,MAAa,uCAKX,MAAM,OACJ,aACA,OAAO,IAAI,mCAAmC,YAC5C,YAAY,GAAG,EAAE,SAAS,YAAY,OAAO,EAAE,CAAC,CAClD,CACF;;AAGF,MAAa,gDAKX,MAAM,OACJ,aACA,OAAO,IAAI,aAAa;CACtB,MAAM,UAAU,OAAO;CACvB,MAAM,YAAY,OAAO;CAEzB,OAAO,YAAY,GAAG,EAAE,SAAS,YAAY,SAAS,SAAS,EAAE,CAAC;AACpE,CAAC,CACH;;AAQF,MAAa,oBAAoB;;;;;;;;AAQ/B,QACE,YACA,YAC+C;CAC/C,MAAM,UACJ,QAAQ,cAAc,KAAA,IAClB,+BAA+B,IAC/B,wCAAwC,CAAC,CAAC,KACxC,MAAM,QAAQ,4BAA4B,MAAM,QAAQ,SAAS,CAAC,CACpE;CAEN,OAAO,WAAW,SAAS,KACzB,MAAM,QAAQ,QAAQ,KAAK,MAAM,QAAQ,iCAAiC,MAAM,OAAO,CAAC,CAAC,CAAC,CAC5F;AACF,EACF;AAEA,MAAM,qBAAqB,YAAgE;CACzF,MAAM,UAAiC,CAAC;CAExC,IACE,QAAQ,YAAY,cAAc,KAAA,KAClC,QAAQ,YAAY,kBAAkB,KAAA,GAEtC,QAAQ,cAAc;EACpB,GAAI,QAAQ,WAAW,cAAc,KAAA,IACjC,CAAC,IACD,EAAE,WAAW,QAAQ,WAAW,UAAU;EAC9C,GAAI,QAAQ,WAAW,kBAAkB,KAAA,IACrC,CAAC,IACD,EAAE,SAAS,QAAQ,WAAW,cAAc;CAClD;CAEF,IAAI,QAAQ,YAAY,oBAAoB,KAAA,GAC1C,QAAQ,kBAAkB;EACxB,UAAU,QAAQ,WAAW,gBAAgB;EAC7C,GAAI,QAAQ,WAAW,gBAAgB,kBAAkB,KAAA,IACrD,CAAC,IACD,EAAE,SAAS,QAAQ,WAAW,gBAAgB,cAAc;CAClE;CAEF,IAAI,QAAQ,aAAa,KAAA,GACvB,QAAQ,WAAW;EAAE,OAAO,QAAQ,SAAS;EAAO,QAAQ,QAAQ,SAAS;CAAO;CAEtF,IAAI,QAAQ,gBAAgB,wBAAwB,KAAA,GAClD,QAAQ,sBAAsB,CAAC,GAAG,QAAQ,eAAe,mBAAmB;CAE9E,IAAI,QAAQ,gBAAgB,yBAAyB,KAAA,GACnD,QAAQ,sBAAsB,CAAC,GAAG,QAAQ,eAAe,oBAAoB;CAG/E,OAAO;EACL,GAAG;EACH,GAAI,QAAQ,OAAO,SAAS,kBACxB,EAAE,KAAK,QAAQ,OAAO,IAAI,IAC1B,EAAE,MAAM,QAAQ,OAAO,KAAK;EAChC,mBAAmB;GAAE,MAAM;GAAO,UAAU;GAAU,UAAU,QAAQ;EAAS;CACnF;AACF;AAEA,MAAM,cAAc,SAClB,qBAAqB,KAAK,OAAO,GAAG,0CAA0C;AAEhF,MAAM,2BACJ,WAEA,qBAAqB,OAAO,OAAO,GAAG,0CAA0C,CAAC,CAAC,KAChF,OAAO,SACL,OAAO,IAAI;CACT,WAAW,OAAO,YAAY;CAC9B,aAAa,KAAA;AACf,CAAC,CAAC,CAAC,KAAK,OAAO,YAAY,OAAO,WAAW,0CAA0C,CAAC,CAAC,CAC3F,CACF;AAEF,MAAM,eAAe,aACnB,SAAS,QAAQ,IAAI,cAAc,CAAC,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,YAAY,MAAM;AAEnF,MAAM,kBAAkB,aAA2C;CACjE,MAAM,MAAM,SAAS,QAAQ,IAAI,gBAAgB;CAEjD,IAAI,QAAQ,QAAQ,CAAC,oBAAoB,KAAK,GAAG,GAAG,OAAO,KAAA;CAC3D,MAAM,SAAS,OAAO,GAAG;CAEzB,OAAO,OAAO,cAAc,MAAM,IAAI,SAAS,KAAA;AACjD;AAEA,MAAM,iBAAiB,OAAO,GAAG,mCAAmC,CAAC,CAAC,WACpE,UACA,SACA;CACA,MAAM,OAAO,SAAS;CAEtB,IAAI,SAAS,MACX,OAAO,OAAO,cAAc,qCAAqC;CAEnE,IAAI,CAAC,YAAY,QAAQ,GAAG;EAC1B,OAAO,WAAW,IAAI;EAEtB,OAAO,OAAO,cAAc,2CAA2C;CACzE;CACA,MAAM,SAAS,eAAe,QAAQ;CAEtC,IAAI,WAAW,KAAA,KAAa,SAAS,QAAQ,OAAO,gBAAgB;EAClE,OAAO,WAAW,IAAI;EAEtB,OAAO,OAAO,+BAA+B,KAAK;GAChD,gBAAgB;GAChB,OAAO,QAAQ,OAAO;GACtB,UAAU;EACZ,CAAC;CACH;CAEA,MAAM,SAAS,OAAO,OAAO,eAC3B,OAAO,IAAI;EACT,WAAW,KAAK,UAAU;EAC1B,QAAQ,UAAU,cAAc,0CAA0C,KAAK;CACjF,CAAC,GACD,uBACF;CAEA,MAAM,SAA4B,CAAC;CACnC,IAAI,WAAW;CAEf,OAAO,MAAM;EACX,MAAM,OAAO,OAAO,OAAO,WAAW;GACpC,WAAW,OAAO,KAAK;GACvB,QAAQ,UAAU,cAAc,0CAA0C,KAAK;EACjF,CAAC;EAED,IAAI,KAAK,MAAM;EACf,YAAY,KAAK,MAAM;EACvB,IAAI,WAAW,QAAQ,OAAO,gBAC5B,OAAO,OAAO,+BAA+B,KAAK;GAChD,gBAAgB;GAChB,OAAO,QAAQ,OAAO;GACtB;EACF,CAAC;EAEH,OAAO,KAAK,KAAK,KAAK;CACxB;CACA,MAAM,QAAQ,IAAI,WAAW,QAAQ;CACrC,IAAI,SAAS;CAEb,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,IAAI,OAAO,MAAM;EACvB,UAAU,MAAM;CAClB;CAEA,OAAO;AACT,GAAG,OAAO,MAAM;AAEhB,MAAM,kBAAkB,YACtB,OAAO,GAAG,sCAAsC,CAAC,CAAC,WAChD,SAC6D;CAC7D,IAAI,QAAQ,WAAW,YACrB,OAAO,OAAO,4BAA4B,KAAK;EAC7C,gBAAgB;EAChB,SAAS;EACT,SAAS;CACX,CAAC;CAGH,MAAM,WAAW,OAAO,QACrB,WAAW,kBAAkB,OAAO,CAAC,CAAC,CACtC,KACC,OAAO,UAAU,UACf,cAAc,+CAA+C,MAAM,KAAK,CAC1E,CACF;CAEF,IAAI,SAAS,WAAW,KAAK;EAC3B,MAAM,OAAO,SAAS;EAEtB,IAAI,SAAS,MAAM,OAAO,WAAW,IAAI;EAEzC,OAAO,OAAO,4BAA4B,KAAK;GAC7C,gBAAgB;GAChB,QAAQ;GACR,GAAI,iBAAiB,QAAQ,MAAM,KAAA,IAC/B,CAAC,IACD,EAAE,kBAAkB,iBAAiB,QAAQ,EAAE;GACnD,SAAS;EACX,CAAC;CACH;CACA,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,OAAO,SAAS;EAEtB,IAAI,SAAS,MAAM,OAAO,WAAW,IAAI;EACzC,MAAM,UAAU,6CAA6C,SAAS;EAEtE,OAAO,OAAO,SAAS,UAAU,MAAM,cAAc,OAAO,IAAI,gBAAgB,OAAO;CACzF;CACA,MAAM,QAAQ,OAAO,eAAe,UAAU,OAAO;CAErD,OAAO,qBAAqB,KAAK;EAC/B,gBAAgB;EAChB,WAAW;EACX;CACF,CAAC;AACH,CAAC;;AAGH,MAAa,0CAKX,MAAM,OACJ,gBACA,OAAO,IAAI,mCAAmC,YAC5C,eAAe,GAAG,EAAE,SAAS,eAAe,OAAO,EAAE,CAAC,CACxD,CACF"}

package/dist/CloudflareBrowser.mjs

@@ -1,2 +1,2 @@
-import { a as BrowserQuickActionWorkersAiPolicyError, c as browserQuickActionScreenshotLayer, i as BrowserQuickActionWorkersAi, l as browserQuickActionWorkersAiCaptureLayer, n as BrowserQuickActionBrowserBinding, o as CloudflareBrowser, r as BrowserQuickActionRpcError, s as browserQuickActionCaptureLayer } from "./CloudflareBrowser-1jeZx3_g.mjs";
+import { a as BrowserQuickActionWorkersAiPolicyError, c as browserQuickActionScreenshotLayer, i as BrowserQuickActionWorkersAi, l as browserQuickActionWorkersAiCaptureLayer, n as BrowserQuickActionBrowserBinding, o as CloudflareBrowser, r as BrowserQuickActionRpcError, s as browserQuickActionCaptureLayer } from "./CloudflareBrowser-Bj22nNUT.mjs";
 export { BrowserQuickActionBrowserBinding, BrowserQuickActionRpcError, BrowserQuickActionWorkersAi, BrowserQuickActionWorkersAiPolicyError, CloudflareBrowser, browserQuickActionCaptureLayer, browserQuickActionScreenshotLayer, browserQuickActionWorkersAiCaptureLayer };

package/dist/CloudflareThreadClient.d.mts

@@ -182,13 +182,13 @@ declare const encodeUnknownResolutionCommand: (input: UnknownResolutionCommand,
   readonly author: string;
   readonly reason: string;
   readonly resolution: {
-    readonly _tag: "SafeToRetry";
-  } | {
     readonly _tag: "CompletedWithResult";
     readonly result: Schema.Json;
     readonly isFailure: boolean;
   } | {
     readonly _tag: "NeverHappened";
+  } | {
+    readonly _tag: "SafeToRetry";
   } | {
     readonly _tag: "AbortSubmission";
   };
@@ -316,14 +316,6 @@ declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorded | Hos
       readonly createdAt: string;
       readonly deploymentId: string;
       readonly payload: {
-        readonly _tag: "SubagentStarted";
-        readonly runId: string;
-        readonly toolCallId: string;
-        readonly childThreadId: string;
-        readonly childSubmissionId: string;
-        readonly childReceiptId: string;
-        readonly childRunId: string;
-      } | {
         readonly _tag: "AbortRequested";
         readonly submissionId: string;
         readonly author: string;
@@ -557,6 +549,14 @@ declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorded | Hos
             readonly resultBytes: number;
           };
         } | undefined;
+      } | {
+        readonly _tag: "SubagentStarted";
+        readonly runId: string;
+        readonly toolCallId: string;
+        readonly childThreadId: string;
+        readonly childSubmissionId: string;
+        readonly childReceiptId: string;
+        readonly childRunId: string;
       } | {
         readonly _tag: "SubagentJoined";
         readonly runId: string;
@@ -628,13 +628,13 @@ declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorded | Hos
     readonly author: string;
     readonly reason: string;
     readonly resolution: {
-      readonly _tag: "SafeToRetry";
-    } | {
       readonly _tag: "CompletedWithResult";
       readonly result: Schema.Json;
       readonly isFailure: boolean;
     } | {
       readonly _tag: "NeverHappened";
+    } | {
+      readonly _tag: "SafeToRetry";
     } | {
       readonly _tag: "AbortSubmission";
     };
@@ -687,11 +687,6 @@ declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorded | Hos
     readonly threadId: string;
     readonly actualEpoch: number;
     readonly attemptedEpoch: number;
-  } | {
-    readonly _tag: "DurableAlarmError";
-    readonly operation: string;
-    readonly message: string;
-    readonly cause?: Schema.Json | undefined;
   } | {
     readonly _tag: "HostProtocolError";
     readonly message: string;
@@ -719,6 +714,11 @@ declare const encodeHostResponse: (input: AbortRecorded | ApprovalRecorded | Hos
     readonly limit: "database-bytes" | "input-bytes" | "queue-depth";
     readonly actual: number;
     readonly maximum: number;
+  } | {
+    readonly _tag: "DurableAlarmError";
+    readonly operation: string;
+    readonly message: string;
+    readonly cause?: Schema.Json | undefined;
   } | {
     readonly _tag: "OperationDenied";
     readonly operation: "abort" | "awaitSettlement" | "explain" | "observe" | "resolveApproval" | "resolveUnknown" | "retry" | "scanObligations" | "verify" | "wake";
@@ -751,6 +751,7 @@ declare const CloudflareThreadClient_base: Context.ServiceClass<CloudflareThread
   /**
    * Wait without polling until progress after `afterSequence` is already durable or hinted.
    * The result is deliberately void: canonical records remain authoritative and must be read.
+   * Interruption waits at most one second for best-effort remote cancellation.
    */
   readonly awaitProgress: (threadId: ThreadId, afterSequence: CanonicalSequence) => Effect.Effect<void, ClientProgressFailure>;
   /** One bounded page of canonical records. */

package/dist/CloudflareThreadClient.mjs

@@ -67,6 +67,7 @@ var CloudflareThreadClient_exports = /* @__PURE__ */ __exportAll({
 */
 /** Ceiling for host protocol diagnostic strings. */
 const MAX_HOST_DIAGNOSTIC_LENGTH = 4096;
+const PROGRESS_CANCELLATION_TIMEOUT = "1 second";
 const BoundedDiagnostic = Schema.String.check(Schema.isMaxLength(MAX_HOST_DIAGNOSTIC_LENGTH));
 /** Truncate a diagnostic string to the host protocol's bounded length. */
 const boundHostDiagnostic = (value) => value.length > MAX_HOST_DIAGNOSTIC_LENGTH ? `${value.slice(0, 4093)}...` : value;
@@ -303,7 +304,7 @@ var CloudflareThreadClient = class CloudflareThreadClient extends Context.Servic
 			const response = yield* call(threadId, "observePage", encoded);
 			return (yield* expect(threadId, "observePage", ObservedPage, ClientObserveHostFailure)(response)).records;
 		});
-		const cancelProgress = (threadId, waiterId) => encodeCancelProgressRequest(CancelProgressRequest.make({ waiterId })).pipe(Effect.mapError(() => void 0), Effect.flatMap((encoded) => call(threadId, "cancelProgress", encoded)), Effect.asVoid, Effect.ignore);
+		const cancelProgress = (threadId, waiterId) => encodeCancelProgressRequest(CancelProgressRequest.make({ waiterId })).pipe(Effect.mapError(() => void 0), Effect.flatMap((encoded) => call(threadId, "cancelProgress", encoded)), Effect.interruptible, Effect.timeout(PROGRESS_CANCELLATION_TIMEOUT), Effect.asVoid, Effect.ignore);
 		return CloudflareThreadClient.of({
 			submit: (agent, input, options) => Effect.gen(function* () {
 				const encodedInput = yield* Schema.encodeEffect(agent.definition.input)(input).pipe(Effect.mapError((cause) => AgentInputError.make({ message: `Unable to encode Agent input: ${cause.message}` })));

package/dist/CloudflareThreadClient.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"CloudflareThreadClient.mjs","names":[],"sources":["../src/CloudflareThreadClient.ts"],"sourcesContent":["import { AgentInputError } from \"@effect-agent/core/AgentError\";\nimport { AgentId, type ThreadId } from \"@effect-agent/core/Identifiers\";\nimport { DigestError } from \"@effect-agent/thread/Digest\";\nimport {\n  Receipt,\n  type DurableSubmitAgent,\n  type DurableSubmitOptions,\n} from \"@effect-agent/thread/DurableAgentRuntime\";\nimport { DurableRuntimeFailpointError } from \"@effect-agent/thread/DurableFailpoint\";\nimport { OperationDenied } from \"@effect-agent/thread/OperationAuthorizer\";\nimport {\n  CanonicalRecordEnvelope,\n  CanonicalSequence,\n  DefinitionDigests,\n  PersistedJson,\n} from \"@effect-agent/thread/Records\";\nimport {\n  AdmissionFence,\n  AdmissionGroup,\n  AbortCommand,\n  AbortIntent,\n  AdmissionConflict,\n  AdmissionPolicyError,\n  ApprovalConflict,\n  ApprovalDecisionCommand,\n  ApprovalDecisionIntent,\n  IdempotencyKey,\n  JoinedToHost,\n  LedgerError,\n  Principal,\n  Settlement,\n  SettlementConflict,\n  UnknownResolutionCommand,\n  UnknownResolutionConflict,\n  UnknownResolutionIntent,\n} from \"@effect-agent/thread/SubmissionLedger\";\nimport { SubmissionStatus } from \"@effect-agent/thread/SubmissionStatus\";\nimport {\n  AppendConflict,\n  ThreadNotMaterialized,\n  ThreadStoreError,\n  FenceRejected,\n} from \"@effect-agent/thread/ThreadStore\";\nimport { BrowserCrypto } from \"@effect/platform-browser\";\nimport { Context, Crypto, Duration, Effect, Layer, Schema } from \"effect\";\nimport { RpcTracing } from \"effect-cf\";\n\nimport { DurableAlarmError } from \"./Alarm.ts\";\nimport { ThreadObjectNamespace, type ThreadObjectRpc } from \"./CloudflareBindings.ts\";\nimport { AdmissionLimitExceeded } from \"./CloudflareConfig.ts\";\nimport { cloudflareFailureSignals, safeCauseMessage } from \"./internal/boundary.ts\";\n\n/**\n * The Worker↔Thread-Object host protocol (plan §1.4): Schema envelopes for the host\n * entry points (`submitEncoded`, `awaitSettlementEncoded`, `observePage`, `abortEncoded`,\n * `resolveApprovalEncoded`, `resolveUnknownEncoded`) plus the Worker-side client that speaks\n * it. Mirrors the WP2 port protocol: requests and responses are closed Schema unions, typed\n * failures travel as their own tagged classes and RE-DECODE to identical tags on the caller\n * (error-tag fidelity), and protocol anomalies are answered typed instead of thrown.\n */\n\n/** Ceiling for host protocol diagnostic strings. */\nconst MAX_HOST_DIAGNOSTIC_LENGTH = 4_096;\n\nconst BoundedDiagnostic = Schema.String.check(Schema.isMaxLength(MAX_HOST_DIAGNOSTIC_LENGTH));\n\n/** Truncate a diagnostic string to the host protocol's bounded length. */\nexport const boundHostDiagnostic = (value: string): string =>\n  value.length > MAX_HOST_DIAGNOSTIC_LENGTH\n    ? `${value.slice(0, MAX_HOST_DIAGNOSTIC_LENGTH - 3)}...`\n    : value;\n\n/**\n * The envelope itself could not be honored: the Object could not decode the request, or a\n * response could not be encoded/decoded. Never carries operation semantics.\n */\nexport class HostProtocolError extends Schema.TaggedError<HostProtocolError>()(\n  \"HostProtocolError\",\n  {\n    message: BoundedDiagnostic,\n  },\n) {}\n\n/** The Worker-side stub call itself failed (RPC rejection, overload, eviction mid-call). */\nexport class ThreadClientError extends Schema.TaggedError<ThreadClientError>()(\n  \"ThreadClientError\",\n  {\n    threadId: Schema.String,\n    message: Schema.String,\n    cause: Schema.optionalKey(Schema.Defect()),\n    /** Cloudflare's own classification for a failure safe to retry with a fresh stub. */\n    retryable: Schema.optionalKey(Schema.Boolean),\n    /** Cloudflare overloads are surfaced immediately instead of adding retry pressure. */\n    overloaded: Schema.optionalKey(Schema.Boolean),\n  },\n) {}\n\n// ---------------------------------------------------------------------------\n// Requests\n// ---------------------------------------------------------------------------\n\n/**\n * One durable submission, input ALREADY encoded by the caller through the Agent Binding's\n * input schema (the Worker bundles the same Agent definitions as the Object, so schema\n * validation happens client-side; the resolved Binding re-validates at claim time). The\n * Thread identity is deliberately absent — the addressed Object IS the lane.\n */\nexport class SubmitRequest extends Schema.Class<SubmitRequest>(\n  \"@effect-agent/platform-cloudflare/SubmitRequest\",\n)({\n  agentId: AgentId,\n  principal: Principal,\n  idempotencyKey: IdempotencyKey,\n  admissionGroup: Schema.optionalKey(AdmissionGroup),\n  admissionFence: Schema.optionalKey(AdmissionFence),\n  definitions: DefinitionDigests,\n  inputPayload: PersistedJson,\n}) {}\n\n/** One bounded page of canonical records after an optional sequence. */\nexport class ObservePageRequest extends Schema.Class<ObservePageRequest>(\n  \"@effect-agent/platform-cloudflare/ObservePageRequest\",\n)({\n  afterSequence: Schema.optionalKey(CanonicalSequence),\n  limit: Schema.Int.check(Schema.isGreaterThan(0), Schema.isLessThanOrEqualTo(1_024)),\n}) {}\n\n/** One event-driven wait for canonical progress strictly after this sequence. */\nexport class AwaitProgressRequest extends Schema.Class<AwaitProgressRequest>(\n  \"@effect-agent/platform-cloudflare/AwaitProgressRequest\",\n)({\n  afterSequence: CanonicalSequence,\n  waiterId: Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(256)),\n}) {}\n\n/** Best-effort cancellation of one in-flight progress RPC. */\nexport class CancelProgressRequest extends Schema.Class<CancelProgressRequest>(\n  \"@effect-agent/platform-cloudflare/CancelProgressRequest\",\n)({\n  waiterId: Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(256)),\n}) {}\n\n// ---------------------------------------------------------------------------\n// Responses\n// ---------------------------------------------------------------------------\n\n/**\n * Every typed failure a host entry point can produce, plus the protocol's own errors. Same\n * closed-union discipline as the WP2 `PortFailure`: members re-decode to the SAME tagged\n * classes on the Worker side; `cause` chains travel as Schema defects without instance\n * fidelity (plan §2.8).\n */\nexport const HostFailure = Schema.Union([\n  AgentInputError,\n  DigestError,\n  AdmissionConflict,\n  AdmissionPolicyError,\n  SettlementConflict,\n  ApprovalConflict,\n  UnknownResolutionConflict,\n  JoinedToHost,\n  LedgerError,\n  ThreadStoreError,\n  ThreadNotMaterialized,\n  AppendConflict,\n  FenceRejected,\n  DurableRuntimeFailpointError,\n  AdmissionLimitExceeded,\n  DurableAlarmError,\n  OperationDenied,\n  HostProtocolError,\n]);\n\nexport type HostFailure = typeof HostFailure.Type;\n\nexport class SubmitSucceeded extends Schema.TaggedClass<SubmitSucceeded>(\n  \"@effect-agent/platform-cloudflare/SubmitSucceeded\",\n)(\"SubmitSucceeded\", {\n  receipt: Receipt,\n}) {}\n\nexport class SubmissionStatusResponse extends Schema.TaggedClass<SubmissionStatusResponse>(\n  \"@effect-agent/platform-cloudflare/SubmissionStatusResponse\",\n)(\"SubmissionStatusResponse\", { status: SubmissionStatus }) {}\n\nexport class SettlementReached extends Schema.TaggedClass<SettlementReached>(\n  \"@effect-agent/platform-cloudflare/SettlementReached\",\n)(\"SettlementReached\", {\n  settlement: Settlement,\n}) {}\n\nexport class ObservedPage extends Schema.TaggedClass<ObservedPage>(\n  \"@effect-agent/platform-cloudflare/ObservedPage\",\n)(\"ObservedPage\", {\n  records: Schema.Array(CanonicalRecordEnvelope).check(Schema.isMaxLength(1_024)),\n}) {}\n\n/** A record was already committed or an incarnation-local hint says the caller should re-read. */\nexport class ProgressObserved extends Schema.TaggedClass<ProgressObserved>(\n  \"@effect-agent/platform-cloudflare/ProgressObserved\",\n)(\"ProgressObserved\", {}) {}\n\nexport class ProgressCancelled extends Schema.TaggedClass<ProgressCancelled>(\n  \"@effect-agent/platform-cloudflare/ProgressCancelled\",\n)(\"ProgressCancelled\", {}) {}\n\nexport class AbortRecorded extends Schema.TaggedClass<AbortRecorded>(\n  \"@effect-agent/platform-cloudflare/AbortRecorded\",\n)(\"AbortRecorded\", {\n  intent: AbortIntent,\n}) {}\n\nexport class ApprovalRecorded extends Schema.TaggedClass<ApprovalRecorded>(\n  \"@effect-agent/platform-cloudflare/ApprovalRecorded\",\n)(\"ApprovalRecorded\", {\n  intent: ApprovalDecisionIntent,\n}) {}\n\nexport class UnknownResolutionRecorded extends Schema.TaggedClass<UnknownResolutionRecorded>(\n  \"@effect-agent/platform-cloudflare/UnknownResolutionRecorded\",\n)(\"UnknownResolutionRecorded\", {\n  intent: UnknownResolutionIntent,\n}) {}\n\n/** The entry point failed TYPED on the Object; the failure re-decodes verbatim. */\nexport class HostFailed extends Schema.TaggedClass<HostFailed>(\n  \"@effect-agent/platform-cloudflare/HostFailed\",\n)(\"HostFailed\", {\n  failure: HostFailure,\n}) {}\n\n/** The uniform answer of one host entry point. Callers narrow by the tag their call implies. */\nexport const HostResponse = Schema.Union([\n  SubmitSucceeded,\n  SettlementReached,\n  SubmissionStatusResponse,\n  ObservedPage,\n  ProgressObserved,\n  ProgressCancelled,\n  AbortRecorded,\n  ApprovalRecorded,\n  UnknownResolutionRecorded,\n  HostFailed,\n]);\n\nexport type HostResponse = typeof HostResponse.Type;\n\n// ---------------------------------------------------------------------------\n// Codecs (shared by the Object endpoints and the Worker client)\n// ---------------------------------------------------------------------------\n\nexport const decodeSubmitRequest = Schema.decodeUnknownEffect(SubmitRequest);\nexport const encodeSubmitRequest = Schema.encodeEffect(SubmitRequest);\nexport const decodeReceipt = Schema.decodeUnknownEffect(Receipt);\nexport const encodeReceipt = Schema.encodeEffect(Receipt);\nexport const decodeObservePageRequest = Schema.decodeUnknownEffect(ObservePageRequest);\nexport const encodeObservePageRequest = Schema.encodeEffect(ObservePageRequest);\nexport const decodeAwaitProgressRequest = Schema.decodeUnknownEffect(AwaitProgressRequest);\nexport const encodeAwaitProgressRequest = Schema.encodeEffect(AwaitProgressRequest);\nexport const decodeCancelProgressRequest = Schema.decodeUnknownEffect(CancelProgressRequest);\nexport const encodeCancelProgressRequest = Schema.encodeEffect(CancelProgressRequest);\nexport const decodeAbortCommand = Schema.decodeUnknownEffect(AbortCommand);\nexport const encodeAbortCommand = Schema.encodeEffect(AbortCommand);\nexport const decodeApprovalDecisionCommand = Schema.decodeUnknownEffect(ApprovalDecisionCommand);\nexport const encodeApprovalDecisionCommand = Schema.encodeEffect(ApprovalDecisionCommand);\nexport const decodeUnknownResolutionCommand = Schema.decodeUnknownEffect(UnknownResolutionCommand);\nexport const encodeUnknownResolutionCommand = Schema.encodeEffect(UnknownResolutionCommand);\nexport const encodeHostResponse = Schema.encodeEffect(HostResponse);\nexport const decodeHostResponse = Schema.decodeUnknownEffect(HostResponse);\n\n// ---------------------------------------------------------------------------\n// Worker-side client\n// ---------------------------------------------------------------------------\n\n/** Failure surface of `CloudflareThreadClient.submit`. */\nconst ClientSubmitHostFailure = Schema.Union([\n  AgentInputError,\n  DigestError,\n  AdmissionConflict,\n  AdmissionPolicyError,\n  LedgerError,\n  ThreadStoreError,\n  ThreadNotMaterialized,\n  AppendConflict,\n  FenceRejected,\n  DurableRuntimeFailpointError,\n  AdmissionLimitExceeded,\n  DurableAlarmError,\n  HostProtocolError,\n]);\n\nconst ClientAwaitHostFailure = Schema.Union([\n  LedgerError,\n  SettlementConflict,\n  OperationDenied,\n  HostProtocolError,\n]);\n\nconst ClientObserveHostFailure = Schema.Union([\n  ThreadStoreError,\n  ThreadNotMaterialized,\n  OperationDenied,\n  HostProtocolError,\n]);\n\nconst ClientAbortHostFailure = Schema.Union([\n  OperationDenied,\n  LedgerError,\n  SettlementConflict,\n  JoinedToHost,\n  DurableRuntimeFailpointError,\n  DurableAlarmError,\n  HostProtocolError,\n]);\n\nconst ClientApprovalHostFailure = Schema.Union([\n  LedgerError,\n  SettlementConflict,\n  ApprovalConflict,\n  OperationDenied,\n  DurableAlarmError,\n  HostProtocolError,\n]);\n\nconst ClientUnknownHostFailure = Schema.Union([\n  LedgerError,\n  SettlementConflict,\n  UnknownResolutionConflict,\n  JoinedToHost,\n  DurableRuntimeFailpointError,\n  OperationDenied,\n  DurableAlarmError,\n  HostProtocolError,\n]);\n\nexport type ClientSubmitFailure = typeof ClientSubmitHostFailure.Type | ThreadClientError;\nexport type ClientAwaitFailure = typeof ClientAwaitHostFailure.Type | ThreadClientError;\nexport type ClientObserveFailure = typeof ClientObserveHostFailure.Type | ThreadClientError;\nexport type ClientProgressFailure = ClientObserveFailure;\nexport type ClientAbortFailure = typeof ClientAbortHostFailure.Type | ThreadClientError;\nexport type ClientApprovalFailure = typeof ClientApprovalHostFailure.Type | ThreadClientError;\nexport type ClientUnknownFailure = typeof ClientUnknownHostFailure.Type | ThreadClientError;\n\nconst outOfContract = (threadId: string, operation: string, observed: string): ThreadClientError =>\n  ThreadClientError.make({\n    threadId,\n    message: boundHostDiagnostic(\n      `The Thread Object answered ${operation} with the out-of-contract ${observed}.`,\n    ),\n  });\n\nconst hostRpcMethods = {\n  submit: \"submitEncoded\",\n  awaitSettlement: \"awaitSettlementEncoded\",\n  submissionStatus: \"submissionStatusEncoded\",\n  awaitProgress: \"awaitProgressEncoded\",\n  cancelProgress: \"cancelProgressEncoded\",\n  observePage: \"observePage\",\n  abort: \"abortEncoded\",\n  resolveApproval: \"resolveApprovalEncoded\",\n  resolveUnknown: \"resolveUnknownEncoded\",\n} as const satisfies Record<string, keyof ThreadObjectRpc>;\n\n/** Worker-side client over the Thread Object namespace (DEPLOY-010). */\nexport class CloudflareThreadClient extends Context.Service<\n  CloudflareThreadClient,\n  {\n    /** Encode the input client-side, then durably submit to the owning Object. */\n    readonly submit: <InputSchema extends Schema.Top>(\n      agent: DurableSubmitAgent<InputSchema>,\n      input: InputSchema[\"Type\"],\n      options: DurableSubmitOptions,\n    ) => Effect.Effect<Receipt, ClientSubmitFailure, InputSchema[\"EncodingServices\"]>;\n    /** Wake-hinted, poll-guaranteed settlement wait executed inside the owning Object. */\n    readonly submissionStatus: (\n      receipt: Receipt,\n    ) => Effect.Effect<SubmissionStatus, ClientAwaitFailure>;\n    readonly awaitSettlement: (receipt: Receipt) => Effect.Effect<Settlement, ClientAwaitFailure>;\n    /**\n     * Wait without polling until progress after `afterSequence` is already durable or hinted.\n     * The result is deliberately void: canonical records remain authoritative and must be read.\n     */\n    readonly awaitProgress: (\n      threadId: ThreadId,\n      afterSequence: CanonicalSequence,\n    ) => Effect.Effect<void, ClientProgressFailure>;\n    /** One bounded page of canonical records. */\n    readonly readPage: (\n      threadId: ThreadId,\n      options?: {\n        readonly afterSequence?: CanonicalSequence | undefined;\n        readonly limit?: number | undefined;\n      },\n    ) => Effect.Effect<ReadonlyArray<CanonicalRecordEnvelope>, ClientObserveFailure>;\n    /**\n     * Every canonical record up to the CURRENT committed tail, via repeated pages. A\n     * snapshot read, not a live observation — callers wanting liveness re-read after\n     * `awaitSettlement`.\n     */\n    readonly readAll: (\n      threadId: ThreadId,\n    ) => Effect.Effect<ReadonlyArray<CanonicalRecordEnvelope>, ClientObserveFailure>;\n    /**\n     * Submission-addressed operations take the owning Thread explicitly (from the\n     * Receipt): minted Submission identities stay OPAQUE outside the storage adapter that\n     * minted them (D-P6-5), so the client never parses one to find the lane.\n     */\n    readonly abort: (\n      threadId: ThreadId,\n      command: AbortCommand,\n    ) => Effect.Effect<AbortIntent, ClientAbortFailure>;\n    readonly resolveApproval: (\n      threadId: ThreadId,\n      command: ApprovalDecisionCommand,\n    ) => Effect.Effect<ApprovalDecisionIntent, ClientApprovalFailure>;\n    readonly resolveUnknown: (\n      threadId: ThreadId,\n      command: UnknownResolutionCommand,\n    ) => Effect.Effect<UnknownResolutionIntent, ClientUnknownFailure>;\n  }\n>()(\"@effect-agent/platform-cloudflare/CloudflareThreadClient\") {\n  /**\n   * Assemble the client from a resolved namespace and the platform Crypto implementation.\n   * rpcTracing is the binding name and remains opt-in. Caller authentication, principals,\n   * idempotency keys, and definition digests are still explicit submission inputs.\n   */\n  static layerFromBinding(options: {\n    readonly namespace: DurableObjectNamespace<ThreadObjectRpc>;\n    readonly rpcTracing?: string;\n  }): Layer.Layer<CloudflareThreadClient> {\n    return CloudflareThreadClient.layer.pipe(\n      Layer.provide([ThreadObjectNamespace.layer(options.namespace, options), BrowserCrypto.layer]),\n    );\n  }\n\n  static readonly layer: Layer.Layer<\n    CloudflareThreadClient,\n    never,\n    ThreadObjectNamespace | Crypto.Crypto\n  > = Layer.effect(CloudflareThreadClient)(\n    Effect.gen(function* () {\n      const { namespace, rpcTracing } = yield* ThreadObjectNamespace;\n      const crypto = yield* Crypto.Crypto;\n\n      const call = Effect.fn(\n        function* (\n          threadId: string,\n          operation: keyof typeof hostRpcMethods,\n          encoded: unknown,\n        ): Effect.fn.Return<HostResponse, ThreadClientError | HostProtocolError> {\n          // Empty arguments preserve native arity. Passing `undefined` still adds an argument.\n          const traceArgs =\n            rpcTracing === undefined ? [] : yield* RpcTracing.withRpcTraceContext([]);\n\n          const raw = yield* Effect.tryPromise({\n            try: () => {\n              const stub = namespace.get(namespace.idFromName(threadId));\n\n              return stub[hostRpcMethods[operation]](encoded, ...traceArgs);\n            },\n            catch: (cause) =>\n              ThreadClientError.make({\n                threadId,\n                message: boundHostDiagnostic(\n                  `${operation} did not reach the Thread Object: ${safeCauseMessage(\n                    cause,\n                    \"the RPC failed without a diagnostic\",\n                  )}`,\n                ),\n                cause,\n                ...cloudflareFailureSignals(cause),\n              }),\n          });\n\n          return yield* decodeHostResponse(raw).pipe(\n            Effect.mapError((error): HostProtocolError =>\n              HostProtocolError.make({\n                message: boundHostDiagnostic(\n                  `The ${operation} answer could not be decoded: ${error.message}`,\n                ),\n              }),\n            ),\n          );\n        },\n        (effect, threadId, operation) =>\n          rpcTracing === undefined\n            ? Effect.withSpan(effect, \"CloudflareThreadClient.call\", {\n                attributes: { threadId, operation },\n              })\n            : RpcTracing.withRpcClientSpan(effect, rpcTracing, hostRpcMethods[operation]),\n      );\n\n      const expect = <ResultSchema extends Schema.Top, FailureSchema extends Schema.Top>(\n        threadId: string,\n        operation: string,\n        resultSchema: ResultSchema,\n        failureSchema: FailureSchema,\n      ) => {\n        const isExpectedResult = Schema.is(resultSchema);\n        const isExpectedFailure = Schema.is(failureSchema);\n\n        return (\n          response: HostResponse,\n        ): Effect.Effect<ResultSchema[\"Type\"], FailureSchema[\"Type\"] | ThreadClientError> => {\n          if (response._tag === \"HostFailed\") {\n            const failure = response.failure;\n\n            return isExpectedFailure(failure)\n              ? Effect.fail(failure)\n              : Effect.fail(outOfContract(threadId, operation, `failure ${failure._tag}`));\n          }\n          if (!isExpectedResult(response)) {\n            return Effect.fail(outOfContract(threadId, operation, `result ${response._tag}`));\n          }\n\n          return Effect.succeed(response);\n        };\n      };\n\n      const readPage = (\n        threadId: ThreadId,\n        options?: {\n          readonly afterSequence?: CanonicalSequence | undefined;\n          readonly limit?: number | undefined;\n        },\n      ) =>\n        Effect.gen(function* () {\n          const request = ObservePageRequest.make({\n            ...(options?.afterSequence === undefined\n              ? {}\n              : { afterSequence: options.afterSequence }),\n            limit: options?.limit ?? 256,\n          });\n\n          const encoded = yield* encodeObservePageRequest(request).pipe(\n            Effect.mapError((error) =>\n              HostProtocolError.make({\n                message: boundHostDiagnostic(`observePage request encode failed: ${error.message}`),\n              }),\n            ),\n          );\n\n          const response = yield* call(threadId, \"observePage\", encoded);\n\n          const page = yield* expect(\n            threadId,\n            \"observePage\",\n            ObservedPage,\n            ClientObserveHostFailure,\n          )(response);\n\n          return page.records;\n        });\n\n      const cancelProgress = (threadId: ThreadId, waiterId: string): Effect.Effect<void> =>\n        encodeCancelProgressRequest(CancelProgressRequest.make({ waiterId })).pipe(\n          Effect.mapError(() => undefined),\n          Effect.flatMap((encoded) => call(threadId, \"cancelProgress\", encoded)),\n          Effect.asVoid,\n          Effect.ignore,\n        );\n\n      return CloudflareThreadClient.of({\n        submit: <InputSchema extends Schema.Top>(\n          agent: DurableSubmitAgent<InputSchema>,\n          input: InputSchema[\"Type\"],\n          options: DurableSubmitOptions,\n        ) =>\n          Effect.gen(function* () {\n            // Client-side half of `DurableAgentRuntime.submit`'s input boundary: encode\n            // through the Agent's input schema and prove the canonical persistence bounds.\n            const encodedInput = yield* Schema.encodeEffect(agent.definition.input)(input).pipe(\n              Effect.mapError((cause) =>\n                AgentInputError.make({ message: `Unable to encode Agent input: ${cause.message}` }),\n              ),\n            );\n\n            const inputPayload = yield* Schema.decodeUnknownEffect(PersistedJson)(\n              encodedInput,\n            ).pipe(\n              Effect.mapError(() =>\n                AgentInputError.make({\n                  message: \"Agent input does not satisfy the canonical persistence bounds\",\n                }),\n              ),\n            );\n\n            const request = SubmitRequest.make({\n              agentId: agent.definition.id,\n              principal: options.principal,\n              idempotencyKey: options.idempotencyKey,\n              ...(options.admissionGroup === undefined\n                ? {}\n                : { admissionGroup: options.admissionGroup }),\n              ...(options.admissionFence === undefined\n                ? {}\n                : { admissionFence: options.admissionFence }),\n              definitions: options.definitions,\n              inputPayload,\n            });\n\n            const encoded = yield* encodeSubmitRequest(request).pipe(\n              Effect.mapError((error) =>\n                HostProtocolError.make({\n                  message: boundHostDiagnostic(`submit request encode failed: ${error.message}`),\n                }),\n              ),\n            );\n\n            const response = yield* call(options.threadId, \"submit\", encoded);\n\n            const succeeded = yield* expect(\n              options.threadId,\n              \"submit\",\n              SubmitSucceeded,\n              ClientSubmitHostFailure,\n            )(response);\n\n            return succeeded.receipt;\n          }),\n\n        submissionStatus: (receipt) =>\n          Effect.gen(function* () {\n            const encoded = yield* encodeReceipt(receipt).pipe(\n              Effect.mapError(() => HostProtocolError.make({ message: \"Invalid receipt\" })),\n            );\n\n            const response = yield* call(receipt.threadId, \"submissionStatus\", encoded);\n\n            const result = yield* expect(\n              receipt.threadId,\n              \"submissionStatus\",\n              SubmissionStatusResponse,\n              ClientAwaitHostFailure,\n            )(response);\n\n            return result.status;\n          }),\n        awaitSettlement: (receipt) =>\n          Effect.gen(function* () {\n            const encoded = yield* encodeReceipt(receipt).pipe(\n              Effect.mapError((error) =>\n                HostProtocolError.make({\n                  message: boundHostDiagnostic(`receipt encode failed: ${error.message}`),\n                }),\n              ),\n            );\n\n            const response = yield* call(receipt.threadId, \"awaitSettlement\", encoded);\n\n            const settled = yield* expect(\n              receipt.threadId,\n              \"awaitSettlement\",\n              SettlementReached,\n              ClientAwaitHostFailure,\n            )(response);\n\n            return settled.settlement;\n          }),\n\n        awaitProgress: (threadId, afterSequence) =>\n          Effect.gen(function* () {\n            const waiterId = yield* crypto.randomUUIDv4.pipe(\n              Effect.mapError((error) =>\n                HostProtocolError.make({\n                  message: boundHostDiagnostic(\n                    `awaitProgress cancellation identity generation failed: ${error.message}`,\n                  ),\n                }),\n              ),\n            );\n\n            const request = AwaitProgressRequest.make({ afterSequence, waiterId });\n\n            const encoded = yield* encodeAwaitProgressRequest(request).pipe(\n              Effect.mapError((error) =>\n                HostProtocolError.make({\n                  message: boundHostDiagnostic(\n                    `awaitProgress request encode failed: ${error.message}`,\n                  ),\n                }),\n              ),\n            );\n\n            const attempt = (retry: number): Effect.Effect<void, ClientProgressFailure> =>\n              call(threadId, \"awaitProgress\", encoded).pipe(\n                Effect.flatMap(\n                  expect(threadId, \"awaitProgress\", ProgressObserved, ClientObserveHostFailure),\n                ),\n                Effect.asVoid,\n                Effect.catchTag(\"ThreadClientError\", (error) =>\n                  error.retryable === true && error.overloaded !== true && retry < 5\n                    ? Effect.sleep(Duration.millis(10 * 2 ** retry)).pipe(\n                        Effect.andThen(attempt(retry + 1)),\n                      )\n                    : Effect.fail(error),\n                ),\n              );\n\n            yield* attempt(0).pipe(Effect.onInterrupt(() => cancelProgress(threadId, waiterId)));\n          }),\n\n        readPage,\n\n        readAll: (threadId) =>\n          Effect.gen(function* () {\n            const all: Array<CanonicalRecordEnvelope> = [];\n            let after: CanonicalSequence | undefined;\n\n            for (;;) {\n              const page = yield* readPage(threadId, { afterSequence: after, limit: 1_024 });\n\n              all.push(...page);\n              const last = page.at(-1);\n\n              if (page.length < 1_024 || last === undefined) return all;\n              after = last.sequence;\n            }\n          }),\n\n        abort: (threadId, command) =>\n          Effect.gen(function* () {\n            const encoded = yield* encodeAbortCommand(command).pipe(\n              Effect.mapError((error) =>\n                HostProtocolError.make({\n                  message: boundHostDiagnostic(`abort command encode failed: ${error.message}`),\n                }),\n              ),\n            );\n\n            const response = yield* call(threadId, \"abort\", encoded);\n\n            const recorded = yield* expect(\n              threadId,\n              \"abort\",\n              AbortRecorded,\n              ClientAbortHostFailure,\n            )(response);\n\n            return recorded.intent;\n          }),\n\n        resolveApproval: (threadId, command) =>\n          Effect.gen(function* () {\n            const encoded = yield* encodeApprovalDecisionCommand(command).pipe(\n              Effect.mapError((error) =>\n                HostProtocolError.make({\n                  message: boundHostDiagnostic(`approval command encode failed: ${error.message}`),\n                }),\n              ),\n            );\n\n            const response = yield* call(threadId, \"resolveApproval\", encoded);\n\n            const recorded = yield* expect(\n              threadId,\n              \"resolveApproval\",\n              ApprovalRecorded,\n              ClientApprovalHostFailure,\n            )(response);\n\n            return recorded.intent;\n          }),\n\n        resolveUnknown: (threadId, command) =>\n          Effect.gen(function* () {\n            const encoded = yield* encodeUnknownResolutionCommand(command).pipe(\n              Effect.mapError((error) =>\n                HostProtocolError.make({\n                  message: boundHostDiagnostic(\n                    `resolution command encode failed: ${error.message}`,\n                  ),\n                }),\n              ),\n            );\n\n            const response = yield* call(threadId, \"resolveUnknown\", encoded);\n\n            const recorded = yield* expect(\n              threadId,\n              \"resolveUnknown\",\n              UnknownResolutionRecorded,\n              ClientUnknownHostFailure,\n            )(response);\n\n            return recorded.intent;\n          }),\n      });\n    }),\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8DA,MAAM,6BAA6B;AAEnC,MAAM,oBAAoB,OAAO,OAAO,MAAM,OAAO,YAAY,0BAA0B,CAAC;;AAG5F,MAAa,uBAAuB,UAClC,MAAM,SAAS,6BACX,GAAG,MAAM,MAAM,GAAG,IAA8B,EAAE,OAClD;;;;;AAMN,IAAa,oBAAb,cAAuC,OAAO,YAA+B,CAAC,CAC5E,qBACA,EACE,SAAS,kBACX,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,oBAAb,cAAuC,OAAO,YAA+B,CAAC,CAC5E,qBACA;CACE,UAAU,OAAO;CACjB,SAAS,OAAO;CAChB,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;;CAEzC,WAAW,OAAO,YAAY,OAAO,OAAO;;CAE5C,YAAY,OAAO,YAAY,OAAO,OAAO;AAC/C,CACF,CAAC,CAAC,CAAC;;;;;;;AAYH,IAAa,gBAAb,cAAmC,OAAO,MACxC,iDACF,CAAC,CAAC;CACA,SAAS;CACT,WAAW;CACX,gBAAgB;CAChB,gBAAgB,OAAO,YAAY,cAAc;CACjD,gBAAgB,OAAO,YAAY,cAAc;CACjD,aAAa;CACb,cAAc;AAChB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,qBAAb,cAAwC,OAAO,MAC7C,sDACF,CAAC,CAAC;CACA,eAAe,OAAO,YAAY,iBAAiB;CACnD,OAAO,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,GAAG,OAAO,oBAAoB,IAAK,CAAC;AACpF,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,uBAAb,cAA0C,OAAO,MAC/C,wDACF,CAAC,CAAC;CACA,eAAe;CACf,UAAU,OAAO,OAAO,MAAM,OAAO,YAAY,CAAC,GAAG,OAAO,YAAY,GAAG,CAAC;AAC9E,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,wBAAb,cAA2C,OAAO,MAChD,yDACF,CAAC,CAAC,EACA,UAAU,OAAO,OAAO,MAAM,OAAO,YAAY,CAAC,GAAG,OAAO,YAAY,GAAG,CAAC,EAC9E,CAAC,CAAC,CAAC,CAAC;;;;;;;AAYJ,MAAa,cAAc,OAAO,MAAM;CACtC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAID,IAAa,kBAAb,cAAqC,OAAO,YAC1C,mDACF,CAAC,CAAC,mBAAmB,EACnB,SAAS,QACX,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,2BAAb,cAA8C,OAAO,YACnD,4DACF,CAAC,CAAC,4BAA4B,EAAE,QAAQ,iBAAiB,CAAC,CAAC,CAAC,CAAC;AAE7D,IAAa,oBAAb,cAAuC,OAAO,YAC5C,qDACF,CAAC,CAAC,qBAAqB,EACrB,YAAY,WACd,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,eAAb,cAAkC,OAAO,YACvC,gDACF,CAAC,CAAC,gBAAgB,EAChB,SAAS,OAAO,MAAM,uBAAuB,CAAC,CAAC,MAAM,OAAO,YAAY,IAAK,CAAC,EAChF,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,mBAAb,cAAsC,OAAO,YAC3C,oDACF,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3B,IAAa,oBAAb,cAAuC,OAAO,YAC5C,qDACF,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;AAE5B,IAAa,gBAAb,cAAmC,OAAO,YACxC,iDACF,CAAC,CAAC,iBAAiB,EACjB,QAAQ,YACV,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,mBAAb,cAAsC,OAAO,YAC3C,oDACF,CAAC,CAAC,oBAAoB,EACpB,QAAQ,uBACV,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,4BAAb,cAA+C,OAAO,YACpD,6DACF,CAAC,CAAC,6BAA6B,EAC7B,QAAQ,wBACV,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,aAAb,cAAgC,OAAO,YACrC,8CACF,CAAC,CAAC,cAAc,EACd,SAAS,YACX,CAAC,CAAC,CAAC,CAAC;;AAGJ,MAAa,eAAe,OAAO,MAAM;CACvC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAQD,MAAa,sBAAsB,OAAO,oBAAoB,aAAa;AAC3E,MAAa,sBAAsB,OAAO,aAAa,aAAa;AACpE,MAAa,gBAAgB,OAAO,oBAAoB,OAAO;AAC/D,MAAa,gBAAgB,OAAO,aAAa,OAAO;AACxD,MAAa,2BAA2B,OAAO,oBAAoB,kBAAkB;AACrF,MAAa,2BAA2B,OAAO,aAAa,kBAAkB;AAC9E,MAAa,6BAA6B,OAAO,oBAAoB,oBAAoB;AACzF,MAAa,6BAA6B,OAAO,aAAa,oBAAoB;AAClF,MAAa,8BAA8B,OAAO,oBAAoB,qBAAqB;AAC3F,MAAa,8BAA8B,OAAO,aAAa,qBAAqB;AACpF,MAAa,qBAAqB,OAAO,oBAAoB,YAAY;AACzE,MAAa,qBAAqB,OAAO,aAAa,YAAY;AAClE,MAAa,gCAAgC,OAAO,oBAAoB,uBAAuB;AAC/F,MAAa,gCAAgC,OAAO,aAAa,uBAAuB;AACxF,MAAa,iCAAiC,OAAO,oBAAoB,wBAAwB;AACjG,MAAa,iCAAiC,OAAO,aAAa,wBAAwB;AAC1F,MAAa,qBAAqB,OAAO,aAAa,YAAY;AAClE,MAAa,qBAAqB,OAAO,oBAAoB,YAAY;;AAOzE,MAAM,0BAA0B,OAAO,MAAM;CAC3C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,yBAAyB,OAAO,MAAM;CAC1C;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,2BAA2B,OAAO,MAAM;CAC5C;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,yBAAyB,OAAO,MAAM;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,4BAA4B,OAAO,MAAM;CAC7C;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,2BAA2B,OAAO,MAAM;CAC5C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAUD,MAAM,iBAAiB,UAAkB,WAAmB,aAC1D,kBAAkB,KAAK;CACrB;CACA,SAAS,oBACP,8BAA8B,UAAU,4BAA4B,SAAS,EAC/E;AACF,CAAC;AAEH,MAAM,iBAAiB;CACrB,QAAQ;CACR,iBAAiB;CACjB,kBAAkB;CAClB,eAAe;CACf,gBAAgB;CAChB,aAAa;CACb,OAAO;CACP,iBAAiB;CACjB,gBAAgB;AAClB;;AAGA,IAAa,yBAAb,MAAa,+BAA+B,QAAQ,QAwDlD,CAAC,CAAC,0DAA0D,CAAC,CAAC;;;;;;CAM9D,OAAO,iBAAiB,SAGgB;EACtC,OAAO,uBAAuB,MAAM,KAClC,MAAM,QAAQ,CAAC,sBAAsB,MAAM,QAAQ,WAAW,OAAO,GAAG,cAAc,KAAK,CAAC,CAC9F;CACF;CAEA,OAAgB,QAIZ,MAAM,OAAO,sBAAsB,CAAC,CACtC,OAAO,IAAI,aAAa;EACtB,MAAM,EAAE,WAAW,eAAe,OAAO;EACzC,MAAM,SAAS,OAAO,OAAO;EAE7B,MAAM,OAAO,OAAO,GAClB,WACE,UACA,WACA,SACuE;GAEvE,MAAM,YACJ,eAAe,KAAA,IAAY,CAAC,IAAI,OAAO,WAAW,oBAAoB,CAAC,CAAC;GAE1E,MAAM,MAAM,OAAO,OAAO,WAAW;IACnC,WAAW;KAGT,OAFa,UAAU,IAAI,UAAU,WAAW,QAAQ,CAE9C,CAAC,CAAC,eAAe,WAAW,CAAC,SAAS,GAAG,SAAS;IAC9D;IACA,QAAQ,UACN,kBAAkB,KAAK;KACrB;KACA,SAAS,oBACP,GAAG,UAAU,oCAAoC,iBAC/C,OACA,qCACF,GACF;KACA;KACA,GAAG,yBAAyB,KAAK;IACnC,CAAC;GACL,CAAC;GAED,OAAO,OAAO,mBAAmB,GAAG,CAAC,CAAC,KACpC,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBACP,OAAO,UAAU,gCAAgC,MAAM,SACzD,EACF,CAAC,CACH,CACF;EACF,IACC,QAAQ,UAAU,cACjB,eAAe,KAAA,IACX,OAAO,SAAS,QAAQ,+BAA+B,EACrD,YAAY;GAAE;GAAU;EAAU,EACpC,CAAC,IACD,WAAW,kBAAkB,QAAQ,YAAY,eAAe,UAAU,CAClF;EAEA,MAAM,UACJ,UACA,WACA,cACA,kBACG;GACH,MAAM,mBAAmB,OAAO,GAAG,YAAY;GAC/C,MAAM,oBAAoB,OAAO,GAAG,aAAa;GAEjD,QACE,aACmF;IACnF,IAAI,SAAS,SAAS,cAAc;KAClC,MAAM,UAAU,SAAS;KAEzB,OAAO,kBAAkB,OAAO,IAC5B,OAAO,KAAK,OAAO,IACnB,OAAO,KAAK,cAAc,UAAU,WAAW,WAAW,QAAQ,MAAM,CAAC;IAC/E;IACA,IAAI,CAAC,iBAAiB,QAAQ,GAC5B,OAAO,OAAO,KAAK,cAAc,UAAU,WAAW,UAAU,SAAS,MAAM,CAAC;IAGlF,OAAO,OAAO,QAAQ,QAAQ;GAChC;EACF;EAEA,MAAM,YACJ,UACA,YAKA,OAAO,IAAI,aAAa;GACtB,MAAM,UAAU,mBAAmB,KAAK;IACtC,GAAI,SAAS,kBAAkB,KAAA,IAC3B,CAAC,IACD,EAAE,eAAe,QAAQ,cAAc;IAC3C,OAAO,SAAS,SAAS;GAC3B,CAAC;GAED,MAAM,UAAU,OAAO,yBAAyB,OAAO,CAAC,CAAC,KACvD,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBAAoB,sCAAsC,MAAM,SAAS,EACpF,CAAC,CACH,CACF;GAEA,MAAM,WAAW,OAAO,KAAK,UAAU,eAAe,OAAO;GAS7D,QAAO,OAPa,OAClB,UACA,eACA,cACA,wBACF,CAAC,CAAC,QAAQ,EAAA,CAEE;EACd,CAAC;EAEH,MAAM,kBAAkB,UAAoB,aAC1C,4BAA4B,sBAAsB,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KACpE,OAAO,eAAe,KAAA,CAAS,GAC/B,OAAO,SAAS,YAAY,KAAK,UAAU,kBAAkB,OAAO,CAAC,GACrE,OAAO,QACP,OAAO,MACT;EAEF,OAAO,uBAAuB,GAAG;GAC/B,SACE,OACA,OACA,YAEA,OAAO,IAAI,aAAa;IAGtB,MAAM,eAAe,OAAO,OAAO,aAAa,MAAM,WAAW,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAC7E,OAAO,UAAU,UACf,gBAAgB,KAAK,EAAE,SAAS,iCAAiC,MAAM,UAAU,CAAC,CACpF,CACF;IAEA,MAAM,eAAe,OAAO,OAAO,oBAAoB,aAAa,CAAC,CACnE,YACF,CAAC,CAAC,KACA,OAAO,eACL,gBAAgB,KAAK,EACnB,SAAS,gEACX,CAAC,CACH,CACF;IAEA,MAAM,UAAU,cAAc,KAAK;KACjC,SAAS,MAAM,WAAW;KAC1B,WAAW,QAAQ;KACnB,gBAAgB,QAAQ;KACxB,GAAI,QAAQ,mBAAmB,KAAA,IAC3B,CAAC,IACD,EAAE,gBAAgB,QAAQ,eAAe;KAC7C,GAAI,QAAQ,mBAAmB,KAAA,IAC3B,CAAC,IACD,EAAE,gBAAgB,QAAQ,eAAe;KAC7C,aAAa,QAAQ;KACrB;IACF,CAAC;IAED,MAAM,UAAU,OAAO,oBAAoB,OAAO,CAAC,CAAC,KAClD,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBAAoB,iCAAiC,MAAM,SAAS,EAC/E,CAAC,CACH,CACF;IAEA,MAAM,WAAW,OAAO,KAAK,QAAQ,UAAU,UAAU,OAAO;IAShE,QAAO,OAPkB,OACvB,QAAQ,UACR,UACA,iBACA,uBACF,CAAC,CAAC,QAAQ,EAAA,CAEO;GACnB,CAAC;GAEH,mBAAmB,YACjB,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,cAAc,OAAO,CAAC,CAAC,KAC5C,OAAO,eAAe,kBAAkB,KAAK,EAAE,SAAS,kBAAkB,CAAC,CAAC,CAC9E;IAEA,MAAM,WAAW,OAAO,KAAK,QAAQ,UAAU,oBAAoB,OAAO;IAS1E,QAAO,OAPe,OACpB,QAAQ,UACR,oBACA,0BACA,sBACF,CAAC,CAAC,QAAQ,EAAA,CAEI;GAChB,CAAC;GACH,kBAAkB,YAChB,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,cAAc,OAAO,CAAC,CAAC,KAC5C,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBAAoB,0BAA0B,MAAM,SAAS,EACxE,CAAC,CACH,CACF;IAEA,MAAM,WAAW,OAAO,KAAK,QAAQ,UAAU,mBAAmB,OAAO;IASzE,QAAO,OAPgB,OACrB,QAAQ,UACR,mBACA,mBACA,sBACF,CAAC,CAAC,QAAQ,EAAA,CAEK;GACjB,CAAC;GAEH,gBAAgB,UAAU,kBACxB,OAAO,IAAI,aAAa;IACtB,MAAM,WAAW,OAAO,OAAO,aAAa,KAC1C,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBACP,0DAA0D,MAAM,SAClE,EACF,CAAC,CACH,CACF;IAEA,MAAM,UAAU,qBAAqB,KAAK;KAAE;KAAe;IAAS,CAAC;IAErE,MAAM,UAAU,OAAO,2BAA2B,OAAO,CAAC,CAAC,KACzD,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBACP,wCAAwC,MAAM,SAChD,EACF,CAAC,CACH,CACF;IAEA,MAAM,WAAW,UACf,KAAK,UAAU,iBAAiB,OAAO,CAAC,CAAC,KACvC,OAAO,QACL,OAAO,UAAU,iBAAiB,kBAAkB,wBAAwB,CAC9E,GACA,OAAO,QACP,OAAO,SAAS,sBAAsB,UACpC,MAAM,cAAc,QAAQ,MAAM,eAAe,QAAQ,QAAQ,IAC7D,OAAO,MAAM,SAAS,OAAO,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAC7C,OAAO,QAAQ,QAAQ,QAAQ,CAAC,CAAC,CACnC,IACA,OAAO,KAAK,KAAK,CACvB,CACF;IAEF,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,kBAAkB,eAAe,UAAU,QAAQ,CAAC,CAAC;GACrF,CAAC;GAEH;GAEA,UAAU,aACR,OAAO,IAAI,aAAa;IACtB,MAAM,MAAsC,CAAC;IAC7C,IAAI;IAEJ,SAAS;KACP,MAAM,OAAO,OAAO,SAAS,UAAU;MAAE,eAAe;MAAO,OAAO;KAAM,CAAC;KAE7E,IAAI,KAAK,GAAG,IAAI;KAChB,MAAM,OAAO,KAAK,GAAG,EAAE;KAEvB,IAAI,KAAK,SAAS,QAAS,SAAS,KAAA,GAAW,OAAO;KACtD,QAAQ,KAAK;IACf;GACF,CAAC;GAEH,QAAQ,UAAU,YAChB,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,mBAAmB,OAAO,CAAC,CAAC,KACjD,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBAAoB,gCAAgC,MAAM,SAAS,EAC9E,CAAC,CACH,CACF;IAEA,MAAM,WAAW,OAAO,KAAK,UAAU,SAAS,OAAO;IASvD,QAAO,OAPiB,OACtB,UACA,SACA,eACA,sBACF,CAAC,CAAC,QAAQ,EAAA,CAEM;GAClB,CAAC;GAEH,kBAAkB,UAAU,YAC1B,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,8BAA8B,OAAO,CAAC,CAAC,KAC5D,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBAAoB,mCAAmC,MAAM,SAAS,EACjF,CAAC,CACH,CACF;IAEA,MAAM,WAAW,OAAO,KAAK,UAAU,mBAAmB,OAAO;IASjE,QAAO,OAPiB,OACtB,UACA,mBACA,kBACA,yBACF,CAAC,CAAC,QAAQ,EAAA,CAEM;GAClB,CAAC;GAEH,iBAAiB,UAAU,YACzB,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,+BAA+B,OAAO,CAAC,CAAC,KAC7D,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBACP,qCAAqC,MAAM,SAC7C,EACF,CAAC,CACH,CACF;IAEA,MAAM,WAAW,OAAO,KAAK,UAAU,kBAAkB,OAAO;IAShE,QAAO,OAPiB,OACtB,UACA,kBACA,2BACA,wBACF,CAAC,CAAC,QAAQ,EAAA,CAEM;GAClB,CAAC;EACL,CAAC;CACH,CAAC,CACH;AACF"}
+{"version":3,"file":"CloudflareThreadClient.mjs","names":[],"sources":["../src/CloudflareThreadClient.ts"],"sourcesContent":["import { AgentInputError } from \"@effect-agent/core/AgentError\";\nimport { AgentId, type ThreadId } from \"@effect-agent/core/Identifiers\";\nimport { DigestError } from \"@effect-agent/thread/Digest\";\nimport {\n  Receipt,\n  type DurableSubmitAgent,\n  type DurableSubmitOptions,\n} from \"@effect-agent/thread/DurableAgentRuntime\";\nimport { DurableRuntimeFailpointError } from \"@effect-agent/thread/DurableFailpoint\";\nimport { OperationDenied } from \"@effect-agent/thread/OperationAuthorizer\";\nimport {\n  CanonicalRecordEnvelope,\n  CanonicalSequence,\n  DefinitionDigests,\n  PersistedJson,\n} from \"@effect-agent/thread/Records\";\nimport {\n  AdmissionFence,\n  AdmissionGroup,\n  AbortCommand,\n  AbortIntent,\n  AdmissionConflict,\n  AdmissionPolicyError,\n  ApprovalConflict,\n  ApprovalDecisionCommand,\n  ApprovalDecisionIntent,\n  IdempotencyKey,\n  JoinedToHost,\n  LedgerError,\n  Principal,\n  Settlement,\n  SettlementConflict,\n  UnknownResolutionCommand,\n  UnknownResolutionConflict,\n  UnknownResolutionIntent,\n} from \"@effect-agent/thread/SubmissionLedger\";\nimport { SubmissionStatus } from \"@effect-agent/thread/SubmissionStatus\";\nimport {\n  AppendConflict,\n  ThreadNotMaterialized,\n  ThreadStoreError,\n  FenceRejected,\n} from \"@effect-agent/thread/ThreadStore\";\nimport { BrowserCrypto } from \"@effect/platform-browser\";\nimport { Context, Crypto, Duration, Effect, Layer, Schema } from \"effect\";\nimport { RpcTracing } from \"effect-cf\";\n\nimport { DurableAlarmError } from \"./Alarm.ts\";\nimport { ThreadObjectNamespace, type ThreadObjectRpc } from \"./CloudflareBindings.ts\";\nimport { AdmissionLimitExceeded } from \"./CloudflareConfig.ts\";\nimport { cloudflareFailureSignals, safeCauseMessage } from \"./internal/boundary.ts\";\n\n/**\n * The Worker↔Thread-Object host protocol (plan §1.4): Schema envelopes for the host\n * entry points (`submitEncoded`, `awaitSettlementEncoded`, `observePage`, `abortEncoded`,\n * `resolveApprovalEncoded`, `resolveUnknownEncoded`) plus the Worker-side client that speaks\n * it. Mirrors the WP2 port protocol: requests and responses are closed Schema unions, typed\n * failures travel as their own tagged classes and RE-DECODE to identical tags on the caller\n * (error-tag fidelity), and protocol anomalies are answered typed instead of thrown.\n */\n\n/** Ceiling for host protocol diagnostic strings. */\nconst MAX_HOST_DIAGNOSTIC_LENGTH = 4_096;\nconst PROGRESS_CANCELLATION_TIMEOUT = \"1 second\";\n\nconst BoundedDiagnostic = Schema.String.check(Schema.isMaxLength(MAX_HOST_DIAGNOSTIC_LENGTH));\n\n/** Truncate a diagnostic string to the host protocol's bounded length. */\nexport const boundHostDiagnostic = (value: string): string =>\n  value.length > MAX_HOST_DIAGNOSTIC_LENGTH\n    ? `${value.slice(0, MAX_HOST_DIAGNOSTIC_LENGTH - 3)}...`\n    : value;\n\n/**\n * The envelope itself could not be honored: the Object could not decode the request, or a\n * response could not be encoded/decoded. Never carries operation semantics.\n */\nexport class HostProtocolError extends Schema.TaggedError<HostProtocolError>()(\n  \"HostProtocolError\",\n  {\n    message: BoundedDiagnostic,\n  },\n) {}\n\n/** The Worker-side stub call itself failed (RPC rejection, overload, eviction mid-call). */\nexport class ThreadClientError extends Schema.TaggedError<ThreadClientError>()(\n  \"ThreadClientError\",\n  {\n    threadId: Schema.String,\n    message: Schema.String,\n    cause: Schema.optionalKey(Schema.Defect()),\n    /** Cloudflare's own classification for a failure safe to retry with a fresh stub. */\n    retryable: Schema.optionalKey(Schema.Boolean),\n    /** Cloudflare overloads are surfaced immediately instead of adding retry pressure. */\n    overloaded: Schema.optionalKey(Schema.Boolean),\n  },\n) {}\n\n// ---------------------------------------------------------------------------\n// Requests\n// ---------------------------------------------------------------------------\n\n/**\n * One durable submission, input ALREADY encoded by the caller through the Agent Binding's\n * input schema (the Worker bundles the same Agent definitions as the Object, so schema\n * validation happens client-side; the resolved Binding re-validates at claim time). The\n * Thread identity is deliberately absent — the addressed Object IS the lane.\n */\nexport class SubmitRequest extends Schema.Class<SubmitRequest>(\n  \"@effect-agent/platform-cloudflare/SubmitRequest\",\n)({\n  agentId: AgentId,\n  principal: Principal,\n  idempotencyKey: IdempotencyKey,\n  admissionGroup: Schema.optionalKey(AdmissionGroup),\n  admissionFence: Schema.optionalKey(AdmissionFence),\n  definitions: DefinitionDigests,\n  inputPayload: PersistedJson,\n}) {}\n\n/** One bounded page of canonical records after an optional sequence. */\nexport class ObservePageRequest extends Schema.Class<ObservePageRequest>(\n  \"@effect-agent/platform-cloudflare/ObservePageRequest\",\n)({\n  afterSequence: Schema.optionalKey(CanonicalSequence),\n  limit: Schema.Int.check(Schema.isGreaterThan(0), Schema.isLessThanOrEqualTo(1_024)),\n}) {}\n\n/** One event-driven wait for canonical progress strictly after this sequence. */\nexport class AwaitProgressRequest extends Schema.Class<AwaitProgressRequest>(\n  \"@effect-agent/platform-cloudflare/AwaitProgressRequest\",\n)({\n  afterSequence: CanonicalSequence,\n  waiterId: Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(256)),\n}) {}\n\n/** Best-effort cancellation of one in-flight progress RPC. */\nexport class CancelProgressRequest extends Schema.Class<CancelProgressRequest>(\n  \"@effect-agent/platform-cloudflare/CancelProgressRequest\",\n)({\n  waiterId: Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(256)),\n}) {}\n\n// ---------------------------------------------------------------------------\n// Responses\n// ---------------------------------------------------------------------------\n\n/**\n * Every typed failure a host entry point can produce, plus the protocol's own errors. Same\n * closed-union discipline as the WP2 `PortFailure`: members re-decode to the SAME tagged\n * classes on the Worker side; `cause` chains travel as Schema defects without instance\n * fidelity (plan §2.8).\n */\nexport const HostFailure = Schema.Union([\n  AgentInputError,\n  DigestError,\n  AdmissionConflict,\n  AdmissionPolicyError,\n  SettlementConflict,\n  ApprovalConflict,\n  UnknownResolutionConflict,\n  JoinedToHost,\n  LedgerError,\n  ThreadStoreError,\n  ThreadNotMaterialized,\n  AppendConflict,\n  FenceRejected,\n  DurableRuntimeFailpointError,\n  AdmissionLimitExceeded,\n  DurableAlarmError,\n  OperationDenied,\n  HostProtocolError,\n]);\n\nexport type HostFailure = typeof HostFailure.Type;\n\nexport class SubmitSucceeded extends Schema.TaggedClass<SubmitSucceeded>(\n  \"@effect-agent/platform-cloudflare/SubmitSucceeded\",\n)(\"SubmitSucceeded\", {\n  receipt: Receipt,\n}) {}\n\nexport class SubmissionStatusResponse extends Schema.TaggedClass<SubmissionStatusResponse>(\n  \"@effect-agent/platform-cloudflare/SubmissionStatusResponse\",\n)(\"SubmissionStatusResponse\", { status: SubmissionStatus }) {}\n\nexport class SettlementReached extends Schema.TaggedClass<SettlementReached>(\n  \"@effect-agent/platform-cloudflare/SettlementReached\",\n)(\"SettlementReached\", {\n  settlement: Settlement,\n}) {}\n\nexport class ObservedPage extends Schema.TaggedClass<ObservedPage>(\n  \"@effect-agent/platform-cloudflare/ObservedPage\",\n)(\"ObservedPage\", {\n  records: Schema.Array(CanonicalRecordEnvelope).check(Schema.isMaxLength(1_024)),\n}) {}\n\n/** A record was already committed or an incarnation-local hint says the caller should re-read. */\nexport class ProgressObserved extends Schema.TaggedClass<ProgressObserved>(\n  \"@effect-agent/platform-cloudflare/ProgressObserved\",\n)(\"ProgressObserved\", {}) {}\n\nexport class ProgressCancelled extends Schema.TaggedClass<ProgressCancelled>(\n  \"@effect-agent/platform-cloudflare/ProgressCancelled\",\n)(\"ProgressCancelled\", {}) {}\n\nexport class AbortRecorded extends Schema.TaggedClass<AbortRecorded>(\n  \"@effect-agent/platform-cloudflare/AbortRecorded\",\n)(\"AbortRecorded\", {\n  intent: AbortIntent,\n}) {}\n\nexport class ApprovalRecorded extends Schema.TaggedClass<ApprovalRecorded>(\n  \"@effect-agent/platform-cloudflare/ApprovalRecorded\",\n)(\"ApprovalRecorded\", {\n  intent: ApprovalDecisionIntent,\n}) {}\n\nexport class UnknownResolutionRecorded extends Schema.TaggedClass<UnknownResolutionRecorded>(\n  \"@effect-agent/platform-cloudflare/UnknownResolutionRecorded\",\n)(\"UnknownResolutionRecorded\", {\n  intent: UnknownResolutionIntent,\n}) {}\n\n/** The entry point failed TYPED on the Object; the failure re-decodes verbatim. */\nexport class HostFailed extends Schema.TaggedClass<HostFailed>(\n  \"@effect-agent/platform-cloudflare/HostFailed\",\n)(\"HostFailed\", {\n  failure: HostFailure,\n}) {}\n\n/** The uniform answer of one host entry point. Callers narrow by the tag their call implies. */\nexport const HostResponse = Schema.Union([\n  SubmitSucceeded,\n  SettlementReached,\n  SubmissionStatusResponse,\n  ObservedPage,\n  ProgressObserved,\n  ProgressCancelled,\n  AbortRecorded,\n  ApprovalRecorded,\n  UnknownResolutionRecorded,\n  HostFailed,\n]);\n\nexport type HostResponse = typeof HostResponse.Type;\n\n// ---------------------------------------------------------------------------\n// Codecs (shared by the Object endpoints and the Worker client)\n// ---------------------------------------------------------------------------\n\nexport const decodeSubmitRequest = Schema.decodeUnknownEffect(SubmitRequest);\nexport const encodeSubmitRequest = Schema.encodeEffect(SubmitRequest);\nexport const decodeReceipt = Schema.decodeUnknownEffect(Receipt);\nexport const encodeReceipt = Schema.encodeEffect(Receipt);\nexport const decodeObservePageRequest = Schema.decodeUnknownEffect(ObservePageRequest);\nexport const encodeObservePageRequest = Schema.encodeEffect(ObservePageRequest);\nexport const decodeAwaitProgressRequest = Schema.decodeUnknownEffect(AwaitProgressRequest);\nexport const encodeAwaitProgressRequest = Schema.encodeEffect(AwaitProgressRequest);\nexport const decodeCancelProgressRequest = Schema.decodeUnknownEffect(CancelProgressRequest);\nexport const encodeCancelProgressRequest = Schema.encodeEffect(CancelProgressRequest);\nexport const decodeAbortCommand = Schema.decodeUnknownEffect(AbortCommand);\nexport const encodeAbortCommand = Schema.encodeEffect(AbortCommand);\nexport const decodeApprovalDecisionCommand = Schema.decodeUnknownEffect(ApprovalDecisionCommand);\nexport const encodeApprovalDecisionCommand = Schema.encodeEffect(ApprovalDecisionCommand);\nexport const decodeUnknownResolutionCommand = Schema.decodeUnknownEffect(UnknownResolutionCommand);\nexport const encodeUnknownResolutionCommand = Schema.encodeEffect(UnknownResolutionCommand);\nexport const encodeHostResponse = Schema.encodeEffect(HostResponse);\nexport const decodeHostResponse = Schema.decodeUnknownEffect(HostResponse);\n\n// ---------------------------------------------------------------------------\n// Worker-side client\n// ---------------------------------------------------------------------------\n\n/** Failure surface of `CloudflareThreadClient.submit`. */\nconst ClientSubmitHostFailure = Schema.Union([\n  AgentInputError,\n  DigestError,\n  AdmissionConflict,\n  AdmissionPolicyError,\n  LedgerError,\n  ThreadStoreError,\n  ThreadNotMaterialized,\n  AppendConflict,\n  FenceRejected,\n  DurableRuntimeFailpointError,\n  AdmissionLimitExceeded,\n  DurableAlarmError,\n  HostProtocolError,\n]);\n\nconst ClientAwaitHostFailure = Schema.Union([\n  LedgerError,\n  SettlementConflict,\n  OperationDenied,\n  HostProtocolError,\n]);\n\nconst ClientObserveHostFailure = Schema.Union([\n  ThreadStoreError,\n  ThreadNotMaterialized,\n  OperationDenied,\n  HostProtocolError,\n]);\n\nconst ClientAbortHostFailure = Schema.Union([\n  OperationDenied,\n  LedgerError,\n  SettlementConflict,\n  JoinedToHost,\n  DurableRuntimeFailpointError,\n  DurableAlarmError,\n  HostProtocolError,\n]);\n\nconst ClientApprovalHostFailure = Schema.Union([\n  LedgerError,\n  SettlementConflict,\n  ApprovalConflict,\n  OperationDenied,\n  DurableAlarmError,\n  HostProtocolError,\n]);\n\nconst ClientUnknownHostFailure = Schema.Union([\n  LedgerError,\n  SettlementConflict,\n  UnknownResolutionConflict,\n  JoinedToHost,\n  DurableRuntimeFailpointError,\n  OperationDenied,\n  DurableAlarmError,\n  HostProtocolError,\n]);\n\nexport type ClientSubmitFailure = typeof ClientSubmitHostFailure.Type | ThreadClientError;\nexport type ClientAwaitFailure = typeof ClientAwaitHostFailure.Type | ThreadClientError;\nexport type ClientObserveFailure = typeof ClientObserveHostFailure.Type | ThreadClientError;\nexport type ClientProgressFailure = ClientObserveFailure;\nexport type ClientAbortFailure = typeof ClientAbortHostFailure.Type | ThreadClientError;\nexport type ClientApprovalFailure = typeof ClientApprovalHostFailure.Type | ThreadClientError;\nexport type ClientUnknownFailure = typeof ClientUnknownHostFailure.Type | ThreadClientError;\n\nconst outOfContract = (threadId: string, operation: string, observed: string): ThreadClientError =>\n  ThreadClientError.make({\n    threadId,\n    message: boundHostDiagnostic(\n      `The Thread Object answered ${operation} with the out-of-contract ${observed}.`,\n    ),\n  });\n\nconst hostRpcMethods = {\n  submit: \"submitEncoded\",\n  awaitSettlement: \"awaitSettlementEncoded\",\n  submissionStatus: \"submissionStatusEncoded\",\n  awaitProgress: \"awaitProgressEncoded\",\n  cancelProgress: \"cancelProgressEncoded\",\n  observePage: \"observePage\",\n  abort: \"abortEncoded\",\n  resolveApproval: \"resolveApprovalEncoded\",\n  resolveUnknown: \"resolveUnknownEncoded\",\n} as const satisfies Record<string, keyof ThreadObjectRpc>;\n\n/** Worker-side client over the Thread Object namespace (DEPLOY-010). */\nexport class CloudflareThreadClient extends Context.Service<\n  CloudflareThreadClient,\n  {\n    /** Encode the input client-side, then durably submit to the owning Object. */\n    readonly submit: <InputSchema extends Schema.Top>(\n      agent: DurableSubmitAgent<InputSchema>,\n      input: InputSchema[\"Type\"],\n      options: DurableSubmitOptions,\n    ) => Effect.Effect<Receipt, ClientSubmitFailure, InputSchema[\"EncodingServices\"]>;\n    /** Wake-hinted, poll-guaranteed settlement wait executed inside the owning Object. */\n    readonly submissionStatus: (\n      receipt: Receipt,\n    ) => Effect.Effect<SubmissionStatus, ClientAwaitFailure>;\n    readonly awaitSettlement: (receipt: Receipt) => Effect.Effect<Settlement, ClientAwaitFailure>;\n    /**\n     * Wait without polling until progress after `afterSequence` is already durable or hinted.\n     * The result is deliberately void: canonical records remain authoritative and must be read.\n     * Interruption waits at most one second for best-effort remote cancellation.\n     */\n    readonly awaitProgress: (\n      threadId: ThreadId,\n      afterSequence: CanonicalSequence,\n    ) => Effect.Effect<void, ClientProgressFailure>;\n    /** One bounded page of canonical records. */\n    readonly readPage: (\n      threadId: ThreadId,\n      options?: {\n        readonly afterSequence?: CanonicalSequence | undefined;\n        readonly limit?: number | undefined;\n      },\n    ) => Effect.Effect<ReadonlyArray<CanonicalRecordEnvelope>, ClientObserveFailure>;\n    /**\n     * Every canonical record up to the CURRENT committed tail, via repeated pages. A\n     * snapshot read, not a live observation — callers wanting liveness re-read after\n     * `awaitSettlement`.\n     */\n    readonly readAll: (\n      threadId: ThreadId,\n    ) => Effect.Effect<ReadonlyArray<CanonicalRecordEnvelope>, ClientObserveFailure>;\n    /**\n     * Submission-addressed operations take the owning Thread explicitly (from the\n     * Receipt): minted Submission identities stay OPAQUE outside the storage adapter that\n     * minted them (D-P6-5), so the client never parses one to find the lane.\n     */\n    readonly abort: (\n      threadId: ThreadId,\n      command: AbortCommand,\n    ) => Effect.Effect<AbortIntent, ClientAbortFailure>;\n    readonly resolveApproval: (\n      threadId: ThreadId,\n      command: ApprovalDecisionCommand,\n    ) => Effect.Effect<ApprovalDecisionIntent, ClientApprovalFailure>;\n    readonly resolveUnknown: (\n      threadId: ThreadId,\n      command: UnknownResolutionCommand,\n    ) => Effect.Effect<UnknownResolutionIntent, ClientUnknownFailure>;\n  }\n>()(\"@effect-agent/platform-cloudflare/CloudflareThreadClient\") {\n  /**\n   * Assemble the client from a resolved namespace and the platform Crypto implementation.\n   * rpcTracing is the binding name and remains opt-in. Caller authentication, principals,\n   * idempotency keys, and definition digests are still explicit submission inputs.\n   */\n  static layerFromBinding(options: {\n    readonly namespace: DurableObjectNamespace<ThreadObjectRpc>;\n    readonly rpcTracing?: string;\n  }): Layer.Layer<CloudflareThreadClient> {\n    return CloudflareThreadClient.layer.pipe(\n      Layer.provide([ThreadObjectNamespace.layer(options.namespace, options), BrowserCrypto.layer]),\n    );\n  }\n\n  static readonly layer: Layer.Layer<\n    CloudflareThreadClient,\n    never,\n    ThreadObjectNamespace | Crypto.Crypto\n  > = Layer.effect(CloudflareThreadClient)(\n    Effect.gen(function* () {\n      const { namespace, rpcTracing } = yield* ThreadObjectNamespace;\n      const crypto = yield* Crypto.Crypto;\n\n      const call = Effect.fn(\n        function* (\n          threadId: string,\n          operation: keyof typeof hostRpcMethods,\n          encoded: unknown,\n        ): Effect.fn.Return<HostResponse, ThreadClientError | HostProtocolError> {\n          // Empty arguments preserve native arity. Passing `undefined` still adds an argument.\n          const traceArgs =\n            rpcTracing === undefined ? [] : yield* RpcTracing.withRpcTraceContext([]);\n\n          const raw = yield* Effect.tryPromise({\n            try: () => {\n              const stub = namespace.get(namespace.idFromName(threadId));\n\n              return stub[hostRpcMethods[operation]](encoded, ...traceArgs);\n            },\n            catch: (cause) =>\n              ThreadClientError.make({\n                threadId,\n                message: boundHostDiagnostic(\n                  `${operation} did not reach the Thread Object: ${safeCauseMessage(\n                    cause,\n                    \"the RPC failed without a diagnostic\",\n                  )}`,\n                ),\n                cause,\n                ...cloudflareFailureSignals(cause),\n              }),\n          });\n\n          return yield* decodeHostResponse(raw).pipe(\n            Effect.mapError((error): HostProtocolError =>\n              HostProtocolError.make({\n                message: boundHostDiagnostic(\n                  `The ${operation} answer could not be decoded: ${error.message}`,\n                ),\n              }),\n            ),\n          );\n        },\n        (effect, threadId, operation) =>\n          rpcTracing === undefined\n            ? Effect.withSpan(effect, \"CloudflareThreadClient.call\", {\n                attributes: { threadId, operation },\n              })\n            : RpcTracing.withRpcClientSpan(effect, rpcTracing, hostRpcMethods[operation]),\n      );\n\n      const expect = <ResultSchema extends Schema.Top, FailureSchema extends Schema.Top>(\n        threadId: string,\n        operation: string,\n        resultSchema: ResultSchema,\n        failureSchema: FailureSchema,\n      ) => {\n        const isExpectedResult = Schema.is(resultSchema);\n        const isExpectedFailure = Schema.is(failureSchema);\n\n        return (\n          response: HostResponse,\n        ): Effect.Effect<ResultSchema[\"Type\"], FailureSchema[\"Type\"] | ThreadClientError> => {\n          if (response._tag === \"HostFailed\") {\n            const failure = response.failure;\n\n            return isExpectedFailure(failure)\n              ? Effect.fail(failure)\n              : Effect.fail(outOfContract(threadId, operation, `failure ${failure._tag}`));\n          }\n          if (!isExpectedResult(response)) {\n            return Effect.fail(outOfContract(threadId, operation, `result ${response._tag}`));\n          }\n\n          return Effect.succeed(response);\n        };\n      };\n\n      const readPage = (\n        threadId: ThreadId,\n        options?: {\n          readonly afterSequence?: CanonicalSequence | undefined;\n          readonly limit?: number | undefined;\n        },\n      ) =>\n        Effect.gen(function* () {\n          const request = ObservePageRequest.make({\n            ...(options?.afterSequence === undefined\n              ? {}\n              : { afterSequence: options.afterSequence }),\n            limit: options?.limit ?? 256,\n          });\n\n          const encoded = yield* encodeObservePageRequest(request).pipe(\n            Effect.mapError((error) =>\n              HostProtocolError.make({\n                message: boundHostDiagnostic(`observePage request encode failed: ${error.message}`),\n              }),\n            ),\n          );\n\n          const response = yield* call(threadId, \"observePage\", encoded);\n\n          const page = yield* expect(\n            threadId,\n            \"observePage\",\n            ObservedPage,\n            ClientObserveHostFailure,\n          )(response);\n\n          return page.records;\n        });\n\n      const cancelProgress = (threadId: ThreadId, waiterId: string): Effect.Effect<void> =>\n        encodeCancelProgressRequest(CancelProgressRequest.make({ waiterId })).pipe(\n          Effect.mapError(() => undefined),\n          Effect.flatMap((encoded) => call(threadId, \"cancelProgress\", encoded)),\n          // Finalizers are uninterruptible; only the foreign RPC branch must remain\n          // interruptible so a lost cancellation reply cannot prevent local shutdown.\n          Effect.interruptible,\n          Effect.timeout(PROGRESS_CANCELLATION_TIMEOUT),\n          Effect.asVoid,\n          Effect.ignore,\n        );\n\n      return CloudflareThreadClient.of({\n        submit: <InputSchema extends Schema.Top>(\n          agent: DurableSubmitAgent<InputSchema>,\n          input: InputSchema[\"Type\"],\n          options: DurableSubmitOptions,\n        ) =>\n          Effect.gen(function* () {\n            // Client-side half of `DurableAgentRuntime.submit`'s input boundary: encode\n            // through the Agent's input schema and prove the canonical persistence bounds.\n            const encodedInput = yield* Schema.encodeEffect(agent.definition.input)(input).pipe(\n              Effect.mapError((cause) =>\n                AgentInputError.make({ message: `Unable to encode Agent input: ${cause.message}` }),\n              ),\n            );\n\n            const inputPayload = yield* Schema.decodeUnknownEffect(PersistedJson)(\n              encodedInput,\n            ).pipe(\n              Effect.mapError(() =>\n                AgentInputError.make({\n                  message: \"Agent input does not satisfy the canonical persistence bounds\",\n                }),\n              ),\n            );\n\n            const request = SubmitRequest.make({\n              agentId: agent.definition.id,\n              principal: options.principal,\n              idempotencyKey: options.idempotencyKey,\n              ...(options.admissionGroup === undefined\n                ? {}\n                : { admissionGroup: options.admissionGroup }),\n              ...(options.admissionFence === undefined\n                ? {}\n                : { admissionFence: options.admissionFence }),\n              definitions: options.definitions,\n              inputPayload,\n            });\n\n            const encoded = yield* encodeSubmitRequest(request).pipe(\n              Effect.mapError((error) =>\n                HostProtocolError.make({\n                  message: boundHostDiagnostic(`submit request encode failed: ${error.message}`),\n                }),\n              ),\n            );\n\n            const response = yield* call(options.threadId, \"submit\", encoded);\n\n            const succeeded = yield* expect(\n              options.threadId,\n              \"submit\",\n              SubmitSucceeded,\n              ClientSubmitHostFailure,\n            )(response);\n\n            return succeeded.receipt;\n          }),\n\n        submissionStatus: (receipt) =>\n          Effect.gen(function* () {\n            const encoded = yield* encodeReceipt(receipt).pipe(\n              Effect.mapError(() => HostProtocolError.make({ message: \"Invalid receipt\" })),\n            );\n\n            const response = yield* call(receipt.threadId, \"submissionStatus\", encoded);\n\n            const result = yield* expect(\n              receipt.threadId,\n              \"submissionStatus\",\n              SubmissionStatusResponse,\n              ClientAwaitHostFailure,\n            )(response);\n\n            return result.status;\n          }),\n        awaitSettlement: (receipt) =>\n          Effect.gen(function* () {\n            const encoded = yield* encodeReceipt(receipt).pipe(\n              Effect.mapError((error) =>\n                HostProtocolError.make({\n                  message: boundHostDiagnostic(`receipt encode failed: ${error.message}`),\n                }),\n              ),\n            );\n\n            const response = yield* call(receipt.threadId, \"awaitSettlement\", encoded);\n\n            const settled = yield* expect(\n              receipt.threadId,\n              \"awaitSettlement\",\n              SettlementReached,\n              ClientAwaitHostFailure,\n            )(response);\n\n            return settled.settlement;\n          }),\n\n        awaitProgress: (threadId, afterSequence) =>\n          Effect.gen(function* () {\n            const waiterId = yield* crypto.randomUUIDv4.pipe(\n              Effect.mapError((error) =>\n                HostProtocolError.make({\n                  message: boundHostDiagnostic(\n                    `awaitProgress cancellation identity generation failed: ${error.message}`,\n                  ),\n                }),\n              ),\n            );\n\n            const request = AwaitProgressRequest.make({ afterSequence, waiterId });\n\n            const encoded = yield* encodeAwaitProgressRequest(request).pipe(\n              Effect.mapError((error) =>\n                HostProtocolError.make({\n                  message: boundHostDiagnostic(\n                    `awaitProgress request encode failed: ${error.message}`,\n                  ),\n                }),\n              ),\n            );\n\n            const attempt = (retry: number): Effect.Effect<void, ClientProgressFailure> =>\n              call(threadId, \"awaitProgress\", encoded).pipe(\n                Effect.flatMap(\n                  expect(threadId, \"awaitProgress\", ProgressObserved, ClientObserveHostFailure),\n                ),\n                Effect.asVoid,\n                Effect.catchTag(\"ThreadClientError\", (error) =>\n                  error.retryable === true && error.overloaded !== true && retry < 5\n                    ? Effect.sleep(Duration.millis(10 * 2 ** retry)).pipe(\n                        Effect.andThen(attempt(retry + 1)),\n                      )\n                    : Effect.fail(error),\n                ),\n              );\n\n            yield* attempt(0).pipe(Effect.onInterrupt(() => cancelProgress(threadId, waiterId)));\n          }),\n\n        readPage,\n\n        readAll: (threadId) =>\n          Effect.gen(function* () {\n            const all: Array<CanonicalRecordEnvelope> = [];\n            let after: CanonicalSequence | undefined;\n\n            for (;;) {\n              const page = yield* readPage(threadId, { afterSequence: after, limit: 1_024 });\n\n              all.push(...page);\n              const last = page.at(-1);\n\n              if (page.length < 1_024 || last === undefined) return all;\n              after = last.sequence;\n            }\n          }),\n\n        abort: (threadId, command) =>\n          Effect.gen(function* () {\n            const encoded = yield* encodeAbortCommand(command).pipe(\n              Effect.mapError((error) =>\n                HostProtocolError.make({\n                  message: boundHostDiagnostic(`abort command encode failed: ${error.message}`),\n                }),\n              ),\n            );\n\n            const response = yield* call(threadId, \"abort\", encoded);\n\n            const recorded = yield* expect(\n              threadId,\n              \"abort\",\n              AbortRecorded,\n              ClientAbortHostFailure,\n            )(response);\n\n            return recorded.intent;\n          }),\n\n        resolveApproval: (threadId, command) =>\n          Effect.gen(function* () {\n            const encoded = yield* encodeApprovalDecisionCommand(command).pipe(\n              Effect.mapError((error) =>\n                HostProtocolError.make({\n                  message: boundHostDiagnostic(`approval command encode failed: ${error.message}`),\n                }),\n              ),\n            );\n\n            const response = yield* call(threadId, \"resolveApproval\", encoded);\n\n            const recorded = yield* expect(\n              threadId,\n              \"resolveApproval\",\n              ApprovalRecorded,\n              ClientApprovalHostFailure,\n            )(response);\n\n            return recorded.intent;\n          }),\n\n        resolveUnknown: (threadId, command) =>\n          Effect.gen(function* () {\n            const encoded = yield* encodeUnknownResolutionCommand(command).pipe(\n              Effect.mapError((error) =>\n                HostProtocolError.make({\n                  message: boundHostDiagnostic(\n                    `resolution command encode failed: ${error.message}`,\n                  ),\n                }),\n              ),\n            );\n\n            const response = yield* call(threadId, \"resolveUnknown\", encoded);\n\n            const recorded = yield* expect(\n              threadId,\n              \"resolveUnknown\",\n              UnknownResolutionRecorded,\n              ClientUnknownHostFailure,\n            )(response);\n\n            return recorded.intent;\n          }),\n      });\n    }),\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8DA,MAAM,6BAA6B;AACnC,MAAM,gCAAgC;AAEtC,MAAM,oBAAoB,OAAO,OAAO,MAAM,OAAO,YAAY,0BAA0B,CAAC;;AAG5F,MAAa,uBAAuB,UAClC,MAAM,SAAS,6BACX,GAAG,MAAM,MAAM,GAAG,IAA8B,EAAE,OAClD;;;;;AAMN,IAAa,oBAAb,cAAuC,OAAO,YAA+B,CAAC,CAC5E,qBACA,EACE,SAAS,kBACX,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,oBAAb,cAAuC,OAAO,YAA+B,CAAC,CAC5E,qBACA;CACE,UAAU,OAAO;CACjB,SAAS,OAAO;CAChB,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;;CAEzC,WAAW,OAAO,YAAY,OAAO,OAAO;;CAE5C,YAAY,OAAO,YAAY,OAAO,OAAO;AAC/C,CACF,CAAC,CAAC,CAAC;;;;;;;AAYH,IAAa,gBAAb,cAAmC,OAAO,MACxC,iDACF,CAAC,CAAC;CACA,SAAS;CACT,WAAW;CACX,gBAAgB;CAChB,gBAAgB,OAAO,YAAY,cAAc;CACjD,gBAAgB,OAAO,YAAY,cAAc;CACjD,aAAa;CACb,cAAc;AAChB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,qBAAb,cAAwC,OAAO,MAC7C,sDACF,CAAC,CAAC;CACA,eAAe,OAAO,YAAY,iBAAiB;CACnD,OAAO,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,GAAG,OAAO,oBAAoB,IAAK,CAAC;AACpF,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,uBAAb,cAA0C,OAAO,MAC/C,wDACF,CAAC,CAAC;CACA,eAAe;CACf,UAAU,OAAO,OAAO,MAAM,OAAO,YAAY,CAAC,GAAG,OAAO,YAAY,GAAG,CAAC;AAC9E,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,wBAAb,cAA2C,OAAO,MAChD,yDACF,CAAC,CAAC,EACA,UAAU,OAAO,OAAO,MAAM,OAAO,YAAY,CAAC,GAAG,OAAO,YAAY,GAAG,CAAC,EAC9E,CAAC,CAAC,CAAC,CAAC;;;;;;;AAYJ,MAAa,cAAc,OAAO,MAAM;CACtC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAID,IAAa,kBAAb,cAAqC,OAAO,YAC1C,mDACF,CAAC,CAAC,mBAAmB,EACnB,SAAS,QACX,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,2BAAb,cAA8C,OAAO,YACnD,4DACF,CAAC,CAAC,4BAA4B,EAAE,QAAQ,iBAAiB,CAAC,CAAC,CAAC,CAAC;AAE7D,IAAa,oBAAb,cAAuC,OAAO,YAC5C,qDACF,CAAC,CAAC,qBAAqB,EACrB,YAAY,WACd,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,eAAb,cAAkC,OAAO,YACvC,gDACF,CAAC,CAAC,gBAAgB,EAChB,SAAS,OAAO,MAAM,uBAAuB,CAAC,CAAC,MAAM,OAAO,YAAY,IAAK,CAAC,EAChF,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,mBAAb,cAAsC,OAAO,YAC3C,oDACF,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3B,IAAa,oBAAb,cAAuC,OAAO,YAC5C,qDACF,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;AAE5B,IAAa,gBAAb,cAAmC,OAAO,YACxC,iDACF,CAAC,CAAC,iBAAiB,EACjB,QAAQ,YACV,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,mBAAb,cAAsC,OAAO,YAC3C,oDACF,CAAC,CAAC,oBAAoB,EACpB,QAAQ,uBACV,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,4BAAb,cAA+C,OAAO,YACpD,6DACF,CAAC,CAAC,6BAA6B,EAC7B,QAAQ,wBACV,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,aAAb,cAAgC,OAAO,YACrC,8CACF,CAAC,CAAC,cAAc,EACd,SAAS,YACX,CAAC,CAAC,CAAC,CAAC;;AAGJ,MAAa,eAAe,OAAO,MAAM;CACvC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAQD,MAAa,sBAAsB,OAAO,oBAAoB,aAAa;AAC3E,MAAa,sBAAsB,OAAO,aAAa,aAAa;AACpE,MAAa,gBAAgB,OAAO,oBAAoB,OAAO;AAC/D,MAAa,gBAAgB,OAAO,aAAa,OAAO;AACxD,MAAa,2BAA2B,OAAO,oBAAoB,kBAAkB;AACrF,MAAa,2BAA2B,OAAO,aAAa,kBAAkB;AAC9E,MAAa,6BAA6B,OAAO,oBAAoB,oBAAoB;AACzF,MAAa,6BAA6B,OAAO,aAAa,oBAAoB;AAClF,MAAa,8BAA8B,OAAO,oBAAoB,qBAAqB;AAC3F,MAAa,8BAA8B,OAAO,aAAa,qBAAqB;AACpF,MAAa,qBAAqB,OAAO,oBAAoB,YAAY;AACzE,MAAa,qBAAqB,OAAO,aAAa,YAAY;AAClE,MAAa,gCAAgC,OAAO,oBAAoB,uBAAuB;AAC/F,MAAa,gCAAgC,OAAO,aAAa,uBAAuB;AACxF,MAAa,iCAAiC,OAAO,oBAAoB,wBAAwB;AACjG,MAAa,iCAAiC,OAAO,aAAa,wBAAwB;AAC1F,MAAa,qBAAqB,OAAO,aAAa,YAAY;AAClE,MAAa,qBAAqB,OAAO,oBAAoB,YAAY;;AAOzE,MAAM,0BAA0B,OAAO,MAAM;CAC3C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,yBAAyB,OAAO,MAAM;CAC1C;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,2BAA2B,OAAO,MAAM;CAC5C;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,yBAAyB,OAAO,MAAM;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,4BAA4B,OAAO,MAAM;CAC7C;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,2BAA2B,OAAO,MAAM;CAC5C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAUD,MAAM,iBAAiB,UAAkB,WAAmB,aAC1D,kBAAkB,KAAK;CACrB;CACA,SAAS,oBACP,8BAA8B,UAAU,4BAA4B,SAAS,EAC/E;AACF,CAAC;AAEH,MAAM,iBAAiB;CACrB,QAAQ;CACR,iBAAiB;CACjB,kBAAkB;CAClB,eAAe;CACf,gBAAgB;CAChB,aAAa;CACb,OAAO;CACP,iBAAiB;CACjB,gBAAgB;AAClB;;AAGA,IAAa,yBAAb,MAAa,+BAA+B,QAAQ,QAyDlD,CAAC,CAAC,0DAA0D,CAAC,CAAC;;;;;;CAM9D,OAAO,iBAAiB,SAGgB;EACtC,OAAO,uBAAuB,MAAM,KAClC,MAAM,QAAQ,CAAC,sBAAsB,MAAM,QAAQ,WAAW,OAAO,GAAG,cAAc,KAAK,CAAC,CAC9F;CACF;CAEA,OAAgB,QAIZ,MAAM,OAAO,sBAAsB,CAAC,CACtC,OAAO,IAAI,aAAa;EACtB,MAAM,EAAE,WAAW,eAAe,OAAO;EACzC,MAAM,SAAS,OAAO,OAAO;EAE7B,MAAM,OAAO,OAAO,GAClB,WACE,UACA,WACA,SACuE;GAEvE,MAAM,YACJ,eAAe,KAAA,IAAY,CAAC,IAAI,OAAO,WAAW,oBAAoB,CAAC,CAAC;GAE1E,MAAM,MAAM,OAAO,OAAO,WAAW;IACnC,WAAW;KAGT,OAFa,UAAU,IAAI,UAAU,WAAW,QAAQ,CAE9C,CAAC,CAAC,eAAe,WAAW,CAAC,SAAS,GAAG,SAAS;IAC9D;IACA,QAAQ,UACN,kBAAkB,KAAK;KACrB;KACA,SAAS,oBACP,GAAG,UAAU,oCAAoC,iBAC/C,OACA,qCACF,GACF;KACA;KACA,GAAG,yBAAyB,KAAK;IACnC,CAAC;GACL,CAAC;GAED,OAAO,OAAO,mBAAmB,GAAG,CAAC,CAAC,KACpC,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBACP,OAAO,UAAU,gCAAgC,MAAM,SACzD,EACF,CAAC,CACH,CACF;EACF,IACC,QAAQ,UAAU,cACjB,eAAe,KAAA,IACX,OAAO,SAAS,QAAQ,+BAA+B,EACrD,YAAY;GAAE;GAAU;EAAU,EACpC,CAAC,IACD,WAAW,kBAAkB,QAAQ,YAAY,eAAe,UAAU,CAClF;EAEA,MAAM,UACJ,UACA,WACA,cACA,kBACG;GACH,MAAM,mBAAmB,OAAO,GAAG,YAAY;GAC/C,MAAM,oBAAoB,OAAO,GAAG,aAAa;GAEjD,QACE,aACmF;IACnF,IAAI,SAAS,SAAS,cAAc;KAClC,MAAM,UAAU,SAAS;KAEzB,OAAO,kBAAkB,OAAO,IAC5B,OAAO,KAAK,OAAO,IACnB,OAAO,KAAK,cAAc,UAAU,WAAW,WAAW,QAAQ,MAAM,CAAC;IAC/E;IACA,IAAI,CAAC,iBAAiB,QAAQ,GAC5B,OAAO,OAAO,KAAK,cAAc,UAAU,WAAW,UAAU,SAAS,MAAM,CAAC;IAGlF,OAAO,OAAO,QAAQ,QAAQ;GAChC;EACF;EAEA,MAAM,YACJ,UACA,YAKA,OAAO,IAAI,aAAa;GACtB,MAAM,UAAU,mBAAmB,KAAK;IACtC,GAAI,SAAS,kBAAkB,KAAA,IAC3B,CAAC,IACD,EAAE,eAAe,QAAQ,cAAc;IAC3C,OAAO,SAAS,SAAS;GAC3B,CAAC;GAED,MAAM,UAAU,OAAO,yBAAyB,OAAO,CAAC,CAAC,KACvD,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBAAoB,sCAAsC,MAAM,SAAS,EACpF,CAAC,CACH,CACF;GAEA,MAAM,WAAW,OAAO,KAAK,UAAU,eAAe,OAAO;GAS7D,QAAO,OAPa,OAClB,UACA,eACA,cACA,wBACF,CAAC,CAAC,QAAQ,EAAA,CAEE;EACd,CAAC;EAEH,MAAM,kBAAkB,UAAoB,aAC1C,4BAA4B,sBAAsB,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KACpE,OAAO,eAAe,KAAA,CAAS,GAC/B,OAAO,SAAS,YAAY,KAAK,UAAU,kBAAkB,OAAO,CAAC,GAGrE,OAAO,eACP,OAAO,QAAQ,6BAA6B,GAC5C,OAAO,QACP,OAAO,MACT;EAEF,OAAO,uBAAuB,GAAG;GAC/B,SACE,OACA,OACA,YAEA,OAAO,IAAI,aAAa;IAGtB,MAAM,eAAe,OAAO,OAAO,aAAa,MAAM,WAAW,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAC7E,OAAO,UAAU,UACf,gBAAgB,KAAK,EAAE,SAAS,iCAAiC,MAAM,UAAU,CAAC,CACpF,CACF;IAEA,MAAM,eAAe,OAAO,OAAO,oBAAoB,aAAa,CAAC,CACnE,YACF,CAAC,CAAC,KACA,OAAO,eACL,gBAAgB,KAAK,EACnB,SAAS,gEACX,CAAC,CACH,CACF;IAEA,MAAM,UAAU,cAAc,KAAK;KACjC,SAAS,MAAM,WAAW;KAC1B,WAAW,QAAQ;KACnB,gBAAgB,QAAQ;KACxB,GAAI,QAAQ,mBAAmB,KAAA,IAC3B,CAAC,IACD,EAAE,gBAAgB,QAAQ,eAAe;KAC7C,GAAI,QAAQ,mBAAmB,KAAA,IAC3B,CAAC,IACD,EAAE,gBAAgB,QAAQ,eAAe;KAC7C,aAAa,QAAQ;KACrB;IACF,CAAC;IAED,MAAM,UAAU,OAAO,oBAAoB,OAAO,CAAC,CAAC,KAClD,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBAAoB,iCAAiC,MAAM,SAAS,EAC/E,CAAC,CACH,CACF;IAEA,MAAM,WAAW,OAAO,KAAK,QAAQ,UAAU,UAAU,OAAO;IAShE,QAAO,OAPkB,OACvB,QAAQ,UACR,UACA,iBACA,uBACF,CAAC,CAAC,QAAQ,EAAA,CAEO;GACnB,CAAC;GAEH,mBAAmB,YACjB,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,cAAc,OAAO,CAAC,CAAC,KAC5C,OAAO,eAAe,kBAAkB,KAAK,EAAE,SAAS,kBAAkB,CAAC,CAAC,CAC9E;IAEA,MAAM,WAAW,OAAO,KAAK,QAAQ,UAAU,oBAAoB,OAAO;IAS1E,QAAO,OAPe,OACpB,QAAQ,UACR,oBACA,0BACA,sBACF,CAAC,CAAC,QAAQ,EAAA,CAEI;GAChB,CAAC;GACH,kBAAkB,YAChB,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,cAAc,OAAO,CAAC,CAAC,KAC5C,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBAAoB,0BAA0B,MAAM,SAAS,EACxE,CAAC,CACH,CACF;IAEA,MAAM,WAAW,OAAO,KAAK,QAAQ,UAAU,mBAAmB,OAAO;IASzE,QAAO,OAPgB,OACrB,QAAQ,UACR,mBACA,mBACA,sBACF,CAAC,CAAC,QAAQ,EAAA,CAEK;GACjB,CAAC;GAEH,gBAAgB,UAAU,kBACxB,OAAO,IAAI,aAAa;IACtB,MAAM,WAAW,OAAO,OAAO,aAAa,KAC1C,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBACP,0DAA0D,MAAM,SAClE,EACF,CAAC,CACH,CACF;IAEA,MAAM,UAAU,qBAAqB,KAAK;KAAE;KAAe;IAAS,CAAC;IAErE,MAAM,UAAU,OAAO,2BAA2B,OAAO,CAAC,CAAC,KACzD,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBACP,wCAAwC,MAAM,SAChD,EACF,CAAC,CACH,CACF;IAEA,MAAM,WAAW,UACf,KAAK,UAAU,iBAAiB,OAAO,CAAC,CAAC,KACvC,OAAO,QACL,OAAO,UAAU,iBAAiB,kBAAkB,wBAAwB,CAC9E,GACA,OAAO,QACP,OAAO,SAAS,sBAAsB,UACpC,MAAM,cAAc,QAAQ,MAAM,eAAe,QAAQ,QAAQ,IAC7D,OAAO,MAAM,SAAS,OAAO,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAC7C,OAAO,QAAQ,QAAQ,QAAQ,CAAC,CAAC,CACnC,IACA,OAAO,KAAK,KAAK,CACvB,CACF;IAEF,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,kBAAkB,eAAe,UAAU,QAAQ,CAAC,CAAC;GACrF,CAAC;GAEH;GAEA,UAAU,aACR,OAAO,IAAI,aAAa;IACtB,MAAM,MAAsC,CAAC;IAC7C,IAAI;IAEJ,SAAS;KACP,MAAM,OAAO,OAAO,SAAS,UAAU;MAAE,eAAe;MAAO,OAAO;KAAM,CAAC;KAE7E,IAAI,KAAK,GAAG,IAAI;KAChB,MAAM,OAAO,KAAK,GAAG,EAAE;KAEvB,IAAI,KAAK,SAAS,QAAS,SAAS,KAAA,GAAW,OAAO;KACtD,QAAQ,KAAK;IACf;GACF,CAAC;GAEH,QAAQ,UAAU,YAChB,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,mBAAmB,OAAO,CAAC,CAAC,KACjD,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBAAoB,gCAAgC,MAAM,SAAS,EAC9E,CAAC,CACH,CACF;IAEA,MAAM,WAAW,OAAO,KAAK,UAAU,SAAS,OAAO;IASvD,QAAO,OAPiB,OACtB,UACA,SACA,eACA,sBACF,CAAC,CAAC,QAAQ,EAAA,CAEM;GAClB,CAAC;GAEH,kBAAkB,UAAU,YAC1B,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,8BAA8B,OAAO,CAAC,CAAC,KAC5D,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBAAoB,mCAAmC,MAAM,SAAS,EACjF,CAAC,CACH,CACF;IAEA,MAAM,WAAW,OAAO,KAAK,UAAU,mBAAmB,OAAO;IASjE,QAAO,OAPiB,OACtB,UACA,mBACA,kBACA,yBACF,CAAC,CAAC,QAAQ,EAAA,CAEM;GAClB,CAAC;GAEH,iBAAiB,UAAU,YACzB,OAAO,IAAI,aAAa;IACtB,MAAM,UAAU,OAAO,+BAA+B,OAAO,CAAC,CAAC,KAC7D,OAAO,UAAU,UACf,kBAAkB,KAAK,EACrB,SAAS,oBACP,qCAAqC,MAAM,SAC7C,EACF,CAAC,CACH,CACF;IAEA,MAAM,WAAW,OAAO,KAAK,UAAU,kBAAkB,OAAO;IAShE,QAAO,OAPiB,OACtB,UACA,kBACA,2BACA,wBACF,CAAC,CAAC,QAAQ,EAAA,CAEM;GAClB,CAAC;EACL,CAAC;CACH,CAAC,CACH;AACF"}

package/dist/ProtectedBrowser.d.mts

@@ -1,7 +1,7 @@
 import { r as BrowserRunSessionLifecycle } from "./browser-session-lifecycle-DJpqLXy_.mjs";
 import { Context, Crypto, Effect, Layer, Redacted, Schema, Scope } from "effect";
 import { InteractiveBrowserPolicy } from "@effect-agent/sandbox/InteractiveBrowser";
-import { CredentialFieldRole, ProtectedBrowser, ProtectedBrowserControl, ProtectedBrowserError, ProtectedCleanup } from "@effect-agent/sandbox/ProtectedBrowser";
+import { CredentialFieldRole, CredentialOrigin, ProtectedBrowser, ProtectedBrowserControl, ProtectedBrowserError, ProtectedCleanup } from "@effect-agent/sandbox/ProtectedBrowser";
 //#region src/protected-browser/policy.d.ts
 declare const ProtectedTransportError_base: Schema.Class<ProtectedTransportError, Schema.TaggedStruct<"ProtectedTransportError", {
   readonly reason: Schema.Literals<readonly ["stale-reference", "needs-attention", "unsupported", "provider"]>;
@@ -14,12 +14,14 @@ declare const ProtectedBrowserDispatch_base: Context.ServiceClass<ProtectedBrows
 declare class ProtectedBrowserDispatch extends ProtectedBrowserDispatch_base {}
 /** Decoded adapter boundary. SDK exceptions and page diagnostics never cross this port. */
 interface ProtectedBrowserTransport {
+  /** Select observation/target origins; undefined restores all network-permitted HTTPS frames. */
+  readonly restrictObservation: (origins: ReadonlyArray<typeof CredentialOrigin.Type> | undefined) => Effect.Effect<void, ProtectedTransportError>;
   readonly context: Effect.Effect<typeof ProtectedPageContext.Type, ProtectedTransportError>;
   readonly discover: Effect.Effect<typeof ProtectedDiscovery.Type, ProtectedTransportError>;
   readonly target: (ref: string) => Effect.Effect<ProtectedBrowserControl, ProtectedTransportError>;
   readonly navigate: (url: string) => Effect.Effect<void, ProtectedTransportError>;
   readonly click: (ref: string) => Effect.Effect<void, ProtectedTransportError>;
-  readonly fill: (ref: string, role: typeof CredentialFieldRole.Type, value: Redacted.Redacted<string>) => Effect.Effect<void, ProtectedTransportError, ProtectedBrowserDispatch>;
+  readonly fill: (ref: string, role: typeof CredentialFieldRole.Type | "text" | "select", value: Redacted.Redacted<string>) => Effect.Effect<void, ProtectedTransportError, ProtectedBrowserDispatch>;
   /** Invalidates local references synchronously before bounded exact-session cleanup. */
   readonly invalidate: () => void;
   readonly close: Effect.Effect<typeof ProtectedCleanup.Type>;
@@ -44,7 +46,7 @@ declare const ProtectedDiscovery: Schema.Struct<{
 }>;
 /**
  * Fresh private passes only. Account administrators and Browser Rendering token holders are
- * trusted operators. No viewer, handoff, raw JavaScript, screenshot or plaintext-fill API exists.
+ * trusted operators. No viewer, handoff, raw JavaScript, screenshot or plaintext credential API exists.
  * Hosts explicitly authorize post-exposure observations for recipients they trust not to echo.
  */
 declare const browserRunProtectedLayer: () => Layer.Layer<ProtectedBrowser, never, BrowserRunProtectedTransport | Crypto.Crypto>;