@effect-agent/platform-cloudflare 0.1.0-beta.76 → 0.1.0-beta.78

package/dist/BrowserRestCapture.mjs

@@ -1,4 +1,4 @@
-import { i as BrowserQuickActionWorkersAi } from "./CloudflareBrowser-Bj22nNUT.mjs";
+import { i as BrowserQuickActionWorkersAi } from "./CloudflareBrowser-BSJRWmlW.mjs";
 import { Effect, Layer, Option, Redacted, Schema, Stream } from "effect";
 import { PageCapture, PageCaptureInferencePolicyError, PageCaptureInferenceUse, PageCaptureNavigationError, PageCaptureOutputLimitError, PageCaptureProtocolError, PageCaptureRateLimitedError, PageCaptureResourceUse, PageCaptureResult, PageCaptureUnsupportedError, PageContentCaptured, PageLinksCaptured, PageMarkdownCaptured, PageScrapeCaptured, PageStructuredCaptured } from "@effect-agent/sandbox/PageCapture";
 import { SandboxImplementation } from "@effect-agent/sandbox/Sandbox";

package/dist/CloudflareAiGateway.d.mts

@@ -0,0 +1,64 @@
+import { Layer, Redacted } from "effect";
+import { HttpClient } from "effect/unstable/http";
+declare namespace CloudflareAiGateway_d_exports {
+  export { ClientOptions, ProviderOptions, RestOptions, RouteOptions, provide, provider, rest };
+}
+/** Options understood by upstream Effect AI clients; no model or provider wrapper is created. */
+interface ClientOptions {
+  readonly apiUrl: string;
+  readonly transformClient: (client: HttpClient.HttpClient) => HttpClient.HttpClient;
+}
+interface ProviderOptions {
+  readonly accountId: string;
+  readonly gatewayId: string;
+  /** Cloudflare's provider path, such as openai, anthropic, google-ai-studio, or perplexity-ai. */
+  readonly provider: string;
+  /** Omit only for an unauthenticated gateway with a separately supplied provider key. */
+  readonly apiToken?: Redacted.Redacted<string>;
+}
+interface RestOptions {
+  readonly accountId: string;
+  readonly gatewayId: string;
+  /** Cloudflare API token with Workers AI Read permission. */
+  readonly apiToken: Redacted.Redacted<string>;
+  /** Matches the paths appended by the upstream Effect client. */
+  readonly protocol: "responses" | "chat-completions" | "messages";
+}
+/** Choose exactly one route: a native provider path or an account REST protocol. */
+type RouteOptions = (ProviderOptions & {
+  readonly protocol?: never;
+}) | (RestOptions & {
+  readonly provider?: never;
+});
+/**
+ * Provider-native proxy for model calls, streaming, embeddings, and hosted tools supported
+ * by that provider. Pass the result to the upstream client's layer along with its apiKey
+ * for BYOK-in-request, or omit apiKey for Gateway stored keys / Unified Billing.
+ * Provider model names and request bodies pass through unchanged. This module is Node-safe.
+ * Custom transforms and redirect policies must retain this endpoint and credential boundary.
+ */
+declare const provider: (options: ProviderOptions) => ClientOptions;
+/**
+ * Cloudflare's account REST API (not the deprecated /compat API). Use provider-qualified
+ * model names, e.g. openai/gpt-4.1 or anthropic/claude-haiku-4.5, and omit provider apiKey.
+ * OpenAI clients append /responses or /chat/completions; Anthropic appends /v1/messages.
+ * Compatibility remains the responsibility of the selected upstream client and model.
+ */
+declare const rest: (options: RestOptions) => ClientOptions;
+/**
+ * Provide a Gateway-configured upstream client directly in a Layer pipeline.
+ * Pass the client's `layer` factory, or a callback adding client-specific options.
+ * The factory's errors and remaining services (such as HttpClient) stay visible.
+ * Model selection and resource ownership remain with the supplied upstream Layers.
+ *
+ * @example
+ * ```ts
+ * AnthropicLanguageModel.model("claude-haiku-4-5").pipe(
+ *   Gateway.provide(AnthropicClient.layer, { ...options, provider: "anthropic" }),
+ * )
+ * ```
+ */
+declare const provide: <Client, E, R>(clientLayer: (options: ClientOptions) => Layer.Layer<Client, E, R>, options: RouteOptions) => <RIn2, E2, ROut2>(self: Layer.Layer<ROut2, E2, RIn2>) => Layer.Layer<ROut2, E | E2, R | Exclude<RIn2, Client>>;
+//#endregion
+export { ClientOptions, ProviderOptions, RestOptions, RouteOptions, provide, provider, rest, CloudflareAiGateway_d_exports as t };
+//# sourceMappingURL=CloudflareAiGateway.d.mts.map

package/dist/CloudflareAiGateway.mjs

@@ -0,0 +1,70 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+import { Context, Effect, Layer, Option, Redactable, Redacted, Schema } from "effect";
+import { FetchHttpClient, Headers, HttpClient, HttpClientError, HttpClientRequest } from "effect/unstable/http";
+//#region src/CloudflareAiGateway.ts
+var CloudflareAiGateway_exports = /* @__PURE__ */ __exportAll({
+	provide: () => provide,
+	provider: () => provider,
+	rest: () => rest
+});
+const Segment = Schema.NonEmptyString.check(Schema.isMaxLength(256), Schema.isPattern(/^[a-zA-Z0-9_-]+$/));
+const decodeSegment = Schema.decodeUnknownSync(Segment);
+const redactGatewayToken = (headers, tokenHeader) => {
+	Object.defineProperty(headers, Redactable.symbolRedactable, {
+		configurable: true,
+		value: (context) => Headers.redact(headers, [...Context.get(context, Headers.CurrentRedactedNames), tokenHeader])
+	});
+};
+const clientOptions = (apiUrl, tokenHeader, apiToken, gatewayId) => Object.freeze({
+	apiUrl,
+	transformClient: (client) => client.pipe(HttpClient.mapRequestEffect((request) => {
+		const url = URL.parse(request.url);
+		if (url === null || url.username !== "" || url.password !== "" || !(url.href === apiUrl || url.href.startsWith(`${apiUrl}/`))) return Effect.fail(new HttpClientError.HttpClientError({ reason: new HttpClientError.InvalidUrlError({
+			request,
+			description: "Request is outside the configured Cloudflare AI Gateway endpoint"
+		}) }));
+		let prepared = request;
+		if (apiToken !== void 0) prepared = HttpClientRequest.setHeader(prepared, tokenHeader, `Bearer ${Redacted.value(apiToken)}`);
+		if (gatewayId !== void 0) prepared = HttpClientRequest.setHeader(prepared, "cf-aig-gateway-id", gatewayId);
+		return Effect.succeed(prepared);
+	}), HttpClient.transformResponse((effect) => Effect.gen(function* () {
+		const defaults = yield* Effect.serviceOption(FetchHttpClient.RequestInit);
+		return yield* effect.pipe(Effect.provideService(FetchHttpClient.RequestInit, {
+			...Option.getOrElse(defaults, () => ({})),
+			redirect: "error"
+		}));
+	})), HttpClient.transformResponse((effect) => effect.pipe(Effect.tap((response) => Effect.sync(() => redactGatewayToken(response.request.headers, tokenHeader))), Effect.tapError((error) => Effect.sync(() => redactGatewayToken(error.reason.request.headers, tokenHeader))), Effect.updateService(Headers.CurrentRedactedNames, (names) => [...names, tokenHeader]))))
+});
+/**
+* Provider-native proxy for model calls, streaming, embeddings, and hosted tools supported
+* by that provider. Pass the result to the upstream client's layer along with its apiKey
+* for BYOK-in-request, or omit apiKey for Gateway stored keys / Unified Billing.
+* Provider model names and request bodies pass through unchanged. This module is Node-safe.
+* Custom transforms and redirect policies must retain this endpoint and credential boundary.
+*/
+const provider = (options) => clientOptions(`https://gateway.ai.cloudflare.com/v1/${decodeSegment(options.accountId)}/${decodeSegment(options.gatewayId)}/${decodeSegment(options.provider)}`, "cf-aig-authorization", options.apiToken);
+/**
+* Cloudflare's account REST API (not the deprecated /compat API). Use provider-qualified
+* model names, e.g. openai/gpt-4.1 or anthropic/claude-haiku-4.5, and omit provider apiKey.
+* OpenAI clients append /responses or /chat/completions; Anthropic appends /v1/messages.
+* Compatibility remains the responsibility of the selected upstream client and model.
+*/
+const rest = (options) => clientOptions(`https://api.cloudflare.com/client/v4/accounts/${decodeSegment(options.accountId)}/ai${options.protocol === "messages" ? "" : "/v1"}`, "authorization", options.apiToken, decodeSegment(options.gatewayId));
+/**
+* Provide a Gateway-configured upstream client directly in a Layer pipeline.
+* Pass the client's `layer` factory, or a callback adding client-specific options.
+* The factory's errors and remaining services (such as HttpClient) stay visible.
+* Model selection and resource ownership remain with the supplied upstream Layers.
+*
+* @example
+* ```ts
+* AnthropicLanguageModel.model("claude-haiku-4-5").pipe(
+*   Gateway.provide(AnthropicClient.layer, { ...options, provider: "anthropic" }),
+* )
+* ```
+*/
+const provide = (clientLayer, options) => Layer.provide(clientLayer(options.provider !== void 0 ? provider(options) : rest(options)));
+//#endregion
+export { provide, provider, rest, CloudflareAiGateway_exports as t };
+
+//# sourceMappingURL=CloudflareAiGateway.mjs.map

package/dist/CloudflareAiGateway.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudflareAiGateway.mjs","names":[],"sources":["../src/CloudflareAiGateway.ts"],"sourcesContent":["import { Context, Effect, Layer, Option, Redactable, Redacted, Schema } from \"effect\";\nimport {\n  FetchHttpClient,\n  Headers,\n  HttpClient,\n  HttpClientError,\n  HttpClientRequest,\n} from \"effect/unstable/http\";\n\nconst Segment = Schema.NonEmptyString.check(\n  Schema.isMaxLength(256),\n  Schema.isPattern(/^[a-zA-Z0-9_-]+$/),\n);\n\nconst decodeSegment = Schema.decodeUnknownSync(Segment);\n\n/** Options understood by upstream Effect AI clients; no model or provider wrapper is created. */\nexport interface ClientOptions {\n  readonly apiUrl: string;\n  readonly transformClient: (client: HttpClient.HttpClient) => HttpClient.HttpClient;\n}\n\nexport interface ProviderOptions {\n  readonly accountId: string;\n  readonly gatewayId: string;\n  /** Cloudflare's provider path, such as openai, anthropic, google-ai-studio, or perplexity-ai. */\n  readonly provider: string;\n  /** Omit only for an unauthenticated gateway with a separately supplied provider key. */\n  readonly apiToken?: Redacted.Redacted<string>;\n}\n\nexport interface RestOptions {\n  readonly accountId: string;\n  readonly gatewayId: string;\n  /** Cloudflare API token with Workers AI Read permission. */\n  readonly apiToken: Redacted.Redacted<string>;\n  /** Matches the paths appended by the upstream Effect client. */\n  readonly protocol: \"responses\" | \"chat-completions\" | \"messages\";\n}\n\n/** Choose exactly one route: a native provider path or an account REST protocol. */\nexport type RouteOptions =\n  | (ProviderOptions & { readonly protocol?: never })\n  | (RestOptions & { readonly provider?: never });\n\nconst redactGatewayToken = (headers: Headers.Headers, tokenHeader: string): void => {\n  // HTTP tracing can copy headers after preprocessing. Attach the public redaction\n  // protocol to the final request as well, before a provider builds error details.\n  Object.defineProperty(headers, Redactable.symbolRedactable, {\n    configurable: true,\n    value: (context: Context.Context<never>) =>\n      Headers.redact(headers, [...Context.get(context, Headers.CurrentRedactedNames), tokenHeader]),\n  });\n};\n\nconst clientOptions = (\n  apiUrl: string,\n  tokenHeader: \"authorization\" | \"cf-aig-authorization\",\n  apiToken: Redacted.Redacted<string> | undefined,\n  gatewayId?: string,\n): ClientOptions =>\n  Object.freeze({\n    apiUrl,\n    transformClient: (client: HttpClient.HttpClient) =>\n      client.pipe(\n        HttpClient.mapRequestEffect((request) => {\n          const url = URL.parse(request.url);\n\n          // Check the normalized URL too: dot segments must not escape this account or gateway.\n          if (\n            url === null ||\n            url.username !== \"\" ||\n            url.password !== \"\" ||\n            !(url.href === apiUrl || url.href.startsWith(`${apiUrl}/`))\n          ) {\n            return Effect.fail(\n              new HttpClientError.HttpClientError({\n                reason: new HttpClientError.InvalidUrlError({\n                  request,\n                  description: \"Request is outside the configured Cloudflare AI Gateway endpoint\",\n                }),\n              }),\n            );\n          }\n          let prepared = request;\n\n          if (apiToken !== undefined) {\n            prepared = HttpClientRequest.setHeader(\n              prepared,\n              tokenHeader,\n              `Bearer ${Redacted.value(apiToken)}`,\n            );\n          }\n          if (gatewayId !== undefined) {\n            prepared = HttpClientRequest.setHeader(prepared, \"cf-aig-gateway-id\", gatewayId);\n          }\n\n          return Effect.succeed(prepared);\n        }),\n        HttpClient.transformResponse((effect) =>\n          Effect.gen(function* () {\n            const defaults = yield* Effect.serviceOption(FetchHttpClient.RequestInit);\n\n            return yield* effect.pipe(\n              Effect.provideService(FetchHttpClient.RequestInit, {\n                ...Option.getOrElse(defaults, () => ({})),\n                redirect: \"error\",\n              }),\n            );\n          }),\n        ),\n        HttpClient.transformResponse((effect) =>\n          effect.pipe(\n            Effect.tap((response) =>\n              Effect.sync(() => redactGatewayToken(response.request.headers, tokenHeader)),\n            ),\n            Effect.tapError((error) =>\n              Effect.sync(() => redactGatewayToken(error.reason.request.headers, tokenHeader)),\n            ),\n            Effect.updateService(Headers.CurrentRedactedNames, (names) => [...names, tokenHeader]),\n          ),\n        ),\n      ),\n  });\n\n/**\n * Provider-native proxy for model calls, streaming, embeddings, and hosted tools supported\n * by that provider. Pass the result to the upstream client's layer along with its apiKey\n * for BYOK-in-request, or omit apiKey for Gateway stored keys / Unified Billing.\n * Provider model names and request bodies pass through unchanged. This module is Node-safe.\n * Custom transforms and redirect policies must retain this endpoint and credential boundary.\n */\nexport const provider = (options: ProviderOptions): ClientOptions =>\n  clientOptions(\n    `https://gateway.ai.cloudflare.com/v1/${decodeSegment(options.accountId)}/${decodeSegment(options.gatewayId)}/${decodeSegment(options.provider)}`,\n    \"cf-aig-authorization\",\n    options.apiToken,\n  );\n\n/**\n * Cloudflare's account REST API (not the deprecated /compat API). Use provider-qualified\n * model names, e.g. openai/gpt-4.1 or anthropic/claude-haiku-4.5, and omit provider apiKey.\n * OpenAI clients append /responses or /chat/completions; Anthropic appends /v1/messages.\n * Compatibility remains the responsibility of the selected upstream client and model.\n */\nexport const rest = (options: RestOptions): ClientOptions =>\n  clientOptions(\n    `https://api.cloudflare.com/client/v4/accounts/${decodeSegment(options.accountId)}/ai${options.protocol === \"messages\" ? \"\" : \"/v1\"}`,\n    \"authorization\",\n    options.apiToken,\n    decodeSegment(options.gatewayId),\n  );\n\n/**\n * Provide a Gateway-configured upstream client directly in a Layer pipeline.\n * Pass the client's `layer` factory, or a callback adding client-specific options.\n * The factory's errors and remaining services (such as HttpClient) stay visible.\n * Model selection and resource ownership remain with the supplied upstream Layers.\n *\n * @example\n * ```ts\n * AnthropicLanguageModel.model(\"claude-haiku-4-5\").pipe(\n *   Gateway.provide(AnthropicClient.layer, { ...options, provider: \"anthropic\" }),\n * )\n * ```\n */\nexport const provide = <Client, E, R>(\n  clientLayer: (options: ClientOptions) => Layer.Layer<Client, E, R>,\n  options: RouteOptions,\n) => Layer.provide(clientLayer(options.provider !== undefined ? provider(options) : rest(options)));\n"],"mappings":";;;;;;;;;AASA,MAAM,UAAU,OAAO,eAAe,MACpC,OAAO,YAAY,GAAG,GACtB,OAAO,UAAU,kBAAkB,CACrC;AAEA,MAAM,gBAAgB,OAAO,kBAAkB,OAAO;AA+BtD,MAAM,sBAAsB,SAA0B,gBAA8B;CAGlF,OAAO,eAAe,SAAS,WAAW,kBAAkB;EAC1D,cAAc;EACd,QAAQ,YACN,QAAQ,OAAO,SAAS,CAAC,GAAG,QAAQ,IAAI,SAAS,QAAQ,oBAAoB,GAAG,WAAW,CAAC;CAChG,CAAC;AACH;AAEA,MAAM,iBACJ,QACA,aACA,UACA,cAEA,OAAO,OAAO;CACZ;CACA,kBAAkB,WAChB,OAAO,KACL,WAAW,kBAAkB,YAAY;EACvC,MAAM,MAAM,IAAI,MAAM,QAAQ,GAAG;EAGjC,IACE,QAAQ,QACR,IAAI,aAAa,MACjB,IAAI,aAAa,MACjB,EAAE,IAAI,SAAS,UAAU,IAAI,KAAK,WAAW,GAAG,OAAO,EAAE,IAEzD,OAAO,OAAO,KACZ,IAAI,gBAAgB,gBAAgB,EAClC,QAAQ,IAAI,gBAAgB,gBAAgB;GAC1C;GACA,aAAa;EACf,CAAC,EACH,CAAC,CACH;EAEF,IAAI,WAAW;EAEf,IAAI,aAAa,KAAA,GACf,WAAW,kBAAkB,UAC3B,UACA,aACA,UAAU,SAAS,MAAM,QAAQ,GACnC;EAEF,IAAI,cAAc,KAAA,GAChB,WAAW,kBAAkB,UAAU,UAAU,qBAAqB,SAAS;EAGjF,OAAO,OAAO,QAAQ,QAAQ;CAChC,CAAC,GACD,WAAW,mBAAmB,WAC5B,OAAO,IAAI,aAAa;EACtB,MAAM,WAAW,OAAO,OAAO,cAAc,gBAAgB,WAAW;EAExE,OAAO,OAAO,OAAO,KACnB,OAAO,eAAe,gBAAgB,aAAa;GACjD,GAAG,OAAO,UAAU,iBAAiB,CAAC,EAAE;GACxC,UAAU;EACZ,CAAC,CACH;CACF,CAAC,CACH,GACA,WAAW,mBAAmB,WAC5B,OAAO,KACL,OAAO,KAAK,aACV,OAAO,WAAW,mBAAmB,SAAS,QAAQ,SAAS,WAAW,CAAC,CAC7E,GACA,OAAO,UAAU,UACf,OAAO,WAAW,mBAAmB,MAAM,OAAO,QAAQ,SAAS,WAAW,CAAC,CACjF,GACA,OAAO,cAAc,QAAQ,uBAAuB,UAAU,CAAC,GAAG,OAAO,WAAW,CAAC,CACvF,CACF,CACF;AACJ,CAAC;;;;;;;;AASH,MAAa,YAAY,YACvB,cACE,wCAAwC,cAAc,QAAQ,SAAS,EAAE,GAAG,cAAc,QAAQ,SAAS,EAAE,GAAG,cAAc,QAAQ,QAAQ,KAC9I,wBACA,QAAQ,QACV;;;;;;;AAQF,MAAa,QAAQ,YACnB,cACE,iDAAiD,cAAc,QAAQ,SAAS,EAAE,KAAK,QAAQ,aAAa,aAAa,KAAK,SAC9H,iBACA,QAAQ,UACR,cAAc,QAAQ,SAAS,CACjC;;;;;;;;;;;;;;AAeF,MAAa,WACX,aACA,YACG,MAAM,QAAQ,YAAY,QAAQ,aAAa,KAAA,IAAY,SAAS,OAAO,IAAI,KAAK,OAAO,CAAC,CAAC"}

package/dist/{CloudflareBrowser-Bj22nNUT.mjs → CloudflareBrowser-BSJRWmlW.mjs}

@@ -151,7 +151,23 @@ const navigationError = (message, cause) => PageCaptureNavigationError.make({
 	...cause === void 0 ? {} : { cause }
 });
 /** Preserve bounded remote diagnostics for the host without exposing their text to a model. */
-const privateResponseCause = (bodyText) => bodyText.length === 0 ? void 0 : new Error(boundedDiagnostic(bodyText));
+const privateResponseCause = (bodyText, response) => new Error(boundedDiagnostic(bodyText), { cause: {
+	provider: "cloudflare-browser-run",
+	httpStatus: response.status,
+	httpStatusSource: "browser-api",
+	headers: Object.fromEntries([
+		"content-type",
+		"cf-ray",
+		"x-request-id",
+		"retry-after",
+		"x-browser-ms-used"
+	].flatMap((name) => {
+		const value = response.headers.get(name);
+		return value === null ? [] : [[name, boundedDiagnostic(value)]];
+	})),
+	bodyCharacters: bodyText.length,
+	bodyTruncated: bodyText.length > MAX_DIAGNOSTIC_LENGTH
+} });
 /** Foreign cancellation must not keep a response Scope open indefinitely. */
 const cancelResponse = (cancel, warning) => Effect.tryPromise({
 	try: cancel,
@@ -225,10 +241,10 @@ const isJsonResponse = (response) => {
 	return mediaType === "application/json" || mediaType?.endsWith("+json") === true;
 };
 const parseOutput = (action, bodyText, response) => {
-	if (!isJsonResponse(response)) return protocolError("The Quick Action success response was not a JSON response envelope", privateResponseCause(bodyText));
+	if (!isJsonResponse(response)) return protocolError("The Quick Action success response was not a JSON response envelope", privateResponseCause(bodyText, response));
 	const envelope = decodeEnvelope(bodyText);
-	if (Option.isNone(envelope)) return protocolError("The JSON Quick Action response did not carry a valid response envelope", privateResponseCause(bodyText));
-	if (!envelope.value.success) return navigationError("The Quick Action reported a navigation failure", privateResponseCause(bodyText));
+	if (Option.isNone(envelope)) return protocolError("The JSON Quick Action response did not carry a valid response envelope", privateResponseCause(bodyText, response));
+	if (!envelope.value.success) return navigationError("The Quick Action reported a navigation failure", privateResponseCause(bodyText, response));
 	switch (action._tag) {
 		case "CapturePageContent":
 		case "CapturePageMarkdown":
@@ -280,7 +296,7 @@ const makeCapture = (browser, workersAi) => Effect.fn("BrowserQuickActionCapture
 	if (response.status === 429) {
 		const retryAfter = retryAfterMillis(response);
 		const reason = isQuotaMessage(bodyText) ? "quota" : "rate";
-		const cause = privateResponseCause(bodyText);
+		const cause = privateResponseCause(bodyText, response);
 		return yield* PageCaptureRateLimitedError.make({
 			implementation: browserQuickActionImplementation,
 			reason,
@@ -291,7 +307,7 @@ const makeCapture = (browser, workersAi) => Effect.fn("BrowserQuickActionCapture
 	}
 	if (!response.ok) {
 		const message = `The Quick Action answered HTTP ${response.status}`;
-		const cause = privateResponseCause(bodyText);
+		const cause = privateResponseCause(bodyText, response);
 		if (response.status >= 500) return yield* protocolError(message, cause);
 		return yield* navigationError(message, cause);
 	}
@@ -463,4 +479,4 @@ var CloudflareBrowser_exports = /* @__PURE__ */ __exportAll({
 //#endregion
 export { BrowserQuickActionWorkersAiPolicyError as a, browserQuickActionScreenshotLayer as c, BrowserQuickActionWorkersAi as i, browserQuickActionWorkersAiCaptureLayer as l, BrowserQuickActionBrowserBinding as n, CloudflareBrowser as o, BrowserQuickActionRpcError as r, browserQuickActionCaptureLayer as s, CloudflareBrowser_exports as t };
 
-//# sourceMappingURL=CloudflareBrowser-Bj22nNUT.mjs.map
+//# sourceMappingURL=CloudflareBrowser-BSJRWmlW.mjs.map

package/dist/CloudflareBrowser-BSJRWmlW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudflareBrowser-BSJRWmlW.mjs","names":[],"sources":["../src/internal/browser-quick-action.ts","../src/CloudflareBrowser.ts"],"sourcesContent":["/// <reference types=\"@cloudflare/workers-types\" />\n\nimport {\n  PageCapture,\n  PageCaptureInferenceUse,\n  PageCaptureInferencePolicyError,\n  PageCaptureNavigationError,\n  PageCaptureOutputLimitError,\n  PageCaptureProtocolError,\n  PageCaptureRateLimitedError,\n  PageCaptureResourceUse,\n  PageCaptureResult,\n  PageCaptureUnsupportedError,\n  PageContentCaptured,\n  PageLinksCaptured,\n  PageMarkdownCaptured,\n  PageScrapeCaptured,\n  PageStructuredCaptured,\n  type PageCaptureAction,\n  type PageCaptureCapture,\n  type PageCaptureError,\n  type PageCaptureOutput,\n  type PageCaptureRequest,\n} from \"@effect-agent/sandbox/PageCapture\";\nimport {\n  PageScreenshot,\n  PageScreenshotOutputLimitError,\n  PageScreenshotResult,\n  type PageScreenshotCapture,\n  type PageScreenshotError,\n  type PageScreenshotRequest,\n} from \"@effect-agent/sandbox/PageScreenshot\";\nimport { SandboxImplementation } from \"@effect-agent/sandbox/Sandbox\";\nimport { Context, Effect, Layer, Option, Schema } from \"effect\";\n\n/**\n * The Cloudflare Browser Run Quick Action `PageCapture` adapter (capability\n * spec §9.2). Each capture is one stateless `quickAction()` RPC on the\n * Wrangler `browser` binding: the platform renders the target in a managed\n * headless browser and returns one bounded output; the adapter holds no\n * session and no state between passes. The binding requires a Worker\n * compatibility date of `2026-03-24` or later, and local `wrangler dev` needs\n * remote mode (`\"remote\": true` on the binding) because `quickAction` has no\n * local implementation.\n *\n * Rendered output is untrusted, attacker-influenced content; this adapter\n * only bounds and types it. Deployment class `E` only: no durability claim.\n */\nexport const browserQuickActionImplementation = SandboxImplementation.make({\n  isolation: \"isolated\",\n  identity: \"cloudflare-browser-quick-action\",\n});\n\n/**\n * Effect-native client captured by the binding service. Its option types come\n * directly from the pinned Workers declarations rather than a local copy.\n */\nexport interface BrowserQuickActionClient {\n  readonly screenshot: (\n    options: BrowserRunScreenshotOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n  readonly content: (\n    options: BrowserRunContentOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n  readonly markdown: (\n    options: BrowserRunMarkdownOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n  readonly links: (\n    options: BrowserRunLinksOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n  readonly scrape: (\n    options: BrowserRunScrapeOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n  readonly json: (\n    options: BrowserRunJsonOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n}\n\n/** A native binding RPC rejected before it returned an HTTP response. */\nexport class BrowserQuickActionRpcError extends Schema.TaggedError<BrowserQuickActionRpcError>()(\n  \"BrowserQuickActionRpcError\",\n  {\n    action: Schema.Literals([\"screenshot\", \"content\", \"markdown\", \"links\", \"scrape\", \"json\"]),\n    cause: Schema.Defect(),\n  },\n) {}\n\nexport interface BrowserQuickActionCaptureOptions {\n  /** The resolved Wrangler `browser` binding (DEPLOY-014: supplied, never ambient). */\n  readonly browser: BrowserRun;\n}\n\n/** Host-owned browser binding authority, supplied explicitly at the composition root. */\nexport class BrowserQuickActionBrowserBinding extends Context.Service<\n  BrowserQuickActionBrowserBinding,\n  BrowserQuickActionClient\n>()(\"@effect-agent/platform-cloudflare/BrowserQuickActionBrowserBinding\") {\n  static layer(\n    options: BrowserQuickActionCaptureOptions,\n  ): Layer.Layer<BrowserQuickActionBrowserBinding> {\n    const browser = options.browser;\n\n    const invoke = Effect.fn(\"BrowserQuickActionBrowserBinding.invoke\")(function* (\n      action: \"screenshot\" | \"content\" | \"markdown\" | \"links\" | \"scrape\" | \"json\",\n      evaluate: () => Promise<Response>,\n    ): Effect.fn.Return<Response, BrowserQuickActionRpcError> {\n      return yield* Effect.tryPromise({\n        try: evaluate,\n        catch: (cause) => BrowserQuickActionRpcError.make({ action, cause }),\n      });\n    });\n\n    return Layer.succeed(BrowserQuickActionBrowserBinding)({\n      screenshot: (request) =>\n        invoke(\"screenshot\", () => browser.quickAction(\"screenshot\", request)),\n      content: (request) => invoke(\"content\", () => browser.quickAction(\"content\", request)),\n      markdown: (request) => invoke(\"markdown\", () => browser.quickAction(\"markdown\", request)),\n      links: (request) => invoke(\"links\", () => browser.quickAction(\"links\", request)),\n      scrape: (request) => invoke(\"scrape\", () => browser.quickAction(\"scrape\", request)),\n      json: (request) => invoke(\"json\", () => browser.quickAction(\"json\", request)),\n    });\n  }\n}\n\n/** Host-owned authorization and accounting for one Workers AI extraction. */\nexport interface BrowserQuickActionWorkersAiPolicy {\n  readonly authorizeAndAccount: (\n    request: PageCaptureRequest,\n  ) => Effect.Effect<void, BrowserQuickActionWorkersAiPolicyError>;\n}\n\n/** Host-only diagnostic for a denied or unaccounted Workers AI extraction. */\nexport class BrowserQuickActionWorkersAiPolicyError extends Schema.TaggedError<BrowserQuickActionWorkersAiPolicyError>()(\n  \"BrowserQuickActionWorkersAiPolicyError\",\n  {\n    reason: Schema.Literals([\"authorization\", \"accounting\"]),\n    message: Schema.String.check(Schema.isMaxLength(8_000)),\n    cause: Schema.optionalKey(Schema.Defect()),\n  },\n) {}\n\n/** Explicit host-owned authority and accounting for separately billed Workers AI extraction. */\nexport class BrowserQuickActionWorkersAi extends Context.Service<\n  BrowserQuickActionWorkersAi,\n  BrowserQuickActionWorkersAiPolicy\n>()(\"@effect-agent/platform-cloudflare/BrowserQuickActionWorkersAi\") {\n  static layer(\n    policy: BrowserQuickActionWorkersAiPolicy,\n  ): Layer.Layer<BrowserQuickActionWorkersAi> {\n    return Layer.succeed(BrowserQuickActionWorkersAi)(policy);\n  }\n}\n\nconst MAX_DIAGNOSTIC_LENGTH = 8_000;\nconst boundedDiagnostic = (message: string): string => message.slice(0, MAX_DIAGNOSTIC_LENGTH);\n\nconst QuickActionSuccessEnvelope = Schema.Struct({\n  success: Schema.Literal(true),\n  result: Schema.Json,\n});\n\nconst QuickActionErrorEnvelope = Schema.Struct({\n  success: Schema.Literal(false),\n  errors: Schema.Array(\n    Schema.Struct({\n      message: Schema.String,\n      code: Schema.optionalKey(Schema.Number),\n      detail: Schema.optionalKey(Schema.String),\n      path: Schema.optionalKey(Schema.String),\n    }),\n  ),\n  rawAiResponse: Schema.optionalKey(Schema.String),\n});\n\nconst QuickActionEnvelope = Schema.Union([QuickActionSuccessEnvelope, QuickActionErrorEnvelope]);\nconst decodeEnvelope = Schema.decodeUnknownOption(Schema.fromJsonString(QuickActionEnvelope));\n\n/** Project the schema-validated request onto Cloudflare's native common options. */\nconst quickActionCommonOptions = (request: PageCaptureRequest): BrowserRunCommonOptions => {\n  const options: BrowserRunBaseOptions = {};\n  const navigation = request.navigation;\n\n  if (navigation !== undefined) {\n    const goto: NonNullable<BrowserRunBaseOptions[\"gotoOptions\"]> = {};\n\n    if (navigation.waitUntil !== undefined) goto.waitUntil = navigation.waitUntil;\n    if (navigation.timeoutMillis !== undefined) goto.timeout = navigation.timeoutMillis;\n    if (Object.keys(goto).length > 0) options.gotoOptions = goto;\n    if (navigation.waitForSelector !== undefined) {\n      options.waitForSelector = {\n        selector: navigation.waitForSelector.selector,\n        ...(navigation.waitForSelector.timeoutMillis === undefined\n          ? {}\n          : { timeout: navigation.waitForSelector.timeoutMillis }),\n      };\n    }\n  }\n  if (request.viewport !== undefined) {\n    options.viewport = { width: request.viewport.width, height: request.viewport.height };\n  }\n  if (request.resourcePolicy !== undefined) {\n    if (request.resourcePolicy.rejectResourceTypes !== undefined) {\n      options.rejectResourceTypes = [...request.resourcePolicy.rejectResourceTypes];\n    }\n    if (request.resourcePolicy.allowRequestPatterns !== undefined) {\n      options.allowRequestPattern = [...request.resourcePolicy.allowRequestPatterns];\n    }\n  }\n\n  return request.target._tag === \"PageUrlTarget\"\n    ? { ...options, url: request.target.url }\n    : { ...options, html: request.target.html };\n};\n\n/** Dispatch through Cloudflare's native action-specific overloads. */\nconst executeQuickAction = (\n  browser: BrowserQuickActionClient,\n  request: PageCaptureRequest,\n): Effect.Effect<Response, BrowserQuickActionRpcError> => {\n  const options = quickActionCommonOptions(request);\n\n  switch (request.action._tag) {\n    case \"CapturePageContent\": {\n      return browser.content(options);\n    }\n    case \"CapturePageMarkdown\": {\n      return browser.markdown(options);\n    }\n    case \"CapturePageLinks\": {\n      return browser.links({\n        ...options,\n        ...(request.action.visibleLinksOnly === undefined\n          ? {}\n          : { visibleLinksOnly: request.action.visibleLinksOnly }),\n      });\n    }\n    case \"CapturePageScrape\": {\n      return browser.scrape({\n        ...options,\n        elements: request.action.selectors.map((selector) => ({ selector })),\n      });\n    }\n    case \"CapturePageStructured\": {\n      return browser.json({\n        ...options,\n        response_format: {\n          type: \"json_schema\",\n          json_schema: request.action.responseFormat,\n        },\n        ...(request.action.prompt === undefined ? {} : { prompt: request.action.prompt }),\n      });\n    }\n  }\n};\n\nconst protocolError = (message: string, cause?: unknown): PageCaptureProtocolError =>\n  PageCaptureProtocolError.make({\n    implementation: browserQuickActionImplementation,\n    message: boundedDiagnostic(message),\n    ...(cause === undefined ? {} : { cause }),\n  });\n\nconst navigationError = (message: string, cause?: unknown): PageCaptureNavigationError =>\n  PageCaptureNavigationError.make({\n    implementation: browserQuickActionImplementation,\n    message: boundedDiagnostic(message),\n    ...(cause === undefined ? {} : { cause }),\n  });\n\n/** Preserve bounded remote diagnostics for the host without exposing their text to a model. */\nconst privateResponseCause = (bodyText: string, response: Response): Error =>\n  new Error(boundedDiagnostic(bodyText), {\n    cause: {\n      provider: \"cloudflare-browser-run\",\n      httpStatus: response.status,\n      httpStatusSource: \"browser-api\",\n      headers: Object.fromEntries(\n        [\"content-type\", \"cf-ray\", \"x-request-id\", \"retry-after\", \"x-browser-ms-used\"].flatMap(\n          (name) => {\n            const value = response.headers.get(name);\n\n            return value === null ? [] : [[name, boundedDiagnostic(value)]];\n          },\n        ),\n      ),\n      bodyCharacters: bodyText.length,\n      bodyTruncated: bodyText.length > MAX_DIAGNOSTIC_LENGTH,\n    },\n  });\n\n/** Foreign cancellation must not keep a response Scope open indefinitely. */\nconst cancelResponse = (cancel: () => Promise<void>, warning: string): Effect.Effect<void> =>\n  Effect.tryPromise({ try: cancel, catch: () => undefined }).pipe(\n    Effect.interruptible,\n    Effect.timeoutOrElse({\n      duration: \"1 second\",\n      orElse: () => Effect.fail(undefined),\n    }),\n    Effect.catch(() => Effect.logWarning(warning)),\n  );\n\nconst releaseResponseReader = (\n  reader: ReadableStreamDefaultReader<Uint8Array>,\n): Effect.Effect<void> =>\n  cancelResponse(() => reader.cancel(), \"Canceling the Quick Action response failed\").pipe(\n    Effect.ensuring(\n      Effect.try({\n        try: () => reader.releaseLock(),\n        catch: (cause) => protocolError(\"Releasing the Quick Action response failed\", cause),\n      }).pipe(Effect.catch((error) => Effect.logWarning(error.message))),\n    ),\n  );\n\nconst readBoundedResponse = Effect.fn(\"BrowserQuickActionCapture.readResponse\")(function* (\n  response: Response,\n  request: PageCaptureRequest,\n) {\n  const body = response.body;\n\n  if (body === null) return \"\";\n\n  const reader = yield* Effect.acquireRelease(\n    Effect.try({\n      try: () => body.getReader(),\n      catch: (cause) => protocolError(\"Opening the Quick Action response failed\", cause),\n    }),\n    releaseResponseReader,\n  );\n\n  const decoder = new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: false });\n  let observedBytes = 0;\n  let bodyText = \"\";\n\n  while (true) {\n    const chunk = yield* Effect.tryPromise({\n      try: () => reader.read(),\n      catch: (cause) => protocolError(\"Reading the Quick Action response failed\", cause),\n    });\n\n    if (chunk.done) break;\n\n    observedBytes += chunk.value.byteLength;\n    if (observedBytes > request.limits.maxOutputBytes) {\n      return yield* PageCaptureOutputLimitError.make({\n        implementation: browserQuickActionImplementation,\n        limit: request.limits.maxOutputBytes,\n        observed: observedBytes,\n      });\n    }\n\n    bodyText += yield* Effect.try({\n      try: () => decoder.decode(chunk.value, { stream: true }),\n      catch: (cause) => protocolError(\"Decoding the Quick Action response failed\", cause),\n    });\n  }\n\n  return (\n    bodyText +\n    (yield* Effect.try({\n      try: () => decoder.decode(),\n      catch: (cause) => protocolError(\"Decoding the Quick Action response failed\", cause),\n    }))\n  );\n}, Effect.scoped);\n\n/**\n * Retry-After arrives in whole seconds; a non-integer form (an HTTP date) is\n * dropped rather than guessed at.\n */\nconst retryAfterMillis = (response: Response): number | undefined => {\n  const header = response.headers.get(\"Retry-After\");\n\n  if (header === null) return undefined;\n  const seconds = Number(header);\n\n  if (!Number.isSafeInteger(seconds) || seconds < 0) return undefined;\n  const millis = seconds * 1_000;\n\n  return Number.isSafeInteger(millis) ? millis : undefined;\n};\n\nconst browserMillis = (response: Response): number | undefined => {\n  const header = response.headers.get(\"X-Browser-Ms-Used\");\n\n  if (header === null) return undefined;\n  const millis = Number(header);\n\n  return Number.isSafeInteger(millis) && millis >= 0 ? millis : undefined;\n};\n\n/** Only trusted response metadata chooses transport framing; page text never does. */\nconst isJsonResponse = (response: Response): boolean => {\n  const contentType = response.headers.get(\"Content-Type\");\n\n  if (contentType === null) return false;\n  const mediaType = contentType.split(\";\", 1)[0]?.trim().toLowerCase();\n\n  return mediaType === \"application/json\" || mediaType?.endsWith(\"+json\") === true;\n};\n\nconst parseOutput = (\n  action: PageCaptureAction,\n  bodyText: string,\n  response: Response,\n): PageCaptureOutput | PageCaptureNavigationError | PageCaptureProtocolError => {\n  if (!isJsonResponse(response)) {\n    return protocolError(\n      \"The Quick Action success response was not a JSON response envelope\",\n      privateResponseCause(bodyText, response),\n    );\n  }\n  const envelope = decodeEnvelope(bodyText);\n\n  if (Option.isNone(envelope)) {\n    return protocolError(\n      \"The JSON Quick Action response did not carry a valid response envelope\",\n      privateResponseCause(bodyText, response),\n    );\n  }\n  if (!envelope.value.success) {\n    return navigationError(\n      \"The Quick Action reported a navigation failure\",\n      privateResponseCause(bodyText, response),\n    );\n  }\n  switch (action._tag) {\n    case \"CapturePageContent\":\n    case \"CapturePageMarkdown\": {\n      if (typeof envelope.value.result !== \"string\") {\n        return protocolError(\"The Quick Action envelope carried a non-text result\");\n      }\n\n      return action._tag === \"CapturePageContent\"\n        ? PageContentCaptured.make({ html: envelope.value.result })\n        : PageMarkdownCaptured.make({ markdown: envelope.value.result });\n    }\n    case \"CapturePageLinks\": {\n      const decoded = Schema.decodeUnknownOption(PageLinksCaptured)({\n        _tag: \"PageLinksCaptured\",\n        links: envelope.value.result,\n      });\n\n      if (Option.isNone(decoded)) {\n        return protocolError(\"The links Quick Action did not return a bounded array of valid URLs\");\n      }\n\n      return decoded.value;\n    }\n    case \"CapturePageScrape\": {\n      const decoded = Schema.decodeUnknownOption(PageScrapeCaptured)({\n        _tag: \"PageScrapeCaptured\",\n        groups: envelope.value.result,\n      });\n\n      if (Option.isNone(decoded)) {\n        return protocolError(\n          \"The scrape Quick Action did not return bounded grouped element records\",\n        );\n      }\n\n      return decoded.value;\n    }\n    case \"CapturePageStructured\": {\n      return PageStructuredCaptured.make({ value: envelope.value.result });\n    }\n  }\n};\n\nconst isQuotaMessage = (text: string): boolean => /time limit|daily|quota/i.test(text);\n\nconst makeCapture = (\n  browser: BrowserQuickActionClient,\n  workersAi?: BrowserQuickActionWorkersAiPolicy,\n): PageCaptureCapture =>\n  Effect.fn(\"BrowserQuickActionCapture.capture\")(function* (\n    request: PageCaptureRequest,\n  ): Effect.fn.Return<PageCaptureResult, PageCaptureError> {\n    if (request.engine !== \"chromium\") {\n      return yield* PageCaptureUnsupportedError.make({\n        implementation: browserQuickActionImplementation,\n        feature: \"engine\",\n        message:\n          \"The browser binding's quickAction() exposes no engine selector; kitesurf requires the REST or CDP surface\",\n      });\n    }\n\n    const usesWorkersAi = request.action._tag === \"CapturePageStructured\";\n\n    if (usesWorkersAi) {\n      if (workersAi === undefined) {\n        return yield* PageCaptureUnsupportedError.make({\n          implementation: browserQuickActionImplementation,\n          feature: \"action\",\n          message:\n            \"Structured capture invokes separately billed Workers AI and requires an explicit authorization and accounting policy\",\n        });\n      }\n      yield* workersAi.authorizeAndAccount(request).pipe(\n        Effect.mapError((cause) =>\n          PageCaptureInferencePolicyError.make({\n            implementation: browserQuickActionImplementation,\n            provider: \"cloudflare-workers-ai\",\n            reason: cause.reason,\n            message:\n              cause.reason === \"authorization\"\n                ? \"Workers AI extraction was not authorized\"\n                : \"Workers AI extraction could not be accounted for\",\n            cause,\n          }),\n        ),\n      );\n    }\n\n    const response = yield* executeQuickAction(browser, request).pipe(\n      Effect.mapError((error) =>\n        protocolError(\"The browser binding rejected the Quick Action\", error.cause),\n      ),\n    );\n\n    const bodyText = yield* readBoundedResponse(response, request);\n\n    if (response.status === 429) {\n      const retryAfter = retryAfterMillis(response);\n      const reason = isQuotaMessage(bodyText) ? \"quota\" : \"rate\";\n      const cause = privateResponseCause(bodyText, response);\n\n      return yield* PageCaptureRateLimitedError.make({\n        implementation: browserQuickActionImplementation,\n        reason,\n        ...(retryAfter === undefined ? {} : { retryAfterMillis: retryAfter }),\n        ...(cause === undefined ? {} : { cause }),\n        message:\n          reason === \"quota\"\n            ? \"The Quick Action exceeded its browser quota\"\n            : \"The Quick Action was rate limited\",\n      });\n    }\n    if (!response.ok) {\n      const message = `The Quick Action answered HTTP ${response.status}`;\n      const cause = privateResponseCause(bodyText, response);\n\n      if (response.status >= 500) {\n        return yield* protocolError(message, cause);\n      }\n\n      return yield* navigationError(message, cause);\n    }\n    const output = parseOutput(request.action, bodyText, response);\n\n    if (\n      output._tag === \"PageCaptureNavigationError\" ||\n      output._tag === \"PageCaptureProtocolError\"\n    ) {\n      return yield* output;\n    }\n    const millis = browserMillis(response);\n\n    return PageCaptureResult.make({\n      implementation: browserQuickActionImplementation,\n      output,\n      resourceUse: PageCaptureResourceUse.make({\n        ...(millis === undefined ? {} : { browserMillis: millis }),\n        ...(usesWorkersAi\n          ? {\n              inference: PageCaptureInferenceUse.make({\n                provider: \"cloudflare-workers-ai\",\n                modelCalls: 1,\n              }),\n            }\n          : {}),\n      }),\n    });\n  });\n\n/**\n * Ordinary Quick Actions require host-owned browser binding authority. Workers\n * AI stays unavailable unless the host deliberately selects its separate Layer.\n */\nexport const browserQuickActionCaptureLayer = (): Layer.Layer<\n  PageCapture,\n  never,\n  BrowserQuickActionBrowserBinding\n> =>\n  Layer.effect(\n    PageCapture,\n    Effect.map(BrowserQuickActionBrowserBinding, (browser) =>\n      PageCapture.of({ capture: makeCapture(browser) }),\n    ),\n  );\n\n/** Structured Quick Actions require host-owned browser and Workers AI authority. */\nexport const browserQuickActionWorkersAiCaptureLayer = (): Layer.Layer<\n  PageCapture,\n  never,\n  BrowserQuickActionBrowserBinding | BrowserQuickActionWorkersAi\n> =>\n  Layer.effect(\n    PageCapture,\n    Effect.gen(function* () {\n      const browser = yield* BrowserQuickActionBrowserBinding;\n      const workersAi = yield* BrowserQuickActionWorkersAi;\n\n      return PageCapture.of({ capture: makeCapture(browser, workersAi) });\n    }),\n  );\n\n/** Host-owned Quick Action binding and optional, separately billed extraction authority. */\nexport interface CloudflareBrowserOptions extends BrowserQuickActionCaptureOptions {\n  readonly workersAi?: BrowserQuickActionWorkersAiPolicy;\n}\n\n/** Compose WebCapture handlers with the Cloudflare Quick Action adapter. */\nexport const CloudflareBrowser = {\n  /**\n   * Supply a WebCapture definition and the resolved Worker browser binding.\n   * Supports capture, scrape, and extraction definitions without importing capabilities.\n   * Only PageCapture is provided; other handler requirements and errors stay visible.\n   * Extraction fails closed unless workersAi explicitly authorizes and accounts for it.\n   * Capture limits, typed failures, tracing, and scoped response cleanup are unchanged.\n   */\n  layer: <A, E, R>(\n    definition: { readonly handlers: Layer.Layer<A, E, R> },\n    options: CloudflareBrowserOptions,\n  ): Layer.Layer<A, E, Exclude<R, PageCapture>> => {\n    const capture =\n      options.workersAi === undefined\n        ? browserQuickActionCaptureLayer()\n        : browserQuickActionWorkersAiCaptureLayer().pipe(\n            Layer.provide(BrowserQuickActionWorkersAi.layer(options.workersAi)),\n          );\n\n    return definition.handlers.pipe(\n      Layer.provide(capture.pipe(Layer.provide(BrowserQuickActionBrowserBinding.layer(options)))),\n    );\n  },\n};\n\nconst screenshotOptions = (request: PageScreenshotRequest): BrowserRunScreenshotOptions => {\n  const options: BrowserRunBaseOptions = {};\n\n  if (\n    request.navigation?.waitUntil !== undefined ||\n    request.navigation?.timeoutMillis !== undefined\n  ) {\n    options.gotoOptions = {\n      ...(request.navigation.waitUntil === undefined\n        ? {}\n        : { waitUntil: request.navigation.waitUntil }),\n      ...(request.navigation.timeoutMillis === undefined\n        ? {}\n        : { timeout: request.navigation.timeoutMillis }),\n    };\n  }\n  if (request.navigation?.waitForSelector !== undefined) {\n    options.waitForSelector = {\n      selector: request.navigation.waitForSelector.selector,\n      ...(request.navigation.waitForSelector.timeoutMillis === undefined\n        ? {}\n        : { timeout: request.navigation.waitForSelector.timeoutMillis }),\n    };\n  }\n  if (request.viewport !== undefined) {\n    options.viewport = { width: request.viewport.width, height: request.viewport.height };\n  }\n  if (request.resourcePolicy?.rejectResourceTypes !== undefined) {\n    options.rejectResourceTypes = [...request.resourcePolicy.rejectResourceTypes];\n  }\n  if (request.resourcePolicy?.allowRequestPatterns !== undefined) {\n    options.allowRequestPattern = [...request.resourcePolicy.allowRequestPatterns];\n  }\n\n  return {\n    ...options,\n    ...(request.target._tag === \"PageUrlTarget\"\n      ? { url: request.target.url }\n      : { html: request.target.html }),\n    screenshotOptions: { type: \"png\", encoding: \"binary\", fullPage: request.fullPage },\n  };\n};\n\nconst cancelBody = (body: ReadableStream<Uint8Array>): Effect.Effect<void> =>\n  cancelResponse(() => body.cancel(), \"Canceling the screenshot response failed\");\n\nconst releaseScreenshotReader = (\n  reader: ReadableStreamDefaultReader<Uint8Array>,\n): Effect.Effect<void> =>\n  cancelResponse(() => reader.cancel(), \"Canceling the screenshot response failed\").pipe(\n    Effect.ensuring(\n      Effect.try({\n        try: () => reader.releaseLock(),\n        catch: () => undefined,\n      }).pipe(Effect.catch(() => Effect.logWarning(\"Releasing the screenshot response failed\"))),\n    ),\n  );\n\nconst pngResponse = (response: Response): boolean =>\n  response.headers.get(\"Content-Type\")?.split(\";\", 1)[0]?.trim().toLowerCase() === \"image/png\";\n\nconst declaredLength = (response: Response): number | undefined => {\n  const raw = response.headers.get(\"Content-Length\");\n\n  if (raw === null || !/^(0|[1-9][0-9]*)$/.test(raw)) return undefined;\n  const length = Number(raw);\n\n  return Number.isSafeInteger(length) ? length : undefined;\n};\n\nconst readScreenshot = Effect.fn(\"BrowserQuickActionScreenshot.read\")(function* (\n  response: Response,\n  request: PageScreenshotRequest,\n) {\n  const body = response.body;\n\n  if (body === null) {\n    return yield* protocolError(\"The screenshot response had no body\");\n  }\n  if (!pngResponse(response)) {\n    yield* cancelBody(body);\n\n    return yield* protocolError(\"The screenshot response was not image/png\");\n  }\n  const length = declaredLength(response);\n\n  if (length !== undefined && length > request.limits.maxOutputBytes) {\n    yield* cancelBody(body);\n\n    return yield* PageScreenshotOutputLimitError.make({\n      implementation: browserQuickActionImplementation,\n      limit: request.limits.maxOutputBytes,\n      observed: length,\n    });\n  }\n\n  const reader = yield* Effect.acquireRelease(\n    Effect.try({\n      try: () => body.getReader(),\n      catch: (cause) => protocolError(\"Opening the screenshot response failed\", cause),\n    }),\n    releaseScreenshotReader,\n  );\n\n  const chunks: Array<Uint8Array> = [];\n  let observed = 0;\n\n  while (true) {\n    const next = yield* Effect.tryPromise({\n      try: () => reader.read(),\n      catch: (cause) => protocolError(\"Reading the screenshot response failed\", cause),\n    });\n\n    if (next.done) break;\n    observed += next.value.byteLength;\n    if (observed > request.limits.maxOutputBytes) {\n      return yield* PageScreenshotOutputLimitError.make({\n        implementation: browserQuickActionImplementation,\n        limit: request.limits.maxOutputBytes,\n        observed,\n      });\n    }\n    chunks.push(next.value);\n  }\n  const bytes = new Uint8Array(observed);\n  let offset = 0;\n\n  for (const chunk of chunks) {\n    bytes.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n\n  return bytes;\n}, Effect.scoped);\n\nconst makeScreenshot = (browser: BrowserQuickActionClient): PageScreenshotCapture =>\n  Effect.fn(\"BrowserQuickActionScreenshot.capture\")(function* (\n    request: PageScreenshotRequest,\n  ): Effect.fn.Return<PageScreenshotResult, PageScreenshotError> {\n    if (request.engine !== \"chromium\") {\n      return yield* PageCaptureUnsupportedError.make({\n        implementation: browserQuickActionImplementation,\n        feature: \"engine\",\n        message: \"The browser binding's screenshot action exposes no engine selector\",\n      });\n    }\n\n    const response = yield* browser\n      .screenshot(screenshotOptions(request))\n      .pipe(\n        Effect.mapError((error) =>\n          protocolError(\"The browser binding rejected the screenshot\", error.cause),\n        ),\n      );\n\n    if (response.status === 429) {\n      const body = response.body;\n\n      if (body !== null) yield* cancelBody(body);\n\n      return yield* PageCaptureRateLimitedError.make({\n        implementation: browserQuickActionImplementation,\n        reason: \"rate\",\n        ...(retryAfterMillis(response) === undefined\n          ? {}\n          : { retryAfterMillis: retryAfterMillis(response) }),\n        message: \"The screenshot Quick Action was rate limited\",\n      });\n    }\n    if (!response.ok) {\n      const body = response.body;\n\n      if (body !== null) yield* cancelBody(body);\n      const message = `The screenshot Quick Action answered HTTP ${response.status}`;\n\n      return yield* response.status >= 500 ? protocolError(message) : navigationError(message);\n    }\n    const bytes = yield* readScreenshot(response, request);\n\n    return PageScreenshotResult.make({\n      implementation: browserQuickActionImplementation,\n      mediaType: \"image/png\",\n      bytes,\n    });\n  });\n\n/** Native Browser Run screenshot adapter. It retains PNG bytes only for the caller's result. */\nexport const browserQuickActionScreenshotLayer = (): Layer.Layer<\n  PageScreenshot,\n  never,\n  BrowserQuickActionBrowserBinding\n> =>\n  Layer.effect(\n    PageScreenshot,\n    Effect.map(BrowserQuickActionBrowserBinding, (browser) =>\n      PageScreenshot.of({ capture: makeScreenshot(browser) }),\n    ),\n  );\n","/** Public CloudflareBrowser API. Implementation helpers remain private. */\nexport {\n  BrowserQuickActionBrowserBinding,\n  BrowserQuickActionRpcError,\n  BrowserQuickActionWorkersAi,\n  BrowserQuickActionWorkersAiPolicyError,\n  browserQuickActionCaptureLayer,\n  browserQuickActionWorkersAiCaptureLayer,\n  browserQuickActionScreenshotLayer,\n  CloudflareBrowser,\n  type BrowserQuickActionCaptureOptions,\n  type BrowserQuickActionClient,\n  type BrowserQuickActionWorkersAiPolicy,\n  type CloudflareBrowserOptions,\n} from \"./internal/browser-quick-action.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAgDA,MAAa,mCAAmC,sBAAsB,KAAK;CACzE,WAAW;CACX,UAAU;AACZ,CAAC;;AA4BD,IAAa,6BAAb,cAAgD,OAAO,YAAwC,CAAC,CAC9F,8BACA;CACE,QAAQ,OAAO,SAAS;EAAC;EAAc;EAAW;EAAY;EAAS;EAAU;CAAM,CAAC;CACxF,OAAO,OAAO,OAAO;AACvB,CACF,CAAC,CAAC,CAAC;;AAQH,IAAa,mCAAb,MAAa,yCAAyC,QAAQ,QAG5D,CAAC,CAAC,oEAAoE,CAAC,CAAC;CACxE,OAAO,MACL,SAC+C;EAC/C,MAAM,UAAU,QAAQ;EAExB,MAAM,SAAS,OAAO,GAAG,yCAAyC,CAAC,CAAC,WAClE,QACA,UACwD;GACxD,OAAO,OAAO,OAAO,WAAW;IAC9B,KAAK;IACL,QAAQ,UAAU,2BAA2B,KAAK;KAAE;KAAQ;IAAM,CAAC;GACrE,CAAC;EACH,CAAC;EAED,OAAO,MAAM,QAAQ,gCAAgC,CAAC,CAAC;GACrD,aAAa,YACX,OAAO,oBAAoB,QAAQ,YAAY,cAAc,OAAO,CAAC;GACvE,UAAU,YAAY,OAAO,iBAAiB,QAAQ,YAAY,WAAW,OAAO,CAAC;GACrF,WAAW,YAAY,OAAO,kBAAkB,QAAQ,YAAY,YAAY,OAAO,CAAC;GACxF,QAAQ,YAAY,OAAO,eAAe,QAAQ,YAAY,SAAS,OAAO,CAAC;GAC/E,SAAS,YAAY,OAAO,gBAAgB,QAAQ,YAAY,UAAU,OAAO,CAAC;GAClF,OAAO,YAAY,OAAO,cAAc,QAAQ,YAAY,QAAQ,OAAO,CAAC;EAC9E,CAAC;CACH;AACF;;AAUA,IAAa,yCAAb,cAA4D,OAAO,YAAoD,CAAC,CACtH,0CACA;CACE,QAAQ,OAAO,SAAS,CAAC,iBAAiB,YAAY,CAAC;CACvD,SAAS,OAAO,OAAO,MAAM,OAAO,YAAY,GAAK,CAAC;CACtD,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;AAC3C,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,8BAAb,MAAa,oCAAoC,QAAQ,QAGvD,CAAC,CAAC,+DAA+D,CAAC,CAAC;CACnE,OAAO,MACL,QAC0C;EAC1C,OAAO,MAAM,QAAQ,2BAA2B,CAAC,CAAC,MAAM;CAC1D;AACF;AAEA,MAAM,wBAAwB;AAC9B,MAAM,qBAAqB,YAA4B,QAAQ,MAAM,GAAG,qBAAqB;AAE7F,MAAM,6BAA6B,OAAO,OAAO;CAC/C,SAAS,OAAO,QAAQ,IAAI;CAC5B,QAAQ,OAAO;AACjB,CAAC;AAED,MAAM,2BAA2B,OAAO,OAAO;CAC7C,SAAS,OAAO,QAAQ,KAAK;CAC7B,QAAQ,OAAO,MACb,OAAO,OAAO;EACZ,SAAS,OAAO;EAChB,MAAM,OAAO,YAAY,OAAO,MAAM;EACtC,QAAQ,OAAO,YAAY,OAAO,MAAM;EACxC,MAAM,OAAO,YAAY,OAAO,MAAM;CACxC,CAAC,CACH;CACA,eAAe,OAAO,YAAY,OAAO,MAAM;AACjD,CAAC;AAED,MAAM,sBAAsB,OAAO,MAAM,CAAC,4BAA4B,wBAAwB,CAAC;AAC/F,MAAM,iBAAiB,OAAO,oBAAoB,OAAO,eAAe,mBAAmB,CAAC;;AAG5F,MAAM,4BAA4B,YAAyD;CACzF,MAAM,UAAiC,CAAC;CACxC,MAAM,aAAa,QAAQ;CAE3B,IAAI,eAAe,KAAA,GAAW;EAC5B,MAAM,OAA0D,CAAC;EAEjE,IAAI,WAAW,cAAc,KAAA,GAAW,KAAK,YAAY,WAAW;EACpE,IAAI,WAAW,kBAAkB,KAAA,GAAW,KAAK,UAAU,WAAW;EACtE,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,SAAS,GAAG,QAAQ,cAAc;EACxD,IAAI,WAAW,oBAAoB,KAAA,GACjC,QAAQ,kBAAkB;GACxB,UAAU,WAAW,gBAAgB;GACrC,GAAI,WAAW,gBAAgB,kBAAkB,KAAA,IAC7C,CAAC,IACD,EAAE,SAAS,WAAW,gBAAgB,cAAc;EAC1D;CAEJ;CACA,IAAI,QAAQ,aAAa,KAAA,GACvB,QAAQ,WAAW;EAAE,OAAO,QAAQ,SAAS;EAAO,QAAQ,QAAQ,SAAS;CAAO;CAEtF,IAAI,QAAQ,mBAAmB,KAAA,GAAW;EACxC,IAAI,QAAQ,eAAe,wBAAwB,KAAA,GACjD,QAAQ,sBAAsB,CAAC,GAAG,QAAQ,eAAe,mBAAmB;EAE9E,IAAI,QAAQ,eAAe,yBAAyB,KAAA,GAClD,QAAQ,sBAAsB,CAAC,GAAG,QAAQ,eAAe,oBAAoB;CAEjF;CAEA,OAAO,QAAQ,OAAO,SAAS,kBAC3B;EAAE,GAAG;EAAS,KAAK,QAAQ,OAAO;CAAI,IACtC;EAAE,GAAG;EAAS,MAAM,QAAQ,OAAO;CAAK;AAC9C;;AAGA,MAAM,sBACJ,SACA,YACwD;CACxD,MAAM,UAAU,yBAAyB,OAAO;CAEhD,QAAQ,QAAQ,OAAO,MAAvB;EACE,KAAK,sBACH,OAAO,QAAQ,QAAQ,OAAO;EAEhC,KAAK,uBACH,OAAO,QAAQ,SAAS,OAAO;EAEjC,KAAK,oBACH,OAAO,QAAQ,MAAM;GACnB,GAAG;GACH,GAAI,QAAQ,OAAO,qBAAqB,KAAA,IACpC,CAAC,IACD,EAAE,kBAAkB,QAAQ,OAAO,iBAAiB;EAC1D,CAAC;EAEH,KAAK,qBACH,OAAO,QAAQ,OAAO;GACpB,GAAG;GACH,UAAU,QAAQ,OAAO,UAAU,KAAK,cAAc,EAAE,SAAS,EAAE;EACrE,CAAC;EAEH,KAAK,yBACH,OAAO,QAAQ,KAAK;GAClB,GAAG;GACH,iBAAiB;IACf,MAAM;IACN,aAAa,QAAQ,OAAO;GAC9B;GACA,GAAI,QAAQ,OAAO,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO,OAAO;EACjF,CAAC;CAEL;AACF;AAEA,MAAM,iBAAiB,SAAiB,UACtC,yBAAyB,KAAK;CAC5B,gBAAgB;CAChB,SAAS,kBAAkB,OAAO;CAClC,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;AACzC,CAAC;AAEH,MAAM,mBAAmB,SAAiB,UACxC,2BAA2B,KAAK;CAC9B,gBAAgB;CAChB,SAAS,kBAAkB,OAAO;CAClC,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;AACzC,CAAC;;AAGH,MAAM,wBAAwB,UAAkB,aAC9C,IAAI,MAAM,kBAAkB,QAAQ,GAAG,EACrC,OAAO;CACL,UAAU;CACV,YAAY,SAAS;CACrB,kBAAkB;CAClB,SAAS,OAAO,YACd;EAAC;EAAgB;EAAU;EAAgB;EAAe;CAAmB,CAAC,CAAC,SAC5E,SAAS;EACR,MAAM,QAAQ,SAAS,QAAQ,IAAI,IAAI;EAEvC,OAAO,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,kBAAkB,KAAK,CAAC,CAAC;CAChE,CACF,CACF;CACA,gBAAgB,SAAS;CACzB,eAAe,SAAS,SAAS;AACnC,EACF,CAAC;;AAGH,MAAM,kBAAkB,QAA6B,YACnD,OAAO,WAAW;CAAE,KAAK;CAAQ,aAAa,KAAA;AAAU,CAAC,CAAC,CAAC,KACzD,OAAO,eACP,OAAO,cAAc;CACnB,UAAU;CACV,cAAc,OAAO,KAAK,KAAA,CAAS;AACrC,CAAC,GACD,OAAO,YAAY,OAAO,WAAW,OAAO,CAAC,CAC/C;AAEF,MAAM,yBACJ,WAEA,qBAAqB,OAAO,OAAO,GAAG,4CAA4C,CAAC,CAAC,KAClF,OAAO,SACL,OAAO,IAAI;CACT,WAAW,OAAO,YAAY;CAC9B,QAAQ,UAAU,cAAc,8CAA8C,KAAK;AACrF,CAAC,CAAC,CAAC,KAAK,OAAO,OAAO,UAAU,OAAO,WAAW,MAAM,OAAO,CAAC,CAAC,CACnE,CACF;AAEF,MAAM,sBAAsB,OAAO,GAAG,wCAAwC,CAAC,CAAC,WAC9E,UACA,SACA;CACA,MAAM,OAAO,SAAS;CAEtB,IAAI,SAAS,MAAM,OAAO;CAE1B,MAAM,SAAS,OAAO,OAAO,eAC3B,OAAO,IAAI;EACT,WAAW,KAAK,UAAU;EAC1B,QAAQ,UAAU,cAAc,4CAA4C,KAAK;CACnF,CAAC,GACD,qBACF;CAEA,MAAM,UAAU,IAAI,YAAY,SAAS;EAAE,OAAO;EAAM,WAAW;CAAM,CAAC;CAC1E,IAAI,gBAAgB;CACpB,IAAI,WAAW;CAEf,OAAO,MAAM;EACX,MAAM,QAAQ,OAAO,OAAO,WAAW;GACrC,WAAW,OAAO,KAAK;GACvB,QAAQ,UAAU,cAAc,4CAA4C,KAAK;EACnF,CAAC;EAED,IAAI,MAAM,MAAM;EAEhB,iBAAiB,MAAM,MAAM;EAC7B,IAAI,gBAAgB,QAAQ,OAAO,gBACjC,OAAO,OAAO,4BAA4B,KAAK;GAC7C,gBAAgB;GAChB,OAAO,QAAQ,OAAO;GACtB,UAAU;EACZ,CAAC;EAGH,YAAY,OAAO,OAAO,IAAI;GAC5B,WAAW,QAAQ,OAAO,MAAM,OAAO,EAAE,QAAQ,KAAK,CAAC;GACvD,QAAQ,UAAU,cAAc,6CAA6C,KAAK;EACpF,CAAC;CACH;CAEA,OACE,YACC,OAAO,OAAO,IAAI;EACjB,WAAW,QAAQ,OAAO;EAC1B,QAAQ,UAAU,cAAc,6CAA6C,KAAK;CACpF,CAAC;AAEL,GAAG,OAAO,MAAM;;;;;AAMhB,MAAM,oBAAoB,aAA2C;CACnE,MAAM,SAAS,SAAS,QAAQ,IAAI,aAAa;CAEjD,IAAI,WAAW,MAAM,OAAO,KAAA;CAC5B,MAAM,UAAU,OAAO,MAAM;CAE7B,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,GAAG,OAAO,KAAA;CAC1D,MAAM,SAAS,UAAU;CAEzB,OAAO,OAAO,cAAc,MAAM,IAAI,SAAS,KAAA;AACjD;AAEA,MAAM,iBAAiB,aAA2C;CAChE,MAAM,SAAS,SAAS,QAAQ,IAAI,mBAAmB;CAEvD,IAAI,WAAW,MAAM,OAAO,KAAA;CAC5B,MAAM,SAAS,OAAO,MAAM;CAE5B,OAAO,OAAO,cAAc,MAAM,KAAK,UAAU,IAAI,SAAS,KAAA;AAChE;;AAGA,MAAM,kBAAkB,aAAgC;CACtD,MAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;CAEvD,IAAI,gBAAgB,MAAM,OAAO;CACjC,MAAM,YAAY,YAAY,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,YAAY;CAEnE,OAAO,cAAc,sBAAsB,WAAW,SAAS,OAAO,MAAM;AAC9E;AAEA,MAAM,eACJ,QACA,UACA,aAC8E;CAC9E,IAAI,CAAC,eAAe,QAAQ,GAC1B,OAAO,cACL,sEACA,qBAAqB,UAAU,QAAQ,CACzC;CAEF,MAAM,WAAW,eAAe,QAAQ;CAExC,IAAI,OAAO,OAAO,QAAQ,GACxB,OAAO,cACL,0EACA,qBAAqB,UAAU,QAAQ,CACzC;CAEF,IAAI,CAAC,SAAS,MAAM,SAClB,OAAO,gBACL,kDACA,qBAAqB,UAAU,QAAQ,CACzC;CAEF,QAAQ,OAAO,MAAf;EACE,KAAK;EACL,KAAK;GACH,IAAI,OAAO,SAAS,MAAM,WAAW,UACnC,OAAO,cAAc,qDAAqD;GAG5E,OAAO,OAAO,SAAS,uBACnB,oBAAoB,KAAK,EAAE,MAAM,SAAS,MAAM,OAAO,CAAC,IACxD,qBAAqB,KAAK,EAAE,UAAU,SAAS,MAAM,OAAO,CAAC;EAEnE,KAAK,oBAAoB;GACvB,MAAM,UAAU,OAAO,oBAAoB,iBAAiB,CAAC,CAAC;IAC5D,MAAM;IACN,OAAO,SAAS,MAAM;GACxB,CAAC;GAED,IAAI,OAAO,OAAO,OAAO,GACvB,OAAO,cAAc,qEAAqE;GAG5F,OAAO,QAAQ;EACjB;EACA,KAAK,qBAAqB;GACxB,MAAM,UAAU,OAAO,oBAAoB,kBAAkB,CAAC,CAAC;IAC7D,MAAM;IACN,QAAQ,SAAS,MAAM;GACzB,CAAC;GAED,IAAI,OAAO,OAAO,OAAO,GACvB,OAAO,cACL,wEACF;GAGF,OAAO,QAAQ;EACjB;EACA,KAAK,yBACH,OAAO,uBAAuB,KAAK,EAAE,OAAO,SAAS,MAAM,OAAO,CAAC;CAEvE;AACF;AAEA,MAAM,kBAAkB,SAA0B,0BAA0B,KAAK,IAAI;AAErF,MAAM,eACJ,SACA,cAEA,OAAO,GAAG,mCAAmC,CAAC,CAAC,WAC7C,SACuD;CACvD,IAAI,QAAQ,WAAW,YACrB,OAAO,OAAO,4BAA4B,KAAK;EAC7C,gBAAgB;EAChB,SAAS;EACT,SACE;CACJ,CAAC;CAGH,MAAM,gBAAgB,QAAQ,OAAO,SAAS;CAE9C,IAAI,eAAe;EACjB,IAAI,cAAc,KAAA,GAChB,OAAO,OAAO,4BAA4B,KAAK;GAC7C,gBAAgB;GAChB,SAAS;GACT,SACE;EACJ,CAAC;EAEH,OAAO,UAAU,oBAAoB,OAAO,CAAC,CAAC,KAC5C,OAAO,UAAU,UACf,gCAAgC,KAAK;GACnC,gBAAgB;GAChB,UAAU;GACV,QAAQ,MAAM;GACd,SACE,MAAM,WAAW,kBACb,6CACA;GACN;EACF,CAAC,CACH,CACF;CACF;CAEA,MAAM,WAAW,OAAO,mBAAmB,SAAS,OAAO,CAAC,CAAC,KAC3D,OAAO,UAAU,UACf,cAAc,iDAAiD,MAAM,KAAK,CAC5E,CACF;CAEA,MAAM,WAAW,OAAO,oBAAoB,UAAU,OAAO;CAE7D,IAAI,SAAS,WAAW,KAAK;EAC3B,MAAM,aAAa,iBAAiB,QAAQ;EAC5C,MAAM,SAAS,eAAe,QAAQ,IAAI,UAAU;EACpD,MAAM,QAAQ,qBAAqB,UAAU,QAAQ;EAErD,OAAO,OAAO,4BAA4B,KAAK;GAC7C,gBAAgB;GAChB;GACA,GAAI,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,kBAAkB,WAAW;GACnE,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;GACvC,SACE,WAAW,UACP,gDACA;EACR,CAAC;CACH;CACA,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,UAAU,kCAAkC,SAAS;EAC3D,MAAM,QAAQ,qBAAqB,UAAU,QAAQ;EAErD,IAAI,SAAS,UAAU,KACrB,OAAO,OAAO,cAAc,SAAS,KAAK;EAG5C,OAAO,OAAO,gBAAgB,SAAS,KAAK;CAC9C;CACA,MAAM,SAAS,YAAY,QAAQ,QAAQ,UAAU,QAAQ;CAE7D,IACE,OAAO,SAAS,gCAChB,OAAO,SAAS,4BAEhB,OAAO,OAAO;CAEhB,MAAM,SAAS,cAAc,QAAQ;CAErC,OAAO,kBAAkB,KAAK;EAC5B,gBAAgB;EAChB;EACA,aAAa,uBAAuB,KAAK;GACvC,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,eAAe,OAAO;GACxD,GAAI,gBACA,EACE,WAAW,wBAAwB,KAAK;IACtC,UAAU;IACV,YAAY;GACd,CAAC,EACH,IACA,CAAC;EACP,CAAC;CACH,CAAC;AACH,CAAC;;;;;AAMH,MAAa,uCAKX,MAAM,OACJ,aACA,OAAO,IAAI,mCAAmC,YAC5C,YAAY,GAAG,EAAE,SAAS,YAAY,OAAO,EAAE,CAAC,CAClD,CACF;;AAGF,MAAa,gDAKX,MAAM,OACJ,aACA,OAAO,IAAI,aAAa;CACtB,MAAM,UAAU,OAAO;CACvB,MAAM,YAAY,OAAO;CAEzB,OAAO,YAAY,GAAG,EAAE,SAAS,YAAY,SAAS,SAAS,EAAE,CAAC;AACpE,CAAC,CACH;;AAQF,MAAa,oBAAoB;;;;;;;;AAQ/B,QACE,YACA,YAC+C;CAC/C,MAAM,UACJ,QAAQ,cAAc,KAAA,IAClB,+BAA+B,IAC/B,wCAAwC,CAAC,CAAC,KACxC,MAAM,QAAQ,4BAA4B,MAAM,QAAQ,SAAS,CAAC,CACpE;CAEN,OAAO,WAAW,SAAS,KACzB,MAAM,QAAQ,QAAQ,KAAK,MAAM,QAAQ,iCAAiC,MAAM,OAAO,CAAC,CAAC,CAAC,CAC5F;AACF,EACF;AAEA,MAAM,qBAAqB,YAAgE;CACzF,MAAM,UAAiC,CAAC;CAExC,IACE,QAAQ,YAAY,cAAc,KAAA,KAClC,QAAQ,YAAY,kBAAkB,KAAA,GAEtC,QAAQ,cAAc;EACpB,GAAI,QAAQ,WAAW,cAAc,KAAA,IACjC,CAAC,IACD,EAAE,WAAW,QAAQ,WAAW,UAAU;EAC9C,GAAI,QAAQ,WAAW,kBAAkB,KAAA,IACrC,CAAC,IACD,EAAE,SAAS,QAAQ,WAAW,cAAc;CAClD;CAEF,IAAI,QAAQ,YAAY,oBAAoB,KAAA,GAC1C,QAAQ,kBAAkB;EACxB,UAAU,QAAQ,WAAW,gBAAgB;EAC7C,GAAI,QAAQ,WAAW,gBAAgB,kBAAkB,KAAA,IACrD,CAAC,IACD,EAAE,SAAS,QAAQ,WAAW,gBAAgB,cAAc;CAClE;CAEF,IAAI,QAAQ,aAAa,KAAA,GACvB,QAAQ,WAAW;EAAE,OAAO,QAAQ,SAAS;EAAO,QAAQ,QAAQ,SAAS;CAAO;CAEtF,IAAI,QAAQ,gBAAgB,wBAAwB,KAAA,GAClD,QAAQ,sBAAsB,CAAC,GAAG,QAAQ,eAAe,mBAAmB;CAE9E,IAAI,QAAQ,gBAAgB,yBAAyB,KAAA,GACnD,QAAQ,sBAAsB,CAAC,GAAG,QAAQ,eAAe,oBAAoB;CAG/E,OAAO;EACL,GAAG;EACH,GAAI,QAAQ,OAAO,SAAS,kBACxB,EAAE,KAAK,QAAQ,OAAO,IAAI,IAC1B,EAAE,MAAM,QAAQ,OAAO,KAAK;EAChC,mBAAmB;GAAE,MAAM;GAAO,UAAU;GAAU,UAAU,QAAQ;EAAS;CACnF;AACF;AAEA,MAAM,cAAc,SAClB,qBAAqB,KAAK,OAAO,GAAG,0CAA0C;AAEhF,MAAM,2BACJ,WAEA,qBAAqB,OAAO,OAAO,GAAG,0CAA0C,CAAC,CAAC,KAChF,OAAO,SACL,OAAO,IAAI;CACT,WAAW,OAAO,YAAY;CAC9B,aAAa,KAAA;AACf,CAAC,CAAC,CAAC,KAAK,OAAO,YAAY,OAAO,WAAW,0CAA0C,CAAC,CAAC,CAC3F,CACF;AAEF,MAAM,eAAe,aACnB,SAAS,QAAQ,IAAI,cAAc,CAAC,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,YAAY,MAAM;AAEnF,MAAM,kBAAkB,aAA2C;CACjE,MAAM,MAAM,SAAS,QAAQ,IAAI,gBAAgB;CAEjD,IAAI,QAAQ,QAAQ,CAAC,oBAAoB,KAAK,GAAG,GAAG,OAAO,KAAA;CAC3D,MAAM,SAAS,OAAO,GAAG;CAEzB,OAAO,OAAO,cAAc,MAAM,IAAI,SAAS,KAAA;AACjD;AAEA,MAAM,iBAAiB,OAAO,GAAG,mCAAmC,CAAC,CAAC,WACpE,UACA,SACA;CACA,MAAM,OAAO,SAAS;CAEtB,IAAI,SAAS,MACX,OAAO,OAAO,cAAc,qCAAqC;CAEnE,IAAI,CAAC,YAAY,QAAQ,GAAG;EAC1B,OAAO,WAAW,IAAI;EAEtB,OAAO,OAAO,cAAc,2CAA2C;CACzE;CACA,MAAM,SAAS,eAAe,QAAQ;CAEtC,IAAI,WAAW,KAAA,KAAa,SAAS,QAAQ,OAAO,gBAAgB;EAClE,OAAO,WAAW,IAAI;EAEtB,OAAO,OAAO,+BAA+B,KAAK;GAChD,gBAAgB;GAChB,OAAO,QAAQ,OAAO;GACtB,UAAU;EACZ,CAAC;CACH;CAEA,MAAM,SAAS,OAAO,OAAO,eAC3B,OAAO,IAAI;EACT,WAAW,KAAK,UAAU;EAC1B,QAAQ,UAAU,cAAc,0CAA0C,KAAK;CACjF,CAAC,GACD,uBACF;CAEA,MAAM,SAA4B,CAAC;CACnC,IAAI,WAAW;CAEf,OAAO,MAAM;EACX,MAAM,OAAO,OAAO,OAAO,WAAW;GACpC,WAAW,OAAO,KAAK;GACvB,QAAQ,UAAU,cAAc,0CAA0C,KAAK;EACjF,CAAC;EAED,IAAI,KAAK,MAAM;EACf,YAAY,KAAK,MAAM;EACvB,IAAI,WAAW,QAAQ,OAAO,gBAC5B,OAAO,OAAO,+BAA+B,KAAK;GAChD,gBAAgB;GAChB,OAAO,QAAQ,OAAO;GACtB;EACF,CAAC;EAEH,OAAO,KAAK,KAAK,KAAK;CACxB;CACA,MAAM,QAAQ,IAAI,WAAW,QAAQ;CACrC,IAAI,SAAS;CAEb,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,IAAI,OAAO,MAAM;EACvB,UAAU,MAAM;CAClB;CAEA,OAAO;AACT,GAAG,OAAO,MAAM;AAEhB,MAAM,kBAAkB,YACtB,OAAO,GAAG,sCAAsC,CAAC,CAAC,WAChD,SAC6D;CAC7D,IAAI,QAAQ,WAAW,YACrB,OAAO,OAAO,4BAA4B,KAAK;EAC7C,gBAAgB;EAChB,SAAS;EACT,SAAS;CACX,CAAC;CAGH,MAAM,WAAW,OAAO,QACrB,WAAW,kBAAkB,OAAO,CAAC,CAAC,CACtC,KACC,OAAO,UAAU,UACf,cAAc,+CAA+C,MAAM,KAAK,CAC1E,CACF;CAEF,IAAI,SAAS,WAAW,KAAK;EAC3B,MAAM,OAAO,SAAS;EAEtB,IAAI,SAAS,MAAM,OAAO,WAAW,IAAI;EAEzC,OAAO,OAAO,4BAA4B,KAAK;GAC7C,gBAAgB;GAChB,QAAQ;GACR,GAAI,iBAAiB,QAAQ,MAAM,KAAA,IAC/B,CAAC,IACD,EAAE,kBAAkB,iBAAiB,QAAQ,EAAE;GACnD,SAAS;EACX,CAAC;CACH;CACA,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,OAAO,SAAS;EAEtB,IAAI,SAAS,MAAM,OAAO,WAAW,IAAI;EACzC,MAAM,UAAU,6CAA6C,SAAS;EAEtE,OAAO,OAAO,SAAS,UAAU,MAAM,cAAc,OAAO,IAAI,gBAAgB,OAAO;CACzF;CACA,MAAM,QAAQ,OAAO,eAAe,UAAU,OAAO;CAErD,OAAO,qBAAqB,KAAK;EAC/B,gBAAgB;EAChB,WAAW;EACX;CACF,CAAC;AACH,CAAC;;AAGH,MAAa,0CAKX,MAAM,OACJ,gBACA,OAAO,IAAI,mCAAmC,YAC5C,eAAe,GAAG,EAAE,SAAS,eAAe,OAAO,EAAE,CAAC,CACxD,CACF"}

package/dist/CloudflareBrowser.mjs

@@ -1,2 +1,2 @@
-import { a as BrowserQuickActionWorkersAiPolicyError, c as browserQuickActionScreenshotLayer, i as BrowserQuickActionWorkersAi, l as browserQuickActionWorkersAiCaptureLayer, n as BrowserQuickActionBrowserBinding, o as CloudflareBrowser, r as BrowserQuickActionRpcError, s as browserQuickActionCaptureLayer } from "./CloudflareBrowser-Bj22nNUT.mjs";
+import { a as BrowserQuickActionWorkersAiPolicyError, c as browserQuickActionScreenshotLayer, i as BrowserQuickActionWorkersAi, l as browserQuickActionWorkersAiCaptureLayer, n as BrowserQuickActionBrowserBinding, o as CloudflareBrowser, r as BrowserQuickActionRpcError, s as browserQuickActionCaptureLayer } from "./CloudflareBrowser-BSJRWmlW.mjs";
 export { BrowserQuickActionBrowserBinding, BrowserQuickActionRpcError, BrowserQuickActionWorkersAi, BrowserQuickActionWorkersAiPolicyError, CloudflareBrowser, browserQuickActionCaptureLayer, browserQuickActionScreenshotLayer, browserQuickActionWorkersAiCaptureLayer };

package/dist/CloudflareMemory.d.mts

@@ -4,7 +4,7 @@ import * as Memory from "@effect-agent/core/Memory";
 import * as MemoryNamespace from "@effect-agent/core/MemoryNamespace";
 import { MemoryRecallLimits } from "@effect-agent/core/MemoryReference";
 import { MemoryAccess } from "@effect-agent/core/MemoryRevalidation";
-import { MemoryDocument, MemoryMutationFailpoint, MemoryReader, MemoryStorageError, MemoryWrite, MemoryWriter } from "@effect-agent/core/MemoryStore";
+import { MemoryDocument, MemoryKey, MemoryMutationFailpoint, MemoryReader, MemoryStorageError, MemoryWrite, MemoryWriter } from "@effect-agent/core/MemoryStore";
 import { MemoryIndexSearch, SemanticMemoryProfile } from "@effect-agent/core/SemanticMemoryIndex";
 import { SemanticCandidateLimits } from "@effect-agent/core/SemanticMemoryRevalidation";
 import { DoMemoryStorageLimits } from "@effect-agent/storage-cloudflare/DoMemoryStore";
@@ -25,6 +25,7 @@ declare const memoryObjectName: (namespace: MemoryNamespace.Any) => string;
 declare const CloudflareMemoryClient: {
   /** Bind access and principal using the MemoryObjectNamespace supplied by the application. */
   make: <Namespace extends MemoryNamespace.Any>(access: MemoryAccess<Namespace>, principal: string & import("effect/Brand").Brand<"@effect-agent/thread/Principal">, rpcLimits?: MemoryRpcLimits | undefined) => Effect.Effect<{
+    get: (key: MemoryKey<Namespace>) => Effect.Effect<MemoryDocument<Namespace> | null, import("@effect-agent/core/MemoryStore").MemoryConflict | import("@effect-agent/core/SemanticMemoryIndex").MemoryIndexError | import("@effect-agent/core/MemoryStore").MemoryMutationFailure | import("@effect-agent/core/MemoryStore").MemoryOperationConflict | import("@effect-agent/core/MemoryReference").MemoryRecallError | MemoryRpcError | MemoryStorageError | import("@effect-agent/core/MemoryStore").MemoryWithdrawn | import("@effect-agent/core/SemanticMemoryRevalidation").SemanticMemoryError, never>;
     recall: (lookup: {
       readonly _tag: "Found";
       readonly passages: readonly import("@effect-agent/core/MemoryReference").MemoryPassage[];
@@ -69,6 +70,7 @@ declare const CloudflareMemoryClient: {
     readonly principal: Principal;
     readonly rpcLimits?: MemoryRpcLimits;
   }) => Effect.Effect<{
+    get: (key: MemoryKey<Namespace>) => Effect.Effect<MemoryDocument<Namespace> | null, import("@effect-agent/core/MemoryStore").MemoryConflict | import("@effect-agent/core/SemanticMemoryIndex").MemoryIndexError | import("@effect-agent/core/MemoryStore").MemoryMutationFailure | import("@effect-agent/core/MemoryStore").MemoryOperationConflict | import("@effect-agent/core/MemoryReference").MemoryRecallError | MemoryRpcError | MemoryStorageError | import("@effect-agent/core/MemoryStore").MemoryWithdrawn | import("@effect-agent/core/SemanticMemoryRevalidation").SemanticMemoryError, never>;
     recall: (lookup: {
       readonly _tag: "Found";
       readonly passages: readonly import("@effect-agent/core/MemoryReference").MemoryPassage[];

package/dist/CloudflareMemory.mjs

@@ -6,7 +6,7 @@ import * as MemoryNamespace from "@effect-agent/core/MemoryNamespace";
 import { MemoryNamespaceAddress } from "@effect-agent/core/MemoryNamespace";
 import { MemoryRecallLimits } from "@effect-agent/core/MemoryReference";
 import { MemoryAccess } from "@effect-agent/core/MemoryRevalidation";
-import { MemoryDocument, MemoryMutationFailpoint, MemoryStorageError, MemoryWriter } from "@effect-agent/core/MemoryStore";
+import { MemoryDocument, MemoryKey, MemoryMutationFailpoint, MemoryStorageError, MemoryWriter } from "@effect-agent/core/MemoryStore";
 import "@effect-agent/core/SemanticMemoryIndex";
 import "@effect-agent/core/SemanticMemoryRevalidation";
 import { defaultDoMemoryStorageLimits, doMemoryStoreLayerWithFailpoints } from "@effect-agent/storage-cloudflare/DoMemoryStore";
@@ -82,6 +82,32 @@ const makeMemoryClient = Effect.fn("CloudflareMemoryClient.make")(function* (acc
 			return yield* MemoryDocument.restore(access.namespace, response.document);
 		}).pipe((effect) => withinDeadline(effect, validated.timeoutMillis));
 	});
+	/**
+	* Read one exact current document in one owner RPC. Null means absent; withdrawals return
+	* tombstones. Denial, unavailable storage and deadlines fail typed, never become absence.
+	* Reads begun after an acknowledged write observe it or a later revision. The owner checks
+	* exact-key authority and active document scopes; source-dependent provenance policy remains
+	* application-owned. No extraction, job draining, embedding, discovery or rendering occurs.
+	*/
+	const get = Effect.fn("CloudflareMemoryClient.get")(function* (key) {
+		const decodedKey = yield* Schema.decodeUnknownEffect(MemoryKey.Wire)(key).pipe(Effect.mapError(() => MemoryRpcError.make({ reason: "protocol" })));
+		if (!MemoryNamespace.equals(decodedKey.namespace, bound.namespace)) return yield* MemoryRpcError.make({ reason: "denied" });
+		return yield* Effect.gen(function* () {
+			const response = yield* call({
+				_tag: "Get",
+				version: 1,
+				access: bound,
+				principal,
+				key: decodedKey,
+				deadlineMillis: (yield* Clock.currentTimeMillis) + validated.timeoutMillis
+			});
+			if (response._tag !== "Document" || !MemoryNamespace.equals(response.key.namespace, bound.namespace) || response.key.id !== decodedKey.id) return yield* MemoryRpcError.make({ reason: "protocol" });
+			if (response.document === null) return null;
+			if (response.document.key.id !== decodedKey.id || response.document.source.id !== decodedKey.id || response.document._tag === "ActiveMemoryDocument" && !response.document.scopes.includes(bound.scope)) return yield* MemoryRpcError.make({ reason: "protocol" });
+			yield* encodeMemoryWire(MemoryDocument.Wire, response.document, validated.maxSourceBytes);
+			return yield* MemoryDocument.restore(access.namespace, response.document);
+		}).pipe((effect) => withinDeadline(effect, validated.timeoutMillis));
+	});
 	const revalidateSemantic = Effect.fn("CloudflareMemoryClient.revalidateSemantic")(function* (found, profile, limits) {
 		return yield* Effect.gen(function* () {
 			const response = yield* call({
@@ -99,6 +125,7 @@ const makeMemoryClient = Effect.fn("CloudflareMemoryClient.make")(function* (acc
 		}).pipe((effect) => withinDeadline(effect, validated.timeoutMillis));
 	});
 	return {
+		get,
 		recall: Effect.fn("CloudflareMemoryClient.recall")(function* (lookup, limits, estimateTokens) {
 			return yield* Memory.recall([{
 				id: "memory",

package/dist/CloudflareMemory.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"CloudflareMemory.mjs","names":["EffectCfDurableObject"],"sources":["../src/CloudflareMemory.ts"],"sourcesContent":["import * as Memory from \"@effect-agent/core/Memory\";\nimport * as MemoryNamespace from \"@effect-agent/core/MemoryNamespace\";\nimport { MemoryNamespaceAddress } from \"@effect-agent/core/MemoryNamespace\";\nimport { type MemoryLookup, MemoryRecallLimits } from \"@effect-agent/core/MemoryReference\";\nimport { MemoryAccess } from \"@effect-agent/core/MemoryRevalidation\";\nimport {\n  type MemoryReader,\n  type MemoryWrite,\n  MemoryDocument,\n  MemoryMutationFailpoint,\n  MemoryStorageError,\n  MemoryWriter,\n} from \"@effect-agent/core/MemoryStore\";\nimport {\n  type MemoryIndexSearch,\n  type SemanticMemoryProfile,\n} from \"@effect-agent/core/SemanticMemoryIndex\";\nimport { type SemanticCandidateLimits } from \"@effect-agent/core/SemanticMemoryRevalidation\";\nimport {\n  type DoMemoryStorageLimits,\n  defaultDoMemoryStorageLimits,\n  doMemoryStoreLayerWithFailpoints,\n} from \"@effect-agent/storage-cloudflare/DoMemoryStore\";\nimport {\n  type MemoryOwnerAuthorizer,\n  decodeMemoryWire,\n  defaultMemoryRpcLimits,\n  encodeMemoryWire,\n  handleMemoryOwnerRequest,\n  MemoryOwnerIdentity,\n  MemoryOwnerRequest,\n  MemoryOwnerResponse,\n  MemoryRpcError,\n  MemoryRpcLimits,\n  type MemoryOwnerFailure,\n} from \"@effect-agent/storage-cloudflare/MemoryProtocol\";\nimport { Principal } from \"@effect-agent/thread/SubmissionLedger\";\nimport { Clock, Context, Effect, Layer, Schema } from \"effect\";\nimport {\n  DurableObject as EffectCfDurableObject,\n  DurableObjectState,\n  type WorkerEnvironment,\n} from \"effect-cf\";\n\nexport interface MemoryObjectRpc extends Rpc.DurableObjectBranded {\n  memory(encoded: string): Promise<string>;\n}\n\nexport class MemoryObjectNamespace extends Context.Service<\n  MemoryObjectNamespace,\n  {\n    readonly namespace: DurableObjectNamespace<MemoryObjectRpc>;\n  }\n>()(\"@effect-agent/platform-cloudflare/MemoryObjectNamespace\") {}\n\n/** Namespace version and identity are already canonicalized by MemoryNamespace. */\nexport const memoryObjectName = (namespace: MemoryNamespace.Any): string => namespace.address;\n\n/**\n * Effect-native, host-bound memory client. Recall revalidates the entire admitted lookup\n * in one RPC and renders it locally. No retries or per-source splitting occur here.\n * Interrupted callers stop waiting; the owner has its own deadline. A timed-out write\n * may have committed: reconcile by sending the identical operation ID and command.\n */\nconst makeMemoryClient = Effect.fn(\"CloudflareMemoryClient.make\")(function* <\n  Namespace extends MemoryNamespace.Any,\n>(\n  access: MemoryAccess<Namespace>,\n  principal: Principal,\n  rpcLimits: MemoryRpcLimits = defaultMemoryRpcLimits,\n) {\n  const validated = yield* Schema.decodeUnknownEffect(MemoryRpcLimits)(rpcLimits).pipe(\n    Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n  );\n\n  const bound = yield* Schema.decodeUnknownEffect(MemoryAccess.Wire)(access).pipe(\n    Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n  );\n\n  principal = yield* Schema.decodeUnknownEffect(Principal)(principal).pipe(\n    Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n  );\n  const { namespace } = yield* MemoryObjectNamespace;\n\n  const call = Effect.fn(\"CloudflareMemoryClient.call\")(function* (request: MemoryOwnerRequest) {\n    const decoded = yield* Schema.decodeUnknownEffect(MemoryOwnerRequest)(request).pipe(\n      Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n    );\n\n    const encoded = yield* encodeMemoryWire(MemoryOwnerRequest, decoded, validated.maxRequestBytes);\n\n    const raw = yield* Effect.tryPromise({\n      try: () =>\n        namespace.get(namespace.idFromName(memoryObjectName(bound.namespace))).memory(encoded),\n      catch: () => MemoryRpcError.make({ reason: \"unavailable\" }),\n    });\n\n    const response = yield* decodeMemoryWire(MemoryOwnerResponse, raw, validated.maxResponseBytes);\n\n    if (response._tag === \"Failed\") return yield* response.failure;\n    if (\n      !MemoryNamespace.equals(response.access.namespace, bound.namespace) ||\n      response.access.scope !== bound.scope\n    )\n      return yield* MemoryRpcError.make({ reason: \"protocol\" });\n\n    return response;\n  });\n\n  const withinDeadline = <A, E, R>(effect: Effect.Effect<A, E, R>, timeoutMillis: number) =>\n    effect.pipe(\n      Effect.timeoutOrElse({\n        duration: timeoutMillis,\n        orElse: () => Effect.fail(MemoryRpcError.make({ reason: \"timeout\" })),\n      }),\n    );\n\n  const revalidate = Effect.fn(\"CloudflareMemoryClient.revalidate\")(function* (\n    lookup: MemoryLookup,\n    limits: MemoryRecallLimits,\n  ) {\n    limits = yield* Schema.decodeUnknownEffect(MemoryRecallLimits)(limits).pipe(\n      Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n    );\n    const timeoutMillis = Math.min(validated.timeoutMillis, limits.timeoutMillis);\n\n    return yield* Effect.gen(function* () {\n      const response = yield* call({\n        _tag: \"Revalidate\",\n        version: 1,\n        access: bound,\n        principal,\n        lookup,\n        limits,\n        deadlineMillis: (yield* Clock.currentTimeMillis) + timeoutMillis,\n      });\n\n      if (response._tag !== \"Lookup\") return yield* MemoryRpcError.make({ reason: \"protocol\" });\n\n      return response.lookup;\n    }).pipe((effect) => withinDeadline(effect, timeoutMillis));\n  });\n\n  const change = Effect.fn(\"CloudflareMemoryClient.change\")(function* (\n    write: MemoryWrite<Namespace>,\n  ) {\n    if (!MemoryNamespace.equals(write.key.namespace, bound.namespace))\n      return yield* MemoryRpcError.make({ reason: \"denied\" });\n\n    return yield* Effect.gen(function* () {\n      const response = yield* call({\n        _tag: \"Change\",\n        version: 1,\n        access: bound,\n        principal,\n        write,\n        deadlineMillis: (yield* Clock.currentTimeMillis) + validated.timeoutMillis,\n      });\n\n      if (response._tag !== \"Changed\" || response.document.key.id !== write.key.id)\n        return yield* MemoryRpcError.make({ reason: \"protocol\" });\n\n      return yield* MemoryDocument.restore(access.namespace, response.document);\n    }).pipe((effect) => withinDeadline(effect, validated.timeoutMillis));\n  });\n\n  const revalidateSemantic = Effect.fn(\"CloudflareMemoryClient.revalidateSemantic\")(function* (\n    found: MemoryIndexSearch<Namespace>,\n    profile: SemanticMemoryProfile,\n    limits: SemanticCandidateLimits,\n  ) {\n    return yield* Effect.gen(function* () {\n      const response = yield* call({\n        _tag: \"RevalidateSemantic\",\n        version: 1,\n        access: bound,\n        principal,\n        found,\n        profile,\n        limits,\n        deadlineMillis: (yield* Clock.currentTimeMillis) + validated.timeoutMillis,\n      });\n\n      if (response._tag !== \"Semantic\") return yield* MemoryRpcError.make({ reason: \"protocol\" });\n\n      return response.result;\n    }).pipe((effect) => withinDeadline(effect, validated.timeoutMillis));\n  });\n\n  /**\n   * Revalidate in one owner RPC, then render whole passages within the caller's budget.\n   * The bound source is essential: unavailable/stale results and matches that cannot fit\n   * fail instead of silently producing empty context. No-match remains successful.\n   * The single outcome has sourceId \"memory\". No embedding or candidate search is performed.\n   * Use revalidate with Memory.recall for multiple readers sharing one output budget.\n   */\n  const recall = Effect.fn(\"CloudflareMemoryClient.recall\")(function* (\n    lookup: MemoryLookup,\n    limits: MemoryRecallLimits,\n    estimateTokens?: (text: string) => number,\n  ) {\n    return yield* Memory.recall(\n      [{ id: \"memory\", essential: true, read: revalidate(lookup, limits) }],\n      limits,\n      estimateTokens,\n    );\n  });\n\n  return { recall, revalidate, revalidateSemantic, change };\n});\n\nexport const CloudflareMemoryClient = {\n  /** Bind access and principal using the MemoryObjectNamespace supplied by the application. */\n  make: makeMemoryClient,\n  /** Use a resolved Worker or Durable Object binding without manual service provisioning. */\n  fromBinding: Effect.fn(\"CloudflareMemoryClient.fromBinding\")(function* <\n    Namespace extends MemoryNamespace.Any,\n  >(\n    binding: DurableObjectNamespace<MemoryObjectRpc>,\n    options: {\n      readonly access: MemoryAccess<Namespace>;\n      readonly principal: Principal;\n      readonly rpcLimits?: MemoryRpcLimits;\n    },\n  ) {\n    return yield* makeMemoryClient(options.access, options.principal, options.rpcLimits).pipe(\n      Effect.provideService(MemoryObjectNamespace, { namespace: binding }),\n    );\n  }),\n};\n\n/**\n * Optional activity-processor destination. Keeps domain write errors intact; transport,\n * authorization and deadline failures become the existing MemoryStorageError contract.\n * Receipts remain authoritative, including after caller interruption or lost replies.\n */\nexport const cloudflareMemoryWriterLayer = (\n  access: MemoryAccess,\n  principal: Principal,\n  limits: MemoryRpcLimits = defaultMemoryRpcLimits,\n) =>\n  Layer.effect(\n    MemoryWriter,\n    Effect.gen(function* () {\n      const client = yield* CloudflareMemoryClient.make(access, principal, limits);\n\n      return MemoryWriter.fromAdapter({\n        change: (write) =>\n          client.change(write).pipe(\n            Effect.catchTag(\"MemoryRpcError\", (error) =>\n              Effect.fail(\n                MemoryStorageError.make({\n                  operation: `memory RPC ${error.reason}`,\n                  reason:\n                    error.reason === \"unavailable\" || error.reason === \"timeout\"\n                      ? \"unavailable\"\n                      : \"invalid-input\",\n                }),\n              ),\n            ),\n            Effect.catchTag([\"MemoryRecallError\", \"MemoryIndexError\", \"SemanticMemoryError\"], () =>\n              Effect.fail(\n                MemoryStorageError.make({ operation: \"memory RPC response\", reason: \"corrupt\" }),\n              ),\n            ),\n          ),\n      });\n    }),\n  );\n\ntype OwnerServices = MemoryReader | MemoryWriter | MemoryOwnerAuthorizer | MemoryOwnerIdentity;\n\nexport interface MemoryObjectInstance extends InstanceType<\n  EffectCfDurableObject.DurableObjectClass<Record<never, never>, OwnerServices>\n> {\n  memory(encoded: string): Promise<string>;\n}\n\nexport interface MemoryObjectClass {\n  new (ctx: globalThis.DurableObjectState, env: Cloudflare.Env): MemoryObjectInstance;\n}\n\n/**\n * Dedicated SQLite owner, independent of Thread lifetimes. The host binds authorization\n * after restoring its namespace definition from MemoryOwnerIdentity. Do not retain\n * cleanup-scoped resources in the host Layer; it lives for the DO incarnation.\n */\nconst makeMemoryObject = <E>(\n  host: Layer.Layer<\n    MemoryOwnerAuthorizer,\n    E,\n    MemoryOwnerIdentity | DurableObjectState.DurableObjectState | WorkerEnvironment\n  >,\n  options: {\n    readonly storageLimits?: DoMemoryStorageLimits;\n    readonly rpcLimits?: MemoryRpcLimits;\n    readonly failpoints?: Layer.Layer<\n      MemoryMutationFailpoint,\n      never,\n      DurableObjectState.DurableObjectState\n    >;\n  } = {},\n): MemoryObjectClass => {\n  const identity = Layer.effect(\n    MemoryOwnerIdentity,\n    Effect.gen(function* () {\n      const state = yield* DurableObjectState.DurableObjectState;\n\n      const address = yield* Schema.decodeUnknownEffect(MemoryNamespaceAddress)(\n        state.raw.id.name,\n      ).pipe(Effect.mapError(() => MemoryRpcError.make({ reason: \"denied\" })));\n\n      return { namespace: MemoryNamespace.Any.make({ address }) };\n    }),\n  );\n\n  const store = Layer.unwrap(\n    Effect.map(DurableObjectState.DurableObjectState, (state) =>\n      doMemoryStoreLayerWithFailpoints(\n        state.raw.storage,\n        options.storageLimits ?? defaultDoMemoryStorageLimits,\n      ),\n    ),\n  ).pipe(Layer.provide(options.failpoints ?? MemoryMutationFailpoint.layer));\n\n  const application = Layer.merge(store, host).pipe(Layer.provideMerge(identity));\n\n  const runtime: Layer.Layer<\n    OwnerServices,\n    E | MemoryOwnerFailure,\n    DurableObjectState.DurableObjectState | WorkerEnvironment\n  > = Layer.effectContext(\n    Effect.gen(function* () {\n      const state = yield* DurableObjectState.DurableObjectState;\n      const scope = yield* Effect.scope;\n\n      yield* Schema.decodeUnknownEffect(MemoryRpcLimits)(\n        options.rpcLimits ?? defaultMemoryRpcLimits,\n      ).pipe(Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })));\n\n      return yield* state.blockConcurrencyWhile(Layer.buildWithScope(application, scope));\n    }),\n  );\n\n  const rpc = { memory: (encoded: string) => handleMemoryOwnerRequest(encoded, options.rpcLimits) };\n\n  return EffectCfDurableObject.make<\n    OwnerServices,\n    E | MemoryOwnerFailure,\n    never,\n    never,\n    typeof rpc\n  >(runtime, { rpc });\n};\n\nexport const MemoryObject = {\n  /** Build the SQLite Durable Object class with the application's owner authorization Layer. */\n  make: makeMemoryObject,\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAgDA,IAAa,wBAAb,cAA2C,QAAQ,QAKjD,CAAC,CAAC,yDAAyD,CAAC,CAAC,CAAC;;AAGhE,MAAa,oBAAoB,cAA2C,UAAU;;;;;;;AAQtF,MAAM,mBAAmB,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAGhE,QACA,WACA,YAA6B,wBAC7B;CACA,MAAM,YAAY,OAAO,OAAO,oBAAoB,eAAe,CAAC,CAAC,SAAS,CAAC,CAAC,KAC9E,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;CAEA,MAAM,QAAQ,OAAO,OAAO,oBAAoB,aAAa,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KACzE,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;CAEA,YAAY,OAAO,OAAO,oBAAoB,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,KAClE,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;CACA,MAAM,EAAE,cAAc,OAAO;CAE7B,MAAM,OAAO,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAAW,SAA6B;EAC5F,MAAM,UAAU,OAAO,OAAO,oBAAoB,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,KAC7E,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;EAEA,MAAM,UAAU,OAAO,iBAAiB,oBAAoB,SAAS,UAAU,eAAe;EAE9F,MAAM,MAAM,OAAO,OAAO,WAAW;GACnC,WACE,UAAU,IAAI,UAAU,WAAW,iBAAiB,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO;GACvF,aAAa,eAAe,KAAK,EAAE,QAAQ,cAAc,CAAC;EAC5D,CAAC;EAED,MAAM,WAAW,OAAO,iBAAiB,qBAAqB,KAAK,UAAU,gBAAgB;EAE7F,IAAI,SAAS,SAAS,UAAU,OAAO,OAAO,SAAS;EACvD,IACE,CAAC,gBAAgB,OAAO,SAAS,OAAO,WAAW,MAAM,SAAS,KAClE,SAAS,OAAO,UAAU,MAAM,OAEhC,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC;EAE1D,OAAO;CACT,CAAC;CAED,MAAM,kBAA2B,QAAgC,kBAC/D,OAAO,KACL,OAAO,cAAc;EACnB,UAAU;EACV,cAAc,OAAO,KAAK,eAAe,KAAK,EAAE,QAAQ,UAAU,CAAC,CAAC;CACtE,CAAC,CACH;CAEF,MAAM,aAAa,OAAO,GAAG,mCAAmC,CAAC,CAAC,WAChE,QACA,QACA;EACA,SAAS,OAAO,OAAO,oBAAoB,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,KACrE,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;EACA,MAAM,gBAAgB,KAAK,IAAI,UAAU,eAAe,OAAO,aAAa;EAE5E,OAAO,OAAO,OAAO,IAAI,aAAa;GACpC,MAAM,WAAW,OAAO,KAAK;IAC3B,MAAM;IACN,SAAS;IACT,QAAQ;IACR;IACA;IACA;IACA,iBAAiB,OAAO,MAAM,qBAAqB;GACrD,CAAC;GAED,IAAI,SAAS,SAAS,UAAU,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC;GAExF,OAAO,SAAS;EAClB,CAAC,CAAC,CAAC,MAAM,WAAW,eAAe,QAAQ,aAAa,CAAC;CAC3D,CAAC;CAED,MAAM,SAAS,OAAO,GAAG,+BAA+B,CAAC,CAAC,WACxD,OACA;EACA,IAAI,CAAC,gBAAgB,OAAO,MAAM,IAAI,WAAW,MAAM,SAAS,GAC9D,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;EAExD,OAAO,OAAO,OAAO,IAAI,aAAa;GACpC,MAAM,WAAW,OAAO,KAAK;IAC3B,MAAM;IACN,SAAS;IACT,QAAQ;IACR;IACA;IACA,iBAAiB,OAAO,MAAM,qBAAqB,UAAU;GAC/D,CAAC;GAED,IAAI,SAAS,SAAS,aAAa,SAAS,SAAS,IAAI,OAAO,MAAM,IAAI,IACxE,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC;GAE1D,OAAO,OAAO,eAAe,QAAQ,OAAO,WAAW,SAAS,QAAQ;EAC1E,CAAC,CAAC,CAAC,MAAM,WAAW,eAAe,QAAQ,UAAU,aAAa,CAAC;CACrE,CAAC;CAED,MAAM,qBAAqB,OAAO,GAAG,2CAA2C,CAAC,CAAC,WAChF,OACA,SACA,QACA;EACA,OAAO,OAAO,OAAO,IAAI,aAAa;GACpC,MAAM,WAAW,OAAO,KAAK;IAC3B,MAAM;IACN,SAAS;IACT,QAAQ;IACR;IACA;IACA;IACA;IACA,iBAAiB,OAAO,MAAM,qBAAqB,UAAU;GAC/D,CAAC;GAED,IAAI,SAAS,SAAS,YAAY,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC;GAE1F,OAAO,SAAS;EAClB,CAAC,CAAC,CAAC,MAAM,WAAW,eAAe,QAAQ,UAAU,aAAa,CAAC;CACrE,CAAC;CAqBD,OAAO;EAAE,QAZM,OAAO,GAAG,+BAA+B,CAAC,CAAC,WACxD,QACA,QACA,gBACA;GACA,OAAO,OAAO,OAAO,OACnB,CAAC;IAAE,IAAI;IAAU,WAAW;IAAM,MAAM,WAAW,QAAQ,MAAM;GAAE,CAAC,GACpE,QACA,cACF;EACF,CAEc;EAAG;EAAY;EAAoB;CAAO;AAC1D,CAAC;AAED,MAAa,yBAAyB;;CAEpC,MAAM;;CAEN,aAAa,OAAO,GAAG,oCAAoC,CAAC,CAAC,WAG3D,SACA,SAKA;EACA,OAAO,OAAO,iBAAiB,QAAQ,QAAQ,QAAQ,WAAW,QAAQ,SAAS,CAAC,CAAC,KACnF,OAAO,eAAe,uBAAuB,EAAE,WAAW,QAAQ,CAAC,CACrE;CACF,CAAC;AACH;;;;;;AAOA,MAAa,+BACX,QACA,WACA,SAA0B,2BAE1B,MAAM,OACJ,cACA,OAAO,IAAI,aAAa;CACtB,MAAM,SAAS,OAAO,uBAAuB,KAAK,QAAQ,WAAW,MAAM;CAE3E,OAAO,aAAa,YAAY,EAC9B,SAAS,UACP,OAAO,OAAO,KAAK,CAAC,CAAC,KACnB,OAAO,SAAS,mBAAmB,UACjC,OAAO,KACL,mBAAmB,KAAK;EACtB,WAAW,cAAc,MAAM;EAC/B,QACE,MAAM,WAAW,iBAAiB,MAAM,WAAW,YAC/C,gBACA;CACR,CAAC,CACH,CACF,GACA,OAAO,SAAS;EAAC;EAAqB;EAAoB;CAAqB,SAC7E,OAAO,KACL,mBAAmB,KAAK;EAAE,WAAW;EAAuB,QAAQ;CAAU,CAAC,CACjF,CACF,CACF,EACJ,CAAC;AACH,CAAC,CACH;;;;;;AAmBF,MAAM,oBACJ,MAKA,UAQI,CAAC,MACiB;CACtB,MAAM,WAAW,MAAM,OACrB,qBACA,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,mBAAmB;EAExC,MAAM,UAAU,OAAO,OAAO,oBAAoB,sBAAsB,CAAC,CACvE,MAAM,IAAI,GAAG,IACf,CAAC,CAAC,KAAK,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC,CAAC,CAAC;EAEvE,OAAO,EAAE,WAAW,gBAAgB,IAAI,KAAK,EAAE,QAAQ,CAAC,EAAE;CAC5D,CAAC,CACH;CAEA,MAAM,QAAQ,MAAM,OAClB,OAAO,IAAI,mBAAmB,qBAAqB,UACjD,iCACE,MAAM,IAAI,SACV,QAAQ,iBAAiB,4BAC3B,CACF,CACF,CAAC,CAAC,KAAK,MAAM,QAAQ,QAAQ,cAAc,wBAAwB,KAAK,CAAC;CAEzE,MAAM,cAAc,MAAM,MAAM,OAAO,IAAI,CAAC,CAAC,KAAK,MAAM,aAAa,QAAQ,CAAC;CAE9E,MAAM,UAIF,MAAM,cACR,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,mBAAmB;EACxC,MAAM,QAAQ,OAAO,OAAO;EAE5B,OAAO,OAAO,oBAAoB,eAAe,CAAC,CAChD,QAAQ,aAAa,sBACvB,CAAC,CAAC,KAAK,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CAAC;EAEzE,OAAO,OAAO,MAAM,sBAAsB,MAAM,eAAe,aAAa,KAAK,CAAC;CACpF,CAAC,CACH;CAIA,OAAOA,cAAsB,KAM3B,SAAS,EAAE,KAAA,EARC,SAAS,YAAoB,yBAAyB,SAAS,QAAQ,SAAS,EAQ/E,EAAE,CAAC;AACpB;AAEA,MAAa,eAAe;;AAE1B,MAAM,iBACR"}
+{"version":3,"file":"CloudflareMemory.mjs","names":["EffectCfDurableObject"],"sources":["../src/CloudflareMemory.ts"],"sourcesContent":["import * as Memory from \"@effect-agent/core/Memory\";\nimport * as MemoryNamespace from \"@effect-agent/core/MemoryNamespace\";\nimport { MemoryNamespaceAddress } from \"@effect-agent/core/MemoryNamespace\";\nimport { type MemoryLookup, MemoryRecallLimits } from \"@effect-agent/core/MemoryReference\";\nimport { MemoryAccess } from \"@effect-agent/core/MemoryRevalidation\";\nimport {\n  type MemoryReader,\n  type MemoryWrite,\n  MemoryKey,\n  MemoryDocument,\n  MemoryMutationFailpoint,\n  MemoryStorageError,\n  MemoryWriter,\n} from \"@effect-agent/core/MemoryStore\";\nimport {\n  type MemoryIndexSearch,\n  type SemanticMemoryProfile,\n} from \"@effect-agent/core/SemanticMemoryIndex\";\nimport { type SemanticCandidateLimits } from \"@effect-agent/core/SemanticMemoryRevalidation\";\nimport {\n  type DoMemoryStorageLimits,\n  defaultDoMemoryStorageLimits,\n  doMemoryStoreLayerWithFailpoints,\n} from \"@effect-agent/storage-cloudflare/DoMemoryStore\";\nimport {\n  type MemoryOwnerAuthorizer,\n  decodeMemoryWire,\n  defaultMemoryRpcLimits,\n  encodeMemoryWire,\n  handleMemoryOwnerRequest,\n  MemoryOwnerIdentity,\n  MemoryOwnerRequest,\n  MemoryOwnerResponse,\n  MemoryRpcError,\n  MemoryRpcLimits,\n  type MemoryOwnerFailure,\n} from \"@effect-agent/storage-cloudflare/MemoryProtocol\";\nimport { Principal } from \"@effect-agent/thread/SubmissionLedger\";\nimport { Clock, Context, Effect, Layer, Schema } from \"effect\";\nimport {\n  DurableObject as EffectCfDurableObject,\n  DurableObjectState,\n  type WorkerEnvironment,\n} from \"effect-cf\";\n\nexport interface MemoryObjectRpc extends Rpc.DurableObjectBranded {\n  memory(encoded: string): Promise<string>;\n}\n\nexport class MemoryObjectNamespace extends Context.Service<\n  MemoryObjectNamespace,\n  {\n    readonly namespace: DurableObjectNamespace<MemoryObjectRpc>;\n  }\n>()(\"@effect-agent/platform-cloudflare/MemoryObjectNamespace\") {}\n\n/** Namespace version and identity are already canonicalized by MemoryNamespace. */\nexport const memoryObjectName = (namespace: MemoryNamespace.Any): string => namespace.address;\n\n/**\n * Effect-native, host-bound memory client. Recall revalidates the entire admitted lookup\n * in one RPC and renders it locally. No retries or per-source splitting occur here.\n * Interrupted callers stop waiting; the owner has its own deadline. A timed-out write\n * may have committed: reconcile by sending the identical operation ID and command.\n */\nconst makeMemoryClient = Effect.fn(\"CloudflareMemoryClient.make\")(function* <\n  Namespace extends MemoryNamespace.Any,\n>(\n  access: MemoryAccess<Namespace>,\n  principal: Principal,\n  rpcLimits: MemoryRpcLimits = defaultMemoryRpcLimits,\n) {\n  const validated = yield* Schema.decodeUnknownEffect(MemoryRpcLimits)(rpcLimits).pipe(\n    Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n  );\n\n  const bound = yield* Schema.decodeUnknownEffect(MemoryAccess.Wire)(access).pipe(\n    Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n  );\n\n  principal = yield* Schema.decodeUnknownEffect(Principal)(principal).pipe(\n    Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n  );\n  const { namespace } = yield* MemoryObjectNamespace;\n\n  const call = Effect.fn(\"CloudflareMemoryClient.call\")(function* (request: MemoryOwnerRequest) {\n    const decoded = yield* Schema.decodeUnknownEffect(MemoryOwnerRequest)(request).pipe(\n      Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n    );\n\n    const encoded = yield* encodeMemoryWire(MemoryOwnerRequest, decoded, validated.maxRequestBytes);\n\n    const raw = yield* Effect.tryPromise({\n      try: () =>\n        namespace.get(namespace.idFromName(memoryObjectName(bound.namespace))).memory(encoded),\n      catch: () => MemoryRpcError.make({ reason: \"unavailable\" }),\n    });\n\n    const response = yield* decodeMemoryWire(MemoryOwnerResponse, raw, validated.maxResponseBytes);\n\n    if (response._tag === \"Failed\") return yield* response.failure;\n    if (\n      !MemoryNamespace.equals(response.access.namespace, bound.namespace) ||\n      response.access.scope !== bound.scope\n    )\n      return yield* MemoryRpcError.make({ reason: \"protocol\" });\n\n    return response;\n  });\n\n  const withinDeadline = <A, E, R>(effect: Effect.Effect<A, E, R>, timeoutMillis: number) =>\n    effect.pipe(\n      Effect.timeoutOrElse({\n        duration: timeoutMillis,\n        orElse: () => Effect.fail(MemoryRpcError.make({ reason: \"timeout\" })),\n      }),\n    );\n\n  const revalidate = Effect.fn(\"CloudflareMemoryClient.revalidate\")(function* (\n    lookup: MemoryLookup,\n    limits: MemoryRecallLimits,\n  ) {\n    limits = yield* Schema.decodeUnknownEffect(MemoryRecallLimits)(limits).pipe(\n      Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n    );\n    const timeoutMillis = Math.min(validated.timeoutMillis, limits.timeoutMillis);\n\n    return yield* Effect.gen(function* () {\n      const response = yield* call({\n        _tag: \"Revalidate\",\n        version: 1,\n        access: bound,\n        principal,\n        lookup,\n        limits,\n        deadlineMillis: (yield* Clock.currentTimeMillis) + timeoutMillis,\n      });\n\n      if (response._tag !== \"Lookup\") return yield* MemoryRpcError.make({ reason: \"protocol\" });\n\n      return response.lookup;\n    }).pipe((effect) => withinDeadline(effect, timeoutMillis));\n  });\n\n  const change = Effect.fn(\"CloudflareMemoryClient.change\")(function* (\n    write: MemoryWrite<Namespace>,\n  ) {\n    if (!MemoryNamespace.equals(write.key.namespace, bound.namespace))\n      return yield* MemoryRpcError.make({ reason: \"denied\" });\n\n    return yield* Effect.gen(function* () {\n      const response = yield* call({\n        _tag: \"Change\",\n        version: 1,\n        access: bound,\n        principal,\n        write,\n        deadlineMillis: (yield* Clock.currentTimeMillis) + validated.timeoutMillis,\n      });\n\n      if (response._tag !== \"Changed\" || response.document.key.id !== write.key.id)\n        return yield* MemoryRpcError.make({ reason: \"protocol\" });\n\n      return yield* MemoryDocument.restore(access.namespace, response.document);\n    }).pipe((effect) => withinDeadline(effect, validated.timeoutMillis));\n  });\n\n  /**\n   * Read one exact current document in one owner RPC. Null means absent; withdrawals return\n   * tombstones. Denial, unavailable storage and deadlines fail typed, never become absence.\n   * Reads begun after an acknowledged write observe it or a later revision. The owner checks\n   * exact-key authority and active document scopes; source-dependent provenance policy remains\n   * application-owned. No extraction, job draining, embedding, discovery or rendering occurs.\n   */\n  const get = Effect.fn(\"CloudflareMemoryClient.get\")(function* (key: MemoryKey<Namespace>) {\n    const decodedKey = yield* Schema.decodeUnknownEffect(MemoryKey.Wire)(key).pipe(\n      Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })),\n    );\n\n    if (!MemoryNamespace.equals(decodedKey.namespace, bound.namespace))\n      return yield* MemoryRpcError.make({ reason: \"denied\" });\n\n    return yield* Effect.gen(function* () {\n      const response = yield* call({\n        _tag: \"Get\",\n        version: 1,\n        access: bound,\n        principal,\n        key: decodedKey,\n        deadlineMillis: (yield* Clock.currentTimeMillis) + validated.timeoutMillis,\n      });\n\n      if (\n        response._tag !== \"Document\" ||\n        !MemoryNamespace.equals(response.key.namespace, bound.namespace) ||\n        response.key.id !== decodedKey.id\n      )\n        return yield* MemoryRpcError.make({ reason: \"protocol\" });\n      if (response.document === null) return null;\n      if (\n        response.document.key.id !== decodedKey.id ||\n        response.document.source.id !== decodedKey.id ||\n        (response.document._tag === \"ActiveMemoryDocument\" &&\n          !response.document.scopes.includes(bound.scope))\n      )\n        return yield* MemoryRpcError.make({ reason: \"protocol\" });\n\n      yield* encodeMemoryWire(MemoryDocument.Wire, response.document, validated.maxSourceBytes);\n\n      return yield* MemoryDocument.restore(access.namespace, response.document);\n    }).pipe((effect) => withinDeadline(effect, validated.timeoutMillis));\n  });\n\n  const revalidateSemantic = Effect.fn(\"CloudflareMemoryClient.revalidateSemantic\")(function* (\n    found: MemoryIndexSearch<Namespace>,\n    profile: SemanticMemoryProfile,\n    limits: SemanticCandidateLimits,\n  ) {\n    return yield* Effect.gen(function* () {\n      const response = yield* call({\n        _tag: \"RevalidateSemantic\",\n        version: 1,\n        access: bound,\n        principal,\n        found,\n        profile,\n        limits,\n        deadlineMillis: (yield* Clock.currentTimeMillis) + validated.timeoutMillis,\n      });\n\n      if (response._tag !== \"Semantic\") return yield* MemoryRpcError.make({ reason: \"protocol\" });\n\n      return response.result;\n    }).pipe((effect) => withinDeadline(effect, validated.timeoutMillis));\n  });\n\n  /**\n   * Revalidate in one owner RPC, then render whole passages within the caller's budget.\n   * The bound source is essential: unavailable/stale results and matches that cannot fit\n   * fail instead of silently producing empty context. No-match remains successful.\n   * The single outcome has sourceId \"memory\". No embedding or candidate search is performed.\n   * Use revalidate with Memory.recall for multiple readers sharing one output budget.\n   */\n  const recall = Effect.fn(\"CloudflareMemoryClient.recall\")(function* (\n    lookup: MemoryLookup,\n    limits: MemoryRecallLimits,\n    estimateTokens?: (text: string) => number,\n  ) {\n    return yield* Memory.recall(\n      [{ id: \"memory\", essential: true, read: revalidate(lookup, limits) }],\n      limits,\n      estimateTokens,\n    );\n  });\n\n  return { get, recall, revalidate, revalidateSemantic, change };\n});\n\nexport const CloudflareMemoryClient = {\n  /** Bind access and principal using the MemoryObjectNamespace supplied by the application. */\n  make: makeMemoryClient,\n  /** Use a resolved Worker or Durable Object binding without manual service provisioning. */\n  fromBinding: Effect.fn(\"CloudflareMemoryClient.fromBinding\")(function* <\n    Namespace extends MemoryNamespace.Any,\n  >(\n    binding: DurableObjectNamespace<MemoryObjectRpc>,\n    options: {\n      readonly access: MemoryAccess<Namespace>;\n      readonly principal: Principal;\n      readonly rpcLimits?: MemoryRpcLimits;\n    },\n  ) {\n    return yield* makeMemoryClient(options.access, options.principal, options.rpcLimits).pipe(\n      Effect.provideService(MemoryObjectNamespace, { namespace: binding }),\n    );\n  }),\n};\n\n/**\n * Optional activity-processor destination. Keeps domain write errors intact; transport,\n * authorization and deadline failures become the existing MemoryStorageError contract.\n * Receipts remain authoritative, including after caller interruption or lost replies.\n */\nexport const cloudflareMemoryWriterLayer = (\n  access: MemoryAccess,\n  principal: Principal,\n  limits: MemoryRpcLimits = defaultMemoryRpcLimits,\n) =>\n  Layer.effect(\n    MemoryWriter,\n    Effect.gen(function* () {\n      const client = yield* CloudflareMemoryClient.make(access, principal, limits);\n\n      return MemoryWriter.fromAdapter({\n        change: (write) =>\n          client.change(write).pipe(\n            Effect.catchTag(\"MemoryRpcError\", (error) =>\n              Effect.fail(\n                MemoryStorageError.make({\n                  operation: `memory RPC ${error.reason}`,\n                  reason:\n                    error.reason === \"unavailable\" || error.reason === \"timeout\"\n                      ? \"unavailable\"\n                      : \"invalid-input\",\n                }),\n              ),\n            ),\n            Effect.catchTag([\"MemoryRecallError\", \"MemoryIndexError\", \"SemanticMemoryError\"], () =>\n              Effect.fail(\n                MemoryStorageError.make({ operation: \"memory RPC response\", reason: \"corrupt\" }),\n              ),\n            ),\n          ),\n      });\n    }),\n  );\n\ntype OwnerServices = MemoryReader | MemoryWriter | MemoryOwnerAuthorizer | MemoryOwnerIdentity;\n\nexport interface MemoryObjectInstance extends InstanceType<\n  EffectCfDurableObject.DurableObjectClass<Record<never, never>, OwnerServices>\n> {\n  memory(encoded: string): Promise<string>;\n}\n\nexport interface MemoryObjectClass {\n  new (ctx: globalThis.DurableObjectState, env: Cloudflare.Env): MemoryObjectInstance;\n}\n\n/**\n * Dedicated SQLite owner, independent of Thread lifetimes. The host binds authorization\n * after restoring its namespace definition from MemoryOwnerIdentity. Do not retain\n * cleanup-scoped resources in the host Layer; it lives for the DO incarnation.\n */\nconst makeMemoryObject = <E>(\n  host: Layer.Layer<\n    MemoryOwnerAuthorizer,\n    E,\n    MemoryOwnerIdentity | DurableObjectState.DurableObjectState | WorkerEnvironment\n  >,\n  options: {\n    readonly storageLimits?: DoMemoryStorageLimits;\n    readonly rpcLimits?: MemoryRpcLimits;\n    readonly failpoints?: Layer.Layer<\n      MemoryMutationFailpoint,\n      never,\n      DurableObjectState.DurableObjectState\n    >;\n  } = {},\n): MemoryObjectClass => {\n  const identity = Layer.effect(\n    MemoryOwnerIdentity,\n    Effect.gen(function* () {\n      const state = yield* DurableObjectState.DurableObjectState;\n\n      const address = yield* Schema.decodeUnknownEffect(MemoryNamespaceAddress)(\n        state.raw.id.name,\n      ).pipe(Effect.mapError(() => MemoryRpcError.make({ reason: \"denied\" })));\n\n      return { namespace: MemoryNamespace.Any.make({ address }) };\n    }),\n  );\n\n  const store = Layer.unwrap(\n    Effect.map(DurableObjectState.DurableObjectState, (state) =>\n      doMemoryStoreLayerWithFailpoints(\n        state.raw.storage,\n        options.storageLimits ?? defaultDoMemoryStorageLimits,\n      ),\n    ),\n  ).pipe(Layer.provide(options.failpoints ?? MemoryMutationFailpoint.layer));\n\n  const application = Layer.merge(store, host).pipe(Layer.provideMerge(identity));\n\n  const runtime: Layer.Layer<\n    OwnerServices,\n    E | MemoryOwnerFailure,\n    DurableObjectState.DurableObjectState | WorkerEnvironment\n  > = Layer.effectContext(\n    Effect.gen(function* () {\n      const state = yield* DurableObjectState.DurableObjectState;\n      const scope = yield* Effect.scope;\n\n      yield* Schema.decodeUnknownEffect(MemoryRpcLimits)(\n        options.rpcLimits ?? defaultMemoryRpcLimits,\n      ).pipe(Effect.mapError(() => MemoryRpcError.make({ reason: \"protocol\" })));\n\n      return yield* state.blockConcurrencyWhile(Layer.buildWithScope(application, scope));\n    }),\n  );\n\n  const rpc = { memory: (encoded: string) => handleMemoryOwnerRequest(encoded, options.rpcLimits) };\n\n  return EffectCfDurableObject.make<\n    OwnerServices,\n    E | MemoryOwnerFailure,\n    never,\n    never,\n    typeof rpc\n  >(runtime, { rpc });\n};\n\nexport const MemoryObject = {\n  /** Build the SQLite Durable Object class with the application's owner authorization Layer. */\n  make: makeMemoryObject,\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAiDA,IAAa,wBAAb,cAA2C,QAAQ,QAKjD,CAAC,CAAC,yDAAyD,CAAC,CAAC,CAAC;;AAGhE,MAAa,oBAAoB,cAA2C,UAAU;;;;;;;AAQtF,MAAM,mBAAmB,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAGhE,QACA,WACA,YAA6B,wBAC7B;CACA,MAAM,YAAY,OAAO,OAAO,oBAAoB,eAAe,CAAC,CAAC,SAAS,CAAC,CAAC,KAC9E,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;CAEA,MAAM,QAAQ,OAAO,OAAO,oBAAoB,aAAa,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KACzE,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;CAEA,YAAY,OAAO,OAAO,oBAAoB,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,KAClE,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;CACA,MAAM,EAAE,cAAc,OAAO;CAE7B,MAAM,OAAO,OAAO,GAAG,6BAA6B,CAAC,CAAC,WAAW,SAA6B;EAC5F,MAAM,UAAU,OAAO,OAAO,oBAAoB,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,KAC7E,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;EAEA,MAAM,UAAU,OAAO,iBAAiB,oBAAoB,SAAS,UAAU,eAAe;EAE9F,MAAM,MAAM,OAAO,OAAO,WAAW;GACnC,WACE,UAAU,IAAI,UAAU,WAAW,iBAAiB,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO;GACvF,aAAa,eAAe,KAAK,EAAE,QAAQ,cAAc,CAAC;EAC5D,CAAC;EAED,MAAM,WAAW,OAAO,iBAAiB,qBAAqB,KAAK,UAAU,gBAAgB;EAE7F,IAAI,SAAS,SAAS,UAAU,OAAO,OAAO,SAAS;EACvD,IACE,CAAC,gBAAgB,OAAO,SAAS,OAAO,WAAW,MAAM,SAAS,KAClE,SAAS,OAAO,UAAU,MAAM,OAEhC,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC;EAE1D,OAAO;CACT,CAAC;CAED,MAAM,kBAA2B,QAAgC,kBAC/D,OAAO,KACL,OAAO,cAAc;EACnB,UAAU;EACV,cAAc,OAAO,KAAK,eAAe,KAAK,EAAE,QAAQ,UAAU,CAAC,CAAC;CACtE,CAAC,CACH;CAEF,MAAM,aAAa,OAAO,GAAG,mCAAmC,CAAC,CAAC,WAChE,QACA,QACA;EACA,SAAS,OAAO,OAAO,oBAAoB,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,KACrE,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;EACA,MAAM,gBAAgB,KAAK,IAAI,UAAU,eAAe,OAAO,aAAa;EAE5E,OAAO,OAAO,OAAO,IAAI,aAAa;GACpC,MAAM,WAAW,OAAO,KAAK;IAC3B,MAAM;IACN,SAAS;IACT,QAAQ;IACR;IACA;IACA;IACA,iBAAiB,OAAO,MAAM,qBAAqB;GACrD,CAAC;GAED,IAAI,SAAS,SAAS,UAAU,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC;GAExF,OAAO,SAAS;EAClB,CAAC,CAAC,CAAC,MAAM,WAAW,eAAe,QAAQ,aAAa,CAAC;CAC3D,CAAC;CAED,MAAM,SAAS,OAAO,GAAG,+BAA+B,CAAC,CAAC,WACxD,OACA;EACA,IAAI,CAAC,gBAAgB,OAAO,MAAM,IAAI,WAAW,MAAM,SAAS,GAC9D,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;EAExD,OAAO,OAAO,OAAO,IAAI,aAAa;GACpC,MAAM,WAAW,OAAO,KAAK;IAC3B,MAAM;IACN,SAAS;IACT,QAAQ;IACR;IACA;IACA,iBAAiB,OAAO,MAAM,qBAAqB,UAAU;GAC/D,CAAC;GAED,IAAI,SAAS,SAAS,aAAa,SAAS,SAAS,IAAI,OAAO,MAAM,IAAI,IACxE,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC;GAE1D,OAAO,OAAO,eAAe,QAAQ,OAAO,WAAW,SAAS,QAAQ;EAC1E,CAAC,CAAC,CAAC,MAAM,WAAW,eAAe,QAAQ,UAAU,aAAa,CAAC;CACrE,CAAC;;;;;;;;CASD,MAAM,MAAM,OAAO,GAAG,4BAA4B,CAAC,CAAC,WAAW,KAA2B;EACxF,MAAM,aAAa,OAAO,OAAO,oBAAoB,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KACxE,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CACnE;EAEA,IAAI,CAAC,gBAAgB,OAAO,WAAW,WAAW,MAAM,SAAS,GAC/D,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC;EAExD,OAAO,OAAO,OAAO,IAAI,aAAa;GACpC,MAAM,WAAW,OAAO,KAAK;IAC3B,MAAM;IACN,SAAS;IACT,QAAQ;IACR;IACA,KAAK;IACL,iBAAiB,OAAO,MAAM,qBAAqB,UAAU;GAC/D,CAAC;GAED,IACE,SAAS,SAAS,cAClB,CAAC,gBAAgB,OAAO,SAAS,IAAI,WAAW,MAAM,SAAS,KAC/D,SAAS,IAAI,OAAO,WAAW,IAE/B,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC;GAC1D,IAAI,SAAS,aAAa,MAAM,OAAO;GACvC,IACE,SAAS,SAAS,IAAI,OAAO,WAAW,MACxC,SAAS,SAAS,OAAO,OAAO,WAAW,MAC1C,SAAS,SAAS,SAAS,0BAC1B,CAAC,SAAS,SAAS,OAAO,SAAS,MAAM,KAAK,GAEhD,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC;GAE1D,OAAO,iBAAiB,eAAe,MAAM,SAAS,UAAU,UAAU,cAAc;GAExF,OAAO,OAAO,eAAe,QAAQ,OAAO,WAAW,SAAS,QAAQ;EAC1E,CAAC,CAAC,CAAC,MAAM,WAAW,eAAe,QAAQ,UAAU,aAAa,CAAC;CACrE,CAAC;CAED,MAAM,qBAAqB,OAAO,GAAG,2CAA2C,CAAC,CAAC,WAChF,OACA,SACA,QACA;EACA,OAAO,OAAO,OAAO,IAAI,aAAa;GACpC,MAAM,WAAW,OAAO,KAAK;IAC3B,MAAM;IACN,SAAS;IACT,QAAQ;IACR;IACA;IACA;IACA;IACA,iBAAiB,OAAO,MAAM,qBAAqB,UAAU;GAC/D,CAAC;GAED,IAAI,SAAS,SAAS,YAAY,OAAO,OAAO,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC;GAE1F,OAAO,SAAS;EAClB,CAAC,CAAC,CAAC,MAAM,WAAW,eAAe,QAAQ,UAAU,aAAa,CAAC;CACrE,CAAC;CAqBD,OAAO;EAAE;EAAK,QAZC,OAAO,GAAG,+BAA+B,CAAC,CAAC,WACxD,QACA,QACA,gBACA;GACA,OAAO,OAAO,OAAO,OACnB,CAAC;IAAE,IAAI;IAAU,WAAW;IAAM,MAAM,WAAW,QAAQ,MAAM;GAAE,CAAC,GACpE,QACA,cACF;EACF,CAEmB;EAAG;EAAY;EAAoB;CAAO;AAC/D,CAAC;AAED,MAAa,yBAAyB;;CAEpC,MAAM;;CAEN,aAAa,OAAO,GAAG,oCAAoC,CAAC,CAAC,WAG3D,SACA,SAKA;EACA,OAAO,OAAO,iBAAiB,QAAQ,QAAQ,QAAQ,WAAW,QAAQ,SAAS,CAAC,CAAC,KACnF,OAAO,eAAe,uBAAuB,EAAE,WAAW,QAAQ,CAAC,CACrE;CACF,CAAC;AACH;;;;;;AAOA,MAAa,+BACX,QACA,WACA,SAA0B,2BAE1B,MAAM,OACJ,cACA,OAAO,IAAI,aAAa;CACtB,MAAM,SAAS,OAAO,uBAAuB,KAAK,QAAQ,WAAW,MAAM;CAE3E,OAAO,aAAa,YAAY,EAC9B,SAAS,UACP,OAAO,OAAO,KAAK,CAAC,CAAC,KACnB,OAAO,SAAS,mBAAmB,UACjC,OAAO,KACL,mBAAmB,KAAK;EACtB,WAAW,cAAc,MAAM;EAC/B,QACE,MAAM,WAAW,iBAAiB,MAAM,WAAW,YAC/C,gBACA;CACR,CAAC,CACH,CACF,GACA,OAAO,SAAS;EAAC;EAAqB;EAAoB;CAAqB,SAC7E,OAAO,KACL,mBAAmB,KAAK;EAAE,WAAW;EAAuB,QAAQ;CAAU,CAAC,CACjF,CACF,CACF,EACJ,CAAC;AACH,CAAC,CACH;;;;;;AAmBF,MAAM,oBACJ,MAKA,UAQI,CAAC,MACiB;CACtB,MAAM,WAAW,MAAM,OACrB,qBACA,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,mBAAmB;EAExC,MAAM,UAAU,OAAO,OAAO,oBAAoB,sBAAsB,CAAC,CACvE,MAAM,IAAI,GAAG,IACf,CAAC,CAAC,KAAK,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,SAAS,CAAC,CAAC,CAAC;EAEvE,OAAO,EAAE,WAAW,gBAAgB,IAAI,KAAK,EAAE,QAAQ,CAAC,EAAE;CAC5D,CAAC,CACH;CAEA,MAAM,QAAQ,MAAM,OAClB,OAAO,IAAI,mBAAmB,qBAAqB,UACjD,iCACE,MAAM,IAAI,SACV,QAAQ,iBAAiB,4BAC3B,CACF,CACF,CAAC,CAAC,KAAK,MAAM,QAAQ,QAAQ,cAAc,wBAAwB,KAAK,CAAC;CAEzE,MAAM,cAAc,MAAM,MAAM,OAAO,IAAI,CAAC,CAAC,KAAK,MAAM,aAAa,QAAQ,CAAC;CAE9E,MAAM,UAIF,MAAM,cACR,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,mBAAmB;EACxC,MAAM,QAAQ,OAAO,OAAO;EAE5B,OAAO,OAAO,oBAAoB,eAAe,CAAC,CAChD,QAAQ,aAAa,sBACvB,CAAC,CAAC,KAAK,OAAO,eAAe,eAAe,KAAK,EAAE,QAAQ,WAAW,CAAC,CAAC,CAAC;EAEzE,OAAO,OAAO,MAAM,sBAAsB,MAAM,eAAe,aAAa,KAAK,CAAC;CACpF,CAAC,CACH;CAIA,OAAOA,cAAsB,KAM3B,SAAS,EAAE,KAAA,EARC,SAAS,YAAoB,yBAAyB,SAAS,QAAQ,SAAS,EAQ/E,EAAE,CAAC;AACpB;AAEA,MAAa,eAAe;;AAE1B,MAAM,iBACR"}