@effect-agent/platform-cloudflare 0.1.0-beta.9 → 0.1.0-beta.91

package/dist/BrowserRestCrawl.mjs

@@ -0,0 +1,244 @@
+import { Duration, Effect, Layer, Option, Redacted, Ref, Schedule, Schema, Scope, Stream } from "effect";
+import { SandboxImplementation } from "effect-agent/sandbox";
+import { HttpClient, HttpClientRequest } from "effect/unstable/http";
+import { PageCrawl, PageCrawlLimitError, PageCrawlProtocolError, PageCrawlRateLimitedError, PageCrawlRecord, PageCrawlTerminalError } from "effect-agent/page-crawl";
+//#region src/BrowserRestCrawl.ts
+/** Node-safe REST crawl implementation. It never exposes or persists provider job identity. */
+const browserRestCrawlImplementation = SandboxImplementation.make({
+	isolation: "isolated",
+	identity: "cloudflare-browser-rest-crawl"
+});
+const API_ORIGIN = "https://api.cloudflare.com";
+const POLL_INTERVAL = Duration.seconds(1);
+const CANCEL_TIMEOUT = Duration.seconds(30);
+const MAX_CONTROL_RESPONSE_BYTES = 65536;
+const MAX_RESULTS_RESPONSE_BYTES = 12582912;
+const MAX_DIAGNOSTIC_LENGTH = 8e3;
+const MAX_CURSOR_LENGTH = 1024;
+const MAX_RECORDS_PER_RESPONSE = 1e4;
+const BoundedJobId = Schema.NonEmptyString.check(Schema.isMaxLength(256));
+const BoundedCursorString = Schema.NonEmptyString.check(Schema.isMaxLength(MAX_CURSOR_LENGTH));
+const ProviderCursor = Schema.Union([BoundedCursorString, Schema.Natural]);
+const ProviderJobStatus = Schema.Literals([
+	"running",
+	"completed",
+	"errored",
+	"cancelled_by_user",
+	"cancelled_due_to_timeout",
+	"cancelled_due_to_limits"
+]);
+const ProviderResult = Schema.Struct({
+	id: BoundedJobId,
+	status: ProviderJobStatus,
+	browserSecondsUsed: Schema.optionalKey(Schema.Finite.check(Schema.isGreaterThanOrEqualTo(0))),
+	total: Schema.optionalKey(Schema.Natural),
+	finished: Schema.optionalKey(Schema.Natural),
+	skipped: Schema.optionalKey(Schema.Natural),
+	records: Schema.Array(PageCrawlRecord).check(Schema.isMaxLength(MAX_RECORDS_PER_RESPONSE)),
+	cursor: Schema.optionalKey(ProviderCursor)
+});
+const CreateEnvelope = Schema.Struct({
+	success: Schema.Literal(true),
+	result: BoundedJobId
+});
+const ResultEnvelope = Schema.Struct({
+	success: Schema.Literal(true),
+	result: ProviderResult
+});
+const DeleteEnvelope = Schema.Struct({
+	success: Schema.Literal(true),
+	result: Schema.Struct({
+		job_id: BoundedJobId,
+		message: Schema.String.check(Schema.isMaxLength(MAX_DIAGNOSTIC_LENGTH))
+	})
+});
+const boundedDiagnostic = (message) => message.slice(0, MAX_DIAGNOSTIC_LENGTH);
+const privateCause = (value, apiToken) => {
+	const raw = boundedDiagnostic(String(value));
+	if (raw.length === 0) return void 0;
+	const token = Redacted.value(apiToken);
+	return new Error(token.length === 0 ? raw : raw.replaceAll(token, "[REDACTED]"));
+};
+const protocolError = (message, cause) => PageCrawlProtocolError.make({
+	implementation: browserRestCrawlImplementation,
+	message: boundedDiagnostic(message),
+	...cause === void 0 ? {} : { cause }
+});
+const limitError = (request, limit, observed) => {
+	const maximum = limit === "pages" ? request.limits.maxPages : limit === "page-bytes" ? request.limits.maxPageBytes : limit === "total-bytes" ? request.limits.maxTotalBytes : request.limits.deadlineMillis;
+	return PageCrawlLimitError.make({
+		implementation: browserRestCrawlImplementation,
+		limit,
+		maximum,
+		observed,
+		message: `The crawl exceeded its ${limit} limit`
+	});
+};
+const retryAfterMillis = (headers) => {
+	const seconds = Number(headers["retry-after"]);
+	if (!Number.isSafeInteger(seconds) || seconds < 0) return void 0;
+	const millis = seconds * 1e3;
+	return Number.isSafeInteger(millis) ? millis : void 0;
+};
+const isJsonResponse = (headers) => {
+	const contentType = headers["content-type"];
+	if (contentType === void 0) return false;
+	const mediaType = contentType.split(";", 1)[0]?.trim().toLowerCase();
+	return mediaType === "application/json" || mediaType?.endsWith("+json") === true;
+};
+const isQuotaMessage = (bodyText) => /time limit|daily|quota/i.test(bodyText);
+const endpoint = (options, jobId) => `${API_ORIGIN}/client/v4/accounts/${encodeURIComponent(options.accountId)}/browser-rendering/crawl${jobId === void 0 ? "" : `/${encodeURIComponent(jobId)}`}`;
+const readBoundedResponse = Effect.fn("BrowserRestCrawl.readBoundedResponse")(function* (response, maximum) {
+	const decoder = new TextDecoder("utf-8", {
+		fatal: true,
+		ignoreBOM: false
+	});
+	const state = yield* Stream.runFoldEffect(response.stream, () => ({
+		observed: 0,
+		text: ""
+	}), (current, chunk) => {
+		const observed = current.observed + chunk.byteLength;
+		if (observed > maximum) return Effect.fail(protocolError(`The Browser Run crawl response exceeded ${String(maximum)} transport bytes`));
+		return Effect.try({
+			try: () => ({
+				observed,
+				text: current.text + decoder.decode(chunk, { stream: true })
+			}),
+			catch: (cause) => protocolError("Decoding the Browser Run crawl response failed", cause)
+		});
+	}).pipe(Effect.mapError((cause) => Schema.is(PageCrawlProtocolError)(cause) ? cause : protocolError("Reading the Browser Run crawl response failed", cause)));
+	return yield* Effect.try({
+		try: () => state.text + decoder.decode(),
+		catch: (cause) => protocolError("Decoding the Browser Run crawl response failed", cause)
+	});
+});
+const deadlineFailure = Effect.fn("BrowserRestCrawl.deadlineFailure")(function* (request, startedAt) {
+	const now = yield* Effect.clockWith((clock) => clock.currentTimeMillis);
+	return yield* limitError(request, "deadline", Math.max(0, now - startedAt));
+});
+const withinDeadline = Effect.fn("BrowserRestCrawl.withinDeadline")(function* (effect, request, startedAt) {
+	const now = yield* Effect.clockWith((clock) => clock.currentTimeMillis);
+	const elapsed = Math.max(0, now - startedAt);
+	const remaining = request.limits.deadlineMillis - elapsed;
+	if (remaining <= 0) return yield* limitError(request, "deadline", elapsed);
+	return yield* effect.pipe(Effect.timeoutOrElse({
+		duration: Duration.millis(remaining),
+		orElse: () => deadlineFailure(request, startedAt)
+	}));
+});
+const checkDeadline = Effect.fn("BrowserRestCrawl.checkDeadline")(function* (request, startedAt) {
+	const now = yield* Effect.clockWith((clock) => clock.currentTimeMillis);
+	const elapsed = Math.max(0, now - startedAt);
+	if (elapsed >= request.limits.deadlineMillis) return yield* limitError(request, "deadline", elapsed);
+});
+const normalizedCursor = (cursor) => String(cursor);
+const sameHost = (expectedHost, url) => new URL(url).host === expectedHost;
+const makeCrawl = (client, options) => (input) => Stream.unwrap(Effect.gen(function* () {
+	const startedAt = yield* Effect.clockWith((clock) => clock.currentTimeMillis);
+	const startHost = new URL(input.startUrl).host;
+	const executeJson = Effect.fn("BrowserRestCrawl.executeJson")(function* (request, schema, maximum) {
+		const authorized = HttpClientRequest.bearerToken(request, options.apiToken).pipe(HttpClientRequest.acceptJson);
+		const response = yield* client.execute(authorized).pipe(Effect.mapError((cause) => protocolError("Calling the Browser Run crawl REST API failed", privateCause(cause, options.apiToken))));
+		const bodyText = yield* readBoundedResponse(response, maximum);
+		if (response.status === 429) {
+			const reason = isQuotaMessage(bodyText) ? "quota" : "rate";
+			return yield* PageCrawlRateLimitedError.make({
+				implementation: browserRestCrawlImplementation,
+				reason,
+				...retryAfterMillis(response.headers) === void 0 ? {} : { retryAfterMillis: retryAfterMillis(response.headers) },
+				message: reason === "quota" ? "Browser Run exceeded its browser quota" : "Browser Run crawl was rate limited",
+				...privateCause(bodyText, options.apiToken) === void 0 ? {} : { cause: privateCause(bodyText, options.apiToken) }
+			});
+		}
+		if (response.status < 200 || response.status >= 300) return yield* protocolError(`Browser Run crawl answered HTTP ${String(response.status)}`, privateCause(bodyText, options.apiToken));
+		if (!isJsonResponse(response.headers)) return yield* protocolError("The Browser Run crawl success response was not JSON", privateCause(bodyText, options.apiToken));
+		return yield* Schema.decodeEffect(Schema.fromJsonString(schema))(bodyText).pipe(Effect.mapError((cause) => protocolError("Browser Run returned a malformed crawl response", privateCause(cause, options.apiToken))));
+	});
+	const createJob = Effect.gen(function* () {
+		const requestWithBody = yield* HttpClientRequest.post(endpoint(options)).pipe(HttpClientRequest.bodyJson({
+			url: input.startUrl,
+			crawlPurposes: [...input.purposes],
+			limit: input.limits.maxPages,
+			depth: input.limits.maxDepth,
+			formats: ["markdown"],
+			render: true,
+			options: {
+				includeExternalLinks: false,
+				includeSubdomains: false
+			}
+		}), Effect.mapError((cause) => protocolError("Encoding the Browser Run crawl request failed", cause)));
+		return (yield* withinDeadline(executeJson(requestWithBody, CreateEnvelope, MAX_CONTROL_RESPONSE_BYTES), input, startedAt)).result;
+	});
+	const job = yield* Effect.uninterruptibleMask((restore) => restore(createJob).pipe(Effect.flatMap((id) => Effect.gen(function* () {
+		const state = yield* Ref.make("running");
+		const scope = yield* Effect.scope;
+		const cancelIfRunning = Ref.modify(state, (current) => current === "running" ? [true, "terminal"] : [false, "terminal"]).pipe(Effect.flatMap((shouldCancel) => {
+			if (!shouldCancel) return Effect.void;
+			return executeJson(HttpClientRequest.delete(endpoint(options, id)), DeleteEnvelope, MAX_CONTROL_RESPONSE_BYTES).pipe(Effect.flatMap((deleted) => deleted.result.job_id === id ? Effect.void : protocolError("Browser Run cancelled a different crawl job"))).pipe(Effect.timeoutOrElse({
+				duration: CANCEL_TIMEOUT,
+				orElse: () => protocolError("Cancelling the Browser Run crawl exceeded 30 seconds")
+			}));
+		}));
+		yield* Scope.addFinalizer(scope, cancelIfRunning.pipe(Effect.catchCause(() => Effect.logWarning("Browser Run crawl cancellation failed"))));
+		return {
+			id,
+			state
+		};
+	}))));
+	const fetchResult = Effect.fn("BrowserRestCrawl.fetchResult")(function* (cursor, statusOnly) {
+		let request = HttpClientRequest.get(endpoint(options, job.id));
+		if (statusOnly) request = HttpClientRequest.setUrlParam(request, "limit", "1");
+		if (Option.isSome(cursor)) request = HttpClientRequest.setUrlParam(request, "cursor", cursor.value);
+		const envelope = yield* withinDeadline(executeJson(request, ResultEnvelope, MAX_RESULTS_RESPONSE_BYTES), input, startedAt);
+		if (envelope.result.id !== job.id) return yield* protocolError("Browser Run returned a different crawl job identity");
+		return envelope.result;
+	});
+	const terminal = yield* Effect.uninterruptibleMask((restore) => restore(withinDeadline(Effect.repeat(fetchResult(Option.none(), true), {
+		schedule: Schedule.spaced(POLL_INTERVAL),
+		until: (result) => result.status !== "running"
+	}), input, startedAt)).pipe(Effect.tap(() => Ref.set(job.state, "terminal"))));
+	if (terminal.status === "running") return yield* protocolError("Browser Run polling stopped before a terminal status");
+	if (terminal.status !== "completed") return yield* PageCrawlTerminalError.make({
+		implementation: browserRestCrawlImplementation,
+		status: terminal.status,
+		message: `Browser Run crawl ended with status ${terminal.status}`
+	});
+	return Stream.paginate({
+		cursor: Option.none(),
+		seen: []
+	}, (state) => Effect.gen(function* () {
+		const result = yield* fetchResult(state.cursor, false);
+		if (result.status !== "completed") return yield* protocolError("Browser Run changed crawl status during result pagination");
+		if (result.cursor === void 0) return [result.records, Option.none()];
+		const cursor = normalizedCursor(result.cursor);
+		if (state.seen.includes(cursor)) return yield* protocolError("Browser Run repeated a crawl result cursor");
+		if (state.seen.length >= input.limits.maxPages) return yield* protocolError("Browser Run returned too many crawl result cursors");
+		return [result.records, Option.some({
+			cursor: Option.some(cursor),
+			seen: [...state.seen, cursor]
+		})];
+	})).pipe(Stream.rechunk(1), Stream.mapAccumEffect(() => ({
+		pages: 0,
+		totalBytes: 0
+	}), (state, record) => Effect.gen(function* () {
+		yield* checkDeadline(input, startedAt);
+		const pages = state.pages + 1;
+		if (pages > input.limits.maxPages) return yield* limitError(input, "pages", pages);
+		if (!sameHost(startHost, record.url)) return yield* protocolError("Browser Run returned an off-host crawl record");
+		if (record.metadata !== void 0 && !sameHost(startHost, record.metadata.url)) return yield* protocolError("Browser Run returned off-host crawl metadata");
+		const pageBytes = record.markdown === void 0 ? 0 : new TextEncoder().encode(record.markdown).byteLength;
+		if (pageBytes > input.limits.maxPageBytes) return yield* limitError(input, "page-bytes", pageBytes);
+		const totalBytes = state.totalBytes + pageBytes;
+		if (totalBytes > input.limits.maxTotalBytes) return yield* limitError(input, "total-bytes", totalBytes);
+		return [{
+			pages,
+			totalBytes
+		}, [record]];
+	})));
+}));
+/** Cloudflare REST PageCrawl Layer for Node and other non-Worker composition roots. */
+const browserRestCrawlLayer = (options) => Layer.effect(PageCrawl, Effect.map(HttpClient.HttpClient, (client) => PageCrawl.of({ crawl: makeCrawl(client, options) })));
+//#endregion
+export { browserRestCrawlImplementation, browserRestCrawlLayer };
+
+//# sourceMappingURL=BrowserRestCrawl.mjs.map

package/dist/BrowserRestCrawl.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserRestCrawl.mjs","names":[],"sources":["../src/BrowserRestCrawl.ts"],"sourcesContent":["import {\n  Duration,\n  Effect,\n  Layer,\n  Option,\n  Redacted,\n  Ref,\n  Schedule,\n  Schema,\n  Scope,\n  Stream,\n} from \"effect\";\nimport {\n  PageCrawl,\n  PageCrawlLimitError,\n  PageCrawlProtocolError,\n  PageCrawlRateLimitedError,\n  PageCrawlRecord,\n  PageCrawlTerminalError,\n  type PageCrawlCrawl,\n  type PageCrawlError,\n  type PageCrawlRequest,\n} from \"effect-agent/page-crawl\";\nimport { SandboxImplementation } from \"effect-agent/sandbox\";\nimport {\n  HttpClient,\n  HttpClientRequest,\n  type HttpClientError,\n  type HttpClientResponse,\n} from \"effect/unstable/http\";\n\n/** Node-safe REST crawl implementation. It never exposes or persists provider job identity. */\nexport const browserRestCrawlImplementation = SandboxImplementation.make({\n  isolation: \"isolated\",\n  identity: \"cloudflare-browser-rest-crawl\",\n});\n\nconst API_ORIGIN = \"https://api.cloudflare.com\";\nconst POLL_INTERVAL = Duration.seconds(1);\nconst CANCEL_TIMEOUT = Duration.seconds(30);\nconst MAX_CONTROL_RESPONSE_BYTES = 64 * 1024;\nconst MAX_RESULTS_RESPONSE_BYTES = 12 * 1024 * 1024;\nconst MAX_DIAGNOSTIC_LENGTH = 8_000;\nconst MAX_CURSOR_LENGTH = 1_024;\nconst MAX_RECORDS_PER_RESPONSE = 10_000;\nconst BoundedJobId = Schema.NonEmptyString.check(Schema.isMaxLength(256));\nconst BoundedCursorString = Schema.NonEmptyString.check(Schema.isMaxLength(MAX_CURSOR_LENGTH));\n// The generated API response Schema says string; the current product example returns a number.\nconst ProviderCursor = Schema.Union([BoundedCursorString, Schema.Natural]);\n\nconst ProviderJobStatus = Schema.Literals([\n  \"running\",\n  \"completed\",\n  \"errored\",\n  \"cancelled_by_user\",\n  \"cancelled_due_to_timeout\",\n  \"cancelled_due_to_limits\",\n]);\n\nconst ProviderResult = Schema.Struct({\n  id: BoundedJobId,\n  status: ProviderJobStatus,\n  browserSecondsUsed: Schema.optionalKey(Schema.Finite.check(Schema.isGreaterThanOrEqualTo(0))),\n  total: Schema.optionalKey(Schema.Natural),\n  finished: Schema.optionalKey(Schema.Natural),\n  skipped: Schema.optionalKey(Schema.Natural),\n  records: Schema.Array(PageCrawlRecord).check(Schema.isMaxLength(MAX_RECORDS_PER_RESPONSE)),\n  cursor: Schema.optionalKey(ProviderCursor),\n});\n\nconst CreateEnvelope = Schema.Struct({\n  success: Schema.Literal(true),\n  result: BoundedJobId,\n});\n\nconst ResultEnvelope = Schema.Struct({\n  success: Schema.Literal(true),\n  result: ProviderResult,\n});\n\nconst DeleteEnvelope = Schema.Struct({\n  success: Schema.Literal(true),\n  result: Schema.Struct({\n    job_id: BoundedJobId,\n    message: Schema.String.check(Schema.isMaxLength(MAX_DIAGNOSTIC_LENGTH)),\n  }),\n});\n\n/** Explicit credentials. The token is projected only into fixed-origin Authorization headers. */\nexport interface BrowserRestCrawlOptions {\n  readonly accountId: string;\n  readonly apiToken: Redacted.Redacted<string>;\n}\n\nconst boundedDiagnostic = (message: string): string => message.slice(0, MAX_DIAGNOSTIC_LENGTH);\n\nconst privateCause = (value: unknown, apiToken: Redacted.Redacted<string>): Error | undefined => {\n  const raw = boundedDiagnostic(String(value));\n\n  if (raw.length === 0) return undefined;\n  const token = Redacted.value(apiToken);\n\n  return new Error(token.length === 0 ? raw : raw.replaceAll(token, \"[REDACTED]\"));\n};\n\nconst protocolError = (message: string, cause?: unknown): PageCrawlProtocolError =>\n  PageCrawlProtocolError.make({\n    implementation: browserRestCrawlImplementation,\n    message: boundedDiagnostic(message),\n    ...(cause === undefined ? {} : { cause }),\n  });\n\nconst limitError = (\n  request: PageCrawlRequest,\n  limit: PageCrawlLimitError[\"limit\"],\n  observed: number,\n): PageCrawlLimitError => {\n  const maximum =\n    limit === \"pages\"\n      ? request.limits.maxPages\n      : limit === \"page-bytes\"\n        ? request.limits.maxPageBytes\n        : limit === \"total-bytes\"\n          ? request.limits.maxTotalBytes\n          : request.limits.deadlineMillis;\n\n  return PageCrawlLimitError.make({\n    implementation: browserRestCrawlImplementation,\n    limit,\n    maximum,\n    observed,\n    message: `The crawl exceeded its ${limit} limit`,\n  });\n};\n\nconst retryAfterMillis = (\n  headers: Readonly<Record<string, string | undefined>>,\n): number | undefined => {\n  const seconds = Number(headers[\"retry-after\"]);\n\n  if (!Number.isSafeInteger(seconds) || seconds < 0) return undefined;\n  const millis = seconds * 1_000;\n\n  return Number.isSafeInteger(millis) ? millis : undefined;\n};\n\nconst isJsonResponse = (headers: Readonly<Record<string, string | undefined>>): boolean => {\n  const contentType = headers[\"content-type\"];\n\n  if (contentType === undefined) return false;\n  const mediaType = contentType.split(\";\", 1)[0]?.trim().toLowerCase();\n\n  return mediaType === \"application/json\" || mediaType?.endsWith(\"+json\") === true;\n};\n\nconst isQuotaMessage = (bodyText: string): boolean => /time limit|daily|quota/i.test(bodyText);\n\nconst endpoint = (options: BrowserRestCrawlOptions, jobId?: string): string =>\n  `${API_ORIGIN}/client/v4/accounts/${encodeURIComponent(options.accountId)}/browser-rendering/crawl${\n    jobId === undefined ? \"\" : `/${encodeURIComponent(jobId)}`\n  }`;\n\nconst readBoundedResponse = Effect.fn(\"BrowserRestCrawl.readBoundedResponse\")(function* (\n  response: HttpClientResponse.HttpClientResponse,\n  maximum: number,\n): Effect.fn.Return<string, PageCrawlProtocolError> {\n  const decoder = new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: false });\n\n  const state = yield* Stream.runFoldEffect<\n    Uint8Array,\n    HttpClientError.HttpClientError,\n    never,\n    { readonly observed: number; readonly text: string },\n    PageCrawlProtocolError,\n    never\n  >(\n    response.stream,\n    () => ({ observed: 0, text: \"\" }),\n    (current, chunk) => {\n      const observed = current.observed + chunk.byteLength;\n\n      if (observed > maximum) {\n        return Effect.fail(\n          protocolError(\n            `The Browser Run crawl response exceeded ${String(maximum)} transport bytes`,\n          ),\n        );\n      }\n\n      return Effect.try({\n        try: () => ({ observed, text: current.text + decoder.decode(chunk, { stream: true }) }),\n        catch: (cause) => protocolError(\"Decoding the Browser Run crawl response failed\", cause),\n      });\n    },\n  ).pipe(\n    Effect.mapError((cause) =>\n      Schema.is(PageCrawlProtocolError)(cause)\n        ? cause\n        : protocolError(\"Reading the Browser Run crawl response failed\", cause),\n    ),\n  );\n\n  return yield* Effect.try({\n    try: () => state.text + decoder.decode(),\n    catch: (cause) => protocolError(\"Decoding the Browser Run crawl response failed\", cause),\n  });\n});\n\nconst deadlineFailure = Effect.fn(\"BrowserRestCrawl.deadlineFailure\")(function* (\n  request: PageCrawlRequest,\n  startedAt: number,\n) {\n  const now = yield* Effect.clockWith((clock) => clock.currentTimeMillis);\n\n  return yield* limitError(request, \"deadline\", Math.max(0, now - startedAt));\n});\n\nconst withinDeadline = Effect.fn(\"BrowserRestCrawl.withinDeadline\")(function* <A, E, R>(\n  effect: Effect.Effect<A, E, R>,\n  request: PageCrawlRequest,\n  startedAt: number,\n): Effect.fn.Return<A, E | PageCrawlLimitError, R> {\n  const now = yield* Effect.clockWith((clock) => clock.currentTimeMillis);\n  const elapsed = Math.max(0, now - startedAt);\n  const remaining = request.limits.deadlineMillis - elapsed;\n\n  if (remaining <= 0) return yield* limitError(request, \"deadline\", elapsed);\n\n  return yield* effect.pipe(\n    Effect.timeoutOrElse({\n      duration: Duration.millis(remaining),\n      orElse: () => deadlineFailure(request, startedAt),\n    }),\n  );\n});\n\nconst checkDeadline = Effect.fn(\"BrowserRestCrawl.checkDeadline\")(function* (\n  request: PageCrawlRequest,\n  startedAt: number,\n) {\n  const now = yield* Effect.clockWith((clock) => clock.currentTimeMillis);\n  const elapsed = Math.max(0, now - startedAt);\n\n  if (elapsed >= request.limits.deadlineMillis) {\n    return yield* limitError(request, \"deadline\", elapsed);\n  }\n});\n\nconst normalizedCursor = (cursor: typeof ProviderCursor.Type): string => String(cursor);\n\ninterface PaginationState {\n  readonly cursor: Option.Option<string>;\n  readonly seen: ReadonlyArray<string>;\n}\n\ninterface RecordLimitsState {\n  readonly pages: number;\n  readonly totalBytes: number;\n}\n\nconst sameHost = (expectedHost: string, url: string): boolean => new URL(url).host === expectedHost;\n\nconst makeCrawl =\n  (client: HttpClient.HttpClient, options: BrowserRestCrawlOptions): PageCrawlCrawl =>\n  (input) =>\n    Stream.unwrap(\n      Effect.gen(function* () {\n        const startedAt = yield* Effect.clockWith((clock) => clock.currentTimeMillis);\n        const startHost = new URL(input.startUrl).host;\n\n        const executeJson = Effect.fn(\"BrowserRestCrawl.executeJson\")(function* <\n          S extends Schema.Top,\n        >(request: HttpClientRequest.HttpClientRequest, schema: S, maximum: number) {\n          const authorized = HttpClientRequest.bearerToken(request, options.apiToken).pipe(\n            HttpClientRequest.acceptJson,\n          );\n\n          const response = yield* client\n            .execute(authorized)\n            .pipe(\n              Effect.mapError((cause) =>\n                protocolError(\n                  \"Calling the Browser Run crawl REST API failed\",\n                  privateCause(cause, options.apiToken),\n                ),\n              ),\n            );\n\n          const bodyText = yield* readBoundedResponse(response, maximum);\n\n          if (response.status === 429) {\n            const reason = isQuotaMessage(bodyText) ? \"quota\" : \"rate\";\n\n            return yield* PageCrawlRateLimitedError.make({\n              implementation: browserRestCrawlImplementation,\n              reason,\n              ...(retryAfterMillis(response.headers) === undefined\n                ? {}\n                : { retryAfterMillis: retryAfterMillis(response.headers) }),\n              message:\n                reason === \"quota\"\n                  ? \"Browser Run exceeded its browser quota\"\n                  : \"Browser Run crawl was rate limited\",\n              ...(privateCause(bodyText, options.apiToken) === undefined\n                ? {}\n                : { cause: privateCause(bodyText, options.apiToken) }),\n            });\n          }\n          if (response.status < 200 || response.status >= 300) {\n            return yield* protocolError(\n              `Browser Run crawl answered HTTP ${String(response.status)}`,\n              privateCause(bodyText, options.apiToken),\n            );\n          }\n          if (!isJsonResponse(response.headers)) {\n            return yield* protocolError(\n              \"The Browser Run crawl success response was not JSON\",\n              privateCause(bodyText, options.apiToken),\n            );\n          }\n\n          return yield* Schema.decodeEffect(Schema.fromJsonString(schema))(bodyText).pipe(\n            Effect.mapError((cause) =>\n              protocolError(\n                \"Browser Run returned a malformed crawl response\",\n                privateCause(cause, options.apiToken),\n              ),\n            ),\n          );\n        });\n\n        const createJob = Effect.gen(function* () {\n          const requestWithBody = yield* HttpClientRequest.post(endpoint(options)).pipe(\n            HttpClientRequest.bodyJson({\n              url: input.startUrl,\n              crawlPurposes: [...input.purposes],\n              limit: input.limits.maxPages,\n              depth: input.limits.maxDepth,\n              formats: [\"markdown\"],\n              render: true,\n              options: {\n                includeExternalLinks: false,\n                includeSubdomains: false,\n              },\n            }),\n            Effect.mapError((cause) =>\n              protocolError(\"Encoding the Browser Run crawl request failed\", cause),\n            ),\n          );\n\n          const created = yield* withinDeadline(\n            executeJson(requestWithBody, CreateEnvelope, MAX_CONTROL_RESPONSE_BYTES),\n            input,\n            startedAt,\n          );\n\n          return created.result;\n        });\n\n        const job = yield* Effect.uninterruptibleMask((restore) =>\n          restore(createJob).pipe(\n            Effect.flatMap((id) =>\n              Effect.gen(function* () {\n                const state = yield* Ref.make<\"running\" | \"terminal\">(\"running\");\n                const scope = yield* Effect.scope;\n\n                const cancelIfRunning = Ref.modify(state, (current) =>\n                  current === \"running\"\n                    ? [true, \"terminal\" as const]\n                    : [false, \"terminal\" as const],\n                ).pipe(\n                  Effect.flatMap((shouldCancel) => {\n                    if (!shouldCancel) return Effect.void;\n\n                    const cancellation = executeJson(\n                      HttpClientRequest.delete(endpoint(options, id)),\n                      DeleteEnvelope,\n                      MAX_CONTROL_RESPONSE_BYTES,\n                    ).pipe(\n                      Effect.flatMap((deleted) =>\n                        deleted.result.job_id === id\n                          ? Effect.void\n                          : protocolError(\"Browser Run cancelled a different crawl job\"),\n                      ),\n                    );\n\n                    return cancellation.pipe(\n                      Effect.timeoutOrElse({\n                        duration: CANCEL_TIMEOUT,\n                        orElse: () =>\n                          protocolError(\"Cancelling the Browser Run crawl exceeded 30 seconds\"),\n                      }),\n                    );\n                  }),\n                );\n\n                yield* Scope.addFinalizer(\n                  scope,\n                  cancelIfRunning.pipe(\n                    Effect.catchCause(() =>\n                      Effect.logWarning(\"Browser Run crawl cancellation failed\"),\n                    ),\n                  ),\n                );\n\n                return { id, state } as const;\n              }),\n            ),\n          ),\n        );\n\n        const fetchResult = Effect.fn(\"BrowserRestCrawl.fetchResult\")(function* (\n          cursor: Option.Option<string>,\n          statusOnly: boolean,\n        ) {\n          let request = HttpClientRequest.get(endpoint(options, job.id));\n\n          if (statusOnly) request = HttpClientRequest.setUrlParam(request, \"limit\", \"1\");\n          if (Option.isSome(cursor)) {\n            request = HttpClientRequest.setUrlParam(request, \"cursor\", cursor.value);\n          }\n\n          // `limit=1` still permits one complete record, so poll GETs use the bounded result cap.\n          const envelope = yield* withinDeadline(\n            executeJson(request, ResultEnvelope, MAX_RESULTS_RESPONSE_BYTES),\n            input,\n            startedAt,\n          );\n\n          if (envelope.result.id !== job.id) {\n            return yield* protocolError(\"Browser Run returned a different crawl job identity\");\n          }\n\n          return envelope.result;\n        });\n\n        const terminal = yield* Effect.uninterruptibleMask((restore) =>\n          restore(\n            withinDeadline(\n              Effect.repeat(fetchResult(Option.none(), true), {\n                schedule: Schedule.spaced(POLL_INTERVAL),\n                until: (result) => result.status !== \"running\",\n              }),\n              input,\n              startedAt,\n            ),\n          ).pipe(Effect.tap(() => Ref.set(job.state, \"terminal\"))),\n        );\n\n        if (terminal.status === \"running\") {\n          return yield* protocolError(\"Browser Run polling stopped before a terminal status\");\n        }\n        if (terminal.status !== \"completed\") {\n          return yield* PageCrawlTerminalError.make({\n            implementation: browserRestCrawlImplementation,\n            status: terminal.status,\n            message: `Browser Run crawl ended with status ${terminal.status}`,\n          });\n        }\n\n        const pages = Stream.paginate<PaginationState, PageCrawlRecord, PageCrawlError>(\n          { cursor: Option.none(), seen: [] },\n          (state) =>\n            Effect.gen(function* () {\n              const result = yield* fetchResult(state.cursor, false);\n\n              if (result.status !== \"completed\") {\n                return yield* protocolError(\n                  \"Browser Run changed crawl status during result pagination\",\n                );\n              }\n              if (result.cursor === undefined) {\n                return [result.records, Option.none()] as const;\n              }\n              const cursor = normalizedCursor(result.cursor);\n\n              if (state.seen.includes(cursor)) {\n                return yield* protocolError(\"Browser Run repeated a crawl result cursor\");\n              }\n              if (state.seen.length >= input.limits.maxPages) {\n                return yield* protocolError(\"Browser Run returned too many crawl result cursors\");\n              }\n\n              return [\n                result.records,\n                Option.some({ cursor: Option.some(cursor), seen: [...state.seen, cursor] }),\n              ] as const;\n            }),\n        );\n\n        return pages.pipe(\n          Stream.rechunk(1),\n          Stream.mapAccumEffect(\n            (): RecordLimitsState => ({ pages: 0, totalBytes: 0 }),\n            (state, record) =>\n              Effect.gen(function* () {\n                yield* checkDeadline(input, startedAt);\n                const pages = state.pages + 1;\n\n                if (pages > input.limits.maxPages) {\n                  return yield* limitError(input, \"pages\", pages);\n                }\n                if (!sameHost(startHost, record.url)) {\n                  return yield* protocolError(\"Browser Run returned an off-host crawl record\");\n                }\n                if (record.metadata !== undefined && !sameHost(startHost, record.metadata.url)) {\n                  return yield* protocolError(\"Browser Run returned off-host crawl metadata\");\n                }\n\n                const pageBytes =\n                  record.markdown === undefined\n                    ? 0\n                    : new TextEncoder().encode(record.markdown).byteLength;\n\n                if (pageBytes > input.limits.maxPageBytes) {\n                  return yield* limitError(input, \"page-bytes\", pageBytes);\n                }\n                const totalBytes = state.totalBytes + pageBytes;\n\n                if (totalBytes > input.limits.maxTotalBytes) {\n                  return yield* limitError(input, \"total-bytes\", totalBytes);\n                }\n\n                return [{ pages, totalBytes }, [record]] as const;\n              }),\n          ),\n        );\n      }),\n    );\n\n/** Cloudflare REST PageCrawl Layer for Node and other non-Worker composition roots. */\nexport const browserRestCrawlLayer = (\n  options: BrowserRestCrawlOptions,\n): Layer.Layer<PageCrawl, never, HttpClient.HttpClient> =>\n  Layer.effect(\n    PageCrawl,\n    Effect.map(HttpClient.HttpClient, (client) =>\n      PageCrawl.of({ crawl: makeCrawl(client, options) }),\n    ),\n  );\n"],"mappings":";;;;;;AAgCA,MAAa,iCAAiC,sBAAsB,KAAK;CACvE,WAAW;CACX,UAAU;AACZ,CAAC;AAED,MAAM,aAAa;AACnB,MAAM,gBAAgB,SAAS,QAAQ,CAAC;AACxC,MAAM,iBAAiB,SAAS,QAAQ,EAAE;AAC1C,MAAM,6BAA6B;AACnC,MAAM,6BAA6B;AACnC,MAAM,wBAAwB;AAC9B,MAAM,oBAAoB;AAC1B,MAAM,2BAA2B;AACjC,MAAM,eAAe,OAAO,eAAe,MAAM,OAAO,YAAY,GAAG,CAAC;AACxE,MAAM,sBAAsB,OAAO,eAAe,MAAM,OAAO,YAAY,iBAAiB,CAAC;AAE7F,MAAM,iBAAiB,OAAO,MAAM,CAAC,qBAAqB,OAAO,OAAO,CAAC;AAEzE,MAAM,oBAAoB,OAAO,SAAS;CACxC;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,iBAAiB,OAAO,OAAO;CACnC,IAAI;CACJ,QAAQ;CACR,oBAAoB,OAAO,YAAY,OAAO,OAAO,MAAM,OAAO,uBAAuB,CAAC,CAAC,CAAC;CAC5F,OAAO,OAAO,YAAY,OAAO,OAAO;CACxC,UAAU,OAAO,YAAY,OAAO,OAAO;CAC3C,SAAS,OAAO,YAAY,OAAO,OAAO;CAC1C,SAAS,OAAO,MAAM,eAAe,CAAC,CAAC,MAAM,OAAO,YAAY,wBAAwB,CAAC;CACzF,QAAQ,OAAO,YAAY,cAAc;AAC3C,CAAC;AAED,MAAM,iBAAiB,OAAO,OAAO;CACnC,SAAS,OAAO,QAAQ,IAAI;CAC5B,QAAQ;AACV,CAAC;AAED,MAAM,iBAAiB,OAAO,OAAO;CACnC,SAAS,OAAO,QAAQ,IAAI;CAC5B,QAAQ;AACV,CAAC;AAED,MAAM,iBAAiB,OAAO,OAAO;CACnC,SAAS,OAAO,QAAQ,IAAI;CAC5B,QAAQ,OAAO,OAAO;EACpB,QAAQ;EACR,SAAS,OAAO,OAAO,MAAM,OAAO,YAAY,qBAAqB,CAAC;CACxE,CAAC;AACH,CAAC;AAQD,MAAM,qBAAqB,YAA4B,QAAQ,MAAM,GAAG,qBAAqB;AAE7F,MAAM,gBAAgB,OAAgB,aAA2D;CAC/F,MAAM,MAAM,kBAAkB,OAAO,KAAK,CAAC;CAE3C,IAAI,IAAI,WAAW,GAAG,OAAO,KAAA;CAC7B,MAAM,QAAQ,SAAS,MAAM,QAAQ;CAErC,OAAO,IAAI,MAAM,MAAM,WAAW,IAAI,MAAM,IAAI,WAAW,OAAO,YAAY,CAAC;AACjF;AAEA,MAAM,iBAAiB,SAAiB,UACtC,uBAAuB,KAAK;CAC1B,gBAAgB;CAChB,SAAS,kBAAkB,OAAO;CAClC,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;AACzC,CAAC;AAEH,MAAM,cACJ,SACA,OACA,aACwB;CACxB,MAAM,UACJ,UAAU,UACN,QAAQ,OAAO,WACf,UAAU,eACR,QAAQ,OAAO,eACf,UAAU,gBACR,QAAQ,OAAO,gBACf,QAAQ,OAAO;CAEzB,OAAO,oBAAoB,KAAK;EAC9B,gBAAgB;EAChB;EACA;EACA;EACA,SAAS,0BAA0B,MAAM;CAC3C,CAAC;AACH;AAEA,MAAM,oBACJ,YACuB;CACvB,MAAM,UAAU,OAAO,QAAQ,cAAc;CAE7C,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,GAAG,OAAO,KAAA;CAC1D,MAAM,SAAS,UAAU;CAEzB,OAAO,OAAO,cAAc,MAAM,IAAI,SAAS,KAAA;AACjD;AAEA,MAAM,kBAAkB,YAAmE;CACzF,MAAM,cAAc,QAAQ;CAE5B,IAAI,gBAAgB,KAAA,GAAW,OAAO;CACtC,MAAM,YAAY,YAAY,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,YAAY;CAEnE,OAAO,cAAc,sBAAsB,WAAW,SAAS,OAAO,MAAM;AAC9E;AAEA,MAAM,kBAAkB,aAA8B,0BAA0B,KAAK,QAAQ;AAE7F,MAAM,YAAY,SAAkC,UAClD,GAAG,WAAW,sBAAsB,mBAAmB,QAAQ,SAAS,EAAE,0BACxE,UAAU,KAAA,IAAY,KAAK,IAAI,mBAAmB,KAAK;AAG3D,MAAM,sBAAsB,OAAO,GAAG,sCAAsC,CAAC,CAAC,WAC5E,UACA,SACkD;CAClD,MAAM,UAAU,IAAI,YAAY,SAAS;EAAE,OAAO;EAAM,WAAW;CAAM,CAAC;CAE1E,MAAM,QAAQ,OAAO,OAAO,cAQ1B,SAAS,eACF;EAAE,UAAU;EAAG,MAAM;CAAG,KAC9B,SAAS,UAAU;EAClB,MAAM,WAAW,QAAQ,WAAW,MAAM;EAE1C,IAAI,WAAW,SACb,OAAO,OAAO,KACZ,cACE,2CAA2C,OAAO,OAAO,EAAE,iBAC7D,CACF;EAGF,OAAO,OAAO,IAAI;GAChB,YAAY;IAAE;IAAU,MAAM,QAAQ,OAAO,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;GAAE;GACrF,QAAQ,UAAU,cAAc,kDAAkD,KAAK;EACzF,CAAC;CACH,CACF,CAAC,CAAC,KACA,OAAO,UAAU,UACf,OAAO,GAAG,sBAAsB,CAAC,CAAC,KAAK,IACnC,QACA,cAAc,iDAAiD,KAAK,CAC1E,CACF;CAEA,OAAO,OAAO,OAAO,IAAI;EACvB,WAAW,MAAM,OAAO,QAAQ,OAAO;EACvC,QAAQ,UAAU,cAAc,kDAAkD,KAAK;CACzF,CAAC;AACH,CAAC;AAED,MAAM,kBAAkB,OAAO,GAAG,kCAAkC,CAAC,CAAC,WACpE,SACA,WACA;CACA,MAAM,MAAM,OAAO,OAAO,WAAW,UAAU,MAAM,iBAAiB;CAEtE,OAAO,OAAO,WAAW,SAAS,YAAY,KAAK,IAAI,GAAG,MAAM,SAAS,CAAC;AAC5E,CAAC;AAED,MAAM,iBAAiB,OAAO,GAAG,iCAAiC,CAAC,CAAC,WAClE,QACA,SACA,WACiD;CACjD,MAAM,MAAM,OAAO,OAAO,WAAW,UAAU,MAAM,iBAAiB;CACtE,MAAM,UAAU,KAAK,IAAI,GAAG,MAAM,SAAS;CAC3C,MAAM,YAAY,QAAQ,OAAO,iBAAiB;CAElD,IAAI,aAAa,GAAG,OAAO,OAAO,WAAW,SAAS,YAAY,OAAO;CAEzE,OAAO,OAAO,OAAO,KACnB,OAAO,cAAc;EACnB,UAAU,SAAS,OAAO,SAAS;EACnC,cAAc,gBAAgB,SAAS,SAAS;CAClD,CAAC,CACH;AACF,CAAC;AAED,MAAM,gBAAgB,OAAO,GAAG,gCAAgC,CAAC,CAAC,WAChE,SACA,WACA;CACA,MAAM,MAAM,OAAO,OAAO,WAAW,UAAU,MAAM,iBAAiB;CACtE,MAAM,UAAU,KAAK,IAAI,GAAG,MAAM,SAAS;CAE3C,IAAI,WAAW,QAAQ,OAAO,gBAC5B,OAAO,OAAO,WAAW,SAAS,YAAY,OAAO;AAEzD,CAAC;AAED,MAAM,oBAAoB,WAA+C,OAAO,MAAM;AAYtF,MAAM,YAAY,cAAsB,QAAyB,IAAI,IAAI,GAAG,CAAC,CAAC,SAAS;AAEvF,MAAM,aACH,QAA+B,aAC/B,UACC,OAAO,OACL,OAAO,IAAI,aAAa;CACtB,MAAM,YAAY,OAAO,OAAO,WAAW,UAAU,MAAM,iBAAiB;CAC5E,MAAM,YAAY,IAAI,IAAI,MAAM,QAAQ,CAAC,CAAC;CAE1C,MAAM,cAAc,OAAO,GAAG,8BAA8B,CAAC,CAAC,WAE5D,SAA8C,QAAW,SAAiB;EAC1E,MAAM,aAAa,kBAAkB,YAAY,SAAS,QAAQ,QAAQ,CAAC,CAAC,KAC1E,kBAAkB,UACpB;EAEA,MAAM,WAAW,OAAO,OACrB,QAAQ,UAAU,CAAC,CACnB,KACC,OAAO,UAAU,UACf,cACE,iDACA,aAAa,OAAO,QAAQ,QAAQ,CACtC,CACF,CACF;EAEF,MAAM,WAAW,OAAO,oBAAoB,UAAU,OAAO;EAE7D,IAAI,SAAS,WAAW,KAAK;GAC3B,MAAM,SAAS,eAAe,QAAQ,IAAI,UAAU;GAEpD,OAAO,OAAO,0BAA0B,KAAK;IAC3C,gBAAgB;IAChB;IACA,GAAI,iBAAiB,SAAS,OAAO,MAAM,KAAA,IACvC,CAAC,IACD,EAAE,kBAAkB,iBAAiB,SAAS,OAAO,EAAE;IAC3D,SACE,WAAW,UACP,2CACA;IACN,GAAI,aAAa,UAAU,QAAQ,QAAQ,MAAM,KAAA,IAC7C,CAAC,IACD,EAAE,OAAO,aAAa,UAAU,QAAQ,QAAQ,EAAE;GACxD,CAAC;EACH;EACA,IAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAC9C,OAAO,OAAO,cACZ,mCAAmC,OAAO,SAAS,MAAM,KACzD,aAAa,UAAU,QAAQ,QAAQ,CACzC;EAEF,IAAI,CAAC,eAAe,SAAS,OAAO,GAClC,OAAO,OAAO,cACZ,uDACA,aAAa,UAAU,QAAQ,QAAQ,CACzC;EAGF,OAAO,OAAO,OAAO,aAAa,OAAO,eAAe,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KACzE,OAAO,UAAU,UACf,cACE,mDACA,aAAa,OAAO,QAAQ,QAAQ,CACtC,CACF,CACF;CACF,CAAC;CAED,MAAM,YAAY,OAAO,IAAI,aAAa;EACxC,MAAM,kBAAkB,OAAO,kBAAkB,KAAK,SAAS,OAAO,CAAC,CAAC,CAAC,KACvE,kBAAkB,SAAS;GACzB,KAAK,MAAM;GACX,eAAe,CAAC,GAAG,MAAM,QAAQ;GACjC,OAAO,MAAM,OAAO;GACpB,OAAO,MAAM,OAAO;GACpB,SAAS,CAAC,UAAU;GACpB,QAAQ;GACR,SAAS;IACP,sBAAsB;IACtB,mBAAmB;GACrB;EACF,CAAC,GACD,OAAO,UAAU,UACf,cAAc,iDAAiD,KAAK,CACtE,CACF;EAQA,QAAO,OANgB,eACrB,YAAY,iBAAiB,gBAAgB,0BAA0B,GACvE,OACA,SACF,EAAA,CAEe;CACjB,CAAC;CAED,MAAM,MAAM,OAAO,OAAO,qBAAqB,YAC7C,QAAQ,SAAS,CAAC,CAAC,KACjB,OAAO,SAAS,OACd,OAAO,IAAI,aAAa;EACtB,MAAM,QAAQ,OAAO,IAAI,KAA6B,SAAS;EAC/D,MAAM,QAAQ,OAAO,OAAO;EAE5B,MAAM,kBAAkB,IAAI,OAAO,QAAQ,YACzC,YAAY,YACR,CAAC,MAAM,UAAmB,IAC1B,CAAC,OAAO,UAAmB,CACjC,CAAC,CAAC,KACA,OAAO,SAAS,iBAAiB;GAC/B,IAAI,CAAC,cAAc,OAAO,OAAO;GAcjC,OAZqB,YACnB,kBAAkB,OAAO,SAAS,SAAS,EAAE,CAAC,GAC9C,gBACA,0BACF,CAAC,CAAC,KACA,OAAO,SAAS,YACd,QAAQ,OAAO,WAAW,KACtB,OAAO,OACP,cAAc,6CAA6C,CACjE,CAGgB,CAAC,CAAC,KAClB,OAAO,cAAc;IACnB,UAAU;IACV,cACE,cAAc,sDAAsD;GACxE,CAAC,CACH;EACF,CAAC,CACH;EAEA,OAAO,MAAM,aACX,OACA,gBAAgB,KACd,OAAO,iBACL,OAAO,WAAW,uCAAuC,CAC3D,CACF,CACF;EAEA,OAAO;GAAE;GAAI;EAAM;CACrB,CAAC,CACH,CACF,CACF;CAEA,MAAM,cAAc,OAAO,GAAG,8BAA8B,CAAC,CAAC,WAC5D,QACA,YACA;EACA,IAAI,UAAU,kBAAkB,IAAI,SAAS,SAAS,IAAI,EAAE,CAAC;EAE7D,IAAI,YAAY,UAAU,kBAAkB,YAAY,SAAS,SAAS,GAAG;EAC7E,IAAI,OAAO,OAAO,MAAM,GACtB,UAAU,kBAAkB,YAAY,SAAS,UAAU,OAAO,KAAK;EAIzE,MAAM,WAAW,OAAO,eACtB,YAAY,SAAS,gBAAgB,0BAA0B,GAC/D,OACA,SACF;EAEA,IAAI,SAAS,OAAO,OAAO,IAAI,IAC7B,OAAO,OAAO,cAAc,qDAAqD;EAGnF,OAAO,SAAS;CAClB,CAAC;CAED,MAAM,WAAW,OAAO,OAAO,qBAAqB,YAClD,QACE,eACE,OAAO,OAAO,YAAY,OAAO,KAAK,GAAG,IAAI,GAAG;EAC9C,UAAU,SAAS,OAAO,aAAa;EACvC,QAAQ,WAAW,OAAO,WAAW;CACvC,CAAC,GACD,OACA,SACF,CACF,CAAC,CAAC,KAAK,OAAO,UAAU,IAAI,IAAI,IAAI,OAAO,UAAU,CAAC,CAAC,CACzD;CAEA,IAAI,SAAS,WAAW,WACtB,OAAO,OAAO,cAAc,sDAAsD;CAEpF,IAAI,SAAS,WAAW,aACtB,OAAO,OAAO,uBAAuB,KAAK;EACxC,gBAAgB;EAChB,QAAQ,SAAS;EACjB,SAAS,uCAAuC,SAAS;CAC3D,CAAC;CAiCH,OA9Bc,OAAO,SACnB;EAAE,QAAQ,OAAO,KAAK;EAAG,MAAM,CAAC;CAAE,IACjC,UACC,OAAO,IAAI,aAAa;EACtB,MAAM,SAAS,OAAO,YAAY,MAAM,QAAQ,KAAK;EAErD,IAAI,OAAO,WAAW,aACpB,OAAO,OAAO,cACZ,2DACF;EAEF,IAAI,OAAO,WAAW,KAAA,GACpB,OAAO,CAAC,OAAO,SAAS,OAAO,KAAK,CAAC;EAEvC,MAAM,SAAS,iBAAiB,OAAO,MAAM;EAE7C,IAAI,MAAM,KAAK,SAAS,MAAM,GAC5B,OAAO,OAAO,cAAc,4CAA4C;EAE1E,IAAI,MAAM,KAAK,UAAU,MAAM,OAAO,UACpC,OAAO,OAAO,cAAc,oDAAoD;EAGlF,OAAO,CACL,OAAO,SACP,OAAO,KAAK;GAAE,QAAQ,OAAO,KAAK,MAAM;GAAG,MAAM,CAAC,GAAG,MAAM,MAAM,MAAM;EAAE,CAAC,CAC5E;CACF,CAAC,CAGM,CAAC,CAAC,KACX,OAAO,QAAQ,CAAC,GAChB,OAAO,sBACqB;EAAE,OAAO;EAAG,YAAY;CAAE,KACnD,OAAO,WACN,OAAO,IAAI,aAAa;EACtB,OAAO,cAAc,OAAO,SAAS;EACrC,MAAM,QAAQ,MAAM,QAAQ;EAE5B,IAAI,QAAQ,MAAM,OAAO,UACvB,OAAO,OAAO,WAAW,OAAO,SAAS,KAAK;EAEhD,IAAI,CAAC,SAAS,WAAW,OAAO,GAAG,GACjC,OAAO,OAAO,cAAc,+CAA+C;EAE7E,IAAI,OAAO,aAAa,KAAA,KAAa,CAAC,SAAS,WAAW,OAAO,SAAS,GAAG,GAC3E,OAAO,OAAO,cAAc,8CAA8C;EAG5E,MAAM,YACJ,OAAO,aAAa,KAAA,IAChB,IACA,IAAI,YAAY,CAAC,CAAC,OAAO,OAAO,QAAQ,CAAC,CAAC;EAEhD,IAAI,YAAY,MAAM,OAAO,cAC3B,OAAO,OAAO,WAAW,OAAO,cAAc,SAAS;EAEzD,MAAM,aAAa,MAAM,aAAa;EAEtC,IAAI,aAAa,MAAM,OAAO,eAC5B,OAAO,OAAO,WAAW,OAAO,eAAe,UAAU;EAG3D,OAAO,CAAC;GAAE;GAAO;EAAW,GAAG,CAAC,MAAM,CAAC;CACzC,CAAC,CACL,CACF;AACF,CAAC,CACH;;AAGJ,MAAa,yBACX,YAEA,MAAM,OACJ,WACA,OAAO,IAAI,WAAW,aAAa,WACjC,UAAU,GAAG,EAAE,OAAO,UAAU,QAAQ,OAAO,EAAE,CAAC,CACpD,CACF"}

package/dist/CloudflareAiGateway.d.mts

@@ -0,0 +1,64 @@
+import { Layer, Redacted } from "effect";
+import { HttpClient } from "effect/unstable/http";
+declare namespace CloudflareAiGateway_d_exports {
+  export { ClientOptions, ProviderOptions, RestOptions, RouteOptions, provide, provider, rest };
+}
+/** Options understood by upstream Effect AI clients; no model or provider wrapper is created. */
+interface ClientOptions {
+  readonly apiUrl: string;
+  readonly transformClient: (client: HttpClient.HttpClient) => HttpClient.HttpClient;
+}
+interface ProviderOptions {
+  readonly accountId: string;
+  readonly gatewayId: string;
+  /** Cloudflare's provider path, such as openai, anthropic, google-ai-studio, or perplexity-ai. */
+  readonly provider: string;
+  /** Omit only for an unauthenticated gateway with a separately supplied provider key. */
+  readonly apiToken?: Redacted.Redacted<string>;
+}
+interface RestOptions {
+  readonly accountId: string;
+  readonly gatewayId: string;
+  /** Cloudflare API token with Workers AI Read permission. */
+  readonly apiToken: Redacted.Redacted<string>;
+  /** Matches the paths appended by the upstream Effect client. */
+  readonly protocol: "responses" | "chat-completions" | "messages";
+}
+/** Choose exactly one route: a native provider path or an account REST protocol. */
+type RouteOptions = (ProviderOptions & {
+  readonly protocol?: never;
+}) | (RestOptions & {
+  readonly provider?: never;
+});
+/**
+ * Provider-native proxy for model calls, streaming, embeddings, and hosted tools supported
+ * by that provider. Pass the result to the upstream client's layer along with its apiKey
+ * for BYOK-in-request, or omit apiKey for Gateway stored keys / Unified Billing.
+ * Provider model names and request bodies pass through unchanged. This module is Node-safe.
+ * Custom transforms and redirect policies must retain this endpoint and credential boundary.
+ */
+declare const provider: (options: ProviderOptions) => ClientOptions;
+/**
+ * Cloudflare's account REST API (not the deprecated /compat API). Use provider-qualified
+ * model names, e.g. openai/gpt-4.1 or anthropic/claude-haiku-4.5, and omit provider apiKey.
+ * OpenAI clients append /responses or /chat/completions; Anthropic appends /v1/messages.
+ * Compatibility remains the responsibility of the selected upstream client and model.
+ */
+declare const rest: (options: RestOptions) => ClientOptions;
+/**
+ * Provide a Gateway-configured upstream client directly in a Layer pipeline.
+ * Pass the client's `layer` factory, or a callback adding client-specific options.
+ * The factory's errors and remaining services (such as HttpClient) stay visible.
+ * Model selection and resource ownership remain with the supplied upstream Layers.
+ *
+ * @example
+ * ```ts
+ * AnthropicLanguageModel.model("claude-haiku-4-5").pipe(
+ *   Gateway.provide(AnthropicClient.layer, { ...options, provider: "anthropic" }),
+ * )
+ * ```
+ */
+declare const provide: <Client, E, R>(clientLayer: (options: ClientOptions) => Layer.Layer<Client, E, R>, options: RouteOptions) => <RIn2, E2, ROut2>(self: Layer.Layer<ROut2, E2, RIn2>) => Layer.Layer<ROut2, E | E2, R | Exclude<RIn2, Client>>;
+//#endregion
+export { ClientOptions, ProviderOptions, RestOptions, RouteOptions, provide, provider, rest, CloudflareAiGateway_d_exports as t };
+//# sourceMappingURL=CloudflareAiGateway.d.mts.map

package/dist/CloudflareAiGateway.mjs

@@ -0,0 +1,70 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+import { Context, Effect, Layer, Option, Redactable, Redacted, Schema } from "effect";
+import { FetchHttpClient, Headers, HttpClient, HttpClientError, HttpClientRequest } from "effect/unstable/http";
+//#region src/CloudflareAiGateway.ts
+var CloudflareAiGateway_exports = /* @__PURE__ */ __exportAll({
+	provide: () => provide,
+	provider: () => provider,
+	rest: () => rest
+});
+const Segment = Schema.NonEmptyString.check(Schema.isMaxLength(256), Schema.isPattern(/^[a-zA-Z0-9_-]+$/));
+const decodeSegment = Schema.decodeUnknownSync(Segment);
+const redactGatewayToken = (headers, tokenHeader) => {
+	Object.defineProperty(headers, Redactable.symbolRedactable, {
+		configurable: true,
+		value: (context) => Headers.redact(headers, [...Context.get(context, Headers.CurrentRedactedNames), tokenHeader])
+	});
+};
+const clientOptions = (apiUrl, tokenHeader, apiToken, gatewayId) => Object.freeze({
+	apiUrl,
+	transformClient: (client) => client.pipe(HttpClient.mapRequestEffect((request) => {
+		const url = URL.parse(request.url);
+		if (url === null || url.username !== "" || url.password !== "" || !(url.href === apiUrl || url.href.startsWith(`${apiUrl}/`))) return Effect.fail(new HttpClientError.HttpClientError({ reason: new HttpClientError.InvalidUrlError({
+			request,
+			description: "Request is outside the configured Cloudflare AI Gateway endpoint"
+		}) }));
+		let prepared = request;
+		if (apiToken !== void 0) prepared = HttpClientRequest.setHeader(prepared, tokenHeader, `Bearer ${Redacted.value(apiToken)}`);
+		if (gatewayId !== void 0) prepared = HttpClientRequest.setHeader(prepared, "cf-aig-gateway-id", gatewayId);
+		return Effect.succeed(prepared);
+	}), HttpClient.transformResponse((effect) => Effect.gen(function* () {
+		const defaults = yield* Effect.serviceOption(FetchHttpClient.RequestInit);
+		return yield* effect.pipe(Effect.provideService(FetchHttpClient.RequestInit, {
+			...Option.getOrElse(defaults, () => ({})),
+			redirect: "error"
+		}));
+	})), HttpClient.transformResponse((effect) => effect.pipe(Effect.tap((response) => Effect.sync(() => redactGatewayToken(response.request.headers, tokenHeader))), Effect.tapError((error) => Effect.sync(() => redactGatewayToken(error.reason.request.headers, tokenHeader))), Effect.updateService(Headers.CurrentRedactedNames, (names) => [...names, tokenHeader]))))
+});
+/**
+* Provider-native proxy for model calls, streaming, embeddings, and hosted tools supported
+* by that provider. Pass the result to the upstream client's layer along with its apiKey
+* for BYOK-in-request, or omit apiKey for Gateway stored keys / Unified Billing.
+* Provider model names and request bodies pass through unchanged. This module is Node-safe.
+* Custom transforms and redirect policies must retain this endpoint and credential boundary.
+*/
+const provider = (options) => clientOptions(`https://gateway.ai.cloudflare.com/v1/${decodeSegment(options.accountId)}/${decodeSegment(options.gatewayId)}/${decodeSegment(options.provider)}`, "cf-aig-authorization", options.apiToken);
+/**
+* Cloudflare's account REST API (not the deprecated /compat API). Use provider-qualified
+* model names, e.g. openai/gpt-4.1 or anthropic/claude-haiku-4.5, and omit provider apiKey.
+* OpenAI clients append /responses or /chat/completions; Anthropic appends /v1/messages.
+* Compatibility remains the responsibility of the selected upstream client and model.
+*/
+const rest = (options) => clientOptions(`https://api.cloudflare.com/client/v4/accounts/${decodeSegment(options.accountId)}/ai${options.protocol === "messages" ? "" : "/v1"}`, "authorization", options.apiToken, decodeSegment(options.gatewayId));
+/**
+* Provide a Gateway-configured upstream client directly in a Layer pipeline.
+* Pass the client's `layer` factory, or a callback adding client-specific options.
+* The factory's errors and remaining services (such as HttpClient) stay visible.
+* Model selection and resource ownership remain with the supplied upstream Layers.
+*
+* @example
+* ```ts
+* AnthropicLanguageModel.model("claude-haiku-4-5").pipe(
+*   Gateway.provide(AnthropicClient.layer, { ...options, provider: "anthropic" }),
+* )
+* ```
+*/
+const provide = (clientLayer, options) => Layer.provide(clientLayer(options.provider !== void 0 ? provider(options) : rest(options)));
+//#endregion
+export { provide, provider, rest, CloudflareAiGateway_exports as t };
+
+//# sourceMappingURL=CloudflareAiGateway.mjs.map

package/dist/CloudflareAiGateway.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudflareAiGateway.mjs","names":[],"sources":["../src/CloudflareAiGateway.ts"],"sourcesContent":["import { Context, Effect, Layer, Option, Redactable, Redacted, Schema } from \"effect\";\nimport {\n  FetchHttpClient,\n  Headers,\n  HttpClient,\n  HttpClientError,\n  HttpClientRequest,\n} from \"effect/unstable/http\";\n\nconst Segment = Schema.NonEmptyString.check(\n  Schema.isMaxLength(256),\n  Schema.isPattern(/^[a-zA-Z0-9_-]+$/),\n);\n\nconst decodeSegment = Schema.decodeUnknownSync(Segment);\n\n/** Options understood by upstream Effect AI clients; no model or provider wrapper is created. */\nexport interface ClientOptions {\n  readonly apiUrl: string;\n  readonly transformClient: (client: HttpClient.HttpClient) => HttpClient.HttpClient;\n}\n\nexport interface ProviderOptions {\n  readonly accountId: string;\n  readonly gatewayId: string;\n  /** Cloudflare's provider path, such as openai, anthropic, google-ai-studio, or perplexity-ai. */\n  readonly provider: string;\n  /** Omit only for an unauthenticated gateway with a separately supplied provider key. */\n  readonly apiToken?: Redacted.Redacted<string>;\n}\n\nexport interface RestOptions {\n  readonly accountId: string;\n  readonly gatewayId: string;\n  /** Cloudflare API token with Workers AI Read permission. */\n  readonly apiToken: Redacted.Redacted<string>;\n  /** Matches the paths appended by the upstream Effect client. */\n  readonly protocol: \"responses\" | \"chat-completions\" | \"messages\";\n}\n\n/** Choose exactly one route: a native provider path or an account REST protocol. */\nexport type RouteOptions =\n  | (ProviderOptions & { readonly protocol?: never })\n  | (RestOptions & { readonly provider?: never });\n\nconst redactGatewayToken = (headers: Headers.Headers, tokenHeader: string): void => {\n  // HTTP tracing can copy headers after preprocessing. Attach the public redaction\n  // protocol to the final request as well, before a provider builds error details.\n  Object.defineProperty(headers, Redactable.symbolRedactable, {\n    configurable: true,\n    value: (context: Context.Context<never>) =>\n      Headers.redact(headers, [...Context.get(context, Headers.CurrentRedactedNames), tokenHeader]),\n  });\n};\n\nconst clientOptions = (\n  apiUrl: string,\n  tokenHeader: \"authorization\" | \"cf-aig-authorization\",\n  apiToken: Redacted.Redacted<string> | undefined,\n  gatewayId?: string,\n): ClientOptions =>\n  Object.freeze({\n    apiUrl,\n    transformClient: (client: HttpClient.HttpClient) =>\n      client.pipe(\n        HttpClient.mapRequestEffect((request) => {\n          const url = URL.parse(request.url);\n\n          // Check the normalized URL too: dot segments must not escape this account or gateway.\n          if (\n            url === null ||\n            url.username !== \"\" ||\n            url.password !== \"\" ||\n            !(url.href === apiUrl || url.href.startsWith(`${apiUrl}/`))\n          ) {\n            return Effect.fail(\n              new HttpClientError.HttpClientError({\n                reason: new HttpClientError.InvalidUrlError({\n                  request,\n                  description: \"Request is outside the configured Cloudflare AI Gateway endpoint\",\n                }),\n              }),\n            );\n          }\n          let prepared = request;\n\n          if (apiToken !== undefined) {\n            prepared = HttpClientRequest.setHeader(\n              prepared,\n              tokenHeader,\n              `Bearer ${Redacted.value(apiToken)}`,\n            );\n          }\n          if (gatewayId !== undefined) {\n            prepared = HttpClientRequest.setHeader(prepared, \"cf-aig-gateway-id\", gatewayId);\n          }\n\n          return Effect.succeed(prepared);\n        }),\n        HttpClient.transformResponse((effect) =>\n          Effect.gen(function* () {\n            const defaults = yield* Effect.serviceOption(FetchHttpClient.RequestInit);\n\n            return yield* effect.pipe(\n              Effect.provideService(FetchHttpClient.RequestInit, {\n                ...Option.getOrElse(defaults, () => ({})),\n                redirect: \"error\",\n              }),\n            );\n          }),\n        ),\n        HttpClient.transformResponse((effect) =>\n          effect.pipe(\n            Effect.tap((response) =>\n              Effect.sync(() => redactGatewayToken(response.request.headers, tokenHeader)),\n            ),\n            Effect.tapError((error) =>\n              Effect.sync(() => redactGatewayToken(error.reason.request.headers, tokenHeader)),\n            ),\n            Effect.updateService(Headers.CurrentRedactedNames, (names) => [...names, tokenHeader]),\n          ),\n        ),\n      ),\n  });\n\n/**\n * Provider-native proxy for model calls, streaming, embeddings, and hosted tools supported\n * by that provider. Pass the result to the upstream client's layer along with its apiKey\n * for BYOK-in-request, or omit apiKey for Gateway stored keys / Unified Billing.\n * Provider model names and request bodies pass through unchanged. This module is Node-safe.\n * Custom transforms and redirect policies must retain this endpoint and credential boundary.\n */\nexport const provider = (options: ProviderOptions): ClientOptions =>\n  clientOptions(\n    `https://gateway.ai.cloudflare.com/v1/${decodeSegment(options.accountId)}/${decodeSegment(options.gatewayId)}/${decodeSegment(options.provider)}`,\n    \"cf-aig-authorization\",\n    options.apiToken,\n  );\n\n/**\n * Cloudflare's account REST API (not the deprecated /compat API). Use provider-qualified\n * model names, e.g. openai/gpt-4.1 or anthropic/claude-haiku-4.5, and omit provider apiKey.\n * OpenAI clients append /responses or /chat/completions; Anthropic appends /v1/messages.\n * Compatibility remains the responsibility of the selected upstream client and model.\n */\nexport const rest = (options: RestOptions): ClientOptions =>\n  clientOptions(\n    `https://api.cloudflare.com/client/v4/accounts/${decodeSegment(options.accountId)}/ai${options.protocol === \"messages\" ? \"\" : \"/v1\"}`,\n    \"authorization\",\n    options.apiToken,\n    decodeSegment(options.gatewayId),\n  );\n\n/**\n * Provide a Gateway-configured upstream client directly in a Layer pipeline.\n * Pass the client's `layer` factory, or a callback adding client-specific options.\n * The factory's errors and remaining services (such as HttpClient) stay visible.\n * Model selection and resource ownership remain with the supplied upstream Layers.\n *\n * @example\n * ```ts\n * AnthropicLanguageModel.model(\"claude-haiku-4-5\").pipe(\n *   Gateway.provide(AnthropicClient.layer, { ...options, provider: \"anthropic\" }),\n * )\n * ```\n */\nexport const provide = <Client, E, R>(\n  clientLayer: (options: ClientOptions) => Layer.Layer<Client, E, R>,\n  options: RouteOptions,\n) => Layer.provide(clientLayer(options.provider !== undefined ? provider(options) : rest(options)));\n"],"mappings":";;;;;;;;;AASA,MAAM,UAAU,OAAO,eAAe,MACpC,OAAO,YAAY,GAAG,GACtB,OAAO,UAAU,kBAAkB,CACrC;AAEA,MAAM,gBAAgB,OAAO,kBAAkB,OAAO;AA+BtD,MAAM,sBAAsB,SAA0B,gBAA8B;CAGlF,OAAO,eAAe,SAAS,WAAW,kBAAkB;EAC1D,cAAc;EACd,QAAQ,YACN,QAAQ,OAAO,SAAS,CAAC,GAAG,QAAQ,IAAI,SAAS,QAAQ,oBAAoB,GAAG,WAAW,CAAC;CAChG,CAAC;AACH;AAEA,MAAM,iBACJ,QACA,aACA,UACA,cAEA,OAAO,OAAO;CACZ;CACA,kBAAkB,WAChB,OAAO,KACL,WAAW,kBAAkB,YAAY;EACvC,MAAM,MAAM,IAAI,MAAM,QAAQ,GAAG;EAGjC,IACE,QAAQ,QACR,IAAI,aAAa,MACjB,IAAI,aAAa,MACjB,EAAE,IAAI,SAAS,UAAU,IAAI,KAAK,WAAW,GAAG,OAAO,EAAE,IAEzD,OAAO,OAAO,KACZ,IAAI,gBAAgB,gBAAgB,EAClC,QAAQ,IAAI,gBAAgB,gBAAgB;GAC1C;GACA,aAAa;EACf,CAAC,EACH,CAAC,CACH;EAEF,IAAI,WAAW;EAEf,IAAI,aAAa,KAAA,GACf,WAAW,kBAAkB,UAC3B,UACA,aACA,UAAU,SAAS,MAAM,QAAQ,GACnC;EAEF,IAAI,cAAc,KAAA,GAChB,WAAW,kBAAkB,UAAU,UAAU,qBAAqB,SAAS;EAGjF,OAAO,OAAO,QAAQ,QAAQ;CAChC,CAAC,GACD,WAAW,mBAAmB,WAC5B,OAAO,IAAI,aAAa;EACtB,MAAM,WAAW,OAAO,OAAO,cAAc,gBAAgB,WAAW;EAExE,OAAO,OAAO,OAAO,KACnB,OAAO,eAAe,gBAAgB,aAAa;GACjD,GAAG,OAAO,UAAU,iBAAiB,CAAC,EAAE;GACxC,UAAU;EACZ,CAAC,CACH;CACF,CAAC,CACH,GACA,WAAW,mBAAmB,WAC5B,OAAO,KACL,OAAO,KAAK,aACV,OAAO,WAAW,mBAAmB,SAAS,QAAQ,SAAS,WAAW,CAAC,CAC7E,GACA,OAAO,UAAU,UACf,OAAO,WAAW,mBAAmB,MAAM,OAAO,QAAQ,SAAS,WAAW,CAAC,CACjF,GACA,OAAO,cAAc,QAAQ,uBAAuB,UAAU,CAAC,GAAG,OAAO,WAAW,CAAC,CACvF,CACF,CACF;AACJ,CAAC;;;;;;;;AASH,MAAa,YAAY,YACvB,cACE,wCAAwC,cAAc,QAAQ,SAAS,EAAE,GAAG,cAAc,QAAQ,SAAS,EAAE,GAAG,cAAc,QAAQ,QAAQ,KAC9I,wBACA,QAAQ,QACV;;;;;;;AAQF,MAAa,QAAQ,YACnB,cACE,iDAAiD,cAAc,QAAQ,SAAS,EAAE,KAAK,QAAQ,aAAa,aAAa,KAAK,SAC9H,iBACA,QAAQ,UACR,cAAc,QAAQ,SAAS,CACjC;;;;;;;;;;;;;;AAeF,MAAa,WACX,aACA,YACG,MAAM,QAAQ,YAAY,QAAQ,aAAa,KAAA,IAAY,SAAS,OAAO,IAAI,KAAK,OAAO,CAAC,CAAC"}

package/dist/CloudflareBindings.d.mts

@@ -0,0 +1,115 @@
+import { Context, Effect, Layer, Schema } from "effect";
+import { ThreadId } from "effect-agent/identifiers";
+import { ProducerId } from "effect-agent/records";
+declare namespace CloudflareBindings_d_exports {
+  export { CloudflareBindingError, DurableObjectContext, ThreadObjectClient, ThreadObjectIdentity, ThreadObjectNamespace, ThreadObjectPlacement, ThreadObjectRpc, callThreadObject, threadNamespaceFromEnv, threadNamespaceLayer };
+}
+declare const CloudflareBindingError_base: Schema.Class<CloudflareBindingError, Schema.TaggedStruct<"CloudflareBindingError", {
+  readonly binding: Schema.String;
+  readonly message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * Cloudflare platform bindings as Effect services (DEPLOY-010: "Cloudflare platform bindings
+ * are supplied as Effect services/Layers"). Application code never reads `env` or touches a
+ * `DurableObjectState` directly — the Thread Object class constructs these Layers once
+ * per incarnation and everything downstream consumes the services.
+ */
+/** A Cloudflare platform binding was missing or carried the wrong shape (DEPLOY-003/010). */
+declare class CloudflareBindingError extends CloudflareBindingError_base {}
+/**
+ * The RPC surface one Thread Durable Object exposes to Workers and to sibling
+ * Thread Objects. `ThreadObject.make` implements it; the Worker-side client
+ * and the cross-Object transport call it through `DurableObjectNamespace` stubs. Every
+ * `encoded` value is a Schema-encoded envelope (`client.ts` wire schemas for host entry
+ * points, `@effect-agent/storage-cloudflare` port envelopes for `portCall`), so the RPC
+ * boundary carries only structured-cloneable JSON. The optional trailing trace context is
+ * transient native RPC metadata, stripped by an opted-in effect-cf receiver before decoding
+ * the host envelope. It never enters durable state.
+ */
+interface ThreadObjectRpc extends Rpc.DurableObjectBranded {
+  /** Admission-limits gate + `DurableAgentRuntime.submit`; answers a `SubmitResponse`. */
+  submitEncoded(encoded: unknown, traceContext?: unknown): Promise<unknown>;
+  /** Wake-hinted, poll-guaranteed settlement wait; answers an `AwaitSettlementResponse`. */
+  submissionStatusEncoded(encoded: unknown, traceContext?: unknown): Promise<unknown>;
+  awaitSettlementEncoded(encoded: unknown, traceContext?: unknown): Promise<unknown>;
+  /** Event-driven durable progress wait; answers a `ProgressObserved` host response. */
+  awaitProgressEncoded(encoded: unknown, traceContext?: unknown): Promise<unknown>;
+  /** Best-effort cancellation for one in-flight progress wait. */
+  cancelProgressEncoded(encoded: unknown, traceContext?: unknown): Promise<unknown>;
+  /** One bounded page of canonical records; answers an `ObservePageResponse`. */
+  observePage(encoded: unknown, traceContext?: unknown): Promise<unknown>;
+  /** Durable abort intent; answers an `AbortResponse`. */
+  abortEncoded(encoded: unknown, traceContext?: unknown): Promise<unknown>;
+  /** Durable approval decision (plan §2.6); answers a `ResolveApprovalResponse`. */
+  resolveApprovalEncoded(encoded: unknown, traceContext?: unknown): Promise<unknown>;
+  /** Authorized DUR-017 Unknown-Outcome resolution; answers a `ResolveUnknownResponse`. */
+  resolveUnknownEncoded(encoded: unknown, traceContext?: unknown): Promise<unknown>;
+  /** Owner-side cross-Object port endpoint (WP2 envelopes, executed on LOCAL facets). */
+  portCall(encoded: unknown): Promise<unknown>;
+  /** Droppable liveness hint from another Object: arms an immediate alarm. */
+  wake(): Promise<void>;
+}
+/** A logical Thread endpoint may be bound to an application Object without forging its brand. */
+type ThreadObjectClient = Omit<ThreadObjectRpc, keyof Rpc.DurableObjectBranded>;
+declare const ThreadObjectNamespace_base: Context.ServiceClass<ThreadObjectNamespace, "@effect-agent/platform-cloudflare/ThreadObjectNamespace", {
+  readonly get: (threadId: ThreadId) => ThreadObjectClient;
+  /** Stable binding name for opted-in native RPC tracing; absent by default. */
+  readonly rpcTracing?: string;
+}>;
+/**
+ * Deterministic logical Thread placement. The native adapter uses `idFromName(threadId)`;
+ * a shared application owner can bind that logical identity into its RPC adapter instead.
+ * Lookup performs no I/O and grants no authority. Calls reuse a native target within
+ * one invocation; incoming requests and durable retries acquire their own targets.
+ */
+declare class ThreadObjectNamespace extends ThreadObjectNamespace_base {
+  static layer(namespace: DurableObjectNamespace<ThreadObjectRpc>, options?: {
+    readonly rpcTracing?: string;
+  }): Layer.Layer<ThreadObjectNamespace>;
+}
+/** Invoke a placed Thread using the current invocation's native RPC channel. */
+declare const callThreadObject: <A, E>(threadId: string & import("effect/Brand").Brand<"@effect-agent/core/ThreadId">, invoke: (target: ThreadObjectClient) => Promise<A>, onError: (cause: unknown) => E) => Effect.Effect<A, E, ThreadObjectNamespace>;
+/**
+ * Narrow one `env` member to a `DurableObjectNamespace`. `env` is an untyped platform value,
+ * and a namespace binding is a host object no Schema can decode, so this is the documented
+ * narrowest-boundary check (structural probe for the namespace surface the transport uses);
+ * a missing or misshaped binding fails typed before any Layer is built.
+ */
+declare const threadNamespaceFromEnv: (env: unknown, binding: string) => Effect.Effect<DurableObjectNamespace<ThreadObjectRpc>, CloudflareBindingError, never>;
+/**
+ * Build the namespace from Worker `env` (fails typed). Enable `rpcTracing` only when the
+ * receiver also opts into the effect-cf native RPC trace-context contract.
+ */
+declare const threadNamespaceLayer: (env: unknown, binding: string, options?: {
+  readonly rpcTracing?: boolean;
+}) => Layer.Layer<ThreadObjectNamespace, CloudflareBindingError>;
+declare const DurableObjectContext_base: Context.ServiceClass<DurableObjectContext, "@effect-agent/platform-cloudflare/DurableObjectContext", {
+  readonly ctx: DurableObjectState;
+  readonly env: unknown;
+}>;
+/**
+ * The live Durable Object execution context of THIS incarnation. Only Layer construction and
+ * the alarm service consume it; important state never lives on it (`ctx.storage` is truth,
+ * everything in memory is a cache — deployment spec §11).
+ */
+declare class DurableObjectContext extends DurableObjectContext_base {
+  static layer(ctx: DurableObjectState, env: unknown): Layer.Layer<DurableObjectContext>;
+}
+declare const ThreadObjectIdentity_base: Context.ServiceClass<ThreadObjectIdentity, "@effect-agent/platform-cloudflare/ThreadObjectIdentity", {
+  readonly threadId: ThreadId;
+  readonly producerId: ProducerId;
+}>;
+/**
+ * The Thread identity this Object serializes and the producer identity its Attempts
+ * write with (`{producerPrefix}:{threadId}`, plan §1.4). Derived once per incarnation
+ * from `ctx.id.name` — the Object identity rule guarantees the name IS the Thread ID.
+ */
+declare class ThreadObjectIdentity extends ThreadObjectIdentity_base {}
+declare const ThreadObjectPlacement_base: Context.ServiceClass<ThreadObjectPlacement, "@effect-agent/platform-cloudflare/ThreadObjectPlacement", {
+  readonly ownsThread: (threadId: ThreadId) => boolean;
+}>;
+/** Logical Threads whose canonical stores and admission ledger live in this physical Object. */
+declare class ThreadObjectPlacement extends ThreadObjectPlacement_base {}
+//#endregion
+export { CloudflareBindingError, DurableObjectContext, ThreadObjectClient, ThreadObjectIdentity, ThreadObjectNamespace, ThreadObjectPlacement, ThreadObjectRpc, callThreadObject, CloudflareBindings_d_exports as t, threadNamespaceFromEnv, threadNamespaceLayer };
+//# sourceMappingURL=CloudflareBindings.d.mts.map