@effect-agent/platform-node 0.1.0-beta.35 → 0.1.0-beta.37

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { AbortCommand, AbortIntent, AgentBindingResolver, CanonicalRecordEnvelope, ConversationNotMaterialized, ConversationStore, ConversationStoreError, DurableAbortFailure, DurableAgentRuntime, DurableAwaitFailure, DurableBindingFailure, DurableExplainFailure, DurableObligationFailure, DurableObserveOptions, DurableRetryFailure, DurableRuntimeConfig, DurableRuntimeFailpointHandler, DurableSubmitAgent, DurableSubmitFailure, DurableSubmitOptions, DurableVerifyFailure, DurableWorkerFailure, IntegrityReport, ObligationReport, ObligationThresholds, OperationDenied, Receipt, RecoveryExplanation, RecoveryReport, ResolvedBinding, RetryCommand, Settlement, SubmissionLedger, ToolReconciler, WakeScheduler } from "@effect-agent/session";
+import { AbortCommand, AbortIntent, AgentBindingResolver, CanonicalRecordEnvelope, ConversationNotMaterialized, ConversationStore, ConversationStoreError, DurableAbortFailure, DurableAgentRuntime, DurableAwaitFailure, DurableBindingFailure, DurableExplainFailure, DurableObligationFailure, DurableObserveOptions, DurableRetryFailure, DurableRuntimeConfig, DurableRuntimeFailpointHandler, DurableSubmitAgent, DurableSubmitFailure, DurableSubmitOptions, DurableVerifyFailure, DurableWorkerFailure, IntegrityReport, ObligationReport, ObligationThresholds, OperationDenied, Receipt, RecoveryExplanation, RecoveryReport, ResolvedBinding, RetryCommand, ScheduleAuthorizer, ScheduleStore, ScheduleValidationError, ScheduleWake, ScheduledInputAdmission, Scheduling, SchedulingLimits, Settlement, SubmissionLedger, ToolReconciler, WakeScheduler } from "@effect-agent/session";
 import { Context, Duration, Effect, Layer, Schema, Stream } from "effect";
 import { RunCostEstimator, RunToolFailureObserver } from "@effect-agent/engine";
 import { SqliteStorageFailpointHandler, SqliteStorageInitializationError } from "@effect-agent/storage-sqlite";
@@ -86,7 +86,7 @@ interface NodeDurableRuntimeOptions {
    */
   readonly toolReconciler?: Layer.Layer<ToolReconciler> | undefined;
   /**
-   * Registered worker Bindings resolved at durable claim time (S2, spec/subagents.md §11):
+   * Registered worker Bindings resolved at durable claim time:
    * build each with `DurableWorkerBinding.make(binding, digests)` so
    * `NodeDurableHost.runResolvedWorkers` / `DurableAgentRuntime.runResolvedWorker` can serve
    * parent and child lanes from one pool with exact-digest resolution (SUB-023). Defaults to
@@ -98,7 +98,7 @@ interface NodeDurableRuntimeOptions {
 /** Every construction failure of the assembled Node durable runtime stack. */
 type NodeDurableRuntimeInitializationError = NodePlatformConfigError | SqliteStorageInitializationError;
 /** The services `NodeDurableRuntime.layer` provides. */
-type NodeDurableRuntimeServices = DurableAgentRuntime | SubmissionLedger | ConversationStore | WakeScheduler | DurableRuntimeConfig | NodeDurableRuntimeConfig | AgentBindingResolver;
+type NodeDurableRuntimeServices = DurableAgentRuntime | SubmissionLedger | ConversationStore | ScheduleStore | WakeScheduler | DurableRuntimeConfig | NodeDurableRuntimeConfig | AgentBindingResolver;
 /**
  * Shutdown-drain decorator for a `SubmissionLedger` (deployment §6 step 6): every ownership
  * period granted through this Layer is tracked — claims start tracking, renewals follow token
@@ -195,6 +195,25 @@ declare class NodeDurableHost extends NodeDurableHost_base {
   static layerStack(options: NodeDurableRuntimeOptions): Layer.Layer<NodeDurableHost | NodeDurableRuntimeServices, DurableWorkerFailure | NodeDurableRuntimeInitializationError>;
 }
 //#endregion
+//#region src/scheduling.d.ts
+/**
+ * Scheduled admission through the existing host gate. Once the gate admits the call, every
+ * runtime failure stays ambiguous because the Submission may already have committed.
+ */
+declare const nodeScheduledInputAdmissionLayer: Layer.Layer<ScheduledInputAdmission, never, NodeDurableHost>;
+/** One bounded hint slot for the single supported Node scheduler. Indexed polling repairs loss. */
+declare const nodeScheduleWakeLayer: Layer.Layer<ScheduleWake>;
+interface NodeSchedulingOptions {
+  readonly limits?: SchedulingLimits | undefined;
+}
+/**
+ * Optional Scope-owned Node scheduling service and driver. The caller must provide the existing
+ * host, its SQLite ScheduleStore, and an explicit ScheduleAuthorizer.
+ */
+declare class NodeScheduling {
+  static layer(options?: NodeSchedulingOptions): Layer.Layer<Scheduling, ScheduleValidationError, NodeDurableHost | ScheduleStore | ScheduleAuthorizer>;
+}
+//#endregion
 //#region src/wake-scheduler.d.ts
 declare const NodeWakeSchedulerConfig_base: Context.ServiceClass<NodeWakeSchedulerConfig, "@effect-agent/platform-node/NodeWakeSchedulerConfig", {
   /** Interval between ledger scans that re-emit every nonterminal Conversation lane. */
@@ -215,5 +234,5 @@ declare class NodeWakeSchedulerConfig extends NodeWakeSchedulerConfig_base {
  */
 declare const nodeWakeSchedulerLayer: Layer.Layer<WakeScheduler, never, SubmissionLedger | NodeWakeSchedulerConfig>;
 //#endregion
-export { AdmissionClosed, NodeDurableHost, NodeDurableRuntime, NodeDurableRuntimeConfig, NodeDurableRuntimeConfigValue, NodeDurableRuntimeInitializationError, NodeDurableRuntimeOptions, NodeDurableRuntimeServices, NodePlatformConfigError, NodeWakeSchedulerConfig, nodeWakeSchedulerLayer, ownershipDrainLayer };
+export { AdmissionClosed, NodeDurableHost, NodeDurableRuntime, NodeDurableRuntimeConfig, NodeDurableRuntimeConfigValue, NodeDurableRuntimeInitializationError, NodeDurableRuntimeOptions, NodeDurableRuntimeServices, NodePlatformConfigError, NodeScheduling, NodeSchedulingOptions, NodeWakeSchedulerConfig, nodeScheduleWakeLayer, nodeScheduledInputAdmissionLayer, nodeWakeSchedulerLayer, ownershipDrainLayer };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.mjs

@@ -1,7 +1,7 @@
-import { AgentBindingResolver, DEFAULT_OWNERSHIP_LEASE_DURATION, DeploymentId, DurableAgentRuntime, DurableRuntimeConfig, DurableRuntimeFailpoint, ProducerId, ReleaseOwnershipRequest, SubmissionLedger, ToolReconciler, WakeScheduler, makeWakeSubscriptionHub } from "@effect-agent/session";
-import { Context, Duration, Effect, Layer, PubSub, Ref, Schema, Stream } from "effect";
+import { AgentBindingResolver, DEFAULT_OWNERSHIP_LEASE_DURATION, DeploymentId, DurableAgentRuntime, DurableRuntimeConfig, DurableRuntimeFailpoint, PersistedJson, ProducerId, ReleaseOwnershipRequest, ScheduleDriver, ScheduleStorageError, ScheduleStore, ScheduleWake, ScheduledInputAdmission, ScheduledInputRetryable, Scheduling, SubmissionLedger, ToolReconciler, WakeScheduler, defaultSchedulingLimits, makeWakeSubscriptionHub } from "@effect-agent/session";
+import { Cause, Context, Duration, Effect, Layer, Option, PubSub, Ref, Result, Schema, Stream } from "effect";
 import { CurrentToolFailureObserver, toolFailureObserverLayer } from "@effect-agent/engine";
-import { SqliteStorageConfig, SqliteStorageConfigValue, conversationStoreLayer, storageFailpointLayer, submissionLedgerLayer } from "@effect-agent/storage-sqlite";
+import { SqliteStorageConfig, SqliteStorageConfigValue, conversationStoreLayer, scheduleStoreLayer, storageFailpointLayer, submissionLedgerLayer } from "@effect-agent/storage-sqlite";
 import { NodeCrypto } from "@effect/platform-node";
 import { SqliteClient } from "@effect/sql-sqlite-node";
 //#region src/wake-scheduler.ts
@@ -223,7 +223,7 @@ var NodeDurableRuntime = class {
 			const reconcilerLayer = options.toolReconciler ?? ToolReconciler.uncertain;
 			const observerLayer = options.toolFailureObserver === void 0 ? Layer.succeed(CurrentToolFailureObserver)(void 0) : toolFailureObserverLayer(options.toolFailureObserver);
 			const bindingResolverLayer = AgentBindingResolver.layer(options.bindings ?? []);
-			const ports = Layer.mergeAll(conversationStoreLayer, nodeWakeSchedulerLayer.pipe(Layer.provideMerge(ownershipDrainLayer.pipe(Layer.provide(submissionLedgerLayer)))));
+			const ports = Layer.mergeAll(conversationStoreLayer, scheduleStoreLayer, nodeWakeSchedulerLayer.pipe(Layer.provideMerge(ownershipDrainLayer.pipe(Layer.provide(submissionLedgerLayer)))));
 			return DurableAgentRuntime.layer.pipe(Layer.provideMerge(Layer.mergeAll(ports, durableRuntimeConfigLayer(options.estimateCostMicrousd), bindingResolverLayer)), Layer.provide(Layer.mergeAll(wakeSchedulerConfigLayer, runtimeFailpointLayer, reconcilerLayer, observerLayer)), Layer.provideMerge(infrastructure), Layer.provideMerge(nodeConfigLayer));
 		}));
 	}
@@ -289,6 +289,85 @@ var NodeDurableHost = class NodeDurableHost extends Context.Service()("@effect-a
 	}
 };
 //#endregion
-export { AdmissionClosed, NodeDurableHost, NodeDurableRuntime, NodeDurableRuntimeConfig, NodeDurableRuntimeConfigValue, NodePlatformConfigError, NodeWakeSchedulerConfig, nodeWakeSchedulerLayer, ownershipDrainLayer };
+//#region src/scheduling.ts
+const passthroughSubmitAgent = (agentId) => ({ definition: {
+	id: agentId,
+	input: PersistedJson
+} });
+const ambiguous = () => ScheduledInputRetryable.make({ reason: "ambiguous" });
+const corrupt = (operation) => ScheduleStorageError.make({
+	operation,
+	reason: "corrupt"
+});
+/**
+* Scheduled admission through the existing host gate. Once the gate admits the call, every
+* runtime failure stays ambiguous because the Submission may already have committed.
+*/
+const nodeScheduledInputAdmissionLayer = Layer.effect(ScheduledInputAdmission, Effect.gen(function* () {
+	const host = yield* NodeDurableHost;
+	return ScheduledInputAdmission.of({ submit: (envelope) => host.submit(passthroughSubmitAgent(envelope.agentId), envelope.input, {
+		conversationId: envelope.conversationId,
+		principal: envelope.deliveryPrincipal,
+		idempotencyKey: envelope.admissionKey,
+		definitions: envelope.definitions
+	}).pipe(Effect.catchTags({
+		AdmissionClosed: () => Effect.fail(ScheduledInputRetryable.make({ reason: "host-closed" })),
+		AgentInputError: () => Effect.fail(corrupt("scheduled admission input")),
+		AdmissionConflict: () => Effect.fail(corrupt("scheduled admission conflict")),
+		DigestError: () => Effect.fail(ambiguous()),
+		LedgerError: () => Effect.fail(ambiguous()),
+		ConversationStoreError: () => Effect.fail(ambiguous()),
+		ConversationNotMaterialized: () => Effect.fail(ambiguous()),
+		AppendConflict: () => Effect.fail(ambiguous()),
+		FenceRejected: () => Effect.fail(ambiguous()),
+		DurableRuntimeFailpointError: () => Effect.fail(ambiguous())
+	})) });
+}));
+/** One bounded hint slot for the single supported Node scheduler. Indexed polling repairs loss. */
+const nodeScheduleWakeLayer = Layer.effect(ScheduleWake, Effect.gen(function* () {
+	const hints = yield* PubSub.sliding(1);
+	const subscription = yield* PubSub.subscribe(hints);
+	yield* Effect.addFinalizer(() => PubSub.shutdown(hints));
+	return ScheduleWake.of({
+		notify: PubSub.publish(hints, void 0).pipe(Effect.asVoid),
+		await: PubSub.take(subscription)
+	});
+}));
+const reportPassFailure = (cause) => Cause.hasInterruptsOnly(cause) ? Effect.interrupt : Effect.logWarning("Node scheduling pass failed").pipe(Effect.annotateLogs({ failureTag: Option.match(Cause.findErrorOption(cause), {
+	onNone: () => "Defect",
+	onSome: (error) => error._tag
+}) }), Effect.as(false));
+const nodeSchedulingDriverLayer = (limits) => Layer.effectDiscard(Effect.gen(function* () {
+	const scheduling = yield* ScheduleDriver;
+	const store = yield* ScheduleStore;
+	const wake = yield* ScheduleWake;
+	const run = Effect.gen(function* () {
+		while (true) {
+			const passSucceeded = yield* scheduling.runDue().pipe(Effect.map((pass) => pass.failed === 0), Effect.catchCause(reportPassFailure));
+			const deadlineResult = passSucceeded ? yield* store.nextDeadline().pipe(Effect.result) : Result.fail(ScheduleStorageError.make({
+				operation: "driver pass",
+				reason: "unavailable"
+			}));
+			if (Result.isFailure(deadlineResult) && passSucceeded) yield* Effect.logWarning("Node scheduling deadline query failed");
+			const nowMillis = yield* Effect.clockWith((clock) => clock.currentTimeMillis);
+			const deadlineDelay = Result.isSuccess(deadlineResult) && deadlineResult.success !== null ? Math.max(0, deadlineResult.success - nowMillis) : limits.recoveryPollMillis;
+			const delay = Math.min(deadlineDelay, limits.recoveryPollMillis);
+			yield* Effect.raceFirst(wake.await, Effect.sleep(Duration.millis(delay)));
+		}
+	});
+	yield* Effect.forkScoped(run);
+}));
+/**
+* Optional Scope-owned Node scheduling service and driver. The caller must provide the existing
+* host, its SQLite ScheduleStore, and an explicit ScheduleAuthorizer.
+*/
+var NodeScheduling = class {
+	static layer(options = {}) {
+		const limits = options.limits ?? defaultSchedulingLimits;
+		return nodeSchedulingDriverLayer(limits).pipe(Layer.provide(ScheduleDriver.layer(limits)), Layer.merge(Scheduling.layer(limits))).pipe(Layer.provide(Layer.mergeAll(nodeScheduledInputAdmissionLayer, nodeScheduleWakeLayer, NodeCrypto.layer)));
+	}
+};
+//#endregion
+export { AdmissionClosed, NodeDurableHost, NodeDurableRuntime, NodeDurableRuntimeConfig, NodeDurableRuntimeConfigValue, NodePlatformConfigError, NodeScheduling, NodeWakeSchedulerConfig, nodeScheduleWakeLayer, nodeScheduledInputAdmissionLayer, nodeWakeSchedulerLayer, ownershipDrainLayer };
 
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../src/wake-scheduler.ts","../src/layers.ts","../src/host.ts"],"sourcesContent":["import type { ConversationId } from \"@effect-agent/core\";\nimport { makeWakeSubscriptionHub, SubmissionLedger, WakeScheduler } from \"@effect-agent/session\";\nimport { Context, Duration, Effect, Layer, PubSub, Stream } from \"effect\";\n\n/**\n * Bounded in-process wake buffer. Wake hints are droppable by contract (the ledger-scan fallback\n * keeps liveness), so a full buffer slides out the oldest hint instead of growing without bound.\n */\nconst WAKE_BUFFER_CAPACITY = 1_024;\n\n/** Cadence authority for the Node wake scheduler's ledger-scan fallback loop. */\nexport class NodeWakeSchedulerConfig extends Context.Service<\n  NodeWakeSchedulerConfig,\n  {\n    /** Interval between ledger scans that re-emit every nonterminal Conversation lane. */\n    readonly scanInterval: Duration.Duration;\n  }\n>()(\"@effect-agent/platform-node/NodeWakeSchedulerConfig\") {\n  static layer(options: {\n    readonly scanInterval: Duration.Duration;\n  }): Layer.Layer<NodeWakeSchedulerConfig> {\n    return Layer.succeed(NodeWakeSchedulerConfig)({ scanInterval: options.scanInterval });\n  }\n}\n\nconst makeWakeScheduler = Effect.gen(function* () {\n  const ledger = yield* SubmissionLedger;\n  const config = yield* NodeWakeSchedulerConfig;\n  const hints = yield* PubSub.sliding<ConversationId>(WAKE_BUFFER_CAPACITY);\n  const progress = yield* makeWakeSubscriptionHub;\n  yield* Effect.addFinalizer(() => PubSub.shutdown(hints));\n\n  /**\n   * One fallback scan: every Conversation lane with nonterminal work, deduplicated. A scan\n   * failure degrades to \"no hints this round\" — the wake channel has no error contract and the\n   * next round retries — but is logged so a persistently failing ledger stays visible.\n   */\n  const scanOnce: Effect.Effect<ReadonlyArray<ConversationId>> = Stream.runCollect(\n    ledger.scanNonterminal,\n  ).pipe(\n    Effect.map((snapshots) => {\n      const lanes = new Set<ConversationId>();\n      for (const snapshot of snapshots) {\n        lanes.add(snapshot.conversationId);\n      }\n      return [...lanes];\n    }),\n    Effect.catch((error) =>\n      Effect.logWarning(\"NodeWakeScheduler fallback scan failed\", error).pipe(\n        Effect.as([] as ReadonlyArray<ConversationId>),\n      ),\n    ),\n  );\n\n  /**\n   * Deployment §3: correctness must not depend on in-memory notifications, so every `wakes` run\n   * merges its PubSub subscription with a Clock-driven ledger-scan loop. Both live entirely in\n   * the consuming run's Scope; no fiber outlives its subscriber.\n   */\n  const fallbackScans: Stream.Stream<ConversationId> = Stream.fromIterableEffectRepeat(\n    Effect.sleep(config.scanInterval).pipe(Effect.andThen(scanOnce)),\n  );\n\n  return WakeScheduler.of({\n    notify: (conversationId) =>\n      progress\n        .notify(conversationId)\n        .pipe(Effect.andThen(PubSub.publish(hints, conversationId)), Effect.asVoid),\n    subscribe: progress.subscribe,\n    wakes: Stream.merge(Stream.fromPubSub(hints), fallbackScans),\n  });\n});\n\n/**\n * In-process Node `WakeScheduler`: `notify` publishes to a bounded sliding PubSub for prompt\n * same-process wakeups, and every `wakes` subscription additionally runs a periodic\n * `SubmissionLedger.scanNonterminal` fallback so a dropped, coalesced, or never-sent notification\n * can never strand accepted work (persistence §14). Delivery may duplicate; consumers already\n * treat wakes as pure liveness hints.\n */\nexport const nodeWakeSchedulerLayer: Layer.Layer<\n  WakeScheduler,\n  never,\n  SubmissionLedger | NodeWakeSchedulerConfig\n> = Layer.effect(WakeScheduler)(makeWakeScheduler);\n","import type { SubmissionId } from \"@effect-agent/core\";\nimport {\n  CurrentToolFailureObserver,\n  toolFailureObserverLayer,\n  type RunCostEstimator,\n  type RunToolFailureObserver,\n} from \"@effect-agent/engine\";\nimport {\n  type ConversationStore,\n  type WakeScheduler,\n  AgentBindingResolver,\n  DEFAULT_OWNERSHIP_LEASE_DURATION,\n  DeploymentId,\n  DurableAgentRuntime,\n  DurableRuntimeConfig,\n  DurableRuntimeFailpoint,\n  ProducerId,\n  ReleaseOwnershipRequest,\n  SubmissionLedger,\n  ToolReconciler,\n  type DurableRuntimeFailpointHandler,\n  type OwnershipToken,\n  type ResolvedBinding,\n} from \"@effect-agent/session\";\nimport {\n  conversationStoreLayer,\n  SqliteStorageConfig,\n  SqliteStorageConfigValue,\n  storageFailpointLayer,\n  submissionLedgerLayer,\n  type SqliteStorageFailpointHandler,\n  type SqliteStorageInitializationError,\n} from \"@effect-agent/storage-sqlite\";\nimport { NodeCrypto } from \"@effect/platform-node\";\nimport { SqliteClient } from \"@effect/sql-sqlite-node\";\nimport { Context, Duration, Effect, Layer, Ref, Schema } from \"effect\";\n\nimport { NodeWakeSchedulerConfig, nodeWakeSchedulerLayer } from \"./wake-scheduler.ts\";\n\nconst PositiveMillis = Schema.Int.check(Schema.isGreaterThan(0));\nconst NonNegativeMillis = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));\nconst WorkerConcurrency = Schema.Int.check(\n  Schema.isGreaterThanOrEqualTo(1),\n  Schema.isLessThanOrEqualTo(64),\n);\n\n/** The supplied Node durable runtime configuration failed schema validation (DEPLOY-003). */\nexport class NodePlatformConfigError extends Schema.TaggedError<NodePlatformConfigError>()(\n  \"NodePlatformConfigError\",\n  {\n    message: Schema.String,\n    cause: Schema.optionalKey(Schema.Defect()),\n  },\n) {}\n\n/**\n * Validated Node durable runtime configuration (deployment §4: decoded once during Layer\n * construction, exposed as a typed service). Every cadence is in milliseconds and every bound is\n * finite; `workerConcurrency` caps how many worker loops `NodeDurableHost.runWorkers` drives.\n */\nexport class NodeDurableRuntimeConfigValue extends Schema.Class<NodeDurableRuntimeConfigValue>(\n  \"@effect-agent/platform-node/NodeDurableRuntimeConfigValue\",\n)({\n  /** SQLite database file backing BOTH the Conversation Log and the Submission Ledger. */\n  filename: Schema.NonEmptyString,\n  deploymentId: DeploymentId,\n  producerId: ProducerId,\n  /** Submission ownership lease duration (D5); liveness hint only, epochs stay authoritative. */\n  ownershipLeaseDuration: PositiveMillis,\n  /** Finite bound on concurrent worker loops per host (rule 10). */\n  workerConcurrency: WorkerConcurrency,\n  /** Ledger-scan fallback cadence of the Node wake scheduler (deployment §3). */\n  wakeScanInterval: PositiveMillis,\n  /** `awaitSettlement` ledger re-check cadence when no wake arrives. */\n  settlementPollInterval: PositiveMillis,\n  /** Worker ownership-lease renewal cadence. */\n  leaseRenewalInterval: PositiveMillis,\n  /** Active-Run abort-intent poll cadence. */\n  abortPollInterval: PositiveMillis,\n  /** Bounded SQLITE_BUSY retry window for write-lock acquisition. */\n  busyTimeout: NonNegativeMillis,\n  /** Canonical observation poll cadence of the SQLite store. */\n  observationPollInterval: NonNegativeMillis,\n  /** Opt-in full payload/digest-chain audit while opening the store. */\n  verifyOnOpen: Schema.Boolean,\n}) {}\n\n/** Explicit configuration authority for the assembled Node durable runtime. */\nexport class NodeDurableRuntimeConfig extends Context.Service<\n  NodeDurableRuntimeConfig,\n  NodeDurableRuntimeConfigValue\n>()(\"@effect-agent/platform-node/NodeDurableRuntimeConfig\") {}\n\n/**\n * Raw (unvalidated) construction options for `NodeDurableRuntime.layer`. Optional fields default\n * to the documented production values; everything is schema-decoded into\n * `NodeDurableRuntimeConfigValue` before any resource opens (deployment §5 gate 1).\n */\nexport interface NodeDurableRuntimeOptions {\n  readonly filename: string;\n  readonly deploymentId: string;\n  readonly producerId: string;\n  /** Milliseconds; default `DEFAULT_OWNERSHIP_LEASE_DURATION` (30s, D5). */\n  readonly ownershipLeaseDuration?: number | undefined;\n  /** Default 1; bounded to 1..64. */\n  readonly workerConcurrency?: number | undefined;\n  /** Milliseconds; default 1000. */\n  readonly wakeScanInterval?: number | undefined;\n  /** Milliseconds; default 500. */\n  readonly settlementPollInterval?: number | undefined;\n  /** Milliseconds; default 10000. */\n  readonly leaseRenewalInterval?: number | undefined;\n  /** Milliseconds; default 500. */\n  readonly abortPollInterval?: number | undefined;\n  /** Deployment-owned pricing authority used by durable cost budgets and settlements. */\n  readonly estimateCostMicrousd?: RunCostEstimator | undefined;\n  /** Closed trusted Tool failure reporting. Omission masks ambient observers at construction. */\n  readonly toolFailureObserver?: RunToolFailureObserver | undefined;\n  /** Milliseconds; default 5000. */\n  readonly busyTimeout?: number | undefined;\n  /** Milliseconds; default 25. */\n  readonly observationPollInterval?: number | undefined;\n  /** Default false. */\n  readonly verifyOnOpen?: boolean | undefined;\n  /** SQLite adapter fault injection (`ledger:*` / `append:*` locations); default none. */\n  readonly storageFailpoint?: SqliteStorageFailpointHandler | undefined;\n  /** Coordinator fault injection (`submit:*` / `terminalize:*` locations); default none. */\n  readonly runtimeFailpoint?: DurableRuntimeFailpointHandler | undefined;\n  /**\n   * Reconciliation policy consulted for open ordinary Tool Calls before an Unknown Outcome is\n   * recorded (durability §10, DUR-009). Defaults to the fail-closed `ToolReconciler.uncertain`:\n   * with no registered policy, every open call stays Unknown and routes to the authorized\n   * DUR-017 resolution path.\n   */\n  readonly toolReconciler?: Layer.Layer<ToolReconciler> | undefined;\n  /**\n   * Registered worker Bindings resolved at durable claim time (S2, spec/subagents.md §11):\n   * build each with `DurableWorkerBinding.make(binding, digests)` so\n   * `NodeDurableHost.runResolvedWorkers` / `DurableAgentRuntime.runResolvedWorker` can serve\n   * parent and child lanes from one pool with exact-digest resolution (SUB-023). Defaults to\n   * the empty registration: every resolved claim then fails closed (`BindingUnavailable` for a\n   * root, the framework `ChildCompatibilityFailure` Settlement for a parent-linked child).\n   */\n  readonly bindings?: ReadonlyArray<ResolvedBinding> | undefined;\n}\n\n/** Every construction failure of the assembled Node durable runtime stack. */\nexport type NodeDurableRuntimeInitializationError =\n  | NodePlatformConfigError\n  | SqliteStorageInitializationError;\n\n/** The services `NodeDurableRuntime.layer` provides. */\nexport type NodeDurableRuntimeServices =\n  | DurableAgentRuntime\n  | SubmissionLedger\n  | ConversationStore\n  | WakeScheduler\n  | DurableRuntimeConfig\n  | NodeDurableRuntimeConfig\n  | AgentBindingResolver;\n\nconst decodeConfigValue = Schema.decodeUnknownEffect(NodeDurableRuntimeConfigValue);\n\nconst configFromOptions = (\n  options: NodeDurableRuntimeOptions,\n): Effect.Effect<NodeDurableRuntimeConfigValue, NodePlatformConfigError> =>\n  decodeConfigValue({\n    filename: options.filename,\n    deploymentId: options.deploymentId,\n    producerId: options.producerId,\n    ownershipLeaseDuration:\n      options.ownershipLeaseDuration ?? Duration.toMillis(DEFAULT_OWNERSHIP_LEASE_DURATION),\n    workerConcurrency: options.workerConcurrency ?? 1,\n    wakeScanInterval: options.wakeScanInterval ?? 1_000,\n    settlementPollInterval: options.settlementPollInterval ?? 500,\n    leaseRenewalInterval: options.leaseRenewalInterval ?? 10_000,\n    abortPollInterval: options.abortPollInterval ?? 500,\n    busyTimeout: options.busyTimeout ?? 5_000,\n    observationPollInterval: options.observationPollInterval ?? 25,\n    verifyOnOpen: options.verifyOnOpen ?? false,\n  }).pipe(\n    Effect.mapError((error) =>\n      NodePlatformConfigError.make({\n        message: `Invalid Node durable runtime configuration: ${error.message}`,\n        cause: error,\n      }),\n    ),\n  );\n\n/** SQLite storage configuration derived from the single validated Node configuration. */\nconst sqliteStorageConfigLayer: Layer.Layer<SqliteStorageConfig, never, NodeDurableRuntimeConfig> =\n  Layer.effect(SqliteStorageConfig)(\n    Effect.gen(function* () {\n      const config = yield* NodeDurableRuntimeConfig;\n      return SqliteStorageConfigValue.make({\n        observationPollInterval: config.observationPollInterval,\n        busyTimeout: config.busyTimeout,\n        ownershipLeaseDuration: config.ownershipLeaseDuration,\n        verifyOnOpen: config.verifyOnOpen,\n      });\n    }),\n  );\n\n/** Session coordinator configuration derived from the single validated Node configuration. */\nconst durableRuntimeConfigLayer = (\n  estimateCostMicrousd: RunCostEstimator | undefined,\n): Layer.Layer<DurableRuntimeConfig, never, NodeDurableRuntimeConfig> =>\n  Layer.effect(DurableRuntimeConfig)(\n    Effect.gen(function* () {\n      const config = yield* NodeDurableRuntimeConfig;\n      return DurableRuntimeConfig.make({\n        deploymentId: config.deploymentId,\n        producerId: config.producerId,\n        settlementPollInterval: Duration.millis(config.settlementPollInterval),\n        leaseRenewalInterval: Duration.millis(config.leaseRenewalInterval),\n        abortPollInterval: Duration.millis(config.abortPollInterval),\n        ...(estimateCostMicrousd === undefined ? {} : { estimateCostMicrousd }),\n      });\n    }),\n  );\n\n/** Wake fallback-scan cadence derived from the single validated Node configuration. */\nconst wakeSchedulerConfigLayer: Layer.Layer<\n  NodeWakeSchedulerConfig,\n  never,\n  NodeDurableRuntimeConfig\n> = Layer.effect(NodeWakeSchedulerConfig)(\n  Effect.gen(function* () {\n    const config = yield* NodeDurableRuntimeConfig;\n    return { scanInterval: Duration.millis(config.wakeScanInterval) };\n  }),\n);\n\nconst releaseTrackedOwnership = (\n  ledger: SubmissionLedger[\"Service\"],\n  registry: Ref.Ref<ReadonlyMap<SubmissionId, OwnershipToken>>,\n): Effect.Effect<void> =>\n  Effect.gen(function* () {\n    const tracked = yield* Ref.getAndSet(registry, new Map<SubmissionId, OwnershipToken>());\n    for (const [submissionId, ownershipToken] of tracked) {\n      yield* ledger\n        .releaseOwnership(ReleaseOwnershipRequest.make({ submissionId, ownershipToken }))\n        .pipe(\n          Effect.catchTags({\n            // A newer epoch already owns (or settled) the lane: nothing left to drain.\n            OwnershipLost: () => Effect.void,\n            // Drain is best-effort by design: the lease still expires and the durability protocol,\n            // not graceful shutdown, provides correctness (DEPLOY-006).\n            LedgerError: (error) =>\n              Effect.logWarning(\"Ownership drain failed; the lease will expire instead\", error),\n          }),\n        );\n    }\n  });\n\n/**\n * Shutdown-drain decorator for a `SubmissionLedger` (deployment §6 step 6): every ownership\n * period granted through this Layer is tracked — claims start tracking, renewals follow token\n * rotation, releases and settlement finalizations stop it — and every ownership still held when\n * the Layer's Scope closes is released so another host can claim the lane immediately instead of\n * waiting for lease expiry. The drain is a liveness courtesy only; producer-epoch fencing remains\n * the correctness authority (DUR-006), and a forced kill simply falls back to lease expiry.\n */\nexport const ownershipDrainLayer: Layer.Layer<SubmissionLedger, never, SubmissionLedger> =\n  Layer.effect(SubmissionLedger)(\n    Effect.gen(function* () {\n      const ledger = yield* SubmissionLedger;\n      const registry = yield* Ref.make<ReadonlyMap<SubmissionId, OwnershipToken>>(\n        new Map<SubmissionId, OwnershipToken>(),\n      );\n\n      const track = (submissionId: SubmissionId, ownershipToken: OwnershipToken) =>\n        Ref.update(registry, (tracked) => new Map(tracked).set(submissionId, ownershipToken));\n      const untrack = (submissionId: SubmissionId) =>\n        Ref.update(registry, (tracked) => {\n          const next = new Map(tracked);\n          next.delete(submissionId);\n          return next;\n        });\n\n      yield* Effect.addFinalizer(() => releaseTrackedOwnership(ledger, registry));\n\n      return SubmissionLedger.of({\n        capabilities: ledger.capabilities,\n        admit: ledger.admit,\n        markReady: ledger.markReady,\n        lookup: ledger.lookup,\n        // The S2 subagent ops forward untouched: none of them grants an ownership period, so\n        // the drain has nothing to track for them (`suspend` below already stops tracking the\n        // waitingForChild ownership period the moment it ends).\n        resolveAdmission: ledger.resolveAdmission,\n        recordChildSettled: ledger.recordChildSettled,\n        reserveChildBudget: ledger.reserveChildBudget,\n        attachChildToReservation: ledger.attachChildToReservation,\n        beginChildBudgetRelease: ledger.beginChildBudgetRelease,\n        releaseChildBudget: ledger.releaseChildBudget,\n        claim: (request) =>\n          ledger\n            .claim(request)\n            .pipe(\n              Effect.tap((claimed) =>\n                claimed._tag === \"Some\"\n                  ? track(claimed.value.submissionId, claimed.value.ownershipToken)\n                  : Effect.void,\n              ),\n            ),\n        renewOwnership: (request) =>\n          ledger.renewOwnership(request).pipe(\n            Effect.tap((renewal) => track(request.submissionId, renewal.ownershipToken)),\n            Effect.tapError((error) =>\n              error._tag === \"OwnershipLost\" ? untrack(request.submissionId) : Effect.void,\n            ),\n          ),\n        releaseOwnership: (request) =>\n          ledger.releaseOwnership(request).pipe(\n            Effect.tap(() => untrack(request.submissionId)),\n            Effect.tapError((error) =>\n              error._tag === \"OwnershipLost\" ? untrack(request.submissionId) : Effect.void,\n            ),\n          ),\n        markInputApplied: ledger.markInputApplied,\n        reserveSettlement: ledger.reserveSettlement,\n        finalizeSettlement: (request) =>\n          ledger.finalizeSettlement(request).pipe(Effect.tap(() => untrack(request.submissionId))),\n        requestAbort: ledger.requestAbort,\n        claimJoining: ledger.claimJoining,\n        markJoined: ledger.markJoined,\n        revertJoining: ledger.revertJoining,\n        // Suspension ends the ownership period by contract, so the drain stops tracking it.\n        suspend: (request) =>\n          ledger.suspend(request).pipe(Effect.tap(() => untrack(request.submissionId))),\n        recordApprovalDecision: ledger.recordApprovalDecision,\n        markUnknown: ledger.markUnknown,\n        recordUnknownResolution: ledger.recordUnknownResolution,\n        scanNonterminal: ledger.scanNonterminal,\n        loadRecoverySnapshot: ledger.loadRecoverySnapshot,\n      });\n    }),\n  );\n\n/**\n * The DN Layer assembly (deployment §12: a Layer-assembly library, not an app entrypoint).\n * `layer(options)` decodes the configuration, opens ONE SQLite database serving both the\n * Conversation Log and the Submission Ledger (so claims fence the same producer epochs), wires\n * the Node wake scheduler with its ledger-scan fallback, wraps the ledger with the shutdown\n * ownership drain, defaults the Tool reconciliation policy to the fail-closed\n * `ToolReconciler.uncertain` (override via `options.toolReconciler`), and provides a ready\n * `DurableAgentRuntime` on top. Storage compatibility is\n * verified during construction: an incompatible database file fails the Layer with\n * `SqliteStorageCompatibilityError` before anything is mutated (DEPLOY-008).\n */\nexport class NodeDurableRuntime {\n  /** Validated configuration Layer; fails typed when the supplied options are out of bounds. */\n  static configLayer(\n    options: NodeDurableRuntimeOptions,\n  ): Layer.Layer<NodeDurableRuntimeConfig, NodePlatformConfigError> {\n    return Layer.effect(NodeDurableRuntimeConfig)(configFromOptions(options));\n  }\n\n  /** The full DN runtime stack over one SQLite file. */\n  static layer(\n    options: NodeDurableRuntimeOptions,\n  ): Layer.Layer<NodeDurableRuntimeServices, NodeDurableRuntimeInitializationError> {\n    return Layer.unwrap(\n      Effect.map(configFromOptions(options), (config) => {\n        const nodeConfigLayer = Layer.succeed(NodeDurableRuntimeConfig)(config);\n        const infrastructure = Layer.mergeAll(\n          sqliteStorageConfigLayer,\n          storageFailpointLayer({\n            filename: config.filename,\n            failpoint: options.storageFailpoint,\n          }),\n          SqliteClient.layer({ filename: config.filename }),\n          NodeCrypto.layer,\n        );\n        const runtimeFailpointLayer =\n          options.runtimeFailpoint === undefined\n            ? DurableRuntimeFailpoint.layer\n            : Layer.succeed(DurableRuntimeFailpoint)({ hit: options.runtimeFailpoint });\n        const reconcilerLayer = options.toolReconciler ?? ToolReconciler.uncertain;\n        const observerLayer =\n          options.toolFailureObserver === undefined\n            ? Layer.succeed(CurrentToolFailureObserver)(undefined)\n            : toolFailureObserverLayer(options.toolFailureObserver);\n        const bindingResolverLayer = AgentBindingResolver.layer(options.bindings ?? []);\n        const ports = Layer.mergeAll(\n          conversationStoreLayer,\n          nodeWakeSchedulerLayer.pipe(\n            Layer.provideMerge(ownershipDrainLayer.pipe(Layer.provide(submissionLedgerLayer))),\n          ),\n        );\n        return DurableAgentRuntime.layer.pipe(\n          Layer.provideMerge(\n            Layer.mergeAll(\n              ports,\n              durableRuntimeConfigLayer(options.estimateCostMicrousd),\n              bindingResolverLayer,\n            ),\n          ),\n          Layer.provide(\n            Layer.mergeAll(\n              wakeSchedulerConfigLayer,\n              runtimeFailpointLayer,\n              reconcilerLayer,\n              observerLayer,\n            ),\n          ),\n          Layer.provideMerge(infrastructure),\n          Layer.provideMerge(nodeConfigLayer),\n        );\n      }),\n    );\n  }\n}\n","import type { ConversationId, SubmissionId } from \"@effect-agent/core\";\nimport {\n  AgentBindingResolver,\n  DurableAgentRuntime,\n  type AbortCommand,\n  type AbortIntent,\n  type CanonicalRecordEnvelope,\n  type ConversationNotMaterialized,\n  type ConversationStoreError,\n  type DurableAbortFailure,\n  type DurableAwaitFailure,\n  type DurableBindingFailure,\n  type DurableExplainFailure,\n  type DurableObserveOptions,\n  type DurableObligationFailure,\n  type DurableRetryFailure,\n  type DurableSubmitAgent,\n  type DurableSubmitFailure,\n  type DurableSubmitOptions,\n  type DurableVerifyFailure,\n  type DurableWorkerFailure,\n  type IntegrityReport,\n  type ObligationReport,\n  type ObligationThresholds,\n  type OperationDenied,\n  type Receipt,\n  type RecoveryExplanation,\n  type RecoveryReport,\n  type RetryCommand,\n  type Settlement,\n} from \"@effect-agent/session\";\nimport { Context, Effect, Layer, Ref, Schema, Stream } from \"effect\";\n\nimport {\n  NodeDurableRuntime,\n  NodeDurableRuntimeConfig,\n  type NodeDurableRuntimeInitializationError,\n  type NodeDurableRuntimeOptions,\n  type NodeDurableRuntimeServices,\n} from \"./layers.ts\";\n\n/**\n * Admission is not open on this host: it is shutting down (deployment §6 step 1, DEPLOY-005).\n * Accepted work is unaffected — only NEW admissions are refused.\n */\nexport class AdmissionClosed extends Schema.TaggedError<AdmissionClosed>()(\"AdmissionClosed\", {\n  message: Schema.String,\n}) {}\n\nconst makeHost = Effect.gen(function* () {\n  const runtime = yield* DurableAgentRuntime;\n  const config = yield* NodeDurableRuntimeConfig;\n  const bindingResolver = yield* AgentBindingResolver;\n\n  // Startup gate (deployment §5, plan §host): configuration decoding and storage compatibility\n  // already gated this Layer's dependencies; the last gate before admission opens is recovering\n  // EVERY nonterminal Submission. Work needing a live Agent Binding is reported `deferred` and\n  // stays a visible obligation for `runWorkers`; lanes durably blocked on an Unknown Outcome are\n  // reported `unknown` and wait for the authorized `resolveUnknown` path (DUR-017) — they consume\n  // no worker permit while the settlement obligation stays owed.\n  const startupRecovery = yield* runtime.runRecovery;\n\n  const admission = yield* Ref.make(true);\n  // Shutdown step 1 (DEPLOY-005): admission closes before the ownership drain in the runtime\n  // Layer below releases claims and before the stores close in reverse acquisition order.\n  yield* Effect.addFinalizer(() => Ref.set(admission, false));\n\n  const requireAdmission: Effect.Effect<void, AdmissionClosed> = Ref.get(admission).pipe(\n    Effect.flatMap((open) =>\n      open\n        ? Effect.void\n        : Effect.fail(\n            AdmissionClosed.make({ message: \"The host is shutting down; admission is closed.\" }),\n          ),\n    ),\n  );\n\n  const submit = <InputSchema extends Schema.Top>(\n    agent: DurableSubmitAgent<InputSchema>,\n    input: InputSchema[\"Type\"],\n    options: DurableSubmitOptions,\n  ): Effect.Effect<\n    Receipt,\n    AdmissionClosed | DurableSubmitFailure,\n    InputSchema[\"EncodingServices\"]\n  > => requireAdmission.pipe(Effect.andThen(runtime.submit(agent, input, options)));\n\n  const runWorkers = <A, E, R>(worker: Effect.Effect<A, E, R>): Effect.Effect<void, E, R> =>\n    Effect.forEach(\n      Array.from({ length: config.workerConcurrency }, (_, index) => index),\n      () => worker,\n      { concurrency: \"unbounded\", discard: true },\n    );\n\n  // S2 multi-binding pool: every claimed head resolves its exact registered Binding through\n  // the host's `AgentBindingResolver` (`NodeDurableRuntimeOptions.bindings`), so ONE bounded\n  // pool serves parent and child lanes — the spec §12 smallest-pool suspension/wakeup proof\n  // runs `workerConcurrency: 1` over exactly this loop.\n  const runResolvedWorkers = runWorkers(\n    runtime.runResolvedWorker.pipe(Effect.provideService(AgentBindingResolver, bindingResolver)),\n  );\n\n  return NodeDurableHost.of({\n    startupRecovery,\n    admissionOpen: Ref.get(admission),\n    submit,\n    awaitSettlement: runtime.awaitSettlement,\n    observe: runtime.observe,\n    abort: runtime.abort,\n    explain: runtime.explain,\n    explainConversation: runtime.explainConversation,\n    verify: runtime.verify,\n    retry: runtime.retry,\n    wake: runtime.wake,\n    scanObligations: runtime.scanObligations,\n    runWorkers,\n    runResolvedWorkers,\n  });\n});\n\n/**\n * Operational host lifecycle for the DN runtime (deployment §2/§5/§6).\n *\n * Startup gates run during Layer construction, so the service existing implies readiness:\n * configuration was schema-decoded, the SQLite file passed the exact-version compatibility check,\n * and every nonterminal Submission went through one full recovery pass BEFORE admission opened.\n * `startupRecovery` is the auditable evidence of that reconciliation pass.\n *\n * Shutdown runs in reverse Layer order when the owning Scope closes: `submit` starts refusing\n * with `AdmissionClosed` first, then the runtime Layer's ownership drain releases every claim\n * still held so another host can take over the lanes immediately, then the SQLite resources\n * close. Forced termination at any point stays safe — the durability protocol, not graceful\n * shutdown, provides correctness (DEPLOY-006).\n */\nexport class NodeDurableHost extends Context.Service<\n  NodeDurableHost,\n  {\n    /**\n     * The recovery decisions executed (or deferred) by this host's startup reconciliation.\n     * Reports with the `unknown` disposition identify lanes blocked on Unknown Outcomes that\n     * only the authorized DUR-017 resolution path can release.\n     */\n    readonly startupRecovery: ReadonlyArray<RecoveryReport>;\n    /** Admission-role readiness (deployment §7): true until shutdown begins. */\n    readonly admissionOpen: Effect.Effect<boolean>;\n    /** `DurableAgentRuntime.submit` behind the host admission gate. */\n    readonly submit: <InputSchema extends Schema.Top>(\n      agent: DurableSubmitAgent<InputSchema>,\n      input: InputSchema[\"Type\"],\n      options: DurableSubmitOptions,\n    ) => Effect.Effect<\n      Receipt,\n      AdmissionClosed | DurableSubmitFailure,\n      InputSchema[\"EncodingServices\"]\n    >;\n    readonly awaitSettlement: (receipt: Receipt) => Effect.Effect<Settlement, DurableAwaitFailure>;\n    readonly observe: (\n      receipt: Receipt,\n      options?: DurableObserveOptions,\n    ) => Stream.Stream<\n      CanonicalRecordEnvelope,\n      ConversationStoreError | ConversationNotMaterialized | OperationDenied\n    >;\n    readonly abort: (command: AbortCommand) => Effect.Effect<AbortIntent, DurableAbortFailure>;\n    /** `DurableAgentRuntime.explain` — read-only recovery explanation of one Submission (P7). */\n    readonly explain: (\n      submissionId: SubmissionId,\n    ) => Effect.Effect<RecoveryExplanation, DurableExplainFailure>;\n    /** `DurableAgentRuntime.explainConversation` — explain every nonterminal lane member. */\n    readonly explainConversation: (\n      conversationId: ConversationId,\n    ) => Effect.Effect<ReadonlyArray<RecoveryExplanation>, DurableExplainFailure>;\n    /** `DurableAgentRuntime.verify` — read-only integrity checks, never a repair (P7). */\n    readonly verify: (\n      conversationId: ConversationId,\n    ) => Effect.Effect<IntegrityReport, DurableVerifyFailure>;\n    /** `DurableAgentRuntime.retry` — audited single-Submission re-drive with typed refusals. */\n    readonly retry: (command: RetryCommand) => Effect.Effect<RecoveryReport, DurableRetryFailure>;\n    /** `DurableAgentRuntime.wake` — the documented operator liveness nudge for one lane. */\n    readonly wake: (conversationId: ConversationId) => Effect.Effect<void, OperationDenied>;\n    /** `DurableAgentRuntime.scanObligations` — the scan-based DUR-017/OPS-001 report. */\n    readonly scanObligations: (\n      thresholds: ObligationThresholds,\n    ) => Effect.Effect<ObligationReport, DurableObligationFailure>;\n    /**\n     * Run `workerConcurrency` copies of the given worker effect (typically\n     * `DurableAgentRuntime.runWorker(agent)`) until the caller's Scope interrupts them. The\n     * bound is the validated finite configuration value; the host never forks daemon fibers.\n     */\n    readonly runWorkers: <A, E, R>(worker: Effect.Effect<A, E, R>) => Effect.Effect<void, E, R>;\n    /**\n     * Run `workerConcurrency` copies of `DurableAgentRuntime.runResolvedWorker` over the host's\n     * registered Bindings (S2): every claimed head resolves its exact stored Binding before any\n     * code runs (SUB-023), so one bounded pool serves parent and attached-child lanes.\n     */\n    readonly runResolvedWorkers: Effect.Effect<void, DurableWorkerFailure | DurableBindingFailure>;\n  }\n>()(\"@effect-agent/platform-node/NodeDurableHost\") {\n  /** Host gates over an already-assembled `NodeDurableRuntime` stack. */\n  static readonly layer: Layer.Layer<\n    NodeDurableHost,\n    DurableWorkerFailure,\n    DurableAgentRuntime | NodeDurableRuntimeConfig | AgentBindingResolver\n  > = Layer.effect(NodeDurableHost)(makeHost);\n\n  /** The complete DN host: `NodeDurableRuntime.layer(options)` plus the host lifecycle gates. */\n  static layerStack(\n    options: NodeDurableRuntimeOptions,\n  ): Layer.Layer<\n    NodeDurableHost | NodeDurableRuntimeServices,\n    DurableWorkerFailure | NodeDurableRuntimeInitializationError\n  > {\n    return NodeDurableHost.layer.pipe(Layer.provideMerge(NodeDurableRuntime.layer(options)));\n  }\n}\n"],"mappings":";;;;;;;;;;;AAQA,MAAM,uBAAuB;;AAG7B,IAAa,0BAAb,MAAa,gCAAgC,QAAQ,QAMnD,CAAC,CAAC,qDAAqD,CAAC,CAAC;CACzD,OAAO,MAAM,SAE4B;EACvC,OAAO,MAAM,QAAQ,uBAAuB,CAAC,CAAC,EAAE,cAAc,QAAQ,aAAa,CAAC;CACtF;AACF;AAEA,MAAM,oBAAoB,OAAO,IAAI,aAAa;CAChD,MAAM,SAAS,OAAO;CACtB,MAAM,SAAS,OAAO;CACtB,MAAM,QAAQ,OAAO,OAAO,QAAwB,oBAAoB;CACxE,MAAM,WAAW,OAAO;CACxB,OAAO,OAAO,mBAAmB,OAAO,SAAS,KAAK,CAAC;;;;;;CAOvD,MAAM,WAAyD,OAAO,WACpE,OAAO,eACT,CAAC,CAAC,KACA,OAAO,KAAK,cAAc;EACxB,MAAM,wBAAQ,IAAI,IAAoB;EACtC,KAAK,MAAM,YAAY,WACrB,MAAM,IAAI,SAAS,cAAc;EAEnC,OAAO,CAAC,GAAG,KAAK;CAClB,CAAC,GACD,OAAO,OAAO,UACZ,OAAO,WAAW,0CAA0C,KAAK,CAAC,CAAC,KACjE,OAAO,GAAG,CAAC,CAAkC,CAC/C,CACF,CACF;;;;;;CAOA,MAAM,gBAA+C,OAAO,yBAC1D,OAAO,MAAM,OAAO,YAAY,CAAC,CAAC,KAAK,OAAO,QAAQ,QAAQ,CAAC,CACjE;CAEA,OAAO,cAAc,GAAG;EACtB,SAAS,mBACP,SACG,OAAO,cAAc,CAAC,CACtB,KAAK,OAAO,QAAQ,OAAO,QAAQ,OAAO,cAAc,CAAC,GAAG,OAAO,MAAM;EAC9E,WAAW,SAAS;EACpB,OAAO,OAAO,MAAM,OAAO,WAAW,KAAK,GAAG,aAAa;CAC7D,CAAC;AACH,CAAC;;;;;;;;AASD,MAAa,yBAIT,MAAM,OAAO,aAAa,CAAC,CAAC,iBAAiB;;;AC7CjD,MAAM,iBAAiB,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC;AAC/D,MAAM,oBAAoB,OAAO,IAAI,MAAM,OAAO,uBAAuB,CAAC,CAAC;AAC3E,MAAM,oBAAoB,OAAO,IAAI,MACnC,OAAO,uBAAuB,CAAC,GAC/B,OAAO,oBAAoB,EAAE,CAC/B;;AAGA,IAAa,0BAAb,cAA6C,OAAO,YAAqC,CAAC,CACxF,2BACA;CACE,SAAS,OAAO;CAChB,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;AAC3C,CACF,CAAC,CAAC,CAAC;;;;;;AAOH,IAAa,gCAAb,cAAmD,OAAO,MACxD,2DACF,CAAC,CAAC;;CAEA,UAAU,OAAO;CACjB,cAAc;CACd,YAAY;;CAEZ,wBAAwB;;CAExB,mBAAmB;;CAEnB,kBAAkB;;CAElB,wBAAwB;;CAExB,sBAAsB;;CAEtB,mBAAmB;;CAEnB,aAAa;;CAEb,yBAAyB;;CAEzB,cAAc,OAAO;AACvB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,2BAAb,cAA8C,QAAQ,QAGpD,CAAC,CAAC,sDAAsD,CAAC,CAAC,CAAC;AAsE7D,MAAM,oBAAoB,OAAO,oBAAoB,6BAA6B;AAElF,MAAM,qBACJ,YAEA,kBAAkB;CAChB,UAAU,QAAQ;CAClB,cAAc,QAAQ;CACtB,YAAY,QAAQ;CACpB,wBACE,QAAQ,0BAA0B,SAAS,SAAS,gCAAgC;CACtF,mBAAmB,QAAQ,qBAAqB;CAChD,kBAAkB,QAAQ,oBAAoB;CAC9C,wBAAwB,QAAQ,0BAA0B;CAC1D,sBAAsB,QAAQ,wBAAwB;CACtD,mBAAmB,QAAQ,qBAAqB;CAChD,aAAa,QAAQ,eAAe;CACpC,yBAAyB,QAAQ,2BAA2B;CAC5D,cAAc,QAAQ,gBAAgB;AACxC,CAAC,CAAC,CAAC,KACD,OAAO,UAAU,UACf,wBAAwB,KAAK;CAC3B,SAAS,+CAA+C,MAAM;CAC9D,OAAO;AACT,CAAC,CACH,CACF;;AAGF,MAAM,2BACJ,MAAM,OAAO,mBAAmB,CAAC,CAC/B,OAAO,IAAI,aAAa;CACtB,MAAM,SAAS,OAAO;CACtB,OAAO,yBAAyB,KAAK;EACnC,yBAAyB,OAAO;EAChC,aAAa,OAAO;EACpB,wBAAwB,OAAO;EAC/B,cAAc,OAAO;CACvB,CAAC;AACH,CAAC,CACH;;AAGF,MAAM,6BACJ,yBAEA,MAAM,OAAO,oBAAoB,CAAC,CAChC,OAAO,IAAI,aAAa;CACtB,MAAM,SAAS,OAAO;CACtB,OAAO,qBAAqB,KAAK;EAC/B,cAAc,OAAO;EACrB,YAAY,OAAO;EACnB,wBAAwB,SAAS,OAAO,OAAO,sBAAsB;EACrE,sBAAsB,SAAS,OAAO,OAAO,oBAAoB;EACjE,mBAAmB,SAAS,OAAO,OAAO,iBAAiB;EAC3D,GAAI,yBAAyB,KAAA,IAAY,CAAC,IAAI,EAAE,qBAAqB;CACvE,CAAC;AACH,CAAC,CACH;;AAGF,MAAM,2BAIF,MAAM,OAAO,uBAAuB,CAAC,CACvC,OAAO,IAAI,aAAa;CACtB,MAAM,SAAS,OAAO;CACtB,OAAO,EAAE,cAAc,SAAS,OAAO,OAAO,gBAAgB,EAAE;AAClE,CAAC,CACH;AAEA,MAAM,2BACJ,QACA,aAEA,OAAO,IAAI,aAAa;CACtB,MAAM,UAAU,OAAO,IAAI,UAAU,0BAAU,IAAI,IAAkC,CAAC;CACtF,KAAK,MAAM,CAAC,cAAc,mBAAmB,SAC3C,OAAO,OACJ,iBAAiB,wBAAwB,KAAK;EAAE;EAAc;CAAe,CAAC,CAAC,CAAC,CAChF,KACC,OAAO,UAAU;EAEf,qBAAqB,OAAO;EAG5B,cAAc,UACZ,OAAO,WAAW,yDAAyD,KAAK;CACpF,CAAC,CACH;AAEN,CAAC;;;;;;;;;AAUH,MAAa,sBACX,MAAM,OAAO,gBAAgB,CAAC,CAC5B,OAAO,IAAI,aAAa;CACtB,MAAM,SAAS,OAAO;CACtB,MAAM,WAAW,OAAO,IAAI,qBAC1B,IAAI,IAAkC,CACxC;CAEA,MAAM,SAAS,cAA4B,mBACzC,IAAI,OAAO,WAAW,YAAY,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,cAAc,cAAc,CAAC;CACtF,MAAM,WAAW,iBACf,IAAI,OAAO,WAAW,YAAY;EAChC,MAAM,OAAO,IAAI,IAAI,OAAO;EAC5B,KAAK,OAAO,YAAY;EACxB,OAAO;CACT,CAAC;CAEH,OAAO,OAAO,mBAAmB,wBAAwB,QAAQ,QAAQ,CAAC;CAE1E,OAAO,iBAAiB,GAAG;EACzB,cAAc,OAAO;EACrB,OAAO,OAAO;EACd,WAAW,OAAO;EAClB,QAAQ,OAAO;EAIf,kBAAkB,OAAO;EACzB,oBAAoB,OAAO;EAC3B,oBAAoB,OAAO;EAC3B,0BAA0B,OAAO;EACjC,yBAAyB,OAAO;EAChC,oBAAoB,OAAO;EAC3B,QAAQ,YACN,OACG,MAAM,OAAO,CAAC,CACd,KACC,OAAO,KAAK,YACV,QAAQ,SAAS,SACb,MAAM,QAAQ,MAAM,cAAc,QAAQ,MAAM,cAAc,IAC9D,OAAO,IACb,CACF;EACJ,iBAAiB,YACf,OAAO,eAAe,OAAO,CAAC,CAAC,KAC7B,OAAO,KAAK,YAAY,MAAM,QAAQ,cAAc,QAAQ,cAAc,CAAC,GAC3E,OAAO,UAAU,UACf,MAAM,SAAS,kBAAkB,QAAQ,QAAQ,YAAY,IAAI,OAAO,IAC1E,CACF;EACF,mBAAmB,YACjB,OAAO,iBAAiB,OAAO,CAAC,CAAC,KAC/B,OAAO,UAAU,QAAQ,QAAQ,YAAY,CAAC,GAC9C,OAAO,UAAU,UACf,MAAM,SAAS,kBAAkB,QAAQ,QAAQ,YAAY,IAAI,OAAO,IAC1E,CACF;EACF,kBAAkB,OAAO;EACzB,mBAAmB,OAAO;EAC1B,qBAAqB,YACnB,OAAO,mBAAmB,OAAO,CAAC,CAAC,KAAK,OAAO,UAAU,QAAQ,QAAQ,YAAY,CAAC,CAAC;EACzF,cAAc,OAAO;EACrB,cAAc,OAAO;EACrB,YAAY,OAAO;EACnB,eAAe,OAAO;EAEtB,UAAU,YACR,OAAO,QAAQ,OAAO,CAAC,CAAC,KAAK,OAAO,UAAU,QAAQ,QAAQ,YAAY,CAAC,CAAC;EAC9E,wBAAwB,OAAO;EAC/B,aAAa,OAAO;EACpB,yBAAyB,OAAO;EAChC,iBAAiB,OAAO;EACxB,sBAAsB,OAAO;CAC/B,CAAC;AACH,CAAC,CACH;;;;;;;;;;;;AAaF,IAAa,qBAAb,MAAgC;;CAE9B,OAAO,YACL,SACgE;EAChE,OAAO,MAAM,OAAO,wBAAwB,CAAC,CAAC,kBAAkB,OAAO,CAAC;CAC1E;;CAGA,OAAO,MACL,SACgF;EAChF,OAAO,MAAM,OACX,OAAO,IAAI,kBAAkB,OAAO,IAAI,WAAW;GACjD,MAAM,kBAAkB,MAAM,QAAQ,wBAAwB,CAAC,CAAC,MAAM;GACtE,MAAM,iBAAiB,MAAM,SAC3B,0BACA,sBAAsB;IACpB,UAAU,OAAO;IACjB,WAAW,QAAQ;GACrB,CAAC,GACD,aAAa,MAAM,EAAE,UAAU,OAAO,SAAS,CAAC,GAChD,WAAW,KACb;GACA,MAAM,wBACJ,QAAQ,qBAAqB,KAAA,IACzB,wBAAwB,QACxB,MAAM,QAAQ,uBAAuB,CAAC,CAAC,EAAE,KAAK,QAAQ,iBAAiB,CAAC;GAC9E,MAAM,kBAAkB,QAAQ,kBAAkB,eAAe;GACjE,MAAM,gBACJ,QAAQ,wBAAwB,KAAA,IAC5B,MAAM,QAAQ,0BAA0B,CAAC,CAAC,KAAA,CAAS,IACnD,yBAAyB,QAAQ,mBAAmB;GAC1D,MAAM,uBAAuB,qBAAqB,MAAM,QAAQ,YAAY,CAAC,CAAC;GAC9E,MAAM,QAAQ,MAAM,SAClB,wBACA,uBAAuB,KACrB,MAAM,aAAa,oBAAoB,KAAK,MAAM,QAAQ,qBAAqB,CAAC,CAAC,CACnF,CACF;GACA,OAAO,oBAAoB,MAAM,KAC/B,MAAM,aACJ,MAAM,SACJ,OACA,0BAA0B,QAAQ,oBAAoB,GACtD,oBACF,CACF,GACA,MAAM,QACJ,MAAM,SACJ,0BACA,uBACA,iBACA,aACF,CACF,GACA,MAAM,aAAa,cAAc,GACjC,MAAM,aAAa,eAAe,CACpC;EACF,CAAC,CACH;CACF;AACF;;;;;;;AChXA,IAAa,kBAAb,cAAqC,OAAO,YAA6B,CAAC,CAAC,mBAAmB,EAC5F,SAAS,OAAO,OAClB,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAM,WAAW,OAAO,IAAI,aAAa;CACvC,MAAM,UAAU,OAAO;CACvB,MAAM,SAAS,OAAO;CACtB,MAAM,kBAAkB,OAAO;CAQ/B,MAAM,kBAAkB,OAAO,QAAQ;CAEvC,MAAM,YAAY,OAAO,IAAI,KAAK,IAAI;CAGtC,OAAO,OAAO,mBAAmB,IAAI,IAAI,WAAW,KAAK,CAAC;CAE1D,MAAM,mBAAyD,IAAI,IAAI,SAAS,CAAC,CAAC,KAChF,OAAO,SAAS,SACd,OACI,OAAO,OACP,OAAO,KACL,gBAAgB,KAAK,EAAE,SAAS,kDAAkD,CAAC,CACrF,CACN,CACF;CAEA,MAAM,UACJ,OACA,OACA,YAKG,iBAAiB,KAAK,OAAO,QAAQ,QAAQ,OAAO,OAAO,OAAO,OAAO,CAAC,CAAC;CAEhF,MAAM,cAAuB,WAC3B,OAAO,QACL,MAAM,KAAK,EAAE,QAAQ,OAAO,kBAAkB,IAAI,GAAG,UAAU,KAAK,SAC9D,QACN;EAAE,aAAa;EAAa,SAAS;CAAK,CAC5C;CAMF,MAAM,qBAAqB,WACzB,QAAQ,kBAAkB,KAAK,OAAO,eAAe,sBAAsB,eAAe,CAAC,CAC7F;CAEA,OAAO,gBAAgB,GAAG;EACxB;EACA,eAAe,IAAI,IAAI,SAAS;EAChC;EACA,iBAAiB,QAAQ;EACzB,SAAS,QAAQ;EACjB,OAAO,QAAQ;EACf,SAAS,QAAQ;EACjB,qBAAqB,QAAQ;EAC7B,QAAQ,QAAQ;EAChB,OAAO,QAAQ;EACf,MAAM,QAAQ;EACd,iBAAiB,QAAQ;EACzB;EACA;CACF,CAAC;AACH,CAAC;;;;;;;;;;;;;;;AAgBD,IAAa,kBAAb,MAAa,wBAAwB,QAAQ,QA+D3C,CAAC,CAAC,6CAA6C,CAAC,CAAC;;CAEjD,OAAgB,QAIZ,MAAM,OAAO,eAAe,CAAC,CAAC,QAAQ;;CAG1C,OAAO,WACL,SAIA;EACA,OAAO,gBAAgB,MAAM,KAAK,MAAM,aAAa,mBAAmB,MAAM,OAAO,CAAC,CAAC;CACzF;AACF"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/wake-scheduler.ts","../src/layers.ts","../src/host.ts","../src/scheduling.ts"],"sourcesContent":["import type { ConversationId } from \"@effect-agent/core\";\nimport { makeWakeSubscriptionHub, SubmissionLedger, WakeScheduler } from \"@effect-agent/session\";\nimport { Context, Duration, Effect, Layer, PubSub, Stream } from \"effect\";\n\n/**\n * Bounded in-process wake buffer. Wake hints are droppable by contract (the ledger-scan fallback\n * keeps liveness), so a full buffer slides out the oldest hint instead of growing without bound.\n */\nconst WAKE_BUFFER_CAPACITY = 1_024;\n\n/** Cadence authority for the Node wake scheduler's ledger-scan fallback loop. */\nexport class NodeWakeSchedulerConfig extends Context.Service<\n  NodeWakeSchedulerConfig,\n  {\n    /** Interval between ledger scans that re-emit every nonterminal Conversation lane. */\n    readonly scanInterval: Duration.Duration;\n  }\n>()(\"@effect-agent/platform-node/NodeWakeSchedulerConfig\") {\n  static layer(options: {\n    readonly scanInterval: Duration.Duration;\n  }): Layer.Layer<NodeWakeSchedulerConfig> {\n    return Layer.succeed(NodeWakeSchedulerConfig)({ scanInterval: options.scanInterval });\n  }\n}\n\nconst makeWakeScheduler = Effect.gen(function* () {\n  const ledger = yield* SubmissionLedger;\n  const config = yield* NodeWakeSchedulerConfig;\n  const hints = yield* PubSub.sliding<ConversationId>(WAKE_BUFFER_CAPACITY);\n  const progress = yield* makeWakeSubscriptionHub;\n  yield* Effect.addFinalizer(() => PubSub.shutdown(hints));\n\n  /**\n   * One fallback scan: every Conversation lane with nonterminal work, deduplicated. A scan\n   * failure degrades to \"no hints this round\" — the wake channel has no error contract and the\n   * next round retries — but is logged so a persistently failing ledger stays visible.\n   */\n  const scanOnce: Effect.Effect<ReadonlyArray<ConversationId>> = Stream.runCollect(\n    ledger.scanNonterminal,\n  ).pipe(\n    Effect.map((snapshots) => {\n      const lanes = new Set<ConversationId>();\n      for (const snapshot of snapshots) {\n        lanes.add(snapshot.conversationId);\n      }\n      return [...lanes];\n    }),\n    Effect.catch((error) =>\n      Effect.logWarning(\"NodeWakeScheduler fallback scan failed\", error).pipe(\n        Effect.as([] as ReadonlyArray<ConversationId>),\n      ),\n    ),\n  );\n\n  /**\n   * Deployment §3: correctness must not depend on in-memory notifications, so every `wakes` run\n   * merges its PubSub subscription with a Clock-driven ledger-scan loop. Both live entirely in\n   * the consuming run's Scope; no fiber outlives its subscriber.\n   */\n  const fallbackScans: Stream.Stream<ConversationId> = Stream.fromIterableEffectRepeat(\n    Effect.sleep(config.scanInterval).pipe(Effect.andThen(scanOnce)),\n  );\n\n  return WakeScheduler.of({\n    notify: (conversationId) =>\n      progress\n        .notify(conversationId)\n        .pipe(Effect.andThen(PubSub.publish(hints, conversationId)), Effect.asVoid),\n    subscribe: progress.subscribe,\n    wakes: Stream.merge(Stream.fromPubSub(hints), fallbackScans),\n  });\n});\n\n/**\n * In-process Node `WakeScheduler`: `notify` publishes to a bounded sliding PubSub for prompt\n * same-process wakeups, and every `wakes` subscription additionally runs a periodic\n * `SubmissionLedger.scanNonterminal` fallback so a dropped, coalesced, or never-sent notification\n * can never strand accepted work (persistence §14). Delivery may duplicate; consumers already\n * treat wakes as pure liveness hints.\n */\nexport const nodeWakeSchedulerLayer: Layer.Layer<\n  WakeScheduler,\n  never,\n  SubmissionLedger | NodeWakeSchedulerConfig\n> = Layer.effect(WakeScheduler)(makeWakeScheduler);\n","import type { SubmissionId } from \"@effect-agent/core\";\nimport {\n  CurrentToolFailureObserver,\n  toolFailureObserverLayer,\n  type RunCostEstimator,\n  type RunToolFailureObserver,\n} from \"@effect-agent/engine\";\nimport type { ScheduleStore } from \"@effect-agent/session\";\nimport {\n  type ConversationStore,\n  type WakeScheduler,\n  AgentBindingResolver,\n  DEFAULT_OWNERSHIP_LEASE_DURATION,\n  DeploymentId,\n  DurableAgentRuntime,\n  DurableRuntimeConfig,\n  DurableRuntimeFailpoint,\n  ProducerId,\n  ReleaseOwnershipRequest,\n  SubmissionLedger,\n  ToolReconciler,\n  type DurableRuntimeFailpointHandler,\n  type OwnershipToken,\n  type ResolvedBinding,\n} from \"@effect-agent/session\";\nimport {\n  conversationStoreLayer,\n  scheduleStoreLayer,\n  SqliteStorageConfig,\n  SqliteStorageConfigValue,\n  storageFailpointLayer,\n  submissionLedgerLayer,\n  type SqliteStorageFailpointHandler,\n  type SqliteStorageInitializationError,\n} from \"@effect-agent/storage-sqlite\";\nimport { NodeCrypto } from \"@effect/platform-node\";\nimport { SqliteClient } from \"@effect/sql-sqlite-node\";\nimport { Context, Duration, Effect, Layer, Ref, Schema } from \"effect\";\n\nimport { NodeWakeSchedulerConfig, nodeWakeSchedulerLayer } from \"./wake-scheduler.ts\";\n\nconst PositiveMillis = Schema.Int.check(Schema.isGreaterThan(0));\nconst NonNegativeMillis = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));\nconst WorkerConcurrency = Schema.Int.check(\n  Schema.isGreaterThanOrEqualTo(1),\n  Schema.isLessThanOrEqualTo(64),\n);\n\n/** The supplied Node durable runtime configuration failed schema validation (DEPLOY-003). */\nexport class NodePlatformConfigError extends Schema.TaggedError<NodePlatformConfigError>()(\n  \"NodePlatformConfigError\",\n  {\n    message: Schema.String,\n    cause: Schema.optionalKey(Schema.Defect()),\n  },\n) {}\n\n/**\n * Validated Node durable runtime configuration (deployment §4: decoded once during Layer\n * construction, exposed as a typed service). Every cadence is in milliseconds and every bound is\n * finite; `workerConcurrency` caps how many worker loops `NodeDurableHost.runWorkers` drives.\n */\nexport class NodeDurableRuntimeConfigValue extends Schema.Class<NodeDurableRuntimeConfigValue>(\n  \"@effect-agent/platform-node/NodeDurableRuntimeConfigValue\",\n)({\n  /** SQLite database file backing BOTH the Conversation Log and the Submission Ledger. */\n  filename: Schema.NonEmptyString,\n  deploymentId: DeploymentId,\n  producerId: ProducerId,\n  /** Submission ownership lease duration (D5); liveness hint only, epochs stay authoritative. */\n  ownershipLeaseDuration: PositiveMillis,\n  /** Finite bound on concurrent worker loops per host (rule 10). */\n  workerConcurrency: WorkerConcurrency,\n  /** Ledger-scan fallback cadence of the Node wake scheduler (deployment §3). */\n  wakeScanInterval: PositiveMillis,\n  /** `awaitSettlement` ledger re-check cadence when no wake arrives. */\n  settlementPollInterval: PositiveMillis,\n  /** Worker ownership-lease renewal cadence. */\n  leaseRenewalInterval: PositiveMillis,\n  /** Active-Run abort-intent poll cadence. */\n  abortPollInterval: PositiveMillis,\n  /** Bounded SQLITE_BUSY retry window for write-lock acquisition. */\n  busyTimeout: NonNegativeMillis,\n  /** Canonical observation poll cadence of the SQLite store. */\n  observationPollInterval: NonNegativeMillis,\n  /** Opt-in full payload/digest-chain audit while opening the store. */\n  verifyOnOpen: Schema.Boolean,\n}) {}\n\n/** Explicit configuration authority for the assembled Node durable runtime. */\nexport class NodeDurableRuntimeConfig extends Context.Service<\n  NodeDurableRuntimeConfig,\n  NodeDurableRuntimeConfigValue\n>()(\"@effect-agent/platform-node/NodeDurableRuntimeConfig\") {}\n\n/**\n * Raw (unvalidated) construction options for `NodeDurableRuntime.layer`. Optional fields default\n * to the documented production values; everything is schema-decoded into\n * `NodeDurableRuntimeConfigValue` before any resource opens (deployment §5 gate 1).\n */\nexport interface NodeDurableRuntimeOptions {\n  readonly filename: string;\n  readonly deploymentId: string;\n  readonly producerId: string;\n  /** Milliseconds; default `DEFAULT_OWNERSHIP_LEASE_DURATION` (30s, D5). */\n  readonly ownershipLeaseDuration?: number | undefined;\n  /** Default 1; bounded to 1..64. */\n  readonly workerConcurrency?: number | undefined;\n  /** Milliseconds; default 1000. */\n  readonly wakeScanInterval?: number | undefined;\n  /** Milliseconds; default 500. */\n  readonly settlementPollInterval?: number | undefined;\n  /** Milliseconds; default 10000. */\n  readonly leaseRenewalInterval?: number | undefined;\n  /** Milliseconds; default 500. */\n  readonly abortPollInterval?: number | undefined;\n  /** Deployment-owned pricing authority used by durable cost budgets and settlements. */\n  readonly estimateCostMicrousd?: RunCostEstimator | undefined;\n  /** Closed trusted Tool failure reporting. Omission masks ambient observers at construction. */\n  readonly toolFailureObserver?: RunToolFailureObserver | undefined;\n  /** Milliseconds; default 5000. */\n  readonly busyTimeout?: number | undefined;\n  /** Milliseconds; default 25. */\n  readonly observationPollInterval?: number | undefined;\n  /** Default false. */\n  readonly verifyOnOpen?: boolean | undefined;\n  /** SQLite adapter fault injection (`ledger:*` / `append:*` locations); default none. */\n  readonly storageFailpoint?: SqliteStorageFailpointHandler | undefined;\n  /** Coordinator fault injection (`submit:*` / `terminalize:*` locations); default none. */\n  readonly runtimeFailpoint?: DurableRuntimeFailpointHandler | undefined;\n  /**\n   * Reconciliation policy consulted for open ordinary Tool Calls before an Unknown Outcome is\n   * recorded (durability §10, DUR-009). Defaults to the fail-closed `ToolReconciler.uncertain`:\n   * with no registered policy, every open call stays Unknown and routes to the authorized\n   * DUR-017 resolution path.\n   */\n  readonly toolReconciler?: Layer.Layer<ToolReconciler> | undefined;\n  /**\n   * Registered worker Bindings resolved at durable claim time:\n   * build each with `DurableWorkerBinding.make(binding, digests)` so\n   * `NodeDurableHost.runResolvedWorkers` / `DurableAgentRuntime.runResolvedWorker` can serve\n   * parent and child lanes from one pool with exact-digest resolution (SUB-023). Defaults to\n   * the empty registration: every resolved claim then fails closed (`BindingUnavailable` for a\n   * root, the framework `ChildCompatibilityFailure` Settlement for a parent-linked child).\n   */\n  readonly bindings?: ReadonlyArray<ResolvedBinding> | undefined;\n}\n\n/** Every construction failure of the assembled Node durable runtime stack. */\nexport type NodeDurableRuntimeInitializationError =\n  | NodePlatformConfigError\n  | SqliteStorageInitializationError;\n\n/** The services `NodeDurableRuntime.layer` provides. */\nexport type NodeDurableRuntimeServices =\n  | DurableAgentRuntime\n  | SubmissionLedger\n  | ConversationStore\n  | ScheduleStore\n  | WakeScheduler\n  | DurableRuntimeConfig\n  | NodeDurableRuntimeConfig\n  | AgentBindingResolver;\n\nconst decodeConfigValue = Schema.decodeUnknownEffect(NodeDurableRuntimeConfigValue);\n\nconst configFromOptions = (\n  options: NodeDurableRuntimeOptions,\n): Effect.Effect<NodeDurableRuntimeConfigValue, NodePlatformConfigError> =>\n  decodeConfigValue({\n    filename: options.filename,\n    deploymentId: options.deploymentId,\n    producerId: options.producerId,\n    ownershipLeaseDuration:\n      options.ownershipLeaseDuration ?? Duration.toMillis(DEFAULT_OWNERSHIP_LEASE_DURATION),\n    workerConcurrency: options.workerConcurrency ?? 1,\n    wakeScanInterval: options.wakeScanInterval ?? 1_000,\n    settlementPollInterval: options.settlementPollInterval ?? 500,\n    leaseRenewalInterval: options.leaseRenewalInterval ?? 10_000,\n    abortPollInterval: options.abortPollInterval ?? 500,\n    busyTimeout: options.busyTimeout ?? 5_000,\n    observationPollInterval: options.observationPollInterval ?? 25,\n    verifyOnOpen: options.verifyOnOpen ?? false,\n  }).pipe(\n    Effect.mapError((error) =>\n      NodePlatformConfigError.make({\n        message: `Invalid Node durable runtime configuration: ${error.message}`,\n        cause: error,\n      }),\n    ),\n  );\n\n/** SQLite storage configuration derived from the single validated Node configuration. */\nconst sqliteStorageConfigLayer: Layer.Layer<SqliteStorageConfig, never, NodeDurableRuntimeConfig> =\n  Layer.effect(SqliteStorageConfig)(\n    Effect.gen(function* () {\n      const config = yield* NodeDurableRuntimeConfig;\n      return SqliteStorageConfigValue.make({\n        observationPollInterval: config.observationPollInterval,\n        busyTimeout: config.busyTimeout,\n        ownershipLeaseDuration: config.ownershipLeaseDuration,\n        verifyOnOpen: config.verifyOnOpen,\n      });\n    }),\n  );\n\n/** Session coordinator configuration derived from the single validated Node configuration. */\nconst durableRuntimeConfigLayer = (\n  estimateCostMicrousd: RunCostEstimator | undefined,\n): Layer.Layer<DurableRuntimeConfig, never, NodeDurableRuntimeConfig> =>\n  Layer.effect(DurableRuntimeConfig)(\n    Effect.gen(function* () {\n      const config = yield* NodeDurableRuntimeConfig;\n      return DurableRuntimeConfig.make({\n        deploymentId: config.deploymentId,\n        producerId: config.producerId,\n        settlementPollInterval: Duration.millis(config.settlementPollInterval),\n        leaseRenewalInterval: Duration.millis(config.leaseRenewalInterval),\n        abortPollInterval: Duration.millis(config.abortPollInterval),\n        ...(estimateCostMicrousd === undefined ? {} : { estimateCostMicrousd }),\n      });\n    }),\n  );\n\n/** Wake fallback-scan cadence derived from the single validated Node configuration. */\nconst wakeSchedulerConfigLayer: Layer.Layer<\n  NodeWakeSchedulerConfig,\n  never,\n  NodeDurableRuntimeConfig\n> = Layer.effect(NodeWakeSchedulerConfig)(\n  Effect.gen(function* () {\n    const config = yield* NodeDurableRuntimeConfig;\n    return { scanInterval: Duration.millis(config.wakeScanInterval) };\n  }),\n);\n\nconst releaseTrackedOwnership = (\n  ledger: SubmissionLedger[\"Service\"],\n  registry: Ref.Ref<ReadonlyMap<SubmissionId, OwnershipToken>>,\n): Effect.Effect<void> =>\n  Effect.gen(function* () {\n    const tracked = yield* Ref.getAndSet(registry, new Map<SubmissionId, OwnershipToken>());\n    for (const [submissionId, ownershipToken] of tracked) {\n      yield* ledger\n        .releaseOwnership(ReleaseOwnershipRequest.make({ submissionId, ownershipToken }))\n        .pipe(\n          Effect.catchTags({\n            // A newer epoch already owns (or settled) the lane: nothing left to drain.\n            OwnershipLost: () => Effect.void,\n            // Drain is best-effort by design: the lease still expires and the durability protocol,\n            // not graceful shutdown, provides correctness (DEPLOY-006).\n            LedgerError: (error) =>\n              Effect.logWarning(\"Ownership drain failed; the lease will expire instead\", error),\n          }),\n        );\n    }\n  });\n\n/**\n * Shutdown-drain decorator for a `SubmissionLedger` (deployment §6 step 6): every ownership\n * period granted through this Layer is tracked — claims start tracking, renewals follow token\n * rotation, releases and settlement finalizations stop it — and every ownership still held when\n * the Layer's Scope closes is released so another host can claim the lane immediately instead of\n * waiting for lease expiry. The drain is a liveness courtesy only; producer-epoch fencing remains\n * the correctness authority (DUR-006), and a forced kill simply falls back to lease expiry.\n */\nexport const ownershipDrainLayer: Layer.Layer<SubmissionLedger, never, SubmissionLedger> =\n  Layer.effect(SubmissionLedger)(\n    Effect.gen(function* () {\n      const ledger = yield* SubmissionLedger;\n      const registry = yield* Ref.make<ReadonlyMap<SubmissionId, OwnershipToken>>(\n        new Map<SubmissionId, OwnershipToken>(),\n      );\n\n      const track = (submissionId: SubmissionId, ownershipToken: OwnershipToken) =>\n        Ref.update(registry, (tracked) => new Map(tracked).set(submissionId, ownershipToken));\n      const untrack = (submissionId: SubmissionId) =>\n        Ref.update(registry, (tracked) => {\n          const next = new Map(tracked);\n          next.delete(submissionId);\n          return next;\n        });\n\n      yield* Effect.addFinalizer(() => releaseTrackedOwnership(ledger, registry));\n\n      return SubmissionLedger.of({\n        capabilities: ledger.capabilities,\n        admit: ledger.admit,\n        markReady: ledger.markReady,\n        lookup: ledger.lookup,\n        // The S2 subagent ops forward untouched: none of them grants an ownership period, so\n        // the drain has nothing to track for them (`suspend` below already stops tracking the\n        // waitingForChild ownership period the moment it ends).\n        resolveAdmission: ledger.resolveAdmission,\n        recordChildSettled: ledger.recordChildSettled,\n        reserveChildBudget: ledger.reserveChildBudget,\n        attachChildToReservation: ledger.attachChildToReservation,\n        beginChildBudgetRelease: ledger.beginChildBudgetRelease,\n        releaseChildBudget: ledger.releaseChildBudget,\n        claim: (request) =>\n          ledger\n            .claim(request)\n            .pipe(\n              Effect.tap((claimed) =>\n                claimed._tag === \"Some\"\n                  ? track(claimed.value.submissionId, claimed.value.ownershipToken)\n                  : Effect.void,\n              ),\n            ),\n        renewOwnership: (request) =>\n          ledger.renewOwnership(request).pipe(\n            Effect.tap((renewal) => track(request.submissionId, renewal.ownershipToken)),\n            Effect.tapError((error) =>\n              error._tag === \"OwnershipLost\" ? untrack(request.submissionId) : Effect.void,\n            ),\n          ),\n        releaseOwnership: (request) =>\n          ledger.releaseOwnership(request).pipe(\n            Effect.tap(() => untrack(request.submissionId)),\n            Effect.tapError((error) =>\n              error._tag === \"OwnershipLost\" ? untrack(request.submissionId) : Effect.void,\n            ),\n          ),\n        markInputApplied: ledger.markInputApplied,\n        reserveSettlement: ledger.reserveSettlement,\n        finalizeSettlement: (request) =>\n          ledger.finalizeSettlement(request).pipe(Effect.tap(() => untrack(request.submissionId))),\n        requestAbort: ledger.requestAbort,\n        claimJoining: ledger.claimJoining,\n        markJoined: ledger.markJoined,\n        revertJoining: ledger.revertJoining,\n        // Suspension ends the ownership period by contract, so the drain stops tracking it.\n        suspend: (request) =>\n          ledger.suspend(request).pipe(Effect.tap(() => untrack(request.submissionId))),\n        recordApprovalDecision: ledger.recordApprovalDecision,\n        markUnknown: ledger.markUnknown,\n        recordUnknownResolution: ledger.recordUnknownResolution,\n        scanNonterminal: ledger.scanNonterminal,\n        loadRecoverySnapshot: ledger.loadRecoverySnapshot,\n      });\n    }),\n  );\n\n/**\n * The DN Layer assembly (deployment §12: a Layer-assembly library, not an app entrypoint).\n * `layer(options)` decodes the configuration, opens ONE SQLite database serving both the\n * Conversation Log and the Submission Ledger (so claims fence the same producer epochs), wires\n * the Node wake scheduler with its ledger-scan fallback, wraps the ledger with the shutdown\n * ownership drain, defaults the Tool reconciliation policy to the fail-closed\n * `ToolReconciler.uncertain` (override via `options.toolReconciler`), and provides a ready\n * `DurableAgentRuntime` on top. Storage compatibility is\n * verified during construction: an incompatible database file fails the Layer with\n * `SqliteStorageCompatibilityError` before anything is mutated (DEPLOY-008).\n */\nexport class NodeDurableRuntime {\n  /** Validated configuration Layer; fails typed when the supplied options are out of bounds. */\n  static configLayer(\n    options: NodeDurableRuntimeOptions,\n  ): Layer.Layer<NodeDurableRuntimeConfig, NodePlatformConfigError> {\n    return Layer.effect(NodeDurableRuntimeConfig)(configFromOptions(options));\n  }\n\n  /** The full DN runtime stack over one SQLite file. */\n  static layer(\n    options: NodeDurableRuntimeOptions,\n  ): Layer.Layer<NodeDurableRuntimeServices, NodeDurableRuntimeInitializationError> {\n    return Layer.unwrap(\n      Effect.map(configFromOptions(options), (config) => {\n        const nodeConfigLayer = Layer.succeed(NodeDurableRuntimeConfig)(config);\n        const infrastructure = Layer.mergeAll(\n          sqliteStorageConfigLayer,\n          storageFailpointLayer({\n            filename: config.filename,\n            failpoint: options.storageFailpoint,\n          }),\n          SqliteClient.layer({ filename: config.filename }),\n          NodeCrypto.layer,\n        );\n        const runtimeFailpointLayer =\n          options.runtimeFailpoint === undefined\n            ? DurableRuntimeFailpoint.layer\n            : Layer.succeed(DurableRuntimeFailpoint)({ hit: options.runtimeFailpoint });\n        const reconcilerLayer = options.toolReconciler ?? ToolReconciler.uncertain;\n        const observerLayer =\n          options.toolFailureObserver === undefined\n            ? Layer.succeed(CurrentToolFailureObserver)(undefined)\n            : toolFailureObserverLayer(options.toolFailureObserver);\n        const bindingResolverLayer = AgentBindingResolver.layer(options.bindings ?? []);\n        const ports = Layer.mergeAll(\n          conversationStoreLayer,\n          scheduleStoreLayer,\n          nodeWakeSchedulerLayer.pipe(\n            Layer.provideMerge(ownershipDrainLayer.pipe(Layer.provide(submissionLedgerLayer))),\n          ),\n        );\n        return DurableAgentRuntime.layer.pipe(\n          Layer.provideMerge(\n            Layer.mergeAll(\n              ports,\n              durableRuntimeConfigLayer(options.estimateCostMicrousd),\n              bindingResolverLayer,\n            ),\n          ),\n          Layer.provide(\n            Layer.mergeAll(\n              wakeSchedulerConfigLayer,\n              runtimeFailpointLayer,\n              reconcilerLayer,\n              observerLayer,\n            ),\n          ),\n          Layer.provideMerge(infrastructure),\n          Layer.provideMerge(nodeConfigLayer),\n        );\n      }),\n    );\n  }\n}\n","import type { ConversationId, SubmissionId } from \"@effect-agent/core\";\nimport {\n  AgentBindingResolver,\n  DurableAgentRuntime,\n  type AbortCommand,\n  type AbortIntent,\n  type CanonicalRecordEnvelope,\n  type ConversationNotMaterialized,\n  type ConversationStoreError,\n  type DurableAbortFailure,\n  type DurableAwaitFailure,\n  type DurableBindingFailure,\n  type DurableExplainFailure,\n  type DurableObserveOptions,\n  type DurableObligationFailure,\n  type DurableRetryFailure,\n  type DurableSubmitAgent,\n  type DurableSubmitFailure,\n  type DurableSubmitOptions,\n  type DurableVerifyFailure,\n  type DurableWorkerFailure,\n  type IntegrityReport,\n  type ObligationReport,\n  type ObligationThresholds,\n  type OperationDenied,\n  type Receipt,\n  type RecoveryExplanation,\n  type RecoveryReport,\n  type RetryCommand,\n  type Settlement,\n} from \"@effect-agent/session\";\nimport { Context, Effect, Layer, Ref, Schema, Stream } from \"effect\";\n\nimport {\n  NodeDurableRuntime,\n  NodeDurableRuntimeConfig,\n  type NodeDurableRuntimeInitializationError,\n  type NodeDurableRuntimeOptions,\n  type NodeDurableRuntimeServices,\n} from \"./layers.ts\";\n\n/**\n * Admission is not open on this host: it is shutting down (deployment §6 step 1, DEPLOY-005).\n * Accepted work is unaffected — only NEW admissions are refused.\n */\nexport class AdmissionClosed extends Schema.TaggedError<AdmissionClosed>()(\"AdmissionClosed\", {\n  message: Schema.String,\n}) {}\n\nconst makeHost = Effect.gen(function* () {\n  const runtime = yield* DurableAgentRuntime;\n  const config = yield* NodeDurableRuntimeConfig;\n  const bindingResolver = yield* AgentBindingResolver;\n\n  // Startup gate (deployment §5, plan §host): configuration decoding and storage compatibility\n  // already gated this Layer's dependencies; the last gate before admission opens is recovering\n  // EVERY nonterminal Submission. Work needing a live Agent Binding is reported `deferred` and\n  // stays a visible obligation for `runWorkers`; lanes durably blocked on an Unknown Outcome are\n  // reported `unknown` and wait for the authorized `resolveUnknown` path (DUR-017) — they consume\n  // no worker permit while the settlement obligation stays owed.\n  const startupRecovery = yield* runtime.runRecovery;\n\n  const admission = yield* Ref.make(true);\n  // Shutdown step 1 (DEPLOY-005): admission closes before the ownership drain in the runtime\n  // Layer below releases claims and before the stores close in reverse acquisition order.\n  yield* Effect.addFinalizer(() => Ref.set(admission, false));\n\n  const requireAdmission: Effect.Effect<void, AdmissionClosed> = Ref.get(admission).pipe(\n    Effect.flatMap((open) =>\n      open\n        ? Effect.void\n        : Effect.fail(\n            AdmissionClosed.make({ message: \"The host is shutting down; admission is closed.\" }),\n          ),\n    ),\n  );\n\n  const submit = <InputSchema extends Schema.Top>(\n    agent: DurableSubmitAgent<InputSchema>,\n    input: InputSchema[\"Type\"],\n    options: DurableSubmitOptions,\n  ): Effect.Effect<\n    Receipt,\n    AdmissionClosed | DurableSubmitFailure,\n    InputSchema[\"EncodingServices\"]\n  > => requireAdmission.pipe(Effect.andThen(runtime.submit(agent, input, options)));\n\n  const runWorkers = <A, E, R>(worker: Effect.Effect<A, E, R>): Effect.Effect<void, E, R> =>\n    Effect.forEach(\n      Array.from({ length: config.workerConcurrency }, (_, index) => index),\n      () => worker,\n      { concurrency: \"unbounded\", discard: true },\n    );\n\n  // S2 multi-binding pool: every claimed head resolves its exact registered Binding through\n  // the host's `AgentBindingResolver` (`NodeDurableRuntimeOptions.bindings`), so ONE bounded\n  // pool serves parent and child lanes — the spec §12 smallest-pool suspension/wakeup proof\n  // runs `workerConcurrency: 1` over exactly this loop.\n  const runResolvedWorkers = runWorkers(\n    runtime.runResolvedWorker.pipe(Effect.provideService(AgentBindingResolver, bindingResolver)),\n  );\n\n  return NodeDurableHost.of({\n    startupRecovery,\n    admissionOpen: Ref.get(admission),\n    submit,\n    awaitSettlement: runtime.awaitSettlement,\n    observe: runtime.observe,\n    abort: runtime.abort,\n    explain: runtime.explain,\n    explainConversation: runtime.explainConversation,\n    verify: runtime.verify,\n    retry: runtime.retry,\n    wake: runtime.wake,\n    scanObligations: runtime.scanObligations,\n    runWorkers,\n    runResolvedWorkers,\n  });\n});\n\n/**\n * Operational host lifecycle for the DN runtime (deployment §2/§5/§6).\n *\n * Startup gates run during Layer construction, so the service existing implies readiness:\n * configuration was schema-decoded, the SQLite file passed the exact-version compatibility check,\n * and every nonterminal Submission went through one full recovery pass BEFORE admission opened.\n * `startupRecovery` is the auditable evidence of that reconciliation pass.\n *\n * Shutdown runs in reverse Layer order when the owning Scope closes: `submit` starts refusing\n * with `AdmissionClosed` first, then the runtime Layer's ownership drain releases every claim\n * still held so another host can take over the lanes immediately, then the SQLite resources\n * close. Forced termination at any point stays safe — the durability protocol, not graceful\n * shutdown, provides correctness (DEPLOY-006).\n */\nexport class NodeDurableHost extends Context.Service<\n  NodeDurableHost,\n  {\n    /**\n     * The recovery decisions executed (or deferred) by this host's startup reconciliation.\n     * Reports with the `unknown` disposition identify lanes blocked on Unknown Outcomes that\n     * only the authorized DUR-017 resolution path can release.\n     */\n    readonly startupRecovery: ReadonlyArray<RecoveryReport>;\n    /** Admission-role readiness (deployment §7): true until shutdown begins. */\n    readonly admissionOpen: Effect.Effect<boolean>;\n    /** `DurableAgentRuntime.submit` behind the host admission gate. */\n    readonly submit: <InputSchema extends Schema.Top>(\n      agent: DurableSubmitAgent<InputSchema>,\n      input: InputSchema[\"Type\"],\n      options: DurableSubmitOptions,\n    ) => Effect.Effect<\n      Receipt,\n      AdmissionClosed | DurableSubmitFailure,\n      InputSchema[\"EncodingServices\"]\n    >;\n    readonly awaitSettlement: (receipt: Receipt) => Effect.Effect<Settlement, DurableAwaitFailure>;\n    readonly observe: (\n      receipt: Receipt,\n      options?: DurableObserveOptions,\n    ) => Stream.Stream<\n      CanonicalRecordEnvelope,\n      ConversationStoreError | ConversationNotMaterialized | OperationDenied\n    >;\n    readonly abort: (command: AbortCommand) => Effect.Effect<AbortIntent, DurableAbortFailure>;\n    /** `DurableAgentRuntime.explain` — read-only recovery explanation of one Submission (P7). */\n    readonly explain: (\n      submissionId: SubmissionId,\n    ) => Effect.Effect<RecoveryExplanation, DurableExplainFailure>;\n    /** `DurableAgentRuntime.explainConversation` — explain every nonterminal lane member. */\n    readonly explainConversation: (\n      conversationId: ConversationId,\n    ) => Effect.Effect<ReadonlyArray<RecoveryExplanation>, DurableExplainFailure>;\n    /** `DurableAgentRuntime.verify` — read-only integrity checks, never a repair (P7). */\n    readonly verify: (\n      conversationId: ConversationId,\n    ) => Effect.Effect<IntegrityReport, DurableVerifyFailure>;\n    /** `DurableAgentRuntime.retry` — audited single-Submission re-drive with typed refusals. */\n    readonly retry: (command: RetryCommand) => Effect.Effect<RecoveryReport, DurableRetryFailure>;\n    /** `DurableAgentRuntime.wake` — the documented operator liveness nudge for one lane. */\n    readonly wake: (conversationId: ConversationId) => Effect.Effect<void, OperationDenied>;\n    /** `DurableAgentRuntime.scanObligations` — the scan-based DUR-017/OPS-001 report. */\n    readonly scanObligations: (\n      thresholds: ObligationThresholds,\n    ) => Effect.Effect<ObligationReport, DurableObligationFailure>;\n    /**\n     * Run `workerConcurrency` copies of the given worker effect (typically\n     * `DurableAgentRuntime.runWorker(agent)`) until the caller's Scope interrupts them. The\n     * bound is the validated finite configuration value; the host never forks daemon fibers.\n     */\n    readonly runWorkers: <A, E, R>(worker: Effect.Effect<A, E, R>) => Effect.Effect<void, E, R>;\n    /**\n     * Run `workerConcurrency` copies of `DurableAgentRuntime.runResolvedWorker` over the host's\n     * registered Bindings (S2): every claimed head resolves its exact stored Binding before any\n     * code runs (SUB-023), so one bounded pool serves parent and attached-child lanes.\n     */\n    readonly runResolvedWorkers: Effect.Effect<void, DurableWorkerFailure | DurableBindingFailure>;\n  }\n>()(\"@effect-agent/platform-node/NodeDurableHost\") {\n  /** Host gates over an already-assembled `NodeDurableRuntime` stack. */\n  static readonly layer: Layer.Layer<\n    NodeDurableHost,\n    DurableWorkerFailure,\n    DurableAgentRuntime | NodeDurableRuntimeConfig | AgentBindingResolver\n  > = Layer.effect(NodeDurableHost)(makeHost);\n\n  /** The complete DN host: `NodeDurableRuntime.layer(options)` plus the host lifecycle gates. */\n  static layerStack(\n    options: NodeDurableRuntimeOptions,\n  ): Layer.Layer<\n    NodeDurableHost | NodeDurableRuntimeServices,\n    DurableWorkerFailure | NodeDurableRuntimeInitializationError\n  > {\n    return NodeDurableHost.layer.pipe(Layer.provideMerge(NodeDurableRuntime.layer(options)));\n  }\n}\n","import type { AgentId } from \"@effect-agent/core\";\nimport {\n  type DurableSubmitAgent,\n  type ScheduleProcessFailure,\n  type ScheduleAuthorizer,\n  type SchedulingLimits,\n  ScheduleStorageError,\n  ScheduleStore,\n  type ScheduleValidationError,\n  ScheduledInputAdmission,\n  ScheduledInputRetryable,\n  ScheduleWake,\n  Scheduling,\n  ScheduleDriver,\n  defaultSchedulingLimits,\n  PersistedJson,\n} from \"@effect-agent/session\";\nimport { NodeCrypto } from \"@effect/platform-node\";\nimport { Cause, Duration, Effect, Layer, Option, PubSub, Result } from \"effect\";\n\nimport { NodeDurableHost } from \"./host.ts\";\n\nconst passthroughSubmitAgent = (agentId: AgentId): DurableSubmitAgent<typeof PersistedJson> => ({\n  definition: { id: agentId, input: PersistedJson },\n});\n\nconst ambiguous = (): ScheduledInputRetryable =>\n  ScheduledInputRetryable.make({ reason: \"ambiguous\" });\n\nconst corrupt = (operation: string): ScheduleStorageError =>\n  ScheduleStorageError.make({ operation, reason: \"corrupt\" });\n\n/**\n * Scheduled admission through the existing host gate. Once the gate admits the call, every\n * runtime failure stays ambiguous because the Submission may already have committed.\n */\nexport const nodeScheduledInputAdmissionLayer: Layer.Layer<\n  ScheduledInputAdmission,\n  never,\n  NodeDurableHost\n> = Layer.effect(\n  ScheduledInputAdmission,\n  Effect.gen(function* () {\n    const host = yield* NodeDurableHost;\n    return ScheduledInputAdmission.of({\n      submit: (envelope) =>\n        host\n          .submit(passthroughSubmitAgent(envelope.agentId), envelope.input, {\n            conversationId: envelope.conversationId,\n            principal: envelope.deliveryPrincipal,\n            idempotencyKey: envelope.admissionKey,\n            definitions: envelope.definitions,\n          })\n          .pipe(\n            Effect.catchTags({\n              AdmissionClosed: () =>\n                Effect.fail(ScheduledInputRetryable.make({ reason: \"host-closed\" })),\n              AgentInputError: () => Effect.fail(corrupt(\"scheduled admission input\")),\n              AdmissionConflict: () => Effect.fail(corrupt(\"scheduled admission conflict\")),\n              DigestError: () => Effect.fail(ambiguous()),\n              LedgerError: () => Effect.fail(ambiguous()),\n              ConversationStoreError: () => Effect.fail(ambiguous()),\n              ConversationNotMaterialized: () => Effect.fail(ambiguous()),\n              AppendConflict: () => Effect.fail(ambiguous()),\n              FenceRejected: () => Effect.fail(ambiguous()),\n              DurableRuntimeFailpointError: () => Effect.fail(ambiguous()),\n            }),\n          ),\n    });\n  }),\n);\n\n/** One bounded hint slot for the single supported Node scheduler. Indexed polling repairs loss. */\nexport const nodeScheduleWakeLayer: Layer.Layer<ScheduleWake> = Layer.effect(\n  ScheduleWake,\n  Effect.gen(function* () {\n    const hints = yield* PubSub.sliding<void>(1);\n    const subscription = yield* PubSub.subscribe(hints);\n    yield* Effect.addFinalizer(() => PubSub.shutdown(hints));\n    return ScheduleWake.of({\n      notify: PubSub.publish(hints, undefined).pipe(Effect.asVoid),\n      await: PubSub.take(subscription),\n    });\n  }),\n);\n\nconst reportPassFailure = (cause: Cause.Cause<ScheduleProcessFailure>): Effect.Effect<boolean> =>\n  Cause.hasInterruptsOnly(cause)\n    ? Effect.interrupt\n    : Effect.logWarning(\"Node scheduling pass failed\").pipe(\n        Effect.annotateLogs({\n          failureTag: Option.match(Cause.findErrorOption(cause), {\n            onNone: () => \"Defect\",\n            onSome: (error) => error._tag,\n          }),\n        }),\n        Effect.as(false),\n      );\n\nconst nodeSchedulingDriverLayer = (\n  limits: SchedulingLimits,\n): Layer.Layer<never, never, ScheduleDriver | ScheduleStore | ScheduleWake> =>\n  Layer.effectDiscard(\n    Effect.gen(function* () {\n      const scheduling = yield* ScheduleDriver;\n      const store = yield* ScheduleStore;\n      const wake = yield* ScheduleWake;\n\n      const run = Effect.gen(function* () {\n        while (true) {\n          const passSucceeded = yield* scheduling.runDue().pipe(\n            Effect.map((pass) => pass.failed === 0),\n            Effect.catchCause(reportPassFailure),\n          );\n          const deadlineResult = passSucceeded\n            ? yield* store.nextDeadline().pipe(Effect.result)\n            : Result.fail(\n                ScheduleStorageError.make({ operation: \"driver pass\", reason: \"unavailable\" }),\n              );\n          if (Result.isFailure(deadlineResult) && passSucceeded) {\n            yield* Effect.logWarning(\"Node scheduling deadline query failed\");\n          }\n          const nowMillis = yield* Effect.clockWith((clock) => clock.currentTimeMillis);\n          const deadlineDelay =\n            Result.isSuccess(deadlineResult) && deadlineResult.success !== null\n              ? Math.max(0, deadlineResult.success - nowMillis)\n              : limits.recoveryPollMillis;\n          const delay = Math.min(deadlineDelay, limits.recoveryPollMillis);\n          yield* Effect.raceFirst(wake.await, Effect.sleep(Duration.millis(delay)));\n        }\n      });\n\n      yield* Effect.forkScoped(run);\n    }),\n  );\n\nexport interface NodeSchedulingOptions {\n  readonly limits?: SchedulingLimits | undefined;\n}\n\n/**\n * Optional Scope-owned Node scheduling service and driver. The caller must provide the existing\n * host, its SQLite ScheduleStore, and an explicit ScheduleAuthorizer.\n */\nexport class NodeScheduling {\n  static layer(\n    options: NodeSchedulingOptions = {},\n  ): Layer.Layer<\n    Scheduling,\n    ScheduleValidationError,\n    NodeDurableHost | ScheduleStore | ScheduleAuthorizer\n  > {\n    const limits = options.limits ?? defaultSchedulingLimits;\n    const schedulingWithDriver = nodeSchedulingDriverLayer(limits).pipe(\n      Layer.provide(ScheduleDriver.layer(limits)),\n      Layer.merge(Scheduling.layer(limits)),\n    );\n    return schedulingWithDriver.pipe(\n      Layer.provide(\n        Layer.mergeAll(nodeScheduledInputAdmissionLayer, nodeScheduleWakeLayer, NodeCrypto.layer),\n      ),\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;AAQA,MAAM,uBAAuB;;AAG7B,IAAa,0BAAb,MAAa,gCAAgC,QAAQ,QAMnD,CAAC,CAAC,qDAAqD,CAAC,CAAC;CACzD,OAAO,MAAM,SAE4B;EACvC,OAAO,MAAM,QAAQ,uBAAuB,CAAC,CAAC,EAAE,cAAc,QAAQ,aAAa,CAAC;CACtF;AACF;AAEA,MAAM,oBAAoB,OAAO,IAAI,aAAa;CAChD,MAAM,SAAS,OAAO;CACtB,MAAM,SAAS,OAAO;CACtB,MAAM,QAAQ,OAAO,OAAO,QAAwB,oBAAoB;CACxE,MAAM,WAAW,OAAO;CACxB,OAAO,OAAO,mBAAmB,OAAO,SAAS,KAAK,CAAC;;;;;;CAOvD,MAAM,WAAyD,OAAO,WACpE,OAAO,eACT,CAAC,CAAC,KACA,OAAO,KAAK,cAAc;EACxB,MAAM,wBAAQ,IAAI,IAAoB;EACtC,KAAK,MAAM,YAAY,WACrB,MAAM,IAAI,SAAS,cAAc;EAEnC,OAAO,CAAC,GAAG,KAAK;CAClB,CAAC,GACD,OAAO,OAAO,UACZ,OAAO,WAAW,0CAA0C,KAAK,CAAC,CAAC,KACjE,OAAO,GAAG,CAAC,CAAkC,CAC/C,CACF,CACF;;;;;;CAOA,MAAM,gBAA+C,OAAO,yBAC1D,OAAO,MAAM,OAAO,YAAY,CAAC,CAAC,KAAK,OAAO,QAAQ,QAAQ,CAAC,CACjE;CAEA,OAAO,cAAc,GAAG;EACtB,SAAS,mBACP,SACG,OAAO,cAAc,CAAC,CACtB,KAAK,OAAO,QAAQ,OAAO,QAAQ,OAAO,cAAc,CAAC,GAAG,OAAO,MAAM;EAC9E,WAAW,SAAS;EACpB,OAAO,OAAO,MAAM,OAAO,WAAW,KAAK,GAAG,aAAa;CAC7D,CAAC;AACH,CAAC;;;;;;;;AASD,MAAa,yBAIT,MAAM,OAAO,aAAa,CAAC,CAAC,iBAAiB;;;AC3CjD,MAAM,iBAAiB,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC;AAC/D,MAAM,oBAAoB,OAAO,IAAI,MAAM,OAAO,uBAAuB,CAAC,CAAC;AAC3E,MAAM,oBAAoB,OAAO,IAAI,MACnC,OAAO,uBAAuB,CAAC,GAC/B,OAAO,oBAAoB,EAAE,CAC/B;;AAGA,IAAa,0BAAb,cAA6C,OAAO,YAAqC,CAAC,CACxF,2BACA;CACE,SAAS,OAAO;CAChB,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;AAC3C,CACF,CAAC,CAAC,CAAC;;;;;;AAOH,IAAa,gCAAb,cAAmD,OAAO,MACxD,2DACF,CAAC,CAAC;;CAEA,UAAU,OAAO;CACjB,cAAc;CACd,YAAY;;CAEZ,wBAAwB;;CAExB,mBAAmB;;CAEnB,kBAAkB;;CAElB,wBAAwB;;CAExB,sBAAsB;;CAEtB,mBAAmB;;CAEnB,aAAa;;CAEb,yBAAyB;;CAEzB,cAAc,OAAO;AACvB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,2BAAb,cAA8C,QAAQ,QAGpD,CAAC,CAAC,sDAAsD,CAAC,CAAC,CAAC;AAuE7D,MAAM,oBAAoB,OAAO,oBAAoB,6BAA6B;AAElF,MAAM,qBACJ,YAEA,kBAAkB;CAChB,UAAU,QAAQ;CAClB,cAAc,QAAQ;CACtB,YAAY,QAAQ;CACpB,wBACE,QAAQ,0BAA0B,SAAS,SAAS,gCAAgC;CACtF,mBAAmB,QAAQ,qBAAqB;CAChD,kBAAkB,QAAQ,oBAAoB;CAC9C,wBAAwB,QAAQ,0BAA0B;CAC1D,sBAAsB,QAAQ,wBAAwB;CACtD,mBAAmB,QAAQ,qBAAqB;CAChD,aAAa,QAAQ,eAAe;CACpC,yBAAyB,QAAQ,2BAA2B;CAC5D,cAAc,QAAQ,gBAAgB;AACxC,CAAC,CAAC,CAAC,KACD,OAAO,UAAU,UACf,wBAAwB,KAAK;CAC3B,SAAS,+CAA+C,MAAM;CAC9D,OAAO;AACT,CAAC,CACH,CACF;;AAGF,MAAM,2BACJ,MAAM,OAAO,mBAAmB,CAAC,CAC/B,OAAO,IAAI,aAAa;CACtB,MAAM,SAAS,OAAO;CACtB,OAAO,yBAAyB,KAAK;EACnC,yBAAyB,OAAO;EAChC,aAAa,OAAO;EACpB,wBAAwB,OAAO;EAC/B,cAAc,OAAO;CACvB,CAAC;AACH,CAAC,CACH;;AAGF,MAAM,6BACJ,yBAEA,MAAM,OAAO,oBAAoB,CAAC,CAChC,OAAO,IAAI,aAAa;CACtB,MAAM,SAAS,OAAO;CACtB,OAAO,qBAAqB,KAAK;EAC/B,cAAc,OAAO;EACrB,YAAY,OAAO;EACnB,wBAAwB,SAAS,OAAO,OAAO,sBAAsB;EACrE,sBAAsB,SAAS,OAAO,OAAO,oBAAoB;EACjE,mBAAmB,SAAS,OAAO,OAAO,iBAAiB;EAC3D,GAAI,yBAAyB,KAAA,IAAY,CAAC,IAAI,EAAE,qBAAqB;CACvE,CAAC;AACH,CAAC,CACH;;AAGF,MAAM,2BAIF,MAAM,OAAO,uBAAuB,CAAC,CACvC,OAAO,IAAI,aAAa;CACtB,MAAM,SAAS,OAAO;CACtB,OAAO,EAAE,cAAc,SAAS,OAAO,OAAO,gBAAgB,EAAE;AAClE,CAAC,CACH;AAEA,MAAM,2BACJ,QACA,aAEA,OAAO,IAAI,aAAa;CACtB,MAAM,UAAU,OAAO,IAAI,UAAU,0BAAU,IAAI,IAAkC,CAAC;CACtF,KAAK,MAAM,CAAC,cAAc,mBAAmB,SAC3C,OAAO,OACJ,iBAAiB,wBAAwB,KAAK;EAAE;EAAc;CAAe,CAAC,CAAC,CAAC,CAChF,KACC,OAAO,UAAU;EAEf,qBAAqB,OAAO;EAG5B,cAAc,UACZ,OAAO,WAAW,yDAAyD,KAAK;CACpF,CAAC,CACH;AAEN,CAAC;;;;;;;;;AAUH,MAAa,sBACX,MAAM,OAAO,gBAAgB,CAAC,CAC5B,OAAO,IAAI,aAAa;CACtB,MAAM,SAAS,OAAO;CACtB,MAAM,WAAW,OAAO,IAAI,qBAC1B,IAAI,IAAkC,CACxC;CAEA,MAAM,SAAS,cAA4B,mBACzC,IAAI,OAAO,WAAW,YAAY,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,cAAc,cAAc,CAAC;CACtF,MAAM,WAAW,iBACf,IAAI,OAAO,WAAW,YAAY;EAChC,MAAM,OAAO,IAAI,IAAI,OAAO;EAC5B,KAAK,OAAO,YAAY;EACxB,OAAO;CACT,CAAC;CAEH,OAAO,OAAO,mBAAmB,wBAAwB,QAAQ,QAAQ,CAAC;CAE1E,OAAO,iBAAiB,GAAG;EACzB,cAAc,OAAO;EACrB,OAAO,OAAO;EACd,WAAW,OAAO;EAClB,QAAQ,OAAO;EAIf,kBAAkB,OAAO;EACzB,oBAAoB,OAAO;EAC3B,oBAAoB,OAAO;EAC3B,0BAA0B,OAAO;EACjC,yBAAyB,OAAO;EAChC,oBAAoB,OAAO;EAC3B,QAAQ,YACN,OACG,MAAM,OAAO,CAAC,CACd,KACC,OAAO,KAAK,YACV,QAAQ,SAAS,SACb,MAAM,QAAQ,MAAM,cAAc,QAAQ,MAAM,cAAc,IAC9D,OAAO,IACb,CACF;EACJ,iBAAiB,YACf,OAAO,eAAe,OAAO,CAAC,CAAC,KAC7B,OAAO,KAAK,YAAY,MAAM,QAAQ,cAAc,QAAQ,cAAc,CAAC,GAC3E,OAAO,UAAU,UACf,MAAM,SAAS,kBAAkB,QAAQ,QAAQ,YAAY,IAAI,OAAO,IAC1E,CACF;EACF,mBAAmB,YACjB,OAAO,iBAAiB,OAAO,CAAC,CAAC,KAC/B,OAAO,UAAU,QAAQ,QAAQ,YAAY,CAAC,GAC9C,OAAO,UAAU,UACf,MAAM,SAAS,kBAAkB,QAAQ,QAAQ,YAAY,IAAI,OAAO,IAC1E,CACF;EACF,kBAAkB,OAAO;EACzB,mBAAmB,OAAO;EAC1B,qBAAqB,YACnB,OAAO,mBAAmB,OAAO,CAAC,CAAC,KAAK,OAAO,UAAU,QAAQ,QAAQ,YAAY,CAAC,CAAC;EACzF,cAAc,OAAO;EACrB,cAAc,OAAO;EACrB,YAAY,OAAO;EACnB,eAAe,OAAO;EAEtB,UAAU,YACR,OAAO,QAAQ,OAAO,CAAC,CAAC,KAAK,OAAO,UAAU,QAAQ,QAAQ,YAAY,CAAC,CAAC;EAC9E,wBAAwB,OAAO;EAC/B,aAAa,OAAO;EACpB,yBAAyB,OAAO;EAChC,iBAAiB,OAAO;EACxB,sBAAsB,OAAO;CAC/B,CAAC;AACH,CAAC,CACH;;;;;;;;;;;;AAaF,IAAa,qBAAb,MAAgC;;CAE9B,OAAO,YACL,SACgE;EAChE,OAAO,MAAM,OAAO,wBAAwB,CAAC,CAAC,kBAAkB,OAAO,CAAC;CAC1E;;CAGA,OAAO,MACL,SACgF;EAChF,OAAO,MAAM,OACX,OAAO,IAAI,kBAAkB,OAAO,IAAI,WAAW;GACjD,MAAM,kBAAkB,MAAM,QAAQ,wBAAwB,CAAC,CAAC,MAAM;GACtE,MAAM,iBAAiB,MAAM,SAC3B,0BACA,sBAAsB;IACpB,UAAU,OAAO;IACjB,WAAW,QAAQ;GACrB,CAAC,GACD,aAAa,MAAM,EAAE,UAAU,OAAO,SAAS,CAAC,GAChD,WAAW,KACb;GACA,MAAM,wBACJ,QAAQ,qBAAqB,KAAA,IACzB,wBAAwB,QACxB,MAAM,QAAQ,uBAAuB,CAAC,CAAC,EAAE,KAAK,QAAQ,iBAAiB,CAAC;GAC9E,MAAM,kBAAkB,QAAQ,kBAAkB,eAAe;GACjE,MAAM,gBACJ,QAAQ,wBAAwB,KAAA,IAC5B,MAAM,QAAQ,0BAA0B,CAAC,CAAC,KAAA,CAAS,IACnD,yBAAyB,QAAQ,mBAAmB;GAC1D,MAAM,uBAAuB,qBAAqB,MAAM,QAAQ,YAAY,CAAC,CAAC;GAC9E,MAAM,QAAQ,MAAM,SAClB,wBACA,oBACA,uBAAuB,KACrB,MAAM,aAAa,oBAAoB,KAAK,MAAM,QAAQ,qBAAqB,CAAC,CAAC,CACnF,CACF;GACA,OAAO,oBAAoB,MAAM,KAC/B,MAAM,aACJ,MAAM,SACJ,OACA,0BAA0B,QAAQ,oBAAoB,GACtD,oBACF,CACF,GACA,MAAM,QACJ,MAAM,SACJ,0BACA,uBACA,iBACA,aACF,CACF,GACA,MAAM,aAAa,cAAc,GACjC,MAAM,aAAa,eAAe,CACpC;EACF,CAAC,CACH;CACF;AACF;;;;;;;ACpXA,IAAa,kBAAb,cAAqC,OAAO,YAA6B,CAAC,CAAC,mBAAmB,EAC5F,SAAS,OAAO,OAClB,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAM,WAAW,OAAO,IAAI,aAAa;CACvC,MAAM,UAAU,OAAO;CACvB,MAAM,SAAS,OAAO;CACtB,MAAM,kBAAkB,OAAO;CAQ/B,MAAM,kBAAkB,OAAO,QAAQ;CAEvC,MAAM,YAAY,OAAO,IAAI,KAAK,IAAI;CAGtC,OAAO,OAAO,mBAAmB,IAAI,IAAI,WAAW,KAAK,CAAC;CAE1D,MAAM,mBAAyD,IAAI,IAAI,SAAS,CAAC,CAAC,KAChF,OAAO,SAAS,SACd,OACI,OAAO,OACP,OAAO,KACL,gBAAgB,KAAK,EAAE,SAAS,kDAAkD,CAAC,CACrF,CACN,CACF;CAEA,MAAM,UACJ,OACA,OACA,YAKG,iBAAiB,KAAK,OAAO,QAAQ,QAAQ,OAAO,OAAO,OAAO,OAAO,CAAC,CAAC;CAEhF,MAAM,cAAuB,WAC3B,OAAO,QACL,MAAM,KAAK,EAAE,QAAQ,OAAO,kBAAkB,IAAI,GAAG,UAAU,KAAK,SAC9D,QACN;EAAE,aAAa;EAAa,SAAS;CAAK,CAC5C;CAMF,MAAM,qBAAqB,WACzB,QAAQ,kBAAkB,KAAK,OAAO,eAAe,sBAAsB,eAAe,CAAC,CAC7F;CAEA,OAAO,gBAAgB,GAAG;EACxB;EACA,eAAe,IAAI,IAAI,SAAS;EAChC;EACA,iBAAiB,QAAQ;EACzB,SAAS,QAAQ;EACjB,OAAO,QAAQ;EACf,SAAS,QAAQ;EACjB,qBAAqB,QAAQ;EAC7B,QAAQ,QAAQ;EAChB,OAAO,QAAQ;EACf,MAAM,QAAQ;EACd,iBAAiB,QAAQ;EACzB;EACA;CACF,CAAC;AACH,CAAC;;;;;;;;;;;;;;;AAgBD,IAAa,kBAAb,MAAa,wBAAwB,QAAQ,QA+D3C,CAAC,CAAC,6CAA6C,CAAC,CAAC;;CAEjD,OAAgB,QAIZ,MAAM,OAAO,eAAe,CAAC,CAAC,QAAQ;;CAG1C,OAAO,WACL,SAIA;EACA,OAAO,gBAAgB,MAAM,KAAK,MAAM,aAAa,mBAAmB,MAAM,OAAO,CAAC,CAAC;CACzF;AACF;;;AChMA,MAAM,0BAA0B,aAAgE,EAC9F,YAAY;CAAE,IAAI;CAAS,OAAO;AAAc,EAClD;AAEA,MAAM,kBACJ,wBAAwB,KAAK,EAAE,QAAQ,YAAY,CAAC;AAEtD,MAAM,WAAW,cACf,qBAAqB,KAAK;CAAE;CAAW,QAAQ;AAAU,CAAC;;;;;AAM5D,MAAa,mCAIT,MAAM,OACR,yBACA,OAAO,IAAI,aAAa;CACtB,MAAM,OAAO,OAAO;CACpB,OAAO,wBAAwB,GAAG,EAChC,SAAS,aACP,KACG,OAAO,uBAAuB,SAAS,OAAO,GAAG,SAAS,OAAO;EAChE,gBAAgB,SAAS;EACzB,WAAW,SAAS;EACpB,gBAAgB,SAAS;EACzB,aAAa,SAAS;CACxB,CAAC,CAAC,CACD,KACC,OAAO,UAAU;EACf,uBACE,OAAO,KAAK,wBAAwB,KAAK,EAAE,QAAQ,cAAc,CAAC,CAAC;EACrE,uBAAuB,OAAO,KAAK,QAAQ,2BAA2B,CAAC;EACvE,yBAAyB,OAAO,KAAK,QAAQ,8BAA8B,CAAC;EAC5E,mBAAmB,OAAO,KAAK,UAAU,CAAC;EAC1C,mBAAmB,OAAO,KAAK,UAAU,CAAC;EAC1C,8BAA8B,OAAO,KAAK,UAAU,CAAC;EACrD,mCAAmC,OAAO,KAAK,UAAU,CAAC;EAC1D,sBAAsB,OAAO,KAAK,UAAU,CAAC;EAC7C,qBAAqB,OAAO,KAAK,UAAU,CAAC;EAC5C,oCAAoC,OAAO,KAAK,UAAU,CAAC;CAC7D,CAAC,CACH,EACN,CAAC;AACH,CAAC,CACH;;AAGA,MAAa,wBAAmD,MAAM,OACpE,cACA,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO,OAAO,QAAc,CAAC;CAC3C,MAAM,eAAe,OAAO,OAAO,UAAU,KAAK;CAClD,OAAO,OAAO,mBAAmB,OAAO,SAAS,KAAK,CAAC;CACvD,OAAO,aAAa,GAAG;EACrB,QAAQ,OAAO,QAAQ,OAAO,KAAA,CAAS,CAAC,CAAC,KAAK,OAAO,MAAM;EAC3D,OAAO,OAAO,KAAK,YAAY;CACjC,CAAC;AACH,CAAC,CACH;AAEA,MAAM,qBAAqB,UACzB,MAAM,kBAAkB,KAAK,IACzB,OAAO,YACP,OAAO,WAAW,6BAA6B,CAAC,CAAC,KAC/C,OAAO,aAAa,EAClB,YAAY,OAAO,MAAM,MAAM,gBAAgB,KAAK,GAAG;CACrD,cAAc;CACd,SAAS,UAAU,MAAM;AAC3B,CAAC,EACH,CAAC,GACD,OAAO,GAAG,KAAK,CACjB;AAEN,MAAM,6BACJ,WAEA,MAAM,cACJ,OAAO,IAAI,aAAa;CACtB,MAAM,aAAa,OAAO;CAC1B,MAAM,QAAQ,OAAO;CACrB,MAAM,OAAO,OAAO;CAEpB,MAAM,MAAM,OAAO,IAAI,aAAa;EAClC,OAAO,MAAM;GACX,MAAM,gBAAgB,OAAO,WAAW,OAAO,CAAC,CAAC,KAC/C,OAAO,KAAK,SAAS,KAAK,WAAW,CAAC,GACtC,OAAO,WAAW,iBAAiB,CACrC;GACA,MAAM,iBAAiB,gBACnB,OAAO,MAAM,aAAa,CAAC,CAAC,KAAK,OAAO,MAAM,IAC9C,OAAO,KACL,qBAAqB,KAAK;IAAE,WAAW;IAAe,QAAQ;GAAc,CAAC,CAC/E;GACJ,IAAI,OAAO,UAAU,cAAc,KAAK,eACtC,OAAO,OAAO,WAAW,uCAAuC;GAElE,MAAM,YAAY,OAAO,OAAO,WAAW,UAAU,MAAM,iBAAiB;GAC5E,MAAM,gBACJ,OAAO,UAAU,cAAc,KAAK,eAAe,YAAY,OAC3D,KAAK,IAAI,GAAG,eAAe,UAAU,SAAS,IAC9C,OAAO;GACb,MAAM,QAAQ,KAAK,IAAI,eAAe,OAAO,kBAAkB;GAC/D,OAAO,OAAO,UAAU,KAAK,OAAO,OAAO,MAAM,SAAS,OAAO,KAAK,CAAC,CAAC;EAC1E;CACF,CAAC;CAED,OAAO,OAAO,WAAW,GAAG;AAC9B,CAAC,CACH;;;;;AAUF,IAAa,iBAAb,MAA4B;CAC1B,OAAO,MACL,UAAiC,CAAC,GAKlC;EACA,MAAM,SAAS,QAAQ,UAAU;EAKjC,OAJ6B,0BAA0B,MAAM,CAAC,CAAC,KAC7D,MAAM,QAAQ,eAAe,MAAM,MAAM,CAAC,GAC1C,MAAM,MAAM,WAAW,MAAM,MAAM,CAAC,CAEZ,CAAC,CAAC,KAC1B,MAAM,QACJ,MAAM,SAAS,kCAAkC,uBAAuB,WAAW,KAAK,CAC1F,CACF;CACF;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@effect-agent/platform-node",
-  "version": "0.1.0-beta.35",
+  "version": "0.1.0-beta.37",
   "exports": {
     ".": {
       "types": "./dist/index.d.mts",
@@ -8,10 +8,10 @@
     }
   },
   "dependencies": {
-    "@effect-agent/core": "0.1.0-beta.35",
-    "@effect-agent/engine": "0.1.0-beta.35",
-    "@effect-agent/session": "0.1.0-beta.35",
-    "@effect-agent/storage-sqlite": "0.1.0-beta.35",
+    "@effect-agent/core": "0.1.0-beta.37",
+    "@effect-agent/engine": "0.1.0-beta.37",
+    "@effect-agent/session": "0.1.0-beta.37",
+    "@effect-agent/storage-sqlite": "0.1.0-beta.37",
     "@effect/platform-node": "4.0.0-rc.111",
     "@effect/sql-sqlite-node": "4.0.0-rc.111",
     "effect": "4.0.0-rc.111"
@@ -37,7 +37,7 @@
     "test": "vp test --passWithNoTests"
   },
   "devDependencies": {
-    "@effect-agent/capabilities": "0.1.0-beta.33",
+    "@effect-agent/capabilities": "0.1.0-beta.35",
     "@effect/vitest": "4.0.0-rc.111",
     "typescript": "7.0.2",
     "vite-plus": "0.2.6"

package/src/index.ts

@@ -1,3 +1,4 @@
 export * from "./host.ts";
 export * from "./layers.ts";
+export * from "./scheduling.ts";
 export * from "./wake-scheduler.ts";

package/src/layers.ts

@@ -5,6 +5,7 @@ import {
   type RunCostEstimator,
   type RunToolFailureObserver,
 } from "@effect-agent/engine";
+import type { ScheduleStore } from "@effect-agent/session";
 import {
   type ConversationStore,
   type WakeScheduler,
@@ -24,6 +25,7 @@ import {
 } from "@effect-agent/session";
 import {
   conversationStoreLayer,
+  scheduleStoreLayer,
   SqliteStorageConfig,
   SqliteStorageConfigValue,
   storageFailpointLayer,
@@ -134,7 +136,7 @@ export interface NodeDurableRuntimeOptions {
    */
   readonly toolReconciler?: Layer.Layer<ToolReconciler> | undefined;
   /**
-   * Registered worker Bindings resolved at durable claim time (S2, spec/subagents.md §11):
+   * Registered worker Bindings resolved at durable claim time:
    * build each with `DurableWorkerBinding.make(binding, digests)` so
    * `NodeDurableHost.runResolvedWorkers` / `DurableAgentRuntime.runResolvedWorker` can serve
    * parent and child lanes from one pool with exact-digest resolution (SUB-023). Defaults to
@@ -154,6 +156,7 @@ export type NodeDurableRuntimeServices =
   | DurableAgentRuntime
   | SubmissionLedger
   | ConversationStore
+  | ScheduleStore
   | WakeScheduler
   | DurableRuntimeConfig
   | NodeDurableRuntimeConfig
@@ -385,6 +388,7 @@ export class NodeDurableRuntime {
         const bindingResolverLayer = AgentBindingResolver.layer(options.bindings ?? []);
         const ports = Layer.mergeAll(
           conversationStoreLayer,
+          scheduleStoreLayer,
           nodeWakeSchedulerLayer.pipe(
             Layer.provideMerge(ownershipDrainLayer.pipe(Layer.provide(submissionLedgerLayer))),
           ),

package/src/scheduling.ts

@@ -0,0 +1,164 @@
+import type { AgentId } from "@effect-agent/core";
+import {
+  type DurableSubmitAgent,
+  type ScheduleProcessFailure,
+  type ScheduleAuthorizer,
+  type SchedulingLimits,
+  ScheduleStorageError,
+  ScheduleStore,
+  type ScheduleValidationError,
+  ScheduledInputAdmission,
+  ScheduledInputRetryable,
+  ScheduleWake,
+  Scheduling,
+  ScheduleDriver,
+  defaultSchedulingLimits,
+  PersistedJson,
+} from "@effect-agent/session";
+import { NodeCrypto } from "@effect/platform-node";
+import { Cause, Duration, Effect, Layer, Option, PubSub, Result } from "effect";
+
+import { NodeDurableHost } from "./host.ts";
+
+const passthroughSubmitAgent = (agentId: AgentId): DurableSubmitAgent<typeof PersistedJson> => ({
+  definition: { id: agentId, input: PersistedJson },
+});
+
+const ambiguous = (): ScheduledInputRetryable =>
+  ScheduledInputRetryable.make({ reason: "ambiguous" });
+
+const corrupt = (operation: string): ScheduleStorageError =>
+  ScheduleStorageError.make({ operation, reason: "corrupt" });
+
+/**
+ * Scheduled admission through the existing host gate. Once the gate admits the call, every
+ * runtime failure stays ambiguous because the Submission may already have committed.
+ */
+export const nodeScheduledInputAdmissionLayer: Layer.Layer<
+  ScheduledInputAdmission,
+  never,
+  NodeDurableHost
+> = Layer.effect(
+  ScheduledInputAdmission,
+  Effect.gen(function* () {
+    const host = yield* NodeDurableHost;
+    return ScheduledInputAdmission.of({
+      submit: (envelope) =>
+        host
+          .submit(passthroughSubmitAgent(envelope.agentId), envelope.input, {
+            conversationId: envelope.conversationId,
+            principal: envelope.deliveryPrincipal,
+            idempotencyKey: envelope.admissionKey,
+            definitions: envelope.definitions,
+          })
+          .pipe(
+            Effect.catchTags({
+              AdmissionClosed: () =>
+                Effect.fail(ScheduledInputRetryable.make({ reason: "host-closed" })),
+              AgentInputError: () => Effect.fail(corrupt("scheduled admission input")),
+              AdmissionConflict: () => Effect.fail(corrupt("scheduled admission conflict")),
+              DigestError: () => Effect.fail(ambiguous()),
+              LedgerError: () => Effect.fail(ambiguous()),
+              ConversationStoreError: () => Effect.fail(ambiguous()),
+              ConversationNotMaterialized: () => Effect.fail(ambiguous()),
+              AppendConflict: () => Effect.fail(ambiguous()),
+              FenceRejected: () => Effect.fail(ambiguous()),
+              DurableRuntimeFailpointError: () => Effect.fail(ambiguous()),
+            }),
+          ),
+    });
+  }),
+);
+
+/** One bounded hint slot for the single supported Node scheduler. Indexed polling repairs loss. */
+export const nodeScheduleWakeLayer: Layer.Layer<ScheduleWake> = Layer.effect(
+  ScheduleWake,
+  Effect.gen(function* () {
+    const hints = yield* PubSub.sliding<void>(1);
+    const subscription = yield* PubSub.subscribe(hints);
+    yield* Effect.addFinalizer(() => PubSub.shutdown(hints));
+    return ScheduleWake.of({
+      notify: PubSub.publish(hints, undefined).pipe(Effect.asVoid),
+      await: PubSub.take(subscription),
+    });
+  }),
+);
+
+const reportPassFailure = (cause: Cause.Cause<ScheduleProcessFailure>): Effect.Effect<boolean> =>
+  Cause.hasInterruptsOnly(cause)
+    ? Effect.interrupt
+    : Effect.logWarning("Node scheduling pass failed").pipe(
+        Effect.annotateLogs({
+          failureTag: Option.match(Cause.findErrorOption(cause), {
+            onNone: () => "Defect",
+            onSome: (error) => error._tag,
+          }),
+        }),
+        Effect.as(false),
+      );
+
+const nodeSchedulingDriverLayer = (
+  limits: SchedulingLimits,
+): Layer.Layer<never, never, ScheduleDriver | ScheduleStore | ScheduleWake> =>
+  Layer.effectDiscard(
+    Effect.gen(function* () {
+      const scheduling = yield* ScheduleDriver;
+      const store = yield* ScheduleStore;
+      const wake = yield* ScheduleWake;
+
+      const run = Effect.gen(function* () {
+        while (true) {
+          const passSucceeded = yield* scheduling.runDue().pipe(
+            Effect.map((pass) => pass.failed === 0),
+            Effect.catchCause(reportPassFailure),
+          );
+          const deadlineResult = passSucceeded
+            ? yield* store.nextDeadline().pipe(Effect.result)
+            : Result.fail(
+                ScheduleStorageError.make({ operation: "driver pass", reason: "unavailable" }),
+              );
+          if (Result.isFailure(deadlineResult) && passSucceeded) {
+            yield* Effect.logWarning("Node scheduling deadline query failed");
+          }
+          const nowMillis = yield* Effect.clockWith((clock) => clock.currentTimeMillis);
+          const deadlineDelay =
+            Result.isSuccess(deadlineResult) && deadlineResult.success !== null
+              ? Math.max(0, deadlineResult.success - nowMillis)
+              : limits.recoveryPollMillis;
+          const delay = Math.min(deadlineDelay, limits.recoveryPollMillis);
+          yield* Effect.raceFirst(wake.await, Effect.sleep(Duration.millis(delay)));
+        }
+      });
+
+      yield* Effect.forkScoped(run);
+    }),
+  );
+
+export interface NodeSchedulingOptions {
+  readonly limits?: SchedulingLimits | undefined;
+}
+
+/**
+ * Optional Scope-owned Node scheduling service and driver. The caller must provide the existing
+ * host, its SQLite ScheduleStore, and an explicit ScheduleAuthorizer.
+ */
+export class NodeScheduling {
+  static layer(
+    options: NodeSchedulingOptions = {},
+  ): Layer.Layer<
+    Scheduling,
+    ScheduleValidationError,
+    NodeDurableHost | ScheduleStore | ScheduleAuthorizer
+  > {
+    const limits = options.limits ?? defaultSchedulingLimits;
+    const schedulingWithDriver = nodeSchedulingDriverLayer(limits).pipe(
+      Layer.provide(ScheduleDriver.layer(limits)),
+      Layer.merge(Scheduling.layer(limits)),
+    );
+    return schedulingWithDriver.pipe(
+      Layer.provide(
+        Layer.mergeAll(nodeScheduledInputAdmissionLayer, nodeScheduleWakeLayer, NodeCrypto.layer),
+      ),
+    );
+  }
+}