@effect-agent/platform-node 0.1.0-beta.6 → 0.1.0-beta.60

package/src/NodeDurableAgentRuntime.ts

@@ -0,0 +1,596 @@
+import { type SubmissionId } from "@effect-agent/core/Identifiers";
+import {
+  CurrentToolFailureObserver,
+  RunContextPreparationPassthrough,
+  RunToolAuthorization,
+  toolFailureObserverLayer,
+  type RunContextPreparation,
+  type RunCostEstimator,
+  type RunToolFailureObserver,
+} from "@effect-agent/engine/RunOptions";
+import { messageDeliveryStoreLayer } from "@effect-agent/storage-sqlite/SqliteMessageDeliveryStore";
+import { scheduleStoreLayer } from "@effect-agent/storage-sqlite/SqliteScheduleStore";
+import {
+  SqliteStorageConfig,
+  SqliteStorageConfigValue,
+} from "@effect-agent/storage-sqlite/SqliteStorageConfig";
+import {
+  type SqliteStorageFailpoint,
+  type SqliteStorageFailpointHandler,
+} from "@effect-agent/storage-sqlite/SqliteStorageFailpoint";
+import { submissionLedgerLayer } from "@effect-agent/storage-sqlite/SqliteSubmissionLedger";
+import {
+  threadStoreLayer,
+  storageFailpointLayer,
+  type SqliteStorageInitializationError,
+} from "@effect-agent/storage-sqlite/SqliteThreadStore";
+import {
+  type AgentRegistration,
+  type ResolvedBinding,
+} from "@effect-agent/thread/AgentRegistration";
+import {
+  DurableAgentRuntime,
+  DurableRuntimeConfig,
+} from "@effect-agent/thread/DurableAgentRuntime";
+import {
+  DurableRuntimeFailpoint,
+  type DurableRuntimeFailpointHandler,
+} from "@effect-agent/thread/DurableFailpoint";
+import {
+  type MessageDeliveryError,
+  type MessageDeliveryStore,
+} from "@effect-agent/thread/MessageDelivery";
+import { DeploymentId, ProducerId } from "@effect-agent/thread/Records";
+import { type ScheduleStore } from "@effect-agent/thread/Schedule";
+import {
+  DEFAULT_OWNERSHIP_LEASE_DURATION,
+  ReleaseOwnershipRequest,
+  SubmissionLedger,
+  type OwnershipToken,
+} from "@effect-agent/thread/SubmissionLedger";
+import { type ThreadStore } from "@effect-agent/thread/ThreadStore";
+import { ToolReconciler } from "@effect-agent/thread/ToolReconciler";
+import { type WakeScheduler } from "@effect-agent/thread/WakeScheduler";
+import { NodeCrypto } from "@effect/platform-node";
+import { SqliteClient } from "@effect/sql-sqlite-node";
+import { Context, type Crypto, Duration, Effect, Layer, Ref, Schema } from "effect";
+import type * as SqlClientService from "effect/unstable/sql/SqlClient";
+
+import { NodeWakeSchedulerConfig, nodeWakeSchedulerLayer } from "./NodeWakeScheduler.ts";
+
+const PositiveMillis = Schema.Int.check(Schema.isGreaterThan(0));
+const NonNegativeMillis = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));
+
+const WorkerConcurrency = Schema.Int.check(
+  Schema.isGreaterThanOrEqualTo(1),
+  Schema.isLessThanOrEqualTo(64),
+);
+
+/** The supplied Node durable runtime configuration failed schema validation (DEPLOY-003). */
+export class NodePlatformConfigError extends Schema.TaggedError<NodePlatformConfigError>()(
+  "NodePlatformConfigError",
+  {
+    message: Schema.String,
+    cause: Schema.optionalKey(Schema.Defect()),
+  },
+) {}
+
+/**
+ * Validated Node durable runtime configuration (deployment §4: decoded once during Layer
+ * construction, exposed as a typed service). Every cadence is in milliseconds and every bound is
+ * finite; `workerConcurrency` caps how many worker loops `NodeDurableHost.runWorkers` drives.
+ */
+export class NodeDurableAgentRuntimeConfigValue extends Schema.Class<NodeDurableAgentRuntimeConfigValue>(
+  "@effect-agent/platform-node/NodeDurableAgentRuntimeConfigValue",
+)({
+  /** SQLite database file backing the Thread Log, Submission Ledger, and delivery obligations. */
+  filename: Schema.NonEmptyString,
+  deploymentId: DeploymentId,
+  producerId: ProducerId,
+  /** Submission ownership lease duration (D5); liveness hint only, epochs stay authoritative. */
+  ownershipLeaseDuration: PositiveMillis,
+  /** Finite bound on concurrent worker loops per host (rule 10). */
+  workerConcurrency: WorkerConcurrency,
+  /** Fallback scan cadence for the Node wake scheduler and independent message delivery recovery. */
+  wakeScanInterval: PositiveMillis,
+  /** `awaitSettlement` ledger re-check cadence when no wake arrives. */
+  settlementPollInterval: PositiveMillis,
+  /** Worker ownership-lease renewal cadence. */
+  leaseRenewalInterval: PositiveMillis,
+  /** Active-Run abort-intent poll cadence. */
+  abortPollInterval: PositiveMillis,
+  /** Bounded SQLITE_BUSY retry window for write-lock acquisition. */
+  busyTimeout: NonNegativeMillis,
+  /** Canonical observation poll cadence of the SQLite store. */
+  observationPollInterval: NonNegativeMillis,
+  /** Opt-in full payload/digest-chain audit while opening the store. */
+  verifyOnOpen: Schema.Boolean,
+}) {}
+
+/** Explicit configuration authority for the assembled Node durable runtime. */
+export class NodeDurableAgentRuntimeConfig extends Context.Service<
+  NodeDurableAgentRuntimeConfig,
+  NodeDurableAgentRuntimeConfigValue
+>()("@effect-agent/platform-node/NodeDurableAgentRuntimeConfig") {}
+
+/**
+ * Raw (unvalidated) construction options for `NodeDurableAgentRuntime.layer`. Optional fields default
+ * to the documented production values; everything is schema-decoded into
+ * `NodeDurableAgentRuntimeConfigValue` before any resource opens (deployment §5 gate 1).
+ */
+export interface NodeDurableAgentRuntimeOptions<
+  ContextError = never,
+  ContextRequirements = never,
+  AuthorizationError = never,
+  AuthorizationRequirements = never,
+  ReconcilerError = never,
+  ReconcilerRequirements = never,
+> {
+  readonly filename: string;
+  readonly deploymentId: string;
+  readonly producerId: string;
+  /** Milliseconds; default `DEFAULT_OWNERSHIP_LEASE_DURATION` (30s, D5). */
+  readonly ownershipLeaseDuration?: number | undefined;
+  /** Default 1; bounded to 1..64. */
+  readonly workerConcurrency?: number | undefined;
+  /** Milliseconds; default 1000. */
+  readonly wakeScanInterval?: number | undefined;
+  /** Milliseconds; default 500. */
+  readonly settlementPollInterval?: number | undefined;
+  /** Milliseconds; default 10000. */
+  readonly leaseRenewalInterval?: number | undefined;
+  /** Milliseconds; default 500. */
+  readonly abortPollInterval?: number | undefined;
+  /** Deployment-owned pricing authority used by durable cost budgets and settlements. */
+  readonly estimateCostMicrousd?: RunCostEstimator | undefined;
+  /** Closed trusted Tool failure reporting. Omission masks ambient observers at construction. */
+  readonly toolFailureObserver?: RunToolFailureObserver | undefined;
+  /** Milliseconds; default 5000. */
+  readonly busyTimeout?: number | undefined;
+  /** Milliseconds; default 25. */
+  readonly observationPollInterval?: number | undefined;
+  /** Default false. */
+  readonly verifyOnOpen?: boolean | undefined;
+  /** SQLite adapter fault injection (`ledger:*` / `append:*` locations); default none. */
+  readonly storageFailpoint?: SqliteStorageFailpointHandler | undefined;
+  /** Coordinator fault injection (`submit:*` / `terminalize:*` locations); default none. */
+  readonly runtimeFailpoint?: DurableRuntimeFailpointHandler | undefined;
+  /**
+   * Reconciliation policy consulted for open ordinary Tool Calls before an Unknown Outcome is
+   * recorded (durability §10, DUR-009). Defaults to the fail-closed `ToolReconciler.uncertain`:
+   * with no registered policy, every open call stays Unknown and routes to the authorized
+   * DUR-017 resolution path. Construction errors and application dependencies remain in the
+   * assembled Layer's E and R; the platform supplies Crypto.
+   */
+  readonly toolReconciler?:
+    | Layer.Layer<ToolReconciler, ReconcilerError, ReconcilerRequirements | Crypto.Crypto>
+    | undefined;
+  /** Host prompt preparation, acquired once with the runtime; default pass-through. */
+  readonly runContext?:
+    | Layer.Layer<RunContextPreparation, ContextError, ContextRequirements | Crypto.Crypto>
+    | undefined;
+  /**
+   * Independent action-time Tool authority, acquired once with the runtime; default allow-all.
+   * Construction errors and application dependencies remain in the assembled Layer's E and R.
+   * The platform supplies Crypto to these extension Layers.
+   */
+  readonly toolAuthorization?:
+    | Layer.Layer<
+        RunToolAuthorization,
+        AuthorizationError,
+        AuthorizationRequirements | Crypto.Crypto
+      >
+    | undefined;
+}
+
+/** Built-in construction failures. `layer` also preserves supplied service Layers' errors. */
+export type NodeDurableAgentRuntimeInitializationError =
+  | NodePlatformConfigError
+  | MessageDeliveryError
+  | SqliteStorageInitializationError;
+
+/**
+ * The services `NodeDurableAgentRuntime.layer` provides. Additional SQLite adapters can use
+ * the same client and storage configuration, sharing its serialized connection and Scope.
+ */
+export type NodeDurableAgentRuntimeServices =
+  | DurableAgentRuntime
+  | SubmissionLedger
+  | ThreadStore
+  | ScheduleStore
+  | MessageDeliveryStore
+  | WakeScheduler
+  | DurableRuntimeConfig
+  | NodeDurableAgentRuntimeConfig
+  | SqlClientService.SqlClient
+  | SqliteStorageConfig
+  | SqliteStorageFailpoint;
+
+const decodeConfigValue = Schema.decodeUnknownEffect(NodeDurableAgentRuntimeConfigValue);
+
+const configFromOptions = (
+  options: Omit<
+    NodeDurableAgentRuntimeOptions,
+    "runContext" | "toolAuthorization" | "toolReconciler"
+  >,
+): Effect.Effect<NodeDurableAgentRuntimeConfigValue, NodePlatformConfigError> =>
+  decodeConfigValue({
+    filename: options.filename,
+    deploymentId: options.deploymentId,
+    producerId: options.producerId,
+    ownershipLeaseDuration:
+      options.ownershipLeaseDuration ?? Duration.toMillis(DEFAULT_OWNERSHIP_LEASE_DURATION),
+    workerConcurrency: options.workerConcurrency ?? 1,
+    wakeScanInterval: options.wakeScanInterval ?? 1_000,
+    settlementPollInterval: options.settlementPollInterval ?? 500,
+    leaseRenewalInterval: options.leaseRenewalInterval ?? 10_000,
+    abortPollInterval: options.abortPollInterval ?? 500,
+    busyTimeout: options.busyTimeout ?? 5_000,
+    observationPollInterval: options.observationPollInterval ?? 25,
+    verifyOnOpen: options.verifyOnOpen ?? false,
+  }).pipe(
+    Effect.mapError((error) =>
+      NodePlatformConfigError.make({
+        message: `Invalid Node durable runtime configuration: ${error.message}`,
+        cause: error,
+      }),
+    ),
+  );
+
+/** SQLite storage configuration derived from the single validated Node configuration. */
+const sqliteStorageConfigLayer: Layer.Layer<
+  SqliteStorageConfig,
+  never,
+  NodeDurableAgentRuntimeConfig
+> = Layer.effect(SqliteStorageConfig)(
+  Effect.gen(function* () {
+    const config = yield* NodeDurableAgentRuntimeConfig;
+
+    return SqliteStorageConfigValue.make({
+      observationPollInterval: config.observationPollInterval,
+      busyTimeout: config.busyTimeout,
+      ownershipLeaseDuration: config.ownershipLeaseDuration,
+      verifyOnOpen: config.verifyOnOpen,
+    });
+  }),
+);
+
+/** Thread coordinator configuration derived from the single validated Node configuration. */
+const durableRuntimeConfigLayer = (
+  estimateCostMicrousd: RunCostEstimator | undefined,
+): Layer.Layer<DurableRuntimeConfig, never, NodeDurableAgentRuntimeConfig> =>
+  Layer.effect(DurableRuntimeConfig)(
+    Effect.gen(function* () {
+      const config = yield* NodeDurableAgentRuntimeConfig;
+
+      return DurableRuntimeConfig.make({
+        deploymentId: config.deploymentId,
+        producerId: config.producerId,
+        settlementPollInterval: Duration.millis(config.settlementPollInterval),
+        leaseRenewalInterval: Duration.millis(config.leaseRenewalInterval),
+        abortPollInterval: Duration.millis(config.abortPollInterval),
+        ...(estimateCostMicrousd === undefined ? {} : { estimateCostMicrousd }),
+      });
+    }),
+  );
+
+/** Wake fallback-scan cadence derived from the single validated Node configuration. */
+const wakeSchedulerConfigLayer: Layer.Layer<
+  NodeWakeSchedulerConfig,
+  never,
+  NodeDurableAgentRuntimeConfig
+> = Layer.effect(NodeWakeSchedulerConfig)(
+  Effect.gen(function* () {
+    const config = yield* NodeDurableAgentRuntimeConfig;
+
+    return { scanInterval: Duration.millis(config.wakeScanInterval) };
+  }),
+);
+
+const releaseTrackedOwnership = (
+  ledger: SubmissionLedger["Service"],
+  registry: Ref.Ref<ReadonlyMap<SubmissionId, OwnershipToken>>,
+): Effect.Effect<void> =>
+  Effect.gen(function* () {
+    const tracked = yield* Ref.getAndSet(registry, new Map<SubmissionId, OwnershipToken>());
+
+    for (const [submissionId, ownershipToken] of tracked) {
+      yield* ledger
+        .releaseOwnership(ReleaseOwnershipRequest.make({ submissionId, ownershipToken }))
+        .pipe(
+          Effect.catchTags({
+            // A newer epoch already owns (or settled) the lane: nothing left to drain.
+            OwnershipLost: () => Effect.void,
+            // Drain is best-effort by design: the lease still expires and the durability protocol,
+            // not graceful shutdown, provides correctness (DEPLOY-006).
+            LedgerError: (error) =>
+              Effect.logWarning("Ownership drain failed; the lease will expire instead", error),
+          }),
+        );
+    }
+  });
+
+/**
+ * Shutdown-drain decorator for a `SubmissionLedger` (deployment §6 step 6): every ownership
+ * period granted through this Layer is tracked — claims start tracking, renewals follow token
+ * rotation, releases and settlement finalizations stop it — and every ownership still held when
+ * the Layer's Scope closes is released so another host can claim the lane immediately instead of
+ * waiting for lease expiry. The drain is a liveness courtesy only; producer-epoch fencing remains
+ * the correctness authority (DUR-006), and a forced kill simply falls back to lease expiry.
+ */
+export const ownershipDrainLayer: Layer.Layer<SubmissionLedger, never, SubmissionLedger> =
+  Layer.effect(SubmissionLedger)(
+    Effect.gen(function* () {
+      const ledger = yield* SubmissionLedger;
+
+      const registry = yield* Ref.make<ReadonlyMap<SubmissionId, OwnershipToken>>(
+        new Map<SubmissionId, OwnershipToken>(),
+      );
+
+      const track = (submissionId: SubmissionId, ownershipToken: OwnershipToken) =>
+        Ref.update(registry, (tracked) => new Map(tracked).set(submissionId, ownershipToken));
+
+      const untrack = (submissionId: SubmissionId) =>
+        Ref.update(registry, (tracked) => {
+          const next = new Map(tracked);
+
+          next.delete(submissionId);
+
+          return next;
+        });
+
+      yield* Effect.addFinalizer(() => releaseTrackedOwnership(ledger, registry));
+
+      return SubmissionLedger.of({
+        capabilities: ledger.capabilities,
+        admit: ledger.admit,
+        markReady: ledger.markReady,
+        lookup: ledger.lookup,
+        // The S2 subagent ops forward untouched: none of them grants an ownership period, so
+        // the drain has nothing to track for them (`suspend` below already stops tracking the
+        // waitingForChild ownership period the moment it ends).
+        resolveAdmission: ledger.resolveAdmission,
+        recordChildSettled: ledger.recordChildSettled,
+        reserveChildBudget: ledger.reserveChildBudget,
+        attachChildToReservation: ledger.attachChildToReservation,
+        beginChildBudgetRelease: ledger.beginChildBudgetRelease,
+        releaseChildBudget: ledger.releaseChildBudget,
+        claim: (request) =>
+          ledger
+            .claim(request)
+            .pipe(
+              Effect.tap((claimed) =>
+                claimed._tag === "Some"
+                  ? track(claimed.value.submissionId, claimed.value.ownershipToken)
+                  : Effect.void,
+              ),
+            ),
+        renewOwnership: (request) =>
+          ledger.renewOwnership(request).pipe(
+            Effect.tap((renewal) => track(request.submissionId, renewal.ownershipToken)),
+            Effect.tapError((error) =>
+              error._tag === "OwnershipLost" ? untrack(request.submissionId) : Effect.void,
+            ),
+          ),
+        releaseOwnership: (request) =>
+          ledger.releaseOwnership(request).pipe(
+            Effect.tap(() => untrack(request.submissionId)),
+            Effect.tapError((error) =>
+              error._tag === "OwnershipLost" ? untrack(request.submissionId) : Effect.void,
+            ),
+          ),
+        markInputApplied: ledger.markInputApplied,
+        reserveSettlement: ledger.reserveSettlement,
+        finalizeSettlement: (request) =>
+          ledger.finalizeSettlement(request).pipe(Effect.tap(() => untrack(request.submissionId))),
+        requestAbort: ledger.requestAbort,
+        readAbortIntent: ledger.readAbortIntent,
+        claimJoining: ledger.claimJoining,
+        markJoined: ledger.markJoined,
+        revertJoining: ledger.revertJoining,
+        // Suspension ends the ownership period by contract, so the drain stops tracking it.
+        suspend: (request) =>
+          ledger.suspend(request).pipe(Effect.tap(() => untrack(request.submissionId))),
+        recordApprovalDecision: ledger.recordApprovalDecision,
+        markUnknown: ledger.markUnknown,
+        recordUnknownResolution: ledger.recordUnknownResolution,
+        scanNonterminal: ledger.scanNonterminal,
+        loadRecoverySnapshot: ledger.loadRecoverySnapshot,
+      });
+    }),
+  );
+
+/**
+ * The DN Layer assembly (deployment §12: a Layer-assembly library, not an app entrypoint).
+ * `layer(options)` decodes the configuration, opens ONE SQLite database serving both the
+ * Thread Log and the Submission Ledger (so claims fence the same producer epochs), wires
+ * the Node wake scheduler with its ledger-scan fallback, exposes independent message delivery
+ * storage, wraps the ledger with the shutdown
+ * ownership drain, defaults the Tool reconciliation policy to the fail-closed
+ * `ToolReconciler.uncertain` (override via `options.toolReconciler`), and provides a ready
+ * `DurableAgentRuntime` on top. Storage compatibility is
+ * verified during construction: an incompatible database file fails the Layer with
+ * `SqliteStorageCompatibilityError` before anything is mutated (DEPLOY-008).
+ */
+export class NodeDurableAgentRuntime {
+  /** Validated configuration Layer; fails typed when the supplied options are out of bounds. */
+  static configLayer<
+    ContextError = never,
+    ContextRequirements = never,
+    AuthorizationError = never,
+    AuthorizationRequirements = never,
+    ReconcilerError = never,
+    ReconcilerRequirements = never,
+  >(
+    options: NodeDurableAgentRuntimeOptions<
+      ContextError,
+      ContextRequirements,
+      AuthorizationError,
+      AuthorizationRequirements,
+      ReconcilerError,
+      ReconcilerRequirements
+    >,
+  ): Layer.Layer<NodeDurableAgentRuntimeConfig, NodePlatformConfigError> {
+    return Layer.effect(NodeDurableAgentRuntimeConfig)(configFromOptions(options));
+  }
+
+  /** The full DN runtime stack over one SQLite file. */
+  static layer<
+    ContextError = never,
+    ContextRequirements = never,
+    AuthorizationError = never,
+    AuthorizationRequirements = never,
+    ReconcilerError = never,
+    ReconcilerRequirements = never,
+  >(
+    options: NodeDurableAgentRuntimeOptions<
+      ContextError,
+      ContextRequirements,
+      AuthorizationError,
+      AuthorizationRequirements,
+      ReconcilerError,
+      ReconcilerRequirements
+    >,
+  ) {
+    return NodeDurableAgentRuntime.assemble(DurableAgentRuntime.layerWithServices, options);
+  }
+
+  /** Own typed executable registrations for every worker using this Node runtime. */
+  static layerRegistered<
+    const Entries extends ReadonlyArray<AgentRegistration>,
+    ContextError = never,
+    ContextRequirements = never,
+    AuthorizationError = never,
+    AuthorizationRequirements = never,
+    ReconcilerError = never,
+    ReconcilerRequirements = never,
+  >(
+    registrations: Entries,
+    options: NodeDurableAgentRuntimeOptions<
+      ContextError,
+      ContextRequirements,
+      AuthorizationError,
+      AuthorizationRequirements,
+      ReconcilerError,
+      ReconcilerRequirements
+    >,
+  ) {
+    return NodeDurableAgentRuntime.assemble(
+      DurableAgentRuntime.layerRegistered(registrations),
+      options,
+    );
+  }
+
+  /** Construct from registrations already resolved within the enclosing application Scope. */
+  static layerWithBindings<
+    ContextError = never,
+    ContextRequirements = never,
+    AuthorizationError = never,
+    AuthorizationRequirements = never,
+    ReconcilerError = never,
+    ReconcilerRequirements = never,
+  >(
+    bindings: ReadonlyArray<ResolvedBinding>,
+    options: NodeDurableAgentRuntimeOptions<
+      ContextError,
+      ContextRequirements,
+      AuthorizationError,
+      AuthorizationRequirements,
+      ReconcilerError,
+      ReconcilerRequirements
+    >,
+  ) {
+    return NodeDurableAgentRuntime.assemble(
+      DurableAgentRuntime.layerWithBindings(bindings),
+      options,
+    );
+  }
+
+  private static assemble<
+    RuntimeError,
+    RuntimeRequirements,
+    ContextError,
+    ContextRequirements,
+    AuthorizationError,
+    AuthorizationRequirements,
+    ReconcilerError,
+    ReconcilerRequirements,
+  >(
+    runtimeLayer: Layer.Layer<DurableAgentRuntime, RuntimeError, RuntimeRequirements>,
+    options: NodeDurableAgentRuntimeOptions<
+      ContextError,
+      ContextRequirements,
+      AuthorizationError,
+      AuthorizationRequirements,
+      ReconcilerError,
+      ReconcilerRequirements
+    >,
+  ) {
+    const assembled = Layer.unwrap(
+      Effect.map(configFromOptions(options), (config) => {
+        const nodeConfigLayer = Layer.succeed(NodeDurableAgentRuntimeConfig)(config);
+
+        const infrastructure = Layer.mergeAll(
+          sqliteStorageConfigLayer,
+          storageFailpointLayer({
+            filename: config.filename,
+            failpoint: options.storageFailpoint,
+          }),
+          SqliteClient.layer({ filename: config.filename }),
+          NodeCrypto.layer,
+        );
+
+        const runtimeFailpointLayer =
+          options.runtimeFailpoint === undefined
+            ? DurableRuntimeFailpoint.layer
+            : Layer.succeed(DurableRuntimeFailpoint)({ hit: options.runtimeFailpoint });
+
+        const reconcilerLayer = options.toolReconciler ?? ToolReconciler.uncertain;
+
+        const observerLayer =
+          options.toolFailureObserver === undefined
+            ? Layer.succeed(CurrentToolFailureObserver)(undefined)
+            : toolFailureObserverLayer(options.toolFailureObserver);
+
+        const ports = Layer.mergeAll(
+          threadStoreLayer,
+          scheduleStoreLayer,
+          messageDeliveryStoreLayer(),
+          nodeWakeSchedulerLayer.pipe(
+            Layer.provideMerge(ownershipDrainLayer.pipe(Layer.provide(submissionLedgerLayer))),
+          ),
+        );
+
+        return runtimeLayer.pipe(
+          Layer.provideMerge(
+            Layer.mergeAll(ports, durableRuntimeConfigLayer(options.estimateCostMicrousd)),
+          ),
+          Layer.provide(
+            Layer.mergeAll(
+              wakeSchedulerConfigLayer,
+              runtimeFailpointLayer,
+              reconcilerLayer,
+              observerLayer,
+            ),
+          ),
+          Layer.provideMerge(infrastructure),
+          Layer.provideMerge(nodeConfigLayer),
+          Layer.provide(
+            Layer.mergeAll(
+              options.runContext ?? RunContextPreparationPassthrough,
+              options.toolAuthorization ?? RunToolAuthorization.allowAll,
+            ).pipe(Layer.provide(NodeCrypto.layer)),
+          ),
+        );
+      }),
+    );
+
+    const runtime: Layer.Layer<
+      NodeDurableAgentRuntimeServices,
+      Layer.Error<typeof assembled>,
+      Layer.Services<typeof assembled>
+    > = assembled;
+
+    return runtime;
+  }
+}