@effect-agent/platform-node 0.1.0-beta.8 → 0.1.0-beta.81

package/dist/NodeDurableHost-BMSajuQn.mjs

@@ -0,0 +1,194 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+import { NodeDurableAgentRuntime, NodeDurableAgentRuntimeConfig } from "./NodeDurableAgentRuntime.mjs";
+import "@effect-agent/core/Identifiers";
+import "@effect-agent/thread/AgentRegistration";
+import { DurableAgentRuntime } from "@effect-agent/thread/DurableAgentRuntime";
+import { MessageDeliveryDriver, MessageDeliveryStore } from "@effect-agent/thread/MessageDelivery";
+import { PersistedJson } from "@effect-agent/thread/Records";
+import { ScheduleStorageError, ScheduledInputRefused, ScheduledInputRetryable } from "@effect-agent/thread/Schedule";
+import "@effect-agent/thread/SubmissionLedger";
+import "@effect-agent/thread/ThreadStore";
+import { NodeCrypto } from "@effect/platform-node";
+import { Cause, Clock, Context, Effect, Exit, Fiber, Layer, Option, Ref, Schema } from "effect";
+import "@effect-agent/thread/Admin";
+import "@effect-agent/thread/OperationAuthorizer";
+import { PreparedInputAdmission } from "@effect-agent/thread/PreparedInputAdmission";
+//#region src/internal/message-delivery.ts
+const reportFailure = (cause) => Cause.hasInterruptsOnly(cause) ? Effect.interrupt : Effect.logWarning("Node message delivery pass failed").pipe(Effect.annotateLogs({ failureTag: Option.match(Cause.findErrorOption(cause), {
+	onNone: () => "Defect",
+	onSome: (failure) => failure._tag
+}) }));
+/** Caller-owned loop. Indexed scans repair absent hints even when both Threads have settled. */
+const runNodeMessageDeliveries = Effect.fn("NodeMessageDelivery.run")(function* (scanInterval) {
+	const driver = yield* MessageDeliveryDriver;
+	const store = yield* MessageDeliveryStore;
+	while (true) {
+		const pass = yield* driver.runDue().pipe(Effect.exit);
+		if (Exit.isFailure(pass)) {
+			yield* reportFailure(pass.cause);
+			yield* Effect.sleep(scanInterval);
+			continue;
+		}
+		const deadline = yield* store.nextDeadline().pipe(Effect.exit);
+		if (Exit.isFailure(deadline)) {
+			yield* reportFailure(deadline.cause);
+			yield* Effect.sleep(scanInterval);
+			continue;
+		}
+		const nowMillis = yield* Clock.currentTimeMillis;
+		const delay = deadline.value === null ? scanInterval : Math.max(1, Math.min(deadline.value - nowMillis, scanInterval));
+		yield* Effect.sleep(delay);
+	}
+});
+//#endregion
+//#region src/internal/prepared-admission.ts
+const passthroughSubmitAgent = (agentId) => ({ definition: {
+	id: agentId,
+	input: PersistedJson
+} });
+const ambiguous = () => ScheduledInputRetryable.make({ reason: "ambiguous" });
+const corrupt = (operation) => ScheduleStorageError.make({
+	operation,
+	reason: "corrupt"
+});
+/** Host-owned admission gate, available while the host's worker pool is being assembled. */
+var NodeAdmission = class extends Context.Service()("@effect-agent/platform-node/internal/NodeAdmission") {};
+/** Acquire the gated source once; worker callers cannot replace its admission authority. */
+const makeNodePreparedInputAdmission = Effect.gen(function* () {
+	const host = yield* NodeAdmission;
+	return PreparedInputAdmission.of({
+		submissionStatus: (receipt) => host.submissionStatus(receipt).pipe(Effect.mapError(() => ScheduledInputRetryable.make({ reason: "storage" }))),
+		submit: (envelope) => host.submit(passthroughSubmitAgent(envelope.agentId), envelope.input, {
+			threadId: envelope.threadId,
+			principal: envelope.deliveryPrincipal,
+			idempotencyKey: envelope.admissionKey,
+			...envelope.admissionGroup === void 0 ? {} : { admissionGroup: envelope.admissionGroup },
+			...envelope.admissionFence === void 0 ? {} : { admissionFence: envelope.admissionFence },
+			...envelope.workerAdmission === void 0 ? {} : { workerAdmission: envelope.workerAdmission },
+			...envelope.messageAdmission === void 0 ? {} : { messageAdmission: envelope.messageAdmission },
+			definitions: envelope.definitions
+		}).pipe(Effect.catchTags({
+			AdmissionClosed: () => Effect.fail(ScheduledInputRetryable.make({ reason: "host-closed" })),
+			AgentInputError: () => Effect.fail(corrupt("prepared admission input")),
+			AdmissionConflict: () => Effect.fail(corrupt("prepared admission conflict")),
+			DigestError: () => Effect.fail(ambiguous()),
+			AdmissionPolicyError: (error) => error.reason === "refused" ? ScheduledInputRefused.make({ code: error.code }) : ScheduledInputRetryable.make({ reason: error.reason === "occupied" ? "capacity" : "storage" }),
+			LedgerError: () => ScheduledInputRetryable.make({ reason: "storage" }),
+			ThreadStoreError: () => Effect.fail(ambiguous()),
+			ThreadNotMaterialized: () => Effect.fail(ambiguous()),
+			AppendConflict: () => Effect.fail(ambiguous()),
+			FenceRejected: () => Effect.fail(ambiguous()),
+			DurableRuntimeFailpointError: () => Effect.fail(ambiguous())
+		}))
+	});
+});
+//#endregion
+//#region src/NodeDurableHost.ts
+var NodeDurableHost_exports = /* @__PURE__ */ __exportAll({
+	AdmissionClosed: () => AdmissionClosed,
+	NodeDurableHost: () => NodeDurableHost,
+	layer: () => layer,
+	run: () => run
+});
+/**
+* Admission is not open on this host: it is shutting down (deployment §6 step 1, DEPLOY-005).
+* Accepted work is unaffected — only NEW admissions are refused.
+*/
+var AdmissionClosed = class extends Schema.TaggedError()("AdmissionClosed", { message: Schema.String }) {};
+const makeHost = Effect.fn("NodeDurableHost.make")(function* (startWorkers) {
+	const runtime = yield* DurableAgentRuntime;
+	const config = yield* NodeDurableAgentRuntimeConfig;
+	const startupRecovery = yield* runtime.runRecovery;
+	const admission = yield* Ref.make(true);
+	const requireAdmission = Ref.get(admission).pipe(Effect.flatMap((open) => open ? Effect.void : Effect.fail(AdmissionClosed.make({ message: "The host is shutting down; admission is closed." }))));
+	const submit = (agent, input, options) => requireAdmission.pipe(Effect.andThen(runtime.submit(agent, input, options)));
+	const deliveryServices = yield* Effect.context();
+	const deliveryContext = yield* Layer.build(MessageDeliveryDriver.layer({
+		batchSize: 100,
+		concurrency: Math.min(config.workerConcurrency, 32)
+	}).pipe(Layer.provide(NodeCrypto.layer), Layer.provide(Layer.effect(PreparedInputAdmission, makeNodePreparedInputAdmission).pipe(Layer.provide(Layer.succeed(NodeAdmission, {
+		submit,
+		submissionStatus: runtime.submissionStatus
+	}))))));
+	const runDeliveries = runNodeMessageDeliveries(config.wakeScanInterval).pipe(Effect.provide(Context.merge(deliveryServices, deliveryContext)));
+	const runWorkers = (worker) => Effect.scoped(Effect.raceFirst(Effect.forEach(Array.from({ length: config.workerConcurrency }, (_, index) => index), () => worker, {
+		concurrency: "unbounded",
+		discard: true
+	}), runDeliveries));
+	const runResolvedWorkers = runWorkers(runtime.runResolvedWorker);
+	const run = startWorkers ? Fiber.join(yield* runResolvedWorkers.pipe(Effect.onExit(() => Ref.set(admission, false)), Effect.forkScoped)) : runResolvedWorkers;
+	yield* Effect.addFinalizer(() => Ref.set(admission, false));
+	return NodeDurableHost.of({
+		startupRecovery,
+		admissionOpen: Ref.get(admission),
+		submit,
+		awaitSettlement: runtime.awaitSettlement,
+		submissionStatus: runtime.submissionStatus,
+		observe: runtime.observe,
+		abort: runtime.abort,
+		explain: runtime.explain,
+		explainThread: runtime.explainThread,
+		verify: runtime.verify,
+		retry: runtime.retry,
+		wake: runtime.wake,
+		scanObligations: runtime.scanObligations,
+		runWorkers,
+		run,
+		runResolvedWorkers: run
+	});
+});
+/**
+* Operational host service. Prefer the module's `layer` and `run` for managed workers.
+* The static constructors on this class retain explicit, manual worker ownership.
+*
+* Startup gates run during Layer construction, so the service existing implies readiness:
+* configuration was schema-decoded, the SQLite file passed the exact-version compatibility check,
+* and every nonterminal Submission went through one full recovery pass BEFORE admission opened.
+* `startupRecovery` is the auditable evidence of that reconciliation pass.
+*
+* Shutdown runs in reverse Layer order when the owning Scope closes: `submit` starts refusing
+* with `AdmissionClosed` first, then the runtime Layer's ownership drain releases every claim
+* still held so another host can take over the lanes immediately, then the SQLite resources
+* close. Forced termination at any point stays safe — the durability protocol, not graceful
+* shutdown, provides correctness (DEPLOY-006).
+*/
+var NodeDurableHost = class NodeDurableHost extends Context.Service()("@effect-agent/platform-node/NodeDurableHost") {
+	/**
+	* Compile typed registrations and acquire the complete host in one Layer Scope.
+	* Node supplies Crypto; model, tool, instruction, and schema services remain required.
+	* Startup recovery and shutdown gates are unchanged. Workers start only when the caller
+	* runs runResolvedWorkers; this constructor never starts a background worker.
+	*/
+	static layerRegistered(registrations, options) {
+		return NodeDurableHost.layer.pipe(Layer.provideMerge(NodeDurableAgentRuntime.layerRegistered(registrations, options)));
+	}
+	/**
+	* Host gates over an assembled `NodeDurableAgentRuntime` stack. The runtime Layer owns
+	* executable registrations; omission registers no Agents, so resolved work fails closed.
+	*/
+	static layer = Layer.effect(NodeDurableHost)(makeHost(false));
+	/** The complete DN host: `NodeDurableAgentRuntime.layer(options)` plus the host lifecycle gates. */
+	static layerStack(options) {
+		const { bindings = [], ...runtimeOptions } = options;
+		return NodeDurableHost.layer.pipe(Layer.provideMerge(NodeDurableAgentRuntime.layerWithBindings(bindings, runtimeOptions)));
+	}
+};
+/**
+* Acquire a complete Node host and start one bounded, scoped worker pool after recovery.
+* Provide model, tool, instruction, and schema dependencies to this Layer. Reusing the Layer
+* shares the same pool. A worker failure closes admission; observe it with `run` at the process
+* boundary so the application exits and releases the host instead of remaining idle.
+*/
+const layer = (registrations, options) => Layer.effect(NodeDurableHost)(makeHost(true)).pipe(Layer.provideMerge(NodeDurableAgentRuntime.layerRegistered(registrations, options)));
+/**
+* Supervise the host's existing workers without starting another pool. Use with
+* `Effect.provide(HostLive)` and `NodeRuntime.runMain`; race it with a server Effect when
+* the same process also serves requests. Unlike `Layer.launch`, this observes worker failures.
+*/
+const run = Effect.gen(function* () {
+	return yield* (yield* NodeDurableHost).run;
+});
+//#endregion
+export { run as a, layer as i, NodeDurableHost as n, NodeAdmission as o, NodeDurableHost_exports as r, makeNodePreparedInputAdmission as s, AdmissionClosed as t };
+
+//# sourceMappingURL=NodeDurableHost-BMSajuQn.mjs.map

package/dist/NodeDurableHost-BMSajuQn.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeDurableHost-BMSajuQn.mjs","names":[],"sources":["../src/internal/message-delivery.ts","../src/internal/prepared-admission.ts","../src/NodeDurableHost.ts"],"sourcesContent":["import {\n  MessageDeliveryDriver,\n  type MessageDeliveryFailure,\n  MessageDeliveryStore,\n} from \"@effect-agent/thread/MessageDelivery\";\nimport { Cause, Clock, Effect, Exit, Option } from \"effect\";\n\nconst reportFailure = (cause: Cause.Cause<MessageDeliveryFailure>): Effect.Effect<void> =>\n  Cause.hasInterruptsOnly(cause)\n    ? Effect.interrupt\n    : Effect.logWarning(\"Node message delivery pass failed\").pipe(\n        Effect.annotateLogs({\n          failureTag: Option.match(Cause.findErrorOption(cause), {\n            onNone: () => \"Defect\",\n            onSome: (failure) => failure._tag,\n          }),\n        }),\n      );\n\n/** Caller-owned loop. Indexed scans repair absent hints even when both Threads have settled. */\nexport const runNodeMessageDeliveries = Effect.fn(\"NodeMessageDelivery.run\")(function* (\n  scanInterval: number,\n) {\n  const driver = yield* MessageDeliveryDriver;\n  const store = yield* MessageDeliveryStore;\n\n  while (true) {\n    const pass = yield* driver.runDue().pipe(Effect.exit);\n\n    if (Exit.isFailure(pass)) {\n      yield* reportFailure(pass.cause);\n      yield* Effect.sleep(scanInterval);\n      continue;\n    }\n\n    const deadline = yield* store.nextDeadline().pipe(Effect.exit);\n\n    if (Exit.isFailure(deadline)) {\n      yield* reportFailure(deadline.cause);\n      yield* Effect.sleep(scanInterval);\n      continue;\n    }\n\n    const nowMillis = yield* Clock.currentTimeMillis;\n\n    const delay =\n      deadline.value === null\n        ? scanInterval\n        : Math.max(1, Math.min(deadline.value - nowMillis, scanInterval));\n\n    yield* Effect.sleep(delay);\n  }\n});\n","import { type AgentId } from \"@effect-agent/core/Identifiers\";\nimport { type DurableSubmitAgent } from \"@effect-agent/thread/DurableAgentRuntime\";\nimport { PreparedInputAdmission } from \"@effect-agent/thread/PreparedInputAdmission\";\nimport { PersistedJson } from \"@effect-agent/thread/Records\";\nimport {\n  ScheduledInputRetryable,\n  ScheduledInputRefused,\n  ScheduleStorageError,\n} from \"@effect-agent/thread/Schedule\";\nimport { Context, Effect } from \"effect\";\n\nimport { type NodeDurableHost } from \"../NodeDurableHost.ts\";\n\nconst passthroughSubmitAgent = (agentId: AgentId): DurableSubmitAgent<typeof PersistedJson> => ({\n  definition: { id: agentId, input: PersistedJson },\n});\n\nconst ambiguous = (): ScheduledInputRetryable =>\n  ScheduledInputRetryable.make({ reason: \"ambiguous\" });\n\nconst corrupt = (operation: string): ScheduleStorageError =>\n  ScheduleStorageError.make({ operation, reason: \"corrupt\" });\n\n/** Host-owned admission gate, available while the host's worker pool is being assembled. */\nexport class NodeAdmission extends Context.Service<\n  NodeAdmission,\n  Pick<NodeDurableHost[\"Service\"], \"submit\" | \"submissionStatus\">\n>()(\"@effect-agent/platform-node/internal/NodeAdmission\") {}\n\n/** Acquire the gated source once; worker callers cannot replace its admission authority. */\nexport const makeNodePreparedInputAdmission = Effect.gen(function* () {\n  const host = yield* NodeAdmission;\n\n  return PreparedInputAdmission.of({\n    submissionStatus: (receipt) =>\n      host\n        .submissionStatus(receipt)\n        .pipe(Effect.mapError(() => ScheduledInputRetryable.make({ reason: \"storage\" }))),\n    submit: (envelope) =>\n      host\n        .submit(passthroughSubmitAgent(envelope.agentId), envelope.input, {\n          threadId: envelope.threadId,\n          principal: envelope.deliveryPrincipal,\n          idempotencyKey: envelope.admissionKey,\n          ...(envelope.admissionGroup === undefined\n            ? {}\n            : { admissionGroup: envelope.admissionGroup }),\n          ...(envelope.admissionFence === undefined\n            ? {}\n            : { admissionFence: envelope.admissionFence }),\n          ...(envelope.workerAdmission === undefined\n            ? {}\n            : { workerAdmission: envelope.workerAdmission }),\n          ...(envelope.messageAdmission === undefined\n            ? {}\n            : { messageAdmission: envelope.messageAdmission }),\n          definitions: envelope.definitions,\n        })\n        .pipe(\n          Effect.catchTags({\n            AdmissionClosed: () =>\n              Effect.fail(ScheduledInputRetryable.make({ reason: \"host-closed\" })),\n            AgentInputError: () => Effect.fail(corrupt(\"prepared admission input\")),\n            AdmissionConflict: () => Effect.fail(corrupt(\"prepared admission conflict\")),\n            DigestError: () => Effect.fail(ambiguous()),\n            AdmissionPolicyError: (error) =>\n              error.reason === \"refused\"\n                ? ScheduledInputRefused.make({ code: error.code })\n                : ScheduledInputRetryable.make({\n                    reason: error.reason === \"occupied\" ? \"capacity\" : \"storage\",\n                  }),\n            LedgerError: () => ScheduledInputRetryable.make({ reason: \"storage\" }),\n            ThreadStoreError: () => Effect.fail(ambiguous()),\n            ThreadNotMaterialized: () => Effect.fail(ambiguous()),\n            AppendConflict: () => Effect.fail(ambiguous()),\n            FenceRejected: () => Effect.fail(ambiguous()),\n            DurableRuntimeFailpointError: () => Effect.fail(ambiguous()),\n          }),\n        ),\n  });\n});\n","import { type ThreadId, type SubmissionId } from \"@effect-agent/core/Identifiers\";\nimport {\n  type IntegrityReport,\n  type ObligationReport,\n  type ObligationThresholds,\n  type RecoveryExplanation,\n  type RetryCommand,\n} from \"@effect-agent/thread/Admin\";\nimport {\n  type AgentRegistration,\n  type ResolvedBinding,\n  type DurableBindingFailure,\n} from \"@effect-agent/thread/AgentRegistration\";\nimport {\n  DurableAgentRuntime,\n  type DurableAbortFailure,\n  type DurableAwaitFailure,\n  type DurableExplainFailure,\n  type DurableObserveOptions,\n  type DurableObligationFailure,\n  type DurableRetryFailure,\n  type DurableSubmitAgent,\n  type DurableSubmitFailure,\n  type DurableSubmitOptions,\n  type DurableVerifyFailure,\n  type DurableWorkerFailure,\n  type Receipt,\n  type RecoveryReport,\n} from \"@effect-agent/thread/DurableAgentRuntime\";\nimport {\n  type MessageDeliveryStore,\n  MessageDeliveryDriver,\n  type MessageDeliveryError,\n} from \"@effect-agent/thread/MessageDelivery\";\nimport { type OperationDenied } from \"@effect-agent/thread/OperationAuthorizer\";\nimport { PreparedInputAdmission } from \"@effect-agent/thread/PreparedInputAdmission\";\nimport { type CanonicalRecordEnvelope } from \"@effect-agent/thread/Records\";\nimport {\n  type AbortCommand,\n  type AbortIntent,\n  type Settlement,\n} from \"@effect-agent/thread/SubmissionLedger\";\nimport {\n  type ThreadNotMaterialized,\n  type ThreadStoreError,\n} from \"@effect-agent/thread/ThreadStore\";\nimport { NodeCrypto } from \"@effect/platform-node\";\nimport { type Stream, Context, Effect, Fiber, Layer, Ref, Schema } from \"effect\";\n\nimport { runNodeMessageDeliveries } from \"./internal/message-delivery.ts\";\nimport { makeNodePreparedInputAdmission, NodeAdmission } from \"./internal/prepared-admission.ts\";\nimport {\n  NodeDurableAgentRuntime,\n  NodeDurableAgentRuntimeConfig,\n  type NodeDurableAgentRuntimeOptions,\n} from \"./NodeDurableAgentRuntime.ts\";\n\n/**\n * Admission is not open on this host: it is shutting down (deployment §6 step 1, DEPLOY-005).\n * Accepted work is unaffected — only NEW admissions are refused.\n */\nexport class AdmissionClosed extends Schema.TaggedError<AdmissionClosed>()(\"AdmissionClosed\", {\n  message: Schema.String,\n}) {}\n\nconst makeHost = Effect.fn(\"NodeDurableHost.make\")(function* (startWorkers: boolean) {\n  const runtime = yield* DurableAgentRuntime;\n  const config = yield* NodeDurableAgentRuntimeConfig;\n\n  // Startup gate (deployment §5, plan §host): configuration decoding and storage compatibility\n  // already gated this Layer's dependencies; the last gate before admission opens is recovering\n  // EVERY nonterminal Submission. Work needing a live Agent Binding is reported `deferred` and\n  // stays a visible obligation for `runWorkers`; lanes durably blocked on an Unknown Outcome are\n  // reported `unknown` and wait for the authorized `resolveUnknown` path (DUR-017) — they consume\n  // no worker permit while the settlement obligation stays owed.\n  const startupRecovery = yield* runtime.runRecovery;\n\n  const admission = yield* Ref.make(true);\n\n  const requireAdmission: Effect.Effect<void, AdmissionClosed> = Ref.get(admission).pipe(\n    Effect.flatMap((open) =>\n      open\n        ? Effect.void\n        : Effect.fail(\n            AdmissionClosed.make({ message: \"The host is shutting down; admission is closed.\" }),\n          ),\n    ),\n  );\n\n  const submit = <InputSchema extends Schema.Top>(\n    agent: DurableSubmitAgent<InputSchema>,\n    input: InputSchema[\"Type\"],\n    options: DurableSubmitOptions,\n  ): Effect.Effect<\n    Receipt,\n    AdmissionClosed | DurableSubmitFailure,\n    InputSchema[\"EncodingServices\"]\n  > => requireAdmission.pipe(Effect.andThen(runtime.submit(agent, input, options)));\n\n  const deliveryServices = yield* Effect.context<MessageDeliveryStore>();\n\n  const deliveryContext = yield* Layer.build(\n    MessageDeliveryDriver.layer({\n      batchSize: 100,\n      concurrency: Math.min(config.workerConcurrency, 32),\n    }).pipe(\n      Layer.provide(NodeCrypto.layer),\n      Layer.provide(\n        Layer.effect(PreparedInputAdmission, makeNodePreparedInputAdmission).pipe(\n          Layer.provide(\n            Layer.succeed(NodeAdmission, { submit, submissionStatus: runtime.submissionStatus }),\n          ),\n        ),\n      ),\n    ),\n  );\n\n  const runDeliveries = runNodeMessageDeliveries(config.wakeScanInterval).pipe(\n    Effect.provide(Context.merge(deliveryServices, deliveryContext)),\n  );\n\n  const runWorkers = <A, E, R>(worker: Effect.Effect<A, E, R>): Effect.Effect<void, E, R> =>\n    Effect.scoped(\n      // Either side exiting stops and joins the other; delivery interruption cannot leave\n      // an apparently healthy worker pool running without message recovery.\n      Effect.raceFirst(\n        Effect.forEach(\n          Array.from({ length: config.workerConcurrency }, (_, index) => index),\n          () => worker,\n          { concurrency: \"unbounded\", discard: true },\n        ),\n        runDeliveries,\n      ),\n    );\n\n  // S2 multi-binding pool: every claimed head resolves its exact registered Binding through\n  // the host's exact registrations, so one bounded\n  // pool serves parent and child lanes — the spec §12 smallest-pool suspension/wakeup proof\n  // runs `workerConcurrency: 1` over exactly this loop.\n  const runResolvedWorkers = runWorkers(runtime.runResolvedWorker);\n\n  const run = startWorkers\n    ? Fiber.join(\n        yield* runResolvedWorkers.pipe(\n          Effect.onExit(() => Ref.set(admission, false)),\n          Effect.forkScoped,\n        ),\n      )\n    : runResolvedWorkers;\n\n  // Register after the worker fiber: close admission, interrupt/join workers, drain\n  // runtime ownership, then close storage and captured application services.\n  yield* Effect.addFinalizer(() => Ref.set(admission, false));\n\n  return NodeDurableHost.of({\n    startupRecovery,\n    admissionOpen: Ref.get(admission),\n    submit,\n    awaitSettlement: runtime.awaitSettlement,\n    submissionStatus: runtime.submissionStatus,\n    observe: runtime.observe,\n    abort: runtime.abort,\n    explain: runtime.explain,\n    explainThread: runtime.explainThread,\n    verify: runtime.verify,\n    retry: runtime.retry,\n    wake: runtime.wake,\n    scanObligations: runtime.scanObligations,\n    runWorkers,\n    run,\n    runResolvedWorkers: run,\n  });\n});\n\n/**\n * Operational host service. Prefer the module's `layer` and `run` for managed workers.\n * The static constructors on this class retain explicit, manual worker ownership.\n *\n * Startup gates run during Layer construction, so the service existing implies readiness:\n * configuration was schema-decoded, the SQLite file passed the exact-version compatibility check,\n * and every nonterminal Submission went through one full recovery pass BEFORE admission opened.\n * `startupRecovery` is the auditable evidence of that reconciliation pass.\n *\n * Shutdown runs in reverse Layer order when the owning Scope closes: `submit` starts refusing\n * with `AdmissionClosed` first, then the runtime Layer's ownership drain releases every claim\n * still held so another host can take over the lanes immediately, then the SQLite resources\n * close. Forced termination at any point stays safe — the durability protocol, not graceful\n * shutdown, provides correctness (DEPLOY-006).\n */\nexport class NodeDurableHost extends Context.Service<\n  NodeDurableHost,\n  {\n    /**\n     * The recovery decisions executed (or deferred) by this host's startup reconciliation.\n     * Reports with the `unknown` disposition identify lanes blocked on Unknown Outcomes that\n     * only the authorized DUR-017 resolution path can release.\n     */\n    readonly startupRecovery: ReadonlyArray<RecoveryReport>;\n    /** Admission-role readiness (deployment §7): true until shutdown begins. */\n    readonly admissionOpen: Effect.Effect<boolean>;\n    /** Observe the managed worker pool, preserving its failure. Manual hosts start their pool here. */\n    readonly run: Effect.Effect<void, DurableWorkerFailure | DurableBindingFailure>;\n    /** `DurableAgentRuntime.submit` behind the host admission gate. */\n    readonly submit: <InputSchema extends Schema.Top>(\n      agent: DurableSubmitAgent<InputSchema>,\n      input: InputSchema[\"Type\"],\n      options: DurableSubmitOptions,\n    ) => Effect.Effect<\n      Receipt,\n      AdmissionClosed | DurableSubmitFailure,\n      InputSchema[\"EncodingServices\"]\n    >;\n    readonly submissionStatus: DurableAgentRuntime[\"Service\"][\"submissionStatus\"];\n    readonly awaitSettlement: (receipt: Receipt) => Effect.Effect<Settlement, DurableAwaitFailure>;\n    readonly observe: (\n      receipt: Receipt,\n      options?: DurableObserveOptions,\n    ) => Stream.Stream<\n      CanonicalRecordEnvelope,\n      ThreadStoreError | ThreadNotMaterialized | OperationDenied\n    >;\n    readonly abort: (command: AbortCommand) => Effect.Effect<AbortIntent, DurableAbortFailure>;\n    /** `DurableAgentRuntime.explain` — read-only recovery explanation of one Submission (P7). */\n    readonly explain: (\n      submissionId: SubmissionId,\n    ) => Effect.Effect<RecoveryExplanation, DurableExplainFailure>;\n    /** `DurableAgentRuntime.explainThread` — explain every nonterminal lane member. */\n    readonly explainThread: (\n      threadId: ThreadId,\n    ) => Effect.Effect<ReadonlyArray<RecoveryExplanation>, DurableExplainFailure>;\n    /** `DurableAgentRuntime.verify` — read-only integrity checks, never a repair (P7). */\n    readonly verify: (threadId: ThreadId) => Effect.Effect<IntegrityReport, DurableVerifyFailure>;\n    /** `DurableAgentRuntime.retry` — audited single-Submission re-drive with typed refusals. */\n    readonly retry: (command: RetryCommand) => Effect.Effect<RecoveryReport, DurableRetryFailure>;\n    /** `DurableAgentRuntime.wake` — the documented operator liveness nudge for one lane. */\n    readonly wake: (threadId: ThreadId) => Effect.Effect<void, OperationDenied>;\n    /** `DurableAgentRuntime.scanObligations` — the scan-based DUR-017/OPS-001 report. */\n    readonly scanObligations: (\n      thresholds: ObligationThresholds,\n    ) => Effect.Effect<ObligationReport, DurableObligationFailure>;\n    /**\n     * Run `workerConcurrency` copies of the given worker effect (typically\n     * `DurableAgentRuntime.runWorker(agent)`) until the caller's Scope interrupts them. The\n     * same Scope drives pending message admission and settlement observation independently\n     * of Submission liveness. The host never forks daemon fibers.\n     */\n    readonly runWorkers: <A, E, R>(worker: Effect.Effect<A, E, R>) => Effect.Effect<void, E, R>;\n    /**\n     * Run `workerConcurrency` copies of `DurableAgentRuntime.runResolvedWorker` over the host's\n     * registered Bindings (S2): every claimed head resolves its exact stored Binding before any\n     * code runs (SUB-023), so one bounded pool serves parent and attached-child lanes.\n     * Hosts built with the module-level `layer` instead join their existing pool.\n     */\n    readonly runResolvedWorkers: Effect.Effect<void, DurableWorkerFailure | DurableBindingFailure>;\n  }\n>()(\"@effect-agent/platform-node/NodeDurableHost\") {\n  /**\n   * Compile typed registrations and acquire the complete host in one Layer Scope.\n   * Node supplies Crypto; model, tool, instruction, and schema services remain required.\n   * Startup recovery and shutdown gates are unchanged. Workers start only when the caller\n   * runs runResolvedWorkers; this constructor never starts a background worker.\n   */\n  static layerRegistered<\n    const Entries extends ReadonlyArray<AgentRegistration>,\n    ContextError = never,\n    ContextRequirements = never,\n    AuthorizationError = never,\n    AuthorizationRequirements = never,\n    ReconcilerError = never,\n    ReconcilerRequirements = never,\n  >(\n    registrations: Entries,\n    options: NodeDurableAgentRuntimeOptions<\n      ContextError,\n      ContextRequirements,\n      AuthorizationError,\n      AuthorizationRequirements,\n      ReconcilerError,\n      ReconcilerRequirements\n    >,\n  ) {\n    return NodeDurableHost.layer.pipe(\n      Layer.provideMerge(NodeDurableAgentRuntime.layerRegistered(registrations, options)),\n    );\n  }\n\n  /**\n   * Host gates over an assembled `NodeDurableAgentRuntime` stack. The runtime Layer owns\n   * executable registrations; omission registers no Agents, so resolved work fails closed.\n   */\n  static readonly layer: Layer.Layer<\n    NodeDurableHost,\n    DurableWorkerFailure | MessageDeliveryError,\n    DurableAgentRuntime | NodeDurableAgentRuntimeConfig | MessageDeliveryStore\n  > = Layer.effect(NodeDurableHost)(makeHost(false));\n\n  /** The complete DN host: `NodeDurableAgentRuntime.layer(options)` plus the host lifecycle gates. */\n  static layerStack<\n    ContextError = never,\n    ContextRequirements = never,\n    AuthorizationError = never,\n    AuthorizationRequirements = never,\n    ReconcilerError = never,\n    ReconcilerRequirements = never,\n  >(\n    options: NodeDurableAgentRuntimeOptions<\n      ContextError,\n      ContextRequirements,\n      AuthorizationError,\n      AuthorizationRequirements,\n      ReconcilerError,\n      ReconcilerRequirements\n    > & { readonly bindings?: ReadonlyArray<ResolvedBinding> },\n  ) {\n    const { bindings = [], ...runtimeOptions } = options;\n\n    return NodeDurableHost.layer.pipe(\n      Layer.provideMerge(NodeDurableAgentRuntime.layerWithBindings(bindings, runtimeOptions)),\n    );\n  }\n}\n\n/**\n * Acquire a complete Node host and start one bounded, scoped worker pool after recovery.\n * Provide model, tool, instruction, and schema dependencies to this Layer. Reusing the Layer\n * shares the same pool. A worker failure closes admission; observe it with `run` at the process\n * boundary so the application exits and releases the host instead of remaining idle.\n */\nexport const layer = <\n  const Entries extends ReadonlyArray<AgentRegistration>,\n  ContextError = never,\n  ContextRequirements = never,\n  AuthorizationError = never,\n  AuthorizationRequirements = never,\n  ReconcilerError = never,\n  ReconcilerRequirements = never,\n>(\n  registrations: Entries,\n  options: NodeDurableAgentRuntimeOptions<\n    ContextError,\n    ContextRequirements,\n    AuthorizationError,\n    AuthorizationRequirements,\n    ReconcilerError,\n    ReconcilerRequirements\n  >,\n) =>\n  Layer.effect(NodeDurableHost)(makeHost(true)).pipe(\n    Layer.provideMerge(NodeDurableAgentRuntime.layerRegistered(registrations, options)),\n  );\n\n/**\n * Supervise the host's existing workers without starting another pool. Use with\n * `Effect.provide(HostLive)` and `NodeRuntime.runMain`; race it with a server Effect when\n * the same process also serves requests. Unlike `Layer.launch`, this observes worker failures.\n */\nexport const run = Effect.gen(function* () {\n  const host = yield* NodeDurableHost;\n\n  return yield* host.run;\n});\n"],"mappings":";;;;;;;;;;;;;;;;AAOA,MAAM,iBAAiB,UACrB,MAAM,kBAAkB,KAAK,IACzB,OAAO,YACP,OAAO,WAAW,mCAAmC,CAAC,CAAC,KACrD,OAAO,aAAa,EAClB,YAAY,OAAO,MAAM,MAAM,gBAAgB,KAAK,GAAG;CACrD,cAAc;CACd,SAAS,YAAY,QAAQ;AAC/B,CAAC,EACH,CAAC,CACH;;AAGN,MAAa,2BAA2B,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAC3E,cACA;CACA,MAAM,SAAS,OAAO;CACtB,MAAM,QAAQ,OAAO;CAErB,OAAO,MAAM;EACX,MAAM,OAAO,OAAO,OAAO,OAAO,CAAC,CAAC,KAAK,OAAO,IAAI;EAEpD,IAAI,KAAK,UAAU,IAAI,GAAG;GACxB,OAAO,cAAc,KAAK,KAAK;GAC/B,OAAO,OAAO,MAAM,YAAY;GAChC;EACF;EAEA,MAAM,WAAW,OAAO,MAAM,aAAa,CAAC,CAAC,KAAK,OAAO,IAAI;EAE7D,IAAI,KAAK,UAAU,QAAQ,GAAG;GAC5B,OAAO,cAAc,SAAS,KAAK;GACnC,OAAO,OAAO,MAAM,YAAY;GAChC;EACF;EAEA,MAAM,YAAY,OAAO,MAAM;EAE/B,MAAM,QACJ,SAAS,UAAU,OACf,eACA,KAAK,IAAI,GAAG,KAAK,IAAI,SAAS,QAAQ,WAAW,YAAY,CAAC;EAEpE,OAAO,OAAO,MAAM,KAAK;CAC3B;AACF,CAAC;;;ACvCD,MAAM,0BAA0B,aAAgE,EAC9F,YAAY;CAAE,IAAI;CAAS,OAAO;AAAc,EAClD;AAEA,MAAM,kBACJ,wBAAwB,KAAK,EAAE,QAAQ,YAAY,CAAC;AAEtD,MAAM,WAAW,cACf,qBAAqB,KAAK;CAAE;CAAW,QAAQ;AAAU,CAAC;;AAG5D,IAAa,gBAAb,cAAmC,QAAQ,QAGzC,CAAC,CAAC,oDAAoD,CAAC,CAAC,CAAC;;AAG3D,MAAa,iCAAiC,OAAO,IAAI,aAAa;CACpE,MAAM,OAAO,OAAO;CAEpB,OAAO,uBAAuB,GAAG;EAC/B,mBAAmB,YACjB,KACG,iBAAiB,OAAO,CAAC,CACzB,KAAK,OAAO,eAAe,wBAAwB,KAAK,EAAE,QAAQ,UAAU,CAAC,CAAC,CAAC;EACpF,SAAS,aACP,KACG,OAAO,uBAAuB,SAAS,OAAO,GAAG,SAAS,OAAO;GAChE,UAAU,SAAS;GACnB,WAAW,SAAS;GACpB,gBAAgB,SAAS;GACzB,GAAI,SAAS,mBAAmB,KAAA,IAC5B,CAAC,IACD,EAAE,gBAAgB,SAAS,eAAe;GAC9C,GAAI,SAAS,mBAAmB,KAAA,IAC5B,CAAC,IACD,EAAE,gBAAgB,SAAS,eAAe;GAC9C,GAAI,SAAS,oBAAoB,KAAA,IAC7B,CAAC,IACD,EAAE,iBAAiB,SAAS,gBAAgB;GAChD,GAAI,SAAS,qBAAqB,KAAA,IAC9B,CAAC,IACD,EAAE,kBAAkB,SAAS,iBAAiB;GAClD,aAAa,SAAS;EACxB,CAAC,CAAC,CACD,KACC,OAAO,UAAU;GACf,uBACE,OAAO,KAAK,wBAAwB,KAAK,EAAE,QAAQ,cAAc,CAAC,CAAC;GACrE,uBAAuB,OAAO,KAAK,QAAQ,0BAA0B,CAAC;GACtE,yBAAyB,OAAO,KAAK,QAAQ,6BAA6B,CAAC;GAC3E,mBAAmB,OAAO,KAAK,UAAU,CAAC;GAC1C,uBAAuB,UACrB,MAAM,WAAW,YACb,sBAAsB,KAAK,EAAE,MAAM,MAAM,KAAK,CAAC,IAC/C,wBAAwB,KAAK,EAC3B,QAAQ,MAAM,WAAW,aAAa,aAAa,UACrD,CAAC;GACP,mBAAmB,wBAAwB,KAAK,EAAE,QAAQ,UAAU,CAAC;GACrE,wBAAwB,OAAO,KAAK,UAAU,CAAC;GAC/C,6BAA6B,OAAO,KAAK,UAAU,CAAC;GACpD,sBAAsB,OAAO,KAAK,UAAU,CAAC;GAC7C,qBAAqB,OAAO,KAAK,UAAU,CAAC;GAC5C,oCAAoC,OAAO,KAAK,UAAU,CAAC;EAC7D,CAAC,CACH;CACN,CAAC;AACH,CAAC;;;;;;;;;;;;;ACnBD,IAAa,kBAAb,cAAqC,OAAO,YAA6B,CAAC,CAAC,mBAAmB,EAC5F,SAAS,OAAO,OAClB,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAM,WAAW,OAAO,GAAG,sBAAsB,CAAC,CAAC,WAAW,cAAuB;CACnF,MAAM,UAAU,OAAO;CACvB,MAAM,SAAS,OAAO;CAQtB,MAAM,kBAAkB,OAAO,QAAQ;CAEvC,MAAM,YAAY,OAAO,IAAI,KAAK,IAAI;CAEtC,MAAM,mBAAyD,IAAI,IAAI,SAAS,CAAC,CAAC,KAChF,OAAO,SAAS,SACd,OACI,OAAO,OACP,OAAO,KACL,gBAAgB,KAAK,EAAE,SAAS,kDAAkD,CAAC,CACrF,CACN,CACF;CAEA,MAAM,UACJ,OACA,OACA,YAKG,iBAAiB,KAAK,OAAO,QAAQ,QAAQ,OAAO,OAAO,OAAO,OAAO,CAAC,CAAC;CAEhF,MAAM,mBAAmB,OAAO,OAAO,QAA8B;CAErE,MAAM,kBAAkB,OAAO,MAAM,MACnC,sBAAsB,MAAM;EAC1B,WAAW;EACX,aAAa,KAAK,IAAI,OAAO,mBAAmB,EAAE;CACpD,CAAC,CAAC,CAAC,KACD,MAAM,QAAQ,WAAW,KAAK,GAC9B,MAAM,QACJ,MAAM,OAAO,wBAAwB,8BAA8B,CAAC,CAAC,KACnE,MAAM,QACJ,MAAM,QAAQ,eAAe;EAAE;EAAQ,kBAAkB,QAAQ;CAAiB,CAAC,CACrF,CACF,CACF,CACF,CACF;CAEA,MAAM,gBAAgB,yBAAyB,OAAO,gBAAgB,CAAC,CAAC,KACtE,OAAO,QAAQ,QAAQ,MAAM,kBAAkB,eAAe,CAAC,CACjE;CAEA,MAAM,cAAuB,WAC3B,OAAO,OAGL,OAAO,UACL,OAAO,QACL,MAAM,KAAK,EAAE,QAAQ,OAAO,kBAAkB,IAAI,GAAG,UAAU,KAAK,SAC9D,QACN;EAAE,aAAa;EAAa,SAAS;CAAK,CAC5C,GACA,aACF,CACF;CAMF,MAAM,qBAAqB,WAAW,QAAQ,iBAAiB;CAE/D,MAAM,MAAM,eACR,MAAM,KACJ,OAAO,mBAAmB,KACxB,OAAO,aAAa,IAAI,IAAI,WAAW,KAAK,CAAC,GAC7C,OAAO,UACT,CACF,IACA;CAIJ,OAAO,OAAO,mBAAmB,IAAI,IAAI,WAAW,KAAK,CAAC;CAE1D,OAAO,gBAAgB,GAAG;EACxB;EACA,eAAe,IAAI,IAAI,SAAS;EAChC;EACA,iBAAiB,QAAQ;EACzB,kBAAkB,QAAQ;EAC1B,SAAS,QAAQ;EACjB,OAAO,QAAQ;EACf,SAAS,QAAQ;EACjB,eAAe,QAAQ;EACvB,QAAQ,QAAQ;EAChB,OAAO,QAAQ;EACf,MAAM,QAAQ;EACd,iBAAiB,QAAQ;EACzB;EACA;EACA,oBAAoB;CACtB,CAAC;AACH,CAAC;;;;;;;;;;;;;;;;AAiBD,IAAa,kBAAb,MAAa,wBAAwB,QAAQ,QAkE3C,CAAC,CAAC,6CAA6C,CAAC,CAAC;;;;;;;CAOjD,OAAO,gBASL,eACA,SAQA;EACA,OAAO,gBAAgB,MAAM,KAC3B,MAAM,aAAa,wBAAwB,gBAAgB,eAAe,OAAO,CAAC,CACpF;CACF;;;;;CAMA,OAAgB,QAIZ,MAAM,OAAO,eAAe,CAAC,CAAC,SAAS,KAAK,CAAC;;CAGjD,OAAO,WAQL,SAQA;EACA,MAAM,EAAE,WAAW,CAAC,GAAG,GAAG,mBAAmB;EAE7C,OAAO,gBAAgB,MAAM,KAC3B,MAAM,aAAa,wBAAwB,kBAAkB,UAAU,cAAc,CAAC,CACxF;CACF;AACF;;;;;;;AAQA,MAAa,SASX,eACA,YASA,MAAM,OAAO,eAAe,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,KAC5C,MAAM,aAAa,wBAAwB,gBAAgB,eAAe,OAAO,CAAC,CACpF;;;;;;AAOF,MAAa,MAAM,OAAO,IAAI,aAAa;CAGzC,OAAO,QAAO,OAFM,gBAAA,CAED;AACrB,CAAC"}

package/dist/NodeDurableHost.d.mts

@@ -0,0 +1,168 @@
+import { t as NodeWakeSchedulerConfig } from "./NodeWakeScheduler-4ZeXYwPu.mjs";
+import { a as NodeDurableAgentRuntimeOptions, c as NodePlatformConfigError, n as NodeDurableAgentRuntimeConfig, o as NodeDurableAgentRuntimeServices } from "./NodeDurableAgentRuntime-CFElFzNF.mjs";
+import { SubmissionId, ThreadId } from "@effect-agent/core/Identifiers";
+import { AgentRegistration, DurableBindingFailure, ResolvedBinding } from "@effect-agent/thread/AgentRegistration";
+import { DurableAbortFailure, DurableAgentRuntime, DurableAwaitFailure, DurableExplainFailure, DurableObligationFailure, DurableObserveOptions, DurableRetryFailure, DurableSubmitAgent, DurableSubmitFailure, DurableSubmitOptions, DurableVerifyFailure, DurableWorkerFailure, Receipt, RecoveryReport } from "@effect-agent/thread/DurableAgentRuntime";
+import { MessageDeliveryError, MessageDeliveryStore } from "@effect-agent/thread/MessageDelivery";
+import { CanonicalRecordEnvelope } from "@effect-agent/thread/Records";
+import { AbortCommand, AbortIntent, Settlement } from "@effect-agent/thread/SubmissionLedger";
+import { ThreadNotMaterialized, ThreadStoreError } from "@effect-agent/thread/ThreadStore";
+import { Context, Effect, Layer, Schema, Stream } from "effect";
+import { IntegrityReport, ObligationReport, ObligationThresholds, RecoveryExplanation, RetryCommand } from "@effect-agent/thread/Admin";
+import { OperationDenied } from "@effect-agent/thread/OperationAuthorizer";
+declare namespace NodeDurableHost_d_exports {
+  export { AdmissionClosed, NodeDurableHost, layer, run };
+}
+declare const AdmissionClosed_base: Schema.Class<AdmissionClosed, Schema.TaggedStruct<"AdmissionClosed", {
+  readonly message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * Admission is not open on this host: it is shutting down (deployment §6 step 1, DEPLOY-005).
+ * Accepted work is unaffected — only NEW admissions are refused.
+ */
+declare class AdmissionClosed extends AdmissionClosed_base {}
+declare const NodeDurableHost_base: Context.ServiceClass<NodeDurableHost, "@effect-agent/platform-node/NodeDurableHost", {
+  /**
+   * The recovery decisions executed (or deferred) by this host's startup reconciliation.
+   * Reports with the `unknown` disposition identify lanes blocked on Unknown Outcomes that
+   * only the authorized DUR-017 resolution path can release.
+   */
+  readonly startupRecovery: ReadonlyArray<RecoveryReport>;
+  /** Admission-role readiness (deployment §7): true until shutdown begins. */
+  readonly admissionOpen: Effect.Effect<boolean>;
+  /** Observe the managed worker pool, preserving its failure. Manual hosts start their pool here. */
+  readonly run: Effect.Effect<void, DurableWorkerFailure | DurableBindingFailure>;
+  /** `DurableAgentRuntime.submit` behind the host admission gate. */
+  readonly submit: <InputSchema extends Schema.Top>(agent: DurableSubmitAgent<InputSchema>, input: InputSchema["Type"], options: DurableSubmitOptions) => Effect.Effect<Receipt, AdmissionClosed | DurableSubmitFailure, InputSchema["EncodingServices"]>;
+  readonly submissionStatus: DurableAgentRuntime["Service"]["submissionStatus"];
+  readonly awaitSettlement: (receipt: Receipt) => Effect.Effect<Settlement, DurableAwaitFailure>;
+  readonly observe: (receipt: Receipt, options?: DurableObserveOptions) => Stream.Stream<CanonicalRecordEnvelope, ThreadStoreError | ThreadNotMaterialized | OperationDenied>;
+  readonly abort: (command: AbortCommand) => Effect.Effect<AbortIntent, DurableAbortFailure>;
+  /** `DurableAgentRuntime.explain` — read-only recovery explanation of one Submission (P7). */
+  readonly explain: (submissionId: SubmissionId) => Effect.Effect<RecoveryExplanation, DurableExplainFailure>;
+  /** `DurableAgentRuntime.explainThread` — explain every nonterminal lane member. */
+  readonly explainThread: (threadId: ThreadId) => Effect.Effect<ReadonlyArray<RecoveryExplanation>, DurableExplainFailure>;
+  /** `DurableAgentRuntime.verify` — read-only integrity checks, never a repair (P7). */
+  readonly verify: (threadId: ThreadId) => Effect.Effect<IntegrityReport, DurableVerifyFailure>;
+  /** `DurableAgentRuntime.retry` — audited single-Submission re-drive with typed refusals. */
+  readonly retry: (command: RetryCommand) => Effect.Effect<RecoveryReport, DurableRetryFailure>;
+  /** `DurableAgentRuntime.wake` — the documented operator liveness nudge for one lane. */
+  readonly wake: (threadId: ThreadId) => Effect.Effect<void, OperationDenied>;
+  /** `DurableAgentRuntime.scanObligations` — the scan-based DUR-017/OPS-001 report. */
+  readonly scanObligations: (thresholds: ObligationThresholds) => Effect.Effect<ObligationReport, DurableObligationFailure>;
+  /**
+   * Run `workerConcurrency` copies of the given worker effect (typically
+   * `DurableAgentRuntime.runWorker(agent)`) until the caller's Scope interrupts them. The
+   * same Scope drives pending message admission and settlement observation independently
+   * of Submission liveness. The host never forks daemon fibers.
+   */
+  readonly runWorkers: <A, E, R>(worker: Effect.Effect<A, E, R>) => Effect.Effect<void, E, R>;
+  /**
+   * Run `workerConcurrency` copies of `DurableAgentRuntime.runResolvedWorker` over the host's
+   * registered Bindings (S2): every claimed head resolves its exact stored Binding before any
+   * code runs (SUB-023), so one bounded pool serves parent and attached-child lanes.
+   * Hosts built with the module-level `layer` instead join their existing pool.
+   */
+  readonly runResolvedWorkers: Effect.Effect<void, DurableWorkerFailure | DurableBindingFailure>;
+}>;
+/**
+ * Operational host service. Prefer the module's `layer` and `run` for managed workers.
+ * The static constructors on this class retain explicit, manual worker ownership.
+ *
+ * Startup gates run during Layer construction, so the service existing implies readiness:
+ * configuration was schema-decoded, the SQLite file passed the exact-version compatibility check,
+ * and every nonterminal Submission went through one full recovery pass BEFORE admission opened.
+ * `startupRecovery` is the auditable evidence of that reconciliation pass.
+ *
+ * Shutdown runs in reverse Layer order when the owning Scope closes: `submit` starts refusing
+ * with `AdmissionClosed` first, then the runtime Layer's ownership drain releases every claim
+ * still held so another host can take over the lanes immediately, then the SQLite resources
+ * close. Forced termination at any point stays safe — the durability protocol, not graceful
+ * shutdown, provides correctness (DEPLOY-006).
+ */
+declare class NodeDurableHost extends NodeDurableHost_base {
+  /**
+   * Compile typed registrations and acquire the complete host in one Layer Scope.
+   * Node supplies Crypto; model, tool, instruction, and schema services remain required.
+   * Startup recovery and shutdown gates are unchanged. Workers start only when the caller
+   * runs runResolvedWorkers; this constructor never starts a background worker.
+   */
+  static layerRegistered<const Entries extends ReadonlyArray<AgentRegistration>, ContextError = never, ContextRequirements = never, AuthorizationError = never, AuthorizationRequirements = never, ReconcilerError = never, ReconcilerRequirements = never>(registrations: Entries, options: NodeDurableAgentRuntimeOptions<ContextError, ContextRequirements, AuthorizationError, AuthorizationRequirements, ReconcilerError, ReconcilerRequirements>): Layer.Layer<NodeDurableHost | NodeDurableAgentRuntimeServices, AuthorizationError | ContextError | ReconcilerError | MessageDeliveryError | NodePlatformConfigError | DurableWorkerFailure | import("@effect-agent/storage-sqlite/SqliteThreadStore").SqliteStorageInitializationError, Exclude<AuthorizationRequirements, import("effect/Crypto").Crypto> | Exclude<ContextRequirements, import("effect/Crypto").Crypto> | Exclude<Exclude<Exclude<ReconcilerRequirements, import("effect/Crypto").Crypto | import("effect/unstable/sql/SqlClient").SqlClient | import("@effect/sql-sqlite-node/SqliteClient").SqliteClient | import("@effect-agent/storage-sqlite/SqliteStorageConfig").SqliteStorageConfig | import("@effect-agent/storage-sqlite/SqliteStorageFailpoint").SqliteStorageFailpoint>, NodeDurableAgentRuntimeConfig>, import("@effect-agent/engine/RunOptions").RunContextPreparation | import("@effect-agent/engine/RunOptions").RunToolAuthorization> | Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<[Entries[number]] extends [never] ? never : (Entries[number] extends (infer T_3) ? T_3 extends Entries[number] ? T_3 extends {
+    readonly attemptLayer: (context: import("@effect-agent/thread/AgentRegistration").AgentAttemptContext) => Layer.Layer<infer Provides, never, infer Requires>;
+  } ? Requires | Exclude<T_3 extends (infer T_4) ? T_4 extends T_3 ? T_4 extends {
+    readonly agent: infer A extends import("@effect-agent/thread/AgentRegistration").ExecutableAgentBinding;
+  } ? import("@effect-agent/thread/DurableAgentRuntime").DurableWorkerRequirements<A> : T_4 extends {
+    readonly agent: infer D extends import("@effect-agent/core/Agent").Definition<Schema.Top, Schema.Top, unknown, import("effect/unstable/ai/Toolkit").Any, import("@effect-agent/core/Agent").RunDispositionDeclaration<never, Schema.Top> | undefined, unknown> & {
+      readonly instructions: import("@effect-agent/core/Agent").InstructionSource<never, unknown, unknown>;
+      readonly inputPrompt?: import("@effect-agent/core/Agent").InputPromptSource<never, unknown, unknown> | undefined;
+    };
+    readonly model: infer M extends import("@effect-agent/thread/AgentRegistration").ExecutableAgentBinding["model"];
+  } ? import("@effect-agent/thread/DurableAgentRuntime").DurableWorkerRequirements<{
+    readonly definition: D;
+    readonly model: M;
+  }> : never : never : never, Provides> : T_3 extends {
+    readonly agent: infer A extends import("@effect-agent/thread/AgentRegistration").ExecutableAgentBinding;
+  } ? import("@effect-agent/thread/DurableAgentRuntime").DurableWorkerRequirements<A> : T_3 extends {
+    readonly agent: infer D extends import("@effect-agent/core/Agent").Definition<Schema.Top, Schema.Top, unknown, import("effect/unstable/ai/Toolkit").Any, import("@effect-agent/core/Agent").RunDispositionDeclaration<never, Schema.Top> | undefined, unknown> & {
+      readonly instructions: import("@effect-agent/core/Agent").InstructionSource<never, unknown, unknown>;
+      readonly inputPrompt?: import("@effect-agent/core/Agent").InputPromptSource<never, unknown, unknown> | undefined;
+    };
+    readonly model: infer M extends import("@effect-agent/thread/AgentRegistration").ExecutableAgentBinding["model"];
+  } ? import("@effect-agent/thread/DurableAgentRuntime").DurableWorkerRequirements<{
+    readonly definition: D;
+    readonly model: M;
+  }> : never : never : never) | (Entries[number] extends (infer T_5) ? T_5 extends Entries[number] ? T_5 extends {
+    readonly reporting: infer Reports extends ReadonlyArray<import("@effect-agent/engine/SubagentHost").WorkerReporting<unknown, unknown>>;
+  } ? [Reports[number]] extends [never] ? never : Reports[number] extends import("@effect-agent/engine/SubagentHost").WorkerReporting<unknown, infer R> ? Exclude<R, import("effect/Scope").Scope> : never : never : never : never), import("effect/Scope").Scope>, import("@effect-agent/thread/DurableAgentRuntime").DurableRuntimeConfig | MessageDeliveryStore | import("@effect-agent/thread/Schedule").ScheduleStore | import("@effect-agent/thread/SubmissionLedger").SubmissionLedger | import("@effect-agent/thread/ThreadStore").ThreadStore | import("@effect-agent/thread/WakeScheduler").WakeScheduler>, import("@effect-agent/thread/DurableFailpoint").DurableRuntimeFailpoint | NodeWakeSchedulerConfig | import("@effect-agent/thread/ToolReconciler").ToolReconciler>, import("effect/Crypto").Crypto | import("effect/unstable/sql/SqlClient").SqlClient | import("@effect/sql-sqlite-node/SqliteClient").SqliteClient | import("@effect-agent/storage-sqlite/SqliteStorageConfig").SqliteStorageConfig | import("@effect-agent/storage-sqlite/SqliteStorageFailpoint").SqliteStorageFailpoint>, NodeDurableAgentRuntimeConfig>, import("@effect-agent/engine/RunOptions").RunContextPreparation | import("@effect-agent/engine/RunOptions").RunToolAuthorization>>;
+  /**
+   * Host gates over an assembled `NodeDurableAgentRuntime` stack. The runtime Layer owns
+   * executable registrations; omission registers no Agents, so resolved work fails closed.
+   */
+  static readonly layer: Layer.Layer<NodeDurableHost, DurableWorkerFailure | MessageDeliveryError, DurableAgentRuntime | NodeDurableAgentRuntimeConfig | MessageDeliveryStore>;
+  /** The complete DN host: `NodeDurableAgentRuntime.layer(options)` plus the host lifecycle gates. */
+  static layerStack<ContextError = never, ContextRequirements = never, AuthorizationError = never, AuthorizationRequirements = never, ReconcilerError = never, ReconcilerRequirements = never>(options: NodeDurableAgentRuntimeOptions<ContextError, ContextRequirements, AuthorizationError, AuthorizationRequirements, ReconcilerError, ReconcilerRequirements> & {
+    readonly bindings?: ReadonlyArray<ResolvedBinding>;
+  }): Layer.Layer<NodeDurableHost | NodeDurableAgentRuntimeServices, AuthorizationError | ContextError | ReconcilerError | MessageDeliveryError | NodePlatformConfigError | DurableWorkerFailure | import("@effect-agent/storage-sqlite/SqliteThreadStore").SqliteStorageInitializationError, Exclude<AuthorizationRequirements, import("effect/Crypto").Crypto> | Exclude<ContextRequirements, import("effect/Crypto").Crypto> | Exclude<Exclude<Exclude<ReconcilerRequirements, import("effect/Crypto").Crypto | import("effect/unstable/sql/SqlClient").SqlClient | import("@effect/sql-sqlite-node/SqliteClient").SqliteClient | import("@effect-agent/storage-sqlite/SqliteStorageConfig").SqliteStorageConfig | import("@effect-agent/storage-sqlite/SqliteStorageFailpoint").SqliteStorageFailpoint>, NodeDurableAgentRuntimeConfig>, import("@effect-agent/engine/RunOptions").RunContextPreparation | import("@effect-agent/engine/RunOptions").RunToolAuthorization>>;
+}
+/**
+ * Acquire a complete Node host and start one bounded, scoped worker pool after recovery.
+ * Provide model, tool, instruction, and schema dependencies to this Layer. Reusing the Layer
+ * shares the same pool. A worker failure closes admission; observe it with `run` at the process
+ * boundary so the application exits and releases the host instead of remaining idle.
+ */
+declare const layer: <const Entries extends ReadonlyArray<AgentRegistration>, ContextError = never, ContextRequirements = never, AuthorizationError = never, AuthorizationRequirements = never, ReconcilerError = never, ReconcilerRequirements = never>(registrations: Entries, options: NodeDurableAgentRuntimeOptions<ContextError, ContextRequirements, AuthorizationError, AuthorizationRequirements, ReconcilerError, ReconcilerRequirements>) => Layer.Layer<NodeDurableHost | NodeDurableAgentRuntimeServices, AuthorizationError | ContextError | ReconcilerError | MessageDeliveryError | NodePlatformConfigError | DurableWorkerFailure | import("@effect-agent/storage-sqlite/SqliteThreadStore").SqliteStorageInitializationError, Exclude<AuthorizationRequirements, import("effect/Crypto").Crypto> | Exclude<ContextRequirements, import("effect/Crypto").Crypto> | Exclude<Exclude<Exclude<ReconcilerRequirements, import("effect/Crypto").Crypto | import("effect/unstable/sql/SqlClient").SqlClient | import("@effect/sql-sqlite-node/SqliteClient").SqliteClient | import("@effect-agent/storage-sqlite/SqliteStorageConfig").SqliteStorageConfig | import("@effect-agent/storage-sqlite/SqliteStorageFailpoint").SqliteStorageFailpoint>, NodeDurableAgentRuntimeConfig>, import("@effect-agent/engine/RunOptions").RunContextPreparation | import("@effect-agent/engine/RunOptions").RunToolAuthorization> | Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<[Entries[number]] extends [never] ? never : (Entries[number] extends (infer T_3) ? T_3 extends Entries[number] ? T_3 extends {
+  readonly attemptLayer: (context: import("@effect-agent/thread/AgentRegistration").AgentAttemptContext) => Layer.Layer<infer Provides, never, infer Requires>;
+} ? Requires | Exclude<T_3 extends (infer T_4) ? T_4 extends T_3 ? T_4 extends {
+  readonly agent: infer A extends import("@effect-agent/thread/AgentRegistration").ExecutableAgentBinding;
+} ? import("@effect-agent/thread/DurableAgentRuntime").DurableWorkerRequirements<A> : T_4 extends {
+  readonly agent: infer D extends import("@effect-agent/core/Agent").Definition<Schema.Top, Schema.Top, unknown, import("effect/unstable/ai/Toolkit").Any, import("@effect-agent/core/Agent").RunDispositionDeclaration<never, Schema.Top> | undefined, unknown> & {
+    readonly instructions: import("@effect-agent/core/Agent").InstructionSource<never, unknown, unknown>;
+    readonly inputPrompt?: import("@effect-agent/core/Agent").InputPromptSource<never, unknown, unknown> | undefined;
+  };
+  readonly model: infer M extends import("@effect-agent/thread/AgentRegistration").ExecutableAgentBinding["model"];
+} ? import("@effect-agent/thread/DurableAgentRuntime").DurableWorkerRequirements<{
+  readonly definition: D;
+  readonly model: M;
+}> : never : never : never, Provides> : T_3 extends {
+  readonly agent: infer A extends import("@effect-agent/thread/AgentRegistration").ExecutableAgentBinding;
+} ? import("@effect-agent/thread/DurableAgentRuntime").DurableWorkerRequirements<A> : T_3 extends {
+  readonly agent: infer D extends import("@effect-agent/core/Agent").Definition<Schema.Top, Schema.Top, unknown, import("effect/unstable/ai/Toolkit").Any, import("@effect-agent/core/Agent").RunDispositionDeclaration<never, Schema.Top> | undefined, unknown> & {
+    readonly instructions: import("@effect-agent/core/Agent").InstructionSource<never, unknown, unknown>;
+    readonly inputPrompt?: import("@effect-agent/core/Agent").InputPromptSource<never, unknown, unknown> | undefined;
+  };
+  readonly model: infer M extends import("@effect-agent/thread/AgentRegistration").ExecutableAgentBinding["model"];
+} ? import("@effect-agent/thread/DurableAgentRuntime").DurableWorkerRequirements<{
+  readonly definition: D;
+  readonly model: M;
+}> : never : never : never) | (Entries[number] extends (infer T_5) ? T_5 extends Entries[number] ? T_5 extends {
+  readonly reporting: infer Reports extends ReadonlyArray<import("@effect-agent/engine/SubagentHost").WorkerReporting<unknown, unknown>>;
+} ? [Reports[number]] extends [never] ? never : Reports[number] extends import("@effect-agent/engine/SubagentHost").WorkerReporting<unknown, infer R> ? Exclude<R, import("effect/Scope").Scope> : never : never : never : never), import("effect/Scope").Scope>, import("@effect-agent/thread/DurableAgentRuntime").DurableRuntimeConfig | MessageDeliveryStore | import("@effect-agent/thread/Schedule").ScheduleStore | import("@effect-agent/thread/SubmissionLedger").SubmissionLedger | import("@effect-agent/thread/ThreadStore").ThreadStore | import("@effect-agent/thread/WakeScheduler").WakeScheduler>, import("@effect-agent/thread/DurableFailpoint").DurableRuntimeFailpoint | NodeWakeSchedulerConfig | import("@effect-agent/thread/ToolReconciler").ToolReconciler>, import("effect/Crypto").Crypto | import("effect/unstable/sql/SqlClient").SqlClient | import("@effect/sql-sqlite-node/SqliteClient").SqliteClient | import("@effect-agent/storage-sqlite/SqliteStorageConfig").SqliteStorageConfig | import("@effect-agent/storage-sqlite/SqliteStorageFailpoint").SqliteStorageFailpoint>, NodeDurableAgentRuntimeConfig>, import("@effect-agent/engine/RunOptions").RunContextPreparation | import("@effect-agent/engine/RunOptions").RunToolAuthorization>>;
+/**
+ * Supervise the host's existing workers without starting another pool. Use with
+ * `Effect.provide(HostLive)` and `NodeRuntime.runMain`; race it with a server Effect when
+ * the same process also serves requests. Unlike `Layer.launch`, this observes worker failures.
+ */
+declare const run: Effect.Effect<void, DurableBindingFailure | DurableWorkerFailure, NodeDurableHost>;
+//#endregion
+export { AdmissionClosed, NodeDurableHost, layer, run, NodeDurableHost_d_exports as t };
+//# sourceMappingURL=NodeDurableHost.d.mts.map

package/dist/NodeDurableHost.mjs

@@ -0,0 +1,2 @@
+import { a as run, i as layer, n as NodeDurableHost, t as AdmissionClosed } from "./NodeDurableHost-BMSajuQn.mjs";
+export { AdmissionClosed, NodeDurableHost, layer, run };

package/dist/NodeScheduling.d.mts

@@ -0,0 +1,22 @@
+import { NodeDurableHost } from "./NodeDurableHost.mjs";
+import { ScheduleAuthorizer, ScheduleStore, ScheduleValidationError, ScheduleWake, SchedulingLimits } from "@effect-agent/thread/Schedule";
+import { Layer } from "effect";
+import { Scheduling } from "@effect-agent/thread/Scheduling";
+declare namespace NodeScheduling_d_exports {
+  export { NodeScheduling, NodeSchedulingOptions, nodeScheduleWakeLayer };
+}
+/** One bounded hint slot for the single supported Node scheduler. Indexed polling repairs loss. */
+declare const nodeScheduleWakeLayer: Layer.Layer<ScheduleWake>;
+interface NodeSchedulingOptions {
+  readonly limits?: SchedulingLimits | undefined;
+}
+/**
+ * Optional Scope-owned Node scheduling service and driver. The caller must provide the existing
+ * host, its SQLite ScheduleStore, and an explicit ScheduleAuthorizer.
+ */
+declare class NodeScheduling {
+  static layer(options?: NodeSchedulingOptions): Layer.Layer<Scheduling, ScheduleValidationError, NodeDurableHost | ScheduleStore | ScheduleAuthorizer>;
+}
+//#endregion
+export { NodeScheduling, NodeSchedulingOptions, nodeScheduleWakeLayer, NodeScheduling_d_exports as t };
+//# sourceMappingURL=NodeScheduling.d.mts.map

package/dist/NodeScheduling.mjs

@@ -0,0 +1,59 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+import { nodeScheduledInputAdmissionLayer } from "./NodeSubscriptions.mjs";
+import { ScheduleStorageError, ScheduleStore, ScheduleWake, defaultSchedulingLimits } from "@effect-agent/thread/Schedule";
+import { NodeCrypto } from "@effect/platform-node";
+import { Cause, Duration, Effect, Layer, Option, PubSub, Result } from "effect";
+import { ScheduleDriver, Scheduling } from "@effect-agent/thread/Scheduling";
+//#region src/NodeScheduling.ts
+var NodeScheduling_exports = /* @__PURE__ */ __exportAll({
+	NodeScheduling: () => NodeScheduling,
+	nodeScheduleWakeLayer: () => nodeScheduleWakeLayer
+});
+/** One bounded hint slot for the single supported Node scheduler. Indexed polling repairs loss. */
+const nodeScheduleWakeLayer = Layer.effect(ScheduleWake, Effect.gen(function* () {
+	const hints = yield* PubSub.sliding(1);
+	const subscription = yield* PubSub.subscribe(hints);
+	yield* Effect.addFinalizer(() => PubSub.shutdown(hints));
+	return ScheduleWake.of({
+		notify: PubSub.publish(hints, void 0).pipe(Effect.asVoid),
+		await: PubSub.take(subscription)
+	});
+}));
+const reportPassFailure = (cause) => Cause.hasInterruptsOnly(cause) ? Effect.interrupt : Effect.logWarning("Node scheduling pass failed").pipe(Effect.annotateLogs({ failureTag: Option.match(Cause.findErrorOption(cause), {
+	onNone: () => "Defect",
+	onSome: (error) => error._tag
+}) }), Effect.as(false));
+const nodeSchedulingDriverLayer = (limits) => Layer.effectDiscard(Effect.gen(function* () {
+	const scheduling = yield* ScheduleDriver;
+	const store = yield* ScheduleStore;
+	const wake = yield* ScheduleWake;
+	const run = Effect.gen(function* () {
+		while (true) {
+			const passSucceeded = yield* scheduling.runDue().pipe(Effect.map((pass) => pass.failed === 0), Effect.catchCause(reportPassFailure));
+			const deadlineResult = passSucceeded ? yield* store.nextDeadline().pipe(Effect.result) : Result.fail(ScheduleStorageError.make({
+				operation: "driver pass",
+				reason: "unavailable"
+			}));
+			if (Result.isFailure(deadlineResult) && passSucceeded) yield* Effect.logWarning("Node scheduling deadline query failed");
+			const nowMillis = yield* Effect.clockWith((clock) => clock.currentTimeMillis);
+			const deadlineDelay = Result.isSuccess(deadlineResult) && deadlineResult.success !== null ? Math.max(0, deadlineResult.success - nowMillis) : limits.recoveryPollMillis;
+			const delay = Math.min(deadlineDelay, limits.recoveryPollMillis);
+			yield* Effect.raceFirst(wake.await, Effect.sleep(Duration.millis(delay)));
+		}
+	});
+	yield* Effect.forkScoped(run);
+}));
+/**
+* Optional Scope-owned Node scheduling service and driver. The caller must provide the existing
+* host, its SQLite ScheduleStore, and an explicit ScheduleAuthorizer.
+*/
+var NodeScheduling = class {
+	static layer(options = {}) {
+		const limits = options.limits ?? defaultSchedulingLimits;
+		return nodeSchedulingDriverLayer(limits).pipe(Layer.provide(ScheduleDriver.layer(limits)), Layer.merge(Scheduling.layer(limits))).pipe(Layer.provide(Layer.mergeAll(nodeScheduledInputAdmissionLayer, nodeScheduleWakeLayer, NodeCrypto.layer)));
+	}
+};
+//#endregion
+export { NodeScheduling, nodeScheduleWakeLayer, NodeScheduling_exports as t };
+
+//# sourceMappingURL=NodeScheduling.mjs.map

package/dist/NodeScheduling.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeScheduling.mjs","names":[],"sources":["../src/NodeScheduling.ts"],"sourcesContent":["import {\n  type ScheduleAuthorizer,\n  type SchedulingLimits,\n  ScheduleStorageError,\n  ScheduleStore,\n  type ScheduleValidationError,\n  ScheduleWake,\n  defaultSchedulingLimits,\n} from \"@effect-agent/thread/Schedule\";\nimport {\n  type ScheduleProcessFailure,\n  Scheduling,\n  ScheduleDriver,\n} from \"@effect-agent/thread/Scheduling\";\nimport { NodeCrypto } from \"@effect/platform-node\";\nimport { Cause, Duration, Effect, Layer, Option, PubSub, Result } from \"effect\";\n\nimport type { NodeDurableHost } from \"./NodeDurableHost.ts\";\nimport { nodeScheduledInputAdmissionLayer } from \"./NodeSubscriptions.ts\";\n\n/** One bounded hint slot for the single supported Node scheduler. Indexed polling repairs loss. */\nexport const nodeScheduleWakeLayer: Layer.Layer<ScheduleWake> = Layer.effect(\n  ScheduleWake,\n  Effect.gen(function* () {\n    const hints = yield* PubSub.sliding<void>(1);\n    const subscription = yield* PubSub.subscribe(hints);\n\n    yield* Effect.addFinalizer(() => PubSub.shutdown(hints));\n\n    return ScheduleWake.of({\n      notify: PubSub.publish(hints, undefined).pipe(Effect.asVoid),\n      await: PubSub.take(subscription),\n    });\n  }),\n);\n\nconst reportPassFailure = (cause: Cause.Cause<ScheduleProcessFailure>): Effect.Effect<boolean> =>\n  Cause.hasInterruptsOnly(cause)\n    ? Effect.interrupt\n    : Effect.logWarning(\"Node scheduling pass failed\").pipe(\n        Effect.annotateLogs({\n          failureTag: Option.match(Cause.findErrorOption(cause), {\n            onNone: () => \"Defect\",\n            onSome: (error) => error._tag,\n          }),\n        }),\n        Effect.as(false),\n      );\n\nconst nodeSchedulingDriverLayer = (\n  limits: SchedulingLimits,\n): Layer.Layer<never, never, ScheduleDriver | ScheduleStore | ScheduleWake> =>\n  Layer.effectDiscard(\n    Effect.gen(function* () {\n      const scheduling = yield* ScheduleDriver;\n      const store = yield* ScheduleStore;\n      const wake = yield* ScheduleWake;\n\n      const run = Effect.gen(function* () {\n        while (true) {\n          const passSucceeded = yield* scheduling.runDue().pipe(\n            Effect.map((pass) => pass.failed === 0),\n            Effect.catchCause(reportPassFailure),\n          );\n\n          const deadlineResult = passSucceeded\n            ? yield* store.nextDeadline().pipe(Effect.result)\n            : Result.fail(\n                ScheduleStorageError.make({ operation: \"driver pass\", reason: \"unavailable\" }),\n              );\n\n          if (Result.isFailure(deadlineResult) && passSucceeded) {\n            yield* Effect.logWarning(\"Node scheduling deadline query failed\");\n          }\n          const nowMillis = yield* Effect.clockWith((clock) => clock.currentTimeMillis);\n\n          const deadlineDelay =\n            Result.isSuccess(deadlineResult) && deadlineResult.success !== null\n              ? Math.max(0, deadlineResult.success - nowMillis)\n              : limits.recoveryPollMillis;\n\n          const delay = Math.min(deadlineDelay, limits.recoveryPollMillis);\n\n          yield* Effect.raceFirst(wake.await, Effect.sleep(Duration.millis(delay)));\n        }\n      });\n\n      yield* Effect.forkScoped(run);\n    }),\n  );\n\nexport interface NodeSchedulingOptions {\n  readonly limits?: SchedulingLimits | undefined;\n}\n\n/**\n * Optional Scope-owned Node scheduling service and driver. The caller must provide the existing\n * host, its SQLite ScheduleStore, and an explicit ScheduleAuthorizer.\n */\nexport class NodeScheduling {\n  static layer(\n    options: NodeSchedulingOptions = {},\n  ): Layer.Layer<\n    Scheduling,\n    ScheduleValidationError,\n    NodeDurableHost | ScheduleStore | ScheduleAuthorizer\n  > {\n    const limits = options.limits ?? defaultSchedulingLimits;\n\n    const schedulingWithDriver = nodeSchedulingDriverLayer(limits).pipe(\n      Layer.provide(ScheduleDriver.layer(limits)),\n      Layer.merge(Scheduling.layer(limits)),\n    );\n\n    return schedulingWithDriver.pipe(\n      Layer.provide(\n        Layer.mergeAll(nodeScheduledInputAdmissionLayer, nodeScheduleWakeLayer, NodeCrypto.layer),\n      ),\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAqBA,MAAa,wBAAmD,MAAM,OACpE,cACA,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO,OAAO,QAAc,CAAC;CAC3C,MAAM,eAAe,OAAO,OAAO,UAAU,KAAK;CAElD,OAAO,OAAO,mBAAmB,OAAO,SAAS,KAAK,CAAC;CAEvD,OAAO,aAAa,GAAG;EACrB,QAAQ,OAAO,QAAQ,OAAO,KAAA,CAAS,CAAC,CAAC,KAAK,OAAO,MAAM;EAC3D,OAAO,OAAO,KAAK,YAAY;CACjC,CAAC;AACH,CAAC,CACH;AAEA,MAAM,qBAAqB,UACzB,MAAM,kBAAkB,KAAK,IACzB,OAAO,YACP,OAAO,WAAW,6BAA6B,CAAC,CAAC,KAC/C,OAAO,aAAa,EAClB,YAAY,OAAO,MAAM,MAAM,gBAAgB,KAAK,GAAG;CACrD,cAAc;CACd,SAAS,UAAU,MAAM;AAC3B,CAAC,EACH,CAAC,GACD,OAAO,GAAG,KAAK,CACjB;AAEN,MAAM,6BACJ,WAEA,MAAM,cACJ,OAAO,IAAI,aAAa;CACtB,MAAM,aAAa,OAAO;CAC1B,MAAM,QAAQ,OAAO;CACrB,MAAM,OAAO,OAAO;CAEpB,MAAM,MAAM,OAAO,IAAI,aAAa;EAClC,OAAO,MAAM;GACX,MAAM,gBAAgB,OAAO,WAAW,OAAO,CAAC,CAAC,KAC/C,OAAO,KAAK,SAAS,KAAK,WAAW,CAAC,GACtC,OAAO,WAAW,iBAAiB,CACrC;GAEA,MAAM,iBAAiB,gBACnB,OAAO,MAAM,aAAa,CAAC,CAAC,KAAK,OAAO,MAAM,IAC9C,OAAO,KACL,qBAAqB,KAAK;IAAE,WAAW;IAAe,QAAQ;GAAc,CAAC,CAC/E;GAEJ,IAAI,OAAO,UAAU,cAAc,KAAK,eACtC,OAAO,OAAO,WAAW,uCAAuC;GAElE,MAAM,YAAY,OAAO,OAAO,WAAW,UAAU,MAAM,iBAAiB;GAE5E,MAAM,gBACJ,OAAO,UAAU,cAAc,KAAK,eAAe,YAAY,OAC3D,KAAK,IAAI,GAAG,eAAe,UAAU,SAAS,IAC9C,OAAO;GAEb,MAAM,QAAQ,KAAK,IAAI,eAAe,OAAO,kBAAkB;GAE/D,OAAO,OAAO,UAAU,KAAK,OAAO,OAAO,MAAM,SAAS,OAAO,KAAK,CAAC,CAAC;EAC1E;CACF,CAAC;CAED,OAAO,OAAO,WAAW,GAAG;AAC9B,CAAC,CACH;;;;;AAUF,IAAa,iBAAb,MAA4B;CAC1B,OAAO,MACL,UAAiC,CAAC,GAKlC;EACA,MAAM,SAAS,QAAQ,UAAU;EAOjC,OAL6B,0BAA0B,MAAM,CAAC,CAAC,KAC7D,MAAM,QAAQ,eAAe,MAAM,MAAM,CAAC,GAC1C,MAAM,MAAM,WAAW,MAAM,MAAM,CAAC,CAGZ,CAAC,CAAC,KAC1B,MAAM,QACJ,MAAM,SAAS,kCAAkC,uBAAuB,WAAW,KAAK,CAC1F,CACF;CACF;AACF"}

package/dist/NodeSubscriptions.d.mts

@@ -0,0 +1,27 @@
+import { NodeDurableHost } from "./NodeDurableHost.mjs";
+import { ScheduledInputAdmission } from "@effect-agent/thread/Schedule";
+import { Layer } from "effect";
+import { PreparedInputAdmission } from "@effect-agent/thread/PreparedInputAdmission";
+import { EventSources } from "@effect-agent/thread/EventSource";
+import { SubscriptionAuthorizer, SubscriptionError, SubscriptionLimits, SubscriptionStore } from "@effect-agent/thread/Subscription";
+import { SubscriptionInputBindings } from "@effect-agent/thread/SubscriptionInput";
+import { SubscriptionIntake, Subscriptions } from "@effect-agent/thread/Subscriptions";
+declare namespace NodeSubscriptions_d_exports {
+  export { NodeSubscriptions, NodeSubscriptionsOptions, nodePreparedInputAdmissionLayer, nodeScheduledInputAdmissionLayer };
+}
+/** Ordinary prepared admission through the Scope-owned Node host gate. */
+declare const nodePreparedInputAdmissionLayer: Layer.Layer<PreparedInputAdmission, never, NodeDurableHost>;
+declare const nodeScheduledInputAdmissionLayer: Layer.Layer<ScheduledInputAdmission, never, NodeDurableHost>;
+interface NodeSubscriptionsOptions {
+  readonly limits?: SubscriptionLimits | undefined;
+}
+/**
+ * One Scope-owned subscription partition in the sole process owning its SQLite database.
+ * Indexed polling repairs restart and lost wake state; closing the Scope interrupts the driver.
+ */
+declare class NodeSubscriptions {
+  static layer(options?: NodeSubscriptionsOptions): Layer.Layer<Subscriptions | SubscriptionIntake, SubscriptionError, NodeDurableHost | SubscriptionStore | SubscriptionAuthorizer | EventSources | SubscriptionInputBindings>;
+}
+//#endregion
+export { NodeSubscriptions, NodeSubscriptionsOptions, nodePreparedInputAdmissionLayer, nodeScheduledInputAdmissionLayer, NodeSubscriptions_d_exports as t };
+//# sourceMappingURL=NodeSubscriptions.d.mts.map