@rivus/gateway 0.17.0 → 0.18.1

package/dist/bootstrap/pi-feishu.js

@@ -1,10 +1,11 @@
 import { S as deepFreeze$1, _ as loadMergedLocalEnvFile, a as createRivusModelManagementSocketServer, d as gatewayPackageDirectory, h as loadRivusDeploymentManifest, i as RIVUS_RELEASE_DESCRIPTOR, n as disposeRuntimeCacheEntries, o as createRivusModelManagementFailure, p as gatewaySkillsDirectory, r as invokeRuntimeControl, t as createRuntimeCache, v as resolveFeishuEndpointCredentials } from "../chunks/runtime-cache.js";
 import { t as createBackgroundSessionToolContracts } from "../chunks/background-session-authority.js";
+import { a as openTerminalBindingsStore, c as classifyFeishuCardOwnership, d as parseFeishuTerminalMessage, i as openTerminalMessageClaims, l as createFeishuTerminalDelivery, n as embeddedHerdrRouteSchema, o as terminalAgentSchema, s as createHerdrSocketClient, t as createHerdrFeishuBridgeRuntime, u as parseFeishuTerminalAction } from "../chunks/herdr-feishu-runtime.js";
 import { createRandomId, createSha256Digest, createStableId } from "@rivus/platform/identity";
 import { ATTACHMENT_RECOVERY_COMMAND, AgentEventHandlerFailed, AgentEventSinkFailed, AgentLoopFailed, AgentRunCancelled, ModelChangeBoundaryDeadlineError, RivusToolInputRejected, ToolExecutorInputRejected, ToolInvocationDenied, createAgentHarness, createAgentsMdInstructionsSource, createInvocationAuthority, createJsonlAgentEventLog, createLangfuseAgentTelemetry, createMemoryService, createProjectMemoryPromptPreparer, createRecoveryAction, createRivusMemoryToolDescriptor, createRunAdmission, createTelemetryContentRedactor, createToolBroker, createToolInputDigest, createWorkspaceInstructionsResolver, createWorkspaceRootHandle, normalizeAgentInvocation, openJsonlAgentMemoryRepository, openJsonlToolOperationLedger, remainingUntil, resolveInvocationAuthority, resolveLangfuseTelemetryConfig, restoreAgentHistory } from "@rivus/runtime";
 import { homedir, tmpdir } from "node:os";
 import { delimiter, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
-import { Cause, Deferred, Effect, Either, Exit, Fiber } from "effect";
+import { Cause, Deferred, Effect, Exit, Fiber, Result, Schema, Semaphore } from "effect";
 import { access, appendFile, chmod, constants, lstat, mkdir, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import { createHash, randomUUID } from "node:crypto";
 import { appendJsonlRecord, isRecord, loadJsonlSnapshotStore, readPersistenceFile, writeAtomicTextFile, writePersistenceFile } from "@rivus/platform/persistence";
@@ -976,7 +977,7 @@ var ModelStateRepositoryConflict = class extends Error {
 };
 function createInMemoryModelStateRepository(options) {
 	let current = cloneAndValidate$1(options.initial);
-	const serial = Effect.unsafeMakeSemaphore(1);
+	const serial = Semaphore.makeUnsafe(1);
 	return {
 		load: () => Effect.sync(() => structuredClone(current)),
 		persist: (input) => serial.withPermits(1)(Effect.uninterruptible(Effect.gen(function* () {
@@ -1071,9 +1072,9 @@ function createModelChangeRunBoundary(options) {
 		admission.fence();
 		const remaining = remainingUntil(options.clock, input.deadlineAt);
 		if (remaining <= 0) return yield* Effect.fail(new ModelChangeBoundaryDeadlineError("Model change boundary deadline has passed"));
-		yield* admission.whenDrained().pipe(Effect.timeoutFail({
+		yield* admission.whenDrained().pipe(Effect.timeoutOrElse({
 			duration: Math.min(remaining, 2147483647),
-			onTimeout: () => new ModelChangeBoundaryDeadlineError("Active Runs did not drain before the model change deadline")
+			orElse: () => Effect.fail(new ModelChangeBoundaryDeadlineError("Active Runs did not drain before the model change deadline"))
 		}));
 		return {
 			activeRuns: 0,
@@ -1099,7 +1100,7 @@ const TOOL_VERSION = "1";
 /** Reuses Broker policy, exact approval binding and its durable operation ledger. */
 function createModelChangeAuthorization(options) {
 	if (typeof options.managementAgentId !== "string" || options.managementAgentId.trim() === "") throw new Error("managementAgentId must be a non-empty string");
-	const serial = Effect.unsafeMakeSemaphore(1);
+	const serial = Semaphore.makeUnsafe(1);
 	const digest = (value) => createToolInputDigest(value, options.digest);
 	const admissions = /* @__PURE__ */ new Map();
 	const broker = createToolBroker({
@@ -1666,46 +1667,46 @@ function executeModelChangePending(options, initialState, initialPending) {
 			phase: "waiting-for-boundary"
 		});
 		boundaryHeld = true;
-		const boundary = yield* Effect.either(options.boundary.waitForSafeBoundary({
+		const boundary = yield* Effect.result(options.boundary.waitForSafeBoundary({
 			deadlineAt: pending.budget.deadlineAt,
 			requestId: pending.request.requestId
 		}));
-		if (Either.isLeft(boundary)) return yield* saveFailed(modelErrorFrom(boundary.left, "boundary"));
-		const authorization = yield* Effect.either(revalidateAcceptedBinding());
-		if (Either.isLeft(authorization)) return yield* saveFailed(modelErrorFrom(authorization.left, "boundary"));
-		if (authorization.right.status === "rejected") return yield* saveFailed(modelError(authorization.right.code, authorization.right.reason, "boundary"));
+		if (Result.isFailure(boundary)) return yield* saveFailed(modelErrorFrom(boundary.failure, "boundary"));
+		const authorization = yield* Effect.result(revalidateAcceptedBinding());
+		if (Result.isFailure(authorization)) return yield* saveFailed(modelErrorFrom(authorization.failure, "boundary"));
+		if (authorization.success.status === "rejected") return yield* saveFailed(modelError(authorization.success.code, authorization.success.reason, "boundary"));
 		yield* savePending({
 			...pending,
 			phase: "validating"
 		});
 		const context = runtimeContext(state, pending);
-		const drained = yield* Effect.either(options.runtime.drain({
+		const drained = yield* Effect.result(options.runtime.drain({
 			...context,
 			deadlineAt: pending.budget.deadlineAt
 		}));
-		if (Either.isLeft(drained)) return yield* restoreAfterFailure({
+		if (Result.isFailure(drained)) return yield* restoreAfterFailure({
 			context,
-			error: modelErrorFrom(drained.left, "activation"),
+			error: modelErrorFrom(drained.failure, "activation"),
 			options,
 			saveFinal,
 			savePending,
 			state: () => state,
 			pending: () => pending
 		});
-		const validated = yield* Effect.either(options.runtime.validate({
+		const validated = yield* Effect.result(options.runtime.validate({
 			context,
 			budget: executionBudget
 		}));
-		if (Either.isLeft(validated)) return yield* restoreAfterFailure({
+		if (Result.isFailure(validated)) return yield* restoreAfterFailure({
 			context,
-			error: modelErrorFrom(validated.left, "validation"),
+			error: modelErrorFrom(validated.failure, "validation"),
 			options,
 			saveFinal,
 			savePending,
 			state: () => state,
 			pending: () => pending
 		});
-		if (!validated.right.passed || !sameTarget(validated.right.model, target)) return yield* restoreAfterFailure({
+		if (!validated.success.passed || !sameTarget(validated.success.model, target)) return yield* restoreAfterFailure({
 			context,
 			error: modelError("validation_failed", "Model validation did not prove the requested target", "validation"),
 			options,
@@ -1714,25 +1715,25 @@ function executeModelChangePending(options, initialState, initialPending) {
 			state: () => state,
 			pending: () => pending
 		});
-		const activationAuthorization = yield* Effect.either(revalidateAcceptedBinding());
-		if (Either.isLeft(activationAuthorization)) return yield* saveFailed(modelErrorFrom(activationAuthorization.left, "activation"));
-		if (activationAuthorization.right.status === "rejected") return yield* saveFailed(modelError(activationAuthorization.right.code, activationAuthorization.right.reason, "activation"));
+		const activationAuthorization = yield* Effect.result(revalidateAcceptedBinding());
+		if (Result.isFailure(activationAuthorization)) return yield* saveFailed(modelErrorFrom(activationAuthorization.failure, "activation"));
+		if (activationAuthorization.success.status === "rejected") return yield* saveFailed(modelError(activationAuthorization.success.code, activationAuthorization.success.reason, "activation"));
 		yield* savePending({
 			...pending,
 			phase: "activating"
 		});
-		const activated = yield* Effect.either(options.runtime.activate({
+		const activated = yield* Effect.result(options.runtime.activate({
 			beforeApply: () => Effect.gen(function* () {
 				const guard = yield* revalidateAcceptedBinding();
 				if (guard.status === "rejected") return yield* Effect.fail(new Error(guard.reason));
 			}),
 			context,
-			validation: validated.right,
+			validation: validated.success,
 			budget: executionBudget
 		}));
-		if (Either.isLeft(activated)) return yield* restoreAfterFailure({
+		if (Result.isFailure(activated)) return yield* restoreAfterFailure({
 			context,
-			error: modelErrorFrom(activated.left, "activation"),
+			error: modelErrorFrom(activated.failure, "activation"),
 			options,
 			saveFinal,
 			savePending,
@@ -1755,7 +1756,7 @@ function executeModelChangePending(options, initialState, initialPending) {
 		const now = requireNow(options);
 		const applied = {
 			...pendingReceipt(state, pending, now),
-			current: validated.right.model,
+			current: validated.success.model,
 			phase: options.notification ? "notifying" : "completed",
 			previous: state.current,
 			revision: state.revision + 1,
@@ -1768,7 +1769,7 @@ function executeModelChangePending(options, initialState, initialPending) {
 		const { pending: _pending, recoveryRequired: _recoveryRequired, ...stateWithoutTransient } = state;
 		const appliedState = {
 			...stateWithoutTransient,
-			current: validated.right.model,
+			current: validated.success.model,
 			previous: state.current,
 			requests: {
 				...state.requests,
@@ -1777,28 +1778,28 @@ function executeModelChangePending(options, initialState, initialPending) {
 			revision: state.revision + 1,
 			updatedAt: now
 		};
-		const committed = yield* Effect.either(persistState(options, appliedState));
-		if (Either.isLeft(committed)) return yield* restoreAfterFailure({
+		const committed = yield* Effect.result(persistState(options, appliedState));
+		if (Result.isFailure(committed)) return yield* restoreAfterFailure({
 			context,
-			error: modelErrorFrom(committed.left, "commit"),
+			error: modelErrorFrom(committed.failure, "commit"),
 			options,
 			saveFinal,
 			savePending,
 			state: () => state,
 			pending: () => pending
 		});
-		state = committed.right;
+		state = committed.success;
 		pending = {
 			...pending,
 			phase: "completed",
 			updatedAt: now
 		};
-		const release = yield* Effect.either(options.runtime.releasePrevious({
+		const release = yield* Effect.result(options.runtime.releasePrevious({
 			...context,
 			deadlineAt: pending.budget.deadlineAt
 		}));
-		if (Either.isLeft(release)) {
-			const releaseError = modelErrorFrom(release.left, "activation");
+		if (Result.isFailure(release)) {
+			const releaseError = modelErrorFrom(release.failure, "activation");
 			const withReleaseError = {
 				...applied,
 				error: releaseError,
@@ -1834,16 +1835,16 @@ function restoreAfterFailure(input) {
 			const { unknownPaidCallId: _unknownPaidCallId, ...withoutUnknown } = marked;
 			yield* input.savePending({ ...withoutUnknown });
 		}
-		const restored = yield* Effect.either(input.options.runtime.restore({
+		const restored = yield* Effect.result(input.options.runtime.restore({
 			budget: executionBudgetForRecovery(input),
 			context: input.context,
 			reason: input.error.message
 		}));
-		if (Either.isRight(restored) && !input.pending().unknownPaidCallId && Object.keys(input.pending().budget.reservations).length === 0) {
+		if (Result.isSuccess(restored) && !input.pending().unknownPaidCallId && Object.keys(input.pending().budget.reservations).length === 0) {
 			const receipt = restoredReceipt(input.state(), input.pending(), input.error, requireNow(input.options));
 			return yield* input.saveFinal(receipt);
 		}
-		const recoveryError = Either.isLeft(restored) ? modelErrorFrom(restored.left, "restore") : modelError("recovery_unknown", "Model restore outcome is unknown", "restore", "unknown");
+		const recoveryError = Result.isFailure(restored) ? modelErrorFrom(restored.failure, "restore") : modelError("recovery_unknown", "Model restore outcome is unknown", "restore", "unknown");
 		const receipt = recoveryReceipt(input.state(), input.pending(), recoveryError, requireNow(input.options));
 		return yield* input.saveFinal(receipt, true);
 	});
@@ -1950,7 +1951,7 @@ function recoverModelChangePending(options, initialState, initialPending) {
 			updatedAt: requireNow(options)
 		};
 		state = yield* persistState(options, stateWithPending(state, pending, pendingReceipt(state, pending, pending.updatedAt)));
-		const restored = yield* Effect.either(options.runtime.restore({
+		const restored = yield* Effect.result(options.runtime.restore({
 			budget: executionBudgetForRecovery({
 				options,
 				pending: () => pending,
@@ -1964,11 +1965,11 @@ function recoverModelChangePending(options, initialState, initialPending) {
 			context,
 			reason: "recovering an interrupted Model change"
 		}));
-		if (Either.isRight(restored) && !pending.unknownPaidCallId && Object.keys(pending.budget.reservations).length === 0) {
+		if (Result.isSuccess(restored) && !pending.unknownPaidCallId && Object.keys(pending.budget.reservations).length === 0) {
 			const receipt = restoredReceipt(state, pending, void 0, requireNow(options));
 			return yield* persistRecoveryReceipt(options, state, receipt);
 		}
-		const error = Either.isLeft(restored) ? modelErrorFrom(restored.left, "restore") : modelError("recovery_unknown", "interrupted Model restore outcome is unknown", "restore", "unknown");
+		const error = Result.isFailure(restored) ? modelErrorFrom(restored.failure, "restore") : modelError("recovery_unknown", "interrupted Model restore outcome is unknown", "restore", "unknown");
 		const receipt = recoveryReceipt(state, pending, error, requireNow(options));
 		return yield* persistRecoveryReceipt(options, state, receipt, error);
 	});
@@ -2022,7 +2023,7 @@ function notifyModelChangeReceipt(options, requestId, retry, withModelSerial) {
 	return Effect.gen(function* () {
 		const attempted = yield* withModelSerial(beginNotificationAttempt(options, requestId));
 		if (!attempted) return;
-		return yield* withModelSerial(finishNotificationAttempt(options, requestId, attempted, yield* Effect.either(notification.notify({
+		return yield* withModelSerial(finishNotificationAttempt(options, requestId, attempted, yield* Effect.result(notification.notify({
 			receipt: toPublicReceipt(attempted),
 			retry
 		}))));
@@ -2051,7 +2052,7 @@ function finishNotificationAttempt(options, requestId, attempted, delivered) {
 		const latest = state.requests[requestId];
 		if (!latest || !latest.notification || latest.notification.status === "sent") return latest;
 		const updatedAt = requireNow(options);
-		return (yield* persistReceiptPatch(options, state, Either.isRight(delivered) ? {
+		return (yield* persistReceiptPatch(options, state, Result.isSuccess(delivered) ? {
 			...latest,
 			notification: {
 				...latest.notification,
@@ -2083,8 +2084,8 @@ function persistReceiptPatch(options, state, receipt) {
 //#endregion
 //#region src/core/application/deployment/model/model-change-coordinator.ts
 function createModelChangeCoordinator(options) {
-	const serial = Effect.unsafeMakeSemaphore(1);
-	const notificationSerial = Effect.unsafeMakeSemaphore(1);
+	const serial = Semaphore.makeUnsafe(1);
+	const notificationSerial = Semaphore.makeUnsafe(1);
 	return {
 		accept: (submission, transport) => serial.withPermits(1)(Effect.uninterruptible(acceptRequest(options, submission, transport))).pipe(Effect.flatMap((receipt) => notifyPendingReceipt(options, receipt, serial, notificationSerial))),
 		recover: () => serial.withPermits(1)(Effect.uninterruptible(recoverModelChangeState(options))).pipe(Effect.flatMap(() => retryPendingNotifications(options, serial, notificationSerial))),
@@ -2099,7 +2100,7 @@ function createModelChangeCoordinator(options) {
 		}),
 		status: (requestId) => Effect.gen(function* () {
 			const state = yield* loadState$1(options);
-			const actual = options.runtime.current ? yield* options.runtime.current().pipe(Effect.catchAll(() => Effect.succeed(void 0))) : void 0;
+			const actual = options.runtime.current ? yield* options.runtime.current().pipe(Effect.catch(() => Effect.succeed(void 0))) : void 0;
 			const receipt = requestId === void 0 ? void 0 : state.requests[requestId];
 			if (requestId !== void 0 && !receipt) return yield* Effect.fail(new ModelChangeNotFound(`unknown Model change request: ${requestId}`));
 			return toStatusView(state, actual, receipt);
@@ -2735,14 +2736,14 @@ function createBackgroundSessionRunStep(input) {
 				})));
 				return yield* Effect.raceFirst(run, waitForAbort$2(signal));
 			}).pipe(Effect.onExit((exit) => Effect.suspend(() => {
-				cancellationRequested = signal.aborted || Exit.isInterrupted(exit);
+				cancellationRequested = signal.aborted || Exit.hasInterrupts(exit);
 				return cancellationRequested ? cancelAcceptedRun() : Effect.void;
 			})));
 		});
 	};
 }
 function waitForAbort$2(signal) {
-	return Effect.async((resume) => {
+	return Effect.callback((resume) => {
 		const aborted = () => resume(Effect.fail(signal.reason ?? /* @__PURE__ */ new Error("background session step aborted")));
 		if (signal.aborted) {
 			aborted();
@@ -4494,7 +4495,7 @@ function createFeishuCardRollover(options) {
 	const latestTextByRun = /* @__PURE__ */ new Map();
 	const generationBaselineByRun = /* @__PURE__ */ new Map();
 	const liveRuns = /* @__PURE__ */ new Map();
-	const semaphore = Effect.unsafeMakeSemaphore(1);
+	const semaphore = Semaphore.makeUnsafe(1);
 	const exclusive = (effect) => semaphore.withPermits(1)(effect);
 	const exclusiveDeferred = (factory) => semaphore.withPermits(1)(Effect.suspend(factory));
 	const record = (event, at) => {
@@ -4508,7 +4509,7 @@ function createFeishuCardRollover(options) {
 	const failHandoffAndRecord = (input) => options.store.failHandoff({
 		failedAt: input.failedAt,
 		runId: input.runId
-	}).pipe(Effect.catchAll((storeError) => recordNow({
+	}).pipe(Effect.catch((storeError) => recordNow({
 		error: storeError,
 		runId: input.runId,
 		type: "presentation_write_failed"
@@ -4548,7 +4549,7 @@ function createFeishuCardRollover(options) {
 		if (run && acceptsProgress) {
 			const now = yield* options.clock.now;
 			if (visibleChanged && isCardPresentationHandoffDue(chain, now.toISOString())) {
-				if (yield* options.publisher.flush(action.runId).pipe(Effect.map(() => true), Effect.catchAll((error) => recordNow({
+				if (yield* options.publisher.flush(action.runId).pipe(Effect.map(() => true), Effect.catch((error) => recordNow({
 					error,
 					runId: action.runId,
 					type: "presentation_write_failed"
@@ -4605,7 +4606,7 @@ function createFeishuCardRollover(options) {
 		})), Effect.tap(() => options.store.markTerminal({
 			runId: action.runId,
 			terminalReceiptId: `${action.runId}:${action.type}`
-		}).pipe(Effect.catchAll((error) => recordNow({
+		}).pipe(Effect.catch((error) => recordNow({
 			error,
 			runId: action.runId,
 			type: "presentation_write_failed"
@@ -4643,7 +4644,7 @@ function createFeishuCardRollover(options) {
 		const start = yield* options.store.beginHandoff({
 			handoffAt: startedAt.toISOString(),
 			runId
-		}).pipe(Effect.catchAll(() => Effect.succeed(void 0)));
+		}).pipe(Effect.catch(() => Effect.succeed(void 0)));
 		if (!start) return {
 			reason: "not-streaming",
 			status: "skipped"
@@ -4667,7 +4668,7 @@ function createFeishuCardRollover(options) {
 			generation,
 			presentationId: successorId,
 			run
-		}).pipe(Effect.map((target) => ({ target })), Effect.catchAll((error) => failHandoffAndRecord({
+		}).pipe(Effect.map((target) => ({ target })), Effect.catch((error) => failHandoffAndRecord({
 			error,
 			failedAt: startedAt.toISOString(),
 			generation,
@@ -4689,7 +4690,7 @@ function createFeishuCardRollover(options) {
 				leaseDeadlineAt: leaseDeadline(adoptedAt),
 				presentationId: successorId
 			}
-		}).pipe(Effect.map((presentation) => ({ presentation })), Effect.catchAll((error) => failHandoffAndRecord({
+		}).pipe(Effect.map((presentation) => ({ presentation })), Effect.catch((error) => failHandoffAndRecord({
 			error,
 			failedAt: adoptedAt.toISOString(),
 			generation,
@@ -4980,7 +4981,7 @@ function createCoalescingFeishuPublisher(options) {
 //#region src/adapters/feishu/card-presentation/streaming/feishu-rate-limited-publisher.ts
 function createRateLimitedFeishuPublisher(options) {
 	let hasPublished = false;
-	const semaphore = Effect.unsafeMakeSemaphore(1);
+	const semaphore = Semaphore.makeUnsafe(1);
 	return { publish: (action) => semaphore.withPermits(1)(Effect.gen(function* () {
 		if (hasPublished) yield* options.sleep(options.minIntervalMs);
 		yield* options.publisher.publish(action);
@@ -5156,7 +5157,7 @@ function createFeishuCardKitOpenApiClient(options) {
 	const updateTerminal = (request, status) => updateWholeCard(baseUrl, agentName, request, status, call, options.progressDisplay).pipe(Effect.tap(() => Effect.sync(() => streamingClosedCards.delete(request.cardId))));
 	const publishStreamingUpdate = (cardId, update) => {
 		if (streamingClosedCards.has(cardId)) return Effect.void;
-		return update.pipe(Effect.catchAll((error) => {
+		return update.pipe(Effect.catch((error) => {
 			if (!isStreamingClosed(error)) return Effect.fail(error);
 			return Effect.sync(() => {
 				streamingClosedCards.add(cardId);
@@ -5313,7 +5314,7 @@ function createCardDeliveryLedger(repository) {
 //#region src/adapters/outbound/persistence/card-delivery/in-memory-card-delivery-repository.ts
 function createInMemoryCardDeliveryRepository(options = {}) {
 	const records = new Map(options.initial?.map((record) => [record.runId, cloneRecord(record)]) ?? []);
-	const semaphore = Effect.unsafeMakeSemaphore(1);
+	const semaphore = Semaphore.makeUnsafe(1);
 	return {
 		get: (runId) => cloneOptional(records.get(runId)),
 		transact: (runId, decide) => semaphore.withPermits(1)(Effect.uninterruptible(Effect.gen(function* () {
@@ -5812,7 +5813,7 @@ function createFeishuCardDeliveryReconciler(options) {
 		let skipped = 0;
 		for (const [runId, action] of terminalByRun) {
 			if (options.ledger.isTerminalPublished(runId)) continue;
-			yield* options.publish(action).pipe(Effect.catchAll((error) => {
+			yield* options.publish(action).pipe(Effect.catch((error) => {
 				if (isMissingPresentationError(error)) {
 					skipped += 1;
 					return Effect.void;
@@ -6046,7 +6047,7 @@ function createConfiguredFeishuCardRolloverRuntime(options) {
 		transport: {
 			running: () => supervisor.running() && streaming.running(),
 			start: async () => {
-				await Effect.runPromise(supervisor.recover().pipe(Effect.catchAll((error) => {
+				await Effect.runPromise(supervisor.recover().pipe(Effect.catch((error) => {
 					const reported = options.onError?.(error);
 					return reported instanceof Promise ? Effect.promise(() => reported) : Effect.void;
 				})));
@@ -6262,7 +6263,7 @@ function readResource(baseUrl, fetchImpl, getTenantAccessToken, input) {
 			message: "Feishu tenant access token is unavailable"
 		})));
 		if (input.signal?.aborted === true) return yield* Effect.fail(cancelledError$1());
-		return yield* Effect.async((resume, effectSignal) => {
+		return yield* Effect.callback((resume, effectSignal) => {
 			const controller = new AbortController();
 			const onAbort = () => controller.abort();
 			const cleanupCaller = addAbortListener(input.signal, onAbort);
@@ -7481,14 +7482,14 @@ function readPages(readPage, input, limits) {
 				...pageToken === void 0 ? {} : { pageToken },
 				...input.signal ? { signal: input.signal } : {}
 			};
-			const pageResult = yield* Effect.either(readPageWithSignal(readPage, request, input.signal));
+			const pageResult = yield* Effect.result(readPageWithSignal(readPage, request, input.signal));
 			pageCount += 1;
-			if (pageResult._tag === "Left") {
+			if (pageResult._tag === "Failure") {
 				if (input.signal !== void 0 && input.signal.aborted) return yield* Effect.fail(cancelledError());
 				notices.push(contextNotice("unavailable", "无法读取引用消息的完整内容"));
 				break;
 			}
-			const parsed = parsePage(pageResult.right);
+			const parsed = parsePage(pageResult.success);
 			if (parsed === void 0) {
 				notices.push(contextNotice("invalid_content", "引用消息接口返回结构无效"));
 				break;
@@ -7530,7 +7531,7 @@ function readPageWithSignal(readPage, request, signal) {
 	return signal === void 0 ? invoked : Effect.raceFirst(invoked, waitForAbort$1(signal));
 }
 function waitForAbort$1(signal) {
-	return Effect.async((resume) => {
+	return Effect.callback((resume) => {
 		const cancelled = Effect.fail(signal.reason ?? /* @__PURE__ */ new Error("Feishu message context was cancelled"));
 		const onAbort = () => resume(cancelled);
 		signal.addEventListener("abort", onAbort, { once: true });
@@ -8591,7 +8592,7 @@ function writeExclusiveReplacing(rootDirectory, path, bytes) {
 		flag: "wx",
 		mode: 384
 	}));
-	return Effect.tryPromise(write).pipe(Effect.catchAll((error) => error.code === "EEXIST" ? Effect.tryPromise(async () => rm(await resolveSafeWorkspacePath(rootDirectory, path), { force: true })).pipe(Effect.flatMap(() => Effect.tryPromise(write))) : Effect.fail(error)));
+	return Effect.tryPromise(write).pipe(Effect.catch((error) => error.code === "EEXIST" ? Effect.tryPromise(async () => rm(await resolveSafeWorkspacePath(rootDirectory, path), { force: true })).pipe(Effect.flatMap(() => Effect.tryPromise(write))) : Effect.fail(error)));
 }
 function verifyStoredPath(stored, rootDirectory, additionalRootDirectory) {
 	return Effect.tryPromise(async () => {
@@ -8669,7 +8670,7 @@ function materializeRecoveryOutput(input) {
 			outputPath: relativePath === "" ? outputPath : relativePath,
 			sizeBytes: bytes.byteLength
 		};
-	}).pipe(Effect.catchAll((error) => Effect.fail(attachConsumedBytes(error, input.output.sizeBytes))));
+	}).pipe(Effect.catch((error) => Effect.fail(attachConsumedBytes(error, input.output.sizeBytes))));
 }
 /** The stored record of a recovery output; the caller states where its bytes are and what they measured. */
 function recoveredAttachment(grant, mimeType, path, size, digest) {
@@ -8903,13 +8904,13 @@ function createAttachmentAccess(input) {
 			output,
 			scope: input.scope,
 			workspaceDirectory: input.workspaceDirectory
-		})), Effect.catchAll((error) => Effect.fail(attachConsumedBytes(error, output.sizeBytes))))), Effect.either, Effect.flatMap((result) => {
+		})), Effect.catch((error) => Effect.fail(attachConsumedBytes(error, output.sizeBytes))))), Effect.result, Effect.flatMap((result) => {
 			const activeTimeMs = Math.min(reservation.timeReservationMs, Math.max(0, Date.now() - startedAt));
 			return grant.ledger.complete(reservation, {
 				activeTimeMs,
-				bytes: result._tag === "Right" ? result.right.sizeBytes : consumedBytesOf(result.left, reservation.byteReservation),
-				status: result._tag === "Right" ? "stored" : signal.aborted ? "cancelled" : "failed"
-			}).pipe(Effect.flatMap(() => result._tag === "Right" ? Effect.succeed(result.right) : Effect.fail(result.left)));
+				bytes: result._tag === "Success" ? result.success.sizeBytes : consumedBytesOf(result.failure, reservation.byteReservation),
+				status: result._tag === "Success" ? "stored" : signal.aborted ? "cancelled" : "failed"
+			}).pipe(Effect.flatMap(() => result._tag === "Success" ? Effect.succeed(result.success) : Effect.fail(result.failure)));
 		}))));
 	} : void 0;
 	const readBytes = (attachmentId) => {
@@ -9080,14 +9081,14 @@ function downloadAndPublish(resource, request, reader, rootDirectory, signal, bu
 			yield* writeExclusiveReplacing(rootDirectory, metadataTempPath, new TextEncoder().encode(JSON.stringify(metadata)));
 			yield* Effect.tryPromise(async () => rename(await resolveSafeWorkspacePath(rootDirectory, metadataTempPath), await resolveSafeWorkspacePath(rootDirectory, metadataPath)));
 			return stored;
-		}).pipe(Effect.either);
-		if (publication._tag === "Left") return yield* failPrepared(publication.left);
+		}).pipe(Effect.result);
+		if (publication._tag === "Failure") return yield* failPrepared(publication.failure);
 		yield* ledger.complete(prepared.reservation, {
 			activeTimeMs: activeTimeMs(),
 			bytes: bytes.byteLength,
 			status: "stored"
 		});
-		return publication.right;
+		return publication.success;
 	}).pipe(Effect.ensuring(Effect.tryPromise(async () => rm(await resolveSafeWorkspacePath(rootDirectory, temporaryPath), { force: true })).pipe(Effect.ignore)));
 }
 function readWithRetries(reader, input, outerSignal, budget) {
@@ -9112,27 +9113,27 @@ function readWithRetries(reader, input, outerSignal, budget) {
 				timeReservationMs: remainingMs
 			});
 			const attemptStarted = Date.now();
-			const result = yield* readAttempt(reader, input, outerSignal, Math.min(attemptTimeoutMs, reservation.timeReservationMs)).pipe(Effect.either);
-			if (result._tag === "Right") {
+			const result = yield* readAttempt(reader, input, outerSignal, Math.min(attemptTimeoutMs, reservation.timeReservationMs)).pipe(Effect.result);
+			if (result._tag === "Success") {
 				const activeTimeMs = Math.min(reservation.timeReservationMs, Math.max(0, Date.now() - attemptStarted));
-				if (result.right.bytes.byteLength > maxBytes) {
+				if (result.success.bytes.byteLength > maxBytes) {
 					yield* ledger.complete(reservation, {
 						activeTimeMs,
-						bytes: Math.min(result.right.bytes.byteLength, reservation.byteReservation),
+						bytes: Math.min(result.success.bytes.byteLength, reservation.byteReservation),
 						status: "failed"
 					});
 					return yield* Effect.fail(new FeishuAttachmentLimitExceeded("attachment byte limit exceeded"));
 				}
 				return {
 					activeTimeMs,
-					read: result.right,
+					read: result.success,
 					reservation,
 					startedAtMs: attemptStarted
 				};
 			}
-			lastError = result.left;
+			lastError = result.failure;
 			const delay = retryBackoffMs[attempt] ?? retryBackoffMs.at(-1) ?? 0;
-			const retry = isRetryableDownloadError(result.left) && attempt + 1 < maxAttempts;
+			const retry = isRetryableDownloadError(result.failure) && attempt + 1 < maxAttempts;
 			if (retry && delay > 0) yield* sleep(delay);
 			if (outerSignal.aborted) {
 				yield* ledger.cancel().pipe(Effect.ignore);
@@ -9140,8 +9141,8 @@ function readWithRetries(reader, input, outerSignal, budget) {
 			}
 			yield* ledger.complete(reservation, {
 				activeTimeMs: Math.min(reservation.timeReservationMs, Math.max(0, Date.now() - attemptStarted)),
-				bytes: consumedBytesOf(result.left, reservation.byteReservation),
-				retryableFailure: isRetryableDownloadError(result.left),
+				bytes: consumedBytesOf(result.failure, reservation.byteReservation),
+				retryableFailure: isRetryableDownloadError(result.failure),
 				status: "failed"
 			});
 			if (!retry) break;
@@ -9163,9 +9164,9 @@ function readAttempt(reader, input, outerSignal, timeoutMs) {
 			const result = yield* reader.read({
 				...input,
 				signal: controller.signal
-			}).pipe(Effect.either);
-			if (result._tag === "Left" && timedOut) return yield* Effect.fail(attachConsumedBytes(/* @__PURE__ */ new Error("attachment download timeout"), consumedBytesOf(result.left, input.maxBytes)));
-			return yield* result;
+			}).pipe(Effect.result);
+			if (result._tag === "Failure" && timedOut) return yield* Effect.fail(attachConsumedBytes(/* @__PURE__ */ new Error("attachment download timeout"), consumedBytesOf(result.failure, input.maxBytes)));
+			return yield* Effect.fromResult(result);
 		} finally {
 			clearTimeout(timer);
 			outerSignal.removeEventListener("abort", onAbort);
@@ -9377,13 +9378,13 @@ function createFeishuAttachmentPreparation(options) {
 							retryBackoffMs,
 							sleep,
 							startedAt
-						}).pipe(Effect.either);
-						if (stored._tag === "Left") {
+						}).pipe(Effect.result);
+						if (stored._tag === "Failure") {
 							if (signal.aborted) return yield* Effect.fail(new FeishuAttachmentPreparationCancelled());
-							destination.push(yield* failureNotice(resource, fallbackMessageId, classifyFailure(stored.left), outputPath, maxBytes));
+							destination.push(yield* failureNotice(resource, fallbackMessageId, classifyFailure(stored.failure), outputPath, maxBytes));
 							continue;
 						}
-						accept(destination, attachmentId, resource, stored.right);
+						accept(destination, attachmentId, resource, stored.success);
 					}
 				});
 				yield* processParts(request.decoded.parts, parts, request.messageId);
@@ -9430,7 +9431,7 @@ function createFeishuAttachmentPreparation(options) {
 					}),
 					userInput
 				};
-			}).pipe(Effect.onInterrupt(() => Effect.sync(() => controller.abort()).pipe(Effect.zipRight(ledger.cancel().pipe(Effect.ignore)))), Effect.ensuring(Effect.sync(() => {
+			}).pipe(Effect.onInterrupt(() => Effect.sync(() => controller.abort()).pipe(Effect.andThen(ledger.cancel().pipe(Effect.ignore)))), Effect.ensuring(Effect.sync(() => {
 				unregisterPreparation(request.sessionKey, controller);
 			})));
 		}
@@ -9796,7 +9797,7 @@ function effectForCandidate(operation) {
 	return Effect.tryPromise({
 		try: operation,
 		catch: () => /* @__PURE__ */ new Error("attachment retention candidate inspection failed")
-	}).pipe(Effect.catchAll(() => Effect.succeed("error")));
+	}).pipe(Effect.catch(() => Effect.succeed("error")));
 }
 function inspectPreparedCandidate(input) {
 	return effectForCandidate(async () => {
@@ -10575,7 +10576,7 @@ function createFeishuCotPublisher(options) {
 		url: `${baseUrl}/open-apis/im/v1/message_cot/complete/${encodeURIComponent(target.cotId)}?message_id=${encodeURIComponent(target.messageId)}&reason=${reason}`
 	}, "Failed to complete Feishu COT message").pipe(Effect.timeout(COT_REQUEST_TIMEOUT), Effect.asVoid);
 	const failTarget = (runId, target) => complete(target, "error").pipe(Effect.ensuring(Effect.sync(() => targets.delete(runId))));
-	const abandonOnError = (runId, target, operation) => operation.pipe(Effect.catchAll((error) => failTarget(runId, target).pipe(Effect.catchAll(() => Effect.void), Effect.flatMap(() => Effect.fail(error)))));
+	const abandonOnError = (runId, target, operation) => operation.pipe(Effect.catch((error) => failTarget(runId, target).pipe(Effect.catch(() => Effect.void), Effect.flatMap(() => Effect.fail(error)))));
 	const flushReasoning = (target, timestamp) => {
 		if (target.pendingReasoning.length === 0) return [];
 		const delta = readRedactedString(redact(target.pendingReasoning));
@@ -10987,7 +10988,7 @@ function createMessageGateway(options) {
 				case "resolve_interaction": return yield* resolveInteraction(action);
 				case "prompt":
 					markSeen(key);
-					return yield* executePrompt(execution, observation, presentation, action).pipe(Effect.catchAll((error) => {
+					return yield* executePrompt(execution, observation, presentation, action).pipe(Effect.catch((error) => {
 						if (error instanceof AgentRunCancelled) return Effect.succeed({
 							cancelled: true,
 							messageId: action.messageId,
@@ -10997,7 +10998,7 @@ function createMessageGateway(options) {
 						return Effect.fail(error);
 					}));
 			}
-		}).pipe(Effect.catchAll((error) => {
+		}).pipe(Effect.catch((error) => {
 			if (error instanceof AgentRunCancelled && (direct || action.type === "prompt")) return Effect.succeed({
 				cancelled: true,
 				messageId: action.messageId,
@@ -11450,7 +11451,7 @@ function parseCancelRunCommand(messageId, text) {
 //#region src/adapters/feishu/conversation-session/feishu-session-store.ts
 function createFeishuSessionStore(options = {}) {
 	const records = recoverFeishuSessionRecords(options.initial ?? []);
-	const serial = Effect.unsafeMakeSemaphore(1);
+	const serial = Semaphore.makeUnsafe(1);
 	return {
 		current: (baseSessionKey) => {
 			validateFeishuBaseSessionKey(baseSessionKey);
@@ -11666,25 +11667,25 @@ function createFeishuAgentDaemon(options) {
 				replyReset: (messageId, hadActiveRun) => sideEffectsDisabled || !options.reply ? Effect.void : options.reply(messageId, hadActiveRun ? "已停止当前任务并开启新会话。请发送下一条指令。" : "已开启新会话。请发送下一条指令。"),
 				replySteered: (messageId) => {
 					if (sideEffectsDisabled) return Effect.void;
-					if (options.acknowledgeSteering) return options.acknowledgeSteering(messageId).pipe(Effect.catchAll(() => options.reply ? options.reply(messageId, STEERING_ACK_TEXT) : Effect.void));
+					if (options.acknowledgeSteering) return options.acknowledgeSteering(messageId).pipe(Effect.catch(() => options.reply ? options.reply(messageId, STEERING_ACK_TEXT) : Effect.void));
 					return options.reply ? options.reply(messageId, STEERING_ACK_TEXT) : Effect.void;
 				}
 			}
 		};
 	};
 	const trySteerMessage = (payload) => Effect.gen(function* () {
-		const resetDirective = yield* readFeishuSessionResetDirective(payload, messageIntakeOptions).pipe(Effect.either);
-		if (Either.isRight(resetDirective) && resetDirective.right?.prompt) {
-			cancelAttachmentPreparation(resetDirective.right.previousSessionKey);
+		const resetDirective = yield* readFeishuSessionResetDirective(payload, messageIntakeOptions).pipe(Effect.result);
+		if (Result.isSuccess(resetDirective) && resetDirective.success?.prompt) {
+			cancelAttachmentPreparation(resetDirective.success.previousSessionKey);
 			yield* execution.cancelActiveRun({
 				reason: "Feishu new session command",
-				sessionKey: resetDirective.right.previousSessionKey
+				sessionKey: resetDirective.success.previousSessionKey
 			});
 			return;
 		}
-		const parsed = yield* createAgentCommandFromFeishuMessage(payload, messageIntakeOptions).pipe(Effect.either);
-		if (Either.isLeft(parsed)) return;
-		const inbound = parsed.right;
+		const parsed = yield* createAgentCommandFromFeishuMessage(payload, messageIntakeOptions).pipe(Effect.result);
+		if (Result.isFailure(parsed)) return;
+		const inbound = parsed.success;
 		const { observation, presentation, reply } = buildPorts(false);
 		if (inbound.type === "cancel_run") {
 			cancelPreparationForCommand(inbound);
@@ -11712,27 +11713,27 @@ function createFeishuAgentDaemon(options) {
 		return steered ? fromGatewayResult(steered) : void 0;
 	});
 	const prepareControlMessage = (payload, phase = "admission") => Effect.gen(function* () {
-		const resetDirective = yield* readFeishuSessionResetDirective(payload, messageIntakeOptions).pipe(Effect.either);
+		const resetDirective = yield* readFeishuSessionResetDirective(payload, messageIntakeOptions).pipe(Effect.result);
 		const prepared = () => ({ execute: () => trySteerMessage(payload) });
-		if (Either.isLeft(resetDirective)) yield* failCausedIntake(resetDirective.left);
-		if (Either.isRight(resetDirective) && resetDirective.right) {
-			if (resetDirective.right.prompt.length > 0) {
+		if (Result.isFailure(resetDirective)) yield* failCausedIntake(resetDirective.failure);
+		if (Result.isSuccess(resetDirective) && resetDirective.success) {
+			if (resetDirective.success.prompt.length > 0) {
 				if (phase === "processing") return;
-				const activeRunId = execution.getActiveRun ? yield* execution.getActiveRun({ sessionKey: resetDirective.right.previousSessionKey }) : void 0;
-				const preparing = options.attachmentPreparation?.hasActive?.(resetDirective.right.previousSessionKey) ?? false;
+				const activeRunId = execution.getActiveRun ? yield* execution.getActiveRun({ sessionKey: resetDirective.success.previousSessionKey }) : void 0;
+				const preparing = options.attachmentPreparation?.hasActive?.(resetDirective.success.previousSessionKey) ?? false;
 				return activeRunId || preparing ? prepared() : void 0;
 			}
 			return prepared();
 		}
 		if (feishuMessageRequiresWorkerPreparation(payload)) return;
-		const intake = yield* describeFeishuMessageIntake(payload, messageIntakeOptions).pipe(Effect.either);
-		if (Either.isLeft(intake)) {
-			yield* failCausedIntake(intake.left);
+		const intake = yield* describeFeishuMessageIntake(payload, messageIntakeOptions).pipe(Effect.result);
+		if (Result.isFailure(intake)) {
+			yield* failCausedIntake(intake.failure);
 			return;
 		}
-		if (intake.right.commandType !== "prompt") return prepared();
+		if (intake.success.commandType !== "prompt") return prepared();
 		if (!execution.getActiveRun) return;
-		return (yield* execution.getActiveRun({ sessionKey: intake.right.sessionKey })) ? prepared() : void 0;
+		return (yield* execution.getActiveRun({ sessionKey: intake.success.sessionKey })) ? prepared() : void 0;
 	});
 	return {
 		describeMessageIntake: (payload) => describeFeishuMessageIntake(payload, {
@@ -11815,7 +11816,7 @@ function createFeishuAgentDaemon(options) {
 				});
 				if (!result) return yield* Effect.fail(/* @__PURE__ */ new Error("gateway returned no result for prompt"));
 				return fromGatewayResult(result);
-			}).pipe(Effect.catchAll((error) => {
+			}).pipe(Effect.catch((error) => {
 				if (error instanceof AgentRunCancelled) return Effect.succeed({
 					cancelled: true,
 					messageId: payload.event.message.message_id,
@@ -11975,7 +11976,7 @@ function createDurableQueue(options) {
 	const maxAttempts = positiveInteger(options.maxAttempts ?? 5, "maximum attempts");
 	const maxPending = positiveInteger(options.maxPending ?? 100, "capacity");
 	const retryDelayMs = nonNegativeInteger(options.retryDelayMs ?? 0, "retry delay");
-	const executePreparedAction = (prepared, deliveryId, leaseId) => prepared.execute().pipe(Effect.catchAll((error) => options.clock.now().pipe(Effect.flatMap((failedAt) => options.store.fail({
+	const executePreparedAction = (prepared, deliveryId, leaseId) => prepared.execute().pipe(Effect.catch((error) => options.clock.now().pipe(Effect.flatMap((failedAt) => options.store.fail({
 		failedAt,
 		id: deliveryId,
 		leaseId,
@@ -12068,7 +12069,7 @@ function createDurableQueue(options) {
 				const actionResult = yield* executePreparedAction(preparedAction, delivery.id, claimedLeaseId);
 				if (actionResult !== void 0) return yield* completeHandled(actionResult);
 			}
-			const result = yield* options.handleDelivery(delivery.payload, delivery.metadata).pipe(Effect.catchAll((error) => options.clock.now().pipe(Effect.flatMap((failedAt) => options.store.fail({
+			const result = yield* options.handleDelivery(delivery.payload, delivery.metadata).pipe(Effect.catch((error) => options.clock.now().pipe(Effect.flatMap((failedAt) => options.store.fail({
 				availableAt: new Date(Date.parse(failedAt) + retryDelayMs).toISOString(),
 				failedAt,
 				id: delivery.id,
@@ -12171,10 +12172,10 @@ function createDurableQueueWorker(options) {
 		const results = [];
 		while (options.queue.pending() > 0) {
 			const batchSize = Math.min(concurrency, options.queue.pending());
-			const outcomes = yield* Effect.all(Array.from({ length: batchSize }, () => options.queue.drainOne().pipe(Effect.either)), { concurrency: "unbounded" });
-			const failures = outcomes.filter(Either.isLeft).map((outcome) => outcome.left);
+			const outcomes = yield* Effect.all(Array.from({ length: batchSize }, () => options.queue.drainOne().pipe(Effect.result)), { concurrency: "unbounded" });
+			const failures = outcomes.filter(Result.isFailure).map((outcome) => outcome.failure);
 			if (failures.length > 0) return yield* Effect.fail(failures.length === 1 ? failures[0] : new AggregateError(failures, "Inbound Delivery batch failed"));
-			const batch = outcomes.filter(Either.isRight).map((outcome) => outcome.right);
+			const batch = outcomes.filter(Result.isSuccess).map((outcome) => outcome.success);
 			if (batch.every((result) => !result.handled)) break;
 			for (const result of batch) if (result.handled) results.push(result);
 		}
@@ -12187,7 +12188,7 @@ function createDurableQueueWorker(options) {
 function createDurableQueueWorkerLoop(options) {
 	if (!Number.isSafeInteger(options.intervalMs) || options.intervalMs < 0) throw new Error("Inbound Delivery worker interval must be a non-negative integer");
 	const report = (error) => options.onError?.(error) ?? Effect.void;
-	const continueAfterReporting = (effect) => effect.pipe(Effect.asVoid, Effect.catchAll(report));
+	const continueAfterReporting = (effect) => effect.pipe(Effect.asVoid, Effect.catch(report));
 	return Effect.forever(Effect.suspend(() => continueAfterReporting(options.drainAvailable()).pipe(Effect.flatMap(() => continueAfterReporting(options.sleep(options.intervalMs))))));
 }
 //#endregion
@@ -12321,7 +12322,7 @@ function createInMemoryDurableQueueStore(options = {}) {
 		if (deliveries.has(restored.id)) throw new Error(`duplicate Inbound Delivery snapshot: ${restored.id}`);
 		deliveries.set(restored.id, restored);
 	}
-	const serial = Effect.unsafeMakeSemaphore(1);
+	const serial = Semaphore.makeUnsafe(1);
 	let lastLaneKey;
 	const save = (current, delivery) => {
 		const snapshot = readInboundDeliverySnapshot(current === void 0 ? delivery : resolveUpdate(current, delivery));
@@ -12473,7 +12474,7 @@ function createFeishuEventHandlers(options) {
 	} };
 	if (options.cardActions) return {
 		...handlers,
-		"card.action.trigger": (payload) => Effect.runPromise(options.cardActions.handleCardAction(payload).pipe(Effect.map(createFeishuCardActionCallbackResponse), Effect.catchAll(() => Effect.succeed(createFeishuCardActionErrorResponse()))))
+		"card.action.trigger": (payload) => Effect.runPromise(options.cardActions.handleCardAction(payload).pipe(Effect.map(createFeishuCardActionCallbackResponse), Effect.catch(() => Effect.succeed(createFeishuCardActionErrorResponse()))))
 	};
 	return handlers;
 }
@@ -12530,7 +12531,7 @@ function toStandardRunResult(result) {
 function createFeishuAgentExecutionBridge(options) {
 	const activeNamespacedSessions = /* @__PURE__ */ new Set();
 	const cancellationRequests = /* @__PURE__ */ new Map();
-	const cancellationSerial = Effect.unsafeMakeSemaphore(1);
+	const cancellationSerial = Semaphore.makeUnsafe(1);
 	const activeHandles = /* @__PURE__ */ new Set();
 	const activeRuns = /* @__PURE__ */ new Map();
 	let stopping = false;
@@ -12543,7 +12544,7 @@ function createFeishuAgentExecutionBridge(options) {
 		if (current) return current;
 		const completion = yield* Deferred.make();
 		cancellationRequests.set(runId, completion);
-		yield* Effect.forkDaemon(Effect.suspend(() => options.cancel({
+		yield* Effect.forkDetach(Effect.suspend(() => options.cancel({
 			reason: "endpoint_stopping",
 			runId,
 			sessionKey
@@ -12637,17 +12638,17 @@ function createFeishuAgentExecutionBridge(options) {
 					if (activeRunId) activeRuns.delete(activeRunId);
 					activeHandles.delete(completion);
 					activeNamespacedSessions.delete(sessionKey);
-				}).pipe(Effect.zipRight(Deferred.succeed(completion, void 0)))));
-				yield* Effect.forkDaemon(restore(run).pipe(Effect.exit, Effect.flatMap((exit) => Deferred.done(outcome, exit))));
+				}).pipe(Effect.andThen(Deferred.succeed(completion, void 0)))));
+				yield* Effect.forkDetach(restore(run).pipe(Effect.exit, Effect.flatMap((exit) => Deferred.done(outcome, exit))));
 				return yield* restore(Deferred.await(outcome));
 			}))
 		}
 	};
 }
 function waitUntilDeadline(effect, deadline, message) {
-	return effect.pipe(Effect.interruptible, Effect.timeoutFail({
+	return effect.pipe(Effect.interruptible, Effect.timeoutOrElse({
 		duration: Math.max(0, deadline - Date.now()),
-		onTimeout: () => new Error(message)
+		orElse: () => Effect.fail(new Error(message))
 	}));
 }
 function namespaceSessionKey(namespace, sessionKey) {
@@ -12793,7 +12794,7 @@ function createFeishuDeploymentEndpoint(options) {
 	let stopping = false;
 	const activeDrains = /* @__PURE__ */ new Set();
 	const awaitDrain = (drain) => Fiber.join(drain).pipe(Effect.onExit((exit) => Effect.sync(() => {
-		if (exit._tag === "Success" || !Cause.isInterruptedOnly(exit.cause)) activeDrains.delete(drain);
+		if (exit._tag === "Success" || !Cause.hasInterruptsOnly(exit.cause)) activeDrains.delete(drain);
 	})));
 	const stopCardRollover = options.cardRollover ? Effect.tryPromise({
 		try: () => Promise.resolve(options.cardRollover.stop()),
@@ -12811,7 +12812,7 @@ function createFeishuDeploymentEndpoint(options) {
 	});
 	const workerLoop = createEffectLoopDriver(createDurableQueueWorkerLoop({
 		drainAvailable: () => Effect.uninterruptibleMask((restore) => Effect.gen(function* () {
-			const drain = yield* Effect.forkDaemon(worker.drainAvailable().pipe(Effect.interruptible));
+			const drain = yield* Effect.forkDetach(worker.drainAvailable().pipe(Effect.interruptible));
 			activeDrains.add(drain);
 			return yield* restore(awaitDrain(drain));
 		})),
@@ -12825,7 +12826,7 @@ function createFeishuDeploymentEndpoint(options) {
 		handlers: createFeishuEventHandlers({
 			cardActions: daemon,
 			queue: {
-				accept: (payload) => shouldAcceptFeishuEndpointMessage(payload, options.groupPolicy, options.botOpenId) ? inbound.accept(payload).pipe(Effect.tap((result) => result.accepted || result.reason !== "capacity" || !options.onCapacityExceeded ? Effect.void : options.onCapacityExceeded(payload).pipe(Effect.catchAllCause((cause) => Cause.isInterruptedOnly(cause) ? Effect.interrupt : reportWorkerError(Cause.squash(cause)))))) : Effect.succeed({
+				accept: (payload) => shouldAcceptFeishuEndpointMessage(payload, options.groupPolicy, options.botOpenId) ? inbound.accept(payload).pipe(Effect.tap((result) => result.accepted || result.reason !== "capacity" || !options.onCapacityExceeded ? Effect.void : options.onCapacityExceeded(payload).pipe(Effect.catchCause((cause) => Cause.hasInterruptsOnly(cause) ? Effect.interrupt : reportWorkerError(Cause.squash(cause)))))) : Effect.succeed({
 					accepted: false,
 					messageId: payload.event.message.message_id,
 					pending: queue.pending(),
@@ -12853,7 +12854,7 @@ function createFeishuDeploymentEndpoint(options) {
 				catch: (error) => error
 			});
 			workerLoop.start();
-		}).pipe(Effect.catchAllCause((startCause) => Effect.uninterruptible(Effect.gen(function* () {
+		}).pipe(Effect.catchCause((startCause) => Effect.uninterruptible(Effect.gen(function* () {
 			const cleanupErrors = yield* settleCleanup([
 				Effect.tryPromise({
 					try: () => websocket.stop(),
@@ -12873,11 +12874,11 @@ function createFeishuDeploymentEndpoint(options) {
 			const timeoutMs = options.shutdownTimeoutMs ?? DEFAULT_SHUTDOWN_TIMEOUT_MS;
 			const deadline = Date.now() + timeoutMs;
 			let executionStopped = false;
-			const websocketStop = yield* Effect.fork(Effect.tryPromise({
+			const websocketStop = yield* Effect.forkChild(Effect.tryPromise({
 				try: () => websocket.stop(),
 				catch: (error) => error
 			}));
-			const workerStop = yield* Effect.fork(Effect.tryPromise({
+			const workerStop = yield* Effect.forkChild(Effect.tryPromise({
 				try: () => workerLoop.stop(),
 				catch: (error) => error
 			}));
@@ -12887,9 +12888,9 @@ function createFeishuDeploymentEndpoint(options) {
 					executionStopped = true;
 				}))),
 				Fiber.join(workerStop),
-				Effect.suspend(() => executionStopped ? Effect.all([...activeDrains].map(awaitDrain), { concurrency: "unbounded" }).pipe(Effect.interruptible, Effect.timeoutFail({
+				Effect.suspend(() => executionStopped ? Effect.all([...activeDrains].map(awaitDrain), { concurrency: "unbounded" }).pipe(Effect.interruptible, Effect.timeoutOrElse({
 					duration: Math.max(0, deadline - Date.now()),
-					onTimeout: () => /* @__PURE__ */ new Error(`Feishu Inbox drain did not stop within ${timeoutMs}ms`)
+					orElse: () => Effect.fail(/* @__PURE__ */ new Error(`Feishu Inbox drain did not stop within ${timeoutMs}ms`))
 				})) : Effect.void),
 				stopCardRollover
 			]);
@@ -12909,13 +12910,989 @@ function settleCleanup(steps) {
 	});
 }
 //#endregion
+//#region src/adapters/feishu/inbound-delivery/jsonl-inbound-delivery-store.ts
+function openJsonlInboundDeliveryStore(options) {
+	const codecOptions = {
+		...options.acceptLegacySameAttemptClaims === void 0 ? {} : { acceptLegacySameAttemptClaims: options.acceptLegacySameAttemptClaims },
+		label: options.label ?? "Inbound Delivery",
+		payload: options.payload
+	};
+	return Effect.gen(function* () {
+		const raw = yield* Effect.tryPromise({
+			try: () => readPersistenceFile(options.filePath),
+			catch: (cause) => cause
+		});
+		return createInMemoryDurableQueueStore({
+			initial: yield* Effect.try({
+				try: () => decodeInboundDeliverySnapshots(raw, codecOptions),
+				catch: (cause) => cause
+			}),
+			persist: (delivery) => appendInboundDeliverySnapshot(options.filePath, delivery)
+		});
+	});
+}
+function decodeInboundDeliverySnapshots(raw, options) {
+	if (raw === void 0) return [];
+	const latest = /* @__PURE__ */ new Map();
+	for (const [index, line] of raw.split("\n").entries()) {
+		if (line.trim().length === 0) continue;
+		let parsed;
+		try {
+			parsed = JSON.parse(line);
+		} catch {
+			throw new Error(`invalid ${options.label} snapshot at line ${index + 1}`);
+		}
+		if (!isEnvelope(parsed)) throw new Error(`invalid ${options.label} snapshot at line ${index + 1}`);
+		let delivery;
+		try {
+			delivery = decodeDelivery(parsed.delivery, options.payload);
+		} catch {
+			throw new Error(`invalid ${options.label} snapshot at line ${index + 1}`);
+		}
+		const previous = latest.get(delivery.id);
+		if (delivery.revision !== (previous?.revision ?? 0) + 1) throw new Error(`invalid ${options.label} revision at line ${index + 1}`);
+		try {
+			if (previous) {
+				if (!isValidPersistedTransition(previous, delivery, options.acceptLegacySameAttemptClaims ?? false)) throw new Error("transition");
+			} else assertNewInboundDelivery(delivery);
+		} catch {
+			throw new Error(`invalid ${options.label} transition at line ${index + 1}`);
+		}
+		latest.set(delivery.id, delivery);
+	}
+	return [...latest.values()];
+}
+function encodeInboundDeliverySnapshot(delivery) {
+	const snapshot = readInboundDeliverySnapshot(delivery);
+	const persisted = {
+		acceptedAt: snapshot.acceptedAt,
+		attempts: snapshot.attempts,
+		id: snapshot.id,
+		laneKey: snapshot.laneKey,
+		...snapshot.metadata === void 0 ? {} : { options: snapshot.metadata },
+		payload: snapshot.payload,
+		...snapshot.recovery === void 0 ? {} : { recovery: snapshot.recovery },
+		revision: snapshot.revision,
+		state: snapshot.state
+	};
+	return JSON.stringify({
+		delivery: persisted,
+		version: 1
+	});
+}
+function decodeDelivery(value, payloadCodec) {
+	if (!isRecord(value) || typeof value.acceptedAt !== "string" || typeof value.attempts !== "number" || typeof value.id !== "string" || typeof value.laneKey !== "string" || typeof value.revision !== "number") throw new Error("invalid Inbound Delivery snapshot");
+	const metadata = payloadCodec.decodeMetadata(value.options);
+	return readInboundDeliverySnapshot({
+		acceptedAt: value.acceptedAt,
+		attempts: value.attempts,
+		id: value.id,
+		laneKey: value.laneKey,
+		...metadata === void 0 ? {} : { metadata },
+		payload: payloadCodec.decodePayload(value.payload),
+		...value.recovery === void 0 ? {} : { recovery: value.recovery },
+		revision: value.revision,
+		state: value.state
+	});
+}
+function isEnvelope(value) {
+	return isRecord(value) && value.version === 1 && "delivery" in value;
+}
+function isValidPersistedTransition(previous, next, acceptLegacySameAttemptClaims) {
+	if (isValidInboundDeliveryTransition(previous, next)) return true;
+	if (!acceptLegacySameAttemptClaims || previous.state.status !== "pending" || next.state.status !== "leased" || next.attempts !== previous.attempts) return false;
+	return isValidInboundDeliveryTransition(previous, {
+		...next,
+		attempts: next.attempts + 1
+	});
+}
+function appendInboundDeliverySnapshot(filePath, delivery) {
+	return Effect.tryPromise({
+		try: async () => {
+			await mkdir(dirname(filePath), { recursive: true });
+			await appendFile(filePath, `${encodeInboundDeliverySnapshot(delivery)}\n`, "utf8");
+		},
+		catch: (cause) => cause
+	});
+}
+//#endregion
+//#region src/adapters/feishu/routing/feishu-conversation-router.ts
+const CAPACITY_REFUSAL = "队列已满，请用新消息重发；本条未提交。";
+const UNSUPPORTED_TYPE_REFUSAL = "会话模式暂不支持该消息类型。";
+/**
+* Single-entry Feishu conversation router: every message and callback is fenced
+* by the durable owner ledger before any destination runs, and the mode capture
+* plus owner admission share one bridge admission turn.
+*/
+function createFeishuConversationRouter(options) {
+	const mode = options.bridge.conversation?.mode;
+	const allowed = (identity) => options.actors.includes(identity.actorId) && options.chats.includes(identity.chatId);
+	const freeze = (reason, messageId) => Effect.sync(() => {
+		mode?.freeze();
+		options.onObservation?.({
+			...messageId === void 0 ? {} : { messageId },
+			type: "route_frozen"
+		});
+		console.error(`Herdr route frozen: ${reason}`);
+	});
+	const freezeVerdict = (reason, messageId) => Effect.gen(function* () {
+		yield* freeze(reason, messageId);
+		return { kind: "frozen" };
+	});
+	/**
+	* Refusals for owner uncertainty use a stable internal claim key: claiming the
+	* original id would fabricate a Herdr fence that conflicts with a durable Pi
+	* owner after restart, so the original owner identity stays untouched.
+	*/
+	const refusalClaimId = (identity) => `route-refusal:${JSON.stringify([options.appId, identity.messageId])}`;
+	const refusalMessage = (identity) => ({
+		id: refusalClaimId(identity),
+		actorId: identity.actorId,
+		chatId: identity.chatId,
+		sentAt: identity.sentAt,
+		text: ""
+	});
+	/** One admission turn: legacy fences → owner lookup → capture → durable owner → admit captured. */
+	const admitSequence = (input) => Effect.gen(function* () {
+		const { identity } = input;
+		const legacy = yield* options.legacyOwnerOf(identity.messageId);
+		if (legacy === "conflict") return yield* freezeVerdict("legacy Pi inbox and Herdr claim conflict", identity.messageId);
+		const lookup = yield* Effect.result(options.ledger.lookup(identity.messageId));
+		if (Result.isFailure(lookup)) return yield* freezeVerdict("owner ledger lookup failed", identity.messageId);
+		if (lookup.success.kind === "opaque-fence") return yield* freezeVerdict("owner record is an opaque fence", identity.messageId);
+		if (lookup.success.kind === "record") {
+			const record = lookup.success.record;
+			if (record.actorId !== identity.actorId || record.chatId !== identity.chatId) return yield* freezeVerdict("owner record does not match the incoming message source", identity.messageId);
+			if (legacy === "pi" && record.decision === "herdr" || legacy === "herdr" && record.decision === "pi") return yield* freezeVerdict("historical fence and owner record disagree", identity.messageId);
+			options.onObservation?.({
+				messageId: identity.messageId,
+				type: "route_skipped"
+			});
+			return record.decision === "pi" ? { kind: "pi" } : { kind: "skip" };
+		}
+		if (legacy === "herdr") {
+			options.onObservation?.({
+				messageId: identity.messageId,
+				type: "route_skipped"
+			});
+			return { kind: "skip" };
+		}
+		let captured;
+		let unsupportedType = false;
+		if (input.parsed) captured = options.bridge.captureInAdmission(input.parsed);
+		else if (legacy === "none" && mode?.isFrozen() && allowed(identity)) return { kind: "frozen" };
+		else if (legacy === "none" && mode?.stateOf(identity.actorId, identity.chatId)) unsupportedType = true;
+		const decision = legacy === "pi" || !unsupportedType && (captured === void 0 || captured.route.kind === "pass-through") ? "pi" : "herdr";
+		const record = {
+			appId: options.appId,
+			messageId: identity.messageId,
+			decision,
+			actorId: identity.actorId,
+			chatId: identity.chatId,
+			at: Date.now(),
+			...decision === "herdr" && captured?.route.kind === "locked-send" ? { target: captured.route.agent } : {}
+		};
+		const admitted = yield* Effect.result(options.ledger.admit(record));
+		if (Result.isFailure(admitted)) return yield* freezeVerdict("owner admission failed", identity.messageId);
+		if (admitted.success.kind === "existing-opaque") return yield* freezeVerdict("owner admission found an opaque fence", identity.messageId);
+		if (admitted.success.kind === "existing") {
+			const existing = admitted.success.record;
+			if (legacy === "pi" && existing.decision === "herdr") return yield* freezeVerdict("historical fence and owner record disagree", identity.messageId);
+			options.onObservation?.({
+				messageId: identity.messageId,
+				type: "route_skipped"
+			});
+			return existing.decision === "pi" ? { kind: "pi" } : { kind: "skip" };
+		}
+		if (decision === "pi") return { kind: "pi" };
+		if (unsupportedType || captured === void 0) return {
+			kind: "unsupported-type",
+			chatId: identity.chatId
+		};
+		const outcome = yield* Effect.result(options.bridge.admitCapturedInAdmission(captured));
+		if (Result.isFailure(outcome)) return yield* freezeVerdict("herdr event admission failed", identity.messageId);
+		return {
+			kind: "herdr",
+			entry: {
+				message: captured.message,
+				outcome: outcome.success
+			}
+		};
+	});
+	/**
+	* Runs the sequence inside one admission turn and publishes the shared freeze
+	* for every full cause BEFORE the permit is released, so already queued work
+	* and later captures observe the exact flag.
+	*/
+	const admitInAdmission = (input) => options.bridge.withAdmission(Effect.gen(function* () {
+		const exit = yield* Effect.exit(admitSequence(input));
+		if (Exit.isFailure(exit)) return yield* freezeVerdict("admission sequence failed", input.identity.messageId);
+		return exit.value;
+	}));
+	/**
+	* Owner uncertainty freezes; the visible refusal is admitted in a separate,
+	* non-nested turn via the bridge's own frozen-refusal capture, so freshness,
+	* authorization and the event claim stay with existing semantics. Delivery
+	* happens only outside admission through the tracked reply lane. A failing
+	* refusal claim keeps the freeze and reports a diagnostic: there is no
+	* direct undeduped chat fallback and no destination retry.
+	*/
+	const deliverOwnerUncertainRefusal = async (identity) => {
+		let outcome;
+		try {
+			outcome = await Effect.runPromise(options.bridge.withAdmission(Effect.gen(function* () {
+				const captured = options.bridge.captureInAdmission(refusalMessage(identity));
+				return yield* options.bridge.admitCapturedInAdmission(captured);
+			})));
+		} catch {
+			outcome = void 0;
+		}
+		if (outcome !== void 0 && outcome.kind === "done" && outcome.result.kind === "reply") {
+			await options.target.reply(identity.chatId, outcome.result.reply.text);
+			return true;
+		}
+		options.onObservation?.({
+			messageId: identity.messageId,
+			type: "refusal_undelivered"
+		});
+		console.error(`Herdr owner-uncertain refusal not delivered for ${identity.messageId}`);
+		return false;
+	};
+	const route = async (identity, parsed) => {
+		let verdict;
+		try {
+			verdict = await Effect.runPromise(admitInAdmission({
+				identity,
+				parsed
+			}));
+		} catch {
+			verdict = { kind: "frozen" };
+		}
+		switch (verdict.kind) {
+			case "pi": return { kind: "pi" };
+			case "skip": return { kind: "skip" };
+			case "frozen":
+				await deliverOwnerUncertainRefusal(identity);
+				return { kind: "frozen" };
+			case "unsupported-type":
+				await options.target.reply(verdict.chatId, UNSUPPORTED_TYPE_REFUSAL);
+				return { kind: "consumed" };
+			case "herdr":
+				if (!await options.target.execute(verdict.entry)) await options.target.reply(verdict.entry.message.chatId, CAPACITY_REFUSAL);
+				return { kind: "consumed" };
+		}
+	};
+	const routeAwaited = async (identity, parsed) => {
+		if (options.target.runAdmission === void 0) return route(identity, parsed);
+		const admission = await options.target.runAdmission(() => route(identity, parsed));
+		if (admission.kind === "stopped") throw new Error("Herdr intake is stopped; event not admitted");
+		return admission.value;
+	};
+	const acceptedResult = (messageId) => ({
+		accepted: true,
+		messageId,
+		pending: 0
+	});
+	const skippedResult = (messageId) => ({
+		accepted: false,
+		messageId,
+		pending: 0,
+		reason: "duplicate"
+	});
+	const refusedResult = (messageId) => ({
+		accepted: false,
+		messageId,
+		pending: 0,
+		reason: "ignored"
+	});
+	const deadCardResponse = () => ({ toast: {
+		content: "This card cannot be handled; run /herdr again for a fresh one.",
+		i18n: {
+			en_us: "This card cannot be handled; run /herdr again for a fresh one.",
+			zh_cn: "此卡片已失效或无法识别；请重新执行 /herdr 获取新卡片。"
+		},
+		type: "error"
+	} });
+	const notReceivedCardResponse = () => ({ toast: {
+		content: "The intake is full; this click was not received. Try again in a moment.",
+		i18n: {
+			en_us: "The intake is full; this click was not received. Try again in a moment.",
+			zh_cn: "处理通道已满，本次点击未接收；请稍后重试。"
+		},
+		type: "error"
+	} });
+	const frozenCardResponse = () => ({ toast: {
+		content: "Routing is paused; this click was not executed.",
+		i18n: {
+			en_us: "Routing is paused; this click was not executed.",
+			zh_cn: "会话路由已暂停；本次点击未执行。"
+		},
+		type: "warning"
+	} });
+	const receivedCardResponse = () => ({ toast: {
+		content: "Received; the result arrives as a chat reply.",
+		i18n: {
+			en_us: "Received; the result arrives as a chat reply.",
+			zh_cn: "已接收，结果将以会话回复送达。"
+		},
+		type: "info"
+	} });
+	const duplicateCardResponse = () => ({ toast: {
+		content: "Already handled",
+		i18n: {
+			en_us: "Already handled",
+			zh_cn: "该操作已处理过"
+		},
+		type: "info"
+	} });
+	const piCardErrorResponse = () => ({ toast: {
+		content: "Card action failed",
+		i18n: {
+			en_us: "Card action failed",
+			zh_cn: "卡片操作失败"
+		},
+		type: "error"
+	} });
+	return {
+		/**
+		* Message entry for the merged dispatcher table. Decides ownership before
+		* any destination; the original Pi handler runs only for Pi-owned events.
+		*/
+		routeMessage: (piReceive) => async (payload) => {
+			const normalized = normalizeReceiveMessagePayload(payload);
+			if (!shouldAcceptFeishuEndpointMessage(normalized, options.groupPolicy, options.botOpenId)) return piReceive(payload);
+			const identity = readMessageIdentity(normalized.event);
+			if (!identity) return piReceive(payload);
+			const parsed = parseFeishuTerminalMessage(normalized.event);
+			switch ((await routeAwaited(identity, parsed)).kind) {
+				case "pi": return piReceive(payload);
+				case "skip": return skippedResult(identity.messageId);
+				case "frozen": return refusedResult(identity.messageId);
+				case "consumed": return acceptedResult(identity.messageId);
+			}
+		},
+		/**
+		* Card callback entry: ownership comes only from explicit markers. Pi cards
+		* always reach the original handler, in every mode and while frozen.
+		*/
+		routeCardAction: (piCardAction) => async (event) => {
+			const ownership = classifyFeishuCardOwnership(event);
+			if (ownership === "pi") {
+				if (!piCardAction) return piCardErrorResponse();
+				return piCardAction(event);
+			}
+			if (ownership !== "herdr") return deadCardResponse();
+			const message = parseFeishuTerminalAction(event, {});
+			if (!message) return deadCardResponse();
+			const identity = {
+				actorId: message.actorId,
+				chatId: message.chatId,
+				messageId: message.id,
+				messageType: "text",
+				sentAt: message.sentAt
+			};
+			if (options.target.scheduleAdmission !== void 0) {
+				const scheduled = await options.target.scheduleAdmission(() => route(identity, message).then(() => void 0));
+				if (scheduled === "accepted") return receivedCardResponse();
+				if (scheduled === "full") return notReceivedCardResponse();
+				return frozenCardResponse();
+			}
+			switch ((await route(identity, message)).kind) {
+				case "pi": return piCardAction ? piCardAction(event) : piCardErrorResponse();
+				case "skip": return duplicateCardResponse();
+				case "frozen": return frozenCardResponse();
+				case "consumed": return receivedCardResponse();
+			}
+		},
+		/** Bot menu events are Herdr-owned by their configured event_key. */
+		routeMenuEvent: async (event, menuChats) => {
+			const message = parseFeishuTerminalAction(event, menuChats);
+			if (!message) return;
+			await routeAwaited({
+				actorId: message.actorId,
+				chatId: message.chatId,
+				messageId: message.id,
+				messageType: "text",
+				sentAt: message.sentAt
+			}, message);
+		}
+	};
+}
+/**
+* Wraps the endpoint's real event dispatcher: Pi handlers stay under their own
+* keys, the three routed keys are replaced once, every other key is preserved,
+* and the underlying `register` return value reaches the WebSocket start
+* unchanged.
+*/
+function createRoutedFeishuEventDispatcher(inner, route, menuChats) {
+	return { register: (handlers) => {
+		const merged = {
+			...handlers,
+			"im.message.receive_v1": (payload) => route.message(handlers["im.message.receive_v1"])(payload),
+			"card.action.trigger": (payload) => route.card(handlers["card.action.trigger"])(payload),
+			"application.bot.menu_v6": (payload) => route.menu(payload, menuChats)
+		};
+		return inner.register(merged);
+	} };
+}
+/** Normalized event shape: {message, sender} at the top level. */
+const messageIdentitySchema = Schema.Struct({
+	message: Schema.optional(Schema.Struct({
+		chat_id: Schema.optional(Schema.String),
+		message_id: Schema.optional(Schema.String),
+		message_type: Schema.optional(Schema.String),
+		create_time: Schema.optional(Schema.String)
+	})),
+	sender: Schema.optional(Schema.Struct({ sender_id: Schema.optional(Schema.Struct({ open_id: Schema.optional(Schema.String) })) }))
+});
+const decodeMessageIdentity = Schema.decodeUnknownSync(messageIdentitySchema);
+/** Builds the gateway owner record identity from a normalized event payload. */
+function readMessageIdentity(event) {
+	let decoded;
+	try {
+		decoded = decodeMessageIdentity(event);
+	} catch {
+		return;
+	}
+	const message = decoded.message;
+	const messageId = message?.message_id;
+	const chatId = message?.chat_id;
+	const actorId = decoded.sender?.sender_id?.open_id;
+	if (!messageId || !chatId || !actorId) return;
+	return {
+		actorId,
+		chatId,
+		messageId,
+		messageType: message?.message_type ?? "",
+		sentAt: Number(message?.create_time)
+	};
+}
+//#endregion
+//#region src/adapters/outbound/persistence/message-gateway/file-route-admission-ledger.ts
+const admissionRecordSchema = Schema.Struct({
+	version: Schema.Literal(1),
+	appId: Schema.String,
+	messageId: Schema.String,
+	decision: Schema.Literals(["pi", "herdr"]),
+	actorId: Schema.String,
+	chatId: Schema.String,
+	at: Schema.Number,
+	target: Schema.optional(terminalAgentSchema)
+});
+const decodeAdmissionRecord = Schema.decodeUnknownSync(admissionRecordSchema);
+const isErrnoCode$1 = Schema.Struct({ code: Schema.String });
+/** Admissions and state directories reject any group/other permission or symlink. */
+function assertPrivateDirectory$1(info, label) {
+	if (info.isSymbolicLink() || !info.isDirectory()) throw new Error(`${label} is not a regular directory`);
+	if (info.uid !== process.getuid?.() || (info.mode & 63) !== 0) throw new Error(`Unsafe ${label} permissions or owner`);
+}
+function assertPrivateOwnerFile(info) {
+	if (info.isSymbolicLink() || !info.isFile()) throw new Error("Route admission owner is not a regular file");
+	if (info.uid !== process.getuid?.() || (info.mode & 127) !== 0) throw new Error("Unsafe route admission owner permissions or owner");
+}
+/**
+* Create the final-level admissions child inside an already-provisioned state
+* root (the shared claims opener owns the root) and sync the root entry durably.
+* A missing root is a startup failure with guidance — never an ancestor walk.
+*/
+async function createPrivateChildDirectory(path, mode, label, stateRoot) {
+	try {
+		await mkdir(path, {
+			recursive: false,
+			mode
+		});
+	} catch (error) {
+		if (Schema.is(isErrnoCode$1)(error) && error.code === "ENOENT") throw new Error(`Cannot create ${label}: the state directory ${stateRoot} does not exist; open the shared claims store first`);
+		if (!(Schema.is(isErrnoCode$1)(error) && error.code === "EEXIST")) throw error;
+	}
+	assertPrivateDirectory$1(await lstat(path), label);
+}
+async function syncDirectoryEntry(path) {
+	const handle = await open(path, "r");
+	try {
+		await handle.sync();
+	} finally {
+		await handle.close();
+	}
+}
+async function syncStateDirectory(path, label) {
+	try {
+		await syncDirectoryEntry(path);
+	} catch (error) {
+		throw new Error(`Cannot sync ${label}`, { cause: error });
+	}
+}
+/**
+* File-backed cross-route admission ledger (one irrevocable owner file per
+* appId/messageId).
+*
+* Lock ownership: the caller must already hold the shared state-directory lifetime
+* lock (`openTerminalMessageClaims`) for this directory and keep it for the
+* store's lifetime; this factory never acquires or releases a lock itself and
+* never opens a connection. Crash recovery is manual: lock files and
+* owner files are preserved; a lock is removed only after its owner is verified
+* stopped, never by PID/age-based theft.
+*/
+async function openFileRouteAdmissionLedger(directory, appId) {
+	const admissionsDirectory = join(directory, "route-admissions");
+	await createPrivateChildDirectory(admissionsDirectory, 448, "route admission directory", directory);
+	await syncStateDirectory(directory, "state directory");
+	const ownerPath = (messageId) => join(admissionsDirectory, `${createHash("sha256").update(JSON.stringify([appId, messageId])).digest("hex")}.json`);
+	const syncAdmissionsDirectory = async () => {
+		const handle = await open(admissionsDirectory, "r");
+		try {
+			await handle.sync();
+		} finally {
+			await handle.close();
+		}
+	};
+	const safeStatOwner = async (messageId) => {
+		const path = ownerPath(messageId);
+		assertPrivateOwnerFile(await lstat(path));
+		return path;
+	};
+	const decodeOwner = (raw, messageId) => {
+		let parsed;
+		try {
+			parsed = JSON.parse(raw);
+		} catch {
+			return { kind: "opaque-fence" };
+		}
+		let record;
+		try {
+			const validated = decodeAdmissionRecord(parsed);
+			record = {
+				appId: validated.appId,
+				messageId: validated.messageId,
+				decision: validated.decision,
+				actorId: validated.actorId,
+				chatId: validated.chatId,
+				at: validated.at,
+				...validated.target === void 0 ? {} : { target: validated.target }
+			};
+		} catch {
+			return { kind: "opaque-fence" };
+		}
+		if (record.appId !== appId || record.messageId !== messageId) throw new Error("Route admission owner belongs to another app or event");
+		return {
+			kind: "record",
+			record
+		};
+	};
+	/**
+	* One safe flow for lookup and EEXIST: an existing owner is stat-validated
+	* first (unsafe files fail before being read or synced); only a valid complete
+	* record is re-synchronized (owner file, admissions directory, closes) before
+	* it is returned, because visibility alone is not durable proof. Partial or
+	* corrupt owners return their opaque fence immediately; failures propagate —
+	* once an owner has been observed by lstat, even ENOENT on the read or during
+	* recovery is a failure, never a downgrade to missing.
+	*/
+	/** Shared read/decode/fsync/finally-close plus admissions-dir resync for an already stat-validated owner. */
+	const readAndSyncOwner = async (validatedPath, messageId) => {
+		const lookup = decodeOwner(await readFile(validatedPath, "utf8"), messageId);
+		if (lookup.kind !== "record") return lookup;
+		const handle = await open(validatedPath, "r+");
+		try {
+			await handle.sync();
+		} finally {
+			await handle.close();
+		}
+		await syncAdmissionsDirectory();
+		return lookup;
+	};
+	const loadExisting = async (messageId) => {
+		const path = await safeStatOwner(messageId);
+		return readAndSyncOwner(path, messageId);
+	};
+	return {
+		lookup: (messageId) => Effect.uninterruptible(Effect.tryPromise({
+			try: async () => {
+				let path;
+				try {
+					path = await safeStatOwner(messageId);
+				} catch (error) {
+					if (Schema.is(isErrnoCode$1)(error) && error.code === "ENOENT") return { kind: "missing" };
+					throw error;
+				}
+				return await readAndSyncOwner(path, messageId);
+			},
+			catch: (error) => error
+		})),
+		admit: (input) => Effect.uninterruptible(Effect.tryPromise({
+			try: async () => {
+				const record = decodeAdmissionRecord({
+					...input,
+					version: 1
+				});
+				if (record.appId !== appId) throw new Error("Route admission record belongs to another app");
+				if (record.decision === "pi" && record.target !== void 0) throw new Error("A pi route admission never carries a Herdr target");
+				const path = ownerPath(record.messageId);
+				let handle;
+				try {
+					handle = await open(path, "wx", 384);
+				} catch (error) {
+					if (Schema.is(isErrnoCode$1)(error) && error.code === "EEXIST") {
+						const lookup = await loadExisting(record.messageId);
+						return lookup.kind === "record" ? {
+							kind: "existing",
+							record: lookup.record
+						} : { kind: "existing-opaque" };
+					}
+					throw error;
+				}
+				try {
+					await handle.writeFile(JSON.stringify({
+						...record,
+						version: 1
+					}), "utf8");
+					await handle.sync();
+					await syncAdmissionsDirectory();
+				} catch (error) {
+					await handle.close().catch(() => void 0);
+					throw error;
+				}
+				await handle.close();
+				return {
+					kind: "created",
+					record
+				};
+			},
+			catch: (error) => error
+		}))
+	};
+}
+//#endregion
+//#region src/adapters/outbound/persistence/terminal-session/terminal-conversation-states.ts
+const modeStateSchema = Schema.Union([Schema.Struct({
+	kind: Schema.Literal("selection"),
+	actorId: Schema.String,
+	chatId: Schema.String,
+	since: Schema.Number
+}), Schema.Struct({
+	kind: Schema.Literal("locked"),
+	actorId: Schema.String,
+	chatId: Schema.String,
+	since: Schema.Number,
+	handle: Schema.String,
+	agent: terminalAgentSchema,
+	stale: Schema.Boolean
+})]);
+const snapshotSchema = Schema.Struct({
+	version: Schema.Literal(1),
+	appId: Schema.String,
+	states: Schema.Array(modeStateSchema)
+});
+const decodeSnapshot = Schema.decodeUnknownSync(snapshotSchema);
+const isErrnoCode = Schema.Struct({ code: Schema.String });
+function assertStateCollection(states) {
+	if (states.length > 64) throw new Error("Conversation state snapshot exceeds capacity");
+	if (new Set(states.map((state) => `${state.actorId}\u0000${state.chatId}`)).size !== states.length) throw new Error("Conversation state snapshot contains duplicate conversations");
+}
+function assertPrivateDirectory(info) {
+	if (info.isSymbolicLink() || !info.isDirectory()) throw new Error("Conversation state directory is not a regular directory");
+	if (info.uid !== process.getuid?.() || (info.mode & 63) !== 0) throw new Error("Unsafe conversation state directory permissions or owner");
+}
+function assertPrivateFile(info, label) {
+	if (info.isSymbolicLink() || !info.isFile()) throw new Error(`${label} is not a regular file`);
+	if (info.uid !== process.getuid?.() || (info.mode & 127) !== 0) throw new Error(`Unsafe ${label} permissions or owner`);
+}
+/**
+* Versioned per-app conversation mode snapshot (selection/locked states) with a
+* durable initialization marker.
+*
+* Lock ownership: the caller must already hold the shared state-directory lifetime
+* lock (`openTerminalMessageClaims`) for this directory and keep it for the
+* store's lifetime; this factory never acquires a lock, releases one, or opens a
+* connection. Crash recovery is manual: an interrupted
+* initialization or a snapshot missing after initialization refuses startup
+* (fail closed) instead of erasing modes; an operator removes a stale lock only
+* after the previous owner is verified stopped.
+*/
+async function openTerminalConversationStates(directory, appId) {
+	assertPrivateDirectory(await lstat(directory));
+	const digest = createHash("sha256").update(appId).digest("hex");
+	const snapshotPath = join(directory, `conversation-states-${digest}.json`);
+	const markerPath = join(directory, `.conversation-states-initialized-${digest}`);
+	const safeFile = async (path, label) => {
+		const info = await lstat(path);
+		if (!info.isFile()) throw new Error(`${label} is not a regular file`);
+		assertPrivateFile(info, label);
+	};
+	const readStates = async () => {
+		await safeFile(snapshotPath, "Conversation state snapshot");
+		let snapshot;
+		try {
+			snapshot = decodeSnapshot(JSON.parse(await readFile(snapshotPath, "utf8")));
+		} catch (error) {
+			throw new Error("Cannot restore conversation states", { cause: error });
+		}
+		if (snapshot.appId !== appId) throw new Error("Conversation state snapshot belongs to another app");
+		const states = snapshot.states;
+		assertStateCollection(states);
+		return states;
+	};
+	const durableSyncDirectory = async () => {
+		const handle = await open(directory, "r");
+		try {
+			await handle.sync();
+		} finally {
+			await handle.close();
+		}
+	};
+	const createMarker = async () => {
+		const marker = await open(markerPath, "wx", 384);
+		try {
+			await marker.writeFile(JSON.stringify({
+				version: 1,
+				appId
+			}));
+			await marker.sync();
+			await durableSyncDirectory();
+			await marker.close();
+		} catch (error) {
+			await marker.close().catch(() => void 0);
+			throw error;
+		}
+	};
+	const markerStat = await lstat(markerPath).catch((error) => {
+		if (Schema.is(isErrnoCode)(error) && error.code === "ENOENT") return;
+		throw error;
+	});
+	if (markerStat !== void 0) {
+		if (!markerStat.isFile()) throw new Error("Conversation state initialization marker is not a regular file");
+		assertPrivateFile(markerStat, "Conversation state initialization marker");
+	}
+	const snapshotStat = await lstat(snapshotPath).catch((error) => {
+		if (Schema.is(isErrnoCode)(error) && error.code === "ENOENT") return;
+		throw error;
+	});
+	let initial;
+	if (markerStat === void 0 && snapshotStat === void 0) {
+		await createMarker();
+		initial = [];
+		await writeAtomicTextFile(snapshotPath, JSON.stringify({
+			version: 1,
+			appId,
+			states: []
+		}), {
+			mode: 384,
+			durable: true
+		});
+	} else {
+		if (markerStat === void 0) throw new Error("Conversation state initialization is ambiguous; refusing startup");
+		if (snapshotStat === void 0) throw new Error("Conversation state snapshot is missing after initialization");
+		initial = await readStates();
+		await writeAtomicTextFile(snapshotPath, JSON.stringify({
+			version: 1,
+			appId,
+			states: initial
+		}), {
+			mode: 384,
+			durable: true
+		});
+	}
+	return {
+		initial,
+		save: (states) => Effect.uninterruptible(Effect.tryPromise({
+			try: async () => {
+				assertStateCollection(states);
+				const validated = decodeSnapshot({
+					version: 1,
+					appId,
+					states
+				});
+				await writeAtomicTextFile(snapshotPath, JSON.stringify({
+					version: 1,
+					appId,
+					states: validated.states
+				}), {
+					mode: 384,
+					durable: true
+				});
+			},
+			catch: (error) => error
+		}))
+	};
+}
+//#endregion
+//#region src/bootstrap/feishu/embedded-herdr-route.ts
+const herdrRouteConfigSchema = embeddedHerdrRouteSchema;
+/**
+* Parses RIVUS_HERDR_ROUTE_CONFIG and fails the assembly unless exactly one
+* enabled endpoint resolves to the configured appId. A missing variable keeps
+* the deployment entirely on the Pi path.
+*/
+async function resolveHerdrRouteConfig(env, manifest) {
+	const configPath = env.RIVUS_HERDR_ROUTE_CONFIG?.trim();
+	if (!configPath) return;
+	if (!isAbsolute(configPath)) throw new Error(`RIVUS_HERDR_ROUTE_CONFIG must be an absolute path: ${configPath}`);
+	let config;
+	try {
+		const raw = await readFile(configPath, "utf8");
+		config = Schema.decodeUnknownSync(herdrRouteConfigSchema)(JSON.parse(raw));
+	} catch (error) {
+		throw new Error(`Invalid RIVUS_HERDR_ROUTE_CONFIG at ${configPath}`, { cause: error });
+	}
+	if ((config.sessions?.length ?? 0) > 0 === (config.discoverSessionsIn !== void 0)) throw new Error("RIVUS_HERDR_ROUTE_CONFIG requires exactly one of sessions or discoverSessionsIn");
+	for (const [actor, chat] of Object.entries(config.menuChats ?? {})) if (!config.allowedActors.includes(actor) || !config.allowedChats.includes(chat)) throw new Error("Herdr route menu destinations must be allowlisted");
+	const matched = manifest.endpoints.filter((endpoint) => {
+		if (!endpoint.enabled) return false;
+		try {
+			return resolveFeishuEndpointCredentials(endpoint.credentialRef, env).appId === config.appId;
+		} catch {
+			return false;
+		}
+	});
+	if (matched.length !== 1) throw new Error(`RIVUS_HERDR_ROUTE_CONFIG appId must match exactly one enabled endpoint (matched ${matched.length})`);
+	return {
+		appId: config.appId,
+		endpointId: matched[0].id,
+		allowedActors: config.allowedActors,
+		allowedChats: config.allowedChats,
+		stateDirectory: config.stateDirectory,
+		writable: config.writable === true,
+		...config.sessions === void 0 ? {} : { sessions: config.sessions },
+		...config.discoverSessionsIn === void 0 ? {} : { discoverSessionsIn: config.discoverSessionsIn },
+		...config.menuChats === void 0 ? {} : { menuChats: config.menuChats },
+		...config.fontFiles === void 0 ? {} : { fontFiles: config.fontFiles }
+	};
+}
+/**
+* Startup-built pre-upgrade Pi fence: the same inbox file decoded with the same
+* codec the live store uses, reduced to received ids of any status. Corruption
+* fails the endpoint assembly before any WebSocket starts.
+*/
+async function buildLegacyPiInboxIndex(filePath) {
+	const deliveries = decodeInboundDeliverySnapshots(await readPersistenceFile(filePath), {
+		acceptLegacySameAttemptClaims: true,
+		label: "Feishu inbox",
+		payload: feishuInboundDeliveryPayloadCodec
+	});
+	return new Set(deliveries.map((delivery) => delivery.id));
+}
+/**
+* Opens every embedded Herdr store (claims lock, bindings, mode snapshot,
+* owner ledger) plus the connection-less runtime and router. The opener
+* Promise is allocated lazily inside the Effect and joined on interruption:
+* a cancelled hand still waits for the stores it may have acquired and
+* releases them instead of leaving an ownerless lock holder behind.
+*/
+function openEmbeddedHerdrRoute(input) {
+	return Effect.suspend(() => {
+		const opener = buildEmbeddedHerdrRoute(input);
+		return Effect.onInterrupt(Effect.tryPromise({
+			catch: (error) => error,
+			try: () => opener
+		}), () => Effect.promise(() => opener.then((opened) => opened.runtime.stop().then(() => void 0, () => void 0), () => void 0)));
+	});
+}
+async function buildEmbeddedHerdrRoute(input) {
+	const { herdr } = input;
+	return (async () => {
+		const legacyPiIds = await buildLegacyPiInboxIndex(join(input.endpointStateDirectory, "feishu-inbox.jsonl"));
+		const claims = await openTerminalMessageClaims(herdr.stateDirectory, herdr.appId);
+		const closeClaims = () => claims.close().catch(() => void 0);
+		let bindings;
+		let states;
+		let ledger;
+		let stopState;
+		let runtime;
+		let router;
+		try {
+			bindings = await openTerminalBindingsStore(herdr.stateDirectory, herdr.appId);
+			states = await openTerminalConversationStates(herdr.stateDirectory, herdr.appId);
+			ledger = await openFileRouteAdmissionLedger(herdr.stateDirectory, herdr.appId);
+			stopState = { stopped: false };
+			runtime = createHerdrFeishuBridgeRuntime({
+				sessions: createHerdrSocketClient(herdr.sessions ?? [], 5e3, herdr.discoverSessionsIn),
+				actors: herdr.allowedActors,
+				chats: herdr.allowedChats,
+				writable: herdr.writable,
+				claim: claims.claim,
+				bindings,
+				conversation: {
+					epoch: randomUUID(),
+					states
+				},
+				delivery: createFeishuTerminalDelivery(new Lark.Client({
+					appId: herdr.appId,
+					appSecret: input.appSecret,
+					domain: input.baseUrl,
+					loggerLevel: Lark.LoggerLevel.error
+				}), { isStopped: () => stopState.stopped }),
+				...herdr.fontFiles === void 0 ? {} : { fontFiles: herdr.fontFiles },
+				stopState,
+				closeStores: () => claims.close()
+			});
+			router = createFeishuConversationRouter({
+				appId: herdr.appId,
+				bridge: runtime.bridge,
+				ledger,
+				actors: herdr.allowedActors,
+				chats: herdr.allowedChats,
+				legacyOwnerOf: (messageId) => Effect.gen(function* () {
+					const claimed = yield* claims.hasClaim(messageId);
+					const pi = legacyPiIds.has(messageId);
+					if (pi && claimed) return "conflict";
+					if (pi) return "pi";
+					return claimed ? "herdr" : "none";
+				}),
+				groupPolicy: input.groupPolicy,
+				botOpenId: input.botOpenId,
+				target: runtime
+			});
+		} catch (error) {
+			await closeClaims();
+			throw error;
+		}
+		return {
+			runtime,
+			routedDispatcher: () => createRoutedFeishuEventDispatcher(new Lark.EventDispatcher({}), {
+				message: router.routeMessage,
+				card: router.routeCardAction,
+				menu: router.routeMenuEvent
+			}, herdr.menuChats ?? {})
+		};
+	})();
+}
+function wrapEmbeddedHerdrEndpointLifecycle(endpoint, runtime) {
+	return {
+		running: () => endpoint.running(),
+		start: () => Effect.uninterruptibleMask((restore) => Effect.gen(function* () {
+			yield* Effect.tryPromise({
+				catch: (error) => error,
+				try: () => runtime.start()
+			});
+			const startExit = yield* Effect.exit(restore(Effect.suspend(() => endpoint.start())));
+			if (Exit.isFailure(startExit)) {
+				yield* Effect.exit(Effect.tryPromise({
+					catch: () => void 0,
+					try: () => runtime.stop()
+				}));
+				return yield* Effect.failCause(startExit.cause);
+			}
+		})),
+		stop: () => Effect.uninterruptible(Effect.gen(function* () {
+			yield* Effect.sync(() => runtime.stopIntake());
+			const endpointExit = yield* Effect.exit(endpoint.stop());
+			const drainExit = yield* Effect.exit(Effect.tryPromise({
+				catch: (error) => error,
+				try: () => runtime.completeStop()
+			}));
+			if (Exit.isFailure(endpointExit)) return yield* Effect.failCause(endpointExit.cause);
+			if (Exit.isFailure(drainExit)) return yield* Effect.failCause(drainExit.cause);
+		}))
+	};
+}
+//#endregion
 //#region src/adapters/feishu/run-presentation/feishu-presentation-preparation.ts
 function createFeishuPresentationPreparation(options) {
 	return (run) => Effect.gen(function* () {
-		const cotPrepared = options.cotPublisher ? yield* options.cotPublisher.prepare(run).pipe(Effect.as(true), Effect.catchAll((error) => options.reportCotError("create", error).pipe(Effect.as(false)))) : false;
+		const cotPrepared = options.cotPublisher ? yield* options.cotPublisher.prepare(run).pipe(Effect.as(true), Effect.catch((error) => options.reportCotError("create", error).pipe(Effect.as(false)))) : false;
 		yield* options.prepareCardTarget(run).pipe(Effect.onExit((exit) => {
 			if (Exit.isSuccess(exit) || !options.cotPublisher || !cotPrepared) return Effect.void;
-			return options.cotPublisher.fail(run.runId).pipe(Effect.catchAllCause((cause) => options.reportCotError("abort", Cause.squash(cause))), Effect.catchAllCause(() => Effect.void));
+			return options.cotPublisher.fail(run.runId).pipe(Effect.catchCause((cause) => options.reportCotError("abort", Cause.squash(cause))), Effect.catchCause(() => Effect.void));
 		}));
 	});
 }
@@ -13233,7 +14210,7 @@ function replaceChain(chains, replacement) {
 //#region src/adapters/outbound/persistence/card-presentation/in-memory-card-presentation-repository.ts
 function createInMemoryCardPresentationRepository(options = {}) {
 	let chains = cloneAndValidate(options.initial ?? []);
-	const semaphore = Effect.unsafeMakeSemaphore(1);
+	const semaphore = Semaphore.makeUnsafe(1);
 	return {
 		snapshot: () => structuredClone(chains),
 		transact: (decide) => semaphore.withPermits(1)(Effect.uninterruptible(Effect.gen(function* () {
@@ -13375,7 +14352,7 @@ var FeishuCardTargetRegistryStoreError = class {
 };
 function createJsonFileFeishuCardTargetRegistry(options) {
 	let loaded;
-	const semaphore = Effect.unsafeMakeSemaphore(1);
+	const semaphore = Semaphore.makeUnsafe(1);
 	const ready = () => {
 		if (loaded) return Effect.succeed(loaded);
 		return semaphore.withPermits(1)(loaded ? Effect.succeed(loaded) : openJsonCardPresentationRepository(options).pipe(Effect.map(createCardPresentationService), Effect.mapError(toRegistryStoreError), Effect.tap((service) => Effect.sync(() => {
@@ -14254,7 +15231,7 @@ function createEffectSessionScheduler(options) {
 	const readySet = /* @__PURE__ */ new Set();
 	const activeSessions = /* @__PURE__ */ new Set();
 	const inFlight = /* @__PURE__ */ new Map();
-	const serial = Effect.unsafeMakeSemaphore(1);
+	const serial = Semaphore.makeUnsafe(1);
 	let queuedRuns = 0;
 	let disposed = false;
 	const markReady = (sessionKey) => {
@@ -14275,7 +15252,7 @@ function createEffectSessionScheduler(options) {
 		readySet.delete(sessionKey);
 		const readyIndex = readySessions.indexOf(sessionKey);
 		if (readyIndex >= 0) readySessions.splice(readyIndex, 1);
-	})).pipe(Effect.zipRight(Deferred.succeed(scheduled.interruption, void 0)), Effect.asVoid);
+	})).pipe(Effect.andThen(Deferred.succeed(scheduled.interruption, void 0)), Effect.asVoid);
 	const pump = () => Effect.gen(function* () {
 		const selected = yield* serial.withPermits(1)(Effect.gen(function* () {
 			const runs = [];
@@ -14300,11 +15277,11 @@ function createEffectSessionScheduler(options) {
 			}
 			return runs;
 		}));
-		yield* Effect.forEach(selected, ({ cacheEntry, completion, scheduled }) => Effect.forkDaemon(Effect.raceFirst(runtimes.start(cacheEntry, () => options.createRuntime(scheduled.input.sessionKey)).pipe(Effect.zipRight(Deferred.await(cacheEntry.deferred)), Effect.flatMap((runtime) => serial.withPermits(1)(Effect.sync(() => !disposed && inFlight.get(scheduled.input.sessionKey)?.scheduled === scheduled)).pipe(Effect.flatMap((mayRun) => mayRun ? runtime.run(scheduled.input) : Effect.fail(new SessionRuntimeSchedulerDisposed("session scheduler was disposed")))))), Deferred.await(scheduled.interruption).pipe(Effect.zipRight(Effect.interrupt))).pipe(Effect.interruptible, Effect.exit, Effect.tap((exit) => Deferred.done(scheduled.deferred, exit)), Effect.ensuring(serial.withPermits(1)(Effect.sync(() => {
+		yield* Effect.forEach(selected, ({ cacheEntry, completion, scheduled }) => Effect.forkDetach(Effect.raceFirst(runtimes.start(cacheEntry, () => options.createRuntime(scheduled.input.sessionKey)).pipe(Effect.andThen(Deferred.await(cacheEntry.deferred)), Effect.flatMap((runtime) => serial.withPermits(1)(Effect.sync(() => !disposed && inFlight.get(scheduled.input.sessionKey)?.scheduled === scheduled)).pipe(Effect.flatMap((mayRun) => mayRun ? runtime.run(scheduled.input) : Effect.fail(new SessionRuntimeSchedulerDisposed("session scheduler was disposed")))))), Deferred.await(scheduled.interruption).pipe(Effect.andThen(Effect.interrupt))).pipe(Effect.interruptible, Effect.exit, Effect.tap((exit) => Deferred.done(scheduled.deferred, exit)), Effect.ensuring(serial.withPermits(1)(Effect.sync(() => {
 			activeSessions.delete(scheduled.input.sessionKey);
 			if (inFlight.get(scheduled.input.sessionKey)?.scheduled === scheduled) inFlight.delete(scheduled.input.sessionKey);
 			if ((queues.get(scheduled.input.sessionKey)?.length ?? 0) > 0) markReady(scheduled.input.sessionKey);
-		})).pipe(Effect.zipRight(Deferred.succeed(completion, void 0)), Effect.asVoid)), Effect.flatMap(() => pump()))), { discard: true });
+		})).pipe(Effect.andThen(Deferred.succeed(completion, void 0)), Effect.asVoid)), Effect.flatMap(() => pump())), { uninterruptible: "inherit" }), { discard: true });
 	});
 	const existingRuntime = (sessionKey) => Effect.gen(function* () {
 		const selected = yield* runtimes.getExisting(sessionKey);
@@ -14757,19 +15734,19 @@ function createAutomationScheduler(options) {
 	const mandate = mandates.activate(options.binding);
 	const clock = options.clock ?? systemClock;
 	const schedule = createDailyAutomationSchedule(options.binding.schedule, options.binding.timeZone, clock.now());
-	const execution = Effect.unsafeMakeSemaphore(1);
-	const lifecycle = Effect.unsafeMakeSemaphore(1);
+	const execution = Semaphore.makeUnsafe(1);
+	const lifecycle = Semaphore.makeUnsafe(1);
 	let loopFiber;
 	let running = false;
 	const runDue = (at) => execution.withPermits(1)(executeDue(options, schedule, at, (occurrence) => mandates.claim(mandate.id, occurrence, options.binding.servicePrincipalId)));
 	const start = () => lifecycle.withPermits(1)(Effect.suspend(() => {
 		if (running) return Effect.void;
 		running = true;
-		const loop = runScheduleLoop(options, schedule, clock, runDue).pipe(Effect.catchAll((error) => notifyError(options.onError, error)), Effect.ensuring(Effect.sync(() => {
+		const loop = runScheduleLoop(options, schedule, clock, runDue).pipe(Effect.catch((error) => notifyError(options.onError, error)), Effect.ensuring(Effect.sync(() => {
 			running = false;
 			loopFiber = void 0;
 		})));
-		return Effect.forkDaemon(loop).pipe(Effect.tap((fiber) => Effect.sync(() => {
+		return Effect.forkDetach(loop, { uninterruptible: "inherit" }).pipe(Effect.tap((fiber) => Effect.sync(() => {
 			if (running) loopFiber = fiber;
 		})), Effect.asVoid);
 	}));
@@ -14830,7 +15807,7 @@ function executeDue(options, schedule, at, claim) {
 				body: result.body,
 				...result.presentation === void 0 ? {} : { presentation: result.presentation },
 				runId: result.runId
-			}))))), Effect.catchAll((error) => options.repository.save(running.fail(automationFailureMessage(error))).pipe(Effect.zipRight(Effect.fail(error)))));
+			}))))), Effect.catch((error) => options.repository.save(running.fail(automationFailureMessage(error))).pipe(Effect.andThen(Effect.fail(error)))));
 		}
 		if (record.status === "suppressed") return record;
 		const snapshot = record.toSnapshot();
@@ -14864,7 +15841,7 @@ function automationFailureMessage(error) {
 	return message.trim() === "" ? "Unknown Automation run failure" : message;
 }
 function notifyError(onError, error) {
-	return (onError?.(error) ?? Effect.void).pipe(Effect.catchAll(() => Effect.void));
+	return (onError?.(error) ?? Effect.void).pipe(Effect.catch(() => Effect.void));
 }
 const systemClock = {
 	now: () => /* @__PURE__ */ new Date(),
@@ -15146,112 +16123,6 @@ function append(filePath, record) {
 	});
 }
 //#endregion
-//#region src/adapters/feishu/inbound-delivery/jsonl-inbound-delivery-store.ts
-function openJsonlInboundDeliveryStore(options) {
-	const codecOptions = {
-		...options.acceptLegacySameAttemptClaims === void 0 ? {} : { acceptLegacySameAttemptClaims: options.acceptLegacySameAttemptClaims },
-		label: options.label ?? "Inbound Delivery",
-		payload: options.payload
-	};
-	return Effect.gen(function* () {
-		const raw = yield* Effect.tryPromise({
-			try: () => readPersistenceFile(options.filePath),
-			catch: (cause) => cause
-		});
-		return createInMemoryDurableQueueStore({
-			initial: yield* Effect.try({
-				try: () => decodeInboundDeliverySnapshots(raw, codecOptions),
-				catch: (cause) => cause
-			}),
-			persist: (delivery) => appendInboundDeliverySnapshot(options.filePath, delivery)
-		});
-	});
-}
-function decodeInboundDeliverySnapshots(raw, options) {
-	if (raw === void 0) return [];
-	const latest = /* @__PURE__ */ new Map();
-	for (const [index, line] of raw.split("\n").entries()) {
-		if (line.trim().length === 0) continue;
-		let parsed;
-		try {
-			parsed = JSON.parse(line);
-		} catch {
-			throw new Error(`invalid ${options.label} snapshot at line ${index + 1}`);
-		}
-		if (!isEnvelope(parsed)) throw new Error(`invalid ${options.label} snapshot at line ${index + 1}`);
-		let delivery;
-		try {
-			delivery = decodeDelivery(parsed.delivery, options.payload);
-		} catch {
-			throw new Error(`invalid ${options.label} snapshot at line ${index + 1}`);
-		}
-		const previous = latest.get(delivery.id);
-		if (delivery.revision !== (previous?.revision ?? 0) + 1) throw new Error(`invalid ${options.label} revision at line ${index + 1}`);
-		try {
-			if (previous) {
-				if (!isValidPersistedTransition(previous, delivery, options.acceptLegacySameAttemptClaims ?? false)) throw new Error("transition");
-			} else assertNewInboundDelivery(delivery);
-		} catch {
-			throw new Error(`invalid ${options.label} transition at line ${index + 1}`);
-		}
-		latest.set(delivery.id, delivery);
-	}
-	return [...latest.values()];
-}
-function encodeInboundDeliverySnapshot(delivery) {
-	const snapshot = readInboundDeliverySnapshot(delivery);
-	const persisted = {
-		acceptedAt: snapshot.acceptedAt,
-		attempts: snapshot.attempts,
-		id: snapshot.id,
-		laneKey: snapshot.laneKey,
-		...snapshot.metadata === void 0 ? {} : { options: snapshot.metadata },
-		payload: snapshot.payload,
-		...snapshot.recovery === void 0 ? {} : { recovery: snapshot.recovery },
-		revision: snapshot.revision,
-		state: snapshot.state
-	};
-	return JSON.stringify({
-		delivery: persisted,
-		version: 1
-	});
-}
-function decodeDelivery(value, payloadCodec) {
-	if (!isRecord(value) || typeof value.acceptedAt !== "string" || typeof value.attempts !== "number" || typeof value.id !== "string" || typeof value.laneKey !== "string" || typeof value.revision !== "number") throw new Error("invalid Inbound Delivery snapshot");
-	const metadata = payloadCodec.decodeMetadata(value.options);
-	return readInboundDeliverySnapshot({
-		acceptedAt: value.acceptedAt,
-		attempts: value.attempts,
-		id: value.id,
-		laneKey: value.laneKey,
-		...metadata === void 0 ? {} : { metadata },
-		payload: payloadCodec.decodePayload(value.payload),
-		...value.recovery === void 0 ? {} : { recovery: value.recovery },
-		revision: value.revision,
-		state: value.state
-	});
-}
-function isEnvelope(value) {
-	return isRecord(value) && value.version === 1 && "delivery" in value;
-}
-function isValidPersistedTransition(previous, next, acceptLegacySameAttemptClaims) {
-	if (isValidInboundDeliveryTransition(previous, next)) return true;
-	if (!acceptLegacySameAttemptClaims || previous.state.status !== "pending" || next.state.status !== "leased" || next.attempts !== previous.attempts) return false;
-	return isValidInboundDeliveryTransition(previous, {
-		...next,
-		attempts: next.attempts + 1
-	});
-}
-function appendInboundDeliverySnapshot(filePath, delivery) {
-	return Effect.tryPromise({
-		try: async () => {
-			await mkdir(dirname(filePath), { recursive: true });
-			await appendFile(filePath, `${encodeInboundDeliverySnapshot(delivery)}\n`, "utf8");
-		},
-		catch: (cause) => cause
-	});
-}
-//#endregion
 //#region src/adapters/feishu/conversation-session/json-feishu-session-store.ts
 function openJsonFeishuSessionStore(options) {
 	return Effect.tryPromise({
@@ -15752,7 +16623,7 @@ function listChildDirectories(parent) {
 	return Effect.tryPromise({
 		try: () => readdir(parent, { withFileTypes: true }),
 		catch: (error) => error
-	}).pipe(Effect.map((entries) => entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name).sort((left, right) => left.localeCompare(right))), Effect.catchAll((error) => error instanceof Error && "code" in error && error.code === "ENOENT" ? Effect.succeed([]) : Effect.fail(error)));
+	}).pipe(Effect.map((entries) => entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name).sort((left, right) => left.localeCompare(right))), Effect.catch((error) => error instanceof Error && "code" in error && error.code === "ENOENT" ? Effect.succeed([]) : Effect.fail(error)));
 }
 //#endregion
 //#region src/bootstrap/pi/pi-session-options.ts
@@ -15852,7 +16723,7 @@ function createBackgroundSessionDeliveryQueue(options) {
 	return {
 		drain: () => Effect.gen(function* () {
 			const records = yield* fromPromise$1(() => options.deliveries.pending());
-			yield* Effect.forEach(records, (record) => fromPromise$1(() => options.deliver(record)).pipe(Effect.flatMap(({ providerMessageId }) => fromPromise$1(() => options.deliveries.markDelivered(record.deliveryId, providerMessageId))), Effect.tap((delivered) => delivered ? Effect.sync(options.onDelivered) : Effect.void), Effect.catchAll((error) => options.onError === void 0 ? Effect.void : Effect.sync(() => options.onError?.(error))), Effect.asVoid), { discard: true });
+			yield* Effect.forEach(records, (record) => fromPromise$1(() => options.deliver(record)).pipe(Effect.flatMap(({ providerMessageId }) => fromPromise$1(() => options.deliveries.markDelivered(record.deliveryId, providerMessageId))), Effect.tap((delivered) => delivered ? Effect.sync(options.onDelivered) : Effect.void), Effect.catch((error) => options.onError === void 0 ? Effect.void : Effect.sync(() => options.onError?.(error))), Effect.asVoid), { discard: true });
 		}),
 		enqueue: (sessionId, kind, text, session) => {
 			if (text.trim() === "") return Effect.void;
@@ -15934,7 +16805,7 @@ function createBackgroundSessionSupervisor(options) {
 	const owner = `supervisor:${options.createId()}`;
 	const inFlight = /* @__PURE__ */ new Map();
 	const stepControllers = /* @__PURE__ */ new Map();
-	const supervision = Effect.unsafeMakeSemaphore(1);
+	const supervision = Semaphore.makeUnsafe(1);
 	const counters = {
 		completed: 0,
 		deliveriesDelivered: 0,
@@ -15956,7 +16827,7 @@ function createBackgroundSessionSupervisor(options) {
 		},
 		...options.onError === void 0 ? {} : { onError: options.onError }
 	});
-	const reportError = (error) => options.onError === void 0 ? Effect.void : Effect.sync(() => options.onError?.(error)).pipe(Effect.catchAllCause(() => Effect.void));
+	const reportError = (error) => options.onError === void 0 ? Effect.void : Effect.sync(() => options.onError?.(error)).pipe(Effect.catchCause(() => Effect.void));
 	const repositoryGet = (sessionId) => fromPromise(() => options.repository.get(sessionId));
 	const repositoryList = () => fromPromise(() => options.repository.list());
 	const persistTransition = (input) => Effect.uninterruptible(fromPromise(() => commitBackgroundSessionTransition({
@@ -16084,7 +16955,7 @@ function createBackgroundSessionSupervisor(options) {
 				wakeText: buildInterruptedBackgroundSessionWakeText(state)
 			})
 		});
-	}).pipe(Effect.catchAll((error) => reportError(error)), Effect.asVoid);
+	}).pipe(Effect.catch((error) => reportError(error)), Effect.asVoid);
 	const renewLeaseOnce = (sessionId, lease, controller) => Effect.gen(function* () {
 		const current = yield* repositoryGet(sessionId);
 		if (!current || current.lease === void 0 || current.lease.owner !== owner || current.lease.epoch !== lease.epoch) {
@@ -16111,8 +16982,8 @@ function createBackgroundSessionSupervisor(options) {
 		return true;
 	});
 	const renewLease = (sessionId, lease, controller) => {
-		const cycle = Effect.suspend(() => options.sleep(options.config.leaseRenewalIntervalMs).pipe(Effect.flatMap(() => renewLeaseOnce(sessionId, lease, controller)), Effect.flatMap((renewed) => renewed ? cycle : Effect.void), Effect.catchAllCause((cause) => {
-			if (Cause.isInterruptedOnly(cause)) return Effect.interrupt;
+		const cycle = Effect.suspend(() => options.sleep(options.config.leaseRenewalIntervalMs).pipe(Effect.flatMap(() => renewLeaseOnce(sessionId, lease, controller)), Effect.flatMap((renewed) => renewed ? cycle : Effect.void), Effect.catchCause((cause) => {
+			if (Cause.hasInterruptsOnly(cause)) return Effect.interrupt;
 			controller.abort(/* @__PURE__ */ new Error(`background session lease renewal failed: ${backgroundSessionErrorMessage(Cause.squash(cause))}`));
 			return Effect.void;
 		})));
@@ -16134,7 +17005,7 @@ function createBackgroundSessionSupervisor(options) {
 				wakeText: `步骤结果提交失败（${backgroundSessionErrorMessage(error)}），将重试`
 			})
 		});
-	}).pipe(Effect.catchAll((commitError) => reportError(commitError)), Effect.asVoid);
+	}).pipe(Effect.catch((commitError) => reportError(commitError)), Effect.asVoid);
 	const commitStep = (claimed, outcome, lease) => Effect.gen(function* () {
 		const now = options.clock.now();
 		const current = yield* repositoryGet(claimed.sessionId);
@@ -16239,7 +17110,7 @@ function createBackgroundSessionSupervisor(options) {
 		const controller = new AbortController();
 		stepControllers.set(session.sessionId, controller);
 		yield* Effect.gen(function* () {
-			const outcome = yield* Effect.acquireUseRelease(Effect.fork(renewLease(session.sessionId, lease, controller).pipe(Effect.interruptible)), () => options.runStep({
+			const outcome = yield* Effect.acquireUseRelease(Effect.forkChild(renewLease(session.sessionId, lease, controller), { uninterruptible: false }), () => options.runStep({
 				session: claimed,
 				signal: controller.signal,
 				wakeText
@@ -16253,16 +17124,16 @@ function createBackgroundSessionSupervisor(options) {
 					result
 				})
 			})), (fiber) => Fiber.interrupt(fiber).pipe(Effect.asVoid));
-			yield* Effect.uninterruptible(commitStep(claimed, outcome, lease).pipe(Effect.catchAll((error) => reportError(error).pipe(Effect.flatMap(() => requeueAfterFailedCommit(session.sessionId, lease, error))))));
+			yield* Effect.uninterruptible(commitStep(claimed, outcome, lease).pipe(Effect.catch((error) => reportError(error).pipe(Effect.flatMap(() => requeueAfterFailedCommit(session.sessionId, lease, error))))));
 		}).pipe(Effect.onInterrupt(() => Effect.sync(() => controller.abort(/* @__PURE__ */ new Error("background session supervisor is stopping"))).pipe(Effect.flatMap(() => requeueAfterInterruptedFiber(session.sessionId, lease)))), Effect.ensuring(Effect.sync(() => {
 			stepControllers.delete(session.sessionId);
 		})));
 	});
 	const startStep = (session) => Effect.gen(function* () {
 		const gate = yield* Deferred.make();
-		const fiber = yield* Effect.forkDaemon(Deferred.await(gate).pipe(Effect.flatMap(() => runStep(session)), Effect.catchAllCause((cause) => Cause.isInterruptedOnly(cause) ? Effect.void : reportError(Cause.squash(cause))), Effect.ensuring(Effect.sync(() => {
+		const fiber = yield* Effect.forkDetach(Deferred.await(gate).pipe(Effect.flatMap(() => runStep(session)), Effect.catchCause((cause) => Cause.hasInterruptsOnly(cause) ? Effect.void : reportError(Cause.squash(cause))), Effect.ensuring(Effect.sync(() => {
 			inFlight.delete(session.sessionId);
-		}))));
+		}))), { uninterruptible: "inherit" });
 		inFlight.set(session.sessionId, fiber);
 		yield* Deferred.succeed(gate, void 0);
 	}).pipe(Effect.uninterruptible);
@@ -16338,7 +17209,7 @@ function createHumanInteractionService(options) {
 	}) : (ms) => Effect.sleep(ms);
 	const persistAndPresent = (interaction, existing) => Effect.gen(function* () {
 		if (Date.parse(options.clock.now()) >= Date.parse(interaction.expiresAt)) return yield* Effect.fail(/* @__PURE__ */ new Error(`human interaction expired before presentation: ${interaction.id}`));
-		const persisted = existing ? existing : yield* options.repository.create(interaction).pipe(Effect.as(interaction), Effect.catchAll((createError) => options.repository.get(interaction.id).pipe(Effect.flatMap((concurrent) => concurrent ? Effect.succeed(concurrent) : Effect.fail(createError)))));
+		const persisted = existing ? existing : yield* options.repository.create(interaction).pipe(Effect.as(interaction), Effect.catch((createError) => options.repository.get(interaction.id).pipe(Effect.flatMap((concurrent) => concurrent ? Effect.succeed(concurrent) : Effect.fail(createError)))));
 		if (!persisted.isSameRequest(interaction)) return yield* Effect.fail(/* @__PURE__ */ new Error(`human interaction id is already bound to another request: ${interaction.id}`));
 		yield* options.presenter.present(persisted);
 		return persisted;
@@ -16367,7 +17238,7 @@ function createHumanInteractionService(options) {
 			return yield* options.repository.update(input.approvalId, (interaction) => interaction.consume({
 				binding: input.binding,
 				now: options.clock.now()
-			}).state).pipe(Effect.as(true), Effect.catchAll((error) => isTransitionDenied(error) ? Effect.succeed(false) : Effect.fail(error)));
+			}).state).pipe(Effect.as(true), Effect.catch((error) => isTransitionDenied(error) ? Effect.succeed(false) : Effect.fail(error)));
 		}),
 		get: (interactionId) => options.repository.get(interactionId),
 		resolve: (input) => options.repository.update(input.interactionId, (interaction) => interaction.resolve({
@@ -16401,7 +17272,7 @@ function isTransitionDenied(error) {
 	return error instanceof Error && error.cause instanceof Error && error.cause.name === "HumanInteractionTransitionDenied";
 }
 function waitForAbort(signal) {
-	return Effect.async((resume) => {
+	return Effect.callback((resume) => {
 		const onAbort = () => resume(Effect.fail(signal.reason ?? /* @__PURE__ */ new Error("human interaction wait was aborted")));
 		if (signal.aborted) {
 			onAbort();
@@ -16962,10 +17833,10 @@ async function createRivusDaemonProcess(context) {
 		running: () => bootstrap.process.running(),
 		start: () => bootstrap.process.start(),
 		status: () => bootstrap.status(),
-		stop: () => bootstrap.process.stop().pipe(Effect.zipRight(Effect.tryPromise({
+		stop: () => bootstrap.process.stop().pipe(Effect.andThen(Effect.tryPromise({
 			try: () => sessionRegistry.disposeAll(),
 			catch: (error) => error
-		})), Effect.zipRight(Effect.tryPromise({
+		})), Effect.andThen(Effect.tryPromise({
 			try: () => assembly.dispose(),
 			catch: (error) => error
 		})))
@@ -17017,6 +17888,7 @@ async function createRivusDeploymentAdapters(context) {
 			manifest
 		};
 	})));
+	const herdrRoute = await resolveHerdrRouteConfig(context.env, manifest);
 	const memoryTenantId = context.env.RIVUS_MEMORY_TENANT_ID?.trim() || "local";
 	const request = createJsonFetchRequest();
 	const attachmentCapabilities = /* @__PURE__ */ new Map();
@@ -17323,6 +18195,15 @@ async function createRivusDeploymentAdapters(context) {
 					config
 				});
 				const prepareCardTarget = (run) => cardRollover.prepareRun(run);
+				const herdr = herdrRoute !== void 0 && input.endpointId === herdrRoute.endpointId ? herdrRoute : void 0;
+				const embedded = herdr ? yield* openEmbeddedHerdrRoute({
+					herdr,
+					appSecret: credentials.appSecret,
+					baseUrl: input.definition.baseUrl,
+					endpointStateDirectory: endpointState,
+					groupPolicy: input.definition.groupPolicy,
+					botOpenId
+				}) : void 0;
 				const endpoint = createFeishuDeploymentEndpoint({
 					agentId: input.agentId,
 					acknowledgeSteering: (messageId) => reactions.add(messageId),
@@ -17333,7 +18214,7 @@ async function createRivusDeploymentAdapters(context) {
 					finalizeRun: (runId) => cardRollover.rollover.releaseRun(runId),
 					cancel: input.cancel,
 					endpointId: input.endpointId,
-					eventDispatcher: createLazyFeishuWebSocketEventDispatcher(() => new Lark.EventDispatcher({})),
+					eventDispatcher: embedded ? createLazyFeishuWebSocketEventDispatcher(embedded.routedDispatcher) : createLazyFeishuWebSocketEventDispatcher(() => new Lark.EventDispatcher({})),
 					groupPolicy: input.definition.groupPolicy,
 					handle: input.handle,
 					inboxStore: inbox,
@@ -17354,15 +18235,16 @@ async function createRivusDeploymentAdapters(context) {
 					reply: (messageId, text) => replies.reply(messageId, text),
 					sessionStore,
 					...input.steer ? { steer: input.steer } : {},
-					...cotPublisher ? { publishRunUpdate: (update) => cotPublisher.publish(update).pipe(Effect.catchAll((error) => reportCotError(input.endpointId, "update", error))) } : {},
+					...cotPublisher ? { publishRunUpdate: (update) => cotPublisher.publish(update).pipe(Effect.catch((error) => reportCotError(input.endpointId, "update", error))) } : {},
 					sessionNamespace: input.definition.sessionNamespace,
 					sleep,
 					websocketClient: createLazyFeishuWebSocketClient(credentials, input.definition.baseUrl),
 					workerConcurrency: 4
 				});
 				interactionRegistry.register(input.endpointId, interactions);
-				return endpoint;
-			}).pipe(Effect.catchAllDefect((error) => Effect.fail(error))),
+				if (embedded === void 0) return endpoint;
+				return wrapEmbeddedHerdrEndpointLifecycle(endpoint, embedded.runtime);
+			}).pipe(Effect.catchDefect((error) => Effect.fail(error))),
 			createRuntime: (input) => Effect.gen(function* () {
 				const instanceState = join(STATE_DIR, "instances", input.instanceId);
 				yield* Effect.tryPromise({
@@ -17559,7 +18441,7 @@ async function createRivusDeploymentAdapters(context) {
 					concurrency: scheduler.concurrency,
 					run: (request) => scheduler.run(request),
 					steer: (request) => scheduler.steer(request),
-					dispose: () => scheduler.dispose().pipe(Effect.zipRight(Effect.tryPromise({
+					dispose: () => scheduler.dispose().pipe(Effect.andThen(Effect.tryPromise({
 						try: () => sessionRegistry.disposeAll(),
 						catch: (error) => error
 					})), Effect.tap(() => Effect.sync(() => {
@@ -17571,7 +18453,7 @@ async function createRivusDeploymentAdapters(context) {
 						}
 					})))
 				};
-			}).pipe(Effect.catchAllDefect((error) => Effect.fail(error)))
+			}).pipe(Effect.catchDefect((error) => Effect.fail(error)))
 		};
 	} catch (error) {
 		await Promise.allSettled([management?.enabled ? management.close() : Promise.resolve(), telemetry?.shutdown()]);