@smthrs/flow 0.0.0-stage → 1.0.0-rc.13

package/dist/cjs/Action/Action.d.ts

@@ -0,0 +1,250 @@
+/**
+ * Defines the schemas and interfaces of a durable action.
+ *
+ * @since 0.1.0
+ */
+import * as Effects from "@smthrs/plan/Effects";
+import type * as Node from "@smthrs/plan/Node";
+import type * as Planned from "@smthrs/plan/Planned";
+import type * as Context from "effect/Context";
+import type * as Crypto from "effect/Crypto";
+import type * as Effect from "effect/Effect";
+import type * as Layer from "effect/Layer";
+import * as Schema from "effect/Schema";
+import type { Scope } from "effect/Scope";
+import type { AnyStructSchema } from "../Flow/Flow.ts";
+import type { FlowInstance, FlowRuntime } from "../FlowRuntime/index.ts";
+import type * as RetryPolicy from "../RetryPolicy.ts";
+import type { FileBoundary } from "./FileBoundary.ts";
+import type { Implementation } from "./Implementations.ts";
+import type { TypeId } from "./TypeId.ts";
+/**
+ * The durability and retry semantics of an action.
+ *
+ * The schema is `@smthrs/plan`'s `Effects.Tier`: an action's durability, a
+ * declared envelope's ceiling and `KeyMaterial.kind` are the same three words,
+ * and they are declared once.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export declare const Tier: Schema.Literals<readonly ["sealed", "compensable", "irreversible"]>;
+/**
+ * The durability and retry semantics of an action.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export type Tier = Effects.Tier;
+/**
+ * Schema for caller-declared sealed action identity.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export declare const IdempotencyKey: Schema.Union<readonly [Schema.String, Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>;
+/**
+ * Caller-declared sealed action identity.
+ *
+ * A string is namespaced by the action declaration. A JSON object is
+ * caller-owned and remains stable across action renames. Runtime
+ * environment and filesystem facts are always added by the engine. An explicit
+ * implementation version is also separate engine key material; a caller-owned
+ * object cannot mask it with a field of the same name.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export type IdempotencyKey = typeof IdempotencyKey.Type;
+/**
+ * Recursively permits planned references wherever a declared action payload
+ * accepts a concrete value.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export type PlannedPayload<T> = Planned.Planned<T> | ([T] extends [ReadonlyArray<infer Value>] ? ReadonlyArray<PlannedPayload<Value>> : [T] extends [object] ? {
+    readonly [Key in keyof T]: PlannedPayload<T[Key]>;
+} : T);
+/**
+ * The requirement one declared action mints for itself, identified by its
+ * tag.
+ *
+ * A declaration is data that travels everywhere and carries no code, so a body
+ * that calls it names an implementation it does not hold. This type is that
+ * "does not hold", stated to the compiler: `Charge.call(...)` produces a node
+ * requiring `Requirement<"payments/Charge">`, `Charge.toLayer(...)` produces a
+ * layer providing it, and `Flow.execute` is where the two have to meet. It is
+ * phantom — nothing reads it, and nothing about planning, keying, or replay
+ * changes with it.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export interface Requirement<Tag extends string> {
+    readonly _: unique symbol;
+    readonly _tag: Tag;
+}
+/**
+ * A named action declaration whose implementation is supplied separately
+ * through a layer and whose calls only add nodes to a plan.
+ *
+ * `Requires` is what `.call()` puts in the requirement channel of the node it
+ * records. It is this action's own {@link Requirement} for an ordinary
+ * declaration, and `never` for a system declaration the engine itself
+ * implements ({@link module:make.makeSystem}).
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export interface Declared<Tag extends string, Payload extends AnyStructSchema, Success extends Schema.Top, Error extends Schema.Top, Requires = Requirement<Tag>> {
+    readonly [TypeId]: typeof TypeId;
+    readonly name: Tag;
+    /**
+     * Semantic implementation identity. Changing it requires a newly planned
+     * execution; it is not an in-place upgrade of a persisted run. Canonical
+     * composition requires it for sealed actions with an idempotency key.
+     * Invocation-scoped actions may omit it; low-level keyed legacy callers
+     * retain their old handler-reuse contract when it is absent.
+     */
+    readonly implementationVersion: string | undefined;
+    readonly payloadSchema: Payload;
+    readonly successSchema: Success;
+    readonly errorSchema: Error;
+    readonly tier: Tier;
+    readonly idempotencyKey: IdempotencyKey | ((payload: Payload["Type"]) => IdempotencyKey) | undefined;
+    /** Allows multiple legitimate sealed results to race under one cache key. */
+    readonly nondeterministic: true | undefined;
+    /** Durable retry policy applied to every implementation invocation. */
+    readonly retryPolicy: RetryPolicy.RetryPolicy | undefined;
+    /** Milliseconds one attempt may run before it fails with `AttemptTimedOut`. */
+    readonly attemptTimeoutMs: number | undefined;
+    /** Milliseconds one attempt may go without `Action.heartbeat` before it fails. */
+    readonly heartbeatTimeoutMs: number | undefined;
+    /** Filesystem declaration, optionally derived from the decoded payload. */
+    readonly fileBoundary: FileBoundary | ((payload: Payload["Type"]) => FileBoundary) | undefined;
+    readonly annotations: Context.Context<never>;
+    /**
+     * The context key this declaration's implementation is provided under, and
+     * the identity behind {@link Requirement}.
+     *
+     * `toLayer` provides it; a composition that would rather hand the runtime an
+     * implementation directly can provide it itself with `Layer.succeed`. Its
+     * string key is derived from the action tag, so two declarations of one tag
+     * name one slot.
+     */
+    readonly requirement: Context.Service<Requirement<Tag>, Implementation>;
+    annotate<I, S>(key: Context.Key<I, S>, value: S): Declared<Tag, Payload, Success, Error, Requires>;
+    annotateMerge<I>(annotations: Context.Context<I>): Declared<Tag, Payload, Success, Error, Requires>;
+    readonly call: (payload: PlannedPayload<Payload["~type.make.in"]>) => Node.Node<Success["Type"], Error["Type"], Requires>;
+    /**
+     * Attaches the implementation and yields the layer that provides this
+     * declaration's {@link Requirement}. A versioned declaration requires the
+     * same `implementationVersion` here; a mismatch throws
+     * `ImplementationVersionMismatch` before registration. The version must cover
+     * handler semantics and semantic service/configuration changes, not merely a
+     * package publication label. Source text is never inferred as that identity.
+     *
+     * Let inference name the returned layer's requirements. The requirement
+     * channel is what a composition trusts: a layer type that under-declares it
+     * still typechecks at `Effect.provide` and dies at runtime as a missing
+     * service. A concrete hand annotation cannot lie — dropping a service from
+     * it is a compile error — but a GENERIC one can: when the annotated
+     * requirement union keeps a deferred member such as
+     * `Output["DecodingServices"]` (constrained only as `unknown` through
+     * `Schema.Top`), TypeScript lets that member absorb every concrete service
+     * the annotation dropped, and the drop compiles. A wrapper that must
+     * annotate — a public interface naming its layer's type, say — therefore
+     * pins the set at a concrete instantiation, where the check works again:
+     *
+     * ```ts
+     * // Wrapped.layer is the wrapper's hand-annotated toLayer result, held
+     * // here with every schema argument concrete.
+     * type Needed = Layer.Services<typeof Wrapped.layer>
+     * expectTypeOf<Meter extends Needed ? true : false>().toEqualTypeOf<true>()
+     * ```
+     */
+    readonly toLayer: <R>(execute: (payload: Payload["Type"]) => Effect.Effect<Success["Type"], Error["Type"], R>, options?: {
+        readonly override?: boolean;
+        /** Must exactly match the declaration, including absence on legacy declarations. */
+        readonly implementationVersion?: string | undefined;
+    }) => Layer.Layer<Requires, never, FlowRuntime | Exclude<R, FlowRuntime | FlowInstance | Scope> | Payload["DecodingServices"] | Payload["EncodingServices"] | Success["DecodingServices"] | Success["EncodingServices"] | Error["DecodingServices"] | Error["EncodingServices"]>;
+}
+/**
+ * Durable flow action that behaves as an `Effect` and records its name,
+ * result schemas, annotations, and encoded execution form for the flow
+ * engine.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export interface Action<Success extends Schema.Constraint = Schema.Void, Error extends Schema.Constraint = Schema.Never, R = never> extends Effect.Effect<Success["Type"], Error["Type"], Success["DecodingServices"] | Error["DecodingServices"] | R | Crypto.Crypto | FlowRuntime | FlowInstance> {
+    readonly [TypeId]: typeof TypeId;
+    readonly name: string;
+    readonly implementationVersion?: string | undefined;
+    readonly successSchema: Success;
+    readonly errorSchema: Error;
+    readonly exitSchema: Schema.Exit<Success, Error, Schema.Defect>;
+    readonly exitSchemaPartial: Schema.Exit<Success, Error, Schema.Unknown>;
+    readonly annotations: Context.Context<never>;
+    readonly tier: Tier;
+    readonly idempotencyKey: IdempotencyKey | undefined;
+    /** Allows multiple legitimate sealed results to race under one cache key. */
+    readonly nondeterministic: true | undefined;
+    readonly metadata: unknown;
+    /** Typed filesystem boundary used by the durable engine. */
+    readonly fileBoundary: FileBoundary | undefined;
+    readonly retryPolicy: RetryPolicy.RetryPolicy | undefined;
+    /** Milliseconds one attempt may run before it fails with `AttemptTimedOut`. */
+    readonly attemptTimeoutMs: number | undefined;
+    /** Milliseconds one attempt may go without `Action.heartbeat` before it fails. */
+    readonly heartbeatTimeoutMs: number | undefined;
+    annotate<I, S>(key: Context.Key<I, S>, value: S): Action<Success, Error, R>;
+    annotateMerge<I>(annotations: Context.Context<I>): Action<Success, Error, R>;
+    readonly execute: Effect.Effect<Success["Type"], Error["Type"], Success["DecodingServices"] | Success["EncodingServices"] | Error["DecodingServices"] | Error["EncodingServices"] | R | Crypto.Crypto | Scope | FlowRuntime | FlowInstance>;
+    readonly executeEncoded: Effect.Effect<unknown, unknown, Success["DecodingServices"] | Success["EncodingServices"] | Error["DecodingServices"] | Error["EncodingServices"] | R | Crypto.Crypto | Scope | FlowRuntime | FlowInstance>;
+}
+/**
+ * Type-erased action shape for APIs that only need the action identity,
+ * name, annotations, and encoded execution.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export interface Any {
+    readonly [TypeId]: typeof TypeId;
+    readonly name: string;
+    readonly implementationVersion?: string | undefined;
+    readonly executeEncoded: Effect.Effect<any, any, any>;
+    readonly annotations: Context.Context<never>;
+    readonly tier: Tier;
+    readonly idempotencyKey: IdempotencyKey | undefined;
+    readonly nondeterministic: true | undefined;
+    readonly metadata: unknown;
+    /** Typed filesystem boundary used by the durable engine. */
+    readonly fileBoundary: FileBoundary | undefined;
+    readonly retryPolicy: RetryPolicy.RetryPolicy | undefined;
+}
+/**
+ * Type-erased action shape that also exposes success and error schemas for
+ * derived flow APIs.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export interface AnyWithProps {
+    readonly [TypeId]: typeof TypeId;
+    readonly name: string;
+    readonly implementationVersion?: string | undefined;
+    readonly successSchema: Schema.Top;
+    readonly errorSchema: Schema.Top;
+    readonly executeEncoded: Effect.Effect<any, any, any>;
+    readonly tier: Tier;
+    readonly idempotencyKey: IdempotencyKey | undefined;
+    readonly nondeterministic: true | undefined;
+    readonly metadata: unknown;
+    /** Typed filesystem boundary used by the durable engine. */
+    readonly fileBoundary: FileBoundary | undefined;
+    readonly retryPolicy: RetryPolicy.RetryPolicy | undefined;
+}
+//# sourceMappingURL=Action.d.ts.map

package/dist/cjs/Action/Action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Action.d.ts","sourceRoot":"","sources":["../../../src/Action/Action.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,OAAO,KAAK,OAAO,MAAM,sBAAsB,CAAA;AAC/C,OAAO,KAAK,KAAK,IAAI,MAAM,mBAAmB,CAAA;AAC9C,OAAO,KAAK,KAAK,OAAO,MAAM,sBAAsB,CAAA;AACpD,OAAO,KAAK,KAAK,OAAO,MAAM,gBAAgB,CAAA;AAC9C,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAA;AAC5C,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAA;AAC5C,OAAO,KAAK,KAAK,KAAK,MAAM,cAAc,CAAA;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,KAAK,KAAK,WAAW,MAAM,mBAAmB,CAAA;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEzC;;;;;;;;;GASG;AACH,eAAO,MAAM,IAAI,qEAAe,CAAA;AAEhC;;;;;GAKG;AACH,MAAM,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;AAE/B;;;;;GAKG;AACH,eAAO,MAAM,cAAc,6HAGzB,CAAA;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,IAAI,CAAA;AAEvD;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,IACxB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAClB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,aAAa,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,GAC9E,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG;IAAE,QAAQ,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;CAAE,GAC5E,CAAC,CAAC,CAAA;AAER;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,WAAW,CAAC,GAAG,SAAS,MAAM;IAC7C,QAAQ,CAAC,CAAC,EAAE,OAAO,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAA;CACnB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,QAAQ,CACvB,GAAG,SAAS,MAAM,EAClB,OAAO,SAAS,eAAe,EAC/B,OAAO,SAAS,MAAM,CAAC,GAAG,EAC1B,KAAK,SAAS,MAAM,CAAC,GAAG,EACxB,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC;IAE3B,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,MAAM,CAAA;IAChC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAA;IAClB;;;;;;OAMG;IACH,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,SAAS,CAAA;IAClD,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;IAC/B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;IAC/B,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,cAAc,CAAC,GAAG,SAAS,CAAA;IACpG,6EAA6E;IAC7E,QAAQ,CAAC,gBAAgB,EAAE,IAAI,GAAG,SAAS,CAAA;IAC3C,uEAAuE;IACvE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,WAAW,GAAG,SAAS,CAAA;IACzD,+EAA+E;IAC/E,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7C,kFAAkF;IAClF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/C,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,EAAE,YAAY,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,YAAY,CAAC,GAAG,SAAS,CAAA;IAC9F,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC5C;;;;;;;;OAQG;IACH,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,CAAA;IACvE,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;IAClG,aAAa,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;IACnG,QAAQ,CAAC,IAAI,EAAE,CACb,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,KAC9C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAA;IACxD;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,EAClB,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EACvF,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;QAC3B,oFAAoF;QACpF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KACpD,KACE,KAAK,CAAC,KAAK,CACd,QAAQ,EACR,KAAK,EACH,WAAW,GACX,OAAO,CAAC,CAAC,EAAE,WAAW,GAAG,YAAY,GAAG,KAAK,CAAC,GAC9C,OAAO,CAAC,kBAAkB,CAAC,GAC3B,OAAO,CAAC,kBAAkB,CAAC,GAC3B,OAAO,CAAC,kBAAkB,CAAC,GAC3B,OAAO,CAAC,kBAAkB,CAAC,GAC3B,KAAK,CAAC,kBAAkB,CAAC,GACzB,KAAK,CAAC,kBAAkB,CAAC,CAC5B,CAAA;CACF;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,MAAM,CACrB,OAAO,SAAS,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,EAC/C,KAAK,SAAS,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,EAC9C,CAAC,GAAG,KAAK,CACT,SACA,MAAM,CAAC,MAAM,CACX,OAAO,CAAC,MAAM,CAAC,EACf,KAAK,CAAC,MAAM,CAAC,EACX,OAAO,CAAC,kBAAkB,CAAC,GAC3B,KAAK,CAAC,kBAAkB,CAAC,GACzB,CAAC,GACD,MAAM,CAAC,MAAM,GACb,WAAW,GACX,YAAY,CACf;IAED,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,MAAM,CAAA;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnD,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;IAC/B,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAC/D,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IACvE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC5C,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,SAAS,CAAA;IACnD,6EAA6E;IAC7E,QAAQ,CAAC,gBAAgB,EAAE,IAAI,GAAG,SAAS,CAAA;IAC3C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,EAAE,YAAY,GAAG,SAAS,CAAA;IAC/C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,WAAW,GAAG,SAAS,CAAA;IACzD,+EAA+E;IAC/E,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7C,kFAAkF;IAClF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/C,QAAQ,CAAC,CAAC,EAAE,CAAC,EACX,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EACtB,KAAK,EAAE,CAAC,GACP,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;IAC5B,aAAa,CAAC,CAAC,EACb,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAC9B,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAC7B,OAAO,CAAC,MAAM,CAAC,EACf,KAAK,CAAC,MAAM,CAAC,EACX,OAAO,CAAC,kBAAkB,CAAC,GAC3B,OAAO,CAAC,kBAAkB,CAAC,GAC3B,KAAK,CAAC,kBAAkB,CAAC,GACzB,KAAK,CAAC,kBAAkB,CAAC,GACzB,CAAC,GACD,MAAM,CAAC,MAAM,GACb,KAAK,GACL,WAAW,GACX,YAAY,CACf,CAAA;IACD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CACpC,OAAO,EACP,OAAO,EACL,OAAO,CAAC,kBAAkB,CAAC,GAC3B,OAAO,CAAC,kBAAkB,CAAC,GAC3B,KAAK,CAAC,kBAAkB,CAAC,GACzB,KAAK,CAAC,kBAAkB,CAAC,GACzB,CAAC,GACD,MAAM,CAAC,MAAM,GACb,KAAK,GACL,WAAW,GACX,YAAY,CACf,CAAA;CACF;AAED;;;;;;GAMG;AACH,MAAM,WAAW,GAAG;IAClB,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,MAAM,CAAA;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IACrD,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC5C,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,SAAS,CAAA;IACnD,QAAQ,CAAC,gBAAgB,EAAE,IAAI,GAAG,SAAS,CAAA;IAC3C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,EAAE,YAAY,GAAG,SAAS,CAAA;IAC/C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,WAAW,GAAG,SAAS,CAAA;CAC1D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,MAAM,CAAA;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAA;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAA;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IACrD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,SAAS,CAAA;IACnD,QAAQ,CAAC,gBAAgB,EAAE,IAAI,GAAG,SAAS,CAAA;IAC3C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,EAAE,YAAY,GAAG,SAAS,CAAA;IAC/C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,WAAW,GAAG,SAAS,CAAA;CAC1D"}

package/dist/cjs/Action/Action.js

@@ -0,0 +1,42 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var Action_exports = {};
+__export(Action_exports, {
+  IdempotencyKey: () => IdempotencyKey,
+  Tier: () => Tier
+});
+module.exports = __toCommonJS(Action_exports);
+var Effects = __toESM(require("@smthrs/plan/Effects"), 1);
+var Schema = __toESM(require("effect/Schema"), 1);
+const Tier = Effects.Tier;
+const IdempotencyKey = Schema.Union([
+  Schema.String,
+  Schema.Record(Schema.String, Schema.Json)
+]);
+//# sourceMappingURL=Action.js.map

package/dist/cjs/Action/Action.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/Action/Action.ts"],
+  "sourcesContent": ["// Deep reviewed and polished by a human on 2026-08-10.\n\n/**\n * Defines the schemas and interfaces of a durable action.\n *\n * @since 0.1.0\n */\n\nimport * as Effects from \"@smthrs/plan/Effects\"\nimport type * as Node from \"@smthrs/plan/Node\"\nimport type * as Planned from \"@smthrs/plan/Planned\"\nimport type * as Context from \"effect/Context\"\nimport type * as Crypto from \"effect/Crypto\"\nimport type * as Effect from \"effect/Effect\"\nimport type * as Layer from \"effect/Layer\"\nimport * as Schema from \"effect/Schema\"\nimport type { Scope } from \"effect/Scope\"\nimport type { AnyStructSchema } from \"../Flow/Flow.ts\"\nimport type { FlowInstance, FlowRuntime } from \"../FlowRuntime/index.ts\"\nimport type * as RetryPolicy from \"../RetryPolicy.ts\"\nimport type { FileBoundary } from \"./FileBoundary.ts\"\nimport type { Implementation } from \"./Implementations.ts\"\nimport type { TypeId } from \"./TypeId.ts\"\n\n/**\n * The durability and retry semantics of an action.\n *\n * The schema is `@smthrs/plan`'s `Effects.Tier`: an action's durability, a\n * declared envelope's ceiling and `KeyMaterial.kind` are the same three words,\n * and they are declared once.\n *\n * @category models\n * @since 0.1.0\n */\nexport const Tier = Effects.Tier\n\n/**\n * The durability and retry semantics of an action.\n *\n * @category models\n * @since 0.1.0\n */\nexport type Tier = Effects.Tier\n\n/**\n * Schema for caller-declared sealed action identity.\n *\n * @category models\n * @since 0.1.0\n */\nexport const IdempotencyKey = Schema.Union([\n  Schema.String,\n  Schema.Record(Schema.String, Schema.Json)\n])\n\n/**\n * Caller-declared sealed action identity.\n *\n * A string is namespaced by the action declaration. A JSON object is\n * caller-owned and remains stable across action renames. Runtime\n * environment and filesystem facts are always added by the engine. An explicit\n * implementation version is also separate engine key material; a caller-owned\n * object cannot mask it with a field of the same name.\n *\n * @category models\n * @since 0.1.0\n */\nexport type IdempotencyKey = typeof IdempotencyKey.Type\n\n/**\n * Recursively permits planned references wherever a declared action payload\n * accepts a concrete value.\n *\n * @category models\n * @since 0.1.0\n */\nexport type PlannedPayload<T> =\n  | Planned.Planned<T>\n  | ([T] extends [ReadonlyArray<infer Value>] ? ReadonlyArray<PlannedPayload<Value>>\n    : [T] extends [object] ? { readonly [Key in keyof T]: PlannedPayload<T[Key]> }\n    : T)\n\n/**\n * The requirement one declared action mints for itself, identified by its\n * tag.\n *\n * A declaration is data that travels everywhere and carries no code, so a body\n * that calls it names an implementation it does not hold. This type is that\n * \"does not hold\", stated to the compiler: `Charge.call(...)` produces a node\n * requiring `Requirement<\"payments/Charge\">`, `Charge.toLayer(...)` produces a\n * layer providing it, and `Flow.execute` is where the two have to meet. It is\n * phantom \u2014 nothing reads it, and nothing about planning, keying, or replay\n * changes with it.\n *\n * @category models\n * @since 0.1.0\n */\nexport interface Requirement<Tag extends string> {\n  readonly _: unique symbol\n  readonly _tag: Tag\n}\n\n/**\n * A named action declaration whose implementation is supplied separately\n * through a layer and whose calls only add nodes to a plan.\n *\n * `Requires` is what `.call()` puts in the requirement channel of the node it\n * records. It is this action's own {@link Requirement} for an ordinary\n * declaration, and `never` for a system declaration the engine itself\n * implements ({@link module:make.makeSystem}).\n *\n * @category models\n * @since 0.1.0\n */\nexport interface Declared<\n  Tag extends string,\n  Payload extends AnyStructSchema,\n  Success extends Schema.Top,\n  Error extends Schema.Top,\n  Requires = Requirement<Tag>\n> {\n  readonly [TypeId]: typeof TypeId\n  readonly name: Tag\n  /**\n   * Semantic implementation identity. Changing it requires a newly planned\n   * execution; it is not an in-place upgrade of a persisted run. Canonical\n   * composition requires it for sealed actions with an idempotency key.\n   * Invocation-scoped actions may omit it; low-level keyed legacy callers\n   * retain their old handler-reuse contract when it is absent.\n   */\n  readonly implementationVersion: string | undefined\n  readonly payloadSchema: Payload\n  readonly successSchema: Success\n  readonly errorSchema: Error\n  readonly tier: Tier\n  readonly idempotencyKey: IdempotencyKey | ((payload: Payload[\"Type\"]) => IdempotencyKey) | undefined\n  /** Allows multiple legitimate sealed results to race under one cache key. */\n  readonly nondeterministic: true | undefined\n  /** Durable retry policy applied to every implementation invocation. */\n  readonly retryPolicy: RetryPolicy.RetryPolicy | undefined\n  /** Milliseconds one attempt may run before it fails with `AttemptTimedOut`. */\n  readonly attemptTimeoutMs: number | undefined\n  /** Milliseconds one attempt may go without `Action.heartbeat` before it fails. */\n  readonly heartbeatTimeoutMs: number | undefined\n  /** Filesystem declaration, optionally derived from the decoded payload. */\n  readonly fileBoundary: FileBoundary | ((payload: Payload[\"Type\"]) => FileBoundary) | undefined\n  readonly annotations: Context.Context<never>\n  /**\n   * The context key this declaration's implementation is provided under, and\n   * the identity behind {@link Requirement}.\n   *\n   * `toLayer` provides it; a composition that would rather hand the runtime an\n   * implementation directly can provide it itself with `Layer.succeed`. Its\n   * string key is derived from the action tag, so two declarations of one tag\n   * name one slot.\n   */\n  readonly requirement: Context.Service<Requirement<Tag>, Implementation>\n  annotate<I, S>(key: Context.Key<I, S>, value: S): Declared<Tag, Payload, Success, Error, Requires>\n  annotateMerge<I>(annotations: Context.Context<I>): Declared<Tag, Payload, Success, Error, Requires>\n  readonly call: (\n    payload: PlannedPayload<Payload[\"~type.make.in\"]>\n  ) => Node.Node<Success[\"Type\"], Error[\"Type\"], Requires>\n  /**\n   * Attaches the implementation and yields the layer that provides this\n   * declaration's {@link Requirement}. A versioned declaration requires the\n   * same `implementationVersion` here; a mismatch throws\n   * `ImplementationVersionMismatch` before registration. The version must cover\n   * handler semantics and semantic service/configuration changes, not merely a\n   * package publication label. Source text is never inferred as that identity.\n   *\n   * Let inference name the returned layer's requirements. The requirement\n   * channel is what a composition trusts: a layer type that under-declares it\n   * still typechecks at `Effect.provide` and dies at runtime as a missing\n   * service. A concrete hand annotation cannot lie \u2014 dropping a service from\n   * it is a compile error \u2014 but a GENERIC one can: when the annotated\n   * requirement union keeps a deferred member such as\n   * `Output[\"DecodingServices\"]` (constrained only as `unknown` through\n   * `Schema.Top`), TypeScript lets that member absorb every concrete service\n   * the annotation dropped, and the drop compiles. A wrapper that must\n   * annotate \u2014 a public interface naming its layer's type, say \u2014 therefore\n   * pins the set at a concrete instantiation, where the check works again:\n   *\n   * ```ts\n   * // Wrapped.layer is the wrapper's hand-annotated toLayer result, held\n   * // here with every schema argument concrete.\n   * type Needed = Layer.Services<typeof Wrapped.layer>\n   * expectTypeOf<Meter extends Needed ? true : false>().toEqualTypeOf<true>()\n   * ```\n   */\n  readonly toLayer: <R>(\n    execute: (payload: Payload[\"Type\"]) => Effect.Effect<Success[\"Type\"], Error[\"Type\"], R>,\n    options?: {\n      readonly override?: boolean\n      /** Must exactly match the declaration, including absence on legacy declarations. */\n      readonly implementationVersion?: string | undefined\n    }\n  ) => Layer.Layer<\n    Requires,\n    never,\n    | FlowRuntime\n    | Exclude<R, FlowRuntime | FlowInstance | Scope>\n    | Payload[\"DecodingServices\"]\n    | Payload[\"EncodingServices\"]\n    | Success[\"DecodingServices\"]\n    | Success[\"EncodingServices\"]\n    | Error[\"DecodingServices\"]\n    | Error[\"EncodingServices\"]\n  >\n}\n\n/**\n * Durable flow action that behaves as an `Effect` and records its name,\n * result schemas, annotations, and encoded execution form for the flow\n * engine.\n *\n * @category models\n * @since 0.1.0\n */\nexport interface Action<\n  Success extends Schema.Constraint = Schema.Void,\n  Error extends Schema.Constraint = Schema.Never,\n  R = never\n> extends\n  Effect.Effect<\n    Success[\"Type\"],\n    Error[\"Type\"],\n    | Success[\"DecodingServices\"]\n    | Error[\"DecodingServices\"]\n    | R\n    | Crypto.Crypto\n    | FlowRuntime\n    | FlowInstance\n  >\n{\n  readonly [TypeId]: typeof TypeId\n  readonly name: string\n  readonly implementationVersion?: string | undefined\n  readonly successSchema: Success\n  readonly errorSchema: Error\n  readonly exitSchema: Schema.Exit<Success, Error, Schema.Defect>\n  readonly exitSchemaPartial: Schema.Exit<Success, Error, Schema.Unknown>\n  readonly annotations: Context.Context<never>\n  readonly tier: Tier\n  readonly idempotencyKey: IdempotencyKey | undefined\n  /** Allows multiple legitimate sealed results to race under one cache key. */\n  readonly nondeterministic: true | undefined\n  readonly metadata: unknown\n  /** Typed filesystem boundary used by the durable engine. */\n  readonly fileBoundary: FileBoundary | undefined\n  readonly retryPolicy: RetryPolicy.RetryPolicy | undefined\n  /** Milliseconds one attempt may run before it fails with `AttemptTimedOut`. */\n  readonly attemptTimeoutMs: number | undefined\n  /** Milliseconds one attempt may go without `Action.heartbeat` before it fails. */\n  readonly heartbeatTimeoutMs: number | undefined\n  annotate<I, S>(\n    key: Context.Key<I, S>,\n    value: S\n  ): Action<Success, Error, R>\n  annotateMerge<I>(\n    annotations: Context.Context<I>\n  ): Action<Success, Error, R>\n  readonly execute: Effect.Effect<\n    Success[\"Type\"],\n    Error[\"Type\"],\n    | Success[\"DecodingServices\"]\n    | Success[\"EncodingServices\"]\n    | Error[\"DecodingServices\"]\n    | Error[\"EncodingServices\"]\n    | R\n    | Crypto.Crypto\n    | Scope\n    | FlowRuntime\n    | FlowInstance\n  >\n  readonly executeEncoded: Effect.Effect<\n    unknown,\n    unknown,\n    | Success[\"DecodingServices\"]\n    | Success[\"EncodingServices\"]\n    | Error[\"DecodingServices\"]\n    | Error[\"EncodingServices\"]\n    | R\n    | Crypto.Crypto\n    | Scope\n    | FlowRuntime\n    | FlowInstance\n  >\n}\n\n/**\n * Type-erased action shape for APIs that only need the action identity,\n * name, annotations, and encoded execution.\n *\n * @category models\n * @since 0.1.0\n */\nexport interface Any {\n  readonly [TypeId]: typeof TypeId\n  readonly name: string\n  readonly implementationVersion?: string | undefined\n  readonly executeEncoded: Effect.Effect<any, any, any>\n  readonly annotations: Context.Context<never>\n  readonly tier: Tier\n  readonly idempotencyKey: IdempotencyKey | undefined\n  readonly nondeterministic: true | undefined\n  readonly metadata: unknown\n  /** Typed filesystem boundary used by the durable engine. */\n  readonly fileBoundary: FileBoundary | undefined\n  readonly retryPolicy: RetryPolicy.RetryPolicy | undefined\n}\n\n/**\n * Type-erased action shape that also exposes success and error schemas for\n * derived flow APIs.\n *\n * @category models\n * @since 0.1.0\n */\nexport interface AnyWithProps {\n  readonly [TypeId]: typeof TypeId\n  readonly name: string\n  readonly implementationVersion?: string | undefined\n  readonly successSchema: Schema.Top\n  readonly errorSchema: Schema.Top\n  readonly executeEncoded: Effect.Effect<any, any, any>\n  readonly tier: Tier\n  readonly idempotencyKey: IdempotencyKey | undefined\n  readonly nondeterministic: true | undefined\n  readonly metadata: unknown\n  /** Typed filesystem boundary used by the durable engine. */\n  readonly fileBoundary: FileBoundary | undefined\n  readonly retryPolicy: RetryPolicy.RetryPolicy | undefined\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQA,cAAyB;AAOzB,aAAwB;AAmBjB,MAAM,OAAO,QAAQ;AAgBrB,MAAM,iBAAiB,OAAO,MAAM;AAAA,EACzC,OAAO;AAAA,EACP,OAAO,OAAO,OAAO,QAAQ,OAAO,IAAI;AAC1C,CAAC;",
+  "names": []
+}

package/dist/cjs/Action/AttemptTimedOut.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Defines the defect an action attempt settles with when it outlives its
+ * declared `attemptTimeoutMs` or misses its `heartbeatTimeoutMs`.
+ *
+ * @since 1.0.0
+ */
+import * as Schema from "effect/Schema";
+declare const AttemptTimedOut_base: Schema.Class<AttemptTimedOut, Schema.TaggedStruct<"@smthrs/flow/AttemptTimedOut", {
+    readonly code: Schema.withConstructorDefault<Schema.Literal<"attempt_timed_out">>;
+    readonly actionName: Schema.String;
+    readonly attempt: Schema.Number;
+    /** Which bound expired: the whole attempt, or the gap between heartbeats. */
+    readonly bound: Schema.Literals<readonly ["attempt", "heartbeat"]>;
+    readonly timeoutMs: Schema.Number;
+    readonly message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * One attempt of an action ran past a declared time bound and was
+ * interrupted.
+ *
+ * It is a defect rather than a typed failure because the bound belongs to the
+ * dispatch, not to the action's declared error channel. The engine's retry
+ * decision point still counts it as a retryable attempt failure under the
+ * action's `retryPolicy`, and a policy can refuse it by listing this tag in
+ * `nonRetryable`.
+ *
+ * @category errors
+ * @since 1.0.0
+ */
+export declare class AttemptTimedOut extends AttemptTimedOut_base {
+}
+export {};
+//# sourceMappingURL=AttemptTimedOut.d.ts.map

package/dist/cjs/Action/AttemptTimedOut.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AttemptTimedOut.d.ts","sourceRoot":"","sources":["../../../src/Action/AttemptTimedOut.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;;;;;IAuBnC,6EAA6E;;;;;AArBjF;;;;;;;;;;;;GAYG;AACH,qBAAa,eAAgB,SAAQ,oBAapC;CAAG"}

package/dist/cjs/Action/AttemptTimedOut.js

@@ -0,0 +1,51 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var AttemptTimedOut_exports = {};
+__export(AttemptTimedOut_exports, {
+  AttemptTimedOut: () => AttemptTimedOut
+});
+module.exports = __toCommonJS(AttemptTimedOut_exports);
+var Effect = __toESM(require("effect/Effect"), 1);
+var Schema = __toESM(require("effect/Schema"), 1);
+class AttemptTimedOut extends Schema.TaggedError()(
+  "@smthrs/flow/AttemptTimedOut",
+  {
+    code: Schema.Literal("attempt_timed_out").pipe(
+      Schema.withConstructorDefault(Effect.succeed("attempt_timed_out"))
+    ),
+    actionName: Schema.String,
+    attempt: Schema.Number,
+    /** Which bound expired: the whole attempt, or the gap between heartbeats. */
+    bound: Schema.Literals(["attempt", "heartbeat"]),
+    timeoutMs: Schema.Number,
+    message: Schema.String
+  }
+) {
+}
+//# sourceMappingURL=AttemptTimedOut.js.map

package/dist/cjs/Action/AttemptTimedOut.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/Action/AttemptTimedOut.ts"],
+  "sourcesContent": ["/**\n * Defines the defect an action attempt settles with when it outlives its\n * declared `attemptTimeoutMs` or misses its `heartbeatTimeoutMs`.\n *\n * @since 1.0.0\n */\n\nimport * as Effect from \"effect/Effect\"\nimport * as Schema from \"effect/Schema\"\n\n/**\n * One attempt of an action ran past a declared time bound and was\n * interrupted.\n *\n * It is a defect rather than a typed failure because the bound belongs to the\n * dispatch, not to the action's declared error channel. The engine's retry\n * decision point still counts it as a retryable attempt failure under the\n * action's `retryPolicy`, and a policy can refuse it by listing this tag in\n * `nonRetryable`.\n *\n * @category errors\n * @since 1.0.0\n */\nexport class AttemptTimedOut extends Schema.TaggedError<AttemptTimedOut>()(\n  \"@smthrs/flow/AttemptTimedOut\",\n  {\n    code: Schema.Literal(\"attempt_timed_out\").pipe(\n      Schema.withConstructorDefault(Effect.succeed(\"attempt_timed_out\"))\n    ),\n    actionName: Schema.String,\n    attempt: Schema.Number,\n    /** Which bound expired: the whole attempt, or the gap between heartbeats. */\n    bound: Schema.Literals([\"attempt\", \"heartbeat\"]),\n    timeoutMs: Schema.Number,\n    message: Schema.String\n  }\n) {}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAOA,aAAwB;AACxB,aAAwB;AAejB,MAAM,wBAAwB,OAAO,YAA6B;AAAA,EACvE;AAAA,EACA;AAAA,IACE,MAAM,OAAO,QAAQ,mBAAmB,EAAE;AAAA,MACxC,OAAO,uBAAuB,OAAO,QAAQ,mBAAmB,CAAC;AAAA,IACnE;AAAA,IACA,YAAY,OAAO;AAAA,IACnB,SAAS,OAAO;AAAA;AAAA,IAEhB,OAAO,OAAO,SAAS,CAAC,WAAW,WAAW,CAAC;AAAA,IAC/C,WAAW,OAAO;AAAA,IAClB,SAAS,OAAO;AAAA,EAClB;AACF,EAAE;AAAC;",
+  "names": []
+}

package/dist/cjs/Action/BoundaryMode.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Defines filesystem boundary enforcement modes.
+ *
+ * The schema itself is `@smthrs/plan`'s `FileSet.BoundaryMode`, because the
+ * same two words are what a plan node's `effects.boundaryMode` carries. This
+ * module is the name an action reaches for; there is one declaration behind
+ * both.
+ *
+ * @since 0.1.0
+ */
+import * as FileSet from "@smthrs/plan/FileSet";
+/**
+ * Schema for how strictly an action's filesystem boundary is enforced.
+ *
+ * `hard` rejects undeclared access. `expected` records access for validation
+ * after execution without requiring the sandbox to reject it immediately.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export declare const BoundaryMode: import("effect/Schema").Literals<readonly ["hard", "expected"]>;
+/**
+ * How strictly an action's filesystem boundary is enforced.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export type BoundaryMode = FileSet.BoundaryMode;
+//# sourceMappingURL=BoundaryMode.d.ts.map

package/dist/cjs/Action/BoundaryMode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BoundaryMode.d.ts","sourceRoot":"","sources":["../../../src/Action/BoundaryMode.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AAEH,OAAO,KAAK,OAAO,MAAM,sBAAsB,CAAA;AAE/C;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,iEAAuB,CAAA;AAEhD;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAA"}

package/dist/cjs/Action/BoundaryMode.js

@@ -0,0 +1,36 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var BoundaryMode_exports = {};
+__export(BoundaryMode_exports, {
+  BoundaryMode: () => BoundaryMode
+});
+module.exports = __toCommonJS(BoundaryMode_exports);
+var FileSet = __toESM(require("@smthrs/plan/FileSet"), 1);
+const BoundaryMode = FileSet.BoundaryMode;
+//# sourceMappingURL=BoundaryMode.js.map

package/dist/cjs/Action/BoundaryMode.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/Action/BoundaryMode.ts"],
+  "sourcesContent": ["// Deep reviewed and polished by a human on 2026-08-10.\n\n/**\n * Defines filesystem boundary enforcement modes.\n *\n * The schema itself is `@smthrs/plan`'s `FileSet.BoundaryMode`, because the\n * same two words are what a plan node's `effects.boundaryMode` carries. This\n * module is the name an action reaches for; there is one declaration behind\n * both.\n *\n * @since 0.1.0\n */\n\nimport * as FileSet from \"@smthrs/plan/FileSet\"\n\n/**\n * Schema for how strictly an action's filesystem boundary is enforced.\n *\n * `hard` rejects undeclared access. `expected` records access for validation\n * after execution without requiring the sandbox to reject it immediately.\n *\n * @category models\n * @since 0.1.0\n */\nexport const BoundaryMode = FileSet.BoundaryMode\n\n/**\n * How strictly an action's filesystem boundary is enforced.\n *\n * @category models\n * @since 0.1.0\n */\nexport type BoundaryMode = FileSet.BoundaryMode\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAaA,cAAyB;AAWlB,MAAM,eAAe,QAAQ;",
+  "names": []
+}