@smthrs/flow 0.0.0-stage → 1.0.0-rc.3

package/dist/esm/Action/StepIdentity.js

@@ -0,0 +1,139 @@
+// Deep reviewed and polished by a human on 2026-08-10.
+/**
+ * Derives allocation scopes and run-local invocation keys.
+ *
+ * Ordinal step identity has four components: the kind of durable operation
+ * (an action dispatch or an internal engine operation), the stable
+ * declaration identity (the action name, or a fixed internal label), an
+ * optional explicit idempotency component — a caller-declared string or
+ * object — and an optional structural dispatch site. Every ordinal counter
+ * in the engine is keyed by the scope this module derives, and the scope is
+ * also folded into the persisted key as `parentScope`, so two dispatches with
+ * distinct declarations or structural sites can never swap ordinals under a
+ * permuted fiber interleaving (issues #73, #85, #98, #101).
+ *
+ * The derivation is injective: distinct `(kind, name, idempotency, site)`
+ * inputs always produce distinct scopes. The name and site are
+ * length-prefixed so their contents cannot splice across component
+ * separators, and both idempotency forms are canonicalized to a fixed-width
+ * digest under distinct tags so a string can never alias the object identity
+ * whose digest it happens to spell.
+ *
+ * Governing contract: `docs/concepts/execution-identity.md`.
+ *
+ * @since 0.1.0
+ */
+import { Sha256 } from "@smthrs/crypto";
+import { DerivedKey } from "@smthrs/keys";
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import * as Schema from "effect/Schema";
+/**
+ * Validates the engine-owned coordinates of a run-local invocation.
+ *
+ * @private
+ * @since 0.1.0
+ */
+const Invocation = Schema.Struct({
+    runId: Schema.NonEmptyString,
+    parentScope: Schema.optionalKey(Schema.NonEmptyString),
+    ordinal: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0)),
+    tier: Schema.Literals(["compensable", "irreversible", "unsealed"])
+});
+/**
+ * The interpreter graph site currently dispatching an action.
+ *
+ * A site is a replay-stable structural address of an `ActionCall` node. It is
+ * never derived from fiber arrival order and is never a diagnostic label. It
+ * is durable key material: changing it deliberately changes ordinal scopes
+ * and invocation keys. Handler-driven dispatches leave the service absent.
+ *
+ * @since 0.1.0
+ * @category services
+ */
+export class DispatchSite extends Context.Service()("@smthrs/flow/Action/DispatchSite") {
+}
+/**
+ * Where the dispatches of one interpreter node report what happened to them.
+ *
+ * An engine knows facts the walk above it cannot see: whether a dispatch ran
+ * its body or was served from a durable record, which step key it ran under,
+ * and which durable attempt it was. Without the first a node that replayed
+ * every one of its dispatches is indistinguishable from one that did the work
+ * again. Without the other two a node's evidence cannot be joined to the
+ * attempt records the engine wrote, because an attempt record carries a step
+ * key digest and no node id while a node record carried no digest at all. The
+ * interpreter installs one of these per node and reads the report back when
+ * the node settles.
+ *
+ * Absent by default. A dispatch outside an interpreted graph — a handler
+ * calling an action directly — reports to nobody, and reporting stays a
+ * side channel rather than a change to what `actionExecute` returns.
+ *
+ * @since 1.0.0
+ * @category services
+ */
+export class DispatchReport extends Context.Service()("@smthrs/flow/Action/DispatchReport") {
+}
+/**
+ * Reports one dispatch to the node that drove it, when a node drove it.
+ *
+ * @since 1.0.0
+ * @category constructors
+ */
+export const reportDispatch = (dispatch) => Effect.flatMap(Effect.serviceOption(DispatchReport), (report) => Option.isNone(report) ? Effect.void : report.value.dispatched(dispatch));
+/**
+ * Derives the ordinal allocation scope of a durable operation.
+ *
+ * The scope keys the operation's ordinal counter and is folded into its
+ * persisted invocation key as `parentScope`, so identity is stable
+ * under any interleaving of distinct declarations.
+ *
+ * Injectivity: the name is length-prefixed (`<kind>/<length>:<name>`), so a
+ * name containing `/s:` or `/c:` material cannot collide with a keyed form
+ * of a shorter name, and the idempotency component is a fixed-shape tagged
+ * digest appended after the name. Both idempotency forms canonicalize under
+ * distinct one-character tags so a string can never alias the object identity
+ * whose digest it happens to spell. A present site is appended as
+ * `/g:<length>:<site>`; its length prefix prevents site contents from
+ * aliasing another component or splicing across a future suffix. An absent
+ * site appends nothing, preserving the prior encoding exactly.
+ *
+ * The object form is caller-owned material, so it can carry values canonical
+ * serialization rejects (`Date`, `undefined`, class instances, `Redacted`);
+ * the failure surfaces as the typed `SchemaError` (issue #151), never
+ * as a thrown defect. The string and absent forms
+ * are total — the first overload keeps their error channel `never`.
+ *
+ * @since 0.1.0
+ * @category derivations
+ */
+export const allocationScope = (identity) => Effect.gen(function* () {
+    let scope = `${identity.kind}/${identity.name.length}:${identity.name}`;
+    if (typeof identity.idempotency === "string") {
+        const digest = yield* Schema.decodeUnknownEffect(Sha256)(identity.idempotency);
+        scope = `${scope}/s:${digest}`;
+    }
+    else if (identity.idempotency !== undefined) {
+        const key = yield* Schema.decodeUnknownEffect(DerivedKey)({ kind: "declaration", input: identity.idempotency });
+        scope = `${scope}/c:${key}`;
+    }
+    if (identity.site === undefined)
+        return scope;
+    return `${scope}/g:${identity.site.length}:${identity.site}`;
+});
+/**
+ * Derives an invocation key from engine-generated input.
+ *
+ * The input is engine-generated by construction — a finite counter
+ * ordinal, a literal tier, and plain string scopes — so canonical
+ * serialization cannot reject it. A failure here is an engine defect, and it
+ * surfaces as the typed `SchemaError` itself (issue #151) rather than
+ * being discarded through `Result.getOrThrow`.
+ *
+ * @since 0.1.0
+ * @category derivations
+ */
+export const invocationKey = (input) => Schema.decodeUnknownEffect(Invocation)(input).pipe(Effect.flatMap((validated) => Schema.decodeUnknownEffect(DerivedKey)({ kind: "invocation", ...validated })));
+//# sourceMappingURL=StepIdentity.js.map

package/dist/esm/Action/StepIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StepIdentity.js","sourceRoot":"","sources":["../../../src/Action/StepIdentity.ts"],"names":[],"mappings":"AAAA,uDAAuD;AAEvD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AACvC,OAAO,EAAE,UAAU,EAAkB,MAAM,cAAc,CAAA;AACzD,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AAEzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC;;;;;GAKG;AACH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC,cAAc;IAC5B,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,CAAC;IACtD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;CACnE,CAAC,CAAA;AAEF;;;;;;;;;;GAUG;AACH,MAAM,OAAO,YAAa,SAAQ,OAAO,CAAC,OAAO,EAAwB,CACvE,kCAAkC,CACnC;CAAG;AAsBJ;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,cAAe,SAAQ,OAAO,CAAC,OAAO,EAE/C,CAAC,oCAAoC,CAAC;CAAG;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAyB,EAAuB,EAAE,CAC/E,MAAM,CAAC,OAAO,CACZ,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,EACpC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CACpF,CAAA;AAuCH;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,QAA4B,EAC8B,EAAE,CAC5D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,KAAK,GAAG,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAA;IACvE,IAAI,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAC9E,KAAK,GAAG,GAAG,KAAK,MAAM,MAAM,EAAE,CAAA;IAChC,CAAC;SAAM,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;QAC/G,KAAK,GAAG,GAAG,KAAK,MAAM,GAAG,EAAE,CAAA;IAC7B,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAC7C,OAAO,GAAG,KAAK,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAA;AAC9D,CAAC,CAAC,CAAA;AAEJ;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAK7B,EAA+D,EAAE,CAChE,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAChD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC,CAC5G,CAAA","sourcesContent":["// Deep reviewed and polished by a human on 2026-08-10.\n\n/**\n * Derives allocation scopes and run-local invocation keys.\n *\n * Ordinal step identity has four components: the kind of durable operation\n * (an action dispatch or an internal engine operation), the stable\n * declaration identity (the action name, or a fixed internal label), an\n * optional explicit idempotency component — a caller-declared string or\n * object — and an optional structural dispatch site. Every ordinal counter\n * in the engine is keyed by the scope this module derives, and the scope is\n * also folded into the persisted key as `parentScope`, so two dispatches with\n * distinct declarations or structural sites can never swap ordinals under a\n * permuted fiber interleaving (issues #73, #85, #98, #101).\n *\n * The derivation is injective: distinct `(kind, name, idempotency, site)`\n * inputs always produce distinct scopes. The name and site are\n * length-prefixed so their contents cannot splice across component\n * separators, and both idempotency forms are canonicalized to a fixed-width\n * digest under distinct tags so a string can never alias the object identity\n * whose digest it happens to spell.\n *\n * Governing contract: `docs/concepts/execution-identity.md`.\n *\n * @since 0.1.0\n */\n\nimport { Sha256 } from \"@smthrs/crypto\"\nimport { DerivedKey, type StoredKey } from \"@smthrs/keys\"\nimport * as Context from \"effect/Context\"\nimport type * as Crypto from \"effect/Crypto\"\nimport * as Effect from \"effect/Effect\"\nimport * as Option from \"effect/Option\"\nimport * as Schema from \"effect/Schema\"\n\n/**\n * Validates the engine-owned coordinates of a run-local invocation.\n *\n * @private\n * @since 0.1.0\n */\nconst Invocation = Schema.Struct({\n  runId: Schema.NonEmptyString,\n  parentScope: Schema.optionalKey(Schema.NonEmptyString),\n  ordinal: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0)),\n  tier: Schema.Literals([\"compensable\", \"irreversible\", \"unsealed\"])\n})\n\n/**\n * The interpreter graph site currently dispatching an action.\n *\n * A site is a replay-stable structural address of an `ActionCall` node. It is\n * never derived from fiber arrival order and is never a diagnostic label. It\n * is durable key material: changing it deliberately changes ordinal scopes\n * and invocation keys. Handler-driven dispatches leave the service absent.\n *\n * @since 0.1.0\n * @category services\n */\nexport class DispatchSite extends Context.Service<DispatchSite, string>()(\n  \"@smthrs/flow/Action/DispatchSite\"\n) {}\n\n/**\n * What one dispatch tells the node that drove it.\n *\n * `outcome` is the fact the walk above cannot see on its own: whether the\n * dispatch ran its body or was served from a durable record. `stepKeyDigest`\n * is the identity the rest of the engine addresses that dispatch by — the\n * digest `flows.engine.attempt-started` carries and `flows_attempts` is keyed\n * on — and `attempt` is the durable attempt it ran as. Both are optional\n * because a runtime that keeps no attempt rows has neither, and a node with\n * no digest says so rather than inventing one.\n *\n * @since 1.0.0\n * @category models\n */\nexport interface DispatchOutcome {\n  readonly outcome: \"executed\" | \"replayed\"\n  readonly stepKeyDigest?: string | undefined\n  readonly attempt?: number | undefined\n}\n\n/**\n * Where the dispatches of one interpreter node report what happened to them.\n *\n * An engine knows facts the walk above it cannot see: whether a dispatch ran\n * its body or was served from a durable record, which step key it ran under,\n * and which durable attempt it was. Without the first a node that replayed\n * every one of its dispatches is indistinguishable from one that did the work\n * again. Without the other two a node's evidence cannot be joined to the\n * attempt records the engine wrote, because an attempt record carries a step\n * key digest and no node id while a node record carried no digest at all. The\n * interpreter installs one of these per node and reads the report back when\n * the node settles.\n *\n * Absent by default. A dispatch outside an interpreted graph — a handler\n * calling an action directly — reports to nobody, and reporting stays a\n * side channel rather than a change to what `actionExecute` returns.\n *\n * @since 1.0.0\n * @category services\n */\nexport class DispatchReport extends Context.Service<DispatchReport, {\n  readonly dispatched: (dispatch: DispatchOutcome) => Effect.Effect<void>\n}>()(\"@smthrs/flow/Action/DispatchReport\") {}\n\n/**\n * Reports one dispatch to the node that drove it, when a node drove it.\n *\n * @since 1.0.0\n * @category constructors\n */\nexport const reportDispatch = (dispatch: DispatchOutcome): Effect.Effect<void> =>\n  Effect.flatMap(\n    Effect.serviceOption(DispatchReport),\n    (report) => Option.isNone(report) ? Effect.void : report.value.dispatched(dispatch)\n  )\n\n/**\n * The declaration material an allocation scope is derived from.\n *\n * @since 0.1.0\n * @category models\n */\nexport interface AllocationIdentity {\n  /**\n   * `\"action\"` for user-declared action dispatches, `\"internal\"` for\n   * engine-owned durable operations (queue offers, deferred tokens). The two\n   * kinds own disjoint counter namespaces.\n   */\n  readonly kind: \"action\" | \"internal\"\n  /**\n   * The stable declaration identity: an action's declared name, or a fixed\n   * label for an internal operation family. Diagnostic names must not be\n   * passed here unless they are part of identity.\n   */\n  readonly name: string\n  /**\n   * The explicit idempotency component. A declared string and a declared\n   * cache key input both refine the scope — two concurrent invocations of\n   * one name with distinguishable inputs each own their own counter, so a\n   * replay that reverses fiber-arrival order can never hand one invocation\n   * the other's recorded outcome. Absent, invocations of one name share a\n   * counter and remain allocation-ordered — indistinguishable declarations\n   * have no material to order them by.\n   */\n  readonly idempotency?: string | Schema.JsonObject | undefined\n  /**\n   * The replay-stable structural address of the interpreter graph node that\n   * drives this dispatch. Absent for handler-driven dispatches, preserving\n   * their existing allocation scopes byte for byte.\n   */\n  readonly site?: string | undefined\n}\n\n/**\n * Derives the ordinal allocation scope of a durable operation.\n *\n * The scope keys the operation's ordinal counter and is folded into its\n * persisted invocation key as `parentScope`, so identity is stable\n * under any interleaving of distinct declarations.\n *\n * Injectivity: the name is length-prefixed (`<kind>/<length>:<name>`), so a\n * name containing `/s:` or `/c:` material cannot collide with a keyed form\n * of a shorter name, and the idempotency component is a fixed-shape tagged\n * digest appended after the name. Both idempotency forms canonicalize under\n * distinct one-character tags so a string can never alias the object identity\n * whose digest it happens to spell. A present site is appended as\n * `/g:<length>:<site>`; its length prefix prevents site contents from\n * aliasing another component or splicing across a future suffix. An absent\n * site appends nothing, preserving the prior encoding exactly.\n *\n * The object form is caller-owned material, so it can carry values canonical\n * serialization rejects (`Date`, `undefined`, class instances, `Redacted`);\n * the failure surfaces as the typed `SchemaError` (issue #151), never\n * as a thrown defect. The string and absent forms\n * are total — the first overload keeps their error channel `never`.\n *\n * @since 0.1.0\n * @category derivations\n */\nexport const allocationScope = (\n  identity: AllocationIdentity\n): Effect.Effect<string, Schema.SchemaError, Crypto.Crypto> =>\n  Effect.gen(function*() {\n    let scope = `${identity.kind}/${identity.name.length}:${identity.name}`\n    if (typeof identity.idempotency === \"string\") {\n      const digest = yield* Schema.decodeUnknownEffect(Sha256)(identity.idempotency)\n      scope = `${scope}/s:${digest}`\n    } else if (identity.idempotency !== undefined) {\n      const key = yield* Schema.decodeUnknownEffect(DerivedKey)({ kind: \"declaration\", input: identity.idempotency })\n      scope = `${scope}/c:${key}`\n    }\n    if (identity.site === undefined) return scope\n    return `${scope}/g:${identity.site.length}:${identity.site}`\n  })\n\n/**\n * Derives an invocation key from engine-generated input.\n *\n * The input is engine-generated by construction — a finite counter\n * ordinal, a literal tier, and plain string scopes — so canonical\n * serialization cannot reject it. A failure here is an engine defect, and it\n * surfaces as the typed `SchemaError` itself (issue #151) rather than\n * being discarded through `Result.getOrThrow`.\n *\n * @since 0.1.0\n * @category derivations\n */\nexport const invocationKey = (input: {\n  readonly runId: string\n  readonly parentScope?: string | undefined\n  readonly ordinal: number\n  readonly tier: \"unsealed\" | \"compensable\" | \"irreversible\"\n}): Effect.Effect<StoredKey, Schema.SchemaError, Crypto.Crypto> =>\n  Schema.decodeUnknownEffect(Invocation)(input).pipe(\n    Effect.flatMap((validated) => Schema.decodeUnknownEffect(DerivedKey)({ kind: \"invocation\", ...validated }))\n  )\n"]}

package/dist/esm/Action/TreeArtifact.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Directory outputs captured and replayed as tree artifacts.
+ *
+ * @since 0.1.0
+ */
+export { TreeArtifact } from "@smthrs/plan/FileSet";
+export type { TreeArtifact as Type } from "@smthrs/plan/FileSet";
+//# sourceMappingURL=TreeArtifact.d.ts.map

package/dist/esm/Action/TreeArtifact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TreeArtifact.d.ts","sourceRoot":"","sources":["../../../src/Action/TreeArtifact.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACnD,YAAY,EAAE,YAAY,IAAI,IAAI,EAAE,MAAM,sBAAsB,CAAA"}

package/dist/esm/Action/TreeArtifact.js

@@ -0,0 +1,7 @@
+/**
+ * Directory outputs captured and replayed as tree artifacts.
+ *
+ * @since 0.1.0
+ */
+export { TreeArtifact } from "@smthrs/plan/FileSet";
+//# sourceMappingURL=TreeArtifact.js.map

package/dist/esm/Action/TreeArtifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TreeArtifact.js","sourceRoot":"","sources":["../../../src/Action/TreeArtifact.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA","sourcesContent":["/**\n * Directory outputs captured and replayed as tree artifacts.\n *\n * @since 0.1.0\n */\n\nexport { TreeArtifact } from \"@smthrs/plan/FileSet\"\nexport type { TreeArtifact as Type } from \"@smthrs/plan/FileSet\"\n"]}

package/dist/esm/Action/TypeId.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Runtime identity shared by action interfaces and constructors.
+ *
+ * @private
+ * @since 0.1.0
+ */
+export declare const TypeId = "@smthrs/flow/Action";
+//# sourceMappingURL=TypeId.d.ts.map

package/dist/esm/Action/TypeId.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TypeId.d.ts","sourceRoot":"","sources":["../../../src/Action/TypeId.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,eAAO,MAAM,MAAM,wBAAwB,CAAA"}

package/dist/esm/Action/TypeId.js

@@ -0,0 +1,9 @@
+// Deep reviewed and polished by a human on 2026-08-10.
+/**
+ * Runtime identity shared by action interfaces and constructors.
+ *
+ * @private
+ * @since 0.1.0
+ */
+export const TypeId = "@smthrs/flow/Action";
+//# sourceMappingURL=TypeId.js.map

package/dist/esm/Action/TypeId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TypeId.js","sourceRoot":"","sources":["../../../src/Action/TypeId.ts"],"names":[],"mappings":"AAAA,uDAAuD;AAEvD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,qBAAqB,CAAA","sourcesContent":["// Deep reviewed and polished by a human on 2026-08-10.\n\n/**\n * Runtime identity shared by action interfaces and constructors.\n *\n * @private\n * @since 0.1.0\n */\nexport const TypeId = \"@smthrs/flow/Action\"\n"]}

package/dist/esm/Action/UncanonicalIdempotencyKey.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Defines the `UncanonicalIdempotencyKey` action failure.
+ *
+ * The `_tag` string was settled under `@smthrs/flow/` for 1.0.0-rc.0. The RC
+ * makes no compatibility promise to 0.x journals, and the tag freezes when
+ * the RC ships.
+ *
+ * @since 0.1.0
+ */
+import * as Schema from "effect/Schema";
+declare const UncanonicalIdempotencyKey_base: Schema.Class<UncanonicalIdempotencyKey, Schema.TaggedStruct<"@smthrs/flow/UncanonicalIdempotencyKey", {
+    readonly code: Schema.withConstructorDefault<Schema.Literal<"uncanonical_idempotency_key">>;
+    readonly actionName: Schema.String;
+    /** Stable reason identifying an RFC 8785 canonicalization failure. */
+    readonly reason: Schema.String;
+    /** The path of the offending value inside the declared identity. */
+    readonly path: Schema.String;
+    readonly message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * A caller-declared object-form `idempotencyKey` carried material canonical
+ * serialization rejects. The declaration can be fixed, and the error is
+ * non-retryable: the same declaration
+ * derives the same rejection on every attempt, so the body never runs.
+ *
+ * @category errors
+ * @since 0.1.0
+ */
+export declare class UncanonicalIdempotencyKey extends UncanonicalIdempotencyKey_base {
+}
+export {};
+//# sourceMappingURL=UncanonicalIdempotencyKey.d.ts.map

package/dist/esm/Action/UncanonicalIdempotencyKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UncanonicalIdempotencyKey.d.ts","sourceRoot":"","sources":["../../../src/Action/UncanonicalIdempotencyKey.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;;;;IAkBnC,sEAAsE;;IAEtE,oEAAoE;;;;AAlBxE;;;;;;;;GAQG;AACH,qBAAa,yBAA0B,SAAQ,8BAa9C;CAAG"}

package/dist/esm/Action/UncanonicalIdempotencyKey.js

@@ -0,0 +1,31 @@
+/**
+ * Defines the `UncanonicalIdempotencyKey` action failure.
+ *
+ * The `_tag` string was settled under `@smthrs/flow/` for 1.0.0-rc.0. The RC
+ * makes no compatibility promise to 0.x journals, and the tag freezes when
+ * the RC ships.
+ *
+ * @since 0.1.0
+ */
+import * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
+/**
+ * A caller-declared object-form `idempotencyKey` carried material canonical
+ * serialization rejects. The declaration can be fixed, and the error is
+ * non-retryable: the same declaration
+ * derives the same rejection on every attempt, so the body never runs.
+ *
+ * @category errors
+ * @since 0.1.0
+ */
+export class UncanonicalIdempotencyKey extends Schema.TaggedError()("@smthrs/flow/UncanonicalIdempotencyKey", {
+    code: Schema.Literal("uncanonical_idempotency_key").pipe(Schema.withConstructorDefault(Effect.succeed("uncanonical_idempotency_key"))),
+    actionName: Schema.String,
+    /** Stable reason identifying an RFC 8785 canonicalization failure. */
+    reason: Schema.String,
+    /** The path of the offending value inside the declared identity. */
+    path: Schema.String,
+    message: Schema.String
+}) {
+}
+//# sourceMappingURL=UncanonicalIdempotencyKey.js.map

package/dist/esm/Action/UncanonicalIdempotencyKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UncanonicalIdempotencyKey.js","sourceRoot":"","sources":["../../../src/Action/UncanonicalIdempotencyKey.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC;;;;;;;;GAQG;AACH,MAAM,OAAO,yBAA0B,SAAQ,MAAM,CAAC,WAAW,EAA6B,CAC5F,wCAAwC,EACxC;IACE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,IAAI,CACtD,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAC7E;IACD,UAAU,EAAE,MAAM,CAAC,MAAM;IACzB,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM;CACvB,CACF;CAAG","sourcesContent":["/**\n * Defines the `UncanonicalIdempotencyKey` action failure.\n *\n * The `_tag` string was settled under `@smthrs/flow/` for 1.0.0-rc.0. The RC\n * makes no compatibility promise to 0.x journals, and the tag freezes when\n * the RC ships.\n *\n * @since 0.1.0\n */\n\nimport * as Effect from \"effect/Effect\"\nimport * as Schema from \"effect/Schema\"\n\n/**\n * A caller-declared object-form `idempotencyKey` carried material canonical\n * serialization rejects. The declaration can be fixed, and the error is\n * non-retryable: the same declaration\n * derives the same rejection on every attempt, so the body never runs.\n *\n * @category errors\n * @since 0.1.0\n */\nexport class UncanonicalIdempotencyKey extends Schema.TaggedError<UncanonicalIdempotencyKey>()(\n  \"@smthrs/flow/UncanonicalIdempotencyKey\",\n  {\n    code: Schema.Literal(\"uncanonical_idempotency_key\").pipe(\n      Schema.withConstructorDefault(Effect.succeed(\"uncanonical_idempotency_key\"))\n    ),\n    actionName: Schema.String,\n    /** Stable reason identifying an RFC 8785 canonicalization failure. */\n    reason: Schema.String,\n    /** The path of the offending value inside the declared identity. */\n    path: Schema.String,\n    message: Schema.String\n  }\n) {}\n"]}

package/dist/esm/Action/idempotencyKey.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Derives run-local keys for internal durable operations.
+ *
+ * @since 0.1.0
+ */
+import type * as Crypto from "effect/Crypto";
+import * as Effect from "effect/Effect";
+import { FlowInstance } from "../FlowRuntime/FlowInstance.ts";
+/**
+ * Computes a run-local invocation key for an internal durable operation.
+ *
+ * The caller name separates durable declarations that share a parent scope.
+ *
+ * @category idempotency
+ * @since 0.1.0
+ */
+export declare const idempotencyKey: (name: string, options?: {
+    readonly includeAttempt?: boolean | undefined;
+    readonly parentScope?: string | undefined;
+} | undefined) => Effect.Effect<string, never, FlowInstance | Crypto.Crypto>;
+//# sourceMappingURL=idempotencyKey.d.ts.map

package/dist/esm/Action/idempotencyKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotencyKey.d.ts","sourceRoot":"","sources":["../../../src/Action/idempotencyKey.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAA;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAI7D;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,EAAE,CAC3B,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1C,GAAG,SAAS,KACV,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,CAsC1D,CAAA"}

package/dist/esm/Action/idempotencyKey.js

@@ -0,0 +1,50 @@
+// Deep reviewed and polished by a human on 2026-08-10.
+import * as Effect from "effect/Effect";
+import { FlowInstance } from "../FlowRuntime/FlowInstance.js";
+import { CurrentAttempt } from "./Context.js";
+import * as StepIdentity from "./StepIdentity.js";
+/**
+ * Computes a run-local invocation key for an internal durable operation.
+ *
+ * The caller name separates durable declarations that share a parent scope.
+ *
+ * @category idempotency
+ * @since 0.1.0
+ */
+export const idempotencyKey = 
+// Untraced because action-key allocation is on every action attempt.
+Effect.fnUntraced(function* (name, options) {
+    const instance = yield* FlowInstance;
+    const attempt = yield* CurrentAttempt;
+    // Internal durable operations are scoped by the caller's declaration name
+    // and declared `parentScope` through the canonical `StepIdentity` derivation (issue
+    // #98): a run-global counter numbered concurrent offers in fiber-arrival
+    // order, so a replay with a permuted interleaving handed one payload's
+    // ordinal to another and its await watched a deferred nothing resolves.
+    // With the counter scoped per declared parent, each scope numbers its
+    // own allocations deterministically; only allocations *within* one
+    // scope remain arrival-ordered — they carry no input that orders them
+    // by.
+    const parentScope = options?.parentScope !== undefined
+        ? options.parentScope
+        : options?.includeAttempt
+            ? `attempt:${attempt}`
+            : undefined;
+    // String (or absent) idempotency input keeps the derivation total
+    // (issue #151): schema decoding preserves typed identity failures while
+    // injected cryptography keeps key construction platform-independent.
+    const scope = yield* StepIdentity.allocationScope({
+        kind: "internal",
+        name,
+        idempotency: parentScope
+    }).pipe(Effect.orDie);
+    const ordinal = instance.actionState.nextOrdinal(scope);
+    const identityScope = JSON.stringify([name, parentScope ?? null]);
+    return yield* StepIdentity.invocationKey({
+        runId: instance.executionId,
+        ordinal,
+        tier: "unsealed",
+        parentScope: identityScope
+    }).pipe(Effect.orDie);
+});
+//# sourceMappingURL=idempotencyKey.js.map

package/dist/esm/Action/idempotencyKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotencyKey.js","sourceRoot":"","sources":["../../../src/Action/idempotencyKey.ts"],"names":[],"mappings":"AAAA,uDAAuD;AASvD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AAEjD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc;AAOzB,qEAAqE;AACrE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAC,IAAY,EAAE,OAGzC;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAA;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAA;IACrC,0EAA0E;IAC1E,oFAAoF;IACpF,yEAAyE;IACzE,uEAAuE;IACvE,wEAAwE;IACxE,sEAAsE;IACtE,mEAAmE;IACnE,sEAAsE;IACtE,MAAM;IACN,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,KAAK,SAAS;QACpD,CAAC,CAAC,OAAO,CAAC,WAAW;QACrB,CAAC,CAAC,OAAO,EAAE,cAAc;YACzB,CAAC,CAAC,WAAW,OAAO,EAAE;YACtB,CAAC,CAAC,SAAS,CAAA;IACb,kEAAkE;IAClE,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC;QAChD,IAAI,EAAE,UAAU;QAChB,IAAI;QACJ,WAAW,EAAE,WAAW;KACzB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACrB,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;IACvD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC,CAAC,CAAA;IACjE,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC;QACvC,KAAK,EAAE,QAAQ,CAAC,WAAW;QAC3B,OAAO;QACP,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,aAAa;KAC3B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACvB,CAAC,CAAC,CAAA","sourcesContent":["// Deep reviewed and polished by a human on 2026-08-10.\n\n/**\n * Derives run-local keys for internal durable operations.\n *\n * @since 0.1.0\n */\n\nimport type * as Crypto from \"effect/Crypto\"\nimport * as Effect from \"effect/Effect\"\nimport { FlowInstance } from \"../FlowRuntime/FlowInstance.ts\"\nimport { CurrentAttempt } from \"./Context.ts\"\nimport * as StepIdentity from \"./StepIdentity.ts\"\n\n/**\n * Computes a run-local invocation key for an internal durable operation.\n *\n * The caller name separates durable declarations that share a parent scope.\n *\n * @category idempotency\n * @since 0.1.0\n */\nexport const idempotencyKey: (\n  name: string,\n  options?: {\n    readonly includeAttempt?: boolean | undefined\n    readonly parentScope?: string | undefined\n  } | undefined\n) => Effect.Effect<string, never, FlowInstance | Crypto.Crypto> =\n  // Untraced because action-key allocation is on every action attempt.\n  Effect.fnUntraced(function*(name: string, options?: {\n    readonly includeAttempt?: boolean | undefined\n    readonly parentScope?: string | undefined\n  }) {\n    const instance = yield* FlowInstance\n    const attempt = yield* CurrentAttempt\n    // Internal durable operations are scoped by the caller's declaration name\n    // and declared `parentScope` through the canonical `StepIdentity` derivation (issue\n    // #98): a run-global counter numbered concurrent offers in fiber-arrival\n    // order, so a replay with a permuted interleaving handed one payload's\n    // ordinal to another and its await watched a deferred nothing resolves.\n    // With the counter scoped per declared parent, each scope numbers its\n    // own allocations deterministically; only allocations *within* one\n    // scope remain arrival-ordered — they carry no input that orders them\n    // by.\n    const parentScope = options?.parentScope !== undefined\n      ? options.parentScope\n      : options?.includeAttempt\n      ? `attempt:${attempt}`\n      : undefined\n    // String (or absent) idempotency input keeps the derivation total\n    // (issue #151): schema decoding preserves typed identity failures while\n    // injected cryptography keeps key construction platform-independent.\n    const scope = yield* StepIdentity.allocationScope({\n      kind: \"internal\",\n      name,\n      idempotency: parentScope\n    }).pipe(Effect.orDie)\n    const ordinal = instance.actionState.nextOrdinal(scope)\n    const identityScope = JSON.stringify([name, parentScope ?? null])\n    return yield* StepIdentity.invocationKey({\n      runId: instance.executionId,\n      ordinal,\n      tier: \"unsealed\",\n      parentScope: identityScope\n    }).pipe(Effect.orDie)\n  })\n"]}

package/dist/esm/Action/index.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Durable actions, identity, boundaries, retries, and runtime context.
+ *
+ * @since 0.1.0
+ */
+export * from "./Action.ts";
+export * from "./AttemptTimedOut.ts";
+export * from "./BoundaryMode.ts";
+export * from "./CacheEnvironment.ts";
+export * from "./ConcurrentKeylessDispatch.ts";
+export * from "./Context.ts";
+export * from "./DuplicateImplementation.ts";
+export * from "./FileBoundary.ts";
+export * as Filegroup from "./Filegroup.ts";
+export * from "./FileInput.ts";
+export * as Glob from "./Glob.ts";
+export * from "./idempotencyKey.ts";
+export * from "./Implementations.ts";
+export * from "./ImplementationVersionMismatch.ts";
+export * from "./InfraInterrupt.ts";
+export * from "./InfraInterruptRetriesExhausted.ts";
+export * from "./IrreversibleRetryRequiresIdempotencyKey.ts";
+export * from "./make.ts";
+export * from "./raceAll.ts";
+export * from "./retry.ts";
+export * from "./StepIdentity.ts";
+export * as TreeArtifact from "./TreeArtifact.ts";
+export * from "./UncanonicalIdempotencyKey.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/Action/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/Action/index.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,cAAc,aAAa,CAAA;AAC3B,cAAc,sBAAsB,CAAA;AACpC,cAAc,mBAAmB,CAAA;AACjC,cAAc,uBAAuB,CAAA;AACrC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,cAAc,CAAA;AAC5B,cAAc,8BAA8B,CAAA;AAC5C,cAAc,mBAAmB,CAAA;AACjC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,cAAc,gBAAgB,CAAA;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,cAAc,qBAAqB,CAAA;AACnC,cAAc,sBAAsB,CAAA;AACpC,cAAc,oCAAoC,CAAA;AAClD,cAAc,qBAAqB,CAAA;AACnC,cAAc,qCAAqC,CAAA;AACnD,cAAc,8CAA8C,CAAA;AAC5D,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA;AAC1B,cAAc,mBAAmB,CAAA;AACjC,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AACjD,cAAc,gCAAgC,CAAA"}

package/dist/esm/Action/index.js

@@ -0,0 +1,30 @@
+// Deep reviewed and polished by a human on 2026-08-10.
+/**
+ * Durable actions, identity, boundaries, retries, and runtime context.
+ *
+ * @since 0.1.0
+ */
+export * from "./Action.js";
+export * from "./AttemptTimedOut.js";
+export * from "./BoundaryMode.js";
+export * from "./CacheEnvironment.js";
+export * from "./ConcurrentKeylessDispatch.js";
+export * from "./Context.js";
+export * from "./DuplicateImplementation.js";
+export * from "./FileBoundary.js";
+export * as Filegroup from "./Filegroup.js";
+export * from "./FileInput.js";
+export * as Glob from "./Glob.js";
+export * from "./idempotencyKey.js";
+export * from "./Implementations.js";
+export * from "./ImplementationVersionMismatch.js";
+export * from "./InfraInterrupt.js";
+export * from "./InfraInterruptRetriesExhausted.js";
+export * from "./IrreversibleRetryRequiresIdempotencyKey.js";
+export * from "./make.js";
+export * from "./raceAll.js";
+export * from "./retry.js";
+export * from "./StepIdentity.js";
+export * as TreeArtifact from "./TreeArtifact.js";
+export * from "./UncanonicalIdempotencyKey.js";
+//# sourceMappingURL=index.js.map

package/dist/esm/Action/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/Action/index.ts"],"names":[],"mappings":"AAAA,uDAAuD;AAEvD;;;;GAIG;AAEH,cAAc,aAAa,CAAA;AAC3B,cAAc,sBAAsB,CAAA;AACpC,cAAc,mBAAmB,CAAA;AACjC,cAAc,uBAAuB,CAAA;AACrC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,cAAc,CAAA;AAC5B,cAAc,8BAA8B,CAAA;AAC5C,cAAc,mBAAmB,CAAA;AACjC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,cAAc,gBAAgB,CAAA;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,cAAc,qBAAqB,CAAA;AACnC,cAAc,sBAAsB,CAAA;AACpC,cAAc,oCAAoC,CAAA;AAClD,cAAc,qBAAqB,CAAA;AACnC,cAAc,qCAAqC,CAAA;AACnD,cAAc,8CAA8C,CAAA;AAC5D,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA;AAC1B,cAAc,mBAAmB,CAAA;AACjC,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AACjD,cAAc,gCAAgC,CAAA","sourcesContent":["// Deep reviewed and polished by a human on 2026-08-10.\n\n/**\n * Durable actions, identity, boundaries, retries, and runtime context.\n *\n * @since 0.1.0\n */\n\nexport * from \"./Action.ts\"\nexport * from \"./AttemptTimedOut.ts\"\nexport * from \"./BoundaryMode.ts\"\nexport * from \"./CacheEnvironment.ts\"\nexport * from \"./ConcurrentKeylessDispatch.ts\"\nexport * from \"./Context.ts\"\nexport * from \"./DuplicateImplementation.ts\"\nexport * from \"./FileBoundary.ts\"\nexport * as Filegroup from \"./Filegroup.ts\"\nexport * from \"./FileInput.ts\"\nexport * as Glob from \"./Glob.ts\"\nexport * from \"./idempotencyKey.ts\"\nexport * from \"./Implementations.ts\"\nexport * from \"./ImplementationVersionMismatch.ts\"\nexport * from \"./InfraInterrupt.ts\"\nexport * from \"./InfraInterruptRetriesExhausted.ts\"\nexport * from \"./IrreversibleRetryRequiresIdempotencyKey.ts\"\nexport * from \"./make.ts\"\nexport * from \"./raceAll.ts\"\nexport * from \"./retry.ts\"\nexport * from \"./StepIdentity.ts\"\nexport * as TreeArtifact from \"./TreeArtifact.ts\"\nexport * from \"./UncanonicalIdempotencyKey.ts\"\n"]}

package/dist/esm/Action/make.d.ts

@@ -0,0 +1,128 @@
+/**
+ * Constructs executable durable action values.
+ *
+ * @since 0.1.0
+ */
+import type * as Effects from "@smthrs/plan/Effects";
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import type * as Schedule from "effect/Schedule";
+import * as Schema from "effect/Schema";
+import type { Scope } from "effect/Scope";
+import type * as Flow from "../Flow/Flow.ts";
+import { FlowInstance } from "../FlowRuntime/FlowInstance.ts";
+import { FlowRuntime } from "../FlowRuntime/FlowRuntime.ts";
+import type * as RetryPolicy from "../RetryPolicy.ts";
+import type { Action, Declared, IdempotencyKey, Tier } from "./Action.ts";
+import { FileBoundary } from "./FileBoundary.ts";
+/**
+ * The options of a declared action, shared by {@link make}'s declared form and
+ * {@link makeSystem}.
+ */
+interface DeclaredOptions<Payload extends Schema.Struct.Fields | Flow.AnyStructSchema, Success extends Schema.Top, Error extends Schema.Top> {
+    readonly payload: Payload;
+    /**
+     * Native declaration whose source location this reconstructed action retains.
+     * A source with no recorded location preserves that absence. This affects
+     * diagnostics only, never identity; calls still refer to the new declaration.
+     */
+    readonly declaredFrom?: object | undefined;
+    readonly implementationVersion?: string | undefined;
+    readonly success?: Success | undefined;
+    readonly error?: Error | undefined;
+    /**
+     * The capability ceiling this action dispatches under, as string literals.
+     *
+     * It is the same ceiling {@link module:Flow/Annotations.Capabilities}
+     * carries, and declaring it here is what makes it READABLE without importing
+     * the module, exactly as `Flow.make`'s option is: a catalog projects a
+     * discovered declaration's authority from the source text of this literal,
+     * and an annotation built at run time is invisible to that projection.
+     *
+     * {@link module:Graph.build} records a `capability_outside_grant` refusal for
+     * every capability named here that the calling flow does not hold. The
+     * refusal is advisory: execution intersects this ceiling with every caller ceiling.
+     */
+    readonly capabilities?: ReadonlyArray<string> | undefined;
+    /**
+     * The effect envelope this action dispatches under, as a literal.
+     *
+     * It is the same declaration {@link module:Flow/Annotations.EffectEnvelope}
+     * carries, declared here for the same reason `capabilities` is.
+     *
+     * An action is a leaf, so this envelope encloses nothing; it is checked
+     * against the envelope the calling flow granted, and
+     * {@link module:Graph.build} refuses a dispatch that reads or writes outside
+     * that grant, loosens `hermetic` to `expected`, or raises the tier. `reads`
+     * and `writes` are normalized to sorted, duplicate-free arrays.
+     */
+    readonly effects?: Effects.MakeOptions | undefined;
+    readonly tier?: Tier | undefined;
+    readonly idempotencyKey?: IdempotencyKey | ((payload: (Payload extends Schema.Struct.Fields ? Schema.Struct<Payload> : Payload)["Type"]) => IdempotencyKey) | undefined;
+    readonly nondeterministic?: true | undefined;
+    readonly retryPolicy?: RetryPolicy.RetryPolicy | undefined;
+    /**
+     * Milliseconds one attempt may run. A longer attempt is interrupted and
+     * fails with {@link module:AttemptTimedOut.AttemptTimedOut}, which
+     * `retryPolicy` retries like any other attempt failure.
+     */
+    readonly attemptTimeoutMs?: number | undefined;
+    /**
+     * Milliseconds one attempt may go without calling
+     * {@link module:Context.heartbeat}, measured from the attempt's start and
+     * then from each heartbeat. A missed heartbeat fails the attempt like
+     * `attemptTimeoutMs`.
+     */
+    readonly heartbeatTimeoutMs?: number | undefined;
+    readonly interruptRetryPolicy?: Schedule.Schedule<any, unknown> | undefined;
+    readonly fileBoundary?: FileBoundary | ((payload: (Payload extends Schema.Struct.Fields ? Schema.Struct<Payload> : Payload)["Type"]) => FileBoundary) | undefined;
+    readonly annotations?: Context.Context<never> | undefined;
+}
+/**
+ * Creates either an inline executable action or a named action
+ * declaration, selected by whether the first argument is a string.
+ *
+ * @category constructors
+ * @since 0.1.0
+ */
+export declare const make: {
+    <const Tag extends string, Payload extends Schema.Struct.Fields | Flow.AnyStructSchema, Success extends Schema.Top = Schema.Void, Error extends Schema.Top = Schema.Never>(tag: Tag, options: DeclaredOptions<Payload, Success, Error>): Declared<Tag, Payload extends Schema.Struct.Fields ? Schema.Struct<Payload> : Payload, Success, Error>;
+    <R, Success extends Schema.Constraint = Schema.Void, Error extends Schema.Constraint = Schema.Never>(options: {
+        readonly name: string;
+        readonly implementationVersion?: string | undefined;
+        readonly success?: Success | undefined;
+        readonly error?: Error | undefined;
+        readonly execute: Effect.Effect<Success["Type"], Error["Type"], R>;
+        readonly tier?: Tier | undefined;
+        readonly idempotencyKey?: IdempotencyKey | undefined;
+        readonly nondeterministic?: true | undefined;
+        readonly metadata?: unknown;
+        readonly fileBoundary?: FileBoundary | undefined;
+        readonly interruptRetryPolicy?: Schedule.Schedule<any, unknown> | undefined;
+        readonly retryPolicy?: RetryPolicy.RetryPolicy | undefined;
+        readonly attemptTimeoutMs?: number | undefined;
+        readonly heartbeatTimeoutMs?: number | undefined;
+        readonly annotations?: Context.Context<never> | undefined;
+    }): Action<Success, Error, Exclude<R, FlowInstance | FlowRuntime | Scope>>;
+};
+/**
+ * Declares a SYSTEM action: one whose implementation ships with the engine
+ * rather than with the composition that calls it.
+ *
+ * It is {@link make}'s declared form in every respect except the requirement.
+ * A system declaration mints none, so `.call()` records a node that demands
+ * nothing and a body using {@link module:Sleep} or {@link module:WaitFor} does
+ * not push a layer obligation onto its callers. That is the whole difference,
+ * and it is a deliberate hole in the compile-time enforcement: the engine owns
+ * these implementations, so an author cannot be the one who forgot them.
+ *
+ * Everything else is unchanged — the layer still registers with the runtime and
+ * still files itself in {@link module:Implementations.Implementations}, so a
+ * driver resolves a system action by tag exactly like any other.
+ *
+ * @category constructors
+ * @since 0.1.0
+ */
+export declare const makeSystem: <const Tag extends string, Payload extends Schema.Struct.Fields | Flow.AnyStructSchema, Success extends Schema.Top = Schema.Void, Error extends Schema.Top = Schema.Never>(tag: Tag, options: DeclaredOptions<Payload, Success, Error>) => Declared<Tag, Payload extends Schema.Struct.Fields ? Schema.Struct<Payload> : Payload, Success, Error, never>;
+export {};
+//# sourceMappingURL=make.d.ts.map

package/dist/esm/Action/make.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"make.d.ts","sourceRoot":"","sources":["../../../src/Action/make.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,OAAO,KAAK,KAAK,OAAO,MAAM,sBAAsB,CAAA;AAGpD,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AAEzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAOvC,OAAO,KAAK,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,KAAK,KAAK,IAAI,MAAM,iBAAiB,CAAA;AAG5C,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAA;AAG3D,OAAO,KAAK,KAAK,WAAW,MAAM,mBAAmB,CAAA;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAe,IAAI,EAAE,MAAM,aAAa,CAAA;AAGtF,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAuChD;;;GAGG;AACH,UAAU,eAAe,CACvB,OAAO,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,eAAe,EAC3D,OAAO,SAAS,MAAM,CAAC,GAAG,EAC1B,KAAK,SAAS,MAAM,CAAC,GAAG;IAExB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;IAClC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,CAAA;IACzD;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,GAAG,SAAS,CAAA;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;IAChC,QAAQ,CAAC,cAAc,CAAC,EACpB,cAAc,GACd,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,cAAc,CAAC,GAChH,SAAS,CAAA;IACb,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,WAAW,GAAG,SAAS,CAAA;IAC1D;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9C;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;IAC3E,QAAQ,CAAC,YAAY,CAAC,EAClB,YAAY,GACZ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,YAAY,CAAC,GAC9G,SAAS,CAAA;IACb,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;CAC1D;AAiQD;;;;;;GAMG;AACH,eAAO,MAAM,IAAI,EAAE;IACjB,CACE,KAAK,CAAC,GAAG,SAAS,MAAM,EACxB,OAAO,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,eAAe,EAC3D,OAAO,SAAS,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,EACxC,KAAK,SAAS,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,EACvC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,QAAQ,CACtE,GAAG,EACH,OAAO,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,EACvE,OAAO,EACP,KAAK,CACN,CAAA;IACD,CACE,CAAC,EACD,OAAO,SAAS,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,EAC/C,KAAK,SAAS,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,EAC9C,OAAO,EAAE;QACT,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;QAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;QAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAA;QACpD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;QAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;QAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;QAChD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;QAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,WAAW,GAAG,SAAS,CAAA;QAC1D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC9C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;KAC1D,GAAG,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY,GAAG,WAAW,GAAG,KAAK,CAAC,CAAC,CAAA;CASnE,CAAA;AAET;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,UAAU,GACrB,KAAK,CAAC,GAAG,SAAS,MAAM,EACxB,OAAO,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,eAAe,EAC3D,OAAO,SAAS,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,EACxC,KAAK,SAAS,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,EACvC,KAAK,GAAG,EAAE,SAAS,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,KAAG,QAAQ,CACtE,GAAG,EACH,OAAO,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,EACvE,OAAO,EACP,KAAK,EACL,KAAK,CAgBJ,CAAA"}