@yielded/agent-platform-cloudflare 0.1.0-beta.167 → 0.1.0-beta.169

package/dist/{CloudflareBrowser-5an6m-Qb.mjs → CloudflareBrowser-Vt8qTdYW.mjs}

@@ -37,14 +37,12 @@ var BrowserQuickActionRpcError = class extends Schema.TaggedError()("BrowserQuic
 var BrowserQuickActionBrowserBinding = class BrowserQuickActionBrowserBinding extends Context.Service()("@effect-agent/platform-cloudflare/BrowserQuickActionBrowserBinding") {
 	static layer(options) {
 		const browser = options.browser;
-		const invoke = Effect.fn("BrowserQuickActionBrowserBinding.invoke")(function* (action, evaluate) {
-			return yield* Effect.tryPromise({
-				try: evaluate,
-				catch: (cause) => BrowserQuickActionRpcError.make({
-					action,
-					cause
-				})
-			});
+		const invoke = (action, evaluate) => Effect.tryPromise({
+			try: evaluate,
+			catch: (cause) => BrowserQuickActionRpcError.make({
+				action,
+				cause
+			})
 		});
 		return Layer.succeed(BrowserQuickActionBrowserBinding)({
 			screenshot: (request) => invoke("screenshot", () => browser.quickAction("screenshot", request)),
@@ -193,7 +191,7 @@ const releaseResponseReader = (reader) => cancelResponse(() => reader.cancel(),
 	try: () => reader.releaseLock(),
 	catch: (cause) => protocolError("Releasing the Quick Action response failed", cause)
 }).pipe(Effect.catch((error) => Effect.logWarning(error.message)))));
-const readBoundedResponse = Effect.fn("BrowserQuickActionCapture.readResponse")(function* (response, request) {
+const readBoundedResponse = Effect.fnUntraced(function* (response, request) {
 	const body = response.body;
 	if (body === null) return "";
 	const reader = yield* Effect.acquireRelease(Effect.try({
@@ -283,7 +281,7 @@ const parseOutput = (action, bodyText, response) => {
 	}
 };
 const isQuotaMessage = (text) => /time limit|daily|quota/i.test(text);
-const makeCapture = (browser, workersAi) => Effect.fn("BrowserQuickActionCapture.capture")(function* (request) {
+const makeCapture = (browser, workersAi) => Effect.fnUntraced(function* (request) {
 	if (request.engine !== "chromium") return yield* PageCaptureUnsupportedError.make({
 		implementation: browserQuickActionImplementation,
 		feature: "engine",
@@ -401,7 +399,7 @@ const declaredLength = (response) => {
 	const length = Number(raw);
 	return Number.isSafeInteger(length) ? length : void 0;
 };
-const readScreenshot = Effect.fn("BrowserQuickActionScreenshot.read")(function* (response, request) {
+const readScreenshot = Effect.fnUntraced(function* (response, request) {
 	const body = response.body;
 	if (body === null) return yield* protocolError("The screenshot response had no body");
 	if (!pngResponse(response)) {
@@ -445,7 +443,7 @@ const readScreenshot = Effect.fn("BrowserQuickActionScreenshot.read")(function*
 	}
 	return bytes;
 }, Effect.scoped);
-const makeScreenshot = (browser) => Effect.fn("BrowserQuickActionScreenshot.capture")(function* (request) {
+const makeScreenshot = (browser) => Effect.fnUntraced(function* (request) {
 	if (request.engine !== "chromium") return yield* PageCaptureUnsupportedError.make({
 		implementation: browserQuickActionImplementation,
 		feature: "engine",
@@ -492,4 +490,4 @@ var CloudflareBrowser_exports = /* @__PURE__ */ __exportAll({
 //#endregion
 export { BrowserQuickActionWorkersAiPolicyError as a, browserQuickActionScreenshotLayer as c, BrowserQuickActionWorkersAi as i, browserQuickActionWorkersAiCaptureLayer as l, BrowserQuickActionBrowserBinding as n, CloudflareBrowser as o, BrowserQuickActionRpcError as r, browserQuickActionCaptureLayer as s, CloudflareBrowser_exports as t };
 
-//# sourceMappingURL=CloudflareBrowser-5an6m-Qb.mjs.map
+//# sourceMappingURL=CloudflareBrowser-Vt8qTdYW.mjs.map

package/dist/CloudflareBrowser-Vt8qTdYW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudflareBrowser-Vt8qTdYW.mjs","names":[],"sources":["../src/internal/browser-quick-action.ts","../src/CloudflareBrowser.ts"],"sourcesContent":["/// <reference types=\"@cloudflare/workers-types\" />\n\nimport {\n  PageCapture,\n  PageCaptureInferenceUse,\n  PageCaptureInferencePolicyError,\n  PageCaptureNavigationError,\n  PageCaptureOutputLimitError,\n  PageCaptureProtocolError,\n  PageCaptureRateLimitedError,\n  PageCaptureResourceUse,\n  PageCaptureResult,\n  PageCaptureUnsupportedError,\n  PageContentCaptured,\n  PageLinksCaptured,\n  PageMarkdownCaptured,\n  PageScrapeCaptured,\n  PageStructuredCaptured,\n  type PageCaptureAction,\n  type PageCaptureCapture,\n  type PageCaptureError,\n  type PageCaptureOutput,\n  type PageCaptureRequest,\n} from \"@yielded/agent/page-capture\";\nimport {\n  PageScreenshot,\n  PageScreenshotOutputLimitError,\n  PageScreenshotResult,\n  type PageScreenshotCapture,\n  type PageScreenshotError,\n  type PageScreenshotRequest,\n} from \"@yielded/agent/page-screenshot\";\nimport { SandboxImplementation } from \"@yielded/agent/sandbox\";\nimport { Context, Effect, Layer, Option, Schema } from \"effect\";\n\n/**\n * The Cloudflare Browser Run Quick Action `PageCapture` adapter (capability\n * spec §9.2). Each capture is one stateless `quickAction()` RPC on the\n * Wrangler `browser` binding: the platform renders the target in a managed\n * headless browser and returns one bounded output; the adapter holds no\n * session and no state between passes. The binding requires a Worker\n * compatibility date of `2026-03-24` or later, and local `wrangler dev` needs\n * remote mode (`\"remote\": true` on the binding) because `quickAction` has no\n * local implementation.\n *\n * Rendered output is untrusted, attacker-influenced content; this adapter\n * only bounds and types it. Deployment class `E` only: no durability claim.\n */\nexport const browserQuickActionImplementation = SandboxImplementation.make({\n  isolation: \"isolated\",\n  identity: \"cloudflare-browser-quick-action\",\n});\n\n/**\n * Effect-native client captured by the binding service. Its option types come\n * directly from the pinned Workers declarations rather than a local copy.\n */\nexport interface BrowserQuickActionClient {\n  readonly screenshot: (\n    options: BrowserRunScreenshotOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n  readonly content: (\n    options: BrowserRunContentOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n  readonly markdown: (\n    options: BrowserRunMarkdownOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n  readonly links: (\n    options: BrowserRunLinksOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n  readonly scrape: (\n    options: BrowserRunScrapeOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n  readonly json: (\n    options: BrowserRunJsonOptions,\n  ) => Effect.Effect<Response, BrowserQuickActionRpcError>;\n}\n\n/** A native binding RPC rejected before it returned an HTTP response. */\nexport class BrowserQuickActionRpcError extends Schema.TaggedError<BrowserQuickActionRpcError>()(\n  \"BrowserQuickActionRpcError\",\n  {\n    action: Schema.Literals([\"screenshot\", \"content\", \"markdown\", \"links\", \"scrape\", \"json\"]),\n    cause: Schema.Defect(),\n  },\n) {}\n\nexport interface BrowserQuickActionCaptureOptions {\n  /** The resolved Wrangler `browser` binding (DEPLOY-014: supplied, never ambient). */\n  readonly browser: BrowserRun;\n}\n\n/** Host-owned browser binding authority, supplied explicitly at the composition root. */\nexport class BrowserQuickActionBrowserBinding extends Context.Service<\n  BrowserQuickActionBrowserBinding,\n  BrowserQuickActionClient\n>()(\"@effect-agent/platform-cloudflare/BrowserQuickActionBrowserBinding\") {\n  static layer(\n    options: BrowserQuickActionCaptureOptions,\n  ): Layer.Layer<BrowserQuickActionBrowserBinding> {\n    const browser = options.browser;\n\n    const invoke = (\n      action: \"screenshot\" | \"content\" | \"markdown\" | \"links\" | \"scrape\" | \"json\",\n      evaluate: () => Promise<Response>,\n    ): Effect.Effect<Response, BrowserQuickActionRpcError> =>\n      Effect.tryPromise({\n        try: evaluate,\n        catch: (cause) => BrowserQuickActionRpcError.make({ action, cause }),\n      });\n\n    return Layer.succeed(BrowserQuickActionBrowserBinding)({\n      screenshot: (request) =>\n        invoke(\"screenshot\", () => browser.quickAction(\"screenshot\", request)),\n      content: (request) => invoke(\"content\", () => browser.quickAction(\"content\", request)),\n      markdown: (request) => invoke(\"markdown\", () => browser.quickAction(\"markdown\", request)),\n      links: (request) => invoke(\"links\", () => browser.quickAction(\"links\", request)),\n      scrape: (request) => invoke(\"scrape\", () => browser.quickAction(\"scrape\", request)),\n      json: (request) => invoke(\"json\", () => browser.quickAction(\"json\", request)),\n    });\n  }\n}\n\n/** Host-owned authorization and accounting for one Workers AI extraction. */\nexport interface BrowserQuickActionWorkersAiPolicy {\n  readonly authorizeAndAccount: (\n    request: PageCaptureRequest,\n  ) => Effect.Effect<void, BrowserQuickActionWorkersAiPolicyError>;\n}\n\n/** Host-only diagnostic for a denied or unaccounted Workers AI extraction. */\nexport class BrowserQuickActionWorkersAiPolicyError extends Schema.TaggedError<BrowserQuickActionWorkersAiPolicyError>()(\n  \"BrowserQuickActionWorkersAiPolicyError\",\n  {\n    reason: Schema.Literals([\"authorization\", \"accounting\"]),\n    message: Schema.String.check(Schema.isMaxLength(8_000)),\n    cause: Schema.optionalKey(Schema.Defect()),\n  },\n) {}\n\n/** Explicit host-owned authority and accounting for separately billed Workers AI extraction. */\nexport class BrowserQuickActionWorkersAi extends Context.Service<\n  BrowserQuickActionWorkersAi,\n  BrowserQuickActionWorkersAiPolicy\n>()(\"@effect-agent/platform-cloudflare/BrowserQuickActionWorkersAi\") {\n  static layer(\n    policy: BrowserQuickActionWorkersAiPolicy,\n  ): Layer.Layer<BrowserQuickActionWorkersAi> {\n    return Layer.succeed(BrowserQuickActionWorkersAi)(policy);\n  }\n}\n\nconst MAX_DIAGNOSTIC_LENGTH = 8_000;\nconst boundedDiagnostic = (message: string): string => message.slice(0, MAX_DIAGNOSTIC_LENGTH);\n\nconst QuickActionSuccessEnvelope = Schema.Struct({\n  success: Schema.Literal(true),\n  result: Schema.Json,\n});\n\nconst QuickActionErrorEnvelope = Schema.Struct({\n  success: Schema.Literal(false),\n  errors: Schema.Array(\n    Schema.Struct({\n      message: Schema.String,\n      code: Schema.optionalKey(Schema.Number),\n      detail: Schema.optionalKey(Schema.String),\n      path: Schema.optionalKey(Schema.String),\n    }),\n  ),\n  rawAiResponse: Schema.optionalKey(Schema.String),\n});\n\nconst QuickActionEnvelope = Schema.Union([QuickActionSuccessEnvelope, QuickActionErrorEnvelope]);\nconst decodeEnvelope = Schema.decodeUnknownOption(Schema.fromJsonString(QuickActionEnvelope));\n\n/** Recognize only the provider's exact timeout grammar; never forward arbitrary error text. */\nconst navigationFailureMessage = (bodyText: string, response: Response): string => {\n  const fallback = `The Browser Run Quick Action API answered HTTP ${response.status}; the destination status is unknown`;\n\n  if (!isJsonResponse(response)) return fallback;\n  const envelope = decodeEnvelope(bodyText);\n\n  if (Option.isNone(envelope) || envelope.value.success) return fallback;\n  for (const error of envelope.value.errors) {\n    if (error.code !== 6002) continue;\n\n    const timeout = /^Navigation timeout of ([1-9][0-9]{0,5}) ms exceeded$/.exec(\n      error.detail ?? \"\",\n    );\n\n    if (timeout !== null)\n      return `Browser Run navigation timed out after ${timeout[1]} ms (Quick Action API HTTP ${response.status}); the destination status is unknown`;\n  }\n\n  return fallback;\n};\n\n/** Project the schema-validated request onto Cloudflare's native common options. */\nconst quickActionCommonOptions = (request: PageCaptureRequest): BrowserRunCommonOptions => {\n  const options: BrowserRunBaseOptions = {};\n  const navigation = request.navigation;\n\n  if (navigation !== undefined) {\n    const goto: NonNullable<BrowserRunBaseOptions[\"gotoOptions\"]> = {};\n\n    if (navigation.waitUntil !== undefined) goto.waitUntil = navigation.waitUntil;\n    if (navigation.timeoutMillis !== undefined) goto.timeout = navigation.timeoutMillis;\n    if (Object.keys(goto).length > 0) options.gotoOptions = goto;\n    if (navigation.waitForSelector !== undefined) {\n      options.waitForSelector = {\n        selector: navigation.waitForSelector.selector,\n        ...(navigation.waitForSelector.timeoutMillis === undefined\n          ? {}\n          : { timeout: navigation.waitForSelector.timeoutMillis }),\n      };\n    }\n  }\n  if (request.viewport !== undefined) {\n    options.viewport = { width: request.viewport.width, height: request.viewport.height };\n  }\n  if (request.resourcePolicy !== undefined) {\n    if (request.resourcePolicy.rejectResourceTypes !== undefined) {\n      options.rejectResourceTypes = [...request.resourcePolicy.rejectResourceTypes];\n    }\n    if (request.resourcePolicy.allowRequestPatterns !== undefined) {\n      options.allowRequestPattern = [...request.resourcePolicy.allowRequestPatterns];\n    }\n  }\n\n  return request.target._tag === \"PageUrlTarget\"\n    ? { ...options, url: request.target.url }\n    : { ...options, html: request.target.html };\n};\n\n/** Dispatch through Cloudflare's native action-specific overloads. */\nconst executeQuickAction = (\n  browser: BrowserQuickActionClient,\n  request: PageCaptureRequest,\n): Effect.Effect<Response, BrowserQuickActionRpcError> => {\n  const options = quickActionCommonOptions(request);\n\n  switch (request.action._tag) {\n    case \"CapturePageContent\": {\n      return browser.content(options);\n    }\n    case \"CapturePageMarkdown\": {\n      return browser.markdown(options);\n    }\n    case \"CapturePageLinks\": {\n      return browser.links({\n        ...options,\n        ...(request.action.visibleLinksOnly === undefined\n          ? {}\n          : { visibleLinksOnly: request.action.visibleLinksOnly }),\n      });\n    }\n    case \"CapturePageScrape\": {\n      return browser.scrape({\n        ...options,\n        elements: request.action.selectors.map((selector) => ({ selector })),\n      });\n    }\n    case \"CapturePageStructured\": {\n      return browser.json({\n        ...options,\n        response_format: {\n          type: \"json_schema\",\n          json_schema: request.action.responseFormat,\n        },\n        ...(request.action.prompt === undefined ? {} : { prompt: request.action.prompt }),\n      });\n    }\n  }\n};\n\nconst protocolError = (message: string, cause?: unknown): PageCaptureProtocolError =>\n  PageCaptureProtocolError.make({\n    implementation: browserQuickActionImplementation,\n    message: boundedDiagnostic(message),\n    ...(cause === undefined ? {} : { cause }),\n  });\n\nconst navigationError = (message: string, cause?: unknown): PageCaptureNavigationError =>\n  PageCaptureNavigationError.make({\n    implementation: browserQuickActionImplementation,\n    message: boundedDiagnostic(message),\n    ...(cause === undefined ? {} : { cause }),\n  });\n\n/** Preserve bounded remote diagnostics for the host without exposing their text to a model. */\nconst privateResponseCause = (bodyText: string, response: Response): Error =>\n  new Error(boundedDiagnostic(bodyText), {\n    cause: {\n      provider: \"cloudflare-browser-run\",\n      httpStatus: response.status,\n      httpStatusSource: \"browser-api\",\n      headers: Object.fromEntries(\n        [\"content-type\", \"cf-ray\", \"x-request-id\", \"retry-after\", \"x-browser-ms-used\"].flatMap(\n          (name) => {\n            const value = response.headers.get(name);\n\n            return value === null ? [] : [[name, boundedDiagnostic(value)]];\n          },\n        ),\n      ),\n      bodyCharacters: bodyText.length,\n      bodyTruncated: bodyText.length > MAX_DIAGNOSTIC_LENGTH,\n    },\n  });\n\n/** Foreign cancellation must not keep a response Scope open indefinitely. */\nconst cancelResponse = (cancel: () => Promise<void>, warning: string): Effect.Effect<void> =>\n  Effect.tryPromise({ try: cancel, catch: () => undefined }).pipe(\n    Effect.interruptible,\n    Effect.timeoutOrElse({\n      duration: \"1 second\",\n      orElse: () => Effect.fail(undefined),\n    }),\n    Effect.catch(() => Effect.logWarning(warning)),\n  );\n\nconst releaseResponseReader = (\n  reader: ReadableStreamDefaultReader<Uint8Array>,\n): Effect.Effect<void> =>\n  cancelResponse(() => reader.cancel(), \"Canceling the Quick Action response failed\").pipe(\n    Effect.ensuring(\n      Effect.try({\n        try: () => reader.releaseLock(),\n        catch: (cause) => protocolError(\"Releasing the Quick Action response failed\", cause),\n      }).pipe(Effect.catch((error) => Effect.logWarning(error.message))),\n    ),\n  );\n\nconst readBoundedResponse = Effect.fnUntraced(function* (\n  response: Response,\n  request: PageCaptureRequest,\n) {\n  const body = response.body;\n\n  if (body === null) return \"\";\n\n  const reader = yield* Effect.acquireRelease(\n    Effect.try({\n      try: () => body.getReader(),\n      catch: (cause) => protocolError(\"Opening the Quick Action response failed\", cause),\n    }),\n    releaseResponseReader,\n  );\n\n  const decoder = new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: false });\n  let observedBytes = 0;\n  let bodyText = \"\";\n\n  while (true) {\n    const chunk = yield* Effect.tryPromise({\n      try: () => reader.read(),\n      catch: (cause) => protocolError(\"Reading the Quick Action response failed\", cause),\n    });\n\n    if (chunk.done) break;\n\n    observedBytes += chunk.value.byteLength;\n    if (observedBytes > request.limits.maxOutputBytes) {\n      return yield* PageCaptureOutputLimitError.make({\n        implementation: browserQuickActionImplementation,\n        limit: request.limits.maxOutputBytes,\n        observed: observedBytes,\n      });\n    }\n\n    bodyText += yield* Effect.try({\n      try: () => decoder.decode(chunk.value, { stream: true }),\n      catch: (cause) => protocolError(\"Decoding the Quick Action response failed\", cause),\n    });\n  }\n\n  return (\n    bodyText +\n    (yield* Effect.try({\n      try: () => decoder.decode(),\n      catch: (cause) => protocolError(\"Decoding the Quick Action response failed\", cause),\n    }))\n  );\n}, Effect.scoped);\n\n/**\n * Retry-After arrives in whole seconds; a non-integer form (an HTTP date) is\n * dropped rather than guessed at.\n */\nconst retryAfterMillis = (response: Response): number | undefined => {\n  const header = response.headers.get(\"Retry-After\");\n\n  if (header === null) return undefined;\n  const seconds = Number(header);\n\n  if (!Number.isSafeInteger(seconds) || seconds < 0) return undefined;\n  const millis = seconds * 1_000;\n\n  return Number.isSafeInteger(millis) ? millis : undefined;\n};\n\nconst browserMillis = (response: Response): number | undefined => {\n  const header = response.headers.get(\"X-Browser-Ms-Used\");\n\n  if (header === null) return undefined;\n  const millis = Number(header);\n\n  return Number.isSafeInteger(millis) && millis >= 0 ? millis : undefined;\n};\n\n/** Only trusted response metadata chooses transport framing; page text never does. */\nconst isJsonResponse = (response: Response): boolean => {\n  const contentType = response.headers.get(\"Content-Type\");\n\n  if (contentType === null) return false;\n  const mediaType = contentType.split(\";\", 1)[0]?.trim().toLowerCase();\n\n  return mediaType === \"application/json\" || mediaType?.endsWith(\"+json\") === true;\n};\n\nconst parseOutput = (\n  action: PageCaptureAction,\n  bodyText: string,\n  response: Response,\n): PageCaptureOutput | PageCaptureNavigationError | PageCaptureProtocolError => {\n  if (!isJsonResponse(response)) {\n    return protocolError(\n      \"The Quick Action success response was not a JSON response envelope\",\n      privateResponseCause(bodyText, response),\n    );\n  }\n  const envelope = decodeEnvelope(bodyText);\n\n  if (Option.isNone(envelope)) {\n    return protocolError(\n      \"The JSON Quick Action response did not carry a valid response envelope\",\n      privateResponseCause(bodyText, response),\n    );\n  }\n  if (!envelope.value.success) {\n    return navigationError(\n      navigationFailureMessage(bodyText, response),\n      privateResponseCause(bodyText, response),\n    );\n  }\n  switch (action._tag) {\n    case \"CapturePageContent\":\n    case \"CapturePageMarkdown\": {\n      if (typeof envelope.value.result !== \"string\") {\n        return protocolError(\"The Quick Action envelope carried a non-text result\");\n      }\n\n      return action._tag === \"CapturePageContent\"\n        ? PageContentCaptured.make({ html: envelope.value.result })\n        : PageMarkdownCaptured.make({ markdown: envelope.value.result });\n    }\n    case \"CapturePageLinks\": {\n      const decoded = Schema.decodeUnknownOption(PageLinksCaptured)({\n        _tag: \"PageLinksCaptured\",\n        links: envelope.value.result,\n      });\n\n      if (Option.isNone(decoded)) {\n        return protocolError(\"The links Quick Action did not return a bounded array of valid URLs\");\n      }\n\n      return decoded.value;\n    }\n    case \"CapturePageScrape\": {\n      const decoded = Schema.decodeUnknownOption(PageScrapeCaptured)({\n        _tag: \"PageScrapeCaptured\",\n        groups: envelope.value.result,\n      });\n\n      if (Option.isNone(decoded)) {\n        return protocolError(\n          \"The scrape Quick Action did not return bounded grouped element records\",\n        );\n      }\n\n      return decoded.value;\n    }\n    case \"CapturePageStructured\": {\n      return PageStructuredCaptured.make({ value: envelope.value.result });\n    }\n  }\n};\n\nconst isQuotaMessage = (text: string): boolean => /time limit|daily|quota/i.test(text);\n\nconst makeCapture = (\n  browser: BrowserQuickActionClient,\n  workersAi?: BrowserQuickActionWorkersAiPolicy,\n): PageCaptureCapture =>\n  Effect.fnUntraced(function* (\n    request: PageCaptureRequest,\n  ): Effect.fn.Return<PageCaptureResult, PageCaptureError> {\n    if (request.engine !== \"chromium\") {\n      return yield* PageCaptureUnsupportedError.make({\n        implementation: browserQuickActionImplementation,\n        feature: \"engine\",\n        message:\n          \"The browser binding's quickAction() exposes no engine selector; kitesurf requires the REST or CDP surface\",\n      });\n    }\n\n    const usesWorkersAi = request.action._tag === \"CapturePageStructured\";\n\n    if (usesWorkersAi) {\n      if (workersAi === undefined) {\n        return yield* PageCaptureUnsupportedError.make({\n          implementation: browserQuickActionImplementation,\n          feature: \"action\",\n          message:\n            \"Structured capture invokes separately billed Workers AI and requires an explicit authorization and accounting policy\",\n        });\n      }\n      yield* workersAi.authorizeAndAccount(request).pipe(\n        Effect.mapError((cause) =>\n          PageCaptureInferencePolicyError.make({\n            implementation: browserQuickActionImplementation,\n            provider: \"cloudflare-workers-ai\",\n            reason: cause.reason,\n            message:\n              cause.reason === \"authorization\"\n                ? \"Workers AI extraction was not authorized\"\n                : \"Workers AI extraction could not be accounted for\",\n            cause,\n          }),\n        ),\n      );\n    }\n\n    const response = yield* executeQuickAction(browser, request).pipe(\n      Effect.mapError((error) =>\n        protocolError(\"The browser binding rejected the Quick Action\", error.cause),\n      ),\n    );\n\n    const bodyText = yield* readBoundedResponse(response, request);\n\n    if (response.status === 429) {\n      const retryAfter = retryAfterMillis(response);\n      const reason = isQuotaMessage(bodyText) ? \"quota\" : \"rate\";\n      const cause = privateResponseCause(bodyText, response);\n\n      return yield* PageCaptureRateLimitedError.make({\n        implementation: browserQuickActionImplementation,\n        reason,\n        ...(retryAfter === undefined ? {} : { retryAfterMillis: retryAfter }),\n        ...(cause === undefined ? {} : { cause }),\n        message:\n          reason === \"quota\"\n            ? \"The Quick Action exceeded its browser quota\"\n            : \"The Quick Action was rate limited\",\n      });\n    }\n    if (!response.ok) {\n      const message = navigationFailureMessage(bodyText, response);\n      const cause = privateResponseCause(bodyText, response);\n\n      if (response.status >= 500) {\n        return yield* protocolError(message, cause);\n      }\n\n      return yield* navigationError(message, cause);\n    }\n    const output = parseOutput(request.action, bodyText, response);\n\n    if (\n      output._tag === \"PageCaptureNavigationError\" ||\n      output._tag === \"PageCaptureProtocolError\"\n    ) {\n      return yield* output;\n    }\n    const millis = browserMillis(response);\n\n    return PageCaptureResult.make({\n      implementation: browserQuickActionImplementation,\n      output,\n      resourceUse: PageCaptureResourceUse.make({\n        ...(millis === undefined ? {} : { browserMillis: millis }),\n        ...(usesWorkersAi\n          ? {\n              inference: PageCaptureInferenceUse.make({\n                provider: \"cloudflare-workers-ai\",\n                modelCalls: 1,\n              }),\n            }\n          : {}),\n      }),\n    });\n  });\n\n/**\n * Ordinary Quick Actions require host-owned browser binding authority. Workers\n * AI stays unavailable unless the host deliberately selects its separate Layer.\n */\nexport const browserQuickActionCaptureLayer = (): Layer.Layer<\n  PageCapture,\n  never,\n  BrowserQuickActionBrowserBinding\n> =>\n  Layer.effect(\n    PageCapture,\n    Effect.map(BrowserQuickActionBrowserBinding, (browser) =>\n      PageCapture.of({ capture: makeCapture(browser) }),\n    ),\n  );\n\n/** Structured Quick Actions require host-owned browser and Workers AI authority. */\nexport const browserQuickActionWorkersAiCaptureLayer = (): Layer.Layer<\n  PageCapture,\n  never,\n  BrowserQuickActionBrowserBinding | BrowserQuickActionWorkersAi\n> =>\n  Layer.effect(\n    PageCapture,\n    Effect.gen(function* () {\n      const browser = yield* BrowserQuickActionBrowserBinding;\n      const workersAi = yield* BrowserQuickActionWorkersAi;\n\n      return PageCapture.of({ capture: makeCapture(browser, workersAi) });\n    }),\n  );\n\n/** Host-owned Quick Action binding and optional, separately billed extraction authority. */\nexport interface CloudflareBrowserOptions extends BrowserQuickActionCaptureOptions {\n  readonly workersAi?: BrowserQuickActionWorkersAiPolicy;\n}\n\n/** Compose WebCapture handlers with the Cloudflare Quick Action adapter. */\nexport const CloudflareBrowser = {\n  /**\n   * Supply a WebCapture definition and the resolved Worker browser binding.\n   * Supports capture, scrape, and extraction definitions without importing capabilities.\n   * Only PageCapture is provided; other handler requirements and errors stay visible.\n   * Extraction fails closed unless workersAi explicitly authorizes and accounts for it.\n   * Capture limits, typed failures, tracing, and scoped response cleanup are unchanged.\n   */\n  layer: <A, E, R>(\n    definition: { readonly handlers: Layer.Layer<A, E, R> },\n    options: CloudflareBrowserOptions,\n  ): Layer.Layer<A, E, Exclude<R, PageCapture>> => {\n    const capture =\n      options.workersAi === undefined\n        ? browserQuickActionCaptureLayer()\n        : browserQuickActionWorkersAiCaptureLayer().pipe(\n            Layer.provide(BrowserQuickActionWorkersAi.layer(options.workersAi)),\n          );\n\n    return definition.handlers.pipe(\n      Layer.provide(capture.pipe(Layer.provide(BrowserQuickActionBrowserBinding.layer(options)))),\n    );\n  },\n};\n\nconst screenshotOptions = (request: PageScreenshotRequest): BrowserRunScreenshotOptions => {\n  const options: BrowserRunBaseOptions = {};\n\n  if (\n    request.navigation?.waitUntil !== undefined ||\n    request.navigation?.timeoutMillis !== undefined\n  ) {\n    options.gotoOptions = {\n      ...(request.navigation.waitUntil === undefined\n        ? {}\n        : { waitUntil: request.navigation.waitUntil }),\n      ...(request.navigation.timeoutMillis === undefined\n        ? {}\n        : { timeout: request.navigation.timeoutMillis }),\n    };\n  }\n  if (request.navigation?.waitForSelector !== undefined) {\n    options.waitForSelector = {\n      selector: request.navigation.waitForSelector.selector,\n      ...(request.navigation.waitForSelector.timeoutMillis === undefined\n        ? {}\n        : { timeout: request.navigation.waitForSelector.timeoutMillis }),\n    };\n  }\n  if (request.viewport !== undefined) {\n    options.viewport = { width: request.viewport.width, height: request.viewport.height };\n  }\n  if (request.resourcePolicy?.rejectResourceTypes !== undefined) {\n    options.rejectResourceTypes = [...request.resourcePolicy.rejectResourceTypes];\n  }\n  if (request.resourcePolicy?.allowRequestPatterns !== undefined) {\n    options.allowRequestPattern = [...request.resourcePolicy.allowRequestPatterns];\n  }\n\n  return {\n    ...options,\n    ...(request.target._tag === \"PageUrlTarget\"\n      ? { url: request.target.url }\n      : { html: request.target.html }),\n    screenshotOptions: { type: \"png\", encoding: \"binary\", fullPage: request.fullPage },\n  };\n};\n\nconst cancelBody = (body: ReadableStream<Uint8Array>): Effect.Effect<void> =>\n  cancelResponse(() => body.cancel(), \"Canceling the screenshot response failed\");\n\nconst releaseScreenshotReader = (\n  reader: ReadableStreamDefaultReader<Uint8Array>,\n): Effect.Effect<void> =>\n  cancelResponse(() => reader.cancel(), \"Canceling the screenshot response failed\").pipe(\n    Effect.ensuring(\n      Effect.try({\n        try: () => reader.releaseLock(),\n        catch: () => undefined,\n      }).pipe(Effect.catch(() => Effect.logWarning(\"Releasing the screenshot response failed\"))),\n    ),\n  );\n\nconst pngResponse = (response: Response): boolean =>\n  response.headers.get(\"Content-Type\")?.split(\";\", 1)[0]?.trim().toLowerCase() === \"image/png\";\n\nconst declaredLength = (response: Response): number | undefined => {\n  const raw = response.headers.get(\"Content-Length\");\n\n  if (raw === null || !/^(0|[1-9][0-9]*)$/.test(raw)) return undefined;\n  const length = Number(raw);\n\n  return Number.isSafeInteger(length) ? length : undefined;\n};\n\nconst readScreenshot = Effect.fnUntraced(function* (\n  response: Response,\n  request: PageScreenshotRequest,\n) {\n  const body = response.body;\n\n  if (body === null) {\n    return yield* protocolError(\"The screenshot response had no body\");\n  }\n  if (!pngResponse(response)) {\n    yield* cancelBody(body);\n\n    return yield* protocolError(\"The screenshot response was not image/png\");\n  }\n  const length = declaredLength(response);\n\n  if (length !== undefined && length > request.limits.maxOutputBytes) {\n    yield* cancelBody(body);\n\n    return yield* PageScreenshotOutputLimitError.make({\n      implementation: browserQuickActionImplementation,\n      limit: request.limits.maxOutputBytes,\n      observed: length,\n    });\n  }\n\n  const reader = yield* Effect.acquireRelease(\n    Effect.try({\n      try: () => body.getReader(),\n      catch: (cause) => protocolError(\"Opening the screenshot response failed\", cause),\n    }),\n    releaseScreenshotReader,\n  );\n\n  const chunks: Array<Uint8Array> = [];\n  let observed = 0;\n\n  while (true) {\n    const next = yield* Effect.tryPromise({\n      try: () => reader.read(),\n      catch: (cause) => protocolError(\"Reading the screenshot response failed\", cause),\n    });\n\n    if (next.done) break;\n    observed += next.value.byteLength;\n    if (observed > request.limits.maxOutputBytes) {\n      return yield* PageScreenshotOutputLimitError.make({\n        implementation: browserQuickActionImplementation,\n        limit: request.limits.maxOutputBytes,\n        observed,\n      });\n    }\n    chunks.push(next.value);\n  }\n  const bytes = new Uint8Array(observed);\n  let offset = 0;\n\n  for (const chunk of chunks) {\n    bytes.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n\n  return bytes;\n}, Effect.scoped);\n\nconst makeScreenshot = (browser: BrowserQuickActionClient): PageScreenshotCapture =>\n  Effect.fnUntraced(function* (\n    request: PageScreenshotRequest,\n  ): Effect.fn.Return<PageScreenshotResult, PageScreenshotError> {\n    if (request.engine !== \"chromium\") {\n      return yield* PageCaptureUnsupportedError.make({\n        implementation: browserQuickActionImplementation,\n        feature: \"engine\",\n        message: \"The browser binding's screenshot action exposes no engine selector\",\n      });\n    }\n\n    const response = yield* browser\n      .screenshot(screenshotOptions(request))\n      .pipe(\n        Effect.mapError((error) =>\n          protocolError(\"The browser binding rejected the screenshot\", error.cause),\n        ),\n      );\n\n    if (response.status === 429) {\n      const body = response.body;\n\n      if (body !== null) yield* cancelBody(body);\n\n      return yield* PageCaptureRateLimitedError.make({\n        implementation: browserQuickActionImplementation,\n        reason: \"rate\",\n        ...(retryAfterMillis(response) === undefined\n          ? {}\n          : { retryAfterMillis: retryAfterMillis(response) }),\n        message: \"The screenshot Quick Action was rate limited\",\n      });\n    }\n    if (!response.ok) {\n      const body = response.body;\n\n      if (body !== null) yield* cancelBody(body);\n      const message = `The screenshot Quick Action answered HTTP ${response.status}`;\n\n      return yield* response.status >= 500 ? protocolError(message) : navigationError(message);\n    }\n    const bytes = yield* readScreenshot(response, request);\n\n    return PageScreenshotResult.make({\n      implementation: browserQuickActionImplementation,\n      mediaType: \"image/png\",\n      bytes,\n    });\n  });\n\n/** Native Browser Run screenshot adapter. It retains PNG bytes only for the caller's result. */\nexport const browserQuickActionScreenshotLayer = (): Layer.Layer<\n  PageScreenshot,\n  never,\n  BrowserQuickActionBrowserBinding\n> =>\n  Layer.effect(\n    PageScreenshot,\n    Effect.map(BrowserQuickActionBrowserBinding, (browser) =>\n      PageScreenshot.of({ capture: makeScreenshot(browser) }),\n    ),\n  );\n","/** Public CloudflareBrowser API. Implementation helpers remain private. */\nexport {\n  BrowserQuickActionBrowserBinding,\n  BrowserQuickActionRpcError,\n  BrowserQuickActionWorkersAi,\n  BrowserQuickActionWorkersAiPolicyError,\n  browserQuickActionCaptureLayer,\n  browserQuickActionWorkersAiCaptureLayer,\n  browserQuickActionScreenshotLayer,\n  CloudflareBrowser,\n  type BrowserQuickActionCaptureOptions,\n  type BrowserQuickActionClient,\n  type BrowserQuickActionWorkersAiPolicy,\n  type CloudflareBrowserOptions,\n} from \"./internal/browser-quick-action.ts\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAgDA,MAAa,mCAAmC,sBAAsB,KAAK;CACzE,WAAW;CACX,UAAU;AACZ,CAAC;;AA4BD,IAAa,6BAAb,cAAgD,OAAO,YAAwC,CAAC,CAC9F,8BACA;CACE,QAAQ,OAAO,SAAS;EAAC;EAAc;EAAW;EAAY;EAAS;EAAU;CAAM,CAAC;CACxF,OAAO,OAAO,OAAO;AACvB,CACF,CAAC,CAAC,CAAC;;AAQH,IAAa,mCAAb,MAAa,yCAAyC,QAAQ,QAG5D,CAAC,CAAC,oEAAoE,CAAC,CAAC;CACxE,OAAO,MACL,SAC+C;EAC/C,MAAM,UAAU,QAAQ;EAExB,MAAM,UACJ,QACA,aAEA,OAAO,WAAW;GAChB,KAAK;GACL,QAAQ,UAAU,2BAA2B,KAAK;IAAE;IAAQ;GAAM,CAAC;EACrE,CAAC;EAEH,OAAO,MAAM,QAAQ,gCAAgC,CAAC,CAAC;GACrD,aAAa,YACX,OAAO,oBAAoB,QAAQ,YAAY,cAAc,OAAO,CAAC;GACvE,UAAU,YAAY,OAAO,iBAAiB,QAAQ,YAAY,WAAW,OAAO,CAAC;GACrF,WAAW,YAAY,OAAO,kBAAkB,QAAQ,YAAY,YAAY,OAAO,CAAC;GACxF,QAAQ,YAAY,OAAO,eAAe,QAAQ,YAAY,SAAS,OAAO,CAAC;GAC/E,SAAS,YAAY,OAAO,gBAAgB,QAAQ,YAAY,UAAU,OAAO,CAAC;GAClF,OAAO,YAAY,OAAO,cAAc,QAAQ,YAAY,QAAQ,OAAO,CAAC;EAC9E,CAAC;CACH;AACF;;AAUA,IAAa,yCAAb,cAA4D,OAAO,YAAoD,CAAC,CACtH,0CACA;CACE,QAAQ,OAAO,SAAS,CAAC,iBAAiB,YAAY,CAAC;CACvD,SAAS,OAAO,OAAO,MAAM,OAAO,YAAY,GAAK,CAAC;CACtD,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;AAC3C,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,8BAAb,MAAa,oCAAoC,QAAQ,QAGvD,CAAC,CAAC,+DAA+D,CAAC,CAAC;CACnE,OAAO,MACL,QAC0C;EAC1C,OAAO,MAAM,QAAQ,2BAA2B,CAAC,CAAC,MAAM;CAC1D;AACF;AAEA,MAAM,wBAAwB;AAC9B,MAAM,qBAAqB,YAA4B,QAAQ,MAAM,GAAG,qBAAqB;AAE7F,MAAM,6BAA6B,OAAO,OAAO;CAC/C,SAAS,OAAO,QAAQ,IAAI;CAC5B,QAAQ,OAAO;AACjB,CAAC;AAED,MAAM,2BAA2B,OAAO,OAAO;CAC7C,SAAS,OAAO,QAAQ,KAAK;CAC7B,QAAQ,OAAO,MACb,OAAO,OAAO;EACZ,SAAS,OAAO;EAChB,MAAM,OAAO,YAAY,OAAO,MAAM;EACtC,QAAQ,OAAO,YAAY,OAAO,MAAM;EACxC,MAAM,OAAO,YAAY,OAAO,MAAM;CACxC,CAAC,CACH;CACA,eAAe,OAAO,YAAY,OAAO,MAAM;AACjD,CAAC;AAED,MAAM,sBAAsB,OAAO,MAAM,CAAC,4BAA4B,wBAAwB,CAAC;AAC/F,MAAM,iBAAiB,OAAO,oBAAoB,OAAO,eAAe,mBAAmB,CAAC;;AAG5F,MAAM,4BAA4B,UAAkB,aAA+B;CACjF,MAAM,WAAW,kDAAkD,SAAS,OAAO;CAEnF,IAAI,CAAC,eAAe,QAAQ,GAAG,OAAO;CACtC,MAAM,WAAW,eAAe,QAAQ;CAExC,IAAI,OAAO,OAAO,QAAQ,KAAK,SAAS,MAAM,SAAS,OAAO;CAC9D,KAAK,MAAM,SAAS,SAAS,MAAM,QAAQ;EACzC,IAAI,MAAM,SAAS,MAAM;EAEzB,MAAM,UAAU,wDAAwD,KACtE,MAAM,UAAU,EAClB;EAEA,IAAI,YAAY,MACd,OAAO,0CAA0C,QAAQ,GAAG,6BAA6B,SAAS,OAAO;CAC7G;CAEA,OAAO;AACT;;AAGA,MAAM,4BAA4B,YAAyD;CACzF,MAAM,UAAiC,CAAC;CACxC,MAAM,aAAa,QAAQ;CAE3B,IAAI,eAAe,KAAA,GAAW;EAC5B,MAAM,OAA0D,CAAC;EAEjE,IAAI,WAAW,cAAc,KAAA,GAAW,KAAK,YAAY,WAAW;EACpE,IAAI,WAAW,kBAAkB,KAAA,GAAW,KAAK,UAAU,WAAW;EACtE,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,SAAS,GAAG,QAAQ,cAAc;EACxD,IAAI,WAAW,oBAAoB,KAAA,GACjC,QAAQ,kBAAkB;GACxB,UAAU,WAAW,gBAAgB;GACrC,GAAI,WAAW,gBAAgB,kBAAkB,KAAA,IAC7C,CAAC,IACD,EAAE,SAAS,WAAW,gBAAgB,cAAc;EAC1D;CAEJ;CACA,IAAI,QAAQ,aAAa,KAAA,GACvB,QAAQ,WAAW;EAAE,OAAO,QAAQ,SAAS;EAAO,QAAQ,QAAQ,SAAS;CAAO;CAEtF,IAAI,QAAQ,mBAAmB,KAAA,GAAW;EACxC,IAAI,QAAQ,eAAe,wBAAwB,KAAA,GACjD,QAAQ,sBAAsB,CAAC,GAAG,QAAQ,eAAe,mBAAmB;EAE9E,IAAI,QAAQ,eAAe,yBAAyB,KAAA,GAClD,QAAQ,sBAAsB,CAAC,GAAG,QAAQ,eAAe,oBAAoB;CAEjF;CAEA,OAAO,QAAQ,OAAO,SAAS,kBAC3B;EAAE,GAAG;EAAS,KAAK,QAAQ,OAAO;CAAI,IACtC;EAAE,GAAG;EAAS,MAAM,QAAQ,OAAO;CAAK;AAC9C;;AAGA,MAAM,sBACJ,SACA,YACwD;CACxD,MAAM,UAAU,yBAAyB,OAAO;CAEhD,QAAQ,QAAQ,OAAO,MAAvB;EACE,KAAK,sBACH,OAAO,QAAQ,QAAQ,OAAO;EAEhC,KAAK,uBACH,OAAO,QAAQ,SAAS,OAAO;EAEjC,KAAK,oBACH,OAAO,QAAQ,MAAM;GACnB,GAAG;GACH,GAAI,QAAQ,OAAO,qBAAqB,KAAA,IACpC,CAAC,IACD,EAAE,kBAAkB,QAAQ,OAAO,iBAAiB;EAC1D,CAAC;EAEH,KAAK,qBACH,OAAO,QAAQ,OAAO;GACpB,GAAG;GACH,UAAU,QAAQ,OAAO,UAAU,KAAK,cAAc,EAAE,SAAS,EAAE;EACrE,CAAC;EAEH,KAAK,yBACH,OAAO,QAAQ,KAAK;GAClB,GAAG;GACH,iBAAiB;IACf,MAAM;IACN,aAAa,QAAQ,OAAO;GAC9B;GACA,GAAI,QAAQ,OAAO,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO,OAAO;EACjF,CAAC;CAEL;AACF;AAEA,MAAM,iBAAiB,SAAiB,UACtC,yBAAyB,KAAK;CAC5B,gBAAgB;CAChB,SAAS,kBAAkB,OAAO;CAClC,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;AACzC,CAAC;AAEH,MAAM,mBAAmB,SAAiB,UACxC,2BAA2B,KAAK;CAC9B,gBAAgB;CAChB,SAAS,kBAAkB,OAAO;CAClC,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;AACzC,CAAC;;AAGH,MAAM,wBAAwB,UAAkB,aAC9C,IAAI,MAAM,kBAAkB,QAAQ,GAAG,EACrC,OAAO;CACL,UAAU;CACV,YAAY,SAAS;CACrB,kBAAkB;CAClB,SAAS,OAAO,YACd;EAAC;EAAgB;EAAU;EAAgB;EAAe;CAAmB,CAAC,CAAC,SAC5E,SAAS;EACR,MAAM,QAAQ,SAAS,QAAQ,IAAI,IAAI;EAEvC,OAAO,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,kBAAkB,KAAK,CAAC,CAAC;CAChE,CACF,CACF;CACA,gBAAgB,SAAS;CACzB,eAAe,SAAS,SAAS;AACnC,EACF,CAAC;;AAGH,MAAM,kBAAkB,QAA6B,YACnD,OAAO,WAAW;CAAE,KAAK;CAAQ,aAAa,KAAA;AAAU,CAAC,CAAC,CAAC,KACzD,OAAO,eACP,OAAO,cAAc;CACnB,UAAU;CACV,cAAc,OAAO,KAAK,KAAA,CAAS;AACrC,CAAC,GACD,OAAO,YAAY,OAAO,WAAW,OAAO,CAAC,CAC/C;AAEF,MAAM,yBACJ,WAEA,qBAAqB,OAAO,OAAO,GAAG,4CAA4C,CAAC,CAAC,KAClF,OAAO,SACL,OAAO,IAAI;CACT,WAAW,OAAO,YAAY;CAC9B,QAAQ,UAAU,cAAc,8CAA8C,KAAK;AACrF,CAAC,CAAC,CAAC,KAAK,OAAO,OAAO,UAAU,OAAO,WAAW,MAAM,OAAO,CAAC,CAAC,CACnE,CACF;AAEF,MAAM,sBAAsB,OAAO,WAAW,WAC5C,UACA,SACA;CACA,MAAM,OAAO,SAAS;CAEtB,IAAI,SAAS,MAAM,OAAO;CAE1B,MAAM,SAAS,OAAO,OAAO,eAC3B,OAAO,IAAI;EACT,WAAW,KAAK,UAAU;EAC1B,QAAQ,UAAU,cAAc,4CAA4C,KAAK;CACnF,CAAC,GACD,qBACF;CAEA,MAAM,UAAU,IAAI,YAAY,SAAS;EAAE,OAAO;EAAM,WAAW;CAAM,CAAC;CAC1E,IAAI,gBAAgB;CACpB,IAAI,WAAW;CAEf,OAAO,MAAM;EACX,MAAM,QAAQ,OAAO,OAAO,WAAW;GACrC,WAAW,OAAO,KAAK;GACvB,QAAQ,UAAU,cAAc,4CAA4C,KAAK;EACnF,CAAC;EAED,IAAI,MAAM,MAAM;EAEhB,iBAAiB,MAAM,MAAM;EAC7B,IAAI,gBAAgB,QAAQ,OAAO,gBACjC,OAAO,OAAO,4BAA4B,KAAK;GAC7C,gBAAgB;GAChB,OAAO,QAAQ,OAAO;GACtB,UAAU;EACZ,CAAC;EAGH,YAAY,OAAO,OAAO,IAAI;GAC5B,WAAW,QAAQ,OAAO,MAAM,OAAO,EAAE,QAAQ,KAAK,CAAC;GACvD,QAAQ,UAAU,cAAc,6CAA6C,KAAK;EACpF,CAAC;CACH;CAEA,OACE,YACC,OAAO,OAAO,IAAI;EACjB,WAAW,QAAQ,OAAO;EAC1B,QAAQ,UAAU,cAAc,6CAA6C,KAAK;CACpF,CAAC;AAEL,GAAG,OAAO,MAAM;;;;;AAMhB,MAAM,oBAAoB,aAA2C;CACnE,MAAM,SAAS,SAAS,QAAQ,IAAI,aAAa;CAEjD,IAAI,WAAW,MAAM,OAAO,KAAA;CAC5B,MAAM,UAAU,OAAO,MAAM;CAE7B,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,GAAG,OAAO,KAAA;CAC1D,MAAM,SAAS,UAAU;CAEzB,OAAO,OAAO,cAAc,MAAM,IAAI,SAAS,KAAA;AACjD;AAEA,MAAM,iBAAiB,aAA2C;CAChE,MAAM,SAAS,SAAS,QAAQ,IAAI,mBAAmB;CAEvD,IAAI,WAAW,MAAM,OAAO,KAAA;CAC5B,MAAM,SAAS,OAAO,MAAM;CAE5B,OAAO,OAAO,cAAc,MAAM,KAAK,UAAU,IAAI,SAAS,KAAA;AAChE;;AAGA,MAAM,kBAAkB,aAAgC;CACtD,MAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;CAEvD,IAAI,gBAAgB,MAAM,OAAO;CACjC,MAAM,YAAY,YAAY,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,YAAY;CAEnE,OAAO,cAAc,sBAAsB,WAAW,SAAS,OAAO,MAAM;AAC9E;AAEA,MAAM,eACJ,QACA,UACA,aAC8E;CAC9E,IAAI,CAAC,eAAe,QAAQ,GAC1B,OAAO,cACL,sEACA,qBAAqB,UAAU,QAAQ,CACzC;CAEF,MAAM,WAAW,eAAe,QAAQ;CAExC,IAAI,OAAO,OAAO,QAAQ,GACxB,OAAO,cACL,0EACA,qBAAqB,UAAU,QAAQ,CACzC;CAEF,IAAI,CAAC,SAAS,MAAM,SAClB,OAAO,gBACL,yBAAyB,UAAU,QAAQ,GAC3C,qBAAqB,UAAU,QAAQ,CACzC;CAEF,QAAQ,OAAO,MAAf;EACE,KAAK;EACL,KAAK;GACH,IAAI,OAAO,SAAS,MAAM,WAAW,UACnC,OAAO,cAAc,qDAAqD;GAG5E,OAAO,OAAO,SAAS,uBACnB,oBAAoB,KAAK,EAAE,MAAM,SAAS,MAAM,OAAO,CAAC,IACxD,qBAAqB,KAAK,EAAE,UAAU,SAAS,MAAM,OAAO,CAAC;EAEnE,KAAK,oBAAoB;GACvB,MAAM,UAAU,OAAO,oBAAoB,iBAAiB,CAAC,CAAC;IAC5D,MAAM;IACN,OAAO,SAAS,MAAM;GACxB,CAAC;GAED,IAAI,OAAO,OAAO,OAAO,GACvB,OAAO,cAAc,qEAAqE;GAG5F,OAAO,QAAQ;EACjB;EACA,KAAK,qBAAqB;GACxB,MAAM,UAAU,OAAO,oBAAoB,kBAAkB,CAAC,CAAC;IAC7D,MAAM;IACN,QAAQ,SAAS,MAAM;GACzB,CAAC;GAED,IAAI,OAAO,OAAO,OAAO,GACvB,OAAO,cACL,wEACF;GAGF,OAAO,QAAQ;EACjB;EACA,KAAK,yBACH,OAAO,uBAAuB,KAAK,EAAE,OAAO,SAAS,MAAM,OAAO,CAAC;CAEvE;AACF;AAEA,MAAM,kBAAkB,SAA0B,0BAA0B,KAAK,IAAI;AAErF,MAAM,eACJ,SACA,cAEA,OAAO,WAAW,WAChB,SACuD;CACvD,IAAI,QAAQ,WAAW,YACrB,OAAO,OAAO,4BAA4B,KAAK;EAC7C,gBAAgB;EAChB,SAAS;EACT,SACE;CACJ,CAAC;CAGH,MAAM,gBAAgB,QAAQ,OAAO,SAAS;CAE9C,IAAI,eAAe;EACjB,IAAI,cAAc,KAAA,GAChB,OAAO,OAAO,4BAA4B,KAAK;GAC7C,gBAAgB;GAChB,SAAS;GACT,SACE;EACJ,CAAC;EAEH,OAAO,UAAU,oBAAoB,OAAO,CAAC,CAAC,KAC5C,OAAO,UAAU,UACf,gCAAgC,KAAK;GACnC,gBAAgB;GAChB,UAAU;GACV,QAAQ,MAAM;GACd,SACE,MAAM,WAAW,kBACb,6CACA;GACN;EACF,CAAC,CACH,CACF;CACF;CAEA,MAAM,WAAW,OAAO,mBAAmB,SAAS,OAAO,CAAC,CAAC,KAC3D,OAAO,UAAU,UACf,cAAc,iDAAiD,MAAM,KAAK,CAC5E,CACF;CAEA,MAAM,WAAW,OAAO,oBAAoB,UAAU,OAAO;CAE7D,IAAI,SAAS,WAAW,KAAK;EAC3B,MAAM,aAAa,iBAAiB,QAAQ;EAC5C,MAAM,SAAS,eAAe,QAAQ,IAAI,UAAU;EACpD,MAAM,QAAQ,qBAAqB,UAAU,QAAQ;EAErD,OAAO,OAAO,4BAA4B,KAAK;GAC7C,gBAAgB;GAChB;GACA,GAAI,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,kBAAkB,WAAW;GACnE,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;GACvC,SACE,WAAW,UACP,gDACA;EACR,CAAC;CACH;CACA,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,UAAU,yBAAyB,UAAU,QAAQ;EAC3D,MAAM,QAAQ,qBAAqB,UAAU,QAAQ;EAErD,IAAI,SAAS,UAAU,KACrB,OAAO,OAAO,cAAc,SAAS,KAAK;EAG5C,OAAO,OAAO,gBAAgB,SAAS,KAAK;CAC9C;CACA,MAAM,SAAS,YAAY,QAAQ,QAAQ,UAAU,QAAQ;CAE7D,IACE,OAAO,SAAS,gCAChB,OAAO,SAAS,4BAEhB,OAAO,OAAO;CAEhB,MAAM,SAAS,cAAc,QAAQ;CAErC,OAAO,kBAAkB,KAAK;EAC5B,gBAAgB;EAChB;EACA,aAAa,uBAAuB,KAAK;GACvC,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,eAAe,OAAO;GACxD,GAAI,gBACA,EACE,WAAW,wBAAwB,KAAK;IACtC,UAAU;IACV,YAAY;GACd,CAAC,EACH,IACA,CAAC;EACP,CAAC;CACH,CAAC;AACH,CAAC;;;;;AAMH,MAAa,uCAKX,MAAM,OACJ,aACA,OAAO,IAAI,mCAAmC,YAC5C,YAAY,GAAG,EAAE,SAAS,YAAY,OAAO,EAAE,CAAC,CAClD,CACF;;AAGF,MAAa,gDAKX,MAAM,OACJ,aACA,OAAO,IAAI,aAAa;CACtB,MAAM,UAAU,OAAO;CACvB,MAAM,YAAY,OAAO;CAEzB,OAAO,YAAY,GAAG,EAAE,SAAS,YAAY,SAAS,SAAS,EAAE,CAAC;AACpE,CAAC,CACH;;AAQF,MAAa,oBAAoB;;;;;;;;AAQ/B,QACE,YACA,YAC+C;CAC/C,MAAM,UACJ,QAAQ,cAAc,KAAA,IAClB,+BAA+B,IAC/B,wCAAwC,CAAC,CAAC,KACxC,MAAM,QAAQ,4BAA4B,MAAM,QAAQ,SAAS,CAAC,CACpE;CAEN,OAAO,WAAW,SAAS,KACzB,MAAM,QAAQ,QAAQ,KAAK,MAAM,QAAQ,iCAAiC,MAAM,OAAO,CAAC,CAAC,CAAC,CAC5F;AACF,EACF;AAEA,MAAM,qBAAqB,YAAgE;CACzF,MAAM,UAAiC,CAAC;CAExC,IACE,QAAQ,YAAY,cAAc,KAAA,KAClC,QAAQ,YAAY,kBAAkB,KAAA,GAEtC,QAAQ,cAAc;EACpB,GAAI,QAAQ,WAAW,cAAc,KAAA,IACjC,CAAC,IACD,EAAE,WAAW,QAAQ,WAAW,UAAU;EAC9C,GAAI,QAAQ,WAAW,kBAAkB,KAAA,IACrC,CAAC,IACD,EAAE,SAAS,QAAQ,WAAW,cAAc;CAClD;CAEF,IAAI,QAAQ,YAAY,oBAAoB,KAAA,GAC1C,QAAQ,kBAAkB;EACxB,UAAU,QAAQ,WAAW,gBAAgB;EAC7C,GAAI,QAAQ,WAAW,gBAAgB,kBAAkB,KAAA,IACrD,CAAC,IACD,EAAE,SAAS,QAAQ,WAAW,gBAAgB,cAAc;CAClE;CAEF,IAAI,QAAQ,aAAa,KAAA,GACvB,QAAQ,WAAW;EAAE,OAAO,QAAQ,SAAS;EAAO,QAAQ,QAAQ,SAAS;CAAO;CAEtF,IAAI,QAAQ,gBAAgB,wBAAwB,KAAA,GAClD,QAAQ,sBAAsB,CAAC,GAAG,QAAQ,eAAe,mBAAmB;CAE9E,IAAI,QAAQ,gBAAgB,yBAAyB,KAAA,GACnD,QAAQ,sBAAsB,CAAC,GAAG,QAAQ,eAAe,oBAAoB;CAG/E,OAAO;EACL,GAAG;EACH,GAAI,QAAQ,OAAO,SAAS,kBACxB,EAAE,KAAK,QAAQ,OAAO,IAAI,IAC1B,EAAE,MAAM,QAAQ,OAAO,KAAK;EAChC,mBAAmB;GAAE,MAAM;GAAO,UAAU;GAAU,UAAU,QAAQ;EAAS;CACnF;AACF;AAEA,MAAM,cAAc,SAClB,qBAAqB,KAAK,OAAO,GAAG,0CAA0C;AAEhF,MAAM,2BACJ,WAEA,qBAAqB,OAAO,OAAO,GAAG,0CAA0C,CAAC,CAAC,KAChF,OAAO,SACL,OAAO,IAAI;CACT,WAAW,OAAO,YAAY;CAC9B,aAAa,KAAA;AACf,CAAC,CAAC,CAAC,KAAK,OAAO,YAAY,OAAO,WAAW,0CAA0C,CAAC,CAAC,CAC3F,CACF;AAEF,MAAM,eAAe,aACnB,SAAS,QAAQ,IAAI,cAAc,CAAC,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,YAAY,MAAM;AAEnF,MAAM,kBAAkB,aAA2C;CACjE,MAAM,MAAM,SAAS,QAAQ,IAAI,gBAAgB;CAEjD,IAAI,QAAQ,QAAQ,CAAC,oBAAoB,KAAK,GAAG,GAAG,OAAO,KAAA;CAC3D,MAAM,SAAS,OAAO,GAAG;CAEzB,OAAO,OAAO,cAAc,MAAM,IAAI,SAAS,KAAA;AACjD;AAEA,MAAM,iBAAiB,OAAO,WAAW,WACvC,UACA,SACA;CACA,MAAM,OAAO,SAAS;CAEtB,IAAI,SAAS,MACX,OAAO,OAAO,cAAc,qCAAqC;CAEnE,IAAI,CAAC,YAAY,QAAQ,GAAG;EAC1B,OAAO,WAAW,IAAI;EAEtB,OAAO,OAAO,cAAc,2CAA2C;CACzE;CACA,MAAM,SAAS,eAAe,QAAQ;CAEtC,IAAI,WAAW,KAAA,KAAa,SAAS,QAAQ,OAAO,gBAAgB;EAClE,OAAO,WAAW,IAAI;EAEtB,OAAO,OAAO,+BAA+B,KAAK;GAChD,gBAAgB;GAChB,OAAO,QAAQ,OAAO;GACtB,UAAU;EACZ,CAAC;CACH;CAEA,MAAM,SAAS,OAAO,OAAO,eAC3B,OAAO,IAAI;EACT,WAAW,KAAK,UAAU;EAC1B,QAAQ,UAAU,cAAc,0CAA0C,KAAK;CACjF,CAAC,GACD,uBACF;CAEA,MAAM,SAA4B,CAAC;CACnC,IAAI,WAAW;CAEf,OAAO,MAAM;EACX,MAAM,OAAO,OAAO,OAAO,WAAW;GACpC,WAAW,OAAO,KAAK;GACvB,QAAQ,UAAU,cAAc,0CAA0C,KAAK;EACjF,CAAC;EAED,IAAI,KAAK,MAAM;EACf,YAAY,KAAK,MAAM;EACvB,IAAI,WAAW,QAAQ,OAAO,gBAC5B,OAAO,OAAO,+BAA+B,KAAK;GAChD,gBAAgB;GAChB,OAAO,QAAQ,OAAO;GACtB;EACF,CAAC;EAEH,OAAO,KAAK,KAAK,KAAK;CACxB;CACA,MAAM,QAAQ,IAAI,WAAW,QAAQ;CACrC,IAAI,SAAS;CAEb,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,IAAI,OAAO,MAAM;EACvB,UAAU,MAAM;CAClB;CAEA,OAAO;AACT,GAAG,OAAO,MAAM;AAEhB,MAAM,kBAAkB,YACtB,OAAO,WAAW,WAChB,SAC6D;CAC7D,IAAI,QAAQ,WAAW,YACrB,OAAO,OAAO,4BAA4B,KAAK;EAC7C,gBAAgB;EAChB,SAAS;EACT,SAAS;CACX,CAAC;CAGH,MAAM,WAAW,OAAO,QACrB,WAAW,kBAAkB,OAAO,CAAC,CAAC,CACtC,KACC,OAAO,UAAU,UACf,cAAc,+CAA+C,MAAM,KAAK,CAC1E,CACF;CAEF,IAAI,SAAS,WAAW,KAAK;EAC3B,MAAM,OAAO,SAAS;EAEtB,IAAI,SAAS,MAAM,OAAO,WAAW,IAAI;EAEzC,OAAO,OAAO,4BAA4B,KAAK;GAC7C,gBAAgB;GAChB,QAAQ;GACR,GAAI,iBAAiB,QAAQ,MAAM,KAAA,IAC/B,CAAC,IACD,EAAE,kBAAkB,iBAAiB,QAAQ,EAAE;GACnD,SAAS;EACX,CAAC;CACH;CACA,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,OAAO,SAAS;EAEtB,IAAI,SAAS,MAAM,OAAO,WAAW,IAAI;EACzC,MAAM,UAAU,6CAA6C,SAAS;EAEtE,OAAO,OAAO,SAAS,UAAU,MAAM,cAAc,OAAO,IAAI,gBAAgB,OAAO;CACzF;CACA,MAAM,QAAQ,OAAO,eAAe,UAAU,OAAO;CAErD,OAAO,qBAAqB,KAAK;EAC/B,gBAAgB;EAChB,WAAW;EACX;CACF,CAAC;AACH,CAAC;;AAGH,MAAa,0CAKX,MAAM,OACJ,gBACA,OAAO,IAAI,mCAAmC,YAC5C,eAAe,GAAG,EAAE,SAAS,eAAe,OAAO,EAAE,CAAC,CACxD,CACF"}

package/dist/CloudflareBrowser.mjs

@@ -1,2 +1,2 @@
-import { a as BrowserQuickActionWorkersAiPolicyError, c as browserQuickActionScreenshotLayer, i as BrowserQuickActionWorkersAi, l as browserQuickActionWorkersAiCaptureLayer, n as BrowserQuickActionBrowserBinding, o as CloudflareBrowser, r as BrowserQuickActionRpcError, s as browserQuickActionCaptureLayer } from "./CloudflareBrowser-5an6m-Qb.mjs";
+import { a as BrowserQuickActionWorkersAiPolicyError, c as browserQuickActionScreenshotLayer, i as BrowserQuickActionWorkersAi, l as browserQuickActionWorkersAiCaptureLayer, n as BrowserQuickActionBrowserBinding, o as CloudflareBrowser, r as BrowserQuickActionRpcError, s as browserQuickActionCaptureLayer } from "./CloudflareBrowser-Vt8qTdYW.mjs";
 export { BrowserQuickActionBrowserBinding, BrowserQuickActionRpcError, BrowserQuickActionWorkersAi, BrowserQuickActionWorkersAiPolicyError, CloudflareBrowser, browserQuickActionCaptureLayer, browserQuickActionScreenshotLayer, browserQuickActionWorkersAiCaptureLayer };

package/dist/CloudflareCodeMode.mjs

@@ -304,7 +304,7 @@ const utf8ByteLength = (value) => {
 };
 /** Reserved global names the harness owns inside the dynamic worker. */
 const reservedHarnessGlobals = /* @__PURE__ */ new Set(["console"]);
-const makeExecute = (options, clock) => Effect.fn("DynamicWorkerCodeExecutor.execute")(function* (request) {
+const makeExecute = (options, clock) => Effect.fnUntraced(function* (request) {
 	if (request.network._tag !== "NetworkDisabled") return yield* CodeExecutorUnsupportedError.make({
 		implementation: dynamicWorkerImplementation,
 		feature: "network",

package/dist/CloudflareCodeMode.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"CloudflareCodeMode.mjs","names":[],"sources":["../src/CloudflareCodeMode.ts"],"sourcesContent":["import {\n  CodeExecutionHost,\n  CodeExecutionResourceUse,\n  CodeExecutionResult,\n  CodeExecutionTimeoutError,\n  CodeExecutor,\n  CodeExecutorStartError,\n  CodeExecutorTerminatedError,\n  CodeExecutorUnsupportedError,\n  CodeExecutionProtocolError,\n  CodeHostCall,\n  CodeHostCallLimitError,\n  CodeHostCallResult,\n  CodeOutputLimitError,\n  CodeProgramFailedError,\n  CodeSourceError,\n  type CodeExecutorExecute,\n  type CodeExecutionRequest,\n} from \"@yielded/agent/code-executor\";\nimport { SandboxImplementation } from \"@yielded/agent/sandbox\";\nimport { RpcTarget } from \"cloudflare:workers\";\nimport { Clock, Duration, Effect, Exit, Fiber, Layer, Option, Queue, Schema } from \"effect\";\n\nimport { safeCauseDiagnostic, safeCauseMessage } from \"./internal/boundary.ts\";\n\n/**\n * The Cloudflare Dynamic Worker `CodeExecutor` adapter (C4 of ADR-0017;\n * DEPLOY-011). Each pass loads one fresh Worker through the Worker Loader\n * with `globalOutbound: null`, so generated code has no ambient network,\n * bindings, or secrets; its only authority is the pass-scoped RPC target that\n * routes back into the owning event's `CodeExecutionHost` service. Platform\n * CPU limits stop synchronous runaway programs; the executor-owned wall-clock\n * deadline interrupts asynchronously suspended passes. Deployment class `E`\n * only: the adapter records no persistent state and a later pass may run in a\n * completely different isolate.\n */\nexport const dynamicWorkerImplementation = SandboxImplementation.make({\n  isolation: \"isolated\",\n  identity: \"cloudflare-dynamic-worker\",\n});\n\ninterface CodeModePassHost extends Rpc.RpcTargetBranded {\n  readonly call: (hostCall: unknown) => Promise<unknown>;\n}\n\ninterface CodeModeHarnessEntrypoint extends Rpc.WorkerEntrypointBranded {\n  readonly run: (host: CodeModePassHost) => Promise<unknown>;\n}\n\n/**\n * One object-capability endpoint for one execution pass. Workers RPC invokes\n * the target in the request context where it was created, so the native\n * Promise returned by `dispatch` and the Effect fiber that settles it share\n * one I/O owner. Passing the target as `run()`'s argument also scopes the\n * remote stub to that RPC call; no request state lives at module scope.\n */\nclass CodeModePassHostTarget extends RpcTarget implements CodeModePassHost {\n  readonly #dispatch: (hostCall: unknown) => Promise<unknown>;\n\n  constructor(dispatch: (hostCall: unknown) => Promise<unknown>) {\n    super();\n    this.#dispatch = dispatch;\n  }\n\n  call(hostCall: unknown): Promise<unknown> {\n    return this.#dispatch(hostCall);\n  }\n}\n\n/**\n * The fixed harness loaded as the dynamic worker's main module. The generated\n * source becomes `program.mjs` (`export default (<expression>);`) — a module,\n * never `eval`. The harness installs namespace globals and a bounded console,\n * imports the program, invokes it exactly once, and returns one envelope the\n * host validates through Effect Schema.\n */\nconst HARNESS_MODULE = String.raw`\nimport { WorkerEntrypoint } from \"cloudflare:workers\";\nimport programDefault from \"./program.js\";\n\nconst encoder = new TextEncoder();\nconst utf8 = (text) => encoder.encode(text).byteLength;\nconst safeText = (value) => {\n  try {\n    if (value instanceof Error) return (value.name + \": \" + value.message).slice(0, 4000);\n    if (typeof value === \"string\") return value.slice(0, 4000);\n    const encoded = JSON.stringify(value);\n    return (encoded === undefined ? String(value) : encoded).slice(0, 4000);\n  } catch {\n    return \"[unserializable value]\";\n  }\n};\nconst safeJson = (value) => {\n  try {\n    const encoded = JSON.stringify(value);\n    if (encoded !== undefined && encoded.length <= 4000) return JSON.parse(encoded);\n  } catch {}\n  return safeText(value);\n};\n\nexport default class CodeModeHarness extends WorkerEntrypoint {\n  async run(host) {\n    const config = this.env.CODE_MODE_PASS;\n    const limits = config.limits;\n    const logs = [];\n    let logBytes = 0;\n    let fatal;\n    const boundedLogs = () => logs.slice(0, 4096);\n    const write = (...values) => {\n      const joined = values.map(safeText).join(\" \");\n      const line = joined.length > 16000 ? joined.slice(0, 15999) + \"…\" : joined;\n      const bytes = utf8(line);\n      if (logs.length >= 4096 || logBytes + bytes > limits.maxLogBytes) {\n        fatal = fatal ?? { _tag: \"log-limit\", observed: logBytes + bytes, logs: boundedLogs() };\n        throw new Error(\"code-mode log limit exceeded\");\n      }\n      logs.push(line);\n      logBytes += bytes;\n    };\n    globalThis.console = { log: write, info: write, warn: write, error: write, debug: write };\n\n    let hostCalls = 0;\n    const makeMethod = (namespace, method) => async (argument) => {\n      hostCalls += 1;\n      if (hostCalls > limits.maxHostCalls) {\n        fatal = fatal ?? { _tag: \"host-call-limit\", logs: boundedLogs() };\n        throw new Error(\"code-mode host-call limit exceeded\");\n      }\n      let argText;\n      try {\n        argText = JSON.stringify(argument);\n      } catch {}\n      if (argText === undefined || utf8(argText) > limits.maxHostCallArgumentBytes) {\n        fatal = fatal ?? {\n          _tag: \"argument-limit\",\n          observed: argText === undefined ? 0 : utf8(argText),\n          logs: boundedLogs(),\n        };\n        throw new Error(\"code-mode host-call argument limit exceeded\");\n      }\n      const outcome = await host.call({\n        namespace,\n        method,\n        argument: JSON.parse(argText),\n      });\n      if (outcome !== null && typeof outcome === \"object\" && outcome._tag === \"CodeHostCallSuccess\") {\n        return outcome.value;\n      }\n      if (outcome !== null && typeof outcome === \"object\" && outcome._tag === \"CodeHostCallFailure\") {\n        throw outcome.error;\n      }\n      fatal = fatal ?? { _tag: \"protocol\", message: \"host returned an unrecognized outcome\" };\n      throw new Error(\"code-mode host protocol violation\");\n    };\n    for (const namespace of config.namespaces) {\n      const methods = {};\n      for (const method of namespace.methods) {\n        methods[method] = makeMethod(namespace.name, method);\n      }\n      globalThis[namespace.name] = methods;\n    }\n\n    // program.js is imported statically at the top of this module, so a\n    // syntactically invalid program fails the whole harness at load (mapped\n    // to a source error by the host). Using a static import keeps this module\n    // free of dynamic-import expressions, which single-script Miniflare hosts\n    // reject. The isolation boundary does NOT depend on the ordering of this\n    // import versus the console/namespace shims installed below: the loaded\n    // Worker has globalOutbound: null and no bindings, secrets, or env from\n    // the Worker Loader config BEFORE any module in the graph evaluates, so\n    // module-level program code has no ambient authority regardless. The\n    // shims below are usability wrappers (bounded console, namespace globals),\n    // and the accepted program is a single async-function expression whose\n    // body runs only when invoked here — after the shims exist.\n    const program = programDefault;\n    if (typeof program !== \"function\") {\n      return { _tag: \"source-not-a-function\", actual: typeof program };\n    }\n    try {\n      const value = await program();\n      if (fatal !== undefined) return fatal;\n      let text;\n      try {\n        text = JSON.stringify(value);\n      } catch {}\n      if (text === undefined) {\n        return {\n          _tag: \"program-failed\",\n          reason: \"non-json-result\",\n          thrown: null,\n          message: \"The program must return a JSON value\",\n          logs: boundedLogs(),\n        };\n      }\n      const resultBytes = utf8(text);\n      if (resultBytes > limits.maxResultBytes) {\n        return { _tag: \"result-limit\", observed: resultBytes, logs: boundedLogs() };\n      }\n      return {\n        _tag: \"completed\",\n        value: JSON.parse(text),\n        logs: boundedLogs(),\n        hostCalls,\n        logBytes,\n        resultBytes,\n      };\n    } catch (cause) {\n      if (fatal !== undefined) return fatal;\n      return {\n        _tag: \"program-failed\",\n        reason: cause instanceof Error ? \"threw\" : \"rejected\",\n        thrown: safeJson(cause),\n        message: safeText(cause),\n        logs: boundedLogs(),\n      };\n    }\n  }\n}\n`;\n\nconst BoundedLogs = Schema.Array(Schema.String.check(Schema.isMaxLength(16 * 1024))).check(\n  Schema.isMaxLength(4_096),\n);\n\nconst HarnessCompleted = Schema.TaggedStruct(\"completed\", {\n  value: Schema.Json,\n  logs: BoundedLogs,\n  hostCalls: Schema.Natural,\n  logBytes: Schema.Natural,\n  resultBytes: Schema.Natural,\n});\n\nconst HarnessNotAFunction = Schema.TaggedStruct(\"source-not-a-function\", {\n  actual: Schema.String,\n});\n\nconst HarnessProgramFailed = Schema.TaggedStruct(\"program-failed\", {\n  reason: Schema.Literals([\"threw\", \"rejected\", \"non-json-result\"]),\n  thrown: Schema.Json,\n  message: Schema.String,\n  logs: BoundedLogs,\n});\n\nconst HarnessLogLimit = Schema.TaggedStruct(\"log-limit\", {\n  observed: Schema.Natural,\n  logs: BoundedLogs,\n});\n\nconst HarnessArgumentLimit = Schema.TaggedStruct(\"argument-limit\", {\n  observed: Schema.Natural,\n  logs: BoundedLogs,\n});\n\nconst HarnessResultLimit = Schema.TaggedStruct(\"result-limit\", {\n  observed: Schema.Natural,\n  logs: BoundedLogs,\n});\n\nconst HarnessHostCallLimit = Schema.TaggedStruct(\"host-call-limit\", {\n  logs: BoundedLogs,\n});\n\nconst HarnessProtocol = Schema.TaggedStruct(\"protocol\", {\n  message: Schema.String,\n});\n\nconst HarnessOutcome = Schema.Union([\n  HarnessCompleted,\n  HarnessNotAFunction,\n  HarnessProgramFailed,\n  HarnessLogLimit,\n  HarnessArgumentLimit,\n  HarnessResultLimit,\n  HarnessHostCallLimit,\n  HarnessProtocol,\n]);\n\nconst HarnessPassConfig = Schema.Struct({\n  namespaces: Schema.Array(\n    Schema.Struct({\n      name: Schema.NonEmptyString,\n      methods: Schema.Array(Schema.NonEmptyString).check(Schema.isMaxLength(64)),\n    }),\n  ).check(Schema.isMaxLength(32)),\n  limits: Schema.Struct({\n    maxLogBytes: Schema.Natural,\n    maxResultBytes: Schema.Natural,\n    maxHostCalls: Schema.Natural,\n    maxHostCallArgumentBytes: Schema.Natural,\n  }),\n});\n\nconst encodeHarnessPassConfig = Schema.encodeSync(HarnessPassConfig);\nconst encodeJsonPayload = Schema.encodeSync(Schema.fromJsonString(Schema.Json));\nconst decodeJsonPayload = Schema.decodeUnknownOption(Schema.fromJsonString(Schema.Json));\n\nconst decodeHarnessOutcome = (value: unknown) => {\n  try {\n    return Schema.decodeUnknownOption(HarnessOutcome)(value);\n  } catch {\n    return Option.none<typeof HarnessOutcome.Type>();\n  }\n};\n\nconst decodeHostCall = (value: unknown) => {\n  try {\n    return Schema.decodeUnknownOption(CodeHostCall)(value);\n  } catch {\n    return Option.none<CodeHostCall>();\n  }\n};\n\nconst decodeHostCallResult = (value: unknown) => {\n  try {\n    return Schema.decodeUnknownOption(CodeHostCallResult)(value);\n  } catch {\n    return Option.none<CodeHostCallResult>();\n  }\n};\n\n/** Dispose a Cloudflare RPC handle when the runtime supplies its untyped disposal hook. @internal */\nexport const disposeRpcHandle = (handle: unknown): Effect.Effect<void> =>\n  Effect.try({\n    try: () => {\n      if ((typeof handle !== \"object\" && typeof handle !== \"function\") || handle === null) return;\n      if (!(Symbol.dispose in handle)) return;\n      const dispose = Reflect.get(handle, Symbol.dispose);\n\n      if (typeof dispose === \"function\") {\n        Reflect.apply(dispose, handle, []);\n      }\n    },\n    catch: (cause) =>\n      safeCauseDiagnostic(cause, \"The Cloudflare RPC disposal hook failed without a diagnostic\"),\n  }).pipe(\n    Effect.catch((diagnostic) =>\n      Effect.logWarning(`Cloudflare RPC handle disposal failed: ${diagnostic}`).pipe(\n        Effect.ignoreCause,\n      ),\n    ),\n  );\n\n/**\n * Project a host outcome to the plain JSON envelope the harness reads. A\n * `CodeExecutionHost` may return either real `CodeHostCallResult` instances\n * (the substitute and conformance kit) or plain-object equivalents (the Code\n * Mode capability's broker route), so this reads the shared fields rather than\n * `Schema.encodeSync`, which would reject a plain object.\n */\ninterface EncodedHostResultPayload {\n  readonly encodedPayload: string;\n  readonly resultBytes: number;\n}\n\nconst encodeHostResultPayload = (\n  outcome: CodeHostCallResult,\n): EncodedHostResultPayload | undefined => {\n  try {\n    const payload = outcome._tag === \"CodeHostCallSuccess\" ? outcome.value : outcome.error;\n    const encodedPayload = encodeJsonPayload(payload);\n\n    return {\n      encodedPayload,\n      resultBytes: utf8ByteLength(encodedPayload),\n    };\n  } catch {\n    return undefined;\n  }\n};\n\nconst utf8ByteLength = (value: string): number => {\n  let total = 0;\n\n  for (const character of value) {\n    const codePoint = character.codePointAt(0) ?? 0;\n\n    total += codePoint <= 0x7f ? 1 : codePoint <= 0x7ff ? 2 : codePoint <= 0xffff ? 3 : 4;\n  }\n\n  return total;\n};\n\ninterface QueuedHostCall {\n  readonly call: CodeHostCall;\n  readonly resolve: (value: unknown) => void;\n  readonly reject: (reason: unknown) => void;\n}\n\ntype HostWork =\n  | { readonly _tag: \"call\"; readonly queued: QueuedHostCall }\n  | { readonly _tag: \"limit\" };\n\ntype HostDispatchError =\n  | CodeExecutionTimeoutError\n  | CodeOutputLimitError\n  | CodeExecutionProtocolError\n  | CodeHostCallLimitError;\n\n/** Reserved global names the harness owns inside the dynamic worker. */\nconst reservedHarnessGlobals = new Set([\"console\"]);\n\nexport interface DynamicWorkerCodeExecutorOptions {\n  /** The `worker_loader` binding. */\n  readonly loader: WorkerLoader;\n  /** Compatibility date for dynamic workers; defaults to `2025-05-01`. */\n  readonly compatibilityDate?: string | undefined;\n}\n\nconst makeExecute = (\n  options: DynamicWorkerCodeExecutorOptions,\n  clock: Clock.Clock,\n): CodeExecutorExecute =>\n  Effect.fn(\"DynamicWorkerCodeExecutor.execute\")(function* (request: CodeExecutionRequest) {\n    if (request.network._tag !== \"NetworkDisabled\") {\n      return yield* CodeExecutorUnsupportedError.make({\n        implementation: dynamicWorkerImplementation,\n        feature: \"network\",\n        message:\n          \"The Dynamic Worker executor denies all egress with globalOutbound: null; an allowlist is not supported in the first slice\",\n      });\n    }\n    const sourceBytes = utf8ByteLength(request.source);\n\n    if (sourceBytes > request.limits.maxSourceBytes) {\n      return yield* CodeSourceError.make({\n        implementation: dynamicWorkerImplementation,\n        reason: \"oversized\",\n        message: `Source is ${sourceBytes} bytes; the request allows ${request.limits.maxSourceBytes}`,\n      });\n    }\n    for (const namespace of request.namespaces) {\n      if (reservedHarnessGlobals.has(namespace.name)) {\n        return yield* CodeExecutorUnsupportedError.make({\n          implementation: dynamicWorkerImplementation,\n          feature: \"namespaces\",\n          message: `Namespace ${namespace.name} collides with a harness binding`,\n        });\n      }\n    }\n    const host = yield* CodeExecutionHost;\n\n    // This synchronous clock access is confined to callbacks that must compute a timeout\n    // immediately. The Clock service remains the authority, so tests and hosts can replace it.\n    const startedAt = clock.monotonicTimeNanosUnsafe();\n    const passDeadline = startedAt + Duration.toNanosUnsafe(request.limits.maxWallTime);\n\n    const remainingPassWallTime = (): Duration.Duration => {\n      const now = clock.monotonicTimeNanosUnsafe();\n\n      return Duration.nanos(passDeadline > now ? passDeadline - now : 0n);\n    };\n\n    let issuedHostCalls = 0;\n    let passOpen = true;\n    const queuedHostCalls: Array<QueuedHostCall> = [];\n    let passFailure: HostDispatchError | undefined;\n\n    const failPass = (error: HostDispatchError): void => {\n      if (passFailure === undefined) passFailure = error;\n    };\n\n    const rejectQueuedHostCalls = (reason: Error): void => {\n      for (const queued of queuedHostCalls.splice(0)) {\n        queued.reject(reason);\n      }\n    };\n\n    const queue = yield* Queue.unbounded<HostWork>();\n\n    const deliverHostOutcome = (\n      queued: QueuedHostCall,\n      outcome: CodeHostCallResult,\n    ): Effect.Effect<void, CodeExecutionProtocolError | CodeOutputLimitError> =>\n      Effect.gen(function* () {\n        const decoded = decodeHostCallResult(outcome);\n\n        if (Option.isNone(decoded)) {\n          const error = CodeExecutionProtocolError.make({\n            implementation: dynamicWorkerImplementation,\n            message: \"The execution host returned a value outside the CodeHostCallResult schema\",\n          });\n\n          failPass(error);\n\n          return yield* error;\n        }\n        const encoded = encodeHostResultPayload(decoded.value);\n\n        if (encoded === undefined || encoded.resultBytes > request.limits.maxHostCallResultBytes) {\n          const error = CodeOutputLimitError.make({\n            implementation: dynamicWorkerImplementation,\n            surface: \"host-call-result\",\n            limit: request.limits.maxHostCallResultBytes,\n            observed: encoded?.resultBytes ?? 0,\n            logs: [],\n          });\n\n          failPass(error);\n\n          return yield* error;\n        }\n        const normalizedPayload = decodeJsonPayload(encoded.encodedPayload);\n\n        if (Option.isNone(normalizedPayload)) {\n          const error = CodeExecutionProtocolError.make({\n            implementation: dynamicWorkerImplementation,\n            message: \"The execution host returned a result that could not cross the JSON boundary\",\n          });\n\n          failPass(error);\n\n          return yield* error;\n        }\n        queued.resolve(\n          decoded.value._tag === \"CodeHostCallSuccess\"\n            ? { _tag: \"CodeHostCallSuccess\", value: normalizedPayload.value }\n            : { _tag: \"CodeHostCallFailure\", error: normalizedPayload.value },\n        );\n      });\n\n    // Workers RPC into the loader isolate cannot settle on the fiber blocked\n    // in `entrypoint.run()`. A Scope-owned sibling fiber keeps that\n    // independence while inheriting the pass Context and dying with the Scope.\n    const serveHostCalls = Effect.gen(function* () {\n      while (true) {\n        const work = yield* Queue.take(queue);\n\n        if (work._tag === \"limit\") {\n          const error = CodeHostCallLimitError.make({\n            implementation: dynamicWorkerImplementation,\n            limit: request.limits.maxHostCalls,\n            logs: [],\n          });\n\n          failPass(error);\n\n          return yield* error;\n        }\n        const queued = work.queued;\n\n        yield* host.call(queued.call).pipe(\n          Effect.timeoutOrElse({\n            duration: remainingPassWallTime(),\n            orElse: () => {\n              const error = CodeExecutionTimeoutError.make({\n                implementation: dynamicWorkerImplementation,\n                kind: \"wall-clock\",\n                maxWallTime: request.limits.maxWallTime,\n                logs: [],\n              });\n\n              failPass(error);\n\n              return error;\n            },\n          }),\n          Effect.flatMap((outcome) => deliverHostOutcome(queued, outcome)),\n          Effect.tapError(() =>\n            Effect.sync(() => queued.reject(new Error(\"Code Mode host call failed\"))),\n          ),\n          Effect.onInterrupt(() =>\n            Effect.sync(() => queued.reject(new Error(\"Code Mode pass is closing\"))),\n          ),\n        );\n      }\n    });\n\n    const concurrency = request.limits.maxHostCallConcurrency ?? 4;\n\n    const server = yield* Effect.all(\n      Array.from({ length: concurrency }, () => serveHostCalls),\n      { concurrency, discard: true },\n    ).pipe(Effect.andThen(Effect.never), Effect.forkScoped);\n\n    const dispatch = (hostCall: unknown): Promise<unknown> => {\n      if (!passOpen) {\n        return Promise.reject(new Error(\"Code Mode pass is closing\"));\n      }\n      issuedHostCalls += 1;\n      if (issuedHostCalls > request.limits.maxHostCalls) {\n        const error = CodeHostCallLimitError.make({\n          implementation: dynamicWorkerImplementation,\n          limit: request.limits.maxHostCalls,\n          logs: [],\n        });\n\n        failPass(error);\n        Queue.offerUnsafe(queue, { _tag: \"limit\" });\n\n        return Promise.reject(new Error(\"host-call limit exceeded\"));\n      }\n      const decoded = decodeHostCall(hostCall);\n\n      if (Option.isNone(decoded)) {\n        return Promise.reject(new TypeError(\"host calls must match the CodeHostCall schema\"));\n      }\n\n      return new Promise((resolve, reject) => {\n        const queued = { call: decoded.value, resolve, reject };\n\n        queuedHostCalls.push(queued);\n        Queue.offerUnsafe(queue, { _tag: \"call\", queued });\n      });\n    };\n\n    const closeAdmission = Effect.sync(() => {\n      passOpen = false;\n      rejectQueuedHostCalls(new Error(\"Code Mode pass is closing\"));\n    });\n\n    yield* Effect.addFinalizer(() => closeAdmission.pipe(Effect.andThen(Fiber.interrupt(server))));\n\n    // No `allowExperimental`: the runtime only accepts it when the CALLING\n    // worker carries the `experimental` compatibility flag, which deployed\n    // consumers cannot set — the option would reject every pass in\n    // production. The harness needs no experimental runtime features.\n    const workerCode: WorkerLoaderWorkerCode = {\n      compatibilityDate: options.compatibilityDate ?? \"2025-05-01\",\n      mainModule: \"harness.js\",\n      modules: {\n        \"harness.js\": HARNESS_MODULE,\n        \"program.js\": `export default (\\n${request.source}\\n);`,\n      },\n      env: {\n        CODE_MODE_PASS: encodeHarnessPassConfig({\n          namespaces: request.namespaces.map((namespace) => ({\n            name: namespace.name,\n            methods: namespace.methods,\n          })),\n          limits: {\n            maxLogBytes: request.limits.maxLogBytes,\n            maxResultBytes: request.limits.maxResultBytes,\n            maxHostCalls: request.limits.maxHostCalls,\n            maxHostCallArgumentBytes: request.limits.maxHostCallArgumentBytes,\n          },\n        }),\n      },\n      globalOutbound: null,\n      ...(request.limits.cpuMillis === undefined\n        ? {}\n        : {\n            limits: {\n              cpuMs: request.limits.cpuMillis,\n              subRequests: request.limits.maxHostCalls + 8,\n            },\n          }),\n    };\n\n    const worker = yield* Effect.acquireRelease(\n      Effect.try({\n        try: () => options.loader.load(workerCode),\n        catch: (cause) => {\n          const text = safeCauseMessage(cause, \"The Worker Loader failed without a diagnostic\");\n\n          // Blame the program's source ONLY on a genuine compile diagnostic;\n          // any other load rejection is an infrastructure start failure, not\n          // the model's fault (see classifyWorkerFailure for the same split).\n          if (/syntaxerror|failed to (compile|parse)/i.test(text)) {\n            return CodeSourceError.make({\n              implementation: dynamicWorkerImplementation,\n              reason: \"invalid\",\n              message: text.slice(0, 8_000),\n            });\n          }\n\n          return CodeExecutorStartError.make({\n            implementation: dynamicWorkerImplementation,\n            message: `The Worker Loader rejected the pass: ${text}`.slice(0, 8_000),\n            cause,\n          });\n        },\n      }),\n      disposeRpcHandle,\n    );\n\n    const entrypoint = yield* Effect.acquireRelease(\n      Effect.try({\n        try: () => worker.getEntrypoint<CodeModeHarnessEntrypoint>(),\n        catch: (cause) => classifyWorkerFailure(cause, request.limits.maxWallTime),\n      }),\n      disposeRpcHandle,\n    );\n\n    const rpc = Effect.tryPromise({\n      try: () => entrypoint.run(new CodeModePassHostTarget(dispatch)),\n      catch: (cause) => classifyWorkerFailure(cause, request.limits.maxWallTime),\n    });\n\n    const exit = yield* Effect.raceFirst(\n      rpc.pipe(\n        Effect.timeoutOrElse({\n          duration: remainingPassWallTime(),\n          orElse: () =>\n            CodeExecutionTimeoutError.make({\n              implementation: dynamicWorkerImplementation,\n              kind: \"wall-clock\",\n              maxWallTime: request.limits.maxWallTime,\n              logs: [],\n            }),\n        }),\n      ),\n      Fiber.join(server),\n    ).pipe(Effect.exit);\n\n    yield* closeAdmission;\n    yield* Fiber.interrupt(server);\n    if (passFailure !== undefined) {\n      return yield* passFailure;\n    }\n    if (Exit.isFailure(exit)) {\n      return yield* Effect.failCause(exit.cause);\n    }\n    const raw = exit.value;\n    const finishedAt = clock.monotonicTimeNanosUnsafe();\n\n    const outcome = decodeHarnessOutcome(raw);\n\n    if (Option.isNone(outcome)) {\n      return yield* CodeExecutionProtocolError.make({\n        implementation: dynamicWorkerImplementation,\n        message: \"The dynamic worker returned a value outside the harness envelope schema\",\n      });\n    }\n    switch (outcome.value._tag) {\n      case \"completed\": {\n        return CodeExecutionResult.make({\n          implementation: dynamicWorkerImplementation,\n          value: outcome.value.value,\n          logs: outcome.value.logs,\n          resourceUse: CodeExecutionResourceUse.make({\n            wallTime: Duration.nanos(finishedAt > startedAt ? finishedAt - startedAt : 0n),\n            hostCalls: outcome.value.hostCalls,\n            logBytes: outcome.value.logBytes,\n            resultBytes: outcome.value.resultBytes,\n          }),\n        });\n      }\n      case \"source-not-a-function\": {\n        return yield* CodeSourceError.make({\n          implementation: dynamicWorkerImplementation,\n          reason: \"not-a-function\",\n          message: `The source expression evaluated to ${outcome.value.actual}; it must evaluate to one async function`,\n        });\n      }\n      case \"program-failed\": {\n        return yield* CodeProgramFailedError.make({\n          implementation: dynamicWorkerImplementation,\n          reason: outcome.value.reason,\n          thrown: outcome.value.thrown,\n          message: outcome.value.message.slice(0, 8_000),\n          logs: outcome.value.logs,\n        });\n      }\n      case \"log-limit\": {\n        return yield* CodeOutputLimitError.make({\n          implementation: dynamicWorkerImplementation,\n          surface: \"logs\",\n          limit: request.limits.maxLogBytes,\n          observed: outcome.value.observed,\n          logs: outcome.value.logs,\n        });\n      }\n      case \"argument-limit\": {\n        return yield* CodeOutputLimitError.make({\n          implementation: dynamicWorkerImplementation,\n          surface: \"host-call-argument\",\n          limit: request.limits.maxHostCallArgumentBytes,\n          observed: outcome.value.observed,\n          logs: outcome.value.logs,\n        });\n      }\n      case \"result-limit\": {\n        return yield* CodeOutputLimitError.make({\n          implementation: dynamicWorkerImplementation,\n          surface: \"result\",\n          limit: request.limits.maxResultBytes,\n          observed: outcome.value.observed,\n          logs: outcome.value.logs,\n        });\n      }\n      case \"host-call-limit\": {\n        return yield* CodeHostCallLimitError.make({\n          implementation: dynamicWorkerImplementation,\n          limit: request.limits.maxHostCalls,\n          logs: outcome.value.logs,\n        });\n      }\n      case \"protocol\": {\n        return yield* CodeExecutionProtocolError.make({\n          implementation: dynamicWorkerImplementation,\n          message: outcome.value.message.slice(0, 8_000),\n        });\n      }\n    }\n  });\n\n/**\n * Expected worker-level failures map into the typed union with bounded\n * diagnostics; anything unrecognized stays a start/termination error rather\n * than a fabricated program result.\n */\nconst classifyWorkerFailure = (\n  cause: unknown,\n  maxWallTime: Duration.Duration,\n):\n  | CodeExecutionTimeoutError\n  | CodeExecutorTerminatedError\n  | CodeExecutorStartError\n  | CodeSourceError => {\n  const text = safeCauseDiagnostic(cause, \"[unserializable worker failure]\");\n\n  // `WorkerLoader.load()` is lazy, so a module-compile error in the generated\n  // program surfaces here at first use. Blame the program's source ONLY on a\n  // genuine compile diagnostic (a `SyntaxError` or an explicit compile\n  // failure) — the fixed harness is valid, so the fault is in program.js. A\n  // bare \"failed to start Worker\" without a compile diagnostic is an\n  // infrastructure start failure, not the model's fault, so it must NOT be\n  // misclassified as a source error.\n  if (/syntaxerror|failed to (compile|parse)/i.test(text)) {\n    return CodeSourceError.make({\n      implementation: dynamicWorkerImplementation,\n      reason: \"invalid\",\n      message: text.slice(0, 8_000),\n    });\n  }\n  if (/cpu/i.test(text)) {\n    return CodeExecutionTimeoutError.make({\n      implementation: dynamicWorkerImplementation,\n      kind: \"cpu\",\n      maxWallTime,\n      logs: [],\n    });\n  }\n  if (/failed to start worker/i.test(text)) {\n    return CodeExecutorStartError.make({\n      implementation: dynamicWorkerImplementation,\n      message: text.slice(0, 8_000),\n      cause,\n    });\n  }\n\n  return CodeExecutorTerminatedError.make({\n    implementation: dynamicWorkerImplementation,\n    message: text.slice(0, 8_000),\n  });\n};\n\n/** Layer building the Dynamic Worker `CodeExecutor` from resolved bindings. */\nexport const dynamicWorkerCodeExecutorLayer = (\n  options: DynamicWorkerCodeExecutorOptions,\n): Layer.Layer<CodeExecutor> =>\n  Layer.effect(\n    CodeExecutor,\n    Effect.gen(function* () {\n      const clock = yield* Clock.Clock;\n\n      return CodeExecutor.of({ execute: makeExecute(options, clock) });\n    }),\n  );\n\n/** Assemble Code Mode handlers with the isolated Dynamic Worker executor. */\nexport const CloudflareCodeMode = {\n  /**\n   * Provide the selected tool handlers at construction, where Code Mode captures them.\n   * Their errors and remaining dependencies stay visible. The definition still owns the\n   * allowlist and limits; the runtime supplies the live Tool broker for each scoped pass.\n   */\n  layer: <A, E, R, Handlers, HandlerError, HandlerRequirements>(\n    definition: { readonly handlers: Layer.Layer<A, E, R> },\n    options: DynamicWorkerCodeExecutorOptions & {\n      readonly handlers: Layer.Layer<Handlers, HandlerError, HandlerRequirements>;\n    },\n  ) =>\n    definition.handlers.pipe(\n      Layer.provide(options.handlers),\n      Layer.provide(dynamicWorkerCodeExecutorLayer(options)),\n    ),\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAoCA,MAAa,8BAA8B,sBAAsB,KAAK;CACpE,WAAW;CACX,UAAU;AACZ,CAAC;;;;;;;;AAiBD,IAAM,yBAAN,cAAqC,UAAsC;CACzE;CAEA,YAAY,UAAmD;EAC7D,MAAM;EACN,KAAK,YAAY;CACnB;CAEA,KAAK,UAAqC;EACxC,OAAO,KAAK,UAAU,QAAQ;CAChC;AACF;;;;;;;;AASA,MAAM,iBAAiB,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgJjC,MAAM,cAAc,OAAO,MAAM,OAAO,OAAO,MAAM,OAAO,YAAY,KAAS,CAAC,CAAC,CAAC,CAAC,MACnF,OAAO,YAAY,IAAK,CAC1B;AAEA,MAAM,mBAAmB,OAAO,aAAa,aAAa;CACxD,OAAO,OAAO;CACd,MAAM;CACN,WAAW,OAAO;CAClB,UAAU,OAAO;CACjB,aAAa,OAAO;AACtB,CAAC;AAED,MAAM,sBAAsB,OAAO,aAAa,yBAAyB,EACvE,QAAQ,OAAO,OACjB,CAAC;AAED,MAAM,uBAAuB,OAAO,aAAa,kBAAkB;CACjE,QAAQ,OAAO,SAAS;EAAC;EAAS;EAAY;CAAiB,CAAC;CAChE,QAAQ,OAAO;CACf,SAAS,OAAO;CAChB,MAAM;AACR,CAAC;AAED,MAAM,kBAAkB,OAAO,aAAa,aAAa;CACvD,UAAU,OAAO;CACjB,MAAM;AACR,CAAC;AAED,MAAM,uBAAuB,OAAO,aAAa,kBAAkB;CACjE,UAAU,OAAO;CACjB,MAAM;AACR,CAAC;AAED,MAAM,qBAAqB,OAAO,aAAa,gBAAgB;CAC7D,UAAU,OAAO;CACjB,MAAM;AACR,CAAC;AAED,MAAM,uBAAuB,OAAO,aAAa,mBAAmB,EAClE,MAAM,YACR,CAAC;AAED,MAAM,kBAAkB,OAAO,aAAa,YAAY,EACtD,SAAS,OAAO,OAClB,CAAC;AAED,MAAM,iBAAiB,OAAO,MAAM;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,oBAAoB,OAAO,OAAO;CACtC,YAAY,OAAO,MACjB,OAAO,OAAO;EACZ,MAAM,OAAO;EACb,SAAS,OAAO,MAAM,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;CAC3E,CAAC,CACH,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;CAC9B,QAAQ,OAAO,OAAO;EACpB,aAAa,OAAO;EACpB,gBAAgB,OAAO;EACvB,cAAc,OAAO;EACrB,0BAA0B,OAAO;CACnC,CAAC;AACH,CAAC;AAED,MAAM,0BAA0B,OAAO,WAAW,iBAAiB;AACnE,MAAM,oBAAoB,OAAO,WAAW,OAAO,eAAe,OAAO,IAAI,CAAC;AAC9E,MAAM,oBAAoB,OAAO,oBAAoB,OAAO,eAAe,OAAO,IAAI,CAAC;AAEvF,MAAM,wBAAwB,UAAmB;CAC/C,IAAI;EACF,OAAO,OAAO,oBAAoB,cAAc,CAAC,CAAC,KAAK;CACzD,QAAQ;EACN,OAAO,OAAO,KAAiC;CACjD;AACF;AAEA,MAAM,kBAAkB,UAAmB;CACzC,IAAI;EACF,OAAO,OAAO,oBAAoB,YAAY,CAAC,CAAC,KAAK;CACvD,QAAQ;EACN,OAAO,OAAO,KAAmB;CACnC;AACF;AAEA,MAAM,wBAAwB,UAAmB;CAC/C,IAAI;EACF,OAAO,OAAO,oBAAoB,kBAAkB,CAAC,CAAC,KAAK;CAC7D,QAAQ;EACN,OAAO,OAAO,KAAyB;CACzC;AACF;;AAGA,MAAa,oBAAoB,WAC/B,OAAO,IAAI;CACT,WAAW;EACT,IAAK,OAAO,WAAW,YAAY,OAAO,WAAW,cAAe,WAAW,MAAM;EACrF,IAAI,EAAE,OAAO,WAAW,SAAS;EACjC,MAAM,UAAU,QAAQ,IAAI,QAAQ,OAAO,OAAO;EAElD,IAAI,OAAO,YAAY,YACrB,QAAQ,MAAM,SAAS,QAAQ,CAAC,CAAC;CAErC;CACA,QAAQ,UACN,oBAAoB,OAAO,8DAA8D;AAC7F,CAAC,CAAC,CAAC,KACD,OAAO,OAAO,eACZ,OAAO,WAAW,0CAA0C,YAAY,CAAC,CAAC,KACxE,OAAO,WACT,CACF,CACF;AAcF,MAAM,2BACJ,YACyC;CACzC,IAAI;EACF,MAAM,UAAU,QAAQ,SAAS,wBAAwB,QAAQ,QAAQ,QAAQ;EACjF,MAAM,iBAAiB,kBAAkB,OAAO;EAEhD,OAAO;GACL;GACA,aAAa,eAAe,cAAc;EAC5C;CACF,QAAQ;EACN;CACF;AACF;AAEA,MAAM,kBAAkB,UAA0B;CAChD,IAAI,QAAQ;CAEZ,KAAK,MAAM,aAAa,OAAO;EAC7B,MAAM,YAAY,UAAU,YAAY,CAAC,KAAK;EAE9C,SAAS,aAAa,MAAO,IAAI,aAAa,OAAQ,IAAI,aAAa,QAAS,IAAI;CACtF;CAEA,OAAO;AACT;;AAmBA,MAAM,yCAAyB,IAAI,IAAI,CAAC,SAAS,CAAC;AASlD,MAAM,eACJ,SACA,UAEA,OAAO,GAAG,mCAAmC,CAAC,CAAC,WAAW,SAA+B;CACvF,IAAI,QAAQ,QAAQ,SAAS,mBAC3B,OAAO,OAAO,6BAA6B,KAAK;EAC9C,gBAAgB;EAChB,SAAS;EACT,SACE;CACJ,CAAC;CAEH,MAAM,cAAc,eAAe,QAAQ,MAAM;CAEjD,IAAI,cAAc,QAAQ,OAAO,gBAC/B,OAAO,OAAO,gBAAgB,KAAK;EACjC,gBAAgB;EAChB,QAAQ;EACR,SAAS,aAAa,YAAY,6BAA6B,QAAQ,OAAO;CAChF,CAAC;CAEH,KAAK,MAAM,aAAa,QAAQ,YAC9B,IAAI,uBAAuB,IAAI,UAAU,IAAI,GAC3C,OAAO,OAAO,6BAA6B,KAAK;EAC9C,gBAAgB;EAChB,SAAS;EACT,SAAS,aAAa,UAAU,KAAK;CACvC,CAAC;CAGL,MAAM,OAAO,OAAO;CAIpB,MAAM,YAAY,MAAM,yBAAyB;CACjD,MAAM,eAAe,YAAY,SAAS,cAAc,QAAQ,OAAO,WAAW;CAElF,MAAM,8BAAiD;EACrD,MAAM,MAAM,MAAM,yBAAyB;EAE3C,OAAO,SAAS,MAAM,eAAe,MAAM,eAAe,MAAM,EAAE;CACpE;CAEA,IAAI,kBAAkB;CACtB,IAAI,WAAW;CACf,MAAM,kBAAyC,CAAC;CAChD,IAAI;CAEJ,MAAM,YAAY,UAAmC;EACnD,IAAI,gBAAgB,KAAA,GAAW,cAAc;CAC/C;CAEA,MAAM,yBAAyB,WAAwB;EACrD,KAAK,MAAM,UAAU,gBAAgB,OAAO,CAAC,GAC3C,OAAO,OAAO,MAAM;CAExB;CAEA,MAAM,QAAQ,OAAO,MAAM,UAAoB;CAE/C,MAAM,sBACJ,QACA,YAEA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,qBAAqB,OAAO;EAE5C,IAAI,OAAO,OAAO,OAAO,GAAG;GAC1B,MAAM,QAAQ,2BAA2B,KAAK;IAC5C,gBAAgB;IAChB,SAAS;GACX,CAAC;GAED,SAAS,KAAK;GAEd,OAAO,OAAO;EAChB;EACA,MAAM,UAAU,wBAAwB,QAAQ,KAAK;EAErD,IAAI,YAAY,KAAA,KAAa,QAAQ,cAAc,QAAQ,OAAO,wBAAwB;GACxF,MAAM,QAAQ,qBAAqB,KAAK;IACtC,gBAAgB;IAChB,SAAS;IACT,OAAO,QAAQ,OAAO;IACtB,UAAU,SAAS,eAAe;IAClC,MAAM,CAAC;GACT,CAAC;GAED,SAAS,KAAK;GAEd,OAAO,OAAO;EAChB;EACA,MAAM,oBAAoB,kBAAkB,QAAQ,cAAc;EAElE,IAAI,OAAO,OAAO,iBAAiB,GAAG;GACpC,MAAM,QAAQ,2BAA2B,KAAK;IAC5C,gBAAgB;IAChB,SAAS;GACX,CAAC;GAED,SAAS,KAAK;GAEd,OAAO,OAAO;EAChB;EACA,OAAO,QACL,QAAQ,MAAM,SAAS,wBACnB;GAAE,MAAM;GAAuB,OAAO,kBAAkB;EAAM,IAC9D;GAAE,MAAM;GAAuB,OAAO,kBAAkB;EAAM,CACpE;CACF,CAAC;CAKH,MAAM,iBAAiB,OAAO,IAAI,aAAa;EAC7C,OAAO,MAAM;GACX,MAAM,OAAO,OAAO,MAAM,KAAK,KAAK;GAEpC,IAAI,KAAK,SAAS,SAAS;IACzB,MAAM,QAAQ,uBAAuB,KAAK;KACxC,gBAAgB;KAChB,OAAO,QAAQ,OAAO;KACtB,MAAM,CAAC;IACT,CAAC;IAED,SAAS,KAAK;IAEd,OAAO,OAAO;GAChB;GACA,MAAM,SAAS,KAAK;GAEpB,OAAO,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,KAC5B,OAAO,cAAc;IACnB,UAAU,sBAAsB;IAChC,cAAc;KACZ,MAAM,QAAQ,0BAA0B,KAAK;MAC3C,gBAAgB;MAChB,MAAM;MACN,aAAa,QAAQ,OAAO;MAC5B,MAAM,CAAC;KACT,CAAC;KAED,SAAS,KAAK;KAEd,OAAO;IACT;GACF,CAAC,GACD,OAAO,SAAS,YAAY,mBAAmB,QAAQ,OAAO,CAAC,GAC/D,OAAO,eACL,OAAO,WAAW,OAAO,uBAAO,IAAI,MAAM,4BAA4B,CAAC,CAAC,CAC1E,GACA,OAAO,kBACL,OAAO,WAAW,OAAO,uBAAO,IAAI,MAAM,2BAA2B,CAAC,CAAC,CACzE,CACF;EACF;CACF,CAAC;CAED,MAAM,cAAc,QAAQ,OAAO,0BAA0B;CAE7D,MAAM,SAAS,OAAO,OAAO,IAC3B,MAAM,KAAK,EAAE,QAAQ,YAAY,SAAS,cAAc,GACxD;EAAE;EAAa,SAAS;CAAK,CAC/B,CAAC,CAAC,KAAK,OAAO,QAAQ,OAAO,KAAK,GAAG,OAAO,UAAU;CAEtD,MAAM,YAAY,aAAwC;EACxD,IAAI,CAAC,UACH,OAAO,QAAQ,uBAAO,IAAI,MAAM,2BAA2B,CAAC;EAE9D,mBAAmB;EACnB,IAAI,kBAAkB,QAAQ,OAAO,cAAc;GACjD,MAAM,QAAQ,uBAAuB,KAAK;IACxC,gBAAgB;IAChB,OAAO,QAAQ,OAAO;IACtB,MAAM,CAAC;GACT,CAAC;GAED,SAAS,KAAK;GACd,MAAM,YAAY,OAAO,EAAE,MAAM,QAAQ,CAAC;GAE1C,OAAO,QAAQ,uBAAO,IAAI,MAAM,0BAA0B,CAAC;EAC7D;EACA,MAAM,UAAU,eAAe,QAAQ;EAEvC,IAAI,OAAO,OAAO,OAAO,GACvB,OAAO,QAAQ,uBAAO,IAAI,UAAU,+CAA+C,CAAC;EAGtF,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,MAAM,SAAS;IAAE,MAAM,QAAQ;IAAO;IAAS;GAAO;GAEtD,gBAAgB,KAAK,MAAM;GAC3B,MAAM,YAAY,OAAO;IAAE,MAAM;IAAQ;GAAO,CAAC;EACnD,CAAC;CACH;CAEA,MAAM,iBAAiB,OAAO,WAAW;EACvC,WAAW;EACX,sCAAsB,IAAI,MAAM,2BAA2B,CAAC;CAC9D,CAAC;CAED,OAAO,OAAO,mBAAmB,eAAe,KAAK,OAAO,QAAQ,MAAM,UAAU,MAAM,CAAC,CAAC,CAAC;CAM7F,MAAM,aAAqC;EACzC,mBAAmB,QAAQ,qBAAqB;EAChD,YAAY;EACZ,SAAS;GACP,cAAc;GACd,cAAc,qBAAqB,QAAQ,OAAO;EACpD;EACA,KAAK,EACH,gBAAgB,wBAAwB;GACtC,YAAY,QAAQ,WAAW,KAAK,eAAe;IACjD,MAAM,UAAU;IAChB,SAAS,UAAU;GACrB,EAAE;GACF,QAAQ;IACN,aAAa,QAAQ,OAAO;IAC5B,gBAAgB,QAAQ,OAAO;IAC/B,cAAc,QAAQ,OAAO;IAC7B,0BAA0B,QAAQ,OAAO;GAC3C;EACF,CAAC,EACH;EACA,gBAAgB;EAChB,GAAI,QAAQ,OAAO,cAAc,KAAA,IAC7B,CAAC,IACD,EACE,QAAQ;GACN,OAAO,QAAQ,OAAO;GACtB,aAAa,QAAQ,OAAO,eAAe;EAC7C,EACF;CACN;CAEA,MAAM,SAAS,OAAO,OAAO,eAC3B,OAAO,IAAI;EACT,WAAW,QAAQ,OAAO,KAAK,UAAU;EACzC,QAAQ,UAAU;GAChB,MAAM,OAAO,iBAAiB,OAAO,+CAA+C;GAKpF,IAAI,yCAAyC,KAAK,IAAI,GACpD,OAAO,gBAAgB,KAAK;IAC1B,gBAAgB;IAChB,QAAQ;IACR,SAAS,KAAK,MAAM,GAAG,GAAK;GAC9B,CAAC;GAGH,OAAO,uBAAuB,KAAK;IACjC,gBAAgB;IAChB,SAAS,wCAAwC,OAAO,MAAM,GAAG,GAAK;IACtE;GACF,CAAC;EACH;CACF,CAAC,GACD,gBACF;CAEA,MAAM,aAAa,OAAO,OAAO,eAC/B,OAAO,IAAI;EACT,WAAW,OAAO,cAAyC;EAC3D,QAAQ,UAAU,sBAAsB,OAAO,QAAQ,OAAO,WAAW;CAC3E,CAAC,GACD,gBACF;CAEA,MAAM,MAAM,OAAO,WAAW;EAC5B,WAAW,WAAW,IAAI,IAAI,uBAAuB,QAAQ,CAAC;EAC9D,QAAQ,UAAU,sBAAsB,OAAO,QAAQ,OAAO,WAAW;CAC3E,CAAC;CAED,MAAM,OAAO,OAAO,OAAO,UACzB,IAAI,KACF,OAAO,cAAc;EACnB,UAAU,sBAAsB;EAChC,cACE,0BAA0B,KAAK;GAC7B,gBAAgB;GAChB,MAAM;GACN,aAAa,QAAQ,OAAO;GAC5B,MAAM,CAAC;EACT,CAAC;CACL,CAAC,CACH,GACA,MAAM,KAAK,MAAM,CACnB,CAAC,CAAC,KAAK,OAAO,IAAI;CAElB,OAAO;CACP,OAAO,MAAM,UAAU,MAAM;CAC7B,IAAI,gBAAgB,KAAA,GAClB,OAAO,OAAO;CAEhB,IAAI,KAAK,UAAU,IAAI,GACrB,OAAO,OAAO,OAAO,UAAU,KAAK,KAAK;CAE3C,MAAM,MAAM,KAAK;CACjB,MAAM,aAAa,MAAM,yBAAyB;CAElD,MAAM,UAAU,qBAAqB,GAAG;CAExC,IAAI,OAAO,OAAO,OAAO,GACvB,OAAO,OAAO,2BAA2B,KAAK;EAC5C,gBAAgB;EAChB,SAAS;CACX,CAAC;CAEH,QAAQ,QAAQ,MAAM,MAAtB;EACE,KAAK,aACH,OAAO,oBAAoB,KAAK;GAC9B,gBAAgB;GAChB,OAAO,QAAQ,MAAM;GACrB,MAAM,QAAQ,MAAM;GACpB,aAAa,yBAAyB,KAAK;IACzC,UAAU,SAAS,MAAM,aAAa,YAAY,aAAa,YAAY,EAAE;IAC7E,WAAW,QAAQ,MAAM;IACzB,UAAU,QAAQ,MAAM;IACxB,aAAa,QAAQ,MAAM;GAC7B,CAAC;EACH,CAAC;EAEH,KAAK,yBACH,OAAO,OAAO,gBAAgB,KAAK;GACjC,gBAAgB;GAChB,QAAQ;GACR,SAAS,sCAAsC,QAAQ,MAAM,OAAO;EACtE,CAAC;EAEH,KAAK,kBACH,OAAO,OAAO,uBAAuB,KAAK;GACxC,gBAAgB;GAChB,QAAQ,QAAQ,MAAM;GACtB,QAAQ,QAAQ,MAAM;GACtB,SAAS,QAAQ,MAAM,QAAQ,MAAM,GAAG,GAAK;GAC7C,MAAM,QAAQ,MAAM;EACtB,CAAC;EAEH,KAAK,aACH,OAAO,OAAO,qBAAqB,KAAK;GACtC,gBAAgB;GAChB,SAAS;GACT,OAAO,QAAQ,OAAO;GACtB,UAAU,QAAQ,MAAM;GACxB,MAAM,QAAQ,MAAM;EACtB,CAAC;EAEH,KAAK,kBACH,OAAO,OAAO,qBAAqB,KAAK;GACtC,gBAAgB;GAChB,SAAS;GACT,OAAO,QAAQ,OAAO;GACtB,UAAU,QAAQ,MAAM;GACxB,MAAM,QAAQ,MAAM;EACtB,CAAC;EAEH,KAAK,gBACH,OAAO,OAAO,qBAAqB,KAAK;GACtC,gBAAgB;GAChB,SAAS;GACT,OAAO,QAAQ,OAAO;GACtB,UAAU,QAAQ,MAAM;GACxB,MAAM,QAAQ,MAAM;EACtB,CAAC;EAEH,KAAK,mBACH,OAAO,OAAO,uBAAuB,KAAK;GACxC,gBAAgB;GAChB,OAAO,QAAQ,OAAO;GACtB,MAAM,QAAQ,MAAM;EACtB,CAAC;EAEH,KAAK,YACH,OAAO,OAAO,2BAA2B,KAAK;GAC5C,gBAAgB;GAChB,SAAS,QAAQ,MAAM,QAAQ,MAAM,GAAG,GAAK;EAC/C,CAAC;CAEL;AACF,CAAC;;;;;;AAOH,MAAM,yBACJ,OACA,gBAKqB;CACrB,MAAM,OAAO,oBAAoB,OAAO,iCAAiC;CASzE,IAAI,yCAAyC,KAAK,IAAI,GACpD,OAAO,gBAAgB,KAAK;EAC1B,gBAAgB;EAChB,QAAQ;EACR,SAAS,KAAK,MAAM,GAAG,GAAK;CAC9B,CAAC;CAEH,IAAI,OAAO,KAAK,IAAI,GAClB,OAAO,0BAA0B,KAAK;EACpC,gBAAgB;EAChB,MAAM;EACN;EACA,MAAM,CAAC;CACT,CAAC;CAEH,IAAI,0BAA0B,KAAK,IAAI,GACrC,OAAO,uBAAuB,KAAK;EACjC,gBAAgB;EAChB,SAAS,KAAK,MAAM,GAAG,GAAK;EAC5B;CACF,CAAC;CAGH,OAAO,4BAA4B,KAAK;EACtC,gBAAgB;EAChB,SAAS,KAAK,MAAM,GAAG,GAAK;CAC9B,CAAC;AACH;;AAGA,MAAa,kCACX,YAEA,MAAM,OACJ,cACA,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO,MAAM;CAE3B,OAAO,aAAa,GAAG,EAAE,SAAS,YAAY,SAAS,KAAK,EAAE,CAAC;AACjE,CAAC,CACH;;AAGF,MAAa,qBAAqB;;;;;;AAMhC,QACE,YACA,YAIA,WAAW,SAAS,KAClB,MAAM,QAAQ,QAAQ,QAAQ,GAC9B,MAAM,QAAQ,+BAA+B,OAAO,CAAC,CACvD,EACJ"}
+{"version":3,"file":"CloudflareCodeMode.mjs","names":[],"sources":["../src/CloudflareCodeMode.ts"],"sourcesContent":["import {\n  CodeExecutionHost,\n  CodeExecutionResourceUse,\n  CodeExecutionResult,\n  CodeExecutionTimeoutError,\n  CodeExecutor,\n  CodeExecutorStartError,\n  CodeExecutorTerminatedError,\n  CodeExecutorUnsupportedError,\n  CodeExecutionProtocolError,\n  CodeHostCall,\n  CodeHostCallLimitError,\n  CodeHostCallResult,\n  CodeOutputLimitError,\n  CodeProgramFailedError,\n  CodeSourceError,\n  type CodeExecutorExecute,\n  type CodeExecutionRequest,\n} from \"@yielded/agent/code-executor\";\nimport { SandboxImplementation } from \"@yielded/agent/sandbox\";\nimport { RpcTarget } from \"cloudflare:workers\";\nimport { Clock, Duration, Effect, Exit, Fiber, Layer, Option, Queue, Schema } from \"effect\";\n\nimport { safeCauseDiagnostic, safeCauseMessage } from \"./internal/boundary.ts\";\n\n/**\n * The Cloudflare Dynamic Worker `CodeExecutor` adapter (C4 of ADR-0017;\n * DEPLOY-011). Each pass loads one fresh Worker through the Worker Loader\n * with `globalOutbound: null`, so generated code has no ambient network,\n * bindings, or secrets; its only authority is the pass-scoped RPC target that\n * routes back into the owning event's `CodeExecutionHost` service. Platform\n * CPU limits stop synchronous runaway programs; the executor-owned wall-clock\n * deadline interrupts asynchronously suspended passes. Deployment class `E`\n * only: the adapter records no persistent state and a later pass may run in a\n * completely different isolate.\n */\nexport const dynamicWorkerImplementation = SandboxImplementation.make({\n  isolation: \"isolated\",\n  identity: \"cloudflare-dynamic-worker\",\n});\n\ninterface CodeModePassHost extends Rpc.RpcTargetBranded {\n  readonly call: (hostCall: unknown) => Promise<unknown>;\n}\n\ninterface CodeModeHarnessEntrypoint extends Rpc.WorkerEntrypointBranded {\n  readonly run: (host: CodeModePassHost) => Promise<unknown>;\n}\n\n/**\n * One object-capability endpoint for one execution pass. Workers RPC invokes\n * the target in the request context where it was created, so the native\n * Promise returned by `dispatch` and the Effect fiber that settles it share\n * one I/O owner. Passing the target as `run()`'s argument also scopes the\n * remote stub to that RPC call; no request state lives at module scope.\n */\nclass CodeModePassHostTarget extends RpcTarget implements CodeModePassHost {\n  readonly #dispatch: (hostCall: unknown) => Promise<unknown>;\n\n  constructor(dispatch: (hostCall: unknown) => Promise<unknown>) {\n    super();\n    this.#dispatch = dispatch;\n  }\n\n  call(hostCall: unknown): Promise<unknown> {\n    return this.#dispatch(hostCall);\n  }\n}\n\n/**\n * The fixed harness loaded as the dynamic worker's main module. The generated\n * source becomes `program.mjs` (`export default (<expression>);`) — a module,\n * never `eval`. The harness installs namespace globals and a bounded console,\n * imports the program, invokes it exactly once, and returns one envelope the\n * host validates through Effect Schema.\n */\nconst HARNESS_MODULE = String.raw`\nimport { WorkerEntrypoint } from \"cloudflare:workers\";\nimport programDefault from \"./program.js\";\n\nconst encoder = new TextEncoder();\nconst utf8 = (text) => encoder.encode(text).byteLength;\nconst safeText = (value) => {\n  try {\n    if (value instanceof Error) return (value.name + \": \" + value.message).slice(0, 4000);\n    if (typeof value === \"string\") return value.slice(0, 4000);\n    const encoded = JSON.stringify(value);\n    return (encoded === undefined ? String(value) : encoded).slice(0, 4000);\n  } catch {\n    return \"[unserializable value]\";\n  }\n};\nconst safeJson = (value) => {\n  try {\n    const encoded = JSON.stringify(value);\n    if (encoded !== undefined && encoded.length <= 4000) return JSON.parse(encoded);\n  } catch {}\n  return safeText(value);\n};\n\nexport default class CodeModeHarness extends WorkerEntrypoint {\n  async run(host) {\n    const config = this.env.CODE_MODE_PASS;\n    const limits = config.limits;\n    const logs = [];\n    let logBytes = 0;\n    let fatal;\n    const boundedLogs = () => logs.slice(0, 4096);\n    const write = (...values) => {\n      const joined = values.map(safeText).join(\" \");\n      const line = joined.length > 16000 ? joined.slice(0, 15999) + \"…\" : joined;\n      const bytes = utf8(line);\n      if (logs.length >= 4096 || logBytes + bytes > limits.maxLogBytes) {\n        fatal = fatal ?? { _tag: \"log-limit\", observed: logBytes + bytes, logs: boundedLogs() };\n        throw new Error(\"code-mode log limit exceeded\");\n      }\n      logs.push(line);\n      logBytes += bytes;\n    };\n    globalThis.console = { log: write, info: write, warn: write, error: write, debug: write };\n\n    let hostCalls = 0;\n    const makeMethod = (namespace, method) => async (argument) => {\n      hostCalls += 1;\n      if (hostCalls > limits.maxHostCalls) {\n        fatal = fatal ?? { _tag: \"host-call-limit\", logs: boundedLogs() };\n        throw new Error(\"code-mode host-call limit exceeded\");\n      }\n      let argText;\n      try {\n        argText = JSON.stringify(argument);\n      } catch {}\n      if (argText === undefined || utf8(argText) > limits.maxHostCallArgumentBytes) {\n        fatal = fatal ?? {\n          _tag: \"argument-limit\",\n          observed: argText === undefined ? 0 : utf8(argText),\n          logs: boundedLogs(),\n        };\n        throw new Error(\"code-mode host-call argument limit exceeded\");\n      }\n      const outcome = await host.call({\n        namespace,\n        method,\n        argument: JSON.parse(argText),\n      });\n      if (outcome !== null && typeof outcome === \"object\" && outcome._tag === \"CodeHostCallSuccess\") {\n        return outcome.value;\n      }\n      if (outcome !== null && typeof outcome === \"object\" && outcome._tag === \"CodeHostCallFailure\") {\n        throw outcome.error;\n      }\n      fatal = fatal ?? { _tag: \"protocol\", message: \"host returned an unrecognized outcome\" };\n      throw new Error(\"code-mode host protocol violation\");\n    };\n    for (const namespace of config.namespaces) {\n      const methods = {};\n      for (const method of namespace.methods) {\n        methods[method] = makeMethod(namespace.name, method);\n      }\n      globalThis[namespace.name] = methods;\n    }\n\n    // program.js is imported statically at the top of this module, so a\n    // syntactically invalid program fails the whole harness at load (mapped\n    // to a source error by the host). Using a static import keeps this module\n    // free of dynamic-import expressions, which single-script Miniflare hosts\n    // reject. The isolation boundary does NOT depend on the ordering of this\n    // import versus the console/namespace shims installed below: the loaded\n    // Worker has globalOutbound: null and no bindings, secrets, or env from\n    // the Worker Loader config BEFORE any module in the graph evaluates, so\n    // module-level program code has no ambient authority regardless. The\n    // shims below are usability wrappers (bounded console, namespace globals),\n    // and the accepted program is a single async-function expression whose\n    // body runs only when invoked here — after the shims exist.\n    const program = programDefault;\n    if (typeof program !== \"function\") {\n      return { _tag: \"source-not-a-function\", actual: typeof program };\n    }\n    try {\n      const value = await program();\n      if (fatal !== undefined) return fatal;\n      let text;\n      try {\n        text = JSON.stringify(value);\n      } catch {}\n      if (text === undefined) {\n        return {\n          _tag: \"program-failed\",\n          reason: \"non-json-result\",\n          thrown: null,\n          message: \"The program must return a JSON value\",\n          logs: boundedLogs(),\n        };\n      }\n      const resultBytes = utf8(text);\n      if (resultBytes > limits.maxResultBytes) {\n        return { _tag: \"result-limit\", observed: resultBytes, logs: boundedLogs() };\n      }\n      return {\n        _tag: \"completed\",\n        value: JSON.parse(text),\n        logs: boundedLogs(),\n        hostCalls,\n        logBytes,\n        resultBytes,\n      };\n    } catch (cause) {\n      if (fatal !== undefined) return fatal;\n      return {\n        _tag: \"program-failed\",\n        reason: cause instanceof Error ? \"threw\" : \"rejected\",\n        thrown: safeJson(cause),\n        message: safeText(cause),\n        logs: boundedLogs(),\n      };\n    }\n  }\n}\n`;\n\nconst BoundedLogs = Schema.Array(Schema.String.check(Schema.isMaxLength(16 * 1024))).check(\n  Schema.isMaxLength(4_096),\n);\n\nconst HarnessCompleted = Schema.TaggedStruct(\"completed\", {\n  value: Schema.Json,\n  logs: BoundedLogs,\n  hostCalls: Schema.Natural,\n  logBytes: Schema.Natural,\n  resultBytes: Schema.Natural,\n});\n\nconst HarnessNotAFunction = Schema.TaggedStruct(\"source-not-a-function\", {\n  actual: Schema.String,\n});\n\nconst HarnessProgramFailed = Schema.TaggedStruct(\"program-failed\", {\n  reason: Schema.Literals([\"threw\", \"rejected\", \"non-json-result\"]),\n  thrown: Schema.Json,\n  message: Schema.String,\n  logs: BoundedLogs,\n});\n\nconst HarnessLogLimit = Schema.TaggedStruct(\"log-limit\", {\n  observed: Schema.Natural,\n  logs: BoundedLogs,\n});\n\nconst HarnessArgumentLimit = Schema.TaggedStruct(\"argument-limit\", {\n  observed: Schema.Natural,\n  logs: BoundedLogs,\n});\n\nconst HarnessResultLimit = Schema.TaggedStruct(\"result-limit\", {\n  observed: Schema.Natural,\n  logs: BoundedLogs,\n});\n\nconst HarnessHostCallLimit = Schema.TaggedStruct(\"host-call-limit\", {\n  logs: BoundedLogs,\n});\n\nconst HarnessProtocol = Schema.TaggedStruct(\"protocol\", {\n  message: Schema.String,\n});\n\nconst HarnessOutcome = Schema.Union([\n  HarnessCompleted,\n  HarnessNotAFunction,\n  HarnessProgramFailed,\n  HarnessLogLimit,\n  HarnessArgumentLimit,\n  HarnessResultLimit,\n  HarnessHostCallLimit,\n  HarnessProtocol,\n]);\n\nconst HarnessPassConfig = Schema.Struct({\n  namespaces: Schema.Array(\n    Schema.Struct({\n      name: Schema.NonEmptyString,\n      methods: Schema.Array(Schema.NonEmptyString).check(Schema.isMaxLength(64)),\n    }),\n  ).check(Schema.isMaxLength(32)),\n  limits: Schema.Struct({\n    maxLogBytes: Schema.Natural,\n    maxResultBytes: Schema.Natural,\n    maxHostCalls: Schema.Natural,\n    maxHostCallArgumentBytes: Schema.Natural,\n  }),\n});\n\nconst encodeHarnessPassConfig = Schema.encodeSync(HarnessPassConfig);\nconst encodeJsonPayload = Schema.encodeSync(Schema.fromJsonString(Schema.Json));\nconst decodeJsonPayload = Schema.decodeUnknownOption(Schema.fromJsonString(Schema.Json));\n\nconst decodeHarnessOutcome = (value: unknown) => {\n  try {\n    return Schema.decodeUnknownOption(HarnessOutcome)(value);\n  } catch {\n    return Option.none<typeof HarnessOutcome.Type>();\n  }\n};\n\nconst decodeHostCall = (value: unknown) => {\n  try {\n    return Schema.decodeUnknownOption(CodeHostCall)(value);\n  } catch {\n    return Option.none<CodeHostCall>();\n  }\n};\n\nconst decodeHostCallResult = (value: unknown) => {\n  try {\n    return Schema.decodeUnknownOption(CodeHostCallResult)(value);\n  } catch {\n    return Option.none<CodeHostCallResult>();\n  }\n};\n\n/** Dispose a Cloudflare RPC handle when the runtime supplies its untyped disposal hook. @internal */\nexport const disposeRpcHandle = (handle: unknown): Effect.Effect<void> =>\n  Effect.try({\n    try: () => {\n      if ((typeof handle !== \"object\" && typeof handle !== \"function\") || handle === null) return;\n      if (!(Symbol.dispose in handle)) return;\n      const dispose = Reflect.get(handle, Symbol.dispose);\n\n      if (typeof dispose === \"function\") {\n        Reflect.apply(dispose, handle, []);\n      }\n    },\n    catch: (cause) =>\n      safeCauseDiagnostic(cause, \"The Cloudflare RPC disposal hook failed without a diagnostic\"),\n  }).pipe(\n    Effect.catch((diagnostic) =>\n      Effect.logWarning(`Cloudflare RPC handle disposal failed: ${diagnostic}`).pipe(\n        Effect.ignoreCause,\n      ),\n    ),\n  );\n\n/**\n * Project a host outcome to the plain JSON envelope the harness reads. A\n * `CodeExecutionHost` may return either real `CodeHostCallResult` instances\n * (the substitute and conformance kit) or plain-object equivalents (the Code\n * Mode capability's broker route), so this reads the shared fields rather than\n * `Schema.encodeSync`, which would reject a plain object.\n */\ninterface EncodedHostResultPayload {\n  readonly encodedPayload: string;\n  readonly resultBytes: number;\n}\n\nconst encodeHostResultPayload = (\n  outcome: CodeHostCallResult,\n): EncodedHostResultPayload | undefined => {\n  try {\n    const payload = outcome._tag === \"CodeHostCallSuccess\" ? outcome.value : outcome.error;\n    const encodedPayload = encodeJsonPayload(payload);\n\n    return {\n      encodedPayload,\n      resultBytes: utf8ByteLength(encodedPayload),\n    };\n  } catch {\n    return undefined;\n  }\n};\n\nconst utf8ByteLength = (value: string): number => {\n  let total = 0;\n\n  for (const character of value) {\n    const codePoint = character.codePointAt(0) ?? 0;\n\n    total += codePoint <= 0x7f ? 1 : codePoint <= 0x7ff ? 2 : codePoint <= 0xffff ? 3 : 4;\n  }\n\n  return total;\n};\n\ninterface QueuedHostCall {\n  readonly call: CodeHostCall;\n  readonly resolve: (value: unknown) => void;\n  readonly reject: (reason: unknown) => void;\n}\n\ntype HostWork =\n  | { readonly _tag: \"call\"; readonly queued: QueuedHostCall }\n  | { readonly _tag: \"limit\" };\n\ntype HostDispatchError =\n  | CodeExecutionTimeoutError\n  | CodeOutputLimitError\n  | CodeExecutionProtocolError\n  | CodeHostCallLimitError;\n\n/** Reserved global names the harness owns inside the dynamic worker. */\nconst reservedHarnessGlobals = new Set([\"console\"]);\n\nexport interface DynamicWorkerCodeExecutorOptions {\n  /** The `worker_loader` binding. */\n  readonly loader: WorkerLoader;\n  /** Compatibility date for dynamic workers; defaults to `2025-05-01`. */\n  readonly compatibilityDate?: string | undefined;\n}\n\nconst makeExecute = (\n  options: DynamicWorkerCodeExecutorOptions,\n  clock: Clock.Clock,\n): CodeExecutorExecute =>\n  Effect.fnUntraced(function* (request: CodeExecutionRequest) {\n    if (request.network._tag !== \"NetworkDisabled\") {\n      return yield* CodeExecutorUnsupportedError.make({\n        implementation: dynamicWorkerImplementation,\n        feature: \"network\",\n        message:\n          \"The Dynamic Worker executor denies all egress with globalOutbound: null; an allowlist is not supported in the first slice\",\n      });\n    }\n    const sourceBytes = utf8ByteLength(request.source);\n\n    if (sourceBytes > request.limits.maxSourceBytes) {\n      return yield* CodeSourceError.make({\n        implementation: dynamicWorkerImplementation,\n        reason: \"oversized\",\n        message: `Source is ${sourceBytes} bytes; the request allows ${request.limits.maxSourceBytes}`,\n      });\n    }\n    for (const namespace of request.namespaces) {\n      if (reservedHarnessGlobals.has(namespace.name)) {\n        return yield* CodeExecutorUnsupportedError.make({\n          implementation: dynamicWorkerImplementation,\n          feature: \"namespaces\",\n          message: `Namespace ${namespace.name} collides with a harness binding`,\n        });\n      }\n    }\n    const host = yield* CodeExecutionHost;\n\n    // This synchronous clock access is confined to callbacks that must compute a timeout\n    // immediately. The Clock service remains the authority, so tests and hosts can replace it.\n    const startedAt = clock.monotonicTimeNanosUnsafe();\n    const passDeadline = startedAt + Duration.toNanosUnsafe(request.limits.maxWallTime);\n\n    const remainingPassWallTime = (): Duration.Duration => {\n      const now = clock.monotonicTimeNanosUnsafe();\n\n      return Duration.nanos(passDeadline > now ? passDeadline - now : 0n);\n    };\n\n    let issuedHostCalls = 0;\n    let passOpen = true;\n    const queuedHostCalls: Array<QueuedHostCall> = [];\n    let passFailure: HostDispatchError | undefined;\n\n    const failPass = (error: HostDispatchError): void => {\n      if (passFailure === undefined) passFailure = error;\n    };\n\n    const rejectQueuedHostCalls = (reason: Error): void => {\n      for (const queued of queuedHostCalls.splice(0)) {\n        queued.reject(reason);\n      }\n    };\n\n    const queue = yield* Queue.unbounded<HostWork>();\n\n    const deliverHostOutcome = (\n      queued: QueuedHostCall,\n      outcome: CodeHostCallResult,\n    ): Effect.Effect<void, CodeExecutionProtocolError | CodeOutputLimitError> =>\n      Effect.gen(function* () {\n        const decoded = decodeHostCallResult(outcome);\n\n        if (Option.isNone(decoded)) {\n          const error = CodeExecutionProtocolError.make({\n            implementation: dynamicWorkerImplementation,\n            message: \"The execution host returned a value outside the CodeHostCallResult schema\",\n          });\n\n          failPass(error);\n\n          return yield* error;\n        }\n        const encoded = encodeHostResultPayload(decoded.value);\n\n        if (encoded === undefined || encoded.resultBytes > request.limits.maxHostCallResultBytes) {\n          const error = CodeOutputLimitError.make({\n            implementation: dynamicWorkerImplementation,\n            surface: \"host-call-result\",\n            limit: request.limits.maxHostCallResultBytes,\n            observed: encoded?.resultBytes ?? 0,\n            logs: [],\n          });\n\n          failPass(error);\n\n          return yield* error;\n        }\n        const normalizedPayload = decodeJsonPayload(encoded.encodedPayload);\n\n        if (Option.isNone(normalizedPayload)) {\n          const error = CodeExecutionProtocolError.make({\n            implementation: dynamicWorkerImplementation,\n            message: \"The execution host returned a result that could not cross the JSON boundary\",\n          });\n\n          failPass(error);\n\n          return yield* error;\n        }\n        queued.resolve(\n          decoded.value._tag === \"CodeHostCallSuccess\"\n            ? { _tag: \"CodeHostCallSuccess\", value: normalizedPayload.value }\n            : { _tag: \"CodeHostCallFailure\", error: normalizedPayload.value },\n        );\n      });\n\n    // Workers RPC into the loader isolate cannot settle on the fiber blocked\n    // in `entrypoint.run()`. A Scope-owned sibling fiber keeps that\n    // independence while inheriting the pass Context and dying with the Scope.\n    const serveHostCalls = Effect.gen(function* () {\n      while (true) {\n        const work = yield* Queue.take(queue);\n\n        if (work._tag === \"limit\") {\n          const error = CodeHostCallLimitError.make({\n            implementation: dynamicWorkerImplementation,\n            limit: request.limits.maxHostCalls,\n            logs: [],\n          });\n\n          failPass(error);\n\n          return yield* error;\n        }\n        const queued = work.queued;\n\n        yield* host.call(queued.call).pipe(\n          Effect.timeoutOrElse({\n            duration: remainingPassWallTime(),\n            orElse: () => {\n              const error = CodeExecutionTimeoutError.make({\n                implementation: dynamicWorkerImplementation,\n                kind: \"wall-clock\",\n                maxWallTime: request.limits.maxWallTime,\n                logs: [],\n              });\n\n              failPass(error);\n\n              return error;\n            },\n          }),\n          Effect.flatMap((outcome) => deliverHostOutcome(queued, outcome)),\n          Effect.tapError(() =>\n            Effect.sync(() => queued.reject(new Error(\"Code Mode host call failed\"))),\n          ),\n          Effect.onInterrupt(() =>\n            Effect.sync(() => queued.reject(new Error(\"Code Mode pass is closing\"))),\n          ),\n        );\n      }\n    });\n\n    const concurrency = request.limits.maxHostCallConcurrency ?? 4;\n\n    const server = yield* Effect.all(\n      Array.from({ length: concurrency }, () => serveHostCalls),\n      { concurrency, discard: true },\n    ).pipe(Effect.andThen(Effect.never), Effect.forkScoped);\n\n    const dispatch = (hostCall: unknown): Promise<unknown> => {\n      if (!passOpen) {\n        return Promise.reject(new Error(\"Code Mode pass is closing\"));\n      }\n      issuedHostCalls += 1;\n      if (issuedHostCalls > request.limits.maxHostCalls) {\n        const error = CodeHostCallLimitError.make({\n          implementation: dynamicWorkerImplementation,\n          limit: request.limits.maxHostCalls,\n          logs: [],\n        });\n\n        failPass(error);\n        Queue.offerUnsafe(queue, { _tag: \"limit\" });\n\n        return Promise.reject(new Error(\"host-call limit exceeded\"));\n      }\n      const decoded = decodeHostCall(hostCall);\n\n      if (Option.isNone(decoded)) {\n        return Promise.reject(new TypeError(\"host calls must match the CodeHostCall schema\"));\n      }\n\n      return new Promise((resolve, reject) => {\n        const queued = { call: decoded.value, resolve, reject };\n\n        queuedHostCalls.push(queued);\n        Queue.offerUnsafe(queue, { _tag: \"call\", queued });\n      });\n    };\n\n    const closeAdmission = Effect.sync(() => {\n      passOpen = false;\n      rejectQueuedHostCalls(new Error(\"Code Mode pass is closing\"));\n    });\n\n    yield* Effect.addFinalizer(() => closeAdmission.pipe(Effect.andThen(Fiber.interrupt(server))));\n\n    // No `allowExperimental`: the runtime only accepts it when the CALLING\n    // worker carries the `experimental` compatibility flag, which deployed\n    // consumers cannot set — the option would reject every pass in\n    // production. The harness needs no experimental runtime features.\n    const workerCode: WorkerLoaderWorkerCode = {\n      compatibilityDate: options.compatibilityDate ?? \"2025-05-01\",\n      mainModule: \"harness.js\",\n      modules: {\n        \"harness.js\": HARNESS_MODULE,\n        \"program.js\": `export default (\\n${request.source}\\n);`,\n      },\n      env: {\n        CODE_MODE_PASS: encodeHarnessPassConfig({\n          namespaces: request.namespaces.map((namespace) => ({\n            name: namespace.name,\n            methods: namespace.methods,\n          })),\n          limits: {\n            maxLogBytes: request.limits.maxLogBytes,\n            maxResultBytes: request.limits.maxResultBytes,\n            maxHostCalls: request.limits.maxHostCalls,\n            maxHostCallArgumentBytes: request.limits.maxHostCallArgumentBytes,\n          },\n        }),\n      },\n      globalOutbound: null,\n      ...(request.limits.cpuMillis === undefined\n        ? {}\n        : {\n            limits: {\n              cpuMs: request.limits.cpuMillis,\n              subRequests: request.limits.maxHostCalls + 8,\n            },\n          }),\n    };\n\n    const worker = yield* Effect.acquireRelease(\n      Effect.try({\n        try: () => options.loader.load(workerCode),\n        catch: (cause) => {\n          const text = safeCauseMessage(cause, \"The Worker Loader failed without a diagnostic\");\n\n          // Blame the program's source ONLY on a genuine compile diagnostic;\n          // any other load rejection is an infrastructure start failure, not\n          // the model's fault (see classifyWorkerFailure for the same split).\n          if (/syntaxerror|failed to (compile|parse)/i.test(text)) {\n            return CodeSourceError.make({\n              implementation: dynamicWorkerImplementation,\n              reason: \"invalid\",\n              message: text.slice(0, 8_000),\n            });\n          }\n\n          return CodeExecutorStartError.make({\n            implementation: dynamicWorkerImplementation,\n            message: `The Worker Loader rejected the pass: ${text}`.slice(0, 8_000),\n            cause,\n          });\n        },\n      }),\n      disposeRpcHandle,\n    );\n\n    const entrypoint = yield* Effect.acquireRelease(\n      Effect.try({\n        try: () => worker.getEntrypoint<CodeModeHarnessEntrypoint>(),\n        catch: (cause) => classifyWorkerFailure(cause, request.limits.maxWallTime),\n      }),\n      disposeRpcHandle,\n    );\n\n    const rpc = Effect.tryPromise({\n      try: () => entrypoint.run(new CodeModePassHostTarget(dispatch)),\n      catch: (cause) => classifyWorkerFailure(cause, request.limits.maxWallTime),\n    });\n\n    const exit = yield* Effect.raceFirst(\n      rpc.pipe(\n        Effect.timeoutOrElse({\n          duration: remainingPassWallTime(),\n          orElse: () =>\n            CodeExecutionTimeoutError.make({\n              implementation: dynamicWorkerImplementation,\n              kind: \"wall-clock\",\n              maxWallTime: request.limits.maxWallTime,\n              logs: [],\n            }),\n        }),\n      ),\n      Fiber.join(server),\n    ).pipe(Effect.exit);\n\n    yield* closeAdmission;\n    yield* Fiber.interrupt(server);\n    if (passFailure !== undefined) {\n      return yield* passFailure;\n    }\n    if (Exit.isFailure(exit)) {\n      return yield* Effect.failCause(exit.cause);\n    }\n    const raw = exit.value;\n    const finishedAt = clock.monotonicTimeNanosUnsafe();\n\n    const outcome = decodeHarnessOutcome(raw);\n\n    if (Option.isNone(outcome)) {\n      return yield* CodeExecutionProtocolError.make({\n        implementation: dynamicWorkerImplementation,\n        message: \"The dynamic worker returned a value outside the harness envelope schema\",\n      });\n    }\n    switch (outcome.value._tag) {\n      case \"completed\": {\n        return CodeExecutionResult.make({\n          implementation: dynamicWorkerImplementation,\n          value: outcome.value.value,\n          logs: outcome.value.logs,\n          resourceUse: CodeExecutionResourceUse.make({\n            wallTime: Duration.nanos(finishedAt > startedAt ? finishedAt - startedAt : 0n),\n            hostCalls: outcome.value.hostCalls,\n            logBytes: outcome.value.logBytes,\n            resultBytes: outcome.value.resultBytes,\n          }),\n        });\n      }\n      case \"source-not-a-function\": {\n        return yield* CodeSourceError.make({\n          implementation: dynamicWorkerImplementation,\n          reason: \"not-a-function\",\n          message: `The source expression evaluated to ${outcome.value.actual}; it must evaluate to one async function`,\n        });\n      }\n      case \"program-failed\": {\n        return yield* CodeProgramFailedError.make({\n          implementation: dynamicWorkerImplementation,\n          reason: outcome.value.reason,\n          thrown: outcome.value.thrown,\n          message: outcome.value.message.slice(0, 8_000),\n          logs: outcome.value.logs,\n        });\n      }\n      case \"log-limit\": {\n        return yield* CodeOutputLimitError.make({\n          implementation: dynamicWorkerImplementation,\n          surface: \"logs\",\n          limit: request.limits.maxLogBytes,\n          observed: outcome.value.observed,\n          logs: outcome.value.logs,\n        });\n      }\n      case \"argument-limit\": {\n        return yield* CodeOutputLimitError.make({\n          implementation: dynamicWorkerImplementation,\n          surface: \"host-call-argument\",\n          limit: request.limits.maxHostCallArgumentBytes,\n          observed: outcome.value.observed,\n          logs: outcome.value.logs,\n        });\n      }\n      case \"result-limit\": {\n        return yield* CodeOutputLimitError.make({\n          implementation: dynamicWorkerImplementation,\n          surface: \"result\",\n          limit: request.limits.maxResultBytes,\n          observed: outcome.value.observed,\n          logs: outcome.value.logs,\n        });\n      }\n      case \"host-call-limit\": {\n        return yield* CodeHostCallLimitError.make({\n          implementation: dynamicWorkerImplementation,\n          limit: request.limits.maxHostCalls,\n          logs: outcome.value.logs,\n        });\n      }\n      case \"protocol\": {\n        return yield* CodeExecutionProtocolError.make({\n          implementation: dynamicWorkerImplementation,\n          message: outcome.value.message.slice(0, 8_000),\n        });\n      }\n    }\n  });\n\n/**\n * Expected worker-level failures map into the typed union with bounded\n * diagnostics; anything unrecognized stays a start/termination error rather\n * than a fabricated program result.\n */\nconst classifyWorkerFailure = (\n  cause: unknown,\n  maxWallTime: Duration.Duration,\n):\n  | CodeExecutionTimeoutError\n  | CodeExecutorTerminatedError\n  | CodeExecutorStartError\n  | CodeSourceError => {\n  const text = safeCauseDiagnostic(cause, \"[unserializable worker failure]\");\n\n  // `WorkerLoader.load()` is lazy, so a module-compile error in the generated\n  // program surfaces here at first use. Blame the program's source ONLY on a\n  // genuine compile diagnostic (a `SyntaxError` or an explicit compile\n  // failure) — the fixed harness is valid, so the fault is in program.js. A\n  // bare \"failed to start Worker\" without a compile diagnostic is an\n  // infrastructure start failure, not the model's fault, so it must NOT be\n  // misclassified as a source error.\n  if (/syntaxerror|failed to (compile|parse)/i.test(text)) {\n    return CodeSourceError.make({\n      implementation: dynamicWorkerImplementation,\n      reason: \"invalid\",\n      message: text.slice(0, 8_000),\n    });\n  }\n  if (/cpu/i.test(text)) {\n    return CodeExecutionTimeoutError.make({\n      implementation: dynamicWorkerImplementation,\n      kind: \"cpu\",\n      maxWallTime,\n      logs: [],\n    });\n  }\n  if (/failed to start worker/i.test(text)) {\n    return CodeExecutorStartError.make({\n      implementation: dynamicWorkerImplementation,\n      message: text.slice(0, 8_000),\n      cause,\n    });\n  }\n\n  return CodeExecutorTerminatedError.make({\n    implementation: dynamicWorkerImplementation,\n    message: text.slice(0, 8_000),\n  });\n};\n\n/** Layer building the Dynamic Worker `CodeExecutor` from resolved bindings. */\nexport const dynamicWorkerCodeExecutorLayer = (\n  options: DynamicWorkerCodeExecutorOptions,\n): Layer.Layer<CodeExecutor> =>\n  Layer.effect(\n    CodeExecutor,\n    Effect.gen(function* () {\n      const clock = yield* Clock.Clock;\n\n      return CodeExecutor.of({ execute: makeExecute(options, clock) });\n    }),\n  );\n\n/** Assemble Code Mode handlers with the isolated Dynamic Worker executor. */\nexport const CloudflareCodeMode = {\n  /**\n   * Provide the selected tool handlers at construction, where Code Mode captures them.\n   * Their errors and remaining dependencies stay visible. The definition still owns the\n   * allowlist and limits; the runtime supplies the live Tool broker for each scoped pass.\n   */\n  layer: <A, E, R, Handlers, HandlerError, HandlerRequirements>(\n    definition: { readonly handlers: Layer.Layer<A, E, R> },\n    options: DynamicWorkerCodeExecutorOptions & {\n      readonly handlers: Layer.Layer<Handlers, HandlerError, HandlerRequirements>;\n    },\n  ) =>\n    definition.handlers.pipe(\n      Layer.provide(options.handlers),\n      Layer.provide(dynamicWorkerCodeExecutorLayer(options)),\n    ),\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAoCA,MAAa,8BAA8B,sBAAsB,KAAK;CACpE,WAAW;CACX,UAAU;AACZ,CAAC;;;;;;;;AAiBD,IAAM,yBAAN,cAAqC,UAAsC;CACzE;CAEA,YAAY,UAAmD;EAC7D,MAAM;EACN,KAAK,YAAY;CACnB;CAEA,KAAK,UAAqC;EACxC,OAAO,KAAK,UAAU,QAAQ;CAChC;AACF;;;;;;;;AASA,MAAM,iBAAiB,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgJjC,MAAM,cAAc,OAAO,MAAM,OAAO,OAAO,MAAM,OAAO,YAAY,KAAS,CAAC,CAAC,CAAC,CAAC,MACnF,OAAO,YAAY,IAAK,CAC1B;AAEA,MAAM,mBAAmB,OAAO,aAAa,aAAa;CACxD,OAAO,OAAO;CACd,MAAM;CACN,WAAW,OAAO;CAClB,UAAU,OAAO;CACjB,aAAa,OAAO;AACtB,CAAC;AAED,MAAM,sBAAsB,OAAO,aAAa,yBAAyB,EACvE,QAAQ,OAAO,OACjB,CAAC;AAED,MAAM,uBAAuB,OAAO,aAAa,kBAAkB;CACjE,QAAQ,OAAO,SAAS;EAAC;EAAS;EAAY;CAAiB,CAAC;CAChE,QAAQ,OAAO;CACf,SAAS,OAAO;CAChB,MAAM;AACR,CAAC;AAED,MAAM,kBAAkB,OAAO,aAAa,aAAa;CACvD,UAAU,OAAO;CACjB,MAAM;AACR,CAAC;AAED,MAAM,uBAAuB,OAAO,aAAa,kBAAkB;CACjE,UAAU,OAAO;CACjB,MAAM;AACR,CAAC;AAED,MAAM,qBAAqB,OAAO,aAAa,gBAAgB;CAC7D,UAAU,OAAO;CACjB,MAAM;AACR,CAAC;AAED,MAAM,uBAAuB,OAAO,aAAa,mBAAmB,EAClE,MAAM,YACR,CAAC;AAED,MAAM,kBAAkB,OAAO,aAAa,YAAY,EACtD,SAAS,OAAO,OAClB,CAAC;AAED,MAAM,iBAAiB,OAAO,MAAM;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,oBAAoB,OAAO,OAAO;CACtC,YAAY,OAAO,MACjB,OAAO,OAAO;EACZ,MAAM,OAAO;EACb,SAAS,OAAO,MAAM,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;CAC3E,CAAC,CACH,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;CAC9B,QAAQ,OAAO,OAAO;EACpB,aAAa,OAAO;EACpB,gBAAgB,OAAO;EACvB,cAAc,OAAO;EACrB,0BAA0B,OAAO;CACnC,CAAC;AACH,CAAC;AAED,MAAM,0BAA0B,OAAO,WAAW,iBAAiB;AACnE,MAAM,oBAAoB,OAAO,WAAW,OAAO,eAAe,OAAO,IAAI,CAAC;AAC9E,MAAM,oBAAoB,OAAO,oBAAoB,OAAO,eAAe,OAAO,IAAI,CAAC;AAEvF,MAAM,wBAAwB,UAAmB;CAC/C,IAAI;EACF,OAAO,OAAO,oBAAoB,cAAc,CAAC,CAAC,KAAK;CACzD,QAAQ;EACN,OAAO,OAAO,KAAiC;CACjD;AACF;AAEA,MAAM,kBAAkB,UAAmB;CACzC,IAAI;EACF,OAAO,OAAO,oBAAoB,YAAY,CAAC,CAAC,KAAK;CACvD,QAAQ;EACN,OAAO,OAAO,KAAmB;CACnC;AACF;AAEA,MAAM,wBAAwB,UAAmB;CAC/C,IAAI;EACF,OAAO,OAAO,oBAAoB,kBAAkB,CAAC,CAAC,KAAK;CAC7D,QAAQ;EACN,OAAO,OAAO,KAAyB;CACzC;AACF;;AAGA,MAAa,oBAAoB,WAC/B,OAAO,IAAI;CACT,WAAW;EACT,IAAK,OAAO,WAAW,YAAY,OAAO,WAAW,cAAe,WAAW,MAAM;EACrF,IAAI,EAAE,OAAO,WAAW,SAAS;EACjC,MAAM,UAAU,QAAQ,IAAI,QAAQ,OAAO,OAAO;EAElD,IAAI,OAAO,YAAY,YACrB,QAAQ,MAAM,SAAS,QAAQ,CAAC,CAAC;CAErC;CACA,QAAQ,UACN,oBAAoB,OAAO,8DAA8D;AAC7F,CAAC,CAAC,CAAC,KACD,OAAO,OAAO,eACZ,OAAO,WAAW,0CAA0C,YAAY,CAAC,CAAC,KACxE,OAAO,WACT,CACF,CACF;AAcF,MAAM,2BACJ,YACyC;CACzC,IAAI;EACF,MAAM,UAAU,QAAQ,SAAS,wBAAwB,QAAQ,QAAQ,QAAQ;EACjF,MAAM,iBAAiB,kBAAkB,OAAO;EAEhD,OAAO;GACL;GACA,aAAa,eAAe,cAAc;EAC5C;CACF,QAAQ;EACN;CACF;AACF;AAEA,MAAM,kBAAkB,UAA0B;CAChD,IAAI,QAAQ;CAEZ,KAAK,MAAM,aAAa,OAAO;EAC7B,MAAM,YAAY,UAAU,YAAY,CAAC,KAAK;EAE9C,SAAS,aAAa,MAAO,IAAI,aAAa,OAAQ,IAAI,aAAa,QAAS,IAAI;CACtF;CAEA,OAAO;AACT;;AAmBA,MAAM,yCAAyB,IAAI,IAAI,CAAC,SAAS,CAAC;AASlD,MAAM,eACJ,SACA,UAEA,OAAO,WAAW,WAAW,SAA+B;CAC1D,IAAI,QAAQ,QAAQ,SAAS,mBAC3B,OAAO,OAAO,6BAA6B,KAAK;EAC9C,gBAAgB;EAChB,SAAS;EACT,SACE;CACJ,CAAC;CAEH,MAAM,cAAc,eAAe,QAAQ,MAAM;CAEjD,IAAI,cAAc,QAAQ,OAAO,gBAC/B,OAAO,OAAO,gBAAgB,KAAK;EACjC,gBAAgB;EAChB,QAAQ;EACR,SAAS,aAAa,YAAY,6BAA6B,QAAQ,OAAO;CAChF,CAAC;CAEH,KAAK,MAAM,aAAa,QAAQ,YAC9B,IAAI,uBAAuB,IAAI,UAAU,IAAI,GAC3C,OAAO,OAAO,6BAA6B,KAAK;EAC9C,gBAAgB;EAChB,SAAS;EACT,SAAS,aAAa,UAAU,KAAK;CACvC,CAAC;CAGL,MAAM,OAAO,OAAO;CAIpB,MAAM,YAAY,MAAM,yBAAyB;CACjD,MAAM,eAAe,YAAY,SAAS,cAAc,QAAQ,OAAO,WAAW;CAElF,MAAM,8BAAiD;EACrD,MAAM,MAAM,MAAM,yBAAyB;EAE3C,OAAO,SAAS,MAAM,eAAe,MAAM,eAAe,MAAM,EAAE;CACpE;CAEA,IAAI,kBAAkB;CACtB,IAAI,WAAW;CACf,MAAM,kBAAyC,CAAC;CAChD,IAAI;CAEJ,MAAM,YAAY,UAAmC;EACnD,IAAI,gBAAgB,KAAA,GAAW,cAAc;CAC/C;CAEA,MAAM,yBAAyB,WAAwB;EACrD,KAAK,MAAM,UAAU,gBAAgB,OAAO,CAAC,GAC3C,OAAO,OAAO,MAAM;CAExB;CAEA,MAAM,QAAQ,OAAO,MAAM,UAAoB;CAE/C,MAAM,sBACJ,QACA,YAEA,OAAO,IAAI,aAAa;EACtB,MAAM,UAAU,qBAAqB,OAAO;EAE5C,IAAI,OAAO,OAAO,OAAO,GAAG;GAC1B,MAAM,QAAQ,2BAA2B,KAAK;IAC5C,gBAAgB;IAChB,SAAS;GACX,CAAC;GAED,SAAS,KAAK;GAEd,OAAO,OAAO;EAChB;EACA,MAAM,UAAU,wBAAwB,QAAQ,KAAK;EAErD,IAAI,YAAY,KAAA,KAAa,QAAQ,cAAc,QAAQ,OAAO,wBAAwB;GACxF,MAAM,QAAQ,qBAAqB,KAAK;IACtC,gBAAgB;IAChB,SAAS;IACT,OAAO,QAAQ,OAAO;IACtB,UAAU,SAAS,eAAe;IAClC,MAAM,CAAC;GACT,CAAC;GAED,SAAS,KAAK;GAEd,OAAO,OAAO;EAChB;EACA,MAAM,oBAAoB,kBAAkB,QAAQ,cAAc;EAElE,IAAI,OAAO,OAAO,iBAAiB,GAAG;GACpC,MAAM,QAAQ,2BAA2B,KAAK;IAC5C,gBAAgB;IAChB,SAAS;GACX,CAAC;GAED,SAAS,KAAK;GAEd,OAAO,OAAO;EAChB;EACA,OAAO,QACL,QAAQ,MAAM,SAAS,wBACnB;GAAE,MAAM;GAAuB,OAAO,kBAAkB;EAAM,IAC9D;GAAE,MAAM;GAAuB,OAAO,kBAAkB;EAAM,CACpE;CACF,CAAC;CAKH,MAAM,iBAAiB,OAAO,IAAI,aAAa;EAC7C,OAAO,MAAM;GACX,MAAM,OAAO,OAAO,MAAM,KAAK,KAAK;GAEpC,IAAI,KAAK,SAAS,SAAS;IACzB,MAAM,QAAQ,uBAAuB,KAAK;KACxC,gBAAgB;KAChB,OAAO,QAAQ,OAAO;KACtB,MAAM,CAAC;IACT,CAAC;IAED,SAAS,KAAK;IAEd,OAAO,OAAO;GAChB;GACA,MAAM,SAAS,KAAK;GAEpB,OAAO,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,KAC5B,OAAO,cAAc;IACnB,UAAU,sBAAsB;IAChC,cAAc;KACZ,MAAM,QAAQ,0BAA0B,KAAK;MAC3C,gBAAgB;MAChB,MAAM;MACN,aAAa,QAAQ,OAAO;MAC5B,MAAM,CAAC;KACT,CAAC;KAED,SAAS,KAAK;KAEd,OAAO;IACT;GACF,CAAC,GACD,OAAO,SAAS,YAAY,mBAAmB,QAAQ,OAAO,CAAC,GAC/D,OAAO,eACL,OAAO,WAAW,OAAO,uBAAO,IAAI,MAAM,4BAA4B,CAAC,CAAC,CAC1E,GACA,OAAO,kBACL,OAAO,WAAW,OAAO,uBAAO,IAAI,MAAM,2BAA2B,CAAC,CAAC,CACzE,CACF;EACF;CACF,CAAC;CAED,MAAM,cAAc,QAAQ,OAAO,0BAA0B;CAE7D,MAAM,SAAS,OAAO,OAAO,IAC3B,MAAM,KAAK,EAAE,QAAQ,YAAY,SAAS,cAAc,GACxD;EAAE;EAAa,SAAS;CAAK,CAC/B,CAAC,CAAC,KAAK,OAAO,QAAQ,OAAO,KAAK,GAAG,OAAO,UAAU;CAEtD,MAAM,YAAY,aAAwC;EACxD,IAAI,CAAC,UACH,OAAO,QAAQ,uBAAO,IAAI,MAAM,2BAA2B,CAAC;EAE9D,mBAAmB;EACnB,IAAI,kBAAkB,QAAQ,OAAO,cAAc;GACjD,MAAM,QAAQ,uBAAuB,KAAK;IACxC,gBAAgB;IAChB,OAAO,QAAQ,OAAO;IACtB,MAAM,CAAC;GACT,CAAC;GAED,SAAS,KAAK;GACd,MAAM,YAAY,OAAO,EAAE,MAAM,QAAQ,CAAC;GAE1C,OAAO,QAAQ,uBAAO,IAAI,MAAM,0BAA0B,CAAC;EAC7D;EACA,MAAM,UAAU,eAAe,QAAQ;EAEvC,IAAI,OAAO,OAAO,OAAO,GACvB,OAAO,QAAQ,uBAAO,IAAI,UAAU,+CAA+C,CAAC;EAGtF,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,MAAM,SAAS;IAAE,MAAM,QAAQ;IAAO;IAAS;GAAO;GAEtD,gBAAgB,KAAK,MAAM;GAC3B,MAAM,YAAY,OAAO;IAAE,MAAM;IAAQ;GAAO,CAAC;EACnD,CAAC;CACH;CAEA,MAAM,iBAAiB,OAAO,WAAW;EACvC,WAAW;EACX,sCAAsB,IAAI,MAAM,2BAA2B,CAAC;CAC9D,CAAC;CAED,OAAO,OAAO,mBAAmB,eAAe,KAAK,OAAO,QAAQ,MAAM,UAAU,MAAM,CAAC,CAAC,CAAC;CAM7F,MAAM,aAAqC;EACzC,mBAAmB,QAAQ,qBAAqB;EAChD,YAAY;EACZ,SAAS;GACP,cAAc;GACd,cAAc,qBAAqB,QAAQ,OAAO;EACpD;EACA,KAAK,EACH,gBAAgB,wBAAwB;GACtC,YAAY,QAAQ,WAAW,KAAK,eAAe;IACjD,MAAM,UAAU;IAChB,SAAS,UAAU;GACrB,EAAE;GACF,QAAQ;IACN,aAAa,QAAQ,OAAO;IAC5B,gBAAgB,QAAQ,OAAO;IAC/B,cAAc,QAAQ,OAAO;IAC7B,0BAA0B,QAAQ,OAAO;GAC3C;EACF,CAAC,EACH;EACA,gBAAgB;EAChB,GAAI,QAAQ,OAAO,cAAc,KAAA,IAC7B,CAAC,IACD,EACE,QAAQ;GACN,OAAO,QAAQ,OAAO;GACtB,aAAa,QAAQ,OAAO,eAAe;EAC7C,EACF;CACN;CAEA,MAAM,SAAS,OAAO,OAAO,eAC3B,OAAO,IAAI;EACT,WAAW,QAAQ,OAAO,KAAK,UAAU;EACzC,QAAQ,UAAU;GAChB,MAAM,OAAO,iBAAiB,OAAO,+CAA+C;GAKpF,IAAI,yCAAyC,KAAK,IAAI,GACpD,OAAO,gBAAgB,KAAK;IAC1B,gBAAgB;IAChB,QAAQ;IACR,SAAS,KAAK,MAAM,GAAG,GAAK;GAC9B,CAAC;GAGH,OAAO,uBAAuB,KAAK;IACjC,gBAAgB;IAChB,SAAS,wCAAwC,OAAO,MAAM,GAAG,GAAK;IACtE;GACF,CAAC;EACH;CACF,CAAC,GACD,gBACF;CAEA,MAAM,aAAa,OAAO,OAAO,eAC/B,OAAO,IAAI;EACT,WAAW,OAAO,cAAyC;EAC3D,QAAQ,UAAU,sBAAsB,OAAO,QAAQ,OAAO,WAAW;CAC3E,CAAC,GACD,gBACF;CAEA,MAAM,MAAM,OAAO,WAAW;EAC5B,WAAW,WAAW,IAAI,IAAI,uBAAuB,QAAQ,CAAC;EAC9D,QAAQ,UAAU,sBAAsB,OAAO,QAAQ,OAAO,WAAW;CAC3E,CAAC;CAED,MAAM,OAAO,OAAO,OAAO,UACzB,IAAI,KACF,OAAO,cAAc;EACnB,UAAU,sBAAsB;EAChC,cACE,0BAA0B,KAAK;GAC7B,gBAAgB;GAChB,MAAM;GACN,aAAa,QAAQ,OAAO;GAC5B,MAAM,CAAC;EACT,CAAC;CACL,CAAC,CACH,GACA,MAAM,KAAK,MAAM,CACnB,CAAC,CAAC,KAAK,OAAO,IAAI;CAElB,OAAO;CACP,OAAO,MAAM,UAAU,MAAM;CAC7B,IAAI,gBAAgB,KAAA,GAClB,OAAO,OAAO;CAEhB,IAAI,KAAK,UAAU,IAAI,GACrB,OAAO,OAAO,OAAO,UAAU,KAAK,KAAK;CAE3C,MAAM,MAAM,KAAK;CACjB,MAAM,aAAa,MAAM,yBAAyB;CAElD,MAAM,UAAU,qBAAqB,GAAG;CAExC,IAAI,OAAO,OAAO,OAAO,GACvB,OAAO,OAAO,2BAA2B,KAAK;EAC5C,gBAAgB;EAChB,SAAS;CACX,CAAC;CAEH,QAAQ,QAAQ,MAAM,MAAtB;EACE,KAAK,aACH,OAAO,oBAAoB,KAAK;GAC9B,gBAAgB;GAChB,OAAO,QAAQ,MAAM;GACrB,MAAM,QAAQ,MAAM;GACpB,aAAa,yBAAyB,KAAK;IACzC,UAAU,SAAS,MAAM,aAAa,YAAY,aAAa,YAAY,EAAE;IAC7E,WAAW,QAAQ,MAAM;IACzB,UAAU,QAAQ,MAAM;IACxB,aAAa,QAAQ,MAAM;GAC7B,CAAC;EACH,CAAC;EAEH,KAAK,yBACH,OAAO,OAAO,gBAAgB,KAAK;GACjC,gBAAgB;GAChB,QAAQ;GACR,SAAS,sCAAsC,QAAQ,MAAM,OAAO;EACtE,CAAC;EAEH,KAAK,kBACH,OAAO,OAAO,uBAAuB,KAAK;GACxC,gBAAgB;GAChB,QAAQ,QAAQ,MAAM;GACtB,QAAQ,QAAQ,MAAM;GACtB,SAAS,QAAQ,MAAM,QAAQ,MAAM,GAAG,GAAK;GAC7C,MAAM,QAAQ,MAAM;EACtB,CAAC;EAEH,KAAK,aACH,OAAO,OAAO,qBAAqB,KAAK;GACtC,gBAAgB;GAChB,SAAS;GACT,OAAO,QAAQ,OAAO;GACtB,UAAU,QAAQ,MAAM;GACxB,MAAM,QAAQ,MAAM;EACtB,CAAC;EAEH,KAAK,kBACH,OAAO,OAAO,qBAAqB,KAAK;GACtC,gBAAgB;GAChB,SAAS;GACT,OAAO,QAAQ,OAAO;GACtB,UAAU,QAAQ,MAAM;GACxB,MAAM,QAAQ,MAAM;EACtB,CAAC;EAEH,KAAK,gBACH,OAAO,OAAO,qBAAqB,KAAK;GACtC,gBAAgB;GAChB,SAAS;GACT,OAAO,QAAQ,OAAO;GACtB,UAAU,QAAQ,MAAM;GACxB,MAAM,QAAQ,MAAM;EACtB,CAAC;EAEH,KAAK,mBACH,OAAO,OAAO,uBAAuB,KAAK;GACxC,gBAAgB;GAChB,OAAO,QAAQ,OAAO;GACtB,MAAM,QAAQ,MAAM;EACtB,CAAC;EAEH,KAAK,YACH,OAAO,OAAO,2BAA2B,KAAK;GAC5C,gBAAgB;GAChB,SAAS,QAAQ,MAAM,QAAQ,MAAM,GAAG,GAAK;EAC/C,CAAC;CAEL;AACF,CAAC;;;;;;AAOH,MAAM,yBACJ,OACA,gBAKqB;CACrB,MAAM,OAAO,oBAAoB,OAAO,iCAAiC;CASzE,IAAI,yCAAyC,KAAK,IAAI,GACpD,OAAO,gBAAgB,KAAK;EAC1B,gBAAgB;EAChB,QAAQ;EACR,SAAS,KAAK,MAAM,GAAG,GAAK;CAC9B,CAAC;CAEH,IAAI,OAAO,KAAK,IAAI,GAClB,OAAO,0BAA0B,KAAK;EACpC,gBAAgB;EAChB,MAAM;EACN;EACA,MAAM,CAAC;CACT,CAAC;CAEH,IAAI,0BAA0B,KAAK,IAAI,GACrC,OAAO,uBAAuB,KAAK;EACjC,gBAAgB;EAChB,SAAS,KAAK,MAAM,GAAG,GAAK;EAC5B;CACF,CAAC;CAGH,OAAO,4BAA4B,KAAK;EACtC,gBAAgB;EAChB,SAAS,KAAK,MAAM,GAAG,GAAK;CAC9B,CAAC;AACH;;AAGA,MAAa,kCACX,YAEA,MAAM,OACJ,cACA,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO,MAAM;CAE3B,OAAO,aAAa,GAAG,EAAE,SAAS,YAAY,SAAS,KAAK,EAAE,CAAC;AACjE,CAAC,CACH;;AAGF,MAAa,qBAAqB;;;;;;AAMhC,QACE,YACA,YAIA,WAAW,SAAS,KAClB,MAAM,QAAQ,QAAQ,QAAQ,GAC9B,MAAM,QAAQ,+BAA+B,OAAO,CAAC,CACvD,EACJ"}

package/dist/{CloudflareConfig-qDrRLofL.d.mts → CloudflareConfig-C9MvPbX8.d.mts}

@@ -47,16 +47,16 @@ declare const CloudflareDurableRuntimeConfigValue_base: Schema.Class<CloudflareD
   readonly deploymentId: Schema.brand<Schema.NonEmptyString, "@effect-agent/thread/DeploymentId">;
   /** Head of the minted producer identity `{producerPrefix}:{threadId}`. */
   readonly producerPrefix: Schema.NonEmptyString;
-  /** Submission ownership lease duration (D5); fences work across Object incarnations. */
-  readonly ownershipLeaseDuration: Schema.Int;
-  /** Base delay of exponential backoff when a pass fails or makes no progress. */
+  /**
+   * Base delay of exponential backoff when a pass fails or makes no progress.
+   * Half this delay (rounded up, at least 1ms) also pre-arms mutations, including
+   * healthy admissions. `alarmBackoffCap` does not cap that pre-arm delay.
+   */
   readonly alarmBackoffBase: Schema.Int;
   /** Ceiling of exponential backoff after failed or no-progress maintenance passes. */
   readonly alarmBackoffCap: Schema.Int;
   /** `awaitSettlement` ledger re-check cadence when no wake arrives. */
   readonly settlementPollInterval: Schema.Int;
-  /** Worker ownership-lease renewal cadence during an active Attempt. */
-  readonly leaseRenewalInterval: Schema.Int;
   /** Active-Run abort-intent poll cadence. */
   readonly abortPollInterval: Schema.Int;
   /** Canonical observation poll cadence of the Durable Object store. */
@@ -65,15 +65,15 @@ declare const CloudflareDurableRuntimeConfigValue_base: Schema.Class<CloudflareD
   readonly projectionDispatchTimeoutMillis: Schema.Int;
   /** Per-value byte bound; must stay under the platform's 2 MB SQLite value limit. */
   readonly maxStoredValueBytes: Schema.Int;
-  /** Opt-in full payload/digest-chain audit while opening the store. */
+  /** Opt-in full history and active-state validation while opening the store. */
   readonly verifyOnOpen: Schema.Boolean;
   readonly limits: typeof CloudflareAdmissionLimitsValue;
 }>, {}>;
 /**
  * Validated Cloudflare durable runtime configuration. The producer identity of one
  * Thread Object is `{producerPrefix}:{threadId}` — stable across incarnations of
- * the same deployment, distinct across deployments — and producer-epoch fencing (not the
- * producer name) remains the correctness authority (DUR-006).
+ * the same deployment, distinct across deployments. The Object owns its Thread exclusively;
+ * scoped local generations reject callbacks from an earlier Run owner.
  */
 declare class CloudflareDurableRuntimeConfigValue extends CloudflareDurableRuntimeConfigValue_base {}
 declare const CloudflareDurableRuntimeConfig_base: Context.ServiceClass<CloudflareDurableRuntimeConfig, "@effect-agent/platform-cloudflare/CloudflareDurableRuntimeConfig", CloudflareDurableRuntimeConfigValue>;
@@ -81,11 +81,9 @@ declare const CloudflareDurableRuntimeConfig_base: Context.ServiceClass<Cloudfla
 declare class CloudflareDurableRuntimeConfig extends CloudflareDurableRuntimeConfig_base {}
 /** Documented production defaults applied by `ThreadObject.layer`. */
 declare const CLOUDFLARE_RUNTIME_DEFAULTS: {
-  readonly ownershipLeaseDuration: number;
   readonly alarmBackoffBase: 100;
   readonly alarmBackoffCap: 5000;
   readonly settlementPollInterval: 500;
-  readonly leaseRenewalInterval: 10000;
   readonly abortPollInterval: 500;
   readonly observationPollInterval: 25;
   readonly projectionDispatchTimeoutMillis: 30000;
@@ -97,4 +95,4 @@ declare const CLOUDFLARE_RUNTIME_DEFAULTS: {
 };
 //#endregion
 export { CloudflareAdmissionLimitsValue as a, CloudflareDurableRuntimeConfigValue as c, CLOUDFLARE_RUNTIME_DEFAULTS as i, CloudflarePlatformConfigError as l, AuxiliaryDispatchMillis as n, CloudflareConfig_d_exports as o, CLOUDFLARE_DATABASE_CAP_BYTES as r, CloudflareDurableRuntimeConfig as s, AdmissionLimitExceeded as t, DEFAULT_MAX_DATABASE_BYTES as u };
-//# sourceMappingURL=CloudflareConfig-qDrRLofL.d.mts.map
+//# sourceMappingURL=CloudflareConfig-C9MvPbX8.d.mts.map

package/dist/CloudflareConfig.d.mts

@@ -1,2 +1,2 @@
-import { a as CloudflareAdmissionLimitsValue, c as CloudflareDurableRuntimeConfigValue, i as CLOUDFLARE_RUNTIME_DEFAULTS, l as CloudflarePlatformConfigError, n as AuxiliaryDispatchMillis, r as CLOUDFLARE_DATABASE_CAP_BYTES, s as CloudflareDurableRuntimeConfig, t as AdmissionLimitExceeded, u as DEFAULT_MAX_DATABASE_BYTES } from "./CloudflareConfig-qDrRLofL.mjs";
+import { a as CloudflareAdmissionLimitsValue, c as CloudflareDurableRuntimeConfigValue, i as CLOUDFLARE_RUNTIME_DEFAULTS, l as CloudflarePlatformConfigError, n as AuxiliaryDispatchMillis, r as CLOUDFLARE_DATABASE_CAP_BYTES, s as CloudflareDurableRuntimeConfig, t as AdmissionLimitExceeded, u as DEFAULT_MAX_DATABASE_BYTES } from "./CloudflareConfig-C9MvPbX8.mjs";
 export { AdmissionLimitExceeded, AuxiliaryDispatchMillis, CLOUDFLARE_DATABASE_CAP_BYTES, CLOUDFLARE_RUNTIME_DEFAULTS, CloudflareAdmissionLimitsValue, CloudflareDurableRuntimeConfig, CloudflareDurableRuntimeConfigValue, CloudflarePlatformConfigError, DEFAULT_MAX_DATABASE_BYTES };

package/dist/CloudflareConfig.mjs

@@ -1,6 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { DEFAULT_OWNERSHIP_LEASE_DURATION } from "@yielded/agent/submission-ledger";
-import { Context, Duration, Schema } from "effect";
+import { Context, Schema } from "effect";
 import { DeploymentId } from "@yielded/agent/records";
 import { DEFAULT_MAX_STORED_VALUE_BYTES } from "@yielded/agent-storage-cloudflare/do-storage-config";
 //#region src/CloudflareConfig.ts
@@ -69,23 +68,23 @@ var CloudflareAdmissionLimitsValue = class extends Schema.Class("@effect-agent/p
 /**
 * Validated Cloudflare durable runtime configuration. The producer identity of one
 * Thread Object is `{producerPrefix}:{threadId}` — stable across incarnations of
-* the same deployment, distinct across deployments — and producer-epoch fencing (not the
-* producer name) remains the correctness authority (DUR-006).
+* the same deployment, distinct across deployments. The Object owns its Thread exclusively;
+* scoped local generations reject callbacks from an earlier Run owner.
 */
 var CloudflareDurableRuntimeConfigValue = class extends Schema.Class("@effect-agent/platform-cloudflare/CloudflareDurableRuntimeConfigValue")({
 	deploymentId: DeploymentId,
 	/** Head of the minted producer identity `{producerPrefix}:{threadId}`. */
 	producerPrefix: Schema.NonEmptyString.check(Schema.isMaxLength(256)),
-	/** Submission ownership lease duration (D5); fences work across Object incarnations. */
-	ownershipLeaseDuration: PositiveMillis,
-	/** Base delay of exponential backoff when a pass fails or makes no progress. */
+	/**
+	* Base delay of exponential backoff when a pass fails or makes no progress.
+	* Half this delay (rounded up, at least 1ms) also pre-arms mutations, including
+	* healthy admissions. `alarmBackoffCap` does not cap that pre-arm delay.
+	*/
 	alarmBackoffBase: PositiveMillis,
 	/** Ceiling of exponential backoff after failed or no-progress maintenance passes. */
 	alarmBackoffCap: PositiveMillis,
 	/** `awaitSettlement` ledger re-check cadence when no wake arrives. */
 	settlementPollInterval: PositiveMillis,
-	/** Worker ownership-lease renewal cadence during an active Attempt. */
-	leaseRenewalInterval: PositiveMillis,
 	/** Active-Run abort-intent poll cadence. */
 	abortPollInterval: PositiveMillis,
 	/** Canonical observation poll cadence of the Durable Object store. */
@@ -94,7 +93,7 @@ var CloudflareDurableRuntimeConfigValue = class extends Schema.Class("@effect-ag
 	projectionDispatchTimeoutMillis: AuxiliaryDispatchMillis,
 	/** Per-value byte bound; must stay under the platform's 2 MB SQLite value limit. */
 	maxStoredValueBytes: Schema.Int.check(Schema.isGreaterThan(0), Schema.isLessThanOrEqualTo(2e6)),
-	/** Opt-in full payload/digest-chain audit while opening the store. */
+	/** Opt-in full history and active-state validation while opening the store. */
 	verifyOnOpen: Schema.Boolean,
 	limits: CloudflareAdmissionLimitsValue
 }) {};
@@ -102,11 +101,9 @@ var CloudflareDurableRuntimeConfigValue = class extends Schema.Class("@effect-ag
 var CloudflareDurableRuntimeConfig = class extends Context.Service()("@effect-agent/platform-cloudflare/CloudflareDurableRuntimeConfig") {};
 /** Documented production defaults applied by `ThreadObject.layer`. */
 const CLOUDFLARE_RUNTIME_DEFAULTS = {
-	ownershipLeaseDuration: Duration.toMillis(DEFAULT_OWNERSHIP_LEASE_DURATION),
 	alarmBackoffBase: 100,
 	alarmBackoffCap: 5e3,
 	settlementPollInterval: 500,
-	leaseRenewalInterval: 1e4,
 	abortPollInterval: 500,
 	observationPollInterval: 25,
 	projectionDispatchTimeoutMillis: 3e4,

package/dist/CloudflareConfig.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"CloudflareConfig.mjs","names":[],"sources":["../src/CloudflareConfig.ts"],"sourcesContent":["import { DEFAULT_MAX_STORED_VALUE_BYTES } from \"@yielded/agent-storage-cloudflare/do-storage-config\";\nimport { DeploymentId } from \"@yielded/agent/records\";\nimport { DEFAULT_OWNERSHIP_LEASE_DURATION } from \"@yielded/agent/submission-ledger\";\nimport { Context, Duration, Schema } from \"effect\";\n\n/**\n * Schema-validated configuration for the Cloudflare durable runtime (deployment spec §4:\n * decoded once during Layer construction, exposed as a typed service; DEPLOY-003). Every\n * cadence is in milliseconds; every bound is finite and checked before any resource opens.\n */\n\nconst PositiveMillis = Schema.Int.check(Schema.isGreaterThan(0));\n\n/** Maximum supported auxiliary wave equals the native message policy's five-minute ceiling. */\nexport const AuxiliaryDispatchMillis = PositiveMillis.check(Schema.isLessThanOrEqualTo(300_000));\nconst NonNegativeMillis = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));\n\n/** The supplied Cloudflare durable runtime configuration failed validation (DEPLOY-003). */\nexport class CloudflarePlatformConfigError extends Schema.TaggedError<CloudflarePlatformConfigError>()(\n  \"CloudflarePlatformConfigError\",\n  {\n    message: Schema.String,\n    cause: Schema.optionalKey(Schema.Defect()),\n  },\n) {}\n\n/**\n * An admission was refused by a host resource limit BEFORE any ledger row existed\n * (deployment spec §8, DEPLOY-007: \"Admission has explicit bounded quota and overload\n * behavior... a typed rejection\"). This is the DC analogue of `NodeDurableHost`'s\n * `AdmissionClosed` host gate: the port surface stays untouched, the refusal happens in the\n * Thread Object's submit entry point before `DurableAgentRuntime.submit` runs, and\n * nothing was admitted or written.\n */\nexport class AdmissionLimitExceeded extends Schema.TaggedError<AdmissionLimitExceeded>()(\n  \"AdmissionLimitExceeded\",\n  {\n    limit: Schema.Literals([\"queue-depth\", \"input-bytes\", \"database-bytes\"]),\n    actual: Schema.Int,\n    maximum: Schema.Int,\n  },\n) {\n  override get message() {\n    return (\n      `Admission refused before any ledger row existed: ${this.limit} ${this.actual} exceeds ` +\n      `the configured maximum ${this.maximum}. Accepted work is unaffected; retry after the ` +\n      \"lane drains or raise the limit (DEPLOY-007).\"\n    );\n  }\n}\n\n/** The platform's hard per-Object database cap (10 GB, developers.cloudflare.com limits). */\nexport const CLOUDFLARE_DATABASE_CAP_BYTES = 10_000_000_000;\n\n/** Default database-size admission ceiling: a 1 GB safety margin under the platform cap. */\nexport const DEFAULT_MAX_DATABASE_BYTES = 9_000_000_000;\n\n/**\n * Explicit bounded admission quotas checked by the Thread Object BEFORE admission\n * (exit gate \"resource limits are checked before admission\").\n */\nexport class CloudflareAdmissionLimitsValue extends Schema.Class<CloudflareAdmissionLimitsValue>(\n  \"@effect-agent/platform-cloudflare/CloudflareAdmissionLimitsValue\",\n)({\n  /** Maximum nonterminal Submissions per Thread lane before new admissions refuse. */\n  maxQueueDepthPerLane: Schema.Int.check(\n    Schema.isGreaterThan(0),\n    Schema.isLessThanOrEqualTo(100_000),\n  ),\n  /** Maximum encoded input bytes; never above the storage per-value bound. */\n  maxInputBytes: Schema.Int.check(Schema.isGreaterThan(0), Schema.isLessThanOrEqualTo(2_000_000)),\n  /** Maximum `ctx.storage.sql.databaseSize` at admission; stays under the 10 GB platform cap. */\n  maxDatabaseBytes: Schema.Int.check(\n    Schema.isGreaterThan(0),\n    Schema.isLessThanOrEqualTo(CLOUDFLARE_DATABASE_CAP_BYTES),\n  ),\n}) {}\n\n/**\n * Validated Cloudflare durable runtime configuration. The producer identity of one\n * Thread Object is `{producerPrefix}:{threadId}` — stable across incarnations of\n * the same deployment, distinct across deployments — and producer-epoch fencing (not the\n * producer name) remains the correctness authority (DUR-006).\n */\nexport class CloudflareDurableRuntimeConfigValue extends Schema.Class<CloudflareDurableRuntimeConfigValue>(\n  \"@effect-agent/platform-cloudflare/CloudflareDurableRuntimeConfigValue\",\n)({\n  deploymentId: DeploymentId,\n  /** Head of the minted producer identity `{producerPrefix}:{threadId}`. */\n  producerPrefix: Schema.NonEmptyString.check(Schema.isMaxLength(256)),\n  /** Submission ownership lease duration (D5); fences work across Object incarnations. */\n  ownershipLeaseDuration: PositiveMillis,\n  /** Base delay of exponential backoff when a pass fails or makes no progress. */\n  alarmBackoffBase: PositiveMillis,\n  /** Ceiling of exponential backoff after failed or no-progress maintenance passes. */\n  alarmBackoffCap: PositiveMillis,\n  /** `awaitSettlement` ledger re-check cadence when no wake arrives. */\n  settlementPollInterval: PositiveMillis,\n  /** Worker ownership-lease renewal cadence during an active Attempt. */\n  leaseRenewalInterval: PositiveMillis,\n  /** Active-Run abort-intent poll cadence. */\n  abortPollInterval: PositiveMillis,\n  /** Canonical observation poll cadence of the Durable Object store. */\n  observationPollInterval: NonNegativeMillis,\n  /** One disposable projection backfill wave; independent of required live applyCommitted. */\n  projectionDispatchTimeoutMillis: AuxiliaryDispatchMillis,\n  /** Per-value byte bound; must stay under the platform's 2 MB SQLite value limit. */\n  maxStoredValueBytes: Schema.Int.check(\n    Schema.isGreaterThan(0),\n    Schema.isLessThanOrEqualTo(2_000_000),\n  ),\n  /** Opt-in full payload/digest-chain audit while opening the store. */\n  verifyOnOpen: Schema.Boolean,\n  limits: CloudflareAdmissionLimitsValue,\n}) {}\n\n/** Explicit configuration authority for the assembled Cloudflare durable runtime. */\nexport class CloudflareDurableRuntimeConfig extends Context.Service<\n  CloudflareDurableRuntimeConfig,\n  CloudflareDurableRuntimeConfigValue\n>()(\"@effect-agent/platform-cloudflare/CloudflareDurableRuntimeConfig\") {}\n\n/** Documented production defaults applied by `ThreadObject.layer`. */\nexport const CLOUDFLARE_RUNTIME_DEFAULTS = {\n  ownershipLeaseDuration: Duration.toMillis(DEFAULT_OWNERSHIP_LEASE_DURATION),\n  alarmBackoffBase: 100,\n  alarmBackoffCap: 5_000,\n  settlementPollInterval: 500,\n  leaseRenewalInterval: 10_000,\n  abortPollInterval: 500,\n  observationPollInterval: 25,\n  projectionDispatchTimeoutMillis: 30_000,\n  maxStoredValueBytes: DEFAULT_MAX_STORED_VALUE_BYTES,\n  verifyOnOpen: false,\n  maxQueueDepthPerLane: 256,\n  maxInputBytes: DEFAULT_MAX_STORED_VALUE_BYTES,\n  maxDatabaseBytes: DEFAULT_MAX_DATABASE_BYTES,\n} as const;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAWA,MAAM,iBAAiB,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC;;AAG/D,MAAa,0BAA0B,eAAe,MAAM,OAAO,oBAAoB,GAAO,CAAC;AAC/F,MAAM,oBAAoB,OAAO,IAAI,MAAM,OAAO,uBAAuB,CAAC,CAAC;;AAG3E,IAAa,gCAAb,cAAmD,OAAO,YAA2C,CAAC,CACpG,iCACA;CACE,SAAS,OAAO;CAChB,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;AAC3C,CACF,CAAC,CAAC,CAAC;;;;;;;;;AAUH,IAAa,yBAAb,cAA4C,OAAO,YAAoC,CAAC,CACtF,0BACA;CACE,OAAO,OAAO,SAAS;EAAC;EAAe;EAAe;CAAgB,CAAC;CACvE,QAAQ,OAAO;CACf,SAAS,OAAO;AAClB,CACF,CAAC,CAAC;CACA,IAAa,UAAU;EACrB,OACE,oDAAoD,KAAK,MAAM,GAAG,KAAK,OAAO,kCACpD,KAAK,QAAQ;CAG3C;AACF;;AAGA,MAAa,gCAAgC;;AAG7C,MAAa,6BAA6B;;;;;AAM1C,IAAa,iCAAb,cAAoD,OAAO,MACzD,kEACF,CAAC,CAAC;;CAEA,sBAAsB,OAAO,IAAI,MAC/B,OAAO,cAAc,CAAC,GACtB,OAAO,oBAAoB,GAAO,CACpC;;CAEA,eAAe,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,GAAG,OAAO,oBAAoB,GAAS,CAAC;;CAE9F,kBAAkB,OAAO,IAAI,MAC3B,OAAO,cAAc,CAAC,GACtB,OAAO,oBAAoB,6BAA6B,CAC1D;AACF,CAAC,CAAC,CAAC,CAAC;;;;;;;AAQJ,IAAa,sCAAb,cAAyD,OAAO,MAC9D,uEACF,CAAC,CAAC;CACA,cAAc;;CAEd,gBAAgB,OAAO,eAAe,MAAM,OAAO,YAAY,GAAG,CAAC;;CAEnE,wBAAwB;;CAExB,kBAAkB;;CAElB,iBAAiB;;CAEjB,wBAAwB;;CAExB,sBAAsB;;CAEtB,mBAAmB;;CAEnB,yBAAyB;;CAEzB,iCAAiC;;CAEjC,qBAAqB,OAAO,IAAI,MAC9B,OAAO,cAAc,CAAC,GACtB,OAAO,oBAAoB,GAAS,CACtC;;CAEA,cAAc,OAAO;CACrB,QAAQ;AACV,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,iCAAb,cAAoD,QAAQ,QAG1D,CAAC,CAAC,kEAAkE,CAAC,CAAC,CAAC;;AAGzE,MAAa,8BAA8B;CACzC,wBAAwB,SAAS,SAAS,gCAAgC;CAC1E,kBAAkB;CAClB,iBAAiB;CACjB,wBAAwB;CACxB,sBAAsB;CACtB,mBAAmB;CACnB,yBAAyB;CACzB,iCAAiC;CACjC,qBAAqB;CACrB,cAAc;CACd,sBAAsB;CACtB,eAAe;CACf,kBAAkB;AACpB"}
+{"version":3,"file":"CloudflareConfig.mjs","names":[],"sources":["../src/CloudflareConfig.ts"],"sourcesContent":["import { DEFAULT_MAX_STORED_VALUE_BYTES } from \"@yielded/agent-storage-cloudflare/do-storage-config\";\nimport { DeploymentId } from \"@yielded/agent/records\";\nimport { Context, Schema } from \"effect\";\n\n/**\n * Schema-validated configuration for the Cloudflare durable runtime (deployment spec §4:\n * decoded once during Layer construction, exposed as a typed service; DEPLOY-003). Every\n * cadence is in milliseconds; every bound is finite and checked before any resource opens.\n */\n\nconst PositiveMillis = Schema.Int.check(Schema.isGreaterThan(0));\n\n/** Maximum supported auxiliary wave equals the native message policy's five-minute ceiling. */\nexport const AuxiliaryDispatchMillis = PositiveMillis.check(Schema.isLessThanOrEqualTo(300_000));\nconst NonNegativeMillis = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0));\n\n/** The supplied Cloudflare durable runtime configuration failed validation (DEPLOY-003). */\nexport class CloudflarePlatformConfigError extends Schema.TaggedError<CloudflarePlatformConfigError>()(\n  \"CloudflarePlatformConfigError\",\n  {\n    message: Schema.String,\n    cause: Schema.optionalKey(Schema.Defect()),\n  },\n) {}\n\n/**\n * An admission was refused by a host resource limit BEFORE any ledger row existed\n * (deployment spec §8, DEPLOY-007: \"Admission has explicit bounded quota and overload\n * behavior... a typed rejection\"). This is the DC analogue of `NodeDurableHost`'s\n * `AdmissionClosed` host gate: the port surface stays untouched, the refusal happens in the\n * Thread Object's submit entry point before `DurableAgentRuntime.submit` runs, and\n * nothing was admitted or written.\n */\nexport class AdmissionLimitExceeded extends Schema.TaggedError<AdmissionLimitExceeded>()(\n  \"AdmissionLimitExceeded\",\n  {\n    limit: Schema.Literals([\"queue-depth\", \"input-bytes\", \"database-bytes\"]),\n    actual: Schema.Int,\n    maximum: Schema.Int,\n  },\n) {\n  override get message() {\n    return (\n      `Admission refused before any ledger row existed: ${this.limit} ${this.actual} exceeds ` +\n      `the configured maximum ${this.maximum}. Accepted work is unaffected; retry after the ` +\n      \"lane drains or raise the limit (DEPLOY-007).\"\n    );\n  }\n}\n\n/** The platform's hard per-Object database cap (10 GB, developers.cloudflare.com limits). */\nexport const CLOUDFLARE_DATABASE_CAP_BYTES = 10_000_000_000;\n\n/** Default database-size admission ceiling: a 1 GB safety margin under the platform cap. */\nexport const DEFAULT_MAX_DATABASE_BYTES = 9_000_000_000;\n\n/**\n * Explicit bounded admission quotas checked by the Thread Object BEFORE admission\n * (exit gate \"resource limits are checked before admission\").\n */\nexport class CloudflareAdmissionLimitsValue extends Schema.Class<CloudflareAdmissionLimitsValue>(\n  \"@effect-agent/platform-cloudflare/CloudflareAdmissionLimitsValue\",\n)({\n  /** Maximum nonterminal Submissions per Thread lane before new admissions refuse. */\n  maxQueueDepthPerLane: Schema.Int.check(\n    Schema.isGreaterThan(0),\n    Schema.isLessThanOrEqualTo(100_000),\n  ),\n  /** Maximum encoded input bytes; never above the storage per-value bound. */\n  maxInputBytes: Schema.Int.check(Schema.isGreaterThan(0), Schema.isLessThanOrEqualTo(2_000_000)),\n  /** Maximum `ctx.storage.sql.databaseSize` at admission; stays under the 10 GB platform cap. */\n  maxDatabaseBytes: Schema.Int.check(\n    Schema.isGreaterThan(0),\n    Schema.isLessThanOrEqualTo(CLOUDFLARE_DATABASE_CAP_BYTES),\n  ),\n}) {}\n\n/**\n * Validated Cloudflare durable runtime configuration. The producer identity of one\n * Thread Object is `{producerPrefix}:{threadId}` — stable across incarnations of\n * the same deployment, distinct across deployments. The Object owns its Thread exclusively;\n * scoped local generations reject callbacks from an earlier Run owner.\n */\nexport class CloudflareDurableRuntimeConfigValue extends Schema.Class<CloudflareDurableRuntimeConfigValue>(\n  \"@effect-agent/platform-cloudflare/CloudflareDurableRuntimeConfigValue\",\n)({\n  deploymentId: DeploymentId,\n  /** Head of the minted producer identity `{producerPrefix}:{threadId}`. */\n  producerPrefix: Schema.NonEmptyString.check(Schema.isMaxLength(256)),\n  /**\n   * Base delay of exponential backoff when a pass fails or makes no progress.\n   * Half this delay (rounded up, at least 1ms) also pre-arms mutations, including\n   * healthy admissions. `alarmBackoffCap` does not cap that pre-arm delay.\n   */\n  alarmBackoffBase: PositiveMillis,\n  /** Ceiling of exponential backoff after failed or no-progress maintenance passes. */\n  alarmBackoffCap: PositiveMillis,\n  /** `awaitSettlement` ledger re-check cadence when no wake arrives. */\n  settlementPollInterval: PositiveMillis,\n  /** Active-Run abort-intent poll cadence. */\n  abortPollInterval: PositiveMillis,\n  /** Canonical observation poll cadence of the Durable Object store. */\n  observationPollInterval: NonNegativeMillis,\n  /** One disposable projection backfill wave; independent of required live applyCommitted. */\n  projectionDispatchTimeoutMillis: AuxiliaryDispatchMillis,\n  /** Per-value byte bound; must stay under the platform's 2 MB SQLite value limit. */\n  maxStoredValueBytes: Schema.Int.check(\n    Schema.isGreaterThan(0),\n    Schema.isLessThanOrEqualTo(2_000_000),\n  ),\n  /** Opt-in full history and active-state validation while opening the store. */\n  verifyOnOpen: Schema.Boolean,\n  limits: CloudflareAdmissionLimitsValue,\n}) {}\n\n/** Explicit configuration authority for the assembled Cloudflare durable runtime. */\nexport class CloudflareDurableRuntimeConfig extends Context.Service<\n  CloudflareDurableRuntimeConfig,\n  CloudflareDurableRuntimeConfigValue\n>()(\"@effect-agent/platform-cloudflare/CloudflareDurableRuntimeConfig\") {}\n\n/** Documented production defaults applied by `ThreadObject.layer`. */\nexport const CLOUDFLARE_RUNTIME_DEFAULTS = {\n  alarmBackoffBase: 100,\n  alarmBackoffCap: 5_000,\n  settlementPollInterval: 500,\n  abortPollInterval: 500,\n  observationPollInterval: 25,\n  projectionDispatchTimeoutMillis: 30_000,\n  maxStoredValueBytes: DEFAULT_MAX_STORED_VALUE_BYTES,\n  verifyOnOpen: false,\n  maxQueueDepthPerLane: 256,\n  maxInputBytes: DEFAULT_MAX_STORED_VALUE_BYTES,\n  maxDatabaseBytes: DEFAULT_MAX_DATABASE_BYTES,\n} as const;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAUA,MAAM,iBAAiB,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC;;AAG/D,MAAa,0BAA0B,eAAe,MAAM,OAAO,oBAAoB,GAAO,CAAC;AAC/F,MAAM,oBAAoB,OAAO,IAAI,MAAM,OAAO,uBAAuB,CAAC,CAAC;;AAG3E,IAAa,gCAAb,cAAmD,OAAO,YAA2C,CAAC,CACpG,iCACA;CACE,SAAS,OAAO;CAChB,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;AAC3C,CACF,CAAC,CAAC,CAAC;;;;;;;;;AAUH,IAAa,yBAAb,cAA4C,OAAO,YAAoC,CAAC,CACtF,0BACA;CACE,OAAO,OAAO,SAAS;EAAC;EAAe;EAAe;CAAgB,CAAC;CACvE,QAAQ,OAAO;CACf,SAAS,OAAO;AAClB,CACF,CAAC,CAAC;CACA,IAAa,UAAU;EACrB,OACE,oDAAoD,KAAK,MAAM,GAAG,KAAK,OAAO,kCACpD,KAAK,QAAQ;CAG3C;AACF;;AAGA,MAAa,gCAAgC;;AAG7C,MAAa,6BAA6B;;;;;AAM1C,IAAa,iCAAb,cAAoD,OAAO,MACzD,kEACF,CAAC,CAAC;;CAEA,sBAAsB,OAAO,IAAI,MAC/B,OAAO,cAAc,CAAC,GACtB,OAAO,oBAAoB,GAAO,CACpC;;CAEA,eAAe,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,GAAG,OAAO,oBAAoB,GAAS,CAAC;;CAE9F,kBAAkB,OAAO,IAAI,MAC3B,OAAO,cAAc,CAAC,GACtB,OAAO,oBAAoB,6BAA6B,CAC1D;AACF,CAAC,CAAC,CAAC,CAAC;;;;;;;AAQJ,IAAa,sCAAb,cAAyD,OAAO,MAC9D,uEACF,CAAC,CAAC;CACA,cAAc;;CAEd,gBAAgB,OAAO,eAAe,MAAM,OAAO,YAAY,GAAG,CAAC;;;;;;CAMnE,kBAAkB;;CAElB,iBAAiB;;CAEjB,wBAAwB;;CAExB,mBAAmB;;CAEnB,yBAAyB;;CAEzB,iCAAiC;;CAEjC,qBAAqB,OAAO,IAAI,MAC9B,OAAO,cAAc,CAAC,GACtB,OAAO,oBAAoB,GAAS,CACtC;;CAEA,cAAc,OAAO;CACrB,QAAQ;AACV,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,iCAAb,cAAoD,QAAQ,QAG1D,CAAC,CAAC,kEAAkE,CAAC,CAAC,CAAC;;AAGzE,MAAa,8BAA8B;CACzC,kBAAkB;CAClB,iBAAiB;CACjB,wBAAwB;CACxB,mBAAmB;CACnB,yBAAyB;CACzB,iCAAiC;CACjC,qBAAqB;CACrB,cAAc;CACd,sBAAsB;CACtB,eAAe;CACf,kBAAkB;AACpB"}