effect-agent 0.1.0-beta.9 → 0.1.0-beta.91

package/dist/sandbox/ProtectedBrowser.mjs

@@ -0,0 +1,287 @@
+import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.mjs";
+import { InteractiveBrowserHost, InteractiveBrowserPolicy, InteractiveBrowserTargetUrl } from "./InteractiveBrowser.mjs";
+import { Context, Effect, Layer, Schema, Scope } from "effect";
+//#region src/sandbox/ProtectedBrowser.ts
+var ProtectedBrowser_exports = /* @__PURE__ */ __exportAll({
+	BrowserCredentialAccess: () => BrowserCredentialAccess,
+	BrowserCredentialMaterial: () => BrowserCredentialMaterial,
+	BrowserReference: () => BrowserReference,
+	CardCredential: () => CardCredential,
+	CredentialAccessError: () => CredentialAccessError,
+	CredentialDispatch: () => CredentialDispatch,
+	CredentialFieldRole: () => CredentialFieldRole,
+	CredentialKind: () => CredentialKind,
+	CredentialMilestone: () => CredentialMilestone,
+	CredentialObservationDecision: () => CredentialObservationDecision,
+	CredentialObservationGrant: () => CredentialObservationGrant,
+	CredentialOffer: () => CredentialOffer,
+	CredentialOfferMetadata: () => CredentialOfferMetadata,
+	CredentialOrigin: () => CredentialOrigin,
+	CredentialTarget: () => CredentialTarget,
+	CredentialUseResult: () => CredentialUseResult,
+	ListCredentialOffers: () => ListCredentialOffers,
+	LoginCredential: () => LoginCredential,
+	ProtectedBrowser: () => ProtectedBrowser,
+	ProtectedBrowserAction: () => ProtectedBrowserAction,
+	ProtectedBrowserCheckpoint: () => ProtectedBrowserCheckpoint,
+	ProtectedBrowserClick: () => ProtectedBrowserClick,
+	ProtectedBrowserControl: () => ProtectedBrowserControl,
+	ProtectedBrowserError: () => ProtectedBrowserError,
+	ProtectedBrowserFill: () => ProtectedBrowserFill,
+	ProtectedBrowserNavigate: () => ProtectedBrowserNavigate,
+	ProtectedBrowserObservation: () => ProtectedBrowserObservation,
+	ProtectedBrowserSession: () => ProtectedBrowserSession,
+	ProtectedCleanup: () => ProtectedCleanup,
+	ProtectedObservationState: () => ProtectedObservationState,
+	UseCredential: () => UseCredential
+});
+/** Canonical HTTPS origin, including a non-default port. Host grants match exactly. */
+const CredentialOrigin = Schema.String.check(Schema.makeFilter((value) => value.startsWith("https://") && Schema.is(InteractiveBrowserHost)(value.slice(8))));
+const BrowserReference = Schema.String.check(Schema.isUUID());
+const CredentialKind = Schema.Literals(["login", "card"]);
+const CredentialFieldRole = Schema.Literals([
+	"username",
+	"password",
+	"card-name",
+	"card-number",
+	"card-expiry",
+	"card-expiry-month",
+	"card-expiry-year",
+	"card-security-code"
+]);
+const Label = Schema.String.check(Schema.isMaxLength(200));
+const LinkUrl = InteractiveBrowserTargetUrl.check(Schema.isStartsWith("https://"));
+var CredentialTarget = class extends Schema.Class("CredentialTarget")({
+	topOrigin: CredentialOrigin,
+	frameOrigin: CredentialOrigin,
+	recipientOrigin: CredentialOrigin,
+	document: BrowserReference,
+	frame: BrowserReference,
+	form: BrowserReference
+}) {};
+var ProtectedBrowserControl = class extends Schema.Class("ProtectedBrowserControl")({
+	ref: BrowserReference,
+	target: CredentialTarget,
+	role: Schema.Union([CredentialFieldRole, Schema.Literals([
+		"text",
+		"select",
+		"radio",
+		"checkbox",
+		"submit",
+		"link",
+		"button",
+		"unsupported"
+	])]),
+	label: Label,
+	/** Current native radio/checkbox state; field values are never included. */
+	checked: Schema.optionalKey(Schema.Boolean),
+	/** Resolved HTTPS destination for a native link; target.recipientOrigin is its origin. */
+	url: Schema.optionalKey(LinkUrl)
+}) {};
+var ProtectedBrowserObservation = class extends Schema.Class("ProtectedBrowserObservation")({
+	document: BrowserReference,
+	topOrigin: CredentialOrigin,
+	text: Schema.String.check(Schema.isMaxLength(65536)),
+	controls: Schema.Array(ProtectedBrowserControl).check(Schema.isMaxLength(64)),
+	truncated: Schema.Boolean,
+	observation: Schema.Literals(["before-exposure", "approved-after-exposure"])
+}) {};
+var CredentialOfferMetadata = class extends Schema.Class("CredentialOfferMetadata")({
+	label: Label,
+	brand: Schema.optionalKey(Label),
+	lastFour: Schema.optionalKey(Schema.String.check(Schema.isPattern(/^\d{4}$/))),
+	/** Plaintext metadata disclosed only when the host authorizes listing this offer. */
+	billingAddress: Schema.optionalKey(Schema.Struct({
+		name: Schema.optionalKey(Label),
+		line1: Schema.optionalKey(Label),
+		line2: Schema.optionalKey(Label),
+		city: Schema.optionalKey(Label),
+		region: Schema.optionalKey(Label),
+		postalCode: Schema.optionalKey(Label),
+		country: Schema.optionalKey(Label)
+	}))
+}) {};
+var CredentialOffer = class extends Schema.Class("CredentialOffer")({
+	ref: BrowserReference,
+	kind: CredentialKind,
+	metadata: CredentialOfferMetadata
+}) {};
+var ListCredentialOffers = class extends Schema.Class("ListCredentialOffers")({
+	kind: CredentialKind,
+	target: BrowserReference
+}) {};
+var UseCredential = class extends Schema.Class("UseCredential")({
+	offer: BrowserReference,
+	fields: Schema.Array(Schema.Struct({
+		ref: BrowserReference,
+		role: CredentialFieldRole
+	})).check(Schema.isMinLength(1), Schema.isMaxLength(8)),
+	submit: Schema.optionalKey(BrowserReference)
+}) {};
+var ProtectedBrowserNavigate = class extends Schema.Class("ProtectedBrowserNavigate")({ url: Schema.String.check(Schema.isMaxLength(8192)) }) {};
+var ProtectedBrowserClick = class extends Schema.Class("ProtectedBrowserClick")({ ref: BrowserReference }) {};
+/**
+* Non-secret text for an ordinary text control or native single select in the current observation.
+* Never pass credential material. Credential roles, including username, require useCredential.
+* Selects match a unique enabled option value, then a unique exact trimmed label. Empty text clears.
+*/
+var ProtectedBrowserFill = class extends Schema.Class("ProtectedBrowserFill")(Schema.Struct({
+	ref: BrowserReference,
+	value: Schema.String.check(Schema.isMaxLength(8192))
+}).pipe(Schema.annotate({ parseOptions: { onExcessProperty: "error" } }))) {};
+const CredentialDispatch = Schema.Literals([
+	"not-dispatched",
+	"possibly-dispatched",
+	"dispatched"
+]);
+const CredentialMilestone = Schema.Literals([
+	"none",
+	"partial-fill",
+	"filled",
+	"submission-dispatched"
+]);
+const ProtectedObservationState = Schema.Literals([
+	"before-exposure",
+	"protected",
+	"approved-after-exposure",
+	"closed"
+]);
+const ProtectedCleanup = Schema.Literals([
+	"not-requested",
+	"confirmed",
+	"unconfirmed"
+]);
+const Evidence = {
+	dispatch: CredentialDispatch,
+	milestone: CredentialMilestone,
+	observation: ProtectedObservationState,
+	cleanup: ProtectedCleanup
+};
+/** No foreign message/cause or page data may enter this failure. Closure does not undo dispatch. */
+var ProtectedBrowserError = class extends Schema.TaggedError()("ProtectedBrowserError", {
+	reason: Schema.Literals([
+		"denied",
+		"missing-credential",
+		"stale-reference",
+		"unsupported",
+		"needs-attention",
+		"busy",
+		"closed",
+		"limit",
+		"timeout",
+		"provider",
+		"resolver",
+		"outcome-unknown",
+		"observation-blocked"
+	]),
+	...Evidence
+}) {};
+var CredentialUseResult = class extends Schema.Class("CredentialUseResult")({
+	...Evidence,
+	authentication: Schema.Literal("unverified")
+}) {};
+const SecretText = Schema.Redacted(Schema.NonEmptyString.check(Schema.isMaxLength(1024)));
+/** Host-only material. Never encode it into Tool results, checkpoints, or storage. */
+const LoginCredential = Schema.TaggedStruct("LoginCredential", {
+	username: SecretText,
+	password: SecretText
+});
+/** Security codes are transient, never persisted. Dummy tests are not PCI compliance evidence. */
+const CardCredential = Schema.TaggedStruct("CardCredential", {
+	name: SecretText,
+	number: Schema.Redacted(Schema.String.check(Schema.isPattern(/^\d{12,19}$/))),
+	expiry: SecretText,
+	expiryMonth: Schema.Redacted(Schema.String.check(Schema.isPattern(/^(0[1-9]|1[0-2])$/))),
+	expiryYear: Schema.Redacted(Schema.String.check(Schema.isPattern(/^\d{4}$/))),
+	securityCode: Schema.optionalKey(Schema.Redacted(Schema.String.check(Schema.isPattern(/^\d{3,4}$/))))
+});
+const BrowserCredentialMaterial = Schema.Union([LoginCredential, CardCredential]);
+var CredentialAccessError = class extends Schema.TaggedError()("CredentialAccessError", { reason: Schema.Literals([
+	"denied",
+	"missing-credential",
+	"needs-attention",
+	"resolver"
+]) }) {};
+/** Exact current action proposed to host authority; no ordinary fill value or secret is included. */
+const ProtectedBrowserAction = Schema.Union([
+	Schema.TaggedStruct("Navigate", { url: ProtectedBrowserNavigate.fields.url }),
+	Schema.TaggedStruct("Fill", {
+		ref: BrowserReference,
+		target: CredentialTarget,
+		role: Schema.Literals(["text", "select"])
+	}),
+	Schema.TaggedStruct("Click", {
+		ref: BrowserReference,
+		target: CredentialTarget,
+		role: Schema.Literals([
+			"button",
+			"radio",
+			"checkbox"
+		])
+	}),
+	Schema.TaggedStruct("Click", {
+		ref: BrowserReference,
+		target: CredentialTarget,
+		role: Schema.Literal("link"),
+		url: LinkUrl
+	}),
+	Schema.TaggedStruct("Submit", {
+		ref: BrowserReference,
+		target: CredentialTarget
+	})
+]);
+/**
+* Trust only these current observation origins. The top origin must be included. Other frames
+* supply neither text nor usable refs. This does not expand network policy or credential grants.
+*/
+var CredentialObservationGrant = class extends Schema.Class("CredentialObservationGrant")({
+	decision: Schema.Literal("trust-recipient-no-credential-echo"),
+	origins: Schema.Array(CredentialOrigin).check(Schema.isMinLength(1), Schema.isMaxLength(16), Schema.isUnique())
+}) {};
+const CredentialObservationDecision = Schema.Union([Schema.Literals(["trust-recipient-no-credential-echo", "deny"]), CredentialObservationGrant]);
+/**
+* Host-only vault and grant port. Derive caller from the authorized invocation, never Tool input.
+* Recheck account ownership, current grants, merchant/frame/recipient pairing, and any side
+* effects caused by filling. Listing authorizes metadata only. Grant checks never widen network
+* policy. Implementations must not log material or put it in defects/traces.
+*/
+var BrowserCredentialAccess = class extends Context.Service()("@effect-agent/sandbox/BrowserCredentialAccess") {};
+/**
+* Host-only suspended-pass state. Persist with the host's fenced controller receipt, never in
+* a Tool result. It contains no credential material, offers, DOM references usable after resume,
+* cookies, page text, or provider capability. A host must restore its own credential exposure
+* ledger as well. The original deadline and action allowance include time spent with the human.
+*/
+var ProtectedBrowserCheckpoint = class extends Schema.Class("ProtectedBrowserCheckpoint")({
+	policy: InteractiveBrowserPolicy,
+	startedAt: Schema.Natural,
+	actions: Schema.Natural,
+	exposures: Schema.Array(CredentialTarget).check(Schema.isMaxLength(1e3)),
+	humanExposure: Schema.Boolean,
+	humanOrigins: Schema.Array(CredentialOrigin).check(Schema.isMaxLength(16)),
+	dispatch: CredentialDispatch,
+	milestone: CredentialMilestone
+}) {};
+var ProtectedBrowser = class extends Context.Service()("@effect-agent/sandbox/ProtectedBrowser") {};
+/** Build once in an execution/Attempt Layer. Acquires lazily and shares one pass across Tools. */
+var ProtectedBrowserSession = class extends Context.Service()("@effect-agent/sandbox/ProtectedBrowserSession") {
+	static layer(policy) {
+		return Layer.effect(this)(Effect.gen(function* () {
+			const browser = yield* ProtectedBrowser;
+			const access = yield* BrowserCredentialAccess;
+			const scope = yield* Effect.scope;
+			const cached = yield* Effect.cached(browser.open(policy).pipe(Effect.provideService(BrowserCredentialAccess, access), Effect.provideService(Scope.Scope, scope)));
+			return { get: Effect.suspend(() => scope.state._tag === "Closed" ? Effect.fail(new ProtectedBrowserError({
+				reason: "closed",
+				dispatch: "not-dispatched",
+				milestone: "none",
+				observation: "closed",
+				cleanup: "not-requested"
+			})) : cached) };
+		}));
+	}
+};
+//#endregion
+export { BrowserCredentialAccess, BrowserCredentialMaterial, BrowserReference, CardCredential, CredentialAccessError, CredentialDispatch, CredentialFieldRole, CredentialKind, CredentialMilestone, CredentialObservationDecision, CredentialObservationGrant, CredentialOffer, CredentialOfferMetadata, CredentialOrigin, CredentialTarget, CredentialUseResult, ListCredentialOffers, LoginCredential, ProtectedBrowser, ProtectedBrowserAction, ProtectedBrowserCheckpoint, ProtectedBrowserClick, ProtectedBrowserControl, ProtectedBrowserError, ProtectedBrowserFill, ProtectedBrowserNavigate, ProtectedBrowserObservation, ProtectedBrowserSession, ProtectedCleanup, ProtectedObservationState, UseCredential, ProtectedBrowser_exports as t };
+
+//# sourceMappingURL=ProtectedBrowser.mjs.map

package/dist/sandbox/ProtectedBrowser.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProtectedBrowser.mjs","names":[],"sources":["../../src/sandbox/ProtectedBrowser.ts"],"sourcesContent":["import { Context, Effect, Layer, Schema, Scope, type Redacted } from \"effect\";\n\nimport {\n  InteractiveBrowserHost,\n  InteractiveBrowserTargetUrl,\n  InteractiveBrowserPolicy,\n} from \"./InteractiveBrowser.ts\";\n\n/** Canonical HTTPS origin, including a non-default port. Host grants match exactly. */\nexport const CredentialOrigin = Schema.String.check(\n  Schema.makeFilter(\n    (value) => value.startsWith(\"https://\") && Schema.is(InteractiveBrowserHost)(value.slice(8)),\n  ),\n);\n\nexport const BrowserReference = Schema.String.check(Schema.isUUID());\nexport const CredentialKind = Schema.Literals([\"login\", \"card\"]);\n\nexport const CredentialFieldRole = Schema.Literals([\n  \"username\",\n  \"password\",\n  \"card-name\",\n  \"card-number\",\n  \"card-expiry\",\n  \"card-expiry-month\",\n  \"card-expiry-year\",\n  \"card-security-code\",\n]);\n\nconst Label = Schema.String.check(Schema.isMaxLength(200));\nconst LinkUrl = InteractiveBrowserTargetUrl.check(Schema.isStartsWith(\"https://\"));\n\nexport class CredentialTarget extends Schema.Class<CredentialTarget>(\"CredentialTarget\")({\n  topOrigin: CredentialOrigin,\n  frameOrigin: CredentialOrigin,\n  recipientOrigin: CredentialOrigin,\n  document: BrowserReference,\n  frame: BrowserReference,\n  form: BrowserReference,\n}) {}\n\nexport class ProtectedBrowserControl extends Schema.Class<ProtectedBrowserControl>(\n  \"ProtectedBrowserControl\",\n)({\n  ref: BrowserReference,\n  target: CredentialTarget,\n  role: Schema.Union([\n    CredentialFieldRole,\n    Schema.Literals([\n      \"text\",\n      \"select\",\n      \"radio\",\n      \"checkbox\",\n      \"submit\",\n      \"link\",\n      \"button\",\n      \"unsupported\",\n    ]),\n  ]),\n  label: Label,\n  /** Current native radio/checkbox state; field values are never included. */\n  checked: Schema.optionalKey(Schema.Boolean),\n  /** Resolved HTTPS destination for a native link; target.recipientOrigin is its origin. */\n  url: Schema.optionalKey(LinkUrl),\n}) {}\n\nexport class ProtectedBrowserObservation extends Schema.Class<ProtectedBrowserObservation>(\n  \"ProtectedBrowserObservation\",\n)({\n  document: BrowserReference,\n  topOrigin: CredentialOrigin,\n  text: Schema.String.check(Schema.isMaxLength(64 * 1024)),\n  controls: Schema.Array(ProtectedBrowserControl).check(Schema.isMaxLength(64)),\n  truncated: Schema.Boolean,\n  observation: Schema.Literals([\"before-exposure\", \"approved-after-exposure\"]),\n}) {}\n\nexport class CredentialOfferMetadata extends Schema.Class<CredentialOfferMetadata>(\n  \"CredentialOfferMetadata\",\n)({\n  label: Label,\n  brand: Schema.optionalKey(Label),\n  lastFour: Schema.optionalKey(Schema.String.check(Schema.isPattern(/^\\d{4}$/))),\n  /** Plaintext metadata disclosed only when the host authorizes listing this offer. */\n  billingAddress: Schema.optionalKey(\n    Schema.Struct({\n      name: Schema.optionalKey(Label),\n      line1: Schema.optionalKey(Label),\n      line2: Schema.optionalKey(Label),\n      city: Schema.optionalKey(Label),\n      region: Schema.optionalKey(Label),\n      postalCode: Schema.optionalKey(Label),\n      country: Schema.optionalKey(Label),\n    }),\n  ),\n}) {}\n\nexport class CredentialOffer extends Schema.Class<CredentialOffer>(\"CredentialOffer\")({\n  ref: BrowserReference,\n  kind: CredentialKind,\n  metadata: CredentialOfferMetadata,\n}) {}\n\nexport class ListCredentialOffers extends Schema.Class<ListCredentialOffers>(\n  \"ListCredentialOffers\",\n)({\n  kind: CredentialKind,\n  target: BrowserReference,\n}) {}\n\nexport class UseCredential extends Schema.Class<UseCredential>(\"UseCredential\")({\n  offer: BrowserReference,\n  fields: Schema.Array(Schema.Struct({ ref: BrowserReference, role: CredentialFieldRole })).check(\n    Schema.isMinLength(1),\n    Schema.isMaxLength(8),\n  ),\n  submit: Schema.optionalKey(BrowserReference),\n}) {}\n\nexport class ProtectedBrowserNavigate extends Schema.Class<ProtectedBrowserNavigate>(\n  \"ProtectedBrowserNavigate\",\n)({\n  url: Schema.String.check(Schema.isMaxLength(8192)),\n}) {}\n\nexport class ProtectedBrowserClick extends Schema.Class<ProtectedBrowserClick>(\n  \"ProtectedBrowserClick\",\n)({\n  ref: BrowserReference,\n}) {}\n\n/**\n * Non-secret text for an ordinary text control or native single select in the current observation.\n * Never pass credential material. Credential roles, including username, require useCredential.\n * Selects match a unique enabled option value, then a unique exact trimmed label. Empty text clears.\n */\nexport class ProtectedBrowserFill extends Schema.Class<ProtectedBrowserFill>(\n  \"ProtectedBrowserFill\",\n)(\n  Schema.Struct({\n    ref: BrowserReference,\n    value: Schema.String.check(Schema.isMaxLength(8192)),\n  }).pipe(Schema.annotate({ parseOptions: { onExcessProperty: \"error\" } })),\n) {}\n\nexport const CredentialDispatch = Schema.Literals([\n  \"not-dispatched\",\n  \"possibly-dispatched\",\n  \"dispatched\",\n]);\n\nexport const CredentialMilestone = Schema.Literals([\n  \"none\",\n  \"partial-fill\",\n  \"filled\",\n  \"submission-dispatched\",\n]);\n\nexport const ProtectedObservationState = Schema.Literals([\n  \"before-exposure\",\n  \"protected\",\n  \"approved-after-exposure\",\n  \"closed\",\n]);\n\nexport const ProtectedCleanup = Schema.Literals([\"not-requested\", \"confirmed\", \"unconfirmed\"]);\n\nconst Evidence = {\n  dispatch: CredentialDispatch,\n  milestone: CredentialMilestone,\n  observation: ProtectedObservationState,\n  cleanup: ProtectedCleanup,\n};\n\n/** No foreign message/cause or page data may enter this failure. Closure does not undo dispatch. */\nexport class ProtectedBrowserError extends Schema.TaggedError<ProtectedBrowserError>()(\n  \"ProtectedBrowserError\",\n  {\n    reason: Schema.Literals([\n      \"denied\",\n      \"missing-credential\",\n      \"stale-reference\",\n      \"unsupported\",\n      \"needs-attention\",\n      \"busy\",\n      \"closed\",\n      \"limit\",\n      \"timeout\",\n      \"provider\",\n      \"resolver\",\n      \"outcome-unknown\",\n      \"observation-blocked\",\n    ]),\n    ...Evidence,\n  },\n) {}\n\nexport class CredentialUseResult extends Schema.Class<CredentialUseResult>(\"CredentialUseResult\")({\n  ...Evidence,\n  authentication: Schema.Literal(\"unverified\"),\n}) {}\n\nconst SecretText = Schema.Redacted(Schema.NonEmptyString.check(Schema.isMaxLength(1024)));\n\n/** Host-only material. Never encode it into Tool results, checkpoints, or storage. */\nexport const LoginCredential = Schema.TaggedStruct(\"LoginCredential\", {\n  username: SecretText,\n  password: SecretText,\n});\n\n/** Security codes are transient, never persisted. Dummy tests are not PCI compliance evidence. */\nexport const CardCredential = Schema.TaggedStruct(\"CardCredential\", {\n  name: SecretText,\n  number: Schema.Redacted(Schema.String.check(Schema.isPattern(/^\\d{12,19}$/))),\n  expiry: SecretText,\n  expiryMonth: Schema.Redacted(Schema.String.check(Schema.isPattern(/^(0[1-9]|1[0-2])$/))),\n  expiryYear: Schema.Redacted(Schema.String.check(Schema.isPattern(/^\\d{4}$/))),\n  securityCode: Schema.optionalKey(\n    Schema.Redacted(Schema.String.check(Schema.isPattern(/^\\d{3,4}$/))),\n  ),\n});\n\nexport const BrowserCredentialMaterial = Schema.Union([LoginCredential, CardCredential]);\nexport type BrowserCredentialMaterial = typeof BrowserCredentialMaterial.Type;\n\nexport class CredentialAccessError extends Schema.TaggedError<CredentialAccessError>()(\n  \"CredentialAccessError\",\n  {\n    reason: Schema.Literals([\"denied\", \"missing-credential\", \"needs-attention\", \"resolver\"]),\n  },\n) {}\n\nexport interface CredentialAccessRequest {\n  readonly caller: Redacted.Redacted<string>;\n  readonly kind: typeof CredentialKind.Type;\n  readonly target: CredentialTarget;\n}\n\nexport interface CredentialUseAuthorization extends CredentialAccessRequest {\n  readonly key: Redacted.Redacted<string>;\n  readonly roles: ReadonlyArray<typeof CredentialFieldRole.Type>;\n  readonly submit: boolean;\n}\n\n/** Exact current action proposed to host authority; no ordinary fill value or secret is included. */\nexport const ProtectedBrowserAction = Schema.Union([\n  Schema.TaggedStruct(\"Navigate\", { url: ProtectedBrowserNavigate.fields.url }),\n  Schema.TaggedStruct(\"Fill\", {\n    ref: BrowserReference,\n    target: CredentialTarget,\n    role: Schema.Literals([\"text\", \"select\"]),\n  }),\n  Schema.TaggedStruct(\"Click\", {\n    ref: BrowserReference,\n    target: CredentialTarget,\n    role: Schema.Literals([\"button\", \"radio\", \"checkbox\"]),\n  }),\n  Schema.TaggedStruct(\"Click\", {\n    ref: BrowserReference,\n    target: CredentialTarget,\n    role: Schema.Literal(\"link\"),\n    url: LinkUrl,\n  }),\n  Schema.TaggedStruct(\"Submit\", { ref: BrowserReference, target: CredentialTarget }),\n]);\n\nexport type ProtectedBrowserAction = typeof ProtectedBrowserAction.Type;\n\n/**\n * Trust only these current observation origins. The top origin must be included. Other frames\n * supply neither text nor usable refs. This does not expand network policy or credential grants.\n */\nexport class CredentialObservationGrant extends Schema.Class<CredentialObservationGrant>(\n  \"CredentialObservationGrant\",\n)({\n  decision: Schema.Literal(\"trust-recipient-no-credential-echo\"),\n  origins: Schema.Array(CredentialOrigin).check(\n    Schema.isMinLength(1),\n    Schema.isMaxLength(16),\n    Schema.isUnique(),\n  ),\n}) {}\n\nexport const CredentialObservationDecision = Schema.Union([\n  Schema.Literals([\"trust-recipient-no-credential-echo\", \"deny\"]),\n  CredentialObservationGrant,\n]);\n\n/**\n * Host-only vault and grant port. Derive caller from the authorized invocation, never Tool input.\n * Recheck account ownership, current grants, merchant/frame/recipient pairing, and any side\n * effects caused by filling. Listing authorizes metadata only. Grant checks never widen network\n * policy. Implementations must not log material or put it in defects/traces.\n */\nexport class BrowserCredentialAccess extends Context.Service<\n  BrowserCredentialAccess,\n  {\n    readonly caller: Effect.Effect<Redacted.Redacted<string>, CredentialAccessError>;\n    readonly list: (request: CredentialAccessRequest) => Effect.Effect<\n      ReadonlyArray<{\n        readonly key: Redacted.Redacted<string>;\n        readonly metadata: CredentialOfferMetadata;\n      }>,\n      CredentialAccessError\n    >;\n    readonly authorize: (\n      request: CredentialUseAuthorization,\n    ) => Effect.Effect<void, CredentialAccessError>;\n    readonly resolve: (\n      request: CredentialUseAuthorization,\n    ) => Effect.Effect<BrowserCredentialMaterial, CredentialAccessError>;\n    /**\n     * Optional host authority for every ordinary navigate/fill/click, mandatory for Submit.\n     * Recheck caller ownership, user intent, current submission/continuation grants for ALL prior\n     * exposures, and this exact target. Exposures may come from separate credential frames/forms.\n     * Without this hook, ordinary actions retain their observation gate and Submit is unsupported.\n     * Observation trust alone never authorizes a new native submit. Called again on each action;\n     * approvals are not cached. The pass revalidates caller and target after this hook returns.\n     */\n    readonly authorizeAction?: (request: {\n      readonly caller: Redacted.Redacted<string>;\n      readonly action: ProtectedBrowserAction;\n      readonly exposures: ReadonlyArray<CredentialTarget>;\n    }) => Effect.Effect<void, CredentialAccessError>;\n    /**\n     * Explicitly trust all observed destinations not to echo credentials, including transformed\n     * or delayed echoes. Called for every observation and non-secret action after exposure.\n     * The string grant trusts all current observed origins. Return CredentialObservationGrant\n     * to select an explicit subset instead. This is recipient trust, not submission authority,\n     * a universal secrecy guarantee, or a login verifier.\n     */\n    readonly observation: (request: {\n      readonly caller: Redacted.Redacted<string>;\n      readonly topOrigin: typeof CredentialOrigin.Type;\n      readonly frameOrigins: ReadonlyArray<typeof CredentialOrigin.Type>;\n      readonly exposures: ReadonlyArray<CredentialTarget>;\n      /** A human may have entered secrets; explicitly authorize observation even with no vault exposures. */\n      readonly humanExposure?: boolean;\n      /** Origins present when the human received control, retained across durable suspension. */\n      readonly humanOrigins?: ReadonlyArray<typeof CredentialOrigin.Type>;\n    }) => Effect.Effect<typeof CredentialObservationDecision.Type, CredentialAccessError>;\n  }\n>()(\"@effect-agent/sandbox/BrowserCredentialAccess\") {}\n\n/**\n * Host-only suspended-pass state. Persist with the host's fenced controller receipt, never in\n * a Tool result. It contains no credential material, offers, DOM references usable after resume,\n * cookies, page text, or provider capability. A host must restore its own credential exposure\n * ledger as well. The original deadline and action allowance include time spent with the human.\n */\nexport class ProtectedBrowserCheckpoint extends Schema.Class<ProtectedBrowserCheckpoint>(\n  \"ProtectedBrowserCheckpoint\",\n)({\n  policy: InteractiveBrowserPolicy,\n  startedAt: Schema.Natural,\n  actions: Schema.Natural,\n  exposures: Schema.Array(CredentialTarget).check(Schema.isMaxLength(1000)),\n  humanExposure: Schema.Boolean,\n  humanOrigins: Schema.Array(CredentialOrigin).check(Schema.isMaxLength(16)),\n  dispatch: CredentialDispatch,\n  milestone: CredentialMilestone,\n}) {}\n\n/** A private ephemeral pass. No selectors, JavaScript, screenshots, viewer, or provider identity. */\nexport interface ProtectedBrowserHandle {\n  readonly navigate: (\n    request: ProtectedBrowserNavigate,\n  ) => Effect.Effect<void, ProtectedBrowserError>;\n  readonly observe: Effect.Effect<ProtectedBrowserObservation, ProtectedBrowserError>;\n  readonly click: (request: ProtectedBrowserClick) => Effect.Effect<void, ProtectedBrowserError>;\n  /** Uses the same lock, budgets, current-target checks and post-exposure grant as other actions. */\n  readonly fill: (request: ProtectedBrowserFill) => Effect.Effect<void, ProtectedBrowserError>;\n  readonly listCredentialOffers: (\n    request: ListCredentialOffers,\n  ) => Effect.Effect<ReadonlyArray<CredentialOffer>, ProtectedBrowserError>;\n  readonly useCredential: (\n    request: UseCredential,\n  ) => Effect.Effect<CredentialUseResult, ProtectedBrowserError>;\n  readonly close: Effect.Effect<typeof ProtectedCleanup.Type>;\n}\n\nexport class ProtectedBrowser extends Context.Service<\n  ProtectedBrowser,\n  {\n    readonly open: (\n      policy: InteractiveBrowserPolicy,\n    ) => Effect.Effect<\n      ProtectedBrowserHandle,\n      ProtectedBrowserError,\n      Scope.Scope | BrowserCredentialAccess\n    >;\n  }\n>()(\"@effect-agent/sandbox/ProtectedBrowser\") {}\n\n/** Build once in an execution/Attempt Layer. Acquires lazily and shares one pass across Tools. */\nexport class ProtectedBrowserSession extends Context.Service<\n  ProtectedBrowserSession,\n  {\n    readonly get: Effect.Effect<ProtectedBrowserHandle, ProtectedBrowserError>;\n  }\n>()(\"@effect-agent/sandbox/ProtectedBrowserSession\") {\n  static layer(policy: InteractiveBrowserPolicy) {\n    return Layer.effect(this)(\n      Effect.gen(function* () {\n        const browser = yield* ProtectedBrowser;\n        const access = yield* BrowserCredentialAccess;\n        const scope = yield* Effect.scope;\n\n        const cached = yield* Effect.cached(\n          browser\n            .open(policy)\n            .pipe(\n              Effect.provideService(BrowserCredentialAccess, access),\n              Effect.provideService(Scope.Scope, scope),\n            ),\n        );\n\n        return {\n          get: Effect.suspend(() =>\n            scope.state._tag === \"Closed\"\n              ? Effect.fail(\n                  new ProtectedBrowserError({\n                    reason: \"closed\",\n                    dispatch: \"not-dispatched\",\n                    milestone: \"none\",\n                    observation: \"closed\",\n                    cleanup: \"not-requested\",\n                  }),\n                )\n              : cached,\n          ),\n        };\n      }),\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,MAAa,mBAAmB,OAAO,OAAO,MAC5C,OAAO,YACJ,UAAU,MAAM,WAAW,UAAU,KAAK,OAAO,GAAG,sBAAsB,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,CAC7F,CACF;AAEA,MAAa,mBAAmB,OAAO,OAAO,MAAM,OAAO,OAAO,CAAC;AACnE,MAAa,iBAAiB,OAAO,SAAS,CAAC,SAAS,MAAM,CAAC;AAE/D,MAAa,sBAAsB,OAAO,SAAS;CACjD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,QAAQ,OAAO,OAAO,MAAM,OAAO,YAAY,GAAG,CAAC;AACzD,MAAM,UAAU,4BAA4B,MAAM,OAAO,aAAa,UAAU,CAAC;AAEjF,IAAa,mBAAb,cAAsC,OAAO,MAAwB,kBAAkB,CAAC,CAAC;CACvF,WAAW;CACX,aAAa;CACb,iBAAiB;CACjB,UAAU;CACV,OAAO;CACP,MAAM;AACR,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,0BAAb,cAA6C,OAAO,MAClD,yBACF,CAAC,CAAC;CACA,KAAK;CACL,QAAQ;CACR,MAAM,OAAO,MAAM,CACjB,qBACA,OAAO,SAAS;EACd;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,CACH,CAAC;CACD,OAAO;;CAEP,SAAS,OAAO,YAAY,OAAO,OAAO;;CAE1C,KAAK,OAAO,YAAY,OAAO;AACjC,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,8BAAb,cAAiD,OAAO,MACtD,6BACF,CAAC,CAAC;CACA,UAAU;CACV,WAAW;CACX,MAAM,OAAO,OAAO,MAAM,OAAO,YAAY,KAAS,CAAC;CACvD,UAAU,OAAO,MAAM,uBAAuB,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;CAC5E,WAAW,OAAO;CAClB,aAAa,OAAO,SAAS,CAAC,mBAAmB,yBAAyB,CAAC;AAC7E,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,0BAAb,cAA6C,OAAO,MAClD,yBACF,CAAC,CAAC;CACA,OAAO;CACP,OAAO,OAAO,YAAY,KAAK;CAC/B,UAAU,OAAO,YAAY,OAAO,OAAO,MAAM,OAAO,UAAU,SAAS,CAAC,CAAC;;CAE7E,gBAAgB,OAAO,YACrB,OAAO,OAAO;EACZ,MAAM,OAAO,YAAY,KAAK;EAC9B,OAAO,OAAO,YAAY,KAAK;EAC/B,OAAO,OAAO,YAAY,KAAK;EAC/B,MAAM,OAAO,YAAY,KAAK;EAC9B,QAAQ,OAAO,YAAY,KAAK;EAChC,YAAY,OAAO,YAAY,KAAK;EACpC,SAAS,OAAO,YAAY,KAAK;CACnC,CAAC,CACH;AACF,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,kBAAb,cAAqC,OAAO,MAAuB,iBAAiB,CAAC,CAAC;CACpF,KAAK;CACL,MAAM;CACN,UAAU;AACZ,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,uBAAb,cAA0C,OAAO,MAC/C,sBACF,CAAC,CAAC;CACA,MAAM;CACN,QAAQ;AACV,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,gBAAb,cAAmC,OAAO,MAAqB,eAAe,CAAC,CAAC;CAC9E,OAAO;CACP,QAAQ,OAAO,MAAM,OAAO,OAAO;EAAE,KAAK;EAAkB,MAAM;CAAoB,CAAC,CAAC,CAAC,CAAC,MACxF,OAAO,YAAY,CAAC,GACpB,OAAO,YAAY,CAAC,CACtB;CACA,QAAQ,OAAO,YAAY,gBAAgB;AAC7C,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,2BAAb,cAA8C,OAAO,MACnD,0BACF,CAAC,CAAC,EACA,KAAK,OAAO,OAAO,MAAM,OAAO,YAAY,IAAI,CAAC,EACnD,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,wBAAb,cAA2C,OAAO,MAChD,uBACF,CAAC,CAAC,EACA,KAAK,iBACP,CAAC,CAAC,CAAC,CAAC;;;;;;AAOJ,IAAa,uBAAb,cAA0C,OAAO,MAC/C,sBACF,CAAC,CACC,OAAO,OAAO;CACZ,KAAK;CACL,OAAO,OAAO,OAAO,MAAM,OAAO,YAAY,IAAI,CAAC;AACrD,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,EAAE,cAAc,EAAE,kBAAkB,QAAQ,EAAE,CAAC,CAAC,CAC1E,CAAC,CAAC,CAAC;AAEH,MAAa,qBAAqB,OAAO,SAAS;CAChD;CACA;CACA;AACF,CAAC;AAED,MAAa,sBAAsB,OAAO,SAAS;CACjD;CACA;CACA;CACA;AACF,CAAC;AAED,MAAa,4BAA4B,OAAO,SAAS;CACvD;CACA;CACA;CACA;AACF,CAAC;AAED,MAAa,mBAAmB,OAAO,SAAS;CAAC;CAAiB;CAAa;AAAa,CAAC;AAE7F,MAAM,WAAW;CACf,UAAU;CACV,WAAW;CACX,aAAa;CACb,SAAS;AACX;;AAGA,IAAa,wBAAb,cAA2C,OAAO,YAAmC,CAAC,CACpF,yBACA;CACE,QAAQ,OAAO,SAAS;EACtB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;CACD,GAAG;AACL,CACF,CAAC,CAAC,CAAC;AAEH,IAAa,sBAAb,cAAyC,OAAO,MAA2B,qBAAqB,CAAC,CAAC;CAChG,GAAG;CACH,gBAAgB,OAAO,QAAQ,YAAY;AAC7C,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAM,aAAa,OAAO,SAAS,OAAO,eAAe,MAAM,OAAO,YAAY,IAAI,CAAC,CAAC;;AAGxF,MAAa,kBAAkB,OAAO,aAAa,mBAAmB;CACpE,UAAU;CACV,UAAU;AACZ,CAAC;;AAGD,MAAa,iBAAiB,OAAO,aAAa,kBAAkB;CAClE,MAAM;CACN,QAAQ,OAAO,SAAS,OAAO,OAAO,MAAM,OAAO,UAAU,aAAa,CAAC,CAAC;CAC5E,QAAQ;CACR,aAAa,OAAO,SAAS,OAAO,OAAO,MAAM,OAAO,UAAU,mBAAmB,CAAC,CAAC;CACvF,YAAY,OAAO,SAAS,OAAO,OAAO,MAAM,OAAO,UAAU,SAAS,CAAC,CAAC;CAC5E,cAAc,OAAO,YACnB,OAAO,SAAS,OAAO,OAAO,MAAM,OAAO,UAAU,WAAW,CAAC,CAAC,CACpE;AACF,CAAC;AAED,MAAa,4BAA4B,OAAO,MAAM,CAAC,iBAAiB,cAAc,CAAC;AAGvF,IAAa,wBAAb,cAA2C,OAAO,YAAmC,CAAC,CACpF,yBACA,EACE,QAAQ,OAAO,SAAS;CAAC;CAAU;CAAsB;CAAmB;AAAU,CAAC,EACzF,CACF,CAAC,CAAC,CAAC;;AAeH,MAAa,yBAAyB,OAAO,MAAM;CACjD,OAAO,aAAa,YAAY,EAAE,KAAK,yBAAyB,OAAO,IAAI,CAAC;CAC5E,OAAO,aAAa,QAAQ;EAC1B,KAAK;EACL,QAAQ;EACR,MAAM,OAAO,SAAS,CAAC,QAAQ,QAAQ,CAAC;CAC1C,CAAC;CACD,OAAO,aAAa,SAAS;EAC3B,KAAK;EACL,QAAQ;EACR,MAAM,OAAO,SAAS;GAAC;GAAU;GAAS;EAAU,CAAC;CACvD,CAAC;CACD,OAAO,aAAa,SAAS;EAC3B,KAAK;EACL,QAAQ;EACR,MAAM,OAAO,QAAQ,MAAM;EAC3B,KAAK;CACP,CAAC;CACD,OAAO,aAAa,UAAU;EAAE,KAAK;EAAkB,QAAQ;CAAiB,CAAC;AACnF,CAAC;;;;;AAQD,IAAa,6BAAb,cAAgD,OAAO,MACrD,4BACF,CAAC,CAAC;CACA,UAAU,OAAO,QAAQ,oCAAoC;CAC7D,SAAS,OAAO,MAAM,gBAAgB,CAAC,CAAC,MACtC,OAAO,YAAY,CAAC,GACpB,OAAO,YAAY,EAAE,GACrB,OAAO,SAAS,CAClB;AACF,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,gCAAgC,OAAO,MAAM,CACxD,OAAO,SAAS,CAAC,sCAAsC,MAAM,CAAC,GAC9D,0BACF,CAAC;;;;;;;AAQD,IAAa,0BAAb,cAA6C,QAAQ,QAgDnD,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC;;;;;;;AAQtD,IAAa,6BAAb,cAAgD,OAAO,MACrD,4BACF,CAAC,CAAC;CACA,QAAQ;CACR,WAAW,OAAO;CAClB,SAAS,OAAO;CAChB,WAAW,OAAO,MAAM,gBAAgB,CAAC,CAAC,MAAM,OAAO,YAAY,GAAI,CAAC;CACxE,eAAe,OAAO;CACtB,cAAc,OAAO,MAAM,gBAAgB,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;CACzE,UAAU;CACV,WAAW;AACb,CAAC,CAAC,CAAC,CAAC;AAoBJ,IAAa,mBAAb,cAAsC,QAAQ,QAW5C,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC;;AAG/C,IAAa,0BAAb,cAA6C,QAAQ,QAKnD,CAAC,CAAC,+CAA+C,CAAC,CAAC;CACnD,OAAO,MAAM,QAAkC;EAC7C,OAAO,MAAM,OAAO,IAAI,CAAC,CACvB,OAAO,IAAI,aAAa;GACtB,MAAM,UAAU,OAAO;GACvB,MAAM,SAAS,OAAO;GACtB,MAAM,QAAQ,OAAO,OAAO;GAE5B,MAAM,SAAS,OAAO,OAAO,OAC3B,QACG,KAAK,MAAM,CAAC,CACZ,KACC,OAAO,eAAe,yBAAyB,MAAM,GACrD,OAAO,eAAe,MAAM,OAAO,KAAK,CAC1C,CACJ;GAEA,OAAO,EACL,KAAK,OAAO,cACV,MAAM,MAAM,SAAS,WACjB,OAAO,KACL,IAAI,sBAAsB;IACxB,QAAQ;IACR,UAAU;IACV,WAAW;IACX,aAAa;IACb,SAAS;GACX,CAAC,CACH,IACA,MACN,EACF;EACF,CAAC,CACH;CACF;AACF"}

package/dist/sandbox/Sandbox.d.mts

@@ -0,0 +1,2 @@
+import { C as SandboxSpawnError, E as SandboxUnsupportedRequestError, S as SandboxSecretHandle, T as SandboxTimeoutError, _ as SandboxOutput, a as SandboxArtifact, b as SandboxResourceUse, c as SandboxError, d as SandboxExitError, f as SandboxExited, g as SandboxNetworkPolicy, h as SandboxMount, i as Sandbox, l as SandboxEvent, m as SandboxLimits, n as NetworkDisabled, o as SandboxArtifactRule, p as SandboxImplementation, r as SANDBOX_DIAGNOSTIC_MAX_LENGTH, s as SandboxEnvironment, t as NetworkAllowlist, u as SandboxExecute, v as SandboxOutputLimitError, w as SandboxStarted, x as SandboxRuntime, y as SandboxRequest } from "../Sandbox-CEsDWBLq.mjs";
+export { NetworkAllowlist, NetworkDisabled, SANDBOX_DIAGNOSTIC_MAX_LENGTH, Sandbox, SandboxArtifact, SandboxArtifactRule, SandboxEnvironment, SandboxError, SandboxEvent, SandboxExecute, SandboxExitError, SandboxExited, SandboxImplementation, SandboxLimits, SandboxMount, SandboxNetworkPolicy, SandboxOutput, SandboxOutputLimitError, SandboxRequest, SandboxResourceUse, SandboxRuntime, SandboxSecretHandle, SandboxSpawnError, SandboxStarted, SandboxTimeoutError, SandboxUnsupportedRequestError };

package/dist/sandbox/Sandbox.mjs

@@ -0,0 +1,208 @@
+import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.mjs";
+import { Context, Duration, Schema } from "effect";
+//#region src/sandbox/Sandbox.ts
+var Sandbox_exports = /* @__PURE__ */ __exportAll({
+	NetworkAllowlist: () => NetworkAllowlist,
+	NetworkDisabled: () => NetworkDisabled,
+	SANDBOX_DIAGNOSTIC_MAX_LENGTH: () => SANDBOX_DIAGNOSTIC_MAX_LENGTH,
+	Sandbox: () => Sandbox,
+	SandboxArtifact: () => SandboxArtifact,
+	SandboxArtifactRule: () => SandboxArtifactRule,
+	SandboxEnvironment: () => SandboxEnvironment,
+	SandboxError: () => SandboxError,
+	SandboxEvent: () => SandboxEvent,
+	SandboxExitError: () => SandboxExitError,
+	SandboxExited: () => SandboxExited,
+	SandboxImplementation: () => SandboxImplementation,
+	SandboxLimits: () => SandboxLimits,
+	SandboxMount: () => SandboxMount,
+	SandboxNetworkPolicy: () => SandboxNetworkPolicy,
+	SandboxOutput: () => SandboxOutput,
+	SandboxOutputLimitError: () => SandboxOutputLimitError,
+	SandboxRequest: () => SandboxRequest,
+	SandboxResourceUse: () => SandboxResourceUse,
+	SandboxRuntime: () => SandboxRuntime,
+	SandboxSecretHandle: () => SandboxSecretHandle,
+	SandboxSpawnError: () => SandboxSpawnError,
+	SandboxStarted: () => SandboxStarted,
+	SandboxTimeoutError: () => SandboxTimeoutError,
+	SandboxUnsupportedRequestError: () => SandboxUnsupportedRequestError
+});
+const BoundedName = Schema.NonEmptyString.check(Schema.isMaxLength(256));
+const BoundedPath = Schema.NonEmptyString.check(Schema.isMaxLength(4096));
+const BoundedArgument = Schema.String.check(Schema.isMaxLength(32768));
+const MAX_OUTPUT_BYTES = 16777216;
+const MAX_ARTIFACT_RULES = 64;
+const BoundedOutputText = Schema.String.check(Schema.isMaxLength(MAX_OUTPUT_BYTES));
+const SANDBOX_DIAGNOSTIC_MAX_LENGTH = 8192;
+const BoundedDiagnostic = Schema.String.check(Schema.isMaxLength(SANDBOX_DIAGNOSTIC_MAX_LENGTH));
+const PositiveInt = Schema.Int.check(Schema.isGreaterThan(0));
+const PositiveNumber = Schema.Finite.check(Schema.isGreaterThan(0));
+const MaxOutputBytes = PositiveInt.check(Schema.isLessThanOrEqualTo(MAX_OUTPUT_BYTES));
+const BoundedArguments = Schema.Array(BoundedArgument).check(Schema.isMaxLength(256));
+const BoundedEnvironmentNames = Schema.Array(BoundedName).check(Schema.isMaxLength(128));
+const FinitePositiveDuration = Schema.Duration.pipe(Schema.refine((duration) => Duration.isFinite(duration) && Duration.isPositive(duration), { expected: "a finite positive duration" }));
+const FiniteNonNegativeDuration = Schema.Duration.pipe(Schema.refine((duration) => Duration.isFinite(duration) && !Duration.isNegative(duration), { expected: "a finite non-negative duration" }));
+/** A requested runtime image or executable environment. */
+var SandboxRuntime = class extends Schema.Class("SandboxRuntime")({
+	kind: Schema.Literals([
+		"container",
+		"microvm",
+		"wasm",
+		"unisolated-process"
+	]),
+	identity: BoundedName
+}) {};
+/** The implementation and its isolation posture that executed a request. */
+var SandboxImplementation = class extends Schema.Class("SandboxImplementation")({
+	isolation: Schema.Literals(["isolated", "unisolated"]),
+	identity: BoundedName
+}) {};
+/** A host path made available to the requested runtime. */
+var SandboxMount = class extends Schema.Class("SandboxMount")({
+	source: BoundedPath,
+	target: BoundedPath,
+	access: Schema.Literals(["read-only", "read-write"])
+}) {};
+/** Explicitly denies all workload network access. */
+var NetworkDisabled = class extends Schema.TaggedClass()("NetworkDisabled", {}) {};
+/** Explicitly permits connections only to the named destination and port allowlists. */
+var NetworkAllowlist = class extends Schema.TaggedClass()("NetworkAllowlist", {
+	domains: Schema.Array(BoundedName).check(Schema.isMaxLength(256)),
+	ports: Schema.Array(PositiveInt.check(Schema.isLessThanOrEqualTo(65535))).check(Schema.isMaxLength(256))
+}) {};
+/** Network access policy supplied to a sandbox implementation. */
+const SandboxNetworkPolicy = Schema.Union([NetworkDisabled, NetworkAllowlist]);
+/** Names of ambient variables that may be copied into the workload environment. */
+var SandboxEnvironment = class extends Schema.Class("SandboxEnvironment")({ allow: BoundedEnvironmentNames }) {};
+/** Limits that a sandbox implementation must either enforce or reject. */
+var SandboxLimits = class extends Schema.Class("SandboxLimits")({
+	cpuCores: Schema.optionalKey(PositiveNumber.check(Schema.isLessThanOrEqualTo(1024))),
+	memoryBytes: Schema.optionalKey(PositiveInt.check(Schema.isLessThanOrEqualTo(1099511627776))),
+	maxOutputBytes: MaxOutputBytes,
+	maxWallTime: FinitePositiveDuration
+}) {};
+/** A secret reference; raw secret values are never part of a sandbox request. */
+var SandboxSecretHandle = class extends Schema.Class("SandboxSecretHandle")({
+	id: BoundedName,
+	purpose: Schema.NonEmptyString.check(Schema.isMaxLength(2048))
+}) {};
+/** Rules for copying selected workload output out of an isolated runtime. */
+var SandboxArtifactRule = class extends Schema.Class("SandboxArtifactRule")({
+	path: BoundedPath,
+	maxBytes: MaxOutputBytes
+}) {};
+/** Metadata for an artifact that a sandbox implementation released after applying its rules. */
+var SandboxArtifact = class extends Schema.Class("SandboxArtifact")({
+	path: BoundedPath,
+	bytes: Schema.Natural.check(Schema.isLessThanOrEqualTo(MAX_OUTPUT_BYTES)),
+	digest: BoundedName,
+	mediaType: Schema.optionalKey(BoundedName)
+}) {};
+/** Schema-first command execution request. Command and arguments are intentionally separate. */
+var SandboxRequest = class extends Schema.Class("SandboxRequest")({
+	runtime: SandboxRuntime,
+	command: BoundedPath,
+	args: BoundedArguments,
+	cwd: BoundedPath,
+	environment: SandboxEnvironment,
+	mounts: Schema.Array(SandboxMount).check(Schema.isMaxLength(64)),
+	network: SandboxNetworkPolicy,
+	limits: SandboxLimits,
+	secretHandles: Schema.Array(SandboxSecretHandle).check(Schema.isMaxLength(64)),
+	artifactRules: Schema.Array(SandboxArtifactRule).check(Schema.isMaxLength(MAX_ARTIFACT_RULES))
+}) {};
+/** Accounting that a sandbox implementation was able to observe for one execution. */
+var SandboxResourceUse = class extends Schema.Class("SandboxResourceUse")({
+	wallTime: FiniteNonNegativeDuration,
+	stdoutBytes: Schema.Natural.check(Schema.isLessThanOrEqualTo(MAX_OUTPUT_BYTES)),
+	stderrBytes: Schema.Natural.check(Schema.isLessThanOrEqualTo(MAX_OUTPUT_BYTES)),
+	cpuMillis: Schema.optionalKey(Schema.Natural),
+	memoryBytes: Schema.optionalKey(Schema.Natural)
+}) {};
+const SandboxEventBase = {
+	eventVersion: Schema.Literal(1),
+	implementation: SandboxImplementation
+};
+/** Signals that the implementation has accepted the request and started its workload. */
+var SandboxStarted = class extends Schema.TaggedClass()("SandboxStarted", {
+	...SandboxEventBase,
+	runtime: SandboxRuntime
+}) {};
+/** A bounded text fragment from stdout or stderr. Sandbox output is sensitive by default. */
+var SandboxOutput = class extends Schema.TaggedClass()("SandboxOutput", {
+	...SandboxEventBase,
+	stream: Schema.Literals(["stdout", "stderr"]),
+	text: BoundedOutputText,
+	bytes: Schema.Natural.check(Schema.isLessThanOrEqualTo(MAX_OUTPUT_BYTES))
+}) {};
+/** The terminal process status and observed bounded resource usage. */
+var SandboxExited = class extends Schema.TaggedClass()("SandboxExited", {
+	...SandboxEventBase,
+	exitCode: Schema.Int,
+	resourceUse: SandboxResourceUse,
+	artifacts: Schema.Array(SandboxArtifact).check(Schema.isMaxLength(MAX_ARTIFACT_RULES))
+}) {};
+/** Versioned execution event stream. */
+const SandboxEvent = Schema.Union([
+	SandboxStarted,
+	SandboxOutput,
+	SandboxExited
+]);
+/** The runtime could not start the requested process. */
+var SandboxSpawnError = class extends Schema.TaggedError()("SandboxSpawnError", {
+	implementation: SandboxImplementation,
+	command: BoundedPath,
+	message: BoundedDiagnostic,
+	cause: Schema.optionalKey(Schema.Defect())
+}) {};
+/** The process ended unsuccessfully after starting. */
+var SandboxExitError = class extends Schema.TaggedError()("SandboxExitError", {
+	implementation: SandboxImplementation,
+	exitCode: Schema.Int,
+	message: BoundedDiagnostic,
+	cause: Schema.optionalKey(Schema.Defect())
+}) {};
+/** The wall-clock execution limit elapsed and the owned process was interrupted. */
+var SandboxTimeoutError = class extends Schema.TaggedError()("SandboxTimeoutError", {
+	implementation: SandboxImplementation,
+	maxWallTime: FinitePositiveDuration
+}) {};
+/** A stdout or stderr stream exceeded its configured bounded-output limit. */
+var SandboxOutputLimitError = class extends Schema.TaggedError()("SandboxOutputLimitError", {
+	implementation: SandboxImplementation,
+	stream: Schema.Literals(["stdout", "stderr"]),
+	limit: PositiveInt,
+	observed: PositiveInt
+}) {};
+/** The selected implementation cannot honestly enforce one requested security or resource feature. */
+var SandboxUnsupportedRequestError = class extends Schema.TaggedError()("SandboxUnsupportedRequestError", {
+	implementation: SandboxImplementation,
+	feature: Schema.Literals([
+		"runtime",
+		"mounts",
+		"network",
+		"cpu-limit",
+		"memory-limit",
+		"secret-handles",
+		"artifacts"
+	]),
+	message: BoundedDiagnostic
+}) {};
+/** Expected sandbox execution failures. Interruption remains an Effect interruption, never a fabricated exit. */
+const SandboxError = Schema.Union([
+	SandboxSpawnError,
+	SandboxExitError,
+	SandboxTimeoutError,
+	SandboxOutputLimitError,
+	SandboxUnsupportedRequestError
+]);
+/**
+* Scoped command/code execution capability. Implementations must identify their isolation posture
+* in every emitted event; an `unisolated` implementation is never a security sandbox.
+*/
+var Sandbox = class extends Context.Service()("@effect-agent/sandbox/Sandbox") {};
+//#endregion
+export { NetworkAllowlist, NetworkDisabled, SANDBOX_DIAGNOSTIC_MAX_LENGTH, Sandbox, SandboxArtifact, SandboxArtifactRule, SandboxEnvironment, SandboxError, SandboxEvent, SandboxExitError, SandboxExited, SandboxImplementation, SandboxLimits, SandboxMount, SandboxNetworkPolicy, SandboxOutput, SandboxOutputLimitError, SandboxRequest, SandboxResourceUse, SandboxRuntime, SandboxSecretHandle, SandboxSpawnError, SandboxStarted, SandboxTimeoutError, SandboxUnsupportedRequestError, Sandbox_exports as t };
+
+//# sourceMappingURL=Sandbox.mjs.map

package/dist/sandbox/Sandbox.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sandbox.mjs","names":[],"sources":["../../src/sandbox/Sandbox.ts"],"sourcesContent":["import { Context, Duration, Schema, type Stream } from \"effect\";\n\nconst BoundedName = Schema.NonEmptyString.check(Schema.isMaxLength(256));\nconst BoundedPath = Schema.NonEmptyString.check(Schema.isMaxLength(4 * 1024));\nconst BoundedArgument = Schema.String.check(Schema.isMaxLength(32 * 1024));\nconst MAX_OUTPUT_BYTES = 16 * 1024 * 1024;\nconst MAX_ARTIFACT_RULES = 64;\nconst BoundedOutputText = Schema.String.check(Schema.isMaxLength(MAX_OUTPUT_BYTES));\n\nexport const SANDBOX_DIAGNOSTIC_MAX_LENGTH = 8 * 1024;\nconst BoundedDiagnostic = Schema.String.check(Schema.isMaxLength(SANDBOX_DIAGNOSTIC_MAX_LENGTH));\nconst PositiveInt = Schema.Int.check(Schema.isGreaterThan(0));\nconst PositiveNumber = Schema.Finite.check(Schema.isGreaterThan(0));\nconst MaxOutputBytes = PositiveInt.check(Schema.isLessThanOrEqualTo(MAX_OUTPUT_BYTES));\nconst BoundedArguments = Schema.Array(BoundedArgument).check(Schema.isMaxLength(256));\nconst BoundedEnvironmentNames = Schema.Array(BoundedName).check(Schema.isMaxLength(128));\n\nconst FinitePositiveDuration = Schema.Duration.pipe(\n  Schema.refine(\n    (duration): duration is Duration.Duration =>\n      Duration.isFinite(duration) && Duration.isPositive(duration),\n    { expected: \"a finite positive duration\" },\n  ),\n);\n\nconst FiniteNonNegativeDuration = Schema.Duration.pipe(\n  Schema.refine(\n    (duration): duration is Duration.Duration =>\n      Duration.isFinite(duration) && !Duration.isNegative(duration),\n    { expected: \"a finite non-negative duration\" },\n  ),\n);\n\n/** A requested runtime image or executable environment. */\nexport class SandboxRuntime extends Schema.Class<SandboxRuntime>(\"SandboxRuntime\")({\n  kind: Schema.Literals([\"container\", \"microvm\", \"wasm\", \"unisolated-process\"]),\n  identity: BoundedName,\n}) {}\n\n/** The implementation and its isolation posture that executed a request. */\nexport class SandboxImplementation extends Schema.Class<SandboxImplementation>(\n  \"SandboxImplementation\",\n)({\n  isolation: Schema.Literals([\"isolated\", \"unisolated\"]),\n  identity: BoundedName,\n}) {}\n\n/** A host path made available to the requested runtime. */\nexport class SandboxMount extends Schema.Class<SandboxMount>(\"SandboxMount\")({\n  source: BoundedPath,\n  target: BoundedPath,\n  access: Schema.Literals([\"read-only\", \"read-write\"]),\n}) {}\n\n/** Explicitly denies all workload network access. */\nexport class NetworkDisabled extends Schema.TaggedClass<NetworkDisabled>()(\"NetworkDisabled\", {}) {}\n\n/** Explicitly permits connections only to the named destination and port allowlists. */\nexport class NetworkAllowlist extends Schema.TaggedClass<NetworkAllowlist>()(\"NetworkAllowlist\", {\n  domains: Schema.Array(BoundedName).check(Schema.isMaxLength(256)),\n  ports: Schema.Array(PositiveInt.check(Schema.isLessThanOrEqualTo(65_535))).check(\n    Schema.isMaxLength(256),\n  ),\n}) {}\n\n/** Network access policy supplied to a sandbox implementation. */\nexport const SandboxNetworkPolicy = Schema.Union([NetworkDisabled, NetworkAllowlist]);\nexport type SandboxNetworkPolicy = typeof SandboxNetworkPolicy.Type;\n\n/** Names of ambient variables that may be copied into the workload environment. */\nexport class SandboxEnvironment extends Schema.Class<SandboxEnvironment>(\"SandboxEnvironment\")({\n  allow: BoundedEnvironmentNames,\n}) {}\n\n/** Limits that a sandbox implementation must either enforce or reject. */\nexport class SandboxLimits extends Schema.Class<SandboxLimits>(\"SandboxLimits\")({\n  cpuCores: Schema.optionalKey(PositiveNumber.check(Schema.isLessThanOrEqualTo(1_024))),\n  memoryBytes: Schema.optionalKey(\n    PositiveInt.check(Schema.isLessThanOrEqualTo(1024 * 1024 * 1024 * 1024)),\n  ),\n  maxOutputBytes: MaxOutputBytes,\n  maxWallTime: FinitePositiveDuration,\n}) {}\n\n/** A secret reference; raw secret values are never part of a sandbox request. */\nexport class SandboxSecretHandle extends Schema.Class<SandboxSecretHandle>(\"SandboxSecretHandle\")({\n  id: BoundedName,\n  purpose: Schema.NonEmptyString.check(Schema.isMaxLength(2 * 1024)),\n}) {}\n\n/** Rules for copying selected workload output out of an isolated runtime. */\nexport class SandboxArtifactRule extends Schema.Class<SandboxArtifactRule>(\"SandboxArtifactRule\")({\n  path: BoundedPath,\n  maxBytes: MaxOutputBytes,\n}) {}\n\n/** Metadata for an artifact that a sandbox implementation released after applying its rules. */\nexport class SandboxArtifact extends Schema.Class<SandboxArtifact>(\"SandboxArtifact\")({\n  path: BoundedPath,\n  bytes: Schema.Natural.check(Schema.isLessThanOrEqualTo(MAX_OUTPUT_BYTES)),\n  digest: BoundedName,\n  mediaType: Schema.optionalKey(BoundedName),\n}) {}\n\n/** Schema-first command execution request. Command and arguments are intentionally separate. */\nexport class SandboxRequest extends Schema.Class<SandboxRequest>(\"SandboxRequest\")({\n  runtime: SandboxRuntime,\n  command: BoundedPath,\n  args: BoundedArguments,\n  cwd: BoundedPath,\n  environment: SandboxEnvironment,\n  mounts: Schema.Array(SandboxMount).check(Schema.isMaxLength(64)),\n  network: SandboxNetworkPolicy,\n  limits: SandboxLimits,\n  secretHandles: Schema.Array(SandboxSecretHandle).check(Schema.isMaxLength(64)),\n  artifactRules: Schema.Array(SandboxArtifactRule).check(Schema.isMaxLength(MAX_ARTIFACT_RULES)),\n}) {}\n\n/** Accounting that a sandbox implementation was able to observe for one execution. */\nexport class SandboxResourceUse extends Schema.Class<SandboxResourceUse>(\"SandboxResourceUse\")({\n  wallTime: FiniteNonNegativeDuration,\n  stdoutBytes: Schema.Natural.check(Schema.isLessThanOrEqualTo(MAX_OUTPUT_BYTES)),\n  stderrBytes: Schema.Natural.check(Schema.isLessThanOrEqualTo(MAX_OUTPUT_BYTES)),\n  cpuMillis: Schema.optionalKey(Schema.Natural),\n  memoryBytes: Schema.optionalKey(Schema.Natural),\n}) {}\n\nconst SandboxEventBase = {\n  eventVersion: Schema.Literal(1),\n  implementation: SandboxImplementation,\n};\n\n/** Signals that the implementation has accepted the request and started its workload. */\nexport class SandboxStarted extends Schema.TaggedClass<SandboxStarted>()(\"SandboxStarted\", {\n  ...SandboxEventBase,\n  runtime: SandboxRuntime,\n}) {}\n\n/** A bounded text fragment from stdout or stderr. Sandbox output is sensitive by default. */\nexport class SandboxOutput extends Schema.TaggedClass<SandboxOutput>()(\"SandboxOutput\", {\n  ...SandboxEventBase,\n  stream: Schema.Literals([\"stdout\", \"stderr\"]),\n  text: BoundedOutputText,\n  bytes: Schema.Natural.check(Schema.isLessThanOrEqualTo(MAX_OUTPUT_BYTES)),\n}) {}\n\n/** The terminal process status and observed bounded resource usage. */\nexport class SandboxExited extends Schema.TaggedClass<SandboxExited>()(\"SandboxExited\", {\n  ...SandboxEventBase,\n  exitCode: Schema.Int,\n  resourceUse: SandboxResourceUse,\n  artifacts: Schema.Array(SandboxArtifact).check(Schema.isMaxLength(MAX_ARTIFACT_RULES)),\n}) {}\n\n/** Versioned execution event stream. */\nexport const SandboxEvent = Schema.Union([SandboxStarted, SandboxOutput, SandboxExited]);\nexport type SandboxEvent = typeof SandboxEvent.Type;\n\n/** The runtime could not start the requested process. */\nexport class SandboxSpawnError extends Schema.TaggedError<SandboxSpawnError>()(\n  \"SandboxSpawnError\",\n  {\n    implementation: SandboxImplementation,\n    command: BoundedPath,\n    message: BoundedDiagnostic,\n    cause: Schema.optionalKey(Schema.Defect()),\n  },\n) {}\n\n/** The process ended unsuccessfully after starting. */\nexport class SandboxExitError extends Schema.TaggedError<SandboxExitError>()(\"SandboxExitError\", {\n  implementation: SandboxImplementation,\n  exitCode: Schema.Int,\n  message: BoundedDiagnostic,\n  cause: Schema.optionalKey(Schema.Defect()),\n}) {}\n\n/** The wall-clock execution limit elapsed and the owned process was interrupted. */\nexport class SandboxTimeoutError extends Schema.TaggedError<SandboxTimeoutError>()(\n  \"SandboxTimeoutError\",\n  {\n    implementation: SandboxImplementation,\n    maxWallTime: FinitePositiveDuration,\n  },\n) {}\n\n/** A stdout or stderr stream exceeded its configured bounded-output limit. */\nexport class SandboxOutputLimitError extends Schema.TaggedError<SandboxOutputLimitError>()(\n  \"SandboxOutputLimitError\",\n  {\n    implementation: SandboxImplementation,\n    stream: Schema.Literals([\"stdout\", \"stderr\"]),\n    limit: PositiveInt,\n    observed: PositiveInt,\n  },\n) {}\n\n/** The selected implementation cannot honestly enforce one requested security or resource feature. */\nexport class SandboxUnsupportedRequestError extends Schema.TaggedError<SandboxUnsupportedRequestError>()(\n  \"SandboxUnsupportedRequestError\",\n  {\n    implementation: SandboxImplementation,\n    feature: Schema.Literals([\n      \"runtime\",\n      \"mounts\",\n      \"network\",\n      \"cpu-limit\",\n      \"memory-limit\",\n      \"secret-handles\",\n      \"artifacts\",\n    ]),\n    message: BoundedDiagnostic,\n  },\n) {}\n\n/** Expected sandbox execution failures. Interruption remains an Effect interruption, never a fabricated exit. */\nexport const SandboxError = Schema.Union([\n  SandboxSpawnError,\n  SandboxExitError,\n  SandboxTimeoutError,\n  SandboxOutputLimitError,\n  SandboxUnsupportedRequestError,\n]);\n\nexport type SandboxError = typeof SandboxError.Type;\n\n/**\n * Scoped command/code execution capability. Implementations must identify their isolation posture\n * in every emitted event; an `unisolated` implementation is never a security sandbox.\n */\nexport class Sandbox extends Context.Service<\n  Sandbox,\n  {\n    readonly execute: (request: SandboxRequest) => Stream.Stream<SandboxEvent, SandboxError>;\n  }\n>()(\"@effect-agent/sandbox/Sandbox\") {}\n\n/** Type helper for implementations that preserve the public Sandbox service contract. */\nexport type SandboxExecute = (\n  request: SandboxRequest,\n) => Stream.Stream<SandboxEvent, SandboxError, never>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,MAAM,cAAc,OAAO,eAAe,MAAM,OAAO,YAAY,GAAG,CAAC;AACvE,MAAM,cAAc,OAAO,eAAe,MAAM,OAAO,YAAY,IAAQ,CAAC;AAC5E,MAAM,kBAAkB,OAAO,OAAO,MAAM,OAAO,YAAY,KAAS,CAAC;AACzE,MAAM,mBAAmB;AACzB,MAAM,qBAAqB;AAC3B,MAAM,oBAAoB,OAAO,OAAO,MAAM,OAAO,YAAY,gBAAgB,CAAC;AAElF,MAAa,gCAAgC;AAC7C,MAAM,oBAAoB,OAAO,OAAO,MAAM,OAAO,YAAY,6BAA6B,CAAC;AAC/F,MAAM,cAAc,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC;AAC5D,MAAM,iBAAiB,OAAO,OAAO,MAAM,OAAO,cAAc,CAAC,CAAC;AAClE,MAAM,iBAAiB,YAAY,MAAM,OAAO,oBAAoB,gBAAgB,CAAC;AACrF,MAAM,mBAAmB,OAAO,MAAM,eAAe,CAAC,CAAC,MAAM,OAAO,YAAY,GAAG,CAAC;AACpF,MAAM,0BAA0B,OAAO,MAAM,WAAW,CAAC,CAAC,MAAM,OAAO,YAAY,GAAG,CAAC;AAEvF,MAAM,yBAAyB,OAAO,SAAS,KAC7C,OAAO,QACJ,aACC,SAAS,SAAS,QAAQ,KAAK,SAAS,WAAW,QAAQ,GAC7D,EAAE,UAAU,6BAA6B,CAC3C,CACF;AAEA,MAAM,4BAA4B,OAAO,SAAS,KAChD,OAAO,QACJ,aACC,SAAS,SAAS,QAAQ,KAAK,CAAC,SAAS,WAAW,QAAQ,GAC9D,EAAE,UAAU,iCAAiC,CAC/C,CACF;;AAGA,IAAa,iBAAb,cAAoC,OAAO,MAAsB,gBAAgB,CAAC,CAAC;CACjF,MAAM,OAAO,SAAS;EAAC;EAAa;EAAW;EAAQ;CAAoB,CAAC;CAC5E,UAAU;AACZ,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,wBAAb,cAA2C,OAAO,MAChD,uBACF,CAAC,CAAC;CACA,WAAW,OAAO,SAAS,CAAC,YAAY,YAAY,CAAC;CACrD,UAAU;AACZ,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,eAAb,cAAkC,OAAO,MAAoB,cAAc,CAAC,CAAC;CAC3E,QAAQ;CACR,QAAQ;CACR,QAAQ,OAAO,SAAS,CAAC,aAAa,YAAY,CAAC;AACrD,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,kBAAb,cAAqC,OAAO,YAA6B,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;;AAGnG,IAAa,mBAAb,cAAsC,OAAO,YAA8B,CAAC,CAAC,oBAAoB;CAC/F,SAAS,OAAO,MAAM,WAAW,CAAC,CAAC,MAAM,OAAO,YAAY,GAAG,CAAC;CAChE,OAAO,OAAO,MAAM,YAAY,MAAM,OAAO,oBAAoB,KAAM,CAAC,CAAC,CAAC,CAAC,MACzE,OAAO,YAAY,GAAG,CACxB;AACF,CAAC,CAAC,CAAC,CAAC;;AAGJ,MAAa,uBAAuB,OAAO,MAAM,CAAC,iBAAiB,gBAAgB,CAAC;;AAIpF,IAAa,qBAAb,cAAwC,OAAO,MAA0B,oBAAoB,CAAC,CAAC,EAC7F,OAAO,wBACT,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,gBAAb,cAAmC,OAAO,MAAqB,eAAe,CAAC,CAAC;CAC9E,UAAU,OAAO,YAAY,eAAe,MAAM,OAAO,oBAAoB,IAAK,CAAC,CAAC;CACpF,aAAa,OAAO,YAClB,YAAY,MAAM,OAAO,oBAAoB,aAAyB,CAAC,CACzE;CACA,gBAAgB;CAChB,aAAa;AACf,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,sBAAb,cAAyC,OAAO,MAA2B,qBAAqB,CAAC,CAAC;CAChG,IAAI;CACJ,SAAS,OAAO,eAAe,MAAM,OAAO,YAAY,IAAQ,CAAC;AACnE,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,sBAAb,cAAyC,OAAO,MAA2B,qBAAqB,CAAC,CAAC;CAChG,MAAM;CACN,UAAU;AACZ,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,kBAAb,cAAqC,OAAO,MAAuB,iBAAiB,CAAC,CAAC;CACpF,MAAM;CACN,OAAO,OAAO,QAAQ,MAAM,OAAO,oBAAoB,gBAAgB,CAAC;CACxE,QAAQ;CACR,WAAW,OAAO,YAAY,WAAW;AAC3C,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,iBAAb,cAAoC,OAAO,MAAsB,gBAAgB,CAAC,CAAC;CACjF,SAAS;CACT,SAAS;CACT,MAAM;CACN,KAAK;CACL,aAAa;CACb,QAAQ,OAAO,MAAM,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;CAC/D,SAAS;CACT,QAAQ;CACR,eAAe,OAAO,MAAM,mBAAmB,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;CAC7E,eAAe,OAAO,MAAM,mBAAmB,CAAC,CAAC,MAAM,OAAO,YAAY,kBAAkB,CAAC;AAC/F,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,qBAAb,cAAwC,OAAO,MAA0B,oBAAoB,CAAC,CAAC;CAC7F,UAAU;CACV,aAAa,OAAO,QAAQ,MAAM,OAAO,oBAAoB,gBAAgB,CAAC;CAC9E,aAAa,OAAO,QAAQ,MAAM,OAAO,oBAAoB,gBAAgB,CAAC;CAC9E,WAAW,OAAO,YAAY,OAAO,OAAO;CAC5C,aAAa,OAAO,YAAY,OAAO,OAAO;AAChD,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAM,mBAAmB;CACvB,cAAc,OAAO,QAAQ,CAAC;CAC9B,gBAAgB;AAClB;;AAGA,IAAa,iBAAb,cAAoC,OAAO,YAA4B,CAAC,CAAC,kBAAkB;CACzF,GAAG;CACH,SAAS;AACX,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,gBAAb,cAAmC,OAAO,YAA2B,CAAC,CAAC,iBAAiB;CACtF,GAAG;CACH,QAAQ,OAAO,SAAS,CAAC,UAAU,QAAQ,CAAC;CAC5C,MAAM;CACN,OAAO,OAAO,QAAQ,MAAM,OAAO,oBAAoB,gBAAgB,CAAC;AAC1E,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,gBAAb,cAAmC,OAAO,YAA2B,CAAC,CAAC,iBAAiB;CACtF,GAAG;CACH,UAAU,OAAO;CACjB,aAAa;CACb,WAAW,OAAO,MAAM,eAAe,CAAC,CAAC,MAAM,OAAO,YAAY,kBAAkB,CAAC;AACvF,CAAC,CAAC,CAAC,CAAC;;AAGJ,MAAa,eAAe,OAAO,MAAM;CAAC;CAAgB;CAAe;AAAa,CAAC;;AAIvF,IAAa,oBAAb,cAAuC,OAAO,YAA+B,CAAC,CAC5E,qBACA;CACE,gBAAgB;CAChB,SAAS;CACT,SAAS;CACT,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;AAC3C,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,mBAAb,cAAsC,OAAO,YAA8B,CAAC,CAAC,oBAAoB;CAC/F,gBAAgB;CAChB,UAAU,OAAO;CACjB,SAAS;CACT,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;AAC3C,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,sBAAb,cAAyC,OAAO,YAAiC,CAAC,CAChF,uBACA;CACE,gBAAgB;CAChB,aAAa;AACf,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,0BAAb,cAA6C,OAAO,YAAqC,CAAC,CACxF,2BACA;CACE,gBAAgB;CAChB,QAAQ,OAAO,SAAS,CAAC,UAAU,QAAQ,CAAC;CAC5C,OAAO;CACP,UAAU;AACZ,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,iCAAb,cAAoD,OAAO,YAA4C,CAAC,CACtG,kCACA;CACE,gBAAgB;CAChB,SAAS,OAAO,SAAS;EACvB;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;CACD,SAAS;AACX,CACF,CAAC,CAAC,CAAC;;AAGH,MAAa,eAAe,OAAO,MAAM;CACvC;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;AAQD,IAAa,UAAb,cAA6B,QAAQ,QAKnC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC"}

package/dist/utf8-BYfhEkcj.mjs

@@ -0,0 +1,11 @@
+import { Encoding } from "effect";
+//#region src/capabilities/internal/utf8.ts
+/** Encode through Effect without requiring browser or Node ambient types in consumers. */
+const utf8Bytes = (value) => {
+	const hex = Encoding.encodeHex(value);
+	return Uint8Array.from({ length: hex.length / 2 }, (_, index) => Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16));
+};
+//#endregion
+export { utf8Bytes as t };
+
+//# sourceMappingURL=utf8-BYfhEkcj.mjs.map

package/dist/utf8-BYfhEkcj.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"utf8-BYfhEkcj.mjs","names":[],"sources":["../src/capabilities/internal/utf8.ts"],"sourcesContent":["import { Encoding } from \"effect\";\n\n/** Encode through Effect without requiring browser or Node ambient types in consumers. */\nexport const utf8Bytes = (value: string): Uint8Array => {\n  const hex = Encoding.encodeHex(value);\n\n  return Uint8Array.from({ length: hex.length / 2 }, (_, index) =>\n    Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16),\n  );\n};\n"],"mappings":";;;AAGA,MAAa,aAAa,UAA8B;CACtD,MAAM,MAAM,SAAS,UAAU,KAAK;CAEpC,OAAO,WAAW,KAAK,EAAE,QAAQ,IAAI,SAAS,EAAE,IAAI,GAAG,UACrD,OAAO,SAAS,IAAI,MAAM,QAAQ,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,CACzD;AACF"}

package/dist/utf8-DchGZRBd.mjs

@@ -0,0 +1,23 @@
+//#region src/core/internal/utf8.ts
+/** UTF-8 width, including the replacement encoding used for lone UTF-16 surrogates. */
+const codePointUtf8Length = (codePoint) => {
+	if (codePoint < 128) return 1;
+	if (codePoint < 2048) return 2;
+	if (codePoint < 65536) return 3;
+	return 4;
+};
+/** Count encoded bytes without allocating an encoded copy of the text. */
+const utf8ByteLength = (value) => {
+	let bytes = 0;
+	let index = 0;
+	while (index < value.length) {
+		const codePoint = value.codePointAt(index) ?? 0;
+		bytes += codePointUtf8Length(codePoint);
+		index += codePoint > 65535 ? 2 : 1;
+	}
+	return bytes;
+};
+//#endregion
+export { utf8ByteLength as n, codePointUtf8Length as t };
+
+//# sourceMappingURL=utf8-DchGZRBd.mjs.map

package/dist/utf8-DchGZRBd.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"utf8-DchGZRBd.mjs","names":[],"sources":["../src/core/internal/utf8.ts"],"sourcesContent":["/** UTF-8 width, including the replacement encoding used for lone UTF-16 surrogates. */\nexport const codePointUtf8Length = (codePoint: number): number => {\n  if (codePoint < 0x80) return 1;\n  if (codePoint < 0x800) return 2;\n  if (codePoint < 0x10000) return 3;\n\n  return 4;\n};\n\n/** Count encoded bytes without allocating an encoded copy of the text. */\nexport const utf8ByteLength = (value: string): number => {\n  let bytes = 0;\n  let index = 0;\n\n  while (index < value.length) {\n    const codePoint = value.codePointAt(index) ?? 0;\n\n    bytes += codePointUtf8Length(codePoint);\n    index += codePoint > 0xffff ? 2 : 1;\n  }\n\n  return bytes;\n};\n"],"mappings":";;AACA,MAAa,uBAAuB,cAA8B;CAChE,IAAI,YAAY,KAAM,OAAO;CAC7B,IAAI,YAAY,MAAO,OAAO;CAC9B,IAAI,YAAY,OAAS,OAAO;CAEhC,OAAO;AACT;;AAGA,MAAa,kBAAkB,UAA0B;CACvD,IAAI,QAAQ;CACZ,IAAI,QAAQ;CAEZ,OAAO,QAAQ,MAAM,QAAQ;EAC3B,MAAM,YAAY,MAAM,YAAY,KAAK,KAAK;EAE9C,SAAS,oBAAoB,SAAS;EACtC,SAAS,YAAY,QAAS,IAAI;CACpC;CAEA,OAAO;AACT"}