effect-cf 0.36.0 → 0.38.0

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # effect-cf
 
+## 0.38.0
+
+### Minor Changes
+
+- [#137](https://github.com/danieljvdm/effect-cf/pull/137) [`8e35961`](https://github.com/danieljvdm/effect-cf/commit/8e3596157732b487f8fef5fd983a6c56a32e74ec) Thanks [@danieljvdm](https://github.com/danieljvdm)! - Add `CloudflareTracer.layer` to send existing Effect spans to Cloudflare Workers Observability. Provide it per invocation through `Worker.make`'s `eventLayer` and enable tracing in Wrangler to see Effect operations alongside automatic platform spans, with context preserved across concurrent fibers.
+
+## 0.37.0
+
+### Minor Changes
+
+- [#135](https://github.com/danieljvdm/effect-cf/pull/135) [`9dea62e`](https://github.com/danieljvdm/effect-cf/commit/9dea62e74818b7fc9da919e8bdbfcc49991aef36) Thanks [@danieljvdm](https://github.com/danieljvdm)! - Add `DurableObjectAlarm.transaction` to commit application storage and logical alarm schedule, replacement, or cancellation together in one native SQLite Durable Object transaction. Application queries can use the existing storage wrapper or a `SqlClient` from `@effect/sql-sqlite-do` backed by the same object. The callback receives transaction-only alarm mutations and preserves the caller's success value, typed errors, and service requirements.
+
+  Failures before commit roll back application rows, logical alarms, and native alarm reconciliation together. Interruption or a lost reply after commit does not undo committed state. Keep external effects outside the transaction and durably pre-arm a later wake before fallible external work; Cloudflare's native alarm retries remain bounded.
+
 ## 0.36.0
 
 ### Minor Changes

package/README.md

@@ -47,6 +47,53 @@ Declare `SETTINGS` in `wrangler.jsonc` and pass `SettingsLive` to `Worker.make`.
 
 The [counter example](https://github.com/danieljvdm/effect-cf/tree/main/examples/counter) shows `DurableObject.Tag`, storage, a typed RPC call, and the complete Wrangler configuration.
 
+For atomic application writes and alarm changes, see the [alarm transaction example](tests/fixtures/alarm-transaction-consumer.ts) and [API contract](src/DurableObjectAlarm.ts).
+
+## Cloudflare Observability traces
+
+`CloudflareTracer.layer` sends existing `Effect.withSpan` and named `Effect.fn`
+spans to Cloudflare's trace waterfall, alongside automatic platform spans.
+
+```ts
+import { Effect, Layer } from "effect";
+import { CloudflareTracer, Worker } from "effect-cf";
+
+export default Worker.make(Layer.empty, {
+  eventLayer: CloudflareTracer.layer,
+  fetch: Effect.sync(() => new Response("Hello")).pipe(Effect.withSpan("greet")),
+});
+```
+
+Enable tracing in `wrangler.jsonc`:
+
+```jsonc
+{
+  "compatibility_date": "2026-08-25",
+  "observability": {
+    "traces": { "enabled": true },
+  },
+}
+```
+
+Build the layer per invocation with `eventLayer`. It captures the current
+Cloudflare async context, so do not put it in a runtime layer cached across
+requests. Standalone Effect programs can provide it around each invocation.
+Nested spans, concurrent fibers, and resumed work restore the appropriate span
+context. Cloudflare handles sampling and export; no exporter endpoint or flush
+is needed.
+
+String, number, and boolean attributes are forwarded. Other attributes, span
+events, and links remain Effect-local. Completion is recorded as `effect.exit`
+with `success`, `failure`, or `interrupted`; Cloudflare does not expose a setter
+for native outcome status. Effect IDs remain separate from Cloudflare's opaque
+trace/span IDs. Explicit external parents cannot join a Cloudflare trace by ID,
+and `root: true` starts under the invocation's captured context.
+
+This layer replaces the active Effect tracer. When combining it with
+`CloudflareOtlp`, select only `logs` and/or `metrics` in the OTLP layer. See
+[Cloudflare's custom span API](https://developers.cloudflare.com/workers/observability/traces/custom-spans/)
+for platform limitations.
+
 ## Native RPC tracing
 
 `call()`, `scopedCall()`, and definition methods create one CLIENT span named `binding/method`, covering argument encoding, the native RPC wait, and success decoding. Raw `rpc()` retains Cloudflare's pipelined result without creating a span. Wrap its complete lifetime with `RpcTracing.withRpcClientSpan` when tracing raw calls.

package/dist/ComputerWorkspace.mjs

@@ -1,4 +1,4 @@
-import { t as DurableObjectState } from "./DurableObjectState-DCh4PZMN.mjs";
+import { t as DurableObjectState } from "./DurableObjectState-DLL0YgBd.mjs";
 import { fromClient } from "./ComputerArtifacts.mjs";
 import { t as lookup } from "./ComputerWorkspaceHostRegistry-CY5Fv4Ng.mjs";
 import { Context, Effect, Layer, Predicate, Schema, Stream } from "effect";

package/dist/{DurableObjectState-DCh4PZMN.mjs → DurableObjectState-DLL0YgBd.mjs}

@@ -288,4 +288,4 @@ const runExitPreservingTypedFailures = async (run, effect) => {
 	return exit;
 };
 //#endregion
-export { DurableWebSocketAttachmentError as a, DurableObjectWebSocket_exports as i, DurableObjectState_exports as n, fromWebSocket as o, fromDurableObjectState as r, DurableObjectStorage_exports as s, DurableObjectState as t };
+export { DurableWebSocketAttachmentError as a, StorageOperationError as c, DurableObjectWebSocket_exports as i, DurableObjectState_exports as n, fromWebSocket as o, fromDurableObjectState as r, DurableObjectStorage_exports as s, DurableObjectState as t };

package/dist/Vitest.mjs

@@ -1,6 +1,6 @@
 import { a as WorkerEnvironment, i as WorkerConfig } from "./ErrorMessage-Byx2OgNd.mjs";
 import { r as runNativeCallback } from "./WorkerContext-Yobnfw-K.mjs";
-import { r as fromDurableObjectState, t as DurableObjectState } from "./DurableObjectState-DCh4PZMN.mjs";
+import { r as fromDurableObjectState, t as DurableObjectState } from "./DurableObjectState-DLL0YgBd.mjs";
 import { ConfigProvider, Effect, Exit, Layer } from "effect";
 import { env } from "cloudflare:workers";
 import { abortAllDurableObjects as abortAllDurableObjects$1, adminSecretsStore as adminSecretsStore$1, applyD1Migrations as applyD1Migrations$1, createExecutionContext, createMessageBatch, createPagesEventContext, createScheduledController, evictAllDurableObjects as evictAllDurableObjects$1, evictDurableObject as evictDurableObject$1, getQueueResult, introspectWorkflow as introspectWorkflow$1, introspectWorkflowInstance as introspectWorkflowInstance$1, listDurableObjectIds as listDurableObjectIds$1, reset as reset$1, runDurableObjectAlarm as runDurableObjectAlarm$1, runInDurableObject as runInDurableObject$1, waitOnExecutionContext } from "cloudflare:test";

package/dist/index.d.mts

@@ -8,8 +8,8 @@ import { a as WorkflowInstanceCreateOptions, i as WorkflowInstanceCreateBatchOpt
 import { Cause, Config, Context, Data, DateTime, Duration, Effect, Layer, Option, Predicate, Redacted, Schema, Scope } from "effect";
 import { Headers as Headers$1, HttpClient, HttpClientResponse } from "effect/unstable/http";
 import { OtlpExporter, OtlpResource } from "effect/unstable/observability";
-import { D1Client } from "@effect/sql-d1";
 import { DurableObject, WorkflowEntrypoint, WorkflowEvent, WorkflowSleepDuration, WorkflowStep, WorkflowStepConfig, WorkflowStepContext, WorkflowStepEvent, WorkflowTimeoutDuration } from "cloudflare:workers";
+import { D1Client } from "@effect/sql-d1";
 import * as RpcMessage from "effect/unstable/rpc/RpcMessage";
 import * as RpcSerialization from "effect/unstable/rpc/RpcSerialization";
 import * as RpcServer from "effect/unstable/rpc/RpcServer";
@@ -17,7 +17,7 @@ import { SqliteClient } from "@effect/sql-sqlite-do";
 import { SqlClient } from "effect/unstable/sql";
 import * as Tracer$1 from "effect/Tracer";
 declare namespace WorkersAi_d_exports {
-  export { LayerOptions$13 as LayerOptions, Tag$12 as Tag, TagClass$11 as TagClass, WorkersAiAsyncBatchResponse, WorkersAiBinding, WorkersAiClient, WorkersAiDefinition, WorkersAiEmbeddingInput, WorkersAiEmbeddingResponse, WorkersAiModelsSearchObject, WorkersAiModelsSearchParams, WorkersAiOperationError, WorkersAiOptions, WorkersAiService, embeddingResponse, isWorkersAiBinding, layer$13 as layer, make$12 as make, makeClient$10 as makeClient };
+  export { LayerOptions$13 as LayerOptions, Tag$12 as Tag, TagClass$11 as TagClass, WorkersAiAsyncBatchResponse, WorkersAiBinding, WorkersAiClient, WorkersAiDefinition, WorkersAiEmbeddingInput, WorkersAiEmbeddingResponse, WorkersAiModelsSearchObject, WorkersAiModelsSearchParams, WorkersAiOperationError, WorkersAiOptions, WorkersAiService, embeddingResponse, isWorkersAiBinding, layer$14 as layer, make$12 as make, makeClient$10 as makeClient };
 }
 declare const WorkersAiOperationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
   readonly _tag: "WorkersAiOperationError";
@@ -89,11 +89,11 @@ declare const embeddingResponse: (value: {
   readonly [embeddingDimensionsKey]?: ReadonlyArray<number>;
 }) => WorkersAiEmbeddingResponse;
 declare const makeClient$10: <ModelList extends AiModelListType = AiModels>(definition: WorkersAiDefinition) => (ai: WorkersAiBinding<ModelList>) => WorkersAiClient<ModelList>;
-declare const layer$13: <Self, ModelList extends AiModelListType = AiModels>(tag: Context.Service<Self, WorkersAiClient<ModelList>>, definition: WorkersAiDefinition) => Layer.Layer<Self, BindingNotFoundError | BindingValidationError, WorkerEnvironment>;
+declare const layer$14: <Self, ModelList extends AiModelListType = AiModels>(tag: Context.Service<Self, WorkersAiClient<ModelList>>, definition: WorkersAiDefinition) => Layer.Layer<Self, BindingNotFoundError | BindingValidationError, WorkerEnvironment>;
 declare const make$12: <Id extends string>(id: Id) => TagClass$11<WorkersAiService<Id>, Id, AiModels>;
 declare const Tag$12: <Self>() => <Id extends string, ModelList extends AiModelListType = AiModels>(id: Id) => TagClass$11<Self, Id, ModelList>;
 declare namespace AiGateway_d_exports {
-  export { AiGatewayBinding, AiGatewayClient, AiGatewayDefinition, AiGatewayFetchOptions, AiGatewayHeaders, AiGatewayLog, AiGatewayOperationError, AiGatewayPatchLog, AiGatewayProvider, AiGatewayRunOptions, AiGatewayService, AiGatewayUniversalRequest, LayerOptions$12 as LayerOptions, Tag$11 as Tag, TagClass$10 as TagClass, isAiGatewayBinding, layer$12 as layer, make$11 as make, makeClient$9 as makeClient, makeClientFromAi, makeHttpClient };
+  export { AiGatewayBinding, AiGatewayClient, AiGatewayDefinition, AiGatewayFetchOptions, AiGatewayHeaders, AiGatewayLog, AiGatewayOperationError, AiGatewayPatchLog, AiGatewayProvider, AiGatewayRunOptions, AiGatewayService, AiGatewayUniversalRequest, LayerOptions$12 as LayerOptions, Tag$11 as Tag, TagClass$10 as TagClass, isAiGatewayBinding, layer$13 as layer, make$11 as make, makeClient$9 as makeClient, makeClientFromAi, makeHttpClient };
 }
 declare const AiGatewayOperationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
   readonly _tag: "AiGatewayOperationError";
@@ -167,11 +167,11 @@ declare const makeHttpClient: (definition: Omit<AiGatewayDefinition, "binding">
   readonly accountId: string;
   readonly binding?: string;
 }, request?: typeof fetch) => AiGatewayClient;
-declare const layer$12: <Self>(tag: Context.Service<Self, AiGatewayClient>, definition: AiGatewayDefinition) => Layer.Layer<Self, BindingNotFoundError | BindingValidationError, WorkerEnvironment>;
+declare const layer$13: <Self>(tag: Context.Service<Self, AiGatewayClient>, definition: AiGatewayDefinition) => Layer.Layer<Self, BindingNotFoundError | BindingValidationError, WorkerEnvironment>;
 declare const make$11: <Id extends string>(id: Id) => TagClass$10<AiGatewayService<Id>, Id>;
 declare const Tag$11: <Self>() => <Id extends string>(id: Id) => TagClass$10<Self, Id>;
 declare namespace AnalyticsEngine_d_exports {
-  export { AnalyticsEngineBinding, AnalyticsEngineClient, AnalyticsEngineDataPoint, AnalyticsEngineDataPointSchema, AnalyticsEngineDefinition, AnalyticsEngineFieldValue, AnalyticsEngineFieldValueSchema, AnalyticsEngineInvalidWritePolicy, AnalyticsEngineOperationError, AnalyticsEngineQueryClient, AnalyticsEngineQueryColumn, AnalyticsEngineQueryDefinition, AnalyticsEngineQueryError, AnalyticsEngineQueryOptions, AnalyticsEngineQueryResult, AnalyticsEngineQueryRow, AnalyticsEngineQueryService, AnalyticsEngineService, AnalyticsEngineWriteError, AnalyticsEngineWriteOptions, AnalyticsEngineWritePolicy, AnalyticsEngineWriteValidationError, AnalyticsEngineWriteViolation, LayerOptions$11 as LayerOptions, QueryConfigOptions, QueryTag, QueryTagClass, Tag$10 as Tag, TagClass$9 as TagClass, isAnalyticsEngineDataset, layer$11 as layer, layerFetch, layerFetchConfig, make$10 as make, makeClient$8 as makeClient, makeQuery, makeQueryClient, queryConfig, queryLayer, queryLayerConfig, writeLimits };
+  export { AnalyticsEngineBinding, AnalyticsEngineClient, AnalyticsEngineDataPoint, AnalyticsEngineDataPointSchema, AnalyticsEngineDefinition, AnalyticsEngineFieldValue, AnalyticsEngineFieldValueSchema, AnalyticsEngineInvalidWritePolicy, AnalyticsEngineOperationError, AnalyticsEngineQueryClient, AnalyticsEngineQueryColumn, AnalyticsEngineQueryDefinition, AnalyticsEngineQueryError, AnalyticsEngineQueryOptions, AnalyticsEngineQueryResult, AnalyticsEngineQueryRow, AnalyticsEngineQueryService, AnalyticsEngineService, AnalyticsEngineWriteError, AnalyticsEngineWriteOptions, AnalyticsEngineWritePolicy, AnalyticsEngineWriteValidationError, AnalyticsEngineWriteViolation, LayerOptions$11 as LayerOptions, QueryConfigOptions, QueryTag, QueryTagClass, Tag$10 as Tag, TagClass$9 as TagClass, isAnalyticsEngineDataset, layer$12 as layer, layerFetch, layerFetchConfig, make$10 as make, makeClient$8 as makeClient, makeQuery, makeQueryClient, queryConfig, queryLayer, queryLayerConfig, writeLimits };
 }
 declare const writeLimits: {
   readonly maxBlobs: 20;
@@ -322,13 +322,13 @@ declare const queryLayer: <Self>(tag: Context.Service<Self, AnalyticsEngineQuery
 declare const layerFetch: <Self>(tag: Context.Service<Self, AnalyticsEngineQueryClient>, definition: AnalyticsEngineQueryDefinition) => Layer.Layer<Self, never, never>;
 declare const queryLayerConfig: <Self>(tag: Context.Service<Self, AnalyticsEngineQueryClient>, config?: Config.Config<AnalyticsEngineQueryDefinition>) => Layer.Layer<Self, Config.ConfigError, HttpClient.HttpClient>;
 declare const layerFetchConfig: <Self>(tag: Context.Service<Self, AnalyticsEngineQueryClient>, config?: Config.Config<AnalyticsEngineQueryDefinition>) => Layer.Layer<Self, Config.ConfigError, never>;
-declare const layer$11: <Self>(tag: Context.Service<Self, AnalyticsEngineClient>, definition: LayerOptions$11) => Layer.Layer<Self, BindingNotFoundError | BindingValidationError, WorkerEnvironment>;
+declare const layer$12: <Self>(tag: Context.Service<Self, AnalyticsEngineClient>, definition: LayerOptions$11) => Layer.Layer<Self, BindingNotFoundError | BindingValidationError, WorkerEnvironment>;
 declare const make$10: <Id extends string>(id: Id) => TagClass$9<AnalyticsEngineService<Id>, Id>;
 declare const makeQuery: <Id extends string>(id: Id) => QueryTagClass<AnalyticsEngineQueryService<Id>, Id>;
 declare const Tag$10: <Self>() => <Id extends string>(id: Id) => TagClass$9<Self, Id>;
 declare const QueryTag: <Self>() => <Id extends string>(id: Id) => QueryTagClass<Self, Id>;
 declare namespace BrowserRendering_d_exports {
-  export { BrowserRenderingBinding, BrowserRenderingBrowserClient, BrowserRenderingBrowserLike, BrowserRenderingClient, BrowserRenderingConnect, BrowserRenderingDefinition, BrowserRenderingExternalResult, BrowserRenderingLaunch, BrowserRenderingMethodOptions, BrowserRenderingOperationError, BrowserRenderingPageClient, BrowserRenderingPageFunction, BrowserRenderingPageLike, BrowserRenderingService, LayerOptions$10 as LayerOptions, Tag$9 as Tag, TagClass$8 as TagClass, isBrowserRenderingBinding, layer$10 as layer, make$9 as make, makeClient$7 as makeClient };
+  export { BrowserRenderingBinding, BrowserRenderingBrowserClient, BrowserRenderingBrowserLike, BrowserRenderingClient, BrowserRenderingConnect, BrowserRenderingDefinition, BrowserRenderingExternalResult, BrowserRenderingLaunch, BrowserRenderingMethodOptions, BrowserRenderingOperationError, BrowserRenderingPageClient, BrowserRenderingPageFunction, BrowserRenderingPageLike, BrowserRenderingService, LayerOptions$10 as LayerOptions, Tag$9 as Tag, TagClass$8 as TagClass, isBrowserRenderingBinding, layer$11 as layer, make$9 as make, makeClient$7 as makeClient };
 }
 declare const BrowserRenderingOperationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
   readonly _tag: "BrowserRenderingOperationError";
@@ -402,11 +402,11 @@ interface TagClass$8<Self, Id extends string> extends Context.ServiceClass<Self,
 }
 declare const isBrowserRenderingBinding: <Candidate>(value: Candidate) => value is Candidate & BrowserRenderingBinding;
 declare const makeClient$7: <RawBinding extends BrowserRenderingBinding = BrowserRenderingBinding>(definition: BrowserRenderingDefinition) => (binding: RawBinding) => BrowserRenderingClient<RawBinding>;
-declare const layer$10: <Self>(tag: Context.Service<Self, BrowserRenderingClient>, definition: BrowserRenderingDefinition) => Layer.Layer<Self, BindingNotFoundError | BindingValidationError, WorkerEnvironment>;
+declare const layer$11: <Self>(tag: Context.Service<Self, BrowserRenderingClient>, definition: BrowserRenderingDefinition) => Layer.Layer<Self, BindingNotFoundError | BindingValidationError, WorkerEnvironment>;
 declare const make$9: <Id extends string>(id: Id) => TagClass$8<BrowserRenderingService<Id>, Id>;
 declare const Tag$9: <Self>() => <Id extends string>(id: Id) => TagClass$8<Self, Id>;
 declare namespace Cache_d_exports {
-  export { CacheClient, CacheOperation, CacheOperationError, CacheQueryOptions, CacheRequest, CacheStorage, CacheStorageClient, layer$9 as layer, layerFrom, makeCacheClient, makeClient$6 as makeClient };
+  export { CacheClient, CacheOperation, CacheOperationError, CacheQueryOptions, CacheRequest, CacheStorage, CacheStorageClient, layer$10 as layer, layerFrom, makeCacheClient, makeClient$6 as makeClient };
 }
 type CacheRequest = CloudflareRequestInfo | URL;
 type CacheQueryOptions = CloudflareCacheQueryOptions;
@@ -438,9 +438,9 @@ declare class CacheStorage extends CacheStorage_base {}
 declare const makeCacheClient: (cache: CloudflareCache, name?: string) => CacheClient;
 declare const makeClient$6: (storage: CloudflareCacheStorage) => CacheStorageClient;
 declare const layerFrom: (storage: CloudflareCacheStorage) => Layer.Layer<CacheStorage>;
-declare const layer$9: Layer.Layer<CacheStorage>;
+declare const layer$10: Layer.Layer<CacheStorage>;
 declare namespace CloudflareOtlp_d_exports {
-  export { DurableObjectLayerOptions, LayerOptions$9 as LayerOptions, ResourceOptions, Serialization, Signal, WorkerLayerOptions, layer$8 as layer, layerDurableObject, layerJson, layerProtobuf, layerWorker };
+  export { DurableObjectLayerOptions, LayerOptions$9 as LayerOptions, ResourceOptions, Serialization, Signal, WorkerLayerOptions, layer$9 as layer, layerDurableObject, layerJson, layerProtobuf, layerWorker };
 }
 type ResourceAttributes = NonNullable<Parameters<typeof OtlpResource.make>[0]["attributes"]>;
 /** Telemetry signal groups supported by the Cloudflare OTLP layers. */
@@ -504,7 +504,7 @@ interface DurableObjectLayerOptions extends LayerOptions$9 {
  * The layer provides {@link OtlpExporter.Flusher} for draining buffered
  * telemetry before the isolate freezes.
  */
-declare const layer$8: (options?: LayerOptions$9) => Layer.Layer<OtlpExporter.Flusher>;
+declare const layer$9: (options?: LayerOptions$9) => Layer.Layer<OtlpExporter.Flusher>;
 /** Base OTLP telemetry layer forced to JSON serialization. */
 declare const layerJson: (options?: Omit<LayerOptions$9, "serialization">) => Layer.Layer<OtlpExporter.Flusher>;
 /** Base OTLP telemetry layer forced to protobuf serialization. */
@@ -526,6 +526,23 @@ declare const layerWorker: (options?: WorkerLayerOptions) => Layer.Layer<OtlpExp
  * backend can tolerate high-cardinality resource attributes.
  */
 declare const layerDurableObject: (options?: DurableObjectLayerOptions) => Layer.Layer<OtlpExporter.Flusher, never, DurableObjectState>;
+declare namespace CloudflareTracer_d_exports {
+  export { layer$8 as layer };
+}
+/**
+ * Sends Effect spans to Cloudflare Workers Observability using the runtime's
+ * custom span API. Build this layer inside each invocation, for example with
+ * `Worker.make(Services, { eventLayer: CloudflareTracer.layer, fetch })`.
+ * It captures the invocation's async context and must not be cached across requests.
+ *
+ * Enable `observability.traces.enabled` in Wrangler. Cloudflare owns sampling
+ * and export; no OTLP exporter or flush is required. Scalar attributes are
+ * forwarded; other attributes, events, and links remain Effect-local. Completion
+ * is recorded as `effect.exit`, since Cloudflare has no outcome-setting API.
+ * Effect trace/span IDs remain independent of Cloudflare's opaque IDs. External
+ * parents and `root: true` cannot override the invocation's Cloudflare trace.
+ */
+declare const layer$8: Layer.Layer<never>;
 declare namespace D1_d_exports {
   export { D1Definition, D1Service, D1SqlLayerOptions, Service, TypeId$1 as TypeId, make$8 as make };
 }
@@ -853,7 +870,7 @@ type DurableObjectClass<Rpc extends DurableObjectRpc<ROut>, ROut> = new (state:
  */
 declare const make$6: <ROut, LayerError, REvent = never, EventLayerError = never, const Rpc extends DurableObjectRpc<ROut | REvent> = Record<never, never>>(layer: Layer.Layer<ROut, LayerError, DurableObjectState | WorkerEnvironment>, options?: DurableObjectOptions<ROut, REvent, EventLayerError, Rpc>) => DurableObjectClass<Rpc, ROut | REvent>;
 declare namespace DurableObjectAlarm_d_exports {
-  export { AlarmDefinitionConfig, AlarmDefinitionEntry, AlarmDefinitionPayload, AlarmDefinitions, AlarmFailurePolicy, AlarmPayload, AlarmPayloadSchema, AlarmRef, AlarmRetryPolicy, AlarmScheduler, DefinedAlarmEvent, DefinedAlarmHandlers, DurableObjectAlarm, DurableObjectAlarmError, DurableObjectAlarmEvent, InvalidAlarmPayloadError, InvalidAlarmRefError, InvalidProcessDueAlarmsOptionsError, InvalidRepeatEveryError, ProcessDueAlarmsFailure, ProcessDueAlarmsFailureAction, ProcessDueAlarmsHandler, ProcessDueAlarmsMode, ProcessDueAlarmsOptions, ProcessDueAlarmsResult, ScheduleAlarmInput, StoredAlarmDecodeError, define, processDue };
+  export { AlarmDefinitionConfig, AlarmDefinitionEntry, AlarmDefinitionPayload, AlarmDefinitions, AlarmFailurePolicy, AlarmPayload, AlarmPayloadSchema, AlarmRef, AlarmRetryPolicy, AlarmScheduler, AlarmTransaction, DefinedAlarmEvent, DefinedAlarmHandlers, DurableObjectAlarm, DurableObjectAlarmError, DurableObjectAlarmEvent, InvalidAlarmPayloadError, InvalidAlarmRefError, InvalidProcessDueAlarmsOptionsError, InvalidRepeatEveryError, ProcessDueAlarmsFailure, ProcessDueAlarmsFailureAction, ProcessDueAlarmsHandler, ProcessDueAlarmsMode, ProcessDueAlarmsOptions, ProcessDueAlarmsResult, ScheduleAlarmInput, StoredAlarmDecodeError, define, processDue };
 }
 type AlarmPayload = Schema.Json;
 declare const InvalidAlarmRefError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
@@ -946,8 +963,26 @@ interface ProcessDueAlarmsOptions<OnFailureR = never, OnFailureE = never> {
   readonly retryFailedAfter?: Duration.Input;
 }
 type ProcessDueAlarmsHandler<R = never, E = never> = (event: DurableObjectAlarmEvent) => Effect.Effect<void, E, R>;
+/**
+ * Alarm mutations owned by one transaction callback. Run them in the callback's
+ * fiber; forked work and use after the callback ends fail with StorageOperationError.
+ */
+type AlarmTransaction = Pick<AlarmScheduler, "scheduleAlarm" | "cancelAlarm">;
 /** Own `storage.setAlarm()` exclusively: a Durable Object has one platform alarm timestamp. */
 type AlarmScheduler = {
+  /**
+   * Commits local application storage and logical alarms in one native SQLite
+   * Durable Object transaction, reconciling the native alarm before commit.
+   * Use the supplied mutations, not standalone alarm methods or nested transactions.
+   * SqlClient queries must use this same Durable Object's storage.
+   *
+   * Failure, defects and interruption before commit roll back. A lost reply or
+   * interruption after commit does not undo committed state. Keep RPC and other
+   * external effects outside; atomically pre-arm a later wake before fallible work.
+   * Cloudflare's native retries are bounded; composition does not remove the
+   * pre-arm requirement or promise infinite retry liveness.
+   */
+  readonly transaction: <A, E, R>(closure: (alarms: AlarmTransaction) => Effect.Effect<A, E, R>) => Effect.Effect<A, E | StorageOperationError, R>;
   readonly cancelAlarm: (input: AlarmRef) => Effect.Effect<void, InvalidAlarmRefError | StorageOperationError>;
   /** Acknowledge after handling. Conditional writes preserve handler replacements; alarms are at-least-once. */
   readonly processDueAlarms: <R = never, E = never, OnFailureR = never, OnFailureE = never>(handle: ProcessDueAlarmsHandler<R, E>, options?: ProcessDueAlarmsOptions<OnFailureR, OnFailureE>) => Effect.Effect<ProcessDueAlarmsResult, E | OnFailureE | DurableObjectAlarmError, R | OnFailureR>;
@@ -1763,4 +1798,4 @@ declare const implement: typeof implement$1;
 type Handler<ROut, Self extends Definition$1.Any> = Handler$1<ROut, Self>;
 type Options<ROut, Self extends Definition$1.Any> = Options$1<ROut, Self>;
 //#endregion
-export { AiGateway_d_exports as AiGateway, AnalyticsEngine_d_exports as AnalyticsEngine, Artifacts_d_exports as Artifacts, Binding_d_exports as Binding, BrowserRendering_d_exports as BrowserRendering, Cache_d_exports as Cache, CloudflareOtlp_d_exports as CloudflareOtlp, ContainerNamespace_d_exports as ContainerNamespace, D1_d_exports as D1, DurableObject_d_exports as DurableObject, DurableObjectAlarm_d_exports as DurableObjectAlarm, DurableObjectDefinition_d_exports as DurableObjectDefinition, DurableObjectNamespace_d_exports as DurableObjectNamespace, DurableObjectRpcWebSocket_d_exports as DurableObjectRpcWebSocket, DurableObjectSqlite_d_exports as DurableObjectSqlite, DurableObjectState_d_exports as DurableObjectState, DurableObjectStorage_d_exports as DurableObjectStorage, DurableObjectWebSocket_d_exports as DurableObjectWebSocket, Email_d_exports as Email, Environment_d_exports as Environment, Hyperdrive_d_exports as Hyperdrive, Images_d_exports as Images, Kv_d_exports as Kv, Queue_d_exports as Queue, QueueBinding_d_exports as QueueBinding, QueueDefinition_d_exports as QueueDefinition, R2_d_exports as R2, Rpc_d_exports as Rpc, RpcDefinition_d_exports as RpcDefinition, RpcTracing_d_exports as RpcTracing, ServiceBinding_d_exports as ServiceBinding, Vectorize_d_exports as Vectorize, WebTransport_d_exports as WebTransport, Worker_d_exports as Worker, WorkerConfig, WorkerDefinition_d_exports as WorkerDefinition, type WorkerEnv, WorkerEnvironment, WorkersAi_d_exports as WorkersAi, Workflow_d_exports as Workflow, WorkflowBinding_d_exports as WorkflowBinding, WorkflowDefinition_d_exports as WorkflowDefinition };
+export { AiGateway_d_exports as AiGateway, AnalyticsEngine_d_exports as AnalyticsEngine, Artifacts_d_exports as Artifacts, Binding_d_exports as Binding, BrowserRendering_d_exports as BrowserRendering, Cache_d_exports as Cache, CloudflareOtlp_d_exports as CloudflareOtlp, CloudflareTracer_d_exports as CloudflareTracer, ContainerNamespace_d_exports as ContainerNamespace, D1_d_exports as D1, DurableObject_d_exports as DurableObject, DurableObjectAlarm_d_exports as DurableObjectAlarm, DurableObjectDefinition_d_exports as DurableObjectDefinition, DurableObjectNamespace_d_exports as DurableObjectNamespace, DurableObjectRpcWebSocket_d_exports as DurableObjectRpcWebSocket, DurableObjectSqlite_d_exports as DurableObjectSqlite, DurableObjectState_d_exports as DurableObjectState, DurableObjectStorage_d_exports as DurableObjectStorage, DurableObjectWebSocket_d_exports as DurableObjectWebSocket, Email_d_exports as Email, Environment_d_exports as Environment, Hyperdrive_d_exports as Hyperdrive, Images_d_exports as Images, Kv_d_exports as Kv, Queue_d_exports as Queue, QueueBinding_d_exports as QueueBinding, QueueDefinition_d_exports as QueueDefinition, R2_d_exports as R2, Rpc_d_exports as Rpc, RpcDefinition_d_exports as RpcDefinition, RpcTracing_d_exports as RpcTracing, ServiceBinding_d_exports as ServiceBinding, Vectorize_d_exports as Vectorize, WebTransport_d_exports as WebTransport, Worker_d_exports as Worker, WorkerConfig, WorkerDefinition_d_exports as WorkerDefinition, type WorkerEnv, WorkerEnvironment, WorkersAi_d_exports as WorkersAi, Workflow_d_exports as Workflow, WorkflowBinding_d_exports as WorkflowBinding, WorkflowDefinition_d_exports as WorkflowDefinition };

package/dist/index.mjs

@@ -1,15 +1,16 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
 import { a as WorkerEnvironment, i as WorkerConfig, n as violationsMessage, r as Environment_exports, t as causeMessage } from "./ErrorMessage-Byx2OgNd.mjs";
-import { n as Service$1, r as layer$17, t as Binding_exports } from "./Binding-C82jRhdr.mjs";
+import { n as Service$1, r as layer$18, t as Binding_exports } from "./Binding-C82jRhdr.mjs";
 import { n as Artifacts_exports } from "./Artifacts-CBxWGeZB.mjs";
 import { t as fromExecutionContext } from "./WorkerContext-Yobnfw-K.mjs";
-import { a as DurableWebSocketAttachmentError, i as DurableObjectWebSocket_exports, n as DurableObjectState_exports, o as fromWebSocket, r as fromDurableObjectState, s as DurableObjectStorage_exports, t as DurableObjectState } from "./DurableObjectState-DCh4PZMN.mjs";
+import { a as DurableWebSocketAttachmentError, c as StorageOperationError, i as DurableObjectWebSocket_exports, n as DurableObjectState_exports, o as fromWebSocket, r as fromDurableObjectState, s as DurableObjectStorage_exports, t as DurableObjectState } from "./DurableObjectState-DLL0YgBd.mjs";
 import { A as QueueDefinition_exports, C as decodeSuccess, D as method$1, E as make$15, O as reservedMethodNames$2, S as decodeArgs, T as encodeSuccess, _ as RpcTracing_exports, a as WorkerDefinition_exports, b as RpcDefinition_exports, c as resolve, d as makeEntrypointRuntime, f as runEventPromise, g as recordDecodedArgs, h as invokeRpcMethod, i as Worker_exports, j as QueueBinding_exports, k as Queue_exports, l as scoped, m as defineEntrypointRpcMethods, n as NativeRequest, o as ServiceBinding_exports, p as assumeEntrypointClass, r as WorkerContext, s as Rpc_exports, t as ExecutionContext, u as scheduleTelemetryFlush$1, v as withRpcClientSpan, w as encodeArgs, x as assertNoReservedMethods, y as withRpcTraceContext } from "./Worker-XsGJsCJX.mjs";
 import { Cause, Clock, Config, ConfigProvider, Context, Data, DateTime, Duration, Effect, Exit, FiberSet, Function as Function$1, Layer, Option, Predicate, Queue, Result, Schema, Tracer } from "effect";
 import { FetchHttpClient, HttpClient, HttpClientRequest } from "effect/unstable/http";
 import { OtlpExporter, OtlpLogger, OtlpMetrics, OtlpSerialization, OtlpTracer } from "effect/unstable/observability";
+import { AsyncLocalStorage } from "node:async_hooks";
+import { DurableObject, WorkflowEntrypoint, tracing } from "cloudflare:workers";
 import { D1Client } from "@effect/sql-d1";
-import { DurableObject, WorkflowEntrypoint } from "cloudflare:workers";
 import * as RpcMessage from "effect/unstable/rpc/RpcMessage";
 import * as RpcSerialization from "effect/unstable/rpc/RpcSerialization";
 import * as RpcServer from "effect/unstable/rpc/RpcServer";
@@ -21,7 +22,7 @@ var WorkersAi_exports = /* @__PURE__ */ __exportAll({
 	WorkersAiOperationError: () => WorkersAiOperationError,
 	embeddingResponse: () => embeddingResponse,
 	isWorkersAiBinding: () => isWorkersAiBinding,
-	layer: () => layer$16,
+	layer: () => layer$17,
 	make: () => make$14,
 	makeClient: () => makeClient$13
 });
@@ -78,11 +79,11 @@ const makeClient$13 = (definition) => (ai) => {
 		rawUnsafe: Effect.succeed(ai)
 	};
 };
-const layer$16 = (tag, definition) => layer$17(tag, definition.binding, (value) => isWorkersAiBinding(value), makeClient$13(definition), { expected: expectedWorkersAiBinding });
+const layer$17 = (tag, definition) => layer$18(tag, definition.binding, (value) => isWorkersAiBinding(value), makeClient$13(definition), { expected: expectedWorkersAiBinding });
 const make$14 = (id) => Tag$13()(id);
 const Tag$13 = () => (id) => {
 	const tag = Context.Service()(id);
-	const makeLayer = (definition) => layer$16(tag, definition);
+	const makeLayer = (definition) => layer$17(tag, definition);
 	return Object.assign(tag, {
 		id,
 		layer: makeLayer
@@ -94,7 +95,7 @@ var AiGateway_exports = /* @__PURE__ */ __exportAll({
 	AiGatewayOperationError: () => AiGatewayOperationError,
 	Tag: () => Tag$12,
 	isAiGatewayBinding: () => isAiGatewayBinding,
-	layer: () => layer$15,
+	layer: () => layer$16,
 	make: () => make$13,
 	makeClient: () => makeClient$12,
 	makeClientFromAi: () => makeClientFromAi,
@@ -247,11 +248,11 @@ const makeHttpClient = (definition, request = fetch) => {
 		rawUnsafe: Effect.fail(aiGatewayError(binding, "rawUnsafe", /* @__PURE__ */ new TypeError("HTTP AI Gateway clients have no raw binding")))
 	};
 };
-const layer$15 = (tag, definition) => layer$17(tag, definition.binding, isAiGatewayBinding, (ai) => makeClientFromAi(definition, ai), { expected: expectedAiGatewayBinding });
+const layer$16 = (tag, definition) => layer$18(tag, definition.binding, isAiGatewayBinding, (ai) => makeClientFromAi(definition, ai), { expected: expectedAiGatewayBinding });
 const make$13 = (id) => Tag$12()(id);
 const Tag$12 = () => (id) => {
 	const tag = Context.Service()(id);
-	const makeLayer = (definition) => layer$15(tag, definition);
+	const makeLayer = (definition) => layer$16(tag, definition);
 	return Object.assign(tag, {
 		id,
 		layer: makeLayer
@@ -268,7 +269,7 @@ var AnalyticsEngine_exports = /* @__PURE__ */ __exportAll({
 	QueryTag: () => QueryTag,
 	Tag: () => Tag$11,
 	isAnalyticsEngineDataset: () => isAnalyticsEngineDataset,
-	layer: () => layer$14,
+	layer: () => layer$15,
 	layerFetch: () => layerFetch,
 	layerFetchConfig: () => layerFetchConfig,
 	make: () => make$12,
@@ -491,12 +492,12 @@ const queryLayerConfig = (tag, config = queryConfig()) => Layer.effect(tag, Effe
 	return yield* makeQueryClient(definition);
 }));
 const layerFetchConfig = (tag, config = queryConfig()) => queryLayerConfig(tag, config).pipe(Layer.provide(FetchHttpClient.layer));
-const layer$14 = (tag, definition) => layer$17(tag, definition.binding, isAnalyticsEngineDataset, makeClient$11(definition, definition.write), { expected: expectedAnalyticsEngineDataset });
+const layer$15 = (tag, definition) => layer$18(tag, definition.binding, isAnalyticsEngineDataset, makeClient$11(definition, definition.write), { expected: expectedAnalyticsEngineDataset });
 const make$12 = (id) => Tag$11()(id);
 const makeQuery = (id) => QueryTag()(id);
 const Tag$11 = () => (id) => {
 	const tag = Context.Service()(id);
-	const makeLayer = (definition) => layer$14(tag, definition);
+	const makeLayer = (definition) => layer$15(tag, definition);
 	return Object.assign(tag, {
 		id,
 		layer: makeLayer
@@ -522,7 +523,7 @@ var BrowserRendering_exports = /* @__PURE__ */ __exportAll({
 	BrowserRenderingOperationError: () => BrowserRenderingOperationError,
 	Tag: () => Tag$10,
 	isBrowserRenderingBinding: () => isBrowserRenderingBinding,
-	layer: () => layer$13,
+	layer: () => layer$14,
 	make: () => make$11,
 	makeClient: () => makeClient$10
 });
@@ -579,11 +580,11 @@ const makeClient$10 = (definition) => (binding) => ({
 	connectWith: (connect, options) => tryBrowserRenderingPromise(definition.binding, "connect", () => connect(binding, options)).pipe(Effect.map((browser) => wrapBrowser(definition.binding, browser)), Effect.withSpan("BrowserRendering.connectWith")),
 	rawUnsafe: Effect.succeed(binding)
 });
-const layer$13 = (tag, definition) => layer$17(tag, definition.binding, isBrowserRenderingBinding, makeClient$10(definition), { expected: expectedBrowserRenderingBinding });
+const layer$14 = (tag, definition) => layer$18(tag, definition.binding, isBrowserRenderingBinding, makeClient$10(definition), { expected: expectedBrowserRenderingBinding });
 const make$11 = (id) => Tag$10()(id);
 const Tag$10 = () => (id) => {
 	const tag = Context.Service()(id);
-	const makeLayer = (definition) => layer$13(tag, definition);
+	const makeLayer = (definition) => layer$14(tag, definition);
 	return Object.assign(tag, {
 		id,
 		layer: makeLayer
@@ -594,7 +595,7 @@ const Tag$10 = () => (id) => {
 var Cache_exports = /* @__PURE__ */ __exportAll({
 	CacheOperationError: () => CacheOperationError,
 	CacheStorage: () => CacheStorage,
-	layer: () => layer$12,
+	layer: () => layer$13,
 	layerFrom: () => layerFrom,
 	makeCacheClient: () => makeCacheClient,
 	makeClient: () => makeClient$9
@@ -631,7 +632,7 @@ const makeClient$9 = (storage) => ({
 	rawUnsafe: Effect.succeed(storage)
 });
 const layerFrom = (storage) => Layer.succeed(CacheStorage, makeClient$9(storage));
-const layer$12 = Layer.sync(CacheStorage, () => makeClient$9(caches));
+const layer$13 = Layer.sync(CacheStorage, () => makeClient$9(caches));
 //#endregion
 //#region src/CloudflareOtlp.ts
 /**
@@ -641,7 +642,7 @@ const layer$12 = Layer.sync(CacheStorage, () => makeClient$9(caches));
 * layer finalizers run separately and follow their configured shutdown timeout.
 */
 var CloudflareOtlp_exports = /* @__PURE__ */ __exportAll({
-	layer: () => layer$11,
+	layer: () => layer$12,
 	layerDurableObject: () => layerDurableObject,
 	layerJson: () => layerJson,
 	layerProtobuf: () => layerProtobuf,
@@ -707,14 +708,14 @@ const makeLayer = (options = {}, runtimeAttributes = {}) => {
 * The layer provides {@link OtlpExporter.Flusher} for draining buffered
 * telemetry before the isolate freezes.
 */
-const layer$11 = (options = {}) => makeLayer(options);
+const layer$12 = (options = {}) => makeLayer(options);
 /** Base OTLP telemetry layer forced to JSON serialization. */
-const layerJson = (options = {}) => layer$11({
+const layerJson = (options = {}) => layer$12({
 	...options,
 	serialization: "json"
 });
 /** Base OTLP telemetry layer forced to protobuf serialization. */
-const layerProtobuf = (options = {}) => layer$11({
+const layerProtobuf = (options = {}) => layer$12({
 	...options,
 	serialization: "protobuf"
 });
@@ -743,6 +744,64 @@ const layerDurableObject = (options = {}) => Layer.unwrap(Effect.map(DurableObje
 	"cloudflare.durable_object.id": options.includeObjectId ? state.id.toString() : void 0
 })));
 //#endregion
+//#region src/CloudflareTracer.ts
+var CloudflareTracer_exports = /* @__PURE__ */ __exportAll({ layer: () => layer$11 });
+var Span = class extends Tracer.NativeSpan {
+	runInContext;
+	cloudflareSpan;
+	constructor(options, runInContext, cloudflareSpan) {
+		super({
+			...options,
+			sampled: options.sampled && (cloudflareSpan?.isTraced ?? false)
+		});
+		this.runInContext = runInContext;
+		this.cloudflareSpan = cloudflareSpan;
+	}
+	attribute(key, value) {
+		super.attribute(key, value);
+		if (Predicate.isString(value) || Predicate.isNumber(value) || Predicate.isBoolean(value)) this.cloudflareSpan?.setAttribute(key, value);
+	}
+	end(endTime, exit) {
+		if (this.status._tag === "Ended") return;
+		super.end(endTime, exit);
+		this.cloudflareSpan?.setAttribute("effect.exit", Exit.isSuccess(exit) ? "success" : Cause.hasInterruptsOnly(exit.cause) ? "interrupted" : "failure");
+		this.cloudflareSpan?.end();
+	}
+};
+/**
+* Sends Effect spans to Cloudflare Workers Observability using the runtime's
+* custom span API. Build this layer inside each invocation, for example with
+* `Worker.make(Services, { eventLayer: CloudflareTracer.layer, fetch })`.
+* It captures the invocation's async context and must not be cached across requests.
+*
+* Enable `observability.traces.enabled` in Wrangler. Cloudflare owns sampling
+* and export; no OTLP exporter or flush is required. Scalar attributes are
+* forwarded; other attributes, events, and links remain Effect-local. Completion
+* is recorded as `effect.exit`, since Cloudflare has no outcome-setting API.
+* Effect trace/span IDs remain independent of Cloudflare's opaque IDs. External
+* parents and `root: true` cannot override the invocation's Cloudflare trace.
+*/
+const layer$11 = Layer.effect(Tracer.Tracer, Effect.sync(() => {
+	const invocationContext = AsyncLocalStorage.snapshot();
+	const contextFor = (span) => {
+		while (span?._tag === "Span") {
+			if (span instanceof Span) return span.runInContext;
+			span = Option.getOrUndefined(span.parent);
+		}
+		return invocationContext;
+	};
+	return Tracer.make({
+		span(options) {
+			const parentContext = options.root ? invocationContext : contextFor(Option.getOrUndefined(options.parent));
+			if (!options.sampled) return new Span(options, parentContext);
+			return parentContext(() => tracing.startActiveSpan(options.name, (span) => new Span(options, AsyncLocalStorage.snapshot(), span)));
+		},
+		context(primitive, fiber) {
+			return contextFor(fiber.currentSpan)(() => primitive["~effect/Effect/evaluate"](fiber));
+		}
+	});
+}));
+//#endregion
 //#region src/ContainerNamespace.ts
 var ContainerNamespace_exports = /* @__PURE__ */ __exportAll({
 	ContainerNamespace: () => ContainerNamespace,
@@ -864,7 +923,7 @@ const makeClient$8 = (definition) => (namespace) => {
 		rawUnsafe: Effect.succeed(namespace)
 	};
 };
-const layer$10 = (tag, definition) => layer$17(tag, definition.binding, (value) => isContainerNamespaceResource(value), makeClient$8(definition), { expected: expectedContainerNamespace });
+const layer$10 = (tag, definition) => layer$18(tag, definition.binding, (value) => isContainerNamespaceResource(value), makeClient$8(definition), { expected: expectedContainerNamespace });
 const make$10 = (id) => Tag$9()(id);
 const Tag$9 = () => (id) => {
 	const tag = Context.Service()(`effect-cf/Container/${id}`);
@@ -1033,7 +1092,7 @@ const makeClient$7 = (definition) => {
 		});
 	};
 };
-const layer$9 = (tag, definition) => layer$17(tag, definition.binding, (value) => isDurableObjectNamespaceClient(value), makeClient$7(definition), { expected: expectedDurableObjectNamespace });
+const layer$9 = (tag, definition) => layer$18(tag, definition.binding, (value) => isDurableObjectNamespaceClient(value), makeClient$7(definition), { expected: expectedDurableObjectNamespace });
 const makeDirectMethods = (rpcDefinition, helpers) => {
 	const methods = {};
 	if (rpcDefinition !== void 0) {
@@ -1430,25 +1489,35 @@ var DurableObjectAlarm = class DurableObjectAlarm extends Context.Service()("eff
 		});
 		const cancelAlarm = Effect.fn("DurableObjectAlarm.cancelAlarm")(function* (input) {
 			const ref = yield* decodeAlarmRef(input);
-			yield* state.storage.transaction(() => Effect.gen(function* () {
-				yield* ensureTable(state);
-				yield* state.storage.sql.exec(`DELETE FROM effect_cf_scheduled_alarms WHERE storage_id = ?`, getScheduledEventId(ref)).pipe(Effect.asVoid);
-				yield* reconcileAlarm();
-			}));
+			yield* state.storage.sql.exec(`DELETE FROM effect_cf_scheduled_alarms WHERE storage_id = ?`, getScheduledEventId(ref));
 		});
 		const scheduleAlarm = Effect.fn("DurableObjectAlarm.scheduleAlarm")(function* (input) {
 			const ref = yield* decodeAlarmRef(input);
 			const repeatEveryMillis = yield* toRepeatEveryMillis(input.repeatEvery);
 			const payload = yield* encodeStoredPayload(input.payload);
 			const runAt = DateTime.toEpochMillis(input.runAt);
-			yield* state.storage.transaction(() => Effect.gen(function* () {
-				yield* ensureTable(state);
-				yield* state.storage.sql.exec(`INSERT OR REPLACE INTO effect_cf_scheduled_alarms
+			yield* state.storage.sql.exec(`INSERT OR REPLACE INTO effect_cf_scheduled_alarms
                    (storage_id, alarm_id, tag, run_at, repeat_every_ms, payload)
-                 VALUES (?, ?, ?, ?, ?, ?)`, getScheduledEventId(ref), ref.id, ref.tag, runAt, repeatEveryMillis, payload).pipe(Effect.asVoid);
-				yield* reconcileAlarm();
-			}));
+                 VALUES (?, ?, ?, ?, ?, ?)`, getScheduledEventId(ref), ref.id, ref.tag, runAt, repeatEveryMillis, payload);
 		});
+		const transaction = (closure) => state.storage.transaction(() => Effect.withFiber((owner) => {
+			let active = true;
+			const requireActive = (effect) => Effect.withFiber((fiber) => active && fiber === owner ? effect : Effect.fail(new StorageOperationError({
+				operation: "alarm.transaction",
+				cause: /* @__PURE__ */ new Error("Alarm mutations require their active transaction callback")
+			})));
+			return Effect.gen(function* () {
+				yield* ensureTable(state);
+				const result = yield* Effect.suspend(() => closure({
+					cancelAlarm: (input) => requireActive(cancelAlarm(input)),
+					scheduleAlarm: (input) => requireActive(scheduleAlarm(input))
+				})).pipe(Effect.ensuring(Effect.sync(() => {
+					active = false;
+				})));
+				yield* reconcileAlarm();
+				return result;
+			});
+		}));
 		const processDueAlarms = Effect.fn("DurableObjectAlarm.processDueAlarms")(function* (handle, options) {
 			yield* ensureTable(state);
 			const mode = options?.mode ?? "isolated";
@@ -1507,9 +1576,10 @@ var DurableObjectAlarm = class DurableObjectAlarm extends Context.Service()("eff
 			};
 		});
 		return DurableObjectAlarm.of({
-			cancelAlarm,
+			cancelAlarm: (input) => transaction((alarms) => alarms.cancelAlarm(input)),
 			processDueAlarms,
-			scheduleAlarm
+			scheduleAlarm: (input) => transaction((alarms) => alarms.scheduleAlarm(input)),
+			transaction
 		});
 	}).pipe(Effect.withSpan("DurableObjectAlarm.layer")));
 };
@@ -2282,7 +2352,7 @@ const makeClient$6 = (definition, options) => (email) => {
 		rawUnsafe: Effect.succeed(email)
 	};
 };
-const layer$6 = (tag, definition) => layer$17(tag, definition.binding, isEmailBinding, makeClient$6(definition, definition.send), { expected: expectedSendEmailBinding });
+const layer$6 = (tag, definition) => layer$18(tag, definition.binding, isEmailBinding, makeClient$6(definition, definition.send), { expected: expectedSendEmailBinding });
 const make$6 = (id) => Tag$7()(id);
 const Tag$7 = () => (id) => {
 	const tag = Context.Service()(id);
@@ -2308,7 +2378,7 @@ const makeClient$5 = (definition) => (hyperdrive) => ({
 	connectionString: hyperdrive.connectionString,
 	rawUnsafe: Effect.succeed(hyperdrive)
 });
-const layer$5 = (tag, definition) => layer$17(tag, definition.binding, isHyperdrive, makeClient$5(definition), { expected: expectedHyperdrive });
+const layer$5 = (tag, definition) => layer$18(tag, definition.binding, isHyperdrive, makeClient$5(definition), { expected: expectedHyperdrive });
 const make$5 = (id) => Tag$6()(id);
 const Tag$6 = () => (id) => {
 	const tag = Context.Service()(id);
@@ -2410,7 +2480,7 @@ const makeClient$4 = (definition) => (images) => {
 		rawUnsafe: Effect.succeed(images)
 	};
 };
-const layer$4 = (tag, definition) => layer$17(tag, definition.binding, isImagesBinding, makeClient$4(definition), { expected: expectedImagesBinding });
+const layer$4 = (tag, definition) => layer$18(tag, definition.binding, isImagesBinding, makeClient$4(definition), { expected: expectedImagesBinding });
 const make$4 = (id) => Tag$5()(id);
 const Tag$5 = () => (id) => {
 	const tag = Context.Service()(id);
@@ -2518,7 +2588,7 @@ const makeClient$3 = (definition) => {
 		rawUnsafe: Effect.succeed(kv)
 	});
 };
-const layer$3 = (tag, definition) => layer$17(tag, definition.binding, isKvNamespace, makeClient$3(definition), { expected: expectedKvNamespace });
+const layer$3 = (tag, definition) => layer$18(tag, definition.binding, isKvNamespace, makeClient$3(definition), { expected: expectedKvNamespace });
 const makeDefinition$1 = (id, definition) => {
 	const kvDefinition = {
 		id,
@@ -2639,7 +2709,7 @@ const makeClient$2 = (definition) => {
 		};
 	};
 };
-const layer$2 = (tag, definition) => layer$17(tag, definition.binding, isR2Bucket, makeClient$2(definition), { expected: expectedR2Bucket });
+const layer$2 = (tag, definition) => layer$18(tag, definition.binding, isR2Bucket, makeClient$2(definition), { expected: expectedR2Bucket });
 const make$3 = (id) => Tag$3()(id);
 const Tag$3 = () => (id) => {
 	const tag = Context.Service()(id);
@@ -2705,7 +2775,7 @@ const makeClient$1 = (definition) => (index) => {
 		rawUnsafe: Effect.succeed(index)
 	};
 };
-const layer$1 = (tag, definition) => layer$17(tag, definition.binding, isVectorizeBinding, makeClient$1(definition), { expected: expectedVectorizeBinding });
+const layer$1 = (tag, definition) => layer$18(tag, definition.binding, isVectorizeBinding, makeClient$1(definition), { expected: expectedVectorizeBinding });
 const make$2 = (id) => Tag$2()(id);
 const Tag$2 = () => (id) => {
 	const tag = Context.Service()(id);
@@ -2860,7 +2930,7 @@ const makeClient = (definition) => {
 		rawUnsafe: Effect.succeed(workflow)
 	});
 };
-const layer = (tag, definition) => layer$17(tag, definition.binding, (value) => isWorkflow(value), makeClient(definition), { expected: expectedWorkflow });
+const layer = (tag, definition) => layer$18(tag, definition.binding, (value) => isWorkflow(value), makeClient(definition), { expected: expectedWorkflow });
 //#endregion
 //#region src/WorkflowDefinition.ts
 var WorkflowDefinition_exports = /* @__PURE__ */ __exportAll({
@@ -2881,7 +2951,7 @@ const make$1 = (id, definition) => Tag$1()(id, definition);
 const Tag$1 = () => (id, definition) => {
 	const workflowDefinition = makeDefinition(id, definition);
 	const tag = Context.Service()(`effect-cf/Workflow/${id}`);
-	const layer$18 = (binding) => layer(tag, {
+	const layer$19 = (binding) => layer(tag, {
 		...binding,
 		payload: definition.payload,
 		result: definition.result
@@ -2901,7 +2971,7 @@ const Tag$1 = () => (id, definition) => {
 		payload: workflowDefinition.payload,
 		result: workflowDefinition.result,
 		make: workflowDefinition.make,
-		layer: layer$18,
+		layer: layer$19,
 		create,
 		createBatch,
 		get,
@@ -3046,4 +3116,4 @@ const waitForEvent = (name, options) => Effect.flatMap(WorkflowStep$1, (workflow
 const Tag = Tag$1;
 const implement = implement$1;
 //#endregion
-export { AiGateway_exports as AiGateway, AnalyticsEngine_exports as AnalyticsEngine, Artifacts_exports as Artifacts, Binding_exports as Binding, BrowserRendering_exports as BrowserRendering, Cache_exports as Cache, CloudflareOtlp_exports as CloudflareOtlp, ContainerNamespace_exports as ContainerNamespace, D1_exports as D1, DurableObject_exports as DurableObject, DurableObjectAlarm_exports as DurableObjectAlarm, DurableObjectDefinition_exports as DurableObjectDefinition, DurableObjectNamespace_exports as DurableObjectNamespace, DurableObjectRpcWebSocket_exports as DurableObjectRpcWebSocket, DurableObjectSqlite_exports as DurableObjectSqlite, DurableObjectState_exports as DurableObjectState, DurableObjectStorage_exports as DurableObjectStorage, DurableObjectWebSocket_exports as DurableObjectWebSocket, Email_exports as Email, Environment_exports as Environment, Hyperdrive_exports as Hyperdrive, Images_exports as Images, Kv_exports as Kv, Queue_exports as Queue, QueueBinding_exports as QueueBinding, QueueDefinition_exports as QueueDefinition, R2_exports as R2, Rpc_exports as Rpc, RpcDefinition_exports as RpcDefinition, RpcTracing_exports as RpcTracing, ServiceBinding_exports as ServiceBinding, Vectorize_exports as Vectorize, WebTransport_exports as WebTransport, Worker_exports as Worker, WorkerConfig, WorkerDefinition_exports as WorkerDefinition, WorkerEnvironment, WorkersAi_exports as WorkersAi, Workflow_exports as Workflow, WorkflowBinding_exports as WorkflowBinding, WorkflowDefinition_exports as WorkflowDefinition };
+export { AiGateway_exports as AiGateway, AnalyticsEngine_exports as AnalyticsEngine, Artifacts_exports as Artifacts, Binding_exports as Binding, BrowserRendering_exports as BrowserRendering, Cache_exports as Cache, CloudflareOtlp_exports as CloudflareOtlp, CloudflareTracer_exports as CloudflareTracer, ContainerNamespace_exports as ContainerNamespace, D1_exports as D1, DurableObject_exports as DurableObject, DurableObjectAlarm_exports as DurableObjectAlarm, DurableObjectDefinition_exports as DurableObjectDefinition, DurableObjectNamespace_exports as DurableObjectNamespace, DurableObjectRpcWebSocket_exports as DurableObjectRpcWebSocket, DurableObjectSqlite_exports as DurableObjectSqlite, DurableObjectState_exports as DurableObjectState, DurableObjectStorage_exports as DurableObjectStorage, DurableObjectWebSocket_exports as DurableObjectWebSocket, Email_exports as Email, Environment_exports as Environment, Hyperdrive_exports as Hyperdrive, Images_exports as Images, Kv_exports as Kv, Queue_exports as Queue, QueueBinding_exports as QueueBinding, QueueDefinition_exports as QueueDefinition, R2_exports as R2, Rpc_exports as Rpc, RpcDefinition_exports as RpcDefinition, RpcTracing_exports as RpcTracing, ServiceBinding_exports as ServiceBinding, Vectorize_exports as Vectorize, WebTransport_exports as WebTransport, Worker_exports as Worker, WorkerConfig, WorkerDefinition_exports as WorkerDefinition, WorkerEnvironment, WorkersAi_exports as WorkersAi, Workflow_exports as Workflow, WorkflowBinding_exports as WorkflowBinding, WorkflowDefinition_exports as WorkflowDefinition };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "effect-cf",
-  "version": "0.36.0",
+  "version": "0.38.0",
   "description": "Effect-native primitives for Cloudflare Workers and bindings.",
   "license": "MIT",
   "repository": {
@@ -85,6 +85,7 @@
     "@platformatic/vfs": "^0.4.0",
     "effect": "catalog:",
     "esbuild": "^0.28.1",
+    "miniflare": "catalog:",
     "vite-plus": "catalog:",
     "vitest": "catalog:"
   },

package/src/CloudflareTracer.ts

@@ -0,0 +1,92 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import { tracing } from "cloudflare:workers";
+import { Cause, Effect, Exit, Layer, Option, Predicate, Tracer } from "effect";
+
+type SpanOptions = Parameters<Tracer.Tracer["span"]>[0];
+type RunInContext = ReturnType<typeof AsyncLocalStorage.snapshot>;
+type CloudflareSpan = Parameters<Parameters<typeof tracing.startActiveSpan>[1]>[0];
+
+class Span extends Tracer.NativeSpan {
+  constructor(
+    options: SpanOptions,
+    readonly runInContext: RunInContext,
+    readonly cloudflareSpan?: CloudflareSpan,
+  ) {
+    super({ ...options, sampled: options.sampled && (cloudflareSpan?.isTraced ?? false) });
+  }
+
+  // Effect's tracer contract accepts arbitrary attributes; only CF-supported scalars cross the boundary.
+  // oxlint-disable-next-line anti-slop/no-unknown-parameters
+  override attribute(key: string, value: unknown): void {
+    super.attribute(key, value);
+
+    if (Predicate.isString(value) || Predicate.isNumber(value) || Predicate.isBoolean(value)) {
+      this.cloudflareSpan?.setAttribute(key, value);
+    }
+  }
+
+  override end(endTime: bigint, exit: Exit.Exit<unknown, unknown>): void {
+    if (this.status._tag === "Ended") return;
+
+    super.end(endTime, exit);
+    this.cloudflareSpan?.setAttribute(
+      "effect.exit",
+      Exit.isSuccess(exit)
+        ? "success"
+        : Cause.hasInterruptsOnly(exit.cause)
+          ? "interrupted"
+          : "failure",
+    );
+    this.cloudflareSpan?.end();
+  }
+}
+
+/**
+ * Sends Effect spans to Cloudflare Workers Observability using the runtime's
+ * custom span API. Build this layer inside each invocation, for example with
+ * `Worker.make(Services, { eventLayer: CloudflareTracer.layer, fetch })`.
+ * It captures the invocation's async context and must not be cached across requests.
+ *
+ * Enable `observability.traces.enabled` in Wrangler. Cloudflare owns sampling
+ * and export; no OTLP exporter or flush is required. Scalar attributes are
+ * forwarded; other attributes, events, and links remain Effect-local. Completion
+ * is recorded as `effect.exit`, since Cloudflare has no outcome-setting API.
+ * Effect trace/span IDs remain independent of Cloudflare's opaque IDs. External
+ * parents and `root: true` cannot override the invocation's Cloudflare trace.
+ */
+export const layer: Layer.Layer<never> = Layer.effect(
+  Tracer.Tracer,
+  Effect.sync(() => {
+    const invocationContext = AsyncLocalStorage.snapshot();
+    const contextFor = (span: Tracer.AnySpan | undefined): RunInContext => {
+      while (span?._tag === "Span") {
+        if (span instanceof Span) return span.runInContext;
+
+        // Effect can install a no-op span while tracing is locally disabled.
+        span = Option.getOrUndefined(span.parent);
+      }
+
+      return invocationContext;
+    };
+
+    return Tracer.make({
+      span(options) {
+        const parentContext = options.root
+          ? invocationContext
+          : contextFor(Option.getOrUndefined(options.parent));
+
+        if (!options.sampled) return new Span(options, parentContext);
+
+        return parentContext(() =>
+          tracing.startActiveSpan(
+            options.name,
+            (span) => new Span(options, AsyncLocalStorage.snapshot(), span),
+          ),
+        );
+      },
+      context(primitive, fiber) {
+        return contextFor(fiber.currentSpan)(() => primitive["~effect/Effect/evaluate"](fiber));
+      },
+    });
+  }),
+);

package/src/DurableObjectAlarm.ts

@@ -12,7 +12,7 @@ import {
 } from "effect";
 
 import { DurableObjectState } from "./DurableObjectState";
-import type { SqlStorageValue, StorageOperationError } from "./DurableObjectStorage";
+import { type SqlStorageValue, StorageOperationError } from "./DurableObjectStorage";
 import * as ErrorMessage from "./internal/ErrorMessage";
 
 const INIT_TABLE_SQL = `
@@ -177,8 +177,30 @@ export type ProcessDueAlarmsHandler<R = never, E = never> = (
   event: DurableObjectAlarmEvent,
 ) => Effect.Effect<void, E, R>;
 
+/**
+ * Alarm mutations owned by one transaction callback. Run them in the callback's
+ * fiber; forked work and use after the callback ends fail with StorageOperationError.
+ */
+export type AlarmTransaction = Pick<AlarmScheduler, "scheduleAlarm" | "cancelAlarm">;
+
 /** Own `storage.setAlarm()` exclusively: a Durable Object has one platform alarm timestamp. */
 export type AlarmScheduler = {
+  /**
+   * Commits local application storage and logical alarms in one native SQLite
+   * Durable Object transaction, reconciling the native alarm before commit.
+   * Use the supplied mutations, not standalone alarm methods or nested transactions.
+   * SqlClient queries must use this same Durable Object's storage.
+   *
+   * Failure, defects and interruption before commit roll back. A lost reply or
+   * interruption after commit does not undo committed state. Keep RPC and other
+   * external effects outside; atomically pre-arm a later wake before fallible work.
+   * Cloudflare's native retries are bounded; composition does not remove the
+   * pre-arm requirement or promise infinite retry liveness.
+   */
+  readonly transaction: <A, E, R>(
+    closure: (alarms: AlarmTransaction) => Effect.Effect<A, E, R>,
+  ) => Effect.Effect<A, E | StorageOperationError, R>;
+
   readonly cancelAlarm: (
     input: AlarmRef,
   ) => Effect.Effect<void, InvalidAlarmRefError | StorageOperationError>;
@@ -523,17 +545,9 @@ export class DurableObjectAlarm extends Context.Service<DurableObjectAlarm, Alar
       const cancelAlarm = Effect.fn("DurableObjectAlarm.cancelAlarm")(function* (input: AlarmRef) {
         const ref = yield* decodeAlarmRef(input);
 
-        yield* state.storage.transaction(() =>
-          Effect.gen(function* () {
-            yield* ensureTable(state);
-            yield* state.storage.sql
-              .exec(
-                `DELETE FROM effect_cf_scheduled_alarms WHERE storage_id = ?`,
-                getScheduledEventId(ref),
-              )
-              .pipe(Effect.asVoid);
-            yield* reconcileAlarm();
-          }),
+        yield* state.storage.sql.exec(
+          `DELETE FROM effect_cf_scheduled_alarms WHERE storage_id = ?`,
+          getScheduledEventId(ref),
         );
       });
 
@@ -545,27 +559,62 @@ export class DurableObjectAlarm extends Context.Service<DurableObjectAlarm, Alar
         const payload = yield* encodeStoredPayload(input.payload);
         const runAt = DateTime.toEpochMillis(input.runAt);
 
-        yield* state.storage.transaction(() =>
-          Effect.gen(function* () {
-            yield* ensureTable(state);
-            yield* state.storage.sql
-              .exec(
-                `INSERT OR REPLACE INTO effect_cf_scheduled_alarms
+        yield* state.storage.sql.exec(
+          `INSERT OR REPLACE INTO effect_cf_scheduled_alarms
                    (storage_id, alarm_id, tag, run_at, repeat_every_ms, payload)
                  VALUES (?, ?, ?, ?, ?, ?)`,
-                getScheduledEventId(ref),
-                ref.id,
-                ref.tag,
-                runAt,
-                repeatEveryMillis,
-                payload,
-              )
-              .pipe(Effect.asVoid);
-            yield* reconcileAlarm();
-          }),
+          getScheduledEventId(ref),
+          ref.id,
+          ref.tag,
+          runAt,
+          repeatEveryMillis,
+          payload,
         );
       });
 
+      const transaction: AlarmScheduler["transaction"] = (closure) =>
+        state.storage.transaction(() =>
+          Effect.withFiber((owner) => {
+            let active = true;
+
+            // A callback-owned handle cannot escape via a returned Effect or a
+            // detached fiber and write after reconciliation or rollback.
+            const requireActive = <A, E>(effect: Effect.Effect<A, E>) =>
+              Effect.withFiber<A, E | StorageOperationError>((fiber) =>
+                active && fiber === owner
+                  ? effect
+                  : Effect.fail(
+                      new StorageOperationError({
+                        operation: "alarm.transaction",
+                        cause: new Error(
+                          "Alarm mutations require their active transaction callback",
+                        ),
+                      }),
+                    ),
+              );
+
+            return Effect.gen(function* () {
+              yield* ensureTable(state);
+              const result = yield* Effect.suspend(() =>
+                closure({
+                  cancelAlarm: (input) => requireActive(cancelAlarm(input)),
+                  scheduleAlarm: (input) => requireActive(scheduleAlarm(input)),
+                }),
+              ).pipe(
+                Effect.ensuring(
+                  Effect.sync(() => {
+                    active = false;
+                  }),
+                ),
+              );
+
+              yield* reconcileAlarm();
+
+              return result;
+            });
+          }),
+        );
+
       const processDueAlarms = Effect.fn("DurableObjectAlarm.processDueAlarms")(function* <
         R,
         E,
@@ -669,9 +718,10 @@ export class DurableObjectAlarm extends Context.Service<DurableObjectAlarm, Alar
       });
 
       return DurableObjectAlarm.of({
-        cancelAlarm,
+        cancelAlarm: (input) => transaction((alarms) => alarms.cancelAlarm(input)),
         processDueAlarms,
-        scheduleAlarm,
+        scheduleAlarm: (input) => transaction((alarms) => alarms.scheduleAlarm(input)),
+        transaction,
       });
     }).pipe(Effect.withSpan("DurableObjectAlarm.layer")),
   );

package/src/index.ts

@@ -5,6 +5,7 @@ export * as Binding from "./Binding";
 export * as BrowserRendering from "./BrowserRendering";
 export * as Cache from "./Cache";
 export * as CloudflareOtlp from "./CloudflareOtlp";
+export * as CloudflareTracer from "./CloudflareTracer";
 export * as ContainerNamespace from "./ContainerNamespace";
 export * as D1 from "./D1";
 export * as DurableObject from "./DurableObject";