@effect-agent/storage-cloudflare 0.1.0-beta.37 → 0.1.0-beta.39

package/dist/index.d.mts

@@ -1,100 +1,8 @@
-import { AbortCommand, AbortIntent, AdmissionConflict, AdmissionRequest, AdmissionResult, AppendConflict, AppendResult, CanonicalRecordEnvelope, ChildSettledNotification, ConversationExport, ConversationExportRequest, ConversationMaterialization, ConversationNotMaterialized, ConversationRead, ConversationStore, ConversationStoreError, ConversationTail, ConversationTailRequest, FenceRejected, FencedAppendRequest, JoinedToHost, LedgerError, MarkReadyRequest, ScheduleFailpointError, ScheduleStorageError, ScheduleStore, SettlementConflict, SubmissionLedger, SubmissionLookupByKey, SubmissionSnapshot } from "@effect-agent/session";
+import { a as DoFenceRejected, c as DoStorageCorruptionError, d as DoStorageFailpointLocation, f as DoValueBoundExceeded, i as DoCheckpointConflict, l as DoStorageError, n as DoStorageFailpointHandler, o as DoLedgerError, r as DoAppendConflict, s as DoStorageCompatibilityError, t as DoStorageFailpoint, u as DoStorageFailpointError } from "./do-storage-failpoint-9XB9tuif.mjs";
+import { AbortCommand, AbortIntent, AdmissionConflict, AdmissionRequest, AdmissionResult, AppendConflict, AppendResult, CanonicalRecordEnvelope, ChildSettledNotification, FenceRejected, FencedAppendRequest, JoinedToHost, LedgerError, MarkReadyRequest, ScheduleFailpointError, ScheduleStorageError, ScheduleStore, SettlementConflict, SourcePartition, SubmissionLedger, SubmissionLookupByKey, SubmissionSnapshot, SubscriptionError, SubscriptionFailpointError, SubscriptionStore, ThreadExport, ThreadExportRequest, ThreadMaterialization, ThreadNotMaterialized, ThreadRead, ThreadStore, ThreadStoreError, ThreadTail, ThreadTailRequest } from "@effect-agent/thread";
 import { Context, Crypto, Effect, Layer, Schema } from "effect";
 import { SqliteMigrator } from "@effect/sql-sqlite-do";
 import * as SqlClientService from "effect/unstable/sql/SqlClient";
-//#region src/errors.d.ts
-declare const DoStorageCompatibilityError_base: Schema.Class<DoStorageCompatibilityError, Schema.TaggedStruct<"DoStorageCompatibilityError", {
-  readonly actualVersion: Schema.Int;
-  readonly message: Schema.String;
-  readonly supportedVersion: Schema.Int;
-}>, import("effect/Cause").YieldableError>;
-/** The Durable Object's SQLite storage uses a private-development format this adapter cannot read. */
-declare class DoStorageCompatibilityError extends DoStorageCompatibilityError_base {}
-declare const DoStorageCorruptionError_base: Schema.Class<DoStorageCorruptionError, Schema.TaggedStruct<"DoStorageCorruptionError", {
-  readonly message: Schema.String;
-  readonly rowKey: Schema.String;
-  readonly table: Schema.String;
-}>, import("effect/Cause").YieldableError>;
-/** Stored bytes failed the current Schema and cannot be used as recovery truth. */
-declare class DoStorageCorruptionError extends DoStorageCorruptionError_base {}
-declare const DoStorageError_base: Schema.Class<DoStorageError, Schema.TaggedStruct<"DoStorageError", {
-  readonly cause: Schema.optionalKey<Schema.Defect>;
-  readonly message: Schema.String;
-  readonly operation: Schema.String;
-}>, import("effect/Cause").YieldableError>;
-/** Durable Object SQLite infrastructure failed while opening or operating the store. */
-declare class DoStorageError extends DoStorageError_base {}
-declare const DoLedgerError_base: Schema.Class<DoLedgerError, Schema.TaggedStruct<"DoLedgerError", {
-  readonly cause: Schema.optionalKey<Schema.Defect>;
-  readonly message: Schema.String;
-  readonly operation: Schema.String;
-}>, import("effect/Cause").YieldableError>;
-/**
- * Durable Object SQLite infrastructure failed while operating the Submission Ledger. Surfaces
- * at the SubmissionLedger port as the typed `LedgerError` with this error preserved as its
- * cause, so the adapter-level tag is never erased.
- */
-declare class DoLedgerError extends DoLedgerError_base {}
-declare const DoValueBoundExceeded_base: Schema.Class<DoValueBoundExceeded, Schema.TaggedStruct<"DoValueBoundExceeded", {
-  readonly actualBytes: Schema.Int;
-  readonly maxBytes: Schema.Int;
-  readonly operation: Schema.String;
-}>, import("effect/Cause").YieldableError>;
-/**
- * A value to be stored exceeds the configured Durable Object per-value bound
- * (`DoStorageConfigValue.maxStoredValueBytes`, kept under the platform's 2 MB SQLite value
- * limit). The refusal happens typed BEFORE any durable mutation; no partial state is written.
- * Payloads of this size are the designed overflow case for a future R2-backed AttachmentStore
- * (deployment spec §3.1, deferred until a real attachment requirement exists).
- */
-declare class DoValueBoundExceeded extends DoValueBoundExceeded_base {
-  get message(): string;
-}
-declare const DoAppendConflict_base: Schema.Class<DoAppendConflict, Schema.TaggedStruct<"DoAppendConflict", {
-  readonly message: Schema.String;
-  readonly reason: Schema.Literals<readonly ["batch-digest", "record-identity", "tail"]>;
-  readonly actualTailSequence: Schema.optionalKey<Schema.brand<Schema.Natural, "@effect-agent/session/CanonicalSequence">>;
-  readonly actualTailDigest: Schema.optionalKey<Schema.String>;
-}>, import("effect/Cause").YieldableError>;
-/**
- * A canonical batch retry conflicts with existing append state. Tail conflicts carry the
- * actual committed tail as a diagnostic resume hint.
- */
-declare class DoAppendConflict extends DoAppendConflict_base {}
-declare const DoFenceRejected_base: Schema.Class<DoFenceRejected, Schema.TaggedStruct<"DoFenceRejected", {
-  readonly actualEpoch: Schema.brand<Schema.Natural, "@effect-agent/session/ProducerEpoch">;
-  readonly message: Schema.String;
-  readonly producerEpoch: Schema.brand<Schema.Natural, "@effect-agent/session/ProducerEpoch">;
-}>, import("effect/Cause").YieldableError>;
-/**
- * A producer epoch does not match the Conversation's current writer registration. Appends
- * require the exact registered epoch, so both older and newer unregistered epochs are fenced;
- * a newer epoch takes over by materializing first.
- */
-declare class DoFenceRejected extends DoFenceRejected_base {}
-declare const DoCheckpointConflict_base: Schema.Class<DoCheckpointConflict, Schema.TaggedStruct<"DoCheckpointConflict", {
-  readonly message: Schema.String;
-}>, import("effect/Cause").YieldableError>;
-/** A checkpoint conflicts with a previously stored checkpoint at the same offset. */
-declare class DoCheckpointConflict extends DoCheckpointConflict_base {}
-/**
- * Deterministic fault-injection locations at Durable Object storage operation boundaries.
- *
- * The string list is copied VERBATIM from `SqliteStorageFailpointLocation`
- * (`packages/storage-sqlite/src/errors.ts`) so every crash-matrix row keeps the same name on
- * both platforms — the DN process-kill evidence and the DC eviction evidence address identical
- * locations. There is intentionally no Cloudflare-only location.
- */
-declare const DoStorageFailpointLocation: Schema.Literals<readonly ["materialize:before", "materialize:after", "append:before", "append:after-batch-insert", "append:after-record-insert", "append:after-tail-update", "append:after", "export:after-conversation-read", "save-checkpoint:before", "save-checkpoint:after", "ledger:admit:before", "ledger:admit:after", "ledger:mark-ready:before", "ledger:mark-ready:after", "ledger:claim:before", "ledger:claim:after", "ledger:mark-input-applied:before", "ledger:mark-input-applied:after", "ledger:renew:before", "ledger:renew:after", "ledger:reserve-settlement:before", "ledger:reserve-settlement:after", "ledger:finalize-settlement:before", "ledger:finalize-settlement:after", "ledger:request-abort:before", "ledger:request-abort:after", "ledger:release:before", "ledger:release:after", "ledger:claim-joining:before", "ledger:claim-joining:after", "ledger:mark-joined:before", "ledger:mark-joined:after", "ledger:revert-joining:before", "ledger:revert-joining:after", "ledger:suspend:before", "ledger:suspend:after", "ledger:approval-decision:before", "ledger:approval-decision:after", "ledger:mark-unknown:before", "ledger:mark-unknown:after", "ledger:unknown-resolution:before", "ledger:unknown-resolution:after", "ledger:child-reservation:before", "ledger:child-reservation:after", "ledger:child-attach:before", "ledger:child-attach:after", "ledger:child-release-pending:before", "ledger:child-release-pending:after", "ledger:child-release:before", "ledger:child-release:after", "ledger:child-settled:before", "ledger:child-settled:after"]>;
-type DoStorageFailpointLocation = typeof DoStorageFailpointLocation.Type;
-declare const DoStorageFailpointError_base: Schema.Class<DoStorageFailpointError, Schema.TaggedStruct<"DoStorageFailpointError", {
-  readonly location: Schema.Literals<readonly ["materialize:before", "materialize:after", "append:before", "append:after-batch-insert", "append:after-record-insert", "append:after-tail-update", "append:after", "export:after-conversation-read", "save-checkpoint:before", "save-checkpoint:after", "ledger:admit:before", "ledger:admit:after", "ledger:mark-ready:before", "ledger:mark-ready:after", "ledger:claim:before", "ledger:claim:after", "ledger:mark-input-applied:before", "ledger:mark-input-applied:after", "ledger:renew:before", "ledger:renew:after", "ledger:reserve-settlement:before", "ledger:reserve-settlement:after", "ledger:finalize-settlement:before", "ledger:finalize-settlement:after", "ledger:request-abort:before", "ledger:request-abort:after", "ledger:release:before", "ledger:release:after", "ledger:claim-joining:before", "ledger:claim-joining:after", "ledger:mark-joined:before", "ledger:mark-joined:after", "ledger:revert-joining:before", "ledger:revert-joining:after", "ledger:suspend:before", "ledger:suspend:after", "ledger:approval-decision:before", "ledger:approval-decision:after", "ledger:mark-unknown:before", "ledger:mark-unknown:after", "ledger:unknown-resolution:before", "ledger:unknown-resolution:after", "ledger:child-reservation:before", "ledger:child-reservation:after", "ledger:child-attach:before", "ledger:child-attach:after", "ledger:child-release-pending:before", "ledger:child-release-pending:after", "ledger:child-release:before", "ledger:child-release:after", "ledger:child-settled:before", "ledger:child-settled:after"]>;
-}>, import("effect/Cause").YieldableError>;
-/** Deterministic test-only fault or pause injected at a Durable Object storage boundary. */
-declare class DoStorageFailpointError extends DoStorageFailpointError_base {
-  get message(): string;
-}
-//#endregion
 //#region src/migrations.d.ts
 /**
  * The exact-or-fresh storage version recorded in `effect_agent_meta`. Cloudflare is a fresh
@@ -102,22 +10,7 @@ declare class DoStorageFailpointError extends DoStorageFailpointError_base {
  * v1→v4 history to replay (deployment spec §9: no rolling data-version promise during
  * private development).
  */
-declare const CurrentDoStorageVersion = 1;
-/**
- * The Conversation Durable Object schema. Table names and columns mirror the Node/SQLite v4
- * schema byte-for-byte (`packages/storage-sqlite/src/migrations.ts`, migrations 1–4 collapsed
- * into their final shape) so the shared conformance suites and crash-matrix rows address
- * identical durable state. Two DC-specific additions:
- *
- * 1. `effect_agent_meta` replaces `PRAGMA user_version` as the exact-or-fresh version gate —
- *    a meta table is portable regardless of which PRAGMAs Durable Object SQL storage allows.
- * 2. `effect_agent_child_settlements` is the durable cross-store notification marker the
- *    SubmissionLedger port contract mandates for cross-store adapters (`suspend`'s covering
- *    check and `recordChildSettled`'s wake both consult it): parent and child Conversations
- *    live in different Durable Objects, so a child settlement reported before the parent's
- *    suspend commits must be observable from the PARENT's own storage.
- */
-declare const doMigrations: SqliteMigrator.Loader<never>;
+declare const CurrentDoStorageVersion = 2;
 //#endregion
 //#region src/do-storage-config.d.ts
 /**
@@ -159,44 +52,7 @@ declare const DoStorageConfig_base: Context.ServiceClass<DoStorageConfig, "@effe
 /** Explicit Durable Object storage configuration authority. */
 declare class DoStorageConfig extends DoStorageConfig_base {}
 //#endregion
-//#region src/do-storage-failpoint.d.ts
-type DoStorageFailpointHandler = (location: DoStorageFailpointLocation) => Effect.Effect<void, DoStorageFailpointError>;
-declare const DoStorageFailpointTestControl_base: Context.ServiceClass<DoStorageFailpointTestControl, "@effect-agent/storage-cloudflare/DoStorageFailpointTestControl", {
-  readonly clear: Effect.Effect<void>;
-  readonly setHandler: (handler: DoStorageFailpointHandler) => Effect.Effect<void>;
-}>;
-/** Test-only control for replacing the active Durable Object failpoint handler. */
-declare class DoStorageFailpointTestControl extends DoStorageFailpointTestControl_base {}
-declare const DoStorageFailpoint_base: Context.ServiceClass<DoStorageFailpoint, "@effect-agent/storage-cloudflare/DoStorageFailpoint", {
-  readonly hit: DoStorageFailpointHandler;
-}>;
-/** Explicit fault-injection authority used at Durable Object storage operation boundaries. */
-declare class DoStorageFailpoint extends DoStorageFailpoint_base {
-  /** Production default: no fault injection. */
-  static readonly layer: Layer.Layer<DoStorageFailpoint, never, never>;
-  /** Reusable test Layer with a control service backed by the same handler Ref. */
-  static readonly layerTest: Layer.Layer<DoStorageFailpoint | DoStorageFailpointTestControl, never, never>;
-}
-/**
- * The DC-specific eviction failpoint mode: instead of failing typed, an armed hit evicts the
- * Durable Object through an injected `evict` thunk — in production-shaped harnesses that thunk
- * is `() => ctx.abort()`, the platform's real failure mode. `ctx.abort()` never returns (it
- * throws while destroying the in-memory instance and every in-flight implicit or explicit
- * storage transaction rolls back), so an armed hit ends the current Attempt exactly like an
- * unannounced platform eviction; DO storage — the only correctness-critical state — survives
- * for the next incarnation, which the persisted alarm wakes without any incoming request.
- *
- * The handles stay injected: this package never imports `cloudflare:workers`, so the harness
- * that owns a `DurableObjectState` supplies the thunk.
- */
-declare const evictionFailpointHandler: (options: {
-  readonly isArmed: (location: DoStorageFailpointLocation) => Effect.Effect<boolean>;
-  /** Kills the incarnation — e.g. `() => ctx.abort()`. Typed `void` because the platform
-   * declares `abort` as returning, but it throws while destroying the instance. */
-  readonly evict: (location: DoStorageFailpointLocation) => void;
-}) => DoStorageFailpointHandler;
-//#endregion
-//#region src/do-conversation-store.d.ts
+//#region src/do-thread-store.d.ts
 /**
  * Convenience-layer construction options. `storage` is the Durable Object's own
  * `ctx.storage` handle, injected as a value (DEPLOY-010: platform bindings enter only
@@ -207,7 +63,7 @@ interface DoStorageOptions {
   readonly observationPollInterval?: number | undefined;
   /**
    * Submission ownership lease duration in milliseconds (D5). Defaults to
-   * `DEFAULT_OWNERSHIP_LEASE_DURATION` from `@effect-agent/session`.
+   * `DEFAULT_OWNERSHIP_LEASE_DURATION` from `@effect-agent/thread`.
    */
   readonly ownershipLeaseDuration?: number | undefined;
   /**
@@ -225,27 +81,27 @@ interface DoStorageOptions {
 }
 type DoStorageInitializationError = DoStorageCompatibilityError | DoStorageCorruptionError | DoStorageError;
 /**
- * Durable Object Conversation Store implementation with configuration, failpoint, SQL, and
+ * Durable Object Thread Store implementation with configuration, failpoint, SQL, and
  * Crypto authority kept visible in its input channel.
  */
-declare const conversationStoreLayer: Layer.Layer<ConversationStore, DoStorageInitializationError, DoStorageConfig | DoStorageFailpoint | SqlClientService.SqlClient | Crypto.Crypto>;
+declare const threadStoreLayer: Layer.Layer<ThreadStore, DoStorageInitializationError, DoStorageConfig | DoStorageFailpoint | SqlClientService.SqlClient | Crypto.Crypto>;
 /**
  * Validated Durable Object storage configuration Layer with the documented defaults applied.
- * Shared by the ConversationStore and SubmissionLedger convenience layers so their defaults
+ * Shared by the ThreadStore and SubmissionLedger convenience layers so their defaults
  * cannot drift.
  */
 declare const storageConfigLayer: (options: DoStorageOptions) => Layer.Layer<DoStorageConfig, DoStorageError>;
 /** The failpoint Layer selected by convenience options: explicit handler or the no-op default. */
 declare const storageFailpointLayer: (options: DoStorageOptions) => Layer.Layer<DoStorageFailpoint>;
 /**
- * A composition-root convenience Layer for canonical Conversations inside one Durable Object,
+ * A composition-root convenience Layer for canonical Threads inside one Durable Object,
  * built over `ctx.storage`. Durable accepted work is served by the separate SubmissionLedger
  * port; point both at the SAME `ctx.storage` so claims fence the same producer epochs
  * (ADR-0011 D7's "same file" rule, transposed to one object's private database).
  */
-declare const layer: (options: DoStorageOptions) => Layer.Layer<ConversationStore, DoStorageInitializationError>;
+declare const layer: (options: DoStorageOptions) => Layer.Layer<ThreadStore, DoStorageInitializationError>;
 /** Create an adapter-owned resumable observation offset for a known canonical sequence. */
-declare const observationOffsetAt: (conversationId: string & import("effect/Brand").Brand<"@effect-agent/core/ConversationId">, sequence: number) => Effect.Effect<string & import("effect/Brand").Brand<"@effect-agent/session/ObservationOffset">, ConversationStoreError, never>;
+declare const observationOffsetAt: (threadId: string & import("effect/Brand").Brand<"@effect-agent/core/ThreadId">, sequence: number) => Effect.Effect<string & import("effect/Brand").Brand<"@effect-agent/thread/ObservationOffset">, ThreadStoreError, never>;
 //#endregion
 //#region src/do-ledger.d.ts
 /**
@@ -256,7 +112,7 @@ declare const observationOffsetAt: (conversationId: string & import("effect/Bran
 declare const submissionLedgerLayer: Layer.Layer<SubmissionLedger, DoStorageInitializationError, DoStorageConfig | DoStorageFailpoint | SqlClientService.SqlClient | Crypto.Crypto>;
 /**
  * A composition-root convenience Layer for the durable Submission Ledger. Point it at the
- * same `ctx.storage` as the ConversationStore so claims fence the same producer epochs.
+ * same `ctx.storage` as the ThreadStore so claims fence the same producer epochs.
  */
 declare const ledgerLayer: (options: DoStorageOptions) => Layer.Layer<SubmissionLedger, DoStorageInitializationError>;
 //#endregion
@@ -289,18 +145,36 @@ declare class DoScheduleAlarmControl extends DoScheduleAlarmControl_base {}
  */
 declare const scheduleStoreLayer: Layer.Layer<ScheduleStore | DoScheduleAlarmControl, ScheduleStorageError, SqlClientService.SqlClient | DoScheduleTransaction>;
 //#endregion
+//#region src/do-subscription-store.d.ts
+interface DoSubscriptionAlarmReplacement {
+  readonly deadlineAtMillis: number | null;
+  readonly generation: number;
+}
+type DoSubscriptionReplaceAlarm = (replacement: DoSubscriptionAlarmReplacement) => Effect.Effect<void, SubscriptionError>;
+declare const DoSubscriptionTransaction_base: Context.ServiceClass<DoSubscriptionTransaction, "@effect-agent/storage-cloudflare/DoSubscriptionTransaction", {
+  readonly run: <A, E, R>(body: (replaceAlarm: DoSubscriptionReplaceAlarm) => Effect.Effect<A, E, R>) => Effect.Effect<A, E | SubscriptionError, R>;
+}>;
+/** One Durable Object transaction combining subscription SQL and its single native alarm. */
+declare class DoSubscriptionTransaction extends DoSubscriptionTransaction_base {}
+declare const DoSubscriptionAlarmControl_base: Context.ServiceClass<DoSubscriptionAlarmControl, "@effect-agent/storage-cloudflare/DoSubscriptionAlarmControl", {
+  readonly prearm: (deadlineAtMillis: number) => Effect.Effect<void, SubscriptionError | SubscriptionFailpointError>;
+  readonly reconcile: Effect.Effect<void, SubscriptionError | SubscriptionFailpointError>;
+}>;
+declare class DoSubscriptionAlarmControl extends DoSubscriptionAlarmControl_base {}
+declare const doSubscriptionStoreLayer: (partition: SourcePartition) => Layer.Layer<SubscriptionStore | DoSubscriptionAlarmControl, SubscriptionError, DoSubscriptionTransaction | SqlClientService.SqlClient>;
+//#endregion
 //#region src/port-protocol.d.ts
 /**
  * The cross-Durable-Object port protocol (plan §1.3, D-P6-3): Schema request/response/error
- * envelopes for the CLOSED route-capable subset of the session ports. One Conversation's
- * Durable Object executes another Conversation's request against its OWN local facets; the
+ * envelopes for the CLOSED route-capable subset of the thread ports. One Thread's
+ * Durable Object executes another Thread's request against its OWN local facets; the
  * envelopes here are the only values that cross the Object boundary, and they are
  * transport-agnostic — native Durable Object JS RPC is the shipped carrier, fetch-with-JSON
  * the documented fallback, and both move the same Schema-encoded JSON.
  *
  * The closed subset is exactly the set of operations the durable coordinator performs against
- * a FOREIGN Conversation (parent/child establishment, status checks, abort propagation,
- * child-settlement notification, and the child-conversation store operations used by
+ * a FOREIGN Thread (parent/child establishment, status checks, abort propagation,
+ * child-settlement notification, and the child-thread store operations used by
  * establishment, `verifySettledChild`, and result projection):
  *
  * - ledger: `admit`, `markReady`, `lookup`, `resolveAdmission`, `requestAbort`,
@@ -313,7 +187,7 @@ declare const scheduleStoreLayer: Layer.Layer<ScheduleStore | DoScheduleAlarmCon
  *
  * Failures cross the boundary as the `PortFailure` union and re-decode on the caller side to
  * the SAME tagged error types the local facet would have produced, so routed calls keep
- * error-tag fidelity. `cause` chains inside `LedgerError`/`ConversationStoreError` travel as
+ * error-tag fidelity. `cause` chains inside `LedgerError`/`ThreadStoreError` travel as
  * Schema defects and do not claim instance fidelity across Objects (plan §2.8).
  */
 /** Ceiling for protocol diagnostic strings; matches `AdmissionIndeterminate.reason`. */
@@ -326,7 +200,7 @@ declare const PortProtocolError_base: Schema.Class<PortProtocolError, Schema.Tag
 /**
  * The envelope itself could not be honored: the receiving Object could not decode the
  * request, or a response could not be encoded/decoded. It never carries port semantics —
- * callers fold it into the operation's base error (`LedgerError`/`ConversationStoreError`),
+ * callers fold it into the operation's base error (`LedgerError`/`ThreadStoreError`),
  * except `resolveAdmission`, which folds it into `AdmissionIndeterminate` because a
  * non-answer is never proof of absence (SUB-031).
  */
@@ -342,7 +216,7 @@ declare const LedgerMarkReadyCall_base: Schema.Class<LedgerMarkReadyCall, Schema
 /** Routed `SubmissionLedger.markReady` for a Submission owned by another Object. */
 declare class LedgerMarkReadyCall extends LedgerMarkReadyCall_base {}
 declare const LedgerLookupCall_base: Schema.Class<LedgerLookupCall, Schema.TaggedStruct<"LedgerLookup", {
-  readonly request: Schema.Union<readonly [typeof import("@effect-agent/session").SubmissionLookupById, typeof SubmissionLookupByKey]>;
+  readonly request: Schema.Union<readonly [typeof import("@effect-agent/thread").SubmissionLookupById, typeof SubmissionLookupByKey]>;
 }>, {}>;
 /** Routed `SubmissionLedger.lookup` (by identity or scoped idempotency key). */
 declare class LedgerLookupCall extends LedgerLookupCall_base {}
@@ -362,29 +236,29 @@ declare const LedgerRecordChildSettledCall_base: Schema.Class<LedgerRecordChildS
 /** Routed `SubmissionLedger.recordChildSettled` — the child→parent durable notification. */
 declare class LedgerRecordChildSettledCall extends LedgerRecordChildSettledCall_base {}
 declare const StoreMaterializeCall_base: Schema.Class<StoreMaterializeCall, Schema.TaggedStruct<"StoreMaterialize", {
-  readonly request: typeof ConversationMaterialization;
+  readonly request: typeof ThreadMaterialization;
 }>, {}>;
-/** Routed `ConversationStore.materialize` against the owning Object. */
+/** Routed `ThreadStore.materialize` against the owning Object. */
 declare class StoreMaterializeCall extends StoreMaterializeCall_base {}
 declare const StoreAppendCall_base: Schema.Class<StoreAppendCall, Schema.TaggedStruct<"StoreAppend", {
   readonly request: typeof FencedAppendRequest;
 }>, {}>;
-/** Routed `ConversationStore.append` against the owning Object. */
+/** Routed `ThreadStore.append` against the owning Object. */
 declare class StoreAppendCall extends StoreAppendCall_base {}
 declare const StoreReadPageCall_base: Schema.Class<StoreReadPageCall, Schema.TaggedStruct<"StoreReadPage", {
-  readonly request: typeof ConversationRead;
+  readonly request: typeof ThreadRead;
 }>, {}>;
-/** Routed one-page `ConversationStore.read`; the page bound is the request's own `limit`. */
+/** Routed one-page `ThreadStore.read`; the page bound is the request's own `limit`. */
 declare class StoreReadPageCall extends StoreReadPageCall_base {}
 declare const StoreInspectTailCall_base: Schema.Class<StoreInspectTailCall, Schema.TaggedStruct<"StoreInspectTail", {
-  readonly request: typeof ConversationTailRequest;
+  readonly request: typeof ThreadTailRequest;
 }>, {}>;
-/** Routed `ConversationStore.inspectTail` against the owning Object. */
+/** Routed `ThreadStore.inspectTail` against the owning Object. */
 declare class StoreInspectTailCall extends StoreInspectTailCall_base {}
 declare const StoreExportCall_base: Schema.Class<StoreExportCall, Schema.TaggedStruct<"StoreExport", {
-  readonly request: typeof ConversationExportRequest;
+  readonly request: typeof ThreadExportRequest;
 }>, {}>;
-/** Routed `ConversationStore.export` against the owning Object. */
+/** Routed `ThreadStore.export` against the owning Object. */
 declare class StoreExportCall extends StoreExportCall_base {}
 /** Every request that may cross a Durable Object boundary — the CLOSED route-capable subset. */
 declare const PortRequest: Schema.Union<readonly [typeof LedgerAdmitCall, typeof LedgerMarkReadyCall, typeof LedgerLookupCall, typeof LedgerResolveAdmissionCall, typeof LedgerRequestAbortCall, typeof LedgerRecordChildSettledCall, typeof StoreMaterializeCall, typeof StoreAppendCall, typeof StoreReadPageCall, typeof StoreInspectTailCall, typeof StoreExportCall]>;
@@ -403,7 +277,7 @@ declare const LedgerLookupResult_base: Schema.Class<LedgerLookupResult, Schema.T
 /** `submission` is absent exactly when the lookup answered `Option.none`. */
 declare class LedgerLookupResult extends LedgerLookupResult_base {}
 declare const LedgerResolveAdmissionResult_base: Schema.Class<LedgerResolveAdmissionResult, Schema.TaggedStruct<"LedgerResolveAdmissionResult", {
-  readonly resolution: Schema.Union<readonly [typeof import("@effect-agent/session").AdmissionNotAdmitted, typeof import("@effect-agent/session").AdmissionAdmitted, typeof import("@effect-agent/session").AdmissionIndeterminate]>;
+  readonly resolution: Schema.Union<readonly [typeof import("@effect-agent/thread").AdmissionNotAdmitted, typeof import("@effect-agent/thread").AdmissionAdmitted, typeof import("@effect-agent/thread").AdmissionIndeterminate]>;
 }>, {}>;
 declare class LedgerResolveAdmissionResult extends LedgerResolveAdmissionResult_base {}
 declare const LedgerRequestAbortResult_base: Schema.Class<LedgerRequestAbortResult, Schema.TaggedStruct<"LedgerRequestAbortResult", {
@@ -426,11 +300,11 @@ declare const StoreReadPageResult_base: Schema.Class<StoreReadPageResult, Schema
 /** One page of canonical records, bounded by the request's `limit` (≤ 1,024). */
 declare class StoreReadPageResult extends StoreReadPageResult_base {}
 declare const StoreInspectTailResult_base: Schema.Class<StoreInspectTailResult, Schema.TaggedStruct<"StoreInspectTailResult", {
-  readonly tail: typeof ConversationTail;
+  readonly tail: typeof ThreadTail;
 }>, {}>;
 declare class StoreInspectTailResult extends StoreInspectTailResult_base {}
 declare const StoreExportResult_base: Schema.Class<StoreExportResult, Schema.TaggedStruct<"StoreExportResult", {
-  readonly export: typeof ConversationExport;
+  readonly export: typeof ThreadExport;
 }>, {}>;
 declare class StoreExportResult extends StoreExportResult_base {}
 /** Every successful routed result. Callers narrow by the tag their request implies. */
@@ -439,9 +313,9 @@ type PortResult = typeof PortResult.Type;
 /**
  * Every typed failure a route-capable operation can produce on its owning Object, plus the
  * protocol's own `PortProtocolError`. Members re-decode to the SAME tagged classes the
- * session ports declare, so a routed caller observes identical error tags and fields.
+ * thread ports declare, so a routed caller observes identical error tags and fields.
  */
-declare const PortFailure: Schema.Union<readonly [typeof AdmissionConflict, typeof SettlementConflict, typeof JoinedToHost, typeof LedgerError, typeof ConversationStoreError, typeof ConversationNotMaterialized, typeof AppendConflict, typeof FenceRejected, typeof PortProtocolError]>;
+declare const PortFailure: Schema.Union<readonly [typeof AdmissionConflict, typeof SettlementConflict, typeof JoinedToHost, typeof LedgerError, typeof ThreadStoreError, typeof ThreadNotMaterialized, typeof AppendConflict, typeof FenceRejected, typeof PortProtocolError]>;
 type PortFailure = typeof PortFailure.Type;
 declare const PortSucceeded_base: Schema.Class<PortSucceeded, Schema.TaggedStruct<"PortSucceeded", {
   readonly result: Schema.Union<readonly [typeof LedgerAdmitResult, typeof LedgerMarkReadyResult, typeof LedgerLookupResult, typeof LedgerResolveAdmissionResult, typeof LedgerRequestAbortResult, typeof LedgerRecordChildSettledResult, typeof StoreMaterializeResult, typeof StoreAppendResult, typeof StoreReadPageResult, typeof StoreInspectTailResult, typeof StoreExportResult]>;
@@ -449,7 +323,7 @@ declare const PortSucceeded_base: Schema.Class<PortSucceeded, Schema.TaggedStruc
 /** The routed operation succeeded on its owning Object. */
 declare class PortSucceeded extends PortSucceeded_base {}
 declare const PortFailed_base: Schema.Class<PortFailed, Schema.TaggedStruct<"PortFailed", {
-  readonly failure: Schema.Union<readonly [typeof AdmissionConflict, typeof SettlementConflict, typeof JoinedToHost, typeof LedgerError, typeof ConversationStoreError, typeof ConversationNotMaterialized, typeof AppendConflict, typeof FenceRejected, typeof PortProtocolError]>;
+  readonly failure: Schema.Union<readonly [typeof AdmissionConflict, typeof SettlementConflict, typeof JoinedToHost, typeof LedgerError, typeof ThreadStoreError, typeof ThreadNotMaterialized, typeof AppendConflict, typeof FenceRejected, typeof PortProtocolError]>;
 }>, {}>;
 /** The routed operation failed TYPED on its owning Object; the failure re-decodes verbatim. */
 declare class PortFailed extends PortFailed_base {}
@@ -461,7 +335,7 @@ type PortResponseEnvelope = typeof PortResponse.Encoded;
 declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | LedgerMarkReadyCall | LedgerRecordChildSettledCall | LedgerRequestAbortCall | LedgerResolveAdmissionCall | StoreAppendCall | StoreExportCall | StoreInspectTailCall | StoreMaterializeCall | StoreReadPageCall, options?: import("effect/SchemaAST").ParseOptions) => import("effect/Effect").Effect<{
   readonly _tag: "LedgerAdmit";
   readonly request: {
-    readonly conversationId: string;
+    readonly threadId: string;
     readonly principal: string;
     readonly idempotencyKey: string;
     readonly agentId: string;
@@ -490,7 +364,7 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
     readonly submissionId: string;
   } | {
     readonly _tag: "SubmissionLookupByKey";
-    readonly conversationId: string;
+    readonly threadId: string;
     readonly principal: string;
     readonly idempotencyKey: string;
   };
@@ -498,7 +372,7 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
   readonly _tag: "LedgerResolveAdmission";
   readonly request: {
     readonly _tag: "SubmissionLookupByKey";
-    readonly conversationId: string;
+    readonly threadId: string;
     readonly principal: string;
     readonly idempotencyKey: string;
   };
@@ -518,19 +392,19 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
 } | {
   readonly _tag: "StoreMaterialize";
   readonly request: {
-    readonly conversationId: string;
+    readonly threadId: string;
     readonly producerEpoch: number;
   };
 } | {
   readonly _tag: "StoreAppend";
   readonly request: {
-    readonly conversationId: string;
+    readonly threadId: string;
     readonly batch: {
       readonly batchId: string;
       readonly producerId: string;
       readonly records: readonly [{
         readonly recordId: string;
-        readonly family: "conversation";
+        readonly family: "thread";
         readonly schemaVersion: 1;
         readonly createdAt: string;
         readonly deploymentId: string;
@@ -540,7 +414,7 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
           readonly author: string;
           readonly reason: string;
         } | {
-          readonly _tag: "ConversationCreated";
+          readonly _tag: "ThreadCreated";
           readonly agentId: string;
           readonly definitions: {
             readonly agent: string;
@@ -549,18 +423,25 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
           };
         } | {
           readonly _tag: "UserInputRecorded";
-          readonly submissionId: string;
+          readonly submissionId?: string | undefined;
           readonly kind: "follow-up" | "steering" | "user";
           readonly runId?: string | undefined;
           readonly input: Schema.Json;
         } | {
           readonly _tag: "RunStarted";
           readonly runId: string;
+          readonly policyAccountingVersion: 1;
           readonly maxDurationMillis: number;
+        } | {
+          readonly _tag: "RunPolicyUsageReserved";
+          readonly runId: string;
+          readonly programmaticToolCalls: number;
+          readonly finalizationUsed: boolean;
         } | {
           readonly _tag: "ModelCompleted";
           readonly runId: string;
           readonly output: Schema.Json;
+          readonly messages?: Schema.Json | undefined;
         } | {
           readonly _tag: "ModelResponseRecorded";
           readonly runId: string;
@@ -599,6 +480,7 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
           readonly toolName: string;
           readonly parameters: Schema.Json;
           readonly parametersDigest: string;
+          readonly executionKind?: "delegation" | "ordinary" | undefined;
         } | {
           readonly _tag: "ToolCallSettled";
           readonly runId: string;
@@ -606,6 +488,7 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
           readonly toolName: string;
           readonly result: Schema.Json;
           readonly isFailure: boolean;
+          readonly budgetRejected?: true | undefined;
         } | {
           readonly _tag: "ToolCallUnknown";
           readonly runId: string;
@@ -731,14 +614,15 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
           readonly grantDigest: string;
           readonly reservationId: string;
           readonly reservationDigest: string;
-          readonly childConversationId: string;
+          readonly childThreadId: string;
           readonly childPrincipal: string;
           readonly childIdempotencyKey: string;
+          readonly toolCallAllowance?: number | undefined;
         } | {
           readonly _tag: "SubagentStarted";
           readonly runId: string;
           readonly toolCallId: string;
-          readonly childConversationId: string;
+          readonly childThreadId: string;
           readonly childSubmissionId: string;
           readonly childReceiptId: string;
           readonly childRunId: string;
@@ -759,7 +643,7 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
           readonly parentLink: {
             readonly delegationId: string;
             readonly parentAgentId: string;
-            readonly parentConversationId: string;
+            readonly parentThreadId: string;
             readonly parentRunId: string;
             readonly parentToolCallId: string;
             readonly depth: number;
@@ -772,6 +656,7 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
           };
           readonly childInputDigest: string;
           readonly grantDigest: string;
+          readonly toolCallAllowance?: number | undefined;
         } | {
           readonly _tag: "RepairAnnotated";
           readonly reason: string;
@@ -779,7 +664,7 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
         };
       }, ...{
         readonly recordId: string;
-        readonly family: "conversation";
+        readonly family: "thread";
         readonly schemaVersion: 1;
         readonly createdAt: string;
         readonly deploymentId: string;
@@ -789,7 +674,7 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
           readonly author: string;
           readonly reason: string;
         } | {
-          readonly _tag: "ConversationCreated";
+          readonly _tag: "ThreadCreated";
           readonly agentId: string;
           readonly definitions: {
             readonly agent: string;
@@ -798,18 +683,25 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
           };
         } | {
           readonly _tag: "UserInputRecorded";
-          readonly submissionId: string;
+          readonly submissionId?: string | undefined;
           readonly kind: "follow-up" | "steering" | "user";
           readonly runId?: string | undefined;
           readonly input: Schema.Json;
         } | {
           readonly _tag: "RunStarted";
           readonly runId: string;
+          readonly policyAccountingVersion: 1;
           readonly maxDurationMillis: number;
+        } | {
+          readonly _tag: "RunPolicyUsageReserved";
+          readonly runId: string;
+          readonly programmaticToolCalls: number;
+          readonly finalizationUsed: boolean;
         } | {
           readonly _tag: "ModelCompleted";
           readonly runId: string;
           readonly output: Schema.Json;
+          readonly messages?: Schema.Json | undefined;
         } | {
           readonly _tag: "ModelResponseRecorded";
           readonly runId: string;
@@ -848,6 +740,7 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
           readonly toolName: string;
           readonly parameters: Schema.Json;
           readonly parametersDigest: string;
+          readonly executionKind?: "delegation" | "ordinary" | undefined;
         } | {
           readonly _tag: "ToolCallSettled";
           readonly runId: string;
@@ -855,6 +748,7 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
           readonly toolName: string;
           readonly result: Schema.Json;
           readonly isFailure: boolean;
+          readonly budgetRejected?: true | undefined;
         } | {
           readonly _tag: "ToolCallUnknown";
           readonly runId: string;
@@ -980,14 +874,15 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
           readonly grantDigest: string;
           readonly reservationId: string;
           readonly reservationDigest: string;
-          readonly childConversationId: string;
+          readonly childThreadId: string;
           readonly childPrincipal: string;
           readonly childIdempotencyKey: string;
+          readonly toolCallAllowance?: number | undefined;
         } | {
           readonly _tag: "SubagentStarted";
           readonly runId: string;
           readonly toolCallId: string;
-          readonly childConversationId: string;
+          readonly childThreadId: string;
           readonly childSubmissionId: string;
           readonly childReceiptId: string;
           readonly childRunId: string;
@@ -1008,7 +903,7 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
           readonly parentLink: {
             readonly delegationId: string;
             readonly parentAgentId: string;
-            readonly parentConversationId: string;
+            readonly parentThreadId: string;
             readonly parentRunId: string;
             readonly parentToolCallId: string;
             readonly depth: number;
@@ -1021,6 +916,7 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
           };
           readonly childInputDigest: string;
           readonly grantDigest: string;
+          readonly toolCallAllowance?: number | undefined;
         } | {
           readonly _tag: "RepairAnnotated";
           readonly reason: string;
@@ -1035,19 +931,19 @@ declare const encodePortRequest: (input: LedgerAdmitCall | LedgerLookupCall | Le
 } | {
   readonly _tag: "StoreReadPage";
   readonly request: {
-    readonly conversationId: string;
+    readonly threadId: string;
     readonly afterSequence?: number | undefined;
     readonly limit: number;
   };
 } | {
   readonly _tag: "StoreInspectTail";
   readonly request: {
-    readonly conversationId: string;
+    readonly threadId: string;
   };
 } | {
   readonly _tag: "StoreExport";
   readonly request: {
-    readonly conversationId: string;
+    readonly threadId: string;
   };
 }, Schema.SchemaError, never>;
 declare const decodePortRequest: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => import("effect/Effect").Effect<LedgerAdmitCall | LedgerLookupCall | LedgerMarkReadyCall | LedgerRecordChildSettledCall | LedgerRequestAbortCall | LedgerResolveAdmissionCall | StoreAppendCall | StoreExportCall | StoreInspectTailCall | StoreMaterializeCall | StoreReadPageCall, Schema.SchemaError, never>;
@@ -1068,7 +964,7 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
     readonly _tag: "LedgerLookupResult";
     readonly submission?: {
       readonly submissionId: string;
-      readonly conversationId: string;
+      readonly threadId: string;
       readonly queueSequence: number;
       readonly principal: string;
       readonly idempotencyKey: string;
@@ -1099,7 +995,7 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
       readonly _tag: "Admitted";
       readonly submission: {
         readonly submissionId: string;
-        readonly conversationId: string;
+        readonly threadId: string;
         readonly queueSequence: number;
         readonly principal: string;
         readonly idempotencyKey: string;
@@ -1151,13 +1047,13 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
   } | {
     readonly _tag: "StoreReadPageResult";
     readonly records: readonly {
-      readonly conversationId: string;
+      readonly threadId: string;
       readonly batchId: string;
       readonly sequence: number;
       readonly offset: string;
       readonly record: {
         readonly recordId: string;
-        readonly family: "conversation";
+        readonly family: "thread";
         readonly schemaVersion: 1;
         readonly createdAt: string;
         readonly deploymentId: string;
@@ -1167,7 +1063,7 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
           readonly author: string;
           readonly reason: string;
         } | {
-          readonly _tag: "ConversationCreated";
+          readonly _tag: "ThreadCreated";
           readonly agentId: string;
           readonly definitions: {
             readonly agent: string;
@@ -1176,18 +1072,25 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
           };
         } | {
           readonly _tag: "UserInputRecorded";
-          readonly submissionId: string;
+          readonly submissionId?: string | undefined;
           readonly kind: "follow-up" | "steering" | "user";
           readonly runId?: string | undefined;
           readonly input: Schema.Json;
         } | {
           readonly _tag: "RunStarted";
           readonly runId: string;
+          readonly policyAccountingVersion: 1;
           readonly maxDurationMillis: number;
+        } | {
+          readonly _tag: "RunPolicyUsageReserved";
+          readonly runId: string;
+          readonly programmaticToolCalls: number;
+          readonly finalizationUsed: boolean;
         } | {
           readonly _tag: "ModelCompleted";
           readonly runId: string;
           readonly output: Schema.Json;
+          readonly messages?: Schema.Json | undefined;
         } | {
           readonly _tag: "ModelResponseRecorded";
           readonly runId: string;
@@ -1226,6 +1129,7 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
           readonly toolName: string;
           readonly parameters: Schema.Json;
           readonly parametersDigest: string;
+          readonly executionKind?: "delegation" | "ordinary" | undefined;
         } | {
           readonly _tag: "ToolCallSettled";
           readonly runId: string;
@@ -1233,6 +1137,7 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
           readonly toolName: string;
           readonly result: Schema.Json;
           readonly isFailure: boolean;
+          readonly budgetRejected?: true | undefined;
         } | {
           readonly _tag: "ToolCallUnknown";
           readonly runId: string;
@@ -1358,14 +1263,15 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
           readonly grantDigest: string;
           readonly reservationId: string;
           readonly reservationDigest: string;
-          readonly childConversationId: string;
+          readonly childThreadId: string;
           readonly childPrincipal: string;
           readonly childIdempotencyKey: string;
+          readonly toolCallAllowance?: number | undefined;
         } | {
           readonly _tag: "SubagentStarted";
           readonly runId: string;
           readonly toolCallId: string;
-          readonly childConversationId: string;
+          readonly childThreadId: string;
           readonly childSubmissionId: string;
           readonly childReceiptId: string;
           readonly childRunId: string;
@@ -1386,7 +1292,7 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
           readonly parentLink: {
             readonly delegationId: string;
             readonly parentAgentId: string;
-            readonly parentConversationId: string;
+            readonly parentThreadId: string;
             readonly parentRunId: string;
             readonly parentToolCallId: string;
             readonly depth: number;
@@ -1399,6 +1305,7 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
           };
           readonly childInputDigest: string;
           readonly grantDigest: string;
+          readonly toolCallAllowance?: number | undefined;
         } | {
           readonly _tag: "RepairAnnotated";
           readonly reason: string;
@@ -1409,7 +1316,7 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
   } | {
     readonly _tag: "StoreInspectTailResult";
     readonly tail: {
-      readonly conversationId: string;
+      readonly threadId: string;
       readonly tailSequence: number;
       readonly tailDigest: string;
       readonly producerEpoch: number;
@@ -1417,18 +1324,18 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
   } | {
     readonly _tag: "StoreExportResult";
     readonly export: {
-      readonly format: "effect-agent/conversation@1";
-      readonly conversationId: string;
+      readonly format: "effect-agent/thread@1";
+      readonly threadId: string;
       readonly tailSequence: number;
       readonly tailDigest: string;
       readonly records: readonly {
-        readonly conversationId: string;
+        readonly threadId: string;
         readonly batchId: string;
         readonly sequence: number;
         readonly offset: string;
         readonly record: {
           readonly recordId: string;
-          readonly family: "conversation";
+          readonly family: "thread";
           readonly schemaVersion: 1;
           readonly createdAt: string;
           readonly deploymentId: string;
@@ -1438,7 +1345,7 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
             readonly author: string;
             readonly reason: string;
           } | {
-            readonly _tag: "ConversationCreated";
+            readonly _tag: "ThreadCreated";
             readonly agentId: string;
             readonly definitions: {
               readonly agent: string;
@@ -1447,18 +1354,25 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
             };
           } | {
             readonly _tag: "UserInputRecorded";
-            readonly submissionId: string;
+            readonly submissionId?: string | undefined;
             readonly kind: "follow-up" | "steering" | "user";
             readonly runId?: string | undefined;
             readonly input: Schema.Json;
           } | {
             readonly _tag: "RunStarted";
             readonly runId: string;
+            readonly policyAccountingVersion: 1;
             readonly maxDurationMillis: number;
+          } | {
+            readonly _tag: "RunPolicyUsageReserved";
+            readonly runId: string;
+            readonly programmaticToolCalls: number;
+            readonly finalizationUsed: boolean;
           } | {
             readonly _tag: "ModelCompleted";
             readonly runId: string;
             readonly output: Schema.Json;
+            readonly messages?: Schema.Json | undefined;
           } | {
             readonly _tag: "ModelResponseRecorded";
             readonly runId: string;
@@ -1497,6 +1411,7 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
             readonly toolName: string;
             readonly parameters: Schema.Json;
             readonly parametersDigest: string;
+            readonly executionKind?: "delegation" | "ordinary" | undefined;
           } | {
             readonly _tag: "ToolCallSettled";
             readonly runId: string;
@@ -1504,6 +1419,7 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
             readonly toolName: string;
             readonly result: Schema.Json;
             readonly isFailure: boolean;
+            readonly budgetRejected?: true | undefined;
           } | {
             readonly _tag: "ToolCallUnknown";
             readonly runId: string;
@@ -1629,14 +1545,15 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
             readonly grantDigest: string;
             readonly reservationId: string;
             readonly reservationDigest: string;
-            readonly childConversationId: string;
+            readonly childThreadId: string;
             readonly childPrincipal: string;
             readonly childIdempotencyKey: string;
+            readonly toolCallAllowance?: number | undefined;
           } | {
             readonly _tag: "SubagentStarted";
             readonly runId: string;
             readonly toolCallId: string;
-            readonly childConversationId: string;
+            readonly childThreadId: string;
             readonly childSubmissionId: string;
             readonly childReceiptId: string;
             readonly childRunId: string;
@@ -1657,7 +1574,7 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
             readonly parentLink: {
               readonly delegationId: string;
               readonly parentAgentId: string;
-              readonly parentConversationId: string;
+              readonly parentThreadId: string;
               readonly parentRunId: string;
               readonly parentToolCallId: string;
               readonly depth: number;
@@ -1670,6 +1587,7 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
             };
             readonly childInputDigest: string;
             readonly grantDigest: string;
+            readonly toolCallAllowance?: number | undefined;
           } | {
             readonly _tag: "RepairAnnotated";
             readonly reason: string;
@@ -1686,7 +1604,7 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
     readonly message: string;
   } | {
     readonly _tag: "AdmissionConflict";
-    readonly conversationId: string;
+    readonly threadId: string;
     readonly principal: string;
     readonly idempotencyKey: string;
     readonly existingInputDigest: string;
@@ -1705,23 +1623,23 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
     readonly message: string;
     readonly cause?: Schema.Json | undefined;
   } | {
-    readonly _tag: "ConversationStoreError";
+    readonly _tag: "ThreadStoreError";
     readonly operation: string;
     readonly message: string;
     readonly cause?: Schema.Json | undefined;
   } | {
-    readonly _tag: "ConversationNotMaterialized";
-    readonly conversationId: string;
+    readonly _tag: "ThreadNotMaterialized";
+    readonly threadId: string;
   } | {
     readonly _tag: "AppendConflict";
-    readonly conversationId: string;
+    readonly threadId: string;
     readonly batchId: string;
     readonly reason: "batch-digest" | "record-identity" | "tail";
     readonly actualTailSequence?: number | undefined;
     readonly actualTailDigest?: string | undefined;
   } | {
     readonly _tag: "FenceRejected";
-    readonly conversationId: string;
+    readonly threadId: string;
     readonly actualEpoch: number;
     readonly attemptedEpoch: number;
   };
@@ -1729,7 +1647,7 @@ declare const encodePortResponse: (input: PortFailed | PortSucceeded, options?:
 declare const decodePortResponse: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => import("effect/Effect").Effect<PortFailed | PortSucceeded, Schema.SchemaError, never>;
 //#endregion
 //#region src/routing.d.ts
-type ConversationId = ConversationMaterialization["conversationId"];
+type ThreadId = ThreadMaterialization["threadId"];
 declare const PortTransportError_base: Schema.Class<PortTransportError, Schema.TaggedStruct<"PortTransportError", {
   readonly target: Schema.String;
   readonly message: Schema.String;
@@ -1738,7 +1656,7 @@ declare const PortTransportError_base: Schema.Class<PortTransportError, Schema.T
 }>, import("effect/Cause").YieldableError>;
 /**
  * A transport could not deliver a port request to (or an answer from) the owning
- * Conversation's Durable Object. `retryable` carries the platform's own stub signal when one
+ * Thread's Durable Object. `retryable` carries the platform's own stub signal when one
  * exists. This error never crosses the wire — it is the CALLER-side evidence that the
  * authority was unreachable, which is exactly the case `AdmissionIndeterminate` was
  * specified for (SUB-031).
@@ -1749,50 +1667,50 @@ declare class PortTransportError extends PortTransportError_base {}
  * platform stub's own `retryable` signal when present.
  */
 declare const portTransportFailure: (target: string, cause: unknown) => PortTransportError;
-declare const ConversationPortTransport_base: Context.ServiceClass<ConversationPortTransport, "@effect-agent/storage-cloudflare/ConversationPortTransport", {
-  readonly call: (conversationId: ConversationId, request: PortRequestEnvelope) => Effect.Effect<unknown, PortTransportError>;
+declare const ThreadPortTransport_base: Context.ServiceClass<ThreadPortTransport, "@effect-agent/storage-cloudflare/ThreadPortTransport", {
+  readonly call: (threadId: ThreadId, request: PortRequestEnvelope) => Effect.Effect<unknown, PortTransportError>;
 }>;
 /**
  * Delivery of Schema-encoded port envelopes to the Durable Object that owns a FOREIGN
- * Conversation (plan §1.3, D-P6-3). The shipped implementation (platform-cloudflare, WP3)
+ * Thread (plan §1.3, D-P6-3). The shipped implementation (platform-cloudflare, WP3)
  * calls the owner's `portCall` over native Durable Object JS RPC via
- * `namespace.idFromName(conversationId)`; the protocol is transport-agnostic and any carrier
+ * `namespace.idFromName(threadId)`; the protocol is transport-agnostic and any carrier
  * that moves the encoded envelopes verbatim satisfies this service. Implementations MUST
  * surface every delivery problem as `PortTransportError` and must never fabricate an answer.
  */
-declare class ConversationPortTransport extends ConversationPortTransport_base {}
+declare class ThreadPortTransport extends ThreadPortTransport_base {}
 /** Construction options shared by both routed port Layers. */
 interface RoutedPortOptions {
   /**
-   * The Conversation this Durable Object owns (the Object identity rule is
-   * `namespace.idFromName(conversationId)`). Requests addressed here execute on the local
+   * The Thread this Durable Object owns (the Object identity rule is
+   * `namespace.idFromName(threadId)`). Requests addressed here execute on the local
    * facet; requests addressed anywhere else route through the transport or fail fast typed.
    */
-  readonly localConversationId: ConversationId;
+  readonly localThreadId: ThreadId;
 }
 /**
  * Routing decorator over the LOCAL `SubmissionLedger` facet (plan §1.3): a request addressing
- * this Object's Conversation executes locally; a route-capable request addressing another
- * Conversation is Schema-encoded onto the `ConversationPortTransport` and executed by the
+ * this Object's Thread executes locally; a route-capable request addressing another
+ * Thread is Schema-encoded onto the `ThreadPortTransport` and executed by the
  * owning Object's local facet; any other foreign request fails fast typed. Provide the WP1
  * local facet (`submissionLedgerLayer`/`ledgerLayer`) and a transport to close it.
  */
-declare const routedSubmissionLedgerLayer: (options: RoutedPortOptions) => Layer.Layer<SubmissionLedger, never, SubmissionLedger | ConversationPortTransport>;
+declare const routedSubmissionLedgerLayer: (options: RoutedPortOptions) => Layer.Layer<SubmissionLedger, never, SubmissionLedger | ThreadPortTransport>;
 /**
- * Routing decorator over the LOCAL `ConversationStore` facet (plan §1.3): this-conversation
+ * Routing decorator over the LOCAL `ThreadStore` facet (plan §1.3): this-thread
  * requests execute locally; foreign materialize/append/read/inspectTail/export travel the
  * transport; foreign observation and checkpoints fail fast typed.
  */
-declare const routedConversationStoreLayer: (options: RoutedPortOptions) => Layer.Layer<ConversationStore, never, ConversationStore | ConversationPortTransport>;
+declare const routedThreadStoreLayer: (options: RoutedPortOptions) => Layer.Layer<ThreadStore, never, ThreadStore | ThreadPortTransport>;
 /**
  * Execute one decoded port request against THIS Object's LOCAL facets — the owner-side half
  * of the routed ports (plan §1.3). Callers must provide the WP1 local facets, never the
  * routed decorators: the routing layer already established that this Object owns the
- * addressed Conversation, and re-routing here could bounce a request between Objects.
+ * addressed Thread, and re-routing here could bounce a request between Objects.
  * Failures never escape — every typed port failure becomes a `PortFailed` envelope that
  * re-decodes on the caller side.
  */
-declare const executePortRequest: (request: LedgerAdmitCall | LedgerLookupCall | LedgerMarkReadyCall | LedgerRecordChildSettledCall | LedgerRequestAbortCall | LedgerResolveAdmissionCall | StoreAppendCall | StoreExportCall | StoreInspectTailCall | StoreMaterializeCall | StoreReadPageCall) => Effect.Effect<PortFailed | PortSucceeded, never, ConversationStore | SubmissionLedger>;
+declare const executePortRequest: (request: LedgerAdmitCall | LedgerLookupCall | LedgerMarkReadyCall | LedgerRecordChildSettledCall | LedgerRequestAbortCall | LedgerResolveAdmissionCall | StoreAppendCall | StoreExportCall | StoreInspectTailCall | StoreMaterializeCall | StoreReadPageCall) => Effect.Effect<PortFailed | PortSucceeded, never, SubmissionLedger | ThreadStore>;
 /**
  * The complete owner-side endpoint body for `portCall` (D-P6-3): decode the wire request,
  * execute it against this Object's LOCAL facets, and answer with the encoded response
@@ -1800,7 +1718,7 @@ declare const executePortRequest: (request: LedgerAdmitCall | LedgerLookupCall |
  * cannot be encoded, answers `PortFailed(PortProtocolError)` instead of throwing, so the
  * transport never has to interpret exceptions as protocol answers.
  */
-declare const handleEncodedPortRequest: (encoded: unknown) => Effect.Effect<unknown, never, ConversationStore | SubmissionLedger>;
+declare const handleEncodedPortRequest: (encoded: unknown) => Effect.Effect<unknown, never, SubmissionLedger | ThreadStore>;
 //#endregion
-export { ConversationPortTransport, CurrentDoStorageVersion, DEFAULT_MAX_STORED_VALUE_BYTES, DoAppendConflict, DoCheckpointConflict, DoFenceRejected, DoLedgerError, DoScheduleAlarmControl, DoScheduleAlarmReplacement, DoScheduleReplaceAlarm, DoScheduleTransaction, DoStorageCompatibilityError, DoStorageConfig, DoStorageConfigValue, DoStorageCorruptionError, DoStorageError, DoStorageFailpoint, DoStorageFailpointError, DoStorageFailpointHandler, DoStorageFailpointLocation, DoStorageFailpointTestControl, DoStorageInitializationError, DoStorageOptions, DoValueBoundExceeded, LedgerAdmitCall, LedgerAdmitResult, LedgerLookupCall, LedgerLookupResult, LedgerMarkReadyCall, LedgerMarkReadyResult, LedgerRecordChildSettledCall, LedgerRecordChildSettledResult, LedgerRequestAbortCall, LedgerRequestAbortResult, LedgerResolveAdmissionCall, LedgerResolveAdmissionResult, MAX_PORT_DIAGNOSTIC_LENGTH, PortFailed, PortFailure, PortProtocolError, PortRequest, PortRequestEnvelope, PortResponse, PortResponseEnvelope, PortResult, PortSucceeded, PortTransportError, RoutedPortOptions, StoreAppendCall, StoreAppendResult, StoreExportCall, StoreExportResult, StoreInspectTailCall, StoreInspectTailResult, StoreMaterializeCall, StoreMaterializeResult, StoreReadPageCall, StoreReadPageResult, boundPortDiagnostic, conversationStoreLayer, decodePortRequest, decodePortResponse, doMigrations, encodePortRequest, encodePortResponse, evictionFailpointHandler, executePortRequest, handleEncodedPortRequest, layer, ledgerLayer, observationOffsetAt, portTransportFailure, routedConversationStoreLayer, routedSubmissionLedgerLayer, scheduleStoreLayer, storageConfigLayer, storageFailpointLayer, submissionLedgerLayer };
+export { CurrentDoStorageVersion, DEFAULT_MAX_STORED_VALUE_BYTES, DoAppendConflict, DoCheckpointConflict, DoFenceRejected, DoLedgerError, DoScheduleAlarmControl, DoScheduleAlarmReplacement, DoScheduleReplaceAlarm, DoScheduleTransaction, DoStorageCompatibilityError, DoStorageConfig, DoStorageConfigValue, DoStorageCorruptionError, DoStorageError, DoStorageFailpoint, DoStorageFailpointError, DoStorageFailpointHandler, DoStorageFailpointLocation, DoStorageInitializationError, DoStorageOptions, DoSubscriptionAlarmControl, DoSubscriptionAlarmReplacement, DoSubscriptionReplaceAlarm, DoSubscriptionTransaction, DoValueBoundExceeded, LedgerAdmitCall, LedgerAdmitResult, LedgerLookupCall, LedgerLookupResult, LedgerMarkReadyCall, LedgerMarkReadyResult, LedgerRecordChildSettledCall, LedgerRecordChildSettledResult, LedgerRequestAbortCall, LedgerRequestAbortResult, LedgerResolveAdmissionCall, LedgerResolveAdmissionResult, MAX_PORT_DIAGNOSTIC_LENGTH, PortFailed, PortFailure, PortProtocolError, PortRequest, PortRequestEnvelope, PortResponse, PortResponseEnvelope, PortResult, PortSucceeded, PortTransportError, RoutedPortOptions, StoreAppendCall, StoreAppendResult, StoreExportCall, StoreExportResult, StoreInspectTailCall, StoreInspectTailResult, StoreMaterializeCall, StoreMaterializeResult, StoreReadPageCall, StoreReadPageResult, ThreadPortTransport, boundPortDiagnostic, decodePortRequest, decodePortResponse, doSubscriptionStoreLayer, encodePortRequest, encodePortResponse, executePortRequest, handleEncodedPortRequest, layer, ledgerLayer, observationOffsetAt, portTransportFailure, routedSubmissionLedgerLayer, routedThreadStoreLayer, scheduleStoreLayer, storageConfigLayer, storageFailpointLayer, submissionLedgerLayer, threadStoreLayer };
 //# sourceMappingURL=index.d.mts.map