@inixiative/agent-session 0.11.0 → 0.12.0

package/README.md

@@ -2,7 +2,7 @@
 
 > Part of [inixiative](https://www.inixiative.com), technology for cooperation. See [all the projects](https://github.com/inixiative).
 
-Drive Claude Code, Codex and Muse as persistent streaming sessions behind one
+Drive Claude Code and Codex as persistent streaming sessions behind one
 interface. Claude Code runs over its CLI or the Agent SDK, Codex over its
 app-server and Muse over `muse serve`; Gemini and Grok are planned. The package
 also holds warm **primed decision sessions**, **subscription pools** with
@@ -125,7 +125,10 @@ session.onToolRequest(async (call) => {
 
 - `pre-use` (Claude only) runs before every call in every mode,
   `bypassPermissions` included; only a deny counts. A PreToolUse callback over
-  the control protocol; one the session cannot read is denied.
+  the control protocol; one the session cannot read is denied. An allow may
+  carry `updatedInput`: the call runs with that input (the next gate sees it as
+  `toolInput`), and the runtime's own mode still decides whether it runs.
+  Foundry uses it to add the chorus's brief to a subagent's prompt.
 - `permission` is an ask the runtime's mode raised; the answer is final (no gate:
   denied). Claude: `--permission-prompt-tool stdio`; `decisionReason` says why it
   asked, `agentId` marks a subagent's call. Codex app-server: command and
@@ -218,9 +221,14 @@ const result = await decisions.decide(spec, { input, standby });
   own subagents go to the tool gate untouched.
 - **Fresh per call.** Each member serves one decision. A used one is replaced
   at once; a role with no held spare starts a member with its input inline.
+- **Slices.** `dispatchers` (default 1) splits the roles into fixed slices,
+  each started by its own dispatcher, so refills are written at once. A
+  dispatcher writes one Agent call per member as output tokens: one
+  dispatcher refilled 75 members in ~20 s (2026-11-02). A role keeps its
+  slice while it is wanted; a new role joins the smallest.
 - **Recycle.** A dispatcher's context grows ~700 tokens per member started;
-  past `recycleTokens` (100k) a new generation takes over and the old one
-  ends into the root once empty.
+  past `recycleTokens` (100k) a new generation of its slice takes over and
+  the old one ends into the root once empty.
 - **Orphans.** A nested agent whose parent ended reports its own end to the
   main thread, which wakes the main model (Claude Code 2.1.300). Members of a
   dispatcher that ended unasked are therefore never retired or stopped, and an

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inixiative/agent-session",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "Drive coding-agent CLIs as persistent, streaming, event-captured sessions over interchangeable transports, with primed decision sessions, subscription pools, routing, limit polling and continuity.",
   "type": "module",
   "main": "src/index.ts",
@@ -41,7 +41,7 @@
   },
   "devDependencies": {
     "@biomejs/biome": "2.5.2",
-    "@inixiative/config": "^0.5.185",
+    "@inixiative/config": "^0.5.187",
     "@types/bun": "1.4.4",
     "lefthook": "2.1.9",
     "typescript": "6.0.3"

package/src/claude-agent-sdk-session.ts

@@ -187,7 +187,7 @@ function bridge(
     const awaiting = new Map<string, (response: unknown) => void>();
     const ask = (request: Record<string, unknown>, signal?: AbortSignal) =>
       new Promise<unknown>((resolve) => {
-        const id = `sdk-bridge-${crypto.randomUUID()}`;
+        const id = `sdk-bridge-${Bun.randomUUIDv7()}`;
         awaiting.set(id, resolve);
         signal?.addEventListener(
           'abort',

package/src/claude-code-session.ts

@@ -379,7 +379,7 @@ export class ClaudeCodeSession implements HarnessSession {
   private _steerAcks = new Map<string, (state: SteerState) => void>();
   /** Steers written and not yet ended natively: a late `completed` after their turn settled is theirs. */
   private _steerUuids = new Set<string>();
-  private readonly _hookCallbackId = `agent-session-pre-tool-${crypto.randomUUID()}`;
+  private readonly _hookCallbackId = `agent-session-pre-tool-${Bun.randomUUIDv7()}`;
   private _limits?: LimitSnapshot;
   private _controlSeq = 0;
   private _control = new Map<
@@ -555,7 +555,7 @@ export class ClaudeCodeSession implements HarnessSession {
     if (!turn || !a || a.dispatch !== 'attempted' || a.nativeOutcome !== 'unknown')
       return ignored('no owned in-flight turn');
     if (!this._proc || !this._alive) return ignored('session not running');
-    const uuid = crypto.randomUUID();
+    const uuid = Bun.randomUUIDv7();
     turn.steers ??= new Map();
     const steers = turn.steers;
     steers.set(uuid, 'written');
@@ -999,7 +999,7 @@ export class ClaudeCodeSession implements HarnessSession {
     timeoutMs: number,
   ): Promise<Record<string, unknown>> {
     if (!this._proc || !this._alive) return Promise.reject(new Error('Session not running'));
-    const requestId = `agent-session-${++this._controlSeq}-${crypto.randomUUID()}`;
+    const requestId = `agent-session-${++this._controlSeq}-${Bun.randomUUIDv7()}`;
     return new Promise((resolve, reject) => {
       const timer = setTimeout(() => {
         this._control.delete(requestId);
@@ -1746,7 +1746,15 @@ export class ClaudeCodeSession implements HarnessSession {
               permissionDecisionReason: decision.message,
             },
           }
-        : {};
+        : decision?.updatedInput
+          ? // No permission decision: the call runs with the new input under the session's own mode.
+            {
+              hookSpecificOutput: {
+                hookEventName: 'PreToolUse',
+                updatedInput: structuredClone(decision.updatedInput),
+              },
+            }
+          : {};
     return decision?.behavior === 'allow'
       ? { behavior: 'allow', updatedInput: structuredClone(request.toolInput) }
       : { behavior: 'deny', message: decision?.message ?? 'Denied' };

package/src/claude-in-session.ts

@@ -19,9 +19,13 @@
 //              standby context matches answers that call with its input; the member answers
 //              through `answer`. A decision with no spare starts a member with its input inline.
 //              Each member serves one decision (fresh every call); a used one is started again.
+//   slices     the roles are split into `dispatchers` fixed slices, each started by its own
+//              dispatcher generation under the root, so their refills are written at once: a
+//              dispatcher writes one Agent call per member as output tokens, so one dispatcher for a
+//              large roster is slow to refill (75 members took ~20 s; 2026-11-02).
 //   recycle    a dispatcher's context grows with every member it starts. Past a bound the root
-//              starts a new generation; the old one's held spares are retired as their
-//              replacements hold, and it ends into the root once empty.
+//              starts a new generation of that slice; the old one's held spares are retired as
+//              their replacements hold, and it ends into the root once empty.
 //
 // Agent definitions are generic (no prompt of their own): every member's composed text rides in
 // its pinned prompt, so an edit reaches the next spare without relaunching the session.
@@ -98,6 +102,11 @@ export interface ClaudeInSessionConfig {
   setupDeadlineMs?: number;
   /** A dispatcher whose context passes this many tokens is replaced. Default 100k. */
   recycleTokens?: number;
+  /**
+   * Dispatchers running at once, each starting a fixed slice of the roles (a role keeps its slice
+   * while it is wanted; a new one joins the smallest). Default 1.
+   */
+  dispatchers?: number;
   /**
    * Subagents this host may run on top of the user's own concurrent-subagent cap
    * (`CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS`, 20 by default in Claude Code 2.1.300): the root, a
@@ -146,6 +155,8 @@ interface Starter {
   ended?: boolean;
   /** A dispatcher whose line went out to the root. */
   issued?: boolean;
+  /** A dispatcher's slice of the roles. */
+  slice?: number;
 }
 
 interface Member {
@@ -214,6 +225,7 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
         | 'recycleTokens'
         | 'maxOrphans'
         | 'maxSetups'
+        | 'dispatchers'
       >
     >;
   private _host?: ClaudeSessionHost;
@@ -221,7 +233,12 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
   private _seq = 0;
   private _generation = 0;
   private _root?: Starter;
-  private _gen?: Starter;
+  /** The current dispatcher generation of each slice. */
+  private _current: Array<Starter | undefined> = [];
+  /** Each wanted role's slice. */
+  private readonly _sliceOf = new Map<string, number>();
+  /** Direct members of roles outside every slice go out round-robin. */
+  private _nextDirect = 0;
   private readonly _gens = new Map<string, Starter>();
   private readonly _spares = new Map<string, Spare>();
   private readonly _members = new Set<Member>();
@@ -254,8 +271,14 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
       recycleTokens: config.recycleTokens ?? 100_000,
       maxOrphans: config.maxOrphans ?? 40,
       maxSetups: config.maxSetups ?? 2,
+      dispatchers: config.dispatchers ?? 1,
     };
-    if (this._config.sparesPerRole < 1 || this._config.recycleTokens < 10_000)
+    if (
+      this._config.sparesPerRole < 1 ||
+      this._config.recycleTokens < 10_000 ||
+      !Number.isSafeInteger(this._config.dispatchers) ||
+      this._config.dispatchers < 1
+    )
       throw Error('Invalid in-session decision bounds');
     // On top of the user's own cap (Claude Code's default 20), so the main agent keeps its slots.
     const own = Number(process.env.CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS) || 20;
@@ -368,7 +391,8 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
     }
     this._spares.clear();
     this._gens.clear();
-    this._root = this._gen = undefined;
+    this._root = undefined;
+    this._current = [];
   }
 
   mcp(_server: string, requestId: string, message: Record<string, unknown>): void {
@@ -591,7 +615,7 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
         const waiting = this._awaitingSlot.shift();
         if (waiting) {
           this._reissue(waiting);
-          if (this._gen) this._feed(this._gen);
+          if (waiting.gen) this._feed(waiting.gen);
         }
       }
       return true;
@@ -621,10 +645,11 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
         owner.context = add.input + add.cacheRead + add.cacheWrite;
         if (
           owner.kind === 'dispatch' &&
-          owner === this._gen &&
+          owner.slice !== undefined &&
+          owner === this._current[owner.slice] &&
           owner.context > this._config.recycleTokens
         )
-          this._recycle();
+          this._recycle(owner.slice);
       } else {
         const target = owner.member?.deliveredAt ? owner.usage : owner.standby;
         for (const key of Object.keys(add) as Array<keyof Usage>) target[key] += add[key];
@@ -740,6 +765,7 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
         ];
       }),
     );
+    this._assignSlices();
     for (const spare of this._spares.values())
       if (
         !spare.direct &&
@@ -864,7 +890,8 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
       lines: [],
       context: 0,
     };
-    this._newGeneration();
+    this._current = [];
+    for (let slice = 0; slice < this._config.dispatchers; slice++) this._newGeneration(slice);
     clearTimeout(this._setupTimer);
     this._setupTimer = setTimeout(() => {
       if (this._setup.status === 'starting') this._publishSetup('degraded');
@@ -891,25 +918,37 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
       [...this._spares.values()].filter((s) => s.held && !s.done && !s.retired).map((s) => s.name),
     );
     const all = [...this._desired.keys()].every((name) => held.has(name));
-    if (this._rostered && all && this._gen?.next) {
+    // Every slice's dispatcher has taken its lines (it waits in `next` again).
+    const dispatching = this._current.length > 0 && this._current.every((gen) => !!gen?.next);
+    if (this._rostered && all && dispatching) {
       clearTimeout(this._setupTimer);
       this._publishSetup('ready');
     } else this._publishSetup('starting');
   }
 
-  private _newGeneration(): Starter {
+  private _newGeneration(slice: number): Starter {
     const token = `g${++this._generation}`;
-    const gen: Starter = { token, kind: 'dispatch', prompt: STARTER(token), lines: [], context: 0 };
+    const gen: Starter = {
+      token,
+      kind: 'dispatch',
+      prompt: STARTER(token),
+      lines: [],
+      context: 0,
+      slice,
+    };
     this._gens.set(token, gen);
-    this._gen = gen;
+    this._current[slice] = gen;
     this._root!.lines.push(`${IN_SESSION_AGENTS.dispatch} ${token}`);
     this._feed(this._root!);
     return gen;
   }
 
-  /** A dispatcher past its bound: a new generation takes new spares; the old one's are retired as replacements hold. */
-  private _recycle(): void {
-    const old = this._gen;
+  /**
+   * A slice's dispatcher past its bound: a new generation of that slice takes new spares; the old
+   * one's are retired as replacements hold.
+   */
+  private _recycle(slice: number): void {
+    const old = this._current[slice];
     if (!old || old.stopping || !this._root?.taskId) return;
     old.stopping = true;
     this._emit({
@@ -919,11 +958,33 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
     });
     for (const spare of this._spares.values())
       if (spare.gen === old && !spare.member && !spare.done) spare.superseded = true;
-    this._newGeneration();
+    this._newGeneration(slice);
     this._replenish();
     this._endIfEmpty(old);
   }
 
+  /** Keep every wanted role in a slice: a role keeps its slice; a new one joins the smallest. */
+  private _assignSlices(): void {
+    for (const name of [...this._sliceOf.keys()])
+      if (!this._desired.has(name)) this._sliceOf.delete(name);
+    const sizes = Array.from({ length: this._config.dispatchers }, () => 0);
+    for (const slice of this._sliceOf.values()) sizes[slice]!++;
+    for (const name of this._desired.keys()) {
+      if (this._sliceOf.has(name)) continue;
+      const slice = sizes.indexOf(Math.min(...sizes));
+      this._sliceOf.set(name, slice);
+      sizes[slice]!++;
+    }
+  }
+
+  /** The dispatcher that starts this role's members now: its slice's, or round-robin for a role in none. */
+  private _genFor(name: string): Starter | undefined {
+    const slice = this._sliceOf.get(name);
+    if (slice !== undefined) return this._current[slice];
+    const live = this._current.filter((gen): gen is Starter => !!gen && !gen.stopping);
+    return live.length ? live[this._nextDirect++ % live.length] : undefined;
+  }
+
   /** Answer a starter's held `next` with what it should start (or stop). */
   private _feed(starter: Starter): void {
     if (!starter.next) return;
@@ -1007,16 +1068,19 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
     return best;
   }
 
-  /** Keep `sparesPerRole` free spares of every desired role, in the current generation. */
+  /** Keep `sparesPerRole` free spares of every desired role, in its slice's current generation. */
   private _replenish(): void {
-    const gen = this._gen;
-    if (this._closed || !gen || gen.stopping) return;
+    if (this._closed) return;
     const free = new Map<string, number>();
     for (const spare of this._spares.values())
       if (!spare.direct && !spare.member && !spare.done && !spare.superseded && !spare.retired)
         if (this._desired.get(spare.name)?.standbyHash === spare.standbyHash)
           free.set(spare.name, (free.get(spare.name) ?? 0) + 1);
-    for (const [name, desired] of this._desired)
+    const fed = new Set<Starter>();
+    for (const [name, desired] of this._desired) {
+      const gen = this._genFor(name);
+      if (!gen || gen.stopping) continue;
+      fed.add(gen);
       for (let n = free.get(name) ?? 0; n < this._config.sparesPerRole; n++) {
         const token = `w${++this._seq}`;
         this._spares.set(token, {
@@ -1032,7 +1096,8 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
         });
         gen.lines.push(`${IN_SESSION_AGENTS.member} ${token}`);
       }
-    this._feed(gen);
+    }
+    for (const gen of fed) this._feed(gen);
   }
 
   /** A spare's replacement holds: retire one superseded spare of the same role. */
@@ -1068,7 +1133,7 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
   }
 
   private async _admit(member: Member): Promise<boolean> {
-    member.admissionId ??= crypto.randomUUID();
+    member.admissionId ??= Bun.randomUUIDv7();
     if (member.admitted) return true;
     try {
       await Promise.race([
@@ -1144,8 +1209,8 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
   /** A decision with no spare: a member started with its whole input. */
   private async _direct(member: Member, composed: string): Promise<void> {
     if (!(await this._admit(member))) return;
-    const gen = this._gen;
-    if (!gen) {
+    const gen = this._genFor(member.name);
+    if (!gen || gen.stopping) {
       member.reject(
         new DecisionError(
           'No dispatcher running',
@@ -1230,7 +1295,7 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
         if (this._closed) return;
         const orphaned = [...this._spares.values()].filter((sp) => !sp.done);
         this._gens.clear();
-        this._gen = undefined;
+        this._current = [];
         this._root = undefined;
         this._publishSetup('degraded');
         this._startSetup();
@@ -1241,7 +1306,13 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
       // Its members outlive it (nested background agents are not stopped with their parent).
       this._gens.delete(owner.token);
       const planned = owner.stopping && this._empty(owner);
-      if (owner === this._gen && !this._closed) this._newGeneration();
+      if (
+        owner.slice !== undefined &&
+        owner === this._current[owner.slice] &&
+        !this._closed &&
+        this._root
+      )
+        this._newGeneration(owner.slice);
       if (!planned && !this._closed)
         for (const spare of this._spares.values())
           if (spare.gen === owner && !spare.done) this._orphan(spare);
@@ -1293,8 +1364,8 @@ export class ClaudeInSessionDecisions implements PrimedSessions, ClaudeSessionEx
   }
 
   private _reissue(spare: Spare): void {
-    const gen = this._gen;
-    if (this._closed || !gen || spare.done) return;
+    const gen = this._genFor(spare.name);
+    if (this._closed || !gen || gen.stopping || spare.done) return;
     spare.gen = gen;
     spare.issued = false;
     const line = `${IN_SESSION_AGENTS.member} ${spare.token}`;

package/src/claude-subagents.ts

@@ -472,7 +472,7 @@ export class ClaudeSubagentSessions implements PrimedSessions {
 
   /** Admit a decision onto its spare; the input goes out when the spare's moment call is held. */
   private async _reserve(spare: Spare, member: Member): Promise<void> {
-    member.admissionId = crypto.randomUUID();
+    member.admissionId = Bun.randomUUIDv7();
     const ours = () => spare.member === member && member.spare === spare;
     try {
       await Promise.race([
@@ -789,7 +789,7 @@ export class ClaudeSubagentSessions implements PrimedSessions {
       return;
     }
     const spares = [...side.spares.values()];
-    const uuid = crypto.randomUUID();
+    const uuid = Bun.randomUUIDv7();
     const turnEnded = new Promise<void>((resolve) => {
       side.onResult = resolve;
     });
@@ -1041,7 +1041,7 @@ export class ClaudeSubagentSessions implements PrimedSessions {
   }
 
   private _control(side: Side, request: Record<string, unknown>, timeoutMs = 30_000) {
-    const id = `c-${crypto.randomUUID()}`;
+    const id = `c-${Bun.randomUUIDv7()}`;
     return new Promise<Record<string, unknown>>((resolve, reject) => {
       const timer = setTimeout(() => {
         side.control.delete(id);
@@ -1417,7 +1417,7 @@ export class ClaudeSubagentSessions implements PrimedSessions {
     await Promise.all(
       chunk.map(async (m) => {
         if (m.settled) return;
-        m.admissionId ??= crypto.randomUUID();
+        m.admissionId ??= Bun.randomUUIDv7();
         try {
           if (!retry && !m.admitted)
             await Promise.race([
@@ -1463,7 +1463,7 @@ export class ClaudeSubagentSessions implements PrimedSessions {
       m.token = `m${i + 1}`;
     });
     side.members = new Map(admitted.map((m) => [m.token, m]));
-    const uuid = crypto.randomUUID();
+    const uuid = Bun.randomUUIDv7();
     const turnEnded = new Promise<void>((resolve) => {
       side.onResult = resolve;
     });

package/src/codex-primed.ts

@@ -1335,7 +1335,7 @@ export class CodexPrimedSessions implements PrimedSessions {
       if (session) session.model ??= model;
       const branchMs = Math.round(performance.now() - t1);
       let branch = opened.branch;
-      admissionId = crypto.randomUUID();
+      admissionId = Bun.randomUUIDv7();
       try {
         await request.onAdmission?.({ admissionId, key: spec.key, runtime: 'codex', threadId });
       } catch (cause) {

package/src/harness-session.ts

@@ -399,7 +399,15 @@ export interface ToolRequest {
   readonly signal?: AbortSignal;
 }
 export type ToolDecision =
-  | { readonly behavior: 'allow' }
+  | {
+      readonly behavior: 'allow';
+      /**
+       * `pre-use` only (Claude): the input the call runs with instead of the one the model wrote
+       * (e.g. a subagent's prompt with context appended). The runtime's own mode still decides
+       * whether the call runs. Later gates see it as their `toolInput`.
+       */
+      readonly updatedInput?: Readonly<Record<string, unknown>>;
+    }
   | { readonly behavior: 'deny'; readonly message: string };
 /** Gates compose in registration order: the first deny wins; a thrown or rejected gate denies. */
 export type ToolGate = (request: ToolRequest) => ToolDecision | Promise<ToolDecision>;

package/src/pool.ts

@@ -584,7 +584,7 @@ export class SubscriptionPool {
     utilizationPercent: number | null,
     rank: number,
   ): Lease {
-    const leaseId = crypto.randomUUID();
+    const leaseId = Bun.randomUUIDv7();
     state.leases.add(leaseId);
     let released = false;
     const lease: Lease = {

package/src/tool-gate.ts

@@ -25,17 +25,22 @@ export class ToolGates {
     return [...this._gates];
   }
 
-  /** Never rejects. Undefined means no decision: only a `pre-use` request without a deny. */
+  /**
+   * Never rejects. Undefined means no decision: only a `pre-use` request without a deny or a new
+   * input. A gate's `updatedInput` (pre-use) is the next gate's `toolInput` and the decision's.
+   */
   async decide(request: ToolRequest): Promise<ToolDecision | undefined> {
     const gates = [...this._gates];
     if (!gates.length)
       return request.stage === 'permission'
         ? { behavior: 'deny', message: 'No approval handler' }
         : undefined;
+    let current = request;
+    let updatedInput: Readonly<Record<string, unknown>> | undefined;
     for (const gate of gates) {
       let decision: ToolDecision;
       try {
-        decision = await gate(request);
+        decision = await gate(current);
       } catch (error) {
         return {
           behavior: 'deny',
@@ -46,8 +51,19 @@ export class ToolGates {
         return { behavior: 'deny', message: String(decision.message ?? 'Denied') };
       if (decision?.behavior !== 'allow')
         return { behavior: 'deny', message: 'Tool gate failed: malformed decision' };
+      if (decision.updatedInput !== undefined && request.stage === 'pre-use') {
+        if (
+          !decision.updatedInput ||
+          typeof decision.updatedInput !== 'object' ||
+          Array.isArray(decision.updatedInput)
+        )
+          return { behavior: 'deny', message: 'Tool gate failed: malformed updatedInput' };
+        updatedInput = Object.freeze(structuredClone(decision.updatedInput));
+        current = { ...current, toolInput: updatedInput };
+      }
     }
-    return request.stage === 'permission' ? { behavior: 'allow' } : undefined;
+    if (request.stage === 'permission') return { behavior: 'allow' };
+    return updatedInput ? { behavior: 'allow', updatedInput } : undefined;
   }
 }
 

package/src/turn-state.ts

@@ -9,7 +9,7 @@ import {
 import { retainEvidence } from './retained-evidence';
 /** Per-admission evidence. Caller settlement never transfers native ownership. */
 export class TurnState {
-  readonly admissionId = crypto.randomUUID();
+  readonly admissionId = Bun.randomUUIDv7();
   identity: SessionIdentity = {};
   nativeOutcome: SessionAttempt['nativeOutcome'] = 'unknown';
   localOutcome: SessionAttempt['localOutcome'] = 'pending';