@rivus/agent 0.14.4 → 0.15.0

package/dist/chunks/src.js

@@ -1,14 +1,14 @@
 import { _ as createAgentLoopToolExecutionStart, a as createTextAgentLoopFromCallback, c as toEffectAgentLoop, d as createAgentLoopModelExecutionStart, f as createAgentLoopSkillExecutionEnd, g as createAgentLoopToolExecutionEnd, h as createAgentLoopThinkingDelta, l as toEffectAgentLoopInput, m as createAgentLoopTextDelta, o as fromEffectAgentLoop, p as createAgentLoopSkillExecutionStart, s as toCompatibilityAgentLoopInput, t as createAgentLoopFromCallback, u as createAgentLoopModelExecutionEnd, v as createAgentLoopToolExecutionUpdate } from "./agent-loop.js";
+import { d as resolveInvocationAuthority, i as requiresToolApproval$1, l as InvalidInvocationAuthority, o as InvalidToolInput, s as createToolInputDigest$1, t as RivusToolInputRejected, u as createInvocationAuthority$1 } from "./rivus-tool.js";
+import { B as createRuntimeCache, C as createStableId, E as createAgentHostRuntimePool, H as invokeRuntimeControl, L as toEffectAgentRuntime, O as loadRivusDeploymentManifest$1, R as toEffectAgentRuntimeInput$1, S as createEffectAgentInstanceRegistry, T as AgentRuntimeDisposed, U as runDeploymentProcessEffect, V as disposeRuntimeCacheEntries, _ as resolveRivusPluginModule, b as createEffectAgentHost, d as createNodeRivusPluginModuleLoader$1, f as loadNodeRivusPluginModule$1, h as isPathWithin, r as resolveRivusProjectSpace, s as createRivusDeploymentControl, u as resolveRivusDeployment, v as createProcessDeploymentControlPorts, x as AgentInstanceConflict, y as InvalidAgentHostBinding, z as toProcessAgentRuntimeInput } from "./rivus-daemon-cli.js";
+import { t as createSha256Digest } from "./sha256-digest.js";
 import { n as createRivusToolGrantSetOperations, p as deepFreeze$2, u as createRivusMemoryToolContract } from "./rivus-agent-definition-resolver.js";
-import { C as createEffectAgentInstanceRegistry, D as createAgentHostRuntimePool, E as AgentRuntimeDisposed, G as disposeRuntimeCacheEntries, H as toEffectAgentRuntimeInput$1, K as invokeRuntimeControl, S as AgentInstanceConflict, U as toProcessAgentRuntimeInput, V as toEffectAgentRuntime, W as createRuntimeCache, b as InvalidAgentHostBinding, c as createRivusDeploymentControl, d as resolveRivusDeployment, f as createNodeRivusPluginModuleLoader$1, g as isPathWithin, i as resolveRivusProjectSpace, k as loadRivusDeploymentManifest$1, p as loadNodeRivusPluginModule$1, r as runDeploymentProcessEffect, v as resolveRivusPluginModule, w as createStableId, x as createEffectAgentHost, y as createProcessDeploymentControlPorts } from "./rivus-daemon-cli.js";
 import { a as readBackgroundSessionWaitInput, i as readBackgroundSessionString, n as readBackgroundSessionObject, o as createRandomId, r as readBackgroundSessionPhase, t as readBackgroundSessionInteger } from "./background-session-control-input.js";
 import { d as createBackgroundSessionKey, l as narrowBackgroundSessionDefinition$1, o as createBackgroundSessionToolContracts, s as extendBackgroundSessionDefinition$1 } from "./background-session-authority.js";
-import { t as createSha256Digest } from "./sha256-digest.js";
-import { a as requiresToolApproval$1, c as resolveInvocationAuthority, l as RivusToolInputRejected, n as InvalidToolInput, o as InvalidInvocationAuthority, r as createToolInputDigest$1, s as createInvocationAuthority$1 } from "./tool-input-digest.js";
 import { i as createCompatibleRivusAgentCatalog } from "./rivus-plugin-testkit.js";
 import { Cause, Deferred, Effect, Either, Exit, Fiber, Option, Queue, Stream } from "effect";
 import { createHash, randomUUID } from "node:crypto";
-import { appendFile, chmod, lstat, mkdir, readFile, readdir, realpath, rename, stat, truncate, unlink, writeFile } from "node:fs/promises";
+import { appendFile, chmod, lstat, mkdir, open, readFile, readdir, realpath, rename, stat, truncate, unlink, writeFile } from "node:fs/promises";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { createServer } from "node:http";
 import { Buffer as Buffer$1 } from "node:buffer";
@@ -17,1591 +17,1898 @@ import { resourceFromAttributes } from "@opentelemetry/resources";
 import { BatchSpanProcessor } from "@opentelemetry/sdk-trace-base";
 import { NodeTracerProvider } from "@opentelemetry/sdk-trace-node";
 import { ROOT_CONTEXT, SpanStatusCode, trace } from "@opentelemetry/api";
-//#region src/core/application/run-presentation/projection/conversation-progress.ts
-const DEFAULT_CONVERSATION_PROGRESS_DISPLAY = "collapsed";
+//#region src/platform/persistence/files/write-atomic-text-file.ts
+/** Replace one UTF-8 text file through a same-directory temporary file. */
+async function writeAtomicTextFile(filePath, contents, options = {}) {
+	const directory = dirname(filePath);
+	await mkdir(directory, { recursive: true });
+	const existingMode = await readMode(filePath);
+	const temporaryPath = `${filePath}.${randomUUID()}.tmp`;
+	try {
+		await writeFile(temporaryPath, contents, {
+			encoding: "utf8",
+			flag: "wx",
+			mode: existingMode ?? options.mode
+		});
+		if (options.durable === true) await syncFile(temporaryPath);
+		await rename(temporaryPath, filePath);
+		if (options.durable === true) await syncDirectory(directory);
+	} catch (error) {
+		await unlink(temporaryPath).catch(() => void 0);
+		throw error;
+	}
+}
+async function readMode(filePath) {
+	try {
+		return (await stat(filePath)).mode & 4095;
+	} catch (error) {
+		if (isMissing$1(error)) return void 0;
+		throw error;
+	}
+}
+async function syncFile(filePath) {
+	const handle = await open(filePath, "r");
+	try {
+		await handle.sync();
+	} finally {
+		await handle.close();
+	}
+}
+async function syncDirectory(directory) {
+	const handle = await open(directory, "r");
+	try {
+		await handle.sync();
+	} finally {
+		await handle.close();
+	}
+}
+function isMissing$1(error) {
+	return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
+}
 //#endregion
-//#region src/core/application/card-delivery/ledger/card-delivery.ts
-var CardDeliveryTransitionDenied = class extends Error {
-	name = "CardDeliveryTransitionDenied";
-};
-function reserveCardDeliverySequence(current, runId) {
-	const record = current ?? initialCardDeliveryRecord(runId);
-	assertCardDeliveryIdentity(record, runId);
-	if (record.terminalPublished) throw new CardDeliveryTransitionDenied(`card delivery for run ${runId} already has a terminal receipt`);
-	const next = {
-		...record,
-		revision: record.revision + 1,
-		sequence: record.sequence + 1
-	};
-	return {
-		record: next,
-		sequence: next.sequence
-	};
+//#region src/adapters/pi/config/pi-model-overrides.ts
+async function mergePiProviderBaseUrlOverride(options) {
+	await updatePiProviderOverride(options.filePath, options.provider, (providerOverride) => ({
+		...providerOverride,
+		baseUrl: options.baseUrl
+	}));
 }
-function markCardDeliveryTerminal(current, runId) {
-	const record = current ?? initialCardDeliveryRecord(runId);
-	assertCardDeliveryIdentity(record, runId);
-	return record.terminalPublished ? record : {
-		...record,
-		revision: record.revision + 1,
-		terminalPublished: true
-	};
+/**
+* Persist one complete custom model definition in models.json.
+*
+* Pi composes these definitions with its built-in provider metadata. Keeping the
+* complete definition here is deliberate: a missing SDK catalog entry must be
+* represented by its exact server id, never by a fuzzy or legacy alias.
+*/
+async function mergePiProviderModelDeclaration(options) {
+	await updatePiProviderOverride(options.filePath, options.provider, (providerOverride) => {
+		const models = providerOverride.models;
+		if (models !== void 0 && (!Array.isArray(models) || models.some((model) => !isJsonRecord(model)))) throw new Error(`${options.filePath} providers.${options.provider}.models must be a JSON array of objects`);
+		const existingModels = models ?? [];
+		const existingIndex = existingModels.findIndex((model) => model.id === options.model.id);
+		const nextModels = [...existingModels];
+		if (existingIndex >= 0) nextModels[existingIndex] = {
+			...nextModels[existingIndex],
+			...options.model
+		};
+		else nextModels.push({ ...options.model });
+		return {
+			...providerOverride,
+			models: nextModels
+		};
+	});
 }
-function validateCardDeliveryRecord(record) {
-	if (record.runId.trim().length === 0 || !Number.isSafeInteger(record.revision) || record.revision < 1 || !Number.isSafeInteger(record.sequence) || record.sequence < 0 || typeof record.terminalPublished !== "boolean") throw new CardDeliveryTransitionDenied("card delivery record is invalid");
-	return { ...record };
+async function updatePiProviderOverride(filePath, provider, update) {
+	const overrides = await readPiModelOverrides(filePath);
+	const providers = readJsonRecord(overrides.providers, filePath, "providers");
+	const providerOverride = readJsonRecord(providers[provider], filePath, `providers.${provider}`);
+	await writePiModelOverrides(filePath, {
+		...overrides,
+		providers: {
+			...providers,
+			[provider]: update(providerOverride)
+		}
+	});
 }
-function validateCardDeliveryTransition(previous, next) {
-	validateCardDeliveryRecord(next);
-	if (previous === void 0) {
-		if (!(next.sequence === 1 && !next.terminalPublished || next.sequence === 0 && next.terminalPublished) || next.revision !== 1) throw new CardDeliveryTransitionDenied(`card delivery for run ${next.runId} has an invalid initial revision`);
-		return { ...next };
+async function readPiModelOverrides(filePath) {
+	try {
+		return readJsonRecord(JSON.parse(await readFile(filePath, "utf8")), filePath, "root");
+	} catch (error) {
+		if (isFileNotFound(error)) return {};
+		throw error;
 	}
-	assertCardDeliveryIdentity(previous, next.runId);
-	if (next.revision !== previous.revision + 1) throw new CardDeliveryTransitionDenied(`card delivery for run ${next.runId} skipped a revision`);
-	if (previous.terminalPublished) throw new CardDeliveryTransitionDenied(`card delivery for run ${next.runId} changed after its terminal receipt`);
-	if (!(next.terminalPublished ? next.sequence === previous.sequence : next.sequence === previous.sequence + 1)) throw new CardDeliveryTransitionDenied(`card delivery for run ${next.runId} has an invalid sequence transition`);
-	return { ...next };
 }
-function initialCardDeliveryRecord(runId) {
-	if (runId.trim().length === 0) throw new CardDeliveryTransitionDenied("card delivery run id must not be empty");
-	return {
-		revision: 0,
-		runId,
-		sequence: 0,
-		terminalPublished: false
-	};
+async function writePiModelOverrides(filePath, overrides) {
+	await writeAtomicTextFile(filePath, `${JSON.stringify(overrides, null, 2)}\n`, {
+		durable: true,
+		mode: 384
+	});
 }
-function assertCardDeliveryIdentity(record, runId) {
-	if (record.runId !== runId) throw new CardDeliveryTransitionDenied(`card delivery identity ${record.runId} does not match requested run ${runId}`);
+function readJsonRecord(value, filePath, path) {
+	if (value === void 0) return {};
+	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error(`${filePath} ${path} must be a JSON object`);
+	return value;
 }
-//#endregion
-//#region src/core/application/card-delivery/ledger/card-delivery-ledger.ts
-function createCardDeliveryLedger(repository) {
-	return {
-		isTerminalPublished: (runId) => repository.get(runId)?.terminalPublished ?? false,
-		markTerminal: (runId) => repository.transact(runId, (current) => {
-			const next = markCardDeliveryTerminal(current, runId);
-			return next === current ? { result: void 0 } : {
-				next,
-				result: void 0
-			};
-		}),
-		reserveSequence: (runId) => repository.transact(runId, (current) => {
-			const reservation = reserveCardDeliverySequence(current, runId);
-			return {
-				next: reservation.record,
-				result: reservation.sequence
-			};
-		})
-	};
+function isJsonRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-//#endregion
-//#region src/adapters/outbound/persistence/card-delivery/in-memory-card-delivery-repository.ts
-function createInMemoryCardDeliveryRepository(options = {}) {
-	const records = new Map(options.initial?.map((record) => [record.runId, cloneRecord(record)]) ?? []);
-	const semaphore = Effect.unsafeMakeSemaphore(1);
-	return {
-		get: (runId) => cloneOptional(records.get(runId)),
-		transact: (runId, decide) => semaphore.withPermits(1)(Effect.uninterruptible(Effect.gen(function* () {
-			const current = cloneOptional(records.get(runId));
-			const decision = yield* Effect.try({
-				try: () => decide(current),
-				catch: (error) => error
-			});
-			if (!("next" in decision)) return decision.result;
-			const next = yield* Effect.try({
-				try: () => validateCardDeliveryTransition(current, decision.next),
-				catch: (error) => error
-			});
-			yield* options.persist?.(cloneRecord(next)) ?? Effect.void;
-			yield* Effect.sync(() => {
-				records.set(runId, cloneRecord(next));
-			});
-			return decision.result;
-		})))
-	};
+function isFileNotFound(error) {
+	return error instanceof Error && "code" in error && error.code === "ENOENT";
 }
-function cloneOptional(record) {
-	return record === void 0 ? void 0 : cloneRecord(record);
+//#endregion
+//#region src/platform/persistence/persistence-value.ts
+function isRecord$14(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
 }
-function cloneRecord(record) {
-	return { ...validateCardDeliveryRecord(record) };
+function isNodeErrorWithCode(error, code) {
+	return error instanceof Error && "code" in error && error.code === code;
 }
 //#endregion
-//#region src/core/application/run-presentation/projection/run-presentation.ts
-const RUN_PRESENTATION_SCHEMA_VERSION = 2;
-function hasInspectableRunProgress(presentation) {
-	return presentation.steps.some((step) => step.kind === "skill" || step.kind === "tool");
+//#region src/platform/persistence/files/read-persistence-file.ts
+async function readPersistenceFile(filePath) {
+	try {
+		return await readFile(filePath, "utf8");
+	} catch (error) {
+		if (isNodeErrorWithCode(error, "ENOENT")) return void 0;
+		throw error;
+	}
 }
 //#endregion
-//#region src/core/application/run-presentation/projection/presented-value.ts
-const DEFAULT_MAX_COLLECTION_ITEMS = 20;
-const DEFAULT_MAX_DEPTH = 5;
-const DEFAULT_MAX_NODES = 100;
-const DEFAULT_MAX_STRING_CHARACTERS = 800;
-const SENSITIVE_KEY = /authorization|cookie|credential|password|passwd|private[-_]?key|secret|session[-_]?token|(?:^|[-_])token(?:$|[-_])|api[-_]?key|access[-_]?(?:key|token)|refresh[-_]?token|client[-_]?secret/i;
-const WORKING_DIRECTORY_KEY = /^(?:cwd|workdir|workingDirectory|workspace|workspaceRoot)$/i;
-const INLINE_SECRET = /\b(Bearer\s+)[^\s,;]+|\b(?:gh[opusr]_|sk-|xox[baprs]-)[A-Za-z0-9_-]{8,}/gi;
-const NAMED_SECRET_ARGUMENT = /((?:--?|\b)(?:authorization|password|passwd|secret|token|api[-_]?key|access[-_]?token)(?:\s+|=))([^\s,;]+)/gi;
-const SECRET_ENVIRONMENT_ASSIGNMENT = /\b([A-Z0-9_]*(?:PASSWORD|SECRET|TOKEN|API_KEY|ACCESS_KEY)=)([^\s,;]+)/g;
-function createPresentedValue(value, options = {}) {
-	return present(value, {
-		ancestors: /* @__PURE__ */ new Set(),
-		depth: 0,
-		maxCollectionItems: options.maxCollectionItems ?? DEFAULT_MAX_COLLECTION_ITEMS,
-		maxDepth: options.maxDepth ?? DEFAULT_MAX_DEPTH,
-		nodeBudget: { remaining: options.maxNodes ?? DEFAULT_MAX_NODES },
-		maxStringCharacters: options.maxStringCharacters ?? DEFAULT_MAX_STRING_CHARACTERS
-	});
+//#region src/core/domain/tool-operation/value-objects/stable-tool-input.ts
+function freezeStableJson(value) {
+	return deepFreeze$1(canonicalize(value, /* @__PURE__ */ new Set()));
 }
-function present(value, context, key) {
-	if (key && SENSITIVE_KEY.test(key)) return {
-		kind: "redacted",
-		reason: "sensitive-key"
-	};
-	if (context.nodeBudget.remaining <= 0) return {
-		kind: "unsupported",
-		valueType: "node-budget"
-	};
-	context.nodeBudget.remaining -= 1;
-	if (value === null) return { kind: "null" };
-	if (typeof value === "boolean") return {
-		kind: "boolean",
-		value
-	};
-	if (typeof value === "number") return Number.isFinite(value) ? {
-		kind: "number",
-		value
-	} : {
-		kind: "unsupported",
-		valueType: "number"
-	};
-	if (typeof value === "string") return presentText(value, context.maxStringCharacters, key);
-	if (typeof value !== "object") return {
-		kind: "unsupported",
-		valueType: typeof value
-	};
-	if (context.depth >= context.maxDepth) return {
-		kind: "unsupported",
-		valueType: "max-depth"
-	};
-	if (context.ancestors.has(value)) return {
-		kind: "unsupported",
-		valueType: "circular"
-	};
-	context.ancestors.add(value);
-	const nested = {
-		...context,
-		depth: context.depth + 1
-	};
+var StableToolOperationValueError = class extends Error {
+	name = "StableToolOperationValueError";
+};
+function canonicalize(value, ancestors) {
+	if (value === null || typeof value === "string" || typeof value === "boolean") return value;
+	if (typeof value === "number") {
+		if (!Number.isFinite(value)) throw new StableToolOperationValueError("stable JSON numbers must be finite");
+		return Object.is(value, -0) ? 0 : value;
+	}
+	if (typeof value !== "object") throw new StableToolOperationValueError("value must contain only stable JSON values");
+	if (ancestors.has(value)) throw new StableToolOperationValueError("stable JSON must not contain cycles");
+	ancestors.add(value);
 	try {
-		if (Array.isArray(value)) {
-			const visibleLength = Math.min(value.length, context.maxCollectionItems);
-			const items = Array.from({ length: visibleLength }, (_, index) => Object.hasOwn(value, index) ? present(value[index], nested) : {
-				kind: "unsupported",
-				valueType: "array-hole"
-			});
-			return {
-				items,
-				kind: "list",
-				omittedItems: Math.max(0, value.length - items.length)
-			};
-		}
-		if (value instanceof Error) return {
-			entries: [{
-				key: "name",
-				value: present(value.name, nested, "name")
-			}, {
-				key: "message",
-				value: present(value.message, nested, "message")
-			}],
-			kind: "record",
-			omittedEntries: 0
-		};
+		if (Array.isArray(value)) return Array.from({ length: value.length }, (_, index) => {
+			if (!Object.hasOwn(value, index)) throw new StableToolOperationValueError("stable JSON arrays must not contain holes");
+			return canonicalize(value[index], ancestors);
+		});
 		const prototype = Object.getPrototypeOf(value);
-		if (prototype !== Object.prototype && prototype !== null) return {
-			kind: "unsupported",
-			valueType: prototype?.constructor?.name ?? "object"
-		};
-		const allEntries = Object.entries(value);
-		const entries = allEntries.slice(0, context.maxCollectionItems).map(([entryKey, entryValue]) => ({
-			key: safeKey(entryKey),
-			value: present(entryValue, nested, entryKey)
-		}));
-		return {
-			entries,
-			kind: "record",
-			omittedEntries: Math.max(0, allEntries.length - entries.length)
-		};
+		if (prototype !== Object.prototype && prototype !== null) throw new StableToolOperationValueError("stable JSON objects must be plain objects");
+		return Object.fromEntries(Object.entries(value).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, entry]) => [key, canonicalize(entry, ancestors)]));
 	} finally {
-		context.ancestors.delete(value);
+		ancestors.delete(value);
 	}
 }
-function presentText(value, maxCharacters, key) {
-	if (INLINE_SECRET.test(value)) {
-		INLINE_SECRET.lastIndex = 0;
-		value = value.replace(INLINE_SECRET, (_match, bearerPrefix) => bearerPrefix ? `${bearerPrefix}<redacted>` : "<redacted>");
+function deepFreeze$1(value) {
+	if (Array.isArray(value)) {
+		for (const entry of value) deepFreeze$1(entry);
+		return Object.freeze(value);
 	}
-	INLINE_SECRET.lastIndex = 0;
-	value = value.replace(NAMED_SECRET_ARGUMENT, "$1<redacted>").replace(SECRET_ENVIRONMENT_ASSIGNMENT, "$1<redacted>");
-	value = normalizeMachinePaths(value, key);
-	const preview = value.slice(0, maxCharacters);
-	return {
-		kind: "text",
-		omittedCharacters: Math.max(0, value.length - preview.length),
-		value: preview
-	};
+	if (value !== null && typeof value === "object") {
+		for (const entry of Object.values(value)) deepFreeze$1(entry);
+		return Object.freeze(value);
+	}
+	return value;
 }
-function normalizeMachinePaths(value, key) {
-	if (key && WORKING_DIRECTORY_KEY.test(key)) return "<workspace>";
-	return value.replace(/\/(?:Users|home)\/[^/\s]+/g, "<home>").replace(/\/(?:private\/)?tmp\/[^\s'";]*/g, (path) => `<tmp>/${path.split("/").at(-1) || "item"}`);
+//#endregion
+//#region src/core/domain/tool-operation/value-objects/binding.ts
+var ToolOperationBindingError = class extends Error {
+	name = "ToolOperationBindingError";
+};
+function freezeToolOperationBinding(value) {
+	if (!isRecord$13(value)) throw new ToolOperationBindingError("tool operation binding must be an object");
+	let detached;
+	try {
+		detached = freezeStableJson(value);
+	} catch (error) {
+		if (error instanceof Error) throw new ToolOperationBindingError(error.message);
+		throw error;
+	}
+	if ([
+		"agentId",
+		"inputDigest",
+		"instanceId",
+		"sourceMessageId",
+		"toolId",
+		"toolVersion"
+	].some((field) => typeof detached[field] !== "string" || detached[field] === "")) throw new ToolOperationBindingError("tool operation binding fields must be non-empty strings");
+	return detached;
 }
-function safeKey(value) {
-	return value.replace(/[^\p{L}\p{N}._:/-]+/gu, " ").trim().slice(0, 80) || "unknown";
+function sameToolOperationBinding(left, right) {
+	return left.agentId === right.agentId && left.inputDigest === right.inputDigest && left.instanceId === right.instanceId && left.sourceMessageId === right.sourceMessageId && left.toolId === right.toolId && left.toolVersion === right.toolVersion;
+}
+function isRecord$13(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 //#endregion
-//#region src/core/application/run-presentation/projection/run-presentation-projector.ts
-function createRunPresentationProjector$1() {
-	const runs = /* @__PURE__ */ new Map();
-	const stateFor = (runId) => {
-		const existing = runs.get(runId);
-		if (existing) return existing;
-		const created = {
-			answer: "",
-			answerStartedAt: void 0,
-			assistantSequence: 0,
-			currentSkillId: void 0,
-			order: [],
-			phase: "running",
-			revision: 0,
-			steps: /* @__PURE__ */ new Map()
-		};
-		runs.set(runId, created);
-		return created;
-	};
-	const snapshot = (runId) => {
-		const state = runs.get(runId);
-		if (!state) return void 0;
-		const visibleKeys = state.order.slice(-8);
-		return {
-			answer: {
-				format: "markdown",
-				text: state.answer
-			},
-			omittedStepCount: Math.max(0, state.order.length - visibleKeys.length),
-			phase: state.phase,
-			revision: state.revision,
-			runId,
-			schemaVersion: 2,
-			steps: visibleKeys.map((key) => state.steps.get(key)).filter((step) => step !== void 0),
-			totalStepCount: state.order.length,
-			totalToolCallCount: [...state.steps.values()].filter((step) => step.kind === "tool").length
-		};
-	};
-	const mutate = (runId, mutation) => {
-		const state = stateFor(runId);
-		mutation(state);
-		state.revision += 1;
-		return snapshot(runId);
-	};
-	const upsert = (state, step) => {
-		if (!state.steps.has(step.id)) state.order.push(step.id);
-		state.steps.set(step.id, step);
-	};
-	const commitAssistantNarration = (state, endedAt) => {
-		const text = state.answer.trim();
-		if (!text) return;
-		const id = `assistant:${state.assistantSequence + 1}`;
-		state.assistantSequence += 1;
-		const startedAt = state.answerStartedAt ?? endedAt.toISOString();
-		upsert(state, {
-			durationMs: elapsed(startedAt, endedAt),
-			endedAt: endedAt.toISOString(),
-			id,
-			kind: "assistant",
-			label: "过程说明",
-			startedAt,
-			status: "completed",
-			text
+//#region src/core/domain/tool-operation/aggregate/tool-operation.ts
+var ToolOperationTransitionDenied = class extends Error {
+	name = "ToolOperationTransitionDenied";
+};
+/** Immutable transitions do not serialize concurrent writes; the ledger serializes persisted transitions. */
+var ToolOperation = class ToolOperation {
+	#snapshot;
+	constructor(snapshot) {
+		this.#snapshot = freezeSnapshot(snapshot);
+		Object.freeze(this);
+	}
+	static create(input) {
+		if (typeof input.operationId !== "string") throw new ToolOperationTransitionDenied("tool operation id must be a string");
+		return new ToolOperation({
+			binding: freezeToolOperationBinding(input.binding),
+			operationId: input.operationId,
+			revision: 1,
+			state: { status: "pending" }
 		});
-		state.answer = "";
-		state.answerStartedAt = void 0;
-	};
-	return {
-		apply: (event, canonicalText) => {
-			switch (event.type) {
-				case "agent_run_accepted":
-					runs.set(event.runId, {
-						answer: "",
-						answerStartedAt: void 0,
-						assistantSequence: 0,
-						currentSkillId: void 0,
-						order: [],
-						phase: "running",
-						revision: 1,
-						steps: /* @__PURE__ */ new Map()
-					});
-					return snapshot(event.runId);
-				case "agent_turn_started": return mutate(event.runId, (state) => {
-					state.answer = "";
-					state.answerStartedAt = void 0;
-					state.currentSkillId = void 0;
-				});
-				case "agent_model_execution_started": return mutate(event.runId, (state) => {
-					state.answer = "";
-					state.answerStartedAt = void 0;
-					state.currentSkillId = void 0;
-					upsert(state, {
-						id: `model:${event.modelCallId}`,
-						kind: "model",
-						label: "分析问题",
-						model: safeIdentifier(event.model),
-						provider: safeIdentifier(event.provider),
-						startedAt: event.occurredAt.toISOString(),
-						status: "running"
-					});
-				});
-				case "agent_model_execution_ended": return mutate(event.runId, (state) => {
-					const id = `model:${event.modelCallId}`;
-					upsert(state, {
-						...completedTiming(state, id, event.occurredAt),
-						id,
-						kind: "model",
-						label: "分析问题",
-						model: safeIdentifier(event.responseModel ?? event.model),
-						provider: safeIdentifier(event.provider),
-						status: event.errorMessage ? "failed" : "completed"
-					});
-				});
-				case "agent_skill_execution_started": return mutate(event.runId, (state) => {
-					commitAssistantNarration(state, event.occurredAt);
-					state.currentSkillId = safeIdentifier(event.skillId);
-					upsert(state, {
-						id: `skill:${event.skillCallId}`,
-						kind: "skill",
-						label: "读取技能",
-						skillId: safeIdentifier(event.skillId),
-						startedAt: event.occurredAt.toISOString(),
-						status: "running"
-					});
-				});
-				case "agent_skill_execution_ended": return mutate(event.runId, (state) => {
-					const id = `skill:${event.skillCallId}`;
-					upsert(state, {
-						...completedTiming(state, id, event.occurredAt),
-						id,
-						kind: "skill",
-						label: "读取技能",
-						skillId: safeIdentifier(event.skillId),
-						status: event.isError ? "failed" : "completed"
-					});
-				});
-				case "agent_tool_execution_started": return mutate(event.runId, (state) => {
-					commitAssistantNarration(state, event.occurredAt);
-					upsert(state, runningToolStep(state, event));
-				});
-				case "agent_tool_execution_updated": return mutate(event.runId, (state) => {
-					upsert(state, runningToolStep(state, event));
-				});
-				case "agent_tool_execution_ended": return mutate(event.runId, (state) => {
-					const id = `tool:${event.toolCallId}`;
-					const existing = state.steps.get(id);
-					const startedAt = existing?.startedAt ?? event.occurredAt.toISOString();
-					const input = existing?.kind === "tool" ? existing.input : createPresentedValue(void 0);
-					upsert(state, {
-						durationMs: elapsed(startedAt, event.occurredAt),
-						endedAt: event.occurredAt.toISOString(),
-						...event.isError ? { error: createPresentedValue(event.result) } : { output: createPresentedValue(event.result) },
-						id,
-						input,
-						kind: "tool",
-						label: "执行工具",
-						...existing?.kind === "tool" && existing.skillId ? { skillId: existing.skillId } : {},
-						startedAt,
-						status: event.isError ? "failed" : "completed",
-						toolName: safeIdentifier(event.toolName)
-					});
-				});
-				case "assistant_text_delta": return mutate(event.runId, (state) => {
-					state.answerStartedAt ??= event.occurredAt.toISOString();
-					state.answer += event.delta;
-				});
-				case "assistant_thinking_delta":
-				case "agent_turn_completed": return snapshot(event.runId);
-				case "agent_run_completed": {
-					const result = finish(event.runId, "completed", "回答已完成", event.occurredAt, canonicalText, event.finalText, stateFor, mutate, upsert);
-					runs.delete(event.runId);
-					return result;
-				}
-				case "agent_run_failed": {
-					const result = finish(event.runId, "failed", "运行未完成", event.occurredAt, void 0, canonicalText, stateFor, mutate, upsert);
-					runs.delete(event.runId);
-					return result;
-				}
-				case "agent_run_cancelled": {
-					const result = finish(event.runId, "cancelled", "运行已取消", event.occurredAt, void 0, canonicalText, stateFor, mutate, upsert);
-					runs.delete(event.runId);
-					return result;
-				}
+	}
+	static restore(value) {
+		return new ToolOperation(readToolOperationSnapshot(value));
+	}
+	get binding() {
+		return this.#snapshot.binding;
+	}
+	get operationId() {
+		return this.#snapshot.operationId;
+	}
+	get reconciliation() {
+		return this.#snapshot.reconciliation;
+	}
+	get revision() {
+		return this.#snapshot.revision;
+	}
+	get state() {
+		return this.#snapshot.state;
+	}
+	matchesBinding(binding) {
+		try {
+			return sameToolOperationBinding(this.binding, freezeToolOperationBinding(binding));
+		} catch {
+			return false;
+		}
+	}
+	complete(result) {
+		this.requirePending();
+		let stableResult;
+		try {
+			stableResult = freezeStableJson(result);
+		} catch (error) {
+			if (error instanceof Error) throw new ToolOperationTransitionDenied(error.message);
+			throw error;
+		}
+		return this.next({
+			revision: this.revision + 1,
+			state: {
+				result: stableResult,
+				status: "completed"
 			}
-		},
-		snapshot
-	};
-}
-function runningToolStep(state, event) {
-	const id = `tool:${event.toolCallId}`;
-	const existing = state.steps.get(id);
-	const skillId = existing?.kind === "tool" ? existing.skillId : state.currentSkillId;
-	const output = event.type === "agent_tool_execution_updated" ? createPresentedValue(event.partialResult) : existing?.kind === "tool" ? existing.output : void 0;
+		});
+	}
+	abort() {
+		this.requirePending();
+		return this.next({
+			revision: this.revision + 1,
+			state: { status: "aborted" }
+		});
+	}
+	requireReconciliation(reason) {
+		this.requirePending();
+		if (typeof reason !== "string" || reason.trim() === "") throw new ToolOperationTransitionDenied("tool operation reconciliation requires a reason");
+		return this.next({
+			revision: this.revision + 1,
+			state: {
+				reason,
+				status: "reconciliation-required"
+			}
+		});
+	}
+	retry() {
+		if (this.state.status !== "aborted") throw new ToolOperationTransitionDenied(`tool operation cannot retry while ${this.state.status}`);
+		return this.next({
+			revision: this.revision + 1,
+			state: { status: "pending" }
+		});
+	}
+	recoverInterrupted() {
+		this.requirePending();
+		return this.next({
+			revision: this.revision + 1,
+			state: {
+				reason: "process exited before the tool outcome was durably recorded",
+				status: "reconciliation-required"
+			}
+		});
+	}
+	reconcile(input) {
+		if (input.operationId !== this.operationId || this.state.status !== "reconciliation-required" || this.revision !== input.expectedRevision) throw new ToolOperationTransitionDenied(`tool operation is not the expected reconciliation revision: ${input.operationId}`);
+		const action = normalizeReconciliationAction(input.action);
+		const nextState = input.outcome.status === "applied" ? {
+			result: freezeStableJson(input.outcome.result),
+			status: "completed"
+		} : { status: "aborted" };
+		return this.next({
+			reconciliation: {
+				...action,
+				outcome: input.outcome.status
+			},
+			revision: this.revision + 1,
+			state: nextState
+		});
+	}
+	validateTransitionTo(next) {
+		if (this.operationId !== next.operationId || !sameToolOperationBinding(this.binding, next.binding) || next.revision !== this.revision + 1) return false;
+		switch (this.state.status) {
+			case "pending": return (next.state.status === "completed" || next.state.status === "reconciliation-required" || next.state.status === "aborted") && next.reconciliation === void 0;
+			case "aborted": return next.state.status === "pending" && next.reconciliation === void 0;
+			case "completed": return false;
+			case "reconciliation-required": return (next.state.status === "completed" || next.state.status === "aborted") && next.reconciliation !== void 0 && isValidReconciliation(next.reconciliation) && next.reconciliation.outcome === (next.state.status === "completed" ? "applied" : "not-applied") && !sameReconciliation(this.reconciliation, next.reconciliation);
+		}
+	}
+	toSnapshot() {
+		return this.#snapshot;
+	}
+	requirePending() {
+		if (this.state.status !== "pending") throw new ToolOperationTransitionDenied(`tool operation cannot transition while ${this.state.status}`);
+	}
+	next(change) {
+		const extensions = retainUnknownFields$2(this.#snapshot, [
+			"binding",
+			"operationId",
+			"reconciliation",
+			"revision",
+			"state"
+		]);
+		return new ToolOperation({
+			...extensions,
+			binding: this.binding,
+			operationId: this.operationId,
+			...change.reconciliation === void 0 ? {} : { reconciliation: change.reconciliation },
+			revision: change.revision,
+			state: change.state
+		});
+	}
+};
+function readToolOperationSnapshot(value) {
+	if (!isRecord$12(value) || typeof value.operationId !== "string") throw new ToolOperationTransitionDenied("tool operation snapshot is invalid");
+	if (!Number.isInteger(value.revision) || value.revision < 1 || !isRecord$12(value.state)) throw new ToolOperationTransitionDenied("tool operation snapshot is invalid");
+	const binding = freezeToolOperationBinding(value.binding);
+	const state = readState$1(value.state);
+	const reconciliation = value.reconciliation === void 0 ? void 0 : readReconciliation(value.reconciliation);
+	if (value.revision === 1 && state.status !== "pending") throw new ToolOperationTransitionDenied("tool operation revision one must be pending");
+	if (state.status === "pending" || state.status === "reconciliation-required") {
+		if (reconciliation !== void 0) throw new ToolOperationTransitionDenied("tool operation reconciliation evidence is only terminal");
+	}
+	validateRevisionShape(value.revision, state, reconciliation);
+	if (reconciliation !== void 0 && reconciliation.outcome !== (state.status === "completed" ? "applied" : "not-applied")) throw new ToolOperationTransitionDenied("tool operation reconciliation outcome does not match state");
 	return {
-		id,
-		input: createPresentedValue(event.input),
-		kind: "tool",
-		label: "执行工具",
-		...output === void 0 ? {} : { output },
-		...skillId ? { skillId } : {},
-		startedAt: existing?.startedAt ?? event.occurredAt.toISOString(),
-		status: "running",
-		toolName: safeIdentifier(event.toolName)
+		...retainUnknownFields$2(value, [
+			"binding",
+			"operationId",
+			"reconciliation",
+			"revision",
+			"state"
+		]),
+		binding,
+		operationId: value.operationId,
+		...reconciliation === void 0 ? {} : { reconciliation },
+		revision: value.revision,
+		state
 	};
 }
-function finish(runId, phase, label, occurredAt, preferredText, fallbackText, stateFor, mutate, upsert) {
-	stateFor(runId);
-	const startedAt = occurredAt.toISOString();
-	return mutate(runId, (state) => {
-		state.phase = phase;
-		state.answer = preferredText?.trim() || state.answer.trim() || fallbackText?.trim() || state.answer;
-		for (const step of state.steps.values()) if (step.status === "running") state.steps.set(step.id, finishRunningStep(step, occurredAt, phase === "completed" ? "completed" : "failed"));
-		upsert(state, {
-			endedAt: occurredAt.toISOString(),
-			id: `response:${phase}`,
-			kind: "response",
-			label,
-			startedAt,
-			status: phase === "completed" ? "completed" : "failed"
-		});
+function readState$1(value) {
+	switch (value.status) {
+		case "pending": return {
+			...retainUnknownFields$2(value, ["status"]),
+			status: "pending"
+		};
+		case "aborted": return {
+			...retainUnknownFields$2(value, ["status"]),
+			status: "aborted"
+		};
+		case "reconciliation-required":
+			if (typeof value.reason !== "string" || value.reason.trim() === "") throw new ToolOperationTransitionDenied("tool operation reconciliation reason is invalid");
+			return {
+				...retainUnknownFields$2(value, ["reason", "status"]),
+				reason: value.reason,
+				status: "reconciliation-required"
+			};
+		case "completed":
+			if (!Object.hasOwn(value, "result")) throw new ToolOperationTransitionDenied("completed tool operation must contain a result");
+			try {
+				return {
+					...retainUnknownFields$2(value, ["result", "status"]),
+					result: freezeStableJson(value.result),
+					status: "completed"
+				};
+			} catch (error) {
+				if (error instanceof Error) throw new ToolOperationTransitionDenied(error.message);
+				throw error;
+			}
+		default: throw new ToolOperationTransitionDenied("tool operation state is invalid");
+	}
+}
+function normalizeReconciliationAction(action) {
+	if (!isRecord$12(action)) throw new ToolOperationTransitionDenied("tool operation reconciliation action is invalid");
+	const actorId = typeof action.actorId === "string" ? action.actorId.trim() : "";
+	const note = typeof action.note === "string" ? action.note.trim() : "";
+	if (!actorId) throw new ToolOperationTransitionDenied("recovery actor must not be empty");
+	if (!note) throw new ToolOperationTransitionDenied("recovery note must not be empty");
+	if (typeof action.at !== "string" || !Number.isFinite(Date.parse(action.at))) throw new ToolOperationTransitionDenied("recovery timestamp must be an ISO timestamp");
+	return Object.freeze({
+		actorId,
+		at: action.at,
+		note
+	});
+}
+function readReconciliation(value) {
+	if (!isRecord$12(value)) throw new ToolOperationTransitionDenied("tool operation reconciliation is invalid");
+	const action = normalizeReconciliationAction(value);
+	if (value.outcome !== "applied" && value.outcome !== "not-applied") throw new ToolOperationTransitionDenied("tool operation reconciliation outcome is invalid");
+	return Object.freeze({
+		...retainUnknownFields$2(value, [
+			"actorId",
+			"at",
+			"note",
+			"outcome"
+		]),
+		...action,
+		outcome: value.outcome
+	});
+}
+function isValidReconciliation(value) {
+	return value.actorId.trim().length > 0 && Number.isFinite(Date.parse(value.at)) && value.note.trim().length > 0 && (value.outcome === "applied" || value.outcome === "not-applied");
+}
+function sameReconciliation(left, right) {
+	if (left === void 0 || right === void 0) return left === right;
+	return left.actorId === right.actorId && left.at === right.at && left.note === right.note && left.outcome === right.outcome;
+}
+function freezeSnapshot(snapshot) {
+	const binding = freezeToolOperationBinding(snapshot.binding);
+	const state = freezeState(snapshot.state);
+	const reconciliation = snapshot.reconciliation === void 0 ? void 0 : readReconciliation(snapshot.reconciliation);
+	return Object.freeze({
+		...retainUnknownFields$2(snapshot, [
+			"binding",
+			"operationId",
+			"reconciliation",
+			"revision",
+			"state"
+		]),
+		binding,
+		operationId: snapshot.operationId,
+		...reconciliation === void 0 ? {} : { reconciliation },
+		revision: snapshot.revision,
+		state
+	});
+}
+function freezeState(state) {
+	if (state.status === "completed") return Object.freeze({
+		...retainUnknownFields$2(state, ["result", "status"]),
+		result: freezeStableJson(state.result),
+		status: "completed"
+	});
+	if (state.status === "reconciliation-required") return Object.freeze({
+		...retainUnknownFields$2(state, ["reason", "status"]),
+		reason: state.reason,
+		status: "reconciliation-required"
+	});
+	return Object.freeze({
+		...retainUnknownFields$2(state, ["status"]),
+		status: state.status
 	});
 }
-function finishRunningStep(step, occurredAt, status) {
-	return {
-		...step,
-		durationMs: elapsed(step.startedAt, occurredAt),
-		endedAt: occurredAt.toISOString(),
-		status
-	};
-}
-function completedTiming(state, id, occurredAt) {
-	const startedAt = state.steps.get(id)?.startedAt ?? occurredAt.toISOString();
-	return {
-		durationMs: elapsed(startedAt, occurredAt),
-		endedAt: occurredAt.toISOString(),
-		startedAt
-	};
+function validateRevisionShape(revision, state, reconciliation) {
+	if (state.status === "pending" && revision === 2) throw new ToolOperationTransitionDenied("pending tool operation revision is invalid");
+	if (state.status !== "pending" && revision === 1) throw new ToolOperationTransitionDenied("tool operation revision one must be pending");
+	if (reconciliation !== void 0 && revision < 3) throw new ToolOperationTransitionDenied("reconciled tool operation revision is invalid");
 }
-function elapsed(startedAt, endedAt) {
-	return Math.max(0, endedAt.getTime() - Date.parse(startedAt));
+function retainUnknownFields$2(value, known) {
+	const extensions = {};
+	const allowed = new Set(known);
+	for (const [key, entry] of Object.entries(value)) {
+		if (allowed.has(key)) continue;
+		extensions[key] = freezeStableJson(entry);
+	}
+	return extensions;
 }
-function safeIdentifier(value) {
-	return value.replace(/[^\p{L}\p{N}._:/-]+/gu, " ").trim().slice(0, 80) || "unknown";
+function isRecord$12(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 //#endregion
-//#region src/adapters/feishu/card-presentation/streaming/feishu-stream-projector.ts
-function createFeishuStreamProjector() {
-	const presentations = createRunPresentationProjector$1();
-	const applyEvent = (event, canonicalText) => {
-		const presentation = presentations.apply(event, canonicalText);
-		switch (event.type) {
-			case "agent_run_accepted":
-			case "agent_turn_started":
-			case "assistant_thinking_delta":
-			case "agent_turn_completed": return [];
-			case "agent_model_execution_started":
-			case "agent_model_execution_ended":
-			case "agent_skill_execution_started":
-			case "agent_skill_execution_ended":
-			case "agent_tool_execution_started":
-			case "agent_tool_execution_updated":
-			case "agent_tool_execution_ended": return presentation ? [{
-				presentation,
-				runId: event.runId,
-				type: "update_progress"
-			}] : [];
-			case "assistant_text_delta": return [{
-				runId: event.runId,
-				text: presentation?.answer.text ?? event.delta,
-				type: "update_text"
-			}];
-			case "agent_run_completed": return [{
-				...hasMeaningfulProgress(presentation) ? { presentation } : {},
-				runId: event.runId,
-				text: presentation?.answer.text.trim() || canonicalText?.trim() || event.finalText,
-				type: "finish"
-			}];
-			case "agent_run_failed": return [{
-				errorMessage: event.errorMessage,
-				...hasMeaningfulProgress(presentation) ? { presentation } : {},
-				runId: event.runId,
-				type: "fail"
-			}];
-			case "agent_run_cancelled": return [{
-				...hasMeaningfulProgress(presentation) ? { presentation } : {},
-				...event.reason ? { reason: event.reason } : {},
-				runId: event.runId,
-				type: "cancel"
-			}];
-		}
-	};
-	return {
-		apply: (event) => applyEvent(event),
-		applyUpdate: ({ event, state }) => event.type === "agent_run_failed" ? applyEvent({
-			...event,
-			errorMessage: state.errorMessage ?? event.errorMessage
-		}, state.finalText) : event.type === "agent_run_cancelled" ? applyEvent(state.cancellationReason ? {
-			...event,
-			reason: state.cancellationReason
-		} : event, state.finalText) : applyEvent(event, state.finalText)
-	};
+//#region src/core/domain/tool-operation/factories/create-tool-operation.ts
+function createToolOperation(input) {
+	return ToolOperation.create(input);
 }
-function hasMeaningfulProgress(presentation) {
-	return presentation !== void 0 && hasInspectableRunProgress(presentation);
+//#endregion
+//#region src/core/domain/tool-operation/factories/restore-tool-operation.ts
+function restoreToolOperation(snapshot) {
+	return ToolOperation.restore(snapshot);
 }
 //#endregion
-//#region src/adapters/feishu/card-presentation/delivery/feishu-card-delivery-ledger.ts
-function createFeishuCardDeliveryLedger(options = {}) {
-	const persist = options.persist;
-	return createCardDeliveryLedger(createInMemoryCardDeliveryRepository({
-		...options.initial === void 0 ? {} : { initial: options.initial },
-		...persist === void 0 ? {} : { persist: (record) => Effect.tryPromise({
-			try: () => persist(record),
-			catch: (error) => error
-		}) }
+//#region src/core/application/tool-execution/operation/tool-operation-ledger.ts
+var ToolOperationLedgerError = class extends Error {
+	name = "ToolOperationLedgerError";
+};
+function createToolOperationLedger$1(options = {}) {
+	const records = /* @__PURE__ */ new Map();
+	for (const snapshot of options.initial ?? []) {
+		const operation = restoreToolOperation(snapshot);
+		if (records.has(operation.operationId)) throw new ToolOperationLedgerError(`duplicate initial tool operation: ${operation.operationId}`);
+		records.set(operation.operationId, operation);
+	}
+	const semaphore = Effect.unsafeMakeSemaphore(1);
+	const exclusive = (effect) => semaphore.withPermits(1)(Effect.uninterruptible(effect));
+	const save = (operation) => {
+		const snapshot = operation.toSnapshot();
+		return (options.persist ? options.persist(snapshot) : Effect.void).pipe(Effect.tap(() => Effect.sync(() => {
+			records.set(operation.operationId, operation);
+		})));
+	};
+	const transition = (operationId, next) => exclusive(Effect.gen(function* () {
+		const operation = yield* Effect.try({
+			catch: (error) => error,
+			try: () => next(records.get(operationId))
+		});
+		yield* save(operation);
 	}));
-}
-function createFeishuCardDeliveryReconciler(options) {
-	return { reconcile: () => Effect.gen(function* () {
-		const projector = createFeishuStreamProjector();
-		const terminalByRun = /* @__PURE__ */ new Map();
-		for (const event of options.events) for (const action of projector.apply(event)) if (action.type === "cancel" || action.type === "fail" || action.type === "finish") terminalByRun.set(action.runId, action);
-		let repaired = 0;
-		let skipped = 0;
-		for (const [runId, action] of terminalByRun) {
-			if (options.ledger.isTerminalPublished(runId)) continue;
-			yield* options.publish(action).pipe(Effect.catchAll((error) => {
-				if (isMissingPresentationError(error)) {
-					skipped += 1;
-					return Effect.void;
+	return {
+		abort: (operationId, binding) => transition(operationId, (current) => requireBoundOperation(current, binding).abort()),
+		begin: (operationId, binding) => exclusive(Effect.gen(function* () {
+			const current = records.get(operationId);
+			if (!current) {
+				const created = createToolOperation({
+					binding,
+					operationId
+				});
+				yield* save(created);
+				return { status: "acquired" };
+			}
+			if (!current.matchesBinding(binding)) return {
+				reason: "operation id is bound to another invocation",
+				status: "blocked"
+			};
+			switch (current.state.status) {
+				case "completed": return {
+					result: current.state.result,
+					status: "completed"
+				};
+				case "pending": return {
+					reason: "operation is already in progress",
+					status: "blocked"
+				};
+				case "reconciliation-required": return {
+					reason: current.state.reason,
+					status: "blocked"
+				};
+				case "aborted": {
+					const retried = current.retry();
+					yield* save(retried);
+					return { status: "acquired" };
 				}
-				return Effect.fail(error);
-			}));
-			yield* options.ledger.markTerminal(runId);
-			repaired += 1;
-		}
-		return {
-			repaired,
-			skipped,
-			terminalRuns: terminalByRun.size
-		};
-	}) };
-}
-function isMissingPresentationError(error) {
-	return error !== null && typeof error === "object" && error._tag === "FeishuCardTargetNotFound";
-}
-//#endregion
-//#region src/platform/persistence/persistence-value.ts
-function isRecord$14(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value);
+			}
+		})),
+		complete: (operationId, binding, result) => transition(operationId, (current) => requireBoundOperation(current, binding).complete(result)),
+		inspect: (operationId, binding) => exclusive(Effect.sync(() => {
+			const current = records.get(operationId);
+			if (!current || current.state.status === "aborted" && current.matchesBinding(binding)) return { status: "missing" };
+			if (!current.matchesBinding(binding)) return {
+				reason: "operation id is bound to another invocation",
+				status: "blocked"
+			};
+			return current.state.status === "completed" ? {
+				result: current.state.result,
+				status: "completed"
+			} : {
+				reason: current.state.status === "reconciliation-required" ? current.state.reason : "operation is already in progress",
+				status: "blocked"
+			};
+		})),
+		reconciliationRequired: () => [...records.values()].filter((operation) => operation.state.status === "reconciliation-required").map((operation) => operation.toSnapshot()),
+		reconcile: (input) => exclusive(Effect.gen(function* () {
+			const current = records.get(input.operationId);
+			const operation = yield* Effect.try({
+				catch: (error) => error,
+				try: () => requireOperation(current).reconcile(input)
+			});
+			yield* save(operation);
+			return operation.toSnapshot();
+		})),
+		requireReconciliation: (operationId, binding, reason) => transition(operationId, (current) => requireBoundOperation(current, binding).requireReconciliation(reason)),
+		unresolvedForSource: (sourceMessageId) => [...records.values()].filter((operation) => operation.binding.sourceMessageId === sourceMessageId && (operation.state.status === "pending" || operation.state.status === "reconciliation-required")).map((operation) => operation.toSnapshot())
+	};
 }
-function isNodeErrorWithCode(error, code) {
-	return error instanceof Error && "code" in error && error.code === code;
+function requireOperation(operation) {
+	if (!operation) throw new Error("tool operation is not held by this invocation");
+	return operation;
 }
-//#endregion
-//#region src/platform/persistence/files/read-persistence-file.ts
-async function readPersistenceFile(filePath) {
-	try {
-		return await readFile(filePath, "utf8");
-	} catch (error) {
-		if (isNodeErrorWithCode(error, "ENOENT")) return void 0;
-		throw error;
-	}
+function requireBoundOperation(operation, binding) {
+	const current = requireOperation(operation);
+	if (!current.matchesBinding(binding)) throw new Error("operation id is bound to another invocation");
+	return current;
 }
-//#endregion
-//#region src/adapters/outbound/persistence/card-delivery/card-delivery-snapshot-codec.ts
-function encodeCardDeliverySnapshot(record) {
+function encodeToolOperationSnapshot(record) {
 	return JSON.stringify({
-		record: validateCardDeliveryRecord(record),
+		record,
 		version: 1
 	});
-}
-function decodeCardDeliverySnapshots(raw) {
-	const records = /* @__PURE__ */ new Map();
+}
+function decodeToolOperationSnapshots(raw) {
+	const latest = /* @__PURE__ */ new Map();
 	for (const [index, line] of raw.split("\n").entries()) {
-		if (line.trim().length === 0) continue;
-		const record = readEnvelope(line, index + 1);
-		const previous = records.get(record.runId);
-		try {
-			if (previous?.terminalPublished && isLegacyPostTerminalSequence(previous, record)) {
-				records.set(record.runId, { ...record });
-				continue;
-			}
-			records.set(record.runId, { ...validateCardDeliveryTransition(previous, record) });
-		} catch (error) {
-			throw new Error(`invalid card delivery revision at line ${index + 1}`, { cause: error });
-		}
+		if (!line.trim()) continue;
+		const operation = decodeToolOperationSnapshot(line, index + 1);
+		const previous = latest.get(operation.operationId);
+		if (operation.revision !== (previous?.revision ?? 0) + 1) throw new Error(`invalid tool operation revision at line ${index + 1}`);
+		if (previous ? !previous.validateTransitionTo(operation) : operation.reconciliation !== void 0 || operation.state.status !== "pending") throw new Error(`invalid tool operation transition at line ${index + 1}`);
+		latest.set(operation.operationId, operation);
 	}
-	return [...records.values()];
+	return [...latest.values()].map((operation) => operation.toSnapshot());
 }
-function readEnvelope(line, lineNumber) {
+function decodeToolOperationSnapshot(line, lineNumber) {
 	const envelope = JSON.parse(line);
-	if (!isRecord$14(envelope) || envelope.version !== 1 || !isCardDeliveryRecord(envelope.record)) throw new Error(`invalid card delivery snapshot at line ${lineNumber}`);
-	return envelope.record;
-}
-function isLegacyPostTerminalSequence(previous, next) {
-	return next.runId === previous.runId && next.revision === previous.revision + 1 && next.sequence === previous.sequence + 1 && next.terminalPublished;
-}
-function isCardDeliveryRecord(value) {
-	return isRecord$14(value) && Number.isSafeInteger(value.revision) && value.revision > 0 && typeof value.runId === "string" && value.runId.length > 0 && Number.isSafeInteger(value.sequence) && value.sequence >= 0 && typeof value.terminalPublished === "boolean";
+	if (!isRecord$14(envelope) || envelope.version !== 1) throw new Error(`invalid tool operation snapshot at line ${lineNumber}`);
+	try {
+		return restoreToolOperation(envelope.record);
+	} catch {
+		throw new Error(`invalid tool operation snapshot at line ${lineNumber}`);
+	}
 }
 //#endregion
-//#region src/adapters/outbound/persistence/card-delivery/jsonl-card-delivery-repository.ts
-function openJsonlCardDeliveryRepository(options) {
-	return Effect.tryPromise({
-		try: () => readPersistenceFile(options.filePath),
-		catch: (error) => error
-	}).pipe(Effect.flatMap((raw) => Effect.try({
-		try: () => raw === void 0 ? [] : decodeCardDeliverySnapshots(raw),
-		catch: (error) => error
-	})), Effect.map((initial) => createInMemoryCardDeliveryRepository({
-		initial,
-		persist: (record) => append(options.filePath, record)
-	})));
+//#region src/adapters/outbound/persistence/tool-operation/jsonl-tool-operation-ledger.ts
+function openJsonlToolOperationLedger$1(options) {
+	return Effect.gen(function* () {
+		const loaded = yield* load(options.filePath);
+		const initial = [];
+		for (const snapshot of loaded) {
+			const operation = restoreToolOperation(snapshot);
+			const recovered = operation.state.status === "pending" ? operation.recoverInterrupted() : operation;
+			if (recovered !== operation) yield* persist(options.filePath, recovered.toSnapshot());
+			initial.push(recovered.toSnapshot());
+		}
+		return createToolOperationLedger$1({
+			initial,
+			persist: (record) => persist(options.filePath, record)
+		});
+	});
 }
-function append(filePath, record) {
+function persist(filePath, record) {
 	return Effect.tryPromise({
+		catch: (error) => error,
 		try: async () => {
 			await mkdir(dirname(filePath), { recursive: true });
-			await appendFile(filePath, `${encodeCardDeliverySnapshot(record)}\n`, "utf8");
-		},
-		catch: (error) => error
+			await appendFile(filePath, `${encodeToolOperationSnapshot(record)}\n`, "utf8");
+		}
 	});
 }
-//#endregion
-//#region src/adapters/compatibility/card-presentation/jsonl-feishu-card-delivery-ledger.ts
-async function openJsonlFeishuCardDeliveryLedger(options) {
-	return Effect.runPromise(openJsonlCardDeliveryRepository(options).pipe(Effect.map(createCardDeliveryLedger)));
+function load(filePath) {
+	return Effect.tryPromise({
+		catch: (error) => error,
+		try: () => readPersistenceFile(filePath)
+	}).pipe(Effect.map((raw) => raw === void 0 ? [] : decodeToolOperationSnapshots(raw)));
 }
 //#endregion
-//#region src/platform/durable-queue/records/inbound-delivery-record.ts
-var InvalidInboundDelivery = class extends Error {
-	name = "InvalidInboundDelivery";
+//#region src/core/application/tool-execution/brokerage/tool-broker-ports.ts
+var ToolExecutorInputRejected = class extends Error {
+	name = "ToolExecutorInputRejected";
 };
-function createInboundDelivery(input) {
-	const delivery = {
-		acceptedAt: input.acceptedAt,
-		attempts: 0,
-		id: input.id,
-		laneKey: input.laneKey,
-		...input.metadata === void 0 ? {} : { metadata: input.metadata },
-		payload: input.payload,
-		revision: 1,
-		state: {
-			availableAt: input.acceptedAt,
-			status: "pending"
+//#endregion
+//#region src/core/application/tool-execution/brokerage/tool-broker.ts
+var ToolInvocationDenied = class extends Error {
+	name = "ToolInvocationDenied";
+};
+function createToolBroker$1(options) {
+	const operations = options.operations ?? createToolOperationLedger$1();
+	const hostTools = new Map(options.hostTools?.map((tool) => [tool.id, tool]) ?? []);
+	if (hostTools.size !== (options.hostTools?.length ?? 0)) throw new ToolInvocationDenied("duplicate Host Tool id");
+	return { execute: (request) => Effect.gen(function* () {
+		const prepared = yield* Effect.try({
+			catch: (error) => error,
+			try: () => prepareInvocation(hostTools, options.catalog, request)
+		});
+		const policy = yield* options.policy.current();
+		if (policy.revokedToolIds.includes(request.toolId)) return yield* Effect.fail(new ToolInvocationDenied(`tool has been revoked: ${request.toolId}`));
+		if (prepared.tool.idempotency === "required" && !request.operationId) return yield* Effect.fail(new ToolInvocationDenied(`tool requires a stable operation id: ${request.toolId}`));
+		if (requiresToolApproval$1(prepared.tool.risk) && !request.operationId) return yield* Effect.fail(new ToolInvocationDenied(`tool approval requires a stable operation id: ${request.toolId}`));
+		if (requiresToolApproval$1(prepared.tool.risk) && !request.approvalId) return yield* Effect.fail(new ToolInvocationDenied(`tool requires trusted approval: ${request.toolId}`));
+		const binding = yield* Effect.try({
+			catch: (error) => error,
+			try: () => createOperationBinding(prepared.authority, prepared.tool, request.input, options.digest)
+		});
+		const context = createExecutionContext(prepared.authority, request, policy.epoch, prepared.tool);
+		const replayCompleted = (result) => replay(prepared.tool, request.input, result, context);
+		if (request.operationId) {
+			const inspected = yield* operations.inspect(request.operationId, binding);
+			if (inspected.status === "completed") return yield* replayCompleted(inspected.result);
+			if (inspected.status === "blocked") return yield* Effect.fail(new ToolInvocationDenied(`tool operation is fenced: ${inspected.reason}`));
+		}
+		if (requiresToolApproval$1(prepared.tool.risk)) {
+			if (!(yield* options.approvals.consume({
+				agentId: prepared.authority.agentId,
+				approvalId: request.approvalId,
+				callId: request.callId,
+				inputDigest: binding.inputDigest,
+				instanceId: prepared.authority.instanceId,
+				operationId: request.operationId,
+				risk: prepared.tool.risk,
+				runId: prepared.authority.runId,
+				sessionKey: prepared.authority.sessionKey,
+				tenantKey: prepared.authority.tenantKey,
+				toolId: request.toolId,
+				toolVersion: prepared.tool.version
+			}))) return yield* Effect.fail(new ToolInvocationDenied(`tool approval is invalid or already consumed: ${request.toolId}`));
+		}
+		if (request.operationId) {
+			const reservation = yield* operations.begin(request.operationId, binding);
+			if (reservation.status === "completed") return yield* replayCompleted(reservation.result);
+			if (reservation.status === "blocked") return yield* Effect.fail(new ToolInvocationDenied(`tool operation is fenced: ${reservation.reason}`));
 		}
+		return yield* Effect.gen(function* () {
+			const result = yield* (yield* Effect.try({
+				catch: (error) => error,
+				try: () => prepared.tool.createExecutor({
+					toolId: prepared.tool.id,
+					toolVersion: prepared.tool.version
+				})
+			})).execute(request.input, context);
+			if (request.operationId) yield* operations.complete(request.operationId, binding, result);
+			return result;
+		}).pipe(Effect.catchAll((error) => {
+			if (!request.operationId) return Effect.fail(error);
+			return (prepared.tool.risk === "observe" || error instanceof ToolExecutorInputRejected ? operations.abort(request.operationId, binding) : operations.requireReconciliation(request.operationId, binding, error instanceof Error ? error.message : String(error))).pipe(Effect.zipRight(Effect.fail(error)));
+		}));
+	}) };
+}
+function prepareInvocation(hostTools, catalog, request) {
+	const authority = resolveInvocationAuthority(request.authority);
+	if (!authority.toolGrantSet.toolIds.includes(request.toolId)) throw new ToolInvocationDenied(`tool is not granted for this run: ${request.toolId}`);
+	const tool = hostTools.get(request.toolId) ?? catalog.snapshot().tools.find(({ id }) => id === request.toolId);
+	if (!tool) throw new ToolInvocationDenied(`tool is not present in the trusted catalog: ${request.toolId}`);
+	if (tool.version !== request.version) throw new ToolInvocationDenied(`tool version mismatch for ${request.toolId}: expected ${tool.version}`);
+	return {
+		authority,
+		tool
 	};
-	validateInboundDeliverySnapshot(delivery);
-	return freezeInboundDeliverySnapshot(delivery);
 }
-function freezeInboundDeliverySnapshot(delivery) {
-	const payload = cloneOpaqueValue(delivery.payload);
-	const metadata = delivery.metadata === void 0 ? void 0 : cloneOpaqueValue(delivery.metadata);
+function createOperationBinding(authority, tool, input, digest) {
+	let inputDigest;
+	try {
+		inputDigest = createToolInputDigest$1(input, digest);
+	} catch (error) {
+		if (error instanceof InvalidToolInput) throw new ToolInvocationDenied(`tool input is not stable JSON: ${tool.id}`);
+		throw error;
+	}
+	return {
+		agentId: authority.agentId,
+		inputDigest,
+		instanceId: authority.instanceId,
+		sourceMessageId: authority.sourceMessageId,
+		toolId: tool.id,
+		toolVersion: tool.version
+	};
+}
+function createExecutionContext(authority, request, policyEpoch, tool) {
 	return Object.freeze({
-		...delivery,
-		...metadata === void 0 ? {} : { metadata },
-		payload,
-		state: Object.freeze({ ...delivery.state }),
-		...delivery.recovery === void 0 ? {} : { recovery: Object.freeze({ ...delivery.recovery }) }
+		agentId: authority.agentId,
+		callId: request.callId,
+		instanceId: authority.instanceId,
+		...authority.memory === void 0 ? {} : { memory: authority.memory },
+		...request.operationId === void 0 ? {} : { operationId: request.operationId },
+		policyEpoch,
+		runId: authority.runId,
+		sessionKey: authority.sessionKey,
+		toolId: tool.id,
+		toolVersion: tool.version,
+		...authority.endpointId === void 0 ? {} : { origin: Object.freeze({
+			allowedActorOpenIds: Object.freeze(authority.allowedActorOpenIds ?? []),
+			endpointId: authority.endpointId,
+			tenantKey: authority.tenantKey,
+			...authority.conversationId === void 0 ? {} : { conversationId: authority.conversationId }
+		}) },
+		...authority.sourceMessageId ? { sourceMessageId: authority.sourceMessageId } : {}
 	});
 }
-function readInboundDeliverySnapshot(value) {
-	if (!isRecord$14(value)) throw new InvalidInboundDelivery("Inbound Delivery snapshot must be an object");
-	if (typeof value.acceptedAt !== "string" || typeof value.attempts !== "number" || typeof value.id !== "string" || typeof value.laneKey !== "string" || typeof value.revision !== "number" || !isRecord$14(value.state)) throw new InvalidInboundDelivery("Inbound Delivery snapshot is missing required fields");
-	const delivery = {
-		acceptedAt: value.acceptedAt,
-		attempts: value.attempts,
-		id: value.id,
-		laneKey: value.laneKey,
-		...value.metadata === void 0 ? {} : { metadata: value.metadata },
-		payload: value.payload,
-		...value.recovery === void 0 ? {} : { recovery: readRecoveryAudit(value.recovery) },
-		revision: value.revision,
-		state: readState$1(value.state)
+function replay(tool, input, result, context) {
+	if (!tool.replayCompleted) return Effect.succeed(result);
+	return Effect.try({
+		catch: (error) => error,
+		try: () => tool.replayCompleted(input, result, context)
+	}).pipe(Effect.flatMap((effect) => effect));
+}
+//#endregion
+//#region src/core/application/run-presentation/projection/conversation-progress.ts
+const DEFAULT_CONVERSATION_PROGRESS_DISPLAY = "collapsed";
+//#endregion
+//#region src/core/application/card-delivery/ledger/card-delivery.ts
+var CardDeliveryTransitionDenied = class extends Error {
+	name = "CardDeliveryTransitionDenied";
+};
+function reserveCardDeliverySequence(current, runId) {
+	const record = current ?? initialCardDeliveryRecord(runId);
+	assertCardDeliveryIdentity(record, runId);
+	if (record.terminalPublished) throw new CardDeliveryTransitionDenied(`card delivery for run ${runId} already has a terminal receipt`);
+	const next = {
+		...record,
+		revision: record.revision + 1,
+		sequence: record.sequence + 1
+	};
+	return {
+		record: next,
+		sequence: next.sequence
 	};
-	validateInboundDeliverySnapshot(delivery);
-	return freezeInboundDeliverySnapshot(delivery);
 }
-function assertNewInboundDelivery(delivery) {
-	validateInboundDeliverySnapshot(delivery);
-	if (delivery.revision !== 1 || delivery.attempts !== 0 || delivery.recovery !== void 0 || delivery.state.status !== "pending") throw new Error("new Inbound Delivery must start pending at revision 1 with zero attempts");
+function markCardDeliveryTerminal(current, runId) {
+	const record = current ?? initialCardDeliveryRecord(runId);
+	assertCardDeliveryIdentity(record, runId);
+	return record.terminalPublished ? record : {
+		...record,
+		revision: record.revision + 1,
+		terminalPublished: true
+	};
 }
-function validateInboundDeliverySnapshot(delivery) {
-	parseInboundDeliveryTimestamp(delivery.acceptedAt, "acceptance timestamp");
-	if (!nonEmpty$2(delivery.id)) throw new InvalidInboundDelivery("Inbound Delivery id must not be empty");
-	if (!nonEmpty$2(delivery.laneKey)) throw new InvalidInboundDelivery("Inbound Delivery lane must not be empty");
-	if (!Number.isSafeInteger(delivery.attempts) || delivery.attempts < 0) throw new InvalidInboundDelivery("Inbound Delivery attempts must be a non-negative integer");
-	if (!Number.isSafeInteger(delivery.revision) || delivery.revision < 1) throw new InvalidInboundDelivery("Inbound Delivery revision must be a positive integer");
-	if (delivery.recovery !== void 0) validateInboundDeliveryRecoveryAudit(delivery.recovery);
-	switch (delivery.state.status) {
-		case "pending":
-			parseInboundDeliveryTimestamp(delivery.state.availableAt, "availability timestamp");
-			return;
-		case "leased":
-			requireInboundDeliveryLease(delivery.state.leaseId, delivery.state.leasedAt, delivery.state.leaseExpiresAt);
-			return;
-		case "completed":
-			parseInboundDeliveryTimestamp(delivery.state.completedAt, "completion timestamp");
-			return;
-		case "dead":
-			parseInboundDeliveryTimestamp(delivery.state.failedAt, "failure timestamp");
-			if (!nonEmpty$2(delivery.state.reason)) throw new InvalidInboundDelivery("Inbound Delivery Dead Letter reason must not be empty");
-	}
+function validateCardDeliveryRecord(record) {
+	if (record.runId.trim().length === 0 || !Number.isSafeInteger(record.revision) || record.revision < 1 || !Number.isSafeInteger(record.sequence) || record.sequence < 0 || typeof record.terminalPublished !== "boolean") throw new CardDeliveryTransitionDenied("card delivery record is invalid");
+	return { ...record };
 }
-function parseInboundDeliveryTimestamp(value, label) {
-	const timestamp = Date.parse(value);
-	if (!Number.isFinite(timestamp)) throw new InvalidInboundDelivery(`Inbound Delivery ${label} is invalid`);
-	return timestamp;
+function validateCardDeliveryTransition(previous, next) {
+	validateCardDeliveryRecord(next);
+	if (previous === void 0) {
+		if (!(next.sequence === 1 && !next.terminalPublished || next.sequence === 0 && next.terminalPublished) || next.revision !== 1) throw new CardDeliveryTransitionDenied(`card delivery for run ${next.runId} has an invalid initial revision`);
+		return { ...next };
+	}
+	assertCardDeliveryIdentity(previous, next.runId);
+	if (next.revision !== previous.revision + 1) throw new CardDeliveryTransitionDenied(`card delivery for run ${next.runId} skipped a revision`);
+	if (previous.terminalPublished) throw new CardDeliveryTransitionDenied(`card delivery for run ${next.runId} changed after its terminal receipt`);
+	if (!(next.terminalPublished ? next.sequence === previous.sequence : next.sequence === previous.sequence + 1)) throw new CardDeliveryTransitionDenied(`card delivery for run ${next.runId} has an invalid sequence transition`);
+	return { ...next };
 }
-function readState$1(value) {
-	if (value.status === "pending" && typeof value.availableAt === "string") return {
-		availableAt: value.availableAt,
-		status: "pending"
-	};
-	if (value.status === "leased" && typeof value.leaseExpiresAt === "string" && typeof value.leaseId === "string" && typeof value.leasedAt === "string") return {
-		leaseExpiresAt: value.leaseExpiresAt,
-		leaseId: value.leaseId,
-		leasedAt: value.leasedAt,
-		status: "leased"
-	};
-	if (value.status === "completed" && typeof value.completedAt === "string") return {
-		completedAt: value.completedAt,
-		status: "completed"
+function initialCardDeliveryRecord(runId) {
+	if (runId.trim().length === 0) throw new CardDeliveryTransitionDenied("card delivery run id must not be empty");
+	return {
+		revision: 0,
+		runId,
+		sequence: 0,
+		terminalPublished: false
 	};
-	if (value.status === "dead" && typeof value.failedAt === "string" && typeof value.reason === "string") return {
-		failedAt: value.failedAt,
-		reason: value.reason,
-		status: "dead"
+}
+function assertCardDeliveryIdentity(record, runId) {
+	if (record.runId !== runId) throw new CardDeliveryTransitionDenied(`card delivery identity ${record.runId} does not match requested run ${runId}`);
+}
+//#endregion
+//#region src/core/application/card-delivery/ledger/card-delivery-ledger.ts
+function createCardDeliveryLedger(repository) {
+	return {
+		isTerminalPublished: (runId) => repository.get(runId)?.terminalPublished ?? false,
+		markTerminal: (runId) => repository.transact(runId, (current) => {
+			const next = markCardDeliveryTerminal(current, runId);
+			return next === current ? { result: void 0 } : {
+				next,
+				result: void 0
+			};
+		}),
+		reserveSequence: (runId) => repository.transact(runId, (current) => {
+			const reservation = reserveCardDeliverySequence(current, runId);
+			return {
+				next: reservation.record,
+				result: reservation.sequence
+			};
+		})
 	};
-	throw new InvalidInboundDelivery("Inbound Delivery state is invalid");
 }
-function readRecoveryAudit(value) {
-	if (!isRecord$14(value) || typeof value.actorId !== "string" || typeof value.at !== "string" || typeof value.note !== "string") throw new InvalidInboundDelivery("Inbound Delivery recovery audit is incomplete");
+//#endregion
+//#region src/adapters/outbound/persistence/card-delivery/in-memory-card-delivery-repository.ts
+function createInMemoryCardDeliveryRepository(options = {}) {
+	const records = new Map(options.initial?.map((record) => [record.runId, cloneRecord(record)]) ?? []);
+	const semaphore = Effect.unsafeMakeSemaphore(1);
 	return {
-		actorId: value.actorId,
-		at: value.at,
-		note: value.note
+		get: (runId) => cloneOptional(records.get(runId)),
+		transact: (runId, decide) => semaphore.withPermits(1)(Effect.uninterruptible(Effect.gen(function* () {
+			const current = cloneOptional(records.get(runId));
+			const decision = yield* Effect.try({
+				try: () => decide(current),
+				catch: (error) => error
+			});
+			if (!("next" in decision)) return decision.result;
+			const next = yield* Effect.try({
+				try: () => validateCardDeliveryTransition(current, decision.next),
+				catch: (error) => error
+			});
+			yield* options.persist?.(cloneRecord(next)) ?? Effect.void;
+			yield* Effect.sync(() => {
+				records.set(runId, cloneRecord(next));
+			});
+			return decision.result;
+		})))
 	};
 }
-function validateInboundDeliveryRecoveryAudit(recovery) {
-	if (!nonEmpty$2(recovery.actorId) || !nonEmpty$2(recovery.note)) throw new InvalidInboundDelivery("Inbound Delivery recovery audit is incomplete");
-	parseInboundDeliveryTimestamp(recovery.at, "recovery audit timestamp");
+function cloneOptional(record) {
+	return record === void 0 ? void 0 : cloneRecord(record);
 }
-function requireInboundDeliveryLease(leaseId, leasedAt, leaseExpiresAt) {
-	if (!nonEmpty$2(leaseId)) throw new InvalidInboundDelivery("Inbound Delivery lease id must not be empty");
-	const leasedAtMilliseconds = parseInboundDeliveryTimestamp(leasedAt, "lease timestamp");
-	if (parseInboundDeliveryTimestamp(leaseExpiresAt, "lease expiration") <= leasedAtMilliseconds) throw new InvalidInboundDelivery("Inbound Delivery lease expiration must be after its lease timestamp");
+function cloneRecord(record) {
+	return { ...validateCardDeliveryRecord(record) };
 }
-function nonEmpty$2(value) {
-	return value.trim().length > 0;
+//#endregion
+//#region src/core/application/run-presentation/projection/run-presentation.ts
+const RUN_PRESENTATION_SCHEMA_VERSION = 2;
+function hasInspectableRunProgress(presentation) {
+	return presentation.steps.some((step) => step.kind === "skill" || step.kind === "tool");
 }
-function cloneOpaqueValue(value) {
+//#endregion
+//#region src/core/application/run-presentation/projection/presented-value.ts
+const DEFAULT_MAX_COLLECTION_ITEMS = 20;
+const DEFAULT_MAX_DEPTH = 5;
+const DEFAULT_MAX_NODES = 100;
+const DEFAULT_MAX_STRING_CHARACTERS = 800;
+const SENSITIVE_KEY = /authorization|cookie|credential|password|passwd|private[-_]?key|secret|session[-_]?token|(?:^|[-_])token(?:$|[-_])|api[-_]?key|access[-_]?(?:key|token)|refresh[-_]?token|client[-_]?secret/i;
+const WORKING_DIRECTORY_KEY = /^(?:cwd|workdir|workingDirectory|workspace|workspaceRoot)$/i;
+const INLINE_SECRET = /\b(Bearer\s+)[^\s,;]+|\b(?:gh[opusr]_|sk-|xox[baprs]-)[A-Za-z0-9_-]{8,}/gi;
+const NAMED_SECRET_ARGUMENT = /((?:--?|\b)(?:authorization|password|passwd|secret|token|api[-_]?key|access[-_]?token)(?:\s+|=))([^\s,;]+)/gi;
+const SECRET_ENVIRONMENT_ASSIGNMENT = /\b([A-Z0-9_]*(?:PASSWORD|SECRET|TOKEN|API_KEY|ACCESS_KEY)=)([^\s,;]+)/g;
+function createPresentedValue(value, options = {}) {
+	return present(value, {
+		ancestors: /* @__PURE__ */ new Set(),
+		depth: 0,
+		maxCollectionItems: options.maxCollectionItems ?? DEFAULT_MAX_COLLECTION_ITEMS,
+		maxDepth: options.maxDepth ?? DEFAULT_MAX_DEPTH,
+		nodeBudget: { remaining: options.maxNodes ?? DEFAULT_MAX_NODES },
+		maxStringCharacters: options.maxStringCharacters ?? DEFAULT_MAX_STRING_CHARACTERS
+	});
+}
+function present(value, context, key) {
+	if (key && SENSITIVE_KEY.test(key)) return {
+		kind: "redacted",
+		reason: "sensitive-key"
+	};
+	if (context.nodeBudget.remaining <= 0) return {
+		kind: "unsupported",
+		valueType: "node-budget"
+	};
+	context.nodeBudget.remaining -= 1;
+	if (value === null) return { kind: "null" };
+	if (typeof value === "boolean") return {
+		kind: "boolean",
+		value
+	};
+	if (typeof value === "number") return Number.isFinite(value) ? {
+		kind: "number",
+		value
+	} : {
+		kind: "unsupported",
+		valueType: "number"
+	};
+	if (typeof value === "string") return presentText(value, context.maxStringCharacters, key);
+	if (typeof value !== "object") return {
+		kind: "unsupported",
+		valueType: typeof value
+	};
+	if (context.depth >= context.maxDepth) return {
+		kind: "unsupported",
+		valueType: "max-depth"
+	};
+	if (context.ancestors.has(value)) return {
+		kind: "unsupported",
+		valueType: "circular"
+	};
+	context.ancestors.add(value);
+	const nested = {
+		...context,
+		depth: context.depth + 1
+	};
 	try {
-		return deepFreeze$2(structuredClone(value));
-	} catch {
-		throw new InvalidInboundDelivery("Inbound Delivery opaque values must be cloneable");
+		if (Array.isArray(value)) {
+			const visibleLength = Math.min(value.length, context.maxCollectionItems);
+			const items = Array.from({ length: visibleLength }, (_, index) => Object.hasOwn(value, index) ? present(value[index], nested) : {
+				kind: "unsupported",
+				valueType: "array-hole"
+			});
+			return {
+				items,
+				kind: "list",
+				omittedItems: Math.max(0, value.length - items.length)
+			};
+		}
+		if (value instanceof Error) return {
+			entries: [{
+				key: "name",
+				value: present(value.name, nested, "name")
+			}, {
+				key: "message",
+				value: present(value.message, nested, "message")
+			}],
+			kind: "record",
+			omittedEntries: 0
+		};
+		const prototype = Object.getPrototypeOf(value);
+		if (prototype !== Object.prototype && prototype !== null) return {
+			kind: "unsupported",
+			valueType: prototype?.constructor?.name ?? "object"
+		};
+		const allEntries = Object.entries(value);
+		const entries = allEntries.slice(0, context.maxCollectionItems).map(([entryKey, entryValue]) => ({
+			key: safeKey(entryKey),
+			value: present(entryValue, nested, entryKey)
+		}));
+		return {
+			entries,
+			kind: "record",
+			omittedEntries: Math.max(0, allEntries.length - entries.length)
+		};
+	} finally {
+		context.ancestors.delete(value);
 	}
 }
-//#endregion
-//#region src/platform/durable-queue/records/inbound-delivery-transitions.ts
-function claimInboundDelivery(delivery, input) {
-	if (delivery.state.status !== "pending" || Date.parse(delivery.state.availableAt) > parseInboundDeliveryTimestamp(input.now, "claim timestamp")) throw new InvalidInboundDelivery(`Inbound Delivery is not claimable: ${delivery.id}`);
-	return leaseInboundDelivery(delivery, input);
-}
-function reclaimInboundDelivery(delivery, input) {
-	if (delivery.state.status !== "leased" || Date.parse(delivery.state.leaseExpiresAt) > parseInboundDeliveryTimestamp(input.now, "lease recovery timestamp")) throw new InvalidInboundDelivery(`Inbound Delivery lease has not expired: ${delivery.id}`);
-	return leaseInboundDelivery(delivery, input);
-}
-function renewInboundDelivery(delivery, input) {
-	const lease = requireCurrentLease(delivery, input.leaseId);
-	requireInboundDeliveryLease(input.leaseId, input.now, input.leaseExpiresAt);
-	const now = parseInboundDeliveryTimestamp(input.now, "renewal timestamp");
-	const expiresAt = parseInboundDeliveryTimestamp(input.leaseExpiresAt, "lease expiration");
-	if (now < Date.parse(lease.leasedAt) || now >= Date.parse(lease.leaseExpiresAt)) throw new InvalidInboundDelivery(`Inbound Delivery lease is not live at renewal: ${delivery.id}`);
-	if (expiresAt <= Date.parse(lease.leaseExpiresAt)) throw new InvalidInboundDelivery(`Inbound Delivery lease renewal must extend the lease: ${delivery.id}`);
-	return nextInboundDelivery(delivery, { state: {
-		...lease,
-		leaseExpiresAt: input.leaseExpiresAt
-	} });
+function presentText(value, maxCharacters, key) {
+	if (INLINE_SECRET.test(value)) {
+		INLINE_SECRET.lastIndex = 0;
+		value = value.replace(INLINE_SECRET, (_match, bearerPrefix) => bearerPrefix ? `${bearerPrefix}<redacted>` : "<redacted>");
+	}
+	INLINE_SECRET.lastIndex = 0;
+	value = value.replace(NAMED_SECRET_ARGUMENT, "$1<redacted>").replace(SECRET_ENVIRONMENT_ASSIGNMENT, "$1<redacted>");
+	value = normalizeMachinePaths(value, key);
+	const preview = value.slice(0, maxCharacters);
+	return {
+		kind: "text",
+		omittedCharacters: Math.max(0, value.length - preview.length),
+		value: preview
+	};
 }
-function completeInboundDelivery(delivery, input) {
-	requireCurrentLease(delivery, input.leaseId);
-	parseInboundDeliveryTimestamp(input.completedAt, "completion timestamp");
-	return nextInboundDelivery(delivery, { state: {
-		completedAt: input.completedAt,
-		status: "completed"
-	} });
+function normalizeMachinePaths(value, key) {
+	if (key && WORKING_DIRECTORY_KEY.test(key)) return "<workspace>";
+	return value.replace(/\/(?:Users|home)\/[^/\s]+/g, "<home>").replace(/\/(?:private\/)?tmp\/[^\s'";]*/g, (path) => `<tmp>/${path.split("/").at(-1) || "item"}`);
 }
-function failInboundDelivery(delivery, input) {
-	requireCurrentLease(delivery, input.leaseId);
-	parseInboundDeliveryTimestamp(input.failedAt, "failure timestamp");
-	if (input.terminal) {
-		if (input.reason.trim().length === 0) throw new InvalidInboundDelivery("Inbound Delivery Dead Letter reason must not be empty");
-		return nextInboundDelivery(delivery, { state: {
-			failedAt: input.failedAt,
-			reason: input.reason,
-			status: "dead"
-		} });
-	}
-	return releaseInboundDelivery(delivery, {
-		availableAt: input.availableAt ?? input.failedAt,
-		leaseId: input.leaseId
-	});
+function safeKey(value) {
+	return value.replace(/[^\p{L}\p{N}._:/-]+/gu, " ").trim().slice(0, 80) || "unknown";
 }
-function releaseInboundDelivery(delivery, input) {
-	requireCurrentLease(delivery, input.leaseId);
-	parseInboundDeliveryTimestamp(input.availableAt, "availability timestamp");
-	return nextInboundDelivery(delivery, { state: {
-		availableAt: input.availableAt,
-		status: "pending"
-	} });
+//#endregion
+//#region src/core/application/run-presentation/projection/run-presentation-projector.ts
+function createRunPresentationProjector$1() {
+	const runs = /* @__PURE__ */ new Map();
+	const stateFor = (runId) => {
+		const existing = runs.get(runId);
+		if (existing) return existing;
+		const created = {
+			answer: "",
+			answerStartedAt: void 0,
+			assistantSequence: 0,
+			currentSkillId: void 0,
+			order: [],
+			phase: "running",
+			revision: 0,
+			steps: /* @__PURE__ */ new Map()
+		};
+		runs.set(runId, created);
+		return created;
+	};
+	const snapshot = (runId) => {
+		const state = runs.get(runId);
+		if (!state) return void 0;
+		const visibleKeys = state.order.slice(-8);
+		return {
+			answer: {
+				format: "markdown",
+				text: state.answer
+			},
+			omittedStepCount: Math.max(0, state.order.length - visibleKeys.length),
+			phase: state.phase,
+			revision: state.revision,
+			runId,
+			schemaVersion: 2,
+			steps: visibleKeys.map((key) => state.steps.get(key)).filter((step) => step !== void 0),
+			totalStepCount: state.order.length,
+			totalToolCallCount: [...state.steps.values()].filter((step) => step.kind === "tool").length
+		};
+	};
+	const mutate = (runId, mutation) => {
+		const state = stateFor(runId);
+		mutation(state);
+		state.revision += 1;
+		return snapshot(runId);
+	};
+	const upsert = (state, step) => {
+		if (!state.steps.has(step.id)) state.order.push(step.id);
+		state.steps.set(step.id, step);
+	};
+	const commitAssistantNarration = (state, endedAt) => {
+		const text = state.answer.trim();
+		if (!text) return;
+		const id = `assistant:${state.assistantSequence + 1}`;
+		state.assistantSequence += 1;
+		const startedAt = state.answerStartedAt ?? endedAt.toISOString();
+		upsert(state, {
+			durationMs: elapsed(startedAt, endedAt),
+			endedAt: endedAt.toISOString(),
+			id,
+			kind: "assistant",
+			label: "过程说明",
+			startedAt,
+			status: "completed",
+			text
+		});
+		state.answer = "";
+		state.answerStartedAt = void 0;
+	};
+	return {
+		apply: (event, canonicalText) => {
+			switch (event.type) {
+				case "agent_run_accepted":
+					runs.set(event.runId, {
+						answer: "",
+						answerStartedAt: void 0,
+						assistantSequence: 0,
+						currentSkillId: void 0,
+						order: [],
+						phase: "running",
+						revision: 1,
+						steps: /* @__PURE__ */ new Map()
+					});
+					return snapshot(event.runId);
+				case "agent_turn_started": return mutate(event.runId, (state) => {
+					state.answer = "";
+					state.answerStartedAt = void 0;
+					state.currentSkillId = void 0;
+				});
+				case "agent_model_execution_started": return mutate(event.runId, (state) => {
+					state.answer = "";
+					state.answerStartedAt = void 0;
+					state.currentSkillId = void 0;
+					upsert(state, {
+						id: `model:${event.modelCallId}`,
+						kind: "model",
+						label: "分析问题",
+						model: safeIdentifier(event.model),
+						provider: safeIdentifier(event.provider),
+						startedAt: event.occurredAt.toISOString(),
+						status: "running"
+					});
+				});
+				case "agent_model_execution_ended": return mutate(event.runId, (state) => {
+					const id = `model:${event.modelCallId}`;
+					upsert(state, {
+						...completedTiming(state, id, event.occurredAt),
+						id,
+						kind: "model",
+						label: "分析问题",
+						model: safeIdentifier(event.responseModel ?? event.model),
+						provider: safeIdentifier(event.provider),
+						status: event.errorMessage ? "failed" : "completed"
+					});
+				});
+				case "agent_skill_execution_started": return mutate(event.runId, (state) => {
+					commitAssistantNarration(state, event.occurredAt);
+					state.currentSkillId = safeIdentifier(event.skillId);
+					upsert(state, {
+						id: `skill:${event.skillCallId}`,
+						kind: "skill",
+						label: "读取技能",
+						skillId: safeIdentifier(event.skillId),
+						startedAt: event.occurredAt.toISOString(),
+						status: "running"
+					});
+				});
+				case "agent_skill_execution_ended": return mutate(event.runId, (state) => {
+					const id = `skill:${event.skillCallId}`;
+					upsert(state, {
+						...completedTiming(state, id, event.occurredAt),
+						id,
+						kind: "skill",
+						label: "读取技能",
+						skillId: safeIdentifier(event.skillId),
+						status: event.isError ? "failed" : "completed"
+					});
+				});
+				case "agent_tool_execution_started": return mutate(event.runId, (state) => {
+					commitAssistantNarration(state, event.occurredAt);
+					upsert(state, runningToolStep(state, event));
+				});
+				case "agent_tool_execution_updated": return mutate(event.runId, (state) => {
+					upsert(state, runningToolStep(state, event));
+				});
+				case "agent_tool_execution_ended": return mutate(event.runId, (state) => {
+					const id = `tool:${event.toolCallId}`;
+					const existing = state.steps.get(id);
+					const startedAt = existing?.startedAt ?? event.occurredAt.toISOString();
+					const input = existing?.kind === "tool" ? existing.input : createPresentedValue(void 0);
+					upsert(state, {
+						durationMs: elapsed(startedAt, event.occurredAt),
+						endedAt: event.occurredAt.toISOString(),
+						...event.isError ? { error: createPresentedValue(event.result) } : { output: createPresentedValue(event.result) },
+						id,
+						input,
+						kind: "tool",
+						label: "执行工具",
+						...existing?.kind === "tool" && existing.skillId ? { skillId: existing.skillId } : {},
+						startedAt,
+						status: event.isError ? "failed" : "completed",
+						toolName: safeIdentifier(event.toolName)
+					});
+				});
+				case "assistant_text_delta": return mutate(event.runId, (state) => {
+					state.answerStartedAt ??= event.occurredAt.toISOString();
+					state.answer += event.delta;
+				});
+				case "assistant_thinking_delta":
+				case "agent_turn_completed": return snapshot(event.runId);
+				case "agent_run_completed": {
+					const result = finish(event.runId, "completed", "回答已完成", event.occurredAt, canonicalText, event.finalText, stateFor, mutate, upsert);
+					runs.delete(event.runId);
+					return result;
+				}
+				case "agent_run_failed": {
+					const result = finish(event.runId, "failed", "运行未完成", event.occurredAt, void 0, canonicalText, stateFor, mutate, upsert);
+					runs.delete(event.runId);
+					return result;
+				}
+				case "agent_run_cancelled": {
+					const result = finish(event.runId, "cancelled", "运行已取消", event.occurredAt, void 0, canonicalText, stateFor, mutate, upsert);
+					runs.delete(event.runId);
+					return result;
+				}
+			}
+		},
+		snapshot
+	};
 }
-function requeueInboundDelivery(delivery, input) {
-	if (delivery.state.status !== "dead" || delivery.revision !== input.expectedRevision) throw new InvalidInboundDelivery(`Inbound Delivery is not the expected Dead Letter revision: ${delivery.id}`);
-	validateInboundDeliveryRecoveryAudit(input.recovery);
-	if (input.availableAt !== input.recovery.at) throw new InvalidInboundDelivery("Inbound Delivery recovery availability must match its audit timestamp");
-	return nextInboundDelivery(delivery, {
-		attempts: 0,
-		recovery: input.recovery,
-		state: {
-			availableAt: input.availableAt,
-			status: "pending"
-		}
-	});
+function runningToolStep(state, event) {
+	const id = `tool:${event.toolCallId}`;
+	const existing = state.steps.get(id);
+	const skillId = existing?.kind === "tool" ? existing.skillId : state.currentSkillId;
+	const output = event.type === "agent_tool_execution_updated" ? createPresentedValue(event.partialResult) : existing?.kind === "tool" ? existing.output : void 0;
+	return {
+		id,
+		input: createPresentedValue(event.input),
+		kind: "tool",
+		label: "执行工具",
+		...output === void 0 ? {} : { output },
+		...skillId ? { skillId } : {},
+		startedAt: existing?.startedAt ?? event.occurredAt.toISOString(),
+		status: "running",
+		toolName: safeIdentifier(event.toolName)
+	};
 }
-function isValidInboundDeliveryTransition(previous, next) {
-	try {
-		validateInboundDeliverySnapshot(next);
-	} catch {
-		return false;
-	}
-	if (previous.id !== next.id || previous.acceptedAt !== next.acceptedAt || previous.laneKey !== next.laneKey || next.revision !== previous.revision + 1 || !sameOpaqueValue(previous.payload, next.payload) || !sameOpaqueValue(previous.metadata, next.metadata)) return false;
-	switch (previous.state.status) {
-		case "pending": return next.state.status === "leased" && next.attempts === previous.attempts + 1 && sameOpaqueValue(previous.recovery, next.recovery);
-		case "leased":
-			if (!sameOpaqueValue(previous.recovery, next.recovery)) return false;
-			if (next.state.status === "leased") {
-				const renewed = next.attempts === previous.attempts && next.state.leaseId === previous.state.leaseId && next.state.leasedAt === previous.state.leasedAt && Date.parse(next.state.leaseExpiresAt) > Date.parse(previous.state.leaseExpiresAt);
-				const reclaimed = next.attempts === previous.attempts + 1 && next.state.leaseId !== previous.state.leaseId && Date.parse(previous.state.leaseExpiresAt) <= Date.parse(next.state.leasedAt);
-				return renewed || reclaimed;
-			}
-			return next.attempts === previous.attempts && (next.state.status === "pending" || next.state.status === "completed" || next.state.status === "dead");
-		case "completed": return false;
-		case "dead": return next.state.status === "pending" && next.attempts === 0 && next.recovery !== void 0 && next.state.availableAt === next.recovery.at && !sameOpaqueValue(previous.recovery, next.recovery);
-	}
+function finish(runId, phase, label, occurredAt, preferredText, fallbackText, stateFor, mutate, upsert) {
+	stateFor(runId);
+	const startedAt = occurredAt.toISOString();
+	return mutate(runId, (state) => {
+		state.phase = phase;
+		state.answer = preferredText?.trim() || state.answer.trim() || fallbackText?.trim() || state.answer;
+		for (const step of state.steps.values()) if (step.status === "running") state.steps.set(step.id, finishRunningStep(step, occurredAt, phase === "completed" ? "completed" : "failed"));
+		upsert(state, {
+			endedAt: occurredAt.toISOString(),
+			id: `response:${phase}`,
+			kind: "response",
+			label,
+			startedAt,
+			status: phase === "completed" ? "completed" : "failed"
+		});
+	});
 }
-function sameOpaqueValue(left, right) {
-	if (Object.is(left, right)) return true;
-	if (Array.isArray(left) || Array.isArray(right)) return Array.isArray(left) && Array.isArray(right) && left.length === right.length && left.every((value, index) => sameOpaqueValue(value, right[index]));
-	if (!isRecord$14(left) || !isRecord$14(right)) return false;
-	const leftKeys = Object.keys(left).sort();
-	const rightKeys = Object.keys(right).sort();
-	return leftKeys.length === rightKeys.length && leftKeys.every((key, index) => key === rightKeys[index] && sameOpaqueValue(left[key], right[key]));
+function finishRunningStep(step, occurredAt, status) {
+	return {
+		...step,
+		durationMs: elapsed(step.startedAt, occurredAt),
+		endedAt: occurredAt.toISOString(),
+		status
+	};
 }
-function nextInboundDelivery(delivery, changes) {
-	const next = {
-		...delivery,
-		...changes,
-		revision: delivery.revision + 1
+function completedTiming(state, id, occurredAt) {
+	const startedAt = state.steps.get(id)?.startedAt ?? occurredAt.toISOString();
+	return {
+		durationMs: elapsed(startedAt, occurredAt),
+		endedAt: occurredAt.toISOString(),
+		startedAt
 	};
-	validateInboundDeliverySnapshot(next);
-	return freezeInboundDeliverySnapshot(next);
 }
-function leaseInboundDelivery(delivery, input) {
-	parseInboundDeliveryTimestamp(input.now, "lease timestamp");
-	requireInboundDeliveryLease(input.leaseId, input.now, input.leaseExpiresAt);
-	return nextInboundDelivery(delivery, {
-		attempts: delivery.attempts + 1,
-		state: {
-			leaseExpiresAt: input.leaseExpiresAt,
-			leaseId: input.leaseId,
-			leasedAt: input.now,
-			status: "leased"
-		}
-	});
+function elapsed(startedAt, endedAt) {
+	return Math.max(0, endedAt.getTime() - Date.parse(startedAt));
 }
-function requireCurrentLease(delivery, leaseId) {
-	if (delivery.state.status !== "leased" || delivery.state.leaseId !== leaseId) throw new InvalidInboundDelivery(`Inbound Delivery lease does not match: ${delivery.id}`);
-	return delivery.state;
+function safeIdentifier(value) {
+	return value.replace(/[^\p{L}\p{N}._:/-]+/gu, " ").trim().slice(0, 80) || "unknown";
 }
 //#endregion
-//#region src/platform/durable-queue/store/in-memory-durable-queue.ts
-function createInMemoryDurableQueueStore(options = {}) {
-	const deliveries = /* @__PURE__ */ new Map();
-	for (const delivery of options.initial ?? []) {
-		const restored = readInboundDeliverySnapshot(delivery);
-		if (deliveries.has(restored.id)) throw new Error(`duplicate Inbound Delivery snapshot: ${restored.id}`);
-		deliveries.set(restored.id, restored);
-	}
-	const serial = Effect.unsafeMakeSemaphore(1);
-	let lastLaneKey;
-	const save = (current, delivery) => {
-		const snapshot = readInboundDeliverySnapshot(current === void 0 ? delivery : resolveUpdate(current, delivery));
-		return (options.persist?.(readInboundDeliverySnapshot(snapshot)) ?? Effect.void).pipe(Effect.flatMap(() => Effect.sync(() => {
-			deliveries.set(snapshot.id, snapshot);
-		})));
+//#region src/adapters/feishu/card-presentation/streaming/feishu-stream-projector.ts
+function createFeishuStreamProjector() {
+	const presentations = createRunPresentationProjector$1();
+	const applyEvent = (event, canonicalText) => {
+		const presentation = presentations.apply(event, canonicalText);
+		switch (event.type) {
+			case "agent_run_accepted":
+			case "agent_turn_started":
+			case "assistant_thinking_delta":
+			case "agent_turn_completed": return [];
+			case "agent_model_execution_started":
+			case "agent_model_execution_ended":
+			case "agent_skill_execution_started":
+			case "agent_skill_execution_ended":
+			case "agent_tool_execution_started":
+			case "agent_tool_execution_updated":
+			case "agent_tool_execution_ended": return presentation ? [{
+				presentation,
+				runId: event.runId,
+				type: "update_progress"
+			}] : [];
+			case "assistant_text_delta": return [{
+				runId: event.runId,
+				text: presentation?.answer.text ?? event.delta,
+				type: "update_text"
+			}];
+			case "agent_run_completed": return [{
+				...hasMeaningfulProgress(presentation) ? { presentation } : {},
+				runId: event.runId,
+				text: presentation?.answer.text.trim() || canonicalText?.trim() || event.finalText,
+				type: "finish"
+			}];
+			case "agent_run_failed": return [{
+				errorMessage: event.errorMessage,
+				...hasMeaningfulProgress(presentation) ? { presentation } : {},
+				runId: event.runId,
+				type: "fail"
+			}];
+			case "agent_run_cancelled": return [{
+				...hasMeaningfulProgress(presentation) ? { presentation } : {},
+				...event.reason ? { reason: event.reason } : {},
+				runId: event.runId,
+				type: "cancel"
+			}];
+		}
 	};
-	const serialized = (effect) => serial.withPermits(1)(Effect.uninterruptible(effect));
 	return {
-		admit: (delivery, maxPending) => serialized(Effect.gen(function* () {
-			if (deliveries.has(delivery.id)) return "duplicate";
-			if (!Number.isSafeInteger(maxPending) || maxPending < 1) return yield* Effect.fail(/* @__PURE__ */ new Error("Inbound Delivery capacity must be a positive integer"));
-			if (pendingCount(deliveries) >= maxPending) return "capacity";
-			assertNewInboundDelivery(delivery);
-			yield* save(void 0, delivery);
-			return "created";
-		})),
-		claim: (input) => serialized(Effect.gen(function* () {
-			validateNow(input.now);
-			const now = Date.parse(input.now);
-			const leasedLanes = new Set([...deliveries.values()].filter((delivery) => delivery.state.status === "leased" && Date.parse(delivery.state.leaseExpiresAt) > now).map((delivery) => delivery.laneKey));
-			const eligible = [...deliveries.values()].filter((delivery) => !leasedLanes.has(delivery.laneKey) && (delivery.state.status === "pending" && Date.parse(delivery.state.availableAt) <= now || delivery.state.status === "leased" && Date.parse(delivery.state.leaseExpiresAt) <= now));
-			if (eligible.length === 0) return void 0;
-			const laneKeys = [...new Set(eligible.map((delivery) => delivery.laneKey))];
-			const laneKey = laneKeys[((lastLaneKey === void 0 ? -1 : laneKeys.indexOf(lastLaneKey)) + 1) % laneKeys.length];
-			const laneDeliveries = eligible.filter((delivery) => delivery.laneKey === laneKey);
-			const current = laneDeliveries.find((delivery) => delivery.state.status === "leased") ?? laneDeliveries[0];
-			const claimed = current.state.status === "leased" ? reclaimInboundDelivery(current, input) : claimInboundDelivery(current, input);
-			yield* save(current, claimed);
-			lastLaneKey = laneKey;
-			return readInboundDeliverySnapshot(claimed);
-		})),
-		claimById: (input) => serialized(Effect.gen(function* () {
-			validateNow(input.now);
-			const current = deliveries.get(input.id);
-			if (!current) return void 0;
-			if (current.state.status === "leased") {
-				if (Date.parse(current.state.leaseExpiresAt) > Date.parse(input.now)) return void 0;
-				const reclaimed = reclaimInboundDelivery(current, input);
-				yield* save(current, reclaimed);
-				return readInboundDeliverySnapshot(reclaimed);
-			}
-			if (current.state.status !== "pending" || Date.parse(current.state.availableAt) > Date.parse(input.now)) return;
-			const claimed = claimInboundDelivery(current, input);
-			yield* save(current, claimed);
-			return readInboundDeliverySnapshot(claimed);
-		})),
-		complete: (input) => serialized(mutateLeased(deliveries, input.id, input.leaseId, save, (current) => completeInboundDelivery(current, input))),
-		create: (delivery) => serialized(Effect.gen(function* () {
-			if (deliveries.has(delivery.id)) return false;
-			assertNewInboundDelivery(delivery);
-			yield* save(void 0, delivery);
-			return true;
-		})),
-		deadLetters: () => [...deliveries.values()].filter((delivery) => delivery.state.status === "dead").map((delivery) => readInboundDeliverySnapshot(delivery)),
-		fail: (input) => serialized(mutateLeased(deliveries, input.id, input.leaseId, save, (current) => failInboundDelivery(current, input))),
-		pendingCount: () => pendingCount(deliveries),
-		renew: (input) => serialized(Effect.gen(function* () {
-			const current = requireDelivery(deliveries, input.id);
-			const renewed = renewInboundDelivery(current, input);
-			yield* save(current, renewed);
-			return readInboundDeliverySnapshot(renewed);
-		})),
-		requeueDeadLetter: (input) => serialized(Effect.gen(function* () {
-			const current = requireDelivery(deliveries, input.id);
-			const requeued = requeueInboundDelivery(current, input);
-			yield* save(current, requeued);
-			return readInboundDeliverySnapshot(requeued);
-		})),
-		release: (input) => serialized(mutateLeased(deliveries, input.id, input.leaseId, save, (current) => releaseInboundDelivery(current, input)))
+		apply: (event) => applyEvent(event),
+		applyUpdate: ({ event, state }) => event.type === "agent_run_failed" ? applyEvent({
+			...event,
+			errorMessage: state.errorMessage ?? event.errorMessage
+		}, state.finalText) : event.type === "agent_run_cancelled" ? applyEvent(state.cancellationReason ? {
+			...event,
+			reason: state.cancellationReason
+		} : event, state.finalText) : applyEvent(event, state.finalText)
 	};
 }
-function mutateLeased(deliveries, id, leaseId, save, transition) {
-	return Effect.gen(function* () {
-		const current = requireDelivery(deliveries, id);
-		if (current.state.status !== "leased" || current.state.leaseId !== leaseId) return yield* Effect.fail(/* @__PURE__ */ new Error(`Inbound Delivery lease does not match: ${id}`));
-		yield* save(current, transition(current));
+function hasMeaningfulProgress(presentation) {
+	return presentation !== void 0 && hasInspectableRunProgress(presentation);
+}
+//#endregion
+//#region src/adapters/feishu/card-presentation/delivery/feishu-card-delivery-ledger.ts
+function createFeishuCardDeliveryLedger(options = {}) {
+	const persist = options.persist;
+	return createCardDeliveryLedger(createInMemoryCardDeliveryRepository({
+		...options.initial === void 0 ? {} : { initial: options.initial },
+		...persist === void 0 ? {} : { persist: (record) => Effect.tryPromise({
+			try: () => persist(record),
+			catch: (error) => error
+		}) }
+	}));
+}
+function createFeishuCardDeliveryReconciler(options) {
+	return { reconcile: () => Effect.gen(function* () {
+		const projector = createFeishuStreamProjector();
+		const terminalByRun = /* @__PURE__ */ new Map();
+		for (const event of options.events) for (const action of projector.apply(event)) if (action.type === "cancel" || action.type === "fail" || action.type === "finish") terminalByRun.set(action.runId, action);
+		let repaired = 0;
+		let skipped = 0;
+		for (const [runId, action] of terminalByRun) {
+			if (options.ledger.isTerminalPublished(runId)) continue;
+			yield* options.publish(action).pipe(Effect.catchAll((error) => {
+				if (isMissingPresentationError(error)) {
+					skipped += 1;
+					return Effect.void;
+				}
+				return Effect.fail(error);
+			}));
+			yield* options.ledger.markTerminal(runId);
+			repaired += 1;
+		}
+		return {
+			repaired,
+			skipped,
+			terminalRuns: terminalByRun.size
+		};
+	}) };
+}
+function isMissingPresentationError(error) {
+	return error !== null && typeof error === "object" && error._tag === "FeishuCardTargetNotFound";
+}
+//#endregion
+//#region src/adapters/outbound/persistence/card-delivery/card-delivery-snapshot-codec.ts
+function encodeCardDeliverySnapshot(record) {
+	return JSON.stringify({
+		record: validateCardDeliveryRecord(record),
+		version: 1
 	});
 }
-function resolveUpdate(current, next) {
-	if (!isValidInboundDeliveryTransition(current, next)) throw new Error(`invalid Inbound Delivery transition: ${current.id}`);
-	return next;
+function decodeCardDeliverySnapshots(raw) {
+	const records = /* @__PURE__ */ new Map();
+	for (const [index, line] of raw.split("\n").entries()) {
+		if (line.trim().length === 0) continue;
+		const record = readEnvelope(line, index + 1);
+		const previous = records.get(record.runId);
+		try {
+			if (previous?.terminalPublished && isLegacyPostTerminalSequence(previous, record)) {
+				records.set(record.runId, { ...record });
+				continue;
+			}
+			records.set(record.runId, { ...validateCardDeliveryTransition(previous, record) });
+		} catch (error) {
+			throw new Error(`invalid card delivery revision at line ${index + 1}`, { cause: error });
+		}
+	}
+	return [...records.values()];
 }
-function requireDelivery(deliveries, id) {
-	const current = deliveries.get(id);
-	if (!current) throw new Error(`Inbound Delivery does not exist: ${id}`);
-	return current;
+function readEnvelope(line, lineNumber) {
+	const envelope = JSON.parse(line);
+	if (!isRecord$14(envelope) || envelope.version !== 1 || !isCardDeliveryRecord(envelope.record)) throw new Error(`invalid card delivery snapshot at line ${lineNumber}`);
+	return envelope.record;
 }
-function pendingCount(deliveries) {
-	return [...deliveries.values()].filter((delivery) => delivery.state.status === "pending" || delivery.state.status === "leased").length;
+function isLegacyPostTerminalSequence(previous, next) {
+	return next.runId === previous.runId && next.revision === previous.revision + 1 && next.sequence === previous.sequence + 1 && next.terminalPublished;
 }
-function validateNow(now) {
-	if (!Number.isFinite(Date.parse(now))) throw new Error("Inbound Delivery claim timestamp is invalid");
+function isCardDeliveryRecord(value) {
+	return isRecord$14(value) && Number.isSafeInteger(value.revision) && value.revision > 0 && typeof value.runId === "string" && value.runId.length > 0 && Number.isSafeInteger(value.sequence) && value.sequence >= 0 && typeof value.terminalPublished === "boolean";
 }
 //#endregion
-//#region src/adapters/compatibility/inbound-delivery/feishu-inbox-repository.ts
-const inboundStores = /* @__PURE__ */ new WeakMap();
-function createFeishuInboxRepository(options = {}) {
-	return fromDurableQueueStore(createInMemoryDurableQueueStore({
-		...options.initial ? { initial: options.initial.map(toInboundDelivery) } : {},
-		...options.persist ? { persist: (delivery) => Effect.tryPromise({
-			catch: (error) => error,
-			try: () => options.persist(fromInboundDelivery(delivery))
-		}) } : {}
-	}));
+//#region src/adapters/outbound/persistence/card-delivery/jsonl-card-delivery-repository.ts
+function openJsonlCardDeliveryRepository(options) {
+	return Effect.tryPromise({
+		try: () => readPersistenceFile(options.filePath),
+		catch: (error) => error
+	}).pipe(Effect.flatMap((raw) => Effect.try({
+		try: () => raw === void 0 ? [] : decodeCardDeliverySnapshots(raw),
+		catch: (error) => error
+	})), Effect.map((initial) => createInMemoryCardDeliveryRepository({
+		initial,
+		persist: (record) => append(options.filePath, record)
+	})));
 }
-function fromDurableQueueStore(repository) {
-	const facade = {
-		admit: (delivery, maxPending) => repository.admit(toInboundDelivery(delivery), maxPending),
-		claim: (input) => repository.claim(input).pipe(Effect.map(mapOptionalFromInboundDelivery)),
-		claimById: (input) => repository.claimById(input).pipe(Effect.map(mapOptionalFromInboundDelivery)),
-		complete: (input) => repository.complete(input),
-		create: (delivery) => repository.create(toInboundDelivery(delivery)),
-		deadLetters: () => repository.deadLetters().map(fromInboundDelivery),
-		fail: (input) => repository.fail(input),
-		pendingCount: () => repository.pendingCount(),
-		requeueDeadLetter: (input) => repository.requeueDeadLetter(input).pipe(Effect.map(fromInboundDelivery)),
-		release: (input) => repository.release(input)
-	};
-	inboundStores.set(facade, repository);
-	return facade;
+function append(filePath, record) {
+	return Effect.tryPromise({
+		try: async () => {
+			await mkdir(dirname(filePath), { recursive: true });
+			await appendFile(filePath, `${encodeCardDeliverySnapshot(record)}\n`, "utf8");
+		},
+		catch: (error) => error
+	});
 }
-function toDurableQueueStore(repository) {
-	const existing = inboundStores.get(repository);
-	if (existing) return existing;
-	return {
-		admit: (delivery, maxPending) => repository.admit(fromInboundDelivery(delivery), maxPending),
-		claim: (input) => repository.claim(input).pipe(Effect.map(mapOptionalToInboundDelivery)),
-		claimById: (input) => repository.claimById(input).pipe(Effect.map(mapOptionalToInboundDelivery)),
-		complete: (input) => repository.complete(input),
-		create: (delivery) => repository.create(fromInboundDelivery(delivery)),
-		deadLetters: () => repository.deadLetters().map(toInboundDelivery),
-		fail: (input) => repository.fail(input),
-		pendingCount: () => repository.pendingCount(),
-		renew: (input) => Effect.fail(/* @__PURE__ */ new Error(`legacy Feishu Inbox Repository cannot renew lease: ${input.id}`)),
-		requeueDeadLetter: (input) => repository.requeueDeadLetter(input).pipe(Effect.map(toInboundDelivery)),
-		release: (input) => repository.release(input)
+//#endregion
+//#region src/adapters/compatibility/card-presentation/jsonl-feishu-card-delivery-ledger.ts
+async function openJsonlFeishuCardDeliveryLedger(options) {
+	return Effect.runPromise(openJsonlCardDeliveryRepository(options).pipe(Effect.map(createCardDeliveryLedger)));
+}
+//#endregion
+//#region src/platform/durable-queue/records/inbound-delivery-record.ts
+var InvalidInboundDelivery = class extends Error {
+	name = "InvalidInboundDelivery";
+};
+function createInboundDelivery(input) {
+	const delivery = {
+		acceptedAt: input.acceptedAt,
+		attempts: 0,
+		id: input.id,
+		laneKey: input.laneKey,
+		...input.metadata === void 0 ? {} : { metadata: input.metadata },
+		payload: input.payload,
+		revision: 1,
+		state: {
+			availableAt: input.acceptedAt,
+			status: "pending"
+		}
 	};
+	validateInboundDeliverySnapshot(delivery);
+	return freezeInboundDeliverySnapshot(delivery);
 }
-function toInboundDelivery(delivery) {
-	const { options, ...shared } = delivery;
-	return readInboundDeliverySnapshot({
-		...shared,
-		...options === void 0 ? {} : { metadata: options }
+function freezeInboundDeliverySnapshot(delivery) {
+	const payload = cloneOpaqueValue(delivery.payload);
+	const metadata = delivery.metadata === void 0 ? void 0 : cloneOpaqueValue(delivery.metadata);
+	return Object.freeze({
+		...delivery,
+		...metadata === void 0 ? {} : { metadata },
+		payload,
+		state: Object.freeze({ ...delivery.state }),
+		...delivery.recovery === void 0 ? {} : { recovery: Object.freeze({ ...delivery.recovery }) }
 	});
 }
-function fromInboundDelivery(delivery) {
-	const { metadata, ...shared } = delivery;
-	return {
-		...shared,
-		...metadata === void 0 ? {} : { options: metadata }
+function readInboundDeliverySnapshot(value) {
+	if (!isRecord$14(value)) throw new InvalidInboundDelivery("Inbound Delivery snapshot must be an object");
+	if (typeof value.acceptedAt !== "string" || typeof value.attempts !== "number" || typeof value.id !== "string" || typeof value.laneKey !== "string" || typeof value.revision !== "number" || !isRecord$14(value.state)) throw new InvalidInboundDelivery("Inbound Delivery snapshot is missing required fields");
+	const delivery = {
+		acceptedAt: value.acceptedAt,
+		attempts: value.attempts,
+		id: value.id,
+		laneKey: value.laneKey,
+		...value.metadata === void 0 ? {} : { metadata: value.metadata },
+		payload: value.payload,
+		...value.recovery === void 0 ? {} : { recovery: readRecoveryAudit(value.recovery) },
+		revision: value.revision,
+		state: readState(value.state)
 	};
+	validateInboundDeliverySnapshot(delivery);
+	return freezeInboundDeliverySnapshot(delivery);
 }
-function mapOptionalFromInboundDelivery(delivery) {
-	return delivery === void 0 ? void 0 : fromInboundDelivery(delivery);
+function assertNewInboundDelivery(delivery) {
+	validateInboundDeliverySnapshot(delivery);
+	if (delivery.revision !== 1 || delivery.attempts !== 0 || delivery.recovery !== void 0 || delivery.state.status !== "pending") throw new Error("new Inbound Delivery must start pending at revision 1 with zero attempts");
 }
-function mapOptionalToInboundDelivery(delivery) {
-	return delivery === void 0 ? void 0 : toInboundDelivery(delivery);
+function validateInboundDeliverySnapshot(delivery) {
+	parseInboundDeliveryTimestamp(delivery.acceptedAt, "acceptance timestamp");
+	if (!nonEmpty$2(delivery.id)) throw new InvalidInboundDelivery("Inbound Delivery id must not be empty");
+	if (!nonEmpty$2(delivery.laneKey)) throw new InvalidInboundDelivery("Inbound Delivery lane must not be empty");
+	if (!Number.isSafeInteger(delivery.attempts) || delivery.attempts < 0) throw new InvalidInboundDelivery("Inbound Delivery attempts must be a non-negative integer");
+	if (!Number.isSafeInteger(delivery.revision) || delivery.revision < 1) throw new InvalidInboundDelivery("Inbound Delivery revision must be a positive integer");
+	if (delivery.recovery !== void 0) validateInboundDeliveryRecoveryAudit(delivery.recovery);
+	switch (delivery.state.status) {
+		case "pending":
+			parseInboundDeliveryTimestamp(delivery.state.availableAt, "availability timestamp");
+			return;
+		case "leased":
+			requireInboundDeliveryLease(delivery.state.leaseId, delivery.state.leasedAt, delivery.state.leaseExpiresAt);
+			return;
+		case "completed":
+			parseInboundDeliveryTimestamp(delivery.state.completedAt, "completion timestamp");
+			return;
+		case "dead":
+			parseInboundDeliveryTimestamp(delivery.state.failedAt, "failure timestamp");
+			if (!nonEmpty$2(delivery.state.reason)) throw new InvalidInboundDelivery("Inbound Delivery Dead Letter reason must not be empty");
+	}
 }
-//#endregion
-//#region src/core/application/recovery/commands/recovery-action.ts
-var InvalidRecoveryAction = class extends Error {
-	name = "InvalidRecoveryAction";
-};
-function createRecoveryAction(input) {
-	const actorId = input.actorId.trim();
-	const note = input.note.trim();
-	if (actorId.length === 0) throw new InvalidRecoveryAction("recovery actor must not be empty");
-	if (note.length === 0) throw new InvalidRecoveryAction("recovery note must not be empty");
-	if (!Number.isFinite(Date.parse(input.at))) throw new InvalidRecoveryAction("recovery timestamp must be an ISO timestamp");
-	return Object.freeze({
-		actorId,
-		at: input.at,
-		note
-	});
+function parseInboundDeliveryTimestamp(value, label) {
+	const timestamp = Date.parse(value);
+	if (!Number.isFinite(timestamp)) throw new InvalidInboundDelivery(`Inbound Delivery ${label} is invalid`);
+	return timestamp;
+}
+function readState(value) {
+	if (value.status === "pending" && typeof value.availableAt === "string") return {
+		availableAt: value.availableAt,
+		status: "pending"
+	};
+	if (value.status === "leased" && typeof value.leaseExpiresAt === "string" && typeof value.leaseId === "string" && typeof value.leasedAt === "string") return {
+		leaseExpiresAt: value.leaseExpiresAt,
+		leaseId: value.leaseId,
+		leasedAt: value.leasedAt,
+		status: "leased"
+	};
+	if (value.status === "completed" && typeof value.completedAt === "string") return {
+		completedAt: value.completedAt,
+		status: "completed"
+	};
+	if (value.status === "dead" && typeof value.failedAt === "string" && typeof value.reason === "string") return {
+		failedAt: value.failedAt,
+		reason: value.reason,
+		status: "dead"
+	};
+	throw new InvalidInboundDelivery("Inbound Delivery state is invalid");
 }
-//#endregion
-//#region src/core/domain/tool-operation/value-objects/stable-tool-input.ts
-function freezeStableJson(value) {
-	return deepFreeze$1(canonicalize(value, /* @__PURE__ */ new Set()));
+function readRecoveryAudit(value) {
+	if (!isRecord$14(value) || typeof value.actorId !== "string" || typeof value.at !== "string" || typeof value.note !== "string") throw new InvalidInboundDelivery("Inbound Delivery recovery audit is incomplete");
+	return {
+		actorId: value.actorId,
+		at: value.at,
+		note: value.note
+	};
 }
-var StableToolOperationValueError = class extends Error {
-	name = "StableToolOperationValueError";
-};
-function canonicalize(value, ancestors) {
-	if (value === null || typeof value === "string" || typeof value === "boolean") return value;
-	if (typeof value === "number") {
-		if (!Number.isFinite(value)) throw new StableToolOperationValueError("stable JSON numbers must be finite");
-		return Object.is(value, -0) ? 0 : value;
-	}
-	if (typeof value !== "object") throw new StableToolOperationValueError("value must contain only stable JSON values");
-	if (ancestors.has(value)) throw new StableToolOperationValueError("stable JSON must not contain cycles");
-	ancestors.add(value);
-	try {
-		if (Array.isArray(value)) return Array.from({ length: value.length }, (_, index) => {
-			if (!Object.hasOwn(value, index)) throw new StableToolOperationValueError("stable JSON arrays must not contain holes");
-			return canonicalize(value[index], ancestors);
-		});
-		const prototype = Object.getPrototypeOf(value);
-		if (prototype !== Object.prototype && prototype !== null) throw new StableToolOperationValueError("stable JSON objects must be plain objects");
-		return Object.fromEntries(Object.entries(value).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, entry]) => [key, canonicalize(entry, ancestors)]));
-	} finally {
-		ancestors.delete(value);
-	}
+function validateInboundDeliveryRecoveryAudit(recovery) {
+	if (!nonEmpty$2(recovery.actorId) || !nonEmpty$2(recovery.note)) throw new InvalidInboundDelivery("Inbound Delivery recovery audit is incomplete");
+	parseInboundDeliveryTimestamp(recovery.at, "recovery audit timestamp");
 }
-function deepFreeze$1(value) {
-	if (Array.isArray(value)) {
-		for (const entry of value) deepFreeze$1(entry);
-		return Object.freeze(value);
-	}
-	if (value !== null && typeof value === "object") {
-		for (const entry of Object.values(value)) deepFreeze$1(entry);
-		return Object.freeze(value);
-	}
-	return value;
+function requireInboundDeliveryLease(leaseId, leasedAt, leaseExpiresAt) {
+	if (!nonEmpty$2(leaseId)) throw new InvalidInboundDelivery("Inbound Delivery lease id must not be empty");
+	const leasedAtMilliseconds = parseInboundDeliveryTimestamp(leasedAt, "lease timestamp");
+	if (parseInboundDeliveryTimestamp(leaseExpiresAt, "lease expiration") <= leasedAtMilliseconds) throw new InvalidInboundDelivery("Inbound Delivery lease expiration must be after its lease timestamp");
 }
-//#endregion
-//#region src/core/domain/tool-operation/value-objects/binding.ts
-var ToolOperationBindingError = class extends Error {
-	name = "ToolOperationBindingError";
-};
-function freezeToolOperationBinding(value) {
-	if (!isRecord$13(value)) throw new ToolOperationBindingError("tool operation binding must be an object");
-	let detached;
+function nonEmpty$2(value) {
+	return value.trim().length > 0;
+}
+function cloneOpaqueValue(value) {
 	try {
-		detached = freezeStableJson(value);
-	} catch (error) {
-		if (error instanceof Error) throw new ToolOperationBindingError(error.message);
-		throw error;
+		return deepFreeze$2(structuredClone(value));
+	} catch {
+		throw new InvalidInboundDelivery("Inbound Delivery opaque values must be cloneable");
 	}
-	if ([
-		"agentId",
-		"inputDigest",
-		"instanceId",
-		"sourceMessageId",
-		"toolId",
-		"toolVersion"
-	].some((field) => typeof detached[field] !== "string" || detached[field] === "")) throw new ToolOperationBindingError("tool operation binding fields must be non-empty strings");
-	return detached;
 }
-function sameToolOperationBinding(left, right) {
-	return left.agentId === right.agentId && left.inputDigest === right.inputDigest && left.instanceId === right.instanceId && left.sourceMessageId === right.sourceMessageId && left.toolId === right.toolId && left.toolVersion === right.toolVersion;
+//#endregion
+//#region src/platform/durable-queue/records/inbound-delivery-transitions.ts
+function claimInboundDelivery(delivery, input) {
+	if (delivery.state.status !== "pending" || Date.parse(delivery.state.availableAt) > parseInboundDeliveryTimestamp(input.now, "claim timestamp")) throw new InvalidInboundDelivery(`Inbound Delivery is not claimable: ${delivery.id}`);
+	return leaseInboundDelivery(delivery, input);
 }
-function isRecord$13(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value);
+function reclaimInboundDelivery(delivery, input) {
+	if (delivery.state.status !== "leased" || Date.parse(delivery.state.leaseExpiresAt) > parseInboundDeliveryTimestamp(input.now, "lease recovery timestamp")) throw new InvalidInboundDelivery(`Inbound Delivery lease has not expired: ${delivery.id}`);
+	return leaseInboundDelivery(delivery, input);
 }
-//#endregion
-//#region src/core/domain/tool-operation/aggregate/tool-operation.ts
-var ToolOperationTransitionDenied = class extends Error {
-	name = "ToolOperationTransitionDenied";
-};
-/** Immutable transitions do not serialize concurrent writes; the ledger serializes persisted transitions. */
-var ToolOperation = class ToolOperation {
-	#snapshot;
-	constructor(snapshot) {
-		this.#snapshot = freezeSnapshot(snapshot);
-		Object.freeze(this);
-	}
-	static create(input) {
-		if (typeof input.operationId !== "string") throw new ToolOperationTransitionDenied("tool operation id must be a string");
-		return new ToolOperation({
-			binding: freezeToolOperationBinding(input.binding),
-			operationId: input.operationId,
-			revision: 1,
-			state: { status: "pending" }
-		});
-	}
-	static restore(value) {
-		return new ToolOperation(readToolOperationSnapshot(value));
-	}
-	get binding() {
-		return this.#snapshot.binding;
-	}
-	get operationId() {
-		return this.#snapshot.operationId;
-	}
-	get reconciliation() {
-		return this.#snapshot.reconciliation;
-	}
-	get revision() {
-		return this.#snapshot.revision;
-	}
-	get state() {
-		return this.#snapshot.state;
-	}
-	matchesBinding(binding) {
-		try {
-			return sameToolOperationBinding(this.binding, freezeToolOperationBinding(binding));
-		} catch {
-			return false;
-		}
-	}
-	complete(result) {
-		this.requirePending();
-		let stableResult;
-		try {
-			stableResult = freezeStableJson(result);
-		} catch (error) {
-			if (error instanceof Error) throw new ToolOperationTransitionDenied(error.message);
-			throw error;
-		}
-		return this.next({
-			revision: this.revision + 1,
-			state: {
-				result: stableResult,
-				status: "completed"
-			}
-		});
-	}
-	abort() {
-		this.requirePending();
-		return this.next({
-			revision: this.revision + 1,
-			state: { status: "aborted" }
-		});
-	}
-	requireReconciliation(reason) {
-		this.requirePending();
-		if (typeof reason !== "string" || reason.trim() === "") throw new ToolOperationTransitionDenied("tool operation reconciliation requires a reason");
-		return this.next({
-			revision: this.revision + 1,
-			state: {
-				reason,
-				status: "reconciliation-required"
-			}
-		});
-	}
-	retry() {
-		if (this.state.status !== "aborted") throw new ToolOperationTransitionDenied(`tool operation cannot retry while ${this.state.status}`);
-		return this.next({
-			revision: this.revision + 1,
-			state: { status: "pending" }
-		});
-	}
-	recoverInterrupted() {
-		this.requirePending();
-		return this.next({
-			revision: this.revision + 1,
-			state: {
-				reason: "process exited before the tool outcome was durably recorded",
-				status: "reconciliation-required"
-			}
-		});
-	}
-	reconcile(input) {
-		if (input.operationId !== this.operationId || this.state.status !== "reconciliation-required" || this.revision !== input.expectedRevision) throw new ToolOperationTransitionDenied(`tool operation is not the expected reconciliation revision: ${input.operationId}`);
-		const action = normalizeReconciliationAction(input.action);
-		const nextState = input.outcome.status === "applied" ? {
-			result: freezeStableJson(input.outcome.result),
-			status: "completed"
-		} : { status: "aborted" };
-		return this.next({
-			reconciliation: {
-				...action,
-				outcome: input.outcome.status
-			},
-			revision: this.revision + 1,
-			state: nextState
-		});
-	}
-	validateTransitionTo(next) {
-		if (this.operationId !== next.operationId || !sameToolOperationBinding(this.binding, next.binding) || next.revision !== this.revision + 1) return false;
-		switch (this.state.status) {
-			case "pending": return (next.state.status === "completed" || next.state.status === "reconciliation-required" || next.state.status === "aborted") && next.reconciliation === void 0;
-			case "aborted": return next.state.status === "pending" && next.reconciliation === void 0;
-			case "completed": return false;
-			case "reconciliation-required": return (next.state.status === "completed" || next.state.status === "aborted") && next.reconciliation !== void 0 && isValidReconciliation(next.reconciliation) && next.reconciliation.outcome === (next.state.status === "completed" ? "applied" : "not-applied") && !sameReconciliation(this.reconciliation, next.reconciliation);
-		}
-	}
-	toSnapshot() {
-		return this.#snapshot;
-	}
-	requirePending() {
-		if (this.state.status !== "pending") throw new ToolOperationTransitionDenied(`tool operation cannot transition while ${this.state.status}`);
-	}
-	next(change) {
-		const extensions = retainUnknownFields$2(this.#snapshot, [
-			"binding",
-			"operationId",
-			"reconciliation",
-			"revision",
-			"state"
-		]);
-		return new ToolOperation({
-			...extensions,
-			binding: this.binding,
-			operationId: this.operationId,
-			...change.reconciliation === void 0 ? {} : { reconciliation: change.reconciliation },
-			revision: change.revision,
-			state: change.state
-		});
-	}
-};
-function readToolOperationSnapshot(value) {
-	if (!isRecord$12(value) || typeof value.operationId !== "string") throw new ToolOperationTransitionDenied("tool operation snapshot is invalid");
-	if (!Number.isInteger(value.revision) || value.revision < 1 || !isRecord$12(value.state)) throw new ToolOperationTransitionDenied("tool operation snapshot is invalid");
-	const binding = freezeToolOperationBinding(value.binding);
-	const state = readState(value.state);
-	const reconciliation = value.reconciliation === void 0 ? void 0 : readReconciliation(value.reconciliation);
-	if (value.revision === 1 && state.status !== "pending") throw new ToolOperationTransitionDenied("tool operation revision one must be pending");
-	if (state.status === "pending" || state.status === "reconciliation-required") {
-		if (reconciliation !== void 0) throw new ToolOperationTransitionDenied("tool operation reconciliation evidence is only terminal");
+function renewInboundDelivery(delivery, input) {
+	const lease = requireCurrentLease(delivery, input.leaseId);
+	requireInboundDeliveryLease(input.leaseId, input.now, input.leaseExpiresAt);
+	const now = parseInboundDeliveryTimestamp(input.now, "renewal timestamp");
+	const expiresAt = parseInboundDeliveryTimestamp(input.leaseExpiresAt, "lease expiration");
+	if (now < Date.parse(lease.leasedAt) || now >= Date.parse(lease.leaseExpiresAt)) throw new InvalidInboundDelivery(`Inbound Delivery lease is not live at renewal: ${delivery.id}`);
+	if (expiresAt <= Date.parse(lease.leaseExpiresAt)) throw new InvalidInboundDelivery(`Inbound Delivery lease renewal must extend the lease: ${delivery.id}`);
+	return nextInboundDelivery(delivery, { state: {
+		...lease,
+		leaseExpiresAt: input.leaseExpiresAt
+	} });
+}
+function completeInboundDelivery(delivery, input) {
+	requireCurrentLease(delivery, input.leaseId);
+	parseInboundDeliveryTimestamp(input.completedAt, "completion timestamp");
+	return nextInboundDelivery(delivery, { state: {
+		completedAt: input.completedAt,
+		status: "completed"
+	} });
+}
+function failInboundDelivery(delivery, input) {
+	requireCurrentLease(delivery, input.leaseId);
+	parseInboundDeliveryTimestamp(input.failedAt, "failure timestamp");
+	if (input.terminal) {
+		if (input.reason.trim().length === 0) throw new InvalidInboundDelivery("Inbound Delivery Dead Letter reason must not be empty");
+		return nextInboundDelivery(delivery, { state: {
+			failedAt: input.failedAt,
+			reason: input.reason,
+			status: "dead"
+		} });
 	}
-	validateRevisionShape(value.revision, state, reconciliation);
-	if (reconciliation !== void 0 && reconciliation.outcome !== (state.status === "completed" ? "applied" : "not-applied")) throw new ToolOperationTransitionDenied("tool operation reconciliation outcome does not match state");
-	return {
-		...retainUnknownFields$2(value, [
-			"binding",
-			"operationId",
-			"reconciliation",
-			"revision",
-			"state"
-		]),
-		binding,
-		operationId: value.operationId,
-		...reconciliation === void 0 ? {} : { reconciliation },
-		revision: value.revision,
-		state
-	};
+	return releaseInboundDelivery(delivery, {
+		availableAt: input.availableAt ?? input.failedAt,
+		leaseId: input.leaseId
+	});
 }
-function readState(value) {
-	switch (value.status) {
-		case "pending": return {
-			...retainUnknownFields$2(value, ["status"]),
+function releaseInboundDelivery(delivery, input) {
+	requireCurrentLease(delivery, input.leaseId);
+	parseInboundDeliveryTimestamp(input.availableAt, "availability timestamp");
+	return nextInboundDelivery(delivery, { state: {
+		availableAt: input.availableAt,
+		status: "pending"
+	} });
+}
+function requeueInboundDelivery(delivery, input) {
+	if (delivery.state.status !== "dead" || delivery.revision !== input.expectedRevision) throw new InvalidInboundDelivery(`Inbound Delivery is not the expected Dead Letter revision: ${delivery.id}`);
+	validateInboundDeliveryRecoveryAudit(input.recovery);
+	if (input.availableAt !== input.recovery.at) throw new InvalidInboundDelivery("Inbound Delivery recovery availability must match its audit timestamp");
+	return nextInboundDelivery(delivery, {
+		attempts: 0,
+		recovery: input.recovery,
+		state: {
+			availableAt: input.availableAt,
 			status: "pending"
-		};
-		case "aborted": return {
-			...retainUnknownFields$2(value, ["status"]),
-			status: "aborted"
-		};
-		case "reconciliation-required":
-			if (typeof value.reason !== "string" || value.reason.trim() === "") throw new ToolOperationTransitionDenied("tool operation reconciliation reason is invalid");
-			return {
-				...retainUnknownFields$2(value, ["reason", "status"]),
-				reason: value.reason,
-				status: "reconciliation-required"
-			};
-		case "completed":
-			if (!Object.hasOwn(value, "result")) throw new ToolOperationTransitionDenied("completed tool operation must contain a result");
-			try {
-				return {
-					...retainUnknownFields$2(value, ["result", "status"]),
-					result: freezeStableJson(value.result),
-					status: "completed"
-				};
-			} catch (error) {
-				if (error instanceof Error) throw new ToolOperationTransitionDenied(error.message);
-				throw error;
+		}
+	});
+}
+function isValidInboundDeliveryTransition(previous, next) {
+	try {
+		validateInboundDeliverySnapshot(next);
+	} catch {
+		return false;
+	}
+	if (previous.id !== next.id || previous.acceptedAt !== next.acceptedAt || previous.laneKey !== next.laneKey || next.revision !== previous.revision + 1 || !sameOpaqueValue(previous.payload, next.payload) || !sameOpaqueValue(previous.metadata, next.metadata)) return false;
+	switch (previous.state.status) {
+		case "pending": return next.state.status === "leased" && next.attempts === previous.attempts + 1 && sameOpaqueValue(previous.recovery, next.recovery);
+		case "leased":
+			if (!sameOpaqueValue(previous.recovery, next.recovery)) return false;
+			if (next.state.status === "leased") {
+				const renewed = next.attempts === previous.attempts && next.state.leaseId === previous.state.leaseId && next.state.leasedAt === previous.state.leasedAt && Date.parse(next.state.leaseExpiresAt) > Date.parse(previous.state.leaseExpiresAt);
+				const reclaimed = next.attempts === previous.attempts + 1 && next.state.leaseId !== previous.state.leaseId && Date.parse(previous.state.leaseExpiresAt) <= Date.parse(next.state.leasedAt);
+				return renewed || reclaimed;
 			}
-		default: throw new ToolOperationTransitionDenied("tool operation state is invalid");
+			return next.attempts === previous.attempts && (next.state.status === "pending" || next.state.status === "completed" || next.state.status === "dead");
+		case "completed": return false;
+		case "dead": return next.state.status === "pending" && next.attempts === 0 && next.recovery !== void 0 && next.state.availableAt === next.recovery.at && !sameOpaqueValue(previous.recovery, next.recovery);
 	}
 }
-function normalizeReconciliationAction(action) {
-	if (!isRecord$12(action)) throw new ToolOperationTransitionDenied("tool operation reconciliation action is invalid");
-	const actorId = typeof action.actorId === "string" ? action.actorId.trim() : "";
-	const note = typeof action.note === "string" ? action.note.trim() : "";
-	if (!actorId) throw new ToolOperationTransitionDenied("recovery actor must not be empty");
-	if (!note) throw new ToolOperationTransitionDenied("recovery note must not be empty");
-	if (typeof action.at !== "string" || !Number.isFinite(Date.parse(action.at))) throw new ToolOperationTransitionDenied("recovery timestamp must be an ISO timestamp");
-	return Object.freeze({
-		actorId,
-		at: action.at,
-		note
-	});
+function sameOpaqueValue(left, right) {
+	if (Object.is(left, right)) return true;
+	if (Array.isArray(left) || Array.isArray(right)) return Array.isArray(left) && Array.isArray(right) && left.length === right.length && left.every((value, index) => sameOpaqueValue(value, right[index]));
+	if (!isRecord$14(left) || !isRecord$14(right)) return false;
+	const leftKeys = Object.keys(left).sort();
+	const rightKeys = Object.keys(right).sort();
+	return leftKeys.length === rightKeys.length && leftKeys.every((key, index) => key === rightKeys[index] && sameOpaqueValue(left[key], right[key]));
 }
-function readReconciliation(value) {
-	if (!isRecord$12(value)) throw new ToolOperationTransitionDenied("tool operation reconciliation is invalid");
-	const action = normalizeReconciliationAction(value);
-	if (value.outcome !== "applied" && value.outcome !== "not-applied") throw new ToolOperationTransitionDenied("tool operation reconciliation outcome is invalid");
-	return Object.freeze({
-		...retainUnknownFields$2(value, [
-			"actorId",
-			"at",
-			"note",
-			"outcome"
-		]),
-		...action,
-		outcome: value.outcome
+function nextInboundDelivery(delivery, changes) {
+	const next = {
+		...delivery,
+		...changes,
+		revision: delivery.revision + 1
+	};
+	validateInboundDeliverySnapshot(next);
+	return freezeInboundDeliverySnapshot(next);
+}
+function leaseInboundDelivery(delivery, input) {
+	parseInboundDeliveryTimestamp(input.now, "lease timestamp");
+	requireInboundDeliveryLease(input.leaseId, input.now, input.leaseExpiresAt);
+	return nextInboundDelivery(delivery, {
+		attempts: delivery.attempts + 1,
+		state: {
+			leaseExpiresAt: input.leaseExpiresAt,
+			leaseId: input.leaseId,
+			leasedAt: input.now,
+			status: "leased"
+		}
 	});
 }
-function isValidReconciliation(value) {
-	return value.actorId.trim().length > 0 && Number.isFinite(Date.parse(value.at)) && value.note.trim().length > 0 && (value.outcome === "applied" || value.outcome === "not-applied");
+function requireCurrentLease(delivery, leaseId) {
+	if (delivery.state.status !== "leased" || delivery.state.leaseId !== leaseId) throw new InvalidInboundDelivery(`Inbound Delivery lease does not match: ${delivery.id}`);
+	return delivery.state;
 }
-function sameReconciliation(left, right) {
-	if (left === void 0 || right === void 0) return left === right;
-	return left.actorId === right.actorId && left.at === right.at && left.note === right.note && left.outcome === right.outcome;
+//#endregion
+//#region src/platform/durable-queue/store/in-memory-durable-queue.ts
+function createInMemoryDurableQueueStore(options = {}) {
+	const deliveries = /* @__PURE__ */ new Map();
+	for (const delivery of options.initial ?? []) {
+		const restored = readInboundDeliverySnapshot(delivery);
+		if (deliveries.has(restored.id)) throw new Error(`duplicate Inbound Delivery snapshot: ${restored.id}`);
+		deliveries.set(restored.id, restored);
+	}
+	const serial = Effect.unsafeMakeSemaphore(1);
+	let lastLaneKey;
+	const save = (current, delivery) => {
+		const snapshot = readInboundDeliverySnapshot(current === void 0 ? delivery : resolveUpdate(current, delivery));
+		return (options.persist?.(readInboundDeliverySnapshot(snapshot)) ?? Effect.void).pipe(Effect.flatMap(() => Effect.sync(() => {
+			deliveries.set(snapshot.id, snapshot);
+		})));
+	};
+	const serialized = (effect) => serial.withPermits(1)(Effect.uninterruptible(effect));
+	return {
+		admit: (delivery, maxPending) => serialized(Effect.gen(function* () {
+			if (deliveries.has(delivery.id)) return "duplicate";
+			if (!Number.isSafeInteger(maxPending) || maxPending < 1) return yield* Effect.fail(/* @__PURE__ */ new Error("Inbound Delivery capacity must be a positive integer"));
+			if (pendingCount(deliveries) >= maxPending) return "capacity";
+			assertNewInboundDelivery(delivery);
+			yield* save(void 0, delivery);
+			return "created";
+		})),
+		claim: (input) => serialized(Effect.gen(function* () {
+			validateNow(input.now);
+			const now = Date.parse(input.now);
+			const leasedLanes = new Set([...deliveries.values()].filter((delivery) => delivery.state.status === "leased" && Date.parse(delivery.state.leaseExpiresAt) > now).map((delivery) => delivery.laneKey));
+			const eligible = [...deliveries.values()].filter((delivery) => !leasedLanes.has(delivery.laneKey) && (delivery.state.status === "pending" && Date.parse(delivery.state.availableAt) <= now || delivery.state.status === "leased" && Date.parse(delivery.state.leaseExpiresAt) <= now));
+			if (eligible.length === 0) return void 0;
+			const laneKeys = [...new Set(eligible.map((delivery) => delivery.laneKey))];
+			const laneKey = laneKeys[((lastLaneKey === void 0 ? -1 : laneKeys.indexOf(lastLaneKey)) + 1) % laneKeys.length];
+			const laneDeliveries = eligible.filter((delivery) => delivery.laneKey === laneKey);
+			const current = laneDeliveries.find((delivery) => delivery.state.status === "leased") ?? laneDeliveries[0];
+			const claimed = current.state.status === "leased" ? reclaimInboundDelivery(current, input) : claimInboundDelivery(current, input);
+			yield* save(current, claimed);
+			lastLaneKey = laneKey;
+			return readInboundDeliverySnapshot(claimed);
+		})),
+		claimById: (input) => serialized(Effect.gen(function* () {
+			validateNow(input.now);
+			const current = deliveries.get(input.id);
+			if (!current) return void 0;
+			if (current.state.status === "leased") {
+				if (Date.parse(current.state.leaseExpiresAt) > Date.parse(input.now)) return void 0;
+				const reclaimed = reclaimInboundDelivery(current, input);
+				yield* save(current, reclaimed);
+				return readInboundDeliverySnapshot(reclaimed);
+			}
+			if (current.state.status !== "pending" || Date.parse(current.state.availableAt) > Date.parse(input.now)) return;
+			const claimed = claimInboundDelivery(current, input);
+			yield* save(current, claimed);
+			return readInboundDeliverySnapshot(claimed);
+		})),
+		complete: (input) => serialized(mutateLeased(deliveries, input.id, input.leaseId, save, (current) => completeInboundDelivery(current, input))),
+		create: (delivery) => serialized(Effect.gen(function* () {
+			if (deliveries.has(delivery.id)) return false;
+			assertNewInboundDelivery(delivery);
+			yield* save(void 0, delivery);
+			return true;
+		})),
+		deadLetters: () => [...deliveries.values()].filter((delivery) => delivery.state.status === "dead").map((delivery) => readInboundDeliverySnapshot(delivery)),
+		fail: (input) => serialized(mutateLeased(deliveries, input.id, input.leaseId, save, (current) => failInboundDelivery(current, input))),
+		pendingCount: () => pendingCount(deliveries),
+		renew: (input) => serialized(Effect.gen(function* () {
+			const current = requireDelivery(deliveries, input.id);
+			const renewed = renewInboundDelivery(current, input);
+			yield* save(current, renewed);
+			return readInboundDeliverySnapshot(renewed);
+		})),
+		requeueDeadLetter: (input) => serialized(Effect.gen(function* () {
+			const current = requireDelivery(deliveries, input.id);
+			const requeued = requeueInboundDelivery(current, input);
+			yield* save(current, requeued);
+			return readInboundDeliverySnapshot(requeued);
+		})),
+		release: (input) => serialized(mutateLeased(deliveries, input.id, input.leaseId, save, (current) => releaseInboundDelivery(current, input)))
+	};
 }
-function freezeSnapshot(snapshot) {
-	const binding = freezeToolOperationBinding(snapshot.binding);
-	const state = freezeState(snapshot.state);
-	const reconciliation = snapshot.reconciliation === void 0 ? void 0 : readReconciliation(snapshot.reconciliation);
-	return Object.freeze({
-		...retainUnknownFields$2(snapshot, [
-			"binding",
-			"operationId",
-			"reconciliation",
-			"revision",
-			"state"
-		]),
-		binding,
-		operationId: snapshot.operationId,
-		...reconciliation === void 0 ? {} : { reconciliation },
-		revision: snapshot.revision,
-		state
+function mutateLeased(deliveries, id, leaseId, save, transition) {
+	return Effect.gen(function* () {
+		const current = requireDelivery(deliveries, id);
+		if (current.state.status !== "leased" || current.state.leaseId !== leaseId) return yield* Effect.fail(/* @__PURE__ */ new Error(`Inbound Delivery lease does not match: ${id}`));
+		yield* save(current, transition(current));
 	});
 }
-function freezeState(state) {
-	if (state.status === "completed") return Object.freeze({
-		...retainUnknownFields$2(state, ["result", "status"]),
-		result: freezeStableJson(state.result),
-		status: "completed"
-	});
-	if (state.status === "reconciliation-required") return Object.freeze({
-		...retainUnknownFields$2(state, ["reason", "status"]),
-		reason: state.reason,
-		status: "reconciliation-required"
-	});
-	return Object.freeze({
-		...retainUnknownFields$2(state, ["status"]),
-		status: state.status
-	});
+function resolveUpdate(current, next) {
+	if (!isValidInboundDeliveryTransition(current, next)) throw new Error(`invalid Inbound Delivery transition: ${current.id}`);
+	return next;
 }
-function validateRevisionShape(revision, state, reconciliation) {
-	if (state.status === "pending" && revision === 2) throw new ToolOperationTransitionDenied("pending tool operation revision is invalid");
-	if (state.status !== "pending" && revision === 1) throw new ToolOperationTransitionDenied("tool operation revision one must be pending");
-	if (reconciliation !== void 0 && revision < 3) throw new ToolOperationTransitionDenied("reconciled tool operation revision is invalid");
+function requireDelivery(deliveries, id) {
+	const current = deliveries.get(id);
+	if (!current) throw new Error(`Inbound Delivery does not exist: ${id}`);
+	return current;
 }
-function retainUnknownFields$2(value, known) {
-	const extensions = {};
-	const allowed = new Set(known);
-	for (const [key, entry] of Object.entries(value)) {
-		if (allowed.has(key)) continue;
-		extensions[key] = freezeStableJson(entry);
-	}
-	return extensions;
+function pendingCount(deliveries) {
+	return [...deliveries.values()].filter((delivery) => delivery.state.status === "pending" || delivery.state.status === "leased").length;
 }
-function isRecord$12(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value);
+function validateNow(now) {
+	if (!Number.isFinite(Date.parse(now))) throw new Error("Inbound Delivery claim timestamp is invalid");
 }
 //#endregion
-//#region src/core/domain/tool-operation/factories/create-tool-operation.ts
-function createToolOperation(input) {
-	return ToolOperation.create(input);
+//#region src/adapters/compatibility/inbound-delivery/feishu-inbox-repository.ts
+const inboundStores = /* @__PURE__ */ new WeakMap();
+function createFeishuInboxRepository(options = {}) {
+	return fromDurableQueueStore(createInMemoryDurableQueueStore({
+		...options.initial ? { initial: options.initial.map(toInboundDelivery) } : {},
+		...options.persist ? { persist: (delivery) => Effect.tryPromise({
+			catch: (error) => error,
+			try: () => options.persist(fromInboundDelivery(delivery))
+		}) } : {}
+	}));
 }
-//#endregion
-//#region src/core/domain/tool-operation/factories/restore-tool-operation.ts
-function restoreToolOperation(snapshot) {
-	return ToolOperation.restore(snapshot);
+function fromDurableQueueStore(repository) {
+	const facade = {
+		admit: (delivery, maxPending) => repository.admit(toInboundDelivery(delivery), maxPending),
+		claim: (input) => repository.claim(input).pipe(Effect.map(mapOptionalFromInboundDelivery)),
+		claimById: (input) => repository.claimById(input).pipe(Effect.map(mapOptionalFromInboundDelivery)),
+		complete: (input) => repository.complete(input),
+		create: (delivery) => repository.create(toInboundDelivery(delivery)),
+		deadLetters: () => repository.deadLetters().map(fromInboundDelivery),
+		fail: (input) => repository.fail(input),
+		pendingCount: () => repository.pendingCount(),
+		requeueDeadLetter: (input) => repository.requeueDeadLetter(input).pipe(Effect.map(fromInboundDelivery)),
+		release: (input) => repository.release(input)
+	};
+	inboundStores.set(facade, repository);
+	return facade;
 }
-//#endregion
-//#region src/core/application/tool-execution/operation/tool-operation-ledger.ts
-var ToolOperationLedgerError = class extends Error {
-	name = "ToolOperationLedgerError";
-};
-function createToolOperationLedger$1(options = {}) {
-	const records = /* @__PURE__ */ new Map();
-	for (const snapshot of options.initial ?? []) {
-		const operation = restoreToolOperation(snapshot);
-		if (records.has(operation.operationId)) throw new ToolOperationLedgerError(`duplicate initial tool operation: ${operation.operationId}`);
-		records.set(operation.operationId, operation);
-	}
-	const semaphore = Effect.unsafeMakeSemaphore(1);
-	const exclusive = (effect) => semaphore.withPermits(1)(Effect.uninterruptible(effect));
-	const save = (operation) => {
-		const snapshot = operation.toSnapshot();
-		return (options.persist ? options.persist(snapshot) : Effect.void).pipe(Effect.tap(() => Effect.sync(() => {
-			records.set(operation.operationId, operation);
-		})));
+function toDurableQueueStore(repository) {
+	const existing = inboundStores.get(repository);
+	if (existing) return existing;
+	return {
+		admit: (delivery, maxPending) => repository.admit(fromInboundDelivery(delivery), maxPending),
+		claim: (input) => repository.claim(input).pipe(Effect.map(mapOptionalToInboundDelivery)),
+		claimById: (input) => repository.claimById(input).pipe(Effect.map(mapOptionalToInboundDelivery)),
+		complete: (input) => repository.complete(input),
+		create: (delivery) => repository.create(fromInboundDelivery(delivery)),
+		deadLetters: () => repository.deadLetters().map(toInboundDelivery),
+		fail: (input) => repository.fail(input),
+		pendingCount: () => repository.pendingCount(),
+		renew: (input) => Effect.fail(/* @__PURE__ */ new Error(`legacy Feishu Inbox Repository cannot renew lease: ${input.id}`)),
+		requeueDeadLetter: (input) => repository.requeueDeadLetter(input).pipe(Effect.map(toInboundDelivery)),
+		release: (input) => repository.release(input)
 	};
-	const transition = (operationId, next) => exclusive(Effect.gen(function* () {
-		const operation = yield* Effect.try({
-			catch: (error) => error,
-			try: () => next(records.get(operationId))
-		});
-		yield* save(operation);
-	}));
+}
+function toInboundDelivery(delivery) {
+	const { options, ...shared } = delivery;
+	return readInboundDeliverySnapshot({
+		...shared,
+		...options === void 0 ? {} : { metadata: options }
+	});
+}
+function fromInboundDelivery(delivery) {
+	const { metadata, ...shared } = delivery;
 	return {
-		abort: (operationId, binding) => transition(operationId, (current) => requireBoundOperation(current, binding).abort()),
-		begin: (operationId, binding) => exclusive(Effect.gen(function* () {
-			const current = records.get(operationId);
-			if (!current) {
-				const created = createToolOperation({
-					binding,
-					operationId
-				});
-				yield* save(created);
-				return { status: "acquired" };
-			}
-			if (!current.matchesBinding(binding)) return {
-				reason: "operation id is bound to another invocation",
-				status: "blocked"
-			};
-			switch (current.state.status) {
-				case "completed": return {
-					result: current.state.result,
-					status: "completed"
-				};
-				case "pending": return {
-					reason: "operation is already in progress",
-					status: "blocked"
-				};
-				case "reconciliation-required": return {
-					reason: current.state.reason,
-					status: "blocked"
-				};
-				case "aborted": {
-					const retried = current.retry();
-					yield* save(retried);
-					return { status: "acquired" };
-				}
-			}
-		})),
-		complete: (operationId, binding, result) => transition(operationId, (current) => requireBoundOperation(current, binding).complete(result)),
-		inspect: (operationId, binding) => exclusive(Effect.sync(() => {
-			const current = records.get(operationId);
-			if (!current || current.state.status === "aborted" && current.matchesBinding(binding)) return { status: "missing" };
-			if (!current.matchesBinding(binding)) return {
-				reason: "operation id is bound to another invocation",
-				status: "blocked"
-			};
-			return current.state.status === "completed" ? {
-				result: current.state.result,
-				status: "completed"
-			} : {
-				reason: current.state.status === "reconciliation-required" ? current.state.reason : "operation is already in progress",
-				status: "blocked"
-			};
-		})),
-		reconciliationRequired: () => [...records.values()].filter((operation) => operation.state.status === "reconciliation-required").map((operation) => operation.toSnapshot()),
-		reconcile: (input) => exclusive(Effect.gen(function* () {
-			const current = records.get(input.operationId);
-			const operation = yield* Effect.try({
-				catch: (error) => error,
-				try: () => requireOperation(current).reconcile(input)
-			});
-			yield* save(operation);
-			return operation.toSnapshot();
-		})),
-		requireReconciliation: (operationId, binding, reason) => transition(operationId, (current) => requireBoundOperation(current, binding).requireReconciliation(reason)),
-		unresolvedForSource: (sourceMessageId) => [...records.values()].filter((operation) => operation.binding.sourceMessageId === sourceMessageId && (operation.state.status === "pending" || operation.state.status === "reconciliation-required")).map((operation) => operation.toSnapshot())
+		...shared,
+		...metadata === void 0 ? {} : { options: metadata }
 	};
 }
-function requireOperation(operation) {
-	if (!operation) throw new Error("tool operation is not held by this invocation");
-	return operation;
+function mapOptionalFromInboundDelivery(delivery) {
+	return delivery === void 0 ? void 0 : fromInboundDelivery(delivery);
 }
-function requireBoundOperation(operation, binding) {
-	const current = requireOperation(operation);
-	if (!current.matchesBinding(binding)) throw new Error("operation id is bound to another invocation");
-	return current;
+function mapOptionalToInboundDelivery(delivery) {
+	return delivery === void 0 ? void 0 : toInboundDelivery(delivery);
+}
+//#endregion
+//#region src/core/application/recovery/commands/recovery-action.ts
+var InvalidRecoveryAction = class extends Error {
+	name = "InvalidRecoveryAction";
+};
+function createRecoveryAction(input) {
+	const actorId = input.actorId.trim();
+	const note = input.note.trim();
+	if (actorId.length === 0) throw new InvalidRecoveryAction("recovery actor must not be empty");
+	if (note.length === 0) throw new InvalidRecoveryAction("recovery note must not be empty");
+	if (!Number.isFinite(Date.parse(input.at))) throw new InvalidRecoveryAction("recovery timestamp must be an ISO timestamp");
+	return Object.freeze({
+		actorId,
+		at: input.at,
+		note
+	});
 }
 //#endregion
 //#region src/adapters/compatibility/tool-execution/runtime/effect-runner.ts
@@ -2041,26 +2348,15 @@ function appendInboundDeliverySnapshot(filePath, delivery) {
 function openJsonlFeishuInboxRepository(options) {
 	return Effect.runPromise(openJsonlInboundDeliveryStore({
 		acceptLegacySameAttemptClaims: true,
-		filePath: options.filePath,
-		label: "Feishu inbox",
-		payload: feishuInboundDeliveryPayloadCodec
-	}).pipe(Effect.map(fromDurableQueueStore)));
-}
-//#endregion
-//#region src/platform/persistence/files/write-persistence-file.ts
-async function writePersistenceFile(filePath, value) {
-	await mkdir(dirname(filePath), { recursive: true });
-	const temporaryPath = `${filePath}.${randomUUID()}.tmp`;
-	try {
-		await writeFile(temporaryPath, `${JSON.stringify(value)}\n`, {
-			encoding: "utf8",
-			flag: "wx"
-		});
-		await rename(temporaryPath, filePath);
-	} catch (error) {
-		await unlink(temporaryPath).catch(() => void 0);
-		throw error;
-	}
+		filePath: options.filePath,
+		label: "Feishu inbox",
+		payload: feishuInboundDeliveryPayloadCodec
+	}).pipe(Effect.map(fromDurableQueueStore)));
+}
+//#endregion
+//#region src/platform/persistence/files/write-persistence-file.ts
+async function writePersistenceFile(filePath, value) {
+	await writeAtomicTextFile(filePath, `${JSON.stringify(value)}\n`);
 }
 //#endregion
 //#region src/adapters/feishu/conversation-session/feishu-session-store.ts
@@ -3684,39 +3980,6 @@ function createAgentRuntime(harness, options = {}) {
 	};
 }
 //#endregion
-//#region src/adapters/pi/config/pi-model-overrides.ts
-async function mergePiProviderBaseUrlOverride(options) {
-	const overrides = await readPiModelOverrides(options.filePath);
-	const providers = readJsonRecord(overrides.providers, options.filePath, "providers");
-	const providerOverride = readJsonRecord(providers[options.provider], options.filePath, `providers.${options.provider}`);
-	await writeFile(options.filePath, `${JSON.stringify({
-		...overrides,
-		providers: {
-			...providers,
-			[options.provider]: {
-				...providerOverride,
-				baseUrl: options.baseUrl
-			}
-		}
-	}, null, 2)}\n`, "utf8");
-}
-async function readPiModelOverrides(filePath) {
-	try {
-		return readJsonRecord(JSON.parse(await readFile(filePath, "utf8")), filePath, "root");
-	} catch (error) {
-		if (isFileNotFound(error)) return {};
-		throw error;
-	}
-}
-function readJsonRecord(value, filePath, path) {
-	if (value === void 0) return {};
-	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error(`${filePath} ${path} must be a JSON object`);
-	return value;
-}
-function isFileNotFound(error) {
-	return error instanceof Error && "code" in error && error.code === "ENOENT";
-}
-//#endregion
 //#region src/adapters/feishu/intake/feishu-card-action-intake.ts
 var InvalidFeishuCardAction = class {
 	reason;
@@ -7393,7 +7656,11 @@ function resolveContentMode(value) {
 //#endregion
 //#region src/adapters/pi/execution/pi-agent-loop.ts
 function createPiAgentLoop$1(options) {
-	return { run: (input) => Stream.fromAsyncIterable(runPiSession(input, options), (error) => error) };
+	return { run: (input) => {
+		const stream = Stream.fromAsyncIterable(runPiSession(input, options), (error) => error);
+		if (!options.runBoundary) return stream;
+		return Stream.unwrapScoped(Effect.acquireRelease(options.runBoundary.acquireRun({ signal: input.abortSignal }), (lease) => Effect.sync(lease.release)).pipe(Effect.as(stream)));
+	} };
 }
 function createPiSdkAgentLoop$1(options) {
 	return createPiAgentLoop$1({ resolveSession: async () => {
@@ -7409,6 +7676,9 @@ async function* runPiSession(input, options) {
 	let removeAbortListener;
 	let unsubscribe;
 	let dispose;
+	let handleForRun;
+	let activationAttempted = false;
+	let abortCompletion;
 	let failure;
 	let terminalErrorMessage;
 	let done = false;
@@ -7421,20 +7691,27 @@ async function* runPiSession(input, options) {
 		done = true;
 		queue.wake();
 	};
-	(async () => {
+	const sessionTask = (async () => {
 		try {
 			const handle = await options.resolveSession(input);
-			await handle.activate?.(input);
+			handleForRun = handle;
 			dispose = handle.dispose ?? (() => handle.session.dispose?.());
+			activationAttempted = true;
+			await handle.activate?.(input);
 			const abortSession = () => {
-				Promise.resolve(handle.session.abort?.()).catch((error) => {
-					if (!input.abortSignal.aborted) complete(error);
+				if (abortCompletion) return abortCompletion;
+				abortCompletion = Promise.resolve(handle.session.abort?.()).then(() => void 0, (error) => {
+					if (!input.abortSignal.aborted) throw error;
 				});
+				return abortCompletion;
 			};
-			input.abortSignal.addEventListener("abort", abortSession, { once: true });
-			removeAbortListener = () => input.abortSignal.removeEventListener("abort", abortSession);
+			const requestAbort = () => {
+				abortSession().then(() => complete(), (error) => complete(error));
+			};
+			input.abortSignal.addEventListener("abort", requestAbort, { once: true });
+			removeAbortListener = () => input.abortSignal.removeEventListener("abort", requestAbort);
 			if (input.abortSignal.aborted) {
-				abortSession();
+				await abortSession();
 				complete();
 				return;
 			}
@@ -7468,7 +7745,12 @@ async function* runPiSession(input, options) {
 	} finally {
 		removeAbortListener?.();
 		unsubscribe?.();
-		if (options.disposeSessionAfterRun !== false) await dispose?.();
+		await Promise.all([sessionTask, ...abortCompletion ? [abortCompletion] : []]);
+		try {
+			if (activationAttempted) await handleForRun?.deactivate?.();
+		} finally {
+			if (options.disposeSessionAfterRun !== false) await dispose?.();
+		}
 	}
 }
 function observeModelContent(observer, session, event, runId, mapped) {
@@ -7706,6 +7988,7 @@ function createPiAgentLoop(options) {
 	return fromEffectAgentLoop(createPiAgentLoop$1({
 		...options.disposeSessionAfterRun === void 0 ? {} : { disposeSessionAfterRun: options.disposeSessionAfterRun },
 		...options.modelContentObserver ? { modelContentObserver: options.modelContentObserver } : {},
+		...options.runBoundary ? { runBoundary: options.runBoundary } : {},
 		resolveSession: async (input) => toEffectPiAgentSessionHandle(await options.resolveSession(toCompatibilityAgentLoopInput(input)))
 	}));
 }
@@ -7716,8 +7999,10 @@ function toEffectPiAgentSessionHandle(handle) {
 	return {
 		...handle.activate ? { activate: (input) => handle.activate(toCompatibilityAgentLoopInput(input)) } : {},
 		...handle.dispose ? { dispose: handle.dispose } : {},
+		...handle.deactivate ? { deactivate: handle.deactivate } : {},
 		...handle.preparePrompt ? { preparePrompt: (input) => handle.preparePrompt(toCompatibilityAgentLoopInput(input)) } : {},
 		...handle.resolveToolName ? { resolveToolName: handle.resolveToolName } : {},
+		...handle.refreshResources ? { refreshResources: handle.refreshResources } : {},
 		session: handle.session
 	};
 }
@@ -7725,8 +8010,10 @@ function fromEffectPiAgentSessionHandle(handle) {
 	return {
 		...handle.activate ? { activate: (input) => handle.activate(toEffectAgentLoopInput(input)) } : {},
 		...handle.dispose ? { dispose: handle.dispose } : {},
+		...handle.deactivate ? { deactivate: handle.deactivate } : {},
 		...handle.preparePrompt ? { preparePrompt: (input) => handle.preparePrompt(toEffectAgentLoopInput(input)) } : {},
 		...handle.resolveToolName ? { resolveToolName: handle.resolveToolName } : {},
+		...handle.refreshResources ? { refreshResources: handle.refreshResources } : {},
 		session: handle.session
 	};
 }
@@ -7755,6 +8042,7 @@ function createPiSessionRegistry$1(options) {
 		disposeAll: async () => {
 			await Promise.all([...sessions.keys()].map(dispose));
 		},
+		list: async () => Promise.all(sessions.values()),
 		resolve,
 		size: () => sessions.size
 	};
@@ -7772,6 +8060,13 @@ function createPiSessionRegistry(options) {
 	return {
 		dispose: (sessionKey) => registry.dispose(sessionKey),
 		disposeAll: () => registry.disposeAll(),
+		list: async () => (await registry.list()).map((effectHandle) => {
+			const cached = compatibilityHandles.get(effectHandle);
+			if (cached) return cached;
+			const handle = fromEffectPiAgentSessionHandle(effectHandle);
+			compatibilityHandles.set(effectHandle, handle);
+			return handle;
+		}),
 		resolve: async (input) => {
 			const effectHandle = await registry.resolve(toEffectAgentLoopInput(input));
 			const cached = compatibilityHandles.get(effectHandle);
@@ -8818,134 +9113,6 @@ function requiresToolApproval(risk) {
 	return requiresToolApproval$1(risk);
 }
 //#endregion
-//#region src/core/application/tool-execution/brokerage/tool-broker-ports.ts
-var ToolExecutorInputRejected = class extends Error {
-	name = "ToolExecutorInputRejected";
-};
-//#endregion
-//#region src/core/application/tool-execution/brokerage/tool-broker.ts
-var ToolInvocationDenied = class extends Error {
-	name = "ToolInvocationDenied";
-};
-function createToolBroker$1(options) {
-	const operations = options.operations ?? createToolOperationLedger$1();
-	const hostTools = new Map(options.hostTools?.map((tool) => [tool.id, tool]) ?? []);
-	if (hostTools.size !== (options.hostTools?.length ?? 0)) throw new ToolInvocationDenied("duplicate Host Tool id");
-	return { execute: (request) => Effect.gen(function* () {
-		const prepared = yield* Effect.try({
-			catch: (error) => error,
-			try: () => prepareInvocation(hostTools, options.catalog, request)
-		});
-		const policy = yield* options.policy.current();
-		if (policy.revokedToolIds.includes(request.toolId)) return yield* Effect.fail(new ToolInvocationDenied(`tool has been revoked: ${request.toolId}`));
-		if (prepared.tool.idempotency === "required" && !request.operationId) return yield* Effect.fail(new ToolInvocationDenied(`tool requires a stable operation id: ${request.toolId}`));
-		if (requiresToolApproval$1(prepared.tool.risk) && !request.operationId) return yield* Effect.fail(new ToolInvocationDenied(`tool approval requires a stable operation id: ${request.toolId}`));
-		if (requiresToolApproval$1(prepared.tool.risk) && !request.approvalId) return yield* Effect.fail(new ToolInvocationDenied(`tool requires trusted approval: ${request.toolId}`));
-		const binding = yield* Effect.try({
-			catch: (error) => error,
-			try: () => createOperationBinding(prepared.authority, prepared.tool, request.input, options.digest)
-		});
-		const context = createExecutionContext(prepared.authority, request, policy.epoch, prepared.tool);
-		const replayCompleted = (result) => replay(prepared.tool, request.input, result, context);
-		if (request.operationId) {
-			const inspected = yield* operations.inspect(request.operationId, binding);
-			if (inspected.status === "completed") return yield* replayCompleted(inspected.result);
-			if (inspected.status === "blocked") return yield* Effect.fail(new ToolInvocationDenied(`tool operation is fenced: ${inspected.reason}`));
-		}
-		if (requiresToolApproval$1(prepared.tool.risk)) {
-			if (!(yield* options.approvals.consume({
-				agentId: prepared.authority.agentId,
-				approvalId: request.approvalId,
-				callId: request.callId,
-				inputDigest: binding.inputDigest,
-				instanceId: prepared.authority.instanceId,
-				operationId: request.operationId,
-				risk: prepared.tool.risk,
-				runId: prepared.authority.runId,
-				sessionKey: prepared.authority.sessionKey,
-				tenantKey: prepared.authority.tenantKey,
-				toolId: request.toolId,
-				toolVersion: prepared.tool.version
-			}))) return yield* Effect.fail(new ToolInvocationDenied(`tool approval is invalid or already consumed: ${request.toolId}`));
-		}
-		if (request.operationId) {
-			const reservation = yield* operations.begin(request.operationId, binding);
-			if (reservation.status === "completed") return yield* replayCompleted(reservation.result);
-			if (reservation.status === "blocked") return yield* Effect.fail(new ToolInvocationDenied(`tool operation is fenced: ${reservation.reason}`));
-		}
-		return yield* Effect.gen(function* () {
-			const result = yield* (yield* Effect.try({
-				catch: (error) => error,
-				try: () => prepared.tool.createExecutor({
-					toolId: prepared.tool.id,
-					toolVersion: prepared.tool.version
-				})
-			})).execute(request.input, context);
-			if (request.operationId) yield* operations.complete(request.operationId, binding, result);
-			return result;
-		}).pipe(Effect.catchAll((error) => {
-			if (!request.operationId) return Effect.fail(error);
-			return (prepared.tool.risk === "observe" || error instanceof ToolExecutorInputRejected ? operations.abort(request.operationId, binding) : operations.requireReconciliation(request.operationId, binding, error instanceof Error ? error.message : String(error))).pipe(Effect.zipRight(Effect.fail(error)));
-		}));
-	}) };
-}
-function prepareInvocation(hostTools, catalog, request) {
-	const authority = resolveInvocationAuthority(request.authority);
-	if (!authority.toolGrantSet.toolIds.includes(request.toolId)) throw new ToolInvocationDenied(`tool is not granted for this run: ${request.toolId}`);
-	const tool = hostTools.get(request.toolId) ?? catalog.snapshot().tools.find(({ id }) => id === request.toolId);
-	if (!tool) throw new ToolInvocationDenied(`tool is not present in the trusted catalog: ${request.toolId}`);
-	if (tool.version !== request.version) throw new ToolInvocationDenied(`tool version mismatch for ${request.toolId}: expected ${tool.version}`);
-	return {
-		authority,
-		tool
-	};
-}
-function createOperationBinding(authority, tool, input, digest) {
-	let inputDigest;
-	try {
-		inputDigest = createToolInputDigest$1(input, digest);
-	} catch (error) {
-		if (error instanceof InvalidToolInput) throw new ToolInvocationDenied(`tool input is not stable JSON: ${tool.id}`);
-		throw error;
-	}
-	return {
-		agentId: authority.agentId,
-		inputDigest,
-		instanceId: authority.instanceId,
-		sourceMessageId: authority.sourceMessageId,
-		toolId: tool.id,
-		toolVersion: tool.version
-	};
-}
-function createExecutionContext(authority, request, policyEpoch, tool) {
-	return Object.freeze({
-		agentId: authority.agentId,
-		callId: request.callId,
-		instanceId: authority.instanceId,
-		...authority.memory === void 0 ? {} : { memory: authority.memory },
-		...request.operationId === void 0 ? {} : { operationId: request.operationId },
-		policyEpoch,
-		runId: authority.runId,
-		sessionKey: authority.sessionKey,
-		toolId: tool.id,
-		toolVersion: tool.version,
-		...authority.endpointId === void 0 ? {} : { origin: Object.freeze({
-			allowedActorOpenIds: Object.freeze(authority.allowedActorOpenIds ?? []),
-			endpointId: authority.endpointId,
-			tenantKey: authority.tenantKey,
-			...authority.conversationId === void 0 ? {} : { conversationId: authority.conversationId }
-		}) },
-		...authority.sourceMessageId ? { sourceMessageId: authority.sourceMessageId } : {}
-	});
-}
-function replay(tool, input, result, context) {
-	if (!tool.replayCompleted) return Effect.succeed(result);
-	return Effect.try({
-		catch: (error) => error,
-		try: () => tool.replayCompleted(input, result, context)
-	}).pipe(Effect.flatMap((effect) => effect));
-}
-//#endregion
 //#region src/adapters/compatibility/tool-execution/tool-broker.ts
 function createToolBroker(options) {
 	return adaptEffectToolBroker(createToolBroker$1({
@@ -8992,66 +9159,6 @@ function adaptToolDescriptor(tool) {
 		version: tool.version
 	};
 }
-function encodeToolOperationSnapshot(record) {
-	return JSON.stringify({
-		record,
-		version: 1
-	});
-}
-function decodeToolOperationSnapshots(raw) {
-	const latest = /* @__PURE__ */ new Map();
-	for (const [index, line] of raw.split("\n").entries()) {
-		if (!line.trim()) continue;
-		const operation = decodeToolOperationSnapshot(line, index + 1);
-		const previous = latest.get(operation.operationId);
-		if (operation.revision !== (previous?.revision ?? 0) + 1) throw new Error(`invalid tool operation revision at line ${index + 1}`);
-		if (previous ? !previous.validateTransitionTo(operation) : operation.reconciliation !== void 0 || operation.state.status !== "pending") throw new Error(`invalid tool operation transition at line ${index + 1}`);
-		latest.set(operation.operationId, operation);
-	}
-	return [...latest.values()].map((operation) => operation.toSnapshot());
-}
-function decodeToolOperationSnapshot(line, lineNumber) {
-	const envelope = JSON.parse(line);
-	if (!isRecord$14(envelope) || envelope.version !== 1) throw new Error(`invalid tool operation snapshot at line ${lineNumber}`);
-	try {
-		return restoreToolOperation(envelope.record);
-	} catch {
-		throw new Error(`invalid tool operation snapshot at line ${lineNumber}`);
-	}
-}
-//#endregion
-//#region src/adapters/outbound/persistence/tool-operation/jsonl-tool-operation-ledger.ts
-function openJsonlToolOperationLedger$1(options) {
-	return Effect.gen(function* () {
-		const loaded = yield* load(options.filePath);
-		const initial = [];
-		for (const snapshot of loaded) {
-			const operation = restoreToolOperation(snapshot);
-			const recovered = operation.state.status === "pending" ? operation.recoverInterrupted() : operation;
-			if (recovered !== operation) yield* persist(options.filePath, recovered.toSnapshot());
-			initial.push(recovered.toSnapshot());
-		}
-		return createToolOperationLedger$1({
-			initial,
-			persist: (record) => persist(options.filePath, record)
-		});
-	});
-}
-function persist(filePath, record) {
-	return Effect.tryPromise({
-		catch: (error) => error,
-		try: async () => {
-			await mkdir(dirname(filePath), { recursive: true });
-			await appendFile(filePath, `${encodeToolOperationSnapshot(record)}\n`, "utf8");
-		}
-	});
-}
-function load(filePath) {
-	return Effect.tryPromise({
-		catch: (error) => error,
-		try: () => readPersistenceFile(filePath)
-	}).pipe(Effect.map((raw) => raw === void 0 ? [] : decodeToolOperationSnapshots(raw)));
-}
 //#endregion
 //#region src/adapters/compatibility/tool-execution/jsonl-tool-operation-ledger.ts
 async function openJsonlToolOperationLedger(options) {
@@ -14349,6 +14456,97 @@ function createHumanInteractionToolApprovalGateway(options) {
 	} };
 }
 //#endregion
+//#region src/adapters/compatibility/human-interaction/model-change-approval.ts
+/** Route accepted model requests through the existing durable human decision service. */
+function createHumanInteractionModelChangeApproval(options) {
+	const service = () => {
+		const selected = options.registry.resolve(options.endpointId);
+		if (!selected) throw new Error("Model approval endpoint is unavailable.");
+		return selected;
+	};
+	const requestOrGet = (input) => Effect.gen(function* () {
+		const interactions = service();
+		const existing = yield* interactions.get(input.interactionId);
+		if (existing) return projectApproval(existing, input);
+		const authority = input.authority;
+		if (!authority || authority.endpointId !== options.endpointId || authority.sourceMessageId !== input.principal.source.reference) return {
+			status: "rejected",
+			reason: "The original trusted approval source is unavailable."
+		};
+		return projectApproval(yield* interactions.requestUserDecision({
+			agentId: authority.agentId,
+			allowedActorOpenIds: [input.principal.ownerId],
+			expiresAt: input.expiresAt,
+			facts: approvalFacts(input),
+			instanceId: authority.instanceId,
+			interactionId: input.interactionId,
+			options: [{
+				description: "在所列预算内验证并应用本次模型变更。",
+				id: "approve",
+				label: "批准本次变更"
+			}, {
+				description: "保留当前选择，不执行付费探测。",
+				id: "reject",
+				label: "拒绝"
+			}],
+			runId: authority.runId,
+			sessionKey: authority.sessionKey,
+			sourceMessageId: authority.sourceMessageId,
+			summary: "仅批准这一次请求；不会扩大到其他 provider 或增加预算。",
+			tenantKey: authority.tenantKey,
+			title: "确认模型变更"
+		}), input);
+	});
+	return {
+		requestOrGet,
+		waitForResolution: (input) => Effect.gen(function* () {
+			const initial = yield* requestOrGet(input);
+			if (initial.status !== "pending") return initial;
+			return projectApproval(yield* service().waitForResolution({ interactionId: input.interactionId }), input);
+		})
+	};
+}
+function approvalFacts(input) {
+	return [
+		{
+			label: "请求",
+			value: input.request.requestId
+		},
+		{
+			label: "操作",
+			value: input.request.operation
+		},
+		{
+			label: "目标",
+			value: input.request.target ? `${input.request.target.provider}/${input.request.target.model}` : "上一模型"
+		},
+		{
+			label: "基准 revision",
+			value: String(input.request.expectedRevision)
+		},
+		{
+			label: "预算",
+			value: `最多 ${input.budget.maxPaidRequests} 次付费请求、${input.budget.maxOutputTokens} 个输出 token；包含一次恢复预留。`
+		},
+		{
+			label: "截止时间",
+			value: input.expiresAt
+		}
+	];
+}
+function projectApproval(interaction, input) {
+	if (interaction.kind !== "user-decision" || interaction.id !== input.interactionId || interaction.sourceMessageId !== input.principal.source.reference || interaction.allowedActorOpenIds.length !== 1 || interaction.allowedActorOpenIds[0] !== input.principal.ownerId || JSON.stringify(interaction.facts) !== JSON.stringify(approvalFacts(input)) || interaction.expiresAt !== input.expiresAt) return {
+		status: "rejected",
+		reason: "The stored approval does not match this model request."
+	};
+	if (interaction.state.status === "pending") return { status: "pending" };
+	if (interaction.state.status === "selected" && interaction.state.optionId === "approve") return { status: "approved" };
+	return {
+		status: "rejected",
+		reason: "The model change approval was declined or expired."
+	};
+}
+//#endregion
 //#region src/adapters/compatibility/human-interaction/routed-tool-approval-service.ts
 function createRoutedHumanInteractionToolApprovalService(registry) {
 	return { consume: async (request) => {
@@ -14844,4 +15042,4 @@ function mapOptionalSnapshot(interaction) {
 	return interaction === void 0 ? void 0 : toHumanInteractionSnapshot(interaction);
 }
 //#endregion
-export { completeBackgroundSessionStop as $, createFeishuAgentRunCard as $n, createUuidRunIds as $r, openJsonlToolOperationLedger as $t, AUTOMATION_SUPPRESSION_PREFIX as A, createRecoveryControl as Ai, createLangfuseAgentTelemetry as An, createAgentCommandFromFeishuMessage as Ar, openJsonlBackgroundSessionRepository as At, validateProjectSkillCatalog as B, RUN_PRESENTATION_SCHEMA_VERSION as Bi, createFeishuTopicContextResolver as Bn, createAgentCommandFromFeishuCardAction as Br, progressDeliveryId as Bt, commitAutomationOutcome as C, createJsonFetchRequest as Ci, InvalidAutomationPresentation as Cn, createCompositeRivusDaemonTransport as Cr, resolveBackgroundSessionSupervisorIntervalMs as Ct, createPluginStateStore as D, openJsonFeishuSessionStore as Di, createPiAgentLoop as Dn, shouldAcceptFeishuEndpointMessage as Dr, createBackgroundSessionSupervisor as Dt, PluginStateConflict as E, createSessionScheduler as Ei, createPiSessionRegistry as En, createFeishuMessageWorker as Er, createBackgroundSessionHostTools as Et, CompactionError as F, openJsonlFeishuCardDeliveryLedger as Fi, AgentEventLogStoreError as Fn, InvalidFeishuSessionReference as Fr, isBackgroundSessionState as Ft, createRivusMemoryToolDescriptor as G, createConfiguredFeishuCardKitTargetCreator as Gn, createDefaultAgentHarnessClientFromCallback as Gr, InvalidRivusEndpointBinding as Gt, createAgentLoopPromptTransformer as H, DEFAULT_CONVERSATION_PROGRESS_DISPLAY as Hi, createConfiguredFeishuMessageReactionSender as Hn, createAgentRuntime as Hr, terminalDeliveryId as Ht, AgentContextBudgetExceeded as I, createFeishuCardDeliveryLedger as Ii, createJsonlAgentEventLog as In, createFeishuConversationId as Ir, createBackgroundSessionService as It, MEMORY_SCOPES as J, createConfiguredFeishuCardKitPublisher as Jn, createDefaultAgentHarnessFromTextCallback as Jr, createFeishuDeploymentEndpoint as Jt, createMemoryNamespace as K, createFeishuCardKitOpenApiTargetCreator as Kn, createDefaultAgentHarnessClientFromTextCallback as Kr, createRivusAgentHost as Kt, assembleAgentContext as L, createFeishuCardDeliveryReconciler as Li, createConfiguredRivusDaemonBootstrap as Ln, createFeishuSessionKey as Lr, BackgroundSessionRepositoryConflict as Lt, createAutomationMandateStore as M, InvalidRecoveryAction as Mi, createOpenTelemetryAgentEventSink as Mn, InvalidFeishuMessageContent as Mr, openJsonlBackgroundSessionDeliveryStore as Mt, AutomationMandateError as N, createRecoveryAction as Ni, createOpenTelemetryAgentTelemetry as Nn, UnsupportedFeishuMessage as Nr, createBackgroundSessionDeliveryStore as Nt, openJsonAutomationTickRepository as O, createFeishuSessionStore as Oi, createPiSdkAgentLoop as On, createFeishuMessageQueue as Or, BackgroundSessionDeliveryConflict as Ot, createCompactionService as P, createFeishuInboxRepository as Pi, createTelemetryContentRedactor as Pn, readFeishuMessageContent as Pr, BACKGROUND_SESSION_JSONL_VERSION as Pt, completeBackgroundSessionStep as Q, FEISHU_AGENT_CARD_PROGRESS_ELEMENT_ID as Qn, createSystemClock as Qr, openJsonlRecoveryControl as Qt, openJsonlAgentMemoryService as R, createFeishuStreamProjector as Ri, restoreConfiguredRivusDaemonBootstrap as Rn, InvalidFeishuCardAction as Rr, BackgroundSessionRepositoryCorrupted as Rt, DelegationDenied as S, isTerminalAgentRunPhase as Si, AUTOMATION_PRESENTATION_SCHEMA_VERSION as Sn, createRivusDaemonStatusReporter as Sr, DEFAULT_BACKGROUND_SESSION_SUPERVISOR_INTERVAL_MS as St, createDeliveryOutbox as T, SessionSchedulerDisposed as Ti, readAutomationPresentation as Tn, createFeishuWorkerLoop as Tr, narrowBackgroundSessionDefinition as Tt, createProjectMemoryPromptPreparer as U, createConfiguredFeishuTextReplySender as Un, createDefaultAgentHarness as Ur, createAgentMemoryService as Ut, validateProjectSkillCommand as V, hasInspectableRunProgress as Vi, composeFeishuTopicPrompt as Vn, mergePiProviderBaseUrlOverride as Vr, sessionIdFromSessionKey as Vt, createRivusMemoryTool as W, createConfiguredFeishuCardRolloverRuntime as Wn, createDefaultAgentHarnessClient as Wr, AgentMemoryError as Wt, appendBackgroundSessionInput as X, createFeishuCardKitOpenApiClient as Xn, createDefaultAgentRuntimeFromCallback as Xr, createAgentRuntimePool as Xt, BackgroundSessionTransitionDenied as Y, createFeishuCardKitPublisher as Yn, createDefaultAgentRuntime as Yr, createAgentHarnessPooledRuntime as Yt, claimBackgroundSession as Z, FEISHU_AGENT_CARD_ELEMENT_ID as Zn, createDefaultAgentRuntimeFromTextCallback as Zr, createAgentInstanceRegistry as Zt, loadNodeRivusPluginModule as _, isAssistantTextDeltaEvent as _i, FeishuCardTargetNotFound as _n, createFeishuAgentRuntime as _r, DEFAULT_BACKGROUND_SESSION_LIFETIME_MS as _t, createInMemoryHumanInteractionRepository as a, createAgentHarness as ai, createAgentsMdInstructionsProvider as an, createRateLimitedFeishuPublisher as ar, parkBackgroundSessionForReconciliation as at, createDelegationService as b, evolveAgentRun as bi, createJsonFileFeishuCardTargetRegistry as bn, createFeishuCardActionErrorResponse as br, DEFAULT_BACKGROUND_SESSION_RETRY_BACKOFF_MS as bt, createConfiguredFeishuAutomationCardSender as c, AgentHarnessBusy as ci, WorkspaceInstructionsSourceError as cn, createFeishuCardRollover as cr, requestBackgroundSessionStop as ct, createHumanInteractionEndpointRegistry as d, createAgentConversationMessages as di, createTestClock as dn, acceptsCardPresentationProgress as dr, suspendBackgroundSession as dt, createAgentHarnessClient as ei, createToolBroker as en, FeishuOpenApiError as er, createBackgroundSession as et, HumanInteractionTransitionDenied as f, createAgentTranscriptMessages as fi, createFeishuPeriodicFlush as fn, activeCardPresentation as fr, createBackgroundSessionCard as ft, createRivusDeploymentDaemon as g, isAgentToolExecutionEvent as gi, createFeishuCardPresentationStore as gn, restoreAgentHistory as gr, DEFAULT_BACKGROUND_SESSION_LEASE_RENEWAL_INTERVAL_MS as gt, loadRivusDeploymentManifest as h, replayAgentHistory as hi, FeishuCardPresentationNotFound as hn, createLazyFeishuWebSocketEventDispatcher as hr, DEFAULT_BACKGROUND_SESSION_LEASE_MS as ht, createFeishuHumanInteractionPresenter as i, createAgentDomainEventSink as ii, requiresToolApproval as in, createFeishuTenantAccessTokenProvider as ir, isBackgroundSessionTerminalPhase as it, createDailyAutomationSchedule as j, createToolOperationLedger as ji, resolveLangfuseTelemetryConfig as jn, describeFeishuMessageIntake as jr, BACKGROUND_SESSION_DELIVERY_JSONL_VERSION as jt, createScheduledAutomation as k, openJsonlFeishuInboxRepository as ki, LangfuseTelemetryConfigError as kn, createFeishuAgentDaemon as kr, createBackgroundSessionRepository as kt, createRoutedHumanInteractionToolApprovalService as l, AgentLoopFailed as li, createFixedClock as ln, DEFAULT_CARD_STREAM_LEASE_MS as lr, requeueInterruptedBackgroundSessionStep as lt, createConfiguredRivusDeploymentDaemon as m, replayAgentTranscript as mi, createFeishuCotPublisher as mn, createFeishuWebSocketDaemon as mr, resolveFeishuDeliveryChatId as mt, createConfiguredFeishuHumanInteractionPresenter as n, createAgentDomainEventSinkFromCallback as ni, createInvocationAuthority as nn, createFeishuOpenApiClient as nr, isBackgroundSessionDue as nt, createJsonlHumanInteractionRepository as o, AgentEventHandlerFailed as oi, createWorkspaceRootHandle as on, createCoalescingFeishuPublisher as or, releaseBackgroundSessionLease as ot, transitionHumanInteraction as p, createAgentTranscriptTurn as pi, FeishuCotProtocolError as pn, isCardPresentationHandoffDue as pr, createConfiguredFeishuBackgroundSessionDelivery as pt, restrictMemoryScopesForAudience as q, createFeishuCardTargetPreparation as qn, createDefaultAgentHarnessFromCallback as qr, createFeishuPresentationPreparation as qt, createFeishuHumanInteractionCard as r, createAgentRunUpdateHandler as ri, createToolInputDigest as rn, FeishuTenantAccessTokenError as rr, isBackgroundSessionLeaseExpired as rt, HumanInteractionRepositoryError as s, AgentEventSinkFailed as si, InvalidWorkspaceRoot as sn, createFeishuCardRolloverSupervisor as sr, renewBackgroundSessionLease as st, createHumanInteractionService as t, createAgentDomainEventHandler as ti, ToolInvocationDenied as tn, createConfiguredFeishuOpenApiClient as tr, failBackgroundSessionStep as tt, createHumanInteractionToolApprovalGateway as u, AgentRunCancelled as ui, createSequenceRunIds as un, CardPresentationTransitionDenied as ur, resolveBackgroundSessionReconciliation as ut, loadRivusDeployment as v, isAssistantThinkingDeltaEvent as vi, FeishuCardTargetRegistryStoreError as vn, createFeishuEventHandlers as vr, DEFAULT_BACKGROUND_SESSION_MAX_CONCURRENT_SESSIONS as vt, DeliveryOutboxError as w, SessionSchedulerCapacityExceeded as wi, createAutomationPresentation as wn, createRivusDaemonProcess as wr, extendBackgroundSessionDefinition as wt, intersectToolIds as x, initialAgentRunState as xi, createRunPresentationProjector as xn, createRivusDaemonStatusHttpServer as xr, DEFAULT_BACKGROUND_SESSION_STEP_TIMEOUT_MS as xt, createSubagentCoordinator as y, isTerminalAgentDomainEvent as yi, createInMemoryFeishuCardTargetRegistry as yn, createFeishuCardActionCallbackResponse as yr, DEFAULT_BACKGROUND_SESSION_MAX_CONSECUTIVE_FAILURES as yt, InvalidProjectSkillCatalog as z, createPresentedValue as zi, InvalidFeishuTopicContext as zn, UnsupportedFeishuCardAction as zr, BackgroundSessionCallerDenied as zt };
+export { completeBackgroundSessionStep as $, createFeishuAgentRunCard as $n, createAgentHarnessClient as $r, openJsonlRecoveryControl as $t, createScheduledAutomation as A, createToolOperationLedger as Ai, createLangfuseAgentTelemetry as An, createAgentCommandFromFeishuMessage as Ar, createBackgroundSessionRepository as At, InvalidProjectSkillCatalog as B, hasInspectableRunProgress as Bi, createFeishuTopicContextResolver as Bn, createAgentCommandFromFeishuCardAction as Br, BackgroundSessionCallerDenied as Bt, DelegationDenied as C, SessionSchedulerCapacityExceeded as Ci, InvalidAutomationPresentation as Cn, createCompositeRivusDaemonTransport as Cr, DEFAULT_BACKGROUND_SESSION_SUPERVISOR_INTERVAL_MS as Ct, PluginStateConflict as D, createFeishuSessionStore as Di, createPiAgentLoop as Dn, shouldAcceptFeishuEndpointMessage as Dr, createBackgroundSessionHostTools as Dt, createDeliveryOutbox as E, openJsonFeishuSessionStore as Ei, createPiSessionRegistry as En, createFeishuMessageWorker as Er, narrowBackgroundSessionDefinition as Et, createCompactionService as F, createFeishuCardDeliveryLedger as Fi, AgentEventLogStoreError as Fn, InvalidFeishuSessionReference as Fr, BACKGROUND_SESSION_JSONL_VERSION as Ft, createRivusMemoryTool as G, readPersistenceFile as Gi, createConfiguredFeishuCardKitTargetCreator as Gn, createDefaultAgentHarnessClientFromTextCallback as Gr, AgentMemoryError as Gt, validateProjectSkillCommand as H, ToolInvocationDenied as Hi, createConfiguredFeishuMessageReactionSender as Hn, createDefaultAgentHarness as Hr, sessionIdFromSessionKey as Ht, CompactionError as I, createFeishuCardDeliveryReconciler as Ii, createJsonlAgentEventLog as In, createFeishuConversationId as Ir, isBackgroundSessionState as It, restrictMemoryScopesForAudience as J, mergePiProviderModelDeclaration as Ji, createConfiguredFeishuCardKitPublisher as Jn, createDefaultAgentRuntime as Jr, createFeishuPresentationPreparation as Jt, createRivusMemoryToolDescriptor as K, isRecord$14 as Ki, createFeishuCardKitOpenApiTargetCreator as Kn, createDefaultAgentHarnessFromCallback as Kr, InvalidRivusEndpointBinding as Kt, AgentContextBudgetExceeded as L, createFeishuStreamProjector as Li, createConfiguredRivusDaemonBootstrap as Ln, createFeishuSessionKey as Lr, createBackgroundSessionService as Lt, createDailyAutomationSchedule as M, createRecoveryAction as Mi, createOpenTelemetryAgentEventSink as Mn, InvalidFeishuMessageContent as Mr, BACKGROUND_SESSION_DELIVERY_JSONL_VERSION as Mt, createAutomationMandateStore as N, createFeishuInboxRepository as Ni, createOpenTelemetryAgentTelemetry as Nn, UnsupportedFeishuMessage as Nr, openJsonlBackgroundSessionDeliveryStore as Nt, createPluginStateStore as O, openJsonlFeishuInboxRepository as Oi, createPiSdkAgentLoop as On, createFeishuMessageQueue as Or, createBackgroundSessionSupervisor as Ot, AutomationMandateError as P, openJsonlFeishuCardDeliveryLedger as Pi, createTelemetryContentRedactor as Pn, readFeishuMessageContent as Pr, createBackgroundSessionDeliveryStore as Pt, claimBackgroundSession as Q, FEISHU_AGENT_CARD_PROGRESS_ELEMENT_ID as Qn, createUuidRunIds as Qr, createAgentInstanceRegistry as Qt, assembleAgentContext as R, createPresentedValue as Ri, restoreConfiguredRivusDaemonBootstrap as Rn, InvalidFeishuCardAction as Rr, BackgroundSessionRepositoryConflict as Rt, intersectToolIds as S, createJsonFetchRequest as Si, AUTOMATION_PRESENTATION_SCHEMA_VERSION as Sn, createRivusDaemonStatusReporter as Sr, DEFAULT_BACKGROUND_SESSION_STEP_TIMEOUT_MS as St, DeliveryOutboxError as T, createSessionScheduler as Ti, readAutomationPresentation as Tn, createFeishuWorkerLoop as Tr, extendBackgroundSessionDefinition as Tt, createAgentLoopPromptTransformer as U, createToolBroker$1 as Ui, createConfiguredFeishuTextReplySender as Un, createDefaultAgentHarnessClient as Ur, terminalDeliveryId as Ut, validateProjectSkillCatalog as V, DEFAULT_CONVERSATION_PROGRESS_DISPLAY as Vi, composeFeishuTopicPrompt as Vn, createAgentRuntime as Vr, progressDeliveryId as Vt, createProjectMemoryPromptPreparer as W, openJsonlToolOperationLedger$1 as Wi, createConfiguredFeishuCardRolloverRuntime as Wn, createDefaultAgentHarnessClientFromCallback as Wr, createAgentMemoryService as Wt, BackgroundSessionTransitionDenied as X, createFeishuCardKitOpenApiClient as Xn, createDefaultAgentRuntimeFromTextCallback as Xr, createAgentHarnessPooledRuntime as Xt, MEMORY_SCOPES as Y, writeAtomicTextFile as Yi, createFeishuCardKitPublisher as Yn, createDefaultAgentRuntimeFromCallback as Yr, createFeishuDeploymentEndpoint as Yt, appendBackgroundSessionInput as Z, FEISHU_AGENT_CARD_ELEMENT_ID as Zn, createSystemClock as Zr, createAgentRuntimePool as Zt, createRivusDeploymentDaemon as _, isAssistantThinkingDeltaEvent as _i, FeishuCardTargetNotFound as _n, createFeishuAgentRuntime as _r, DEFAULT_BACKGROUND_SESSION_LEASE_RENEWAL_INTERVAL_MS as _t, createInMemoryHumanInteractionRepository as a, AgentEventHandlerFailed as ai, createAgentsMdInstructionsProvider as an, createRateLimitedFeishuPublisher as ar, isBackgroundSessionTerminalPhase as at, createSubagentCoordinator as b, initialAgentRunState as bi, createJsonFileFeishuCardTargetRegistry as bn, createFeishuCardActionErrorResponse as br, DEFAULT_BACKGROUND_SESSION_MAX_CONSECUTIVE_FAILURES as bt, createConfiguredFeishuAutomationCardSender as c, AgentLoopFailed as ci, WorkspaceInstructionsSourceError as cn, createFeishuCardRollover as cr, renewBackgroundSessionLease as ct, createHumanInteractionToolApprovalGateway as d, createAgentTranscriptMessages as di, createTestClock as dn, acceptsCardPresentationProgress as dr, resolveBackgroundSessionReconciliation as dt, createAgentDomainEventHandler as ei, openJsonlToolOperationLedger as en, FeishuOpenApiError as er, completeBackgroundSessionStop as et, createHumanInteractionEndpointRegistry as f, createAgentTranscriptTurn as fi, createFeishuPeriodicFlush as fn, activeCardPresentation as fr, suspendBackgroundSession as ft, loadRivusDeploymentManifest as g, isAssistantTextDeltaEvent as gi, createFeishuCardPresentationStore as gn, restoreAgentHistory as gr, DEFAULT_BACKGROUND_SESSION_LEASE_MS as gt, createConfiguredRivusDeploymentDaemon as h, isAgentToolExecutionEvent as hi, FeishuCardPresentationNotFound as hn, createLazyFeishuWebSocketEventDispatcher as hr, resolveFeishuDeliveryChatId as ht, createFeishuHumanInteractionPresenter as i, createAgentHarness as ii, requiresToolApproval as in, createFeishuTenantAccessTokenProvider as ir, isBackgroundSessionLeaseExpired as it, AUTOMATION_SUPPRESSION_PREFIX as j, InvalidRecoveryAction as ji, resolveLangfuseTelemetryConfig as jn, describeFeishuMessageIntake as jr, openJsonlBackgroundSessionRepository as jt, openJsonAutomationTickRepository as k, createRecoveryControl as ki, LangfuseTelemetryConfigError as kn, createFeishuAgentDaemon as kr, BackgroundSessionDeliveryConflict as kt, createRoutedHumanInteractionToolApprovalService as l, AgentRunCancelled as li, createFixedClock as ln, DEFAULT_CARD_STREAM_LEASE_MS as lr, requestBackgroundSessionStop as lt, transitionHumanInteraction as m, replayAgentHistory as mi, createFeishuCotPublisher as mn, createFeishuWebSocketDaemon as mr, createConfiguredFeishuBackgroundSessionDelivery as mt, createConfiguredFeishuHumanInteractionPresenter as n, createAgentRunUpdateHandler as ni, createInvocationAuthority as nn, createFeishuOpenApiClient as nr, failBackgroundSessionStep as nt, createJsonlHumanInteractionRepository as o, AgentEventSinkFailed as oi, createWorkspaceRootHandle as on, createCoalescingFeishuPublisher as or, parkBackgroundSessionForReconciliation as ot, HumanInteractionTransitionDenied as p, replayAgentTranscript as pi, FeishuCotProtocolError as pn, isCardPresentationHandoffDue as pr, createBackgroundSessionCard as pt, createMemoryNamespace as q, mergePiProviderBaseUrlOverride as qi, createFeishuCardTargetPreparation as qn, createDefaultAgentHarnessFromTextCallback as qr, createRivusAgentHost as qt, createFeishuHumanInteractionCard as r, createAgentDomainEventSink as ri, createToolInputDigest as rn, FeishuTenantAccessTokenError as rr, isBackgroundSessionDue as rt, HumanInteractionRepositoryError as s, AgentHarnessBusy as si, InvalidWorkspaceRoot as sn, createFeishuCardRolloverSupervisor as sr, releaseBackgroundSessionLease as st, createHumanInteractionService as t, createAgentDomainEventSinkFromCallback as ti, createToolBroker as tn, createConfiguredFeishuOpenApiClient as tr, createBackgroundSession as tt, createHumanInteractionModelChangeApproval as u, createAgentConversationMessages as ui, createSequenceRunIds as un, CardPresentationTransitionDenied as ur, requeueInterruptedBackgroundSessionStep as ut, loadNodeRivusPluginModule as v, isTerminalAgentDomainEvent as vi, FeishuCardTargetRegistryStoreError as vn, createFeishuEventHandlers as vr, DEFAULT_BACKGROUND_SESSION_LIFETIME_MS as vt, commitAutomationOutcome as w, SessionSchedulerDisposed as wi, createAutomationPresentation as wn, createRivusDaemonProcess as wr, resolveBackgroundSessionSupervisorIntervalMs as wt, createDelegationService as x, isTerminalAgentRunPhase as xi, createRunPresentationProjector as xn, createRivusDaemonStatusHttpServer as xr, DEFAULT_BACKGROUND_SESSION_RETRY_BACKOFF_MS as xt, loadRivusDeployment as y, evolveAgentRun as yi, createInMemoryFeishuCardTargetRegistry as yn, createFeishuCardActionCallbackResponse as yr, DEFAULT_BACKGROUND_SESSION_MAX_CONCURRENT_SESSIONS as yt, openJsonlAgentMemoryService as z, RUN_PRESENTATION_SCHEMA_VERSION as zi, InvalidFeishuTopicContext as zn, UnsupportedFeishuCardAction as zr, BackgroundSessionRepositoryCorrupted as zt };