@yielded/agent 0.1.0-beta.175 → 0.1.0-beta.177

package/dist/{DurableAgentRuntime-CPlw5_7e.mjs → DurableAgentRuntime-CGW93k81.mjs}

@@ -4,6 +4,8 @@ import { n as utf8ByteLength } from "./utf8-B5pAmhTo.mjs";
 import { AgentPolicy } from "./core/AgentPolicy.mjs";
 import { IdempotencyKey, Principal, Receipt } from "./core/Receipt.mjs";
 import { Update, UpdateError } from "./core/AgentUpdates.mjs";
+import { n as getToolExecutionClass } from "./tool-execution-Ba7tO7Pt.mjs";
+import { s as nativeUpdateId } from "./Agent-B3J0B4l6.mjs";
 import { c as captureContext, s as capture } from "./FailureDiagnostic-D9oW23Cn.mjs";
 import { AgentApprovalDenied, AgentApprovalPending, AgentInputDecodeError, AgentInputError, AgentPersistenceCapacityError, AgentToolAuthorizationDenied, PolicyLimit } from "./core/AgentError.mjs";
 import { IdGenerator as IdGenerator$1 } from "./core/IdGenerator.mjs";
@@ -11,39 +13,38 @@ import { t as copyJson } from "./json-BlJVQZxN.mjs";
 import { DelegationDepth, SubagentBudgetReservation, SubagentDelegationCaps, SubagentGrant, SubagentParentLink, SubagentReservationAmounts, getToolExecutionKind } from "./core/SubagentContract.mjs";
 import { o as Selection, s as Snapshot } from "./ToolExposure-hTJT2ekj.mjs";
 import { ChildRunUsage, InputTokenUsage, ModelCallUsage, ModelResponseIdentity, ModelUsageGroup, OutputTokenUsage, RunUsageReport, RunUsageSummary, emptyRunTotals, runTotalsFromSummary, sumRunTotals, summarizeModelUsage, unknownRunTotals } from "./core/Usage.mjs";
-import { C as MessageStatus, S as MessageRef, _ as WorkerStop, b as WorkerUpdate, c as WorkerError, f as WorkerRef, l as WorkerHistoryEntry, o as WorkerCompletion, r as FrameworkMessage } from "./Worker-DZjdMjZn.mjs";
-import { a as PeerMessageCapacity, d as MessageAdmission, f as MessagingError, i as PeerDeliveryLifetime, o as PeerRoutes, p as PeerName, r as PeerAuthorizer, t as MessagingHost } from "./MessagingHost-CZCyrnvJ.mjs";
+import { C as MessageStatus, S as MessageRef, _ as WorkerStop, b as WorkerUpdate, c as WorkerError, f as WorkerRef, l as WorkerHistoryEntry, o as WorkerCompletion, r as FrameworkMessage } from "./Worker-CtuUwYOK.mjs";
+import { a as PeerMessageCapacity, d as MessageAdmission, f as MessagingError, i as PeerDeliveryLifetime, o as PeerRoutes, p as PeerName, r as PeerAuthorizer, t as MessagingHost } from "./MessagingHost-BILcuj0V.mjs";
 import { SubagentHost } from "./engine/SubagentHost.mjs";
 import { Store, makeMemoryStore } from "./core/Thread.mjs";
 import { ThreadHistory } from "./engine/ThreadHistory.mjs";
 import { n as RunToolVisibility } from "./ToolExposure-DBATXxmL.mjs";
-import { C as boundedValueFootprint, n as AgentChildPending, p as renderInputPrompt, u as executeWithUsageAccountingUnknown } from "./AgentRuntime-DaDKMasp.mjs";
+import { C as boundedValueFootprint, n as AgentChildPending, p as renderInputPrompt, u as executeWithUsageAccountingUnknown } from "./AgentRuntime-DrQfy4cL.mjs";
 import { ContextRolloverTool } from "./engine/ContextWindow.mjs";
-import { getToolExecutionClass } from "./engine/DurableStep.mjs";
 import { CompactionError, ContextCompactor } from "./engine/ContextCompactor.mjs";
 import { AgentUpdateAcceptance, CurrentToolFailureObserver, ModelUsageAccounting, RunContextPreparation, RunContextPreparationPassthrough, RunToolAuthorization, RunToolScheduling } from "./engine/RunOptions.mjs";
-import { A as MAX_RUN_EVIDENCE_RECORDS, At as WorkHandoffCompleted, Bt as WorkerReportingIntent, Ct as ToolCallResolved, Dt as ToolStepSettled, Et as ToolOperation, Ft as WorkerInputRequested, G as PromptRecord, H as PeerMessagePrepared, I as ModelCallAborted, It as WorkerOrigin, Mt as WorkerContinuation, Nt as WorkerInputCompleted, O as MAX_RUN_CONTINUATION_BYTES, Ot as ToolUnavailable, P as MAX_RUN_TOOL_CALL_IDENTITIES, Pt as WorkerInputRefused, R as ModelResponseInterrupted, Rt as WorkerReportPrepared, Tt as ToolCallUnknown, U as PersistedJson, V as PROMPT_EVIDENCE_TAGS, Vt as WorkerStopRequested, X as RecordEnvelope, Z as RecordId, _t as SubmissionSettledRecord, at as RunDurationExhausted, bt as ToolApprovalDecided, c as CanonicalBatch, et as RepairAnnotated, f as CanonicalSequence, ft as SubagentJoined, g as DeclaredToolCall, gt as SubmissionSettled, ht as SubagentStarted, i as BatchId, jt as WorkerAdmission, kt as UserInputRecorded, lt as RunStartedRecord, mt as SubagentRequested, n as AgentUpdateEmitted, o as CURRENT_RECORD_FORMAT, p as CompactionCreated, pt as SubagentLineageRecorded, rt as RunContextRecorded, st as RunPolicyUsageReserved, t as AbortRequested, ut as SettlementFailureDiagnostic, v as DefinitionDigests, vt as SubtreeBudgetReserved, w as MAX_PERSISTED_JSON_BYTES, wt as ToolCallSettled, xt as ToolApprovalRequested, zt as WorkerReportRefused } from "./Records-DzL4Kbtw.mjs";
-import { i as digestCanonicalJson, r as canonicalJson, s as digestJson } from "./Digest-C3EODOee.mjs";
+import { A as MAX_RUN_EVIDENCE_RECORDS, At as WorkHandoffCompleted, Bt as WorkerReportingIntent, Ct as ToolCallResolved, Dt as ToolStepSettled, Et as ToolOperation, Ft as WorkerInputRequested, G as PromptRecord, H as PeerMessagePrepared, I as ModelCallAborted, It as WorkerOrigin, Mt as WorkerContinuation, Nt as WorkerInputCompleted, O as MAX_RUN_CONTINUATION_BYTES, Ot as ToolUnavailable, P as MAX_RUN_TOOL_CALL_IDENTITIES, Pt as WorkerInputRefused, R as ModelResponseInterrupted, Rt as WorkerReportPrepared, Tt as ToolCallUnknown, U as PersistedJson, V as PROMPT_EVIDENCE_TAGS, Vt as WorkerStopRequested, X as RecordEnvelope, Z as RecordId, _t as SubmissionSettledRecord, at as RunDurationExhausted, bt as ToolApprovalDecided, c as CanonicalBatch, et as RepairAnnotated, f as CanonicalSequence, ft as SubagentJoined, g as DeclaredToolCall, gt as SubmissionSettled, ht as SubagentStarted, i as BatchId, jt as WorkerAdmission, kt as UserInputRecorded, lt as RunStartedRecord, mt as SubagentRequested, n as AgentUpdateEmitted, o as CURRENT_RECORD_FORMAT, p as CompactionCreated, pt as SubagentLineageRecorded, rt as RunContextRecorded, st as RunPolicyUsageReserved, t as AbortRequested, ut as SettlementFailureDiagnostic, v as DefinitionDigests, vt as SubtreeBudgetReserved, w as MAX_PERSISTED_JSON_BYTES, wt as ToolCallSettled, xt as ToolApprovalRequested, zt as WorkerReportRefused } from "./Records-CZRedCE7.mjs";
+import { i as digestCanonicalJson, r as canonicalJson, s as digestJson } from "./Digest-ft4ku9pj.mjs";
 import { AbortCommand, AbortIntentRequest, AdmissionPolicyError, AdmissionRequest, ApprovalDecisionCommand, ApprovalPendingSuspension, BeginChildBudgetReleaseRequest, ChildReservationId, ChildSettledNotification, ClaimHandoff, ClaimRequest, FundingOwnerRequest, LedgerError, MarkReadyRequest, MarkUnknownRequest, ParentLinkage, RecoverySnapshotRequest, ReleaseChildBudgetRequest, RevertJoiningRequest, Settlement, SettlementFinalization, SubmissionLedger, SubmissionLookupById, SubmissionLookupByKey, SubmissionScheduling, UnknownResolutionCommand, WaitingChild, WaitingForChildSuspension, WorkerLedgerState, submissionAbortBatchId, submissionAbortRecordId, submissionInputBatchId, submissionInputRecordId, submissionSettlementBatchId, submissionSettlementId, submissionSettlementRecordId, unknownResolutionKind } from "./durable/SubmissionLedger.mjs";
 import { DeclaredPendingBatchEvidence, OpenDelegationCallEvidence, OpenToolCallEvidence, PendingApprovalEvidence, RecoveryDecision, RecoveryEvidence, classifyRecovery, pendingApprovalForRecovery } from "./durable/Recovery.mjs";
 import { ExplainedEvidence, ExplainedSubmission, ExplainedUnknownCall, ObligationEntry, ObligationReport, RecoveryExplanation, RetryRefused, obligationSeverityOf, predictRecoveryDisposition, recoveryDecisionMeaning } from "./durable/Admin.mjs";
-import { a as compileRegistrations, c as resolveDefinitionBinding, l as resolveWorkerBinding, n as CurrentBindingSelection, o as definitionDigestsEqual, s as makeLegacyWorkerBinding, t as BindingUnavailable, u as toolReplayContracts } from "./agent-registration-a6QYaG3h.mjs";
-import { $ as makeJournalMetadata, A as subagentRequestedRecordId, B as toolStepSettledRecordId, C as runStartedBatchId, D as subagentLineageBatchId, E as subagentJoinedRecordId, F as toolCallResolutionBatchId, G as turnResponseBatch, I as toolCallResolvedRecordId, K as turnResponseBatchId, L as toolCallResultBatchId, M as subagentStartedRecordId, N as toolApprovalDecisionRecordId, O as subagentLineageRecordId, P as toolApprovalRequestRecordId, R as toolCallUnknownRecordId, S as runIdForSubmission, T as subagentJoinBatchId, U as turnCanonicalBatch, V as turnApprovalsBatchId, W as turnIdForRun, X as workerOriginRecordId, Y as workerInputRecordId, Z as workerReportRecordId, _ as projectRunJournalStream, a as childIdempotencyKeyFor, b as runDurationBatchId, c as compactionRecordId, d as markUnknownBatchId, et as toolCallSettledRecordId, f as modelResponseInterruptedBatchId, h as peerMessageRecordId, i as approvalDecisionBatchId, j as subagentStartedBatchId, k as subagentRequestedBatchId, l as firstWorkerInputRecordId, m as modelResponseRecordId, o as childThreadIdFor, p as modelResponseInterruptedRecordId, q as turnResultsBatch, r as agentUpdateRecordId, s as compactionBatchId, t as RunJournalError, u as initialRunJournal, w as runStartedRecordId, x as runDurationRecordId, y as runCompletedRecordId, z as toolStepSettledBatchId } from "./RunJournal-CPMKcfd0.mjs";
-import { $ as ThreadTailRequest, B as ThreadPromptRead, F as ThreadIdentityRequest, I as ThreadMaterialization, J as ThreadStore, R as ThreadObservation, U as ThreadReader, V as ThreadRead, X as ThreadStoreError, Y as ThreadStoreDiagnostic, _t as isPreContinuationFact, bt as terminalUsageCharge, gt as executionRunIds, ht as canonicalRunIds, lt as readWorkerState, n as AppendRequest, ot as getRecord, p as MAX_THREAD_EXPORT_PAGE_BYTES, pt as captureRecord, st as getRunInput } from "./ThreadStore-EuUilthA.mjs";
+import { a as compileRegistrations, c as resolveDefinitionBinding, l as resolveWorkerBinding, n as CurrentBindingSelection, o as definitionDigestsEqual$1, s as makeLegacyWorkerBinding, t as BindingUnavailable, u as toolReplayContracts } from "./agent-registration-Dt57NAP6.mjs";
+import { $ as makeJournalMetadata, A as subagentRequestedRecordId, B as toolStepSettledRecordId, C as runStartedBatchId, D as subagentLineageBatchId, E as subagentJoinedRecordId, F as toolCallResolutionBatchId, G as turnResponseBatch, I as toolCallResolvedRecordId, K as turnResponseBatchId, L as toolCallResultBatchId, M as subagentStartedRecordId, N as toolApprovalDecisionRecordId, O as subagentLineageRecordId, P as toolApprovalRequestRecordId, R as toolCallUnknownRecordId, S as runIdForSubmission, T as subagentJoinBatchId, U as turnCanonicalBatch, V as turnApprovalsBatchId, W as turnIdForRun, X as workerOriginRecordId, Y as workerInputRecordId, Z as workerReportRecordId, _ as projectRunJournalStream, a as childIdempotencyKeyFor, b as runDurationBatchId, c as compactionRecordId, d as markUnknownBatchId, et as toolCallSettledRecordId, f as modelResponseInterruptedBatchId, h as peerMessageRecordId, i as approvalDecisionBatchId, j as subagentStartedBatchId, k as subagentRequestedBatchId, l as firstWorkerInputRecordId, m as modelResponseRecordId, o as childThreadIdFor, p as modelResponseInterruptedRecordId, q as turnResultsBatch, r as agentUpdateRecordId, s as compactionBatchId, t as RunJournalError, u as initialRunJournal, w as runStartedRecordId, x as runDurationRecordId, y as runCompletedRecordId, z as toolStepSettledBatchId } from "./RunJournal-oJLo-pjS.mjs";
+import { $ as ThreadTailRequest, B as ThreadPromptRead, F as ThreadIdentityRequest, I as ThreadMaterialization, J as ThreadStore, R as ThreadObservation, U as ThreadReader, V as ThreadRead, X as ThreadStoreError, Y as ThreadStoreDiagnostic, _t as isPreContinuationFact, bt as terminalUsageCharge, gt as executionRunIds, h as PreparedAppend, ht as canonicalRunIds, lt as readWorkerState, n as AppendRequest, ot as getRecord, p as MAX_THREAD_EXPORT_PAGE_BYTES, pt as captureRecord, st as getRunInput } from "./ThreadStore-Cn6FDWX9.mjs";
 import { ScheduledInputRefused, ScheduledInputRetryable } from "./durable/Schedule.mjs";
 import { PreparedInputAdmission } from "./durable/PreparedInputAdmission.mjs";
 import { PreparedInput } from "./durable/Subscription.mjs";
 import { MessageDeliveryDriver, MessageDeliveryFailpoint, MessageDeliveryRecord, MessageDeliveryStore, prepareMessageDelivery } from "./durable/MessageDelivery.mjs";
 import { DurableRuntimeFailpoint } from "./durable/DurableFailpoint.mjs";
-import { _ as readRunContext, a as canonicalRecordBytes, b as reference, f as runEvidence, g as digestRunHistory, l as readContinuation, m as validateSuffix, n as CurrentRunWriter, s as makeProgressWriter, t as CurrentRunSettlement, u as readRunEvidenceSnapshot, x as resolveEvidence, y as RunContextReader } from "./RunContinuation-BiyKJK32.mjs";
+import { _ as readRunContext, a as canonicalRecordBytes, b as reference, f as runEvidence, g as digestRunHistory, l as readContinuation, m as validateSuffix, n as CurrentRunWriter, s as makeProgressWriter, t as CurrentRunSettlement, u as readRunEvidenceSnapshot, x as resolveEvidence, y as RunContextReader } from "./RunContinuation-D42RFqjS.mjs";
 import { MAX_WORK_CURSOR_CHARS, ThreadWorkDiscovery, ThreadWorkEntry, ThreadWorkRequest, WorkDiscoveryUnavailable, decodeWorkCursor, deliveryPredecessor, encodeWorkCursor, operationEvidence, resolveWorkEvidence, validateWorkPage, workId } from "./durable/ThreadWork.mjs";
 import { WakeScheduler } from "./durable/WakeScheduler.mjs";
 import { n as safeUnknownString, t as inspectForeignDiagnostic } from "./foreign-diagnostic-DBQ1XHKh.mjs";
-import { c as threadCreatedBatchId, l as threadCreatedRecordId, n as WorkerAdmissionPort, o as ensureThreadCreated, r as WorkerAdmissionRequest, s as ensureWorkerOrigin } from "./WorkerAdmission-eBeXt_mu.mjs";
+import { c as threadCreatedBatchId, l as threadCreatedRecordId, n as WorkerAdmissionPort, o as ensureThreadCreated, r as WorkerAdmissionRequest, s as ensureWorkerOrigin } from "./WorkerAdmission-cfiK9aRi.mjs";
 import { i as unresolvedToolOperations, n as isUnresolvedToolOperation, r as toolOperationStates, t as initialDispatchBlockedTurns } from "./tool-operations-BXBmagY1.mjs";
 import { WorkerBudgetAuthorizer, WorkerConcurrencyLimit, WorkerConcurrencyResolver, WorkerHostAuthorizer, WorkerHostConfig, WorkerPolicyResolver } from "./durable/WorkerHost.mjs";
 import { OperationAuthorizationRequest, OperationAuthorizer, OperationDenied } from "./durable/OperationAuthorizer.mjs";
-import { o as makeRunWriter, r as RunStorage, s as StorageOwner } from "./RunStorage-CzutHJBE.mjs";
+import { o as makeRunWriter, r as RunStorage, s as StorageOwner } from "./RunStorage-BRGP3Tcu.mjs";
 import { SettlementPublication } from "./durable/SettlementPublisher.mjs";
 import { PendingSubmission, SettledSubmission } from "./durable/SubmissionStatus.mjs";
 import { DeclaredToolCallEvidence, ToolReconciler } from "./durable/ToolReconciler.mjs";
@@ -59,6 +60,23 @@ const storage = () => LedgerError.make({
 	message: "Durable update persistence failed"
 });
 const rejected = (reason) => UpdateError.make({ reason });
+const updateDigest = (threadId, runId, updateId) => digestJson([
+	threadId,
+	runId,
+	updateId
+]);
+const nativeParameters = Schema.Struct({ value: Schema.Json });
+const isNativeParameters = Schema.is(nativeParameters);
+const definitionDigestsEqual = Schema.toEquivalence(DefinitionDigests);
+const updateValuesEqual = Schema.toEquivalence(Schema.Json);
+/** Canonical native acceptance proves only this exact update call, never an external effect.
+* Its frozen delivery remains independently recoverable even when its Tool acknowledgement is lost.
+*/
+const nativeUpdateAccepted = (submission, call, records) => {
+	if (call.toolName !== "emit_update" || !isNativeParameters(call.parameters)) return false;
+	const value = call.parameters.value;
+	return records.some(({ record: { payload } }) => payload._tag === "AgentUpdateEmitted" && payload.update.threadId === submission.threadId && payload.update.agentId === submission.agentId && payload.update.runId === call.runId && payload.update.updateId === nativeUpdateId(call.runId, call.toolCallId) && definitionDigestsEqual(payload.definitions, submission.agentDigests) && updateValuesEqual(payload.update.value, value));
+};
 /** Acceptance is fenced by the actual emitting Attempt; recovery only recreates frozen outbox rows. */
 const makeAgentUpdateRuntime = Effect.fnUntraced(function* (options) {
 	const store = yield* ThreadStore;
@@ -68,6 +86,15 @@ const makeAgentUpdateRuntime = Effect.fnUntraced(function* (options) {
 	const crypto = yield* Crypto.Crypto;
 	const failpoint = yield* DurableRuntimeFailpoint;
 	const reader = ThreadReader.fromStore(store);
+	const accepted = Effect.fnUntraced(function* (submission, call) {
+		if (call.toolName !== "emit_update") return false;
+		const digest = yield* updateDigest(submission.threadId, call.runId, nativeUpdateId(call.runId, call.toolCallId)).pipe(Effect.provideService(Crypto.Crypto, crypto), Effect.mapError(storage));
+		const record = yield* getRecord({
+			threadId: submission.threadId,
+			recordId: RecordId.make(`agent-update:${digest}`)
+		}).pipe(Effect.provideService(ThreadReader, reader), Effect.mapError(storage));
+		return Option.isSome(record) && nativeUpdateAccepted(submission, call, [record.value]);
+	});
 	const readRun = Effect.fnUntraced(function* (threadId, submissionId) {
 		const tail = yield* store.inspectTail(ThreadTailRequest.make({ threadId })).pipe(Effect.mapError(storage));
 		const records = yield* readRunEvidenceSnapshot(threadId, submissionId, tail.tailSequence).pipe(Effect.provideService(ThreadReader, reader), Effect.provideService(Crypto.Crypto, crypto), Effect.mapError(storage));
@@ -151,11 +178,7 @@ const makeAgentUpdateRuntime = Effect.fnUntraced(function* (options) {
 		emit: Effect.fnUntraced(function* (request) {
 			const value = yield* Schema.encodeEffect(Schema.fromJsonString(PersistedJson))(request.value).pipe(Effect.flatMap(Schema.decodeEffect(Schema.fromJsonString(PersistedJson))), Effect.mapError(() => rejected("validation")));
 			const updateId = yield* Schema.decodeEffect(IdempotencyKey)(request.updateId).pipe(Effect.mapError(() => rejected("validation")));
-			const digest = yield* digestJson([
-				request.submission.threadId,
-				request.runId,
-				updateId
-			]).pipe(Effect.provideService(Crypto.Crypto, crypto), Effect.mapError(storage));
+			const digest = yield* updateDigest(request.submission.threadId, request.runId, updateId).pipe(Effect.provideService(Crypto.Crypto, crypto), Effect.mapError(storage));
 			const id = `agent-update:${digest}`;
 			const messageId = Schema.decodeSync(IdempotencyKey)(`worker-update:${digest}`);
 			const maxCount = request.maxCount ?? 32;
@@ -231,6 +254,7 @@ const makeAgentUpdateRuntime = Effect.fnUntraced(function* (options) {
 			ThreadNotMaterialized: () => storage(),
 			AppendConflict: () => storage()
 		})))),
+		accepted,
 		repair: insert,
 		repairRun
 	};
@@ -671,7 +695,7 @@ const makeMessagingRuntime = Effect.fnUntraced(function* (options) {
 			const admission = yield* Schema.decodeEffect(MessageAdmission)(unvalidated).pipe(Effect.mapError(() => failure$1("send", "invalid-input")));
 			const saved = yield* proof(admission.message);
 			const envelope = saved.envelope;
-			if (!Schema.is(MessageAdmission)(envelope.messageAdmission) || !sameAdmission$1(envelope.messageAdmission, admission) || envelope.threadId !== options.threadId || envelope.agentId !== agentId || envelope.inputDigest !== inputDigest || envelope.deliveryPrincipal !== options.principal || envelope.admissionKey !== options.idempotencyKey || !definitionDigestsEqual(envelope.definitions, options.definitions)) return yield* failure$1("send", "denied");
+			if (!Schema.is(MessageAdmission)(envelope.messageAdmission) || !sameAdmission$1(envelope.messageAdmission, admission) || envelope.threadId !== options.threadId || envelope.agentId !== agentId || envelope.inputDigest !== inputDigest || envelope.deliveryPrincipal !== options.principal || envelope.admissionKey !== options.idempotencyKey || !definitionDigestsEqual$1(envelope.definitions, options.definitions)) return yield* failure$1("send", "denied");
 			yield* authorizeEnvelope(saved, "send");
 			return admission;
 		})
@@ -769,14 +793,13 @@ const retainedBytes = (value, json, allowance) => {
 	const footprint = promptJsonFootprint(value, Math.floor((allowance - encodedBytes) / 2));
 	return footprint === void 0 ? void 0 : encodedBytes + 2 * footprint;
 };
-const encodeHistory = Effect.fnUntraced(function* (prompt, allowance) {
-	const value = yield* encodePrompt(prompt);
+const encodeHistory = (prompt, allowance) => Effect.suspend(() => Effect.mapEager(encodePrompt(prompt), (value) => {
 	const encoded = canonicalJson(value);
 	return {
 		encoded,
 		bytes: retainedBytes(value, encoded, allowance)
 	};
-});
+}));
 const decodeCheckpointPrefix = Effect.fnUntraced(function* (encoded, length) {
 	const value = yield* parseJson(encoded);
 	const bytes = retainedBytes(value, encoded, MAX_BYTES);
@@ -1626,7 +1649,7 @@ const makeWorkerRuntime = Effect.fnUntraced(function* (options) {
 			...admission.origin.continuationOf === void 0 ? {} : { continuationOf: admission.origin.continuationOf }
 		});
 		yield* authorizeBudget(admission.origin, options.principal, authorization);
-		if (admission.origin.worker.threadId !== options.threadId || admission.origin.worker.targetAgentId !== agentId || !definitionDigestsEqual(admission.origin.targetDigests, options.definitions) || options.idempotencyKey !== admission.messageId || admission.deliveryPrincipal !== void 0 && admission.deliveryPrincipal !== options.principal) return yield* failure("start", "worker-mismatch");
+		if (admission.origin.worker.threadId !== options.threadId || admission.origin.worker.targetAgentId !== agentId || !definitionDigestsEqual$1(admission.origin.targetDigests, options.definitions) || options.idempotencyKey !== admission.messageId || admission.deliveryPrincipal !== void 0 && admission.deliveryPrincipal !== options.principal) return yield* failure("start", "worker-mismatch");
 		const retainedFrameworkInput = Schema.is(FrameworkMessage)(options.messageAdmission);
 		if (retainedFrameworkInput && admission.reportKind !== "update") yield* validateCompletion(options.messageAdmission, options, agentId, inputDigest);
 		yield* reservation(admission, inputDigest, input, options.principal, retainedFrameworkInput, authorization);
@@ -1643,7 +1666,7 @@ const makeWorkerRuntime = Effect.fnUntraced(function* (options) {
 		const sourceBinding = currentBinding(origin.source.agentId);
 		const targetBinding = currentBinding(origin.worker.targetAgentId);
 		const reports = sourceBinding?.reporting?.filter((entry) => entry.delegationId === origin.worker.delegationId) ?? [];
-		if (sourceBinding === void 0 || targetBinding === void 0 || reports.length !== 1 || reports[0] === void 0 || reports[0].target !== targetBinding.definition || !definitionDigestsEqual(submission.agentDigests, origin.targetDigests)) return yield* failure("followUp", "declaration-unavailable");
+		if (sourceBinding === void 0 || targetBinding === void 0 || reports.length !== 1 || reports[0] === void 0 || reports[0].target !== targetBinding.definition || !definitionDigestsEqual$1(submission.agentDigests, origin.targetDigests)) return yield* failure("followUp", "declaration-unavailable");
 		const receivingOrigin = retained?.origin;
 		if (destination.depth !== 0 && receivingOrigin === void 0) return yield* failure("followUp", "denied");
 		const now = yield* Clock.currentTimeMillis;
@@ -2330,7 +2353,7 @@ const makeWorkerRuntime = Effect.fnUntraced(function* (options) {
 				return {
 					worker: origin.worker,
 					latestReceipt: acceptedInput?.receipt ?? null,
-					state: control.terminal ?? (control.stopped ? control.active === null ? "stopped" : "stopping" : control.active !== null ? "active" : delivery !== void 0 ? "starting" : "idle"),
+					state: control.terminal ?? (control.stopped ? control.active === null ? "stopped" : "stopping" : control.active !== null ? control.active.state === "unknown" ? "unknown" : "active" : delivery !== void 0 ? "starting" : "idle"),
 					acceptedInput,
 					appliedInput,
 					run,
@@ -2649,7 +2672,7 @@ const makeWorkerRuntime = Effect.fnUntraced(function* (options) {
 		const frozen = message._tag === "WorkerCompletion" ? proof?._tag === "WorkerReportPrepared" && proof.runId === message.report.runId && proof.messageId === options.idempotencyKey ? proof.envelope : void 0 : proof?._tag === "AgentUpdateEmitted" && Schema.toEquivalence(Update)(proof.update, message.update) ? proof.delivery?.envelope : void 0;
 		if (frozen === void 0) return yield* failure("followUp", "denied");
 		const envelope = yield* Schema.decodeUnknownEffect(PreparedInput)(frozen).pipe(Effect.mapError((cause) => failure("followUp", "corrupt", cause)));
-		if (!Schema.is(FrameworkMessage)(envelope.messageAdmission) || !Schema.toEquivalence(FrameworkMessage)(envelope.messageAdmission, message) || envelope.threadId !== options.threadId || envelope.agentId !== agentId || envelope.inputDigest !== inputDigest || envelope.deliveryPrincipal !== options.principal || envelope.admissionKey !== options.idempotencyKey || !definitionDigestsEqual(envelope.definitions, options.definitions) || !Schema.toEquivalence(Schema.UndefinedOr(WorkerAdmission))(envelope.workerAdmission, options.workerAdmission)) return yield* failure("followUp", "denied");
+		if (!Schema.is(FrameworkMessage)(envelope.messageAdmission) || !Schema.toEquivalence(FrameworkMessage)(envelope.messageAdmission, message) || envelope.threadId !== options.threadId || envelope.agentId !== agentId || envelope.inputDigest !== inputDigest || envelope.deliveryPrincipal !== options.principal || envelope.admissionKey !== options.idempotencyKey || !definitionDigestsEqual$1(envelope.definitions, options.definitions) || !Schema.toEquivalence(Schema.UndefinedOr(WorkerAdmission))(envelope.workerAdmission, options.workerAdmission)) return yield* failure("followUp", "denied");
 		const recorded = Option.getOrUndefined(yield* exactRecord(childThreadId, workerOriginRecordId(childThreadId), "followUp"))?.record.payload;
 		if (recorded?._tag !== "WorkerOriginRecorded" || recorded.origin.worker.threadId !== childThreadId || recorded.origin.reporting?.mode !== "standard") return yield* failure("followUp", "denied");
 		const origin = recorded.origin;
@@ -2830,6 +2853,7 @@ const childUsageReportsOf = (state) => [...state.started.entries()].map(([toolCa
 });
 /** Deterministic batch identity of one executed recovery decision's audit append (DUR-013). */
 const recoveryRepairBatchId = (submissionId, decisionTag) => decodeBatchId(`repair:${submissionId}:${decisionTag}`);
+const isOriginalInputRecord = (record) => record.payload._tag === "UserInputRecorded";
 /** Deterministic record identity of one executed recovery decision's `RepairAnnotated` record. */
 const recoveryRepairRecordId = (submissionId, decisionTag) => decodeRecordId(`repair:${submissionId}:${decisionTag}`);
 const RecoveryCauseTag = Schema.Literals([
@@ -3741,15 +3765,25 @@ const make = Effect.fnUntraced(function* (bindings) {
 		};
 	});
 	const attemptContextAtTail = (threadId) => makeRunWriter(threadId).pipe(Effect.provideService(ThreadStore, store), Effect.provideService(StorageOwner, storageOwner), Effect.flatMap(withProgress), Effect.map(({ owned }) => owned));
-	const withProgressSession = Effect.fnUntraced(function* (session) {
+	const withProgressSession = Effect.fnUntraced(function* (session, originalInput) {
 		const { owned, progress } = yield* withProgress(session);
 		activeProgress.set(session.threadId, { writer: progress });
 		yield* Effect.addFinalizer(() => Effect.sync(() => {
 			if (activeProgress.get(session.threadId)?.writer === progress) activeProgress.delete(session.threadId);
 		}));
+		const inputWriter = session.appendInput === void 0 ? void 0 : {
+			...session,
+			append: session.appendInput
+		};
 		const wrapped = {
 			...session,
 			append: owned.append,
+			...inputWriter === void 0 ? {} : { appendInput: (batch) => storageOwner.withProgress(session.threadId, storageOwner.withMutation(Effect.gen(function* () {
+				yield* session.checkActive;
+				const original = originalInput?.();
+				const commit = progress.commit(batch);
+				return yield* (original === void 0 ? commit : progress.withVerifiedEmptyRun(runIdForSubmission(session.claim.submissionId), CanonicalSequence.make(original.sequence - 1), commit)).pipe(Effect.provideService(CurrentRunWriter, inputWriter));
+			}))) },
 			publishSettlement: (batch) => progress.publish(batch).pipe(Effect.provideService(CurrentRunSettlement, session))
 		};
 		progressWriters.set(wrapped, progress);
@@ -3962,6 +3996,19 @@ const make = Effect.fnUntraced(function* (bindings) {
 				yield* hit("tools:after-unavailable-append");
 				recovered += 1;
 			});
+			if ((intent === void 0 || intent.resolution._tag === "SafeToRetry") && declared !== void 0 && nativeUpdateAccepted(submission, declared, records)) {
+				yield* appendClosedCall(ctx, submissionId, knownIds, call, {
+					result: {
+						value: { emitted: true },
+						isFailure: false
+					},
+					resolution: "completed-with-result",
+					author: RECONCILER_AUTHOR,
+					reason: "The exact native update was canonically accepted"
+				});
+				recovered += 1;
+				continue;
+			}
 			if (intent !== void 0) switch (intent.resolution._tag) {
 				case "AbortSubmission": continue;
 				case "CompletedWithResult":
@@ -4054,6 +4101,13 @@ const make = Effect.fnUntraced(function* (bindings) {
 			reason
 		}));
 	});
+	const prepareOriginalInput = (submission) => makeEnvelope(submissionInputRecordId(submission.submissionId), UserInputRecorded.make({
+		submissionId: submission.submissionId,
+		kind: "user",
+		runId: runIdForSubmission(submission.submissionId),
+		input: submission.inputPayload,
+		...submission.messageAdmission === void 0 ? {} : { messageAdmission: submission.messageAdmission }
+	}));
 	/**
 	* Plan step 2: append the deterministic `UserInputRecorded` record (batch idempotency makes it
 	* exactly-once canonical, DUR-007) and mark it applied. When canonical history already carries
@@ -4071,13 +4125,7 @@ const make = Effect.fnUntraced(function* (bindings) {
 			});
 			return;
 		}
-		const envelope = yield* makeEnvelope(recordId, UserInputRecorded.make({
-			submissionId,
-			kind: "user",
-			runId: runIdForSubmission(submissionId),
-			input: submission.inputPayload,
-			...submission.messageAdmission === void 0 ? {} : { messageAdmission: submission.messageAdmission }
-		}));
+		const envelope = yield* prepareOriginalInput(submission);
 		const result = yield* appendBatch(ctx, CanonicalBatch.make({
 			batchId: submissionInputBatchId(submissionId),
 			producerId: config.producerId,
@@ -4104,8 +4152,10 @@ const make = Effect.fnUntraced(function* (bindings) {
 		if (starts.length > 1 || starts.length === 1 && starts[0]?.recordId !== recordId || existing !== void 0 && (existing.payload._tag !== "RunStarted" || existing.payload.runId !== runId)) return yield* RunJournalError.make({ message: `Run ${runId} has conflicting active start state` });
 		return existing;
 	});
-	const makeRunStart = Effect.fnUntraced(function* (submission, maxDurationMillis, records, operational) {
+	const makeRunStart = Effect.fnUntraced(function* (submission, maxDurationMillis, records, operational, input) {
 		const writer = yield* CurrentRunWriter;
+		const append = input === void 0 ? writer.append : writer.appendInput;
+		if (append === void 0) return yield* RunJournalError.make({ message: "Fresh startup requires an input publisher" });
 		const runId = runIdForSubmission(submission.submissionId);
 		const recordId = runStartedRecordId(runId);
 		const existing = yield* readRunStart(submission.threadId, runId, operational);
@@ -4133,11 +4183,19 @@ const make = Effect.fnUntraced(function* (bindings) {
 				return;
 			}
 			yield* hit("run:before-start-append");
-			yield* appendBatch(writer, CanonicalBatch.make({
-				batchId: runStartedBatchId(runId),
+			yield* appendBatch({
+				threadId: writer.threadId,
+				append
+			}, CanonicalBatch.make({
+				batchId: input === void 0 ? runStartedBatchId(runId) : submissionInputBatchId(submission.submissionId),
 				producerId: config.producerId,
-				records: [start, ...context === void 0 ? [] : [context]]
+				records: [
+					input ?? start,
+					...input === void 0 ? [] : [start],
+					...context === void 0 ? [] : [context]
+				]
 			}));
+			if (input !== void 0) yield* hit("input:after-canonical-append");
 			committed = true;
 			yield* hit("run:after-start-append");
 		});
@@ -4425,7 +4483,7 @@ const make = Effect.fnUntraced(function* (bindings) {
 			case "Admitted": {
 				const child = resolution.submission;
 				const linkage = child.parentLinkage;
-				if (child.agentId !== request.targetAgentId || !definitionDigestsEqual(child.agentDigests, request.targetDigests) || child.inputDigest !== request.childInputDigest || linkage === void 0 || linkage.parentSubmissionId !== parent.submissionId || linkage.parentToolCallId !== request.toolCallId) return yield* LedgerError.make({
+				if (child.agentId !== request.targetAgentId || !definitionDigestsEqual$1(child.agentDigests, request.targetDigests) || child.inputDigest !== request.childInputDigest || linkage === void 0 || linkage.parentSubmissionId !== parent.submissionId || linkage.parentToolCallId !== request.toolCallId) return yield* LedgerError.make({
 					operation: "establishChildFromRequest",
 					message: `The admitted child ${child.submissionId} diverges from the canonical SubagentRequested record for Tool Call ${request.toolCallId}; establishment fails closed (SUB-016)`
 				});
@@ -4503,7 +4561,7 @@ const make = Effect.fnUntraced(function* (bindings) {
 		const child = childLookup.value;
 		if (child.threadId !== request.childThreadId) return mismatch("The child Thread does not match the intended child identity");
 		if (child.agentId !== request.targetAgentId) return mismatch("The child Agent identity does not match the declared delegation target");
-		if (!definitionDigestsEqual(child.agentDigests, request.targetDigests)) return mismatch("The child definition digests do not match the stored target digests");
+		if (!definitionDigestsEqual$1(child.agentDigests, request.targetDigests)) return mismatch("The child definition digests do not match the stored target digests");
 		if (child.inputDigest !== request.childInputDigest) return mismatch("The child input digest does not match the canonical request");
 		const linkage = child.parentLinkage;
 		if (linkage === void 0 || linkage.parentSubmissionId !== parent.submissionId || linkage.parentToolCallId !== request.toolCallId) return mismatch("The child admission linkage does not name this parent Tool Call");
@@ -4511,7 +4569,7 @@ const make = Effect.fnUntraced(function* (bindings) {
 		const lineage = childRecords.find((envelope) => envelope.record.recordId === subagentLineageRecordId(request.childThreadId))?.record.payload;
 		if (lineage === void 0 || lineage._tag !== "SubagentLineageRecorded") return mismatch("The child Thread carries no immutable lineage record");
 		if (lineage.parentLink.delegationId !== request.delegationId || lineage.parentLink.parentAgentId !== parent.agentId || lineage.parentLink.parentThreadId !== parent.threadId || lineage.parentLink.parentRunId !== request.runId || lineage.parentLink.parentToolCallId !== request.toolCallId || lineage.parentLink.depth !== (request.depth ?? CHILD_DELEGATION_DEPTH) || lineage.parentSubmissionId !== parent.submissionId) return mismatch("The child Parent Link does not name exactly this parent Run and Tool Call");
-		if (!definitionDigestsEqual(lineage.childDefinitionDigests, request.targetDigests) || lineage.childInputDigest !== request.childInputDigest || lineage.grantDigest !== request.grantDigest || lineage.toolCallAllowance !== request.toolCallAllowance || !Equal.equals(lineage.policy, request.policy) || !Equal.equals(lineage.budget, request.budget) || !Equal.equals(lineage.grant, request.grant)) return mismatch("The child lineage digests or allowance do not match the canonical request");
+		if (!definitionDigestsEqual$1(lineage.childDefinitionDigests, request.targetDigests) || lineage.childInputDigest !== request.childInputDigest || lineage.grantDigest !== request.grantDigest || lineage.toolCallAllowance !== request.toolCallAllowance || !Equal.equals(lineage.policy, request.policy) || !Equal.equals(lineage.budget, request.budget) || !Equal.equals(lineage.grant, request.grant)) return mismatch("The child lineage digests or allowance do not match the canonical request");
 		const settlement = childRecords.find((envelope) => envelope.record.recordId === submissionSettlementRecordId(childSubmissionId))?.record.payload;
 		if (settlement === void 0 || settlement._tag !== "SubmissionSettled") return mismatch("The child has no canonical Settlement record");
 		if (settlement.submissionId !== childSubmissionId || settlement.settlementId !== submissionSettlementId(childSubmissionId) || settlement.receiptId !== child.receiptId) return mismatch("The child Settlement identity does not match the child Receipt");
@@ -4974,7 +5032,7 @@ const make = Effect.fnUntraced(function* (bindings) {
 			const boundaries = [];
 			const cached = projectedJournal;
 			const projectionThrough = Math.max(progressThrough ?? 0, records.at(-1)?.sequence ?? 0);
-			const originalInput = records.find(({ record: { payload } }) => payload._tag === "UserInputRecorded" && payload.kind === "user" && payload.submissionId === submissionId);
+			const originalInput = initialJournal?.original ?? records.find(({ record: { payload } }) => payload._tag === "UserInputRecorded" && payload.kind === "user" && payload.submissionId === submissionId);
 			if (originalInput === void 0) return yield* RunJournalError.make({ message: "Run has no original context boundary" });
 			const historyEvidence = /* @__PURE__ */ new Map();
 			const retainHistory = (entry) => {
@@ -5025,7 +5083,7 @@ const make = Effect.fnUntraced(function* (bindings) {
 			const inheritedGrant = submission.workerAdmission?.origin.grant ?? (childLineage?._tag === "SubagentLineageRecorded" ? childLineage.grant : void 0);
 			const delegationDepth = submission.workerAdmission?.origin.depth ?? (childLineage?._tag === "SubagentLineageRecorded" ? childLineage.parentLink.depth : 0);
 			const inheritedBudget = submission.workerAdmission?.origin.budget ?? (childLineage?._tag === "SubagentLineageRecorded" ? childLineage.budget : void 0);
-			if (submission.parentLinkage !== void 0 && (childLineage?._tag !== "SubagentLineageRecorded" || childLineage.parentSubmissionId !== submission.parentLinkage.parentSubmissionId || childLineage.parentLink.parentToolCallId !== submission.parentLinkage.parentToolCallId || !definitionDigestsEqual(childLineage.childDefinitionDigests, submission.agentDigests) || childLineage.childInputDigest !== submission.inputDigest)) return yield* RunJournalError.make({ message: "The child Run has no matching canonical lineage and execution bounds" });
+			if (submission.parentLinkage !== void 0 && (childLineage?._tag !== "SubagentLineageRecorded" || childLineage.parentSubmissionId !== submission.parentLinkage.parentSubmissionId || childLineage.parentLink.parentToolCallId !== submission.parentLinkage.parentToolCallId || !definitionDigestsEqual$1(childLineage.childDefinitionDigests, submission.agentDigests) || childLineage.childInputDigest !== submission.inputDigest)) return yield* RunJournalError.make({ message: "The child Run has no matching canonical lineage and execution bounds" });
 			const completionTools = [...agent.definition.completion === void 0 ? [] : [agent.definition.completion.tool], ...agent.definition.completionFromTools?.map((declaration) => declaration.tool) ?? []];
 			const pending = yield* pendingToolBatchFor(records, runId, completionTools);
 			const resumeProjection = pending === void 0 ? journal : yield* projectRunJournalStream(withoutPendingBatch(canonical, pending, runId), runId, void 0, priorContext);
@@ -5200,14 +5258,6 @@ const make = Effect.fnUntraced(function* (bindings) {
 					usageSummary: yield* currentUsageSummary()
 				};
 			}
-			let ownerFirstSequence;
-			for (const envelope of records) {
-				const payload = envelope.record.payload;
-				if ("runId" in payload && payload.runId === runId) {
-					ownerFirstSequence = envelope.sequence;
-					break;
-				}
-			}
 			/** Only canonical joined inputs can require restoration from an earlier Attempt. */
 			let joinBacklog = joinedInputEnvelopes.size === 0 ? [] : void 0;
 			/** Joined inputs already handed to the engine during THIS Attempt (never re-deliver). */
@@ -5369,6 +5419,7 @@ const make = Effect.fnUntraced(function* (bindings) {
 						cause
 					})));
 					yield* (yield* CurrentRunStart).commit(yield* makeEnvelope(recordId, payload));
+					knownIds.add(originalInput.record.recordId);
 					knownIds.add(runStartedRecordId(runId));
 					knownIds.add(recordId);
 					historyEvidence.clear();
@@ -5665,7 +5716,7 @@ const make = Effect.fnUntraced(function* (bindings) {
 						sourceBoundaries = [];
 						sourceJournal = yield* recordHalt(projectRunJournalStream(Stream.concat(source, Stream.fromIterable(yield* recordHalt(selectedRange(ctx.threadId, [submissionId], tail.sequence, canonicalThrough)))).pipe(Stream.filter((envelope) => envelope.record.payload._tag !== "CompactionCreated" || envelope.sequence <= canonicalThrough)), runId, (boundary) => sourceBoundaries.push(boundary), priorContext));
 					}
-					const coverable = sourceBoundaries.filter((boundary) => commit.kind !== "summarize" || ownerFirstSequence === void 0 || boundary.sequence < ownerFirstSequence);
+					const coverable = sourceBoundaries.filter((boundary) => commit.kind !== "summarize" || boundary.sequence < originalInput.sequence);
 					if (coverable.length === 0) return yield* CompactionError.make({ message: commit.kind === "rollover" ? "Durable rollover requires complete canonical records" : "Durable compaction requires eligible canonical records" });
 					const comparisonView = instructionView(sourceJournal.prompt.content, initialInstructions, false, sourceJournal.historyBefore.content.length);
 					let matchingPrefix = 0;
@@ -6445,12 +6496,20 @@ const make = Effect.fnUntraced(function* (bindings) {
 		const checkpointPrompt = yield* promptHistory.take({ threadId: session.threadId }).pipe(Effect.provideService(ThreadStore, store), Effect.provideContext(journalServices));
 		let committedPromptSuffix;
 		const storageSession = session;
+		let pendingOriginal;
 		yield* Effect.addFinalizer(() => Effect.sync(() => {
 			committedPromptSuffix?.discard();
 			committedPromptSuffix = void 0;
 		}));
 		const promptSession = {
 			...storageSession,
+			...storageSession.appendInput === void 0 ? {} : { appendInput: (batch, executions) => storageSession.appendInput(batch, executions).pipe(Effect.tap((result) => Effect.sync(() => {
+				if (pendingOriginal !== void 0 && !result.replayed && result.firstSequence === pendingOriginal.sequence) committedPromptSuffix = makeCommittedPromptSuffix({
+					threadId: storageSession.threadId,
+					sequence: result.firstSequence,
+					record: batch.records[0]
+				});
+			}))) },
 			append: (batch, executions) => {
 				const suffix = committedPromptSuffix;
 				const append = storageSession.append(batch, executions);
@@ -6469,7 +6528,7 @@ const make = Effect.fnUntraced(function* (bindings) {
 				}))), Effect.tapCause(() => Effect.sync(() => suffix.discard())));
 			}
 		};
-		session = yield* withProgressSession(promptSession);
+		session = yield* withProgressSession(promptSession, () => pendingOriginal);
 		const { claim, threadId } = session;
 		const submissionId = claim.submissionId;
 		let prepared = freshlyAdmitted && session.withInitialization !== void 0 ? yield* session.withInitialization(Effect.gen(function* () {
@@ -6481,6 +6540,30 @@ const make = Effect.fnUntraced(function* (bindings) {
 			const before = (yield* session.tail).sequence;
 			const view = yield* recoveryView(threadId, before, [submissionId], runIdForSubmission(submissionId));
 			if (view.progress !== void 0 || view.context !== void 0 || view.operational.length !== 0 || view.records.some(({ record }) => record.payload._tag !== "ThreadCreated")) return void 0;
+			if (session.appendInput !== void 0) {
+				const record = (yield* PreparedAppend.capture(AppendRequest.make({
+					threadId,
+					expectedTailSequence: before,
+					batch: CanonicalBatch.make({
+						batchId: submissionInputBatchId(submissionId),
+						producerId: config.producerId,
+						records: [yield* prepareOriginalInput(submission)]
+					})
+				}))).records[0].canonical;
+				if (!isOriginalInputRecord(record)) return yield* RunJournalError.make({ message: "Captured startup has no original input" });
+				pendingOriginal = {
+					threadId,
+					sequence: CanonicalSequence.make(before + 1),
+					record
+				};
+				return {
+					snapshot,
+					through: before,
+					view,
+					start: yield* makeRunStart(submission, Duration.toMillis(registeredAgent.definition.policy.maxDuration), view.records, view.operational, record).pipe(Effect.provideService(CurrentRunWriter, session)),
+					input: pendingOriginal
+				};
+			}
 			const progress = progressWriters.get(session);
 			const applyInput = applyCanonicalInput(session, submission, session, view.records, void 0);
 			yield* progress === void 0 ? applyInput : progress.withVerifiedEmptyRun(runIdForSubmission(submissionId), before, applyInput).pipe(Effect.provideService(CurrentRunWriter, promptSession));
@@ -6500,7 +6583,8 @@ const make = Effect.fnUntraced(function* (bindings) {
 					progressThrough: accepted.throughSequence,
 					operational: accepted.operational
 				},
-				start
+				start,
+				input: void 0
 			};
 		})) : void 0;
 		const preparedInput = prepared !== void 0;
@@ -6689,10 +6773,10 @@ const make = Effect.fnUntraced(function* (bindings) {
 			let canonical = Stream.fromIterable(view.records);
 			let initialJournal;
 			if (view.context === void 0) {
-				const original = currentRecords.find(({ record }) => record.payload._tag === "UserInputRecorded" && record.payload.kind === "user" && record.payload.submissionId === submissionId);
+				const original = initialization?.input ?? currentRecords.find(({ record }) => record.payload._tag === "UserInputRecorded" && record.payload.kind === "user" && record.payload.submissionId === submissionId);
 				if (original === void 0) return yield* RunJournalError.make({ message: "Run has no exact original input context boundary" });
 				const suffix = currentRecords.filter((entry) => entry.sequence > original.sequence);
-				const fresh = !lineage.inputWasRecorded && tail.sequence === original.sequence && suffix.length === 0;
+				const fresh = initialization?.input !== void 0 || !lineage.inputWasRecorded && tail.sequence === original.sequence && suffix.length === 0;
 				const source = yield* Effect.gen(function* () {
 					if (checkpointPrompt !== void 0 && fresh && original.sequence === checkpointPrompt.through + 1) {
 						const records = [original, ...suffix];
@@ -6724,8 +6808,8 @@ const make = Effect.fnUntraced(function* (bindings) {
 				canonical = Stream.fromIterableEffect(Effect.suspend(() => source.records === void 0 ? readInitialJournal(source.original, source.suffix) : Effect.succeed(source.records)));
 			}
 			committedPromptSuffix?.discard();
-			committedPromptSuffix = initialJournal?.cacheable ? makeCommittedPromptSuffix(initialJournal.original) : void 0;
-			const outcome = yield* runModel(agent, ctx, submission, session, currentRecords, canonical, initialJournal, tail.sequence, view.progressThrough, view.progress, view.context, takeJournalMetadata(), lineage, approvalDecisionIntents, currentContracts, runTiming, yieldAfter).pipe(Effect.provideService(CurrentRunStart, start.publication), Effect.ensuring(Effect.sync(() => {
+			committedPromptSuffix = initialJournal?.cacheable && initialization?.input === void 0 ? makeCommittedPromptSuffix(initialJournal.original) : void 0;
+			const outcome = yield* runModel(agent, ctx, submission, session, currentRecords, canonical, initialJournal, initialization?.input?.sequence ?? tail.sequence, view.progressThrough, view.progress, view.context, takeJournalMetadata(), lineage, approvalDecisionIntents, currentContracts, runTiming, yieldAfter).pipe(Effect.provideService(CurrentRunStart, start.publication), Effect.ensuring(Effect.sync(() => {
 				if (initialJournal !== void 0) initialJournal.records = void 0;
 			})));
 			if (outcome._tag === "yielded") {
@@ -7005,6 +7089,7 @@ const make = Effect.fnUntraced(function* (bindings) {
 		const declared = yield* declaredCallsFor(records, runIdForSubmission(submission.submissionId), new Set(intents.map((intent) => intent.toolCallId)));
 		for (const intent of intents) {
 			const original = declared.get(intent.toolCallId);
+			if (original !== void 0 && nativeUpdateAccepted(submission, original, records)) continue;
 			if (original === void 0 || current !== void 0 && !supportsOperation(OpenToolCallEvidence.make(original), operations.get(intent.toolCallId), current)) return true;
 		}
 		return false;
@@ -7088,7 +7173,31 @@ const make = Effect.fnUntraced(function* (bindings) {
 			case "ResumePendingToolBatch": return "deferred";
 			case "MarkUnknown": return yield* markUnknownForRecovery(snapshot, evidence, records, decision);
 			case "ApplyUnknownResolutions": return yield* applyUnknownResolutionsForRecovery(snapshot, evidence, records);
-			case "AwaitUnknownResolution": return "unknown";
+			case "AwaitUnknownResolution": {
+				const declared = yield* declaredCallsFor(records, runId, new Set(evidence.openToolCalls.map((call) => call.toolCallId)));
+				let repaired = false;
+				for (const call of declared.values()) {
+					if (snapshot.unknownResolutions.some((intent) => intent.toolCallId === call.toolCallId) || !nativeUpdateAccepted(submission, call, records)) continue;
+					yield* ledger.recordUnknownResolution(UnknownResolutionCommand.make({
+						submissionId: submission.submissionId,
+						toolCallId: call.toolCallId,
+						author: RECONCILER_AUTHOR,
+						reason: "The exact native update was canonically accepted",
+						resolution: {
+							_tag: "CompletedWithResult",
+							result: { emitted: true },
+							isFailure: false
+						}
+					})).pipe(Effect.catchTag("UnknownResolutionConflict", (cause) => LedgerError.make({
+						operation: "recover native update",
+						message: "Native acceptance conflicts with a retained resolution",
+						cause
+					})));
+					repaired = true;
+				}
+				if (repaired) yield* wake.notify(submission.threadId);
+				return repaired ? "repaired" : "unknown";
+			}
 			case "AwaitApprovalDecision": return yield* awaitApprovalForRecovery(snapshot, evidence, decision);
 			case "ResumeSuspended": return yield* resumeSuspendedForRecovery(snapshot);
 			case "RevertJoining":
@@ -7382,12 +7491,16 @@ const make = Effect.fnUntraced(function* (bindings) {
 		if (selected.state.settled || selected.state.resolved) return "none";
 		const intent = (yield* ledger.loadRecoverySnapshot(RecoverySnapshotRequest.make({ submissionId: submission.submissionId }))).unknownResolutions.find((intent) => intent.toolCallId === selected.declared.toolCallId && unknownResolutionKind(intent.resolution) === "factual");
 		const factual = intent?.resolution;
-		const reconciliation = factual === void 0 && selected.declared.executionKind === "ordinary" ? yield* reconciler.reconcile(DeclaredToolCallEvidence.make({
+		const acceptedNative = factual === void 0 && (yield* updateRuntime.accepted(submission, selected.declared));
+		const reconciliation = factual === void 0 && !acceptedNative && selected.declared.executionKind === "ordinary" ? yield* reconciler.reconcile(DeclaredToolCallEvidence.make({
 			threadId,
 			submissionId: submission.submissionId,
 			...selected.declared
 		})).pipe(Effect.map(Option.some), Effect.catchTag("ToolReconcilerError", () => Effect.succeed(Option.none()))) : Option.none();
-		const completed = factual?._tag === "CompletedWithResult" ? factual : Option.isSome(reconciliation) && reconciliation.value._tag === "CompletedWithResult" ? reconciliation.value : void 0;
+		const completed = factual?._tag === "CompletedWithResult" ? factual : acceptedNative ? {
+			result: { emitted: true },
+			isFailure: false
+		} : Option.isSome(reconciliation) && reconciliation.value._tag === "CompletedWithResult" ? reconciliation.value : void 0;
 		const neverStarted = factual?._tag === "NeverHappened" || selected.state.dispatchBlocked || Option.isSome(reconciliation) && reconciliation.value._tag === "NeverStarted";
 		if (completed === void 0 && !neverStarted) return "unknown";
 		const result = completed === void 0 ? yield* Schema.encodeEffect(ToolUnavailable)(ToolUnavailable.make({
@@ -7768,13 +7881,13 @@ const make = Effect.fnUntraced(function* (bindings) {
 			code: `message-${cause.reason}`,
 			cause
 		})));
-		if (options.definitions.replay !== void 0 && workerAdmission === void 0 && messageAdmission === void 0 && !registeredBindings.some((binding) => binding.agentId === agent.definition.id && definitionDigestsEqual(binding.digests, options.definitions))) {
+		if (options.definitions.replay !== void 0 && workerAdmission === void 0 && messageAdmission === void 0 && !registeredBindings.some((binding) => binding.agentId === agent.definition.id && definitionDigestsEqual$1(binding.digests, options.definitions))) {
 			const retained = yield* ledger.lookup(SubmissionLookupByKey.make({
 				threadId: options.threadId,
 				principal: options.principal,
 				idempotencyKey: options.idempotencyKey
 			}));
-			if (Option.isNone(retained) || retained.value.agentId !== agent.definition.id || !definitionDigestsEqual(retained.value.agentDigests, options.definitions)) return yield* AdmissionPolicyError.make({
+			if (Option.isNone(retained) || retained.value.agentId !== agent.definition.id || !definitionDigestsEqual$1(retained.value.agentDigests, options.definitions)) return yield* AdmissionPolicyError.make({
 				reason: "refused",
 				code: "unregistered-replay-contract"
 			});
@@ -8447,4 +8560,4 @@ var DurableAgentRuntime = class DurableAgentRuntime extends Context.Service()("@
 //#endregion
 export { DurableApprovalSuspension as a, RecoveryFailure as c, WorkRecoveryReport as d, WorkRecoveryRequest as f, recoveryRepairRecordId as g, recoveryRepairBatchId as h, DurableApprovalResolver as i, RecoveryReport as l, isolateRecovery as m, DurableAgentRuntime as n, DurableRuntimeConfig as o, childReservationIdFor as p, DurableAgentRuntime_exports as r, RecoveryBlocked as s, ApprovalSuspensionError as t, RecoverySweepResult as u };
 
-//# sourceMappingURL=DurableAgentRuntime-CPlw5_7e.mjs.map
+//# sourceMappingURL=DurableAgentRuntime-CGW93k81.mjs.map