effect-agent 0.1.0-beta.100 → 0.1.0-beta.101

package/dist/{DurableAgentRuntime-BE_OjQjz.mjs → DurableAgentRuntime-HOZ3AeSi.mjs}

@@ -20,20 +20,20 @@ import { getToolExecutionClass } from "./engine/DurableStep.mjs";
 import { CompactionError, ContextCompactor } from "./engine/ContextCompactor.mjs";
 import { RunPolicyUsage } from "./core/RunPolicyUsage.mjs";
 import { AgentUpdateAcceptance, CurrentToolFailureObserver, ModelUsageAccounting, RunContextPreparation, RunContextPreparationPassthrough, RunToolAuthorization, RunToolScheduling } from "./engine/RunOptions.mjs";
-import { $ as ToolCallSettled, B as SubagentJoined, E as ProducerEpoch, G as SubmissionSettledRecord, H as SubagentRequested, I as RunPolicyUsageReserved, J as ToolApprovalDecided, K as SubtreeBudgetReserved, L as RunStartedRecord, O as RecordEnvelope, P as RunDurationExhausted, Q as ToolCallResolved, R as SettlementFailureDiagnostic, T as PersistedJson, U as SubagentStarted, V as SubagentLineageRecorded, W as SubmissionSettled, X as ToolCallPrepared, Y as ToolApprovalRequested, at as WorkerAdmission, c as CanonicalRecordEnvelope, ct as WorkerOrigin, d as CompactionCreated, dt as WorkerReportRefused, et as ToolCallUnknown, ft as WorkerReportingIntent, h as Digest, i as BatchId, it as UserInputRecorded, j as RepairAnnotated, k as RecordId, lt as WorkerOriginRecorded, n as AgentUpdateEmitted, nt as ToolStepSettled, o as CanonicalBatch, ot as WorkerInputCompleted, p as DefinitionDigests, q as ThreadCreated, rt as ToolUnavailable, st as WorkerInputRequested, t as AbortRequested, tt as ToolOperation, u as CanonicalSequence, ut as WorkerReportPrepared, w as PeerMessagePrepared, x as ModelResponseInterrupted } from "./Records-DR1xtbXY.mjs";
+import { $ as ToolCallSettled, B as SubagentJoined, E as ProducerEpoch, G as SubmissionSettledRecord, H as SubagentRequested, I as RunPolicyUsageReserved, J as ToolApprovalDecided, K as SubtreeBudgetReserved, L as RunStartedRecord, O as RecordEnvelope, P as RunDurationExhausted, Q as ToolCallResolved, R as SettlementFailureDiagnostic, T as PersistedJson, U as SubagentStarted, V as SubagentLineageRecorded, W as SubmissionSettled, X as ToolCallPrepared, Y as ToolApprovalRequested, at as WorkerAdmission, c as CanonicalRecordEnvelope, ct as WorkerOrigin, d as CompactionCreated, dt as WorkerReportRefused, et as ToolCallUnknown, ft as WorkerReportingIntent, h as Digest, i as BatchId, it as UserInputRecorded, j as RepairAnnotated, k as RecordId, lt as WorkerOriginRecorded, n as AgentUpdateEmitted, nt as ToolStepSettled, o as CanonicalBatch, ot as WorkerInputCompleted, p as DefinitionDigests, q as ThreadCreated, rt as ToolUnavailable, st as WorkerInputRequested, t as AbortRequested, tt as ToolOperation, u as CanonicalSequence, ut as WorkerReportPrepared, w as PeerMessagePrepared, x as ModelResponseInterrupted } from "./Records-D8167fHn.mjs";
 import { AbortCommand, AbortIntentRequest, AdmissionPolicyError, AdmissionRequest, ApprovalDecisionCommand, ApprovalPendingSuspension, AttachChildToReservationRequest, BeginChildBudgetReleaseRequest, ChildBudgetReservationRequest, ChildReservationId, ChildSettledNotification, ClaimJoiningRequest, ClaimRequest, LedgerError, MarkInputAppliedRequest, MarkJoinedRequest, MarkReadyRequest, MarkUnknownRequest, OwnershipToken, ParentLinkage, RecoverySnapshotRequest, ReleaseChildBudgetRequest, ReleaseOwnershipRequest, RenewOwnershipRequest, RevertJoiningRequest, Settlement, SettlementFinalization, SettlementReservation, SubmissionLedger, SubmissionLookupById, SubmissionLookupByKey, SuspendRequest, UnknownResolutionCommand, WaitingChild, WaitingForChildSuspension, submissionAbortBatchId, submissionAbortRecordId, submissionInputBatchId, submissionInputRecordId, submissionSettlementBatchId, submissionSettlementId, submissionSettlementRecordId } from "./durable/SubmissionLedger.mjs";
 import { DeclaredPendingBatchEvidence, OpenDelegationCallEvidence, OpenToolCallEvidence, PendingApprovalEvidence, RecoveryDecision, RecoveryEvidence, classifyRecovery } from "./durable/Recovery.mjs";
 import { ExplainedEvidence, ExplainedSubmission, ExplainedUnknownCall, IntegrityCheck, IntegrityReport, ObligationEntry, ObligationReport, RecoveryExplanation, RetryRefused, obligationSeverityOf, predictRecoveryDisposition, recoveryDecisionMeaning } from "./durable/Admin.mjs";
 import { digestJson } from "./durable/Digest.mjs";
-import { a as definitionDigestsEqual, c as resolveWorkerBinding, i as compileRegistrations, l as toolReplayContracts, o as makeLegacyWorkerBinding, s as resolveDefinitionBinding, t as BindingUnavailable } from "./agent-registration-cXpB8cBU.mjs";
-import { FencedAppendRequest, LoadCheckpointRequest, SaveRecoveryCheckpointRequest, ThreadCheckpoint, ThreadExportRequest, ThreadMaterialization, ThreadObservation, ThreadRead, ThreadStore, ThreadStoreError, ThreadTailRequest } from "./durable/ThreadStore.mjs";
+import { a as definitionDigestsEqual, c as resolveWorkerBinding, i as compileRegistrations, l as toolReplayContracts, o as makeLegacyWorkerBinding, s as resolveDefinitionBinding, t as BindingUnavailable } from "./agent-registration-ByeHejH3.mjs";
+import { $ as workerOriginRecordId, A as subagentRequestedRecordId, B as toolCallUnknownRecordId, C as runStartedBatchId, D as subagentLineageBatchId, E as subagentJoinedRecordId, F as toolCallPreparedRecordId, G as turnCanonicalBatch, H as toolStepSettledRecordId, I as toolCallResolutionBatchId, J as turnResponseBatch, K as turnIdForRun, L as toolCallResolvedRecordId, M as subagentStartedRecordId, N as toolApprovalDecisionRecordId, O as subagentLineageRecordId, P as toolApprovalRequestRecordId, Q as workerInputRecordId, R as toolCallResultBatchId, S as runIdForSubmission, T as subagentJoinBatchId, U as turnApprovalsBatchId, V as toolStepSettledBatchId, X as turnResultsBatch, a as childIdempotencyKeyFor, b as runDurationBatchId, c as compactionRecordId, d as modelResponseInterruptedBatchId, et as workerReportRecordId, f as modelResponseInterruptedRecordId, g as projectRunJournalStream, i as approvalDecisionBatchId, j as subagentStartedBatchId, k as subagentRequestedBatchId, l as firstWorkerInputRecordId, m as peerMessageRecordId, o as childThreadIdFor, p as modelResponseRecordId, q as turnPreparedBatchId, r as agentUpdateRecordId, s as compactionBatchId, t as RunJournalError, tt as makeJournalMetadata, u as markUnknownBatchId, v as runCompletedRecordId, w as runStartedRecordId, x as runDurationRecordId, y as runCompletionDigest, z as toolCallSettledRecordId } from "./RunJournal-srpbEBEy.mjs";
+import { FencedAppendRequest, LoadCheckpointRequest, MAX_THREAD_EXPORT_RECORDS, SaveRecoveryCheckpointRequest, ThreadCheckpoint, ThreadExportRequest, ThreadMaterialization, ThreadObservation, ThreadRead, ThreadStore, ThreadStoreError, ThreadTailRequest, getRecord, readWorkerState } from "./durable/ThreadStore.mjs";
 import { DurableRuntimeFailpoint } from "./durable/DurableFailpoint.mjs";
 import { ScheduledInputRefused, ScheduledInputRetryable } from "./durable/Schedule.mjs";
 import { PreparedInputAdmission } from "./durable/PreparedInputAdmission.mjs";
 import { PreparedInput } from "./durable/Subscription.mjs";
 import { MessageDeliveryDriver, MessageDeliveryFailpoint, MessageDeliveryRecord, MessageDeliveryStore, messageDeliveryCapacity, messageDeliveryUsesCapacity, prepareMessageDelivery } from "./durable/MessageDelivery.mjs";
 import { n as safeUnknownString, t as inspectForeignDiagnostic } from "./foreign-diagnostic-DBQ1XHKh.mjs";
-import { A as toolApprovalDecisionRecordId, B as turnApprovalsBatchId, C as subagentJoinedRecordId, D as subagentRequestedRecordId, E as subagentRequestedBatchId, F as toolCallResultBatchId, G as turnResponseBatch, H as turnCanonicalBatch, I as toolCallSettledRecordId, L as toolCallUnknownRecordId, M as toolCallPreparedRecordId, N as toolCallResolutionBatchId, O as subagentStartedBatchId, P as toolCallResolvedRecordId, R as toolStepSettledBatchId, S as subagentJoinBatchId, T as subagentLineageRecordId, U as turnIdForRun, W as turnPreparedBatchId, Y as makeJournalMetadata, _ as runDurationBatchId, a as childThreadIdFor, b as runStartedBatchId, c as markUnknownBatchId, d as modelResponseRecordId, g as runCompletionDigest, h as runCompletedRecordId, i as childIdempotencyKeyFor, j as toolApprovalRequestRecordId, k as subagentStartedRecordId, l as modelResponseInterruptedBatchId, o as compactionBatchId, p as projectRunJournalStream, q as turnResultsBatch, r as approvalDecisionBatchId, s as compactionRecordId, t as RunJournalError, u as modelResponseInterruptedRecordId, v as runDurationRecordId, w as subagentLineageBatchId, x as runStartedRecordId, y as runIdForSubmission, z as toolStepSettledRecordId } from "./RunJournal-DNs3PM4K.mjs";
 import { WorkerBudgetAuthorizer, WorkerConcurrencyLimit, WorkerConcurrencyResolver, WorkerHostAuthorizer, WorkerHostConfig, WorkerPolicyResolver } from "./durable/WorkerHost.mjs";
 import { OperationAuthorizationRequest, OperationAuthorizer, OperationDenied } from "./durable/OperationAuthorizer.mjs";
 import { PendingSubmission, SettledSubmission } from "./durable/SubmissionStatus.mjs";
@@ -42,6 +42,61 @@ import { PreparedToolCallEvidence, ToolReconciler } from "./durable/ToolReconcil
 import { WakeScheduler } from "./durable/WakeScheduler.mjs";
 import { Prompt } from "effect/unstable/ai";
 import { Cause, Clock, Context, Crypto, DateTime, Deferred, Duration, Effect, Equal, Layer, Option, Ref, Schedule, Schema, Semaphore, Stream } from "effect";
+//#region src/durable/internal/journal-checkpoint.ts
+/** Retired accounting is additive; the latest Tool batch always remains replayable verbatim. */
+var JournalCheckpointSeed = class extends Schema.Class("@effect-agent/thread/internal/JournalCheckpointSeed")({
+	runId: RunId,
+	throughSequence: CanonicalSequence,
+	firstSequence: Schema.optionalKey(CanonicalSequence),
+	toolSelection: Schema.optionalKey(Selection),
+	committedTurns: Schema.Natural,
+	policyUsage: RunPolicyUsage,
+	modelCalls: Schema.Natural,
+	unobservedModelCalls: Schema.Natural,
+	inputTokens: Schema.Natural,
+	outputTokens: Schema.Natural,
+	lastInputTokens: Schema.Natural,
+	lastOutputTokens: Schema.Natural,
+	costMicrousd: Schema.Natural,
+	summarizedModelUsage: RunUsageSummary,
+	protectedContext: Schema.optionalKey(PersistedJson),
+	contextWindowId: Schema.optionalKey(Schema.String),
+	frontier: Schema.optionalKey(Schema.Struct({
+		sequence: CanonicalSequence,
+		tag: Schema.Literals(["ModelResponseRecorded", "ToolCallSettled"])
+	})),
+	/** Canonical replacement whose covered batches were validated before retirement. */
+	compaction: CanonicalRecordEnvelope
+}) {};
+/** A bounded sparse projection, never a canonical log or a submission-ownership record. */
+var RecoveryCheckpointState = class extends Schema.Class("@effect-agent/thread/internal/RecoveryCheckpointState")({
+	schemaVersion: Schema.Literal(1),
+	policyAccountingVersion: Schema.Literal(1),
+	submissionId: SubmissionId,
+	submissionIds: Schema.Array(SubmissionId).check(Schema.isMaxLength(4096)),
+	seed: JournalCheckpointSeed,
+	records: Schema.Array(CanonicalRecordEnvelope).check(Schema.isMaxLength(4096))
+}) {};
+var RecoveryCheckpointContents = class extends Schema.Class("@effect-agent/thread/internal/RecoveryCheckpointContents")({
+	state: RecoveryCheckpointState,
+	digest: Digest
+}) {};
+const RECOVERY_ENGINE_VERSION = "effect-agent/recovery@1";
+/**
+* Late evidence can invalidate an old compaction. Such histories use full canonical replay;
+* an omitted run/turn must never be treated as proven absent by a sparse projection.
+*/
+const checkpointSuffixCompatible = (seed, records, retained) => records.every(({ sequence, record: { payload } }) => {
+	if ("runId" in payload && payload.runId !== void 0 && payload.runId !== seed.runId) return false;
+	if ("turn" in payload && payload.turn <= seed.committedTurns) return false;
+	if (payload._tag === "ToolCallSettled" || payload._tag === "ToolCallResolved") return [...retained, ...records].some(({ sequence: declarationSequence, record: { payload: candidate } }) => {
+		if (candidate._tag !== "ModelResponseRecorded" || candidate.runId !== payload.runId || candidate.turn <= seed.committedTurns || seed.compaction.record.payload._tag !== "CompactionCreated" || declarationSequence <= seed.compaction.record.payload.coversThrough || declarationSequence >= sequence) return false;
+		const decoded = Schema.decodeUnknownOption(Prompt.Prompt)(candidate.messages);
+		return Option.isSome(decoded) && decoded.value.content.some((message) => message.role === "assistant" && message.content.some((part) => part.type === "tool-call" && part.id === payload.toolCallId));
+	});
+	return payload._tag !== "CompactionCreated" || payload.coversThrough >= seed.throughSequence;
+});
+//#endregion
 //#region src/durable/internal/worker-runtime.ts
 /** Canonical worker operations constructed once by the durable coordinator. */
 var WorkerRuntime = class extends Context.Service()("@effect-agent/thread/internal/WorkerRuntime") {};
@@ -191,61 +246,6 @@ const makeAgentUpdateRuntime = Effect.fn("AgentUpdates.makeDurable")(function* (
 	};
 });
 //#endregion
-//#region src/durable/internal/journal-checkpoint.ts
-/** Retired accounting is additive; the latest Tool batch always remains replayable verbatim. */
-var JournalCheckpointSeed = class extends Schema.Class("@effect-agent/thread/internal/JournalCheckpointSeed")({
-	runId: RunId,
-	throughSequence: CanonicalSequence,
-	firstSequence: Schema.optionalKey(CanonicalSequence),
-	toolSelection: Schema.optionalKey(Selection),
-	committedTurns: Schema.Natural,
-	policyUsage: RunPolicyUsage,
-	modelCalls: Schema.Natural,
-	unobservedModelCalls: Schema.Natural,
-	inputTokens: Schema.Natural,
-	outputTokens: Schema.Natural,
-	lastInputTokens: Schema.Natural,
-	lastOutputTokens: Schema.Natural,
-	costMicrousd: Schema.Natural,
-	summarizedModelUsage: RunUsageSummary,
-	protectedContext: Schema.optionalKey(PersistedJson),
-	contextWindowId: Schema.optionalKey(Schema.String),
-	frontier: Schema.optionalKey(Schema.Struct({
-		sequence: CanonicalSequence,
-		tag: Schema.Literals(["ModelResponseRecorded", "ToolCallSettled"])
-	})),
-	/** Canonical replacement whose covered batches were validated before retirement. */
-	compaction: CanonicalRecordEnvelope
-}) {};
-/** A bounded sparse projection, never a canonical log or a submission-ownership record. */
-var RecoveryCheckpointState = class extends Schema.Class("@effect-agent/thread/internal/RecoveryCheckpointState")({
-	schemaVersion: Schema.Literal(1),
-	policyAccountingVersion: Schema.Literal(1),
-	submissionId: SubmissionId,
-	submissionIds: Schema.Array(SubmissionId).check(Schema.isMaxLength(4096)),
-	seed: JournalCheckpointSeed,
-	records: Schema.Array(CanonicalRecordEnvelope).check(Schema.isMaxLength(4096))
-}) {};
-var RecoveryCheckpointContents = class extends Schema.Class("@effect-agent/thread/internal/RecoveryCheckpointContents")({
-	state: RecoveryCheckpointState,
-	digest: Digest
-}) {};
-const RECOVERY_ENGINE_VERSION = "effect-agent/recovery@1";
-/**
-* Late evidence can invalidate an old compaction. Such histories use full canonical replay;
-* an omitted run/turn must never be treated as proven absent by a sparse projection.
-*/
-const checkpointSuffixCompatible = (seed, records, retained) => records.every(({ sequence, record: { payload } }) => {
-	if ("runId" in payload && payload.runId !== void 0 && payload.runId !== seed.runId) return false;
-	if ("turn" in payload && payload.turn <= seed.committedTurns) return false;
-	if (payload._tag === "ToolCallSettled" || payload._tag === "ToolCallResolved") return [...retained, ...records].some(({ sequence: declarationSequence, record: { payload: candidate } }) => {
-		if (candidate._tag !== "ModelResponseRecorded" || candidate.runId !== payload.runId || candidate.turn <= seed.committedTurns || seed.compaction.record.payload._tag !== "CompactionCreated" || declarationSequence <= seed.compaction.record.payload.coversThrough || declarationSequence >= sequence) return false;
-		const decoded = Schema.decodeUnknownOption(Prompt.Prompt)(candidate.messages);
-		return Option.isSome(decoded) && decoded.value.content.some((message) => message.role === "assistant" && message.content.some((part) => part.type === "tool-call" && part.id === payload.toolCallId));
-	});
-	return payload._tag !== "CompactionCreated" || payload.coversThrough >= seed.throughSequence;
-});
-//#endregion
 //#region src/durable/internal/messaging-host.ts
 const failure$1 = (operation, reason) => MessagingError.make({
 	operation,
@@ -259,6 +259,7 @@ const makeMessagingRuntime = Effect.fn("MessagingHost.make")(function* (options)
 	const deps = {
 		...options,
 		store: yield* ThreadStore,
+		ledger: yield* SubmissionLedger,
 		deliveries: yield* Effect.serviceOption(MessageDeliveryStore),
 		crypto: yield* Crypto.Crypto,
 		authorizer: yield* PeerAuthorizer,
@@ -268,10 +269,18 @@ const makeMessagingRuntime = Effect.fn("MessagingHost.make")(function* (options)
 		failpoint: yield* MessageDeliveryFailpoint
 	};
 	const digest = (value) => digestJson(value).pipe(Effect.provideService(Crypto.Crypto, deps.crypto), Effect.mapError(() => failure$1("send", "storage")));
-	const read = (threadId) => deps.store.export(ThreadExportRequest.make({ threadId })).pipe(Effect.mapError(() => failure$1("context", "storage")));
+	const exactRecord = Effect.fn("MessagingHost.exactRecord")(function* (threadId, recordId) {
+		return Option.getOrUndefined(yield* getRecord({
+			threadId,
+			recordId
+		}).pipe(Effect.provideService(ThreadStore, deps.store)).pipe(Effect.mapError(() => failure$1("send", "storage"))))?.record;
+	});
 	const sourceOf = Effect.fn("MessagingHost.source")(function* (threadId) {
-		const log = yield* read(threadId);
-		const created = log.records[0]?.record.payload;
+		const log = yield* deps.store.inspectTail(ThreadTailRequest.make({ threadId })).pipe(Effect.mapError(() => failure$1("context", "storage")));
+		const created = (yield* deps.store.read(ThreadRead.make({
+			threadId,
+			limit: 1
+		})).pipe(Stream.runCollect, Effect.mapError(() => failure$1("context", "storage"))))[0]?.record.payload;
 		if (created?._tag !== "ThreadCreated") return yield* failure$1("context", "not-found");
 		if (deps.bindings.filter((binding) => binding.agentId === created.agentId).length !== 1) return yield* failure$1("context", "binding-mismatch");
 		return {
@@ -296,7 +305,7 @@ const makeMessagingRuntime = Effect.fn("MessagingHost.make")(function* (options)
 	});
 	const proof = Effect.fn("MessagingHost.proof")(function* (message) {
 		const source = yield* sourceOf(message.ownerThreadId);
-		const record = source.log.records.find(({ record }) => record.payload._tag === "PeerMessagePrepared" && record.payload.messageId === message.messageId)?.record;
+		const record = yield* exactRecord(message.ownerThreadId, peerMessageRecordId(message.messageId));
 		if (record === void 0) return yield* failure$1("reply", "invalid-reference");
 		const saved = yield* decodeProof(record);
 		if (!Schema.is(MessageAdmission)(saved.envelope.messageAdmission) || saved.envelope.messageAdmission.sender.agentId !== source.address.agentId || !sameRef(saved.envelope.messageAdmission.message, message)) return yield* failure$1("reply", "invalid-reference");
@@ -371,7 +380,7 @@ const makeMessagingRuntime = Effect.fn("MessagingHost.make")(function* (options)
 			const maxMessages = yield* capacity;
 			for (let attempt = 0; attempt < 8; attempt++) {
 				const current = attempt === 0 ? initial : yield* sourceOf(threadId);
-				const prior = current.log.records.find(({ record }) => record.payload._tag === "PeerMessagePrepared" && record.payload.messageId === message.messageId)?.record;
+				const prior = yield* exactRecord(threadId, peerMessageRecordId(message.messageId));
 				let saved;
 				if (prior !== void 0) {
 					saved = yield* decodeProof(prior);
@@ -383,12 +392,23 @@ const makeMessagingRuntime = Effect.fn("MessagingHost.make")(function* (options)
 					});
 					yield* authorizeEnvelope(saved, operation);
 				} else {
-					if (current.log.records.filter(({ record }) => record.payload._tag === "PeerMessagePrepared").length >= maxMessages) return yield* failure$1(operation, "capacity");
+					if (deps.store.countPeerMessages === void 0) return yield* failure$1(operation, "unavailable");
+					if ((yield* deps.store.countPeerMessages({
+						threadId,
+						limit: maxMessages
+					}).pipe(Effect.mapError(mapStore(operation)))) >= maxMessages) return yield* failure$1(operation, "capacity");
 					let destinationThread;
 					if (operation === "reply") {
 						if (inReplyTo === void 0) return yield* failure$1(operation, "invalid-reference");
-						const inbound = current.log.records.find(({ record }) => record.payload._tag === "UserInputRecorded" && Schema.is(MessageAdmission)(record.payload.messageAdmission) && sameRef(record.payload.messageAdmission.message, inReplyTo))?.record.payload;
-						if (inbound?._tag !== "UserInputRecorded" || !Schema.is(MessageAdmission)(inbound.messageAdmission) || inbound.messageAdmission.sender.agentId !== target.agentId) return yield* failure$1(operation, "invalid-reference");
+						const original = yield* proof(inReplyTo);
+						if (original.envelope.threadId !== threadId || original.envelope.agentId !== current.address.agentId) return yield* failure$1(operation, "invalid-reference");
+						const accepted = yield* deps.ledger.lookup(SubmissionLookupByKey.make({
+							threadId,
+							principal: original.envelope.deliveryPrincipal,
+							idempotencyKey: inReplyTo.messageId
+						})).pipe(Effect.mapError(mapStore(operation)));
+						const inbound = Option.isNone(accepted) ? void 0 : (yield* exactRecord(threadId, submissionInputRecordId(accepted.value.submissionId)))?.payload;
+						if (inbound?._tag !== "UserInputRecorded" || !Schema.is(MessageAdmission)(inbound.messageAdmission) || inbound.messageAdmission.sender.agentId !== target.agentId || !sameRef(inbound.messageAdmission.message, inReplyTo) || !Schema.is(MessageAdmission)(original.envelope.messageAdmission) || !sameAdmission$1(inbound.messageAdmission, original.envelope.messageAdmission) || Option.isNone(accepted) || inbound.submissionId !== accepted.value.submissionId) return yield* failure$1(operation, "invalid-reference");
 						destinationThread = inbound.messageAdmission.returnAddress.threadId;
 					} else destinationThread = yield* deps.routes.resolve({
 						source: current.address,
@@ -437,7 +457,7 @@ const makeMessagingRuntime = Effect.fn("MessagingHost.make")(function* (options)
 							batchId: Schema.decodeSync(BatchId)(message.messageId),
 							producerId: deps.producerId,
 							records: [RecordEnvelope.make({
-								recordId: Schema.decodeSync(RecordId)(message.messageId),
+								recordId: peerMessageRecordId(message.messageId),
 								family: "thread",
 								schemaVersion: 1,
 								createdAt: DateTime.makeUnsafe(createdAtMillis),
@@ -638,6 +658,36 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 		});
 	});
 	const read = (threadId, operation) => deps.store.export(ThreadExportRequest.make({ threadId })).pipe(Effect.mapError(storageFailure(operation)));
+	const exactRecord = Effect.fn("WorkerHost.exactRecord")(function* (threadId, recordId, operation) {
+		return yield* getRecord({
+			threadId,
+			recordId
+		}).pipe(Effect.provideService(ThreadStore, deps.store), Effect.mapError(storageFailure(operation)));
+	});
+	const readIdentity = Effect.fn("WorkerHost.readIdentity")(function* (threadId, operation) {
+		const tail = yield* deps.store.inspectTail(ThreadTailRequest.make({ threadId })).pipe(Effect.mapError(storageFailure(operation)));
+		const first = yield* deps.store.read(ThreadRead.make({
+			threadId,
+			limit: 1
+		})).pipe(Stream.runCollect, Effect.mapError(storageFailure(operation)));
+		const worker = yield* exactRecord(threadId, workerOriginRecordId(threadId), operation);
+		const attached = yield* exactRecord(threadId, subagentLineageRecordId(threadId), operation);
+		return {
+			...tail,
+			records: [
+				...first,
+				...Option.toArray(worker),
+				...Option.toArray(attached)
+			]
+		};
+	});
+	const readWorkerState$1 = Effect.fn("WorkerHost.readWorkerState")(function* (threadId, operation, sourceSubmissionId) {
+		return yield* readWorkerState({
+			threadId,
+			limit: MAX_THREAD_EXPORT_RECORDS,
+			...sourceSubmissionId === void 0 ? {} : { sourceSubmissionId }
+		}).pipe(Effect.provideService(ThreadStore, deps.store), Effect.mapError(storageFailure(operation)));
+	});
 	const hit = (location, operation) => deps.failpoint.hit(location).pipe(Effect.mapError(storageFailure(operation)));
 	const append = Effect.fn("WorkerHost.append")(function* (threadId, id, payload, current, phase) {
 		const operation = "start";
@@ -681,10 +731,10 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 		const matches = deps.bindings.filter((entry) => entry.agentId === agentId);
 		return matches.length === 1 ? matches[0] : void 0;
 	};
-	const sourceAuthority = Effect.fn("WorkerHost.sourceAuthority")(function* (threadId, submissionId) {
-		const current = yield* read(threadId, "start");
+	const sourceAuthority = Effect.fn("WorkerHost.sourceAuthority")(function* (threadId, submissionId, reservations = false) {
+		const current = yield* reservations ? readWorkerState$1(threadId, "start", submissionId) : readIdentity(threadId, "start");
 		const created = current.records[0]?.record.payload;
-		if (created?._tag !== "ThreadCreated") return yield* failure("start", "not-found");
+		if (created?._tag !== "ThreadCreated" || current.records[0]?.sequence !== 1) return yield* failure("start", "not-found");
 		const binding = currentBinding(created.agentId);
 		const worker = current.records.find(({ record }) => record.payload._tag === "WorkerOriginRecorded")?.record.payload;
 		const attached = current.records.find(({ record }) => record.payload._tag === "SubagentLineageRecorded")?.record.payload;
@@ -760,7 +810,7 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 		const payload = yield* decode(SubtreeBudgetReserved, requested, "start");
 		const recordId = `subtree:${payload.reservationId}`;
 		for (let attempt = 0; attempt < 16; attempt++) {
-			const source = yield* sourceAuthority(sourceThreadId, payload.sourceSubmissionId);
+			const source = yield* sourceAuthority(sourceThreadId, payload.sourceSubmissionId, true);
 			const previous = source.current.records.find(({ record }) => record.recordId === recordId)?.record.payload;
 			if (previous !== void 0) {
 				if (previous._tag !== "SubtreeBudgetReserved" || !Schema.toEquivalence(SubtreeBudgetReserved)(previous, payload)) return yield* failure("start", "idempotency-conflict");
@@ -809,9 +859,9 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 	});
 	const reservation = Effect.fn("WorkerHost.reserveInput")(function* (admission, inputDigest, input, principal, retainedFrameworkInput) {
 		const origin = admission.origin;
-		const id = `worker-input:${admission.messageId}`;
+		const id = workerInputRecordId(admission.messageId);
 		for (let attempt = 0; attempt < 16; attempt++) {
-			const source = yield* sourceAuthority(origin.source.threadId, admission.sourceSubmissionId);
+			const source = yield* sourceAuthority(origin.source.threadId, admission.sourceSubmissionId, true);
 			const current = source.current;
 			const rows = requests(current.records);
 			const existing = current.records.find(({ record }) => record.recordId === id)?.record.payload;
@@ -899,7 +949,7 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 	});
 	const ensureOrigin = Effect.fn("WorkerHost.ensureOrigin")(function* (origin) {
 		for (let attempt = 0; attempt < 16; attempt++) {
-			const current = yield* read(origin.worker.threadId, "start");
+			const current = yield* readIdentity(origin.worker.threadId, "start");
 			const existing = current.records.find(({ record }) => record.payload._tag === "WorkerOriginRecorded")?.record.payload;
 			if (existing?._tag === "WorkerOriginRecorded") {
 				if (!sameOrigin(existing.origin, origin)) return yield* failure("start", "worker-mismatch");
@@ -907,7 +957,7 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			}
 			const first = current.records[0]?.record.payload;
 			if (first?._tag !== "ThreadCreated" || first.agentId !== origin.worker.targetAgentId || !definitionDigestsEqual(first.definitions, origin.targetDigests) || current.records.some(({ record }) => record.payload._tag === "SubagentLineageRecorded")) return yield* failure("start", "worker-mismatch");
-			if (yield* append(origin.worker.threadId, `worker-origin:${origin.worker.threadId}`, WorkerOriginRecorded.make({ origin }), current, "origin")) return;
+			if (yield* append(origin.worker.threadId, workerOriginRecordId(origin.worker.threadId), WorkerOriginRecorded.make({ origin }), current, "origin")) return;
 		}
 		return yield* failure("start", "storage");
 	});
@@ -937,9 +987,8 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 		const intent = origin?.reporting;
 		if (origin === void 0 || intent?.mode !== "standard") return void 0;
 		if (update.threadId !== submission.threadId || update.agentId !== origin.worker.targetAgentId) return yield* failure("followUp", "worker-mismatch");
-		const sourceHistory = yield* read(origin.source.threadId, "followUp");
-		const first = requests(sourceHistory.records).find((row) => row.admission.messageId === origin.firstMessageId);
-		if (first === void 0 || !sameOrigin(first.admission.origin, origin)) return yield* failure("followUp", "corrupt");
+		const first = Option.getOrUndefined(yield* exactRecord(origin.source.threadId, workerInputRecordId(origin.firstMessageId), "followUp"))?.record.payload;
+		if (first?._tag !== "WorkerInputRequested" || first.admission.messageId !== origin.firstMessageId || !sameOrigin(first.admission.origin, origin)) return yield* failure("followUp", "corrupt");
 		const source = yield* sourceAuthority(origin.source.threadId, first.admission.sourceSubmissionId);
 		if (source.binding === void 0 || source.submission === void 0) return yield* failure("followUp", "declaration-unavailable");
 		const sourceBinding = currentBinding(origin.source.agentId);
@@ -1028,7 +1077,7 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			submission.threadId,
 			runId
 		])).pipe(Effect.map((value) => Schema.decodeSync(IdempotencyKey)(`report:${value}`)), Effect.mapError(storageFailure("inspect")));
-		const recordId = `worker-report:${messageId}`;
+		const recordId = workerReportRecordId(messageId);
 		const prepare = Effect.fn("WorkerHost.prepareReport")(function* () {
 			const refused = (reason) => WorkerReportRefused.make({
 				runId,
@@ -1039,9 +1088,8 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			if (Option.isNone(selected) || selected.value.threadId !== submission.threadId || selected.value.receiptId !== host.receiptId || selected.value.workerAdmission === void 0 || !sameOrigin(selected.value.workerAdmission.origin, origin)) return yield* failure("inspect", "corrupt");
 			const hostSubmission = selected.value;
 			const hostAdmission = selected.value.workerAdmission;
-			const sourceHistory = yield* read(origin.source.threadId, "inspect");
-			const firstInput = requests(sourceHistory.records).find((row) => row.admission.messageId === origin.firstMessageId);
-			if (firstInput === void 0 || !sameOrigin(firstInput.admission.origin, origin)) return yield* failure("inspect", "corrupt");
+			const firstInput = Option.getOrUndefined(yield* exactRecord(origin.source.threadId, workerInputRecordId(origin.firstMessageId), "inspect"))?.record.payload;
+			if (firstInput?._tag !== "WorkerInputRequested" || firstInput.admission.messageId !== origin.firstMessageId || !sameOrigin(firstInput.admission.origin, origin)) return yield* failure("inspect", "corrupt");
 			const source = yield* sourceAuthority(origin.source.threadId, firstInput.admission.sourceSubmissionId);
 			if (source.binding === void 0) return refused("declaration-unavailable");
 			const sourceBinding = currentBinding(origin.source.agentId);
@@ -1192,7 +1240,15 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 		const settledEnvelope = child.records.find(({ record }) => record.payload._tag === "SubmissionSettled" && record.payload.submissionId === submission.submissionId)?.record;
 		const settled = settledEnvelope?.payload;
 		if (settled?._tag !== "SubmissionSettled" || settled.receiptId !== submission.receiptId || settledEnvelope === void 0) return yield* failure("inspect", "corrupt");
+		const unresolved = /* @__PURE__ */ new Set();
+		for (const { record } of child.records) {
+			const value = record.payload;
+			if ((value._tag === "ToolCallPrepared" || value._tag === "ToolCallUnknown") && value.runId === settled.runId) unresolved.add(value.toolCallId);
+			if (value._tag === "ToolCallSettled" && value.runId === settled.runId) unresolved.delete(value.toolCallId);
+		}
+		if (unresolved.size > 0) return;
 		const payload = WorkerInputCompleted.make({
+			effectsResolved: true,
 			messageId: admission.messageId,
 			workerThreadId: submission.threadId,
 			submissionId: submission.submissionId,
@@ -1202,12 +1258,15 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 		});
 		for (let attempt = 0; attempt < 16; attempt++) {
 			const source = yield* read(admission.origin.source.threadId, "inspect");
-			const existing = source.records.find(({ record }) => record.payload._tag === "WorkerInputCompleted" && record.payload.messageId === admission.messageId)?.record.payload;
+			const existing = source.records.findLast(({ record }) => record.payload._tag === "WorkerInputCompleted" && record.payload.messageId === admission.messageId)?.record.payload;
 			if (existing !== void 0) {
-				if (existing._tag !== "WorkerInputCompleted" || !Schema.toEquivalence(WorkerInputCompleted)(existing, payload)) return yield* failure("inspect", "corrupt");
-				return;
+				if (existing._tag !== "WorkerInputCompleted" || !Schema.toEquivalence(WorkerInputCompleted)({
+					...existing,
+					effectsResolved: true
+				}, payload)) return yield* failure("inspect", "corrupt");
+				if (existing.effectsResolved) return;
 			}
-			if (yield* append(admission.origin.source.threadId, `worker-completed:${admission.messageId}`, payload, source, "completion")) return;
+			if (yield* append(admission.origin.source.threadId, `worker-effects-resolved:${admission.messageId}`, payload, source, "completion")) return;
 		}
 		return yield* failure("inspect", "storage");
 	});
@@ -1244,10 +1303,10 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 		const findOrigin = Effect.fn("WorkerHost.findOrigin")(function* (worker, target, operation) {
 			yield* binding(target, operation);
 			if (worker.targetAgentId !== target.id) return yield* failure(operation, "worker-mismatch");
-			const source = yield* read(context.source.threadId, operation);
-			const origin = requests(source.records).find((row) => row.admission.origin.worker.threadId === worker.threadId)?.admission.origin;
+			const first = Option.getOrUndefined(yield* exactRecord(context.source.threadId, firstWorkerInputRecordId(worker), operation))?.record.payload;
+			const origin = first?._tag === "WorkerInputRequested" ? first.admission.origin : void 0;
 			if (origin === void 0) return yield* failure(operation, "not-found");
-			if (origin.worker.delegationId !== worker.delegationId) return yield* failure(operation, "worker-mismatch");
+			if (!Schema.toEquivalence(WorkerRef)(origin.worker, worker) || first?._tag !== "WorkerInputRequested" || first.admission.messageId !== origin.firstMessageId || workerInputRecordId(origin.firstMessageId) !== firstWorkerInputRecordId(worker)) return yield* failure(operation, "worker-mismatch");
 			return origin;
 		});
 		const receiptInput = Effect.fn("WorkerHost.receiptInput")(function* (request, operation) {
@@ -1476,7 +1535,7 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			summary: Effect.fn("WorkerHost.inspectWorker")(function* (request) {
 				yield* authorize("inspect", "read", request.worker);
 				const origin = yield* findOrigin(request.worker, request.target, "inspect");
-				const source = yield* read(context.source.threadId, "inspect");
+				const source = yield* readWorkerState$1(context.source.threadId, "inspect");
 				return yield* summarize(origin, requests(source.records), "inspect");
 			}),
 			observe: (request) => Stream.unwrap(Effect.gen(function* () {
@@ -1516,7 +1575,7 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 				yield* authorize("list", "read");
 				yield* binding(request.target, "list");
 				if (!Number.isSafeInteger(request.limit) || request.limit < 1 || request.limit > 100) return yield* failure("list", "capacity");
-				const source = yield* read(context.source.threadId, "list");
+				const source = yield* readWorkerState$1(context.source.threadId, "list");
 				const all = requests(source.records);
 				const origins = [...new Map(all.map((row) => [row.admission.origin.worker.threadId, row.admission.origin])).values()].filter((origin) => origin.worker.delegationId === request.delegationId && origin.worker.targetAgentId === request.target.id && (request.after === void 0 || origin.worker.threadId > request.after)).sort((left, right) => left.worker.threadId.localeCompare(right.worker.threadId));
 				const selected = origins.slice(0, request.limit);
@@ -1538,17 +1597,18 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 	};
 	const validateCompletion = Effect.fn("WorkerHost.validateCompletion")(function* (unvalidated, options, agentId, inputDigest) {
 		const message = yield* Schema.decodeEffect(FrameworkMessage)(unvalidated).pipe(Effect.mapError(() => failure("followUp", "corrupt")));
-		const child = yield* read(message._tag === "WorkerCompletion" ? message.report.worker.threadId : message.worker.threadId, "followUp");
-		const frozen = message._tag === "WorkerCompletion" ? child.records.flatMap(({ record }) => record.payload._tag === "WorkerReportPrepared" && record.payload.runId === message.report.runId ? [record.payload.envelope] : [])[0] : child.records.flatMap(({ record }) => record.payload._tag === "AgentUpdateEmitted" && Schema.toEquivalence(Update)(record.payload.update, message.update) && record.payload.delivery !== void 0 ? [record.payload.delivery.envelope] : [])[0];
+		const childThreadId = message._tag === "WorkerCompletion" ? message.report.worker.threadId : message.worker.threadId;
+		const proofId = message._tag === "WorkerCompletion" ? workerReportRecordId(options.idempotencyKey) : yield* withCrypto(agentUpdateRecordId(message.update.threadId, message.update.runId, message.update.updateId)).pipe(Effect.mapError(storageFailure("followUp")));
+		const proof = Option.getOrUndefined(yield* exactRecord(childThreadId, proofId, "followUp"))?.record.payload;
+		const frozen = message._tag === "WorkerCompletion" ? proof?._tag === "WorkerReportPrepared" && proof.runId === message.report.runId && proof.messageId === options.idempotencyKey ? proof.envelope : void 0 : proof?._tag === "AgentUpdateEmitted" && Schema.toEquivalence(Update)(proof.update, message.update) ? proof.delivery?.envelope : void 0;
 		if (frozen === void 0) return yield* failure("followUp", "denied");
 		const envelope = yield* Schema.decodeUnknownEffect(PreparedInput)(frozen).pipe(Effect.mapError(() => failure("followUp", "corrupt")));
 		if (!Schema.is(FrameworkMessage)(envelope.messageAdmission) || !Schema.toEquivalence(FrameworkMessage)(envelope.messageAdmission, message) || envelope.threadId !== options.threadId || envelope.agentId !== agentId || envelope.inputDigest !== inputDigest || envelope.deliveryPrincipal !== options.principal || envelope.admissionKey !== options.idempotencyKey || !definitionDigestsEqual(envelope.definitions, options.definitions) || !Schema.toEquivalence(Schema.UndefinedOr(WorkerAdmission))(envelope.workerAdmission, options.workerAdmission)) return yield* failure("followUp", "denied");
-		const recorded = child.records.find(({ record }) => record.payload._tag === "WorkerOriginRecorded")?.record.payload;
-		if (recorded?._tag !== "WorkerOriginRecorded" || recorded.origin.reporting?.mode !== "standard") return yield* failure("followUp", "denied");
+		const recorded = Option.getOrUndefined(yield* exactRecord(childThreadId, workerOriginRecordId(childThreadId), "followUp"))?.record.payload;
+		if (recorded?._tag !== "WorkerOriginRecorded" || recorded.origin.worker.threadId !== childThreadId || recorded.origin.reporting?.mode !== "standard") return yield* failure("followUp", "denied");
 		const origin = recorded.origin;
-		const source = yield* read(origin.source.threadId, "followUp");
-		const first = requests(source.records).find((row) => row.admission.messageId === origin.firstMessageId);
-		if (first === void 0 || !sameOrigin(first.admission.origin, origin)) return yield* failure("followUp", "denied");
+		const first = Option.getOrUndefined(yield* exactRecord(origin.source.threadId, workerInputRecordId(origin.firstMessageId), "followUp"))?.record.payload;
+		if (first?._tag !== "WorkerInputRequested" || first.admission.messageId !== origin.firstMessageId || !sameOrigin(first.admission.origin, origin)) return yield* failure("followUp", "denied");
 		const receiving = envelope.workerAdmission;
 		const sourceSubmissionId = receiving === void 0 ? first.admission.sourceSubmissionId : receiving.sourceSubmissionId;
 		if ((yield* deps.authorizer.authorize({
@@ -1573,7 +1633,7 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 				operation: "context",
 				access: "context"
 			});
-			const current = yield* read(sourceThreadId, "context");
+			const current = yield* readIdentity(sourceThreadId, "context");
 			const created = current.records[0]?.record.payload;
 			if (created?._tag !== "ThreadCreated") return yield* failure("context", "not-found");
 			const selected = request.sourceSubmissionId === void 0 ? void 0 : yield* sourceAuthority(sourceThreadId, request.sourceSubmissionId);
@@ -5937,6 +5997,11 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 			operation: "recoverSubmission",
 			message: `Unknown Submission ${submissionId}`
 		});
+		if (found.value.state === "settled") yield* workerRuntime.completeInput(found.value).pipe(Effect.mapError((cause) => LedgerError.make({
+			operation: "recoverSubmission",
+			message: "Worker completion repair failed",
+			cause
+		})));
 		const history = yield* readRecoveryHistory(found.value.threadId, [submissionId]);
 		if (history.materialized && found.value.workerAdmission?.origin.reporting?.mode === "standard") yield* updateRuntime.repair(found.value.threadId);
 		return yield* recoverSnapshot(found.value, history);
@@ -6604,4 +6669,4 @@ var DurableAgentRuntime = class DurableAgentRuntime extends Context.Service()("@
 //#endregion
 export { RecoveryReport as a, recoveryRepairRecordId as c, DurableRuntimeConfig as i, threadCreatedBatchId as l, DurableAgentRuntime_exports as n, childReservationIdFor as o, DurableApprovalResolver as r, recoveryRepairBatchId as s, DurableAgentRuntime as t, threadCreatedRecordId as u };
 
-//# sourceMappingURL=DurableAgentRuntime-BE_OjQjz.mjs.map
+//# sourceMappingURL=DurableAgentRuntime-HOZ3AeSi.mjs.map