effect-agent 0.1.0-beta.113 → 0.1.0-beta.115

package/dist/{AgentRuntime-CWkHuzyt.d.mts → AgentRuntime-DyZv8uu2.d.mts}

@@ -8,14 +8,14 @@ import { n as CurrentToolCatalog } from "./ToolExposure-UCN12eCd.mjs";
 import { s as ToolBroker } from "./ToolBroker-DWs4tZra.mjs";
 import { a as AgentInputError, c as AgentPolicyError, d as AgentToolAuthorizationDenied, f as ContextBudgetError, m as ModelProtocolError, n as AgentApprovalPending, p as ContextOverflowError, s as AgentOutputError, t as AgentApprovalDenied, u as AgentToolAuthorizationCheckError } from "./AgentError-Bn1ytXRD.mjs";
 import { t as AgentPolicy } from "./AgentPolicy-BqDoSXO6.mjs";
-import { A as ToolUnion, C as OutputSchema, D as RunDispositionFailure, E as RunDispositionDeclaration, N as UpdatesSchema, O as RunDispositionSchema, S as Output, _ as InstructionSource, a as CompletionFromToolDeclaration, c as Definition, d as EncodedInput, f as Failure, m as InputPromptSource, n as Any, r as AnyDefinition, s as CompletionToolDeclaration, t as Agent_d_exports, w as Requirements } from "./Agent-DriBcXBN.mjs";
-import { n as WorkerBudgetScope } from "./Worker-Du9dhVnp.mjs";
+import { A as ToolUnion, C as OutputSchema, D as RunDispositionFailure, E as RunDispositionDeclaration, N as UpdatesSchema, O as RunDispositionSchema, S as Output, _ as InstructionSource, a as CompletionFromToolDeclaration, c as Definition, d as EncodedInput, f as Failure, m as InputPromptSource, n as Any, r as AnyDefinition, s as CompletionToolDeclaration, t as Agent_d_exports, w as Requirements } from "./Agent-D9cXqfF3.mjs";
+import { a as WorkerBudgetScope } from "./Worker-fwWkBg12.mjs";
 import { a as ContextWindow } from "./ContextWindow-DRQ5Mbm2.mjs";
 import { n as CompactionError } from "./ContextCompactor-WwSIG_Z2.mjs";
 import { t as DurableStep } from "./DurableStep-Cry_iol4.mjs";
-import { B as RunSubagentChildIdentity, H as RunSubagentEstablishRequest, M as RunOptions, S as RunContextPreparationError, W as RunSubagentJoinRequest, i as ChildEstablishStatus, l as ModelUsageAccounting, t as AgentUpdateAcceptance, x as RunContextPreparation } from "./RunOptions-BoESJrxw.mjs";
-import { t as MessagingHost } from "./MessagingHost-e1Sbzfao.mjs";
-import { i as SubagentHost } from "./SubagentHost-CmiNTOBZ.mjs";
+import { B as RunSubagentChildIdentity, H as RunSubagentEstablishRequest, M as RunOptions, S as RunContextPreparationError, W as RunSubagentJoinRequest, i as ChildEstablishStatus, l as ModelUsageAccounting, t as AgentUpdateAcceptance, x as RunContextPreparation } from "./RunOptions-CSBsSj0X.mjs";
+import { t as MessagingHost } from "./MessagingHost-CqzpxbGz.mjs";
+import { a as SubagentHost } from "./SubagentHost-P9zB_TfV.mjs";
 import { t as RunEventSink } from "./RunEventSink-D5aVhISG.mjs";
 import { AiError, LanguageModel, Model, Prompt, Tool, Toolkit } from "effect/unstable/ai";
 import { Cause, Context, Effect, Layer, Option, Schema, Scope, Stream, Tracer } from "effect";
@@ -343,4 +343,4 @@ declare namespace AgentRuntime_d_exports {
 }
 //#endregion
 export { start as A, decodeFinalOutput as C, renderInputPrompt as D, projectCompletionOutput as E, withTerminalDefectEvent as F, stream as M, streamUnknown as N, run as O, streamWithUsageAccountingUnknown as P, ToolCallWaiting as S, projectCompletionFromToolOutput as T, SubagentDurability as _, AgentResultSchema as a, SubagentDurabilityError as b, AgentSpawner as c, DetachedRun as d, EngineProvidedToolServices as f, SpawnedChildRun as g, SpawnRunOptions as h, AgentResult as i, startUnknown as j, runUnknown as k, AgentSpawnerParent as l, SpawnDelegation as m, AgentChildPending as n, AgentRuntimeFailure as o, RuntimeBinding as p, AgentCompletionProjectionRequirements as r, AgentRuntimeRequirements as s, AgentRuntime_d_exports as t, AgentSpawnerService as u, SubagentDurabilityDurable as v, encodeRunDisposition as w, SubagentDurabilityService as x, SubagentDurabilityEphemeral as y };
-//# sourceMappingURL=AgentRuntime-CWkHuzyt.d.mts.map
+//# sourceMappingURL=AgentRuntime-DyZv8uu2.d.mts.map

package/dist/{DurableAgentRuntime-BIrgxwRl.mjs → DurableAgentRuntime-tNrkJZNo.mjs}

@@ -10,25 +10,25 @@ import { IdGenerator as IdGenerator$1 } from "./core/IdGenerator.mjs";
 import { DelegationDepth, SubagentBudgetReservation, SubagentDelegationCaps, SubagentGrant, SubagentParentLink, SubagentReservationAmounts, getToolExecutionKind } from "./core/SubagentContract.mjs";
 import { o as Selection, s as Snapshot } from "./ToolExposure-C93U1sPu.mjs";
 import { ChildRunUsage, InputTokenUsage, ModelUsageGroup, OutputTokenUsage, RunUsageReport, RunUsageSummary, emptyRunTotals, runTotalsFromSummary, sumRunTotals, summarizeModelUsage, unknownRunTotals } from "./core/Usage.mjs";
-import { a as WorkerError, c as WorkerRef, g as MessageStatus, h as MessageRef, o as WorkerHistoryEntry, p as WorkerUpdate, r as WorkerCompletion, t as FrameworkMessage } from "./Worker-T_3RbaKc.mjs";
-import { a as PeerMessageCapacity, d as MessageAdmission, f as MessagingError, i as PeerDeliveryLifetime, o as PeerRoutes, p as PeerName, r as PeerAuthorizer, t as MessagingHost } from "./MessagingHost-D89X7ma8.mjs";
+import { C as MessageStatus, S as MessageRef, _ as WorkerStop, b as WorkerUpdate, c as WorkerError, f as WorkerRef, l as WorkerHistoryEntry, o as WorkerCompletion, r as FrameworkMessage } from "./Worker-CfwzMZEK.mjs";
+import { a as PeerMessageCapacity, d as MessageAdmission, f as MessagingError, i as PeerDeliveryLifetime, o as PeerRoutes, p as PeerName, r as PeerAuthorizer, t as MessagingHost } from "./MessagingHost-DfsbMPvq.mjs";
 import { SubagentHost } from "./engine/SubagentHost.mjs";
 import { ThreadHistory } from "./engine/ThreadHistory.mjs";
 import { n as RunToolVisibility } from "./ToolExposure-9uF_Yo0T.mjs";
-import { f as renderInputPrompt, n as AgentChildPending, y as streamWithUsageAccountingUnknown } from "./AgentRuntime-DLwPoEVH.mjs";
+import { f as renderInputPrompt, n as AgentChildPending, y as streamWithUsageAccountingUnknown } from "./AgentRuntime-Cp1hAb-W.mjs";
 import { ContextRolloverTool } from "./engine/ContextWindow.mjs";
 import { getToolExecutionClass } from "./engine/DurableStep.mjs";
 import { CompactionError, ContextCompactor } from "./engine/ContextCompactor.mjs";
 import { RunPolicyUsage } from "./core/RunPolicyUsage.mjs";
 import { AgentUpdateAcceptance, CurrentToolFailureObserver, ModelUsageAccounting, RunContextPreparation, RunContextPreparationPassthrough, RunToolAuthorization, RunToolScheduling } from "./engine/RunOptions.mjs";
-import { AbortRequested, AgentUpdateEmitted, BatchId, CanonicalBatch, CanonicalRecordEnvelope, CanonicalSequence, CompactionCreated, DefinitionDigests, Digest, ModelResponseInterrupted, PeerMessagePrepared, PersistedJson, ProducerEpoch, RecordEnvelope, RecordId, RepairAnnotated, RunDurationExhausted, RunPolicyUsageReserved, RunStartedRecord, SettlementFailureDiagnostic, SubagentJoined, SubagentLineageRecorded, SubagentRequested, SubagentStarted, SubmissionSettled, SubmissionSettledRecord, SubtreeBudgetReserved, ThreadCreated, ToolApprovalDecided, ToolApprovalRequested, ToolCallPrepared, ToolCallResolved, ToolCallSettled, ToolCallUnknown, ToolOperation, ToolStepSettled, ToolUnavailable, UserInputRecorded, WorkerAdmission, WorkerInputCompleted, WorkerInputRequested, WorkerOrigin, WorkerOriginRecorded, WorkerReportPrepared, WorkerReportRefused, WorkerReportingIntent } from "./durable/Records.mjs";
-import { AbortCommand, AbortIntentRequest, AdmissionPolicyError, AdmissionRequest, ApprovalDecisionCommand, ApprovalPendingSuspension, AttachChildToReservationRequest, BeginChildBudgetReleaseRequest, ChildBudgetReservationRequest, ChildReservationId, ChildSettledNotification, ClaimJoiningRequest, ClaimRequest, LedgerError, MarkInputAppliedRequest, MarkJoinedRequest, MarkReadyRequest, MarkUnknownRequest, OwnershipToken, ParentLinkage, RecoverySnapshotRequest, ReleaseChildBudgetRequest, ReleaseOwnershipRequest, RenewOwnershipRequest, RevertJoiningRequest, Settlement, SettlementFinalization, SettlementReservation, SubmissionLedger, SubmissionLookupById, SubmissionLookupByKey, SuspendRequest, UnknownResolutionCommand, WaitingChild, WaitingForChildSuspension, submissionAbortBatchId, submissionAbortRecordId, submissionInputBatchId, submissionInputRecordId, submissionSettlementBatchId, submissionSettlementId, submissionSettlementRecordId } from "./durable/SubmissionLedger.mjs";
+import { AbortRequested, AgentUpdateEmitted, BatchId, CanonicalBatch, CanonicalRecordEnvelope, CanonicalSequence, CompactionCreated, DefinitionDigests, Digest, ModelResponseInterrupted, PeerMessagePrepared, PersistedJson, ProducerEpoch, RecordEnvelope, RecordId, RepairAnnotated, RunDurationExhausted, RunPolicyUsageReserved, RunStartedRecord, SettlementFailureDiagnostic, SubagentJoined, SubagentLineageRecorded, SubagentRequested, SubagentStarted, SubmissionSettled, SubmissionSettledRecord, SubtreeBudgetReserved, ThreadCreated, ToolApprovalDecided, ToolApprovalRequested, ToolCallPrepared, ToolCallResolved, ToolCallSettled, ToolCallUnknown, ToolOperation, ToolStepSettled, ToolUnavailable, UserInputRecorded, WorkerAdmission, WorkerInputCompleted, WorkerInputRequested, WorkerOrigin, WorkerOriginRecorded, WorkerReportPrepared, WorkerReportRefused, WorkerReportingIntent, WorkerStopRequested } from "./durable/Records.mjs";
+import { AbortCommand, AbortIntentRequest, AdmissionPolicyError, AdmissionRequest, ApprovalDecisionCommand, ApprovalPendingSuspension, AttachChildToReservationRequest, BeginChildBudgetReleaseRequest, ChildBudgetReservationRequest, ChildReservationId, ChildSettledNotification, ClaimJoiningRequest, ClaimRequest, LedgerError, MarkInputAppliedRequest, MarkJoinedRequest, MarkReadyRequest, MarkUnknownRequest, OwnershipToken, ParentLinkage, RecoverySnapshotRequest, ReleaseChildBudgetRequest, ReleaseOwnershipRequest, RenewOwnershipRequest, RevertJoiningRequest, Settlement, SettlementFinalization, SettlementReservation, SubmissionLedger, SubmissionLookupById, SubmissionLookupByKey, SuspendRequest, UnknownResolutionCommand, WaitingChild, WaitingForChildSuspension, WorkerLedgerState, submissionAbortBatchId, submissionAbortRecordId, submissionInputBatchId, submissionInputRecordId, submissionSettlementBatchId, submissionSettlementId, submissionSettlementRecordId } from "./durable/SubmissionLedger.mjs";
 import { DeclaredPendingBatchEvidence, OpenDelegationCallEvidence, OpenToolCallEvidence, PendingApprovalEvidence, RecoveryDecision, RecoveryEvidence, classifyRecovery } from "./durable/Recovery.mjs";
 import { ExplainedEvidence, ExplainedSubmission, ExplainedUnknownCall, IntegrityCheck, IntegrityReport, ObligationEntry, ObligationReport, RecoveryExplanation, RetryRefused, obligationSeverityOf, predictRecoveryDisposition, recoveryDecisionMeaning } from "./durable/Admin.mjs";
 import { digestJson } from "./durable/Digest.mjs";
-import { a as definitionDigestsEqual, c as resolveWorkerBinding, i as compileRegistrations, l as toolReplayContracts, o as makeLegacyWorkerBinding, s as resolveDefinitionBinding, t as BindingUnavailable } from "./agent-registration-B5CI-Ygk.mjs";
+import { a as definitionDigestsEqual, c as resolveWorkerBinding, i as compileRegistrations, l as toolReplayContracts, o as makeLegacyWorkerBinding, s as resolveDefinitionBinding, t as BindingUnavailable } from "./agent-registration-CKNsrpwo.mjs";
 import { $ as workerOriginRecordId, A as subagentRequestedRecordId, B as toolCallUnknownRecordId, C as runStartedBatchId, D as subagentLineageBatchId, E as subagentJoinedRecordId, F as toolCallPreparedRecordId, G as turnCanonicalBatch, H as toolStepSettledRecordId, I as toolCallResolutionBatchId, J as turnResponseBatch, K as turnIdForRun, L as toolCallResolvedRecordId, M as subagentStartedRecordId, N as toolApprovalDecisionRecordId, O as subagentLineageRecordId, P as toolApprovalRequestRecordId, Q as workerInputRecordId, R as toolCallResultBatchId, S as runIdForSubmission, T as subagentJoinBatchId, U as turnApprovalsBatchId, V as toolStepSettledBatchId, X as turnResultsBatch, a as childIdempotencyKeyFor, b as runDurationBatchId, c as compactionRecordId, d as modelResponseInterruptedBatchId, et as workerReportRecordId, f as modelResponseInterruptedRecordId, g as projectRunJournalStream, i as approvalDecisionBatchId, j as subagentStartedBatchId, k as subagentRequestedBatchId, l as firstWorkerInputRecordId, m as peerMessageRecordId, o as childThreadIdFor, p as modelResponseRecordId, q as turnPreparedBatchId, r as agentUpdateRecordId, s as compactionBatchId, t as RunJournalError, tt as makeJournalMetadata, u as markUnknownBatchId, v as runCompletedRecordId, w as runStartedRecordId, x as runDurationRecordId, y as runCompletionDigest, z as toolCallSettledRecordId } from "./RunJournal-BXrq0VIK.mjs";
-import { FencedAppendRequest, LoadCheckpointRequest, MAX_THREAD_EXPORT_RECORDS, SaveRecoveryCheckpointRequest, ThreadCheckpoint, ThreadExportRequest, ThreadMaterialization, ThreadObservation, ThreadRead, ThreadStore, ThreadStoreDiagnostic, ThreadStoreError, ThreadTailRequest, getRecord, readWorkerState } from "./durable/ThreadStore.mjs";
+import { FencedAppendRequest, LoadCheckpointRequest, MAX_THREAD_EXPORT_RECORDS, SaveRecoveryCheckpointRequest, ThreadCheckpoint, ThreadExportRequest, ThreadMaterialization, ThreadObservation, ThreadRead, ThreadStore, ThreadStoreDiagnostic, ThreadStoreError, ThreadTailRequest, getRecord, getRunInput, readWorkerState } from "./durable/ThreadStore.mjs";
 import { DurableRuntimeFailpoint } from "./durable/DurableFailpoint.mjs";
 import { ScheduledInputRefused, ScheduledInputRetryable } from "./durable/Schedule.mjs";
 import { PreparedInputAdmission } from "./durable/PreparedInputAdmission.mjs";
@@ -752,26 +752,21 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 		const reports = source.reporting?.filter((entry) => entry.delegationId === delegationId) ?? [];
 		const report = reports[0];
 		if (report === void 0) return void 0;
-		if (reports.length !== 1 || !Object.is(report.target, target.definition) || report.mode !== "standard" && !Object.is(report.input, source.definition.input) || report.destination !== void 0 && !Object.is(report.destination.target, source.definition)) return yield* failure("start", "declaration-unavailable");
-		let returnAddress;
-		if (report.mode === "standard") {
-			const submission = authority.submission;
-			if (submission === void 0 || authority.depth !== 0 && submission.workerAdmission === void 0) return yield* failure("start", "denied");
-			const retained = submission.workerAdmission === void 0 ? void 0 : yield* Schema.encodeEffect(WorkerAdmission)(submission.workerAdmission).pipe(Effect.flatMap(Schema.decodeEffect(PersistedJson)), Effect.mapError(storageFailure("start")));
-			returnAddress = {
+		if (reports.length !== 1 || !Object.is(report.target, target.definition)) return yield* failure("start", "declaration-unavailable");
+		const submission = authority.submission;
+		if (submission === void 0 || authority.depth !== 0 && submission.workerAdmission === void 0) return yield* failure("start", "denied");
+		const retained = submission.workerAdmission === void 0 ? void 0 : yield* Schema.encodeEffect(WorkerAdmission)(submission.workerAdmission).pipe(Effect.flatMap(Schema.decodeEffect(PersistedJson)), Effect.mapError(storageFailure("start")));
+		return {
+			sourceDigests: source.digests,
+			mode: "standard",
+			returnAddress: {
 				input: submission.inputPayload,
 				principal: submission.principal,
 				policy: authority.policy,
 				depth: authority.depth,
 				...authority.grant === void 0 ? {} : { grant: authority.grant },
 				...retained === void 0 ? {} : { workerAdmission: retained }
-			};
-		}
-		return {
-			sourceDigests: source.digests,
-			...report.mode === void 0 ? {} : { mode: report.mode },
-			...returnAddress === void 0 ? {} : { returnAddress },
-			...report.destination === void 0 ? {} : { destinationDelegationId: report.destination.delegationId }
+			}
 		};
 	});
 	const currentBinding = (agentId) => {
@@ -1040,7 +1035,7 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 		const sourceBinding = currentBinding(origin.source.agentId);
 		const targetBinding = currentBinding(origin.worker.targetAgentId);
 		const reports = sourceBinding?.reporting?.filter((entry) => entry.delegationId === origin.worker.delegationId) ?? [];
-		if (sourceBinding === void 0 || targetBinding === void 0 || reports.length !== 1 || reports[0]?.mode !== "standard" || reports[0].target !== targetBinding.definition || !definitionDigestsEqual(submission.agentDigests, origin.targetDigests)) return yield* failure("followUp", "declaration-unavailable");
+		if (sourceBinding === void 0 || targetBinding === void 0 || reports.length !== 1 || reports[0] === void 0 || reports[0].target !== targetBinding.definition || !definitionDigestsEqual(submission.agentDigests, origin.targetDigests)) return yield* failure("followUp", "declaration-unavailable");
 		const receivingOrigin = retained?.origin;
 		if (destination.depth !== 0 && receivingOrigin === void 0) return yield* failure("followUp", "denied");
 		const now = yield* Clock.currentTimeMillis;
@@ -1115,53 +1110,25 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 				messageId,
 				reason
 			});
+			if (intent.mode !== "standard") return refused("declaration-unavailable");
 			const selected = yield* deps.ledger.lookup(SubmissionLookupById.make({ submissionId: host.submissionId })).pipe(Effect.mapError(storageFailure("inspect")));
 			if (Option.isNone(selected) || selected.value.threadId !== submission.threadId || selected.value.receiptId !== host.receiptId || selected.value.workerAdmission === void 0 || !sameOrigin(selected.value.workerAdmission.origin, origin)) return yield* failure("inspect", "corrupt");
 			const hostSubmission = selected.value;
 			const hostAdmission = selected.value.workerAdmission;
-			const source = yield* Effect.gen(function* () {
-				if (intent.mode === "standard") {
-					const address = intent.returnAddress;
-					if (address === void 0) return yield* failure("inspect", "corrupt");
-					const retained = address.workerAdmission === void 0 ? void 0 : yield* Schema.decodeUnknownEffect(WorkerAdmission)(address.workerAdmission).pipe(Effect.mapError((cause) => failure("inspect", "corrupt", cause)));
-					return {
-						...address,
-						admission: retained,
-						sourceSubmissionId: void 0
-					};
-				}
-				const first = Option.getOrUndefined(yield* exactRecord(origin.source.threadId, workerInputRecordId(origin.firstMessageId), "inspect"))?.record.payload;
-				if (first?._tag !== "WorkerInputRequested" || first.admission.messageId !== origin.firstMessageId || !sameOrigin(first.admission.origin, origin)) return yield* failure("inspect", "corrupt");
-				const authority = yield* sourceAuthority(origin.source.threadId, first.admission.sourceSubmissionId);
-				const recorded = authority.current.records.find(({ record }) => record.payload._tag === "WorkerOriginRecorded")?.record.payload;
-				let retained;
-				let principal = hostSubmission.principal;
-				if (recorded?._tag === "WorkerOriginRecorded") {
-					if (hostAdmission.sourceSubmissionId === void 0) return yield* failure("inspect", "denied");
-					const snapshot = yield* deps.ledger.lookup(SubmissionLookupById.make({ submissionId: hostAdmission.sourceSubmissionId })).pipe(Effect.mapError(storageFailure("inspect")));
-					if (Option.isNone(snapshot) || snapshot.value.threadId !== origin.source.threadId || snapshot.value.workerAdmission === void 0 || !sameOrigin(snapshot.value.workerAdmission.origin, recorded.origin)) return yield* failure("inspect", "denied");
-					retained = snapshot.value.workerAdmission;
-					principal = snapshot.value.principal;
-				}
-				return {
-					policy: authority.policy,
-					depth: authority.depth,
-					grant: authority.grant,
-					input: authority.submission?.inputPayload,
-					admission: retained,
-					principal,
-					sourceSubmissionId: first.admission.sourceSubmissionId
-				};
-			});
+			const address = intent.returnAddress;
+			if (address === void 0) return yield* failure("inspect", "corrupt");
+			const retainedAdmission = address.workerAdmission === void 0 ? void 0 : yield* Schema.decodeUnknownEffect(WorkerAdmission)(address.workerAdmission).pipe(Effect.mapError((cause) => failure("inspect", "corrupt", cause)));
+			const source = {
+				...address,
+				admission: retainedAdmission
+			};
 			const sourceBinding = currentBinding(origin.source.agentId);
 			const targetBinding = currentBinding(origin.worker.targetAgentId);
 			const reports = sourceBinding?.reporting?.filter((entry) => entry.delegationId === origin.worker.delegationId) ?? [];
 			const descriptor = reports[0];
-			if (sourceBinding === void 0 || targetBinding === void 0 || descriptor === void 0 || reports.length !== 1 || !Object.is(descriptor.target, targetBinding.definition) || descriptor.mode !== "standard" && !Object.is(descriptor.input, sourceBinding.definition.input) || descriptor.mode !== intent.mode || descriptor.destination?.delegationId !== intent.destinationDelegationId || descriptor.destination !== void 0 && !Object.is(descriptor.destination.target, sourceBinding.definition)) return refused("declaration-unavailable");
+			if (sourceBinding === void 0 || targetBinding === void 0 || descriptor === void 0 || reports.length !== 1 || !Object.is(descriptor.target, targetBinding.definition)) return refused("declaration-unavailable");
 			const sourceOrigin = source.admission?.origin;
 			if (source.depth !== 0 && sourceOrigin === void 0) return refused("destination");
-			if (descriptor.mode !== "standard" && sourceOrigin !== void 0 && (descriptor.destination === void 0 || descriptor.destination.delegationId !== sourceOrigin.worker.delegationId || descriptor.destination.target.id !== sourceOrigin.worker.targetAgentId)) return refused("destination");
-			if (sourceOrigin === void 0 && descriptor.destination !== void 0) return refused("destination");
 			const now = yield* Clock.currentTimeMillis;
 			const deadlineAtMillis = Math.min(origin.expiresAtMillis, sourceOrigin?.expiresAtMillis ?? Infinity);
 			if (now >= deadlineAtMillis) return refused("expired");
@@ -1196,13 +1163,10 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 				value
 			})), Effect.catchTag("WorkerReportPreparationFailure", (error) => Effect.succeed(refused(error.stage))), Effect.catchTag("TimeoutError", () => Effect.succeed(refused("timeout"))), Effect.catchCauseIf((cause) => !Cause.hasInterrupts(cause), () => Effect.succeed(refused("defect"))));
 			if (projection._tag === "WorkerReportRefused") return projection;
-			if (descriptor.mode === "standard") {
-				const message = projection.value.message;
-				if (source.input === void 0 || !Schema.is(WorkerCompletion)(message)) return refused("input");
-				if (!Schema.toEquivalence(WorkerRef)(message.report.worker, origin.worker) || !Schema.toEquivalence(Receipt)(message.report.receipt, report.observation.receipt) || message.report.runId !== runId || message.report.settlementId !== host.settlementId || message.report.outcome !== host.outcome || message.budgetExhausted !== report.observation.budgetExhausted) return refused("input");
-			} else if (projection.value.message !== void 0) return refused("input");
-			const reportInput = descriptor.mode === "standard" ? source.input : projection.value.encodedInput;
-			const validated = yield* (descriptor.mode === "standard" ? Schema.decodeUnknownEffect(PersistedJson)(reportInput) : Schema.decodeEffect(Schema.toEncoded(sourceBinding.definition.input))(reportInput).pipe(Effect.flatMap(() => Schema.decodeUnknownEffect(PersistedJson)(reportInput)))).pipe(Effect.option);
+			const message = projection.value.message;
+			if (!Schema.is(WorkerCompletion)(message)) return refused("input");
+			if (!Schema.toEquivalence(WorkerRef)(message.report.worker, origin.worker) || !Schema.toEquivalence(Receipt)(message.report.receipt, report.observation.receipt) || message.report.runId !== runId || message.report.settlementId !== host.settlementId || message.report.outcome !== host.outcome || message.budgetExhausted !== report.observation.budgetExhausted) return refused("input");
+			const validated = yield* Schema.decodeEffect(PersistedJson)(source.input).pipe(Effect.option);
 			if (Option.isNone(validated)) return refused("input");
 			const input = validated.value;
 			const inputDigest = yield* withCrypto(digestJson(input)).pipe(Effect.mapError(storageFailure("inspect")));
@@ -1211,7 +1175,7 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			if (sourceOrigin !== void 0) {
 				const retained = source.admission;
 				if (retained === void 0) return refused("destination");
-				const parameters = yield* Schema.decodeUnknownEffect(PersistedJson)(descriptor.mode === "standard" ? retained.parameters : projection.value.encodedParameters).pipe(Effect.option);
+				const parameters = yield* Schema.decodeEffect(PersistedJson)(retained.parameters).pipe(Effect.option);
 				if (Option.isNone(parameters)) return refused("destination");
 				workerAdmission = {
 					origin: sourceOrigin,
@@ -1221,20 +1185,10 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 					...retained.sourceSubmissionId === void 0 ? {} : { sourceSubmissionId: retained.sourceSubmissionId }
 				};
 			}
-			const authorizationSourceSubmissionId = sourceOrigin === void 0 ? source.sourceSubmissionId : workerAdmission?.sourceSubmissionId;
-			const authorized = intent.mode === "standard" ? Option.some(principal) : yield* deps.authorizer.authorize({
-				sourceThreadId: sourceOrigin?.source.threadId ?? origin.source.threadId,
-				...authorizationSourceSubmissionId === void 0 ? {} : { sourceSubmissionId: authorizationSourceSubmissionId },
-				principal,
-				operation: "followUp",
-				access: "send",
-				worker: sourceOrigin?.worker ?? origin.worker
-			}).pipe(Effect.map(Option.some), Effect.catchTag("WorkerError", (error) => error.reason === "storage" || error.reason === "unavailable" ? Effect.fail(error) : Effect.succeed(Option.none())));
-			if (Option.isNone(authorized)) return refused("denied");
 			const envelope = {
 				schemaVersion: 1,
 				threadId: origin.source.threadId,
-				deliveryPrincipal: authorized.value,
+				deliveryPrincipal: principal,
 				agentId: origin.source.agentId,
 				definitions: intent.sourceDigests,
 				input,
@@ -1244,10 +1198,10 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 					policyId: "worker-report",
 					decisionId: messageId
 				},
-				...projection.value.message === void 0 ? {} : { messageAdmission: projection.value.message },
+				messageAdmission: message,
 				...workerAdmission === void 0 ? {} : { workerAdmission: {
 					...workerAdmission,
-					deliveryPrincipal: authorized.value
+					deliveryPrincipal: principal
 				} }
 			};
 			const encoded = yield* Schema.encodeEffect(PreparedInput)(envelope).pipe(Effect.flatMap(Schema.decodeUnknownEffect(PersistedJson)), Effect.mapError(storageFailure("inspect")));
@@ -1364,7 +1318,16 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			if (worker.targetAgentId !== target.id) return yield* failure(operation, "worker-mismatch");
 			const first = Option.getOrUndefined(yield* exactRecord(context.source.threadId, firstWorkerInputRecordId(worker), operation))?.record.payload;
 			const origin = first?._tag === "WorkerInputRequested" ? first.admission.origin : void 0;
-			if (origin === void 0) return yield* failure(operation, "not-found");
+			if (origin === void 0) {
+				const retained = Option.isNone(deps.deliveries) ? null : yield* deps.deliveries.value.get({
+					ownerThreadId: context.source.threadId,
+					messageId: Schema.decodeSync(IdempotencyKey)(worker.threadId)
+				}).pipe(Effect.mapError(storageFailure(operation)));
+				const pendingOrigin = retained?.envelope.workerAdmission?.origin;
+				if (pendingOrigin === void 0) return yield* failure(operation, "not-found");
+				if (!Schema.toEquivalence(WorkerRef)(pendingOrigin.worker, worker) || pendingOrigin.firstMessageId !== retained?.key.messageId || pendingOrigin.source.threadId !== context.source.threadId) return yield* failure(operation, "worker-mismatch");
+				return pendingOrigin;
+			}
 			if (!Schema.toEquivalence(WorkerRef)(origin.worker, worker) || first?._tag !== "WorkerInputRequested" || first.admission.messageId !== origin.firstMessageId || workerInputRecordId(origin.firstMessageId) !== firstWorkerInputRecordId(worker)) return yield* failure(operation, "worker-mismatch");
 			return origin;
 		});
@@ -1470,40 +1433,99 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			return yield* deliveryStatus(processed, operation);
 		});
 		const messageIdFor = (parts) => withCrypto(digestJson(parts)).pipe(Effect.map((digest) => Schema.decodeSync(IdempotencyKey)(`worker:${digest}`)), Effect.mapError(storageFailure("start")));
-		const summarize = Effect.fn("WorkerHost.summarize")(function* (origin, all, operation) {
+		const summarize = Effect.fn("WorkerHost.summarize")(function* (origin, operation) {
 			yield* authorize(operation, "read", origin.worker);
-			let latestReceipt = null;
-			let active = false;
-			let starting = false;
-			for (const row of all) {
-				if (row.admission.origin.worker.threadId !== origin.worker.threadId) continue;
-				const delivery = Option.isNone(deps.deliveries) ? null : yield* deps.deliveries.value.get({
-					ownerThreadId: context.source.threadId,
-					messageId: row.admission.messageId
-				}).pipe(Effect.mapError(storageFailure(operation)));
-				const principal = row.admission.deliveryPrincipal ?? delivery?.envelope.deliveryPrincipal;
-				const found = principal === void 0 ? Option.none() : yield* deps.ledger.lookup(SubmissionLookupByKey.make({
-					threadId: origin.worker.threadId,
-					principal,
-					idempotencyKey: row.admission.messageId
-				})).pipe(Effect.mapError(storageFailure(operation)));
-				if (Option.isNone(found)) {
-					if (delivery?.status !== "refused") starting = true;
-					continue;
+			if (deps.ledger.inspectWorker === void 0 || Option.isNone(deps.deliveries)) return yield* failure(operation, "unavailable");
+			const threadId = origin.worker.threadId;
+			const deliveries = deps.deliveries.value;
+			const pending = () => deliveries.list({
+				ownerThreadId: context.source.threadId,
+				pendingWorker: threadId,
+				limit: 1
+			}).pipe(Effect.mapError(storageFailure(operation)), Effect.map((page) => page.items[0]));
+			const tail = () => deps.store.inspectTail(ThreadTailRequest.make({ threadId })).pipe(Effect.catchTag("ThreadNotMaterialized", () => Effect.succeed(void 0)), Effect.mapError(storageFailure(operation)));
+			const receipt = (row) => ({
+				threadId: row.threadId,
+				submissionId: row.submissionId,
+				receiptId: row.receiptId,
+				queueSequence: row.queueSequence
+			});
+			const input = (row) => {
+				if (row.workerAdmission === void 0 || !sameOrigin(row.workerAdmission.origin, origin)) return failure(operation, "corrupt");
+				return Effect.succeed({
+					receipt: receipt(row),
+					messageId: row.workerAdmission.messageId
+				});
+			};
+			const submission = (submissionId) => deps.ledger.lookup(SubmissionLookupById.make({ submissionId })).pipe(Effect.mapError(storageFailure(operation)), Effect.flatMap((row) => Option.isNone(row) ? failure(operation, "corrupt") : Effect.succeed(row.value)));
+			for (let attempt = 0; attempt < 16; attempt++) {
+				const delivery = yield* pending();
+				const control = yield* deps.ledger.inspectWorker(threadId).pipe(Effect.mapError(storageFailure(operation)));
+				const current = yield* tail();
+				const records = current === void 0 ? [] : yield* deps.store.read({
+					threadId,
+					selection: {
+						_tag: "WorkerExecution",
+						expectedTailSequence: current.tailSequence,
+						expectedTailDigest: current.tailDigest
+					},
+					page: { limit: 2 }
+				}).pipe(Stream.runCollect, Effect.mapError(storageFailure(operation)), Effect.catch((error) => Effect.gen(function* () {
+					const after = yield* tail().pipe(Effect.orElseSucceed(() => current));
+					if (after !== void 0 && (current.tailSequence !== after.tailSequence || current.tailDigest !== after.tailDigest)) return void 0;
+					return yield* error;
+				})));
+				if (records === void 0) continue;
+				const applied = records.find((entry) => entry.record.payload._tag === "UserInputRecorded");
+				const started = records.find((entry) => entry.record.payload._tag === "RunStarted")?.record.payload;
+				const acceptedInput = control.latest === null ? null : yield* input(control.latest);
+				let appliedInput = null;
+				let run = null;
+				if (applied?.record.payload._tag === "UserInputRecorded") {
+					const value = applied.record.payload;
+					if (value.submissionId === void 0 || value.runId === void 0) return yield* failure(operation, "corrupt");
+					appliedInput = {
+						...yield* input(yield* submission(value.submissionId)),
+						runId: value.runId,
+						sequence: applied.sequence
+					};
 				}
-				active ||= found.value.state !== "settled";
-				if (latestReceipt === null || found.value.queueSequence > latestReceipt.queueSequence) latestReceipt = {
-					threadId: found.value.threadId,
-					submissionId: found.value.submissionId,
-					receiptId: found.value.receiptId,
-					queueSequence: found.value.queueSequence
+				if (started?._tag === "RunStarted") {
+					const initial = Option.getOrUndefined(yield* getRunInput({
+						threadId,
+						runId: started.runId
+					}).pipe(Effect.provideService(ThreadStore, deps.store), Effect.mapError(storageFailure(operation))))?.record.payload;
+					if (initial?._tag !== "UserInputRecorded" || initial.submissionId === void 0) return yield* failure(operation, "corrupt");
+					const host = yield* input(yield* submission(initial.submissionId));
+					const terminal = Option.getOrUndefined(yield* exactRecord(threadId, submissionSettlementRecordId(initial.submissionId), operation))?.record.payload;
+					if (terminal !== void 0 && (terminal._tag !== "SubmissionSettled" || terminal.runId !== started.runId)) return yield* failure(operation, "corrupt");
+					run = {
+						runId: started.runId,
+						hostReceipt: host.receipt,
+						outcome: terminal?.outcome ?? null,
+						disposition: terminal?.runDisposition ?? null
+					};
+				}
+				const after = yield* deps.ledger.inspectWorker(threadId).pipe(Effect.mapError(storageFailure(operation)));
+				const afterTail = yield* tail();
+				const afterDelivery = yield* pending();
+				if (!Schema.toEquivalence(WorkerLedgerState)(control, after) || current?.tailSequence !== afterTail?.tailSequence || current?.tailDigest !== afterTail?.tailDigest || delivery?.key.messageId !== afterDelivery?.key.messageId || delivery?.version !== afterDelivery?.version) continue;
+				return {
+					worker: origin.worker,
+					latestReceipt: acceptedInput?.receipt ?? null,
+					state: control.terminal ?? (control.stopped ? control.active === null ? "stopped" : "stopping" : control.active !== null ? "active" : delivery !== void 0 ? "starting" : "idle"),
+					acceptedInput,
+					appliedInput,
+					run,
+					pendingDelivery: delivery === void 0 ? null : yield* deliveryStatus(delivery, operation),
+					watermark: {
+						canonicalSequence: current?.tailSequence ?? 0,
+						acceptedQueueSequence: control.latest?.queueSequence ?? 0,
+						pendingDeliveryVersion: delivery?.version ?? null
+					}
 				};
 			}
-			return {
-				worker: origin.worker,
-				latestReceipt,
-				state: active ? "active" : starting || latestReceipt === null ? "starting" : "idle"
-			};
+			return yield* failure(operation, "storage");
 		});
 		return {
 			context: Effect.gen(function* () {
@@ -1519,57 +1541,83 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 				yield* authorize("start", "send");
 				return (yield* preparedTarget(request.target, request.encodedInput)).policy;
 			}),
-			start: Effect.fn("WorkerHost.start")(function* (request) {
+			start: Effect.fn("WorkerHost.start")(function* (command) {
 				const principal = yield* authorize("start", "send");
 				if (context.depth !== 0 && sourceSubmissionId === void 0) return yield* failure("start", "denied");
-				const prepared = yield* preparedTarget(request.target, request.encodedInput);
-				const resolved = prepared.resolved;
-				const sourcePolicy = Option.getOrElse(prepared.source.policyOverride, () => context.policy);
-				const grant = yield* Schema.decodeUnknownEffect(SubagentGrant)(request.encodedGrant).pipe(Effect.mapError((cause) => failure("start", "corrupt", cause)));
+				const grant = yield* Schema.decodeUnknownEffect(SubagentGrant)(command.encodedGrant).pipe(Effect.mapError((cause) => failure("start", "corrupt", cause)));
+				const parameters = yield* decode(PersistedJson, command.encodedParameters, "start");
 				const messageId = yield* messageIdFor([
 					context.source.threadId,
-					request.delegationId,
-					request.idempotencyKey
+					command.delegationId,
+					command.idempotencyKey
 				]);
 				if (Option.isNone(deps.deliveries)) return yield* failure("start", "unavailable");
-				const existing = yield* deps.deliveries.value.get({
+				const deliveries = deps.deliveries.value;
+				const retained = () => deliveries.get({
 					ownerThreadId: context.source.threadId,
 					messageId
 				}).pipe(Effect.mapError(storageFailure("start")));
-				const now = yield* Clock.currentTimeMillis;
-				const previousOrigin = existing?.envelope.workerAdmission?.origin;
-				const sourceBinding = prepared.source.binding;
-				if (sourceBinding === void 0) return yield* failure("start", "declaration-unavailable");
-				const reporting = previousOrigin === void 0 ? yield* reportIntent(sourceBinding, resolved, request.delegationId, prepared.source) : previousOrigin.reporting;
-				if (reporting?.mode === "standard" && sourceSubmissionId === void 0) return yield* failure("start", "denied");
-				const origin = yield* decode(WorkerOrigin, {
-					worker: {
-						schemaVersion: 1,
-						delegationId: request.delegationId,
-						targetAgentId: request.target.id,
-						threadId: Schema.decodeSync(ThreadId)(messageId)
-					},
-					source: existing?.envelope.workerAdmission?.origin.source ?? context.source,
-					targetDigests: previousOrigin?.targetDigests ?? resolved.digests,
-					policy: request.policy,
-					budget: request.budget,
-					...request.budgetScope === void 0 ? {} : { budgetScope: request.budgetScope },
-					grant,
-					depth: context.depth + 1,
-					firstMessageId: messageId,
-					createdAtMillis: existing?.envelope.workerAdmission?.origin.createdAtMillis ?? now,
-					expiresAtMillis: existing?.envelope.workerAdmission?.origin.expiresAtMillis ?? now + deps.limits.lifetimeMillis,
-					...reporting === void 0 ? {} : { reporting },
-					...request.toolCallAllowance === void 0 ? {} : { toolCallAllowance: request.toolCallAllowance }
-				}, "start");
-				yield* authorizeBudget(origin, principal);
-				const targetPolicy = Option.isSome(prepared.policy) ? prepared.policy.value : origin.budgetScope === "worker-run" ? resolved.definition.policy : AgentPolicy.resolve(resolved.definition.policyOverrides ?? resolved.definition.policy, sourcePolicy);
-				if (!withinPolicy(origin, origin.budgetScope === "worker-run" ? targetPolicy : sourcePolicy, targetPolicy)) return yield* failure("start", "capacity");
-				const delivery = yield* send(origin, messageId, request.encodedInput, request.encodedParameters, principal, "start");
-				return {
-					worker: origin.worker,
-					delivery
-				};
+				const replay = (saved) => Effect.gen(function* () {
+					const replayPrincipal = yield* authorize("start", "send");
+					yield* binding(command.target, "start");
+					const metadata = saved.envelope.workerAdmission;
+					if (metadata === void 0) return yield* failure("start", "idempotency-conflict");
+					const origin = metadata.origin;
+					if (origin.firstMessageId !== messageId || metadata.messageId !== messageId || origin.source.threadId !== context.source.threadId || origin.worker.delegationId !== command.delegationId || origin.worker.targetAgentId !== command.target.id || !sameJson(metadata.parameters, parameters) || !Schema.toEquivalence(SubagentGrant)(origin.grant, grant) || origin.budgetScope !== command.budgetScope || origin.depth !== context.depth + 1 || !("prepare" in command) && (!samePolicy(origin.policy, command.policy) || !Schema.toEquivalence(WorkerOrigin.fields.budget)(origin.budget, command.budget) || origin.toolCallAllowance !== command.toolCallAllowance)) return yield* failure("start", "idempotency-conflict");
+					return {
+						worker: origin.worker,
+						delivery: yield* send(origin, messageId, "prepare" in command ? saved.envelope.input : command.encodedInput, parameters, replayPrincipal, "start")
+					};
+				});
+				const existing = yield* retained();
+				if (existing !== null) return yield* replay(existing);
+				return yield* Effect.gen(function* () {
+					const request = "prepare" in command ? {
+						...yield* command.prepare,
+						...command
+					} : command;
+					const prepared = yield* preparedTarget(request.target, request.encodedInput);
+					const resolved = prepared.resolved;
+					const sourcePolicy = Option.getOrElse(prepared.source.policyOverride, () => context.policy);
+					const now = yield* Clock.currentTimeMillis;
+					const sourceBinding = prepared.source.binding;
+					if (sourceBinding === void 0) return yield* failure("start", "declaration-unavailable");
+					const reporting = yield* reportIntent(sourceBinding, resolved, request.delegationId, prepared.source);
+					if (reporting?.mode === "standard" && sourceSubmissionId === void 0) return yield* failure("start", "denied");
+					const origin = yield* decode(WorkerOrigin, {
+						worker: {
+							schemaVersion: 1,
+							delegationId: request.delegationId,
+							targetAgentId: request.target.id,
+							threadId: Schema.decodeSync(ThreadId)(messageId)
+						},
+						source: context.source,
+						...resolved.definition.runDisposition?.workerLifecycle === "assignment" ? { lifecycle: "assignment" } : {},
+						targetDigests: resolved.digests,
+						policy: request.policy,
+						budget: request.budget,
+						...request.budgetScope === void 0 ? {} : { budgetScope: request.budgetScope },
+						grant,
+						depth: context.depth + 1,
+						firstMessageId: messageId,
+						createdAtMillis: now,
+						expiresAtMillis: now + deps.limits.lifetimeMillis,
+						...reporting === void 0 ? {} : { reporting },
+						...request.toolCallAllowance === void 0 ? {} : { toolCallAllowance: request.toolCallAllowance }
+					}, "start");
+					yield* authorizeBudget(origin, principal);
+					const targetPolicy = Option.isSome(prepared.policy) ? prepared.policy.value : origin.budgetScope === "worker-run" ? resolved.definition.policy : AgentPolicy.resolve(resolved.definition.policyOverrides ?? resolved.definition.policy, sourcePolicy);
+					if (!withinPolicy(origin, origin.budgetScope === "worker-run" ? targetPolicy : sourcePolicy, targetPolicy)) return yield* failure("start", "capacity");
+					const delivery = yield* send(origin, messageId, request.encodedInput, request.encodedParameters, principal, "start");
+					return {
+						worker: origin.worker,
+						delivery
+					};
+				}).pipe(Effect.catch((error) => Effect.gen(function* () {
+					if (!("prepare" in command)) return yield* Effect.fail(error);
+					const saved = yield* retained();
+					return saved === null ? yield* Effect.fail(error) : yield* replay(saved);
+				})));
 			}),
 			followUp: Effect.fn("WorkerHost.followUp")(function* (request) {
 				const principal = yield* authorize("followUp", "send", request.worker);
@@ -1614,8 +1662,7 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			summary: Effect.fn("WorkerHost.inspectWorker")(function* (request) {
 				yield* authorize("inspect", "read", request.worker);
 				const origin = yield* findOrigin(request.worker, request.target, "inspect");
-				const source = yield* readWorkerState$1(context.source.threadId, "inspect");
-				return yield* summarize(origin, requests(source.records), "inspect");
+				return yield* summarize(origin, "inspect");
 			}),
 			observe: (request) => Stream.unwrap(Effect.gen(function* () {
 				yield* authorize("observe", "read", request.worker);
@@ -1654,15 +1701,59 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 				yield* authorize("list", "read");
 				yield* binding(request.target, "list");
 				if (!Number.isSafeInteger(request.limit) || request.limit < 1 || request.limit > 100) return yield* failure("list", "capacity");
-				const source = yield* readWorkerState$1(context.source.threadId, "list");
-				const all = requests(source.records);
-				const origins = [...new Map(all.map((row) => [row.admission.origin.worker.threadId, row.admission.origin])).values()].filter((origin) => origin.worker.delegationId === request.delegationId && origin.worker.targetAgentId === request.target.id && (request.after === void 0 || origin.worker.threadId > request.after)).sort((left, right) => left.worker.threadId.localeCompare(right.worker.threadId));
-				const selected = origins.slice(0, request.limit);
+				if (Option.isNone(deps.deliveries)) return yield* failure("list", "unavailable");
+				const page = yield* deps.deliveries.value.list({
+					ownerThreadId: context.source.threadId,
+					limit: request.limit,
+					workerStarts: {
+						delegationId: request.delegationId,
+						targetAgentId: request.target.id
+					},
+					...request.after === void 0 ? {} : { after: Schema.decodeSync(IdempotencyKey)(request.after) }
+				}).pipe(Effect.mapError(storageFailure("list")));
 				return {
-					items: yield* Effect.forEach(selected, (origin) => summarize(origin, all, "list")),
-					next: origins.length > selected.length ? selected[selected.length - 1]?.worker.threadId ?? null : null
+					items: yield* Effect.forEach(page.items, (row) => {
+						const origin = row.envelope.workerAdmission?.origin;
+						return origin === void 0 || origin.firstMessageId !== row.key.messageId ? failure("list", "corrupt") : summarize(origin, "list");
+					}),
+					next: page.next === null ? null : Schema.decodeSync(ThreadId)(page.next)
 				};
 			}),
+			stop: Effect.fn("WorkerHost.stop")(function* (request) {
+				const principal = yield* authorize("stop", "control", request.worker);
+				yield* findOrigin(request.worker, request.target, "stop");
+				if (deps.ledger.stopWorker === void 0) return yield* failure("stop", "unavailable");
+				const command = yield* decode(WorkerStop, request, "stop");
+				const id = Schema.decodeSync(RecordId)(`worker-stop:${yield* messageIdFor([context.source.threadId, request.idempotencyKey])}`);
+				let retained = false;
+				for (let attempt = 0; attempt < 16; attempt++) {
+					const current = yield* deps.store.inspectTail(ThreadTailRequest.make({ threadId: context.source.threadId })).pipe(Effect.mapError(storageFailure("stop")));
+					const prior = Option.getOrUndefined(yield* exactRecord(context.source.threadId, id, "stop"))?.record.payload;
+					if (prior !== void 0) {
+						if (prior._tag !== "WorkerStopRequested" || !Schema.toEquivalence(WorkerStop)(prior.command, command)) return yield* failure("stop", "idempotency-conflict");
+						retained = true;
+						break;
+					}
+					if (yield* append(context.source.threadId, id, WorkerStopRequested.make({ command }), {
+						...current,
+						records: []
+					}, "stop")) {
+						retained = true;
+						break;
+					}
+				}
+				if (!retained) return yield* failure("stop", "storage");
+				while (true) {
+					yield* hit("worker:before-stop-seal", "stop");
+					const owned = yield* deps.ledger.stopWorker({
+						threadId: request.worker.threadId,
+						author: principal
+					}).pipe(Effect.mapError(storageFailure("stop")));
+					yield* hit("worker:after-stop-seal", "stop");
+					if (owned === 0) return command;
+					yield* Effect.sleep(deps.settlementPollInterval);
+				}
+			}),
 			cancel: Effect.fn("WorkerHost.cancel")(function* (request) {
 				const principal = yield* authorize("cancel", "control", request.worker);
 				yield* receiptInput(request, "cancel");
@@ -4996,6 +5087,7 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 			history: pending === void 0 ? journal.historyBefore : resumeProjection.historyBefore,
 			onHistory,
 			input,
+			commandDrainPolicy: submission.workerAdmission === void 0 ? "one" : "all",
 			...journal.committedTurns > 0 || Schema.is(FrameworkMessage)(submission.messageAdmission) ? { retainedInput: submission.inputPayload } : {},
 			...Schema.is(FrameworkMessage)(submission.messageAdmission) ? { frameworkMessage: submission.messageAdmission } : {},
 			approval,
@@ -6902,4 +6994,4 @@ var DurableAgentRuntime = class DurableAgentRuntime extends Context.Service()("@
 //#endregion
 export { RecoveryBlocked as a, RecoverySweepResult as c, recoveryRepairBatchId as d, recoveryRepairRecordId as f, DurableRuntimeConfig as i, childReservationIdFor as l, threadCreatedRecordId as m, DurableAgentRuntime_exports as n, RecoveryFailure as o, threadCreatedBatchId as p, DurableApprovalResolver as r, RecoveryReport as s, DurableAgentRuntime as t, isolateRecovery as u };
 
-//# sourceMappingURL=DurableAgentRuntime-BIrgxwRl.mjs.map
+//# sourceMappingURL=DurableAgentRuntime-tNrkJZNo.mjs.map