effect-agent 0.1.0-beta.134 → 0.1.0-beta.136

package/dist/{Admin-CUja0lmO.d.mts → Admin-Fx85KT-W.d.mts}

@@ -177,6 +177,7 @@ interface JournalMetadata {
   readonly settledSpans: ReadonlyArray<{
     readonly from: number;
     readonly to: number;
+    readonly runId: RunId;
   }>;
   readonly toolExecutionEvidence: ReadonlySet<string>;
   readonly settledToolCallRecordIds: ReadonlySet<string>;
@@ -402,6 +403,9 @@ interface RunJournalProjection {
  * are never canonical settlements or evidence for compaction, recovery or accounting. Real
  * results replace them at the original declaration, including results appended after another Run.
  * Prior user intent and assistant text remain visible; prior system instructions do not.
+ * Each Run retains the history preceding its start and its own continuation. Other Runs'
+ * subsequent Turns cannot replace its input. Compaction covers only its creator's Run view;
+ * a projection without an owner retains interleaved exchanges from the complete Thread history.
  */
 /** @internal Lightweight canonical boundaries collected without retaining record payloads. */
 interface JournalBoundary {
@@ -1160,7 +1164,10 @@ declare const DurableAgentRuntime_base: Context.ServiceClass<DurableAgentRuntime
   readonly processThread: <InputSchema extends Schema.Top, OutputSchema extends Schema.Top, Instructions, Tools extends Record<string, Tool.Any>, Provider, ModelProvides, ModelRequires, InstructionError = InstructionErrorOf<Instructions, InputSchema["Type"]>, InstructionRequirements = InstructionRequirementsOf<Instructions, InputSchema["Type"]>, RunDispositionValue extends RunDispositionDeclaration<OutputSchema["Type"], Schema.Top> | undefined = undefined, InputPromptValue extends InputPromptSource<InputSchema["Type"], unknown, unknown> | undefined = undefined, UpdatesSchema extends Schema.Top | undefined = undefined>(agent: RuntimeBinding<InputSchema, OutputSchema, Instructions, Tools, Provider, ModelProvides, ModelRequires, InstructionError, InstructionRequirements, RunDispositionValue, InputPromptValue, UpdatesSchema>, threadId: ThreadId) => Effect.Effect<ReadonlyArray<Settlement>, DurableWorkerFailure | DurableBindingFailure, DurableWorkerRequirements<RuntimeBinding<InputSchema, OutputSchema, Instructions, Tools, Provider, ModelProvides, ModelRequires, InstructionError, InstructionRequirements, RunDispositionValue, InputPromptValue, UpdatesSchema>, InstructionRequirements>>;
   readonly processThreadResolved: (threadId: ThreadId) => Effect.Effect<ReadonlyArray<Settlement>, DurableWorkerFailure | DurableBindingFailure>;
   /**
-   * Advance the FIFO head, closing its Attempt resources before returning. A vacant,
+   * Advance the FIFO head, closing its Attempt resources before returning. With an opted-in
+   * SubmissionScheduling policy, a complete Turn may hand off to the next same-Agent input;
+   * the returned Settlement identifies the Submission actually completed. Each Attempt closes
+   * before the next is claimed, and deferred Runs retain their original obligations. A vacant,
    * owned, unknown, or suspended head returns None and leaves accepted work pending.
    * Ready input may join this Run through the existing Turn seams and settle with its head.
    * Interruption ends only this Attempt; ownership cleanup uses its latest renewed token.
@@ -1281,7 +1288,7 @@ declare class DurableAgentRuntime extends DurableAgentRuntime_base {
   static readonly layer: Layer.Layer<DurableAgentRuntime, never, SubmissionLedger | ThreadStore | WakeScheduler | DurableRuntimeFailpoint | DurableRuntimeConfig | ToolReconciler | Crypto.Crypto>;
 }
 declare namespace SubmissionLedger_d_exports {
-  export { AbortCommand, AbortIntent, AbortIntentRequest, AdmissionAdmitted, AdmissionConflict, AdmissionFence, AdmissionGroup, AdmissionIndeterminate, AdmissionNotAdmitted, AdmissionPolicyError, AdmissionRequest, AdmissionResolution, AdmissionResult, ApprovalConflict, ApprovalDecisionCommand, ApprovalDecisionIntent, ApprovalPendingSuspension, AttachChildToReservationRequest, BeginChildBudgetReleaseRequest, ChildAttachmentSnapshot, ChildBudgetReservationRequest, ChildBudgetReservationSnapshot, ChildReservationConflict, ChildReservationId, ChildReservationStatus, ChildSettledNotification, ChildSettledOutcome, Claim, ClaimJoiningRequest, ClaimRequest, DEFAULT_OWNERSHIP_LEASE_DURATION, IdempotencyKey, InputAppliedMarker, JoinSnapshot, JoinedToHost, JoiningClaim, LedgerCapabilities, LedgerError, MarkInputAppliedRequest, MarkJoinedRequest, MarkReadyRequest, MarkUnknownRequest, OwnershipLost, OwnershipRenewal, OwnershipSnapshot, OwnershipToken, ParentLinkage, Principal, QueueSequence, RecoverySnapshot, RecoverySnapshotRequest, ReleaseChildBudgetRequest, ReleaseOwnershipRequest, RenewOwnershipRequest, ReservedChildBudget, ReservedSettlement, ResolutionAbortSubmission, ResolutionCompletedWithResult, ResolutionNeverHappened, ResolutionSafeToRetry, RevertJoiningRequest, Settlement, SettlementConflict, SettlementFinalization, SettlementReservation, SettlementReservationSnapshot, SubmissionAdmissionFence, SubmissionLedger, SubmissionLedgerFailure, SubmissionLookup, SubmissionLookupById, SubmissionLookupByKey, SubmissionSnapshot, SubmissionState, SubmissionWorkItem, SuspendRequest, SuspensionOutcome, SuspensionReason, SuspensionSnapshot, UnknownResolution, UnknownResolutionCommand, UnknownResolutionConflict, UnknownResolutionIntent, WaitingChild, WaitingForChildSuspension, WorkerLedgerState, WorkerStopCommand, settlementFailureFromRecord, submissionAbortBatchId, submissionAbortRecordId, submissionInputBatchId, submissionInputRecordId, submissionSettlementBatchId, submissionSettlementId, submissionSettlementRecordId, workerTerminalFromRecord };
+  export { AbortCommand, AbortIntent, AbortIntentRequest, AdmissionAdmitted, AdmissionConflict, AdmissionFence, AdmissionGroup, AdmissionIndeterminate, AdmissionNotAdmitted, AdmissionPolicyError, AdmissionRequest, AdmissionResolution, AdmissionResult, ApprovalConflict, ApprovalDecisionCommand, ApprovalDecisionIntent, ApprovalPendingSuspension, AttachChildToReservationRequest, BeginChildBudgetReleaseRequest, ChildAttachmentSnapshot, ChildBudgetReservationRequest, ChildBudgetReservationSnapshot, ChildReservationConflict, ChildReservationId, ChildReservationStatus, ChildSettledNotification, ChildSettledOutcome, Claim, ClaimHandoff, ClaimJoiningRequest, ClaimRequest, DEFAULT_OWNERSHIP_LEASE_DURATION, IdempotencyKey, InputAppliedMarker, JoinSnapshot, JoinedToHost, JoiningClaim, LedgerCapabilities, LedgerError, MarkInputAppliedRequest, MarkJoinedRequest, MarkReadyRequest, MarkUnknownRequest, OwnershipLost, OwnershipRenewal, OwnershipSnapshot, OwnershipToken, ParentLinkage, Principal, QueueSequence, RecoverySnapshot, RecoverySnapshotRequest, ReleaseChildBudgetRequest, ReleaseOwnershipRequest, RenewOwnershipRequest, ReservedChildBudget, ReservedSettlement, ResolutionAbortSubmission, ResolutionCompletedWithResult, ResolutionNeverHappened, ResolutionSafeToRetry, RevertJoiningRequest, Settlement, SettlementConflict, SettlementFinalization, SettlementReservation, SettlementReservationSnapshot, SubmissionAdmissionFence, SubmissionLedger, SubmissionLedgerFailure, SubmissionLookup, SubmissionLookupById, SubmissionLookupByKey, SubmissionScheduling, SubmissionSnapshot, SubmissionState, SubmissionWorkItem, SuspendRequest, SuspensionOutcome, SuspensionReason, SuspensionSnapshot, UnknownResolution, UnknownResolutionCommand, UnknownResolutionConflict, UnknownResolutionIntent, WaitingChild, WaitingForChildSuspension, WorkerLedgerState, WorkerStopCommand, settlementFailureFromRecord, submissionAbortBatchId, submissionAbortRecordId, submissionInputBatchId, submissionInputRecordId, submissionSettlementBatchId, submissionSettlementId, submissionSettlementRecordId, workerTerminalFromRecord };
 }
 /**
  * Opaque proof that one Attempt currently owns a Submission's lane. It authorizes ledger
@@ -1310,6 +1317,20 @@ type OwnershipToken = typeof OwnershipToken.Type;
  */
 declare const SubmissionState: Schema.Literals<readonly ["admitted", "ready", "joining", "joined", "running", "input-applied", "suspended", "unknown", "terminalizing", "settled"]>;
 type SubmissionState = typeof SubmissionState.Type;
+/**
+ * Opt-in host policy for handling the next runnable same-Agent input in its own Run at a complete Turn
+ * boundary. This never joins inputs or changes their principals, grants, or receipts. The
+ * runtime selects the ordered candidate; policy cannot select an arbitrary Submission.
+ * Approval waits, child waits and incomplete Tool batches are not handoff boundaries. Hosts
+ * retaining independent replies must also leave those inputs unclaimed by `claimJoining`.
+ * In-flight model requests and Tool batches run to their existing safe boundary.
+ */
+declare const SubmissionScheduling: Context.Reference<{
+  readonly yieldTo?: (request: {
+    readonly active: SubmissionSnapshot;
+    readonly next: SubmissionSnapshot;
+  }) => Effect.Effect<boolean, LedgerError>;
+}>;
 /**
  * Default ownership lease duration (D5). The lease is a liveness hint that makes an abandoned
  * claim reclaimable; correctness never depends on it because every canonical append is fenced by
@@ -1738,9 +1759,21 @@ declare class AdmissionIndeterminate extends AdmissionIndeterminate_base {}
  */
 declare const AdmissionResolution: Schema.Union<readonly [typeof AdmissionNotAdmitted, typeof AdmissionAdmitted, typeof AdmissionIndeterminate]>;
 type AdmissionResolution = typeof AdmissionResolution.Type;
+declare const ClaimHandoff_base: Schema.Class<ClaimHandoff, Schema.Struct<{
+  readonly producerEpoch: Schema.brand<Schema.Natural, "@effect-agent/thread/ProducerEpoch">;
+  readonly deferredSubmissionIds: Schema.NonEmptyArray<Schema.brand<Schema.NonEmptyString, "@effect-agent/core/SubmissionId">>;
+  readonly submissionId: Schema.brand<Schema.NonEmptyString, "@effect-agent/core/SubmissionId">;
+}>, {}>;
+/**
+ * A trusted runtime's advisory handoff after committing a complete Turn and closing its
+ * Attempt. The epoch fences the observation; an intervening claim invalidates it. Deferred
+ * Runs retain their identities and obligations. Losing this hint resumes ordinary FIFO.
+ */
+declare class ClaimHandoff extends ClaimHandoff_base {}
 declare const ClaimRequest_base: Schema.Class<ClaimRequest, Schema.Struct<{
   readonly threadId: Schema.brand<Schema.NonEmptyString, "@effect-agent/core/ThreadId">;
   readonly producerId: Schema.brand<Schema.NonEmptyString, "@effect-agent/thread/ProducerId">;
+  readonly handoff: Schema.optionalKey<typeof ClaimHandoff>;
 }>, {}>;
 declare class ClaimRequest extends ClaimRequest_base {}
 declare const Claim_base: Schema.Class<Claim, Schema.Struct<{
@@ -2457,6 +2490,11 @@ declare const SubmissionLedger_base: Context.ServiceClass<SubmissionLedger, "@ef
  *   `attemptId` and `ownershipToken`, and starts the ownership lease (D5: adapters default to
  *   `DEFAULT_OWNERSHIP_LEASE_DURATION`, configurable). An expired lease makes the head
  *   claimable; expiry alone never revokes correctness, only permission to assume liveness.
+ *   An optional trusted-runtime `handoff` can defer only the named `input-applied` prefix,
+ *   with no abort intent, to claim the exact next runnable Submission. It is checked atomically
+ *   against the current producer epoch and the same whole-Thread ownership fence. Admission
+ *   gaps, approval/child waits and joined work cannot be bypassed. Hints are not durable facts;
+ *   recovery resumes the same retained Runs and can select another complete-Turn handoff.
  * - `renewOwnership` — extends the lease while the token still owns the lane; fails with
  *   `OwnershipLost` once superseded. Renewal after lease expiry succeeds if no other claim has
  *   taken the lane in between.
@@ -3195,5 +3233,5 @@ declare const RetryRefused_base: Schema.Class<RetryRefused, Schema.TaggedStruct<
  */
 declare class RetryRefused extends RetryRefused_base {}
 //#endregion
-export { RepairSubagentStartLink as $, toolApprovalRequestRecordId as $i, DurableApprovalSuspension as $n, ThreadSelection as $r, RecoverySnapshot as $t, AwaitChildSettlement as A, compileRegistrations as Aa, modelResponseInterruptedBatchId as Ai, UnknownResolution as An, FencedAppendRequest as Ar, ChildReservationConflict as At, MarkUnknown as B, runDurationRecordId as Bi, submissionAbortRecordId as Bn, ThreadIdentity as Br, JoinSnapshot as Bt, renderRecoveryExplanation as C, BindingUnavailable as Ca, approvalDecisionBatchId as Ci, SubmissionSnapshot as Cn, recoveryRepairRecordId as Cr, ApprovalDecisionIntent as Ct, ApplyUnknownResolutions as D, ReplayVersions as Da, compactionRecordId as Di, SuspensionOutcome as Dn, AppendResult as Dr, ChildAttachmentSnapshot as Dt, ApplyJoinAccounting as E, ExecutableAgentBinding as Ea, compactionBatchId as Ei, SuspendRequest as En, AppendConflict as Er, BeginChildBudgetReleaseRequest as Et, CompleteMaterialization as F, projectRunJournalStream as Fi, WaitingForChildSuspension as Fn, SelectedThreadRead as Fr, Claim as Ft, PropagateChildAbort as G, subagentJoinedRecordId as Gi, submissionSettlementRecordId as Gn, ThreadOutstanding as Gr, MarkJoinedRequest as Gt, OpenDelegationCallEvidence as H, runStartedBatchId as Hi, submissionInputRecordId as Hn, ThreadMaterialization as Hr, LedgerCapabilities as Ht, DeclaredPendingBatchEvidence as I, promptFromCanonicalRecords as Ii, WorkerLedgerState as In, ThreadCheckpoint as Ir, ClaimJoiningRequest as It, Recovery_d_exports as J, subagentRequestedBatchId as Ji, DurableAbortFailure as Jn, ThreadRead as Jr, OwnershipLost as Jt, RecoveryDecision as K, subagentLineageBatchId as Ki, workerTerminalFromRecord as Kn, ThreadOutstandingRequest as Kr, MarkReadyRequest as Kt, DelegationAdmissionEvidence as L, runCompletedRecordId as Li, WorkerStopCommand as Ln, ThreadCheckpoints as Lr, ClaimRequest as Lt, AwaitParentEstablishment as M, modelResponseRecordId as Mi, UnknownResolutionConflict as Mn, MAX_THREAD_EXPORT_RECORDS as Mr, ChildReservationStatus as Mt, AwaitUnknownResolution as N, peerMessageRecordId as Ni, UnknownResolutionIntent as Nn, SaveCheckpointRequest as Nr, ChildSettledNotification as Nt, AwaitApprovalDecision as O, ResolvedBinding as Oa, firstWorkerInputRecordId as Oi, SuspensionReason as On, CheckpointRejected as Or, ChildBudgetReservationRequest as Ot, CompleteChildAdmission as P, projectRunJournal as Pi, WaitingChild as Pn, SaveRecoveryCheckpointRequest as Pr, ChildSettledOutcome as Pt, RepairReadiness as Q, toolApprovalDecisionRecordId as Qi, DurableApprovalResolver as Qn, ThreadRunInputRequest as Qr, ParentLinkage as Qt, EnsureWaitingForChild as R, runCompletionDigest as Ri, settlementFailureFromRecord as Rn, ThreadExport as Rr, DEFAULT_OWNERSHIP_LEASE_DURATION as Rt, recoveryDecisionMeaning as S, AgentRegistration as Sa, agentUpdateRecordId as Si, SubmissionLookupByKey as Sn, recoveryRepairBatchId as Sr, ApprovalDecisionCommand as St, ApplyInput as T, DurableWorkerBinding as Ta, childThreadIdFor as Ti, SubmissionWorkItem as Tn, threadCreatedRecordId as Tr, AttachChildToReservationRequest as Tt, OpenToolCallEvidence as U, runStartedRecordId as Ui, submissionSettlementBatchId as Un, ThreadNotMaterialized as Ur, LedgerError as Ut, NoAction as V, runIdForSubmission as Vi, submissionInputBatchId as Vn, ThreadIdentityRequest as Vr, JoiningClaim as Vt, PendingApprovalEvidence as W, subagentJoinBatchId as Wi, submissionSettlementId as Wn, ThreadObservation as Wr, MarkInputAppliedRequest as Wt, RepairInputMarker as X, subagentStartedBatchId as Xi, DurableAgentRuntime_d_exports as Xn, ThreadRecordRequest as Xr, OwnershipSnapshot as Xt, ReleaseOrphanChildReservation as Y, subagentRequestedRecordId as Yi, DurableAgentRuntime as Yn, ThreadReadRequest as Yr, OwnershipRenewal as Yt, RepairJoinMarker as Z, subagentStartedRecordId as Zi, DurableApprovalFailure as Zn, ThreadRecoveryCheckpoints as Zr, OwnershipToken as Zt, RetryCommand as _, workerInputRecordId as _a, RunJournalError as _i, SubmissionLedger as _n, RecoveryReport as _r, AdmissionPolicyError as _t, IntegrityCheck as a, toolCallUnknownRecordId as aa, ThreadTail as ai, ReservedSettlement as an, DurableResolveFailure as ar, SettleAborted as at, obligationSeverityOf as b, AgentRegistration_d_exports as ba, RunJournal_d_exports as bi, SubmissionLookup as bn, childReservationIdFor as br, AdmissionResult as bt, IntegrityReport as c, turnApprovalsBatchId as ca, getRecord as ci, ResolutionNeverHappened as cn, DurableRuntimeConfigOptions as cr, AbortCommand as ct, ObligationReport as d, turnIdForRun as da, readWorkerState as di, Settlement as dn, DurableSubmitOptions as dr, AdmissionAdmitted as dt, toolCallPreparedRecordId as ea, ThreadStore as ei, RecoverySnapshotRequest as en, DurableAwaitFailure as er, ResumeFromTurnBoundary as et, ObligationSeverity as f, turnPreparedBatchId as fa, PendingSubmission as fi, SettlementConflict as fn, DurableVerifyFailure as fr, AdmissionConflict as ft, RecoveryExplanation as g, turnResultsBatchId as ga, JournalBoundary as gi, SubmissionAdmissionFence as gn, RecoveryFailure as gr, AdmissionNotAdmitted as gt, RecoveryDisposition as h, turnResultsBatch as ha, SubmissionStatus_d_exports as hi, SettlementReservationSnapshot as hn, RecoveryBlocked as hr, AdmissionIndeterminate as ht, ExplainedUnknownCall as i, toolCallSettledRecordId as ia, ThreadStore_d_exports as ii, ReservedChildBudget as in, DurableProgressFailure as ir, RevertJoining as it, AwaitHostSettlement as j, definitionDigestsEqual as ja, modelResponseInterruptedRecordId as ji, UnknownResolutionCommand as jn, LoadCheckpointRequest as jr, ChildReservationId as jt, AwaitChildAdmissionResolution as k, compileBindingContracts as ka, markUnknownBatchId as ki, SuspensionSnapshot as kn, FenceRejected as kr, ChildBudgetReservationSnapshot as kt, ObligationBlockedOn as l, turnBatchId as la, getRunInput as li, ResolutionSafeToRetry as ln, DurableSubmitAgent as lr, AbortIntent as lt, RECOVERY_DECISION_MEANINGS as m, turnResponseBatchId as ma, SubmissionStatus as mi, SettlementReservation as mn, DurableWorkerRequirements as mr, AdmissionGroup as mt, ExplainedEvidence as n, toolCallResolvedRecordId as na, ThreadStoreError as ni, ReleaseOwnershipRequest as nn, DurableObligationFailure as nr, ResumeSuspended as nt, IntegrityCheckName as o, toolStepSettledBatchId as oa, ThreadTailRequest as oi, ResolutionAbortSubmission as on, DurableRetryFailure as or, SettleJoinedWithHost as ot, ObligationThresholds as p, turnResponseBatch as pa, SettledSubmission as pi, SettlementFinalization as pn, DurableWorkerFailure as pr, AdmissionFence as pt, RecoveryEvidence as q, subagentLineageRecordId as qi, ApprovalSuspensionError as qn, ThreadPeerCountRequest as qr, MarkUnknownRequest as qt, ExplainedSubmission as r, toolCallResultBatchId as ra, ThreadStoreFailure as ri, RenewOwnershipRequest as rn, DurableObserveOptions as rr, ResumeWaitingParent as rt, IntegrityCheckStatus as s, toolStepSettledRecordId as sa, ThreadWorkerStateRequest as si, ResolutionCompletedWithResult as sn, DurableRuntimeConfig as sr, classifyRecovery as st, Admin_d_exports as t, toolCallResolutionBatchId as ta, ThreadStoreDiagnostic as ti, ReleaseChildBudgetRequest as tn, DurableExplainFailure as tr, ResumePendingToolBatch as tt, ObligationEntry as u, turnCanonicalBatch as ua, readOutstanding as ui, RevertJoiningRequest as un, DurableSubmitFailure as ur, AbortIntentRequest as ut, RetryRefusalReason as v, workerOriginRecordId as va, RunJournalProjection as vi, SubmissionLedgerFailure as vn, RecoverySweepOptions as vr, AdmissionRequest as vt, AppendReservedSettlement as w, DurableBindingFailure as wa, childIdempotencyKeyFor as wi, SubmissionState as wn, threadCreatedBatchId as wr, ApprovalPendingSuspension as wt, predictRecoveryDisposition as x, AgentAttemptContext as xa, TurnCommitInput as xi, SubmissionLookupById as xn, isolateRecovery as xr, ApprovalConflict as xt, RetryRefused as y, workerReportRecordId as ya, RunJournalUsage as yi, SubmissionLedger_d_exports as yn, RecoverySweepResult as yr, AdmissionResolution as yt, FinalizeLedgerFromHistory as z, runDurationBatchId as zi, submissionAbortBatchId as zn, ThreadExportRequest as zr, InputAppliedMarker as zt };
-//# sourceMappingURL=Admin-CUja0lmO.d.mts.map
+export { RepairSubagentStartLink as $, subagentStartedRecordId as $i, DurableApprovalFailure as $n, ThreadRecoveryCheckpoints as $r, ParentLinkage as $t, AwaitChildSettlement as A, ResolvedBinding as Aa, firstWorkerInputRecordId as Ai, SuspensionReason as An, CheckpointRejected as Ar, ChildReservationConflict as At, MarkUnknown as B, runCompletionDigest as Bi, settlementFailureFromRecord as Bn, ThreadExport as Br, InputAppliedMarker as Bt, renderRecoveryExplanation as C, AgentAttemptContext as Ca, TurnCommitInput as Ci, SubmissionLookupByKey as Cn, isolateRecovery as Cr, ApprovalDecisionIntent as Ct, ApplyUnknownResolutions as D, DurableWorkerBinding as Da, childThreadIdFor as Di, SubmissionWorkItem as Dn, threadCreatedRecordId as Dr, ChildAttachmentSnapshot as Dt, ApplyJoinAccounting as E, DurableBindingFailure as Ea, childIdempotencyKeyFor as Ei, SubmissionState as En, threadCreatedBatchId as Er, BeginChildBudgetReleaseRequest as Et, CompleteMaterialization as F, peerMessageRecordId as Fi, UnknownResolutionIntent as Fn, SaveCheckpointRequest as Fr, Claim as Ft, PropagateChildAbort as G, runStartedRecordId as Gi, submissionSettlementBatchId as Gn, ThreadNotMaterialized as Gr, MarkInputAppliedRequest as Gt, OpenDelegationCallEvidence as H, runDurationRecordId as Hi, submissionAbortRecordId as Hn, ThreadIdentity as Hr, JoiningClaim as Ht, DeclaredPendingBatchEvidence as I, projectRunJournal as Ii, WaitingChild as In, SaveRecoveryCheckpointRequest as Ir, ClaimHandoff as It, Recovery_d_exports as J, subagentLineageBatchId as Ji, workerTerminalFromRecord as Jn, ThreadOutstandingRequest as Jr, MarkUnknownRequest as Jt, RecoveryDecision as K, subagentJoinBatchId as Ki, submissionSettlementId as Kn, ThreadObservation as Kr, MarkJoinedRequest as Kt, DelegationAdmissionEvidence as L, projectRunJournalStream as Li, WaitingForChildSuspension as Ln, SelectedThreadRead as Lr, ClaimJoiningRequest as Lt, AwaitParentEstablishment as M, compileRegistrations as Ma, modelResponseInterruptedBatchId as Mi, UnknownResolution as Mn, FencedAppendRequest as Mr, ChildReservationStatus as Mt, AwaitUnknownResolution as N, definitionDigestsEqual as Na, modelResponseInterruptedRecordId as Ni, UnknownResolutionCommand as Nn, LoadCheckpointRequest as Nr, ChildSettledNotification as Nt, AwaitApprovalDecision as O, ExecutableAgentBinding as Oa, compactionBatchId as Oi, SuspendRequest as On, AppendConflict as Or, ChildBudgetReservationRequest as Ot, CompleteChildAdmission as P, modelResponseRecordId as Pi, UnknownResolutionConflict as Pn, MAX_THREAD_EXPORT_RECORDS as Pr, ChildSettledOutcome as Pt, RepairReadiness as Q, subagentStartedBatchId as Qi, DurableAgentRuntime_d_exports as Qn, ThreadRecordRequest as Qr, OwnershipToken as Qt, EnsureWaitingForChild as R, promptFromCanonicalRecords as Ri, WorkerLedgerState as Rn, ThreadCheckpoint as Rr, ClaimRequest as Rt, recoveryDecisionMeaning as S, AgentRegistration_d_exports as Sa, RunJournal_d_exports as Si, SubmissionLookupById as Sn, childReservationIdFor as Sr, ApprovalDecisionCommand as St, ApplyInput as T, BindingUnavailable as Ta, approvalDecisionBatchId as Ti, SubmissionSnapshot as Tn, recoveryRepairRecordId as Tr, AttachChildToReservationRequest as Tt, OpenToolCallEvidence as U, runIdForSubmission as Ui, submissionInputBatchId as Un, ThreadIdentityRequest as Ur, LedgerCapabilities as Ut, NoAction as V, runDurationBatchId as Vi, submissionAbortBatchId as Vn, ThreadExportRequest as Vr, JoinSnapshot as Vt, PendingApprovalEvidence as W, runStartedBatchId as Wi, submissionInputRecordId as Wn, ThreadMaterialization as Wr, LedgerError as Wt, RepairInputMarker as X, subagentRequestedBatchId as Xi, DurableAbortFailure as Xn, ThreadRead as Xr, OwnershipRenewal as Xt, ReleaseOrphanChildReservation as Y, subagentLineageRecordId as Yi, ApprovalSuspensionError as Yn, ThreadPeerCountRequest as Yr, OwnershipLost as Yt, RepairJoinMarker as Z, subagentRequestedRecordId as Zi, DurableAgentRuntime as Zn, ThreadReadRequest as Zr, OwnershipSnapshot as Zt, RetryCommand as _, turnResultsBatch as _a, SubmissionStatus_d_exports as _i, SubmissionAdmissionFence as _n, RecoveryBlocked as _r, AdmissionPolicyError as _t, IntegrityCheck as a, toolCallResultBatchId as aa, ThreadStoreFailure as ai, ReservedChildBudget as an, DurableObserveOptions as ar, SettleAborted as at, obligationSeverityOf as b, workerOriginRecordId as ba, RunJournalProjection as bi, SubmissionLedger_d_exports as bn, RecoverySweepOptions as br, AdmissionResult as bt, IntegrityReport as c, toolStepSettledBatchId as ca, ThreadTailRequest as ci, ResolutionCompletedWithResult as cn, DurableRetryFailure as cr, AbortCommand as ct, ObligationReport as d, turnBatchId as da, getRunInput as di, RevertJoiningRequest as dn, DurableSubmitAgent as dr, AdmissionAdmitted as dt, toolApprovalDecisionRecordId as ea, ThreadRunInputRequest as ei, RecoverySnapshot as en, DurableApprovalResolver as er, ResumeFromTurnBoundary as et, ObligationSeverity as f, turnCanonicalBatch as fa, readOutstanding as fi, Settlement as fn, DurableSubmitFailure as fr, AdmissionConflict as ft, RecoveryExplanation as g, turnResponseBatchId as ga, SubmissionStatus as gi, SettlementReservationSnapshot as gn, DurableWorkerRequirements as gr, AdmissionNotAdmitted as gt, RecoveryDisposition as h, turnResponseBatch as ha, SettledSubmission as hi, SettlementReservation as hn, DurableWorkerFailure as hr, AdmissionIndeterminate as ht, ExplainedUnknownCall as i, toolCallResolvedRecordId as ia, ThreadStoreError as ii, RenewOwnershipRequest as in, DurableObligationFailure as ir, RevertJoining as it, AwaitHostSettlement as j, compileBindingContracts as ja, markUnknownBatchId as ji, SuspensionSnapshot as jn, FenceRejected as jr, ChildReservationId as jt, AwaitChildAdmissionResolution as k, ReplayVersions as ka, compactionRecordId as ki, SuspensionOutcome as kn, AppendResult as kr, ChildBudgetReservationSnapshot as kt, ObligationBlockedOn as l, toolStepSettledRecordId as la, ThreadWorkerStateRequest as li, ResolutionNeverHappened as ln, DurableRuntimeConfig as lr, AbortIntent as lt, RECOVERY_DECISION_MEANINGS as m, turnPreparedBatchId as ma, PendingSubmission as mi, SettlementFinalization as mn, DurableVerifyFailure as mr, AdmissionGroup as mt, ExplainedEvidence as n, toolCallPreparedRecordId as na, ThreadStore as ni, ReleaseChildBudgetRequest as nn, DurableAwaitFailure as nr, ResumeSuspended as nt, IntegrityCheckName as o, toolCallSettledRecordId as oa, ThreadStore_d_exports as oi, ReservedSettlement as on, DurableProgressFailure as or, SettleJoinedWithHost as ot, ObligationThresholds as p, turnIdForRun as pa, readWorkerState as pi, SettlementConflict as pn, DurableSubmitOptions as pr, AdmissionFence as pt, RecoveryEvidence as q, subagentJoinedRecordId as qi, submissionSettlementRecordId as qn, ThreadOutstanding as qr, MarkReadyRequest as qt, ExplainedSubmission as r, toolCallResolutionBatchId as ra, ThreadStoreDiagnostic as ri, ReleaseOwnershipRequest as rn, DurableExplainFailure as rr, ResumeWaitingParent as rt, IntegrityCheckStatus as s, toolCallUnknownRecordId as sa, ThreadTail as si, ResolutionAbortSubmission as sn, DurableResolveFailure as sr, classifyRecovery as st, Admin_d_exports as t, toolApprovalRequestRecordId as ta, ThreadSelection as ti, RecoverySnapshotRequest as tn, DurableApprovalSuspension as tr, ResumePendingToolBatch as tt, ObligationEntry as u, turnApprovalsBatchId as ua, getRecord as ui, ResolutionSafeToRetry as un, DurableRuntimeConfigOptions as ur, AbortIntentRequest as ut, RetryRefusalReason as v, turnResultsBatchId as va, JournalBoundary as vi, SubmissionLedger as vn, RecoveryFailure as vr, AdmissionRequest as vt, AppendReservedSettlement as w, AgentRegistration as wa, agentUpdateRecordId as wi, SubmissionScheduling as wn, recoveryRepairBatchId as wr, ApprovalPendingSuspension as wt, predictRecoveryDisposition as x, workerReportRecordId as xa, RunJournalUsage as xi, SubmissionLookup as xn, RecoverySweepResult as xr, ApprovalConflict as xt, RetryRefused as y, workerInputRecordId as ya, RunJournalError as yi, SubmissionLedgerFailure as yn, RecoveryReport as yr, AdmissionResolution as yt, FinalizeLedgerFromHistory as z, runCompletedRecordId as zi, WorkerStopCommand as zn, ThreadCheckpoints as zr, DEFAULT_OWNERSHIP_LEASE_DURATION as zt };
+//# sourceMappingURL=Admin-Fx85KT-W.d.mts.map

package/dist/{DurableAgentRuntime-DH2baLGe.mjs → DurableAgentRuntime-Bso5grIH.mjs}

@@ -22,12 +22,12 @@ import { CompactionError, ContextCompactor } from "./engine/ContextCompactor.mjs
 import { RunPolicyUsage } from "./core/RunPolicyUsage.mjs";
 import { AgentUpdateAcceptance, CurrentToolFailureObserver, ModelUsageAccounting, RunContextPreparation, RunContextPreparationPassthrough, RunToolAuthorization, RunToolScheduling } from "./engine/RunOptions.mjs";
 import { AbortRequested, AgentUpdateEmitted, BatchId, CanonicalBatch, CanonicalRecordEnvelope, CanonicalSequence, CompactionCreated, DefinitionDigests, Digest, ModelResponseInterrupted, PeerMessagePrepared, PersistedJson, ProducerEpoch, RecordEnvelope, RecordId, RepairAnnotated, RunDurationExhausted, RunPolicyUsageReserved, RunStartedRecord, SettlementFailureDiagnostic, SubagentJoined, SubagentLineageRecorded, SubagentRequested, SubagentStarted, SubmissionSettled, SubmissionSettledRecord, SubtreeBudgetReserved, ThreadCreated, ToolApprovalDecided, ToolApprovalRequested, ToolCallPrepared, ToolCallResolved, ToolCallSettled, ToolCallUnknown, ToolOperation, ToolStepSettled, ToolUnavailable, UserInputRecorded, WorkerAdmission, WorkerContinuation, WorkerInputCompleted, WorkerInputRequested, WorkerOrigin, WorkerOriginRecorded, WorkerReportPrepared, WorkerReportRefused, WorkerReportingIntent, WorkerStopRequested } from "./durable/Records.mjs";
-import { AbortCommand, AbortIntentRequest, AdmissionPolicyError, AdmissionRequest, ApprovalDecisionCommand, ApprovalPendingSuspension, AttachChildToReservationRequest, BeginChildBudgetReleaseRequest, ChildBudgetReservationRequest, ChildReservationId, ChildSettledNotification, ClaimJoiningRequest, ClaimRequest, LedgerError, MarkInputAppliedRequest, MarkJoinedRequest, MarkReadyRequest, MarkUnknownRequest, OwnershipToken, ParentLinkage, RecoverySnapshotRequest, ReleaseChildBudgetRequest, ReleaseOwnershipRequest, RenewOwnershipRequest, RevertJoiningRequest, Settlement, SettlementFinalization, SettlementReservation, SubmissionLedger, SubmissionLookupById, SubmissionLookupByKey, SuspendRequest, UnknownResolutionCommand, WaitingChild, WaitingForChildSuspension, WorkerLedgerState, submissionAbortBatchId, submissionAbortRecordId, submissionInputBatchId, submissionInputRecordId, submissionSettlementBatchId, submissionSettlementId, submissionSettlementRecordId } from "./durable/SubmissionLedger.mjs";
+import { AbortCommand, AbortIntentRequest, AdmissionPolicyError, AdmissionRequest, ApprovalDecisionCommand, ApprovalPendingSuspension, AttachChildToReservationRequest, BeginChildBudgetReleaseRequest, ChildBudgetReservationRequest, ChildReservationId, ChildSettledNotification, ClaimHandoff, ClaimJoiningRequest, ClaimRequest, LedgerError, MarkInputAppliedRequest, MarkJoinedRequest, MarkReadyRequest, MarkUnknownRequest, OwnershipToken, ParentLinkage, RecoverySnapshotRequest, ReleaseChildBudgetRequest, ReleaseOwnershipRequest, RenewOwnershipRequest, RevertJoiningRequest, Settlement, SettlementFinalization, SettlementReservation, SubmissionLedger, SubmissionLookupById, SubmissionLookupByKey, SubmissionScheduling, SuspendRequest, UnknownResolutionCommand, WaitingChild, WaitingForChildSuspension, WorkerLedgerState, submissionAbortBatchId, submissionAbortRecordId, submissionInputBatchId, submissionInputRecordId, submissionSettlementBatchId, submissionSettlementId, submissionSettlementRecordId } from "./durable/SubmissionLedger.mjs";
 import { DeclaredPendingBatchEvidence, OpenDelegationCallEvidence, OpenToolCallEvidence, PendingApprovalEvidence, RecoveryDecision, RecoveryEvidence, classifyRecovery } from "./durable/Recovery.mjs";
 import { ExplainedEvidence, ExplainedSubmission, ExplainedUnknownCall, IntegrityCheck, IntegrityReport, ObligationEntry, ObligationReport, RecoveryExplanation, RetryRefused, obligationSeverityOf, predictRecoveryDisposition, recoveryDecisionMeaning } from "./durable/Admin.mjs";
 import { digestJson } from "./durable/Digest.mjs";
 import { a as definitionDigestsEqual, c as resolveWorkerBinding, i as compileRegistrations, l as toolReplayContracts, o as makeLegacyWorkerBinding, s as resolveDefinitionBinding, t as BindingUnavailable } from "./agent-registration-CKNsrpwo.mjs";
-import { $ as workerOriginRecordId, A as subagentRequestedRecordId, B as toolCallUnknownRecordId, C as runStartedBatchId, D as subagentLineageBatchId, E as subagentJoinedRecordId, F as toolCallPreparedRecordId, G as turnCanonicalBatch, H as toolStepSettledRecordId, I as toolCallResolutionBatchId, J as turnResponseBatch, K as turnIdForRun, L as toolCallResolvedRecordId, M as subagentStartedRecordId, N as toolApprovalDecisionRecordId, O as subagentLineageRecordId, P as toolApprovalRequestRecordId, Q as workerInputRecordId, R as toolCallResultBatchId, S as runIdForSubmission, T as subagentJoinBatchId, U as turnApprovalsBatchId, V as toolStepSettledBatchId, X as turnResultsBatch, a as childIdempotencyKeyFor, b as runDurationBatchId, c as compactionRecordId, d as modelResponseInterruptedBatchId, et as workerReportRecordId, f as modelResponseInterruptedRecordId, g as projectRunJournalStream, i as approvalDecisionBatchId, j as subagentStartedBatchId, k as subagentRequestedBatchId, l as firstWorkerInputRecordId, m as peerMessageRecordId, o as childThreadIdFor, p as modelResponseRecordId, q as turnPreparedBatchId, r as agentUpdateRecordId, s as compactionBatchId, t as RunJournalError, tt as makeJournalMetadata, u as markUnknownBatchId, v as runCompletedRecordId, w as runStartedRecordId, x as runDurationRecordId, y as runCompletionDigest, z as toolCallSettledRecordId } from "./RunJournal-BXrq0VIK.mjs";
+import { $ as workerOriginRecordId, A as subagentRequestedRecordId, B as toolCallUnknownRecordId, C as runStartedBatchId, D as subagentLineageBatchId, E as subagentJoinedRecordId, F as toolCallPreparedRecordId, G as turnCanonicalBatch, H as toolStepSettledRecordId, I as toolCallResolutionBatchId, J as turnResponseBatch, K as turnIdForRun, L as toolCallResolvedRecordId, M as subagentStartedRecordId, N as toolApprovalDecisionRecordId, O as subagentLineageRecordId, P as toolApprovalRequestRecordId, Q as workerInputRecordId, R as toolCallResultBatchId, S as runIdForSubmission, T as subagentJoinBatchId, U as turnApprovalsBatchId, V as toolStepSettledBatchId, X as turnResultsBatch, a as childIdempotencyKeyFor, b as runDurationBatchId, c as compactionRecordId, d as modelResponseInterruptedBatchId, et as workerReportRecordId, f as modelResponseInterruptedRecordId, g as projectRunJournalStream, i as approvalDecisionBatchId, j as subagentStartedBatchId, k as subagentRequestedBatchId, l as firstWorkerInputRecordId, m as peerMessageRecordId, o as childThreadIdFor, p as modelResponseRecordId, q as turnPreparedBatchId, r as agentUpdateRecordId, s as compactionBatchId, t as RunJournalError, tt as makeJournalMetadata, u as markUnknownBatchId, v as runCompletedRecordId, w as runStartedRecordId, x as runDurationRecordId, y as runCompletionDigest, z as toolCallSettledRecordId } from "./RunJournal-Gd83HYqG.mjs";
 import { FencedAppendRequest, LoadCheckpointRequest, MAX_THREAD_EXPORT_RECORDS, SaveRecoveryCheckpointRequest, ThreadCheckpoint, ThreadExportRequest, ThreadIdentityRequest, ThreadMaterialization, ThreadObservation, ThreadRead, ThreadStore, ThreadStoreDiagnostic, ThreadStoreError, ThreadTailRequest, getRecord, getRunInput, readWorkerState } from "./durable/ThreadStore.mjs";
 import { DurableRuntimeFailpoint } from "./durable/DurableFailpoint.mjs";
 import { ScheduledInputRefused, ScheduledInputRetryable } from "./durable/Schedule.mjs";
@@ -82,7 +82,7 @@ var RecoveryCheckpointContents = class extends Schema.Class("@effect-agent/threa
 	state: RecoveryCheckpointState,
 	digest: Digest
 }) {};
-const RECOVERY_ENGINE_VERSION = "effect-agent/recovery@1";
+const RECOVERY_ENGINE_VERSION = "effect-agent/recovery@2";
 /**
 * Late evidence can invalidate an old compaction. Such histories use full canonical replay;
 * an omitted run/turn must never be treated as proven absent by a sparse projection.
@@ -2336,6 +2336,7 @@ const declaredApplicationCalls = Effect.fn("DurableAgentRuntime.declaredApplicat
 const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 	const registeredBindings = [...bindings];
 	const ledger = yield* SubmissionLedger;
+	const submissionScheduling = yield* SubmissionScheduling;
 	const store = yield* ThreadStore;
 	const wake = yield* WakeScheduler;
 	const failpoint = yield* DurableRuntimeFailpoint;
@@ -2471,7 +2472,7 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 		})).pipe(Effect.catchTag("CheckpointRejected", () => Effect.succeed(Option.none())));
 		if (Option.isNone(loaded)) return full;
 		const checkpoint = loaded.value;
-		if (checkpoint.engineVersion !== "effect-agent/recovery@1" || checkpoint.threadId !== threadId || checkpoint.throughSequence > throughSequence || throughSequence - checkpoint.throughSequence > 4096) return full;
+		if (checkpoint.engineVersion !== "effect-agent/recovery@2" || checkpoint.threadId !== threadId || checkpoint.throughSequence > throughSequence || throughSequence - checkpoint.throughSequence > 4096) return full;
 		const decoded = yield* Schema.decodeUnknownEffect(RecoveryCheckpointContents)(checkpoint.state).pipe(Effect.option);
 		if (Option.isNone(decoded)) return full;
 		const { state, digest } = decoded.value;
@@ -5233,6 +5234,19 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 					yield* Deferred.succeed(yieldSignal, void 0);
 					return yield* Effect.never;
 				}
+				if (submissionScheduling.yieldTo !== void 0 && (yield* Ref.get(turnCounter)) > 0) {
+					const candidate = yield* recordHalt(eligibleThreadHead(submission.threadId, submission.queueSequence));
+					if (Option.isSome(candidate) && (candidate.value.state === "ready" || candidate.value.state === "running" || candidate.value.state === "input-applied")) {
+						const next = yield* recordHalt(ledger.lookup(SubmissionLookupById.make({ submissionId: candidate.value.submissionId })));
+						if (Option.isSome(next) && next.value.agentId === submission.agentId && (next.value.state === "ready" || next.value.state === "running" || next.value.state === "input-applied") && (yield* recordHalt(submissionScheduling.yieldTo({
+							active: submission,
+							next: next.value
+						})))) {
+							yield* Deferred.succeed(yieldSignal, next.value.submissionId);
+							return yield* Effect.never;
+						}
+					}
+				}
 			}),
 			...runContextPreparation.transientContext === void 0 ? {} : { transientContext: runContextPreparation.transientContext },
 			...config.estimateCostMicrousd === void 0 ? {} : { estimateCostMicrousd: config.estimateCostMicrousd },
@@ -5491,7 +5505,10 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 			yield* Ref.set(tokenRef, renewal.ownershipToken);
 		}).pipe(Effect.uninterruptible), { schedule: Schedule.spaced(config.leaseRenewalInterval) }).pipe(Effect.andThen(Effect.never)));
 		const execution = Effect.raceFirst(consume, Effect.raceFirst(abortWatcher, renewal));
-		const result = yield* (yieldAfter === void 0 ? execution : Effect.raceFirst(execution, Deferred.await(yieldSignal).pipe(Effect.as({ _tag: "yielded" })))).pipe(Effect.provideService(IdGenerator$1, idGenerator)).pipe(Effect.catchCauseFilter(Cause.findError, (error, cause) => {
+		const result = yield* (yieldAfter === void 0 && submissionScheduling.yieldTo === void 0 ? execution : Effect.raceFirst(execution, Deferred.await(yieldSignal).pipe(Effect.map((nextSubmissionId) => ({
+			_tag: "yielded",
+			...nextSubmissionId === void 0 ? {} : { nextSubmissionId }
+		}))))).pipe(Effect.provideService(IdGenerator$1, idGenerator)).pipe(Effect.catchCauseFilter(Cause.findError, (error, cause) => {
 			if (isCoordinatorHaltCause(cause)) return Effect.failCause(Cause.map(cause, (halt) => halt.failure));
 			const approvalPending = agentApprovalPendingOption(cause);
 			if (Option.isSome(approvalPending)) {
@@ -5570,7 +5587,7 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 	* (Unknown Outcomes, or a durable approval suspension) — no settlement occurs and the
 	* obligation stays owed.
 	*/
-	const runAttempt = (registeredAgent, threadId, claim, tokenRef, resumeAfterRetention, yieldAfter) => Effect.gen(function* () {
+	const runAttempt = (registeredAgent, threadId, claim, tokenRef, resumeAfterRetention, onHandoff, yieldAfter) => Effect.gen(function* () {
 		const submissionId = claim.submissionId;
 		const supersededEpoch = yield* store.inspectTail(ThreadTailRequest.make({ threadId })).pipe(Effect.map((tail) => tail.producerEpoch), Effect.catchTag("ThreadNotMaterialized", () => Effect.succeed(ZERO_EPOCH)));
 		yield* store.materialize(ThreadMaterialization.make({
@@ -5753,7 +5770,10 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 			const canonical = Stream.concat(initialView.canonical, canonicalRange(threadId, tail.tailSequence, initialThrough));
 			const currentRecords = yield* refreshControl(tail.tailSequence);
 			const outcome = yield* runModel(agent, ctx, submission, tokenRef, currentRecords, canonical, tail.tailSequence, initialView.seed, journalMetadata?.snapshot(), lineage, approvalDecisionIntents, runTiming, yieldAfter);
-			if (outcome._tag === "yielded") return Option.none();
+			if (outcome._tag === "yielded") {
+				if (outcome.nextSubmissionId !== void 0) onHandoff(outcome.nextSubmissionId);
+				return Option.none();
+			}
 			if (outcome._tag === "suspendedChild") {
 				const [firstChild, ...restChildren] = outcome.children;
 				const waitingChildren = [WaitingChild.make({
@@ -5834,10 +5854,11 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 			return Option.some(yield* terminalize(ctx, submission, tokenRef, outcome, true));
 		}
 	}).pipe(Effect.scoped);
-	const acquireClaim = Effect.fn("DurableAgentRuntime.acquireClaim")(function* (threadId) {
+	const acquireClaim = Effect.fn("DurableAgentRuntime.acquireClaim")(function* (threadId, handoff) {
 		const claimed = yield* ledger.claim(ClaimRequest.make({
 			threadId,
-			producerId: config.producerId
+			producerId: config.producerId,
+			...handoff === void 0 ? {} : { handoff }
 		}));
 		if (Option.isNone(claimed)) return Option.none();
 		const claim = claimed.value;
@@ -5846,6 +5867,10 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 			submissionId: claim.submissionId,
 			ownershipToken
 		}))), Effect.catchTag("OwnershipLost", () => Effect.void), Effect.catchTag("LedgerError", () => Effect.logWarning("Attempt ownership release failed; lease recovery remains required").pipe(Effect.annotateLogs({ submissionId: claim.submissionId })))));
+		if (handoff !== void 0 && claim.submissionId !== handoff.submissionId) return yield* LedgerError.make({
+			operation: "claim handoff",
+			message: "The submission adapter did not honor the requested handoff"
+		});
 		return Option.some({
 			claim,
 			tokenRef
@@ -5853,8 +5878,10 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 	}, Effect.uninterruptible);
 	const processThreadHead = (resolve, threadId, options) => Effect.gen(function* () {
 		let resumeAfterRetention = false;
+		let handoff;
+		let nextHandoff;
 		const attempt = Effect.scoped(Effect.gen(function* () {
-			const claimed = yield* acquireClaim(threadId);
+			const claimed = yield* acquireClaim(threadId, handoff);
 			if (Option.isNone(claimed)) return Option.none();
 			const { claim, tokenRef } = claimed.value;
 			const attributes = {
@@ -5892,15 +5919,26 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 			if (resolution._tag === "refused") return yield* resolution.failure;
 			return yield* resolution.binding.attempt((agent, attemptThreadId, attemptClaim) => runAttempt(agent, attemptThreadId, attemptClaim, tokenRef, () => {
 				resumeAfterRetention = true;
+			}, (nextSubmissionId) => {
+				nextHandoff = ClaimHandoff.make({
+					producerEpoch: claim.producerEpoch,
+					deferredSubmissionIds: [...handoff?.deferredSubmissionIds ?? [], claim.submissionId],
+					submissionId: nextSubmissionId
+				});
 			}, options?.yieldAfter), threadId, claim);
 		}));
 		while (true) {
 			resumeAfterRetention = false;
+			nextHandoff = void 0;
 			const settlement = yield* attempt;
+			if (nextHandoff !== void 0) {
+				handoff = nextHandoff;
+				continue;
+			}
 			if (!resumeAfterRetention) return settlement;
 		}
 	}).pipe(withThreadHeadSpan);
-	const eligibleThreadHead = (threadId) => Stream.runHead(ledger.scanNonterminal.pipe(Stream.filter((entry) => entry.threadId === threadId), Stream.filterEffect((entry) => entry.state !== "unknown" ? Effect.succeed(true) : ledger.loadRecoverySnapshot(RecoverySnapshotRequest.make({ submissionId: entry.submissionId })).pipe(Effect.map((snapshot) => snapshot.abortIntent !== void 0)))));
+	const eligibleThreadHead = (threadId, afterQueueSequence) => Stream.runHead(ledger.scanNonterminal.pipe(Stream.filter((entry) => entry.threadId === threadId && (afterQueueSequence === void 0 || entry.queueSequence > afterQueueSequence)), Stream.filterEffect((entry) => entry.state !== "unknown" ? Effect.succeed(true) : ledger.loadRecoverySnapshot(RecoverySnapshotRequest.make({ submissionId: entry.submissionId })).pipe(Effect.map((snapshot) => snapshot.abortIntent !== void 0)))));
 	const drainThread = (resolve, threadId) => Effect.gen(function* () {
 		const settlements = [];
 		while (true) {
@@ -7124,4 +7162,4 @@ var DurableAgentRuntime = class DurableAgentRuntime extends Context.Service()("@
 //#endregion
 export { DurableApprovalSuspension as a, RecoveryFailure as c, childReservationIdFor as d, isolateRecovery as f, threadCreatedRecordId as g, threadCreatedBatchId as h, DurableApprovalResolver as i, RecoveryReport as l, recoveryRepairRecordId as m, DurableAgentRuntime as n, DurableRuntimeConfig as o, recoveryRepairBatchId as p, DurableAgentRuntime_exports as r, RecoveryBlocked as s, ApprovalSuspensionError as t, RecoverySweepResult as u };
 
-//# sourceMappingURL=DurableAgentRuntime-DH2baLGe.mjs.map
+//# sourceMappingURL=DurableAgentRuntime-Bso5grIH.mjs.map