effect-agent 0.1.0-beta.14 → 0.1.0-beta.142

package/dist/durable/Records.mjs

@@ -0,0 +1,858 @@
+import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.mjs";
+import { AgentId, AttemptId, DelegationId, ReceiptId, RunId, SettlementId, SubmissionId, ThreadId, ToolCallId, TurnId } from "../core/Identifiers.mjs";
+import { n as utf8ByteLength } from "../utf8-DchGZRBd.mjs";
+import { ToolParameterRejection } from "../core/ToolResult.mjs";
+import { AgentPolicy } from "../core/AgentPolicy.mjs";
+import { IdempotencyKey, Principal, Receipt } from "../core/Receipt.mjs";
+import { Update } from "../core/AgentUpdates.mjs";
+import { i as Failure } from "../FailureDiagnostic-BElLOoED.mjs";
+import { PolicyLimit } from "../core/AgentError.mjs";
+import { DelegationDepth, SubagentBudgetReservation, SubagentGrant, SubagentParentLink, ToolExecutionKind } from "../core/SubagentContract.mjs";
+import { o as Selection, s as Snapshot } from "../ToolExposure-C93U1sPu.mjs";
+import { ModelCallUsage, RunTotals, RunUsageSummary } from "../core/Usage.mjs";
+import { ExhaustedLimit } from "../core/RunEvent.mjs";
+import { _ as WorkerStop, a as WorkerBudgetScope, f as WorkerRef, h as WorkerSource } from "../Worker-CfwzMZEK.mjs";
+import { l as InputMessage } from "../MessagingHost-DfsbMPvq.mjs";
+import { ContextHandoff } from "../engine/ContextWindow.mjs";
+import { RunPolicyUsage } from "../core/RunPolicyUsage.mjs";
+import { Prompt } from "effect/unstable/ai";
+import { Option, Schema } from "effect";
+//#region src/durable/Records.ts
+var Records_exports = /* @__PURE__ */ __exportAll({
+	AbortRequested: () => AbortRequested,
+	AgentUpdateEmitted: () => AgentUpdateEmitted,
+	ApprovalDecision: () => ApprovalDecision,
+	BatchId: () => BatchId,
+	CURRENT_CANONICAL_SCHEMA_VERSION: () => 1,
+	CanonicalBatch: () => CanonicalBatch,
+	CanonicalRecord: () => CanonicalRecord,
+	CanonicalRecordEnvelope: () => CanonicalRecordEnvelope,
+	CanonicalRecordPayload: () => CanonicalRecordPayload,
+	CanonicalSequence: () => CanonicalSequence,
+	CompactionCreated: () => CompactionCreated,
+	DefinitionDigestInput: () => DefinitionDigestInput,
+	DefinitionDigests: () => DefinitionDigests,
+	DeploymentId: () => DeploymentId,
+	Digest: () => Digest,
+	MAX_PERSISTED_JSON_BYTES: () => MAX_PERSISTED_JSON_BYTES,
+	MAX_PERSISTED_JSON_COLLECTION_LENGTH: () => MAX_PERSISTED_JSON_COLLECTION_LENGTH,
+	MAX_PERSISTED_JSON_DEPTH: () => 64,
+	MAX_PERSISTED_JSON_NODES: () => MAX_PERSISTED_JSON_NODES,
+	ModelCompleted: () => ModelCompleted,
+	ModelResponseInterrupted: () => ModelResponseInterrupted,
+	ModelResponseRecorded: () => ModelResponseRecorded,
+	ObservationOffset: () => ObservationOffset,
+	PeerMessagePrepared: () => PeerMessagePrepared,
+	PersistedJson: () => PersistedJson,
+	ProducerEpoch: () => ProducerEpoch,
+	ProducerId: () => ProducerId,
+	RecordEnvelope: () => RecordEnvelope,
+	RecordId: () => RecordId,
+	RepairAnnotated: () => RepairAnnotated,
+	ReplayContract: () => ReplayContract,
+	RunCompleted: () => RunCompleted,
+	RunDurationExhausted: () => RunDurationExhausted,
+	RunFailed: () => RunFailed,
+	RunPolicyUsageReserved: () => RunPolicyUsageReserved,
+	RunStartedRecord: () => RunStartedRecord,
+	SettlementFailureDiagnostic: () => SettlementFailureDiagnostic,
+	SettlementOutcome: () => SettlementOutcome,
+	SubagentJoined: () => SubagentJoined,
+	SubagentLineageRecorded: () => SubagentLineageRecorded,
+	SubagentRequested: () => SubagentRequested,
+	SubagentStarted: () => SubagentStarted,
+	SubmissionSettled: () => SubmissionSettled,
+	SubmissionSettledRecord: () => SubmissionSettledRecord,
+	SubtreeBudgetReserved: () => SubtreeBudgetReserved,
+	ThreadCreated: () => ThreadCreated,
+	ToolApprovalDecided: () => ToolApprovalDecided,
+	ToolApprovalRequested: () => ToolApprovalRequested,
+	ToolCallPrepared: () => ToolCallPrepared,
+	ToolCallResolution: () => ToolCallResolution,
+	ToolCallResolved: () => ToolCallResolved,
+	ToolCallSettled: () => ToolCallSettled,
+	ToolCallUnknown: () => ToolCallUnknown,
+	ToolOperation: () => ToolOperation,
+	ToolStepSettled: () => ToolStepSettled,
+	ToolUnavailable: () => ToolUnavailable,
+	UserInputRecorded: () => UserInputRecorded,
+	WorkerAdmission: () => WorkerAdmission,
+	WorkerContinuation: () => WorkerContinuation,
+	WorkerInputCompleted: () => WorkerInputCompleted,
+	WorkerInputRequested: () => WorkerInputRequested,
+	WorkerOrigin: () => WorkerOrigin,
+	WorkerOriginRecorded: () => WorkerOriginRecorded,
+	WorkerReportPrepared: () => WorkerReportPrepared,
+	WorkerReportRefused: () => WorkerReportRefused,
+	WorkerReportingIntent: () => WorkerReportingIntent,
+	WorkerStopRequested: () => WorkerStopRequested
+});
+const identifier = (name) => Schema.NonEmptyString.pipe(Schema.brand(`@effect-agent/thread/${name}`));
+/** Stable identity of one canonical record. */
+const RecordId = identifier("RecordId");
+/** Stable idempotency identity of one atomic append. */
+const BatchId = identifier("BatchId");
+/** Identity of the deployment that produced a record. */
+const DeploymentId = identifier("DeploymentId");
+/** Identity of a fenced canonical-log producer. */
+const ProducerId = identifier("ProducerId");
+/** SHA-256 digest encoded as lowercase hexadecimal text. */
+const Digest = Schema.String.check(Schema.isPattern(/^[a-f0-9]{64}$/)).pipe(Schema.brand("@effect-agent/thread/Digest"));
+/** Adapter-owned resume cursor. Callers must not parse or synthesize it. */
+const ObservationOffset = identifier("ObservationOffset");
+/** Gap-free position in one Thread's canonical sequence. */
+const CanonicalSequence = Schema.Natural.pipe(Schema.brand("@effect-agent/thread/CanonicalSequence"));
+/** Monotonic fencing epoch for a Thread producer. */
+const ProducerEpoch = Schema.Natural.pipe(Schema.brand("@effect-agent/thread/ProducerEpoch"));
+const BoundedText = Schema.String.check(Schema.isMaxLength(65536));
+const BoundedName = Schema.NonEmptyString.check(Schema.isMaxLength(256));
+/**
+* Private failed-Settlement evidence. The summary remains the safe public projection; diagnostic
+* and context preserve structured causal evidence for authorized operators, never model context.
+* Optional fields allow reading supported Settlements written before causal capture was available.
+*/
+const SettlementFailureDiagnostic = Failure.pipe(Schema.annotate({ identifier: "@effect-agent/thread/SettlementFailureDiagnostic" }));
+/** Positive canonical (Run-relative, Attempt-independent) Turn number. */
+const TurnNumber = Schema.Int.check(Schema.isGreaterThan(0));
+const MAX_PERSISTED_JSON_DEPTH = 64;
+const MAX_PERSISTED_JSON_COLLECTION_LENGTH = 4096;
+const MAX_PERSISTED_JSON_NODES = 65536;
+const MAX_PERSISTED_JSON_BYTES = 1048576;
+/**
+* Iteratively preflights an unknown value before Schema's recursive JSON validation. This is the
+* one narrow `Schema.declare` exception in the persistence model: Effect v4's `Unknown.decodeTo`
+* preserves `unknown` as the encoded type, which would leak through every nested record codec.
+* Schema.Json still owns the accepted value shape after this resource preflight succeeds.
+*/
+const isJson = Schema.is(Schema.Json);
+const isPersistedJson = (input) => {
+	const pending = [{
+		_tag: "visit",
+		value: input,
+		depth: 0
+	}];
+	const ancestors = /* @__PURE__ */ new WeakSet();
+	let nodes = 0;
+	let textUnits = 0;
+	try {
+		while (pending.length > 0) {
+			const current = pending.pop();
+			if (current === void 0) return false;
+			if (current._tag === "leave") {
+				ancestors.delete(current.value);
+				continue;
+			}
+			if (current.depth > 64 || ++nodes > 65536) return false;
+			const value = current.value;
+			if (value === null || typeof value === "boolean") continue;
+			if (typeof value === "number") {
+				if (!Number.isFinite(value)) return false;
+				continue;
+			}
+			if (typeof value === "string") {
+				textUnits += value.length;
+				if (textUnits > 1048576) return false;
+				continue;
+			}
+			if (typeof value !== "object" || ancestors.has(value)) return false;
+			ancestors.add(value);
+			pending.push({
+				_tag: "leave",
+				value
+			});
+			const entries = Array.isArray(value) ? Array.from(value, (entry, index) => [index, entry]) : Object.entries(value);
+			if (entries.length > 4096) return false;
+			for (const [key, entry] of entries) {
+				textUnits += typeof key === "string" ? key.length : 0;
+				if (textUnits > 1048576) return false;
+				pending.push({
+					_tag: "visit",
+					value: entry,
+					depth: current.depth + 1
+				});
+			}
+		}
+		if (!isJson(input)) return false;
+		const encoded = JSON.stringify(input);
+		return encoded !== void 0 && utf8ByteLength(encoded) <= 1048576;
+	} catch {
+		return false;
+	}
+};
+/** Canonical JSON admitted to persisted records and checkpoints under explicit resource limits. */
+const PersistedJson = Schema.declare(isPersistedJson, {
+	identifier: "@effect-agent/thread/PersistedJson",
+	description: "JSON bounded by canonical persistence depth, collection, node, and byte limits"
+});
+/** Schema-owned replay inputs whose individual definitions are incorporated into digests. */
+var DefinitionDigestInput = class extends Schema.Class("@effect-agent/thread/DefinitionDigestInput")({
+	agent: PersistedJson,
+	model: PersistedJson,
+	tools: PersistedJson
+}) {};
+/** Admission-time operation fingerprints. Agent fingerprints remain immutable evidence only. */
+var ReplayContract = class extends Schema.Class("@effect-agent/thread/ReplayContract")({
+	agent: Digest,
+	/** Retained for reading earlier admissions; never selects executable code. */
+	agentBehavior: Schema.optionalKey(Digest),
+	tools: Schema.Record(Schema.String, Digest)
+}) {};
+/** Digests identify admission exactly; only an unfinished operation needs replay compatibility. */
+var DefinitionDigests = class extends Schema.Class("@effect-agent/thread/DefinitionDigests")({
+	agent: Digest,
+	model: Digest,
+	tools: Digest,
+	replay: Schema.optionalKey(ReplayContract)
+}) {};
+var ThreadCreated = class extends Schema.TaggedClass("@effect-agent/thread/ThreadCreated")("ThreadCreated", {
+	agentId: AgentId,
+	definitions: DefinitionDigests
+}) {};
+/**
+* One recorded Thread input. `submissionId` is present only for durably accepted work;
+* retained history has no admission or settlement obligation. `kind` identifies the input seam.
+*/
+var UserInputRecorded = class extends Schema.TaggedClass("@effect-agent/thread/UserInputRecorded")("UserInputRecorded", {
+	submissionId: Schema.optionalKey(SubmissionId),
+	kind: Schema.Literals([
+		"user",
+		"steering",
+		"follow-up"
+	]),
+	runId: Schema.optionalKey(RunId),
+	input: PersistedJson,
+	messageAdmission: Schema.optionalKey(InputMessage)
+}) {};
+/** Immutable Run start and per-Attempt duration allowance, before any agent execution. */
+var RunStartedRecord = class extends Schema.TaggedClass("@effect-agent/thread/RunStartedRecord")("RunStarted", {
+	runId: RunId,
+	/** Older private histories cannot prove programmatic accounting and must be reset. */
+	policyAccountingVersion: Schema.Literal(1),
+	maxDurationMillis: Schema.Finite.check(Schema.isGreaterThan(0))
+}) {};
+/** An active Attempt exhausted its execution allowance; downtime alone never writes this. */
+var RunDurationExhausted = class extends Schema.TaggedClass("@effect-agent/thread/RunDurationExhausted")("RunDurationExhausted", { runId: RunId }) {};
+const PersistedPromptMessages = Schema.toEncoded(Prompt.Prompt);
+const isPersistedPromptMessages = Schema.is(PersistedPromptMessages);
+/**
+* Final model output. Immediate history may include the exact encoded Prompt suffix of the
+* successful Run; durable execution instead journals individual ModelResponseRecorded Turns.
+*/
+var ModelCompleted = class extends Schema.TaggedClass("@effect-agent/thread/ModelCompleted")("ModelCompleted", Schema.Struct({
+	runId: RunId,
+	output: PersistedJson,
+	messages: Schema.optionalKey(PersistedJson)
+}).check(Schema.makeFilter((record) => record.messages === void 0 || isPersistedPromptMessages(record.messages), { title: "Retained Run messages are Schema-encoded Effect AI Prompt messages" }))) {};
+var ToolCallSettled = class extends Schema.TaggedClass("@effect-agent/thread/ToolCallSettled")("ToolCallSettled", {
+	toolSelection: Schema.optionalKey(Selection),
+	runId: RunId,
+	toolCallId: ToolCallId,
+	toolName: BoundedName,
+	result: PersistedJson,
+	isFailure: Schema.Boolean,
+	/** Explicit engine evidence, never inferred from Tool result data. */
+	budgetRejected: Schema.optionalKey(Schema.Literal(true))
+}) {};
+/** Compact execution evidence committed with a declaration, before any handler can start. */
+var ToolOperation = class extends Schema.Class("@effect-agent/thread/ToolOperation")({
+	toolCallId: ToolCallId,
+	toolName: BoundedName,
+	executionClass: Schema.Literals([
+		"readonly",
+		"idempotent",
+		"uncertain"
+	]),
+	executionKind: ToolExecutionKind,
+	replay: Digest
+}) {};
+/** A retired call's runtime result. Unavailable readonly work may already have been observed. */
+var ToolUnavailable = class extends Schema.TaggedClass()("ToolUnavailable", {
+	toolName: BoundedName,
+	execution: Schema.Literals(["not-executed", "unavailable"]),
+	message: BoundedText
+}) {};
+/**
+* One committed model Turn. `messages` carries the Schema-encoded Effect AI Prompt messages this
+* Turn appended (assistant response plus any tool-call declarations), committed atomically at the
+* Turn boundary so a recovering Attempt can rebuild the next Prompt from canonical records alone.
+* `messagesDigest` pins the exact encoded content.
+*/
+const ModelResponseRecordedFields = Schema.Struct({
+	/** Original operation identity/semantics, independent of later Agent and toolbox changes. */
+	toolOperations: Schema.optionalKey(Schema.Array(ToolOperation)),
+	/** Explicit pre-execution failures, committed with the original arguments before any approval. */
+	toolParameterRejections: Schema.optionalKey(Schema.Array(ToolParameterRejection)),
+	toolExposure: Schema.optionalKey(Snapshot),
+	runId: RunId,
+	turnId: TurnId,
+	turn: TurnNumber,
+	messages: PersistedJson,
+	messagesDigest: Digest,
+	/**
+	* Number of leading messages that belong only to this Run's evaluated instructions and wake
+	* input. They remain canonical. Continuations replace the instruction messages with current
+	* instructions while retaining user input; later Runs also retain that original user intent.
+	* Records without this field retain their full history.
+	*/
+	runScopedPrefixLength: Schema.optionalKey(Schema.Int.check(Schema.isGreaterThan(0))),
+	/**
+	* Exact normalized usage for every model call staged into this Turn. A
+	* summarizer and the Turn response are distinct entries. Absent on legacy
+	* records, whose aggregate totals below retain the old resume behavior.
+	*/
+	modelUsage: Schema.optionalKey(Schema.Array(ModelCallUsage)),
+	/** Observed invocations without retained accounting before this Turn committed. */
+	unobservedModelCalls: Schema.optionalKey(Schema.Natural),
+	/** Aggregate compatibility fields used by older projections. */
+	inputTokens: Schema.optionalKey(Schema.Natural),
+	outputTokens: Schema.optionalKey(Schema.Natural),
+	/** Estimated spend staged with the usage; recovery re-seeds the cost budget (RUN-023). */
+	costMicrousd: Schema.optionalKey(Schema.Natural)
+}).check(Schema.makeFilter((response) => response.runScopedPrefixLength === void 0 || isPersistedPromptMessages(response.messages) && response.runScopedPrefixLength < response.messages.content.length && response.messages.content.slice(0, response.runScopedPrefixLength).every((message) => message.role === "system" || message.role === "user"), { title: "Run-scoped Prompt prefix contains only instruction/wake messages and leaves one response" }));
+var ModelResponseRecorded = class extends Schema.TaggedClass("@effect-agent/thread/ModelResponseRecorded")("ModelResponseRecorded", ModelResponseRecordedFields) {};
+/**
+* One approved uncertain/idempotent ordinary Tool Call made durable BEFORE any handler starts
+* (durability §10). `parameters` is the Schema-encoded wire form of the declared call and
+* `parametersDigest` pins it; recovery that sees this record without a matching `ToolCallSettled`
+* (or `ToolCallUnknown` → `ToolCallResolved`) must reconcile or mark unknown, never silently
+* replay (DUR-009). Ordinary `readonly`-class Tools never produce this record. Delegation
+* classification is always prepared, including for a Tool annotated `readonly`.
+*/
+var ToolCallPrepared = class extends Schema.TaggedClass("@effect-agent/thread/ToolCallPrepared")("ToolCallPrepared", {
+	runId: RunId,
+	turnId: TurnId,
+	turn: TurnNumber,
+	toolCallId: ToolCallId,
+	toolName: BoundedName,
+	parameters: PersistedJson,
+	parametersDigest: Digest,
+	/** Absent legacy evidence grants no delegation replay authority. */
+	executionKind: Schema.optionalKey(ToolExecutionKind),
+	executionClass: Schema.optionalKey(ToolOperation.fields.executionClass),
+	replay: Schema.optionalKey(Digest)
+}) {};
+/** Monotonic reservations charged before programmatic execution or grace finalization. */
+var RunPolicyUsageReserved = class extends Schema.TaggedClass()("RunPolicyUsageReserved", {
+	runId: RunId,
+	programmaticToolCalls: RunPolicyUsage.fields.programmaticToolCalls,
+	finalizationUsed: RunPolicyUsage.fields.finalizationUsed
+}) {};
+/**
+* A durable Unknown Outcome: the external effect of one prepared ordinary Tool Call may have
+* happened but was not confirmed canonically (DUR-009/DUR-017). It is neither success nor
+* ordinary failure; automatic continuation stops until an authorized resolution arrives.
+*/
+var ToolCallUnknown = class extends Schema.TaggedClass("@effect-agent/thread/ToolCallUnknown")("ToolCallUnknown", {
+	runId: RunId,
+	turn: TurnNumber,
+	toolCallId: ToolCallId,
+	toolName: BoundedName,
+	reason: BoundedText
+}) {};
+/** How one open/unknown Tool Call was authoritatively closed (DUR-017 resolution audit). */
+const ToolCallResolution = Schema.Literals([
+	"completed-with-result",
+	"failed-with-error",
+	"never-started",
+	"safe-retry"
+]);
+/**
+* The canonical audit record closing one open or unknown Tool Call: reconciler-recovered supplier
+* truth or an authorized `resolveUnknown` command. `author`/`reason` make every resolution an
+* attributable decision (DUR-017); a `completed-with-result` resolution is accompanied by the
+* per-call `ToolCallSettled` record carrying the recovered result.
+*/
+var ToolCallResolved = class extends Schema.TaggedClass("@effect-agent/thread/ToolCallResolved")("ToolCallResolved", {
+	runId: RunId,
+	toolCallId: ToolCallId,
+	resolution: ToolCallResolution,
+	author: BoundedName,
+	reason: BoundedText
+}) {};
+/**
+* One accepted Durable Step result (durability §11): exactly-once-recorded while the Step's
+* external side effect stays honestly at-least-once-executed. Only success is recorded — a failing
+* Step body fails into the handler's error channel and re-executes on re-entry. `output` is the
+* Schema-encoded Step output; `outputDigest` pins it for replay-divergence detection.
+*/
+var ToolStepSettled = class extends Schema.TaggedClass("@effect-agent/thread/ToolStepSettled")("ToolStepSettled", {
+	runId: RunId,
+	toolCallId: ToolCallId,
+	stepName: BoundedName,
+	output: PersistedJson,
+	outputDigest: Digest
+}) {};
+/**
+* A canonical approval request for one declared Tool Call (CAP-006, durability §8): with this
+* record durable, "waiting for explicit approval" is a safe suspension boundary — the resumed
+* Attempt replays the declared batch instead of re-invoking the model.
+*/
+var ToolApprovalRequested = class extends Schema.TaggedClass("@effect-agent/thread/ToolApprovalRequested")("ToolApprovalRequested", {
+	runId: RunId,
+	turnId: TurnId,
+	turn: TurnNumber,
+	toolCallId: ToolCallId,
+	toolName: BoundedName,
+	parametersDigest: Digest
+}) {};
+/** The two-valued approval decision family shared by canonical records and ledger intents. */
+const ApprovalDecision = Schema.Literals(["approved", "denied"]);
+/**
+* The canonical decision for one requested approval. Appended by the deciding Attempt (policy
+* auto-decisions) or by the resuming Attempt after a durable `resolveApproval` intent; it is the
+* deterministic decision authority for every later Attempt of the same Run.
+*/
+var ToolApprovalDecided = class extends Schema.TaggedClass("@effect-agent/thread/ToolApprovalDecided")("ToolApprovalDecided", {
+	runId: RunId,
+	turn: TurnNumber,
+	toolCallId: ToolCallId,
+	decision: ApprovalDecision,
+	resolver: BoundedName,
+	reason: BoundedText
+}) {};
+/**
+* First-class interruption audit (durability §9): appended by a superseding Attempt before it
+* re-invokes the model for a Turn whose prior owner died without a complete canonical response.
+* Duplicate provider cost is thereby possible AND observable in canonical history.
+*/
+var ModelResponseInterrupted = class extends Schema.TaggedClass("@effect-agent/thread/ModelResponseInterrupted")("ModelResponseInterrupted", {
+	runId: RunId,
+	supersededEpoch: ProducerEpoch,
+	attemptId: AttemptId,
+	reason: BoundedText
+}) {};
+/**
+* One engine-native compaction committed before the pre-Turn view changes (RUN-026).
+* `coversThrough` is a Thread record sequence: the projection
+* renders records at or below it as a summary (`summarize`), a fresh window (`rollover`), or with
+* cleared tool results (kind `clear-tool-results`), never erasing source
+* history. The record carries no digest by decision: it is appended by the
+* fenced owner into the very log it covers, and re-verifying a digest would
+* re-read the covered range on every wake — the O(history) work compaction
+* exists to remove. Host-supplied ContextCompactor decisions use this same commit path.
+* Summaries exceeding BoundedText are rejected before append, never truncated.
+* `summary` is present exactly for `summarize` records; the projection
+* treats a summarize record without one as invalid and ignores it fail-safe.
+*/
+var CompactionCreated = class extends Schema.TaggedClass("@effect-agent/thread/CompactionCreated")("CompactionCreated", {
+	runId: RunId,
+	turn: TurnNumber,
+	kind: Schema.Literals([
+		"clear-tool-results",
+		"summarize",
+		"rollover"
+	]),
+	coversThrough: CanonicalSequence,
+	summary: Schema.optionalKey(BoundedText),
+	handoff: Schema.optionalKey(ContextHandoff)
+}) {};
+var RunFailed = class extends Schema.TaggedClass("@effect-agent/thread/RunFailed")("RunFailed", {
+	runId: RunId,
+	failure: PersistedJson
+}) {};
+const RunCompletedFields = Schema.Struct({
+	runId: RunId,
+	output: PersistedJson,
+	/** Integrity of validated terminal values, independent of future application codecs. */
+	resultDigest: Schema.optionalKey(Digest),
+	/** Application disposition captured with an ordinary completion. */
+	runDisposition: Schema.optionalKey(PersistedJson),
+	/** Honest soft-landing marker, present exactly when `exhausted` is present. */
+	finishReason: Schema.optionalKey(Schema.Literal("budget-exhausted")),
+	/** Budget dimension paired with `finishReason` on a soft landing. */
+	exhausted: Schema.optionalKey(ExhaustedLimit)
+}).check(Schema.makeFilter((completed) => completed.finishReason === void 0 === (completed.exhausted === void 0) && (completed.runDisposition === void 0 || completed.finishReason === void 0), { title: "Run completion metadata matches its terminal family" }));
+var RunCompleted = class extends Schema.TaggedClass("@effect-agent/thread/RunCompleted")("RunCompleted", RunCompletedFields) {};
+var RepairAnnotated = class extends Schema.TaggedClass("@effect-agent/thread/RepairAnnotated")("RepairAnnotated", {
+	reason: BoundedText,
+	details: PersistedJson
+}) {};
+/** Terminal outcome family for one accepted Submission (DUR-002). */
+const SettlementOutcome = Schema.Literals([
+	"completed",
+	"failed",
+	"aborted"
+]);
+/**
+* A durable abort command made canonical before the active worker is interrupted (DUR-012).
+* Repeating the same abort command is idempotent; abort never rewrites a prior terminal outcome.
+*/
+var AbortRequested = class extends Schema.TaggedClass("@effect-agent/thread/AbortRequested")("AbortRequested", {
+	submissionId: SubmissionId,
+	author: BoundedName,
+	reason: BoundedText
+}) {};
+/**
+* The single canonical settlement record owed to one accepted Submission (DUR-002, DUR-011).
+* Canonical history is the outcome authority: the ledger row is finalized from this record and
+* never the other way around (DUR-015).
+*/
+const RawSubmissionSettled = Schema.Struct({
+	submissionId: SubmissionId,
+	settlementId: SettlementId,
+	receiptId: ReceiptId,
+	outcome: SettlementOutcome,
+	runId: Schema.optionalKey(RunId),
+	result: Schema.optionalKey(PersistedJson),
+	/**
+	* Application-defined, Schema-encoded disposition for an ordinary completed
+	* Run. Absent for budget exhaustion and every non-completed or run-less
+	* settlement; consumers decode it with the application definition's Schema.
+	*/
+	runDisposition: Schema.optionalKey(PersistedJson),
+	/**
+	* Present only when a `completed` Run settled through the final-answer
+	* exhaustion resolution (RUN-011, RUN-018): the durable log must be able to
+	* distinguish honest-exhaustion completion from ordinary completion without
+	* the live event stream. Absent for every ordinary settlement, keeping
+	* existing histories and goldens byte-stable (additive, schemaVersion 1).
+	*/
+	finishReason: Schema.optionalKey(Schema.Literal("budget-exhausted")),
+	/**
+	* The dimension that bound a budget-exhausted completion (RUN-011,
+	* RUN-025), carried verbatim from the live `RunCompleted` event so
+	* consumers never reconstruct it from message text. Valid only alongside
+	* `finishReason: "budget-exhausted"`; absent on histories persisted before
+	* the dimension became durable (additive, schemaVersion 1).
+	*/
+	exhausted: Schema.optionalKey(ExhaustedLimit),
+	/**
+	* The typed `AgentPolicyError.limit` of a `failed` hard-rail settlement
+	* (RUN-011): which finite policy dimension failed the Run, preserved
+	* alongside the bounded `{errorTag, message}` failure projection in
+	* `result`. Absent for every non-policy failure and on histories persisted
+	* before the limit became durable (additive, schemaVersion 1).
+	*/
+	policyLimit: Schema.optionalKey(PolicyLimit),
+	/** Canonical aggregate of all priced model calls made by this Run. */
+	usageSummary: Schema.optionalKey(RunUsageSummary),
+	/** Calls included in usageSummary but not in any ModelResponseRecorded, retained on failure. */
+	uncommittedModelUsage: Schema.optionalKey(Schema.Array(ModelCallUsage))
+});
+const isPolicyFailureProjection = Schema.is(Schema.Struct({ errorTag: Schema.Literal("AgentPolicyError") }));
+const decodeSettlementFailureDiagnostic = Schema.decodeUnknownOption(SettlementFailureDiagnostic, { onExcessProperty: "error" });
+const hasValidSettlementFamily = (settled) => (settled.finishReason === void 0 || settled.outcome === "completed") && settled.finishReason === void 0 === (settled.exhausted === void 0) && (settled.usageSummary === void 0 || settled.runId !== void 0) && (settled.uncommittedModelUsage === void 0 || settled.runId !== void 0 && settled.usageSummary !== void 0) && (settled.runDisposition === void 0 || settled.outcome === "completed" && settled.finishReason === void 0 && settled.runId !== void 0 && settled.result !== void 0) && (settled.outcome !== "failed" || Option.isSome(decodeSettlementFailureDiagnostic(settled.result))) && (settled.outcome !== "aborted" || settled.result === void 0) && (settled.policyLimit === void 0 || settled.outcome === "failed" && isPolicyFailureProjection(settled.result));
+const SubmissionSettledFields = RawSubmissionSettled.check(Schema.makeFilter(hasValidSettlementFamily, { title: "failed settlements require a bounded diagnostic; aborted settlements carry no result; budget metadata must match its settlement family" }));
+var SubmissionSettled = class extends Schema.TaggedClass("@effect-agent/thread/SubmissionSettled")("SubmissionSettled", SubmissionSettledFields) {};
+/**
+* Canonical-boundary view of `SubmissionSettled`: `finishReason` is valid
+* only on a `completed` outcome, `exhausted` only alongside
+* `finishReason: "budget-exhausted"`, every `failed` outcome requires the exact bounded
+* `SettlementFailureDiagnostic`, aborted outcomes carry no result, and `policyLimit` only occurs
+* on a `failed` outcome whose diagnostic carries the `AgentPolicyError` tag. `runDisposition`
+* occurs only on an ordinary completed settlement with a Run —
+* so a malformed persisted combination such as
+* `{ outcome: "failed", finishReason: "budget-exhausted" }` or a
+* `policyLimit` contradicting `result.errorTag` fails closed at decode
+* instead of becoming trusted audit history (STORE-006, RUN-011).
+*/
+const SubmissionSettledRecord = SubmissionSettled.pipe(Schema.refine((settled) => hasValidSettlementFamily(settled), { expected: "failed settlements require a bounded diagnostic, aborted settlements carry no result, finishReason only occurs on completed settlements, exhausted only occurs with finishReason budget-exhausted, runDisposition only occurs on an ordinary completed settlement with a Run result, and policyLimit only occurs on a failed AgentPolicyError settlement" }));
+/**
+* PARENT-log record of one durable child establishment request:
+* the exact parent Tool Call, delegation and target identity, the digests that pin the child's
+* Binding/input/grant, the fenced budget reservation, and the INTENDED child identity derived
+* deterministically from the parent Run and Tool Call pair (D4). `childInput` carries the
+* prepared child input in encoded form (D3) so recovery can complete child admission from this
+* record alone — no live delegation handler is required. `childPrincipal`/`childIdempotencyKey`
+* carry the ledger admission scope with the ledger's exact bounds; the layering keeps their
+* branded Schemas in the ledger port.
+*/
+var SubagentRequested = class extends Schema.TaggedClass("@effect-agent/thread/SubagentRequested")("SubagentRequested", {
+	runId: RunId,
+	turnId: TurnId,
+	turn: TurnNumber,
+	toolCallId: ToolCallId,
+	delegationId: DelegationId,
+	targetAgentId: AgentId,
+	targetDigests: DefinitionDigests,
+	childInput: PersistedJson,
+	childInputDigest: Digest,
+	grantDigest: Digest,
+	reservationId: BoundedName,
+	reservationDigest: Digest,
+	childThreadId: ThreadId,
+	childPrincipal: BoundedName,
+	childIdempotencyKey: BoundedName,
+	/** Effective invocation bound, already clamped to the delegation and child Definition. */
+	toolCallAllowance: Schema.optionalKey(Schema.Int.check(Schema.isGreaterThan(0))),
+	policy: Schema.optionalKey(Schema.toCodecJson(AgentPolicy)),
+	budget: Schema.optionalKey(SubagentBudgetReservation),
+	grant: Schema.optionalKey(SubagentGrant),
+	depth: Schema.optionalKey(DelegationDepth)
+}) {};
+/**
+* PARENT-log record that the intended child exists as accepted work:
+* the full established child identity. It is appended only after the child Receipt
+* exists — SUB-017 holds by construction because `childReceiptId` is a required field.
+*/
+var SubagentStarted = class extends Schema.TaggedClass("@effect-agent/thread/SubagentStarted")("SubagentStarted", {
+	runId: RunId,
+	toolCallId: ToolCallId,
+	childThreadId: ThreadId,
+	childSubmissionId: SubmissionId,
+	childReceiptId: ReceiptId,
+	childRunId: RunId
+}) {};
+/**
+* PARENT-log record of one verified child settlement join:
+* the child's canonical Settlement identity and outcome, the digests pinning the verified child
+* result and the bounded projected parent result, the child usage summary, and the FINAL
+* consumed/released accounting decision for the reservation. It commits in ONE atomic batch with
+* the parent `ToolCallSettled` record (SUB-019); `beginChildBudgetRelease` replays
+* `finalAccounting` from this record, so canonical history authorizes the release (DUR-015).
+*/
+var SubagentJoined = class extends Schema.TaggedClass("@effect-agent/thread/SubagentJoined")("SubagentJoined", {
+	runId: RunId,
+	toolCallId: ToolCallId,
+	childSubmissionId: SubmissionId,
+	childSettlementId: SettlementId,
+	childOutcome: SettlementOutcome,
+	childResultDigest: Digest,
+	projectedResultDigest: Digest,
+	usageSummary: PersistedJson,
+	usage: Schema.optionalKey(RunTotals),
+	delegatedUsage: Schema.optionalKey(RunTotals),
+	reservationId: BoundedName,
+	finalAccounting: PersistedJson
+}) {};
+/**
+* CHILD-log immutable lineage: the Parent Link plus the digests that pin
+* the child's definition, input, and authority grant. It is the first record after the child's
+* `ThreadCreated` (its own single-record batch, so the generic `thread-created:{cid}`
+* batch identity is never contradicted) and the join path verifies it fail-closed — a fabricated
+* child or parent identity fails Parent Link verification (SUB-004, D10).
+*/
+var SubagentLineageRecorded = class extends Schema.TaggedClass("@effect-agent/thread/SubagentLineageRecorded")("SubagentLineageRecorded", {
+	parentLink: SubagentParentLink,
+	parentSubmissionId: SubmissionId,
+	childDefinitionDigests: DefinitionDigests,
+	childInputDigest: Digest,
+	grantDigest: Digest,
+	/** Copied from the canonical request before readiness; restored for every child Attempt. */
+	toolCallAllowance: SubagentRequested.fields.toolCallAllowance,
+	policy: SubagentRequested.fields.policy,
+	budget: SubagentRequested.fields.budget,
+	grant: SubagentRequested.fields.grant
+}) {};
+const WorkerReportingIntent = Schema.Struct({
+	/** Absent only in historical custom-report origins; these remain readable as evidence. */
+	mode: Schema.optionalKey(Schema.Literal("standard")),
+	sourceDigests: DefinitionDigests,
+	/** Historical custom destination evidence. New worker origins never write this field. */
+	destinationDelegationId: Schema.optionalKey(DelegationId),
+	/** Frozen by the sender before acceptance. Standard emission never reads the source runtime. */
+	returnAddress: Schema.optionalKey(Schema.Struct({
+		input: PersistedJson,
+		principal: Principal,
+		policy: Schema.toCodecJson(AgentPolicy),
+		depth: Schema.Natural,
+		grant: Schema.optionalKey(SubagentGrant),
+		/** Encoded to bound recursive worker origins at the admission boundary. */
+		workerAdmission: Schema.optionalKey(PersistedJson)
+	}))
+}).check(Schema.makeFilter((value) => value.mode === "standard" === (value.returnAddress !== void 0)));
+/** Exact successful predecessor evidence; a locator alone grants no authority. */
+const WorkerContinuation = Schema.Struct({
+	worker: WorkerRef,
+	receipt: Receipt,
+	settlementId: SettlementId
+}).check(Schema.makeFilter((value) => value.worker.threadId === value.receipt.threadId));
+/** Immutable worker Thread origin. Each input has its own digest and parameters separately. */
+const WorkerOrigin = Schema.Struct({
+	worker: WorkerRef,
+	source: WorkerSource,
+	/** A new assignment may continue this completed, immutable predecessor. */
+	continuationOf: Schema.optionalKey(WorkerContinuation),
+	/** Omitted retains source-subtree funding; worker-run renews only for a new native Run. */
+	budgetScope: Schema.optionalKey(WorkerBudgetScope),
+	/** Frozen at worker creation; older origins remain reusable. */
+	lifecycle: Schema.optionalKey(Schema.Literal("assignment")),
+	targetDigests: DefinitionDigests,
+	policy: Schema.toCodecJson(AgentPolicy),
+	budget: SubagentBudgetReservation,
+	grant: SubagentGrant,
+	depth: DelegationDepth,
+	toolCallAllowance: Schema.optionalKey(Schema.Int.check(Schema.isGreaterThan(0))),
+	firstMessageId: IdempotencyKey,
+	createdAtMillis: Schema.Natural,
+	expiresAtMillis: Schema.Natural,
+	/** Exact source registration owns projection; absence means reporting was not declared. */
+	reporting: Schema.optionalKey(WorkerReportingIntent)
+}).check(Schema.makeFilter((value) => value.expiresAtMillis > value.createdAtMillis));
+/** Frozen per-input metadata; it grants no attached-child or parent-abort semantics. */
+const WorkerAdmission = Schema.Struct({
+	origin: WorkerOrigin,
+	messageId: IdempotencyKey,
+	parameters: PersistedJson,
+	createdAtMillis: Schema.Natural,
+	/** Host-bound source input whose subtree funds this input; never chosen by a model. */
+	sourceSubmissionId: Schema.optionalKey(SubmissionId),
+	/** Enables routed receipt lookup when the delivery is owned by a reporting child. */
+	deliveryPrincipal: Schema.optionalKey(Principal),
+	/** Proven framework updates use a separate bounded input-capacity partition. */
+	reportKind: Schema.optionalKey(Schema.Literal("update"))
+});
+/** Owner command retained before the destination inbox is sealed. */
+var WorkerStopRequested = class extends Schema.TaggedClass()("WorkerStopRequested", { command: WorkerStop }) {};
+/** Source-log capacity reservation, retained independently of the source Run's settlement. */
+var WorkerInputRequested = class extends Schema.TaggedClass()("WorkerInputRequested", {
+	admission: WorkerAdmission,
+	inputDigest: Digest
+}) {};
+/** Child-log origin, reconstructed from a retained delivery before the child becomes ready. */
+var WorkerOriginRecorded = class extends Schema.TaggedClass()("WorkerOriginRecorded", { origin: WorkerOrigin }) {};
+/** Canonical child completion acknowledgement releases only this input's active capacity. */
+var WorkerInputCompleted = class extends Schema.TaggedClass()("WorkerInputCompleted", {
+	messageId: IdempotencyKey,
+	workerThreadId: ThreadId,
+	submissionId: SubmissionId,
+	receiptId: ReceiptId,
+	settlementId: SettlementId,
+	completedAtMillis: Schema.Natural,
+	/** New acknowledgements prove that this input's external effects are resolved. */
+	effectsResolved: Schema.optionalKey(Schema.Literal(true))
+}) {};
+/**
+* Frozen report decision for one actual Run, shared by every joined Receipt. The envelope is
+* a Schema-encoded PreparedInput, validated before append and decoded again on recovery.
+* Keeping the encoded value here avoids a Records/PreparedInput schema dependency cycle.
+*/
+var WorkerReportPrepared = class extends Schema.TaggedClass()("WorkerReportPrepared", {
+	runId: RunId,
+	messageId: IdempotencyKey,
+	envelope: PersistedJson,
+	createdAtMillis: Schema.Natural,
+	deadlineAtMillis: Schema.Natural,
+	predecessor: Schema.optionalKey(IdempotencyKey)
+}) {};
+/** Accepted update and its optional frozen parent delivery are one atomic canonical fact. */
+var AgentUpdateEmitted = class extends Schema.TaggedClass()("AgentUpdateEmitted", {
+	update: Update,
+	definitions: DefinitionDigests,
+	delivery: Schema.optionalKey(Schema.Struct({
+		messageId: IdempotencyKey,
+		envelope: PersistedJson,
+		createdAtMillis: Schema.Natural,
+		deadlineAtMillis: Schema.Natural,
+		predecessor: Schema.optionalKey(IdempotencyKey)
+	}))
+}) {};
+/** Permanent bounded report refusal. Application errors and raw Run dispositions stay private. */
+var WorkerReportRefused = class extends Schema.TaggedClass()("WorkerReportRefused", {
+	runId: RunId,
+	messageId: IdempotencyKey,
+	reason: Schema.Literals([
+		"filtered",
+		"declaration-unavailable",
+		"destination",
+		"projection",
+		"input",
+		"preparation",
+		"timeout",
+		"defect",
+		"expired",
+		"denied",
+		"capacity"
+	])
+}) {};
+/** Frozen source proof of peer provenance, readable through routed canonical storage. */
+var PeerMessagePrepared = class extends Schema.TaggedClass()("PeerMessagePrepared", {
+	messageId: IdempotencyKey,
+	sourcePrincipal: Principal,
+	operation: Schema.Literals(["send", "reply"]),
+	deadlineAtMillis: Schema.Int.check(Schema.isGreaterThan(0)),
+	encodedEnvelope: PersistedJson
+}) {};
+/**
+* One disjoint subtree slice shared by attached and background children of a source input.
+* The source keeps its own execution ceiling; descendants spend only the remaining allocation.
+* Reservations include future descendant slots and never refund, including after interruption.
+* resultBytes reserves the terminal/projection result, not cumulative Tool output bytes.
+*/
+var SubtreeBudgetReserved = class extends Schema.TaggedClass()("SubtreeBudgetReserved", {
+	reservationId: BoundedName,
+	sourceSubmissionId: Schema.optionalKey(SubmissionId),
+	childThreadId: ThreadId,
+	lifetime: Schema.Literals(["attached", "background"]),
+	depth: DelegationDepth,
+	policy: Schema.toCodecJson(AgentPolicy),
+	grant: SubagentGrant,
+	budget: SubagentBudgetReservation
+}) {};
+/**
+* Current private-development canonical payload family. Phase 5 adds the seven durable-Tool tags
+* (prepared/unknown/resolved/step/approval-request/approval-decision/interrupted) additively; S2
+* adds the four durable-Subagent tags (requested/started/joined/lineage) additively, so the
+* envelope keeps `schemaVersion: 1` (P4 precedent for additive payload tags).
+*/
+const CanonicalRecordPayload = Schema.Union([
+	ThreadCreated,
+	UserInputRecorded,
+	RunStartedRecord,
+	RunDurationExhausted,
+	RunPolicyUsageReserved,
+	ModelCompleted,
+	ModelResponseRecorded,
+	ToolCallPrepared,
+	ToolCallSettled,
+	ToolCallUnknown,
+	ToolCallResolved,
+	ToolStepSettled,
+	ToolApprovalRequested,
+	ToolApprovalDecided,
+	ModelResponseInterrupted,
+	CompactionCreated,
+	RunFailed,
+	RunCompleted,
+	AbortRequested,
+	SubmissionSettledRecord,
+	SubagentRequested,
+	SubagentStarted,
+	SubagentJoined,
+	SubagentLineageRecorded,
+	WorkerInputRequested,
+	WorkerStopRequested,
+	WorkerOriginRecorded,
+	WorkerInputCompleted,
+	WorkerReportPrepared,
+	AgentUpdateEmitted,
+	WorkerReportRefused,
+	PeerMessagePrepared,
+	SubtreeBudgetReserved,
+	RepairAnnotated
+]);
+/**
+* Versioned record envelope stored in an atomic batch. Thread ordering is assigned only
+* when the batch is committed.
+*/
+var RecordEnvelope = class extends Schema.Class("@effect-agent/thread/RecordEnvelope")({
+	recordId: RecordId,
+	family: Schema.Literal("thread"),
+	schemaVersion: Schema.Literal(1),
+	createdAt: Schema.DateTimeUtcFromString,
+	deploymentId: DeploymentId,
+	payload: CanonicalRecordPayload
+}) {};
+/** Backward-compatible domain name for a canonical record. */
+const CanonicalRecord = RecordEnvelope;
+/** One non-empty, bounded, idempotent atomic append unit. */
+var CanonicalBatch = class extends Schema.Class("@effect-agent/thread/CanonicalBatch")({
+	batchId: BatchId,
+	producerId: ProducerId,
+	records: Schema.NonEmptyArray(RecordEnvelope).check(Schema.isMaxLength(256))
+}) {};
+/**
+* A committed record with its Thread ordering and opaque resumable observation cursor.
+*/
+var CanonicalRecordEnvelope = class extends Schema.Class("@effect-agent/thread/CanonicalRecordEnvelope")({
+	threadId: ThreadId,
+	batchId: BatchId,
+	sequence: CanonicalSequence,
+	offset: ObservationOffset,
+	record: RecordEnvelope
+}) {};
+const CURRENT_CANONICAL_SCHEMA_VERSION = 1;
+//#endregion
+export { AbortRequested, AgentUpdateEmitted, ApprovalDecision, BatchId, CURRENT_CANONICAL_SCHEMA_VERSION, CanonicalBatch, CanonicalRecord, CanonicalRecordEnvelope, CanonicalRecordPayload, CanonicalSequence, CompactionCreated, DefinitionDigestInput, DefinitionDigests, DeploymentId, Digest, MAX_PERSISTED_JSON_BYTES, MAX_PERSISTED_JSON_COLLECTION_LENGTH, MAX_PERSISTED_JSON_DEPTH, MAX_PERSISTED_JSON_NODES, ModelCompleted, ModelResponseInterrupted, ModelResponseRecorded, ObservationOffset, PeerMessagePrepared, PersistedJson, ProducerEpoch, ProducerId, RecordEnvelope, RecordId, RepairAnnotated, ReplayContract, RunCompleted, RunDurationExhausted, RunFailed, RunPolicyUsageReserved, RunStartedRecord, SettlementFailureDiagnostic, SettlementOutcome, SubagentJoined, SubagentLineageRecorded, SubagentRequested, SubagentStarted, SubmissionSettled, SubmissionSettledRecord, SubtreeBudgetReserved, ThreadCreated, ToolApprovalDecided, ToolApprovalRequested, ToolCallPrepared, ToolCallResolution, ToolCallResolved, ToolCallSettled, ToolCallUnknown, ToolOperation, ToolStepSettled, ToolUnavailable, UserInputRecorded, WorkerAdmission, WorkerContinuation, WorkerInputCompleted, WorkerInputRequested, WorkerOrigin, WorkerOriginRecorded, WorkerReportPrepared, WorkerReportRefused, WorkerReportingIntent, WorkerStopRequested, Records_exports as t };
+
+//# sourceMappingURL=Records.mjs.map