effect-agent 0.1.0-beta.160 → 0.1.0-beta.162

package/dist/{Admin-Dirux8PR.d.mts → Admin-Vhz6NdaH.d.mts}

@@ -1511,6 +1511,12 @@ interface LifecyclePublicationStorage {
   }) => Effect.Effect<ReadonlyArray<LifecyclePublicationBatch>, LifecyclePublicationError>;
   /** Atomically acknowledge the exact batch, retaining its identities and fingerprints. */
   readonly acknowledge: (publications: LifecyclePublicationBatch) => Effect.Effect<void, LifecyclePublicationError>;
+  /** Optional atomic acknowledgement of up to 100 successfully published owner batches.
+   * Validate every exact batch before consuming any debt. Empty waves succeed without writes.
+   * Wrappers that validate acknowledgement authority must wrap this method too.
+   * Custom services may omit this; drains then acknowledge each batch immediately.
+   */
+  readonly acknowledgeMany?: (batches: ReadonlyArray<LifecyclePublicationBatch>) => Effect.Effect<void, LifecyclePublicationError>;
   /**
    * Claim a due owner batch and persist its retry before dispatch. Eight automatic attempts;
    * 1s exponential backoff capped at 60s, after the dispatch timeout. The final attempt parks
@@ -1547,7 +1553,9 @@ declare const lifecyclePublicationLayer: Layer.Layer<never, never, Crypto.Crypto
  * One finite wave for the host's existing maintenance coordinator. Persist the next deadline
  * before dispatch, so interruption and process loss retain the same facts without another timer.
  * Finish independent owner batches before surfacing failures; interruption stops the wave.
- * Acknowledgements are exact and idempotent. No producer or external Tool is re-executed here.
+ * Acknowledgements are exact and idempotent. An optional storage wave acknowledgement commits
+ * completed batches in groups of up to 100, including when a later dispatch is interrupted. No producer or
+ * external Tool is re-executed here.
  */
 declare const drainLifecyclePublications: (storage: LifecyclePublicationStorage, timeoutMillis?: any, limit?: any, options?: {
   readonly retainedOnly?: boolean;
@@ -4267,4 +4275,4 @@ declare const RetryRefused_base: Schema.Class<RetryRefused, Schema.TaggedStruct<
 declare class RetryRefused extends RetryRefused_base {}
 //#endregion
 export { RepairSubagentStartLink as $, runDurationBatchId as $i, DurableApprovalFailure as $n, ThreadRecoveryCheckpoints as $r, ParentLinkage as $t, AwaitChildSettlement as A, turnResultsBatchId as Aa, JournalBoundary as Ai, SuspensionReason as An, CheckpointRejected as Ar, ChildReservationConflict as At, MarkUnknown as B, DurableBindingFailure as Ba, compactionBatchId as Bi, settlementFailureFromRecord as Bn, ThreadExport as Br, InputAppliedMarker as Bt, renderRecoveryExplanation as C, turnBatchId as Ca, drainLifecyclePublications as Ci, SubmissionLookupByKey as Cn, isolateRecovery as Cr, ApprovalDecisionIntent as Ct, ApplyUnknownResolutions as D, turnResponseBatch as Da, SettledSubmission as Di, SubmissionWorkItem as Dn, threadCreatedRecordId as Dr, ChildAttachmentSnapshot as Dt, ApplyJoinAccounting as E, turnPreparedBatchId as Ea, PendingSubmission as Ei, SubmissionState as En, threadCreatedBatchId as Er, BeginChildBudgetReleaseRequest as Et, CompleteMaterialization as F, AgentAttemptContext as Fa, TurnCommitInput as Fi, UnknownResolutionIntent as Fn, SaveCheckpointRequest as Fr, Claim as Ft, PropagateChildAbort as G, compileBindingContracts as Ga, modelResponseInterruptedRecordId as Gi, submissionSettlementBatchId as Gn, ThreadNotMaterialized as Gr, MarkInputAppliedRequest as Gt, OpenDelegationCallEvidence as H, ExecutableAgentBinding as Ha, firstWorkerInputRecordId as Hi, submissionAbortRecordId as Hn, ThreadIdentity as Hr, JoiningClaim as Ht, DeclaredPendingBatchEvidence as I, AgentRegistration as Ia, agentUpdateRecordId as Ii, WaitingChild as In, SaveRecoveryCheckpointRequest as Ir, ClaimHandoff as It, Recovery_d_exports as J, projectRunJournal as Ji, workerTerminalFromRecord as Jn, ThreadOutstandingRequest as Jr, MarkUnknownRequest as Jt, RecoveryDecision as K, compileRegistrations as Ka, modelResponseRecordId as Ki, submissionSettlementId as Kn, ThreadObservation as Kr, MarkJoinedRequest as Kt, DelegationAdmissionEvidence as L, BindingSelection as La, approvalDecisionBatchId as Li, WaitingForChildSuspension as Ln, SelectedThreadRead as Lr, ClaimJoiningRequest as Lt, AwaitParentEstablishment as M, workerOriginRecordId as Ma, RunJournalProjection as Mi, UnknownResolution as Mn, FencedAppendRequest as Mr, ChildReservationStatus as Mt, AwaitUnknownResolution as N, workerReportRecordId as Na, RunJournalUsage as Ni, UnknownResolutionCommand as Nn, LoadCheckpointRequest as Nr, ChildSettledNotification as Nt, AwaitApprovalDecision as O, turnResponseBatchId as Oa, SubmissionStatus as Oi, SuspendRequest as On, AppendConflict as Or, ChildBudgetReservationRequest as Ot, CompleteChildAdmission as P, AgentRegistration_d_exports as Pa, RunJournal_d_exports as Pi, UnknownResolutionConflict as Pn, MAX_THREAD_EXPORT_RECORDS as Pr, ChildSettledOutcome as Pt, RepairReadiness as Q, runCompletionDigest as Qi, DurableAgentRuntime_d_exports as Qn, ThreadRecordRequest as Qr, OwnershipToken as Qt, EnsureWaitingForChild as R, BindingUnavailable as Ra, childIdempotencyKeyFor as Ri, WorkerLedgerState as Rn, ThreadCheckpoint as Rr, ClaimRequest as Rt, recoveryDecisionMeaning as S, turnApprovalsBatchId as Sa, LifecyclePublication_d_exports as Si, SubmissionLookupById as Sn, childReservationIdFor as Sr, ApprovalDecisionCommand as St, ApplyInput as T, turnIdForRun as Ta, lifecyclePublicationLayer as Ti, SubmissionSnapshot as Tn, recoveryRepairRecordId as Tr, AttachChildToReservationRequest as Tt, OpenToolCallEvidence as U, ReplayVersions as Ua, markUnknownBatchId as Ui, submissionInputBatchId as Un, ThreadIdentityRequest as Ur, LedgerCapabilities as Ut, NoAction as V, DurableWorkerBinding as Va, compactionRecordId as Vi, submissionAbortBatchId as Vn, ThreadExportRequest as Vr, JoinSnapshot as Vt, PendingApprovalEvidence as W, ResolvedBinding as Wa, modelResponseInterruptedBatchId as Wi, submissionInputRecordId as Wn, ThreadMaterialization as Wr, LedgerError as Wt, RepairInputMarker as X, promptFromCanonicalRecords as Xi, DurableAbortFailure as Xn, ThreadRead as Xr, OwnershipRenewal as Xt, ReleaseOrphanChildReservation as Y, projectRunJournalStream as Yi, ApprovalSuspensionError as Yn, ThreadPeerCountRequest as Yr, OwnershipLost as Yt, RepairJoinMarker as Z, runCompletedRecordId as Zi, DurableAgentRuntime as Zn, ThreadReadRequest as Zr, OwnershipSnapshot as Zt, RetryCommand as _, toolCallResultBatchId as _a, LifecyclePublicationError as _i, SubmissionAdmissionFence as _n, RecoveryBlocked as _r, AdmissionPolicyError as _t, IntegrityCheck as a, subagentJoinedRecordId as aa, ThreadStoreFailure as ai, ReservedChildBudget as an, DurableObserveOptions as ar, SettleAborted as at, obligationSeverityOf as b, toolStepSettledBatchId as ba, LifecyclePublicationSource as bi, SubmissionLedger_d_exports as bn, RecoverySweepOptions as br, AdmissionResult as bt, IntegrityReport as c, subagentRequestedBatchId as ca, ThreadTailRequest as ci, ResolutionCompletedWithResult as cn, DurableRetryFailure as cr, AbortCommand as ct, ObligationReport as d, subagentStartedRecordId as da, getRunInput as di, RevertJoiningRequest as dn, DurableSubmitAgent as dr, AdmissionAdmitted as dt, runDurationRecordId as ea, ThreadRunInputRequest as ei, RecoverySnapshot as en, DurableApprovalResolver as er, ResumeFromTurnBoundary as et, ObligationSeverity as f, toolApprovalDecisionRecordId as fa, readOutstanding as fi, Settlement as fn, DurableSubmitFailure as fr, AdmissionConflict as ft, RecoveryExplanation as g, toolCallResolvedRecordId as ga, LifecyclePublicationConfig as gi, SettlementReservationSnapshot as gn, DurableWorkerRequirements as gr, AdmissionNotAdmitted as gt, RecoveryDisposition as h, toolCallResolutionBatchId as ha, LifecyclePublicationBatch as hi, SettlementReservation as hn, DurableWorkerFailure as hr, AdmissionIndeterminate as ht, ExplainedUnknownCall as i, subagentJoinBatchId as ia, ThreadStoreError as ii, RenewOwnershipRequest as in, DurableObligationFailure as ir, RevertJoining as it, AwaitHostSettlement as j, workerInputRecordId as ja, RunJournalError as ji, SuspensionSnapshot as jn, FenceRejected as jr, ChildReservationId as jt, AwaitChildAdmissionResolution as k, turnResultsBatch as ka, SubmissionStatus_d_exports as ki, SuspensionOutcome as kn, AppendResult as kr, ChildBudgetReservationSnapshot as kt, ObligationBlockedOn as l, subagentRequestedRecordId as la, ThreadWorkerStateRequest as li, ResolutionNeverHappened as ln, DurableRuntimeConfig as lr, AbortIntent as lt, RECOVERY_DECISION_MEANINGS as m, toolCallPreparedRecordId as ma, LifecyclePublication as mi, SettlementFinalization as mn, DurableVerifyFailure as mr, AdmissionGroup as mt, ExplainedEvidence as n, runStartedBatchId as na, ThreadStore as ni, ReleaseChildBudgetRequest as nn, DurableAwaitFailure as nr, ResumeSuspended as nt, IntegrityCheckName as o, subagentLineageBatchId as oa, ThreadStore_d_exports as oi, ReservedSettlement as on, DurableProgressFailure as or, SettleJoinedWithHost as ot, ObligationThresholds as p, toolApprovalRequestRecordId as pa, readWorkerState as pi, SettlementConflict as pn, DurableSubmitOptions as pr, AdmissionFence as pt, RecoveryEvidence as q, definitionDigestsEqual as qa, peerMessageRecordId as qi, submissionSettlementRecordId as qn, ThreadOutstanding as qr, MarkReadyRequest as qt, ExplainedSubmission as r, runStartedRecordId as ra, ThreadStoreDiagnostic as ri, ReleaseOwnershipRequest as rn, DurableExplainFailure as rr, ResumeWaitingParent as rt, IntegrityCheckStatus as s, subagentLineageRecordId as sa, ThreadTail as si, ResolutionAbortSubmission as sn, DurableResolveFailure as sr, classifyRecovery as st, Admin_d_exports as t, runIdForSubmission as ta, ThreadSelection as ti, RecoverySnapshotRequest as tn, DurableApprovalSuspension as tr, ResumePendingToolBatch as tt, ObligationEntry as u, subagentStartedBatchId as ua, getRecord as ui, ResolutionSafeToRetry as un, DurableRuntimeConfigOptions as ur, AbortIntentRequest as ut, RetryRefusalReason as v, toolCallSettledRecordId as va, LifecyclePublicationFact as vi, SubmissionLedger as vn, RecoveryFailure as vr, AdmissionRequest as vt, AppendReservedSettlement as w, turnCanonicalBatch as wa, lifecyclePublicationBatchMaxFacts as wi, SubmissionScheduling as wn, recoveryRepairBatchId as wr, ApprovalPendingSuspension as wt, predictRecoveryDisposition as x, toolStepSettledRecordId as xa, LifecyclePublicationStorage as xi, SubmissionLookup as xn, RecoverySweepResult as xr, ApprovalConflict as xt, RetryRefused as y, toolCallUnknownRecordId as ya, LifecyclePublicationHandler as yi, SubmissionLedgerFailure as yn, RecoveryReport as yr, AdmissionResolution as yt, FinalizeLedgerFromHistory as z, CurrentBindingSelection as za, childThreadIdFor as zi, WorkerStopCommand as zn, ThreadCheckpoints as zr, DEFAULT_OWNERSHIP_LEASE_DURATION as zt };
-//# sourceMappingURL=Admin-Dirux8PR.d.mts.map
+//# sourceMappingURL=Admin-Vhz6NdaH.d.mts.map

package/dist/{DurableAgentRuntime-pr7cCaZw.mjs → DurableAgentRuntime-BpB5rBcu.mjs}

@@ -90,15 +90,16 @@ var RecoveryCheckpointContents = class extends Schema.Class("@effect-agent/threa
 	state: RecoveryCheckpointState,
 	digest: Digest
 }) {};
-const RECOVERY_ENGINE_VERSION = "effect-agent/recovery@3";
+const RECOVERY_ENGINE_VERSION = "effect-agent/recovery@4";
 /**
 * Prove that indexed original-input absence also means absent prefix Run/control evidence.
-* Only cache consumers with colon-free Submission IDs use this certificate. For those IDs,
-* every possible control marker is exactly :run:<submission-id>:. Parsing here can only decline
-* caching; it never supplies an execution identity. Separator-bearing identities use full replay.
+* A certificate covers only Run IDs with the given length. Every possible control marker for
+* those IDs is exactly :<run-id>:, including markers nested inside opaque IDs. Cache consumers
+* must have the checkpoint owner's ID length; shorter/longer aliases require full replay.
+* Parsing here can only decline caching; it never supplies an execution identity.
 * The temporary anchor set is discarded after certification, not persisted with the context.
 */
-const makeThreadContextCertificate = () => {
+const makeThreadContextCertificate = (runIdLength) => {
 	const anchored = /* @__PURE__ */ new Set();
 	let valid = true;
 	return {
@@ -114,8 +115,8 @@ const makeThreadContextCertificate = () => {
 				if (originalInput) anchored.add(payload.runId);
 			}
 			for (let start = record.recordId.indexOf(":run:"); start !== -1; start = record.recordId.indexOf(":run:", start + 1)) {
-				const end = record.recordId.indexOf(":", start + 5);
-				if (end !== -1 && !anchored.has(record.recordId.slice(start + 1, end))) {
+				const end = start + 1 + runIdLength;
+				if (record.recordId[end] === ":" && !anchored.has(record.recordId.slice(start + 1, end))) {
 					valid = false;
 					return;
 				}
@@ -2547,7 +2548,7 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 		})).pipe(Effect.catchTag("CheckpointRejected", () => Effect.succeed(Option.none())));
 		if (Option.isNone(loaded)) return Option.none();
 		const checkpoint = loaded.value;
-		if (checkpoint.engineVersion !== "effect-agent/recovery@3" || checkpoint.threadId !== threadId || checkpoint.throughSequence > throughSequence) return Option.none();
+		if (checkpoint.engineVersion !== "effect-agent/recovery@4" || checkpoint.threadId !== threadId || checkpoint.throughSequence > throughSequence) return Option.none();
 		const decoded = yield* Schema.decodeUnknownEffect(RecoveryCheckpointContents)(checkpoint.state).pipe(Effect.option);
 		if (Option.isNone(decoded)) return Option.none();
 		const { state, digest } = decoded.value;
@@ -2581,7 +2582,7 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 	/** Late/foreign evidence and new compactions require the original canonical proof. */
 	const contextSuffixCompatible = (records, submissionId) => {
 		const runId = runIdForSubmission(submissionId);
-		const certificate = makeThreadContextCertificate();
+		const certificate = makeThreadContextCertificate(runId.length);
 		for (const entry of records) {
 			const { payload, recordId } = entry.record;
 			if (payload._tag === "CompactionCreated" || retainThreadIdentity(entry)) return false;
@@ -2604,7 +2605,7 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 		const { checkpoint, state } = loaded.value;
 		if (throughSequence - checkpoint.throughSequence > 4096) return full;
 		const submissionId = submissionIds.length === 1 ? submissionIds[0] : void 0;
-		if (state.context !== void 0 && submissionId !== void 0 && !submissionId.includes(":") && (journalOwner === void 0 || journalOwner === runIdForSubmission(submissionId))) {
+		if (state.context !== void 0 && submissionId !== void 0 && submissionId.length === state.submissionId.length && (journalOwner === void 0 || journalOwner === runIdForSubmission(submissionId))) {
 			const runId = runIdForSubmission(submissionId);
 			if ([yield* getRunInput({
 				threadId,
@@ -2636,16 +2637,17 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 			seed: state.seed
 		};
 	});
-	const persistRecoveryCheckpoint = Effect.fn("DurableAgentRuntime.persistRecoveryCheckpoint")(function* (ctx, submission, state, tail, createdAt) {
-		if (store.recoveryCheckpoints === void 0) return;
+	const encodeRecoveryCheckpoint = Effect.fnUntraced(function* (state) {
 		const encoded = yield* Schema.encodeEffect(RecoveryCheckpointState)(state).pipe(Effect.option);
-		if (Option.isNone(encoded)) return;
+		if (Option.isNone(encoded)) return Option.none();
 		const digest = yield* withCrypto(digestJson(encoded.value));
-		const contents = yield* Schema.encodeEffect(Schema.fromJsonString(RecoveryCheckpointContents))(RecoveryCheckpointContents.make({
+		return yield* Schema.encodeEffect(Schema.fromJsonString(RecoveryCheckpointContents))(RecoveryCheckpointContents.make({
 			state,
 			digest
 		})).pipe(Effect.flatMap(Schema.decodeUnknownEffect(Schema.fromJsonString(PersistedJson))), Effect.option);
-		if (Option.isNone(contents)) return;
+	});
+	const persistRecoveryCheckpoint = Effect.fn("DurableAgentRuntime.persistRecoveryCheckpoint")(function* (ctx, submission, contents, tail, createdAt) {
+		if (store.recoveryCheckpoints === void 0) return;
 		const checkpoint = ThreadCheckpoint.make({
 			schemaVersion: 1,
 			threadId: ctx.threadId,
@@ -2655,7 +2657,7 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 			agentDefinitionDigest: submission.agentDigests.agent,
 			modelDigest: submission.agentDigests.model,
 			toolDigest: submission.agentDigests.tools,
-			state: contents.value,
+			state: contents,
 			createdAt
 		});
 		yield* hit("checkpoint:before-save");
@@ -2680,7 +2682,7 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 		}
 		if (projection === void 0) {
 			const source = canonicalRange(ctx.threadId, tail.sequence);
-			const certificate = makeThreadContextCertificate();
+			const certificate = makeThreadContextCertificate(runIdForSubmission(submission.submissionId).length);
 			const metadata = makeJournalMetadata(void 0);
 			const retained = [];
 			yield* Stream.runForEach(source, (entry) => Effect.sync(() => {
@@ -2695,30 +2697,32 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 		if (projection === void 0) return;
 		const prompt = yield* Schema.encodeEffect(Prompt.Prompt)(projection.prompt).pipe(Effect.flatMap(decodePersisted), Effect.option);
 		if (Option.isNone(prompt)) return;
-		let seed;
-		let records = identities;
-		let submissionIds = [submission.submissionId];
-		if (previous.state.submissionId === submission.submissionId && previous.state.seed !== void 0 && tail.sequence - previous.checkpoint.throughSequence + previous.state.records.length <= 4096) {
-			const suffix = yield* Stream.runCollect(canonicalRange(ctx.threadId, tail.sequence, previous.checkpoint.throughSequence));
-			if (checkpointSuffixCompatible(previous.state.seed, suffix, previous.state.records)) {
-				seed = previous.state.seed;
-				records = [...previous.state.records, ...suffix];
-				submissionIds = previous.state.submissionIds;
-			}
-		}
-		yield* persistRecoveryCheckpoint(ctx, submission, RecoveryCheckpointState.make({
+		const contextState = RecoveryCheckpointState.make({
 			schemaVersion: 2,
 			policyAccountingVersion: 1,
 			submissionId: submission.submissionId,
-			submissionIds,
-			...seed === void 0 ? {} : { seed },
+			submissionIds: [submission.submissionId],
 			context: ThreadContextCheckpoint.make({
 				throughSequence: tail.sequence,
 				prompt: prompt.value,
 				...projection.contextWindowId === void 0 ? {} : { contextWindowId: projection.contextWindowId }
 			}),
-			records
-		}), tail, yield* DateTime.now);
+			records: identities
+		});
+		let state = contextState;
+		if (previous.state.submissionId === submission.submissionId && previous.state.seed !== void 0 && tail.sequence - previous.checkpoint.throughSequence + previous.state.records.length <= 4096) {
+			const suffix = yield* Stream.runCollect(canonicalRange(ctx.threadId, tail.sequence, previous.checkpoint.throughSequence));
+			if (checkpointSuffixCompatible(previous.state.seed, suffix, previous.state.records)) state = RecoveryCheckpointState.make({
+				...contextState,
+				seed: previous.state.seed,
+				records: [...previous.state.records, ...suffix],
+				submissionIds: previous.state.submissionIds
+			});
+		}
+		let contents = yield* encodeRecoveryCheckpoint(state);
+		if (Option.isNone(contents) && state.seed !== void 0) contents = yield* encodeRecoveryCheckpoint(contextState);
+		if (Option.isNone(contents)) return;
+		yield* persistRecoveryCheckpoint(ctx, submission, contents.value, tail, yield* DateTime.now);
 	});
 	const readAllTolerant = Effect.fn("DurableAgentRuntime.readAllTolerant")((threadId, submissionIds) => readControl(threadId, submissionIds).pipe(Effect.map((records) => ({
 		records,
@@ -4451,7 +4455,9 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 			].some((field) => current.usage[field] !== candidate.usage[field]) || (current.usage.unobservedModelCalls ?? 0) !== (candidate.usage.unobservedModelCalls ?? 0)) return;
 			const summaries = yield* Effect.forEach([current, candidate], (projection) => summarizeModelUsage(projection.usage.modelUsage, projection.usage.summarizedModelUsage)).pipe(Effect.option);
 			if (Option.isNone(summaries) || summaries.value[0] === void 0 || summaries.value[1] === void 0 || !Schema.toEquivalence(RunUsageSummary)(summaries.value[0], summaries.value[1])) return;
-			yield* persistRecoveryCheckpoint(ctx, submission, validated.value, tail, replacement.record.createdAt);
+			const contents = yield* encodeRecoveryCheckpoint(validated.value);
+			if (Option.isNone(contents)) return;
+			yield* persistRecoveryCheckpoint(ctx, submission, contents.value, tail, replacement.record.createdAt);
 		});
 		const childLineage = records.find(({ record }) => record.recordId === subagentLineageRecordId(submission.threadId))?.record.payload;
 		const inheritedGrant = submission.workerAdmission?.origin.grant ?? (childLineage?._tag === "SubagentLineageRecorded" ? childLineage.grant : void 0);
@@ -7504,4 +7510,4 @@ var DurableAgentRuntime = class DurableAgentRuntime extends Context.Service()("@
 //#endregion
 export { DurableApprovalSuspension as a, RecoveryFailure as c, childReservationIdFor as d, isolateRecovery as f, DurableApprovalResolver as i, RecoveryReport as l, recoveryRepairRecordId as m, DurableAgentRuntime as n, DurableRuntimeConfig as o, recoveryRepairBatchId as p, DurableAgentRuntime_exports as r, RecoveryBlocked as s, ApprovalSuspensionError as t, RecoverySweepResult as u };
 
-//# sourceMappingURL=DurableAgentRuntime-pr7cCaZw.mjs.map
+//# sourceMappingURL=DurableAgentRuntime-BpB5rBcu.mjs.map