effect-agent 0.1.0-beta.85 → 0.1.0-beta.87

package/package.json

@@ -1 +1 @@
-{"name":"effect-agent","version":"0.1.0-beta.85","dependencies":{"@effect-agent/capabilities":"0.1.0-beta.85","@effect-agent/core":"0.1.0-beta.85","@effect-agent/engine":"0.1.0-beta.85"},"devDependencies":{"effect":"4.0.0-rc.112","typescript":"7.0.2","vite-plus":"0.3.0"},"peerDependencies":{"effect":"^4.0.0-rc.112"},"exports":{".":{"types":"./dist/index.d.mts","default":"./dist/index.mjs"},"./Agent":{"types":"./dist/Agent.d.mts","default":"./dist/Agent.mjs"},"./AgentError":{"types":"./dist/AgentError.d.mts","default":"./dist/AgentError.mjs"},"./AgentPolicy":{"types":"./dist/AgentPolicy.d.mts","default":"./dist/AgentPolicy.mjs"},"./AgentRuntime":{"types":"./dist/AgentRuntime.d.mts","default":"./dist/AgentRuntime.mjs"},"./Approval":{"types":"./dist/Approval.d.mts","default":"./dist/Approval.mjs"},"./Budget":{"types":"./dist/Budget.d.mts","default":"./dist/Budget.mjs"},"./CodeMode":{"types":"./dist/CodeMode.d.mts","default":"./dist/CodeMode.mjs"},"./Commands":{"types":"./dist/Commands.d.mts","default":"./dist/Commands.mjs"},"./Compaction":{"types":"./dist/Compaction.d.mts","default":"./dist/Compaction.mjs"},"./ContextCompactor":{"types":"./dist/ContextCompactor.d.mts","default":"./dist/ContextCompactor.mjs"},"./DurableStep":{"types":"./dist/DurableStep.d.mts","default":"./dist/DurableStep.mjs"},"./EphemeralThreads":{"types":"./dist/EphemeralThreads.d.mts","default":"./dist/EphemeralThreads.mjs"},"./Identifiers":{"types":"./dist/Identifiers.d.mts","default":"./dist/Identifiers.mjs"},"./IdGenerator":{"types":"./dist/IdGenerator.d.mts","default":"./dist/IdGenerator.mjs"},"./Mcp":{"types":"./dist/Mcp.d.mts","default":"./dist/Mcp.mjs"},"./McpClient":{"types":"./dist/McpClient.d.mts","default":"./dist/McpClient.mjs"},"./Memory":{"types":"./dist/Memory.d.mts","default":"./dist/Memory.mjs"},"./MemoryNamespace":{"types":"./dist/MemoryNamespace.d.mts","default":"./dist/MemoryNamespace.mjs"},"./MemoryReference":{"types":"./dist/MemoryReference.d.mts","default":"./dist/MemoryReference.mjs"},"./MemoryRevalidation":{"types":"./dist/MemoryRevalidation.d.mts","default":"./dist/MemoryRevalidation.mjs"},"./MemoryStore":{"types":"./dist/MemoryStore.d.mts","default":"./dist/MemoryStore.mjs"},"./ModelContext":{"types":"./dist/ModelContext.d.mts","default":"./dist/ModelContext.mjs"},"./Redaction":{"types":"./dist/Redaction.d.mts","default":"./dist/Redaction.mjs"},"./Remembering":{"types":"./dist/Remembering.d.mts","default":"./dist/Remembering.mjs"},"./RememberingStore":{"types":"./dist/RememberingStore.d.mts","default":"./dist/RememberingStore.mjs"},"./RunEvent":{"types":"./dist/RunEvent.d.mts","default":"./dist/RunEvent.mjs"},"./RunEventSink":{"types":"./dist/RunEventSink.d.mts","default":"./dist/RunEventSink.mjs"},"./RunHooks":{"types":"./dist/RunHooks.d.mts","default":"./dist/RunHooks.mjs"},"./RunOptions":{"types":"./dist/RunOptions.d.mts","default":"./dist/RunOptions.mjs"},"./RunPolicyUsage":{"types":"./dist/RunPolicyUsage.d.mts","default":"./dist/RunPolicyUsage.mjs"},"./SemanticMemory":{"types":"./dist/SemanticMemory.d.mts","default":"./dist/SemanticMemory.mjs"},"./SemanticMemoryIndex":{"types":"./dist/SemanticMemoryIndex.d.mts","default":"./dist/SemanticMemoryIndex.mjs"},"./SemanticMemoryRevalidation":{"types":"./dist/SemanticMemoryRevalidation.d.mts","default":"./dist/SemanticMemoryRevalidation.mjs"},"./Subagent":{"types":"./dist/Subagent.d.mts","default":"./dist/Subagent.mjs"},"./SubagentHost":{"types":"./dist/SubagentHost.d.mts","default":"./dist/SubagentHost.mjs"},"./Messaging":{"types":"./dist/Messaging.d.mts","default":"./dist/Messaging.mjs"},"./MessagingHost":{"types":"./dist/MessagingHost.d.mts","default":"./dist/MessagingHost.mjs"},"./Worker":{"types":"./dist/Worker.d.mts","default":"./dist/Worker.mjs"},"./Receipt":{"types":"./dist/Receipt.d.mts","default":"./dist/Receipt.mjs"},"./SubagentContract":{"types":"./dist/SubagentContract.d.mts","default":"./dist/SubagentContract.mjs"},"./SubagentReservations":{"types":"./dist/SubagentReservations.d.mts","default":"./dist/SubagentReservations.mjs"},"./ThreadHistory":{"types":"./dist/ThreadHistory.d.mts","default":"./dist/ThreadHistory.mjs"},"./ToolBroker":{"types":"./dist/ToolBroker.d.mts","default":"./dist/ToolBroker.mjs"},"./ToolDiscovery":{"types":"./dist/ToolDiscovery.d.mts","default":"./dist/ToolDiscovery.mjs"},"./ToolExposure":{"types":"./dist/ToolExposure.d.mts","default":"./dist/ToolExposure.mjs"},"./ToolResult":{"types":"./dist/ToolResult.d.mts","default":"./dist/ToolResult.mjs"},"./Usage":{"types":"./dist/Usage.d.mts","default":"./dist/Usage.mjs"},"./WebCapture":{"types":"./dist/WebCapture.d.mts","default":"./dist/WebCapture.mjs"},"./ContextWindow":{"types":"./dist/ContextWindow.d.mts","default":"./dist/ContextWindow.mjs"},"./ContextHistory":{"types":"./dist/ContextHistory.d.mts","default":"./dist/ContextHistory.mjs"},"./ContextTools":{"types":"./dist/ContextTools.d.mts","default":"./dist/ContextTools.mjs"},"./MemoryNotes":{"types":"./dist/MemoryNotes.d.mts","default":"./dist/MemoryNotes.mjs"},"./WebSearch":{"types":"./dist/WebSearch.d.mts","default":"./dist/WebSearch.mjs"},"./AgentUpdates":{"types":"./dist/AgentUpdates.d.mts","default":"./dist/AgentUpdates.mjs"}},"description":"Effect-native autonomous agents: the complete pure authoring and running surface of the Effect Agent framework in one package — schema-first definitions, the bounded interpreter, and operational capabilities.","license":"MIT","repository":{"type":"git","url":"git+https://github.com/danieljvdm/effect-agent.git","directory":"packages/effect-agent"},"files":["dist","src"],"type":"module","sideEffects":[],"publishConfig":{"access":"public"},"scripts":{"build":"vp pack","check":"tsc --noEmit -p tsconfig.json","test":"vp test --passWithNoTests"}}
+{"name":"effect-agent","version":"0.1.0-beta.87","devDependencies":{"@effect/platform-node":"4.0.0-rc.112","@effect/vitest":"4.0.0-rc.112","effect":"4.0.0-rc.112","typescript":"7.0.2","vite-plus":"0.3.0"},"peerDependencies":{"effect":"^4.0.0-rc.112"},"exports":{".":{"types":"./dist/index.d.mts","default":"./dist/index.mjs"},"./activity-store":{"types":"./dist/durable/ActivityStore.d.mts","default":"./dist/durable/ActivityStore.mjs"},"./admin":{"types":"./dist/durable/Admin.d.mts","default":"./dist/durable/Admin.mjs"},"./agent":{"types":"./dist/core/Agent.d.mts","default":"./dist/core/Agent.mjs"},"./agent-error":{"types":"./dist/core/AgentError.d.mts","default":"./dist/core/AgentError.mjs"},"./agent-policy":{"types":"./dist/core/AgentPolicy.d.mts","default":"./dist/core/AgentPolicy.mjs"},"./agent-registration":{"types":"./dist/durable/AgentRegistration.d.mts","default":"./dist/durable/AgentRegistration.mjs"},"./agent-runtime":{"types":"./dist/engine/AgentRuntime.d.mts","default":"./dist/engine/AgentRuntime.mjs"},"./agent-updates":{"types":"./dist/core/AgentUpdates.d.mts","default":"./dist/core/AgentUpdates.mjs"},"./approval":{"types":"./dist/capabilities/Approval.d.mts","default":"./dist/capabilities/Approval.mjs"},"./budget":{"types":"./dist/capabilities/Budget.d.mts","default":"./dist/capabilities/Budget.mjs"},"./code-executor":{"types":"./dist/sandbox/CodeExecutor.d.mts","default":"./dist/sandbox/CodeExecutor.mjs"},"./code-mode":{"types":"./dist/capabilities/CodeMode.d.mts","default":"./dist/capabilities/CodeMode.mjs"},"./commands":{"types":"./dist/capabilities/Commands.d.mts","default":"./dist/capabilities/Commands.mjs"},"./committed-activity":{"types":"./dist/durable/CommittedActivity.d.mts","default":"./dist/durable/CommittedActivity.mjs"},"./compaction":{"types":"./dist/engine/Compaction.d.mts","default":"./dist/engine/Compaction.mjs"},"./context-compactor":{"types":"./dist/engine/ContextCompactor.d.mts","default":"./dist/engine/ContextCompactor.mjs"},"./context-history":{"types":"./dist/engine/ContextHistory.d.mts","default":"./dist/engine/ContextHistory.mjs"},"./context-tools":{"types":"./dist/capabilities/ContextTools.d.mts","default":"./dist/capabilities/ContextTools.mjs"},"./context-window":{"types":"./dist/engine/ContextWindow.d.mts","default":"./dist/engine/ContextWindow.mjs"},"./digest":{"types":"./dist/durable/Digest.d.mts","default":"./dist/durable/Digest.mjs"},"./durable-agent-runtime":{"types":"./dist/durable/DurableAgentRuntime.d.mts","default":"./dist/durable/DurableAgentRuntime.mjs"},"./durable-failpoint":{"types":"./dist/durable/DurableFailpoint.d.mts","default":"./dist/durable/DurableFailpoint.mjs"},"./durable-step":{"types":"./dist/engine/DurableStep.d.mts","default":"./dist/engine/DurableStep.mjs"},"./ephemeral":{"types":"./dist/Ephemeral.d.mts","default":"./dist/Ephemeral.mjs"},"./event-source":{"types":"./dist/durable/EventSource.d.mts","default":"./dist/durable/EventSource.mjs"},"./git-hub-workflow-source":{"types":"./dist/durable/GitHubWorkflowSource.d.mts","default":"./dist/durable/GitHubWorkflowSource.mjs"},"./id-generator":{"types":"./dist/core/IdGenerator.d.mts","default":"./dist/core/IdGenerator.mjs"},"./identifiers":{"types":"./dist/core/Identifiers.d.mts","default":"./dist/core/Identifiers.mjs"},"./interactive-browser":{"types":"./dist/sandbox/InteractiveBrowser.d.mts","default":"./dist/sandbox/InteractiveBrowser.mjs"},"./mcp":{"types":"./dist/capabilities/Mcp.d.mts","default":"./dist/capabilities/Mcp.mjs"},"./mcp-client":{"types":"./dist/capabilities/McpClient.d.mts","default":"./dist/capabilities/McpClient.mjs"},"./memory":{"types":"./dist/core/Memory.d.mts","default":"./dist/core/Memory.mjs"},"./memory-namespace":{"types":"./dist/core/MemoryNamespace.d.mts","default":"./dist/core/MemoryNamespace.mjs"},"./memory-notes":{"types":"./dist/capabilities/MemoryNotes.d.mts","default":"./dist/capabilities/MemoryNotes.mjs"},"./memory-reference":{"types":"./dist/core/MemoryReference.d.mts","default":"./dist/core/MemoryReference.mjs"},"./memory-revalidation":{"types":"./dist/core/MemoryRevalidation.d.mts","default":"./dist/core/MemoryRevalidation.mjs"},"./memory-store":{"types":"./dist/core/MemoryStore.d.mts","default":"./dist/core/MemoryStore.mjs"},"./message-delivery":{"types":"./dist/durable/MessageDelivery.d.mts","default":"./dist/durable/MessageDelivery.mjs"},"./messaging":{"types":"./dist/capabilities/Messaging.d.mts","default":"./dist/capabilities/Messaging.mjs"},"./messaging-host":{"types":"./dist/engine/MessagingHost.d.mts","default":"./dist/engine/MessagingHost.mjs"},"./model-context":{"types":"./dist/capabilities/ModelContext.d.mts","default":"./dist/capabilities/ModelContext.mjs"},"./operation-authorizer":{"types":"./dist/durable/OperationAuthorizer.d.mts","default":"./dist/durable/OperationAuthorizer.mjs"},"./output":{"types":"./dist/engine/Output.d.mts","default":"./dist/engine/Output.mjs"},"./page-capture":{"types":"./dist/sandbox/PageCapture.d.mts","default":"./dist/sandbox/PageCapture.mjs"},"./page-crawl":{"types":"./dist/sandbox/PageCrawl.d.mts","default":"./dist/sandbox/PageCrawl.mjs"},"./page-screenshot":{"types":"./dist/sandbox/PageScreenshot.d.mts","default":"./dist/sandbox/PageScreenshot.mjs"},"./persistent-history":{"types":"./dist/durable/PersistentHistory.d.mts","default":"./dist/durable/PersistentHistory.mjs"},"./prepared-input-admission":{"types":"./dist/durable/PreparedInputAdmission.d.mts","default":"./dist/durable/PreparedInputAdmission.mjs"},"./protected-browser":{"types":"./dist/sandbox/ProtectedBrowser.d.mts","default":"./dist/sandbox/ProtectedBrowser.mjs"},"./receipt":{"types":"./dist/core/Receipt.d.mts","default":"./dist/core/Receipt.mjs"},"./records":{"types":"./dist/durable/Records.d.mts","default":"./dist/durable/Records.mjs"},"./recovery":{"types":"./dist/durable/Recovery.d.mts","default":"./dist/durable/Recovery.mjs"},"./redaction":{"types":"./dist/capabilities/Redaction.d.mts","default":"./dist/capabilities/Redaction.mjs"},"./remembering":{"types":"./dist/capabilities/Remembering.d.mts","default":"./dist/capabilities/Remembering.mjs"},"./remembering-store":{"types":"./dist/core/RememberingStore.d.mts","default":"./dist/core/RememberingStore.mjs"},"./run-event":{"types":"./dist/core/RunEvent.d.mts","default":"./dist/core/RunEvent.mjs"},"./run-event-sink":{"types":"./dist/engine/RunEventSink.d.mts","default":"./dist/engine/RunEventSink.mjs"},"./run-hooks":{"types":"./dist/capabilities/RunHooks.d.mts","default":"./dist/capabilities/RunHooks.mjs"},"./run-journal":{"types":"./dist/durable/RunJournal.d.mts","default":"./dist/durable/RunJournal.mjs"},"./run-options":{"types":"./dist/engine/RunOptions.d.mts","default":"./dist/engine/RunOptions.mjs"},"./run-policy-usage":{"types":"./dist/core/RunPolicyUsage.d.mts","default":"./dist/core/RunPolicyUsage.mjs"},"./sandbox":{"types":"./dist/sandbox/Sandbox.d.mts","default":"./dist/sandbox/Sandbox.mjs"},"./schedule":{"types":"./dist/durable/Schedule.d.mts","default":"./dist/durable/Schedule.mjs"},"./schedule-transition":{"types":"./dist/durable/ScheduleTransition.d.mts","default":"./dist/durable/ScheduleTransition.mjs"},"./scheduling":{"types":"./dist/durable/Scheduling.d.mts","default":"./dist/durable/Scheduling.mjs"},"./semantic-memory":{"types":"./dist/capabilities/SemanticMemory.d.mts","default":"./dist/capabilities/SemanticMemory.mjs"},"./semantic-memory-index":{"types":"./dist/core/SemanticMemoryIndex.d.mts","default":"./dist/core/SemanticMemoryIndex.mjs"},"./semantic-memory-revalidation":{"types":"./dist/core/SemanticMemoryRevalidation.d.mts","default":"./dist/core/SemanticMemoryRevalidation.mjs"},"./sql-memory-store":{"types":"./dist/durable/SqlMemoryStore.d.mts","default":"./dist/durable/SqlMemoryStore.mjs"},"./sql-message-delivery-store":{"types":"./dist/durable/SqlMessageDeliveryStore.d.mts","default":"./dist/durable/SqlMessageDeliveryStore.mjs"},"./sql-storage-v2-upgrade":{"types":"./dist/durable/SqlStorageV2Upgrade.d.mts","default":"./dist/durable/SqlStorageV2Upgrade.mjs"},"./sql-subscription-store":{"types":"./dist/durable/SqlSubscriptionStore.d.mts","default":"./dist/durable/SqlSubscriptionStore.mjs"},"./subagent":{"types":"./dist/capabilities/Subagent.d.mts","default":"./dist/capabilities/Subagent.mjs"},"./subagent-contract":{"types":"./dist/core/SubagentContract.d.mts","default":"./dist/core/SubagentContract.mjs"},"./subagent-host":{"types":"./dist/engine/SubagentHost.d.mts","default":"./dist/engine/SubagentHost.mjs"},"./subagent-reservations":{"types":"./dist/capabilities/SubagentReservations.d.mts","default":"./dist/capabilities/SubagentReservations.mjs"},"./submission-ledger":{"types":"./dist/durable/SubmissionLedger.d.mts","default":"./dist/durable/SubmissionLedger.mjs"},"./submission-status":{"types":"./dist/durable/SubmissionStatus.d.mts","default":"./dist/durable/SubmissionStatus.mjs"},"./subscription":{"types":"./dist/durable/Subscription.d.mts","default":"./dist/durable/Subscription.mjs"},"./subscription-input":{"types":"./dist/durable/SubscriptionInput.d.mts","default":"./dist/durable/SubscriptionInput.mjs"},"./subscription-tools":{"types":"./dist/durable/SubscriptionTools.d.mts","default":"./dist/durable/SubscriptionTools.mjs"},"./subscription-transition":{"types":"./dist/durable/SubscriptionTransition.d.mts","default":"./dist/durable/SubscriptionTransition.mjs"},"./subscriptions":{"types":"./dist/durable/Subscriptions.d.mts","default":"./dist/durable/Subscriptions.mjs"},"./testing/certification":{"types":"./dist/durable/Certification.d.mts","default":"./dist/durable/Certification.mjs"},"./testing/durable-failpoint-test-control":{"types":"./dist/durable/DurableFailpointTestControl.d.mts","default":"./dist/durable/DurableFailpointTestControl.mjs"},"./testing/message-delivery-store-conformance":{"types":"./dist/durable/MessageDeliveryStoreConformance.d.mts","default":"./dist/durable/MessageDeliveryStoreConformance.mjs"},"./testing/schedule-store-conformance":{"types":"./dist/durable/ScheduleStoreConformance.d.mts","default":"./dist/durable/ScheduleStoreConformance.mjs"},"./testing/submission-ledger-conformance":{"types":"./dist/durable/SubmissionLedgerConformance.d.mts","default":"./dist/durable/SubmissionLedgerConformance.mjs"},"./testing/subscription-store-conformance":{"types":"./dist/durable/SubscriptionStoreConformance.d.mts","default":"./dist/durable/SubscriptionStoreConformance.mjs"},"./testing/thread-store-conformance":{"types":"./dist/durable/ThreadStoreConformance.d.mts","default":"./dist/durable/ThreadStoreConformance.mjs"},"./thread":{"types":"./dist/core/Thread.d.mts","default":"./dist/core/Thread.mjs"},"./thread-context-history":{"types":"./dist/durable/ThreadContextHistory.d.mts","default":"./dist/durable/ThreadContextHistory.mjs"},"./thread-context-history-projection":{"types":"./dist/durable/ThreadContextHistoryProjection.d.mts","default":"./dist/durable/ThreadContextHistoryProjection.mjs"},"./thread-history":{"types":"./dist/engine/ThreadHistory.d.mts","default":"./dist/engine/ThreadHistory.mjs"},"./thread-invariants":{"types":"./dist/durable/ThreadInvariants.d.mts","default":"./dist/durable/ThreadInvariants.mjs"},"./thread-projection":{"types":"./dist/durable/ThreadProjection.d.mts","default":"./dist/durable/ThreadProjection.mjs"},"./thread-projection-maintenance":{"types":"./dist/durable/ThreadProjectionMaintenance.d.mts","default":"./dist/durable/ThreadProjectionMaintenance.mjs"},"./thread-store":{"types":"./dist/durable/ThreadStore.d.mts","default":"./dist/durable/ThreadStore.mjs"},"./tool-broker":{"types":"./dist/engine/ToolBroker.d.mts","default":"./dist/engine/ToolBroker.mjs"},"./tool-discovery":{"types":"./dist/capabilities/ToolDiscovery.d.mts","default":"./dist/capabilities/ToolDiscovery.mjs"},"./tool-exposure":{"types":"./dist/ToolExposure.d.mts","default":"./dist/ToolExposure.mjs"},"./tool-reconciler":{"types":"./dist/durable/ToolReconciler.d.mts","default":"./dist/durable/ToolReconciler.mjs"},"./tool-result":{"types":"./dist/core/ToolResult.d.mts","default":"./dist/core/ToolResult.mjs"},"./usage":{"types":"./dist/core/Usage.d.mts","default":"./dist/core/Usage.mjs"},"./wake-scheduler":{"types":"./dist/durable/WakeScheduler.d.mts","default":"./dist/durable/WakeScheduler.mjs"},"./web-capture":{"types":"./dist/capabilities/WebCapture.d.mts","default":"./dist/capabilities/WebCapture.mjs"},"./web-search":{"types":"./dist/capabilities/WebSearch.d.mts","default":"./dist/capabilities/WebSearch.mjs"},"./worker":{"types":"./dist/core/Worker.d.mts","default":"./dist/core/Worker.mjs"},"./worker-host":{"types":"./dist/durable/WorkerHost.d.mts","default":"./dist/durable/WorkerHost.mjs"}},"description":"Effect-native agents, execution, subagents, and sandbox contracts in one tree-shakeable package.","license":"MIT","repository":{"type":"git","url":"git+https://github.com/danieljvdm/effect-agent.git","directory":"packages/effect-agent"},"files":["dist","src"],"type":"module","sideEffects":[],"publishConfig":{"access":"public"},"scripts":{"build":"vp pack","check":"tsc --noEmit -p tsconfig.json","test":"vp test --passWithNoTests"}}

package/src/Ephemeral.ts

@@ -0,0 +1,17 @@
+import { Layer } from "effect";
+
+import { SubagentReservationsMemoryLive } from "./capabilities/SubagentReservations.ts";
+import { layer as historyLayer } from "./engine/ThreadHistory.ts";
+
+/**
+ * Run agents and attached subagents with in-memory conversation history.
+ * Provide once around the parent program and all child handler Layers so siblings
+ * share history and one reservation ledger. Reuse a Thread ID to continue a conversation.
+ * Each independent Layer build owns fresh state; state is released when its Scope closes.
+ *
+ * Models, tool handlers, and provider clients remain application-supplied. Default
+ * IDs need no Layer; enclosing ID and context-preparation overrides are preserved.
+ * For storage-backed history, provide PersistentHistory.layer and a shared
+ * SubagentReservationsMemoryLive instead. Durable hosts own their own assembly.
+ */
+export const layer = Layer.merge(historyLayer, SubagentReservationsMemoryLive);

package/src/ToolExposure.ts

@@ -1,2 +1,2 @@
-export * from "@effect-agent/core/ToolExposure";
-export * from "@effect-agent/engine/ToolExposure";
+export * from "./core/ToolExposure.ts";
+export * from "./engine/ToolExposure.ts";

package/src/capabilities/Approval.ts

@@ -0,0 +1,352 @@
+import { Clock, Context, DateTime, Duration, Effect, Layer, Ref, Schema } from "effect";
+
+import { ThreadId, RunId, ToolCallId } from "../core/Identifiers.ts";
+import { utf8ByteLength } from "../core/internal/utf8.ts";
+import { RedactedPreview, Redactor, type RedactionError } from "./Redaction.ts";
+
+const MAX_APPROVAL_TARGETS = 32;
+const MAX_APPROVAL_TARGET_BYTES = 64 * 1024;
+const MAX_APPROVAL_AUDIT_EVENTS = 2_048;
+
+const ApprovalTargets = Schema.Array(Schema.String.check(Schema.isMaxLength(2 * 1024)))
+  .check(Schema.isMaxLength(MAX_APPROVAL_TARGETS))
+  .pipe(
+    Schema.refine(
+      (targets): targets is ReadonlyArray<string> =>
+        targets.reduce((total, target) => total + utf8ByteLength(target), 0) <=
+        MAX_APPROVAL_TARGET_BYTES,
+      { expected: `approval targets totaling at most ${MAX_APPROVAL_TARGET_BYTES} UTF-8 bytes` },
+    ),
+  );
+
+const ApprovalRequestFields = {
+  requestId: Schema.NonEmptyString,
+  runId: RunId,
+  threadId: ThreadId,
+  toolCallId: ToolCallId,
+  toolName: Schema.NonEmptyString,
+  actionSummary: Schema.String.check(Schema.isMaxLength(2 * 1024)),
+  resourceTargets: ApprovalTargets,
+  risk: Schema.Literals(["low", "medium", "high", "critical"]),
+  expiresAt: Schema.DateTimeUtcFromString,
+  denial: Schema.Literals(["terminal", "recoverable"]),
+} as const;
+
+/** Decoded approval metadata before the Redactor owns Tool input preview creation. */
+export class ApprovalRequestDraft extends Schema.Class<ApprovalRequestDraft>(
+  "@effect-agent/capabilities/ApprovalRequestDraft",
+)(ApprovalRequestFields) {}
+
+/** Fully decoded, structurally redacted approval input. */
+export class ApprovalRequest extends Schema.Class<ApprovalRequest>(
+  "@effect-agent/capabilities/ApprovalRequest",
+)({
+  ...ApprovalRequestFields,
+  redactedInputPreview: RedactedPreview,
+}) {}
+
+export class ApprovalApproved extends Schema.TaggedClass<ApprovalApproved>()("ApprovalApproved", {
+  requestId: Schema.NonEmptyString,
+  decidedAt: Schema.DateTimeUtcFromString,
+  resolver: Schema.NonEmptyString,
+}) {}
+
+export class ApprovalDenied extends Schema.TaggedClass<ApprovalDenied>()("ApprovalDenied", {
+  requestId: Schema.NonEmptyString,
+  decidedAt: Schema.DateTimeUtcFromString,
+  resolver: Schema.NonEmptyString,
+  reason: Schema.String.check(Schema.isMaxLength(2 * 1024)),
+  timedOut: Schema.Boolean,
+}) {}
+
+export const ApprovalDecision = Schema.Union([ApprovalApproved, ApprovalDenied]);
+export type ApprovalDecision = typeof ApprovalDecision.Type;
+
+/** Resolver infrastructure failed before it could make a policy decision. */
+export class ApprovalResolverError extends Schema.TaggedError<ApprovalResolverError>()(
+  "ApprovalResolverError",
+  { message: Schema.String },
+) {}
+
+/** The resolver explicitly observed its request deadline; callers turn this into a denial. */
+export class ApprovalTimedOut extends Schema.TaggedError<ApprovalTimedOut>()("ApprovalTimedOut", {
+  requestId: Schema.NonEmptyString,
+}) {}
+
+/** First-class approval authority. Interactive, policy, and remote adapters implement this service. */
+export class ApprovalResolver extends Context.Service<
+  ApprovalResolver,
+  {
+    readonly request: (
+      request: ApprovalRequest,
+    ) => Effect.Effect<ApprovalDecision, ApprovalResolverError | ApprovalTimedOut>;
+  }
+>()("@effect-agent/capabilities/ApprovalResolver") {}
+
+export class ApprovalRequestRecorded extends Schema.TaggedClass<ApprovalRequestRecorded>()(
+  "ApprovalRequestRecorded",
+  {
+    sequence: Schema.Natural,
+    recordedAt: Schema.DateTimeUtcFromString,
+    request: ApprovalRequest,
+  },
+) {}
+
+export class ApprovalDecisionRecorded extends Schema.TaggedClass<ApprovalDecisionRecorded>()(
+  "ApprovalDecisionRecorded",
+  {
+    sequence: Schema.Natural,
+    recordedAt: Schema.DateTimeUtcFromString,
+    decision: ApprovalDecision,
+  },
+) {}
+
+export const ApprovalAuditEvent = Schema.Union([ApprovalRequestRecorded, ApprovalDecisionRecorded]);
+export type ApprovalAuditEvent = typeof ApprovalAuditEvent.Type;
+
+export const ApprovalAuditEvents = Schema.Array(ApprovalAuditEvent).check(
+  Schema.isMaxLength(MAX_APPROVAL_AUDIT_EVENTS),
+);
+
+export class ApprovalAuditLimitExceeded extends Schema.TaggedError<ApprovalAuditLimitExceeded>()(
+  "ApprovalAuditLimitExceeded",
+  {
+    limitValue: Schema.Natural,
+    observedValue: Schema.Natural,
+  },
+) {}
+
+/** A resolver or audit sink tried to associate a decision with another request. */
+export class ApprovalDecisionMismatch extends Schema.TaggedError<ApprovalDecisionMismatch>()(
+  "ApprovalDecisionMismatch",
+  {
+    expectedRequestId: Schema.NonEmptyString,
+    observedRequestId: Schema.NonEmptyString,
+  },
+) {}
+
+/** P2 semantic audit sink; durable runtimes replace this with canonical records. */
+export class ApprovalAudit extends Context.Service<
+  ApprovalAudit,
+  {
+    readonly recordRequest: (
+      request: ApprovalRequest,
+    ) => Effect.Effect<void, ApprovalAuditLimitExceeded>;
+    readonly recordDecision: (
+      decision: ApprovalDecision,
+    ) => Effect.Effect<void, ApprovalAuditLimitExceeded | ApprovalDecisionMismatch>;
+    readonly events: Effect.Effect<ReadonlyArray<ApprovalAuditEvent>>;
+  }
+>()("@effect-agent/capabilities/ApprovalAudit") {}
+
+/** Scoped in-memory audit projection with monotonic event order. */
+export const ApprovalAuditMemoryLive = Layer.effect(
+  ApprovalAudit,
+  Effect.gen(function* () {
+    interface AuditState {
+      readonly events: ReadonlyArray<ApprovalAuditEvent>;
+      readonly pending: ReadonlySet<string>;
+    }
+    const state = yield* Ref.make<AuditState>({ events: [], pending: new Set() });
+
+    return ApprovalAudit.of({
+      recordRequest: (request) =>
+        Effect.gen(function* () {
+          const recordedAt = DateTime.toUtc(DateTime.makeUnsafe(yield* Clock.currentTimeMillis));
+
+          const error = yield* Ref.modify(state, (current) => {
+            // Each accepted request atomically reserves room for its decision.
+            const reservedSize = current.events.length + current.pending.size + 2;
+
+            if (reservedSize > MAX_APPROVAL_AUDIT_EVENTS) {
+              return [
+                ApprovalAuditLimitExceeded.make({
+                  limitValue: MAX_APPROVAL_AUDIT_EVENTS,
+                  observedValue: reservedSize,
+                }),
+                current,
+              ] as const;
+            }
+
+            const event = ApprovalRequestRecorded.make({
+              sequence: current.events.length,
+              recordedAt,
+              request,
+            });
+
+            return [
+              undefined,
+              {
+                events: [...current.events, event],
+                pending: new Set(current.pending).add(request.requestId),
+              },
+            ] as const;
+          });
+
+          if (error !== undefined) return yield* error;
+        }),
+      recordDecision: (decision) =>
+        Effect.gen(function* () {
+          const recordedAt = DateTime.toUtc(DateTime.makeUnsafe(yield* Clock.currentTimeMillis));
+
+          const error = yield* Ref.modify(state, (current) => {
+            if (!current.pending.has(decision.requestId)) {
+              return [
+                ApprovalDecisionMismatch.make({
+                  expectedRequestId: [...current.pending][0] ?? "no-pending-request",
+                  observedRequestId: decision.requestId,
+                }),
+                current,
+              ] as const;
+            }
+            const pending = new Set(current.pending);
+
+            pending.delete(decision.requestId);
+
+            const event = ApprovalDecisionRecorded.make({
+              sequence: current.events.length,
+              recordedAt,
+              decision,
+            });
+
+            return [
+              undefined,
+              {
+                events: [...current.events, event],
+                pending,
+              },
+            ] as const;
+          });
+
+          if (error !== undefined) return yield* error;
+        }),
+      events: Ref.get(state).pipe(Effect.map((current) => current.events)),
+    });
+  }),
+);
+
+/** Construct an ApprovalRequest only after decoded input passes the configured Redactor. */
+export const makeApprovalRequest = Effect.fn("makeApprovalRequest")(function* (
+  draft: ApprovalRequestDraft,
+  decodedToolInput: unknown,
+): Effect.fn.Return<ApprovalRequest, RedactionError, Redactor> {
+  const redactor = yield* Redactor;
+  const redactedInputPreview = yield* redactor.redact(decodedToolInput);
+
+  return ApprovalRequest.make({
+    requestId: draft.requestId,
+    runId: draft.runId,
+    threadId: draft.threadId,
+    toolCallId: draft.toolCallId,
+    toolName: draft.toolName,
+    actionSummary: draft.actionSummary,
+    resourceTargets: draft.resourceTargets,
+    risk: draft.risk,
+    expiresAt: draft.expiresAt,
+    denial: draft.denial,
+    redactedInputPreview,
+  });
+});
+
+const timeoutDenial = (request: ApprovalRequest, decidedAt: DateTime.Utc): ApprovalDenied =>
+  ApprovalDenied.make({
+    requestId: request.requestId,
+    decidedAt,
+    resolver: "effect-agent.timeout-deny",
+    reason: "Approval request expired before a decision was available",
+    timedOut: true,
+  });
+
+/**
+ * Resolve with fail-closed deadline semantics and record request/decision audit
+ * events around every successful, denied, timed-out, or resolver-failed
+ * resolution. A resolver infrastructure failure records a synthetic denial so
+ * the audit reservation is released before the typed error propagates.
+ */
+export const requestApproval = Effect.fn("requestApproval")(function* (request: ApprovalRequest) {
+  const audit = yield* ApprovalAudit;
+
+  yield* audit.recordRequest(request);
+  const nowMillis = yield* Clock.currentTimeMillis;
+  const now = DateTime.toUtc(DateTime.makeUnsafe(nowMillis));
+  const remainingMillis = DateTime.toEpochMillis(request.expiresAt) - nowMillis;
+
+  let decision: ApprovalDecision;
+
+  if (remainingMillis <= 0) {
+    decision = timeoutDenial(request, now);
+  } else {
+    const resolver = yield* ApprovalResolver;
+
+    decision = yield* resolver.request(request).pipe(
+      Effect.timeoutOrElse({
+        duration: Duration.millis(remainingMillis),
+        orElse: () =>
+          Clock.currentTimeMillis.pipe(
+            Effect.map((millis) =>
+              timeoutDenial(request, DateTime.toUtc(DateTime.makeUnsafe(millis))),
+            ),
+          ),
+      }),
+      Effect.catchTag("ApprovalTimedOut", () =>
+        Clock.currentTimeMillis.pipe(
+          Effect.map((millis) =>
+            timeoutDenial(request, DateTime.toUtc(DateTime.makeUnsafe(millis))),
+          ),
+        ),
+      ),
+      Effect.tapError(() =>
+        Clock.currentTimeMillis.pipe(
+          Effect.flatMap((millis) =>
+            audit.recordDecision(
+              ApprovalDenied.make({
+                requestId: request.requestId,
+                decidedAt: DateTime.toUtc(DateTime.makeUnsafe(millis)),
+                resolver: "effect-agent.resolver-error",
+                reason: "Approval resolver failed before making a policy decision",
+                timedOut: false,
+              }),
+            ),
+          ),
+        ),
+      ),
+    );
+  }
+  if (decision.requestId !== request.requestId) {
+    const mismatch = ApprovalDecisionMismatch.make({
+      expectedRequestId: request.requestId,
+      observedRequestId: decision.requestId,
+    });
+
+    const denied = ApprovalDenied.make({
+      requestId: request.requestId,
+      decidedAt: DateTime.toUtc(DateTime.makeUnsafe(yield* Clock.currentTimeMillis)),
+      resolver: "effect-agent.correlation-check",
+      reason: "Approval resolver returned a decision for another request",
+      timedOut: false,
+    });
+
+    yield* audit.recordDecision(denied);
+
+    return yield* mismatch;
+  }
+  yield* audit.recordDecision(decision);
+
+  return decision;
+});
+
+/** Deterministic policy layer for tests and deny-by-default deployments. */
+export const ApprovalDenyAll = Layer.succeed(ApprovalResolver)({
+  request: (request) =>
+    Clock.currentTimeMillis.pipe(
+      Effect.map((millis) =>
+        ApprovalDenied.make({
+          requestId: request.requestId,
+          decidedAt: DateTime.toUtc(DateTime.makeUnsafe(millis)),
+          resolver: "effect-agent.deny-all",
+          reason: "No approving policy is configured",
+          timedOut: false,
+        }),
+      ),
+    ),
+});