effect-agent 0.1.0-beta.95 → 0.1.0-beta.97

package/dist/{DurableAgentRuntime-BaGsWDHO.mjs → DurableAgentRuntime-DbUvZHDZ.mjs}

@@ -19,12 +19,12 @@ import { getToolExecutionClass } from "./engine/DurableStep.mjs";
 import { CompactionError, ContextCompactor } from "./engine/ContextCompactor.mjs";
 import { RunPolicyUsage } from "./core/RunPolicyUsage.mjs";
 import { AgentUpdateAcceptance, CurrentToolFailureObserver, ModelUsageAccounting, RunContextPreparation, RunContextPreparationPassthrough, RunToolAuthorization, RunToolScheduling } from "./engine/RunOptions.mjs";
-import { $ as ToolStepSettled, B as SubagentRequested, E as ProducerEpoch, F as RunStartedRecord, G as ThreadCreated, H as SubmissionSettled, I as SettlementFailureDiagnostic, J as ToolCallPrepared, K as ToolApprovalDecided, O as RecordEnvelope, P as RunPolicyUsageReserved, Q as ToolCallUnknown, R as SubagentJoined, T as PersistedJson, U as SubmissionSettledRecord, V as SubagentStarted, W as SubtreeBudgetReserved, X as ToolCallResolved, Z as ToolCallSettled, at as WorkerOriginRecorded, c as CanonicalRecordEnvelope, ct as WorkerReportingIntent, d as CompactionCreated, et as UserInputRecorded, h as Digest, i as BatchId, it as WorkerOrigin, j as RepairAnnotated, k as RecordId, n as AgentUpdateEmitted, nt as WorkerInputCompleted, o as CanonicalBatch, ot as WorkerReportPrepared, p as DefinitionDigests, q as ToolApprovalRequested, rt as WorkerInputRequested, st as WorkerReportRefused, t as AbortRequested, tt as WorkerAdmission, u as CanonicalSequence, w as PeerMessagePrepared, x as ModelResponseInterrupted, z as SubagentLineageRecorded } from "./Records-CsEsSW2o.mjs";
+import { $ as ToolCallSettled, B as SubagentJoined, E as ProducerEpoch, G as SubmissionSettledRecord, H as SubagentRequested, I as RunPolicyUsageReserved, J as ToolApprovalDecided, K as SubtreeBudgetReserved, L as RunStartedRecord, O as RecordEnvelope, P as RunDurationExhausted, Q as ToolCallResolved, R as SettlementFailureDiagnostic, T as PersistedJson, U as SubagentStarted, V as SubagentLineageRecorded, W as SubmissionSettled, X as ToolCallPrepared, Y as ToolApprovalRequested, at as WorkerInputRequested, c as CanonicalRecordEnvelope, ct as WorkerReportPrepared, d as CompactionCreated, et as ToolCallUnknown, h as Digest, i as BatchId, it as WorkerInputCompleted, j as RepairAnnotated, k as RecordId, lt as WorkerReportRefused, n as AgentUpdateEmitted, nt as UserInputRecorded, o as CanonicalBatch, ot as WorkerOrigin, p as DefinitionDigests, q as ThreadCreated, rt as WorkerAdmission, st as WorkerOriginRecorded, t as AbortRequested, tt as ToolStepSettled, u as CanonicalSequence, ut as WorkerReportingIntent, w as PeerMessagePrepared, x as ModelResponseInterrupted } from "./Records-BAutSSnJ.mjs";
 import { AbortCommand, AbortIntentRequest, AdmissionPolicyError, AdmissionRequest, ApprovalDecisionCommand, ApprovalPendingSuspension, AttachChildToReservationRequest, BeginChildBudgetReleaseRequest, ChildBudgetReservationRequest, ChildReservationId, ChildSettledNotification, ClaimJoiningRequest, ClaimRequest, LedgerError, MarkInputAppliedRequest, MarkJoinedRequest, MarkReadyRequest, MarkUnknownRequest, OwnershipToken, ParentLinkage, RecoverySnapshotRequest, ReleaseChildBudgetRequest, ReleaseOwnershipRequest, RenewOwnershipRequest, RevertJoiningRequest, Settlement, SettlementFinalization, SettlementReservation, SubmissionLedger, SubmissionLookupById, SubmissionLookupByKey, SuspendRequest, UnknownResolutionCommand, WaitingChild, WaitingForChildSuspension, submissionAbortBatchId, submissionAbortRecordId, submissionInputBatchId, submissionInputRecordId, submissionSettlementBatchId, submissionSettlementId, submissionSettlementRecordId } from "./durable/SubmissionLedger.mjs";
 import { DeclaredPendingBatchEvidence, OpenDelegationCallEvidence, OpenToolCallEvidence, PendingApprovalEvidence, RecoveryDecision, RecoveryEvidence, classifyRecovery } from "./durable/Recovery.mjs";
 import { ExplainedEvidence, ExplainedSubmission, ExplainedUnknownCall, IntegrityCheck, IntegrityReport, ObligationEntry, ObligationReport, RecoveryExplanation, RetryRefused, obligationSeverityOf, predictRecoveryDisposition, recoveryDecisionMeaning } from "./durable/Admin.mjs";
 import { digestJson } from "./durable/Digest.mjs";
-import { a as definitionDigestsEqual, c as resolveWorkerBinding, i as compileRegistrations, n as BindingUnavailable, o as makeLegacyWorkerBinding, s as resolveDefinitionBinding } from "./agent-registration-CWDMOAZA.mjs";
+import { a as bindingSupports, c as definitionDigestsEqual, d as resolveDefinitionBinding, f as resolveWorkerBinding, r as BindingUnavailable, s as compileRegistrations, u as makeLegacyWorkerBinding } from "./agent-registration-CXGDwvJH.mjs";
 import { FencedAppendRequest, LoadCheckpointRequest, SaveRecoveryCheckpointRequest, ThreadCheckpoint, ThreadExportRequest, ThreadMaterialization, ThreadObservation, ThreadRead, ThreadStore, ThreadStoreError, ThreadTailRequest } from "./durable/ThreadStore.mjs";
 import { DurableRuntimeFailpoint } from "./durable/DurableFailpoint.mjs";
 import { ScheduledInputRefused, ScheduledInputRetryable } from "./durable/Schedule.mjs";
@@ -32,7 +32,7 @@ import { PreparedInputAdmission } from "./durable/PreparedInputAdmission.mjs";
 import { PreparedInput } from "./durable/Subscription.mjs";
 import { MessageDeliveryDriver, MessageDeliveryFailpoint, MessageDeliveryRecord, MessageDeliveryStore, messageDeliveryCapacity, messageDeliveryUsesCapacity, prepareMessageDelivery } from "./durable/MessageDelivery.mjs";
 import { n as safeUnknownString, t as inspectForeignDiagnostic } from "./foreign-diagnostic-DBQ1XHKh.mjs";
-import { A as toolCallResolutionBatchId, B as turnIdForRun, C as subagentRequestedBatchId, D as toolApprovalDecisionRecordId, E as subagentStartedRecordId, F as toolStepSettledBatchId, H as turnResponseBatch, I as toolStepSettledRecordId, K as makeJournalMetadata, L as turnApprovalsBatchId, M as toolCallResultBatchId, N as toolCallSettledRecordId, O as toolApprovalRequestRecordId, P as toolCallUnknownRecordId, S as subagentLineageRecordId, T as subagentStartedBatchId, V as turnPreparedBatchId, W as turnResultsBatch, _ as runStartedBatchId, a as childThreadIdFor, b as subagentJoinedRecordId, c as markUnknownBatchId, d as modelResponseRecordId, g as runIdForSubmission, h as runCompletedRecordId, i as childIdempotencyKeyFor, j as toolCallResolvedRecordId, k as toolCallPreparedRecordId, l as modelResponseInterruptedBatchId, o as compactionBatchId, p as projectRunJournalStream, r as approvalDecisionBatchId, s as compactionRecordId, t as RunJournalError, u as modelResponseInterruptedRecordId, v as runStartedRecordId, w as subagentRequestedRecordId, x as subagentLineageBatchId, y as subagentJoinBatchId, z as turnCanonicalBatch } from "./RunJournal-yYpUlTOE.mjs";
+import { A as toolApprovalRequestRecordId, C as subagentLineageBatchId, D as subagentStartedBatchId, E as subagentRequestedRecordId, F as toolCallSettledRecordId, H as turnIdForRun, I as toolCallUnknownRecordId, J as makeJournalMetadata, K as turnResultsBatch, L as toolStepSettledBatchId, M as toolCallResolutionBatchId, N as toolCallResolvedRecordId, O as subagentStartedRecordId, P as toolCallResultBatchId, R as toolStepSettledRecordId, S as subagentJoinedRecordId, T as subagentRequestedBatchId, U as turnPreparedBatchId, V as turnCanonicalBatch, W as turnResponseBatch, _ as runDurationRecordId, a as childThreadIdFor, b as runStartedRecordId, c as markUnknownBatchId, d as modelResponseRecordId, g as runDurationBatchId, h as runCompletedRecordId, i as childIdempotencyKeyFor, j as toolCallPreparedRecordId, k as toolApprovalDecisionRecordId, l as modelResponseInterruptedBatchId, o as compactionBatchId, p as projectRunJournalStream, r as approvalDecisionBatchId, s as compactionRecordId, t as RunJournalError, u as modelResponseInterruptedRecordId, v as runIdForSubmission, w as subagentLineageRecordId, x as subagentJoinBatchId, y as runStartedBatchId, z as turnApprovalsBatchId } from "./RunJournal-DRRRZmG7.mjs";
 import { WorkerBudgetAuthorizer, WorkerConcurrencyLimit, WorkerConcurrencyResolver, WorkerHostAuthorizer, WorkerHostConfig, WorkerPolicyResolver } from "./durable/WorkerHost.mjs";
 import { OperationAuthorizationRequest, OperationAuthorizer, OperationDenied } from "./durable/OperationAuthorizer.mjs";
 import { PendingSubmission, SettledSubmission } from "./durable/SubmissionStatus.mjs";
@@ -272,7 +272,7 @@ const makeMessagingRuntime = Effect.fn("MessagingHost.make")(function* (options)
 		const log = yield* read(threadId);
 		const created = log.records[0]?.record.payload;
 		if (created?._tag !== "ThreadCreated") return yield* failure$1("context", "not-found");
-		if (deps.bindings.filter((binding) => binding.agentId === created.agentId && definitionDigestsEqual(binding.digests, created.definitions)).length !== 1) return yield* failure$1("context", "binding-mismatch");
+		if (deps.bindings.filter((binding) => binding.agentId === created.agentId).length !== 1) return yield* failure$1("context", "binding-mismatch");
 		return {
 			log,
 			address: {
@@ -375,7 +375,7 @@ const makeMessagingRuntime = Effect.fn("MessagingHost.make")(function* (options)
 				if (prior !== void 0) {
 					saved = yield* decodeProof(prior);
 					const metadata = saved.envelope.messageAdmission;
-					if (!Schema.is(MessageAdmission)(metadata) || metadata.peerName !== request.name || saved.envelope.agentId !== target.agentId || !definitionDigestsEqual(saved.envelope.definitions, target.digests) || !sameJson$1(saved.envelope.input, input) || (inReplyTo === void 0 || metadata.inReplyTo === void 0 ? inReplyTo !== metadata.inReplyTo : !sameRef(inReplyTo, metadata.inReplyTo))) return yield* failure$1(operation, "conflict");
+					if (!Schema.is(MessageAdmission)(metadata) || metadata.peerName !== request.name || saved.envelope.agentId !== target.agentId || !bindingSupports(target, saved.envelope.definitions, void 0, saved.envelope.input) || !sameJson$1(saved.envelope.input, input) || (inReplyTo === void 0 || metadata.inReplyTo === void 0 ? inReplyTo !== metadata.inReplyTo : !sameRef(inReplyTo, metadata.inReplyTo))) return yield* failure$1(operation, "conflict");
 					yield* authorize(operation, "send", request, {
 						threadId: saved.envelope.threadId,
 						agentId: target.agentId
@@ -676,11 +676,15 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			...report.destination === void 0 ? {} : { destinationDelegationId: report.destination.delegationId }
 		};
 	});
+	const firstThreadInput = (history) => {
+		const first = history.records.find(({ record }) => record.payload._tag === "UserInputRecorded")?.record.payload;
+		return first?._tag === "UserInputRecorded" ? first.input : void 0;
+	};
 	const sourceAuthority = Effect.fn("WorkerHost.sourceAuthority")(function* (threadId, submissionId) {
 		const current = yield* read(threadId, "start");
 		const created = current.records[0]?.record.payload;
 		if (created?._tag !== "ThreadCreated") return yield* failure("start", "not-found");
-		const binding = deps.bindings.find((entry) => entry.agentId === created.agentId && definitionDigestsEqual(entry.digests, created.definitions));
+		const binding = deps.bindings.find((entry) => entry.agentId === created.agentId && bindingSupports(entry, created.definitions, void 0, firstThreadInput(current)));
 		const worker = current.records.find(({ record }) => record.payload._tag === "WorkerOriginRecorded")?.record.payload;
 		const attached = current.records.find(({ record }) => record.payload._tag === "SubagentLineageRecorded")?.record.payload;
 		const nested = worker?._tag === "WorkerOriginRecorded" || attached?._tag === "SubagentLineageRecorded";
@@ -693,9 +697,11 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			if (worker?._tag === "WorkerOriginRecorded" && (submission.value.workerAdmission === void 0 || !sameOrigin(submission.value.workerAdmission.origin, worker.origin))) return yield* failure("start", "denied");
 			if (attached?._tag === "SubagentLineageRecorded" && (submission.value.parentLinkage?.parentSubmissionId !== attached.parentSubmissionId || submission.value.parentLinkage.parentToolCallId !== attached.parentLink.parentToolCallId)) return yield* failure("start", "denied");
 		}
+		const ownerBinding = ownerSubmission === void 0 ? void 0 : deps.bindings.find((entry) => entry.agentId === ownerSubmission.agentId && bindingSupports(entry, ownerSubmission.agentDigests, void 0, ownerSubmission.inputPayload));
+		const selectedBinding = ownerBinding ?? binding;
 		if (worker?._tag === "WorkerOriginRecorded") return {
 			current,
-			binding,
+			binding: selectedBinding,
 			submission: ownerSubmission,
 			policyOverride: Option.none(),
 			policy: worker.origin.policy,
@@ -708,7 +714,7 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			if (attached.policy === void 0 || attached.budget === void 0 || attached.grant === void 0) return yield* failure("start", "denied");
 			return {
 				current,
-				binding,
+				binding: selectedBinding,
 				submission: ownerSubmission,
 				policyOverride: Option.none(),
 				policy: attached.policy,
@@ -718,8 +724,6 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 				depth: attached.parentLink.depth
 			};
 		}
-		const ownerBinding = ownerSubmission === void 0 ? void 0 : deps.bindings.find((entry) => entry.agentId === ownerSubmission.agentId && definitionDigestsEqual(entry.digests, ownerSubmission.agentDigests));
-		const selectedBinding = ownerBinding ?? binding;
 		const changedRootAgent = ownerSubmission !== void 0 && ownerSubmission.agentId !== created.agentId;
 		if (selectedBinding === void 0 || changedRootAgent && ownerBinding === void 0) return yield* failure("start", "declaration-unavailable");
 		const selected = yield* deps.policyResolver.resolveSource({
@@ -729,7 +733,7 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			...ownerSubmission === void 0 ? {} : { submission: ownerSubmission }
 		});
 		if (Option.isSome(selected) && ownerSubmission !== void 0 && ownerBinding === void 0) return yield* failure("start", "declaration-unavailable");
-		const effectiveBinding = Option.isSome(selected) || changedRootAgent ? selectedBinding : binding;
+		const effectiveBinding = Option.isSome(selected) || changedRootAgent || binding === void 0 ? selectedBinding : binding;
 		if (effectiveBinding === void 0) return yield* failure("start", "declaration-unavailable");
 		const policy = Option.isNone(selected) ? effectiveBinding.definition.policy : yield* decode(AgentPolicy, selected.value, "start");
 		return {
@@ -823,7 +827,7 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			if (prior === void 0 && admission.messageId !== origin.firstMessageId) return yield* failure("start", "not-found");
 			const caps = origin.budget.caps;
 			const sourceBinding = source.binding;
-			const targetBinding = deps.bindings.find((entry) => entry.agentId === origin.worker.targetAgentId && definitionDigestsEqual(entry.digests, origin.targetDigests));
+			const targetBinding = deps.bindings.find((entry) => entry.agentId === origin.worker.targetAgentId && bindingSupports(entry, origin.targetDigests, void 0, input));
 			if (sourceBinding === void 0 || targetBinding === void 0) return yield* failure("start", "declaration-unavailable");
 			yield* Schema.decodeEffect(Schema.toEncoded(targetBinding.definition.input))(input).pipe(Effect.mapError(() => failure("start", "corrupt")));
 			const targetRequest = {
@@ -930,15 +934,15 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 		const intent = origin?.reporting;
 		if (origin === void 0 || intent?.mode !== "standard") return void 0;
 		if (update.threadId !== submission.threadId || update.agentId !== origin.worker.targetAgentId) return yield* failure("followUp", "worker-mismatch");
-		const sourceBinding = deps.bindings.find((entry) => entry.agentId === origin.source.agentId && definitionDigestsEqual(entry.digests, intent.sourceDigests));
-		const targetBinding = deps.bindings.find((entry) => entry.agentId === origin.worker.targetAgentId && definitionDigestsEqual(entry.digests, origin.targetDigests));
-		const reports = sourceBinding?.reporting?.filter((entry) => entry.delegationId === origin.worker.delegationId) ?? [];
-		if (sourceBinding === void 0 || targetBinding === void 0 || reports.length !== 1 || reports[0]?.mode !== "standard" || reports[0].target !== targetBinding.definition || !definitionDigestsEqual(submission.agentDigests, origin.targetDigests)) return yield* failure("followUp", "declaration-unavailable");
 		const sourceHistory = yield* read(origin.source.threadId, "followUp");
 		const first = requests(sourceHistory.records).find((row) => row.admission.messageId === origin.firstMessageId);
 		if (first === void 0 || !sameOrigin(first.admission.origin, origin)) return yield* failure("followUp", "corrupt");
 		const source = yield* sourceAuthority(origin.source.threadId, first.admission.sourceSubmissionId);
-		if (source.binding === void 0 || source.submission === void 0 || !definitionDigestsEqual(source.binding.digests, intent.sourceDigests)) return yield* failure("followUp", "declaration-unavailable");
+		if (source.binding === void 0 || source.submission === void 0 || !bindingSupports(source.binding, intent.sourceDigests, void 0, source.submission?.inputPayload)) return yield* failure("followUp", "declaration-unavailable");
+		const sourceBinding = deps.bindings.find((entry) => entry.agentId === origin.source.agentId && bindingSupports(entry, intent.sourceDigests, void 0, source.submission?.inputPayload));
+		const targetBinding = deps.bindings.find((entry) => entry.agentId === origin.worker.targetAgentId && bindingSupports(entry, origin.targetDigests, void 0, submission.inputPayload));
+		const reports = sourceBinding?.reporting?.filter((entry) => entry.delegationId === origin.worker.delegationId) ?? [];
+		if (sourceBinding === void 0 || targetBinding === void 0 || reports.length !== 1 || reports[0]?.mode !== "standard" || reports[0].target !== targetBinding.definition || !definitionDigestsEqual(submission.agentDigests, origin.targetDigests)) return yield* failure("followUp", "declaration-unavailable");
 		const recorded = source.current.records.find(({ record }) => record.payload._tag === "WorkerOriginRecorded")?.record.payload;
 		const receivingOrigin = recorded?._tag === "WorkerOriginRecorded" ? recorded.origin : void 0;
 		if (source.depth !== 0 && receivingOrigin === void 0) return yield* failure("followUp", "denied");
@@ -1029,11 +1033,6 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 				messageId,
 				reason
 			});
-			const sourceBinding = deps.bindings.find((entry) => entry.agentId === origin.source.agentId && definitionDigestsEqual(entry.digests, intent.sourceDigests));
-			const targetBinding = deps.bindings.find((entry) => entry.agentId === origin.worker.targetAgentId && definitionDigestsEqual(entry.digests, origin.targetDigests));
-			const reports = sourceBinding?.reporting?.filter((entry) => entry.delegationId === origin.worker.delegationId) ?? [];
-			const descriptor = reports[0];
-			if (sourceBinding === void 0 || targetBinding === void 0 || descriptor === void 0 || reports.length !== 1 || !Object.is(descriptor.target, targetBinding.definition) || descriptor.mode !== "standard" && !Object.is(descriptor.input, sourceBinding.definition.input) || descriptor.mode !== intent.mode || descriptor.destination?.delegationId !== intent.destinationDelegationId || descriptor.destination !== void 0 && !Object.is(descriptor.destination.target, sourceBinding.definition)) return refused("declaration-unavailable");
 			const selected = yield* deps.ledger.lookup(SubmissionLookupById.make({ submissionId: host.submissionId })).pipe(Effect.mapError(storageFailure("inspect")));
 			if (Option.isNone(selected) || selected.value.threadId !== submission.threadId || selected.value.receiptId !== host.receiptId || selected.value.workerAdmission === void 0 || !sameOrigin(selected.value.workerAdmission.origin, origin)) return yield* failure("inspect", "corrupt");
 			const hostSubmission = selected.value;
@@ -1042,7 +1041,12 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			const firstInput = requests(sourceHistory.records).find((row) => row.admission.messageId === origin.firstMessageId);
 			if (firstInput === void 0 || !sameOrigin(firstInput.admission.origin, origin)) return yield* failure("inspect", "corrupt");
 			const source = yield* sourceAuthority(origin.source.threadId, firstInput.admission.sourceSubmissionId);
-			if (source.binding === void 0 || !definitionDigestsEqual(source.binding.digests, intent.sourceDigests)) return refused("declaration-unavailable");
+			if (source.binding === void 0 || !bindingSupports(source.binding, intent.sourceDigests, void 0, source.submission?.inputPayload)) return refused("declaration-unavailable");
+			const sourceBinding = deps.bindings.find((entry) => entry.agentId === origin.source.agentId && bindingSupports(entry, intent.sourceDigests, void 0, source.submission?.inputPayload));
+			const targetBinding = deps.bindings.find((entry) => entry.agentId === origin.worker.targetAgentId && bindingSupports(entry, origin.targetDigests, void 0, hostSubmission.inputPayload));
+			const reports = sourceBinding?.reporting?.filter((entry) => entry.delegationId === origin.worker.delegationId) ?? [];
+			const descriptor = reports[0];
+			if (sourceBinding === void 0 || targetBinding === void 0 || descriptor === void 0 || reports.length !== 1 || !Object.is(descriptor.target, targetBinding.definition) || descriptor.mode !== "standard" && !Object.is(descriptor.input, sourceBinding.definition.input) || descriptor.mode !== intent.mode || descriptor.destination?.delegationId !== intent.destinationDelegationId || descriptor.destination !== void 0 && !Object.is(descriptor.destination.target, sourceBinding.definition)) return refused("declaration-unavailable");
 			const sourceOriginRecord = source.current.records.find(({ record }) => record.payload._tag === "WorkerOriginRecorded")?.record.payload;
 			const sourceOrigin = sourceOriginRecord?._tag === "WorkerOriginRecorded" ? sourceOriginRecord.origin : void 0;
 			if (source.depth !== 0 && sourceOrigin === void 0) return refused("destination");
@@ -1236,12 +1240,12 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			};
 		});
 		const findOrigin = Effect.fn("WorkerHost.findOrigin")(function* (worker, target, operation) {
-			const resolved = yield* binding(target, operation);
+			yield* binding(target, operation);
 			if (worker.targetAgentId !== target.id) return yield* failure(operation, "worker-mismatch");
 			const source = yield* read(context.source.threadId, operation);
 			const origin = requests(source.records).find((row) => row.admission.origin.worker.threadId === worker.threadId)?.admission.origin;
 			if (origin === void 0) return yield* failure(operation, "not-found");
-			if (origin.worker.delegationId !== worker.delegationId || !definitionDigestsEqual(origin.targetDigests, resolved.digests)) return yield* failure(operation, "worker-mismatch");
+			if (origin.worker.delegationId !== worker.delegationId) return yield* failure(operation, "worker-mismatch");
 			return origin;
 		});
 		const receiptInput = Effect.fn("WorkerHost.receiptInput")(function* (request, operation) {
@@ -1570,12 +1574,12 @@ const makeWorkerRuntime = Effect.fn("WorkerHost.make")(function* (options) {
 			const current = yield* read(sourceThreadId, "context");
 			const created = current.records[0]?.record.payload;
 			if (created?._tag !== "ThreadCreated") return yield* failure("context", "not-found");
-			const resolved = deps.bindings.find((entry) => entry.agentId === created.agentId && definitionDigestsEqual(entry.digests, created.definitions));
+			const selected = request.sourceSubmissionId === void 0 ? void 0 : yield* sourceAuthority(sourceThreadId, request.sourceSubmissionId);
+			const resolved = selected === void 0 ? deps.bindings.find((entry) => entry.agentId === created.agentId && bindingSupports(entry, created.definitions, void 0, firstThreadInput(current))) : selected.binding;
 			if (resolved === void 0) return yield* failure("context", "declaration-unavailable");
 			const origin = current.records.find(({ record }) => record.payload._tag === "WorkerOriginRecorded")?.record.payload;
 			const attached = current.records.find(({ record }) => record.payload._tag === "SubagentLineageRecorded")?.record.payload;
 			const retained = origin?._tag === "WorkerOriginRecorded" ? origin.origin : attached?._tag === "SubagentLineageRecorded" ? attached : void 0;
-			const selected = request.sourceSubmissionId === void 0 ? void 0 : yield* sourceAuthority(sourceThreadId, request.sourceSubmissionId);
 			return facet({
 				source: {
 					_tag: "programmatic",
@@ -2709,11 +2713,12 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 		const recordId = runStartedRecordId(runId);
 		const existing = yield* canonicalRunStartFromRecords(records, runId);
 		let start;
+		let allowance = maxDurationMillis;
 		if (existing !== void 0 && existing.payload._tag === "RunStarted") {
-			if (existing.payload.maxDurationMillis !== maxDurationMillis) return yield* RunJournalError.make({ message: `Run ${runId} started with a ${existing.payload.maxDurationMillis}ms duration allowance; the replacement Binding supplies ${maxDurationMillis}ms` });
+			allowance = existing.payload.maxDurationMillis;
 			start = existing;
 		} else {
-			if (records.some(({ record: { payload } }) => payload._tag !== "UserInputRecorded" && "runId" in payload && payload.runId === runId)) return yield* RunJournalError.make({ message: `Run ${runId} has execution records but no canonical start; reset incompatible private-development data` });
+			if (records.some(({ record: { payload } }) => payload._tag !== "UserInputRecorded" && "runId" in payload && payload.runId === runId)) return yield* RunJournalError.make({ message: `Run ${runId} has execution records but no canonical start; retain the request for evidence repair` });
 			start = yield* makeEnvelope(recordId, RunStartedRecord.make({
 				runId,
 				maxDurationMillis,
@@ -2729,7 +2734,7 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 		}
 		return {
 			startedAt: start.createdAt,
-			deadline: DateTime.addDuration(start.createdAt, Duration.millis(maxDurationMillis))
+			deadline: records.some(({ record }) => record.payload._tag === "RunDurationExhausted" && record.payload.runId === runId) ? start.createdAt : DateTime.addDuration(yield* DateTime.now, Duration.millis(allowance))
 		};
 	});
 	/**
@@ -5087,7 +5092,19 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 				}
 				return Option.some(yield* terminalize(ctx, submission, tokenRef, outcome, true));
 			}
-			if (outcome._tag === "failed" && outcome.policyLimit === "duration") yield* reconcileExpiredChildren(ctx, submission, yield* Ref.get(tokenRef));
+			if (outcome._tag === "failed" && outcome.policyLimit === "duration") {
+				const exhaustedId = runDurationRecordId(runIdForSubmission(submissionId));
+				if (!(yield* refreshControl()).some(({ record }) => record.recordId === exhaustedId)) {
+					yield* hit("run:before-duration-append");
+					yield* appendBatch(ctx, CanonicalBatch.make({
+						batchId: runDurationBatchId(runIdForSubmission(submissionId)),
+						producerId: config.producerId,
+						records: [yield* makeEnvelope(exhaustedId, RunDurationExhausted.make({ runId: runIdForSubmission(submissionId) }))]
+					}));
+					yield* hit("run:after-duration-append");
+				}
+				yield* reconcileExpiredChildren(ctx, submission, yield* Ref.get(tokenRef));
+			}
 			if (yield* completeJoinedReleases(submission)) {
 				if (outcome._tag === "failed") {
 					const ownershipToken = yield* Ref.get(tokenRef);
@@ -5106,33 +5123,6 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 			return Option.some(yield* terminalize(ctx, submission, tokenRef, outcome, true));
 		}
 	}).pipe(Effect.scoped);
-	/**
-	* Framework-owned Schema-stable `ChildCompatibilityFailure` Settlement for a parent-linked
-	* child whose exact Binding cannot be resolved at claim time (spec §11, SUB-023/SUB-032): no
-	* application code runs, the child never executes, and the parent joins the bounded failure
-	* through the normal verification path. A pre-existing reservation or canonical settlement is
-	* completed instead of re-decided.
-	*/
-	const settleChildCompatibility = Effect.fn("DurableAgentRuntime.settleChildCompatibility")(function* (claim, submission, failure) {
-		yield* store.materialize(ThreadMaterialization.make({
-			threadId: submission.threadId,
-			producerEpoch: claim.producerEpoch
-		}));
-		yield* ensureThreadCreated(submission.threadId, submission.agentId, submission.agentDigests);
-		const ctx = yield* attemptContextFor(submission.threadId, claim.producerEpoch);
-		const tokenRef = yield* Ref.make(claim.ownershipToken);
-		const recorded = (yield* readControl(submission.threadId, [submission.submissionId])).some((envelope) => envelope.record.recordId === submissionSettlementRecordId(submission.submissionId));
-		const snapshot = yield* ledger.loadRecoverySnapshot(RecoverySnapshotRequest.make({ submissionId: submission.submissionId }));
-		if (snapshot.reservation !== void 0) return yield* completeReservation(ctx, submission, snapshot.reservation, recorded);
-		const result = yield* Schema.decodeEffect(SettlementFailureDiagnostic)({
-			errorTag: "ChildCompatibilityFailure",
-			message: boundedText(failure.message)
-		}).pipe(Effect.orDie);
-		return yield* terminalize(ctx, submission, tokenRef, {
-			_tag: "failed",
-			result
-		}, false);
-	});
 	const acquireClaim = Effect.fn("DurableAgentRuntime.acquireClaim")(function* (threadId) {
 		const claimed = yield* ledger.claim(ClaimRequest.make({
 			threadId,
@@ -5192,10 +5182,7 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 				failure
 			})
 		}));
-		if (resolution._tag === "refused") {
-			if (submission.parentLinkage !== void 0) return Option.some(yield* settleChildCompatibility(claim, submission, resolution.failure));
-			return yield* resolution.failure;
-		}
+		if (resolution._tag === "refused") return yield* resolution.failure;
 		return yield* resolution.binding.attempt((agent, attemptThreadId, attemptClaim) => runAttempt(agent, attemptThreadId, attemptClaim, tokenRef, options?.yieldAfter), threadId, claim);
 	})).pipe(withThreadHeadSpan);
 	const drainThread = (resolve, threadId) => Effect.gen(function* () {
@@ -5213,8 +5200,23 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 			message: `This worker is bound to Agent ${binding.agentId}; the claimed head belongs to Agent ${submission.agentId} (SUB-023)`
 		})), threadId);
 	});
-	const processThreadResolvedImpl = (threadId) => drainThread((submission) => resolveWorkerBinding(registeredBindings, submission.agentId, submission.agentDigests), threadId);
-	const processThreadHeadImpl = (threadId, options) => processThreadHead((submission) => resolveWorkerBinding(registeredBindings, submission.agentId, submission.agentDigests), threadId, options);
+	const resolveRetainedBinding = Effect.fn("DurableAgentRuntime.resolveRetainedBinding")(function* (submission) {
+		const exact = registeredBindings.find((binding) => binding.agentId === submission.agentId && definitionDigestsEqual(binding.digests, submission.agentDigests));
+		if (exact !== void 0) return exact;
+		const candidates = registeredBindings.filter((binding) => binding.agentId === submission.agentId);
+		const candidate = candidates[0];
+		if (candidate === void 0 || candidates.length !== 1) return yield* resolveWorkerBinding(registeredBindings, submission.agentId, submission.agentDigests);
+		if (bindingSupports(candidate, submission.agentDigests, void 0, submission.inputPayload)) return candidate;
+		const records = yield* Effect.gen(function* () {
+			const tail = yield* store.inspectTail(ThreadTailRequest.make({ threadId: submission.threadId }));
+			return yield* Stream.runCollect(canonicalRange(submission.threadId, tail.tailSequence).pipe(Stream.filter(controlRecords([submission.submissionId]))));
+		}).pipe(Effect.catchTag("ThreadNotMaterialized", () => Effect.succeed([])));
+		const completionTools = candidate === void 0 ? [] : [...candidate.definition.completion === void 0 ? [] : [candidate.definition.completion.tool], ...candidate.definition.completionFromTools?.map((entry) => entry.tool) ?? []];
+		const pending = yield* pendingToolBatchFor(records, runIdForSubmission(submission.submissionId), completionTools);
+		return yield* resolveWorkerBinding(registeredBindings, submission.agentId, submission.agentDigests, pending?.calls.filter((call) => call.providerExecuted !== true || completionTools.includes(call.name)).map((call) => call.name) ?? [], submission.inputPayload);
+	});
+	const processThreadResolvedImpl = (threadId) => drainThread(resolveRetainedBinding, threadId);
+	const processThreadHeadImpl = (threadId, options) => processThreadHead(resolveRetainedBinding, threadId, options);
 	const claimFor = Effect.fn("DurableAgentRuntime.claimFor")(function* (submission) {
 		const head = yield* Stream.runHead(ledger.scanNonterminal.pipe(Stream.filter((entry) => entry.threadId === submission.threadId)));
 		if (Option.isNone(head) || head.value.submissionId !== submission.submissionId) return Option.none();
@@ -5417,7 +5419,7 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 		const submission = snapshot.submission;
 		const runId = runIdForSubmission(submission.submissionId);
 		const start = yield* canonicalRunStartFromRecords(records, runId);
-		if (start?.payload._tag === "RunStarted" && start.payload.runId === runId && (yield* Clock.currentTimeMillis) >= DateTime.toEpochMillis(start.createdAt) + start.payload.maxDurationMillis && (decision._tag === "CompleteChildAdmission" || decision._tag === "RepairSubagentStartLink" || decision._tag === "AwaitChildAdmissionResolution" || decision._tag === "MarkUnknown" && snapshot.childReservations.some((reservation) => reservation.status !== "released"))) {
+		if (start?.payload._tag === "RunStarted" && start.payload.runId === runId && (records.some(({ record }) => record.payload._tag === "RunDurationExhausted" && record.payload.runId === runId) || submission.workerAdmission !== void 0 && (yield* Clock.currentTimeMillis) >= submission.workerAdmission.origin.expiresAtMillis) && (decision._tag === "CompleteChildAdmission" || decision._tag === "RepairSubagentStartLink" || decision._tag === "AwaitChildAdmissionResolution" || decision._tag === "MarkUnknown" && snapshot.childReservations.some((reservation) => reservation.status !== "released"))) {
 			const claimed = yield* claimFor(submission);
 			if (Option.isNone(claimed)) return "deferred";
 			const claim = claimed.value;
@@ -5756,6 +5758,20 @@ const make = Effect.fn("DurableAgentRuntime.make")(function* (bindings) {
 			reason: cause.reason === "storage" || cause.reason === "unavailable" ? "unavailable" : "refused",
 			code: `message-${cause.reason}`
 		})));
+		if (options.definitions.replay !== void 0 && workerAdmission === void 0 && messageAdmission === void 0 && !registeredBindings.some((binding) => binding.agentId === agent.definition.id && (definitionDigestsEqual(binding.digests, options.definitions) || binding.retainedManifests?.some((retained) => definitionDigestsEqual(DefinitionDigests.make({
+			...retained.digests,
+			replay: retained.replay
+		}), options.definitions))))) {
+			const retained = yield* ledger.lookup(SubmissionLookupByKey.make({
+				threadId: options.threadId,
+				principal: options.principal,
+				idempotencyKey: options.idempotencyKey
+			}));
+			if (Option.isNone(retained) || retained.value.agentId !== agent.definition.id || !definitionDigestsEqual(retained.value.agentDigests, options.definitions)) return yield* AdmissionPolicyError.make({
+				reason: "refused",
+				code: "unregistered-replay-contract"
+			});
+		}
 		const admitted = yield* ledger.admit(yield* Schema.decodeEffect(AdmissionRequest)({
 			threadId: options.threadId,
 			principal: options.principal,
@@ -6369,4 +6385,4 @@ var DurableAgentRuntime = class DurableAgentRuntime extends Context.Service()("@
 //#endregion
 export { RecoveryReport as a, recoveryRepairRecordId as c, DurableRuntimeConfig as i, threadCreatedBatchId as l, DurableAgentRuntime_exports as n, childReservationIdFor as o, DurableApprovalResolver as r, recoveryRepairBatchId as s, DurableAgentRuntime as t, threadCreatedRecordId as u };
 
-//# sourceMappingURL=DurableAgentRuntime-BaGsWDHO.mjs.map
+//# sourceMappingURL=DurableAgentRuntime-DbUvZHDZ.mjs.map