effect-agent 0.1.0-beta.95 → 0.1.0-beta.97

package/dist/DurableFailpoint-DQJet828.d.mts

@@ -0,0 +1,41 @@
+import { Context, Effect, Layer, Schema } from "effect";
+declare namespace DurableFailpoint_d_exports {
+  export { DurableRuntimeFailpoint, DurableRuntimeFailpointError, DurableRuntimeFailpointHandler, DurableRuntimeFailpointLocation };
+}
+/**
+ * Coordinator-owned failpoint locations (plan §Failpoints). Locations normally sit immediately
+ * AFTER one durable mutation of the six-step coordinator flow, so a fault injected there
+ * simulates a crash between two durable steps; the matching BEFORE boundary of each mutation is
+ * owned by the storage adapters (`ledger:*:before`, `append:before`, ...), giving every durable
+ * mutation a failpoint on both sides (change discipline). Run-start append also exposes its
+ * BEFORE boundary here to distinguish a fresh clock from a committed clock in crash tests.
+ *
+ * The `subagent:*` family covers every durable mutation of the S2 establishment/join protocol
+ * including reservation, request append, child admission, child readiness,
+ * start-link append, sibling per-call settles at the suspension seam, the `waitingForChild`
+ * suspension, child abort propagation, the atomic join batch, and both reservation-release
+ * transitions.
+ */
+declare const DurableRuntimeFailpointLocation: Schema.Literals<readonly ["submit:after-admit", "submit:after-materialize", "claim:after-claim", "input:after-canonical-append", "run:before-start-append", "run:after-start-append", "run:before-duration-append", "run:after-duration-append", "turn:after-canonical-append", "turn:after-response-append", "turn:after-results-append", "compaction:before-canonical-append", "compaction:after-canonical-append", "checkpoint:before-save", "checkpoint:after-save", "tools:after-prepared-append", "tools:before-prepared-append", "policy:before-reservation-append", "policy:after-reservation-append", "step:after-step-append", "approval:after-request-append", "approval:after-suspend", "join:after-claim", "join:after-canonical-append", "resolve:after-intent", "terminalize:after-reserve", "terminalize:after-canonical-append", "abort:after-intent", "subagent:after-reserve", "subagent:after-request-append", "subagent:after-admit", "subagent:after-child-ready", "subagent:after-start-append", "subagent:after-sibling-settle", "subagent:after-suspend", "subagent:after-child-abort-intent", "subagent:before-join-append", "subagent:after-join-append", "subagent:after-release-pending", "subagent:after-release", "worker:before-source-append", "worker:after-source-append", "worker:before-origin-append", "worker:after-origin-append", "worker:before-completion-append", "worker:after-completion-append", "worker:before-subtree-append", "worker:after-subtree-append", "worker:before-report-append", "worker:after-report-append", "worker:before-report-delivery", "worker:after-report-delivery", "update:before-canonical-append", "update:after-canonical-append", "update:before-delivery-insert", "update:after-delivery-insert"]>;
+type DurableRuntimeFailpointLocation = typeof DurableRuntimeFailpointLocation.Type;
+declare const DurableRuntimeFailpointError_base: Schema.Class<DurableRuntimeFailpointError, Schema.TaggedStruct<"DurableRuntimeFailpointError", {
+  readonly location: Schema.Literals<readonly ["submit:after-admit", "submit:after-materialize", "claim:after-claim", "input:after-canonical-append", "run:before-start-append", "run:after-start-append", "run:before-duration-append", "run:after-duration-append", "turn:after-canonical-append", "turn:after-response-append", "turn:after-results-append", "compaction:before-canonical-append", "compaction:after-canonical-append", "checkpoint:before-save", "checkpoint:after-save", "tools:after-prepared-append", "tools:before-prepared-append", "policy:before-reservation-append", "policy:after-reservation-append", "step:after-step-append", "approval:after-request-append", "approval:after-suspend", "join:after-claim", "join:after-canonical-append", "resolve:after-intent", "terminalize:after-reserve", "terminalize:after-canonical-append", "abort:after-intent", "subagent:after-reserve", "subagent:after-request-append", "subagent:after-admit", "subagent:after-child-ready", "subagent:after-start-append", "subagent:after-sibling-settle", "subagent:after-suspend", "subagent:after-child-abort-intent", "subagent:before-join-append", "subagent:after-join-append", "subagent:after-release-pending", "subagent:after-release", "worker:before-source-append", "worker:after-source-append", "worker:before-origin-append", "worker:after-origin-append", "worker:before-completion-append", "worker:after-completion-append", "worker:before-subtree-append", "worker:after-subtree-append", "worker:before-report-append", "worker:after-report-append", "worker:before-report-delivery", "worker:after-report-delivery", "update:before-canonical-append", "update:after-canonical-append", "update:before-delivery-insert", "update:after-delivery-insert"]>;
+}>, import("effect/Cause").YieldableError>;
+/** Injected coordinator fault. Reaching the caller means the preceding durable step committed. */
+declare class DurableRuntimeFailpointError extends DurableRuntimeFailpointError_base {}
+type DurableRuntimeFailpointHandler = (location: DurableRuntimeFailpointLocation) => Effect.Effect<void, DurableRuntimeFailpointError>;
+declare const DurableRuntimeFailpoint_base: Context.ServiceClass<DurableRuntimeFailpoint, "@effect-agent/thread/DurableRuntimeFailpoint", {
+  readonly hit: DurableRuntimeFailpointHandler;
+}>;
+/**
+ * Explicit fault-injection authority used at durable coordinator step boundaries. The process
+ * crash harness (WP5) maps a hit to `process.exit`; in-process tests fail the step with the
+ * typed `DurableRuntimeFailpointError` instead.
+ */
+declare class DurableRuntimeFailpoint extends DurableRuntimeFailpoint_base {
+  /** Production default: no fault injection. */
+  static readonly layer: Layer.Layer<DurableRuntimeFailpoint, never, never>;
+}
+//#endregion
+export { DurableRuntimeFailpointLocation as a, DurableRuntimeFailpointHandler as i, DurableRuntimeFailpoint as n, DurableRuntimeFailpointError as r, DurableFailpoint_d_exports as t };
+//# sourceMappingURL=DurableFailpoint-DQJet828.d.mts.map

package/dist/{EventSource-DVfX1GRH.d.mts → EventSource-D6PAAEyK.d.mts}

@@ -1,5 +1,5 @@
-import { O as PersistedJson } from "./Records-B84j3Jq_.mjs";
-import { E as SubscriptionSourceError, b as SubscriptionRecord, i as EventSourceVersion, t as AcceptedEvent } from "./Subscription-C8IHdmFk.mjs";
+import { O as PersistedJson } from "./Records-CV49DgQK.mjs";
+import { E as SubscriptionSourceError, b as SubscriptionRecord, i as EventSourceVersion, t as AcceptedEvent } from "./Subscription-BR_8Cxh3.mjs";
 import { Context, Effect, Schema, Scope } from "effect";
 declare namespace EventSource_d_exports {
   export { EventSource, EventSources, NormalizedEvent, makeEventSource };
@@ -48,4 +48,4 @@ declare const makeEventSource: <Event extends Schema.Top, Parameters extends Sch
 }) => Effect.Effect<EventSource, never, Exclude<R, Scope.Scope> | Exclude<Event["DecodingServices"], Scope.Scope> | Exclude<Event["EncodingServices"], Scope.Scope> | Exclude<Parameters["DecodingServices"], Scope.Scope> | Exclude<Parameters["EncodingServices"], Scope.Scope>>;
 //#endregion
 export { makeEventSource as a, NormalizedEvent as i, EventSource_d_exports as n, EventSources as r, EventSource as t };
-//# sourceMappingURL=EventSource-DVfX1GRH.d.mts.map
+//# sourceMappingURL=EventSource-D6PAAEyK.d.mts.map

package/dist/{PreparedInputAdmission-DoWaMC2R.d.mts → PreparedInputAdmission-omMbwd--.d.mts}

@@ -1,7 +1,7 @@
 import { a as Receipt } from "./Receipt-BAHyigAF.mjs";
-import { un as SubmissionStatus } from "./Records-B84j3Jq_.mjs";
-import { H as ScheduledInputRefused, V as ScheduledInputFailure, j as ScheduleStorageError } from "./Schedule-DCYBfhgT.mjs";
-import { a as PreparedInput } from "./Subscription-C8IHdmFk.mjs";
+import { fn as SubmissionStatus } from "./Records-CV49DgQK.mjs";
+import { H as ScheduledInputRefused, V as ScheduledInputFailure, j as ScheduleStorageError } from "./Schedule-DePbGfgd.mjs";
+import { a as PreparedInput } from "./Subscription-BR_8Cxh3.mjs";
 import { Context, Effect } from "effect";
 declare namespace PreparedInputAdmission_d_exports {
   export { PreparedInputAdmission, admitPreparedInput };
@@ -35,4 +35,4 @@ declare const admitPreparedInput: <R>(submit: Effect.Effect<Receipt, ScheduledIn
 }, ScheduleStorageError, R>;
 //#endregion
 export { PreparedInputAdmission_d_exports as n, admitPreparedInput as r, PreparedInputAdmission as t };
-//# sourceMappingURL=PreparedInputAdmission-DoWaMC2R.d.mts.map
+//# sourceMappingURL=PreparedInputAdmission-omMbwd--.d.mts.map

package/dist/{Records-CsEsSW2o.mjs → Records-BAutSSnJ.mjs}

@@ -55,7 +55,9 @@ var Records_exports = /* @__PURE__ */ __exportAll({
 	RecordEnvelope: () => RecordEnvelope,
 	RecordId: () => RecordId,
 	RepairAnnotated: () => RepairAnnotated,
+	ReplayContract: () => ReplayContract,
 	RunCompleted: () => RunCompleted,
+	RunDurationExhausted: () => RunDurationExhausted,
 	RunFailed: () => RunFailed,
 	RunPolicyUsageReserved: () => RunPolicyUsageReserved,
 	RunStartedRecord: () => RunStartedRecord,
@@ -197,11 +199,19 @@ var DefinitionDigestInput = class extends Schema.Class("@effect-agent/thread/Def
 	model: PersistedJson,
 	tools: PersistedJson
 }) {};
-/** Digests make a replay-visible definition/configuration change explicit. */
+/** The contracts a retained Run may decode or execute, independent of its deployment. */
+var ReplayContract = class extends Schema.Class("@effect-agent/thread/ReplayContract")({
+	agent: Digest,
+	/** Agent semantics and output/completion codecs; the saved input is checked separately. */
+	agentBehavior: Schema.optionalKey(Digest),
+	tools: Schema.Record(Schema.String, Digest)
+}) {};
+/** Digests identify admission exactly; replay contracts separately authorize continuation. */
 var DefinitionDigests = class extends Schema.Class("@effect-agent/thread/DefinitionDigests")({
 	agent: Digest,
 	model: Digest,
-	tools: Digest
+	tools: Digest,
+	replay: Schema.optionalKey(ReplayContract)
 }) {};
 var ThreadCreated = class extends Schema.TaggedClass("@effect-agent/thread/ThreadCreated")("ThreadCreated", {
 	agentId: AgentId,
@@ -222,13 +232,15 @@ var UserInputRecorded = class extends Schema.TaggedClass("@effect-agent/thread/U
 	input: PersistedJson,
 	messageAdmission: Schema.optionalKey(InputMessage)
 }) {};
-/** Immutable clock and duration allowance for one logical Run, before any agent execution. */
+/** Immutable Run start and per-Attempt duration allowance, before any agent execution. */
 var RunStartedRecord = class extends Schema.TaggedClass("@effect-agent/thread/RunStartedRecord")("RunStarted", {
 	runId: RunId,
 	/** Older private histories cannot prove programmatic accounting and must be reset. */
 	policyAccountingVersion: Schema.Literal(1),
 	maxDurationMillis: Schema.Finite.check(Schema.isGreaterThan(0))
 }) {};
+/** An active Attempt exhausted its execution allowance; downtime alone never writes this. */
+var RunDurationExhausted = class extends Schema.TaggedClass("@effect-agent/thread/RunDurationExhausted")("RunDurationExhausted", { runId: RunId }) {};
 const PersistedPromptMessages = Schema.toEncoded(Prompt.Prompt);
 const isPersistedPromptMessages = Schema.is(PersistedPromptMessages);
 /**
@@ -735,6 +747,7 @@ const CanonicalRecordPayload = Schema.Union([
 	ThreadCreated,
 	UserInputRecorded,
 	RunStartedRecord,
+	RunDurationExhausted,
 	RunPolicyUsageReserved,
 	ModelCompleted,
 	ModelResponseRecorded,
@@ -797,6 +810,6 @@ var CanonicalRecordEnvelope = class extends Schema.Class("@effect-agent/thread/C
 }) {};
 const CURRENT_CANONICAL_SCHEMA_VERSION = 1;
 //#endregion
-export { ToolStepSettled as $, Records_exports as A, SubagentRequested as B, ObservationOffset as C, ProducerId as D, ProducerEpoch as E, RunStartedRecord as F, ThreadCreated as G, SubmissionSettled as H, SettlementFailureDiagnostic as I, ToolCallPrepared as J, ToolApprovalDecided as K, SettlementOutcome as L, RunCompleted as M, RunFailed as N, RecordEnvelope as O, RunPolicyUsageReserved as P, ToolCallUnknown as Q, SubagentJoined as R, ModelResponseRecorded as S, PersistedJson as T, SubmissionSettledRecord as U, SubagentStarted as V, SubtreeBudgetReserved as W, ToolCallResolved as X, ToolCallResolution as Y, ToolCallSettled as Z, MAX_PERSISTED_JSON_COLLECTION_LENGTH as _, CURRENT_CANONICAL_SCHEMA_VERSION as a, WorkerOriginRecorded as at, ModelCompleted as b, CanonicalRecordEnvelope as c, WorkerReportingIntent as ct, CompactionCreated as d, UserInputRecorded as et, DefinitionDigestInput as f, MAX_PERSISTED_JSON_BYTES as g, Digest as h, BatchId as i, WorkerOrigin as it, RepairAnnotated as j, RecordId as k, CanonicalRecordPayload as l, strictSchema as lt, DeploymentId as m, AgentUpdateEmitted as n, WorkerInputCompleted as nt, CanonicalBatch as o, WorkerReportPrepared as ot, DefinitionDigests as p, ToolApprovalRequested as q, ApprovalDecision as r, WorkerInputRequested as rt, CanonicalRecord as s, WorkerReportRefused as st, AbortRequested as t, WorkerAdmission as tt, CanonicalSequence as u, MAX_PERSISTED_JSON_DEPTH as v, PeerMessagePrepared as w, ModelResponseInterrupted as x, MAX_PERSISTED_JSON_NODES as y, SubagentLineageRecorded as z };
+export { ToolCallSettled as $, Records_exports as A, SubagentJoined as B, ObservationOffset as C, ProducerId as D, ProducerEpoch as E, RunFailed as F, SubmissionSettledRecord as G, SubagentRequested as H, RunPolicyUsageReserved as I, ToolApprovalDecided as J, SubtreeBudgetReserved as K, RunStartedRecord as L, ReplayContract as M, RunCompleted as N, RecordEnvelope as O, RunDurationExhausted as P, ToolCallResolved as Q, SettlementFailureDiagnostic as R, ModelResponseRecorded as S, PersistedJson as T, SubagentStarted as U, SubagentLineageRecorded as V, SubmissionSettled as W, ToolCallPrepared as X, ToolApprovalRequested as Y, ToolCallResolution as Z, MAX_PERSISTED_JSON_COLLECTION_LENGTH as _, CURRENT_CANONICAL_SCHEMA_VERSION as a, WorkerInputRequested as at, ModelCompleted as b, CanonicalRecordEnvelope as c, WorkerReportPrepared as ct, CompactionCreated as d, strictSchema as dt, ToolCallUnknown as et, DefinitionDigestInput as f, MAX_PERSISTED_JSON_BYTES as g, Digest as h, BatchId as i, WorkerInputCompleted as it, RepairAnnotated as j, RecordId as k, CanonicalRecordPayload as l, WorkerReportRefused as lt, DeploymentId as m, AgentUpdateEmitted as n, UserInputRecorded as nt, CanonicalBatch as o, WorkerOrigin as ot, DefinitionDigests as p, ThreadCreated as q, ApprovalDecision as r, WorkerAdmission as rt, CanonicalRecord as s, WorkerOriginRecorded as st, AbortRequested as t, ToolStepSettled as tt, CanonicalSequence as u, WorkerReportingIntent as ut, MAX_PERSISTED_JSON_DEPTH as v, PeerMessagePrepared as w, ModelResponseInterrupted as x, MAX_PERSISTED_JSON_NODES as y, SettlementOutcome as z };
 
-//# sourceMappingURL=Records-CsEsSW2o.mjs.map
+//# sourceMappingURL=Records-BAutSSnJ.mjs.map

package/dist/Records-BAutSSnJ.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"Records-BAutSSnJ.mjs","names":[],"sources":["../src/core/internal/strict-schema.ts","../src/durable/Records.ts"],"sourcesContent":["import { Schema, SchemaParser, SchemaTransformation } from \"effect\";\n\n/** Keep strict parsing on nested values even when an outer parser uses its defaults. */\nexport const strictSchema = <S extends Schema.Top>(schema: S) =>\n  Schema.declareConstructor<S[\"Type\"], S[\"Encoded\"]>()(\n    [schema],\n    ([codec]) =>\n      (value, _ast, options) =>\n        SchemaParser.decodeUnknownEffect(codec)(value, { ...options, onExcessProperty: \"error\" }),\n    {\n      toCodecJson: ([codec]) =>\n        Schema.link<S[\"Encoded\"]>()(codec, SchemaTransformation.passthrough()),\n    },\n  );\n","import { Option, Schema } from \"effect\";\nimport { Prompt } from \"effect/unstable/ai\";\n\nimport { InputMessage } from \"../capabilities/Messaging.ts\";\nimport { PolicyLimit } from \"../core/AgentError.ts\";\nimport { AgentPolicy } from \"../core/AgentPolicy.ts\";\nimport { Update } from \"../core/AgentUpdates.ts\";\nimport {\n  AgentId,\n  AttemptId,\n  ThreadId,\n  DelegationId,\n  ReceiptId,\n  RunId,\n  SettlementId,\n  SubmissionId,\n  ToolCallId,\n  TurnId,\n} from \"../core/Identifiers.ts\";\nimport { strictSchema } from \"../core/internal/strict-schema.ts\";\nimport { utf8ByteLength } from \"../core/internal/utf8.ts\";\nimport { IdempotencyKey, Principal } from \"../core/Receipt.ts\";\nimport { ExhaustedLimit } from \"../core/RunEvent.ts\";\nimport { RunPolicyUsage } from \"../core/RunPolicyUsage.ts\";\nimport {\n  DelegationDepth,\n  SubagentBudgetReservation,\n  SubagentGrant,\n  SubagentParentLink,\n  ToolExecutionKind,\n} from \"../core/SubagentContract.ts\";\nimport { Selection, Snapshot } from \"../core/ToolExposure.ts\";\nimport { ToolParameterRejection } from \"../core/ToolResult.ts\";\nimport { ModelCallUsage, RunUsageSummary, RunTotals } from \"../core/Usage.ts\";\nimport { WorkerBudgetScope, WorkerRef, WorkerSource } from \"../core/Worker.ts\";\nimport { ContextHandoff } from \"../engine/ContextWindow.ts\";\n\nconst identifier = <const Name extends string>(name: Name) =>\n  Schema.NonEmptyString.pipe(Schema.brand(`@effect-agent/thread/${name}`));\n\n/** Stable identity of one canonical record. */\nexport const RecordId = identifier(\"RecordId\");\nexport type RecordId = typeof RecordId.Type;\n\n/** Stable idempotency identity of one atomic append. */\nexport const BatchId = identifier(\"BatchId\");\nexport type BatchId = typeof BatchId.Type;\n\n/** Identity of the deployment that produced a record. */\nexport const DeploymentId = identifier(\"DeploymentId\");\nexport type DeploymentId = typeof DeploymentId.Type;\n\n/** Identity of a fenced canonical-log producer. */\nexport const ProducerId = identifier(\"ProducerId\");\nexport type ProducerId = typeof ProducerId.Type;\n\n/** SHA-256 digest encoded as lowercase hexadecimal text. */\nexport const Digest = Schema.String.check(Schema.isPattern(/^[a-f0-9]{64}$/)).pipe(\n  Schema.brand(\"@effect-agent/thread/Digest\"),\n);\n\nexport type Digest = typeof Digest.Type;\n\n/** Adapter-owned resume cursor. Callers must not parse or synthesize it. */\nexport const ObservationOffset = identifier(\"ObservationOffset\");\nexport type ObservationOffset = typeof ObservationOffset.Type;\n\n/** Gap-free position in one Thread's canonical sequence. */\nexport const CanonicalSequence = Schema.Natural.pipe(\n  Schema.brand(\"@effect-agent/thread/CanonicalSequence\"),\n);\n\nexport type CanonicalSequence = typeof CanonicalSequence.Type;\n\n/** Monotonic fencing epoch for a Thread producer. */\nexport const ProducerEpoch = Schema.Natural.pipe(\n  Schema.brand(\"@effect-agent/thread/ProducerEpoch\"),\n);\n\nexport type ProducerEpoch = typeof ProducerEpoch.Type;\n\nconst BoundedText = Schema.String.check(Schema.isMaxLength(64 * 1024));\nconst BoundedName = Schema.NonEmptyString.check(Schema.isMaxLength(256));\n\n/** Stable, non-empty failure classification carried by a failed durable Settlement. */\nconst SettlementFailureTag = Schema.NonEmptyString.check(Schema.isMaxLength(256));\n\n/** Diagnostic text is bounded independently from the broader persisted JSON envelope. */\nconst SettlementFailureMessage = Schema.String.check(Schema.isMaxLength(16 * 1024));\n\n/**\n * The complete generic diagnostic allowed on a failed durable Settlement. It deliberately has\n * no raw Cause, stack, provider payload, or application-specific fields; those values can carry\n * secrets and do not form a stable cross-process contract.\n */\nexport const SettlementFailureDiagnostic = Schema.Struct({\n  errorTag: SettlementFailureTag,\n  message: SettlementFailureMessage,\n}).pipe(\n  strictSchema,\n  Schema.annotate({\n    identifier: \"@effect-agent/thread/SettlementFailureDiagnostic\",\n  }),\n);\n\nexport type SettlementFailureDiagnostic = typeof SettlementFailureDiagnostic.Type;\n\n/** Positive canonical (Run-relative, Attempt-independent) Turn number. */\nconst TurnNumber = Schema.Int.check(Schema.isGreaterThan(0));\n\nexport const MAX_PERSISTED_JSON_DEPTH = 64;\nexport const MAX_PERSISTED_JSON_COLLECTION_LENGTH = 4_096;\nexport const MAX_PERSISTED_JSON_NODES = 65_536;\nexport const MAX_PERSISTED_JSON_BYTES = 1024 * 1024;\n\n/**\n * Iteratively preflights an unknown value before Schema's recursive JSON validation. This is the\n * one narrow `Schema.declare` exception in the persistence model: Effect v4's `Unknown.decodeTo`\n * preserves `unknown` as the encoded type, which would leak through every nested record codec.\n * Schema.Json still owns the accepted value shape after this resource preflight succeeds.\n */\nconst isJson = Schema.is(Schema.Json);\n\nconst isPersistedJson = (input: unknown): input is Schema.Json => {\n  const pending: Array<\n    | { readonly _tag: \"visit\"; readonly value: unknown; readonly depth: number }\n    | { readonly _tag: \"leave\"; readonly value: object }\n  > = [{ _tag: \"visit\", value: input, depth: 0 }];\n\n  // Only ancestors indicate a cycle. Shared acyclic values serialize once per occurrence,\n  // so revisit them and charge every occurrence against the same resource limits.\n  const ancestors = new WeakSet<object>();\n  let nodes = 0;\n  let textUnits = 0;\n\n  try {\n    while (pending.length > 0) {\n      const current = pending.pop();\n\n      if (current === undefined) return false;\n      if (current._tag === \"leave\") {\n        ancestors.delete(current.value);\n        continue;\n      }\n      if (current.depth > MAX_PERSISTED_JSON_DEPTH || ++nodes > MAX_PERSISTED_JSON_NODES) {\n        return false;\n      }\n\n      const value = current.value;\n\n      if (value === null || typeof value === \"boolean\") continue;\n      if (typeof value === \"number\") {\n        if (!Number.isFinite(value)) return false;\n        continue;\n      }\n      if (typeof value === \"string\") {\n        textUnits += value.length;\n        if (textUnits > MAX_PERSISTED_JSON_BYTES) return false;\n        continue;\n      }\n      if (typeof value !== \"object\" || ancestors.has(value)) return false;\n      ancestors.add(value);\n      pending.push({ _tag: \"leave\", value });\n\n      const entries = Array.isArray(value)\n        ? Array.from(value, (entry, index) => [index, entry] as const)\n        : Object.entries(value);\n\n      if (entries.length > MAX_PERSISTED_JSON_COLLECTION_LENGTH) return false;\n      for (const [key, entry] of entries) {\n        textUnits += typeof key === \"string\" ? key.length : 0;\n        if (textUnits > MAX_PERSISTED_JSON_BYTES) return false;\n        pending.push({ _tag: \"visit\", value: entry, depth: current.depth + 1 });\n      }\n    }\n\n    if (!isJson(input)) return false;\n    const encoded = JSON.stringify(input);\n\n    return encoded !== undefined && utf8ByteLength(encoded) <= MAX_PERSISTED_JSON_BYTES;\n  } catch {\n    return false;\n  }\n};\n\n/** Canonical JSON admitted to persisted records and checkpoints under explicit resource limits. */\nexport const PersistedJson = Schema.declare(isPersistedJson, {\n  identifier: \"@effect-agent/thread/PersistedJson\",\n  description: \"JSON bounded by canonical persistence depth, collection, node, and byte limits\",\n});\n\nexport type PersistedJson = typeof PersistedJson.Type;\n\n/** Schema-owned replay inputs whose individual definitions are incorporated into digests. */\nexport class DefinitionDigestInput extends Schema.Class<DefinitionDigestInput>(\n  \"@effect-agent/thread/DefinitionDigestInput\",\n)({\n  agent: PersistedJson,\n  model: PersistedJson,\n  tools: PersistedJson,\n}) {}\n\n/** The contracts a retained Run may decode or execute, independent of its deployment. */\nexport class ReplayContract extends Schema.Class<ReplayContract>(\n  \"@effect-agent/thread/ReplayContract\",\n)({\n  agent: Digest,\n  /** Agent semantics and output/completion codecs; the saved input is checked separately. */\n  agentBehavior: Schema.optionalKey(Digest),\n  tools: Schema.Record(Schema.String, Digest),\n}) {}\n\n/** Digests identify admission exactly; replay contracts separately authorize continuation. */\nexport class DefinitionDigests extends Schema.Class<DefinitionDigests>(\n  \"@effect-agent/thread/DefinitionDigests\",\n)({\n  agent: Digest,\n  model: Digest,\n  tools: Digest,\n  replay: Schema.optionalKey(ReplayContract),\n}) {}\n\nexport class ThreadCreated extends Schema.TaggedClass<ThreadCreated>(\n  \"@effect-agent/thread/ThreadCreated\",\n)(\"ThreadCreated\", {\n  agentId: AgentId,\n  definitions: DefinitionDigests,\n}) {}\n\n/**\n * One recorded Thread input. `submissionId` is present only for durably accepted work;\n * retained history has no admission or settlement obligation. `kind` identifies the input seam.\n */\nexport class UserInputRecorded extends Schema.TaggedClass<UserInputRecorded>(\n  \"@effect-agent/thread/UserInputRecorded\",\n)(\"UserInputRecorded\", {\n  submissionId: Schema.optionalKey(SubmissionId),\n  kind: Schema.Literals([\"user\", \"steering\", \"follow-up\"]),\n  runId: Schema.optionalKey(RunId),\n  input: PersistedJson,\n  messageAdmission: Schema.optionalKey(InputMessage),\n}) {}\n\n/** Immutable Run start and per-Attempt duration allowance, before any agent execution. */\nexport class RunStartedRecord extends Schema.TaggedClass<RunStartedRecord>(\n  \"@effect-agent/thread/RunStartedRecord\",\n)(\"RunStarted\", {\n  runId: RunId,\n  /** Older private histories cannot prove programmatic accounting and must be reset. */\n  policyAccountingVersion: Schema.Literal(1),\n  maxDurationMillis: Schema.Finite.check(Schema.isGreaterThan(0)),\n}) {}\n\n/** An active Attempt exhausted its execution allowance; downtime alone never writes this. */\nexport class RunDurationExhausted extends Schema.TaggedClass<RunDurationExhausted>(\n  \"@effect-agent/thread/RunDurationExhausted\",\n)(\"RunDurationExhausted\", { runId: RunId }) {}\n\nconst PersistedPromptMessages = Schema.toEncoded(Prompt.Prompt);\nconst isPersistedPromptMessages = Schema.is(PersistedPromptMessages);\n\n/**\n * Final model output. Immediate history may include the exact encoded Prompt suffix of the\n * successful Run; durable execution instead journals individual ModelResponseRecorded Turns.\n */\nexport class ModelCompleted extends Schema.TaggedClass<ModelCompleted>(\n  \"@effect-agent/thread/ModelCompleted\",\n)(\n  \"ModelCompleted\",\n  Schema.Struct({\n    runId: RunId,\n    output: PersistedJson,\n    messages: Schema.optionalKey(PersistedJson),\n  }).check(\n    Schema.makeFilter(\n      (record) => record.messages === undefined || isPersistedPromptMessages(record.messages),\n      { title: \"Retained Run messages are Schema-encoded Effect AI Prompt messages\" },\n    ),\n  ),\n) {}\n\nexport class ToolCallSettled extends Schema.TaggedClass<ToolCallSettled>(\n  \"@effect-agent/thread/ToolCallSettled\",\n)(\"ToolCallSettled\", {\n  toolSelection: Schema.optionalKey(Selection),\n  runId: RunId,\n  toolCallId: ToolCallId,\n  toolName: BoundedName,\n  result: PersistedJson,\n  isFailure: Schema.Boolean,\n  /** Explicit engine evidence, never inferred from Tool result data. */\n  budgetRejected: Schema.optionalKey(Schema.Literal(true)),\n}) {}\n\n/**\n * One committed model Turn. `messages` carries the Schema-encoded Effect AI Prompt messages this\n * Turn appended (assistant response plus any tool-call declarations), committed atomically at the\n * Turn boundary so a recovering Attempt can rebuild the next Prompt from canonical records alone.\n * `messagesDigest` pins the exact encoded content.\n */\nconst ModelResponseRecordedFields = Schema.Struct({\n  /** Explicit pre-execution failures, committed with the original arguments before any approval. */\n  toolParameterRejections: Schema.optionalKey(Schema.Array(ToolParameterRejection)),\n  toolExposure: Schema.optionalKey(Snapshot),\n  runId: RunId,\n  turnId: TurnId,\n  turn: TurnNumber,\n  messages: PersistedJson,\n  messagesDigest: Digest,\n  /**\n   * Number of leading messages that belong only to this Run's evaluated instructions and wake\n   * input. They remain canonical and are visible while recovering this Run, but later Runs omit\n   * them from their model-facing history. Records without this field retain their full history.\n   */\n  runScopedPrefixLength: Schema.optionalKey(Schema.Int.check(Schema.isGreaterThan(0))),\n  /**\n   * Exact normalized usage for every model call staged into this Turn. A\n   * summarizer and the Turn response are distinct entries. Absent on legacy\n   * records, whose aggregate totals below retain the old resume behavior.\n   */\n  modelUsage: Schema.optionalKey(Schema.Array(ModelCallUsage)),\n  /** Observed invocations without retained accounting before this Turn committed. */\n  unobservedModelCalls: Schema.optionalKey(Schema.Natural),\n  /** Aggregate compatibility fields used by older projections. */\n  inputTokens: Schema.optionalKey(Schema.Natural),\n  outputTokens: Schema.optionalKey(Schema.Natural),\n  /** Estimated spend staged with the usage; recovery re-seeds the cost budget (RUN-023). */\n  costMicrousd: Schema.optionalKey(Schema.Natural),\n}).check(\n  Schema.makeFilter(\n    (response) =>\n      response.runScopedPrefixLength === undefined ||\n      (isPersistedPromptMessages(response.messages) &&\n        response.runScopedPrefixLength < response.messages.content.length &&\n        response.messages.content\n          .slice(0, response.runScopedPrefixLength)\n          .every((message) => message.role === \"system\" || message.role === \"user\")),\n    {\n      title:\n        \"Run-scoped Prompt prefix contains only instruction/wake messages and leaves one response\",\n    },\n  ),\n);\n\nexport class ModelResponseRecorded extends Schema.TaggedClass<ModelResponseRecorded>(\n  \"@effect-agent/thread/ModelResponseRecorded\",\n)(\"ModelResponseRecorded\", ModelResponseRecordedFields) {}\n\n/**\n * One approved uncertain/idempotent ordinary Tool Call made durable BEFORE any handler starts\n * (durability §10). `parameters` is the Schema-encoded wire form of the declared call and\n * `parametersDigest` pins it; recovery that sees this record without a matching `ToolCallSettled`\n * (or `ToolCallUnknown` → `ToolCallResolved`) must reconcile or mark unknown, never silently\n * replay (DUR-009). Ordinary `readonly`-class Tools never produce this record. Delegation\n * classification is always prepared, including for a Tool annotated `readonly`.\n */\nexport class ToolCallPrepared extends Schema.TaggedClass<ToolCallPrepared>(\n  \"@effect-agent/thread/ToolCallPrepared\",\n)(\"ToolCallPrepared\", {\n  runId: RunId,\n  turnId: TurnId,\n  turn: TurnNumber,\n  toolCallId: ToolCallId,\n  toolName: BoundedName,\n  parameters: PersistedJson,\n  parametersDigest: Digest,\n  /** Absent legacy evidence grants no delegation replay authority. */\n  executionKind: Schema.optionalKey(ToolExecutionKind),\n}) {}\n\n/** Monotonic reservations charged before programmatic execution or grace finalization. */\nexport class RunPolicyUsageReserved extends Schema.TaggedClass<RunPolicyUsageReserved>()(\n  \"RunPolicyUsageReserved\",\n  {\n    runId: RunId,\n    programmaticToolCalls: RunPolicyUsage.fields.programmaticToolCalls,\n    finalizationUsed: RunPolicyUsage.fields.finalizationUsed,\n  },\n) {}\n\n/**\n * A durable Unknown Outcome: the external effect of one prepared ordinary Tool Call may have\n * happened but was not confirmed canonically (DUR-009/DUR-017). It is neither success nor\n * ordinary failure; automatic continuation stops until an authorized resolution arrives.\n */\nexport class ToolCallUnknown extends Schema.TaggedClass<ToolCallUnknown>(\n  \"@effect-agent/thread/ToolCallUnknown\",\n)(\"ToolCallUnknown\", {\n  runId: RunId,\n  turn: TurnNumber,\n  toolCallId: ToolCallId,\n  toolName: BoundedName,\n  reason: BoundedText,\n}) {}\n\n/** How one open/unknown Tool Call was authoritatively closed (DUR-017 resolution audit). */\nexport const ToolCallResolution = Schema.Literals([\n  \"completed-with-result\",\n  \"failed-with-error\",\n  \"never-started\",\n  \"safe-retry\",\n]);\n\nexport type ToolCallResolution = typeof ToolCallResolution.Type;\n\n/**\n * The canonical audit record closing one open or unknown Tool Call: reconciler-recovered supplier\n * truth or an authorized `resolveUnknown` command. `author`/`reason` make every resolution an\n * attributable decision (DUR-017); a `completed-with-result` resolution is accompanied by the\n * per-call `ToolCallSettled` record carrying the recovered result.\n */\nexport class ToolCallResolved extends Schema.TaggedClass<ToolCallResolved>(\n  \"@effect-agent/thread/ToolCallResolved\",\n)(\"ToolCallResolved\", {\n  runId: RunId,\n  toolCallId: ToolCallId,\n  resolution: ToolCallResolution,\n  author: BoundedName,\n  reason: BoundedText,\n}) {}\n\n/**\n * One accepted Durable Step result (durability §11): exactly-once-recorded while the Step's\n * external side effect stays honestly at-least-once-executed. Only success is recorded — a failing\n * Step body fails into the handler's error channel and re-executes on re-entry. `output` is the\n * Schema-encoded Step output; `outputDigest` pins it for replay-divergence detection.\n */\nexport class ToolStepSettled extends Schema.TaggedClass<ToolStepSettled>(\n  \"@effect-agent/thread/ToolStepSettled\",\n)(\"ToolStepSettled\", {\n  runId: RunId,\n  toolCallId: ToolCallId,\n  stepName: BoundedName,\n  output: PersistedJson,\n  outputDigest: Digest,\n}) {}\n\n/**\n * A canonical approval request for one declared Tool Call (CAP-006, durability §8): with this\n * record durable, \"waiting for explicit approval\" is a safe suspension boundary — the resumed\n * Attempt replays the declared batch instead of re-invoking the model.\n */\nexport class ToolApprovalRequested extends Schema.TaggedClass<ToolApprovalRequested>(\n  \"@effect-agent/thread/ToolApprovalRequested\",\n)(\"ToolApprovalRequested\", {\n  runId: RunId,\n  turnId: TurnId,\n  turn: TurnNumber,\n  toolCallId: ToolCallId,\n  toolName: BoundedName,\n  parametersDigest: Digest,\n}) {}\n\n/** The two-valued approval decision family shared by canonical records and ledger intents. */\nexport const ApprovalDecision = Schema.Literals([\"approved\", \"denied\"]);\nexport type ApprovalDecision = typeof ApprovalDecision.Type;\n\n/**\n * The canonical decision for one requested approval. Appended by the deciding Attempt (policy\n * auto-decisions) or by the resuming Attempt after a durable `resolveApproval` intent; it is the\n * deterministic decision authority for every later Attempt of the same Run.\n */\nexport class ToolApprovalDecided extends Schema.TaggedClass<ToolApprovalDecided>(\n  \"@effect-agent/thread/ToolApprovalDecided\",\n)(\"ToolApprovalDecided\", {\n  runId: RunId,\n  turn: TurnNumber,\n  toolCallId: ToolCallId,\n  decision: ApprovalDecision,\n  resolver: BoundedName,\n  reason: BoundedText,\n}) {}\n\n/**\n * First-class interruption audit (durability §9): appended by a superseding Attempt before it\n * re-invokes the model for a Turn whose prior owner died without a complete canonical response.\n * Duplicate provider cost is thereby possible AND observable in canonical history.\n */\nexport class ModelResponseInterrupted extends Schema.TaggedClass<ModelResponseInterrupted>(\n  \"@effect-agent/thread/ModelResponseInterrupted\",\n)(\"ModelResponseInterrupted\", {\n  runId: RunId,\n  supersededEpoch: ProducerEpoch,\n  attemptId: AttemptId,\n  reason: BoundedText,\n}) {}\n\n/**\n * One engine-native compaction committed before the pre-Turn view changes (RUN-026).\n * `coversThrough` is a Thread record sequence: the projection\n * renders records at or below it as a summary (`summarize`), a fresh window (`rollover`), or with\n * cleared tool results (kind `clear-tool-results`), never erasing source\n * history. The record carries no digest by decision: it is appended by the\n * fenced owner into the very log it covers, and re-verifying a digest would\n * re-read the covered range on every wake — the O(history) work compaction\n * exists to remove. Host-supplied ContextCompactor decisions use this same commit path.\n * Summaries exceeding BoundedText are rejected before append, never truncated.\n * `summary` is present exactly for `summarize` records; the projection\n * treats a summarize record without one as invalid and ignores it fail-safe.\n */\nexport class CompactionCreated extends Schema.TaggedClass<CompactionCreated>(\n  \"@effect-agent/thread/CompactionCreated\",\n)(\"CompactionCreated\", {\n  runId: RunId,\n  turn: TurnNumber,\n  kind: Schema.Literals([\"clear-tool-results\", \"summarize\", \"rollover\"]),\n  coversThrough: CanonicalSequence,\n  summary: Schema.optionalKey(BoundedText),\n  handoff: Schema.optionalKey(ContextHandoff),\n}) {}\n\nexport class RunFailed extends Schema.TaggedClass<RunFailed>(\"@effect-agent/thread/RunFailed\")(\n  \"RunFailed\",\n  {\n    runId: RunId,\n    failure: PersistedJson,\n  },\n) {}\n\nconst RunCompletedFields = Schema.Struct({\n  runId: RunId,\n  output: PersistedJson,\n  /** Application disposition captured with an ordinary completion. */\n  runDisposition: Schema.optionalKey(PersistedJson),\n  /** Honest soft-landing marker, present exactly when `exhausted` is present. */\n  finishReason: Schema.optionalKey(Schema.Literal(\"budget-exhausted\")),\n  /** Budget dimension paired with `finishReason` on a soft landing. */\n  exhausted: Schema.optionalKey(ExhaustedLimit),\n}).check(\n  Schema.makeFilter(\n    (completed) =>\n      (completed.finishReason === undefined) === (completed.exhausted === undefined) &&\n      (completed.runDisposition === undefined || completed.finishReason === undefined),\n    { title: \"Run completion metadata matches its terminal family\" },\n  ),\n);\n\nexport class RunCompleted extends Schema.TaggedClass<RunCompleted>(\n  \"@effect-agent/thread/RunCompleted\",\n)(\"RunCompleted\", RunCompletedFields) {}\n\nexport class RepairAnnotated extends Schema.TaggedClass<RepairAnnotated>(\n  \"@effect-agent/thread/RepairAnnotated\",\n)(\"RepairAnnotated\", {\n  reason: BoundedText,\n  details: PersistedJson,\n}) {}\n\n/** Terminal outcome family for one accepted Submission (DUR-002). */\nexport const SettlementOutcome = Schema.Literals([\"completed\", \"failed\", \"aborted\"]);\nexport type SettlementOutcome = typeof SettlementOutcome.Type;\n\n/**\n * A durable abort command made canonical before the active worker is interrupted (DUR-012).\n * Repeating the same abort command is idempotent; abort never rewrites a prior terminal outcome.\n */\nexport class AbortRequested extends Schema.TaggedClass<AbortRequested>(\n  \"@effect-agent/thread/AbortRequested\",\n)(\"AbortRequested\", {\n  submissionId: SubmissionId,\n  author: BoundedName,\n  reason: BoundedText,\n}) {}\n\n/**\n * The single canonical settlement record owed to one accepted Submission (DUR-002, DUR-011).\n * Canonical history is the outcome authority: the ledger row is finalized from this record and\n * never the other way around (DUR-015).\n */\nconst RawSubmissionSettled = Schema.Struct({\n  submissionId: SubmissionId,\n  settlementId: SettlementId,\n  receiptId: ReceiptId,\n  outcome: SettlementOutcome,\n  runId: Schema.optionalKey(RunId),\n  result: Schema.optionalKey(PersistedJson),\n  /**\n   * Application-defined, Schema-encoded disposition for an ordinary completed\n   * Run. Absent for budget exhaustion and every non-completed or run-less\n   * settlement; consumers decode it with the application definition's Schema.\n   */\n  runDisposition: Schema.optionalKey(PersistedJson),\n  /**\n   * Present only when a `completed` Run settled through the final-answer\n   * exhaustion resolution (RUN-011, RUN-018): the durable log must be able to\n   * distinguish honest-exhaustion completion from ordinary completion without\n   * the live event stream. Absent for every ordinary settlement, keeping\n   * existing histories and goldens byte-stable (additive, schemaVersion 1).\n   */\n  finishReason: Schema.optionalKey(Schema.Literal(\"budget-exhausted\")),\n  /**\n   * The dimension that bound a budget-exhausted completion (RUN-011,\n   * RUN-025), carried verbatim from the live `RunCompleted` event so\n   * consumers never reconstruct it from message text. Valid only alongside\n   * `finishReason: \"budget-exhausted\"`; absent on histories persisted before\n   * the dimension became durable (additive, schemaVersion 1).\n   */\n  exhausted: Schema.optionalKey(ExhaustedLimit),\n  /**\n   * The typed `AgentPolicyError.limit` of a `failed` hard-rail settlement\n   * (RUN-011): which finite policy dimension failed the Run, preserved\n   * alongside the bounded `{errorTag, message}` failure projection in\n   * `result`. Absent for every non-policy failure and on histories persisted\n   * before the limit became durable (additive, schemaVersion 1).\n   */\n  policyLimit: Schema.optionalKey(PolicyLimit),\n  /** Canonical aggregate of all priced model calls made by this Run. */\n  usageSummary: Schema.optionalKey(RunUsageSummary),\n  /** Calls included in usageSummary but not in any ModelResponseRecorded, retained on failure. */\n  uncommittedModelUsage: Schema.optionalKey(Schema.Array(ModelCallUsage)),\n});\n\nconst isPolicyFailureProjection = Schema.is(\n  Schema.Struct({ errorTag: Schema.Literal(\"AgentPolicyError\") }),\n);\n\nconst decodeSettlementFailureDiagnostic = Schema.decodeUnknownOption(SettlementFailureDiagnostic, {\n  onExcessProperty: \"error\",\n});\n\nconst hasValidSettlementFamily = (settled: typeof RawSubmissionSettled.Type): boolean =>\n  (settled.finishReason === undefined || settled.outcome === \"completed\") &&\n  (settled.finishReason === undefined) === (settled.exhausted === undefined) &&\n  (settled.usageSummary === undefined || settled.runId !== undefined) &&\n  (settled.uncommittedModelUsage === undefined ||\n    (settled.runId !== undefined && settled.usageSummary !== undefined)) &&\n  (settled.runDisposition === undefined ||\n    (settled.outcome === \"completed\" &&\n      settled.finishReason === undefined &&\n      settled.runId !== undefined &&\n      settled.result !== undefined)) &&\n  (settled.outcome !== \"failed\" ||\n    Option.isSome(decodeSettlementFailureDiagnostic(settled.result))) &&\n  (settled.outcome !== \"aborted\" || settled.result === undefined) &&\n  (settled.policyLimit === undefined ||\n    (settled.outcome === \"failed\" && isPolicyFailureProjection(settled.result)));\n\nconst SubmissionSettledFields = RawSubmissionSettled.check(\n  Schema.makeFilter(hasValidSettlementFamily, {\n    title:\n      \"failed settlements require a bounded diagnostic; aborted settlements carry no result; budget metadata must match its settlement family\",\n  }),\n);\n\nexport class SubmissionSettled extends Schema.TaggedClass<SubmissionSettled>(\n  \"@effect-agent/thread/SubmissionSettled\",\n)(\"SubmissionSettled\", SubmissionSettledFields) {}\n\n/** Canonical completed settlement; joined completion may legitimately carry no independent result. */\nexport type CompletedSubmissionSettled = SubmissionSettled & {\n  readonly outcome: \"completed\";\n};\n\n/** Canonical failed settlement; its bounded diagnostic is required and typed. */\nexport type FailedSubmissionSettled = SubmissionSettled & {\n  readonly outcome: \"failed\";\n  readonly result: SettlementFailureDiagnostic;\n};\n\n/** Canonical aborted settlement; abort records intent rather than fabricating a terminal result. */\nexport type AbortedSubmissionSettled = SubmissionSettled & {\n  readonly outcome: \"aborted\";\n  readonly result?: never;\n};\n\nexport type SubmissionSettledRecord =\n  | CompletedSubmissionSettled\n  | FailedSubmissionSettled\n  | AbortedSubmissionSettled;\n\n/**\n * Canonical-boundary view of `SubmissionSettled`: `finishReason` is valid\n * only on a `completed` outcome, `exhausted` only alongside\n * `finishReason: \"budget-exhausted\"`, every `failed` outcome requires the exact bounded\n * `SettlementFailureDiagnostic`, aborted outcomes carry no result, and `policyLimit` only occurs\n * on a `failed` outcome whose diagnostic carries the `AgentPolicyError` tag. `runDisposition`\n * occurs only on an ordinary completed settlement with a Run —\n * so a malformed persisted combination such as\n * `{ outcome: \"failed\", finishReason: \"budget-exhausted\" }` or a\n * `policyLimit` contradicting `result.errorTag` fails closed at decode\n * instead of becoming trusted audit history (STORE-006, RUN-011).\n */\nexport const SubmissionSettledRecord = SubmissionSettled.pipe(\n  Schema.refine(\n    (settled): settled is SubmissionSettledRecord => hasValidSettlementFamily(settled),\n    {\n      expected:\n        \"failed settlements require a bounded diagnostic, aborted settlements carry no result, finishReason only occurs on completed settlements, exhausted only occurs with finishReason budget-exhausted, runDisposition only occurs on an ordinary completed settlement with a Run result, and policyLimit only occurs on a failed AgentPolicyError settlement\",\n    },\n  ),\n);\n\n/**\n * PARENT-log record of one durable child establishment request:\n * the exact parent Tool Call, delegation and target identity, the digests that pin the child's\n * Binding/input/grant, the fenced budget reservation, and the INTENDED child identity derived\n * deterministically from the parent Run and Tool Call pair (D4). `childInput` carries the\n * prepared child input in encoded form (D3) so recovery can complete child admission from this\n * record alone — no live delegation handler is required. `childPrincipal`/`childIdempotencyKey`\n * carry the ledger admission scope with the ledger's exact bounds; the layering keeps their\n * branded Schemas in the ledger port.\n */\nexport class SubagentRequested extends Schema.TaggedClass<SubagentRequested>(\n  \"@effect-agent/thread/SubagentRequested\",\n)(\"SubagentRequested\", {\n  runId: RunId,\n  turnId: TurnId,\n  turn: TurnNumber,\n  toolCallId: ToolCallId,\n  delegationId: DelegationId,\n  targetAgentId: AgentId,\n  targetDigests: DefinitionDigests,\n  childInput: PersistedJson,\n  childInputDigest: Digest,\n  grantDigest: Digest,\n  reservationId: BoundedName,\n  reservationDigest: Digest,\n  childThreadId: ThreadId,\n  childPrincipal: BoundedName,\n  childIdempotencyKey: BoundedName,\n  /** Effective invocation bound, already clamped to the delegation and child Definition. */\n  toolCallAllowance: Schema.optionalKey(Schema.Int.check(Schema.isGreaterThan(0))),\n  policy: Schema.optionalKey(Schema.toCodecJson(AgentPolicy)),\n  budget: Schema.optionalKey(SubagentBudgetReservation),\n  grant: Schema.optionalKey(SubagentGrant),\n  depth: Schema.optionalKey(DelegationDepth),\n}) {}\n\n/**\n * PARENT-log record that the intended child exists as accepted work:\n * the full established child identity. It is appended only after the child Receipt\n * exists — SUB-017 holds by construction because `childReceiptId` is a required field.\n */\nexport class SubagentStarted extends Schema.TaggedClass<SubagentStarted>(\n  \"@effect-agent/thread/SubagentStarted\",\n)(\"SubagentStarted\", {\n  runId: RunId,\n  toolCallId: ToolCallId,\n  childThreadId: ThreadId,\n  childSubmissionId: SubmissionId,\n  childReceiptId: ReceiptId,\n  childRunId: RunId,\n}) {}\n\n/**\n * PARENT-log record of one verified child settlement join:\n * the child's canonical Settlement identity and outcome, the digests pinning the verified child\n * result and the bounded projected parent result, the child usage summary, and the FINAL\n * consumed/released accounting decision for the reservation. It commits in ONE atomic batch with\n * the parent `ToolCallSettled` record (SUB-019); `beginChildBudgetRelease` replays\n * `finalAccounting` from this record, so canonical history authorizes the release (DUR-015).\n */\nexport class SubagentJoined extends Schema.TaggedClass<SubagentJoined>(\n  \"@effect-agent/thread/SubagentJoined\",\n)(\"SubagentJoined\", {\n  runId: RunId,\n  toolCallId: ToolCallId,\n  childSubmissionId: SubmissionId,\n  childSettlementId: SettlementId,\n  childOutcome: SettlementOutcome,\n  childResultDigest: Digest,\n  projectedResultDigest: Digest,\n  usageSummary: PersistedJson,\n  usage: Schema.optionalKey(RunTotals),\n  delegatedUsage: Schema.optionalKey(RunTotals),\n  reservationId: BoundedName,\n  finalAccounting: PersistedJson,\n}) {}\n\n/**\n * CHILD-log immutable lineage: the Parent Link plus the digests that pin\n * the child's definition, input, and authority grant. It is the first record after the child's\n * `ThreadCreated` (its own single-record batch, so the generic `thread-created:{cid}`\n * batch identity is never contradicted) and the join path verifies it fail-closed — a fabricated\n * child or parent identity fails Parent Link verification (SUB-004, D10).\n */\nexport class SubagentLineageRecorded extends Schema.TaggedClass<SubagentLineageRecorded>(\n  \"@effect-agent/thread/SubagentLineageRecorded\",\n)(\"SubagentLineageRecorded\", {\n  parentLink: SubagentParentLink,\n  parentSubmissionId: SubmissionId,\n  childDefinitionDigests: DefinitionDigests,\n  childInputDigest: Digest,\n  grantDigest: Digest,\n  /** Copied from the canonical request before readiness; restored for every child Attempt. */\n  toolCallAllowance: SubagentRequested.fields.toolCallAllowance,\n  policy: SubagentRequested.fields.policy,\n  budget: SubagentRequested.fields.budget,\n  grant: SubagentRequested.fields.grant,\n}) {}\n\nexport const WorkerReportingIntent = Schema.Struct({\n  /** Omitted preserves existing application-mapped reports. */\n  mode: Schema.optionalKey(Schema.Literal(\"standard\")),\n  sourceDigests: DefinitionDigests,\n  destinationDelegationId: Schema.optionalKey(DelegationId),\n});\n\n/** Immutable worker Thread origin. Each input has its own digest and parameters separately. */\nexport const WorkerOrigin = Schema.Struct({\n  worker: WorkerRef,\n  source: WorkerSource,\n  /** Omitted retains source-subtree funding; worker-run renews only for a new native Run. */\n  budgetScope: Schema.optionalKey(WorkerBudgetScope),\n  targetDigests: DefinitionDigests,\n  policy: Schema.toCodecJson(AgentPolicy),\n  budget: SubagentBudgetReservation,\n  grant: SubagentGrant,\n  depth: DelegationDepth,\n  toolCallAllowance: Schema.optionalKey(Schema.Int.check(Schema.isGreaterThan(0))),\n  firstMessageId: IdempotencyKey,\n  createdAtMillis: Schema.Natural,\n  expiresAtMillis: Schema.Natural,\n  /** Exact source registration owns projection; absence means reporting was not declared. */\n  reporting: Schema.optionalKey(WorkerReportingIntent),\n}).check(Schema.makeFilter((value) => value.expiresAtMillis > value.createdAtMillis));\n\nexport type WorkerOrigin = typeof WorkerOrigin.Type;\n\n/** Frozen per-input metadata; it grants no attached-child or parent-abort semantics. */\nexport const WorkerAdmission = Schema.Struct({\n  origin: WorkerOrigin,\n  messageId: IdempotencyKey,\n  parameters: PersistedJson,\n  createdAtMillis: Schema.Natural,\n  /** Host-bound source input whose subtree funds this input; never chosen by a model. */\n  sourceSubmissionId: Schema.optionalKey(SubmissionId),\n  /** Enables routed receipt lookup when the delivery is owned by a reporting child. */\n  deliveryPrincipal: Schema.optionalKey(Principal),\n  /** Proven framework updates use a separate bounded input-capacity partition. */\n  reportKind: Schema.optionalKey(Schema.Literal(\"update\")),\n});\n\nexport type WorkerAdmission = typeof WorkerAdmission.Type;\n\n/** Source-log capacity reservation, retained independently of the source Run's settlement. */\nexport class WorkerInputRequested extends Schema.TaggedClass<WorkerInputRequested>()(\n  \"WorkerInputRequested\",\n  { admission: WorkerAdmission, inputDigest: Digest },\n) {}\n\n/** Child-log origin, reconstructed from a retained delivery before the child becomes ready. */\nexport class WorkerOriginRecorded extends Schema.TaggedClass<WorkerOriginRecorded>()(\n  \"WorkerOriginRecorded\",\n  { origin: WorkerOrigin },\n) {}\n\n/** Canonical child completion acknowledgement releases only this input's active capacity. */\nexport class WorkerInputCompleted extends Schema.TaggedClass<WorkerInputCompleted>()(\n  \"WorkerInputCompleted\",\n  {\n    messageId: IdempotencyKey,\n    workerThreadId: ThreadId,\n    submissionId: SubmissionId,\n    receiptId: ReceiptId,\n    settlementId: SettlementId,\n    completedAtMillis: Schema.Natural,\n  },\n) {}\n\n/**\n * Frozen report decision for one actual Run, shared by every joined Receipt. The envelope is\n * a Schema-encoded PreparedInput, validated before append and decoded again on recovery.\n * Keeping the encoded value here avoids a Records/PreparedInput schema dependency cycle.\n */\nexport class WorkerReportPrepared extends Schema.TaggedClass<WorkerReportPrepared>()(\n  \"WorkerReportPrepared\",\n  {\n    runId: RunId,\n    messageId: IdempotencyKey,\n    envelope: PersistedJson,\n    createdAtMillis: Schema.Natural,\n    deadlineAtMillis: Schema.Natural,\n    predecessor: Schema.optionalKey(IdempotencyKey),\n  },\n) {}\n\n/** Accepted update and its optional frozen parent delivery are one atomic canonical fact. */\nexport class AgentUpdateEmitted extends Schema.TaggedClass<AgentUpdateEmitted>()(\n  \"AgentUpdateEmitted\",\n  {\n    update: Update,\n    definitions: DefinitionDigests,\n    delivery: Schema.optionalKey(\n      Schema.Struct({\n        messageId: IdempotencyKey,\n        envelope: PersistedJson,\n        createdAtMillis: Schema.Natural,\n        deadlineAtMillis: Schema.Natural,\n        predecessor: Schema.optionalKey(IdempotencyKey),\n      }),\n    ),\n  },\n) {}\n\n/** Permanent bounded report refusal. Application errors and raw Run dispositions stay private. */\nexport class WorkerReportRefused extends Schema.TaggedClass<WorkerReportRefused>()(\n  \"WorkerReportRefused\",\n  {\n    runId: RunId,\n    messageId: IdempotencyKey,\n    reason: Schema.Literals([\n      \"declaration-unavailable\",\n      \"destination\",\n      \"projection\",\n      \"input\",\n      \"preparation\",\n      \"timeout\",\n      \"defect\",\n      \"expired\",\n      \"denied\",\n      \"capacity\",\n    ]),\n  },\n) {}\n\n/** Frozen source proof of peer provenance, readable through routed canonical storage. */\nexport class PeerMessagePrepared extends Schema.TaggedClass<PeerMessagePrepared>()(\n  \"PeerMessagePrepared\",\n  {\n    messageId: IdempotencyKey,\n    sourcePrincipal: Principal,\n    operation: Schema.Literals([\"send\", \"reply\"]),\n    deadlineAtMillis: Schema.Int.check(Schema.isGreaterThan(0)),\n    encodedEnvelope: PersistedJson,\n  },\n) {}\n\n/**\n * One disjoint subtree slice shared by attached and background children of a source input.\n * The source keeps its own execution ceiling; descendants spend only the remaining allocation.\n * Reservations include future descendant slots and never refund, including after interruption.\n * resultBytes reserves the terminal/projection result, not cumulative Tool output bytes.\n */\nexport class SubtreeBudgetReserved extends Schema.TaggedClass<SubtreeBudgetReserved>()(\n  \"SubtreeBudgetReserved\",\n  {\n    reservationId: BoundedName,\n    sourceSubmissionId: Schema.optionalKey(SubmissionId),\n    childThreadId: ThreadId,\n    lifetime: Schema.Literals([\"attached\", \"background\"]),\n    depth: DelegationDepth,\n    policy: Schema.toCodecJson(AgentPolicy),\n    grant: SubagentGrant,\n    budget: SubagentBudgetReservation,\n  },\n) {}\n\n/**\n * Current private-development canonical payload family. Phase 5 adds the seven durable-Tool tags\n * (prepared/unknown/resolved/step/approval-request/approval-decision/interrupted) additively; S2\n * adds the four durable-Subagent tags (requested/started/joined/lineage) additively, so the\n * envelope keeps `schemaVersion: 1` (P4 precedent for additive payload tags).\n */\nexport const CanonicalRecordPayload = Schema.Union([\n  ThreadCreated,\n  UserInputRecorded,\n  RunStartedRecord,\n  RunDurationExhausted,\n  RunPolicyUsageReserved,\n  ModelCompleted,\n  ModelResponseRecorded,\n  ToolCallPrepared,\n  ToolCallSettled,\n  ToolCallUnknown,\n  ToolCallResolved,\n  ToolStepSettled,\n  ToolApprovalRequested,\n  ToolApprovalDecided,\n  ModelResponseInterrupted,\n  CompactionCreated,\n  RunFailed,\n  RunCompleted,\n  AbortRequested,\n  SubmissionSettledRecord,\n  SubagentRequested,\n  SubagentStarted,\n  SubagentJoined,\n  SubagentLineageRecorded,\n  WorkerInputRequested,\n  WorkerOriginRecorded,\n  WorkerInputCompleted,\n  WorkerReportPrepared,\n  AgentUpdateEmitted,\n  WorkerReportRefused,\n  PeerMessagePrepared,\n  SubtreeBudgetReserved,\n  RepairAnnotated,\n]);\n\nexport type CanonicalRecordPayload = typeof CanonicalRecordPayload.Type;\n\n/**\n * Versioned record envelope stored in an atomic batch. Thread ordering is assigned only\n * when the batch is committed.\n */\nexport class RecordEnvelope extends Schema.Class<RecordEnvelope>(\n  \"@effect-agent/thread/RecordEnvelope\",\n)({\n  recordId: RecordId,\n  family: Schema.Literal(\"thread\"),\n  schemaVersion: Schema.Literal(1),\n  createdAt: Schema.DateTimeUtcFromString,\n  deploymentId: DeploymentId,\n  payload: CanonicalRecordPayload,\n}) {}\n\n/** Backward-compatible domain name for a canonical record. */\nexport const CanonicalRecord = RecordEnvelope;\nexport type CanonicalRecord = RecordEnvelope;\n\n/** One non-empty, bounded, idempotent atomic append unit. */\nexport class CanonicalBatch extends Schema.Class<CanonicalBatch>(\n  \"@effect-agent/thread/CanonicalBatch\",\n)({\n  batchId: BatchId,\n  producerId: ProducerId,\n  records: Schema.NonEmptyArray(RecordEnvelope).check(Schema.isMaxLength(256)),\n}) {}\n\n/**\n * A committed record with its Thread ordering and opaque resumable observation cursor.\n */\nexport class CanonicalRecordEnvelope extends Schema.Class<CanonicalRecordEnvelope>(\n  \"@effect-agent/thread/CanonicalRecordEnvelope\",\n)({\n  threadId: ThreadId,\n  batchId: BatchId,\n  sequence: CanonicalSequence,\n  offset: ObservationOffset,\n  record: RecordEnvelope,\n}) {}\n\nexport const CURRENT_CANONICAL_SCHEMA_VERSION = 1 as const;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAGA,MAAa,gBAAsC,WACjD,OAAO,mBAA4C,CAAC,CAClD,CAAC,MAAM,IACN,CAAC,YACC,OAAO,MAAM,YACZ,aAAa,oBAAoB,KAAK,CAAC,CAAC,OAAO;CAAE,GAAG;CAAS,kBAAkB;AAAQ,CAAC,GAC5F,EACE,cAAc,CAAC,WACb,OAAO,KAAmB,CAAC,CAAC,OAAO,qBAAqB,YAAY,CAAC,EACzE,CACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACwBF,MAAM,cAAyC,SAC7C,OAAO,eAAe,KAAK,OAAO,MAAM,wBAAwB,MAAM,CAAC;;AAGzE,MAAa,WAAW,WAAW,UAAU;;AAI7C,MAAa,UAAU,WAAW,SAAS;;AAI3C,MAAa,eAAe,WAAW,cAAc;;AAIrD,MAAa,aAAa,WAAW,YAAY;;AAIjD,MAAa,SAAS,OAAO,OAAO,MAAM,OAAO,UAAU,gBAAgB,CAAC,CAAC,CAAC,KAC5E,OAAO,MAAM,6BAA6B,CAC5C;;AAKA,MAAa,oBAAoB,WAAW,mBAAmB;;AAI/D,MAAa,oBAAoB,OAAO,QAAQ,KAC9C,OAAO,MAAM,wCAAwC,CACvD;;AAKA,MAAa,gBAAgB,OAAO,QAAQ,KAC1C,OAAO,MAAM,oCAAoC,CACnD;AAIA,MAAM,cAAc,OAAO,OAAO,MAAM,OAAO,YAAY,KAAS,CAAC;AACrE,MAAM,cAAc,OAAO,eAAe,MAAM,OAAO,YAAY,GAAG,CAAC;;AAGvE,MAAM,uBAAuB,OAAO,eAAe,MAAM,OAAO,YAAY,GAAG,CAAC;;AAGhF,MAAM,2BAA2B,OAAO,OAAO,MAAM,OAAO,YAAY,KAAS,CAAC;;;;;;AAOlF,MAAa,8BAA8B,OAAO,OAAO;CACvD,UAAU;CACV,SAAS;AACX,CAAC,CAAC,CAAC,KACD,cACA,OAAO,SAAS,EACd,YAAY,mDACd,CAAC,CACH;;AAKA,MAAM,aAAa,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC;AAE3D,MAAa,2BAA2B;AACxC,MAAa,uCAAuC;AACpD,MAAa,2BAA2B;AACxC,MAAa,2BAA2B;;;;;;;AAQxC,MAAM,SAAS,OAAO,GAAG,OAAO,IAAI;AAEpC,MAAM,mBAAmB,UAAyC;CAChE,MAAM,UAGF,CAAC;EAAE,MAAM;EAAS,OAAO;EAAO,OAAO;CAAE,CAAC;CAI9C,MAAM,4BAAY,IAAI,QAAgB;CACtC,IAAI,QAAQ;CACZ,IAAI,YAAY;CAEhB,IAAI;EACF,OAAO,QAAQ,SAAS,GAAG;GACzB,MAAM,UAAU,QAAQ,IAAI;GAE5B,IAAI,YAAY,KAAA,GAAW,OAAO;GAClC,IAAI,QAAQ,SAAS,SAAS;IAC5B,UAAU,OAAO,QAAQ,KAAK;IAC9B;GACF;GACA,IAAI,QAAQ,QAAA,MAAoC,EAAE,QAAA,OAChD,OAAO;GAGT,MAAM,QAAQ,QAAQ;GAEtB,IAAI,UAAU,QAAQ,OAAO,UAAU,WAAW;GAClD,IAAI,OAAO,UAAU,UAAU;IAC7B,IAAI,CAAC,OAAO,SAAS,KAAK,GAAG,OAAO;IACpC;GACF;GACA,IAAI,OAAO,UAAU,UAAU;IAC7B,aAAa,MAAM;IACnB,IAAI,YAAA,SAAsC,OAAO;IACjD;GACF;GACA,IAAI,OAAO,UAAU,YAAY,UAAU,IAAI,KAAK,GAAG,OAAO;GAC9D,UAAU,IAAI,KAAK;GACnB,QAAQ,KAAK;IAAE,MAAM;IAAS;GAAM,CAAC;GAErC,MAAM,UAAU,MAAM,QAAQ,KAAK,IAC/B,MAAM,KAAK,QAAQ,OAAO,UAAU,CAAC,OAAO,KAAK,CAAU,IAC3D,OAAO,QAAQ,KAAK;GAExB,IAAI,QAAQ,SAAA,MAA+C,OAAO;GAClE,KAAK,MAAM,CAAC,KAAK,UAAU,SAAS;IAClC,aAAa,OAAO,QAAQ,WAAW,IAAI,SAAS;IACpD,IAAI,YAAA,SAAsC,OAAO;IACjD,QAAQ,KAAK;KAAE,MAAM;KAAS,OAAO;KAAO,OAAO,QAAQ,QAAQ;IAAE,CAAC;GACxE;EACF;EAEA,IAAI,CAAC,OAAO,KAAK,GAAG,OAAO;EAC3B,MAAM,UAAU,KAAK,UAAU,KAAK;EAEpC,OAAO,YAAY,KAAA,KAAa,eAAe,OAAO,KAAA;CACxD,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,MAAa,gBAAgB,OAAO,QAAQ,iBAAiB;CAC3D,YAAY;CACZ,aAAa;AACf,CAAC;;AAKD,IAAa,wBAAb,cAA2C,OAAO,MAChD,4CACF,CAAC,CAAC;CACA,OAAO;CACP,OAAO;CACP,OAAO;AACT,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,iBAAb,cAAoC,OAAO,MACzC,qCACF,CAAC,CAAC;CACA,OAAO;;CAEP,eAAe,OAAO,YAAY,MAAM;CACxC,OAAO,OAAO,OAAO,OAAO,QAAQ,MAAM;AAC5C,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,oBAAb,cAAuC,OAAO,MAC5C,wCACF,CAAC,CAAC;CACA,OAAO;CACP,OAAO;CACP,OAAO;CACP,QAAQ,OAAO,YAAY,cAAc;AAC3C,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,gBAAb,cAAmC,OAAO,YACxC,oCACF,CAAC,CAAC,iBAAiB;CACjB,SAAS;CACT,aAAa;AACf,CAAC,CAAC,CAAC,CAAC;;;;;AAMJ,IAAa,oBAAb,cAAuC,OAAO,YAC5C,wCACF,CAAC,CAAC,qBAAqB;CACrB,cAAc,OAAO,YAAY,YAAY;CAC7C,MAAM,OAAO,SAAS;EAAC;EAAQ;EAAY;CAAW,CAAC;CACvD,OAAO,OAAO,YAAY,KAAK;CAC/B,OAAO;CACP,kBAAkB,OAAO,YAAY,YAAY;AACnD,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,mBAAb,cAAsC,OAAO,YAC3C,uCACF,CAAC,CAAC,cAAc;CACd,OAAO;;CAEP,yBAAyB,OAAO,QAAQ,CAAC;CACzC,mBAAmB,OAAO,OAAO,MAAM,OAAO,cAAc,CAAC,CAAC;AAChE,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,uBAAb,cAA0C,OAAO,YAC/C,2CACF,CAAC,CAAC,wBAAwB,EAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AAE7C,MAAM,0BAA0B,OAAO,UAAU,OAAO,MAAM;AAC9D,MAAM,4BAA4B,OAAO,GAAG,uBAAuB;;;;;AAMnE,IAAa,iBAAb,cAAoC,OAAO,YACzC,qCACF,CAAC,CACC,kBACA,OAAO,OAAO;CACZ,OAAO;CACP,QAAQ;CACR,UAAU,OAAO,YAAY,aAAa;AAC5C,CAAC,CAAC,CAAC,MACD,OAAO,YACJ,WAAW,OAAO,aAAa,KAAA,KAAa,0BAA0B,OAAO,QAAQ,GACtF,EAAE,OAAO,qEAAqE,CAChF,CACF,CACF,CAAC,CAAC,CAAC;AAEH,IAAa,kBAAb,cAAqC,OAAO,YAC1C,sCACF,CAAC,CAAC,mBAAmB;CACnB,eAAe,OAAO,YAAY,SAAS;CAC3C,OAAO;CACP,YAAY;CACZ,UAAU;CACV,QAAQ;CACR,WAAW,OAAO;;CAElB,gBAAgB,OAAO,YAAY,OAAO,QAAQ,IAAI,CAAC;AACzD,CAAC,CAAC,CAAC,CAAC;;;;;;;AAQJ,MAAM,8BAA8B,OAAO,OAAO;;CAEhD,yBAAyB,OAAO,YAAY,OAAO,MAAM,sBAAsB,CAAC;CAChF,cAAc,OAAO,YAAY,QAAQ;CACzC,OAAO;CACP,QAAQ;CACR,MAAM;CACN,UAAU;CACV,gBAAgB;;;;;;CAMhB,uBAAuB,OAAO,YAAY,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC,CAAC;;;;;;CAMnF,YAAY,OAAO,YAAY,OAAO,MAAM,cAAc,CAAC;;CAE3D,sBAAsB,OAAO,YAAY,OAAO,OAAO;;CAEvD,aAAa,OAAO,YAAY,OAAO,OAAO;CAC9C,cAAc,OAAO,YAAY,OAAO,OAAO;;CAE/C,cAAc,OAAO,YAAY,OAAO,OAAO;AACjD,CAAC,CAAC,CAAC,MACD,OAAO,YACJ,aACC,SAAS,0BAA0B,KAAA,KAClC,0BAA0B,SAAS,QAAQ,KAC1C,SAAS,wBAAwB,SAAS,SAAS,QAAQ,UAC3D,SAAS,SAAS,QACf,MAAM,GAAG,SAAS,qBAAqB,CAAC,CACxC,OAAO,YAAY,QAAQ,SAAS,YAAY,QAAQ,SAAS,MAAM,GAC9E,EACE,OACE,2FACJ,CACF,CACF;AAEA,IAAa,wBAAb,cAA2C,OAAO,YAChD,4CACF,CAAC,CAAC,yBAAyB,2BAA2B,CAAC,CAAC,CAAC;;;;;;;;;AAUzD,IAAa,mBAAb,cAAsC,OAAO,YAC3C,uCACF,CAAC,CAAC,oBAAoB;CACpB,OAAO;CACP,QAAQ;CACR,MAAM;CACN,YAAY;CACZ,UAAU;CACV,YAAY;CACZ,kBAAkB;;CAElB,eAAe,OAAO,YAAY,iBAAiB;AACrD,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,yBAAb,cAA4C,OAAO,YAAoC,CAAC,CACtF,0BACA;CACE,OAAO;CACP,uBAAuB,eAAe,OAAO;CAC7C,kBAAkB,eAAe,OAAO;AAC1C,CACF,CAAC,CAAC,CAAC;;;;;;AAOH,IAAa,kBAAb,cAAqC,OAAO,YAC1C,sCACF,CAAC,CAAC,mBAAmB;CACnB,OAAO;CACP,MAAM;CACN,YAAY;CACZ,UAAU;CACV,QAAQ;AACV,CAAC,CAAC,CAAC,CAAC;;AAGJ,MAAa,qBAAqB,OAAO,SAAS;CAChD;CACA;CACA;CACA;AACF,CAAC;;;;;;;AAUD,IAAa,mBAAb,cAAsC,OAAO,YAC3C,uCACF,CAAC,CAAC,oBAAoB;CACpB,OAAO;CACP,YAAY;CACZ,YAAY;CACZ,QAAQ;CACR,QAAQ;AACV,CAAC,CAAC,CAAC,CAAC;;;;;;;AAQJ,IAAa,kBAAb,cAAqC,OAAO,YAC1C,sCACF,CAAC,CAAC,mBAAmB;CACnB,OAAO;CACP,YAAY;CACZ,UAAU;CACV,QAAQ;CACR,cAAc;AAChB,CAAC,CAAC,CAAC,CAAC;;;;;;AAOJ,IAAa,wBAAb,cAA2C,OAAO,YAChD,4CACF,CAAC,CAAC,yBAAyB;CACzB,OAAO;CACP,QAAQ;CACR,MAAM;CACN,YAAY;CACZ,UAAU;CACV,kBAAkB;AACpB,CAAC,CAAC,CAAC,CAAC;;AAGJ,MAAa,mBAAmB,OAAO,SAAS,CAAC,YAAY,QAAQ,CAAC;;;;;;AAQtE,IAAa,sBAAb,cAAyC,OAAO,YAC9C,0CACF,CAAC,CAAC,uBAAuB;CACvB,OAAO;CACP,MAAM;CACN,YAAY;CACZ,UAAU;CACV,UAAU;CACV,QAAQ;AACV,CAAC,CAAC,CAAC,CAAC;;;;;;AAOJ,IAAa,2BAAb,cAA8C,OAAO,YACnD,+CACF,CAAC,CAAC,4BAA4B;CAC5B,OAAO;CACP,iBAAiB;CACjB,WAAW;CACX,QAAQ;AACV,CAAC,CAAC,CAAC,CAAC;;;;;;;;;;;;;;AAeJ,IAAa,oBAAb,cAAuC,OAAO,YAC5C,wCACF,CAAC,CAAC,qBAAqB;CACrB,OAAO;CACP,MAAM;CACN,MAAM,OAAO,SAAS;EAAC;EAAsB;EAAa;CAAU,CAAC;CACrE,eAAe;CACf,SAAS,OAAO,YAAY,WAAW;CACvC,SAAS,OAAO,YAAY,cAAc;AAC5C,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,YAAb,cAA+B,OAAO,YAAuB,gCAAgC,CAAC,CAC5F,aACA;CACE,OAAO;CACP,SAAS;AACX,CACF,CAAC,CAAC,CAAC;AAEH,MAAM,qBAAqB,OAAO,OAAO;CACvC,OAAO;CACP,QAAQ;;CAER,gBAAgB,OAAO,YAAY,aAAa;;CAEhD,cAAc,OAAO,YAAY,OAAO,QAAQ,kBAAkB,CAAC;;CAEnE,WAAW,OAAO,YAAY,cAAc;AAC9C,CAAC,CAAC,CAAC,MACD,OAAO,YACJ,cACE,UAAU,iBAAiB,KAAA,OAAgB,UAAU,cAAc,KAAA,OACnE,UAAU,mBAAmB,KAAA,KAAa,UAAU,iBAAiB,KAAA,IACxE,EAAE,OAAO,sDAAsD,CACjE,CACF;AAEA,IAAa,eAAb,cAAkC,OAAO,YACvC,mCACF,CAAC,CAAC,gBAAgB,kBAAkB,CAAC,CAAC,CAAC;AAEvC,IAAa,kBAAb,cAAqC,OAAO,YAC1C,sCACF,CAAC,CAAC,mBAAmB;CACnB,QAAQ;CACR,SAAS;AACX,CAAC,CAAC,CAAC,CAAC;;AAGJ,MAAa,oBAAoB,OAAO,SAAS;CAAC;CAAa;CAAU;AAAS,CAAC;;;;;AAOnF,IAAa,iBAAb,cAAoC,OAAO,YACzC,qCACF,CAAC,CAAC,kBAAkB;CAClB,cAAc;CACd,QAAQ;CACR,QAAQ;AACV,CAAC,CAAC,CAAC,CAAC;;;;;;AAOJ,MAAM,uBAAuB,OAAO,OAAO;CACzC,cAAc;CACd,cAAc;CACd,WAAW;CACX,SAAS;CACT,OAAO,OAAO,YAAY,KAAK;CAC/B,QAAQ,OAAO,YAAY,aAAa;;;;;;CAMxC,gBAAgB,OAAO,YAAY,aAAa;;;;;;;;CAQhD,cAAc,OAAO,YAAY,OAAO,QAAQ,kBAAkB,CAAC;;;;;;;;CAQnE,WAAW,OAAO,YAAY,cAAc;;;;;;;;CAQ5C,aAAa,OAAO,YAAY,WAAW;;CAE3C,cAAc,OAAO,YAAY,eAAe;;CAEhD,uBAAuB,OAAO,YAAY,OAAO,MAAM,cAAc,CAAC;AACxE,CAAC;AAED,MAAM,4BAA4B,OAAO,GACvC,OAAO,OAAO,EAAE,UAAU,OAAO,QAAQ,kBAAkB,EAAE,CAAC,CAChE;AAEA,MAAM,oCAAoC,OAAO,oBAAoB,6BAA6B,EAChG,kBAAkB,QACpB,CAAC;AAED,MAAM,4BAA4B,aAC/B,QAAQ,iBAAiB,KAAA,KAAa,QAAQ,YAAY,gBAC1D,QAAQ,iBAAiB,KAAA,OAAgB,QAAQ,cAAc,KAAA,OAC/D,QAAQ,iBAAiB,KAAA,KAAa,QAAQ,UAAU,KAAA,OACxD,QAAQ,0BAA0B,KAAA,KAChC,QAAQ,UAAU,KAAA,KAAa,QAAQ,iBAAiB,KAAA,OAC1D,QAAQ,mBAAmB,KAAA,KACzB,QAAQ,YAAY,eACnB,QAAQ,iBAAiB,KAAA,KACzB,QAAQ,UAAU,KAAA,KAClB,QAAQ,WAAW,KAAA,OACtB,QAAQ,YAAY,YACnB,OAAO,OAAO,kCAAkC,QAAQ,MAAM,CAAC,OAChE,QAAQ,YAAY,aAAa,QAAQ,WAAW,KAAA,OACpD,QAAQ,gBAAgB,KAAA,KACtB,QAAQ,YAAY,YAAY,0BAA0B,QAAQ,MAAM;AAE7E,MAAM,0BAA0B,qBAAqB,MACnD,OAAO,WAAW,0BAA0B,EAC1C,OACE,yIACJ,CAAC,CACH;AAEA,IAAa,oBAAb,cAAuC,OAAO,YAC5C,wCACF,CAAC,CAAC,qBAAqB,uBAAuB,CAAC,CAAC,CAAC;;;;;;;;;;;;;AAoCjD,MAAa,0BAA0B,kBAAkB,KACvD,OAAO,QACJ,YAAgD,yBAAyB,OAAO,GACjF,EACE,UACE,2VACJ,CACF,CACF;;;;;;;;;;;AAYA,IAAa,oBAAb,cAAuC,OAAO,YAC5C,wCACF,CAAC,CAAC,qBAAqB;CACrB,OAAO;CACP,QAAQ;CACR,MAAM;CACN,YAAY;CACZ,cAAc;CACd,eAAe;CACf,eAAe;CACf,YAAY;CACZ,kBAAkB;CAClB,aAAa;CACb,eAAe;CACf,mBAAmB;CACnB,eAAe;CACf,gBAAgB;CAChB,qBAAqB;;CAErB,mBAAmB,OAAO,YAAY,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC,CAAC;CAC/E,QAAQ,OAAO,YAAY,OAAO,YAAY,WAAW,CAAC;CAC1D,QAAQ,OAAO,YAAY,yBAAyB;CACpD,OAAO,OAAO,YAAY,aAAa;CACvC,OAAO,OAAO,YAAY,eAAe;AAC3C,CAAC,CAAC,CAAC,CAAC;;;;;;AAOJ,IAAa,kBAAb,cAAqC,OAAO,YAC1C,sCACF,CAAC,CAAC,mBAAmB;CACnB,OAAO;CACP,YAAY;CACZ,eAAe;CACf,mBAAmB;CACnB,gBAAgB;CAChB,YAAY;AACd,CAAC,CAAC,CAAC,CAAC;;;;;;;;;AAUJ,IAAa,iBAAb,cAAoC,OAAO,YACzC,qCACF,CAAC,CAAC,kBAAkB;CAClB,OAAO;CACP,YAAY;CACZ,mBAAmB;CACnB,mBAAmB;CACnB,cAAc;CACd,mBAAmB;CACnB,uBAAuB;CACvB,cAAc;CACd,OAAO,OAAO,YAAY,SAAS;CACnC,gBAAgB,OAAO,YAAY,SAAS;CAC5C,eAAe;CACf,iBAAiB;AACnB,CAAC,CAAC,CAAC,CAAC;;;;;;;;AASJ,IAAa,0BAAb,cAA6C,OAAO,YAClD,8CACF,CAAC,CAAC,2BAA2B;CAC3B,YAAY;CACZ,oBAAoB;CACpB,wBAAwB;CACxB,kBAAkB;CAClB,aAAa;;CAEb,mBAAmB,kBAAkB,OAAO;CAC5C,QAAQ,kBAAkB,OAAO;CACjC,QAAQ,kBAAkB,OAAO;CACjC,OAAO,kBAAkB,OAAO;AAClC,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,wBAAwB,OAAO,OAAO;;CAEjD,MAAM,OAAO,YAAY,OAAO,QAAQ,UAAU,CAAC;CACnD,eAAe;CACf,yBAAyB,OAAO,YAAY,YAAY;AAC1D,CAAC;;AAGD,MAAa,eAAe,OAAO,OAAO;CACxC,QAAQ;CACR,QAAQ;;CAER,aAAa,OAAO,YAAY,iBAAiB;CACjD,eAAe;CACf,QAAQ,OAAO,YAAY,WAAW;CACtC,QAAQ;CACR,OAAO;CACP,OAAO;CACP,mBAAmB,OAAO,YAAY,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC,CAAC;CAC/E,gBAAgB;CAChB,iBAAiB,OAAO;CACxB,iBAAiB,OAAO;;CAExB,WAAW,OAAO,YAAY,qBAAqB;AACrD,CAAC,CAAC,CAAC,MAAM,OAAO,YAAY,UAAU,MAAM,kBAAkB,MAAM,eAAe,CAAC;;AAKpF,MAAa,kBAAkB,OAAO,OAAO;CAC3C,QAAQ;CACR,WAAW;CACX,YAAY;CACZ,iBAAiB,OAAO;;CAExB,oBAAoB,OAAO,YAAY,YAAY;;CAEnD,mBAAmB,OAAO,YAAY,SAAS;;CAE/C,YAAY,OAAO,YAAY,OAAO,QAAQ,QAAQ,CAAC;AACzD,CAAC;;AAKD,IAAa,uBAAb,cAA0C,OAAO,YAAkC,CAAC,CAClF,wBACA;CAAE,WAAW;CAAiB,aAAa;AAAO,CACpD,CAAC,CAAC,CAAC;;AAGH,IAAa,uBAAb,cAA0C,OAAO,YAAkC,CAAC,CAClF,wBACA,EAAE,QAAQ,aAAa,CACzB,CAAC,CAAC,CAAC;;AAGH,IAAa,uBAAb,cAA0C,OAAO,YAAkC,CAAC,CAClF,wBACA;CACE,WAAW;CACX,gBAAgB;CAChB,cAAc;CACd,WAAW;CACX,cAAc;CACd,mBAAmB,OAAO;AAC5B,CACF,CAAC,CAAC,CAAC;;;;;;AAOH,IAAa,uBAAb,cAA0C,OAAO,YAAkC,CAAC,CAClF,wBACA;CACE,OAAO;CACP,WAAW;CACX,UAAU;CACV,iBAAiB,OAAO;CACxB,kBAAkB,OAAO;CACzB,aAAa,OAAO,YAAY,cAAc;AAChD,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,qBAAb,cAAwC,OAAO,YAAgC,CAAC,CAC9E,sBACA;CACE,QAAQ;CACR,aAAa;CACb,UAAU,OAAO,YACf,OAAO,OAAO;EACZ,WAAW;EACX,UAAU;EACV,iBAAiB,OAAO;EACxB,kBAAkB,OAAO;EACzB,aAAa,OAAO,YAAY,cAAc;CAChD,CAAC,CACH;AACF,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,sBAAb,cAAyC,OAAO,YAAiC,CAAC,CAChF,uBACA;CACE,OAAO;CACP,WAAW;CACX,QAAQ,OAAO,SAAS;EACtB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;AACH,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,sBAAb,cAAyC,OAAO,YAAiC,CAAC,CAChF,uBACA;CACE,WAAW;CACX,iBAAiB;CACjB,WAAW,OAAO,SAAS,CAAC,QAAQ,OAAO,CAAC;CAC5C,kBAAkB,OAAO,IAAI,MAAM,OAAO,cAAc,CAAC,CAAC;CAC1D,iBAAiB;AACnB,CACF,CAAC,CAAC,CAAC;;;;;;;AAQH,IAAa,wBAAb,cAA2C,OAAO,YAAmC,CAAC,CACpF,yBACA;CACE,eAAe;CACf,oBAAoB,OAAO,YAAY,YAAY;CACnD,eAAe;CACf,UAAU,OAAO,SAAS,CAAC,YAAY,YAAY,CAAC;CACpD,OAAO;CACP,QAAQ,OAAO,YAAY,WAAW;CACtC,OAAO;CACP,QAAQ;AACV,CACF,CAAC,CAAC,CAAC;;;;;;;AAQH,MAAa,yBAAyB,OAAO,MAAM;CACjD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;AAQD,IAAa,iBAAb,cAAoC,OAAO,MACzC,qCACF,CAAC,CAAC;CACA,UAAU;CACV,QAAQ,OAAO,QAAQ,QAAQ;CAC/B,eAAe,OAAO,QAAQ,CAAC;CAC/B,WAAW,OAAO;CAClB,cAAc;CACd,SAAS;AACX,CAAC,CAAC,CAAC,CAAC;;AAGJ,MAAa,kBAAkB;;AAI/B,IAAa,iBAAb,cAAoC,OAAO,MACzC,qCACF,CAAC,CAAC;CACA,SAAS;CACT,YAAY;CACZ,SAAS,OAAO,cAAc,cAAc,CAAC,CAAC,MAAM,OAAO,YAAY,GAAG,CAAC;AAC7E,CAAC,CAAC,CAAC,CAAC;;;;AAKJ,IAAa,0BAAb,cAA6C,OAAO,MAClD,8CACF,CAAC,CAAC;CACA,UAAU;CACV,SAAS;CACT,UAAU;CACV,QAAQ;CACR,QAAQ;AACV,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,mCAAmC"}

package/dist/{Records-B84j3Jq_.d.mts → Records-CV49DgQK.d.mts}

@@ -12,12 +12,12 @@ import { t as AgentPolicy } from "./AgentPolicy-BqDoSXO6.mjs";
 import { T as RunDispositionDeclaration, _ as InstructionSource, c as Definition, m as InputPromptSource, n as Any, r as AnyDefinition, v as ModelServices } from "./Agent-CM6JubNX.mjs";
 import { t as RunPolicyUsage } from "./RunPolicyUsage-ClZxyR46.mjs";
 import { a as WorkerError } from "./Worker--j87JI__.mjs";
-import { G as RunToolAuthorization, O as RunCostEstimator, h as RunApprovalHook, x as RunContextPreparation } from "./RunOptions-CE-G3niT.mjs";
+import { G as RunToolAuthorization, O as RunCostEstimator, h as RunApprovalHook, x as RunContextPreparation } from "./RunOptions-Clj8cLsp.mjs";
 import { _ as MessagingError, f as InputMessage, t as MessagingHost } from "./MessagingHost-gAxs5gme.mjs";
 import "./Messaging-QMYhp297.mjs";
 import { c as WorkerReportPreparationFailure, i as SubagentHost, l as WorkerReporting } from "./SubagentHost-DaFMZnVR.mjs";
-import { p as RuntimeBinding, r as AgentCompletionProjectionRequirements, s as AgentRuntimeRequirements } from "./AgentRuntime-CufqQ4JM.mjs";
-import { n as DurableRuntimeFailpoint, r as DurableRuntimeFailpointError } from "./DurableFailpoint-Oinuuedm.mjs";
+import { p as RuntimeBinding, r as AgentCompletionProjectionRequirements, s as AgentRuntimeRequirements } from "./AgentRuntime-B64362Id.mjs";
+import { n as DurableRuntimeFailpoint, r as DurableRuntimeFailpointError } from "./DurableFailpoint-DQJet828.mjs";
 import { o as OperationDenied } from "./OperationAuthorizer-TzcQtpX5.mjs";
 import { s as ToolReconciler } from "./ToolReconciler-DQVaJfpE.mjs";
 import { t as WakeScheduler } from "./WakeScheduler-EjUF-GhC.mjs";
@@ -1591,16 +1591,59 @@ declare const BindingDigestMismatch_base: Schema.Class<BindingDigestMismatch, Sc
   readonly message: Schema.String;
 }>, import("effect/Cause").YieldableError>;
 /**
- * A Binding is registered for the identity but its exact stored
- * definition/model/tool digests do not match the claimed head's stored
- * digests byte-for-byte. Fail closed (SUB-023): missing or different code is
- * a typed compatibility failure, never a silent substitution.
+ * A Binding is registered for the identity but neither the exact admission fingerprints
+ * nor its declared replay contract support the retained pending operations. Refusal leaves
+ * the original Submission pending until compatible code is available.
  */
 declare class BindingDigestMismatch extends BindingDigestMismatch_base {}
 /** The typed refusal family of durable Binding resolution (spec §11, SUB-032). */
 type DurableBindingFailure = BindingUnavailable | BindingDigestMismatch;
 /** Byte-for-byte equality of two stored definition digest triples (SUB-023). */
 declare const definitionDigestsEqual: (left: DefinitionDigests, right: DefinitionDigests) => boolean;
+/**
+ * Host-owned semantic versions, independent of deployment and tool inventory. Change a version
+ * when the meaning of an operation, its durable Step names or external idempotency keys changes.
+ * Codecs and execution class are included automatically; JSON Schema alone cannot prove semantics.
+ */
+interface ReplayVersions {
+  readonly agent: PersistedJson;
+  readonly tools: Readonly<Record<string, PersistedJson>>;
+}
+declare const BindingManifest_base: Schema.Class<BindingManifest, Schema.Struct<{
+  readonly agentId: Schema.brand<Schema.NonEmptyString, "@effect-agent/core/AgentId">;
+  readonly definitions: typeof DefinitionDigestInput;
+  readonly replay: typeof ReplayContract;
+  readonly agentContract: Schema.optionalKey<Schema.Struct<{
+    readonly version: Schema.declare<Schema.Json, Schema.Json>;
+    readonly id: Schema.brand<Schema.NonEmptyString, "@effect-agent/core/AgentId">;
+    readonly input: Schema.declare<Schema.Json, Schema.Json>;
+    readonly output: Schema.declare<Schema.Json, Schema.Json>;
+    readonly updates: Schema.NullOr<Schema.declare<Schema.Json, Schema.Json>>;
+    readonly completion: Schema.NullOr<Schema.Struct<{
+      readonly tool: Schema.String;
+      readonly required: Schema.Boolean;
+    }>>;
+    readonly completionFromTools: Schema.$Array<Schema.String>;
+    readonly disposition: Schema.NullOr<Schema.declare<Schema.Json, Schema.Json>>;
+  }>>;
+  readonly toolContracts: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Struct<{
+    readonly version: Schema.declare<Schema.Json, Schema.Json>;
+    readonly parameters: Schema.declare<Schema.Json, Schema.Json>;
+    readonly success: Schema.declare<Schema.Json, Schema.Json>;
+    readonly failure: Schema.declare<Schema.Json, Schema.Json>;
+    readonly failureMode: Schema.String;
+    readonly needsApproval: Schema.Union<readonly [Schema.Boolean, Schema.Literal<"dynamic">]>;
+    readonly executionClass: Schema.String;
+    readonly executionKind: Schema.String;
+  }>>>;
+}>, {}>;
+declare class BindingManifest extends BindingManifest_base {}
+declare const makeBindingManifest: (definition: Definition<Schema.Top, Schema.Top, unknown, import("effect/unstable/ai/Toolkit").Any, RunDispositionDeclaration<never, Schema.Top> | undefined, unknown, Schema.Top | undefined>, definitions: DefinitionDigestInput, versions: ReplayVersions) => Effect.Effect<BindingManifest, DigestError, Crypto.Crypto>;
+/** Compile audited declaration data once, without acquiring an executable or rewriting receipts.
+ * Full input schemas stay in registration metadata, never in each admission's replay contract. */
+declare const compileBindingManifest: (definition: Definition<Schema.Top, Schema.Top, unknown, import("effect/unstable/ai/Toolkit").Any, RunDispositionDeclaration<never, Schema.Top> | undefined, unknown, Schema.Top | undefined>, definitions: DefinitionDigestInput, versions: ReplayVersions, retained?: readonly BindingManifest[] | undefined) => Effect.Effect<Pick<ResolvedBinding, "acceptsInput" | "digests" | "manifest" | "retainedManifests">, DigestError, Crypto.Crypto>;
+/** Resolve executable code only. Admission, delivery, lineage and receipt comparisons stay exact. */
+declare const bindingSupports: (binding: Pick<ResolvedBinding, "digests" | "retainedManifests" | "acceptsInput">, digests: DefinitionDigests, requiredTools?: ReadonlyArray<string>, input?: PersistedJson) => boolean;
 type ExecutableDefinition = AnyDefinition & {
   readonly instructions: InstructionSource<never, unknown, unknown>;
   readonly inputPrompt?: InputPromptSource<never, unknown, unknown> | undefined;
@@ -1631,6 +1674,16 @@ type ReportRequirements<Reports> = Reports extends ReadonlyArray<WorkerReporting
 /** One exact executable registration used by durable claim-time resolution. */
 interface ResolvedBinding extends CapturedBinding {
   readonly digests: DefinitionDigests;
+  readonly manifest?: BindingManifest;
+  /** Current encoded input guard, acquired without executable services. */
+  readonly acceptsInput?: (input: PersistedJson) => boolean;
+  readonly retainedManifests?: ReadonlyArray<{
+    readonly digests: DefinitionDigests;
+    readonly replay: ReplayContract;
+    readonly compatibleTools?: Readonly<Record<string, string>>;
+    /** Original declarations prove unchanged semantics and output/completion contracts. */
+    readonly compatibleAgent?: string;
+  }>;
 }
 /** Trusted claim identity for resolving per-Attempt application services. Not model input. */
 interface AgentAttemptContext {
@@ -1660,6 +1713,11 @@ type AgentRegistration<A extends ExecutableAgentBinding = ExecutableAgentBinding
   readonly model: A["model"];
   readonly definitions: DefinitionDigestInput;
 }) & {
+  /** Opt into contract-checked deployment continuity. Omit to require an exact registration. */
+  readonly continuity?: {
+    readonly versions: ReplayVersions;
+    readonly retainedManifests?: ReadonlyArray<BindingManifest>;
+  };
   /**
    * Source-owned reports capture services outside attemptLayer and open a fresh Scope per
    * preparation. Version changes with this registration. Missing exact code and preparation
@@ -1689,7 +1747,7 @@ type RegistrationRequirements<Entries extends ReadonlyArray<AgentRegistration>>
 /** Compile heterogeneous Agent descriptors into exact, dependency-closed worker registrations. */
 declare const compileRegistrations: <const Entries extends ReadonlyArray<AgentRegistration>>(entries: Entries) => Effect.Effect<ReadonlyArray<ResolvedBinding>, DigestError, Crypto.Crypto | RegistrationRequirements<Entries>>;
 declare namespace AgentRegistration_d_exports {
-  export { AgentAttemptContext, AgentRegistration, BindingDigestMismatch, BindingUnavailable, DurableBindingFailure, DurableWorkerBinding, ExecutableAgentBinding, ResolvedBinding, compileRegistrations, definitionDigestsEqual };
+  export { AgentAttemptContext, AgentRegistration, BindingDigestMismatch, BindingManifest, BindingUnavailable, DurableBindingFailure, DurableWorkerBinding, ExecutableAgentBinding, ReplayVersions, ResolvedBinding, bindingSupports, compileBindingManifest, compileRegistrations, definitionDigestsEqual, makeBindingManifest };
 }
 declare namespace Admin_d_exports {
   export { ExplainedEvidence, ExplainedSubmission, ExplainedUnknownCall, IntegrityCheck, IntegrityCheckName, IntegrityCheckStatus, IntegrityReport, ObligationBlockedOn, ObligationEntry, ObligationReport, ObligationSeverity, ObligationThresholds, RECOVERY_DECISION_MEANINGS, RecoveryDisposition, RecoveryExplanation, RetryCommand, RetryRefusalReason, RetryRefused, obligationSeverityOf, predictRecoveryDisposition, recoveryDecisionMeaning, renderRecoveryExplanation };
@@ -1948,7 +2006,7 @@ interface JournalMetadata {
   }>;
 }
 declare namespace RunJournal_d_exports {
-  export { JournalBoundary, RunJournalError, RunJournalProjection, RunJournalUsage, TurnCommitInput, approvalDecisionBatchId, childIdempotencyKeyFor, childThreadIdFor, compactionBatchId, compactionRecordId, markUnknownBatchId, modelResponseInterruptedBatchId, modelResponseInterruptedRecordId, modelResponseRecordId, projectRunJournal, projectRunJournalStream, promptFromCanonicalRecords, runCompletedRecordId, runIdForSubmission, runStartedBatchId, runStartedRecordId, subagentJoinBatchId, subagentJoinedRecordId, subagentLineageBatchId, subagentLineageRecordId, subagentRequestedBatchId, subagentRequestedRecordId, subagentStartedBatchId, subagentStartedRecordId, toolApprovalDecisionRecordId, toolApprovalRequestRecordId, toolCallPreparedRecordId, toolCallResolutionBatchId, toolCallResolvedRecordId, toolCallResultBatchId, toolCallSettledRecordId, toolCallUnknownRecordId, toolStepSettledBatchId, toolStepSettledRecordId, turnApprovalsBatchId, turnBatchId, turnCanonicalBatch, turnIdForRun, turnPreparedBatchId, turnResponseBatch, turnResponseBatchId, turnResultsBatch, turnResultsBatchId };
+  export { JournalBoundary, RunJournalError, RunJournalProjection, RunJournalUsage, TurnCommitInput, approvalDecisionBatchId, childIdempotencyKeyFor, childThreadIdFor, compactionBatchId, compactionRecordId, markUnknownBatchId, modelResponseInterruptedBatchId, modelResponseInterruptedRecordId, modelResponseRecordId, projectRunJournal, projectRunJournalStream, promptFromCanonicalRecords, runCompletedRecordId, runDurationBatchId, runDurationRecordId, runIdForSubmission, runStartedBatchId, runStartedRecordId, subagentJoinBatchId, subagentJoinedRecordId, subagentLineageBatchId, subagentLineageRecordId, subagentRequestedBatchId, subagentRequestedRecordId, subagentStartedBatchId, subagentStartedRecordId, toolApprovalDecisionRecordId, toolApprovalRequestRecordId, toolCallPreparedRecordId, toolCallResolutionBatchId, toolCallResolvedRecordId, toolCallResultBatchId, toolCallSettledRecordId, toolCallUnknownRecordId, toolStepSettledBatchId, toolStepSettledRecordId, turnApprovalsBatchId, turnBatchId, turnCanonicalBatch, turnIdForRun, turnPreparedBatchId, turnResponseBatch, turnResponseBatchId, turnResultsBatch, turnResultsBatchId };
 }
 declare const RunJournalError_base: Schema.Class<RunJournalError, Schema.TaggedStruct<"RunJournalError", {
   readonly message: Schema.String;
@@ -1965,6 +2023,8 @@ declare const runIdForSubmission: (submissionId: SubmissionId) => RunId;
 /** Stable canonical clock identity shared by every Attempt of one Run. */
 declare const runStartedRecordId: (runId: RunId) => RecordId;
 declare const runStartedBatchId: (runId: RunId) => BatchId;
+declare const runDurationRecordId: (runId: RunId) => RecordId;
+declare const runDurationBatchId: (runId: RunId) => BatchId;
 /** Deterministic Turn identity: Attempt-independent for one (Run, canonical turn) pair. */
 declare const turnIdForRun: (runId: RunId, turn: number) => TurnId;
 /** Deterministic batch identity of one committed canonical no-tool Turn (P4 single-batch shape). */
@@ -2763,7 +2823,7 @@ declare class DurableAgentRuntime extends DurableAgentRuntime_base {
   static readonly layer: Layer.Layer<DurableAgentRuntime, never, SubmissionLedger | ThreadStore | WakeScheduler | DurableRuntimeFailpoint | DurableRuntimeConfig | ToolReconciler | Crypto.Crypto>;
 }
 declare namespace Records_d_exports {
-  export { AbortRequested, AbortedSubmissionSettled, AgentUpdateEmitted, ApprovalDecision, BatchId, CURRENT_CANONICAL_SCHEMA_VERSION, CanonicalBatch, CanonicalRecord, CanonicalRecordEnvelope, CanonicalRecordPayload, CanonicalSequence, CompactionCreated, CompletedSubmissionSettled, DefinitionDigestInput, DefinitionDigests, DeploymentId, Digest, FailedSubmissionSettled, MAX_PERSISTED_JSON_BYTES, MAX_PERSISTED_JSON_COLLECTION_LENGTH, MAX_PERSISTED_JSON_DEPTH, MAX_PERSISTED_JSON_NODES, ModelCompleted, ModelResponseInterrupted, ModelResponseRecorded, ObservationOffset, PeerMessagePrepared, PersistedJson, ProducerEpoch, ProducerId, RecordEnvelope, RecordId, RepairAnnotated, RunCompleted, RunFailed, RunPolicyUsageReserved, RunStartedRecord, SettlementFailureDiagnostic, SettlementOutcome, SubagentJoined, SubagentLineageRecorded, SubagentRequested, SubagentStarted, SubmissionSettled, SubmissionSettledRecord, SubtreeBudgetReserved, ThreadCreated, ToolApprovalDecided, ToolApprovalRequested, ToolCallPrepared, ToolCallResolution, ToolCallResolved, ToolCallSettled, ToolCallUnknown, ToolStepSettled, UserInputRecorded, WorkerAdmission, WorkerInputCompleted, WorkerInputRequested, WorkerOrigin, WorkerOriginRecorded, WorkerReportPrepared, WorkerReportRefused, WorkerReportingIntent };
+  export { AbortRequested, AbortedSubmissionSettled, AgentUpdateEmitted, ApprovalDecision, BatchId, CURRENT_CANONICAL_SCHEMA_VERSION, CanonicalBatch, CanonicalRecord, CanonicalRecordEnvelope, CanonicalRecordPayload, CanonicalSequence, CompactionCreated, CompletedSubmissionSettled, DefinitionDigestInput, DefinitionDigests, DeploymentId, Digest, FailedSubmissionSettled, MAX_PERSISTED_JSON_BYTES, MAX_PERSISTED_JSON_COLLECTION_LENGTH, MAX_PERSISTED_JSON_DEPTH, MAX_PERSISTED_JSON_NODES, ModelCompleted, ModelResponseInterrupted, ModelResponseRecorded, ObservationOffset, PeerMessagePrepared, PersistedJson, ProducerEpoch, ProducerId, RecordEnvelope, RecordId, RepairAnnotated, ReplayContract, RunCompleted, RunDurationExhausted, RunFailed, RunPolicyUsageReserved, RunStartedRecord, SettlementFailureDiagnostic, SettlementOutcome, SubagentJoined, SubagentLineageRecorded, SubagentRequested, SubagentStarted, SubmissionSettled, SubmissionSettledRecord, SubtreeBudgetReserved, ThreadCreated, ToolApprovalDecided, ToolApprovalRequested, ToolCallPrepared, ToolCallResolution, ToolCallResolved, ToolCallSettled, ToolCallUnknown, ToolStepSettled, UserInputRecorded, WorkerAdmission, WorkerInputCompleted, WorkerInputRequested, WorkerOrigin, WorkerOriginRecorded, WorkerReportPrepared, WorkerReportRefused, WorkerReportingIntent };
 }
 /** Stable identity of one canonical record. */
 declare const RecordId: Schema.brand<Schema.NonEmptyString, "@effect-agent/thread/RecordId">;
@@ -2822,12 +2882,21 @@ declare const DefinitionDigestInput_base: Schema.Class<DefinitionDigestInput, Sc
 }>, {}>;
 /** Schema-owned replay inputs whose individual definitions are incorporated into digests. */
 declare class DefinitionDigestInput extends DefinitionDigestInput_base {}
+declare const ReplayContract_base: Schema.Class<ReplayContract, Schema.Struct<{
+  readonly agent: Schema.brand<Schema.String, "@effect-agent/thread/Digest">;
+  /** Agent semantics and output/completion codecs; the saved input is checked separately. */
+  readonly agentBehavior: Schema.optionalKey<Schema.brand<Schema.String, "@effect-agent/thread/Digest">>;
+  readonly tools: Schema.$Record<Schema.String, Schema.brand<Schema.String, "@effect-agent/thread/Digest">>;
+}>, {}>;
+/** The contracts a retained Run may decode or execute, independent of its deployment. */
+declare class ReplayContract extends ReplayContract_base {}
 declare const DefinitionDigests_base: Schema.Class<DefinitionDigests, Schema.Struct<{
   readonly agent: Schema.brand<Schema.String, "@effect-agent/thread/Digest">;
   readonly model: Schema.brand<Schema.String, "@effect-agent/thread/Digest">;
   readonly tools: Schema.brand<Schema.String, "@effect-agent/thread/Digest">;
+  readonly replay: Schema.optionalKey<typeof ReplayContract>;
 }>, {}>;
-/** Digests make a replay-visible definition/configuration change explicit. */
+/** Digests identify admission exactly; replay contracts separately authorize continuation. */
 declare class DefinitionDigests extends DefinitionDigests_base {}
 declare const ThreadCreated_base: Schema.Class<ThreadCreated, Schema.TaggedStruct<"ThreadCreated", {
   readonly agentId: Schema.brand<Schema.NonEmptyString, "@effect-agent/core/AgentId">;
@@ -2912,8 +2981,13 @@ declare const RunStartedRecord_base: Schema.Class<RunStartedRecord, Schema.Tagge
   readonly policyAccountingVersion: Schema.Literal<1>;
   readonly maxDurationMillis: Schema.Finite;
 }>, {}>;
-/** Immutable clock and duration allowance for one logical Run, before any agent execution. */
+/** Immutable Run start and per-Attempt duration allowance, before any agent execution. */
 declare class RunStartedRecord extends RunStartedRecord_base {}
+declare const RunDurationExhausted_base: Schema.Class<RunDurationExhausted, Schema.TaggedStruct<"RunDurationExhausted", {
+  readonly runId: Schema.brand<Schema.NonEmptyString, "@effect-agent/core/RunId">;
+}>, {}>;
+/** An active Attempt exhausted its execution allowance; downtime alone never writes this. */
+declare class RunDurationExhausted extends RunDurationExhausted_base {}
 declare const ModelCompleted_base: Schema.Class<ModelCompleted, Schema.Struct<{
   readonly _tag: Schema.tag<"ModelCompleted">;
   readonly runId: Schema.brand<Schema.NonEmptyString, "@effect-agent/core/RunId">;
@@ -3558,7 +3632,7 @@ declare class SubtreeBudgetReserved extends SubtreeBudgetReserved_base {}
  * adds the four durable-Subagent tags (requested/started/joined/lineage) additively, so the
  * envelope keeps `schemaVersion: 1` (P4 precedent for additive payload tags).
  */
-declare const CanonicalRecordPayload: Schema.Union<readonly [typeof ThreadCreated, typeof UserInputRecorded, typeof RunStartedRecord, typeof RunPolicyUsageReserved, typeof ModelCompleted, typeof ModelResponseRecorded, typeof ToolCallPrepared, typeof ToolCallSettled, typeof ToolCallUnknown, typeof ToolCallResolved, typeof ToolStepSettled, typeof ToolApprovalRequested, typeof ToolApprovalDecided, typeof ModelResponseInterrupted, typeof CompactionCreated, typeof RunFailed, typeof RunCompleted, typeof AbortRequested, Schema.refine<SubmissionSettledRecord, typeof SubmissionSettled>, typeof SubagentRequested, typeof SubagentStarted, typeof SubagentJoined, typeof SubagentLineageRecorded, typeof WorkerInputRequested, typeof WorkerOriginRecorded, typeof WorkerInputCompleted, typeof WorkerReportPrepared, typeof AgentUpdateEmitted, typeof WorkerReportRefused, typeof PeerMessagePrepared, typeof SubtreeBudgetReserved, typeof RepairAnnotated]>;
+declare const CanonicalRecordPayload: Schema.Union<readonly [typeof ThreadCreated, typeof UserInputRecorded, typeof RunStartedRecord, typeof RunDurationExhausted, typeof RunPolicyUsageReserved, typeof ModelCompleted, typeof ModelResponseRecorded, typeof ToolCallPrepared, typeof ToolCallSettled, typeof ToolCallUnknown, typeof ToolCallResolved, typeof ToolStepSettled, typeof ToolApprovalRequested, typeof ToolApprovalDecided, typeof ModelResponseInterrupted, typeof CompactionCreated, typeof RunFailed, typeof RunCompleted, typeof AbortRequested, Schema.refine<SubmissionSettledRecord, typeof SubmissionSettled>, typeof SubagentRequested, typeof SubagentStarted, typeof SubagentJoined, typeof SubagentLineageRecorded, typeof WorkerInputRequested, typeof WorkerOriginRecorded, typeof WorkerInputCompleted, typeof WorkerReportPrepared, typeof AgentUpdateEmitted, typeof WorkerReportRefused, typeof PeerMessagePrepared, typeof SubtreeBudgetReserved, typeof RepairAnnotated]>;
 type CanonicalRecordPayload = typeof CanonicalRecordPayload.Type;
 declare const RecordEnvelope_base: Schema.Class<RecordEnvelope, Schema.Struct<{
   readonly recordId: Schema.brand<Schema.NonEmptyString, "@effect-agent/thread/RecordId">;
@@ -3566,7 +3640,7 @@ declare const RecordEnvelope_base: Schema.Class<RecordEnvelope, Schema.Struct<{
   readonly schemaVersion: Schema.Literal<1>;
   readonly createdAt: Schema.DateTimeUtcFromString;
   readonly deploymentId: Schema.brand<Schema.NonEmptyString, "@effect-agent/thread/DeploymentId">;
-  readonly payload: Schema.Union<readonly [typeof ThreadCreated, typeof UserInputRecorded, typeof RunStartedRecord, typeof RunPolicyUsageReserved, typeof ModelCompleted, typeof ModelResponseRecorded, typeof ToolCallPrepared, typeof ToolCallSettled, typeof ToolCallUnknown, typeof ToolCallResolved, typeof ToolStepSettled, typeof ToolApprovalRequested, typeof ToolApprovalDecided, typeof ModelResponseInterrupted, typeof CompactionCreated, typeof RunFailed, typeof RunCompleted, typeof AbortRequested, Schema.refine<SubmissionSettledRecord, typeof SubmissionSettled>, typeof SubagentRequested, typeof SubagentStarted, typeof SubagentJoined, typeof SubagentLineageRecorded, typeof WorkerInputRequested, typeof WorkerOriginRecorded, typeof WorkerInputCompleted, typeof WorkerReportPrepared, typeof AgentUpdateEmitted, typeof WorkerReportRefused, typeof PeerMessagePrepared, typeof SubtreeBudgetReserved, typeof RepairAnnotated]>;
+  readonly payload: Schema.Union<readonly [typeof ThreadCreated, typeof UserInputRecorded, typeof RunStartedRecord, typeof RunDurationExhausted, typeof RunPolicyUsageReserved, typeof ModelCompleted, typeof ModelResponseRecorded, typeof ToolCallPrepared, typeof ToolCallSettled, typeof ToolCallUnknown, typeof ToolCallResolved, typeof ToolStepSettled, typeof ToolApprovalRequested, typeof ToolApprovalDecided, typeof ModelResponseInterrupted, typeof CompactionCreated, typeof RunFailed, typeof RunCompleted, typeof AbortRequested, Schema.refine<SubmissionSettledRecord, typeof SubmissionSettled>, typeof SubagentRequested, typeof SubagentStarted, typeof SubagentJoined, typeof SubagentLineageRecorded, typeof WorkerInputRequested, typeof WorkerOriginRecorded, typeof WorkerInputCompleted, typeof WorkerReportPrepared, typeof AgentUpdateEmitted, typeof WorkerReportRefused, typeof PeerMessagePrepared, typeof SubtreeBudgetReserved, typeof RepairAnnotated]>;
 }>, {}>;
 /**
  * Versioned record envelope stored in an atomic batch. Thread ordering is assigned only
@@ -3596,5 +3670,5 @@ declare const CanonicalRecordEnvelope_base: Schema.Class<CanonicalRecordEnvelope
 declare class CanonicalRecordEnvelope extends CanonicalRecordEnvelope_base {}
 declare const CURRENT_CANONICAL_SCHEMA_VERSION: 1;
 //#endregion
-export { ToolCallResolved as $, UnknownResolution as $a, ChildBudgetReservationSnapshot as $i, turnBatchId as $n, AwaitChildAdmissionResolution as $r, ThreadObservation as $t, ProducerId as A, ResolutionAbortSubmission as Aa, SettleJoinedWithHost as Ai, runCompletedRecordId as An, AgentRegistration_d_exports as Ar, DurableWorkerFailure as At, SettlementOutcome as B, SubmissionAdmissionFence as Ba, AdmissionNotAdmitted as Bi, subagentStartedBatchId as Bn, definitionDigestsEqual as Br, CheckpointRejected as Bt, ModelCompleted as C, RecoverySnapshot as Ca, RepairSubagentStartLink as Ci, markUnknownBatchId as Cn, RetryCommand as Cr, DurableRetryFailure as Ct, PeerMessagePrepared as D, RenewOwnershipRequest as Da, ResumeWaitingParent as Di, projectRunJournal as Dn, predictRecoveryDisposition as Dr, DurableSubmitFailure as Dt, ObservationOffset as E, ReleaseOwnershipRequest as Ea, ResumeSuspended as Ei, modelResponseRecordId as En, obligationSeverityOf as Er, DurableSubmitAgent as Et, RunCompleted as F, Settlement as Fa, AdmissionAdmitted as Fi, subagentJoinedRecordId as Fn, DurableBindingFailure as Fr, recoveryRepairRecordId as Ft, SubmissionSettled as G, SubmissionLookupById as Ga, ApprovalConflict as Gi, toolCallResolutionBatchId as Gn, digestDefinition as Gr, SaveCheckpointRequest as Gt, SubagentLineageRecorded as H, SubmissionLedgerFailure as Ha, AdmissionRequest as Hi, toolApprovalDecisionRecordId as Hn, Digest_d_exports as Hr, FencedAppendRequest as Ht, RunFailed as I, SettlementConflict as Ia, AdmissionConflict as Ii, subagentLineageBatchId as In, DurableWorkerBinding as Ir, threadCreatedBatchId as It, ThreadCreated as J, SubmissionState as Ja, ApprovalPendingSuspension as Ji, toolCallSettledRecordId as Jn, AppendReservedSettlement as Jr, ThreadCheckpoints as Jt, SubmissionSettledRecord as K, SubmissionLookupByKey as Ka, ApprovalDecisionCommand as Ki, toolCallResolvedRecordId as Kn, digestDefinitions as Kr, SaveRecoveryCheckpointRequest as Kt, RunPolicyUsageReserved as L, SettlementFinalization as La, AdmissionFence as Li, subagentLineageRecordId as Ln, ExecutableAgentBinding as Lr, threadCreatedRecordId as Lt, RecordId as M, ResolutionNeverHappened as Ma, AbortCommand as Mi, runStartedBatchId as Mn, AgentRegistration as Mr, RecoveryReport as Mt, Records_d_exports as N, ResolutionSafeToRetry as Na, AbortIntent as Ni, runStartedRecordId as Nn, BindingDigestMismatch as Nr, childReservationIdFor as Nt, PersistedJson as O, ReservedChildBudget as Oa, RevertJoining as Oi, projectRunJournalStream as On, recoveryDecisionMeaning as Or, DurableSubmitOptions as Ot, RepairAnnotated as P, RevertJoiningRequest as Pa, AbortIntentRequest as Pi, subagentJoinBatchId as Pn, BindingUnavailable as Pr, recoveryRepairBatchId as Pt, ToolCallResolution as Q, SuspensionSnapshot as Qa, ChildBudgetReservationRequest as Qi, turnApprovalsBatchId as Qn, AwaitApprovalDecision as Qr, ThreadNotMaterialized as Qt, RunStartedRecord as R, SettlementReservation as Ra, AdmissionGroup as Ri, subagentRequestedBatchId as Rn, ResolvedBinding as Rr, AppendConflict as Rt, MAX_PERSISTED_JSON_NODES as S, ParentLinkage as Sa, RepairReadiness as Si, compactionRecordId as Sn, RecoveryExplanation as Sr, DurableResolveFailure as St, ModelResponseRecorded as T, ReleaseChildBudgetRequest as Ta, ResumePendingToolBatch as Ti, modelResponseInterruptedRecordId as Tn, RetryRefused as Tr, DurableRuntimeConfigOptions as Tt, SubagentRequested as U, SubmissionLedger_d_exports as Ua, AdmissionResolution as Ui, toolApprovalRequestRecordId as Un, EMPTY_TAIL_DIGEST as Ur, LoadCheckpointRequest as Ut, SubagentJoined as V, SubmissionLedger as Va, AdmissionPolicyError as Vi, subagentStartedRecordId as Vn, DigestError as Vr, FenceRejected as Vt, SubagentStarted as W, SubmissionLookup as Wa, AdmissionResult as Wi, toolCallPreparedRecordId as Wn, digestCanonicalBatch as Wr, MAX_THREAD_EXPORT_RECORDS as Wt, ToolApprovalRequested as X, SuspensionOutcome as Xa, BeginChildBudgetReleaseRequest as Xi, toolStepSettledBatchId as Xn, ApplyJoinAccounting as Xr, ThreadExportRequest as Xt, ToolApprovalDecided as Y, SuspendRequest as Ya, AttachChildToReservationRequest as Yi, toolCallUnknownRecordId as Yn, ApplyInput as Yr, ThreadExport as Yt, ToolCallPrepared as Z, SuspensionReason as Za, ChildAttachmentSnapshot as Zi, toolStepSettledRecordId as Zn, ApplyUnknownResolutions as Zr, ThreadMaterialization as Zt, Digest as _, MarkUnknownRequest as _a, RecoveryEvidence as _i, TurnCommitInput as _n, ObligationReport as _r, DurableAwaitFailure as _t, BatchId as a, Claim as aa, CompleteMaterialization as ai, ThreadStore_d_exports as an, settlementFailureFromRecord as ao, turnResultsBatch as ar, WorkerInputCompleted as at, MAX_PERSISTED_JSON_COLLECTION_LENGTH as b, OwnershipSnapshot as ba, RepairInputMarker as bi, childThreadIdFor as bn, RECOVERY_DECISION_MEANINGS as br, DurableObserveOptions as bt, CanonicalRecord as c, DEFAULT_OWNERSHIP_LEASE_DURATION as ca, EnsureWaitingForChild as ci, PendingSubmission as cn, submissionInputBatchId as co, ExplainedEvidence as cr, WorkerOriginRecorded as ct, CanonicalSequence as d, JoiningClaim as da, NoAction as di, SubmissionStatus_d_exports as dn, submissionSettlementId as do, IntegrityCheck as dr, WorkerReportingIntent as dt, ChildReservationConflict as ea, AwaitChildSettlement as ei, ThreadRead as en, UnknownResolutionCommand as eo, turnCanonicalBatch as er, ToolCallSettled as et, CompactionCreated as f, LedgerCapabilities as fa, OpenDelegationCallEvidence as fi, JournalBoundary as fn, submissionSettlementRecordId as fo, IntegrityCheckName as fr, DurableAbortFailure as ft, DeploymentId as g, MarkReadyRequest as ga, RecoveryDecision as gi, RunJournal_d_exports as gn, ObligationEntry as gr, DurableApprovalResolver as gt, DefinitionDigests as h, MarkJoinedRequest as ha, PropagateChildAbort as hi, RunJournalUsage as hn, ObligationBlockedOn as hr, DurableApprovalFailure as ht, ApprovalDecision as i, ChildSettledOutcome as ia, CompleteChildAdmission as ii, ThreadStoreFailure as in, WaitingForChildSuspension as io, turnResponseBatchId as ir, WorkerAdmission as it, RecordEnvelope as j, ResolutionCompletedWithResult as ja, classifyRecovery as ji, runIdForSubmission as jn, AgentAttemptContext as jr, DurableWorkerRequirements as jt, ProducerEpoch as k, ReservedSettlement as ka, SettleAborted as ki, promptFromCanonicalRecords as kn, renderRecoveryExplanation as kr, DurableVerifyFailure as kt, CanonicalRecordEnvelope as l, InputAppliedMarker as la, FinalizeLedgerFromHistory as li, SettledSubmission as ln, submissionInputRecordId as lo, ExplainedSubmission as lr, WorkerReportPrepared as lt, DefinitionDigestInput as m, MarkInputAppliedRequest as ma, PendingApprovalEvidence as mi, RunJournalProjection as mn, IntegrityReport as mr, DurableAgentRuntime_d_exports as mt, AbortedSubmissionSettled as n, ChildReservationStatus as na, AwaitParentEstablishment as ni, ThreadStore as nn, UnknownResolutionIntent as no, turnPreparedBatchId as nr, ToolStepSettled as nt, CURRENT_CANONICAL_SCHEMA_VERSION as o, ClaimJoiningRequest as oa, DeclaredPendingBatchEvidence as oi, ThreadTail as on, submissionAbortBatchId as oo, turnResultsBatchId as or, WorkerInputRequested as ot, CompletedSubmissionSettled as p, LedgerError as pa, OpenToolCallEvidence as pi, RunJournalError as pn, IntegrityCheckStatus as pr, DurableAgentRuntime as pt, SubtreeBudgetReserved as q, SubmissionSnapshot as qa, ApprovalDecisionIntent as qi, toolCallResultBatchId as qn, digestJson as qr, ThreadCheckpoint as qt, AgentUpdateEmitted as r, ChildSettledNotification as ra, AwaitUnknownResolution as ri, ThreadStoreError as rn, WaitingChild as ro, turnResponseBatch as rr, UserInputRecorded as rt, CanonicalBatch as s, ClaimRequest as sa, DelegationAdmissionEvidence as si, ThreadTailRequest as sn, submissionAbortRecordId as so, Admin_d_exports as sr, WorkerOrigin as st, AbortRequested as t, ChildReservationId as ta, AwaitHostSettlement as ti, ThreadRecoveryCheckpoints as tn, UnknownResolutionConflict as to, turnIdForRun as tr, ToolCallUnknown as tt, CanonicalRecordPayload as u, JoinSnapshot as ua, MarkUnknown as ui, SubmissionStatus as un, submissionSettlementBatchId as uo, ExplainedUnknownCall as ur, WorkerReportRefused as ut, FailedSubmissionSettled as v, OwnershipLost as va, Recovery_d_exports as vi, approvalDecisionBatchId as vn, ObligationSeverity as vr, DurableExplainFailure as vt, ModelResponseInterrupted as w, RecoverySnapshotRequest as wa, ResumeFromTurnBoundary as wi, modelResponseInterruptedBatchId as wn, RetryRefusalReason as wr, DurableRuntimeConfig as wt, MAX_PERSISTED_JSON_DEPTH as x, OwnershipToken as xa, RepairJoinMarker as xi, compactionBatchId as xn, RecoveryDisposition as xr, DurableProgressFailure as xt, MAX_PERSISTED_JSON_BYTES as y, OwnershipRenewal as ya, ReleaseOrphanChildReservation as yi, childIdempotencyKeyFor as yn, ObligationThresholds as yr, DurableObligationFailure as yt, SettlementFailureDiagnostic as z, SettlementReservationSnapshot as za, AdmissionIndeterminate as zi, subagentRequestedRecordId as zn, compileRegistrations as zr, AppendResult as zt };
-//# sourceMappingURL=Records-B84j3Jq_.d.mts.map
+export { ToolCallPrepared as $, SubmissionLookup as $a, AdmissionResult as $i, toolCallUnknownRecordId as $n, digestCanonicalBatch as $r, ThreadMaterialization as $t, ProducerId as A, OwnershipToken as Aa, RepairJoinMarker as Ai, projectRunJournalStream as An, obligationSeverityOf as Ar, DurableSubmitOptions as At, RunStartedRecord as B, ResolutionCompletedWithResult as Ba, classifyRecovery as Bi, subagentLineageBatchId as Bn, DurableBindingFailure as Br, AppendConflict as Bt, ModelCompleted as C, MarkInputAppliedRequest as Ca, PendingApprovalEvidence as Ci, compactionBatchId as Cn, ObligationThresholds as Cr, DurableProgressFailure as Ct, PeerMessagePrepared as D, OwnershipLost as Da, Recovery_d_exports as Di, modelResponseInterruptedRecordId as Dn, RetryCommand as Dr, DurableRuntimeConfigOptions as Dt, ObservationOffset as E, MarkUnknownRequest as Ea, RecoveryEvidence as Ei, modelResponseInterruptedBatchId as En, RecoveryExplanation as Er, DurableRuntimeConfig as Et, ReplayContract as F, ReleaseOwnershipRequest as Fa, ResumeSuspended as Fi, runIdForSubmission as Fn, AgentAttemptContext as Fr, childReservationIdFor as Ft, SubagentRequested as G, SettlementConflict as Ga, AdmissionConflict as Gi, subagentStartedRecordId as Gn, bindingSupports as Gr, LoadCheckpointRequest as Gt, SettlementOutcome as H, ResolutionSafeToRetry as Ha, AbortIntent as Hi, subagentRequestedBatchId as Hn, ExecutableAgentBinding as Hr, CheckpointRejected as Ht, RunCompleted as I, RenewOwnershipRequest as Ia, ResumeWaitingParent as Ii, runStartedBatchId as In, AgentRegistration as Ir, recoveryRepairBatchId as It, SubmissionSettledRecord as J, SettlementReservationSnapshot as Ja, AdmissionIndeterminate as Ji, toolCallPreparedRecordId as Jn, definitionDigestsEqual as Jr, SaveRecoveryCheckpointRequest as Jt, SubagentStarted as K, SettlementFinalization as Ka, AdmissionFence as Ki, toolApprovalDecisionRecordId as Kn, compileBindingManifest as Kr, MAX_THREAD_EXPORT_RECORDS as Kt, RunDurationExhausted as L, ReservedChildBudget as La, RevertJoining as Li, runStartedRecordId as Ln, BindingDigestMismatch as Lr, recoveryRepairRecordId as Lt, RecordId as M, RecoverySnapshot as Ma, RepairSubagentStartLink as Mi, runCompletedRecordId as Mn, recoveryDecisionMeaning as Mr, DurableWorkerFailure as Mt, Records_d_exports as N, RecoverySnapshotRequest as Na, ResumeFromTurnBoundary as Ni, runDurationBatchId as Nn, renderRecoveryExplanation as Nr, DurableWorkerRequirements as Nt, PersistedJson as O, OwnershipRenewal as Oa, ReleaseOrphanChildReservation as Oi, modelResponseRecordId as On, RetryRefusalReason as Or, DurableSubmitAgent as Ot, RepairAnnotated as P, ReleaseChildBudgetRequest as Pa, ResumePendingToolBatch as Pi, runDurationRecordId as Pn, AgentRegistration_d_exports as Pr, RecoveryReport as Pt, ToolApprovalRequested as Q, SubmissionLedger_d_exports as Qa, AdmissionResolution as Qi, toolCallSettledRecordId as Qn, EMPTY_TAIL_DIGEST as Qr, ThreadExportRequest as Qt, RunFailed as R, ReservedSettlement as Ra, SettleAborted as Ri, subagentJoinBatchId as Rn, BindingManifest as Rr, threadCreatedBatchId as Rt, MAX_PERSISTED_JSON_NODES as S, LedgerError as Sa, OpenToolCallEvidence as Si, childThreadIdFor as Sn, ObligationSeverity as Sr, DurableObserveOptions as St, ModelResponseRecorded as T, MarkReadyRequest as Ta, RecoveryDecision as Ti, markUnknownBatchId as Tn, RecoveryDisposition as Tr, DurableRetryFailure as Tt, SubagentJoined as U, RevertJoiningRequest as Ua, AbortIntentRequest as Ui, subagentRequestedRecordId as Un, ReplayVersions as Ur, FenceRejected as Ut, SettlementFailureDiagnostic as V, ResolutionNeverHappened as Va, AbortCommand as Vi, subagentLineageRecordId as Vn, DurableWorkerBinding as Vr, AppendResult as Vt, SubagentLineageRecorded as W, Settlement as Wa, AdmissionAdmitted as Wi, subagentStartedBatchId as Wn, ResolvedBinding as Wr, FencedAppendRequest as Wt, ThreadCreated as X, SubmissionLedger as Xa, AdmissionPolicyError as Xi, toolCallResolvedRecordId as Xn, DigestError as Xr, ThreadCheckpoints as Xt, SubtreeBudgetReserved as Y, SubmissionAdmissionFence as Ya, AdmissionNotAdmitted as Yi, toolCallResolutionBatchId as Yn, makeBindingManifest as Yr, ThreadCheckpoint as Yt, ToolApprovalDecided as Z, SubmissionLedgerFailure as Za, AdmissionRequest as Zi, toolCallResultBatchId as Zn, Digest_d_exports as Zr, ThreadExport as Zt, Digest as _, DEFAULT_OWNERSHIP_LEASE_DURATION as _a, EnsureWaitingForChild as _i, RunJournalUsage as _n, submissionInputBatchId as _o, IntegrityCheckStatus as _r, DurableApprovalFailure as _t, BatchId as a, BeginChildBudgetReleaseRequest as aa, ApplyJoinAccounting as ai, ThreadStoreError as an, SuspensionOutcome as ao, turnIdForRun as ar, UserInputRecorded as at, MAX_PERSISTED_JSON_COLLECTION_LENGTH as b, JoiningClaim as ba, NoAction as bi, approvalDecisionBatchId as bn, submissionSettlementId as bo, ObligationEntry as br, DurableExplainFailure as bt, CanonicalRecord as c, ChildBudgetReservationSnapshot as ca, AwaitChildAdmissionResolution as ci, ThreadTail as cn, UnknownResolution as co, turnResponseBatchId as cr, WorkerInputRequested as ct, CanonicalSequence as d, ChildReservationStatus as da, AwaitParentEstablishment as di, SettledSubmission as dn, UnknownResolutionIntent as do, Admin_d_exports as dr, WorkerReportPrepared as dt, ApprovalConflict as ea, digestDefinition as ei, ThreadNotMaterialized as en, SubmissionLookupById as eo, toolStepSettledBatchId as er, ToolCallResolution as et, CompactionCreated as f, ChildSettledNotification as fa, AwaitUnknownResolution as fi, SubmissionStatus as fn, WaitingChild as fo, ExplainedEvidence as fr, WorkerReportRefused as ft, DeploymentId as g, ClaimRequest as ga, DelegationAdmissionEvidence as gi, RunJournalProjection as gn, submissionAbortRecordId as go, IntegrityCheckName as gr, DurableAgentRuntime_d_exports as gt, DefinitionDigests as h, ClaimJoiningRequest as ha, DeclaredPendingBatchEvidence as hi, RunJournalError as hn, submissionAbortBatchId as ho, IntegrityCheck as hr, DurableAgentRuntime as ht, ApprovalDecision as i, AttachChildToReservationRequest as ia, ApplyInput as ii, ThreadStore as in, SuspendRequest as io, turnCanonicalBatch as ir, ToolStepSettled as it, RecordEnvelope as j, ParentLinkage as ja, RepairReadiness as ji, promptFromCanonicalRecords as jn, predictRecoveryDisposition as jr, DurableVerifyFailure as jt, ProducerEpoch as k, OwnershipSnapshot as ka, RepairInputMarker as ki, projectRunJournal as kn, RetryRefused as kr, DurableSubmitFailure as kt, CanonicalRecordEnvelope as l, ChildReservationConflict as la, AwaitChildSettlement as li, ThreadTailRequest as ln, UnknownResolutionCommand as lo, turnResultsBatch as lr, WorkerOrigin as lt, DefinitionDigestInput as m, Claim as ma, CompleteMaterialization as mi, JournalBoundary as mn, settlementFailureFromRecord as mo, ExplainedUnknownCall as mr, DurableAbortFailure as mt, AbortedSubmissionSettled as n, ApprovalDecisionIntent as na, digestJson as ni, ThreadRead as nn, SubmissionSnapshot as no, turnApprovalsBatchId as nr, ToolCallSettled as nt, CURRENT_CANONICAL_SCHEMA_VERSION as o, ChildAttachmentSnapshot as oa, ApplyUnknownResolutions as oi, ThreadStoreFailure as on, SuspensionReason as oo, turnPreparedBatchId as or, WorkerAdmission as ot, CompletedSubmissionSettled as p, ChildSettledOutcome as pa, CompleteChildAdmission as pi, SubmissionStatus_d_exports as pn, WaitingForChildSuspension as po, ExplainedSubmission as pr, WorkerReportingIntent as pt, SubmissionSettled as q, SettlementReservation as qa, AdmissionGroup as qi, toolApprovalRequestRecordId as qn, compileRegistrations as qr, SaveCheckpointRequest as qt, AgentUpdateEmitted as r, ApprovalPendingSuspension as ra, AppendReservedSettlement as ri, ThreadRecoveryCheckpoints as rn, SubmissionState as ro, turnBatchId as rr, ToolCallUnknown as rt, CanonicalBatch as s, ChildBudgetReservationRequest as sa, AwaitApprovalDecision as si, ThreadStore_d_exports as sn, SuspensionSnapshot as so, turnResponseBatch as sr, WorkerInputCompleted as st, AbortRequested as t, ApprovalDecisionCommand as ta, digestDefinitions as ti, ThreadObservation as tn, SubmissionLookupByKey as to, toolStepSettledRecordId as tr, ToolCallResolved as tt, CanonicalRecordPayload as u, ChildReservationId as ua, AwaitHostSettlement as ui, PendingSubmission as un, UnknownResolutionConflict as uo, turnResultsBatchId as ur, WorkerOriginRecorded as ut, FailedSubmissionSettled as v, InputAppliedMarker as va, FinalizeLedgerFromHistory as vi, RunJournal_d_exports as vn, submissionInputRecordId as vo, IntegrityReport as vr, DurableApprovalResolver as vt, ModelResponseInterrupted as w, MarkJoinedRequest as wa, PropagateChildAbort as wi, compactionRecordId as wn, RECOVERY_DECISION_MEANINGS as wr, DurableResolveFailure as wt, MAX_PERSISTED_JSON_DEPTH as x, LedgerCapabilities as xa, OpenDelegationCallEvidence as xi, childIdempotencyKeyFor as xn, submissionSettlementRecordId as xo, ObligationReport as xr, DurableObligationFailure as xt, MAX_PERSISTED_JSON_BYTES as y, JoinSnapshot as ya, MarkUnknown as yi, TurnCommitInput as yn, submissionSettlementBatchId as yo, ObligationBlockedOn as yr, DurableAwaitFailure as yt, RunPolicyUsageReserved as z, ResolutionAbortSubmission as za, SettleJoinedWithHost as zi, subagentJoinedRecordId as zn, BindingUnavailable as zr, threadCreatedRecordId as zt };
+//# sourceMappingURL=Records-CV49DgQK.d.mts.map