effect-agent 0.1.0-beta.97 → 0.1.0-beta.99

package/dist/durable/SubmissionStatus.d.mts

@@ -1,2 +1,2 @@
-import { dn as SettledSubmission, fn as SubmissionStatus, un as PendingSubmission } from "../Records-CV49DgQK.mjs";
+import { fn as PendingSubmission, mn as SubmissionStatus, pn as SettledSubmission } from "../Records-BIiRLqlz.mjs";
 export { PendingSubmission, SettledSubmission, SubmissionStatus };

package/dist/durable/Subscription.d.mts

@@ -1,2 +1,2 @@
-import { A as defaultSubscriptionLimits, C as SubscriptionScanCursors, D as SubscriptionStore, E as SubscriptionSourceError, M as subscriptionKeyString, O as SubscriptionStoreFailure, S as SubscriptionRetentionPolicy, T as SubscriptionSnapshot, _ as SubscriptionKey, a as PreparedInput, b as SubscriptionRecord, c as SubscriptionAuthorizer, d as SubscriptionDelivery, f as SubscriptionDeliveryKey, g as SubscriptionFailpointError, h as SubscriptionFailpoint, i as EventSourceVersion, j as subscriptionDeliveryKeyString, l as SubscriptionChange, m as SubscriptionError, n as DeliveryChange, o as SourcePartition, p as SubscriptionDeliverySnapshot, r as EventAcknowledgement, s as SourceRecovery, t as AcceptedEvent, u as SubscriptionConfiguration, v as SubscriptionLimits, w as SubscriptionScope, x as SubscriptionRefusal, y as SubscriptionName } from "../Subscription-BR_8Cxh3.mjs";
+import { A as defaultSubscriptionLimits, C as SubscriptionScanCursors, D as SubscriptionStore, E as SubscriptionSourceError, M as subscriptionKeyString, O as SubscriptionStoreFailure, S as SubscriptionRetentionPolicy, T as SubscriptionSnapshot, _ as SubscriptionKey, a as PreparedInput, b as SubscriptionRecord, c as SubscriptionAuthorizer, d as SubscriptionDelivery, f as SubscriptionDeliveryKey, g as SubscriptionFailpointError, h as SubscriptionFailpoint, i as EventSourceVersion, j as subscriptionDeliveryKeyString, l as SubscriptionChange, m as SubscriptionError, n as DeliveryChange, o as SourcePartition, p as SubscriptionDeliverySnapshot, r as EventAcknowledgement, s as SourceRecovery, t as AcceptedEvent, u as SubscriptionConfiguration, v as SubscriptionLimits, w as SubscriptionScope, x as SubscriptionRefusal, y as SubscriptionName } from "../Subscription-BCQ3L9Zp.mjs";
 export { AcceptedEvent, DeliveryChange, EventAcknowledgement, EventSourceVersion, PreparedInput, SourcePartition, SourceRecovery, SubscriptionAuthorizer, SubscriptionChange, SubscriptionConfiguration, SubscriptionDelivery, SubscriptionDeliveryKey, SubscriptionDeliverySnapshot, SubscriptionError, SubscriptionFailpoint, SubscriptionFailpointError, SubscriptionKey, SubscriptionLimits, SubscriptionName, SubscriptionRecord, SubscriptionRefusal, SubscriptionRetentionPolicy, SubscriptionScanCursors, SubscriptionScope, SubscriptionSnapshot, SubscriptionSourceError, SubscriptionStore, SubscriptionStoreFailure, defaultSubscriptionLimits, subscriptionDeliveryKeyString, subscriptionKeyString };

package/dist/durable/Subscription.mjs

@@ -2,7 +2,7 @@ import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.mjs";
 import { AgentId, ThreadId } from "../core/Identifiers.mjs";
 import { IdempotencyKey, Principal, Receipt } from "../core/Receipt.mjs";
 import { l as InputMessage } from "../MessagingHost-CWi_PP3g.mjs";
-import { T as PersistedJson, h as Digest, p as DefinitionDigests, rt as WorkerAdmission } from "../Records-BAutSSnJ.mjs";
+import { T as PersistedJson, at as WorkerAdmission, h as Digest, p as DefinitionDigests } from "../Records-DR1xtbXY.mjs";
 import { AdmissionFence, AdmissionGroup } from "./SubmissionLedger.mjs";
 import { ScheduleAuthorizationDecision, ScheduleDestination, ScheduleInstant, ScheduleRetry } from "./Schedule.mjs";
 import { Context, Effect, Schema } from "effect";

package/dist/durable/SubscriptionInput.d.mts

@@ -1,2 +1,2 @@
-import { a as resolveSubscriptionInput, i as makeSubscriptionInputBinding, n as SubscriptionInputBindings, t as SubscriptionInputBinding } from "../SubscriptionInput-B95sQbuk.mjs";
+import { a as resolveSubscriptionInput, i as makeSubscriptionInputBinding, n as SubscriptionInputBindings, t as SubscriptionInputBinding } from "../SubscriptionInput-Cqu4_RW3.mjs";
 export { SubscriptionInputBinding, SubscriptionInputBindings, makeSubscriptionInputBinding, resolveSubscriptionInput };

package/dist/durable/SubscriptionInput.mjs

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.mjs";
-import { T as PersistedJson } from "../Records-BAutSSnJ.mjs";
-import { c as definitionDigestsEqual } from "../agent-registration-CXGDwvJH.mjs";
+import { T as PersistedJson } from "../Records-DR1xtbXY.mjs";
+import { a as definitionDigestsEqual } from "../agent-registration-cXpB8cBU.mjs";
 import { SubscriptionError, SubscriptionSourceError } from "./Subscription.mjs";
 import { Context, Effect, Schema } from "effect";
 //#region src/durable/SubscriptionInput.ts

package/dist/durable/SubscriptionStoreConformance.d.mts

@@ -1,4 +1,4 @@
-import { D as SubscriptionStore, O as SubscriptionStoreFailure, o as SourcePartition } from "../Subscription-BR_8Cxh3.mjs";
+import { D as SubscriptionStore, O as SubscriptionStoreFailure, o as SourcePartition } from "../Subscription-BCQ3L9Zp.mjs";
 import { Effect, Schema } from "effect";
 //#region src/durable/SubscriptionStoreConformance.d.ts
 declare const SubscriptionStoreConformanceViolation_base: Schema.Class<SubscriptionStoreConformanceViolation, Schema.TaggedStruct<"SubscriptionStoreConformanceViolation", {

package/dist/durable/SubscriptionStoreConformance.mjs

@@ -1,6 +1,6 @@
 import { AgentId, ReceiptId, SubmissionId, ThreadId } from "../core/Identifiers.mjs";
 import { IdempotencyKey, Principal, QueueSequence, Receipt } from "../core/Receipt.mjs";
-import { h as Digest, p as DefinitionDigests } from "../Records-BAutSSnJ.mjs";
+import { h as Digest, p as DefinitionDigests } from "../Records-DR1xtbXY.mjs";
 import { SubscriptionStore, defaultSubscriptionLimits } from "./Subscription.mjs";
 import { Clock, Effect, Result, Schema } from "effect";
 import { TestClock } from "effect/testing";

package/dist/durable/SubscriptionTools.d.mts

@@ -1,9 +1,9 @@
 import { t as AgentId, u as ThreadId } from "../Identifiers-CN2s30fF.mjs";
 import { r as Principal } from "../Receipt-BAHyigAF.mjs";
 import { t as DurableStep } from "../DurableStep-Cry_iol4.mjs";
-import { h as DefinitionDigests } from "../Records-CV49DgQK.mjs";
-import { c as ScheduleDestination } from "../Schedule-DePbGfgd.mjs";
-import { E as SubscriptionSourceError, g as SubscriptionFailpointError, i as EventSourceVersion, m as SubscriptionError, w as SubscriptionScope } from "../Subscription-BR_8Cxh3.mjs";
+import { h as DefinitionDigests } from "../Records-BIiRLqlz.mjs";
+import { c as ScheduleDestination } from "../Schedule-BNFlluAl.mjs";
+import { E as SubscriptionSourceError, g as SubscriptionFailpointError, i as EventSourceVersion, m as SubscriptionError, w as SubscriptionScope } from "../Subscription-BCQ3L9Zp.mjs";
 import { Subscriptions } from "./Subscriptions.mjs";
 import { Tool, Toolkit } from "effect/unstable/ai";
 import { Crypto, Layer, Schema } from "effect";

package/dist/durable/SubscriptionTransition.d.mts

@@ -1,4 +1,4 @@
-import { b as SubscriptionRecord, d as SubscriptionDelivery, l as SubscriptionChange, m as SubscriptionError, n as DeliveryChange, o as SourcePartition, t as AcceptedEvent, v as SubscriptionLimits } from "../Subscription-BR_8Cxh3.mjs";
+import { b as SubscriptionRecord, d as SubscriptionDelivery, l as SubscriptionChange, m as SubscriptionError, n as DeliveryChange, o as SourcePartition, t as AcceptedEvent, v as SubscriptionLimits } from "../Subscription-BCQ3L9Zp.mjs";
 import { Result } from "effect";
 declare namespace SubscriptionTransition_d_exports {
   export { applySubscriptionChange, applySubscriptionDeliveryChange, sameAcceptedEventIdentity, sameSourcePartition, sameSubscriptionDelivery, subscriptionCanSelect, subscriptionDeliveryCanSelect, subscriptionMatchesEvent, validateEventRetention };

package/dist/durable/SubscriptionTransition.mjs

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.mjs";
 import { Receipt } from "../core/Receipt.mjs";
-import { p as DefinitionDigests } from "../Records-BAutSSnJ.mjs";
+import { p as DefinitionDigests } from "../Records-DR1xtbXY.mjs";
 import { AdmissionFence } from "./SubmissionLedger.mjs";
 import { SubscriptionConfiguration, SubscriptionDelivery, SubscriptionError } from "./Subscription.mjs";
 import { Result, Schema } from "effect";

package/dist/durable/Subscriptions.d.mts

@@ -1,9 +1,9 @@
 import { r as Principal } from "../Receipt-BAHyigAF.mjs";
-import { Ki as AdmissionFence, O as PersistedJson } from "../Records-CV49DgQK.mjs";
-import { D as SubscriptionStore, E as SubscriptionSourceError, O as SubscriptionStoreFailure, T as SubscriptionSnapshot, _ as SubscriptionKey, c as SubscriptionAuthorizer, f as SubscriptionDeliveryKey, i as EventSourceVersion, m as SubscriptionError, p as SubscriptionDeliverySnapshot, r as EventAcknowledgement, u as SubscriptionConfiguration, v as SubscriptionLimits, w as SubscriptionScope } from "../Subscription-BR_8Cxh3.mjs";
-import { r as EventSources } from "../EventSource-D6PAAEyK.mjs";
-import { t as PreparedInputAdmission } from "../PreparedInputAdmission-omMbwd--.mjs";
-import { n as SubscriptionInputBindings } from "../SubscriptionInput-B95sQbuk.mjs";
+import { Gi as AdmissionFence, O as PersistedJson } from "../Records-BIiRLqlz.mjs";
+import { D as SubscriptionStore, E as SubscriptionSourceError, O as SubscriptionStoreFailure, T as SubscriptionSnapshot, _ as SubscriptionKey, c as SubscriptionAuthorizer, f as SubscriptionDeliveryKey, i as EventSourceVersion, m as SubscriptionError, p as SubscriptionDeliverySnapshot, r as EventAcknowledgement, u as SubscriptionConfiguration, v as SubscriptionLimits, w as SubscriptionScope } from "../Subscription-BCQ3L9Zp.mjs";
+import { r as EventSources } from "../EventSource-BZ73J0s5.mjs";
+import { t as PreparedInputAdmission } from "../PreparedInputAdmission-BkeI-Xvr.mjs";
+import { n as SubscriptionInputBindings } from "../SubscriptionInput-Cqu4_RW3.mjs";
 import { Context, Crypto, Effect, Layer } from "effect";
 declare namespace Subscriptions_d_exports {
   export { SubscribeOptions, SubscriptionDriver, SubscriptionFailure, SubscriptionIntake, Subscriptions };

package/dist/durable/Subscriptions.mjs

@@ -2,7 +2,7 @@ import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.mjs";
 import { ThreadId } from "../core/Identifiers.mjs";
 import { n as utf8ByteLength } from "../utf8-DchGZRBd.mjs";
 import { IdempotencyKey } from "../core/Receipt.mjs";
-import { p as DefinitionDigests } from "../Records-BAutSSnJ.mjs";
+import { p as DefinitionDigests } from "../Records-DR1xtbXY.mjs";
 import { digestJson } from "./Digest.mjs";
 import { PreparedInputAdmission, admitPreparedInput } from "./PreparedInputAdmission.mjs";
 import { AcceptedEvent, PreparedInput, SubscriptionAuthorizer, SubscriptionConfiguration, SubscriptionDelivery, SubscriptionError, SubscriptionFailpoint, SubscriptionKey, SubscriptionLimits, SubscriptionScope, SubscriptionSourceError, SubscriptionStore, defaultSubscriptionLimits, subscriptionDeliveryKeyString } from "./Subscription.mjs";

package/dist/durable/ThreadContextHistory.d.mts

@@ -1,5 +1,5 @@
 import { ContextHistory, ContextHistoryError } from "../engine/ContextHistory.mjs";
-import { in as ThreadStore } from "../Records-CV49DgQK.mjs";
+import { on as ThreadStore } from "../Records-BIiRLqlz.mjs";
 import { Layer, Schema } from "effect";
 declare namespace ThreadContextHistory_d_exports {
   export { ThreadContextHistoryOptions, layer };

package/dist/durable/ThreadContextHistory.mjs

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.mjs";
 import { ContextHistory, ContextHistoryError, ContextHistoryHit, ContextHistoryPage, ContextHistoryRead, ContextHistorySearch } from "../engine/ContextHistory.mjs";
-import { c as CanonicalRecordEnvelope, u as CanonicalSequence } from "../Records-BAutSSnJ.mjs";
+import { c as CanonicalRecordEnvelope, u as CanonicalSequence } from "../Records-DR1xtbXY.mjs";
 import { ThreadRead, ThreadStore, ThreadTail, ThreadTailRequest } from "./ThreadStore.mjs";
 import { ContextHistoryEvidence, matchText, normalizeQuery, project, windowIdFor } from "./ThreadContextHistoryProjection.mjs";
 import { Effect, Layer, Schema, Stream } from "effect";

package/dist/durable/ThreadContextHistoryProjection.d.mts

@@ -1,5 +1,5 @@
 import { ContextHistoryError } from "../engine/ContextHistory.mjs";
-import { l as CanonicalRecordEnvelope } from "../Records-CV49DgQK.mjs";
+import { l as CanonicalRecordEnvelope } from "../Records-BIiRLqlz.mjs";
 import { Effect, Schema } from "effect";
 declare namespace ThreadContextHistoryProjection_d_exports {
   export { ContextHistoryBoundary, ContextHistoryEvidence, ContextHistoryProjection, matchText, normalizeQuery, normalizeText, project, windowIdFor };

package/dist/durable/ThreadContextHistoryProjection.mjs

@@ -2,7 +2,7 @@ import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.mjs";
 import { RunId } from "../core/Identifiers.mjs";
 import { f as contextWindowId } from "../compaction-C2OTceKw.mjs";
 import { ContextHistoryError, ContextHistorySearch } from "../engine/ContextHistory.mjs";
-import { T as PersistedJson, k as RecordId, u as CanonicalSequence } from "../Records-BAutSSnJ.mjs";
+import { T as PersistedJson, k as RecordId, u as CanonicalSequence } from "../Records-DR1xtbXY.mjs";
 import { Prompt } from "effect/unstable/ai";
 import { Effect, Schema } from "effect";
 //#region src/durable/ThreadContextHistoryProjection.ts

package/dist/durable/ThreadInvariants.d.mts

@@ -1,4 +1,4 @@
-import { A as ProducerId, Yt as ThreadCheckpoint, Zt as ThreadExport, a as BatchId, no as SubmissionSnapshot, vr as IntegrityReport } from "../Records-CV49DgQK.mjs";
+import { $t as ThreadExport, A as ProducerId, Zt as ThreadCheckpoint, a as BatchId, to as SubmissionSnapshot, xr as IntegrityReport } from "../Records-BIiRLqlz.mjs";
 import { Crypto, Effect } from "effect";
 declare namespace ThreadInvariants_d_exports {
   export { ThreadInvariantInput, verifyThreadInvariants };
@@ -52,7 +52,9 @@ interface ThreadInvariantInput {
  * 4. `digest-chain` — the tail digest recomputes from `EMPTY_TAIL_DIGEST` through every batch
  *    (requires the per-batch producer directory; skipped honestly otherwise).
  * 5. `fifo-input-order` / `fifo-settlement-order` — canonical input and settlement records
- *    follow the admitted queue order (DUR-004). Aborted settlements of never-run work (no
+ *    follow the admitted queue order (DUR-004), except a later input may settle before a Run
+ *    with canonically unresolved unknown calls when that input became active. Resolving those
+ *    calls later does not revoke the later Run's ownership. Aborted settlements of never-run work (no
  *    canonical `input:{sid}` record) are exempt from the settlement comparison: P7 §7(c)
  *    settles them immediately without waiting for the head, and DUR-004 bounds execution
  *    order, which never-run work has none of.

package/dist/durable/ThreadInvariants.mjs

@@ -1,8 +1,9 @@
 import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.mjs";
-import { c as CanonicalRecordEnvelope, o as CanonicalBatch } from "../Records-BAutSSnJ.mjs";
+import { c as CanonicalRecordEnvelope, o as CanonicalBatch } from "../Records-DR1xtbXY.mjs";
 import { submissionInputRecordId, submissionSettlementRecordId } from "./SubmissionLedger.mjs";
 import { IntegrityCheck, IntegrityReport } from "./Admin.mjs";
 import { EMPTY_TAIL_DIGEST, digestCanonicalBatch } from "./Digest.mjs";
+import { y as runIdForSubmission } from "../RunJournal-DNs3PM4K.mjs";
 import { Effect, Schema } from "effect";
 //#region src/durable/ThreadInvariants.ts
 var ThreadInvariants_exports = /* @__PURE__ */ __exportAll({ verifyThreadInvariants: () => verifyThreadInvariants });
@@ -46,7 +47,9 @@ const batchRunsOf = (records) => {
 * 4. `digest-chain` — the tail digest recomputes from `EMPTY_TAIL_DIGEST` through every batch
 *    (requires the per-batch producer directory; skipped honestly otherwise).
 * 5. `fifo-input-order` / `fifo-settlement-order` — canonical input and settlement records
-*    follow the admitted queue order (DUR-004). Aborted settlements of never-run work (no
+*    follow the admitted queue order (DUR-004), except a later input may settle before a Run
+*    with canonically unresolved unknown calls when that input became active. Resolving those
+*    calls later does not revoke the later Run's ownership. Aborted settlements of never-run work (no
 *    canonical `input:{sid}` record) are exempt from the settlement comparison: P7 §7(c)
 *    settles them immediately without waiting for the head, and DUR-004 bounds execution
 *    order, which never-run work has none of.
@@ -137,8 +140,39 @@ const verifyThreadInvariants = Effect.fn("Thread.verifyThreadInvariants")(functi
 	{
 		const recordIdSet = new Set(recordIds);
 		const abortedNeverRun = /* @__PURE__ */ new Set();
+		const settlementByRun = new Map(ordered.map((row) => [runIdForSubmission(row.submissionId), submissionSettlementRecordId(row.submissionId)]));
+		const inputSettlements = new Map(ordered.map((row) => [submissionInputRecordId(row.submissionId), submissionSettlementRecordId(row.submissionId)]));
+		const unknownCalls = /* @__PURE__ */ new Map();
+		const abortsOrTerminals = /* @__PURE__ */ new Set();
+		const bypassedSettlements = /* @__PURE__ */ new Map();
 		for (const envelope of records) {
 			const payload = envelope.record.payload;
+			if (payload._tag === "ToolCallUnknown" && !abortsOrTerminals.has(payload.runId)) {
+				const calls = unknownCalls.get(payload.runId) ?? /* @__PURE__ */ new Set();
+				calls.add(payload.toolCallId);
+				unknownCalls.set(payload.runId, calls);
+			} else if (payload._tag === "ToolCallResolved" || payload._tag === "ToolCallSettled") {
+				const calls = unknownCalls.get(payload.runId);
+				calls?.delete(payload.toolCallId);
+				if (calls?.size === 0) unknownCalls.delete(payload.runId);
+			} else if (payload._tag === "AbortRequested" || payload._tag === "SubmissionSettled") {
+				const runId = runIdForSubmission(payload.submissionId);
+				abortsOrTerminals.add(runId);
+				unknownCalls.delete(runId);
+			} else if (payload._tag === "RunCompleted" || payload._tag === "RunFailed") {
+				abortsOrTerminals.add(payload.runId);
+				unknownCalls.delete(payload.runId);
+			} else if (payload._tag === "UserInputRecorded") {
+				const settlementId = inputSettlements.get(envelope.record.recordId);
+				if (settlementId !== void 0) {
+					const bypassed = /* @__PURE__ */ new Set();
+					for (const runId of unknownCalls.keys()) {
+						const earlier = settlementByRun.get(runId);
+						if (earlier !== void 0) bypassed.add(earlier);
+					}
+					bypassedSettlements.set(settlementId, bypassed);
+				}
+			}
 			if (payload._tag === "SubmissionSettled" && payload.outcome === "aborted" && !recordIdSet.has(submissionInputRecordId(payload.submissionId))) abortedNeverRun.add(payload.submissionId);
 		}
 		const expectedSettlements = ordered.filter((row) => !abortedNeverRun.has(row.submissionId)).map((row) => submissionSettlementRecordId(row.submissionId));
@@ -146,7 +180,19 @@ const verifyThreadInvariants = Effect.fn("Thread.verifyThreadInvariants")(functi
 		const settlementOrder = recordIds.filter((recordId) => expectedSet.has(recordId));
 		const presentSettlements = new Set(settlementOrder);
 		const expectedPresent = expectedSettlements.filter((expected) => presentSettlements.has(expected));
-		const matches = settlementOrder.length === expectedPresent.length && settlementOrder.every((recordId, index) => recordId === expectedPresent[index]);
+		const remaining = new Set(expectedPresent);
+		let matches = settlementOrder.length === expectedPresent.length;
+		for (const recordId of settlementOrder) {
+			for (const earlier of remaining) {
+				if (earlier === recordId) break;
+				if (!bypassedSettlements.get(recordId)?.has(earlier)) {
+					matches = false;
+					break;
+				}
+			}
+			if (!matches) break;
+			remaining.delete(recordId);
+		}
 		checks.push(matches ? check("fifo-settlement-order", "passed") : check("fifo-settlement-order", "failed", `canonical settlement order [${settlementOrder.join(", ")}] violates queue order`));
 	}
 	{

package/dist/durable/ThreadInvariants.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ThreadInvariants.mjs","names":[],"sources":["../../src/durable/ThreadInvariants.ts"],"sourcesContent":["import type { Crypto } from \"effect\";\nimport { Effect, Schema } from \"effect\";\n\nimport { IntegrityCheck, IntegrityReport, type IntegrityCheckName } from \"./Admin.ts\";\nimport { digestCanonicalBatch, EMPTY_TAIL_DIGEST } from \"./Digest.ts\";\nimport {\n  CanonicalBatch,\n  CanonicalRecordEnvelope,\n  type BatchId,\n  type ProducerId,\n  type RecordEnvelope,\n} from \"./Records.ts\";\nimport {\n  submissionInputRecordId,\n  submissionSettlementRecordId,\n  type SubmissionSnapshot,\n} from \"./SubmissionLedger.ts\";\nimport type { ThreadCheckpoint, ThreadExport } from \"./ThreadStore.ts\";\n\n/**\n * The production thread invariant checker, shared by the durable coordinator, admin\n * verification, and development harnesses. Keeping it independent of certification and\n * conformance modules prevents ordinary runtime imports from loading test-only dependencies.\n *\n * `verifyThreadInvariants` — hoisted from the DC eviction harness's `assertConvergence`\n * so the admin `verify` operation, the adapter certification tiers (WP2), and the chaos/soak\n * properties (WP4) all assert one set of claims.\n */\n\n/**\n * Input of one invariant verification, assembled entirely from port reads (or from a captured\n * copy under test):\n *\n * - `export` — the Thread's canonical export (`ThreadStore.export`).\n * - `submissions` — every known Submission row of the lane (ledger scan + lookups). Order is\n *   irrelevant; the checker sorts by `queueSequence`.\n * - `batchProducers` — OPTIONAL per-batch producer identity directory. The digest chain hashes\n *   each batch's Schema-encoded `CanonicalBatch` — including its `producerId`, which the\n *   `ThreadStore` port deliberately does not export — so full chain recomputation needs\n *   this directory (capture it at append time, or from adapter-private storage). Without it the\n *   `digest-chain` and `checkpoint-binding` checks report `skipped` with the honest reason;\n *   adapter-level `verifyOnOpen` remains the storage-side full audit.\n * - `checkpoint` — the stored checkpoint to bind against the recomputed chain, when one exists.\n * - `checkpointsSupported` — whether the caller inspected a supporting adapter. Without this\n *   evidence or a supplied checkpoint, checkpoint verification is skipped.\n * - `requireAllSettled` — convergence mode (certification Tier 2, chaos, soak): additionally\n *   require every known Submission to be settled.\n */\nexport interface ThreadInvariantInput {\n  readonly export: ThreadExport;\n  readonly submissions: ReadonlyArray<SubmissionSnapshot>;\n  readonly batchProducers?: ReadonlyMap<BatchId, ProducerId> | undefined;\n  readonly checkpoint?: ThreadCheckpoint | undefined;\n  /** Set only after checking the adapter's optional checkpoint capability. */\n  readonly checkpointsSupported?: boolean | undefined;\n  readonly requireAllSettled?: boolean | undefined;\n}\n\nconst encodeEnvelope = Schema.encodeEffect(CanonicalRecordEnvelope);\nconst decodeEnvelope = Schema.decodeUnknownEffect(CanonicalRecordEnvelope);\n\nconst check = (\n  name: IntegrityCheckName,\n  status: \"passed\" | \"failed\" | \"skipped\",\n  detail?: string,\n): IntegrityCheck =>\n  IntegrityCheck.make({\n    name,\n    status,\n    ...(detail === undefined ? {} : { detail: detail.slice(0, 4_096) }),\n  });\n\ninterface BatchRun {\n  readonly batchId: BatchId;\n  readonly records: Array<RecordEnvelope>;\n  readonly lastSequence: number;\n}\n\n/** Group the export's records into their atomic append runs (batches append contiguously). */\nconst batchRunsOf = (records: ReadonlyArray<CanonicalRecordEnvelope>): Array<BatchRun> => {\n  const runs: Array<BatchRun> = [];\n\n  for (const envelope of records) {\n    const current = runs.at(-1);\n\n    if (current !== undefined && current.batchId === envelope.batchId) {\n      current.records.push(envelope.record);\n      runs[runs.length - 1] = { ...current, lastSequence: envelope.sequence };\n      continue;\n    }\n    runs.push({\n      batchId: envelope.batchId,\n      records: [envelope.record],\n      lastSequence: envelope.sequence,\n    });\n  }\n\n  return runs;\n};\n\n/**\n * The shared thread invariant checker (plan §1/§3): the DC harness `assertConvergence`\n * claims, verbatim, as typed per-check results over a canonical export plus the lane's ledger\n * rows — read-only, never a repair:\n *\n * 1. `schema-round-trip` — every envelope re-encodes and re-decodes through its canonical\n *    Schema (a corrupted copy fails typed instead of decoding incorrectly).\n * 2. `record-identity` — no canonical record identity appears twice (DUR-007 dedupe held).\n * 3. `sequence-contiguity` — gap-free sequences from 1 through the exported tail.\n * 4. `digest-chain` — the tail digest recomputes from `EMPTY_TAIL_DIGEST` through every batch\n *    (requires the per-batch producer directory; skipped honestly otherwise).\n * 5. `fifo-input-order` / `fifo-settlement-order` — canonical input and settlement records\n *    follow the admitted queue order (DUR-004). Aborted settlements of never-run work (no\n *    canonical `input:{sid}` record) are exempt from the settlement comparison: P7 §7(c)\n *    settles them immediately without waiting for the head, and DUR-004 bounds execution\n *    order, which never-run work has none of.\n * 6. `terminal-uniqueness` — at most one canonical terminal record per Submission, exactly one\n *    for every settled ledger row (DUR-002).\n * 7. `ledger-canonical-agreement` — a settled ledger row has a canonical settlement record and\n *    the outcomes agree; canonical history remains the authority (DUR-015).\n * 8. `checkpoint-binding` — a stored checkpoint's digest matches the recomputed chain at its\n *    sequence (needs the chain; bounds are checked regardless).\n * 9. `all-settled` — convergence mode only: every known Submission settled.\n *\n * Requires only `Crypto.Crypto` (digest recomputation); it performs no port access, so the\n * admin operation, certification runners, and chaos properties feed it whatever copies they\n * hold.\n */\nexport const verifyThreadInvariants = Effect.fn(\"Thread.verifyThreadInvariants\")(function* (\n  input: ThreadInvariantInput,\n): Effect.fn.Return<IntegrityReport, never, Crypto.Crypto> {\n  const exported = input.export;\n  const records = exported.records;\n  const checks: Array<IntegrityCheck> = [];\n\n  // 1. schema-round-trip\n  {\n    let failure: string | undefined;\n\n    for (const envelope of records) {\n      const roundTrip = yield* encodeEnvelope(envelope).pipe(\n        Effect.flatMap(decodeEnvelope),\n        Effect.exit,\n      );\n\n      if (roundTrip._tag === \"Failure\") {\n        failure = `record ${envelope.record.recordId} does not round-trip its Schema`;\n        break;\n      }\n    }\n    checks.push(\n      failure === undefined\n        ? check(\"schema-round-trip\", \"passed\")\n        : check(\"schema-round-trip\", \"failed\", failure),\n    );\n  }\n\n  // 2. record-identity\n  {\n    const seen = new Set<string>();\n    const duplicates = new Set<string>();\n\n    for (const envelope of records) {\n      if (seen.has(envelope.record.recordId)) duplicates.add(envelope.record.recordId);\n      seen.add(envelope.record.recordId);\n    }\n    checks.push(\n      duplicates.size === 0\n        ? check(\"record-identity\", \"passed\")\n        : check(\n            \"record-identity\",\n            \"failed\",\n            `duplicated canonical record identities: ${[...duplicates].join(\", \")}`,\n          ),\n    );\n  }\n\n  // 3. sequence-contiguity\n  {\n    let contiguityFailure: string | undefined;\n\n    for (const [index, envelope] of records.entries()) {\n      if (envelope.sequence !== index + 1) {\n        contiguityFailure = `sequence ${envelope.sequence} at position ${index} (expected ${index + 1})`;\n        break;\n      }\n    }\n    if (contiguityFailure === undefined && records.length !== exported.tailSequence) {\n      contiguityFailure = `exported tail sequence ${exported.tailSequence} disagrees with ${records.length} records`;\n    }\n    checks.push(\n      contiguityFailure === undefined\n        ? check(\"sequence-contiguity\", \"passed\")\n        : check(\"sequence-contiguity\", \"failed\", contiguityFailure),\n    );\n  }\n\n  // 4. digest-chain (+ collect per-sequence chain digests for checkpoint binding)\n  const chainDigestAtSequence = new Map<number, string>();\n\n  if (input.batchProducers === undefined) {\n    checks.push(\n      check(\n        \"digest-chain\",\n        \"skipped\",\n        \"the ThreadStore port does not export per-batch producer identity; supply batchProducers (captured at append time) to recompute the chain — adapter-level verifyOnOpen performs the storage-side audit\",\n      ),\n    );\n  } else {\n    let chain = EMPTY_TAIL_DIGEST;\n    let chainFailure: string | undefined;\n\n    for (const run of batchRunsOf(records)) {\n      const producerId = input.batchProducers.get(run.batchId);\n\n      if (producerId === undefined) {\n        chainFailure = `no producer identity supplied for batch ${run.batchId}`;\n        break;\n      }\n      const [first, ...rest] = run.records;\n\n      if (first === undefined) {\n        chainFailure = `batch ${run.batchId} grouped zero records`;\n        break;\n      }\n\n      const digest = yield* digestCanonicalBatch(\n        chain,\n        CanonicalBatch.make({ batchId: run.batchId, producerId, records: [first, ...rest] }),\n      ).pipe(Effect.exit);\n\n      if (digest._tag === \"Failure\") {\n        chainFailure = `batch ${run.batchId} could not be re-digested`;\n        break;\n      }\n      chain = digest.value;\n      chainDigestAtSequence.set(run.lastSequence, chain);\n    }\n    if (chainFailure === undefined && chain !== exported.tailDigest) {\n      chainFailure = `recomputed tail digest ${chain} disagrees with exported tail digest ${exported.tailDigest}`;\n    }\n    checks.push(\n      chainFailure === undefined\n        ? check(\"digest-chain\", \"passed\")\n        : check(\"digest-chain\", \"failed\", chainFailure),\n    );\n  }\n\n  // Shared FIFO/terminal machinery\n  const ordered = [...input.submissions].sort(\n    (left, right) => left.queueSequence - right.queueSequence,\n  );\n\n  const recordIds = records.map((envelope) => envelope.record.recordId);\n\n  // 5a. fifo-input-order\n  {\n    const expectedInputs = ordered.map((row) => submissionInputRecordId(row.submissionId));\n    const expectedSet = new Set<string>(expectedInputs);\n    const inputOrder = recordIds.filter((recordId) => expectedSet.has(recordId));\n    const presentInputs = new Set(inputOrder);\n    const expectedPresent = expectedInputs.filter((expected) => presentInputs.has(expected));\n\n    const matches =\n      inputOrder.length === expectedPresent.length &&\n      inputOrder.every((recordId, index) => recordId === expectedPresent[index]);\n\n    checks.push(\n      matches\n        ? check(\"fifo-input-order\", \"passed\")\n        : check(\n            \"fifo-input-order\",\n            \"failed\",\n            `canonical input order [${inputOrder.join(\", \")}] violates queue order`,\n          ),\n    );\n  }\n\n  // 5b. fifo-settlement-order — P7 §7(c) exemption: an ABORTED settlement for never-run work\n  // (no canonical `input:{sid}` record) settles immediately by design, without waiting to\n  // head the lane, so it is excluded from the FIFO comparison. DUR-004 bounds EXECUTION\n  // order; the exempted rows provably never executed.\n  {\n    const recordIdSet = new Set<string>(recordIds);\n    const abortedNeverRun = new Set<string>();\n\n    for (const envelope of records) {\n      const payload = envelope.record.payload;\n\n      if (\n        payload._tag === \"SubmissionSettled\" &&\n        payload.outcome === \"aborted\" &&\n        !recordIdSet.has(submissionInputRecordId(payload.submissionId))\n      ) {\n        abortedNeverRun.add(payload.submissionId);\n      }\n    }\n\n    const expectedSettlements = ordered\n      .filter((row) => !abortedNeverRun.has(row.submissionId))\n      .map((row) => submissionSettlementRecordId(row.submissionId));\n\n    const expectedSet = new Set<string>(expectedSettlements);\n    const settlementOrder = recordIds.filter((recordId) => expectedSet.has(recordId));\n\n    const presentSettlements = new Set(settlementOrder);\n\n    const expectedPresent = expectedSettlements.filter((expected) =>\n      presentSettlements.has(expected),\n    );\n\n    const matches =\n      settlementOrder.length === expectedPresent.length &&\n      settlementOrder.every((recordId, index) => recordId === expectedPresent[index]);\n\n    checks.push(\n      matches\n        ? check(\"fifo-settlement-order\", \"passed\")\n        : check(\n            \"fifo-settlement-order\",\n            \"failed\",\n            `canonical settlement order [${settlementOrder.join(\", \")}] violates queue order`,\n          ),\n    );\n  }\n\n  // 6 + 7. terminal-uniqueness and ledger-canonical-agreement\n  {\n    const settlementsBySubmission = new Map<string, Array<CanonicalRecordEnvelope>>();\n\n    for (const envelope of records) {\n      if (envelope.record.payload._tag !== \"SubmissionSettled\") continue;\n      const submissionId = envelope.record.payload.submissionId;\n      const existing = settlementsBySubmission.get(submissionId) ?? [];\n\n      existing.push(envelope);\n      settlementsBySubmission.set(submissionId, existing);\n    }\n    let uniquenessFailure: string | undefined;\n    let agreementFailure: string | undefined;\n\n    for (const [submissionId, settlements] of settlementsBySubmission) {\n      if (settlements.length > 1) {\n        uniquenessFailure = `submission ${submissionId} has ${settlements.length} canonical terminal records`;\n      }\n    }\n    for (const row of ordered) {\n      const settlements = settlementsBySubmission.get(row.submissionId) ?? [];\n      const canonical = settlements[0]?.record.payload;\n\n      if (row.state === \"settled\") {\n        if (settlements.length !== 1) {\n          uniquenessFailure ??= `settled submission ${row.submissionId} has ${settlements.length} canonical terminal records (expected exactly 1)`;\n        }\n        if (\n          canonical !== undefined &&\n          canonical._tag === \"SubmissionSettled\" &&\n          row.settledOutcome !== undefined &&\n          canonical.outcome !== row.settledOutcome\n        ) {\n          agreementFailure = `submission ${row.submissionId}: ledger outcome ${row.settledOutcome} disagrees with canonical outcome ${canonical.outcome}`;\n        }\n        if (settlements.length === 0) {\n          agreementFailure ??= `settled submission ${row.submissionId} has no canonical settlement record (DUR-015: history is the authority)`;\n        }\n      }\n    }\n    checks.push(\n      uniquenessFailure === undefined\n        ? check(\"terminal-uniqueness\", \"passed\")\n        : check(\"terminal-uniqueness\", \"failed\", uniquenessFailure),\n    );\n    checks.push(\n      agreementFailure === undefined\n        ? check(\"ledger-canonical-agreement\", \"passed\")\n        : check(\"ledger-canonical-agreement\", \"failed\", agreementFailure),\n    );\n  }\n\n  // 8. checkpoint-binding\n  if (input.checkpoint === undefined && input.checkpointsSupported !== true) {\n    checks.push(check(\"checkpoint-binding\", \"skipped\", \"checkpoint support was not supplied\"));\n  } else if (input.checkpoint === undefined) {\n    checks.push(check(\"checkpoint-binding\", \"passed\", \"no stored checkpoint\"));\n  } else if (input.checkpoint.throughSequence > exported.tailSequence) {\n    checks.push(\n      check(\n        \"checkpoint-binding\",\n        \"failed\",\n        `checkpoint through-sequence ${input.checkpoint.throughSequence} is ahead of the tail ${exported.tailSequence}`,\n      ),\n    );\n  } else if (input.batchProducers === undefined) {\n    checks.push(\n      check(\n        \"checkpoint-binding\",\n        \"skipped\",\n        \"digest binding needs the recomputed chain; supply batchProducers (the adapter rejects mismatched checkpoints on save/load regardless)\",\n      ),\n    );\n  } else {\n    const bound = chainDigestAtSequence.get(input.checkpoint.throughSequence);\n\n    checks.push(\n      bound === input.checkpoint.tailDigest\n        ? check(\"checkpoint-binding\", \"passed\")\n        : check(\n            \"checkpoint-binding\",\n            \"failed\",\n            `checkpoint digest ${input.checkpoint.tailDigest} does not match the recomputed chain at sequence ${input.checkpoint.throughSequence}`,\n          ),\n    );\n  }\n\n  // 9. all-settled (convergence mode)\n  if (input.requireAllSettled === true) {\n    const nonterminal = ordered.filter((row) => row.state !== \"settled\");\n\n    checks.push(\n      nonterminal.length === 0 && ordered.length > 0\n        ? check(\"all-settled\", \"passed\")\n        : check(\n            \"all-settled\",\n            \"failed\",\n            ordered.length === 0\n              ? \"no Submissions are known to the lane\"\n              : `nonterminal submissions: ${nonterminal\n                  .map((row) => `${row.submissionId}(${row.state})`)\n                  .join(\", \")}`,\n          ),\n    );\n  }\n\n  return IntegrityReport.make({\n    threadId: exported.threadId,\n    tailSequence: exported.tailSequence,\n    recordCount: records.length,\n    submissionCount: ordered.length,\n    checks,\n    ok: checks.every((result) => result.status !== \"failed\"),\n  });\n});\n"],"mappings":";;;;;;;;AA0DA,MAAM,iBAAiB,OAAO,aAAa,uBAAuB;AAClE,MAAM,iBAAiB,OAAO,oBAAoB,uBAAuB;AAEzE,MAAM,SACJ,MACA,QACA,WAEA,eAAe,KAAK;CAClB;CACA;CACA,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,OAAO,MAAM,GAAG,IAAK,EAAE;AACnE,CAAC;;AASH,MAAM,eAAe,YAAqE;CACxF,MAAM,OAAwB,CAAC;CAE/B,KAAK,MAAM,YAAY,SAAS;EAC9B,MAAM,UAAU,KAAK,GAAG,EAAE;EAE1B,IAAI,YAAY,KAAA,KAAa,QAAQ,YAAY,SAAS,SAAS;GACjE,QAAQ,QAAQ,KAAK,SAAS,MAAM;GACpC,KAAK,KAAK,SAAS,KAAK;IAAE,GAAG;IAAS,cAAc,SAAS;GAAS;GACtE;EACF;EACA,KAAK,KAAK;GACR,SAAS,SAAS;GAClB,SAAS,CAAC,SAAS,MAAM;GACzB,cAAc,SAAS;EACzB,CAAC;CACH;CAEA,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,MAAa,yBAAyB,OAAO,GAAG,+BAA+B,CAAC,CAAC,WAC/E,OACyD;CACzD,MAAM,WAAW,MAAM;CACvB,MAAM,UAAU,SAAS;CACzB,MAAM,SAAgC,CAAC;CAGvC;EACE,IAAI;EAEJ,KAAK,MAAM,YAAY,SAMrB,KAAI,OALqB,eAAe,QAAQ,CAAC,CAAC,KAChD,OAAO,QAAQ,cAAc,GAC7B,OAAO,IACT,EAAA,CAEc,SAAS,WAAW;GAChC,UAAU,UAAU,SAAS,OAAO,SAAS;GAC7C;EACF;EAEF,OAAO,KACL,YAAY,KAAA,IACR,MAAM,qBAAqB,QAAQ,IACnC,MAAM,qBAAqB,UAAU,OAAO,CAClD;CACF;CAGA;EACE,MAAM,uBAAO,IAAI,IAAY;EAC7B,MAAM,6BAAa,IAAI,IAAY;EAEnC,KAAK,MAAM,YAAY,SAAS;GAC9B,IAAI,KAAK,IAAI,SAAS,OAAO,QAAQ,GAAG,WAAW,IAAI,SAAS,OAAO,QAAQ;GAC/E,KAAK,IAAI,SAAS,OAAO,QAAQ;EACnC;EACA,OAAO,KACL,WAAW,SAAS,IAChB,MAAM,mBAAmB,QAAQ,IACjC,MACE,mBACA,UACA,2CAA2C,CAAC,GAAG,UAAU,CAAC,CAAC,KAAK,IAAI,GACtE,CACN;CACF;CAGA;EACE,IAAI;EAEJ,KAAK,MAAM,CAAC,OAAO,aAAa,QAAQ,QAAQ,GAC9C,IAAI,SAAS,aAAa,QAAQ,GAAG;GACnC,oBAAoB,YAAY,SAAS,SAAS,eAAe,MAAM,aAAa,QAAQ,EAAE;GAC9F;EACF;EAEF,IAAI,sBAAsB,KAAA,KAAa,QAAQ,WAAW,SAAS,cACjE,oBAAoB,0BAA0B,SAAS,aAAa,kBAAkB,QAAQ,OAAO;EAEvG,OAAO,KACL,sBAAsB,KAAA,IAClB,MAAM,uBAAuB,QAAQ,IACrC,MAAM,uBAAuB,UAAU,iBAAiB,CAC9D;CACF;CAGA,MAAM,wCAAwB,IAAI,IAAoB;CAEtD,IAAI,MAAM,mBAAmB,KAAA,GAC3B,OAAO,KACL,MACE,gBACA,WACA,uMACF,CACF;MACK;EACL,IAAI,QAAQ;EACZ,IAAI;EAEJ,KAAK,MAAM,OAAO,YAAY,OAAO,GAAG;GACtC,MAAM,aAAa,MAAM,eAAe,IAAI,IAAI,OAAO;GAEvD,IAAI,eAAe,KAAA,GAAW;IAC5B,eAAe,2CAA2C,IAAI;IAC9D;GACF;GACA,MAAM,CAAC,OAAO,GAAG,QAAQ,IAAI;GAE7B,IAAI,UAAU,KAAA,GAAW;IACvB,eAAe,SAAS,IAAI,QAAQ;IACpC;GACF;GAEA,MAAM,SAAS,OAAO,qBACpB,OACA,eAAe,KAAK;IAAE,SAAS,IAAI;IAAS;IAAY,SAAS,CAAC,OAAO,GAAG,IAAI;GAAE,CAAC,CACrF,CAAC,CAAC,KAAK,OAAO,IAAI;GAElB,IAAI,OAAO,SAAS,WAAW;IAC7B,eAAe,SAAS,IAAI,QAAQ;IACpC;GACF;GACA,QAAQ,OAAO;GACf,sBAAsB,IAAI,IAAI,cAAc,KAAK;EACnD;EACA,IAAI,iBAAiB,KAAA,KAAa,UAAU,SAAS,YACnD,eAAe,0BAA0B,MAAM,uCAAuC,SAAS;EAEjG,OAAO,KACL,iBAAiB,KAAA,IACb,MAAM,gBAAgB,QAAQ,IAC9B,MAAM,gBAAgB,UAAU,YAAY,CAClD;CACF;CAGA,MAAM,UAAU,CAAC,GAAG,MAAM,WAAW,CAAC,CAAC,MACpC,MAAM,UAAU,KAAK,gBAAgB,MAAM,aAC9C;CAEA,MAAM,YAAY,QAAQ,KAAK,aAAa,SAAS,OAAO,QAAQ;CAGpE;EACE,MAAM,iBAAiB,QAAQ,KAAK,QAAQ,wBAAwB,IAAI,YAAY,CAAC;EACrF,MAAM,cAAc,IAAI,IAAY,cAAc;EAClD,MAAM,aAAa,UAAU,QAAQ,aAAa,YAAY,IAAI,QAAQ,CAAC;EAC3E,MAAM,gBAAgB,IAAI,IAAI,UAAU;EACxC,MAAM,kBAAkB,eAAe,QAAQ,aAAa,cAAc,IAAI,QAAQ,CAAC;EAEvF,MAAM,UACJ,WAAW,WAAW,gBAAgB,UACtC,WAAW,OAAO,UAAU,UAAU,aAAa,gBAAgB,MAAM;EAE3E,OAAO,KACL,UACI,MAAM,oBAAoB,QAAQ,IAClC,MACE,oBACA,UACA,0BAA0B,WAAW,KAAK,IAAI,EAAE,uBAClD,CACN;CACF;CAMA;EACE,MAAM,cAAc,IAAI,IAAY,SAAS;EAC7C,MAAM,kCAAkB,IAAI,IAAY;EAExC,KAAK,MAAM,YAAY,SAAS;GAC9B,MAAM,UAAU,SAAS,OAAO;GAEhC,IACE,QAAQ,SAAS,uBACjB,QAAQ,YAAY,aACpB,CAAC,YAAY,IAAI,wBAAwB,QAAQ,YAAY,CAAC,GAE9D,gBAAgB,IAAI,QAAQ,YAAY;EAE5C;EAEA,MAAM,sBAAsB,QACzB,QAAQ,QAAQ,CAAC,gBAAgB,IAAI,IAAI,YAAY,CAAC,CAAC,CACvD,KAAK,QAAQ,6BAA6B,IAAI,YAAY,CAAC;EAE9D,MAAM,cAAc,IAAI,IAAY,mBAAmB;EACvD,MAAM,kBAAkB,UAAU,QAAQ,aAAa,YAAY,IAAI,QAAQ,CAAC;EAEhF,MAAM,qBAAqB,IAAI,IAAI,eAAe;EAElD,MAAM,kBAAkB,oBAAoB,QAAQ,aAClD,mBAAmB,IAAI,QAAQ,CACjC;EAEA,MAAM,UACJ,gBAAgB,WAAW,gBAAgB,UAC3C,gBAAgB,OAAO,UAAU,UAAU,aAAa,gBAAgB,MAAM;EAEhF,OAAO,KACL,UACI,MAAM,yBAAyB,QAAQ,IACvC,MACE,yBACA,UACA,+BAA+B,gBAAgB,KAAK,IAAI,EAAE,uBAC5D,CACN;CACF;CAGA;EACE,MAAM,0CAA0B,IAAI,IAA4C;EAEhF,KAAK,MAAM,YAAY,SAAS;GAC9B,IAAI,SAAS,OAAO,QAAQ,SAAS,qBAAqB;GAC1D,MAAM,eAAe,SAAS,OAAO,QAAQ;GAC7C,MAAM,WAAW,wBAAwB,IAAI,YAAY,KAAK,CAAC;GAE/D,SAAS,KAAK,QAAQ;GACtB,wBAAwB,IAAI,cAAc,QAAQ;EACpD;EACA,IAAI;EACJ,IAAI;EAEJ,KAAK,MAAM,CAAC,cAAc,gBAAgB,yBACxC,IAAI,YAAY,SAAS,GACvB,oBAAoB,cAAc,aAAa,OAAO,YAAY,OAAO;EAG7E,KAAK,MAAM,OAAO,SAAS;GACzB,MAAM,cAAc,wBAAwB,IAAI,IAAI,YAAY,KAAK,CAAC;GACtE,MAAM,YAAY,YAAY,EAAE,EAAE,OAAO;GAEzC,IAAI,IAAI,UAAU,WAAW;IAC3B,IAAI,YAAY,WAAW,GACzB,sBAAsB,sBAAsB,IAAI,aAAa,OAAO,YAAY,OAAO;IAEzF,IACE,cAAc,KAAA,KACd,UAAU,SAAS,uBACnB,IAAI,mBAAmB,KAAA,KACvB,UAAU,YAAY,IAAI,gBAE1B,mBAAmB,cAAc,IAAI,aAAa,mBAAmB,IAAI,eAAe,oCAAoC,UAAU;IAExI,IAAI,YAAY,WAAW,GACzB,qBAAqB,sBAAsB,IAAI,aAAa;GAEhE;EACF;EACA,OAAO,KACL,sBAAsB,KAAA,IAClB,MAAM,uBAAuB,QAAQ,IACrC,MAAM,uBAAuB,UAAU,iBAAiB,CAC9D;EACA,OAAO,KACL,qBAAqB,KAAA,IACjB,MAAM,8BAA8B,QAAQ,IAC5C,MAAM,8BAA8B,UAAU,gBAAgB,CACpE;CACF;CAGA,IAAI,MAAM,eAAe,KAAA,KAAa,MAAM,yBAAyB,MACnE,OAAO,KAAK,MAAM,sBAAsB,WAAW,qCAAqC,CAAC;MACpF,IAAI,MAAM,eAAe,KAAA,GAC9B,OAAO,KAAK,MAAM,sBAAsB,UAAU,sBAAsB,CAAC;MACpE,IAAI,MAAM,WAAW,kBAAkB,SAAS,cACrD,OAAO,KACL,MACE,sBACA,UACA,+BAA+B,MAAM,WAAW,gBAAgB,wBAAwB,SAAS,cACnG,CACF;MACK,IAAI,MAAM,mBAAmB,KAAA,GAClC,OAAO,KACL,MACE,sBACA,WACA,uIACF,CACF;MACK;EACL,MAAM,QAAQ,sBAAsB,IAAI,MAAM,WAAW,eAAe;EAExE,OAAO,KACL,UAAU,MAAM,WAAW,aACvB,MAAM,sBAAsB,QAAQ,IACpC,MACE,sBACA,UACA,qBAAqB,MAAM,WAAW,WAAW,mDAAmD,MAAM,WAAW,iBACvH,CACN;CACF;CAGA,IAAI,MAAM,sBAAsB,MAAM;EACpC,MAAM,cAAc,QAAQ,QAAQ,QAAQ,IAAI,UAAU,SAAS;EAEnE,OAAO,KACL,YAAY,WAAW,KAAK,QAAQ,SAAS,IACzC,MAAM,eAAe,QAAQ,IAC7B,MACE,eACA,UACA,QAAQ,WAAW,IACf,yCACA,4BAA4B,YACzB,KAAK,QAAQ,GAAG,IAAI,aAAa,GAAG,IAAI,MAAM,EAAE,CAAC,CACjD,KAAK,IAAI,GAClB,CACN;CACF;CAEA,OAAO,gBAAgB,KAAK;EAC1B,UAAU,SAAS;EACnB,cAAc,SAAS;EACvB,aAAa,QAAQ;EACrB,iBAAiB,QAAQ;EACzB;EACA,IAAI,OAAO,OAAO,WAAW,OAAO,WAAW,QAAQ;CACzD,CAAC;AACH,CAAC"}
+{"version":3,"file":"ThreadInvariants.mjs","names":[],"sources":["../../src/durable/ThreadInvariants.ts"],"sourcesContent":["import type { Crypto } from \"effect\";\nimport { Effect, Schema } from \"effect\";\n\nimport { IntegrityCheck, IntegrityReport, type IntegrityCheckName } from \"./Admin.ts\";\nimport { digestCanonicalBatch, EMPTY_TAIL_DIGEST } from \"./Digest.ts\";\nimport {\n  CanonicalBatch,\n  CanonicalRecordEnvelope,\n  type BatchId,\n  type ProducerId,\n  type RecordEnvelope,\n} from \"./Records.ts\";\nimport { runIdForSubmission } from \"./RunJournal.ts\";\nimport {\n  submissionInputRecordId,\n  submissionSettlementRecordId,\n  type SubmissionSnapshot,\n} from \"./SubmissionLedger.ts\";\nimport type { ThreadCheckpoint, ThreadExport } from \"./ThreadStore.ts\";\n\n/**\n * The production thread invariant checker, shared by the durable coordinator, admin\n * verification, and development harnesses. Keeping it independent of certification and\n * conformance modules prevents ordinary runtime imports from loading test-only dependencies.\n *\n * `verifyThreadInvariants` — hoisted from the DC eviction harness's `assertConvergence`\n * so the admin `verify` operation, the adapter certification tiers (WP2), and the chaos/soak\n * properties (WP4) all assert one set of claims.\n */\n\n/**\n * Input of one invariant verification, assembled entirely from port reads (or from a captured\n * copy under test):\n *\n * - `export` — the Thread's canonical export (`ThreadStore.export`).\n * - `submissions` — every known Submission row of the lane (ledger scan + lookups). Order is\n *   irrelevant; the checker sorts by `queueSequence`.\n * - `batchProducers` — OPTIONAL per-batch producer identity directory. The digest chain hashes\n *   each batch's Schema-encoded `CanonicalBatch` — including its `producerId`, which the\n *   `ThreadStore` port deliberately does not export — so full chain recomputation needs\n *   this directory (capture it at append time, or from adapter-private storage). Without it the\n *   `digest-chain` and `checkpoint-binding` checks report `skipped` with the honest reason;\n *   adapter-level `verifyOnOpen` remains the storage-side full audit.\n * - `checkpoint` — the stored checkpoint to bind against the recomputed chain, when one exists.\n * - `checkpointsSupported` — whether the caller inspected a supporting adapter. Without this\n *   evidence or a supplied checkpoint, checkpoint verification is skipped.\n * - `requireAllSettled` — convergence mode (certification Tier 2, chaos, soak): additionally\n *   require every known Submission to be settled.\n */\nexport interface ThreadInvariantInput {\n  readonly export: ThreadExport;\n  readonly submissions: ReadonlyArray<SubmissionSnapshot>;\n  readonly batchProducers?: ReadonlyMap<BatchId, ProducerId> | undefined;\n  readonly checkpoint?: ThreadCheckpoint | undefined;\n  /** Set only after checking the adapter's optional checkpoint capability. */\n  readonly checkpointsSupported?: boolean | undefined;\n  readonly requireAllSettled?: boolean | undefined;\n}\n\nconst encodeEnvelope = Schema.encodeEffect(CanonicalRecordEnvelope);\nconst decodeEnvelope = Schema.decodeUnknownEffect(CanonicalRecordEnvelope);\n\nconst check = (\n  name: IntegrityCheckName,\n  status: \"passed\" | \"failed\" | \"skipped\",\n  detail?: string,\n): IntegrityCheck =>\n  IntegrityCheck.make({\n    name,\n    status,\n    ...(detail === undefined ? {} : { detail: detail.slice(0, 4_096) }),\n  });\n\ninterface BatchRun {\n  readonly batchId: BatchId;\n  readonly records: Array<RecordEnvelope>;\n  readonly lastSequence: number;\n}\n\n/** Group the export's records into their atomic append runs (batches append contiguously). */\nconst batchRunsOf = (records: ReadonlyArray<CanonicalRecordEnvelope>): Array<BatchRun> => {\n  const runs: Array<BatchRun> = [];\n\n  for (const envelope of records) {\n    const current = runs.at(-1);\n\n    if (current !== undefined && current.batchId === envelope.batchId) {\n      current.records.push(envelope.record);\n      runs[runs.length - 1] = { ...current, lastSequence: envelope.sequence };\n      continue;\n    }\n    runs.push({\n      batchId: envelope.batchId,\n      records: [envelope.record],\n      lastSequence: envelope.sequence,\n    });\n  }\n\n  return runs;\n};\n\n/**\n * The shared thread invariant checker (plan §1/§3): the DC harness `assertConvergence`\n * claims, verbatim, as typed per-check results over a canonical export plus the lane's ledger\n * rows — read-only, never a repair:\n *\n * 1. `schema-round-trip` — every envelope re-encodes and re-decodes through its canonical\n *    Schema (a corrupted copy fails typed instead of decoding incorrectly).\n * 2. `record-identity` — no canonical record identity appears twice (DUR-007 dedupe held).\n * 3. `sequence-contiguity` — gap-free sequences from 1 through the exported tail.\n * 4. `digest-chain` — the tail digest recomputes from `EMPTY_TAIL_DIGEST` through every batch\n *    (requires the per-batch producer directory; skipped honestly otherwise).\n * 5. `fifo-input-order` / `fifo-settlement-order` — canonical input and settlement records\n *    follow the admitted queue order (DUR-004), except a later input may settle before a Run\n *    with canonically unresolved unknown calls when that input became active. Resolving those\n *    calls later does not revoke the later Run's ownership. Aborted settlements of never-run work (no\n *    canonical `input:{sid}` record) are exempt from the settlement comparison: P7 §7(c)\n *    settles them immediately without waiting for the head, and DUR-004 bounds execution\n *    order, which never-run work has none of.\n * 6. `terminal-uniqueness` — at most one canonical terminal record per Submission, exactly one\n *    for every settled ledger row (DUR-002).\n * 7. `ledger-canonical-agreement` — a settled ledger row has a canonical settlement record and\n *    the outcomes agree; canonical history remains the authority (DUR-015).\n * 8. `checkpoint-binding` — a stored checkpoint's digest matches the recomputed chain at its\n *    sequence (needs the chain; bounds are checked regardless).\n * 9. `all-settled` — convergence mode only: every known Submission settled.\n *\n * Requires only `Crypto.Crypto` (digest recomputation); it performs no port access, so the\n * admin operation, certification runners, and chaos properties feed it whatever copies they\n * hold.\n */\nexport const verifyThreadInvariants = Effect.fn(\"Thread.verifyThreadInvariants\")(function* (\n  input: ThreadInvariantInput,\n): Effect.fn.Return<IntegrityReport, never, Crypto.Crypto> {\n  const exported = input.export;\n  const records = exported.records;\n  const checks: Array<IntegrityCheck> = [];\n\n  // 1. schema-round-trip\n  {\n    let failure: string | undefined;\n\n    for (const envelope of records) {\n      const roundTrip = yield* encodeEnvelope(envelope).pipe(\n        Effect.flatMap(decodeEnvelope),\n        Effect.exit,\n      );\n\n      if (roundTrip._tag === \"Failure\") {\n        failure = `record ${envelope.record.recordId} does not round-trip its Schema`;\n        break;\n      }\n    }\n    checks.push(\n      failure === undefined\n        ? check(\"schema-round-trip\", \"passed\")\n        : check(\"schema-round-trip\", \"failed\", failure),\n    );\n  }\n\n  // 2. record-identity\n  {\n    const seen = new Set<string>();\n    const duplicates = new Set<string>();\n\n    for (const envelope of records) {\n      if (seen.has(envelope.record.recordId)) duplicates.add(envelope.record.recordId);\n      seen.add(envelope.record.recordId);\n    }\n    checks.push(\n      duplicates.size === 0\n        ? check(\"record-identity\", \"passed\")\n        : check(\n            \"record-identity\",\n            \"failed\",\n            `duplicated canonical record identities: ${[...duplicates].join(\", \")}`,\n          ),\n    );\n  }\n\n  // 3. sequence-contiguity\n  {\n    let contiguityFailure: string | undefined;\n\n    for (const [index, envelope] of records.entries()) {\n      if (envelope.sequence !== index + 1) {\n        contiguityFailure = `sequence ${envelope.sequence} at position ${index} (expected ${index + 1})`;\n        break;\n      }\n    }\n    if (contiguityFailure === undefined && records.length !== exported.tailSequence) {\n      contiguityFailure = `exported tail sequence ${exported.tailSequence} disagrees with ${records.length} records`;\n    }\n    checks.push(\n      contiguityFailure === undefined\n        ? check(\"sequence-contiguity\", \"passed\")\n        : check(\"sequence-contiguity\", \"failed\", contiguityFailure),\n    );\n  }\n\n  // 4. digest-chain (+ collect per-sequence chain digests for checkpoint binding)\n  const chainDigestAtSequence = new Map<number, string>();\n\n  if (input.batchProducers === undefined) {\n    checks.push(\n      check(\n        \"digest-chain\",\n        \"skipped\",\n        \"the ThreadStore port does not export per-batch producer identity; supply batchProducers (captured at append time) to recompute the chain — adapter-level verifyOnOpen performs the storage-side audit\",\n      ),\n    );\n  } else {\n    let chain = EMPTY_TAIL_DIGEST;\n    let chainFailure: string | undefined;\n\n    for (const run of batchRunsOf(records)) {\n      const producerId = input.batchProducers.get(run.batchId);\n\n      if (producerId === undefined) {\n        chainFailure = `no producer identity supplied for batch ${run.batchId}`;\n        break;\n      }\n      const [first, ...rest] = run.records;\n\n      if (first === undefined) {\n        chainFailure = `batch ${run.batchId} grouped zero records`;\n        break;\n      }\n\n      const digest = yield* digestCanonicalBatch(\n        chain,\n        CanonicalBatch.make({ batchId: run.batchId, producerId, records: [first, ...rest] }),\n      ).pipe(Effect.exit);\n\n      if (digest._tag === \"Failure\") {\n        chainFailure = `batch ${run.batchId} could not be re-digested`;\n        break;\n      }\n      chain = digest.value;\n      chainDigestAtSequence.set(run.lastSequence, chain);\n    }\n    if (chainFailure === undefined && chain !== exported.tailDigest) {\n      chainFailure = `recomputed tail digest ${chain} disagrees with exported tail digest ${exported.tailDigest}`;\n    }\n    checks.push(\n      chainFailure === undefined\n        ? check(\"digest-chain\", \"passed\")\n        : check(\"digest-chain\", \"failed\", chainFailure),\n    );\n  }\n\n  // Shared FIFO/terminal machinery\n  const ordered = [...input.submissions].sort(\n    (left, right) => left.queueSequence - right.queueSequence,\n  );\n\n  const recordIds = records.map((envelope) => envelope.record.recordId);\n\n  // 5a. fifo-input-order\n  {\n    const expectedInputs = ordered.map((row) => submissionInputRecordId(row.submissionId));\n    const expectedSet = new Set<string>(expectedInputs);\n    const inputOrder = recordIds.filter((recordId) => expectedSet.has(recordId));\n    const presentInputs = new Set(inputOrder);\n    const expectedPresent = expectedInputs.filter((expected) => presentInputs.has(expected));\n\n    const matches =\n      inputOrder.length === expectedPresent.length &&\n      inputOrder.every((recordId, index) => recordId === expectedPresent[index]);\n\n    checks.push(\n      matches\n        ? check(\"fifo-input-order\", \"passed\")\n        : check(\n            \"fifo-input-order\",\n            \"failed\",\n            `canonical input order [${inputOrder.join(\", \")}] violates queue order`,\n          ),\n    );\n  }\n\n  // 5b. fifo-settlement-order — P7 §7(c) exemption: an ABORTED settlement for never-run work\n  // (no canonical `input:{sid}` record) settles immediately by design, without waiting to\n  // head the lane, so it is excluded from the FIFO comparison. DUR-004 bounds EXECUTION\n  // order; the exempted rows provably never executed. Unknown work can also be bypassed,\n  // but only the inputs that became active while it was parked may settle ahead of it.\n  {\n    const recordIdSet = new Set<string>(recordIds);\n    const abortedNeverRun = new Set<string>();\n\n    const settlementByRun = new Map<string, string>(\n      ordered.map((row) => [\n        runIdForSubmission(row.submissionId),\n        submissionSettlementRecordId(row.submissionId),\n      ]),\n    );\n\n    const inputSettlements = new Map(\n      ordered.map((row) => [\n        submissionInputRecordId(row.submissionId),\n        submissionSettlementRecordId(row.submissionId),\n      ]),\n    );\n\n    const unknownCalls = new Map<string, Set<string>>();\n    const abortsOrTerminals = new Set<string>();\n    const bypassedSettlements = new Map<string, Set<string>>();\n\n    for (const envelope of records) {\n      const payload = envelope.record.payload;\n\n      if (payload._tag === \"ToolCallUnknown\" && !abortsOrTerminals.has(payload.runId)) {\n        const calls = unknownCalls.get(payload.runId) ?? new Set<string>();\n\n        calls.add(payload.toolCallId);\n        unknownCalls.set(payload.runId, calls);\n      } else if (payload._tag === \"ToolCallResolved\" || payload._tag === \"ToolCallSettled\") {\n        const calls = unknownCalls.get(payload.runId);\n\n        calls?.delete(payload.toolCallId);\n        if (calls?.size === 0) unknownCalls.delete(payload.runId);\n      } else if (payload._tag === \"AbortRequested\" || payload._tag === \"SubmissionSettled\") {\n        const runId = runIdForSubmission(payload.submissionId);\n\n        abortsOrTerminals.add(runId);\n        unknownCalls.delete(runId);\n      } else if (payload._tag === \"RunCompleted\" || payload._tag === \"RunFailed\") {\n        abortsOrTerminals.add(payload.runId);\n        unknownCalls.delete(payload.runId);\n      } else if (payload._tag === \"UserInputRecorded\") {\n        const settlementId = inputSettlements.get(envelope.record.recordId);\n\n        if (settlementId !== undefined) {\n          const bypassed = new Set<string>();\n\n          for (const runId of unknownCalls.keys()) {\n            const earlier = settlementByRun.get(runId);\n\n            if (earlier !== undefined) bypassed.add(earlier);\n          }\n          bypassedSettlements.set(settlementId, bypassed);\n        }\n      }\n      if (\n        payload._tag === \"SubmissionSettled\" &&\n        payload.outcome === \"aborted\" &&\n        !recordIdSet.has(submissionInputRecordId(payload.submissionId))\n      ) {\n        abortedNeverRun.add(payload.submissionId);\n      }\n    }\n\n    const expectedSettlements = ordered\n      .filter((row) => !abortedNeverRun.has(row.submissionId))\n      .map((row) => submissionSettlementRecordId(row.submissionId));\n\n    const expectedSet = new Set<string>(expectedSettlements);\n    const settlementOrder = recordIds.filter((recordId) => expectedSet.has(recordId));\n\n    const presentSettlements = new Set(settlementOrder);\n\n    const expectedPresent = expectedSettlements.filter((expected) =>\n      presentSettlements.has(expected),\n    );\n\n    const remaining = new Set(expectedPresent);\n    let matches = settlementOrder.length === expectedPresent.length;\n\n    for (const recordId of settlementOrder) {\n      for (const earlier of remaining) {\n        if (earlier === recordId) break;\n        if (!bypassedSettlements.get(recordId)?.has(earlier)) {\n          matches = false;\n          break;\n        }\n      }\n      if (!matches) break;\n      remaining.delete(recordId);\n    }\n\n    checks.push(\n      matches\n        ? check(\"fifo-settlement-order\", \"passed\")\n        : check(\n            \"fifo-settlement-order\",\n            \"failed\",\n            `canonical settlement order [${settlementOrder.join(\", \")}] violates queue order`,\n          ),\n    );\n  }\n\n  // 6 + 7. terminal-uniqueness and ledger-canonical-agreement\n  {\n    const settlementsBySubmission = new Map<string, Array<CanonicalRecordEnvelope>>();\n\n    for (const envelope of records) {\n      if (envelope.record.payload._tag !== \"SubmissionSettled\") continue;\n      const submissionId = envelope.record.payload.submissionId;\n      const existing = settlementsBySubmission.get(submissionId) ?? [];\n\n      existing.push(envelope);\n      settlementsBySubmission.set(submissionId, existing);\n    }\n    let uniquenessFailure: string | undefined;\n    let agreementFailure: string | undefined;\n\n    for (const [submissionId, settlements] of settlementsBySubmission) {\n      if (settlements.length > 1) {\n        uniquenessFailure = `submission ${submissionId} has ${settlements.length} canonical terminal records`;\n      }\n    }\n    for (const row of ordered) {\n      const settlements = settlementsBySubmission.get(row.submissionId) ?? [];\n      const canonical = settlements[0]?.record.payload;\n\n      if (row.state === \"settled\") {\n        if (settlements.length !== 1) {\n          uniquenessFailure ??= `settled submission ${row.submissionId} has ${settlements.length} canonical terminal records (expected exactly 1)`;\n        }\n        if (\n          canonical !== undefined &&\n          canonical._tag === \"SubmissionSettled\" &&\n          row.settledOutcome !== undefined &&\n          canonical.outcome !== row.settledOutcome\n        ) {\n          agreementFailure = `submission ${row.submissionId}: ledger outcome ${row.settledOutcome} disagrees with canonical outcome ${canonical.outcome}`;\n        }\n        if (settlements.length === 0) {\n          agreementFailure ??= `settled submission ${row.submissionId} has no canonical settlement record (DUR-015: history is the authority)`;\n        }\n      }\n    }\n    checks.push(\n      uniquenessFailure === undefined\n        ? check(\"terminal-uniqueness\", \"passed\")\n        : check(\"terminal-uniqueness\", \"failed\", uniquenessFailure),\n    );\n    checks.push(\n      agreementFailure === undefined\n        ? check(\"ledger-canonical-agreement\", \"passed\")\n        : check(\"ledger-canonical-agreement\", \"failed\", agreementFailure),\n    );\n  }\n\n  // 8. checkpoint-binding\n  if (input.checkpoint === undefined && input.checkpointsSupported !== true) {\n    checks.push(check(\"checkpoint-binding\", \"skipped\", \"checkpoint support was not supplied\"));\n  } else if (input.checkpoint === undefined) {\n    checks.push(check(\"checkpoint-binding\", \"passed\", \"no stored checkpoint\"));\n  } else if (input.checkpoint.throughSequence > exported.tailSequence) {\n    checks.push(\n      check(\n        \"checkpoint-binding\",\n        \"failed\",\n        `checkpoint through-sequence ${input.checkpoint.throughSequence} is ahead of the tail ${exported.tailSequence}`,\n      ),\n    );\n  } else if (input.batchProducers === undefined) {\n    checks.push(\n      check(\n        \"checkpoint-binding\",\n        \"skipped\",\n        \"digest binding needs the recomputed chain; supply batchProducers (the adapter rejects mismatched checkpoints on save/load regardless)\",\n      ),\n    );\n  } else {\n    const bound = chainDigestAtSequence.get(input.checkpoint.throughSequence);\n\n    checks.push(\n      bound === input.checkpoint.tailDigest\n        ? check(\"checkpoint-binding\", \"passed\")\n        : check(\n            \"checkpoint-binding\",\n            \"failed\",\n            `checkpoint digest ${input.checkpoint.tailDigest} does not match the recomputed chain at sequence ${input.checkpoint.throughSequence}`,\n          ),\n    );\n  }\n\n  // 9. all-settled (convergence mode)\n  if (input.requireAllSettled === true) {\n    const nonterminal = ordered.filter((row) => row.state !== \"settled\");\n\n    checks.push(\n      nonterminal.length === 0 && ordered.length > 0\n        ? check(\"all-settled\", \"passed\")\n        : check(\n            \"all-settled\",\n            \"failed\",\n            ordered.length === 0\n              ? \"no Submissions are known to the lane\"\n              : `nonterminal submissions: ${nonterminal\n                  .map((row) => `${row.submissionId}(${row.state})`)\n                  .join(\", \")}`,\n          ),\n    );\n  }\n\n  return IntegrityReport.make({\n    threadId: exported.threadId,\n    tailSequence: exported.tailSequence,\n    recordCount: records.length,\n    submissionCount: ordered.length,\n    checks,\n    ok: checks.every((result) => result.status !== \"failed\"),\n  });\n});\n"],"mappings":";;;;;;;;;AA2DA,MAAM,iBAAiB,OAAO,aAAa,uBAAuB;AAClE,MAAM,iBAAiB,OAAO,oBAAoB,uBAAuB;AAEzE,MAAM,SACJ,MACA,QACA,WAEA,eAAe,KAAK;CAClB;CACA;CACA,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,OAAO,MAAM,GAAG,IAAK,EAAE;AACnE,CAAC;;AASH,MAAM,eAAe,YAAqE;CACxF,MAAM,OAAwB,CAAC;CAE/B,KAAK,MAAM,YAAY,SAAS;EAC9B,MAAM,UAAU,KAAK,GAAG,EAAE;EAE1B,IAAI,YAAY,KAAA,KAAa,QAAQ,YAAY,SAAS,SAAS;GACjE,QAAQ,QAAQ,KAAK,SAAS,MAAM;GACpC,KAAK,KAAK,SAAS,KAAK;IAAE,GAAG;IAAS,cAAc,SAAS;GAAS;GACtE;EACF;EACA,KAAK,KAAK;GACR,SAAS,SAAS;GAClB,SAAS,CAAC,SAAS,MAAM;GACzB,cAAc,SAAS;EACzB,CAAC;CACH;CAEA,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,MAAa,yBAAyB,OAAO,GAAG,+BAA+B,CAAC,CAAC,WAC/E,OACyD;CACzD,MAAM,WAAW,MAAM;CACvB,MAAM,UAAU,SAAS;CACzB,MAAM,SAAgC,CAAC;CAGvC;EACE,IAAI;EAEJ,KAAK,MAAM,YAAY,SAMrB,KAAI,OALqB,eAAe,QAAQ,CAAC,CAAC,KAChD,OAAO,QAAQ,cAAc,GAC7B,OAAO,IACT,EAAA,CAEc,SAAS,WAAW;GAChC,UAAU,UAAU,SAAS,OAAO,SAAS;GAC7C;EACF;EAEF,OAAO,KACL,YAAY,KAAA,IACR,MAAM,qBAAqB,QAAQ,IACnC,MAAM,qBAAqB,UAAU,OAAO,CAClD;CACF;CAGA;EACE,MAAM,uBAAO,IAAI,IAAY;EAC7B,MAAM,6BAAa,IAAI,IAAY;EAEnC,KAAK,MAAM,YAAY,SAAS;GAC9B,IAAI,KAAK,IAAI,SAAS,OAAO,QAAQ,GAAG,WAAW,IAAI,SAAS,OAAO,QAAQ;GAC/E,KAAK,IAAI,SAAS,OAAO,QAAQ;EACnC;EACA,OAAO,KACL,WAAW,SAAS,IAChB,MAAM,mBAAmB,QAAQ,IACjC,MACE,mBACA,UACA,2CAA2C,CAAC,GAAG,UAAU,CAAC,CAAC,KAAK,IAAI,GACtE,CACN;CACF;CAGA;EACE,IAAI;EAEJ,KAAK,MAAM,CAAC,OAAO,aAAa,QAAQ,QAAQ,GAC9C,IAAI,SAAS,aAAa,QAAQ,GAAG;GACnC,oBAAoB,YAAY,SAAS,SAAS,eAAe,MAAM,aAAa,QAAQ,EAAE;GAC9F;EACF;EAEF,IAAI,sBAAsB,KAAA,KAAa,QAAQ,WAAW,SAAS,cACjE,oBAAoB,0BAA0B,SAAS,aAAa,kBAAkB,QAAQ,OAAO;EAEvG,OAAO,KACL,sBAAsB,KAAA,IAClB,MAAM,uBAAuB,QAAQ,IACrC,MAAM,uBAAuB,UAAU,iBAAiB,CAC9D;CACF;CAGA,MAAM,wCAAwB,IAAI,IAAoB;CAEtD,IAAI,MAAM,mBAAmB,KAAA,GAC3B,OAAO,KACL,MACE,gBACA,WACA,uMACF,CACF;MACK;EACL,IAAI,QAAQ;EACZ,IAAI;EAEJ,KAAK,MAAM,OAAO,YAAY,OAAO,GAAG;GACtC,MAAM,aAAa,MAAM,eAAe,IAAI,IAAI,OAAO;GAEvD,IAAI,eAAe,KAAA,GAAW;IAC5B,eAAe,2CAA2C,IAAI;IAC9D;GACF;GACA,MAAM,CAAC,OAAO,GAAG,QAAQ,IAAI;GAE7B,IAAI,UAAU,KAAA,GAAW;IACvB,eAAe,SAAS,IAAI,QAAQ;IACpC;GACF;GAEA,MAAM,SAAS,OAAO,qBACpB,OACA,eAAe,KAAK;IAAE,SAAS,IAAI;IAAS;IAAY,SAAS,CAAC,OAAO,GAAG,IAAI;GAAE,CAAC,CACrF,CAAC,CAAC,KAAK,OAAO,IAAI;GAElB,IAAI,OAAO,SAAS,WAAW;IAC7B,eAAe,SAAS,IAAI,QAAQ;IACpC;GACF;GACA,QAAQ,OAAO;GACf,sBAAsB,IAAI,IAAI,cAAc,KAAK;EACnD;EACA,IAAI,iBAAiB,KAAA,KAAa,UAAU,SAAS,YACnD,eAAe,0BAA0B,MAAM,uCAAuC,SAAS;EAEjG,OAAO,KACL,iBAAiB,KAAA,IACb,MAAM,gBAAgB,QAAQ,IAC9B,MAAM,gBAAgB,UAAU,YAAY,CAClD;CACF;CAGA,MAAM,UAAU,CAAC,GAAG,MAAM,WAAW,CAAC,CAAC,MACpC,MAAM,UAAU,KAAK,gBAAgB,MAAM,aAC9C;CAEA,MAAM,YAAY,QAAQ,KAAK,aAAa,SAAS,OAAO,QAAQ;CAGpE;EACE,MAAM,iBAAiB,QAAQ,KAAK,QAAQ,wBAAwB,IAAI,YAAY,CAAC;EACrF,MAAM,cAAc,IAAI,IAAY,cAAc;EAClD,MAAM,aAAa,UAAU,QAAQ,aAAa,YAAY,IAAI,QAAQ,CAAC;EAC3E,MAAM,gBAAgB,IAAI,IAAI,UAAU;EACxC,MAAM,kBAAkB,eAAe,QAAQ,aAAa,cAAc,IAAI,QAAQ,CAAC;EAEvF,MAAM,UACJ,WAAW,WAAW,gBAAgB,UACtC,WAAW,OAAO,UAAU,UAAU,aAAa,gBAAgB,MAAM;EAE3E,OAAO,KACL,UACI,MAAM,oBAAoB,QAAQ,IAClC,MACE,oBACA,UACA,0BAA0B,WAAW,KAAK,IAAI,EAAE,uBAClD,CACN;CACF;CAOA;EACE,MAAM,cAAc,IAAI,IAAY,SAAS;EAC7C,MAAM,kCAAkB,IAAI,IAAY;EAExC,MAAM,kBAAkB,IAAI,IAC1B,QAAQ,KAAK,QAAQ,CACnB,mBAAmB,IAAI,YAAY,GACnC,6BAA6B,IAAI,YAAY,CAC/C,CAAC,CACH;EAEA,MAAM,mBAAmB,IAAI,IAC3B,QAAQ,KAAK,QAAQ,CACnB,wBAAwB,IAAI,YAAY,GACxC,6BAA6B,IAAI,YAAY,CAC/C,CAAC,CACH;EAEA,MAAM,+BAAe,IAAI,IAAyB;EAClD,MAAM,oCAAoB,IAAI,IAAY;EAC1C,MAAM,sCAAsB,IAAI,IAAyB;EAEzD,KAAK,MAAM,YAAY,SAAS;GAC9B,MAAM,UAAU,SAAS,OAAO;GAEhC,IAAI,QAAQ,SAAS,qBAAqB,CAAC,kBAAkB,IAAI,QAAQ,KAAK,GAAG;IAC/E,MAAM,QAAQ,aAAa,IAAI,QAAQ,KAAK,qBAAK,IAAI,IAAY;IAEjE,MAAM,IAAI,QAAQ,UAAU;IAC5B,aAAa,IAAI,QAAQ,OAAO,KAAK;GACvC,OAAO,IAAI,QAAQ,SAAS,sBAAsB,QAAQ,SAAS,mBAAmB;IACpF,MAAM,QAAQ,aAAa,IAAI,QAAQ,KAAK;IAE5C,OAAO,OAAO,QAAQ,UAAU;IAChC,IAAI,OAAO,SAAS,GAAG,aAAa,OAAO,QAAQ,KAAK;GAC1D,OAAO,IAAI,QAAQ,SAAS,oBAAoB,QAAQ,SAAS,qBAAqB;IACpF,MAAM,QAAQ,mBAAmB,QAAQ,YAAY;IAErD,kBAAkB,IAAI,KAAK;IAC3B,aAAa,OAAO,KAAK;GAC3B,OAAO,IAAI,QAAQ,SAAS,kBAAkB,QAAQ,SAAS,aAAa;IAC1E,kBAAkB,IAAI,QAAQ,KAAK;IACnC,aAAa,OAAO,QAAQ,KAAK;GACnC,OAAO,IAAI,QAAQ,SAAS,qBAAqB;IAC/C,MAAM,eAAe,iBAAiB,IAAI,SAAS,OAAO,QAAQ;IAElE,IAAI,iBAAiB,KAAA,GAAW;KAC9B,MAAM,2BAAW,IAAI,IAAY;KAEjC,KAAK,MAAM,SAAS,aAAa,KAAK,GAAG;MACvC,MAAM,UAAU,gBAAgB,IAAI,KAAK;MAEzC,IAAI,YAAY,KAAA,GAAW,SAAS,IAAI,OAAO;KACjD;KACA,oBAAoB,IAAI,cAAc,QAAQ;IAChD;GACF;GACA,IACE,QAAQ,SAAS,uBACjB,QAAQ,YAAY,aACpB,CAAC,YAAY,IAAI,wBAAwB,QAAQ,YAAY,CAAC,GAE9D,gBAAgB,IAAI,QAAQ,YAAY;EAE5C;EAEA,MAAM,sBAAsB,QACzB,QAAQ,QAAQ,CAAC,gBAAgB,IAAI,IAAI,YAAY,CAAC,CAAC,CACvD,KAAK,QAAQ,6BAA6B,IAAI,YAAY,CAAC;EAE9D,MAAM,cAAc,IAAI,IAAY,mBAAmB;EACvD,MAAM,kBAAkB,UAAU,QAAQ,aAAa,YAAY,IAAI,QAAQ,CAAC;EAEhF,MAAM,qBAAqB,IAAI,IAAI,eAAe;EAElD,MAAM,kBAAkB,oBAAoB,QAAQ,aAClD,mBAAmB,IAAI,QAAQ,CACjC;EAEA,MAAM,YAAY,IAAI,IAAI,eAAe;EACzC,IAAI,UAAU,gBAAgB,WAAW,gBAAgB;EAEzD,KAAK,MAAM,YAAY,iBAAiB;GACtC,KAAK,MAAM,WAAW,WAAW;IAC/B,IAAI,YAAY,UAAU;IAC1B,IAAI,CAAC,oBAAoB,IAAI,QAAQ,CAAC,EAAE,IAAI,OAAO,GAAG;KACpD,UAAU;KACV;IACF;GACF;GACA,IAAI,CAAC,SAAS;GACd,UAAU,OAAO,QAAQ;EAC3B;EAEA,OAAO,KACL,UACI,MAAM,yBAAyB,QAAQ,IACvC,MACE,yBACA,UACA,+BAA+B,gBAAgB,KAAK,IAAI,EAAE,uBAC5D,CACN;CACF;CAGA;EACE,MAAM,0CAA0B,IAAI,IAA4C;EAEhF,KAAK,MAAM,YAAY,SAAS;GAC9B,IAAI,SAAS,OAAO,QAAQ,SAAS,qBAAqB;GAC1D,MAAM,eAAe,SAAS,OAAO,QAAQ;GAC7C,MAAM,WAAW,wBAAwB,IAAI,YAAY,KAAK,CAAC;GAE/D,SAAS,KAAK,QAAQ;GACtB,wBAAwB,IAAI,cAAc,QAAQ;EACpD;EACA,IAAI;EACJ,IAAI;EAEJ,KAAK,MAAM,CAAC,cAAc,gBAAgB,yBACxC,IAAI,YAAY,SAAS,GACvB,oBAAoB,cAAc,aAAa,OAAO,YAAY,OAAO;EAG7E,KAAK,MAAM,OAAO,SAAS;GACzB,MAAM,cAAc,wBAAwB,IAAI,IAAI,YAAY,KAAK,CAAC;GACtE,MAAM,YAAY,YAAY,EAAE,EAAE,OAAO;GAEzC,IAAI,IAAI,UAAU,WAAW;IAC3B,IAAI,YAAY,WAAW,GACzB,sBAAsB,sBAAsB,IAAI,aAAa,OAAO,YAAY,OAAO;IAEzF,IACE,cAAc,KAAA,KACd,UAAU,SAAS,uBACnB,IAAI,mBAAmB,KAAA,KACvB,UAAU,YAAY,IAAI,gBAE1B,mBAAmB,cAAc,IAAI,aAAa,mBAAmB,IAAI,eAAe,oCAAoC,UAAU;IAExI,IAAI,YAAY,WAAW,GACzB,qBAAqB,sBAAsB,IAAI,aAAa;GAEhE;EACF;EACA,OAAO,KACL,sBAAsB,KAAA,IAClB,MAAM,uBAAuB,QAAQ,IACrC,MAAM,uBAAuB,UAAU,iBAAiB,CAC9D;EACA,OAAO,KACL,qBAAqB,KAAA,IACjB,MAAM,8BAA8B,QAAQ,IAC5C,MAAM,8BAA8B,UAAU,gBAAgB,CACpE;CACF;CAGA,IAAI,MAAM,eAAe,KAAA,KAAa,MAAM,yBAAyB,MACnE,OAAO,KAAK,MAAM,sBAAsB,WAAW,qCAAqC,CAAC;MACpF,IAAI,MAAM,eAAe,KAAA,GAC9B,OAAO,KAAK,MAAM,sBAAsB,UAAU,sBAAsB,CAAC;MACpE,IAAI,MAAM,WAAW,kBAAkB,SAAS,cACrD,OAAO,KACL,MACE,sBACA,UACA,+BAA+B,MAAM,WAAW,gBAAgB,wBAAwB,SAAS,cACnG,CACF;MACK,IAAI,MAAM,mBAAmB,KAAA,GAClC,OAAO,KACL,MACE,sBACA,WACA,uIACF,CACF;MACK;EACL,MAAM,QAAQ,sBAAsB,IAAI,MAAM,WAAW,eAAe;EAExE,OAAO,KACL,UAAU,MAAM,WAAW,aACvB,MAAM,sBAAsB,QAAQ,IACpC,MACE,sBACA,UACA,qBAAqB,MAAM,WAAW,WAAW,mDAAmD,MAAM,WAAW,iBACvH,CACN;CACF;CAGA,IAAI,MAAM,sBAAsB,MAAM;EACpC,MAAM,cAAc,QAAQ,QAAQ,QAAQ,IAAI,UAAU,SAAS;EAEnE,OAAO,KACL,YAAY,WAAW,KAAK,QAAQ,SAAS,IACzC,MAAM,eAAe,QAAQ,IAC7B,MACE,eACA,UACA,QAAQ,WAAW,IACf,yCACA,4BAA4B,YACzB,KAAK,QAAQ,GAAG,IAAI,aAAa,GAAG,IAAI,MAAM,EAAE,CAAC,CACjD,KAAK,IAAI,GAClB,CACN;CACF;CAEA,OAAO,gBAAgB,KAAK;EAC1B,UAAU,SAAS;EACnB,cAAc,SAAS;EACvB,aAAa,QAAQ;EACrB,iBAAiB,QAAQ;EACzB;EACA,IAAI,OAAO,OAAO,WAAW,OAAO,WAAW,QAAQ;CACzD,CAAC;AACH,CAAC"}

package/dist/durable/ThreadProjection.d.mts

@@ -1,5 +1,5 @@
 import { u as ThreadId } from "../Identifiers-CN2s30fF.mjs";
-import { G as SubagentRequested, J as SubmissionSettledRecord, K as SubagentStarted, Q as ToolApprovalRequested, U as SubagentJoined, W as SubagentLineageRecorded, Z as ToolApprovalDecided, _ as Digest, l as CanonicalRecordEnvelope, q as SubmissionSettled, rt as ToolCallUnknown, t as AbortRequested } from "../Records-CV49DgQK.mjs";
+import { G as SubagentRequested, J as SubmissionSettledRecord, K as SubagentStarted, Q as ToolApprovalRequested, U as SubagentJoined, W as SubagentLineageRecorded, Z as ToolApprovalDecided, _ as Digest, l as CanonicalRecordEnvelope, q as SubmissionSettled, rt as ToolCallUnknown, t as AbortRequested } from "../Records-BIiRLqlz.mjs";
 import { Schema } from "effect";
 declare namespace ThreadProjection_d_exports {
   export { ApprovalRecord, OpenToolCallState, SubagentInvocationState, ThreadProjection, initialThreadProjection, reduceThreadRecord, replayThread, replayThreadFromCheckpoint };

package/dist/durable/ThreadProjection.mjs

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.mjs";
 import { RunId, ThreadId, ToolCallId } from "../core/Identifiers.mjs";
-import { B as SubagentJoined, G as SubmissionSettledRecord, H as SubagentRequested, J as ToolApprovalDecided, T as PersistedJson, U as SubagentStarted, V as SubagentLineageRecorded, X as ToolCallPrepared, Y as ToolApprovalRequested, et as ToolCallUnknown, h as Digest, t as AbortRequested, u as CanonicalSequence } from "../Records-BAutSSnJ.mjs";
+import { B as SubagentJoined, G as SubmissionSettledRecord, H as SubagentRequested, J as ToolApprovalDecided, T as PersistedJson, U as SubagentStarted, V as SubagentLineageRecorded, X as ToolCallPrepared, Y as ToolApprovalRequested, et as ToolCallUnknown, h as Digest, t as AbortRequested, u as CanonicalSequence } from "../Records-DR1xtbXY.mjs";
 import { EMPTY_TAIL_DIGEST } from "./Digest.mjs";
 import { Schema } from "effect";
 //#region src/durable/ThreadProjection.ts

package/dist/durable/ThreadProjectionMaintenance.d.mts

@@ -1,4 +1,4 @@
-import { Vt as AppendResult, Wt as FencedAppendRequest } from "../Records-CV49DgQK.mjs";
+import { Kt as FencedAppendRequest, Ut as AppendResult } from "../Records-BIiRLqlz.mjs";
 import { Context, Effect, Layer, Option, Schema } from "effect";
 declare namespace ThreadProjectionMaintenance_d_exports {
   export { ThreadProjectionError, ThreadProjectionMaintenance, ThreadProjectionMaintenanceService, drainDue };

package/dist/durable/ThreadStore.d.mts

@@ -1,2 +1,2 @@
-import { $t as ThreadMaterialization, Bt as AppendConflict, Gt as LoadCheckpointRequest, Ht as CheckpointRejected, Jt as SaveRecoveryCheckpointRequest, Kt as MAX_THREAD_EXPORT_RECORDS, Qt as ThreadExportRequest, Ut as FenceRejected, Vt as AppendResult, Wt as FencedAppendRequest, Xt as ThreadCheckpoints, Yt as ThreadCheckpoint, Zt as ThreadExport, an as ThreadStoreError, cn as ThreadTail, en as ThreadNotMaterialized, in as ThreadStore, ln as ThreadTailRequest, nn as ThreadRead, on as ThreadStoreFailure, qt as SaveCheckpointRequest, rn as ThreadRecoveryCheckpoints, tn as ThreadObservation } from "../Records-CV49DgQK.mjs";
+import { $t as ThreadExport, Gt as FenceRejected, Ht as AppendConflict, Jt as MAX_THREAD_EXPORT_RECORDS, Kt as FencedAppendRequest, Qt as ThreadCheckpoints, Ut as AppendResult, Wt as CheckpointRejected, Xt as SaveRecoveryCheckpointRequest, Yt as SaveCheckpointRequest, Zt as ThreadCheckpoint, an as ThreadRecoveryCheckpoints, cn as ThreadStoreFailure, dn as ThreadTailRequest, en as ThreadExportRequest, in as ThreadRead, nn as ThreadNotMaterialized, on as ThreadStore, qt as LoadCheckpointRequest, rn as ThreadObservation, sn as ThreadStoreError, tn as ThreadMaterialization, un as ThreadTail } from "../Records-BIiRLqlz.mjs";
 export { AppendConflict, AppendResult, CheckpointRejected, FenceRejected, FencedAppendRequest, LoadCheckpointRequest, MAX_THREAD_EXPORT_RECORDS, SaveCheckpointRequest, SaveRecoveryCheckpointRequest, ThreadCheckpoint, ThreadCheckpoints, ThreadExport, ThreadExportRequest, ThreadMaterialization, ThreadNotMaterialized, ThreadObservation, ThreadRead, ThreadRecoveryCheckpoints, ThreadStore, ThreadStoreError, ThreadStoreFailure, ThreadTail, ThreadTailRequest };

package/dist/durable/ThreadStore.mjs

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.mjs";
 import { ThreadId } from "../core/Identifiers.mjs";
-import { C as ObservationOffset, E as ProducerEpoch, T as PersistedJson, c as CanonicalRecordEnvelope, h as Digest, i as BatchId, o as CanonicalBatch, u as CanonicalSequence } from "../Records-BAutSSnJ.mjs";
+import { C as ObservationOffset, E as ProducerEpoch, T as PersistedJson, c as CanonicalRecordEnvelope, h as Digest, i as BatchId, o as CanonicalBatch, u as CanonicalSequence } from "../Records-DR1xtbXY.mjs";
 import { Context, Schema } from "effect";
 //#region src/durable/ThreadStore.ts
 var ThreadStore_exports = /* @__PURE__ */ __exportAll({

package/dist/durable/ThreadStoreConformance.d.mts

@@ -1,4 +1,4 @@
-import { Ht as CheckpointRejected, in as ThreadStore, on as ThreadStoreFailure } from "../Records-CV49DgQK.mjs";
+import { Wt as CheckpointRejected, cn as ThreadStoreFailure, on as ThreadStore } from "../Records-BIiRLqlz.mjs";
 import { Effect, Schema } from "effect";
 //#region src/durable/ThreadStoreConformance.d.ts
 declare const ThreadStoreConformanceViolation_base: Schema.Class<ThreadStoreConformanceViolation, Schema.TaggedStruct<"ThreadStoreConformanceViolation", {

package/dist/durable/ThreadStoreConformance.mjs

@@ -1,5 +1,5 @@
 import { RunId, SubmissionId, ThreadId } from "../core/Identifiers.mjs";
-import { D as ProducerId, E as ProducerEpoch, O as RecordEnvelope, i as BatchId, k as RecordId, m as DeploymentId, nt as UserInputRecorded, o as CanonicalBatch, u as CanonicalSequence } from "../Records-BAutSSnJ.mjs";
+import { D as ProducerId, E as ProducerEpoch, O as RecordEnvelope, i as BatchId, it as UserInputRecorded, k as RecordId, m as DeploymentId, o as CanonicalBatch, u as CanonicalSequence } from "../Records-DR1xtbXY.mjs";
 import { EMPTY_TAIL_DIGEST } from "./Digest.mjs";
 import { AppendConflict, CheckpointRejected, FenceRejected, FencedAppendRequest, LoadCheckpointRequest, SaveCheckpointRequest, ThreadCheckpoint, ThreadExportRequest, ThreadMaterialization, ThreadNotMaterialized, ThreadObservation, ThreadRead, ThreadStore, ThreadTailRequest } from "./ThreadStore.mjs";
 import { DateTime, Effect, Option, Schema, Stream } from "effect";

package/dist/durable/ToolReconciler.d.mts

@@ -1,2 +1,2 @@
-import { a as ReconciliationSafeToRetry, c as ToolReconcilerError, i as ReconciliationNeverStarted, n as ReconciliationCompleted, o as ReconciliationUncertain, r as ReconciliationDecision, s as ToolReconciler, t as PreparedToolCallEvidence } from "../ToolReconciler-DQVaJfpE.mjs";
+import { a as ReconciliationSafeToRetry, c as ToolReconcilerError, i as ReconciliationNeverStarted, n as ReconciliationCompleted, o as ReconciliationUncertain, r as ReconciliationDecision, s as ToolReconciler, t as PreparedToolCallEvidence } from "../ToolReconciler-BmVRAHKs.mjs";
 export { PreparedToolCallEvidence, ReconciliationCompleted, ReconciliationDecision, ReconciliationNeverStarted, ReconciliationSafeToRetry, ReconciliationUncertain, ToolReconciler, ToolReconcilerError };

package/dist/durable/ToolReconciler.mjs

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.mjs";
 import { RunId, SubmissionId, ThreadId, ToolCallId } from "../core/Identifiers.mjs";
-import { T as PersistedJson, X as ToolCallPrepared, h as Digest } from "../Records-BAutSSnJ.mjs";
+import { T as PersistedJson, X as ToolCallPrepared, h as Digest } from "../Records-DR1xtbXY.mjs";
 import { Context, Effect, Layer, Schema } from "effect";
 //#region src/durable/ToolReconciler.ts
 var ToolReconciler_exports = /* @__PURE__ */ __exportAll({
@@ -27,9 +27,12 @@ var PreparedToolCallEvidence = class extends Schema.Class("@effect-agent/thread/
 	toolCallId: ToolCallId,
 	toolName: ToolCallPrepared.fields.toolName,
 	parameters: PersistedJson,
-	parametersDigest: Digest
+	parametersDigest: Digest,
+	executionKind: ToolCallPrepared.fields.executionKind,
+	executionClass: ToolCallPrepared.fields.executionClass,
+	replay: ToolCallPrepared.fields.replay
 }) {};
-/** Proof that the external execution never started: the call may re-execute on resume. */
+/** Proof of nonexecution: resume the original operation or report it unavailable. */
 var ReconciliationNeverStarted = class extends Schema.TaggedClass("@effect-agent/thread/ReconciliationNeverStarted")("NeverStarted", {}) {};
 /**
 * Proof that the external execution completed: `result` is the recovered supplier truth, which
@@ -39,7 +42,7 @@ var ReconciliationCompleted = class extends Schema.TaggedClass("@effect-agent/th
 	result: PersistedJson,
 	isFailure: Schema.Boolean
 }) {};
-/** The call is safe to repeat under a stable external idempotency contract. */
+/** Only the original operation, identity and parameters may repeat under supported semantics. */
 var ReconciliationSafeToRetry = class extends Schema.TaggedClass("@effect-agent/thread/ReconciliationSafeToRetry")("SafeToRetry", {}) {};
 /** No proof either way: the outcome is Unknown and requires authorized resolution (DUR-017). */
 var ReconciliationUncertain = class extends Schema.TaggedClass("@effect-agent/thread/ReconciliationUncertain")("Uncertain", { reason: Schema.String }) {};
@@ -47,7 +50,8 @@ var ReconciliationUncertain = class extends Schema.TaggedClass("@effect-agent/th
 * What a reconciliation policy can prove about one prepared-but-unsettled ordinary Tool Call
 * (durability §10): execution never started, execution completed with a recoverable result,
 * execution is safe to repeat, or nothing — in which case the Run enters Unknown. The engine
-* never manufactures an error result and continues.
+* never invents an external result. Proven nonexecution can close a retired operation with
+* an explicit not-executed result; uncertainty stays parked.
 */
 const ReconciliationDecision = Schema.Union([
 	ReconciliationNeverStarted,

package/dist/durable/ToolReconciler.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ToolReconciler.mjs","names":[],"sources":["../../src/durable/ToolReconciler.ts"],"sourcesContent":["import { Context, Effect, Layer, Schema } from \"effect\";\n\nimport { ThreadId, RunId, SubmissionId, ToolCallId } from \"../core/Identifiers.ts\";\nimport { Digest, PersistedJson, ToolCallPrepared } from \"./Records.ts\";\n\n/**\n * Everything a reconciliation policy can consult about one prepared-but-unsettled ordinary Tool\n * Call (durability §10): deterministic identities for supplier-side lookup plus the exact\n * Schema-encoded parameters and their digest. Built from the canonical `ToolCallPrepared` record\n * and the owning Submission's identities — never from in-memory Attempt state.\n */\nexport class PreparedToolCallEvidence extends Schema.Class<PreparedToolCallEvidence>(\n  \"@effect-agent/thread/PreparedToolCallEvidence\",\n)({\n  threadId: ThreadId,\n  submissionId: SubmissionId,\n  runId: RunId,\n  turn: ToolCallPrepared.fields.turn,\n  toolCallId: ToolCallId,\n  toolName: ToolCallPrepared.fields.toolName,\n  parameters: PersistedJson,\n  parametersDigest: Digest,\n}) {}\n\n/** Proof that the external execution never started: the call may re-execute on resume. */\nexport class ReconciliationNeverStarted extends Schema.TaggedClass<ReconciliationNeverStarted>(\n  \"@effect-agent/thread/ReconciliationNeverStarted\",\n)(\"NeverStarted\", {}) {}\n\n/**\n * Proof that the external execution completed: `result` is the recovered supplier truth, which\n * becomes canonical (`ToolCallSettled` + `ToolCallResolved`) WITHOUT executing anything.\n */\nexport class ReconciliationCompleted extends Schema.TaggedClass<ReconciliationCompleted>(\n  \"@effect-agent/thread/ReconciliationCompleted\",\n)(\"CompletedWithResult\", {\n  result: PersistedJson,\n  isFailure: Schema.Boolean,\n}) {}\n\n/** The call is safe to repeat under a stable external idempotency contract. */\nexport class ReconciliationSafeToRetry extends Schema.TaggedClass<ReconciliationSafeToRetry>(\n  \"@effect-agent/thread/ReconciliationSafeToRetry\",\n)(\"SafeToRetry\", {}) {}\n\n/** No proof either way: the outcome is Unknown and requires authorized resolution (DUR-017). */\nexport class ReconciliationUncertain extends Schema.TaggedClass<ReconciliationUncertain>(\n  \"@effect-agent/thread/ReconciliationUncertain\",\n)(\"Uncertain\", {\n  reason: Schema.String,\n}) {}\n\n/**\n * What a reconciliation policy can prove about one prepared-but-unsettled ordinary Tool Call\n * (durability §10): execution never started, execution completed with a recoverable result,\n * execution is safe to repeat, or nothing — in which case the Run enters Unknown. The engine\n * never manufactures an error result and continues.\n */\nexport const ReconciliationDecision = Schema.Union([\n  ReconciliationNeverStarted,\n  ReconciliationCompleted,\n  ReconciliationSafeToRetry,\n  ReconciliationUncertain,\n]);\n\nexport type ReconciliationDecision = typeof ReconciliationDecision.Type;\n\n/** The reconciliation policy itself failed (supplier unreachable, corrupt lookup, ...). The\n * caller treats this as no proof: the call stays open and the pass may retry. */\nexport class ToolReconcilerError extends Schema.TaggedError<ToolReconcilerError>()(\n  \"ToolReconcilerError\",\n  {\n    toolCallId: ToolCallId,\n    message: Schema.String,\n    cause: Schema.optionalKey(Schema.Defect()),\n  },\n) {}\n\n/**\n * Application-registered reconciliation policy consulted by recovery for every open ordinary\n * Tool Call before an Unknown Outcome is recorded (durability §10, DUR-009). A decision is a\n * claim about EXTERNAL truth — typically an idempotency-keyed supplier lookup — never a guess\n * from canonical state alone.\n *\n * `ToolReconciler.uncertain` is the fail-closed default (AGENTS rule 11): with no registered\n * policy, every open call stays Unknown and routes to the authorized DUR-017 resolution path.\n */\nexport class ToolReconciler extends Context.Service<\n  ToolReconciler,\n  {\n    readonly reconcile: (\n      evidence: PreparedToolCallEvidence,\n    ) => Effect.Effect<ReconciliationDecision, ToolReconcilerError>;\n  }\n>()(\"@effect-agent/thread/ToolReconciler\") {\n  /** Fail-closed default: no proof is ever asserted, every open call stays Unknown. */\n  static readonly uncertain: Layer.Layer<ToolReconciler> = Layer.succeed(this)({\n    reconcile: () =>\n      Effect.succeed(\n        ReconciliationUncertain.make({\n          reason: \"No reconciliation policy is registered; the outcome stays unknown\",\n        }),\n      ),\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAWA,IAAa,2BAAb,cAA8C,OAAO,MACnD,+CACF,CAAC,CAAC;CACA,UAAU;CACV,cAAc;CACd,OAAO;CACP,MAAM,iBAAiB,OAAO;CAC9B,YAAY;CACZ,UAAU,iBAAiB,OAAO;CAClC,YAAY;CACZ,kBAAkB;AACpB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,6BAAb,cAAgD,OAAO,YACrD,iDACF,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;;;;;AAMvB,IAAa,0BAAb,cAA6C,OAAO,YAClD,8CACF,CAAC,CAAC,uBAAuB;CACvB,QAAQ;CACR,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,4BAAb,cAA+C,OAAO,YACpD,gDACF,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;;AAGtB,IAAa,0BAAb,cAA6C,OAAO,YAClD,8CACF,CAAC,CAAC,aAAa,EACb,QAAQ,OAAO,OACjB,CAAC,CAAC,CAAC,CAAC;;;;;;;AAQJ,MAAa,yBAAyB,OAAO,MAAM;CACjD;CACA;CACA;CACA;AACF,CAAC;;;AAMD,IAAa,sBAAb,cAAyC,OAAO,YAAiC,CAAC,CAChF,uBACA;CACE,YAAY;CACZ,SAAS,OAAO;CAChB,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;AAC3C,CACF,CAAC,CAAC,CAAC;;;;;;;;;;AAWH,IAAa,iBAAb,cAAoC,QAAQ,QAO1C,CAAC,CAAC,qCAAqC,CAAC,CAAC;;CAEzC,OAAgB,YAAyC,MAAM,QAAQ,IAAI,CAAC,CAAC,EAC3E,iBACE,OAAO,QACL,wBAAwB,KAAK,EAC3B,QAAQ,oEACV,CAAC,CACH,EACJ,CAAC;AACH"}
+{"version":3,"file":"ToolReconciler.mjs","names":[],"sources":["../../src/durable/ToolReconciler.ts"],"sourcesContent":["import { Context, Effect, Layer, Schema } from \"effect\";\n\nimport { ThreadId, RunId, SubmissionId, ToolCallId } from \"../core/Identifiers.ts\";\nimport { Digest, PersistedJson, ToolCallPrepared } from \"./Records.ts\";\n\n/**\n * Everything a reconciliation policy can consult about one prepared-but-unsettled ordinary Tool\n * Call (durability §10): deterministic identities for supplier-side lookup plus the exact\n * Schema-encoded parameters and their digest. Built from the canonical `ToolCallPrepared` record\n * and the owning Submission's identities — never from in-memory Attempt state.\n */\nexport class PreparedToolCallEvidence extends Schema.Class<PreparedToolCallEvidence>(\n  \"@effect-agent/thread/PreparedToolCallEvidence\",\n)({\n  threadId: ThreadId,\n  submissionId: SubmissionId,\n  runId: RunId,\n  turn: ToolCallPrepared.fields.turn,\n  toolCallId: ToolCallId,\n  toolName: ToolCallPrepared.fields.toolName,\n  parameters: PersistedJson,\n  parametersDigest: Digest,\n  executionKind: ToolCallPrepared.fields.executionKind,\n  executionClass: ToolCallPrepared.fields.executionClass,\n  replay: ToolCallPrepared.fields.replay,\n}) {}\n\n/** Proof of nonexecution: resume the original operation or report it unavailable. */\nexport class ReconciliationNeverStarted extends Schema.TaggedClass<ReconciliationNeverStarted>(\n  \"@effect-agent/thread/ReconciliationNeverStarted\",\n)(\"NeverStarted\", {}) {}\n\n/**\n * Proof that the external execution completed: `result` is the recovered supplier truth, which\n * becomes canonical (`ToolCallSettled` + `ToolCallResolved`) WITHOUT executing anything.\n */\nexport class ReconciliationCompleted extends Schema.TaggedClass<ReconciliationCompleted>(\n  \"@effect-agent/thread/ReconciliationCompleted\",\n)(\"CompletedWithResult\", {\n  result: PersistedJson,\n  isFailure: Schema.Boolean,\n}) {}\n\n/** Only the original operation, identity and parameters may repeat under supported semantics. */\nexport class ReconciliationSafeToRetry extends Schema.TaggedClass<ReconciliationSafeToRetry>(\n  \"@effect-agent/thread/ReconciliationSafeToRetry\",\n)(\"SafeToRetry\", {}) {}\n\n/** No proof either way: the outcome is Unknown and requires authorized resolution (DUR-017). */\nexport class ReconciliationUncertain extends Schema.TaggedClass<ReconciliationUncertain>(\n  \"@effect-agent/thread/ReconciliationUncertain\",\n)(\"Uncertain\", {\n  reason: Schema.String,\n}) {}\n\n/**\n * What a reconciliation policy can prove about one prepared-but-unsettled ordinary Tool Call\n * (durability §10): execution never started, execution completed with a recoverable result,\n * execution is safe to repeat, or nothing — in which case the Run enters Unknown. The engine\n * never invents an external result. Proven nonexecution can close a retired operation with\n * an explicit not-executed result; uncertainty stays parked.\n */\nexport const ReconciliationDecision = Schema.Union([\n  ReconciliationNeverStarted,\n  ReconciliationCompleted,\n  ReconciliationSafeToRetry,\n  ReconciliationUncertain,\n]);\n\nexport type ReconciliationDecision = typeof ReconciliationDecision.Type;\n\n/** The reconciliation policy itself failed (supplier unreachable, corrupt lookup, ...). The\n * caller treats this as no proof: the call stays open and the pass may retry. */\nexport class ToolReconcilerError extends Schema.TaggedError<ToolReconcilerError>()(\n  \"ToolReconcilerError\",\n  {\n    toolCallId: ToolCallId,\n    message: Schema.String,\n    cause: Schema.optionalKey(Schema.Defect()),\n  },\n) {}\n\n/**\n * Application-registered reconciliation policy consulted by recovery for every open ordinary\n * Tool Call before an Unknown Outcome is recorded (durability §10, DUR-009). A decision is a\n * claim about EXTERNAL truth — typically an idempotency-keyed supplier lookup — never a guess\n * from canonical state alone.\n *\n * `ToolReconciler.uncertain` is the fail-closed default (AGENTS rule 11): with no registered\n * policy, every open call stays Unknown and routes to the authorized DUR-017 resolution path.\n */\nexport class ToolReconciler extends Context.Service<\n  ToolReconciler,\n  {\n    readonly reconcile: (\n      evidence: PreparedToolCallEvidence,\n    ) => Effect.Effect<ReconciliationDecision, ToolReconcilerError>;\n  }\n>()(\"@effect-agent/thread/ToolReconciler\") {\n  /** Fail-closed default: no proof is ever asserted, every open call stays Unknown. */\n  static readonly uncertain: Layer.Layer<ToolReconciler> = Layer.succeed(this)({\n    reconcile: () =>\n      Effect.succeed(\n        ReconciliationUncertain.make({\n          reason: \"No reconciliation policy is registered; the outcome stays unknown\",\n        }),\n      ),\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAWA,IAAa,2BAAb,cAA8C,OAAO,MACnD,+CACF,CAAC,CAAC;CACA,UAAU;CACV,cAAc;CACd,OAAO;CACP,MAAM,iBAAiB,OAAO;CAC9B,YAAY;CACZ,UAAU,iBAAiB,OAAO;CAClC,YAAY;CACZ,kBAAkB;CAClB,eAAe,iBAAiB,OAAO;CACvC,gBAAgB,iBAAiB,OAAO;CACxC,QAAQ,iBAAiB,OAAO;AAClC,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,6BAAb,cAAgD,OAAO,YACrD,iDACF,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;;;;;AAMvB,IAAa,0BAAb,cAA6C,OAAO,YAClD,8CACF,CAAC,CAAC,uBAAuB;CACvB,QAAQ;CACR,WAAW,OAAO;AACpB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,4BAAb,cAA+C,OAAO,YACpD,gDACF,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;;AAGtB,IAAa,0BAAb,cAA6C,OAAO,YAClD,8CACF,CAAC,CAAC,aAAa,EACb,QAAQ,OAAO,OACjB,CAAC,CAAC,CAAC,CAAC;;;;;;;;AASJ,MAAa,yBAAyB,OAAO,MAAM;CACjD;CACA;CACA;CACA;AACF,CAAC;;;AAMD,IAAa,sBAAb,cAAyC,OAAO,YAAiC,CAAC,CAChF,uBACA;CACE,YAAY;CACZ,SAAS,OAAO;CAChB,OAAO,OAAO,YAAY,OAAO,OAAO,CAAC;AAC3C,CACF,CAAC,CAAC,CAAC;;;;;;;;;;AAWH,IAAa,iBAAb,cAAoC,QAAQ,QAO1C,CAAC,CAAC,qCAAqC,CAAC,CAAC;;CAEzC,OAAgB,YAAyC,MAAM,QAAQ,IAAI,CAAC,CAAC,EAC3E,iBACE,OAAO,QACL,wBAAwB,KAAK,EAC3B,QAAQ,oEACV,CAAC,CACH,EACJ,CAAC;AACH"}

package/dist/durable/WorkerHost.d.mts

@@ -4,7 +4,7 @@ import { r as Principal } from "../Receipt-BAHyigAF.mjs";
 import { t as AgentPolicy } from "../AgentPolicy-BqDoSXO6.mjs";
 import { r as AnyDefinition } from "../Agent-CM6JubNX.mjs";
 import { a as WorkerError, c as WorkerRef, u as WorkerSource } from "../Worker--j87JI__.mjs";
-import { O as PersistedJson, _ as Digest, h as DefinitionDigests, lt as WorkerOrigin, no as SubmissionSnapshot } from "../Records-CV49DgQK.mjs";
+import { O as PersistedJson, _ as Digest, dt as WorkerOrigin, h as DefinitionDigests, to as SubmissionSnapshot } from "../Records-BIiRLqlz.mjs";
 import { Context, Effect, Option, Schema } from "effect";
 declare namespace WorkerHost_d_exports {
   export { WorkerBudgetAuthorizer, WorkerConcurrencyLimit, WorkerConcurrencyResolver, WorkerHostAuthorizationRequest, WorkerHostAuthorizer, WorkerHostConfig, WorkerHostLimits, WorkerPolicyResolver, WorkerPolicySource, WorkerPolicyTarget };

package/dist/engine/AgentRuntime.d.mts

@@ -1,2 +1,2 @@
-import { A as start, C as decodeFinalOutput, D as renderInputPrompt, E as projectCompletionOutput, F as withTerminalDefectEvent, M as stream, N as streamUnknown, O as run, P as streamWithUsageAccountingUnknown, S as ToolCallWaiting, T as projectCompletionFromToolOutput, _ as SubagentDurability, a as AgentResultSchema, b as SubagentDurabilityError, c as AgentSpawner, d as DetachedRun, f as EngineProvidedToolServices, g as SpawnedChildRun, h as SpawnRunOptions, i as AgentResult, j as startUnknown, k as runUnknown, l as AgentSpawnerParent, m as SpawnDelegation, n as AgentChildPending, o as AgentRuntimeFailure, p as RuntimeBinding, r as AgentCompletionProjectionRequirements, s as AgentRuntimeRequirements, u as AgentSpawnerService, v as SubagentDurabilityDurable, w as encodeRunDisposition, x as SubagentDurabilityService, y as SubagentDurabilityEphemeral } from "../AgentRuntime-B64362Id.mjs";
+import { A as start, C as decodeFinalOutput, D as renderInputPrompt, E as projectCompletionOutput, F as withTerminalDefectEvent, M as stream, N as streamUnknown, O as run, P as streamWithUsageAccountingUnknown, S as ToolCallWaiting, T as projectCompletionFromToolOutput, _ as SubagentDurability, a as AgentResultSchema, b as SubagentDurabilityError, c as AgentSpawner, d as DetachedRun, f as EngineProvidedToolServices, g as SpawnedChildRun, h as SpawnRunOptions, i as AgentResult, j as startUnknown, k as runUnknown, l as AgentSpawnerParent, m as SpawnDelegation, n as AgentChildPending, o as AgentRuntimeFailure, p as RuntimeBinding, r as AgentCompletionProjectionRequirements, s as AgentRuntimeRequirements, u as AgentSpawnerService, v as SubagentDurabilityDurable, w as encodeRunDisposition, x as SubagentDurabilityService, y as SubagentDurabilityEphemeral } from "../AgentRuntime-BMzrJos6.mjs";
 export { AgentChildPending, type AgentCompletionProjectionRequirements, type AgentResult, AgentResultSchema, type AgentRuntimeFailure, type AgentRuntimeRequirements, AgentSpawner, type AgentSpawnerParent, type AgentSpawnerService, type DetachedRun, type EngineProvidedToolServices, type RuntimeBinding, type SpawnDelegation, type SpawnRunOptions, type SpawnedChildRun, SubagentDurability, type SubagentDurabilityDurable, type SubagentDurabilityEphemeral, SubagentDurabilityError, type SubagentDurabilityService, ToolCallWaiting, decodeFinalOutput, encodeRunDisposition, projectCompletionFromToolOutput, projectCompletionOutput, renderInputPrompt, run, runUnknown, start, startUnknown, stream, streamUnknown, streamWithUsageAccountingUnknown, withTerminalDefectEvent };

package/dist/engine/AgentRuntime.mjs

@@ -1,2 +1,2 @@
-import { _ as stream, a as SubagentDurability, b as withTerminalDefectEvent, c as decodeFinalOutput, d as projectCompletionOutput, f as renderInputPrompt, g as startUnknown, h as start, i as AgentSpawner, l as encodeRunDisposition, m as runUnknown, n as AgentChildPending, o as SubagentDurabilityError, p as run, r as AgentResultSchema, s as ToolCallWaiting, u as projectCompletionFromToolOutput, v as streamUnknown, y as streamWithUsageAccountingUnknown } from "../AgentRuntime-Cdvqw7l_.mjs";
+import { _ as stream, a as SubagentDurability, b as withTerminalDefectEvent, c as decodeFinalOutput, d as projectCompletionOutput, f as renderInputPrompt, g as startUnknown, h as start, i as AgentSpawner, l as encodeRunDisposition, m as runUnknown, n as AgentChildPending, o as SubagentDurabilityError, p as run, r as AgentResultSchema, s as ToolCallWaiting, u as projectCompletionFromToolOutput, v as streamUnknown, y as streamWithUsageAccountingUnknown } from "../AgentRuntime-BWOnNc0d.mjs";
 export { AgentChildPending, AgentResultSchema, AgentSpawner, SubagentDurability, SubagentDurabilityError, ToolCallWaiting, decodeFinalOutput, encodeRunDisposition, projectCompletionFromToolOutput, projectCompletionOutput, renderInputPrompt, run, runUnknown, start, startUnknown, stream, streamUnknown, streamWithUsageAccountingUnknown, withTerminalDefectEvent };

package/dist/engine/RunOptions.d.mts

@@ -1,2 +1,2 @@
-import { $ as RunTurnResponseCommit, A as RunInputCommand, B as RunSubagentChildIdentity, C as RunContextPreparationPassthrough, D as RunCostEstimateValue, E as RunCostEstimateRequest, G as RunToolAuthorization, H as RunSubagentEstablishRequest, I as RunResumeUsage, J as RunToolAuthorizationRequest, K as RunToolAuthorizationDecision, L as RunResumeUsageSchema, M as RunOptions, N as RunOptionsError, O as RunCostEstimator, P as RunOptionsRequirements, Q as RunTransientContextHook, R as RunSchedulingHook, S as RunContextPreparationError, T as RunCostEstimate, U as RunSubagentHook, V as RunSubagentDigests, W as RunSubagentJoinRequest, X as RunToolFailureObserver, Y as RunToolCallDescriptor, Z as RunToolScheduling, _ as RunBudgetHook, a as ChildEstablishWaiting, at as RunUsageDelta, b as RunContextHook, c as ModelToolFailure, d as ProgrammaticPreflightFailure, et as RunTurnResume, f as ProgrammaticToolFailure, g as RunApprovalRequest, h as RunApprovalHook, i as ChildEstablishStatus, it as RunTurnUsage, j as RunInputHook, k as RunDurabilityHook, l as ModelUsageAccounting, m as RunApprovalDecision, n as ChildEstablishDenied, nt as RunTurnResumeSettledCall, o as CommandDrainPolicy, ot as ToolFailureObservation, p as ResolvedModelCall, q as RunToolAuthorizationHook, r as ChildEstablishSettled, rt as RunTurnResumeSettledCallSchema, s as CurrentToolFailureObserver, st as toolFailureObserverLayer, t as AgentUpdateAcceptance, tt as RunTurnResumeCall, u as PreparedRunContext, v as RunBufferLimits, w as RunContextRequest, x as RunContextPreparation, y as RunCompactionCommit, z as RunSchedulingOverride } from "../RunOptions-Clj8cLsp.mjs";
+import { $ as RunTurnResponseCommit, A as RunInputCommand, B as RunSubagentChildIdentity, C as RunContextPreparationPassthrough, D as RunCostEstimateValue, E as RunCostEstimateRequest, G as RunToolAuthorization, H as RunSubagentEstablishRequest, I as RunResumeUsage, J as RunToolAuthorizationRequest, K as RunToolAuthorizationDecision, L as RunResumeUsageSchema, M as RunOptions, N as RunOptionsError, O as RunCostEstimator, P as RunOptionsRequirements, Q as RunTransientContextHook, R as RunSchedulingHook, S as RunContextPreparationError, T as RunCostEstimate, U as RunSubagentHook, V as RunSubagentDigests, W as RunSubagentJoinRequest, X as RunToolFailureObserver, Y as RunToolCallDescriptor, Z as RunToolScheduling, _ as RunBudgetHook, a as ChildEstablishWaiting, at as RunUsageDelta, b as RunContextHook, c as ModelToolFailure, d as ProgrammaticPreflightFailure, et as RunTurnResume, f as ProgrammaticToolFailure, g as RunApprovalRequest, h as RunApprovalHook, i as ChildEstablishStatus, it as RunTurnUsage, j as RunInputHook, k as RunDurabilityHook, l as ModelUsageAccounting, m as RunApprovalDecision, n as ChildEstablishDenied, nt as RunTurnResumeSettledCall, o as CommandDrainPolicy, ot as ToolFailureObservation, p as ResolvedModelCall, q as RunToolAuthorizationHook, r as ChildEstablishSettled, rt as RunTurnResumeSettledCallSchema, s as CurrentToolFailureObserver, st as toolFailureObserverLayer, t as AgentUpdateAcceptance, tt as RunTurnResumeCall, u as PreparedRunContext, v as RunBufferLimits, w as RunContextRequest, x as RunContextPreparation, y as RunCompactionCommit, z as RunSchedulingOverride } from "../RunOptions-Bruk54SE.mjs";
 export { AgentUpdateAcceptance, ChildEstablishDenied, ChildEstablishSettled, ChildEstablishStatus, ChildEstablishWaiting, CommandDrainPolicy, CurrentToolFailureObserver, ModelToolFailure, ModelUsageAccounting, PreparedRunContext, ProgrammaticPreflightFailure, ProgrammaticToolFailure, ResolvedModelCall, RunApprovalDecision, RunApprovalHook, RunApprovalRequest, RunBudgetHook, RunBufferLimits, RunCompactionCommit, RunContextHook, RunContextPreparation, RunContextPreparationError, RunContextPreparationPassthrough, RunContextRequest, RunCostEstimate, RunCostEstimateRequest, RunCostEstimateValue, RunCostEstimator, RunDurabilityHook, RunInputCommand, RunInputHook, RunOptions, RunOptionsError, RunOptionsRequirements, RunResumeUsage, RunResumeUsageSchema, RunSchedulingHook, RunSchedulingOverride, RunSubagentChildIdentity, RunSubagentDigests, RunSubagentEstablishRequest, RunSubagentHook, RunSubagentJoinRequest, RunToolAuthorization, RunToolAuthorizationDecision, RunToolAuthorizationHook, RunToolAuthorizationRequest, RunToolCallDescriptor, RunToolFailureObserver, RunToolScheduling, RunTransientContextHook, RunTurnResponseCommit, RunTurnResume, RunTurnResumeCall, RunTurnResumeSettledCall, RunTurnResumeSettledCallSchema, RunTurnUsage, RunUsageDelta, ToolFailureObservation, toolFailureObserverLayer };