Module thread 

Shared agent-thread contracts. Persistence and execution belong to the trusted host; these records and read handles do not grant tool authority.

Modules

artifacts

Exact, host-owned artifact receipts for one actor invocation. Structured output is retained before model-history truncation and is not parsed from assistant prose or a later conversation’s history.

control

Governed model-tool boundary for the trusted thread host. This module owns argument/identity checks and read-only waits, not model execution. A host implementation is mandatory; there is no fake or no-op execution fallback.

events

Pure lifecycle projection of confirmed persistence results. The trusted host calls this after committing a transition, then publishes through its run sink.

kernel

Captured entry into the shared run kernel for the trusted thread scheduler. Implements the trusted execution host over those exact resources. The thread service owns policy intersection, admission reservations and durable writes.

limits

Tree-wide host admission. One lock checks and reserves every limit together; a reservation that never reaches persistence is rolled back on drop. Once persistence starts, an unknown write outcome retains lifetime capacity.

messages

Typed inter-agent envelopes. Identity is metadata, never a prompt prefix.

policy_intersection

Host-owned delegation policy. A child receives a frozen subset of its parent’s authority, never a fresh resolution against the global universe.

service

Trusted, root-scoped thread host. The host owns scheduling and persistence; model execution is supplied by the shared run kernel, never another LLM loop.

spawn

Delegation input and history forking. Parent system prompts, tool traces, and intermediate assistant messages never become child conversational authority.

Structs

AgentEdge

Parent-to-child edge stored atomically with the new thread by the host.

AgentHandle

Read-only subscription to a host-published thread record. Dropping a waiter never cancels execution; cancellation is a separate governed host operation.

AgentThread

Persisted lineage and latest-turn state. Owner/root identity comes from the root host context and is inherited unchanged by every child.

RemoteThreadBinding

Enums

AgentThreadResult

Durable turn result. Lifecycle events must project the variant only, never serialize this content-bearing result or the entire thread record.

AgentThreadStatus

State of the most recent turn on an agent thread.

AgentWaitError

A closed publisher is not evidence that a thread completed successfully.

ThreadRecordError

Invalid stored or proposed lineage is not repaired by guessing an owner.

Functions

validate_task_name

Validate a single canonical task-path segment without excluding Unicode names.