@agentproto/runtime 2.2.0 → 2.4.0

package/dist/index.d.ts

@@ -1659,7 +1659,7 @@ declare function createTaskLedger(opts: {
  * and session_monitor MCP tool (long-poll multiplexed).
  */
 
-type SessionEventType = "session:turn-end" | "session:awaiting-input" | "session:permission-request" | "session:permission-resolved" | "session:exited" | "session:reaped" | "session:resumed" | "session:spawned" | "session:command-done" | "session:model-changed" | "session:config-changed" | "session:renamed" | "policy:passed" | "policy:failed" | "policy:commit-ready" | "policy:committed" | "cron:fired" | "cron:succeeded" | "cron:failed" | "activity:changed" | "task:changed";
+type SessionEventType = "session:turn-end" | "session:awaiting-input" | "session:permission-request" | "session:permission-resolved" | "session:exited" | "session:reaped" | "session:stalled" | "session:stall-cleared" | "session:resumed" | "session:spawned" | "session:command-done" | "session:model-changed" | "session:config-changed" | "session:renamed" | "policy:passed" | "policy:failed" | "policy:commit-ready" | "policy:committed" | "cron:fired" | "cron:succeeded" | "cron:failed" | "activity:changed" | "task:changed";
 /**
  * Fixed severity vocabulary for a judge-gate finding (WP-D). Deliberately
  * small and fixed so `policy_status` output is comparable across different
@@ -1806,6 +1806,47 @@ interface SessionReapedEvent {
     label?: string;
     ts: string;
 }
+/**
+ * Emitted by the turn-liveness watchdog (`runStallWatchdogPass`) when a
+ * mid-turn agent-cli session's adapter stream has gone silent past the
+ * configured threshold: `busy:true`, not legitimately `blockedOn` a
+ * subagent/command, and no `lastActivityAt` traffic since. The target
+ * failure mode is a DEAD adapter stream — zero frames mid-turn, e.g. a
+ * network drop — that otherwise leaves the row `status:"running"`,
+ * `lastError:null`, indistinguishable from healthy long work except by
+ * manually comparing `lastActivityAt` to the clock. Detection + signal
+ * ONLY: nothing here kills or restarts the session (unlike `session:reaped`
+ * / crash-detect's `session:exited`). `stalledSinceMs` is the epoch ms of
+ * the last real activity that was observed before the trip — a consumer
+ * computes "silent for" as `Date.now() - stalledSinceMs`. Same bus
+ * distribution as every other lifecycle event (`session_events_poll`, the
+ * webhook notifier, the routine engine, `session_monitor`). Paired with
+ * `session:stall-cleared` when the flag is later cleared.
+ */
+interface SessionStalledEvent {
+    type: "session:stalled";
+    sessionId: string;
+    stalledSinceMs: number;
+    label?: string;
+    ts: string;
+}
+/**
+ * Emitted when a session's `stalledSinceMs` flag (see {@link
+ * SessionStalledEvent}) is cleared — by new adapter activity
+ * (`pulseActivity`), the next turn starting, or the turn's own `finally`
+ * (busy flips false, so "mid-turn and silent" no longer holds either way).
+ * Does NOT imply the earlier trip was a false alarm — recovery from a
+ * genuinely dead stream normally happens via the turn eventually erroring
+ * out or being killed, not via a resumed stream; a clear immediately
+ * followed by fresh `lastActivityAt` traffic is the "it wasn't actually
+ * dead" case. Same bus distribution as every other lifecycle event.
+ */
+interface SessionStallClearedEvent {
+    type: "session:stall-cleared";
+    sessionId: string;
+    label?: string;
+    ts: string;
+}
 /**
  * Emitted when a dead agent-cli row is brought back IN PLACE — same session
  * id, same descriptor — by the lazy resume-on-prompt path (`maybeResumeAgent`)
@@ -2056,7 +2097,7 @@ interface TaskChangedEvent {
     sessionId?: string;
     ts: string;
 }
-type SessionEvent = SessionTurnEndEvent | SessionAwaitingInputEvent | SessionPermissionRequestEvent | SessionPermissionResolvedEvent | SessionExitedEvent | SessionReapedEvent | SessionResumedEvent | SessionSpawnedEvent | SessionCommandDoneEvent | SessionModelChangedEvent | SessionConfigChangedEvent | SessionRenamedEvent | PolicyPassedEvent | PolicyFailedEvent | PolicyCommitReadyEvent | PolicyCommittedEvent | CronFiredEvent | CronSucceededEvent | CronFailedEvent | ActivityChangedEvent | TaskChangedEvent;
+type SessionEvent = SessionTurnEndEvent | SessionAwaitingInputEvent | SessionPermissionRequestEvent | SessionPermissionResolvedEvent | SessionExitedEvent | SessionReapedEvent | SessionStalledEvent | SessionStallClearedEvent | SessionResumedEvent | SessionSpawnedEvent | SessionCommandDoneEvent | SessionModelChangedEvent | SessionConfigChangedEvent | SessionRenamedEvent | PolicyPassedEvent | PolicyFailedEvent | PolicyCommitReadyEvent | PolicyCommittedEvent | CronFiredEvent | CronSucceededEvent | CronFailedEvent | ActivityChangedEvent | TaskChangedEvent;
 interface SessionEventBus {
     emit(ev: SessionEvent): void;
     /** Subscribe to a specific event type. Returns an unsubscribe fn. */
@@ -3753,8 +3794,14 @@ interface AuthOptions {
  */
 
 interface SessionObserver {
-    /** Record the outgoing message that opens a new turn. */
-    recordPrompt(sessionId: string, message: unknown): void;
+    /** Record the outgoing message that opens a new turn. `opts.source`, when
+     *  set, is the prompt's provenance — `agent:<sessionId>` for a prompt
+     *  injected by another session (`agent_prompt` from a supervisor), absent
+     *  for a human operator — so a transcript view can attribute the turn to
+     *  its real author instead of "you". */
+    recordPrompt(sessionId: string, message: unknown, opts?: {
+        source?: string;
+    }): void;
     /** Record one structured stream event (text-delta, tool-call, usage_update, …). */
     recordEvent(sessionId: string, evt: AgentStreamEvent): void;
     /** Record the durable turn-boundary / exit usage snapshot. */
@@ -3995,6 +4042,16 @@ interface AgentStreamEvent {
      *  but no `cost`). */
     tokensIn?: number;
     tokensOut?: number;
+    /** "permission-resolved" outcome for the "agent-prompt" it answers (same
+     *  `toolCallId`) — mirrors `session:permission-resolved`'s `decision` so
+     *  the durable transcript can tell an answered ask from a still-pending
+     *  one. Not an ACP `StreamEvent` kind (synthesized by the registry, same
+     *  as "notice"/"turn-end" synthetics) — see registerPendingPermission's
+     *  docblock for the "agent-prompt" ask this resolves. */
+    decision?: "approve" | "deny" | "cancelled";
+    /** "permission-resolved" chosen option id, when the driver's offered
+     *  options included one (e.g. ACP's `allow_always`). */
+    optionId?: string;
 }
 /**
  * Env vars the registry injects into every process it spawns on a session's
@@ -4019,6 +4076,14 @@ interface AgentStreamEvent {
  * assign-last rule is what makes that true by construction rather than by
  * accident, and is what guarantees a child spawned from inside a session
  * gets its OWN id rather than inheriting its parent's.
+ *
+ * `PARENT_SESSION_ID_ENV` is the third var, injected by `session-spawn.ts`
+ * only (agent spawns, and only when the spawn resolved a parent): the
+ * recorded `parentSessionId` lineage, so a child agent can know WHO spawned
+ * it without a registry round-trip — the discovery half of the child→parent
+ * report-back channel (`message_parent` is the delivery half). Same
+ * assign-last/no-forgery rule as the other two: it mirrors the descriptor's
+ * own `parentSessionId` field, never anything caller- or env-inherited.
  */
 declare const SESSION_ID_ENV = "AGENTPROTO_SESSION_ID";
 declare const WORKSPACE_SLUG_ENV = "AGENTPROTO_WORKSPACE_SLUG";
@@ -4126,6 +4191,22 @@ interface SessionDescriptor {
      *  every read since it's a live OS query, stale the instant it's
      *  written to disk. */
     processAlive?: boolean;
+    /** Count of live supervisors currently blocked waiting on this session —
+     *  HTTP `GET /sessions/:id/wait` long-polls and `session_monitor`
+     *  subscriptions, both via `monitorSessionWait` (#session-visibility).
+     *  Ephemeral, in-memory, stamped at read time (list()/get()) from the
+     *  registry's waiter counter — NEVER persisted (a waiter can't survive a
+     *  daemon restart). 0/absent ⇒ nothing is watching. Lets a UI mark a
+     *  session "supervised — notify on turn-end". */
+    watchers?: number;
+    /** Count of DESCENDANT sessions (children, grandchildren, …) currently
+     *  mid-turn, derived at read time from the `parentSessionId` lineage
+     *  (#session-visibility, subtree rollup). Lets a UI show an idle parent that
+     *  is really "delegating" — waiting on its own busy subtree — distinctly
+     *  from a genuinely quiet session. Ephemeral, never persisted; 0/absent ⇒ no
+     *  busy descendants. NOTE: in-process subagents a harness runs itself are
+     *  invisible to the daemon between turns, so they don't count here. */
+    childrenBusy?: number;
     /** Short human-readable string describing the most recent automatic
      *  failure — currently only stamped by `markCrashed` (e.g. "adapter
      *  process gone (pid 1234) — session crashed"). Not a stack trace or raw
@@ -4134,6 +4215,25 @@ interface SessionDescriptor {
     /** ISO 8601 timestamp of the crash-detect sweep that flipped this row to
      *  `endedReason:"crashed"`. Absent for every other terminal path. */
     crashedAt?: string;
+    /** Epoch ms of the last known-good `lastActivityAt` reading at the moment
+     *  the turn-liveness watchdog (`runStallWatchdogPass`) decided this row's
+     *  in-flight turn had gone silent for too long: `busy:true`,
+     *  `blockedOn` undefined (not legitimately waiting on a subagent/command),
+     *  and no adapter traffic since. Distinct from a slow tool call — the
+     *  target failure mode is a dead adapter stream that will never emit
+     *  another frame (a network drop, a hung child), the case where `status`
+     *  stays `"running"`, `lastError` stays null, and nothing else
+     *  distinguishes it from healthy long work.
+     *
+     *  Stamped by `markStalled` (never by `list()`/read time — this is a
+     *  discrete trip, not a recomputed projection), and CLEARED by
+     *  `clearStalled` the moment ANY new activity is observed — the next
+     *  `pulseActivity`, the next turn start, or the turn's own `finally`
+     *  (busy flips false, so the mid-turn claim no longer holds). Absent
+     *  (never a stale value) whenever the session isn't currently flagged
+     *  stalled. Detection + signal only — nothing here kills or restarts the
+     *  session. */
+    stalledSinceMs?: number;
     /** DERIVED, read-time only (never persisted — stripped by `snapshotRows`,
      *  stamped by `stampInterrupted` in list()/get()/findByIdOrName). True when
      *  this session died with a turn in flight under a daemon restart —
@@ -4643,6 +4743,12 @@ interface SessionSummary {
     lastOutputAt?: string;
     lastActivityAt?: string;
     processAlive?: boolean;
+    /** Live supervisor waiter count (#session-visibility) — see
+     *  `SessionDescriptor.watchers`. Ephemeral, stamped at read time. */
+    watchers?: number;
+    /** Busy-descendant count (#session-visibility, subtree rollup) — see
+     *  `SessionDescriptor.childrenBusy`. Drives the "delegating" row state. */
+    childrenBusy?: number;
     label?: string;
     title?: string;
     renamedByUser?: boolean;
@@ -4670,6 +4776,7 @@ interface SessionSummary {
     turnsCompleted?: number;
     busy?: boolean;
     blockedOn?: "subagent" | "command";
+    stalledSinceMs?: number;
     origin?: string;
     parentSessionId?: string;
     depth?: number;
@@ -4943,6 +5050,7 @@ interface SessionsRegistry {
      *  the previous mid-turn rejection byte-for-byte. */
     sendPrompt(id: string, message: unknown, opts?: {
         interrupt?: boolean;
+        source?: string;
     }): Promise<void>;
     /** Fire-and-forget variant of `sendPrompt` for the TURN ITSELF only.
      *  Admission (resume attempt + the missing/wrong-kind/dead/busy
@@ -4962,8 +5070,12 @@ interface SessionsRegistry {
      *  prompt is admitted + fired on the SAME live session. Ignored
      *  (identical to the default) when the session is idle. Omitted or
      *  `false` reproduces today's mid-turn rejection byte-for-byte. */
+    /** `opts.source` on either prompt verb is the turn's provenance
+     *  (`agent:<sessionId>` when another session injected it — see
+     *  `SessionObserver.recordPrompt`); recording-only, never behavioral. */
     enqueuePrompt(id: string, message: unknown, opts?: {
         interrupt?: boolean;
+        source?: string;
     }): Promise<void>;
     /** Eagerly resume ONE dead-but-resumable agent-cli session IN PLACE,
      *  WITHOUT a prompt — the boot-time counterpart to the lazy resume that
@@ -5104,6 +5216,15 @@ interface SessionsRegistry {
         total: number;
     };
     get(id: string): SessionDescriptor | undefined;
+    /** Register a live waiter on a session (#session-visibility) — bumps the
+     *  ephemeral `watchers` counter surfaced on the descriptor at read time.
+     *  Called by `monitorSessionWait` when a `/sessions/:id/wait` long-poll or
+     *  `session_monitor` subscription actually blocks. A no-op for an unknown id
+     *  is fine (the wait may outlive the row). */
+    incWatchers(id: string): void;
+    /** Balance an {@link incWatchers} when the waiter resolves or times out.
+     *  Clamps at 0 and drops the map entry at zero so the counter can't leak. */
+    decWatchers(id: string): void;
     /** Archive a TERMINAL-status session (exited/killed/error) — sets
      *  `archived: true` and persists. Pure housekeeping: hides the row from
      *  `list()`'s default view, nothing else. Refuses (throws) a still-alive
@@ -5236,6 +5357,33 @@ interface SessionsRegistry {
      *  an already-terminal or non-agent-cli row. Returns true iff a row was
      *  actually marked crashed. */
     markCrashed(id: string): boolean;
+    /** Flip a LIVE, mid-turn agent-cli row to `stalledSinceMs:<ts>` — the
+     *  primitive the turn-liveness watchdog (`runStallWatchdogPass`) drives on
+     *  a periodic sweep when a turn's adapter stream has gone silent past the
+     *  threshold. Unlike `markCrashed`/`reapIdle`, this NEVER changes `status`,
+     *  kills anything, or clears the live binding — it's a pure signal
+     *  (detection + surfacing only), so the session stays exactly as running
+     *  as it was. Emits `session:stalled`.
+     *
+     *  Purely mechanical: the caller (the sweep) owns the silence/threshold
+     *  policy. This method only guards the invariants a stall-mark must never
+     *  violate — it refuses (returns false, no-op) a row that isn't a live
+     *  (`running`) agent-cli session, isn't currently `busy` (mid-turn), is
+     *  legitimately `blockedOn` a subagent/command, or is already flagged
+     *  stalled (idempotent — the sweep's own candidate filter already excludes
+     *  these, this is the second line of defense for any other caller).
+     *  Returns true iff the row was actually flagged. */
+    markStalled(id: string, stalledSinceMs: number): boolean;
+    /** Clear a row's `stalledSinceMs` flag — called the instant ANY activity
+     *  disproves the stall claim: `pulseActivity` (new adapter traffic), the
+     *  next turn's start, and the turn's own `finally` (busy flips false, so
+     *  "mid-turn and silent" no longer holds either way). Emits
+     *  `session:stall-cleared` — but ONLY when the row was actually flagged;
+     *  a session that was never stalled clearing on every turn boundary would
+     *  spam the bus with a no-op event on every single turn. Returns true iff
+     *  a flag was actually cleared; false (no-op, no event) for an unknown id
+     *  or a row that wasn't flagged. */
+    clearStalled(id: string): boolean;
     /** Whether an in-place resume is currently IN FLIGHT for this session
      *  (`rt.resumePromise` set) — the restart-scheduler's periodic sweep
      *  (`runRestartSweepPass`, PR-2) consults this to skip a row a concurrent
@@ -6386,6 +6534,103 @@ declare function runCrashDetectPass(opts: {
     isServed?: (desc: SessionDescriptor) => boolean;
 }): CrashDetectSummary;
 
+/**
+ * Turn-liveness watchdog (turn-liveness-watchdog chantier).
+ *
+ * Agent-cli sessions report `status:"running"` for the entire life of a
+ * turn, and nothing else observes the adapter's event stream directly. When
+ * that stream dies mid-turn — a network drop, a hung child, zero frames
+ * ever again — nothing throws: there's no RPC failure to catch, just
+ * silence. The descriptor keeps lying `status:"running"`, `lastError:null`,
+ * `blockedOn:undefined` — identical to a session doing genuine, healthy
+ * long work. A supervisor only catches it by manually comparing
+ * `lastActivityAt` to the clock (the live incident this chantier exists
+ * for: `sess_0b94542f`, `lastActivityAt` frozen 36 minutes into a turn with
+ * no other signal).
+ *
+ * This pass sweeps the registry, finds agent-cli sessions that are BUSY
+ * (mid-turn), NOT legitimately `blockedOn` a subagent/command (a real
+ * long-running tool call is expected to go quiet — that's not the failure
+ * mode this catches), and silent past a threshold, and FLAGS them
+ * (`registry.markStalled`): stamps `stalledSinceMs` and emits
+ * `session:stalled` — same shape discipline as `crash-reaper.ts` /
+ * `idle-reaper.ts`, except conservative by design: a `blockedOn` row is
+ * NEVER a candidate, no matter how long it's been silent, because a slow
+ * build and a dead stream are indistinguishable from `lastActivityAt`
+ * alone once a tool call is legitimately in flight. The predicate is
+ * deliberately biased toward missing a genuinely-dead-but-blocked stream
+ * over false-positiving a healthy long tool call.
+ *
+ * DETECTION AND SURFACING ONLY. No auto-kill, no auto-restart — those are
+ * later work, if ever; see AGENTS.md's "definition of done" for why this
+ * pass stops at a signal.
+ *
+ * The trip/clear ACTIONS and their invariants (agent-cli-only, running-only,
+ * busy-only, unblocked-only, idempotent, emit `session:stalled` /
+ * `session:stall-cleared`) live behind `registry.markStalled` /
+ * `registry.clearStalled`. This module owns only the POLICY: which rows have
+ * gone silent long enough mid-turn to be worth flagging. Clearing on
+ * recovery is event-driven (pulseActivity / turn start / turn finally in
+ * sessions.ts), NOT this sweep's job — the sweep only ever adds the flag,
+ * it never removes one, so a row already flagged is simply excluded from
+ * the next sweep's candidate set until something clears it.
+ *
+ * OFF by default in the sense that a non-positive / undefined
+ * `turnStallAfterMs` disables the pass entirely (it returns `enabled:false`
+ * and never touches a row) — same opt-in shape as crash-detect and
+ * idle-reap. Like crash-detect, the gateway wires a sane default threshold
+ * so this is DEFAULT-ON in practice (see index.ts): detection is
+ * non-destructive observability, so the bar for shipping it enabled is
+ * lower than for anything that touches a live process.
+ */
+
+/** Tally of one stall-watchdog sweep, for the periodic log line + tests. */
+interface StallWatchdogSummary {
+    /** Whether the pass actually ran. False when `turnStallAfterMs` is
+     *  non-positive/undefined (the knob is off) — the pass short-circuits and
+     *  every count is 0. Distinguishes "ran, found nothing stalled" from
+     *  "disabled". */
+    enabled: boolean;
+    /** Rows that matched the stall policy — the sweep's candidate set. */
+    candidates: number;
+    /** Rows actually flagged stalled (`markStalled` returned true). */
+    stalled: number;
+    /** The flagged ids, for the sweep's summary log line. */
+    ids: string[];
+}
+/** The slice of the sessions registry the watchdog needs: enumerate every
+ *  row (including archived, for parity with idle-reaper's / crash-detect's
+ *  scan shape; archived rows are never `running` anyway so the predicate
+ *  excludes them regardless) and flag one stalled by id. Structural so the
+ *  pass is a pure, unit-testable function decoupled from the full registry
+ *  surface. */
+interface StallWatchdogRegistry {
+    list(opts?: {
+        includeArchived?: boolean;
+    }): readonly SessionDescriptor[];
+    markStalled(id: string, stalledSinceMs: number): boolean;
+}
+/**
+ * Run one stall-watchdog sweep. Pure over the injected `now` (ms epoch), so
+ * a test pins a fake clock and asserts deterministically. Returns the
+ * tally; the caller (the gateway's periodic ticker) turns it into a
+ * one-line log per sweep.
+ */
+declare function runStallWatchdogPass(opts: {
+    registry: StallWatchdogRegistry;
+    /** Flag agent-cli sessions mid-turn and silent longer than this many ms.
+     *  Non-positive / undefined ⇒ the pass is DISABLED. (The gateway wires a
+     *  sane default so this is default-on in practice — see index.ts.) */
+    turnStallAfterMs: number | undefined;
+    /** Injected clock (ms since epoch). Defaults to `Date.now`. */
+    now?: () => number;
+    /** Cross-process gate (mirrors idle-reaper's / crash-detect's §5): with
+     *  two daemons sharing the workspace buckets, each sweeps only rows for
+     *  the workspace IT serves. Return false to exclude a row. Omitted ⇒
+     *  every row is served. */
+    isServed?: (desc: SessionDescriptor) => boolean;
+}): StallWatchdogSummary;
+
 /**
  * Turns a raw tool-call name + args (and its eventual result) into a short,
  * human-readable line for ring-buffer / CLI / transcript rendering. Without
@@ -7495,6 +7740,17 @@ interface CreateGatewayOptions {
      *  the sweep never runs, so a scheduled `nextRestartAt` sits inert.
      *  Surfaced in `daemon_health` / `GET /health`. */
     restartSweepIntervalMs?: number;
+    /** Turn-liveness watchdog threshold in ms (turn-liveness-watchdog
+     *  chantier). Mirrors the `daemon.turnStallAfterMs` config knob; the CLI
+     *  resolves it (env > config > a sane default — DEFAULT ON, same shape as
+     *  `crashDetectIntervalMs`) and passes it here. The gateway starts a
+     *  periodic sweep that flags a BUSY agent-cli session mid-turn, not
+     *  legitimately `blockedOn` a subagent/command, and silent past this
+     *  threshold: stamps `stalledSinceMs` and emits `session:stalled`
+     *  (`registry.markStalled`, driven by `runStallWatchdogPass`). Non-positive
+     *  ⇒ the sweep never runs. Detects only; never kills or restarts. Surfaced
+     *  in `daemon_health` / `GET /health`. */
+    turnStallAfterMs?: number;
     /**
      * Resolves a heartbeat-runnable agent from its workspace id.
      * Required for HEARTBEAT.md to do anything; without it ticks emit
@@ -7729,4 +7985,4 @@ interface GatewayHandle {
  */
 declare function createGateway(opts: CreateGatewayOptions): Promise<GatewayHandle>;
 
-export { type ActivityKind, type ActivityListFilter, type ActivityPolicyLister, type ActivityProjector, type ActivityProjectorRegistry, type ActivityProjectorSession, type ActivityRecord, type ActivitySource, type ActivityState, type ActivityWaitingOn, type ActivityWorkflowLister, AdapterAuthDescriptor, type AdapterCapabilitiesLister, type AdapterInstallResult, type AdapterListEntry, type AgentAdapterInstaller, type AgentAdapterLister, type AgentAdapterResolver, type AgentSessionLike, type AgentStreamEvent, type AnthropicReaderConfig, AnthropicRemainingQuotaReader, type AttachPolicyInput, type AttachSandboxOpts, type AttachSandboxResult, AuthMethod, BUCKETS_ROOT, type BrowserAdapterHandle, type BrowserAdapterInfo, type BrowserAdapterLister, type BrowserAdapterResolver, BuildHeartbeatAgent, CanonicalPosture, type CatalogModelsLister, CatalogModelsQuery, CatalogModelsResponse, type CatalogProviderModel, type CatalogProviderModelsQuery, type CatalogProviderModelsResponse, type CatalogProviderPricing, type ClaudeNativeRef, type CommitSpec, type CompletionPolicySupervisor, ContextProfile, type ConversationIndexRecord, type ConversationNativeRef, type CostBudgetDecision, type CrashDetectSummary, type CrashReaperRegistry, type CreateGatewayOptions, type CreateOfferInput, type CreatedOffer, DEFAULT_BUCKET, DEFAULT_ORCHESTRATOR_TOOLS, DEFAULT_WORKTREE_ISOLATION, DeclaredAdapterOption, type DeclaredAdapterPreset, type EagerResumeFailReason, type EagerResumeOutcome, type EagerResumeSkipReason, type EagerResumeSummary, EffortLevel, type GateSpec, type GatewayHandle, type HermesNativeRef, INBOUND_PROVIDERS, type IdleReapSummary, type IdleReaperRegistry, type InboundEndpoint, type InboundEndpointStore, type InboundEndpointStoreOptions, type InboundEnqueuePrompt, type InboundIsSessionAlive, type InboundMessage, type InboundProvider, type InboundRestartSession, type InboundRouteMode, type InboundRouterDeps, type InboundRouterLog, type InboundSpawnForContact, type InboundWatcher, type JudgeGateSpec, LEGACY_SESSIONS_FILE, type LocatedConversation, type LocatedConversationByPath, type McpCredentialDeps, type MigrationMarker, type NormalizeInboundResult, type OnFailSpec, type OpenPrResolver, type OrchestratorGatewayDeps, type OrchestratorInjection, type OrchestratorInjector, type OrchestratorInjectorDeps, type OrchestratorMcpServerFactory, type OrchestratorScope, type OrphanReaperRegistry, PAIRINGS_VERSION, POSTURE_NATIVE_ALIASES, POSTURE_PREAMBLES, type PairingChannelContext, type PairingChannelHandle, type PairingChannelMode, type PairingRecord, type PairingRegistry, type PairingRegistryDeps, type PendingPermission, type PermissionRespondInput, type PermissionRespondResult, type PolicyRunState, type PolicyRunStatus, Posture, type PostureResolution, type PrResolvedState, type PrStateResolver, type PresetInfo, type PricingResolver, type QuotaReadableProfile, type QuotaStoreFile, type QuotaStoreOptions, type ReconnectLogGate, type RegisterBrowserInput, type RegisterPairingToolsOptions, type RegisterSessionInput, type RemainingQuota, type RemainingQuotaReader, type ResolveNativeLinkInput, ResolvedAuthSpec, ResumeDisabledError, type RouteAwareLaunchConfig, type RouteAwareLaunchConfigInput, RouteSpec, type RuntimeMeta, SESSION_ID_ENV, type SandboxAdapterInfo, type SandboxConnectionDescriptor, type SandboxProviderCapabilities, type SandboxProviderHandle, type SandboxProviderLister, type SandboxProviderResolver, type ScopeTokenRegistry, SessionConfig, type SessionDescriptor, type SessionKind, type SessionObserver, type SessionSnapshots, type SessionStatus, type SessionUsage, type SessionWaitEvent, type SessionWaitResult, type SessionsRegistry, type ShellGateSpec, type SpawnAgentInput, type SpawnSessionInput, type StoredProfileQuota, TASK_STATUSES, type TaskCaller, type TaskChangedEvent, type TaskClaimInput, type TaskCreateInput, type TaskGateOutcome, type TaskGateRunner, type TaskLedger, type TaskLedgerRegistry, type TaskLedgerSessionSlice, type TaskListFilter, type TaskRecord, type TaskStatus, type TaskUpdateInput, type TaskVerification, type TaskVerifySupervisor, type TaskWriteResult, type TokenPricing, type TransmitterBinding, type TransmitterBindingStore, type TunnelDescriptor, type TunnelProvider, type TunnelStatus, type UsageBucket, type UsageComputeInput, type UsageRollup, type UsageSnapshotRecord, type UsageSource, WORKSPACE_SLUG_ENV, WORKTREE_ISOLATION_ENV, type WatcherDescriptor, type WatcherStartInput, WorkspaceFs, type WorktreeDecision, type WorktreeField, type WorktreeGcClass, type WorktreeGcOutcomeView, type WorktreeGcPlanEntryView, type WorktreeGcReclaimReason, type WorktreeGcResult, type WorktreeGcRunInput, type WorktreeGcRunner, WorktreeIsolationMode, type WorktreeProvisionOutcome, type WorktreeProvisionRequest, type WorktreeProvisioner, type WorktreeRequest, type WorktreeStatusLister, type WorktreeStatusView, activityCounts, appendConversationRecord, attachSandbox, bucketDir, bucketSessionsFile, bucketTranscriptDir, buildCatalogProviderModels, buildMcpConfigSnippet, buildRouteAwareLaunchConfig, canonicalForModeId, claudeProjectSlug, composeSessionObservers, conversationIndexPath, createActivityProjector, createFileStepCache, createGateway, createInboundEndpointStore, createOrchestratorInjector, createOrchestratorMcpServerFactory, createPairingRegistry, createPrProvenanceReconciler, createReconnectLogGate, createScopeTokenRegistry, createSupervisorTaskGateRunner, createTaskLedger, daemonRegistryDir, decideWorktreeIsolation, declaredPresetToProviderPreset, deriveSessionUsage, enrichRollupWithProviderQuota, enrichWithRemainingQuota, evaluateCostBudget, filterActivities, findConversationRecord, findNativeMode, formatToolCall, formatToolResult, getMcpCredentialDeps, isAgentCliAuthConfigured, isClosedTaskStatus, isSafeBucketSlug, isTerminalActivityState, listBuckets, listPresets, loadQuotaStore, loadWorktreeIsolation, locateConversationByNativePath, locateConversationBySessionId, makeBrowserAdapterLister, migrateLegacySessionsFile, migrationMarkerPath, monitorPolicyWait, monitorSessionWait, narrowOrchestratorTools, normalizeInbound, normalizeModeId, normalizeWorktreeField, parseAnthropicRateLimitHeaders, parseTaskStatus, parseWindow, parseWorktreeIsolationMode, policyToActivities, policyWatchesSession, prToActivities, projectSessionUsage, readConversationIndex, readDaemonRegistry, readProfileQuota, readRegisteredSlugs, readRuntimeMeta, readUsageSnapshots, reapOrphanedDescendants, recordProfileQuota, registerBuiltinRoutes, registerPairingTools, registerSandboxAttachTool, resolveBucketSlug, resolveNativeLink, resolvePosture, rollupUsage, runCrashDetectPass, runEagerResumePass, runIdleReapPass, setMcpCredentialDeps, sweepStaleDaemonRegistry, sweepStaleRuntimeMetas, toWorktreeStatusView, turnToActivities, unlinkDaemonRegistryEntry, unlinkRuntimeMeta, verifyInboundSignature, workflowToActivities, writeDaemonRegistryEntry };
+export { type ActivityKind, type ActivityListFilter, type ActivityPolicyLister, type ActivityProjector, type ActivityProjectorRegistry, type ActivityProjectorSession, type ActivityRecord, type ActivitySource, type ActivityState, type ActivityWaitingOn, type ActivityWorkflowLister, AdapterAuthDescriptor, type AdapterCapabilitiesLister, type AdapterInstallResult, type AdapterListEntry, type AgentAdapterInstaller, type AgentAdapterLister, type AgentAdapterResolver, type AgentSessionLike, type AgentStreamEvent, type AnthropicReaderConfig, AnthropicRemainingQuotaReader, type AttachPolicyInput, type AttachSandboxOpts, type AttachSandboxResult, AuthMethod, BUCKETS_ROOT, type BrowserAdapterHandle, type BrowserAdapterInfo, type BrowserAdapterLister, type BrowserAdapterResolver, BuildHeartbeatAgent, CanonicalPosture, type CatalogModelsLister, CatalogModelsQuery, CatalogModelsResponse, type CatalogProviderModel, type CatalogProviderModelsQuery, type CatalogProviderModelsResponse, type CatalogProviderPricing, type ClaudeNativeRef, type CommitSpec, type CompletionPolicySupervisor, ContextProfile, type ConversationIndexRecord, type ConversationNativeRef, type CostBudgetDecision, type CrashDetectSummary, type CrashReaperRegistry, type CreateGatewayOptions, type CreateOfferInput, type CreatedOffer, DEFAULT_BUCKET, DEFAULT_ORCHESTRATOR_TOOLS, DEFAULT_WORKTREE_ISOLATION, DeclaredAdapterOption, type DeclaredAdapterPreset, type EagerResumeFailReason, type EagerResumeOutcome, type EagerResumeSkipReason, type EagerResumeSummary, EffortLevel, type GateSpec, type GatewayHandle, type HermesNativeRef, INBOUND_PROVIDERS, type IdleReapSummary, type IdleReaperRegistry, type InboundEndpoint, type InboundEndpointStore, type InboundEndpointStoreOptions, type InboundEnqueuePrompt, type InboundIsSessionAlive, type InboundMessage, type InboundProvider, type InboundRestartSession, type InboundRouteMode, type InboundRouterDeps, type InboundRouterLog, type InboundSpawnForContact, type InboundWatcher, type JudgeGateSpec, LEGACY_SESSIONS_FILE, type LocatedConversation, type LocatedConversationByPath, type McpCredentialDeps, type MigrationMarker, type NormalizeInboundResult, type OnFailSpec, type OpenPrResolver, type OrchestratorGatewayDeps, type OrchestratorInjection, type OrchestratorInjector, type OrchestratorInjectorDeps, type OrchestratorMcpServerFactory, type OrchestratorScope, type OrphanReaperRegistry, PAIRINGS_VERSION, POSTURE_NATIVE_ALIASES, POSTURE_PREAMBLES, type PairingChannelContext, type PairingChannelHandle, type PairingChannelMode, type PairingRecord, type PairingRegistry, type PairingRegistryDeps, type PendingPermission, type PermissionRespondInput, type PermissionRespondResult, type PolicyRunState, type PolicyRunStatus, Posture, type PostureResolution, type PrResolvedState, type PrStateResolver, type PresetInfo, type PricingResolver, type QuotaReadableProfile, type QuotaStoreFile, type QuotaStoreOptions, type ReconnectLogGate, type RegisterBrowserInput, type RegisterPairingToolsOptions, type RegisterSessionInput, type RemainingQuota, type RemainingQuotaReader, type ResolveNativeLinkInput, ResolvedAuthSpec, ResumeDisabledError, type RouteAwareLaunchConfig, type RouteAwareLaunchConfigInput, RouteSpec, type RuntimeMeta, SESSION_ID_ENV, type SandboxAdapterInfo, type SandboxConnectionDescriptor, type SandboxProviderCapabilities, type SandboxProviderHandle, type SandboxProviderLister, type SandboxProviderResolver, type ScopeTokenRegistry, SessionConfig, type SessionDescriptor, type SessionKind, type SessionObserver, type SessionSnapshots, type SessionStatus, type SessionUsage, type SessionWaitEvent, type SessionWaitResult, type SessionsRegistry, type ShellGateSpec, type SpawnAgentInput, type SpawnSessionInput, type StallWatchdogRegistry, type StallWatchdogSummary, type StoredProfileQuota, TASK_STATUSES, type TaskCaller, type TaskChangedEvent, type TaskClaimInput, type TaskCreateInput, type TaskGateOutcome, type TaskGateRunner, type TaskLedger, type TaskLedgerRegistry, type TaskLedgerSessionSlice, type TaskListFilter, type TaskRecord, type TaskStatus, type TaskUpdateInput, type TaskVerification, type TaskVerifySupervisor, type TaskWriteResult, type TokenPricing, type TransmitterBinding, type TransmitterBindingStore, type TunnelDescriptor, type TunnelProvider, type TunnelStatus, type UsageBucket, type UsageComputeInput, type UsageRollup, type UsageSnapshotRecord, type UsageSource, WORKSPACE_SLUG_ENV, WORKTREE_ISOLATION_ENV, type WatcherDescriptor, type WatcherStartInput, WorkspaceFs, type WorktreeDecision, type WorktreeField, type WorktreeGcClass, type WorktreeGcOutcomeView, type WorktreeGcPlanEntryView, type WorktreeGcReclaimReason, type WorktreeGcResult, type WorktreeGcRunInput, type WorktreeGcRunner, WorktreeIsolationMode, type WorktreeProvisionOutcome, type WorktreeProvisionRequest, type WorktreeProvisioner, type WorktreeRequest, type WorktreeStatusLister, type WorktreeStatusView, activityCounts, appendConversationRecord, attachSandbox, bucketDir, bucketSessionsFile, bucketTranscriptDir, buildCatalogProviderModels, buildMcpConfigSnippet, buildRouteAwareLaunchConfig, canonicalForModeId, claudeProjectSlug, composeSessionObservers, conversationIndexPath, createActivityProjector, createFileStepCache, createGateway, createInboundEndpointStore, createOrchestratorInjector, createOrchestratorMcpServerFactory, createPairingRegistry, createPrProvenanceReconciler, createReconnectLogGate, createScopeTokenRegistry, createSupervisorTaskGateRunner, createTaskLedger, daemonRegistryDir, decideWorktreeIsolation, declaredPresetToProviderPreset, deriveSessionUsage, enrichRollupWithProviderQuota, enrichWithRemainingQuota, evaluateCostBudget, filterActivities, findConversationRecord, findNativeMode, formatToolCall, formatToolResult, getMcpCredentialDeps, isAgentCliAuthConfigured, isClosedTaskStatus, isSafeBucketSlug, isTerminalActivityState, listBuckets, listPresets, loadQuotaStore, loadWorktreeIsolation, locateConversationByNativePath, locateConversationBySessionId, makeBrowserAdapterLister, migrateLegacySessionsFile, migrationMarkerPath, monitorPolicyWait, monitorSessionWait, narrowOrchestratorTools, normalizeInbound, normalizeModeId, normalizeWorktreeField, parseAnthropicRateLimitHeaders, parseTaskStatus, parseWindow, parseWorktreeIsolationMode, policyToActivities, policyWatchesSession, prToActivities, projectSessionUsage, readConversationIndex, readDaemonRegistry, readProfileQuota, readRegisteredSlugs, readRuntimeMeta, readUsageSnapshots, reapOrphanedDescendants, recordProfileQuota, registerBuiltinRoutes, registerPairingTools, registerSandboxAttachTool, resolveBucketSlug, resolveNativeLink, resolvePosture, rollupUsage, runCrashDetectPass, runEagerResumePass, runIdleReapPass, runStallWatchdogPass, setMcpCredentialDeps, sweepStaleDaemonRegistry, sweepStaleRuntimeMetas, toWorktreeStatusView, turnToActivities, unlinkDaemonRegistryEntry, unlinkRuntimeMeta, verifyInboundSignature, workflowToActivities, writeDaemonRegistryEntry };