@agentproto/runtime 3.1.0 → 3.3.0

package/dist/index.d.ts

@@ -2993,6 +2993,14 @@ interface InboundMessage {
     contactRef: string;
     /** Rendered user-turn text. */
     text: string;
+    /** Human-readable name of the sender, when the ingress knows one.
+     *  Present => the routed turn is prefixed so the agent can tell senders
+     *  apart. Absent => the text is enqueued exactly as before. */
+    displayName?: string;
+    /** The surface the message came in on (`telegram`, `whatsapp`, `email`).
+     *  Distinct from `source`, which is a routing key, not something to show
+     *  an agent. */
+    surface?: string;
     /** Raw agentpush events, forwarded to the spawn fallback template. */
     messages?: unknown[];
 }
@@ -3001,6 +3009,7 @@ interface InboundMessage {
  *  method in directly. */
 type InboundEnqueuePrompt = (sessionId: string, text: string, opts?: {
     interrupt?: boolean;
+    queue?: boolean;
 }) => Promise<void> | void;
 /** Whether `sessionId` is currently live enough to route into without a
  *  restart first. */
@@ -3608,6 +3617,10 @@ interface SessionAppServeInfo {
      *  window. False means the URL is the right address but the server had
      *  not answered yet — retry the fetch rather than re-spawning. */
     ready: boolean;
+    /** Error text from the in-box serve log when `ready` is false (e.g. the
+     *  server exited immediately because the UI root is missing). Absent when
+     *  the log holds no recognizable error or could not be read. */
+    message?: string;
 }
 
 /**
@@ -3655,15 +3668,28 @@ type WorktreeField = boolean | {
 interface WorktreeRequest {
     slug?: string;
     base?: string;
-    /** Opt-in: return a real, registered session as soon as it's minted,
-     *  provisioning the worktree in the BACKGROUND instead of blocking
-     *  `agent_start`'s response on `git worktree add` + the repo's setup
-     *  hooks (which can run minutes — see `session-spawn.ts`'s async-provision
-     *  branch). Deliberately opt-in, not the default: existing callers that
-     *  built on a synchronous ok/fail result (this package's own
-     *  `worktree_provision_failed` test coverage among them) keep exactly
-     *  today's behaviour unless they ask for the early return. Default
-     *  false. */
+    /** Return a real, registered session as soon as it's minted, provisioning
+     *  the worktree in the BACKGROUND instead of blocking `agent_start`'s
+     *  response on `git worktree add` + the repo's setup hooks (which can run
+     *  minutes — see `session-spawn.ts`'s async-provision branch).
+     *
+     *  DEFAULTS TO TRUE for any spawn that provisions a worktree, UNLESS this
+     *  spawn also carries `wait` (which needs a first turn to block on — see
+     *  `worktree_async_wait_conflict` — so the presence of `wait` alone falls
+     *  back to the synchronous path rather than conflicting by default). That
+     *  default is applied by `session-spawn.ts` itself (WP-H), not by this
+     *  field or `normalizeWorktreeField` — the normalizer leaves `async`
+     *  exactly as the caller sent it (`undefined` when omitted; see its own
+     *  test), so a caller inspecting the normalized request never sees a
+     *  value it didn't write. WP-H incident: the synchronous contract this
+     *  field opts OUT of — hold the RPC open for however long setup hooks
+     *  take, routinely minutes — is exactly what let a client's own request
+     *  timeout retry into a second live agent sharing the first one's
+     *  worktree (closed on the other side too — see `session-spawn.ts`'s
+     *  `findWorktreeLabelCwdCollision`, which now refuses that retry outright
+     *  rather than merely warning). Pass `false` explicitly to keep the old
+     *  blocking ok/fail contract (this package's own `worktree_provision_failed`
+     *  test coverage exercises it deliberately synchronous). */
     async?: boolean;
 }
 /** What the runtime hands the provisioner. `cwd` is where the session would
@@ -3873,8 +3899,12 @@ type WorktreeGcClass = "reclaim" | "salvage" | "hold";
  * `orphan` is set on an entry/outcome the orphan scan found — a directory
  * physically present under the repo's worktree pool with no `git worktree
  * list` entry at all (see `WorktreeGcPlanEntryView.orphan`).
+ * `prunable` is set on an entry/outcome `git worktree list --porcelain`
+ * itself already reported dead — the mirror image of `orphan`: the
+ * registration is still there, but the working directory is gone (see
+ * `WorktreeGcPlanEntryView.prunable`).
  */
-type WorktreeGcReclaimReason = "dep-bump" | "orphan";
+type WorktreeGcReclaimReason = "dep-bump" | "orphan" | "prunable";
 /**
  * One entry of the dry-run plan — a runtime-local projection of a
  * `GcPlanEntry`. `tree` / `integration` / `liveness` are flattened to their
@@ -3886,7 +3916,7 @@ interface WorktreeGcPlanEntryView {
     branch: string | null;
     head: string;
     class: WorktreeGcClass;
-    /** Set only when `class === "reclaim"` via the dep-bump exemption or the orphan scan. */
+    /** Set only when `class === "reclaim"` via the dep-bump exemption, the orphan scan, or the prunable signal. */
     reclaimReason?: WorktreeGcReclaimReason;
     /**
      * `true` only for an orphan-scan entry: a directory physically present
@@ -3897,6 +3927,13 @@ interface WorktreeGcPlanEntryView {
      * literal `"orphan"` placeholder below rather than a fabricated value.
      */
     orphan?: boolean;
+    /**
+     * `true` only for a linked worktree `git worktree list --porcelain` itself
+     * already marked `prunable`. Same reasoning as `orphan` above — no
+     * tree/integration/liveness axis was ever read for a working directory
+     * that's gone — projected as the literal `"prunable"` placeholder below.
+     */
+    prunable?: boolean;
     tree: string;
     integration: {
         state: string;
@@ -4712,6 +4749,16 @@ interface SessionDescriptor {
     command: string;
     pid: number | null;
     status: SessionStatus;
+    /** Unambiguous liveness signal, stamped at read time (list()/get()/
+     *  findByIdOrName) — true iff `status` is "running" or "starting", the
+     *  same test the daemon uses internally (validateAgentTurn). Ephemeral:
+     *  never persisted, always recomputed from the row's status. Exists
+     *  because `status` alone is NOT liveness: a terminal row ("killed",
+     *  "exited", "error") is a record that exists, and HTTP 200 on
+     *  GET /sessions/:id only means the record exists — consumers that
+     *  treat res.ok as liveness must read `alive` (or GET /sessions/:id/alive)
+     *  instead. */
+    alive?: boolean;
     startedAt: string;
     endedAt?: string;
     exitCode?: number;
@@ -5533,6 +5580,11 @@ interface SessionDescriptor {
     remote?: boolean;
     /** Provider-assigned sandbox id (`BootedSandbox.sandboxId`), when `remote` is true. */
     sandboxId?: string;
+    /** Sandbox provider slug (`agent_start.sandbox`'s provider, e.g. `"e2b"`,
+     *  `"local"`), when `remote` is true. Identifies WHERE the box lives, not
+     *  just THAT one exists — the VS Code panel's sandbox chip names it in its
+     *  tooltip alongside `sandboxId`. */
+    sandboxProvider?: string;
     /** What session close does to the box (PR3 lifecycle) — `"kill"` (the
      *  default, ephemeral) or `"pause"` (keeps `sandboxId` reconnectable via
      *  `agent_start.sandbox.reuse`). Only set when `remote` is true. */
@@ -5546,6 +5598,16 @@ interface SessionDescriptor {
      *  serve port, and the provider-resolved public URL. See
      *  `sandbox-app-serve.ts`. */
     appServe?: SessionAppServeInfo;
+    /** Last PROVIDER liveness verdict for this session's box (`sandboxId`'s
+     *  ledger row, stamped by `recordSandboxLiveness` — the route / the CLI /
+     *  a reconnect-not-found). Ephemeral read-time projection of the sandbox
+     *  ledger, same convention as `processAlive`: a remote session has no
+     *  local PID, so this is the only box-death signal the descriptor can
+     *  carry. Absent when the box was never probed (or the provider can't) —
+     *  and absent is NOT "alive". */
+    sandboxAlive?: boolean;
+    /** ISO instant `sandboxAlive` was computed (see its doc). */
+    sandboxCheckedAt?: string;
 }
 /**
  * Lightweight panel projection of SessionDescriptor for the VS Code Sessions
@@ -5652,6 +5714,10 @@ interface SessionSummary {
     sandboxTeardown?: "kill" | "pause";
     sandboxPorts?: Record<number, string>;
     appServe?: SessionAppServeInfo;
+    /** Read-time projection of the box's ledger liveness verdict — see
+     *  `SessionDescriptor.sandboxAlive`. */
+    sandboxAlive?: boolean;
+    sandboxCheckedAt?: string;
 }
 /** Bracketed-paste mode as last observed in a PTY's OUTPUT stream.
  *  `"unknown"` means neither `\x1b[?2004h` nor `\x1b[?2004l` has been seen
@@ -6649,6 +6715,9 @@ interface SpawnAgentInput {
     remote?: boolean;
     /** Provider-assigned sandbox id, when `remote` is true. */
     sandboxId?: string;
+    /** Sandbox provider slug, when `remote` is true — see
+     *  `SessionDescriptor.sandboxProvider`. */
+    sandboxProvider?: string;
     /** What session close does to the box, when `remote` is true — see
      *  `SessionDescriptor.sandboxTeardown`. */
     sandboxTeardown?: "kill" | "pause";
@@ -7716,8 +7785,12 @@ declare function registerSandboxAttachTool(server: McpServer, opts?: RegisterSan
  * tmp path (the pid-only suffix is not unique within one process — see the
  * 2026-08-14 registry-wipe write-up in `workspace-buckets.ts`).
  */
-/** Lifecycle states a ledger row can carry. */
-type SandboxLedgerState = "booted" | "paused" | "connected" | "stopped";
+/** Lifecycle states a ledger row can carry. `"gone"` is stamped when the
+ *  PROVIDER answers the box no longer exists (liveness probe 404 / a
+ *  reconnect failing with the provider's not-found error) — distinct from
+ *  `"stopped"` (WE tore it down) and from `"paused"` (the last thing WE
+ *  did, which a vanished box makes a lie). */
+type SandboxLedgerState = "booted" | "paused" | "connected" | "stopped" | "gone";
 interface SandboxLedgerEntry {
     sandboxId: string;
     provider: string;
@@ -7731,6 +7804,13 @@ interface SandboxLedgerEntry {
     /** ISO instant the box is expected to idle-expire — stamped only when the
      *  boot knew a window (`lifecycle.pause_after_idle`). */
     expiresAt?: string;
+    /** Last PROVIDER liveness probe verdict (`SandboxProvider.probe`) — the
+     *  only signal that distinguishes box death from session death. Absent
+     *  when never probed (or the provider can't probe): the ledger's `state`
+     *  alone is NOT trustworthy — a dead box looks paused until probed. */
+    sandboxAlive?: boolean;
+    /** ISO instant `sandboxAlive` was computed. */
+    sandboxCheckedAt?: string;
 }
 /** `~/.agentproto/sandboxes.json`. `AGENTPROTO_SANDBOX_LEDGER` overrides
  *  the path (tests, and a caller that wants a workspace-scoped ledger). */
@@ -7739,9 +7819,43 @@ declare const sandboxLedgerPath: () => string;
  *  "degrade to nothing rather than throw" contract as every other store
  *  reader in this daemon. Never throws. */
 declare function readSandboxLedger(path?: string): SandboxLedgerEntry[];
+/**
+ * Upsert (dedup by `sandboxId`) and persist. Sync + best-effort: the
+ * lifecycle hooks that call this run inside teardown/finally paths where
+ * Node won't await, and a failure here is a lost index row, never a lost
+ * box. Swallows every error.
+ */
+declare function upsertSandboxLedger(entry: SandboxLedgerEntry, path?: string): void;
 /** Remove a row by sandboxId. Returns whether a row was actually dropped
  *  (read from the PRE-call disk state). Never throws. */
 declare function removeSandboxLedgerEntry(sandboxId: string, path?: string): boolean;
+/**
+ * Stamp a boot or reconnect into the ledger — the spawn path's hook.
+ * `state` is "booted" for a fresh boot, "connected" for a reuse/attach.
+ * Best-effort: never throws, whatever happens.
+ */
+declare function recordSandboxBoot(opts: {
+    sandboxId: string;
+    provider: string;
+    state: "booted" | "connected";
+    label?: string;
+    cwd?: string;
+    originSessionId?: string;
+    expiresAt?: string;
+    path?: string;
+}): void;
+/** Stamp a state transition ("paused"/"stopped"/"gone") for an existing row.
+ *  Best-effort: never throws. */
+declare function recordSandboxState(sandboxId: string, state: "paused" | "stopped" | "gone", path?: string): void;
+/** Stamp a PROVIDER liveness verdict onto an existing row — `sandboxAlive`
+ *  + `sandboxCheckedAt`, and when the verdict is death ALSO flip the row to
+ *  `"gone"` (the state alone was never evidence of death; the probe is).
+ *  Best-effort: never throws. */
+declare function recordSandboxLiveness(sandboxId: string, alive: boolean, path?: string): void;
+/** Backfill `originSessionId` once the HOST registry has minted the session
+ *  id the box was spawned for (the boot hook runs before that id exists).
+ *  Best-effort: never throws. */
+declare function recordSandboxOrigin(sandboxId: string, originSessionId: string, path?: string): void;
 type ReuseResolution = {
     kind: "resolved";
     sandboxId: string;
@@ -7765,6 +7879,62 @@ type ReuseResolution = {
  */
 declare function resolveReuseFromLedger(reuse: string, entries: readonly SandboxLedgerEntry[]): ReuseResolution;
 
+/** Host session statuses after which a session can never use its box again. */
+declare const DEAD_SESSION_STATUSES: ReadonlySet<string>;
+/** One ledger row selected for gc, with the observed origin-session status. */
+interface SandboxGcCandidate {
+    entry: SandboxLedgerEntry;
+    sessionStatus: string;
+}
+/**
+ * Select ledger entries whose origin session is error/killed/exited.
+ * Rows already marked "stopped" are skipped (nothing left to tear down);
+ * rows with no `originSessionId` are skipped too — their owning session
+ * is unknown, so "orphan" cannot be established from this surface.
+ */
+declare function collectGcCandidates(entries: readonly SandboxLedgerEntry[], sessionStatuses: ReadonlyMap<string, string>): SandboxGcCandidate[];
+/** Provider resolution + ledger targeting for the reaper — injectable so
+ *  tests can hand a fake provider and a tmp ledger path. */
+interface SandboxGcReapDeps {
+    resolveProvider: (slug: string) => Promise<SandboxGcProviderHandle | null>;
+    ledgerPath?: string;
+}
+/** The slice of `SandboxProviderHandle` the reaper needs. */
+interface SandboxGcProviderHandle {
+    provider: {
+        connect(sandboxId: string, spec: {
+            provider: string;
+            config: Record<string, unknown>;
+        }, opts: {
+            env: Record<string, string>;
+        }): Promise<{
+            sandboxId: string;
+            stop(): Promise<void>;
+            pause?(): Promise<void>;
+        }>;
+    };
+}
+type SandboxGcReapResult = {
+    ok: true;
+    action: "paused" | "stopped";
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Tear one ledger entry's box down on its provider and stamp the ledger.
+ * `pause` keeps the box (pausing when the provider supports it, falling
+ * back to a kill otherwise); the default kills. A connect failure that
+ * reads as "box doesn't exist anymore" still stamps the row "stopped" so
+ * the candidate stops re-appearing; other failures leave the row alone
+ * (transient network must not mark a live box as reaped).
+ */
+declare function reapGcEntry(entry: SandboxLedgerEntry, opts: {
+    pause?: boolean;
+} & SandboxGcReapDeps): Promise<SandboxGcReapResult>;
+/** States that still name a box the gc might act on. */
+declare const GC_REAPABLE_STATES: readonly SandboxLedgerState[];
+
 /**
  * Idle agent-session reaper (PR-6).
  *
@@ -9442,4 +9612,4 @@ interface GatewayHandle {
  */
 declare function createGateway(opts: CreateGatewayOptions): Promise<GatewayHandle>;
 
-export { type ActivityKind, type ActivityListFilter, type ActivityPolicyLister, type ActivityProjector, type ActivityProjectorRegistry, type ActivityProjectorSession, type ActivityRecord, type ActivitySource, type ActivityState, type ActivityWaitingOn, type ActivityWorkflowLister, AdapterAuthDescriptor, type AdapterCapabilitiesLister, type AdapterInstallResult, type AdapterListEntry, type AgentAdapterInstaller, type AgentAdapterLister, type AgentAdapterResolver, type AgentSessionLike, type AgentStreamEvent, type AnthropicReaderConfig, AnthropicRemainingQuotaReader, type AttachPolicyInput, type AttachSandboxOpts, type AttachSandboxResult, AuthMethod, BUCKETS_ROOT, type BrowserAdapterHandle, type BrowserAdapterInfo, type BrowserAdapterLister, type BrowserAdapterResolver, BuildHeartbeatAgent, CanonicalPosture, type CatalogModelsLister, CatalogModelsQuery, CatalogModelsResponse, type CatalogProviderModel, type CatalogProviderModelsQuery, type CatalogProviderModelsResponse, type CatalogProviderPricing, type ClaudeNativeRef, type CommitSpec, type CompletionPolicySupervisor, ContextProfile, type ConversationIndexRecord, type ConversationNativeRef, type CostBudgetDecision, type CrashDetectSummary, type CrashReaperRegistry, type CreateGatewayOptions, type CreateOfferInput, type CreatedOffer, DEFAULT_BUCKET, DEFAULT_ORCHESTRATOR_TOOLS, DEFAULT_WORKTREE_ISOLATION, DeclaredAdapterOption, type DeclaredAdapterPreset, type EagerResumeFailReason, type EagerResumeOutcome, type EagerResumeSkipReason, type EagerResumeSummary, EffortLevel, type GateSpec, type GatewayHandle, type HarnessPreset, type HarnessPresetValidationDeps, HarnessPresetValidationError, type HarnessPresetsFile, type HermesNativeRef, INBOUND_PROVIDERS, type IdleReapSummary, type IdleReaperRegistry, type InboundEndpoint, type InboundEndpointStore, type InboundEndpointStoreOptions, type InboundEnqueuePrompt, type InboundIsSessionAlive, type InboundMessage, type InboundProvider, type InboundRestartSession, type InboundRouteMode, type InboundRouterDeps, type InboundRouterLog, type InboundSpawnForContact, type InboundWatcher, type JudgeGateSpec, LEGACY_SESSIONS_FILE, type LocatedConversation, type LocatedConversationByPath, type McpCredentialDeps, type MigrationMarker, type NormalizeInboundResult, type OnFailSpec, type OpenPrResolver, type OrchestratorGatewayDeps, type OrchestratorInjection, type OrchestratorInjector, type OrchestratorInjectorDeps, type OrchestratorMcpServerFactory, type OrchestratorScope, type OrphanReaperRegistry, PAIRINGS_VERSION, POSTURE_NATIVE_ALIASES, POSTURE_PREAMBLES, type PairingChannelContext, type PairingChannelHandle, type PairingChannelMode, type PairingRecord, type PairingRegistry, type PairingRegistryDeps, type PendingPermission, type PermissionRespondInput, type PermissionRespondResult, type PolicyRunState, type PolicyRunStatus, Posture, type PostureResolution, type PrResolvedState, type PrStateResolver, type PresetInfo, type PricingResolver, type QuotaReadableProfile, type QuotaStoreFile, type QuotaStoreOptions, type ReconnectLogGate, type RegisterBrainToolsOptions, type RegisterBrowserInput, type RegisterPairingToolsOptions, type RegisterSessionInput, type RegisterWebSearchToolsOptions, type RemainingQuota, type RemainingQuotaReader, type ResolveNativeLinkInput, ResolvedAuthSpec, ResumeDisabledError, type ReuseResolution, type RouteAwareLaunchConfig, type RouteAwareLaunchConfigInput, RouteSpec, type RuntimeMeta, SESSION_ID_ENV, type SandboxAdapterInfo, type SandboxConnectionDescriptor, type SandboxLedgerEntry, type SandboxLedgerState, type SandboxProviderCapabilities, type SandboxProviderHandle, type SandboxProviderLister, type SandboxProviderResolver, type ScopeTokenRegistry, SessionConfig, type SessionCurrentPhase, type SessionDescriptor, type SessionKind, type SessionObserver, type SessionSnapshots, type SessionStatus, type SessionUsage, type SessionWaitEvent, type SessionWaitResult, type SessionsRegistry, type ShellGateSpec, type SpawnAgentInput, type SpawnSessionInput, type StallWatchdogRegistry, type StallWatchdogSummary, type StoredProfileQuota, TASK_STATUSES, type TaskCaller, type TaskChangedEvent, type TaskClaimInput, type TaskCreateInput, type TaskGateOutcome, type TaskGateRunner, type TaskLedger, type TaskLedgerRegistry, type TaskLedgerSessionSlice, type TaskListFilter, type TaskRecord, type TaskStatus, type TaskUpdateInput, type TaskVerification, type TaskVerifySupervisor, type TaskWriteResult, type TokenPricing, type TransmitterBinding, type TransmitterBindingStore, type TunnelDescriptor, type TunnelProvider, type TunnelStatus, type UsageBucket, type UsageComputeInput, type UsageRollup, type UsageSnapshotRecord, type UsageSource, WORKSPACE_SLUG_ENV, WORKTREE_ISOLATION_ENV, type WatcherDescriptor, type WatcherStartInput, type WebSearchInput, type WebSearchOutput, type WebSearchResult, type WorkspaceBrainSubscriber, type WorkspaceBrainSubscriberOptions, type WorkspaceBrains, WorkspaceFs, type WorktreeAutoReclaimer, type WorktreeDecision, type WorktreeField, type WorktreeGcClass, type WorktreeGcOutcomeView, type WorktreeGcPlanEntryView, type WorktreeGcReclaimReason, type WorktreeGcResult, type WorktreeGcRunInput, type WorktreeGcRunner, WorktreeIsolationMode, type WorktreeProvisionOutcome, type WorktreeProvisionRequest, type WorktreeProvisioner, type WorktreeRequest, type WorktreeStatusLister, type WorktreeStatusView, activityCounts, addHarnessPreset, appendConversationRecord, attachSandbox, bucketDir, bucketSessionsFile, bucketTranscriptDir, buildCatalogProviderModels, buildMcpConfigSnippet, buildRouteAwareLaunchConfig, canonicalForModeId, claudeProjectSlug, composeSessionObservers, conversationIndexPath, createActivityProjector, createFileStepCache, createGateway, createInboundEndpointStore, createOrchestratorInjector, createOrchestratorMcpServerFactory, createPairingRegistry, createPrProvenanceReconciler, createReconnectLogGate, createScopeTokenRegistry, createSupervisorTaskGateRunner, createTaskLedger, createWorkspaceBrainSubscriber, createWorkspaceBrains, daemonRegistryDir, decideWorktreeIsolation, declaredPresetToProviderPreset, defineBraveSearchHttpDriver, defineSerperHttpDriver, deriveSessionUsage, enrichRollupWithProviderQuota, enrichWithRemainingQuota, evaluateCostBudget, filterActivities, findConversationRecord, findNativeMode, formatToolCall, formatToolResult, getDefaultHarnessPreset, getHarnessPreset, getMcpCredentialDeps, harnessPresetsPath, isAgentCliAuthConfigured, isClosedTaskStatus, isSafeBucketSlug, isTerminalActivityState, listBuckets, listHarnessPresets, listPresets, loadHarnessPresets, loadQuotaStore, loadWorktreeIsolation, locateConversationByNativePath, locateConversationBySessionId, makeBrowserAdapterLister, makeSandboxCredsStore, makeSandboxResolver, migrateLegacySessionsFile, migrationMarkerPath, monitorPolicyWait, monitorSessionWait, narrowOrchestratorTools, normalizeInbound, normalizeModeId, normalizeWorktreeField, parseAnthropicRateLimitHeaders, parseTaskStatus, parseWindow, parseWorktreeIsolationMode, policyToActivities, policyWatchesSession, prToActivities, projectSessionUsage, readConversationIndex, readDaemonRegistry, readProfileQuota, readRegisteredSlugs, readRuntimeMeta, readSandboxLedger, readSessionForBrain, readUsageSnapshots, reapOrphanedDescendants, recordProfileQuota, registerBrainTools, registerBuiltinRoutes, registerPairingTools, registerSandboxAttachTool, registerWebSearchTools, removeHarnessPreset, removeSandboxLedgerEntry, resolveBucketSlug, resolveNativeLink, resolvePosture, resolveReuseFromLedger, rollupUsage, runCrashDetectPass, runEagerResumePass, runIdleReapPass, runStallWatchdogPass, sandboxLedgerPath, setDefaultPreset, setMcpCredentialDeps, sweepStaleDaemonRegistry, sweepStaleRuntimeMetas, toWorktreeStatusView, turnToActivities, unlinkDaemonRegistryEntry, unlinkRuntimeMeta, updateHarnessPreset, verifyInboundSignature, webSearchTool, workflowToActivities, writeDaemonRegistryEntry };
+export { type ActivityKind, type ActivityListFilter, type ActivityPolicyLister, type ActivityProjector, type ActivityProjectorRegistry, type ActivityProjectorSession, type ActivityRecord, type ActivitySource, type ActivityState, type ActivityWaitingOn, type ActivityWorkflowLister, AdapterAuthDescriptor, type AdapterCapabilitiesLister, type AdapterInstallResult, type AdapterListEntry, type AgentAdapterInstaller, type AgentAdapterLister, type AgentAdapterResolver, type AgentSessionLike, type AgentStreamEvent, type AnthropicReaderConfig, AnthropicRemainingQuotaReader, type AttachPolicyInput, type AttachSandboxOpts, type AttachSandboxResult, AuthMethod, BUCKETS_ROOT, type BrowserAdapterHandle, type BrowserAdapterInfo, type BrowserAdapterLister, type BrowserAdapterResolver, BuildHeartbeatAgent, CanonicalPosture, type CatalogModelsLister, CatalogModelsQuery, CatalogModelsResponse, type CatalogProviderModel, type CatalogProviderModelsQuery, type CatalogProviderModelsResponse, type CatalogProviderPricing, type ClaudeNativeRef, type CommitSpec, type CompletionPolicySupervisor, ContextProfile, type ConversationIndexRecord, type ConversationNativeRef, type CostBudgetDecision, type CrashDetectSummary, type CrashReaperRegistry, type CreateGatewayOptions, type CreateOfferInput, type CreatedOffer, DEAD_SESSION_STATUSES, DEFAULT_BUCKET, DEFAULT_ORCHESTRATOR_TOOLS, DEFAULT_WORKTREE_ISOLATION, DeclaredAdapterOption, type DeclaredAdapterPreset, type EagerResumeFailReason, type EagerResumeOutcome, type EagerResumeSkipReason, type EagerResumeSummary, EffortLevel, GC_REAPABLE_STATES, type GateSpec, type GatewayHandle, type HarnessPreset, type HarnessPresetValidationDeps, HarnessPresetValidationError, type HarnessPresetsFile, type HermesNativeRef, INBOUND_PROVIDERS, type IdleReapSummary, type IdleReaperRegistry, type InboundEndpoint, type InboundEndpointStore, type InboundEndpointStoreOptions, type InboundEnqueuePrompt, type InboundIsSessionAlive, type InboundMessage, type InboundProvider, type InboundRestartSession, type InboundRouteMode, type InboundRouterDeps, type InboundRouterLog, type InboundSpawnForContact, type InboundWatcher, type JudgeGateSpec, LEGACY_SESSIONS_FILE, type LocatedConversation, type LocatedConversationByPath, type McpCredentialDeps, type MigrationMarker, type NormalizeInboundResult, type OnFailSpec, type OpenPrResolver, type OrchestratorGatewayDeps, type OrchestratorInjection, type OrchestratorInjector, type OrchestratorInjectorDeps, type OrchestratorMcpServerFactory, type OrchestratorScope, type OrphanReaperRegistry, PAIRINGS_VERSION, POSTURE_NATIVE_ALIASES, POSTURE_PREAMBLES, type PairingChannelContext, type PairingChannelHandle, type PairingChannelMode, type PairingRecord, type PairingRegistry, type PairingRegistryDeps, type PendingPermission, type PermissionRespondInput, type PermissionRespondResult, type PolicyRunState, type PolicyRunStatus, Posture, type PostureResolution, type PrResolvedState, type PrStateResolver, type PresetInfo, type PricingResolver, type QuotaReadableProfile, type QuotaStoreFile, type QuotaStoreOptions, type ReconnectLogGate, type RegisterBrainToolsOptions, type RegisterBrowserInput, type RegisterPairingToolsOptions, type RegisterSessionInput, type RegisterWebSearchToolsOptions, type RemainingQuota, type RemainingQuotaReader, type ResolveNativeLinkInput, ResolvedAuthSpec, ResumeDisabledError, type ReuseResolution, type RouteAwareLaunchConfig, type RouteAwareLaunchConfigInput, RouteSpec, type RuntimeMeta, SESSION_ID_ENV, type SandboxAdapterInfo, type SandboxConnectionDescriptor, type SandboxGcCandidate, type SandboxGcProviderHandle, type SandboxGcReapDeps, type SandboxGcReapResult, type SandboxLedgerEntry, type SandboxLedgerState, type SandboxProviderCapabilities, type SandboxProviderHandle, type SandboxProviderLister, type SandboxProviderResolver, type ScopeTokenRegistry, SessionConfig, type SessionCurrentPhase, type SessionDescriptor, type SessionKind, type SessionObserver, type SessionSnapshots, type SessionStatus, type SessionUsage, type SessionWaitEvent, type SessionWaitResult, type SessionsRegistry, type ShellGateSpec, type SpawnAgentInput, type SpawnSessionInput, type StallWatchdogRegistry, type StallWatchdogSummary, type StoredProfileQuota, TASK_STATUSES, type TaskCaller, type TaskChangedEvent, type TaskClaimInput, type TaskCreateInput, type TaskGateOutcome, type TaskGateRunner, type TaskLedger, type TaskLedgerRegistry, type TaskLedgerSessionSlice, type TaskListFilter, type TaskRecord, type TaskStatus, type TaskUpdateInput, type TaskVerification, type TaskVerifySupervisor, type TaskWriteResult, type TokenPricing, type TransmitterBinding, type TransmitterBindingStore, type TunnelDescriptor, type TunnelProvider, type TunnelStatus, type UsageBucket, type UsageComputeInput, type UsageRollup, type UsageSnapshotRecord, type UsageSource, WORKSPACE_SLUG_ENV, WORKTREE_ISOLATION_ENV, type WatcherDescriptor, type WatcherStartInput, type WebSearchInput, type WebSearchOutput, type WebSearchResult, type WorkspaceBrainSubscriber, type WorkspaceBrainSubscriberOptions, type WorkspaceBrains, WorkspaceFs, type WorktreeAutoReclaimer, type WorktreeDecision, type WorktreeField, type WorktreeGcClass, type WorktreeGcOutcomeView, type WorktreeGcPlanEntryView, type WorktreeGcReclaimReason, type WorktreeGcResult, type WorktreeGcRunInput, type WorktreeGcRunner, WorktreeIsolationMode, type WorktreeProvisionOutcome, type WorktreeProvisionRequest, type WorktreeProvisioner, type WorktreeRequest, type WorktreeStatusLister, type WorktreeStatusView, activityCounts, addHarnessPreset, appendConversationRecord, attachSandbox, bucketDir, bucketSessionsFile, bucketTranscriptDir, buildCatalogProviderModels, buildMcpConfigSnippet, buildRouteAwareLaunchConfig, canonicalForModeId, claudeProjectSlug, collectGcCandidates, composeSessionObservers, conversationIndexPath, createActivityProjector, createFileStepCache, createGateway, createInboundEndpointStore, createOrchestratorInjector, createOrchestratorMcpServerFactory, createPairingRegistry, createPrProvenanceReconciler, createReconnectLogGate, createScopeTokenRegistry, createSupervisorTaskGateRunner, createTaskLedger, createWorkspaceBrainSubscriber, createWorkspaceBrains, daemonRegistryDir, decideWorktreeIsolation, declaredPresetToProviderPreset, defineBraveSearchHttpDriver, defineSerperHttpDriver, deriveSessionUsage, enrichRollupWithProviderQuota, enrichWithRemainingQuota, evaluateCostBudget, filterActivities, findConversationRecord, findNativeMode, formatToolCall, formatToolResult, getDefaultHarnessPreset, getHarnessPreset, getMcpCredentialDeps, harnessPresetsPath, isAgentCliAuthConfigured, isClosedTaskStatus, isSafeBucketSlug, isTerminalActivityState, listBuckets, listHarnessPresets, listPresets, loadHarnessPresets, loadQuotaStore, loadWorktreeIsolation, locateConversationByNativePath, locateConversationBySessionId, makeBrowserAdapterLister, makeSandboxCredsStore, makeSandboxResolver, migrateLegacySessionsFile, migrationMarkerPath, monitorPolicyWait, monitorSessionWait, narrowOrchestratorTools, normalizeInbound, normalizeModeId, normalizeWorktreeField, parseAnthropicRateLimitHeaders, parseTaskStatus, parseWindow, parseWorktreeIsolationMode, policyToActivities, policyWatchesSession, prToActivities, projectSessionUsage, readConversationIndex, readDaemonRegistry, readProfileQuota, readRegisteredSlugs, readRuntimeMeta, readSandboxLedger, readSessionForBrain, readUsageSnapshots, reapGcEntry, reapOrphanedDescendants, recordProfileQuota, recordSandboxBoot, recordSandboxLiveness, recordSandboxOrigin, recordSandboxState, registerBrainTools, registerBuiltinRoutes, registerPairingTools, registerSandboxAttachTool, registerWebSearchTools, removeHarnessPreset, removeSandboxLedgerEntry, resolveBucketSlug, resolveNativeLink, resolvePosture, resolveReuseFromLedger, rollupUsage, runCrashDetectPass, runEagerResumePass, runIdleReapPass, runStallWatchdogPass, sandboxLedgerPath, setDefaultPreset, setMcpCredentialDeps, sweepStaleDaemonRegistry, sweepStaleRuntimeMetas, toWorktreeStatusView, turnToActivities, unlinkDaemonRegistryEntry, unlinkRuntimeMeta, updateHarnessPreset, upsertSandboxLedger, verifyInboundSignature, webSearchTool, workflowToActivities, writeDaemonRegistryEntry };