@aria-cli/tools 1.0.9 → 1.0.10

package/dist-cjs/types.d.ts

@@ -1,1192 +0,0 @@
-/**
- * @aria/tools - Tool system types
- *
- * Unified tool interface for all ARIA tools.
- * All tools are LLM-callable with optional user confirmation.
- */
-import type { JSONSchema7 } from "json-schema";
-import type { IMemoria } from "@aria-cli/types";
-import type { CanonicalDeliveryReceipt as CanonicalDeliveryReceiptShape, ClientId, ControlEndpointAdvertisement, DeliveryAck, DurableDeliveryHandle, DurableDeliveryResult, DurableSubmitResult, InboxAddress, NodeId, PeerIdentityState, PrincipalFingerprint, PeerTransportId, SigningPublicKey, PeerTransportState, RuntimeEvent, RuntimeId, TlsCaFingerprint, RuntimeBootstrapIdentity as RuntimeBootstrapIdentityShape, RuntimeBootstrapRecord as RuntimeBootstrapRecordShape, RuntimeBootstrapPhase as RuntimeBootstrapPhaseShape } from "./network-runtime/index.js";
-import type { AcceptInviteRequest as AcceptInviteRequestShape, AcceptInviteResponse as AcceptInviteResponseShape, AcceptInviteTokenRequest as AcceptInviteTokenRequestShape, AcceptInviteTokenResponse as AcceptInviteTokenResponseShape, CancelInviteRequest as CancelInviteRequestShape, CancelInviteResponse as CancelInviteResponseShape, CreateInviteRequest as CreateInviteRequestShape, CreateInviteResponse as CreateInviteResponseShape, DirectPairRequest as DirectPairRequestShape, DirectPairResponse as DirectPairResponseShape, InboxCursor as InboxCursorShape, InboxListRequest as InboxListRequestShape, InvitePeerRequest as InvitePeerRequestShape, InvitePeerResult as InvitePeerResultShape, AttachedClientAuth as AttachedClientAuthShape, AttachedClientLeaseGrant as AttachedClientLeaseGrantShape, AttachedClientView as AttachedClientViewShape, LocalControlClientKind as LocalControlClientKindShape, OutboundMessage as OutboundMessageShape, PairRequestDecision as PairRequestDecisionShape, PairRequestResponse as PairRequestResponseShape, NearbyPeerView as NearbyPeerViewShape, PendingInviteView as PendingInviteViewShape, PendingPairRequestView as PendingPairRequestViewShape, PeerViewEvent as PeerViewEventShape, PersistedInboxEvent as PersistedInboxEventShape, RepairPeerRequest as RepairPeerRequestShape, RepairPeerResponse as RepairPeerResponseShape, RevokePeerRequest as RevokePeerRequestShape, RevokePeerResponse as RevokePeerResponseShape, ResumeRunRequest as ResumeRunRequestShape, RuntimeAutonomousLoopCommand as RuntimeAutonomousLoopCommandShape, RuntimeErrorDiagnostic as RuntimeErrorDiagnosticShape, RuntimeEventCursor as RuntimeEventCursorShape, RuntimeRunEvent as RuntimeRunEventShape, RunRequest as RunRequestShape, RunResult as RunResultShape, RuntimeDeliveryReceipt as RuntimeDeliveryReceiptShape, RuntimeQueuedReceipt as RuntimeQueuedReceiptShape, RuntimeStatus as RuntimeStatusShape } from "./network-runtime/local-control-contract.js";
-/** Risk levels for auto-approval decisions */
-export type RiskLevel = "safe" | "moderate" | "dangerous";
-/** Tool loading tier for TTFT optimization */
-export type LoadingTier = "always" | "deferred";
-/** Tool categories */
-export type ToolCategory = "filesystem" | "code" | "shell" | "web" | "data" | "memory" | "arion" | "messaging" | "meta";
-/**
- * Minimal arion interface for tool context.
- * Full Arion type is in @aria/aria to avoid circular deps.
- */
-export interface ArionRef {
-    id: string;
-    name: string;
-    emoji: string;
-}
-/**
- * Minimal arion manager interface for tool context.
- */
-export interface ArionManagerRef {
-    hatch(config: unknown): Promise<ArionRef>;
-    getMemoria?(arion: ArionRef): Promise<IMemoria | null>;
-    rest(name: string): Promise<void>;
-    wake(name: string): Promise<void>;
-    retire(name: string, options: {
-        confirm: boolean;
-    }): Promise<void>;
-    get(name: string): Promise<ArionRef | null>;
-    list(): Promise<ArionRef[]>;
-    evolveSkills?(name: string, changes: {
-        addSkills?: Array<{
-            name: string;
-            level: "beginner" | "intermediate" | "advanced" | "expert";
-            description?: string;
-            skillId?: string;
-        }>;
-        removeSkills?: string[];
-        addAgentSkills?: string[];
-        removeAgentSkills?: string[];
-        upgradeSkillLevel?: {
-            name: string;
-            level: "beginner" | "intermediate" | "advanced" | "expert";
-        };
-    }): Promise<ArionRef>;
-}
-/**
- * Minimal interface for tracking spawned process PIDs.
- * The concrete implementation is SpawnedProcessRegistry in executors/process-registry.ts.
- */
-export interface ProcessMetadataRef {
-    command?: string;
-    args?: string[];
-    cwd?: string;
-    interactive?: boolean;
-}
-export interface ProcessExitMetadataRef {
-    exitCode?: number | null;
-    signal?: string | null;
-}
-export interface ProcessInfoRef {
-    pid: number;
-    command: string | null;
-    args: string[];
-    cwd: string | null;
-    interactive: boolean;
-    startedAt: string;
-    runtimeMs: number;
-    status: "running" | "exited";
-    exitCode: number | null;
-    signal: string | null;
-    endedAt: string | null;
-}
-export interface WaitProcessResultRef {
-    pid: number;
-    status: "running" | "exited" | "not_found";
-    timedOut: boolean;
-    process?: ProcessInfoRef;
-}
-export interface ProcessRegistryRef {
-    add(pid: number, metadata?: ProcessMetadataRef): void;
-    remove(pid: number, exit?: ProcessExitMetadataRef): void;
-    recordExitMetadata?(pid: number, exit?: ProcessExitMetadataRef): void;
-    has(pid: number): boolean;
-    killAll(): Promise<number[]>;
-    listProcesses?(options?: {
-        includeExited?: boolean;
-    }): ProcessInfoRef[];
-    getProcess?(pid: number): ProcessInfoRef | undefined;
-    waitForExit?(pid: number, timeoutMs?: number): Promise<WaitProcessResultRef>;
-}
-/**
- * Minimal interface for managing PTY sessions (interactive process I/O).
- * The concrete implementation is PTYSessionStore in executors/pty-session-store.ts.
- * Uses `unknown` return type to avoid circular dependency on PTYSession.
- */
-export interface PTYSessionStoreRef {
-    add(pid: number, session: unknown): void;
-    get(pid: number): unknown | undefined;
-    has(pid: number): boolean;
-    remove(pid: number): void;
-    closeAll(): Promise<void>;
-}
-/**
- * Minimal delegation registry interface for tool context.
- * The concrete implementation is DelegationRegistry in @aria/aria.
- */
-export interface DelegationRegistryRef {
-    /** Get entry by ID (accepts both quest_xxx and del_xxx). */
-    get(id: string): DelegationEntryRef | undefined;
-    await(id: string, timeoutMs?: number): Promise<DelegationEntryRef>;
-    list(): DelegationEntryRef[];
-    /** Abort a single delegation by ID. Sets status to "aborted" and signals the AbortController. */
-    abort(id: string): boolean;
-}
-/** Read-only view of a delegation entry for tools */
-export interface DelegationEntryRef {
-    /** Quest ID (quest_xxx) when QuestStore available, otherwise ephemeral del_xxx */
-    id: string;
-    type: "arion" | "worker" | "cli_agent" | "remote_peer";
-    arionName?: string;
-    /** Stable remote node identity for remote delegations */
-    remoteNodeId?: NodeId;
-    /** Display name snapshot of the remote peer for remote delegations */
-    remoteDisplayNameSnapshot?: string;
-    task: string;
-    status: "running" | "completed" | "failed" | "aborted";
-    result?: string;
-    error?: string;
-    metadata?: {
-        driver?: string;
-        sessionId?: string | null;
-        worktreePath?: string | null;
-        worktreeBranch?: string | null;
-        exitCode?: number | null;
-        durationMs?: number;
-        filesChanged?: string[];
-        tests?: {
-            ran?: number;
-            passed?: number;
-            failed?: number;
-        };
-        truncatedOutput?: boolean;
-        workspace?: "cwd" | "tempdir" | "worktree";
-        model?: string;
-    };
-}
-/**
- * Delegation executor interface for tool context.
- * Starts async delegations (arion or worker) and returns delegation IDs.
- * The concrete implementation lives in @aria/aria to avoid circular deps.
- */
-export interface DelegationExecutorRef {
-    /** Delegate a task to a named arion. Returns delegation ID. */
-    delegateToArion(arionName: string, task: string, tier?: string): Promise<string>;
-    /** Spawn a lightweight worker (no memory/persona). Returns delegation ID. */
-    spawnWorker(task: string, tools?: string[], tier?: string): Promise<string>;
-    /** Spawn a CLI agent (Claude Code, Codex, etc.) as an external process. Returns delegation ID. */
-    spawnCliAgent(params: {
-        task: string;
-        driver: string;
-        workspace?: "cwd" | "tempdir" | "worktree";
-        model?: string;
-        resume?: string;
-        timeout?: number;
-    }): Promise<string>;
-    /** Delegate a task to a remote peer principal via WireGuard tunnel. Returns delegation ID. */
-    delegateToRemote?(nodeId: NodeId, task: string, tier?: string): Promise<string>;
-    /** Resolve a pending remote delegation by quest ID. Returns true if a matching pending delegation was found. */
-    resolveRemoteDelegation?(questId: string, result: string, senderNodeId?: NodeId): boolean;
-    /** Fail a pending remote delegation by quest ID. Returns true if a matching pending delegation was found. */
-    failRemoteDelegation?(questId: string, error: string, senderNodeId?: NodeId): boolean;
-    /** H3e: Fan out a hard problem to N diverse peers, collect results, synthesize consensus. */
-    deliberate?(task: string, config?: {
-        peerCount?: number;
-        maxBudgetUsd?: number;
-        timeoutMs?: number;
-    }): Promise<{
-        questId: string;
-        contributions: Array<{
-            nodeId: NodeId;
-            displayName: string;
-            result: string;
-            confidence: number;
-        }>;
-        consensusFindings: string[];
-        conflicts: string[];
-        confidence: number;
-        consensusReached: boolean;
-        selectedResult?: string;
-    }>;
-}
-/**
- * Minimal model router interface for tool context.
- */
-export interface ModelRouterRef {
-    chat(request: {
-        messages: Array<{
-            role: string;
-            content: string;
-        }>;
-        temperature?: number;
-        /** Hint for model tier — prevents thinking models from exhausting token budget */
-        tier?: string;
-    }): Promise<{
-        content: string;
-    }>;
-}
-/**
- * Active provider context for tools that need provider-aware behavior.
- */
-export interface ProviderContext {
-    /** Provider name */
-    name: string;
-    /** Capabilities the provider supports */
-    capabilities: import("@aria-cli/types").ProviderCapabilities;
-}
-/** Quest status values — must match QuestStatus in @aria/memoria/storage/quest-store.ts */
-export type QuestStoreStatus = "open" | "active" | "blocked" | "done";
-/** Lightweight quest item — subset of Quest fields used by tool executors */
-export interface QuestStoreItem {
-    id: string;
-    title: string;
-    description?: string;
-    priority: number;
-    status: QuestStoreStatus;
-    progress: string;
-    blockedBy?: string;
-    attempts: number;
-    remoteParentQuestId?: string;
-    remoteSenderDisplayName?: string;
-    remoteSenderNodeId?: NodeId;
-    createdAt: number;
-    updatedAt: number;
-}
-/**
- * Minimal quest store interface for tool context.
- * The concrete implementation is QuestStore in @aria/memoria.
- */
-export interface QuestStoreRef {
-    createQuest(input: {
-        id: string;
-        title: string;
-        description?: string;
-        priority?: number;
-        status?: QuestStoreStatus;
-        progress?: string;
-        blockedBy?: string;
-        remoteParentQuestId?: string;
-        remoteSenderDisplayName?: string;
-        remoteSenderNodeId?: NodeId;
-    }): QuestStoreItem;
-    updateQuest(id: string, updates: Partial<{
-        title: string;
-        description: string;
-        priority: number;
-        status: QuestStoreStatus;
-        progress: string;
-        blockedBy: string;
-        remoteParentQuestId: string;
-        remoteSenderDisplayName: string;
-        remoteSenderNodeId: NodeId;
-    }>): QuestStoreItem;
-    getQuest(id: string): QuestStoreItem | null;
-    listQuests(filter?: {
-        status?: string;
-    }): QuestStoreItem[];
-    getQuestTree?(rootId: string): QuestStoreItem[];
-    getDescendants?(questId: string): QuestStoreItem[];
-    getAncestors?(questId: string): QuestStoreItem[];
-    rollupStatus?(questId: string): QuestStoreStatus;
-    createMilestone?(input: {
-        id: string;
-        title: string;
-        description?: string;
-        dueAt?: number;
-    }): unknown;
-    listMilestones?(filter?: {
-        status?: string;
-    }): unknown[];
-    addDependency?(questId: string, dependsOn: string): void;
-    removeDependency?(questId: string, dependsOn: string): void;
-    getDependencies?(questId: string): unknown[];
-    getChangelog?(questId: string, limit?: number): unknown[];
-    /** Create a checkpoint for quest progress tracking */
-    createCheckpoint?(input: {
-        questId: string;
-        turn: number;
-        progress?: string;
-        filesTouched?: string[];
-        decisions?: string[];
-        nextSteps?: string[];
-        errorsEncountered?: string[];
-    }): unknown;
-}
-export interface RunRequest extends RunRequestShape {
-}
-export interface RunResult extends RunResultShape {
-}
-export interface ResumeRunRequest extends ResumeRunRequestShape {
-}
-export interface RuntimeErrorDiagnostic extends RuntimeErrorDiagnosticShape {
-}
-export type RuntimeRunEvent = RuntimeRunEventShape;
-export interface RunHandle {
-    runId: string;
-    wait(): Promise<RunResult>;
-}
-export interface QueuedReceipt extends RuntimeQueuedReceiptShape {
-}
-export interface RuntimeQueuedReceipt extends QueuedReceipt {
-}
-export interface RuntimeDeliveryReceipt extends RuntimeDeliveryReceiptShape {
-    storedAt?: number;
-}
-export interface OutboundMessage extends OutboundMessageShape {
-}
-export interface InboxCursor extends InboxCursorShape {
-}
-export interface InboxListRequest extends InboxListRequestShape {
-}
-export interface PersistedInboxEvent extends PersistedInboxEventShape {
-}
-export interface PeerViewEvent extends PeerViewEventShape {
-    nodeId: NodeId;
-    transportPublicKey: PeerTransportId;
-    identityState: PeerIdentityState;
-    transportState: PeerTransportState;
-    endpointRevision: number;
-    updatedAt: string;
-}
-export interface NearbyPeerView extends NearbyPeerViewShape {
-    nodeId: NodeId;
-    principalFingerprint: PrincipalFingerprint;
-}
-export interface RuntimeStatus extends RuntimeStatusShape {
-    nodeId: NodeId;
-    runtimeId: RuntimeId;
-    attachedClients?: number;
-}
-export interface AttachedClientView extends AttachedClientViewShape {
-    clientId: ClientId;
-    clientKind: LocalControlClientKindShape;
-}
-export interface AttachedClientLeaseGrant extends AttachedClientLeaseGrantShape {
-    clientId: ClientId;
-}
-export interface AttachedClientAuth extends AttachedClientAuthShape {
-    clientId: ClientId;
-}
-export type RuntimeBootstrapPhase = RuntimeBootstrapPhaseShape;
-export interface RuntimeBootstrapIdentity extends RuntimeBootstrapIdentityShape {
-    displayNameSnapshot?: string;
-}
-export interface RuntimeBootstrapRecord extends RuntimeBootstrapRecordShape {
-    nodeId: NodeId;
-    runtimeId: RuntimeId;
-}
-export interface PairRequest extends PendingPairRequestViewShape {
-}
-export interface PairRequestHandle {
-    requestId: string;
-    wait(): Promise<PairRequestResponse>;
-}
-export interface PairRequestDecision extends PairRequestDecisionShape {
-}
-export interface PairRequestResponse extends PairRequestResponseShape {
-}
-export interface InvitePeerRequest extends InvitePeerRequestShape {
-}
-export type InvitePeerResult = InvitePeerResultShape;
-export interface AcceptInviteRequest extends AcceptInviteRequestShape {
-}
-export interface AcceptInviteResponse extends AcceptInviteResponseShape {
-}
-export interface CreateInviteRequest extends CreateInviteRequestShape {
-}
-export interface CreateInviteResponse extends CreateInviteResponseShape {
-}
-export interface AcceptInviteTokenRequest extends AcceptInviteTokenRequestShape {
-}
-export interface AcceptInviteTokenResponse extends AcceptInviteTokenResponseShape {
-}
-export interface PendingInviteView extends PendingInviteViewShape {
-}
-export interface CancelInviteRequest extends CancelInviteRequestShape {
-}
-export interface CancelInviteResponse extends CancelInviteResponseShape {
-}
-export interface PairCompletionHandle {
-    nodeId: NodeId;
-    wait(): Promise<AcceptInviteResponse | DirectPairResponse>;
-}
-export interface DirectPairRequest extends DirectPairRequestShape {
-}
-export interface DirectPairResponse extends DirectPairResponseShape {
-}
-export interface RevokePeerRequest extends RevokePeerRequestShape {
-}
-export interface RevokePeerResponse extends RevokePeerResponseShape {
-}
-export interface RepairPeerRequest extends RepairPeerRequestShape {
-}
-export interface RepairPeerResponse extends RepairPeerResponseShape {
-}
-export interface RepairReceipt extends RepairPeerResponse {
-}
-export interface RuntimeAutonomousLoopCommand extends RuntimeAutonomousLoopCommandShape {
-}
-export interface LocalControlApi {
-    submitRun(request: RunRequest): Promise<RunHandle>;
-    resumeRun(request: ResumeRunRequest): Promise<RunResult>;
-    streamRun(request: RunRequest, signal?: AbortSignal): AsyncIterable<RuntimeRunEvent>;
-    subscribeRuntimeEvents(cursor?: RuntimeEventCursor): AsyncIterable<RuntimeEvent>;
-    sendBestEffort(message: OutboundMessage): Promise<RuntimeQueuedReceipt>;
-    sendDurable(message: OutboundMessage): Promise<RuntimeDeliveryReceipt>;
-    listInbox(request?: InboxListRequest): Promise<PersistedInboxEvent[]>;
-    subscribeInbox(cursor?: InboxCursor): AsyncIterable<PersistedInboxEvent>;
-    listPeers(): Promise<PeerViewEvent[]>;
-    listNearbyPeers(): Promise<NearbyPeerView[]>;
-    subscribePeers(): AsyncIterable<PeerViewEvent>;
-    getRuntimeStatus(): Promise<RuntimeStatus>;
-    startAutonomousLoop?(input?: RuntimeAutonomousLoopCommand): Promise<RuntimeStatus>;
-    stopAutonomousLoop?(): Promise<RuntimeStatus>;
-    getRuntimeBootstrap(): Promise<RuntimeBootstrapRecord>;
-    listPendingPairRequests(): Promise<PairRequest[]>;
-    respondToPairRequest(input: PairRequestDecision): Promise<PairRequestResponse>;
-    createInvite(input: CreateInviteRequest): Promise<CreateInviteResponse>;
-    listPendingInvites(): Promise<PendingInviteView[]>;
-    acceptInviteToken(input: AcceptInviteTokenRequest): Promise<AcceptInviteTokenResponse>;
-    cancelInvite(input: CancelInviteRequest): Promise<CancelInviteResponse>;
-    invitePeer(input: InvitePeerRequest): Promise<InvitePeerResult>;
-    acceptInvite(input: AcceptInviteRequest): Promise<AcceptInviteResponse>;
-    directPair(input: DirectPairRequest): Promise<DirectPairResponse>;
-    revokePeer(input: RevokePeerRequest): Promise<RevokePeerResponse>;
-    repairPeer(input: RepairPeerRequest): Promise<RepairReceipt>;
-}
-export interface AttachedLocalControlApi extends LocalControlApi {
-    listAttachedClients(): Promise<AttachedClientView[]>;
-    listDirectClientInbox(request?: InboxListRequest): Promise<PersistedInboxEvent[]>;
-    subscribeDirectClientInbox(cursor?: InboxCursor): AsyncIterable<PersistedInboxEvent>;
-}
-export interface RuntimeEventCursor extends RuntimeEventCursorShape {
-}
-/**
- * Minimal tool registry interface for runtime refresh after learning/adoption.
- */
-export interface ToolRegistryRef {
-    discoverFromMemoria(memoria: IMemoria): Promise<number>;
-}
-/** Reference to the Mailbox for inter-agent message delivery */
-export interface MailboxMessage {
-    id: string;
-    version: number;
-    sender: {
-        id: string;
-        name: string;
-        type: string;
-        host?: string;
-        port?: number;
-    };
-    recipient: {
-        id: string;
-        name: string;
-        host?: string;
-        port?: number;
-        apiKey?: string;
-    };
-    recipientInbox?: InboxAddress;
-    replyTo?: string;
-    correlationId?: string;
-    type: string;
-    content: string;
-    metadata?: Record<string, unknown>;
-    timestamp: number;
-    ttl?: number;
-    priority: number;
-    signature?: string;
-}
-export interface MailboxDeliveryReceipt extends CanonicalDeliveryReceiptShape {
-}
-export interface MailboxRef {
-    /** Send a message without waiting for remote persistence acknowledgement. */
-    sendBestEffort(message: MailboxMessage): Promise<MailboxDeliveryReceipt>;
-    /** Send a message and wait for the runtime's durable delivery semantics. */
-    sendDurable(message: MailboxMessage): Promise<MailboxDeliveryReceipt>;
-    /** Check if a recipient is reachable by agent ID */
-    has(agentId: string): boolean;
-    /** Check if a recipient is reachable by name */
-    hasByName(name: string): boolean;
-    /** Resolve a registered local name or alias to its canonical durable recipient ID */
-    resolveId(name: string): string | undefined;
-}
-export interface RuntimeOutbox extends Pick<MailboxRef, "sendBestEffort" | "sendDurable"> {
-    registerTunnel(nodeId: NodeId, transport: {
-        sendPlaintext(data: Buffer): void;
-        getState?: () => string;
-        isActive?: boolean;
-        routeBootstrapOnly?: boolean;
-    }): void;
-    unregisterTunnel(nodeId: NodeId): void;
-    handleDeliveryAck(ack: DeliveryAck): void;
-    /**
-     * Submit a durable delivery operation. Returns immediately with a branded handle.
-     * The caller MUST observe delivery status via `getDurableStatus()`.
-     * @deprecated_alternative Use instead of `sendDurable()` for non-blocking delivery.
-     */
-    submitDurable(message: MailboxMessage, options?: {
-        ttlMs?: number;
-    }): Promise<DurableSubmitResult>;
-    /**
-     * Observe the status of a durable delivery operation by its branded handle.
-     * Returns null for unknown handles.
-     */
-    getDurableStatus(handle: DurableDeliveryHandle): DurableDeliveryResult | null;
-}
-export interface NetworkManagerPeerInfo {
-    nodeId: NodeId | null;
-    publicKey: PeerTransportId;
-    name: string;
-    endpointHost: string | null;
-    endpointPort: number | null;
-    endpointRevision: number;
-    controlEndpoint?: {
-        host: string | null;
-        port: number | null;
-    } | null;
-    signingPublicKey?: SigningPublicKey | null;
-    status: import("./network-runtime/peer-state-machine.js").LegacyPeerRegistryStatus;
-    membershipStatus?: import("./network-runtime/peer-state-machine.js").LegacyPeerRegistryStatus;
-    routeOwnership?: "current" | "superseded";
-    routeOwnerNodeId?: NodeId | null;
-    sessionState?: "none" | "handshaking" | "connected" | "reconnecting" | "dead";
-    deliveryReadiness?: "cannot_address" | "can_queue_only" | "can_send_now";
-    lastHandshake: number | null;
-    createdAt: number;
-    updatedAt?: number;
-}
-export interface NetworkPeerView {
-    nodeId: NodeId;
-    transportPublicKey: PeerTransportId;
-    displayNameSnapshot?: string;
-    endpointHost: string | null;
-    endpointPort: number | null;
-    endpointRevision: number;
-    controlEndpoint?: {
-        host: string | null;
-        port: number | null;
-    } | null;
-    signingPublicKey?: SigningPublicKey | null;
-    status: import("./network-runtime/peer-state-machine.js").LegacyPeerRegistryStatus;
-    membershipStatus?: import("./network-runtime/peer-state-machine.js").LegacyPeerRegistryStatus;
-    routeOwnership?: "current" | "superseded";
-    routeOwnerNodeId?: NodeId | null;
-    sessionState?: "none" | "handshaking" | "connected" | "reconnecting" | "dead";
-    deliveryReadiness?: "cannot_address" | "can_queue_only" | "can_send_now";
-    lastHandshake: number | null;
-    createdAt: number;
-    updatedAt: number;
-}
-export interface NetworkManagerStatusView {
-    configured: boolean;
-    nodeId: NodeId | null;
-    principalFingerprint: PrincipalFingerprint | null;
-    publicKey: PeerTransportId | null;
-    listenPort: number | null;
-    externalEndpoint: {
-        address: string;
-        port: number;
-    } | null;
-    activePeers: number;
-    totalPeers: number;
-    connectedPeers?: number;
-    handshakingPeers?: number;
-    queueOnlyPeers?: number;
-    supersededPeers?: number;
-    signingPublicKey?: SigningPublicKey | null;
-}
-export interface NetworkStatusView {
-    configured: boolean;
-    nodeId: NodeId | null;
-    principalFingerprint: PrincipalFingerprint | null;
-    transportPublicKey: PeerTransportId | null;
-    listenPort: number | null;
-    externalEndpoint: {
-        address: string;
-        port: number;
-    } | null;
-    activePeers: number;
-    totalPeers: number;
-    connectedPeers?: number;
-    handshakingPeers?: number;
-    queueOnlyPeers?: number;
-    supersededPeers?: number;
-    signingPublicKey?: SigningPublicKey | null;
-}
-/** Public control-plane surface for network-aware tools and runner APIs. */
-export interface NetworkControlRef {
-    invite(displayName?: string, options?: number | {
-        durationMs?: number;
-        nodeId?: NodeId;
-        caCert?: string;
-        controlEndpoint: import("./network-runtime/address-types.js").ControlEndpointAdvertisement;
-        transportHostOverride?: string;
-    }): {
-        token: string;
-        psk: string;
-    };
-    revokePeer(nodeId: NodeId): boolean;
-    listPendingInvites?(): Array<{
-        inviteId: string;
-        inviteLabel?: string;
-        createdAt: number;
-        expiresAt: number | null;
-    }>;
-    cancelInvite?(inviteId: string): boolean;
-    listPeers(): NetworkPeerView[];
-    status(): NetworkStatusView;
-    listAttachedClients?(): AttachedClientView[] | Promise<AttachedClientView[]>;
-}
-export interface NetworkPeerRegistrationResultRef {
-    registered: true;
-    nodeId: NodeId;
-    displayNameSnapshot?: string;
-    peerStatus: string;
-    lastSeen: number;
-    heartbeatUpdated: boolean;
-    endpointUpdated: boolean;
-    endpointRevision: number;
-}
-export interface NetworkPeerRegistrationFailureRef {
-    registered: false;
-    errorCode: "not_found" | "node_id_mismatch" | "pending" | "pending_tunnel" | "revoked" | "missing_endpoint_revision" | "stale_revision" | "conflicting_revision";
-}
-export interface NetworkPeerRepairResultRef {
-    repaired: true;
-    nodeId: NodeId;
-    displayNameSnapshot?: string;
-    peerStatus: string;
-    endpointUpdated: boolean;
-    endpointHost: string;
-    endpointPort: number;
-    endpointRevision: number;
-}
-export interface NetworkPeerRepairFailureRef {
-    repaired: false;
-    errorCode: "not_found" | "pending" | "pending_tunnel" | "revoked" | "missing_endpoint_revision" | "stale_revision" | "conflicting_revision";
-}
-export interface NetworkPeerRevocationResultRef {
-    revoked: true;
-    nodeId: NodeId;
-    displayNameSnapshot?: string;
-    fingerprint: PrincipalFingerprint;
-    revokedAt: number;
-}
-export interface NetworkPeerRevocationFailureRef {
-    revoked: false;
-    errorCode: "not_found" | "principal_unresolved";
-}
-/** Reference to the network manager for WireGuard peer management */
-export interface NetworkManagerRef {
-    invite(displayName?: string, options?: number | {
-        durationMs?: number;
-        nodeId?: NodeId;
-        caCert?: string;
-        controlEndpoint: import("./network-runtime/address-types.js").ControlEndpointAdvertisement;
-        transportHostOverride?: string;
-    }): {
-        token: string;
-        psk: string;
-    };
-    listPendingInvites?(): Array<{
-        inviteId: string;
-        inviteLabel?: string;
-        createdAt: number;
-        expiresAt: number | null;
-    }>;
-    cancelInvite?(inviteId: string): boolean;
-    listPeers(): NetworkManagerPeerInfo[];
-    status(): NetworkManagerStatusView;
-    /** Revoke a peer by its durable principal identity. */
-    revokePeer(nodeId: NodeId): boolean;
-    /** Shut down all tunnels and clean up resources */
-    shutdown(): Promise<void>;
-    /** Subscribe to incoming runtime-owned AriaMessage ingress. */
-    addMessageListener(listener: (message: unknown) => boolean | void): () => void;
-    /** Subscribe to persisted delivery acknowledgements from runtime transport flows. */
-    addDeliveryAckListener(listener: (ack: DeliveryAck) => void): () => void;
-    /** Get the current network configuration (includes signing keys) */
-    getConfig(): {
-        publicKey: PeerTransportId;
-        privateKey: string;
-        signingPublicKey?: SigningPublicKey;
-        signingPrivateKey?: string;
-        listenPort: number;
-        externalEndpoint?: {
-            address: string;
-            port: number;
-        };
-        endpointRevision?: number;
-        localEndpointRevision?: number;
-        coordinationUrl?: string;
-        nodeId?: NodeId;
-        createdAt: number;
-    } | null;
-    /** Read the runtime's local display snapshot without exposing raw config-shape aliases. */
-    getLocalDisplayNameSnapshot?(): string | undefined;
-    /** Subscribe to verified peer activation events from the runtime network layer. */
-    addPeerActivationListener?(listener: (input: {
-        nodeId: NodeId;
-        displayNameSnapshot: string;
-        signingPublicKey: SigningPublicKey;
-    }) => void): () => void;
-    /** Get a tunnel by durable peer identity (for direct message transport registration) */
-    getTunnel?(nodeId: NodeId): {
-        sendPlaintext(data: Buffer): void;
-    } | undefined;
-    /** Stage a peer signing key through the runtime-owned identity boundary. */
-    stagePendingPeerSigningKey?(input: {
-        nodeId: NodeId;
-        peerPublicKey: PeerTransportId;
-        displayNameSnapshot: string;
-        signingPublicKey: SigningPublicKey;
-    }): void;
-    /** Apply one runtime-owned pending direct-pair activation transaction. */
-    applyPendingDirectPair?(input: {
-        nodeId: NodeId;
-        peerPublicKey: PeerTransportId;
-        displayNameSnapshot: string;
-        endpointHost: string;
-        endpointPort: number;
-        endpointRevision?: number;
-        controlEndpointHost: string;
-        controlEndpointPort: number;
-        controlTlsCaFingerprint: TlsCaFingerprint;
-        presharedKey: string;
-        signingPublicKey: string;
-    }): Promise<void>;
-    /** Get all known peer signing keys keyed by durable peer principal. */
-    getAllPeerSigningKeysByPrincipal?(): Map<NodeId, SigningPublicKey>;
-    /** Promote a pending principal to active after the first verified signed ingress message. */
-    activatePendingPeer?(nodeId: NodeId): void;
-    /** Record a heartbeat from a peer principal (updates last_handshake timestamp) */
-    heartbeat?(nodeId: NodeId): boolean;
-    /**
-     * Apply a peer registration/heartbeat mutation by durable peer identity.
-     * This is the authoritative convergence surface for register/reconcile flows.
-     */
-    applyPeerRegistration?(input: {
-        nodeId: NodeId;
-        endpointHost?: string;
-        endpointPort?: number;
-        endpointRevision?: number;
-    }): NetworkPeerRegistrationResultRef | NetworkPeerRegistrationFailureRef;
-    /**
-     * Apply a transport-only peer repair mutation by durable peer identity.
-     * This is the authoritative convergence surface for operator-driven endpoint repair.
-     */
-    applyPeerRepair?(input: {
-        nodeId: NodeId;
-        endpointHost: string;
-        endpointPort: number;
-        endpointRevision: number;
-    }): NetworkPeerRepairResultRef | NetworkPeerRepairFailureRef;
-    /**
-     * Apply a peer revocation mutation by durable peer identity.
-     * Operator audit authority stays in the runtime/store layer; transport only
-     * tears down the target peer by NodeId.
-     */
-    applyPeerRevocation?(input: {
-        nodeId: NodeId;
-        fingerprint?: PrincipalFingerprint;
-    }): NetworkPeerRevocationResultRef | NetworkPeerRevocationFailureRef;
-    /** Accept an invite token from another peer — registers peer and starts tunnel.
-     *  Returns PeerInfo with the effective name (may be disambiguated if collision). */
-    acceptInvite?(token: string, options?: string | {
-        nodeId?: NodeId;
-        displayNameSnapshot?: string;
-        transportEndpoint?: import("./network-runtime/address-types.js").TransportEndpointAdvertisement;
-        controlEndpoint?: ControlEndpointAdvertisement;
-    }): Promise<{
-        name: string;
-        [k: string]: unknown;
-    }>;
-    /** Complete the join process — upgrade a pending peer with real credentials.
-     *  Returns the effective name (may be disambiguated if collision with own identity). */
-    completeJoin?(params: {
-        nodeId: NodeId;
-        principalFingerprint: PrincipalFingerprint;
-        peerPublicKey: PeerTransportId;
-        peerSigningKey: SigningPublicKey;
-        peerTransportEndpoint: import("./network-runtime/address-types.js").TransportEndpointAdvertisement;
-        peerControlEndpoint: import("./network-runtime/address-types.js").ControlEndpointAdvertisement;
-        displayNameSnapshot?: string;
-        inviteTokenNonce: string;
-    }): Promise<{
-        effectiveName: string;
-    }>;
-    /** Update the external endpoint (STUN refresh) and persist to disk */
-    updateExternalEndpoint?(address: string, port: number): void;
-    /** Persist coordination server URL */
-    setCoordinationUrl?(url: string): void;
-    /** Update a peer's endpoint in the registry by durable peer identity */
-    updatePeerEndpoint?(nodeId: NodeId, host: string, port: number, endpointRevision: number): void;
-    /** Start a tunnel to a peer by durable peer identity */
-    startTunnel?(nodeId: NodeId): Promise<void>;
-    /** Stop a tunnel for a peer by durable peer identity */
-    stopTunnel?(nodeId: NodeId): void;
-    /** Number of active tunnels */
-    readonly activeTunnelCount?: number;
-    /** Our own peer name in the mesh */
-    setLocalPeerName?(name: string): void;
-    /** Project the authoritative local node identity into the network config when available. */
-    setLocalNodeId?(nodeId: NodeId): void;
-    /** Reset relay upgrade backoff (call on STUN endpoint change) */
-    resetRelayUpgradeBackoff?(): void;
-}
-/** Reference to a message store for inter-agent messaging */
-export interface MessageStoreRef {
-    /** Store a message. Returns true if newly inserted, false if duplicate (replay). */
-    store(msg: {
-        id: string;
-        sender: {
-            id: string;
-            name: string;
-            type: string;
-        };
-        recipient: {
-            id: string;
-            name: string;
-        };
-        replyTo?: string;
-        correlationId?: string;
-        questId?: string;
-        type: string;
-        content: string;
-        metadata?: Record<string, unknown>;
-        priority?: number;
-        signature?: string;
-        timestamp: number;
-    }, direction: "sent" | "received", inboxAddress: InboxAddress): boolean;
-    /** Get unread received messages for a specific inbox */
-    getUnreadForInbox(inboxAddress: InboxAddress, limit?: number): Array<{
-        id: string;
-        sender_id: string;
-        sender_name: string;
-        sender_type: string;
-        recipient_id: string;
-        type: string;
-        content: string;
-        metadata: string | null;
-        priority: number;
-        created_at: number;
-        correlation_id: string | null;
-        reply_to: string | null;
-        inbox_address_kind: "client" | "node";
-        inbox_address_id: string;
-    }>;
-    /** Mark messages as read */
-    markRead(ids: string[]): void;
-    /** Mark messages as read, scoped to one inbox */
-    markReadForInbox(inboxAddress: InboxAddress, ids: string[]): void;
-    /** Get thread by message ID, scoped to one inbox */
-    getThreadForInbox(inboxAddress: InboxAddress, messageId: string): Array<{
-        id: string;
-        sender_id: string;
-        sender_name: string;
-        type: string;
-        content: string;
-        created_at: number;
-        reply_to: string | null;
-        inbox_address_kind: "client" | "node";
-        inbox_address_id: string;
-    }>;
-    /** Get one message by ID, scoped to one inbox. */
-    getMessageForInbox?(inboxAddress: InboxAddress, messageId: string): {
-        id: string;
-        sender_id: string;
-        sender_name: string;
-        sender_type: string;
-        recipient_id: string;
-        recipient_name: string;
-        reply_to: string | null;
-        correlation_id: string | null;
-        quest_id: string | null;
-        type: string;
-        content: string;
-        metadata: string | null;
-        priority: number;
-        direction: string;
-        read_at: number | null;
-        signature: string | null;
-        created_at: number;
-        inbox_address_kind: "client" | "node";
-        inbox_address_id: string;
-    } | null;
-    /** Get messages by correlation ID */
-    getByCorrelation(correlationId: string): Array<{
-        id: string;
-        sender_name: string;
-        type: string;
-        content: string;
-        created_at: number;
-    }>;
-    /** Search messages within one inbox */
-    searchInbox(inboxAddress: InboxAddress, query: string, options?: {
-        from?: string;
-        type?: string;
-        correlationId?: string;
-        after?: number;
-        limit?: number;
-    }): Array<{
-        id: string;
-        sender_id: string;
-        sender_name: string;
-        recipient_id: string;
-        type: string;
-        content: string;
-        metadata: string | null;
-        created_at: number;
-        inbox_address_kind: "client" | "node";
-        inbox_address_id: string;
-    }>;
-    /** Count unread messages for one inbox */
-    unreadCountForInbox(inboxAddress: InboxAddress): number;
-    /** Delete all rows for one inbox boundary, returning deleted row count. */
-    deleteForInbox?(inboxAddress: InboxAddress): number;
-}
-/** Duck-typed session history interface for tools — avoids @aria/cli import. */
-export interface SessionHistoryRef {
-    /** List sessions, ordered by most recent first */
-    listSessions(limit?: number, offset?: number): SessionSummaryRef[];
-    /** Search sessions by message content using FTS5 (falls back to LIKE) */
-    searchSessionsFts(query: string, limit?: number, offset?: number): SessionSummaryRef[];
-    /** Get full session with all messages */
-    getSession(sessionId: string): SessionContextRef | null;
-    /** Get incomplete (active) sessions */
-    getIncompleteSessions(limit?: number): SessionSummaryRef[];
-    /** Delete a session by ID */
-    deleteSession(sessionId: string): void;
-    /** Mark a session as completed */
-    markCompleted(sessionId: string): void;
-    /** Set session title */
-    setSessionTitle(sessionId: string, title: string): void;
-    /** Resolve session by ID prefix (8+ chars) */
-    findSessionByPrefix(prefix: string): string | null;
-    /** Get total session count */
-    getSessionCount(): number;
-    /** Get run metrics for a session */
-    getRunMetrics(sessionId: string): RunMetricsRef[];
-}
-export interface SessionSummaryRef {
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
-    completedAt?: Date;
-    title: string | null;
-    arion: string;
-    model: string;
-    messageCount: number;
-    preview: string;
-}
-export interface SessionContextRef {
-    id: string;
-    arion: string;
-    model: string;
-    messages: SessionMessageRef[];
-}
-export interface SessionMessageRef {
-    id: number;
-    role: "user" | "assistant" | "system" | "tool";
-    content: string;
-    arion?: string;
-    toolCallId?: string;
-    toolCalls?: Array<{
-        id: string;
-        name: string;
-        arguments: Record<string, unknown>;
-    }>;
-    createdAt: Date;
-}
-export interface RunMetricsRef {
-    id: string;
-    sessionId: string;
-    turnCount?: number;
-    inputTokens?: number;
-    outputTokens?: number;
-    totalTokens?: number;
-    estimatedCost?: number;
-    wallTimeMs?: number;
-    toolCount?: number;
-}
-/** Context provided to tool execution */
-export interface ToolContext {
-    /** Current working directory */
-    workingDir: string;
-    /** Environment variables */
-    env: Record<string, string>;
-    /** Current arion executing the tool */
-    arion?: ArionRef;
-    /** Manager for arion operations */
-    manager?: ArionManagerRef;
-    /** Memory system */
-    memoria?: IMemoria;
-    /** LLM router for any needed completions */
-    router?: ModelRouterRef;
-    /** Request user confirmation (required for tools with requiresConfirmation) */
-    confirm: (message: string) => Promise<boolean>;
-    /** Signal for cancellation support */
-    abortSignal?: AbortSignal;
-    /** Arbitrary caller-provided context from RunOptions.context */
-    context?: unknown;
-    /** Registry for tracking spawned child process PIDs (cleanup on session close) */
-    processRegistry?: ProcessRegistryRef;
-    /** PTY session store for write_stdin (interactive process I/O) */
-    ptySessionStore?: PTYSessionStoreRef;
-    /** Active provider context for provider-aware tools */
-    providerContext?: ProviderContext;
-    /** Delegation registry for checking delegation status (check_delegation tool) */
-    delegationRegistry?: DelegationRegistryRef;
-    /** Delegation executor for starting delegations (delegate_arion, spawn_worker tools) */
-    delegationExecutor?: DelegationExecutorRef;
-    /** Native search adapter callback for Gemini isolated strategy (wired by runner) */
-    nativeSearchAdapter?: (query: string) => Promise<Array<{
-        title: string;
-        url: string;
-        content: string;
-        score?: number;
-    }>>;
-    /** User interaction handler for ask_user tool. CLI prompts directly, server returns pending state. */
-    userInteraction?: {
-        ask(questions: Array<{
-            question: string;
-            options?: string[];
-        }>): Promise<Array<{
-            answer: string;
-        }>>;
-    };
-    /** Quest store for structured quest persistence (flows from RunSession → QuestStore) */
-    questStore?: QuestStoreRef;
-    /** Per-turn ask_user call counter (reset by runner at turn boundaries) */
-    askUserCallCounter?: {
-        count: number;
-    };
-    /** Active tool registry for wiring learned/adopted tools into the current session */
-    toolRegistry?: ToolRegistryRef;
-    /** Autonomy level — "full" disables filesystem blocklists for unrestricted access */
-    autonomy?: "minimal" | "balanced" | "high" | "full";
-    /** Message store for inter-agent messaging (send, receive, search, thread) */
-    messageStore?: MessageStoreRef;
-    /** Mailbox for inter-agent message delivery (routes messages to recipients) */
-    mailbox?: MailboxRef;
-    /** Public control-plane surface for runtime-owned networking */
-    networkControl?: NetworkControlRef;
-    /** Sender type for messaging — "worker" for child workers, "leader" for parent */
-    senderType?: "worker" | "leader";
-    /** Canonical runtime identity for process-owned messaging. */
-    runtimeId?: RuntimeId;
-    /** Durable local node identity for runtime-owned inbox routing. */
-    nodeId?: NodeId;
-    /** Recipient-scoped local inbox identity for message reads/persistence. */
-    inboxAddress?: InboxAddress;
-    /** Session history for conversation search and management */
-    sessionHistory?: SessionHistoryRef;
-    /** Current session ID (for session_history 'current' action) */
-    currentSessionId?: string;
-}
-/** Result of tool execution */
-export interface ToolResult {
-    /** Whether the tool executed successfully */
-    success: boolean;
-    /** Human-readable result message (for LLM and user feedback) */
-    message: string;
-    /** Optional structured data */
-    data?: unknown;
-}
-/** Tool definition */
-export interface Tool {
-    /** Unique tool name */
-    name: string;
-    /** Human-readable description */
-    description: string;
-    /** Tool category */
-    category: ToolCategory;
-    /** JSON Schema for parameters */
-    parameters: JSONSchema7;
-    /** Risk level for auto-approval */
-    riskLevel: RiskLevel;
-    /**
-     * Optional safety issues discovered during prior review attempts.
-     * Used to provide richer approval prompts for deferred/self-created tools.
-     */
-    issues?: string[];
-    /**
-     * Whether user confirmation is required before execution.
-     * Defaults based on riskLevel: 'dangerous' = true, others = false
-     */
-    requiresConfirmation?: boolean;
-    /**
-     * Whether this tool only reads state (safe for parallel execution).
-     * Mutating tools (write, delete, execute) should be false.
-     */
-    isReadOnly?: boolean;
-    /**
-     * Loading tier for TTFT optimization.
-     * "always" — tool schema sent to model on every request
-     * "deferred" — available via search only, not in initial prompt
-     */
-    loadingTier: LoadingTier;
-    /**
-     * Optional input-dependent approval override.
-     * When set, called before the static needsApproval check. If returns true,
-     * approval is skipped for this specific invocation. Used by shell tools
-     * to skip approval for read-only commands (e.g. `ls`, `git status`).
-     */
-    skipApprovalForInput?: (input: unknown) => boolean;
-    /** Execute the tool */
-    execute(input: unknown, context: ToolContext): Promise<ToolResult>;
-}
-/** Tool registration options */
-export interface RegisterOptions {
-    /** Override existing tool with same name */
-    override?: boolean;
-}
-/**
- * Tool info for system prompt (lightweight)
- */
-export interface ToolInfo {
-    name: string;
-    description: string;
-    requiresConfirmation: boolean;
-    parameters: Array<{
-        name: string;
-        type: string;
-        required: boolean;
-        description?: string;
-    }>;
-}
-/**
- * Tool use block from LLM response
- */
-export interface ToolUseBlock {
-    type: "tool_use";
-    id: string;
-    name: string;
-    input: Record<string, unknown>;
-}
-/**
- * Tool result block for LLM continuation
- */
-export interface ToolResultBlock {
-    type: "tool_result";
-    tool_use_id: string;
-    content: string;
-    is_error?: boolean;
-}
-/**
- * Minimal logger interface for suppressing or capturing log output.
- * Defaults to `console` when not provided, preserving existing behavior.
- */
-export interface Logger {
-    warn(msg: string, ...args: unknown[]): void;
-    error(msg: string, ...args: unknown[]): void;
-}
-/**
- * Middleware function for tool execution.
- * Wraps tool execution with cross-cutting concerns (logging, abort, confirmation, etc.).
- */
-export type ToolMiddleware = (tool: Tool, input: unknown, context: ToolContext, next: () => Promise<ToolResult>) => Promise<ToolResult>;
-/**
- * Registry for managing tools
- */
-export interface ToolRegistry {
-    get(name: string): Tool | undefined;
-    getAll(): Tool[];
-    getToolInfos(): ToolInfo[];
-    register(tool: Tool, options?: RegisterOptions): void;
-    has(name: string): boolean;
-    list(category?: ToolCategory): Tool[];
-    /** Execute a tool by name with input validation against its JSON Schema */
-    execute(name: string, input: unknown, context: ToolContext): Promise<ToolResult>;
-    /** Register a middleware to wrap tool execution (optional — not all implementations support it) */
-    use?(mw: ToolMiddleware): void;
-}