@arnilo/prism 0.1.3 → 0.1.5

package/dist/contracts.d.ts

@@ -1,2274 +1,12 @@
-import type { AudioContent, DocumentContent, FileContent } from "./content.js";
-import type { ContributionRegistries } from "./contributions.js";
-import type { AgentInput } from "./input.js";
-import type { ManifestContributionDeclaration } from "./manifests.js";
-import type { Middleware, MiddlewareHookName, MiddlewareRegistry } from "./middleware.js";
-import type { SecretRedactor } from "./redaction.js";
-import type { PermissionPolicy, TrustPolicy } from "./security.js";
-import type { ToolValidator } from "./tools.js";
-export type JsonPrimitive = string | number | boolean | null;
-export type JsonValue = JsonPrimitive | JsonObject | JsonValue[];
-export interface JsonObject {
-    readonly [key: string]: JsonValue;
-}
-export interface ErrorInfo {
-    readonly name?: string;
-    readonly message: string;
-    readonly code?: string | number;
-    /** Provider backpressure hint (e.g. from a `Retry-After` header); retry policies
-     *  honor it capped at their own `maxDelayMs`. */
-    readonly retryAfterMs?: number;
-    readonly cause?: unknown;
-}
-export type { AudioContent, DocumentContent, FileContent } from "./content.js";
-export type ContentBlock = TextContent | ImageContent | AudioContent | FileContent | DocumentContent | ThinkingContent | ToolCallDeltaContent | ToolCallContent | ToolResultContent;
-export interface TextContent {
-    readonly type: "text";
-    readonly text: string;
-}
-export interface ImageContent {
-    readonly type: "image";
-    readonly mimeType?: string;
-    readonly data?: string;
-    readonly url?: string;
-    readonly resourceUri?: string;
-    readonly name?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ThinkingContent {
-    readonly type: "thinking";
-    readonly text: string;
-    readonly signature?: string;
-}
-export interface ToolCallDeltaContent {
-    readonly type: "tool_call_delta";
-    readonly index: number;
-    readonly id?: string;
-    readonly name?: string;
-    readonly argumentsText?: string;
-    /** Who executes the call. `"provider-hosted"` = the provider runs it server-side;
-     *  the host must NOT dispatch it or send a `tool_result`. Defaults to `"host"`. */
-    readonly authority?: ToolCallAuthority;
-}
-export type ToolCallAuthority = "host" | "provider-hosted";
-export interface ToolCallContent {
-    readonly type: "tool_call";
-    readonly id: string;
-    readonly name: string;
-    readonly arguments: JsonObject;
-    /** Set when streamed arguments failed JSON parse; dispatch blocks without execute(). */
-    readonly argumentsError?: ErrorInfo;
-    /** Who executes the call. `"provider-hosted"` = the provider already ran it
-     *  server-side; the host must NOT dispatch it or append a `tool_result`. The
-     *  assistant response text already incorporates the call's effect. */
-    readonly authority?: ToolCallAuthority;
-}
-export interface ToolResultContent {
-    readonly type: "tool_result";
-    readonly toolCallId: string;
-    readonly name: string;
-    readonly result?: unknown;
-    readonly error?: ErrorInfo;
-}
-export interface Message {
-    readonly id?: string;
-    readonly role: "system" | "user" | "assistant" | "tool";
-    readonly content: readonly ContentBlock[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ModelConfig {
-    readonly provider: string;
-    readonly model: string;
-    readonly displayName?: string;
-    readonly capabilities?: ModelCapabilities;
-    readonly limits?: ModelLimits;
-    readonly cost?: ModelCost;
-    readonly cache?: ModelCacheCapabilities;
-    readonly compat?: JsonObject;
-    readonly parameters?: Readonly<Record<string, unknown>>;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ModelCapabilities {
-    /** Known values include `text`, `image`, `audio`, `file`, and `document`. */
-    readonly input?: readonly string[];
-    readonly output?: readonly string[];
-    readonly reasoning?: boolean;
-    readonly tools?: boolean;
-    readonly streaming?: boolean;
-    /** Native JSON-schema structured output support for this model. */
-    readonly structuredOutput?: boolean | "json_schema";
-}
-export interface ModelLimits {
-    readonly contextWindow?: number;
-    readonly maxOutputTokens?: number;
-}
-export interface ModelCost {
-    readonly input?: number;
-    readonly output?: number;
-    readonly cacheRead?: number;
-    readonly cacheWrite?: number;
-    readonly currency?: string;
-    readonly unit?: string;
-}
-export interface Usage {
-    readonly inputTokens?: number;
-    readonly outputTokens?: number;
-    readonly totalTokens?: number;
-    readonly cacheReadTokens?: number;
-    readonly cacheWriteTokens?: number;
-    readonly cost?: number;
-    readonly currency?: string;
-}
-export interface RunLimits {
-    readonly maxTurns?: number;
-    readonly maxProviderAttempts?: number;
-    readonly maxToolRounds?: number;
-    readonly maxToolCalls?: number;
-    readonly maxWallTimeMs?: number;
-    readonly maxRequestBytes?: number;
-    readonly maxResponseBytes?: number;
-    readonly maxInputTokens?: number;
-    readonly maxOutputTokens?: number;
-    readonly maxTotalTokens?: number;
-    readonly maxCost?: {
-        readonly amount: number;
-        readonly currency: string;
-    };
-}
-export type RunLimitName = keyof Required<RunLimits>;
-export interface RunLimitCounters {
-    readonly turns: number;
-    readonly providerAttempts: number;
-    readonly toolRounds: number;
-    readonly toolCalls: number;
-    readonly wallTimeMs: number;
-    readonly requestBytes: number;
-    readonly responseBytes: number;
-    readonly inputTokens: number;
-    readonly outputTokens: number;
-    readonly totalTokens: number;
-    readonly cost: number;
-}
-export interface RunLimitBreach {
-    readonly limit: RunLimitName;
-    readonly maximum: number;
-    readonly observed: number;
-    readonly currency?: string;
-}
-export type GuardrailStage = "input" | "output" | "tool_input" | "tool_output";
-export type GuardrailAction = "allow" | "block" | "tripwire" | "interrupt";
-export type GuardrailValue<S extends GuardrailStage> = S extends "input" ? readonly Message[] : S extends "output" ? ProviderTurnResult : S extends "tool_input" ? ToolCallContent : ToolResult;
-export interface GuardrailContext<S extends GuardrailStage> {
-    readonly stage: S;
-    readonly value: GuardrailValue<S>;
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly toolCallId?: string;
-    readonly toolName?: string;
-    readonly metadata: Readonly<Record<string, unknown>>;
-    readonly signal: AbortSignal;
-}
-export interface GuardrailDecision {
-    readonly action: GuardrailAction;
-    readonly reason?: string;
-    /** Public data only; Prism JSON-normalizes, bounds, and redacts it before emission. */
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface Guardrail<S extends GuardrailStage = GuardrailStage> {
-    readonly name: string;
-    readonly stage: S;
-    /** Host-authored stable identity for durable definitions; unused by ordinary runs. */
-    readonly revision?: string;
-    evaluate(context: GuardrailContext<S>): GuardrailDecision | Promise<GuardrailDecision>;
-}
-export interface GuardrailRecord {
-    readonly guardrail: string;
-    readonly stage: GuardrailStage;
-    readonly action: GuardrailAction;
-    readonly reason?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface Guardrails {
-    readonly input?: readonly Guardrail<"input">[];
-    readonly output?: readonly Guardrail<"output">[];
-    readonly toolInput?: readonly Guardrail<"tool_input">[];
-    readonly toolOutput?: readonly Guardrail<"tool_output">[];
-    /** Defaults to sequential; at most 16 stage evaluations run at once. */
-    readonly maxConcurrency?: number;
-}
-export type CacheRetention = "none" | "short" | "long";
-export type PromptCacheKind = "implicit" | "openai_key" | "cache_control" | "provider_specific" | "none";
-export interface ModelCacheCapabilities {
-    readonly kind?: PromptCacheKind;
-    readonly maxKeyLength?: number;
-    readonly maxBreakpoints?: number;
-    readonly minCacheableTokens?: number;
-    readonly longRetention?: boolean;
-}
-export type PromptCacheMode = "auto" | "on" | "off";
-export type PromptCacheBreakpointLocation = "system_prompt" | "tools" | "stable_context" | "last_stable_message" | "last_user_message" | "message_id";
-export type PromptCacheBreakpointTtl = "short" | "long";
-export interface PromptCacheBreakpoint {
-    readonly location: PromptCacheBreakpointLocation;
-    readonly messageId?: string;
-    readonly ttl?: PromptCacheBreakpointTtl;
-}
-export interface PromptCacheHints {
-    readonly mode?: PromptCacheMode;
-    readonly key?: string;
-    readonly retention?: CacheRetention;
-    readonly breakpoints?: readonly PromptCacheBreakpoint[];
-}
-export interface StructuredOutputOptions {
-    readonly name: string;
-    readonly schema: JsonObject;
-    readonly strict?: boolean;
-}
-export interface ProviderRequestOptions {
-    readonly sessionId?: string;
-    readonly cacheRetention?: CacheRetention;
-    readonly cacheKey?: string;
-    readonly cache?: PromptCacheHints;
-    readonly headers?: Readonly<Record<string, string>>;
-    /** @deprecated Provider-level timeout is inert in first-party providers; pass an AbortSignal/RunOptions.signal instead. */
-    readonly timeoutMs?: number;
-    /** @deprecated Provider-level retry is inert in first-party providers; use AgentConfig.retry/RunOptions.retry instead. */
-    readonly maxRetries?: number;
-    /** @deprecated Provider-level retry is inert in first-party providers; use AgentConfig.retry/RunOptions.retry instead. */
-    readonly maxRetryDelayMs?: number;
-    readonly compat?: JsonObject;
-    readonly extra?: JsonObject;
-    /** Provider-neutral JSON-schema structured output request. Requires model `capabilities.structuredOutput`. */
-    readonly structuredOutput?: StructuredOutputOptions;
-    /** Opaque provider continuation cursor (e.g. OpenAI `previous_response_id`). When set,
-     *  the provider resumes from this cursor instead of re-sending full history. */
-    readonly continuation?: {
-        readonly cursor: string;
-    };
-}
-export interface ProviderRequest {
-    readonly model: ModelConfig;
-    readonly messages: readonly Message[];
-    readonly tools?: readonly ToolDefinition[];
-    readonly context?: readonly ContextBlock[];
-    readonly options?: ProviderRequestOptions;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-export type ProviderEvent = {
-    readonly type: "message_start";
-    readonly messageId?: string;
-} | {
-    readonly type: "content_delta";
-    readonly content: ContentBlock;
-} | {
-    readonly type: "tool_call_delta";
-    readonly index: number;
-    readonly id?: string;
-    readonly name?: string;
-    readonly argumentsText?: string;
-    readonly authority?: ToolCallAuthority;
-} | {
-    readonly type: "tool_call";
-    readonly call: ToolCallContent;
-} | {
-    readonly type: "usage";
-    readonly usage: Usage;
-} | {
-    readonly type: "continuation_required";
-    readonly cursor: string;
-    readonly reason?: string;
-} | {
-    readonly type: "done";
-    readonly usage?: Usage;
-} | {
-    readonly type: "error";
-    readonly error: ErrorInfo;
-};
-export interface AIProvider {
-    readonly id: string;
-    generate(request: ProviderRequest): AsyncIterable<ProviderEvent>;
-}
-export type ProviderResolver = (model: ModelConfig) => AIProvider | undefined;
-/** Realtime audio/session event. Realtime is a bidirectional session, not a request/response
- *  stream, so it is a separate neutral seam from `AIProvider.generate()`. Credentials are
- *  bound to the session handshake only and never appear in events. */
-export type RealtimeEvent = {
-    readonly type: "session_started";
-    readonly sessionId?: string;
-} | {
-    readonly type: "audio_delta";
-    readonly audio: Uint8Array;
-} | {
-    readonly type: "transcript_delta";
-    readonly text: string;
-    readonly role: "user" | "assistant";
-} | {
-    readonly type: "tool_call";
-    readonly call: ToolCallContent;
-} | {
-    readonly type: "interrupted";
-} | {
-    readonly type: "session_closed";
-    readonly reason?: string;
-} | {
-    readonly type: "error";
-    readonly error: ErrorInfo;
-};
-/** Neutral bidirectional realtime session seam. The provider owns the transport
- *  (e.g. WebSocket); the host owns audio capture/playback and session lifecycle. */
-export interface RealtimeSession {
-    readonly id: string;
-    readonly provider: string;
-    /** Send an audio chunk (PCM/Opus; provider-specific format set at creation). */
-    sendAudio(chunk: Uint8Array, options?: {
-        readonly signal?: AbortSignal;
-    }): Promise<void>;
-    /** Inbound events (audio out, transcripts, hosted tool calls, interruption, close, error). */
-    events(): AsyncIterable<RealtimeEvent>;
-    /** Request the provider stop the current response mid-stream. */
-    interrupt(options?: {
-        readonly signal?: AbortSignal;
-    }): Promise<void>;
-    /** Close the session and release the transport. Idempotent. */
-    close(reason?: string, options?: {
-        readonly signal?: AbortSignal;
-    }): Promise<void>;
-}
-/** Factory a provider exposes for realtime sessions; not part of `AIProvider`. */
-export type RealtimeSessionFactory = (options: RealtimeSessionOptions) => RealtimeSession;
-export interface RealtimeSessionOptions {
-    readonly model: ModelConfig;
-    readonly signal?: AbortSignal;
-    /** Provider-specific caps override; providers enforce finite defaults. */
-    readonly caps?: RealtimeCaps;
-}
-export interface RealtimeCaps {
-    readonly maxAudioEventsPerSecond?: number;
-    readonly maxBytesPerSecond?: number;
-    readonly maxWallMs?: number;
-}
-export type InputAssemblyLayout = "legacy" | "cache_aware";
-export interface RunOptions {
-    readonly signal?: AbortSignal;
-    readonly model?: ModelConfig;
-    readonly providerSource?: ProviderResolver;
-    /** @deprecated Use `limits.maxToolRounds`. */
-    readonly maxToolRounds?: number;
-    /** Run-scoped ceilings. When an agent config also sets limits, these can only narrow it. */
-    readonly limits?: RunLimits;
-    readonly providerOptions?: ProviderRequestOptions;
-    readonly providerRequestPolicies?: ProviderRequestPolicy | readonly ProviderRequestPolicy[];
-    readonly systemPrompt?: SystemPromptConfig;
-    readonly compaction?: false | CompactionOptions;
-    readonly retry?: false | RetryOptions;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly redactor?: SecretRedactor;
-    readonly runLedger?: RunLedger;
-    /** Optional durable recovery store. Per-run value overrides this agent default. */
-    readonly effectStore?: ToolEffectStore;
-    readonly ownership?: OwnershipScope;
-    /** Host-verified identity; when set, must project onto `ownership` without widening. */
-    readonly identity?: import("./identity.js").AgentIdentity;
-    readonly idempotencyKey?: string;
-    readonly validate?: ToolValidator;
-    readonly activeSkills?: readonly string[];
-    readonly skills?: readonly Skill[];
-    /** Migration opt-in: activate every skill in a configured `SkillRegistry` when `activeSkills` / `skills` are unset. */
-    readonly activateAllSkills?: true;
-    /** Progressive: catalog (name+description) unless loaded; eager: full instructions every turn. Default progressive. */
-    readonly skillsDisclosure?: import("./skill-disclosure.js").SkillsDisclosure;
-    /** Opt-in projection-only fold for aged large tool results in provider view; store untouched. */
-    readonly toolResultFold?: import("./tool-result-fold.js").ToolResultFoldOptions;
-    readonly instructionInjectors?: readonly InstructionInjector[];
-    readonly inputLayout?: InputAssemblyLayout;
-    readonly loop?: AgentLoopStrategy | AgentLoopOptions;
-    /** Appended to agent-level guardrails for this run. */
-    readonly guardrails?: Guardrails;
-    /** Opt-in durable interruption/checkpointing. */
-    readonly runState?: AgentRunStateOptions;
-}
-export interface AgentDefinition {
-    readonly name: string;
-    readonly description?: string;
-    /** Direct model config, or a model id resolved from `registries.models`. */
-    readonly model?: ModelConfig | string;
-    /** Tool names to activate from the active tool registry / `registries.tools`. */
-    readonly tools?: readonly string[];
-    /** Skill names resolved through `resolveActiveSkills()`; `toolNames` enforcement applies. */
-    readonly skills?: readonly string[];
-    /** Context provider names from `registries.contextProviders`. */
-    readonly context?: readonly string[];
-    readonly systemPrompt?: SystemPromptConfig;
-    readonly instructions?: string;
-    readonly loop?: AgentLoopStrategy | AgentLoopOptions;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    /** Optional escape hatch. When present, overrides declarative resolution. */
-    create?(config?: AgentConfig): Promise<Agent> | Agent;
-}
-/** Input to {@link resolveAgentDefinition}. All fields are optional; the host
- *  controls scope by which registries it passes. */
-export interface AgentDefinitionResolutionContext {
-    readonly registries?: ContributionRegistries;
-    readonly providerSource?: ProviderResolver;
-    readonly tools?: ToolRegistry | readonly ToolDefinition[];
-    readonly skillsRegistry?: SkillRegistry;
-    /** Migration-only: omitted `tools`/`skills` activate every in-scope tool/skill. Defaults to fail-closed. */
-    readonly activateAllCapabilities?: true;
-    readonly overrides?: Partial<AgentConfig>;
-}
-export interface AgentConfig {
-    readonly id?: string;
-    readonly name?: string;
-    readonly instructions?: string;
-    readonly model: ModelConfig;
-    readonly provider?: AIProvider;
-    readonly providerSource?: ProviderResolver;
-    readonly tools?: ToolRegistry | readonly ToolDefinition[];
-    readonly context?: readonly ContextProvider[];
-    readonly skills?: SkillRegistry | readonly Skill[];
-    /** Migration opt-in: activate every registry skill by default when run options do not narrow activation. */
-    readonly activateAllSkills?: true;
-    /** Progressive: catalog (name+description) unless loaded; eager: full instructions every turn. Default progressive. */
-    readonly skillsDisclosure?: import("./skill-disclosure.js").SkillsDisclosure;
-    /** Opt-in projection-only fold for aged large tool results in provider view; store untouched. */
-    readonly toolResultFold?: import("./tool-result-fold.js").ToolResultFoldOptions;
-    readonly inputBuilder?: InputBuilder;
-    readonly promptBuilder?: PromptBuilder;
-    readonly middleware?: MiddlewareRegistry;
-    readonly resourceLoader?: ResourceLoader;
-    readonly store?: SessionStore;
-    readonly permission?: PermissionPolicy;
-    /** Optional trust check for tool and resource targets. */
-    readonly trust?: TrustPolicy;
-    readonly providerOptions?: ProviderRequestOptions;
-    readonly providerRequestPolicies?: ProviderRequestPolicy | readonly ProviderRequestPolicy[];
-    readonly systemPrompt?: SystemPromptConfig;
-    readonly redactor?: SecretRedactor;
-    readonly runLedger?: RunLedger;
-    /** Optional durable recovery store. */
-    readonly effectStore?: ToolEffectStore;
-    readonly ownership?: OwnershipScope;
-    /** Host-verified identity default for sessions created from this agent. */
-    readonly identity?: import("./identity.js").AgentIdentity;
-    readonly idempotencyKey?: string;
-    readonly compaction?: false | CompactionOptions;
-    readonly retry?: false | RetryOptions;
-    /** Agent-wide ceilings; per-run limits may only narrow these values. */
-    readonly limits?: RunLimits;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly validator?: ToolValidator;
-    readonly instructionInjectors?: readonly InstructionInjector[];
-    readonly inputLayout?: InputAssemblyLayout;
-    readonly loop?: AgentLoopStrategy | AgentLoopOptions;
-    readonly guardrails?: Guardrails;
-    /** Opt-in durable interruption/checkpointing default for this agent. */
-    readonly runState?: AgentRunStateOptions;
-    /** Internal marker set by createSecureAgent(); makes security defaults immutable per run. */
-    readonly secure?: true;
-}
-/** Opt-in fail-closed composition over the normal explicit AgentConfig API. */
-export interface SecureAgentOptions extends Omit<AgentConfig, "tools" | "validator" | "redactor" | "permission" | "trust" | "ownership" | "identity" | "limits" | "runState" | "secure"> {
-    readonly id: string;
-    readonly tools: readonly ToolDefinition[];
-    readonly toolArgumentValidator: import("./tools.js").ToolArgumentValidator;
-    readonly redactor: SecretRedactor;
-    readonly permission: PermissionPolicy;
-    readonly trust: TrustPolicy;
-    readonly ownership: OwnershipScope;
-    /** Optional host-verified identity; when set must match `ownership`. */
-    readonly identity?: import("./identity.js").AgentIdentity;
-    readonly limits: RunLimits;
-    readonly definitionRevision: string;
-    readonly runState: Omit<AgentRunStateOptions, "definitionRevision" | "interruptBeforeTool">;
-}
-export interface Agent {
-    readonly config: AgentConfig;
-    createSession(config?: AgentSessionConfig): AgentSession;
-}
-export interface AgentSessionConfig {
-    readonly id?: string;
-    readonly agent?: Agent;
-    readonly store?: SessionStore;
-    readonly leafId?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface AgentSessionForkOptions {
-    readonly leafId?: string;
-}
-export interface AgentSessionCloneOptions {
-    readonly id?: string;
-    readonly leafId?: string;
-}
-export type SubscriberOverflowPolicy = "close" | "drop_oldest" | "drop_newest";
-export interface SubscribeOptions {
-    /** Maximum queued events for a subscriber that is not actively awaiting `next()`. Defaults to 1024. */
-    readonly maxQueuedEvents?: number;
-    /** What to do when `maxQueuedEvents` is reached. Defaults to `close`. */
-    readonly overflow?: SubscriberOverflowPolicy;
-}
-export type AgentRunStatus = "succeeded" | "failed" | "aborted" | "suspended" | "denied";
-export type AgentRunInterruptionKind = "input_guardrail" | "tool_approval" | "elicitation";
-export type ApprovalOutcome = "allow_once" | "allow_for_run" | "reject_once" | "reject_for_run";
-export type PendingDecisionKind = "tool_approval" | "elicitation";
-/** Redacted match scope for one pending or sticky decision; never contains raw tool arguments. */
-export interface DecisionScope {
-    readonly toolName?: string;
-    readonly effectKind?: ToolEffectKind;
-    /** Redacted principal reference (tenant/kind/id); never a credential. */
-    readonly identity?: string;
-    /** Bounded argument-value constraints; deep-equal matched per key. */
-    readonly actionConstraints?: Readonly<Record<string, JsonValue>>;
-    /** SHA-256 of canonical JSON arguments; present instead of raw arguments. */
-    readonly argumentsHash?: string;
-}
-/** One redacted, unresolved approval request inside a suspended durable run. */
-export interface PendingDecision {
-    /** Unique within the run; nested runs use supervisor-prefixed ids. */
-    readonly approvalId: string;
-    readonly kind: PendingDecisionKind;
-    readonly toolCallId?: string;
-    readonly scope: DecisionScope;
-    /** Bounded, redacted. */
-    readonly reason: string;
-    /** Typed payload contract for elicitation decisions. */
-    readonly elicitationSchema?: JsonObject;
-    /** Delegation chain, root-first; core-written, never client-supplied. */
-    readonly attribution?: {
-        readonly path: readonly string[];
-    };
-}
-/** Redacted safe-boundary descriptor; never contains tool arguments. */
-export interface AgentRunInterruption {
-    readonly kind: AgentRunInterruptionKind;
-    readonly reason: string;
-    readonly toolCallId?: string;
-    readonly toolName?: string;
-    /** All unresolved approval requests of this suspension; absent for legacy single approvals. */
-    readonly pendingDecisions?: readonly PendingDecision[];
-}
-/** One host decision applied to one pending approval request. */
-export interface RunDecision {
-    readonly approvalId: string;
-    readonly outcome: ApprovalOutcome;
-    /** Bounded to 2 KiB; redacted. */
-    readonly reason?: string;
-    /** Revalidated (schema, guardrails, policy) before dispatch; produces a new arguments hash. */
-    readonly modifiedArguments?: JsonObject;
-    /** Elicitation payload; validated against the pending decision's elicitationSchema. */
-    readonly elicitation?: JsonObject;
-}
-/** Run-scoped sticky decision; exact scope match, rechecked against policy, dropped at run end. */
-export interface StickyDecision {
-    readonly scope: DecisionScope;
-    readonly outcome: "allow_for_run" | "reject_for_run";
-    readonly reason?: string;
-    readonly decidedAt: string;
-    /** Delegation path when the sticky was created for a nested-run decision. */
-    readonly attribution?: {
-        readonly path: readonly string[];
-    };
-}
-/** Root-visible link between one nested approval and the child-run approval id. */
-export interface NestedRunApproval {
-    /** Root-visible approval id (hashed, non-enumerating across runs). */
-    readonly id: string;
-    /** Approval id as the nested run recorded it. */
-    readonly childApprovalId: string;
-}
-/** Root-visible link between a suspended nested run and the tool call that hosted it. */
-export interface NestedRunRef {
-    readonly runId: string;
-    readonly sessionId?: string;
-    readonly toolCallId: string;
-    /** Redacted delegation path (child ids, root first). */
-    readonly path: readonly string[];
-    readonly approvals: readonly NestedRunApproval[];
-    /** Decisions persisted by a partial batch, keyed by root-visible approval id. */
-    readonly decisions?: Readonly<Record<string, RunDecision>>;
-}
-/** Outcome of resuming a nested run through the host-supplied hook. */
-export type NestedRunOutcome = {
-    readonly status: "suspended";
-    readonly pendingDecisions: readonly PendingDecision[];
-} | {
-    readonly status: "completed";
-    readonly value?: JsonValue;
-} | {
-    readonly status: "failed";
-    readonly code: string;
-    readonly message: string;
-};
 /**
- * Host hook that resumes a nested run (supervisor child) with child-visible decisions.
- * Used both when a nested suspension first surfaces (sticky auto-apply) and when root
- * decisions route back to the child on resume.
+ * Contracts barrel (0.1.4 god-module split): re-exports the full public
+ * contracts surface from the three concern-split modules
+ * (contracts-core / contracts-run-state / contracts-protocol) so the
+ * import surface of `./contracts.js` is unchanged.
  */
-export type ResumeNestedRun = (nested: {
-    readonly ref: AgentRunRef;
-    readonly toolCallId: string;
-    readonly path: readonly string[];
-}, decisions: readonly RunDecision[]) => Promise<NestedRunOutcome>;
-/**
- * Thrown by a delegated-run host (e.g. the supervisor) when a nested run suspends on
- * pending decisions inside a tool execution. Core converts it into a root suspension
- * with attributed, root-visible approval ids; the dispatching wrapper attaches `toolCall`.
- */
-export declare class AgentDelegationSuspendedError extends Error {
-    readonly ref: AgentRunRef;
-    readonly pendingDecisions: readonly PendingDecision[];
-    /** Redacted delegation path (child ids) used when decisions carry no attribution. */
-    readonly path?: readonly string[] | undefined;
-    readonly code = "ERR_PRISM_DELEGATION_SUSPENDED";
-    toolCall?: ToolCallContent;
-    constructor(ref: AgentRunRef, pendingDecisions: readonly PendingDecision[], 
-    /** Redacted delegation path (child ids) used when decisions carry no attribution. */
-    path?: readonly string[] | undefined);
-}
-/** Shared decision-contract violations. Unknown and foreign approval ids share one non-enumerating error. */
-export declare class AgentDecisionError extends Error {
-    readonly code: "ERR_PRISM_DECISION_STALE" | "ERR_PRISM_DECISION_UNKNOWN" | "ERR_PRISM_DECISION_DUPLICATE" | "ERR_PRISM_DECISION_SCOPE" | "ERR_PRISM_DECISION_INVALID" | "ERR_PRISM_DECISION_LIMIT";
-    constructor(code: "ERR_PRISM_DECISION_STALE" | "ERR_PRISM_DECISION_UNKNOWN" | "ERR_PRISM_DECISION_DUPLICATE" | "ERR_PRISM_DECISION_SCOPE" | "ERR_PRISM_DECISION_INVALID" | "ERR_PRISM_DECISION_LIMIT", message: string, options?: {
-        readonly cause?: unknown;
-    });
-}
-export declare const DEFAULT_MAX_PENDING_DECISIONS = 32;
-export declare const HARD_MAX_PENDING_DECISIONS = 128;
-export declare const DEFAULT_MAX_STICKY_DECISIONS = 64;
-export declare const HARD_MAX_STICKY_DECISIONS = 256;
-export declare const MAX_DECISION_REASON_BYTES: number;
-export declare const HARD_MAX_DECISION_REASON_BYTES: number;
-export declare const MAX_ELICITATION_BYTES: number;
-export declare const HARD_MAX_ELICITATION_BYTES: number;
-export declare const MAX_ACTION_CONSTRAINTS = 32;
-export declare const HARD_MAX_ACTION_CONSTRAINTS = 64;
-/** Maximum delegation attribution depth for surfaced nested pending decisions. */
-export declare const MAX_ATTRIBUTION_DEPTH = 8;
-export declare const MAX_ACTION_CONSTRAINT_BYTES: number;
-export declare const HARD_MAX_ACTION_CONSTRAINT_BYTES: number;
-export interface AgentRunStateOptions {
-    readonly checkpoints: CheckpointStore;
-    /** Host-authored immutable revision required for durable runs. */
-    readonly definitionRevision: string;
-    /** Suspend every tool call before its side effect. */
-    readonly interruptBeforeTool?: boolean;
-    readonly maxStateBytes?: number;
-    readonly fencingToken?: number;
-    /** Enables sticky auto-apply when a nested suspension first surfaces during this run. */
-    readonly resumeNestedRun?: ResumeNestedRun;
-    /**
-     * Opt-in (plan 015 Task 4): persist the session's loaded-skill names in the run-state
-     * checkpoint and restore them on resume. Names only — bodies reload via `load_skill`.
-     * Default off: checkpoint shape is identical to 0.1.2.
-     */
-    readonly persistSessionState?: boolean;
-}
-/** Versioned, redacted checkpoint payload. Treat as opaque except status/version/interruption. */
-export interface AgentRunState {
-    readonly schemaVersion: 1;
-    readonly agentId: string;
-    readonly definitionRevision: string;
-    readonly fingerprint: string;
-    readonly runId: string;
-    readonly sessionId: string;
-    readonly leafId?: string;
-    readonly model: ModelConfig;
-    readonly status: AgentRunStatus | "running";
-    readonly interruption?: AgentRunInterruption;
-    readonly version?: number;
-}
-export interface AgentRunResume {
-    readonly expectedVersion: number;
-    /** Legacy single-approval path; `approve` allows all pending once, `deny` terminates the run denied. */
-    readonly decision?: "approve" | "deny";
-    /** Batch decision path; exactly one of decision/decisions. Applied as one atomic CAS transition. */
-    readonly decisions?: readonly RunDecision[];
-}
-export interface AgentRunResumeOptions {
-    readonly checkpoints: CheckpointStore;
-    /** Current host-authored revision; must exactly match the checkpoint. */
-    readonly definitionRevision: string;
-    readonly ownership?: OwnershipScope;
-    readonly fencingToken?: number;
-    /** Routes root decisions for nested-run approvals back to the child (e.g. supervisor). */
-    readonly resumeNestedRun?: ResumeNestedRun;
-    /** Opt-in (plan 015 Task 4): restore persisted loaded-skill names into the resumed session catalog. */
-    readonly persistSessionState?: boolean;
-}
-/** Bounded, abortable options for `resumeAgentRunStream()`. */
-export interface AgentRunResumeStreamOptions extends AgentRunResumeOptions, SubscribeOptions {
-    readonly signal?: AbortSignal;
-}
-export interface AgentRunRef {
-    readonly runId: string;
-    readonly sessionId?: string;
-}
-export interface AgentRunStatusResult {
-    readonly state: AgentRunState;
-    readonly version: number;
-}
-export declare class AgentRunStateError extends Error {
-    readonly code = "ERR_PRISM_AGENT_RUN_STATE";
-    constructor(message: string);
-}
-/** Durable-loop contract violations: hook-less custom strategy on a durable run, invalid snapshot, or revision drift. */
-export declare class AgentLoopStateError extends Error {
-    readonly code: "ERR_PRISM_LOOP_NOT_DURABLE" | "ERR_PRISM_LOOP_SNAPSHOT" | "ERR_PRISM_LOOP_REVISION";
-    constructor(code: "ERR_PRISM_LOOP_NOT_DURABLE" | "ERR_PRISM_LOOP_SNAPSHOT" | "ERR_PRISM_LOOP_REVISION", message: string, options?: {
-        readonly cause?: unknown;
-    });
-}
-/** Terminal result of `session.run()` / `session.prompt()`. Failed and aborted runs throw {@link AgentRunError} with this shape attached. */
-export interface AgentRunResult {
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly status: AgentRunStatus;
-    /** Branch leaf after the run settles. */
-    readonly leafId?: string;
-    /** Concatenated text blocks from the final assistant message, or `""` when none. */
-    readonly text: string;
-    /** Content blocks from the final assistant message, or `[]` when none. */
-    readonly content: readonly ContentBlock[];
-    /** Final assistant message when the run produced one. */
-    readonly message?: Message;
-    /** Aggregate usage across provider turns (`run_total` scope). */
-    readonly usage?: Usage;
-    /** Present when the run hit a configured resource ceiling. */
-    readonly limit?: RunLimitBreach;
-    /** Present when `status` is `"failed"` or when a failed attempt still produced partial output. */
-    readonly error?: ErrorInfo;
-    /** String form of the abort reason when `status` is `"aborted"`. */
-    readonly abortReason?: string;
-    /** Present for durable suspended/terminal runs. Payload is redacted and bounded. */
-    readonly runState?: AgentRunState;
-    /** Present only while awaiting an operator decision. */
-    readonly interruption?: AgentRunInterruption;
-}
-export declare class AgentRunError extends Error {
-    readonly result: AgentRunResult;
-    constructor(result: AgentRunResult, options?: {
-        readonly cause?: unknown;
-    });
-}
-/** Mid-run steer queue: default pending message count (fail closed at this cap). */
-export declare const DEFAULT_MAX_PENDING_STEERS = 8;
-/** Absolute pending steer count ceiling if hosts later expose overrides. */
-export declare const HARD_MAX_PENDING_STEERS = 32;
-/** Mid-run steer queue: default total UTF-8 byte budget across pending messages. */
-export declare const DEFAULT_MAX_PENDING_STEER_BYTES: number;
-/** Absolute pending steer byte ceiling if hosts later expose overrides. */
-export declare const HARD_MAX_PENDING_STEER_BYTES: number;
-export interface SteerOptions {
-    /**
-     * When true, abort the in-flight provider stream and continue the same run after
-     * injecting steered user text. Default false: inject before the next provider turn
-     * (after the current tool batch completes).
-     */
-    readonly softInterrupt?: boolean;
-}
-export interface AgentSession {
-    readonly id: string;
-    /** Current branch leaf entry id; advances on every append/run and is re-pointed by `checkout`.
-     *  Undefined until the first entry lands (a fresh session with no history). */
-    readonly leafId: string | undefined;
-    run(input: string | Message | readonly Message[], options?: RunOptions): Promise<AgentRunResult>;
-    prompt(input: string, options?: RunOptions): Promise<AgentRunResult>;
-    /**
-     * Enqueue user text into an active run. Default injects before the next provider turn.
-     * `softInterrupt: true` aborts the current provider stream, then continues the same run.
-     * Fails closed when no run is active or the pending queue exceeds caps.
-     */
-    steer(input: string | Message | readonly Message[], options?: SteerOptions): void;
-    /** Subscribe first, then start exactly one run and yield only that run's events until it terminates. */
-    stream(input: string | Message | readonly Message[], options?: RunOptions & SubscribeOptions): AsyncIterable<AgentEvent>;
-    compact(options?: CompactionOptions): Promise<CompactionResult>;
-    subscribe(options?: SubscribeOptions): AsyncIterable<AgentEvent>;
-    abort(reason?: unknown): void;
-    entries(): Promise<readonly SessionEntry[]>;
-    checkout(leafId?: string): Promise<void>;
-    fork(options?: AgentSessionForkOptions): AgentSession;
-    clone(options?: AgentSessionCloneOptions): Promise<AgentSession>;
-}
-export interface ProviderTurnMetadata {
-    readonly providerId: string;
-    readonly model: ModelConfig;
-    readonly requestId?: string;
-    readonly latencyMs?: number;
-    readonly attempt?: number;
-    readonly httpStatus?: number;
-    readonly rateLimitRemaining?: number;
-    readonly rateLimitResetMs?: number;
-}
-export interface ToolExecutionMetadata {
-    readonly durationMs: number;
-    readonly status: ToolCallStatus;
-}
-export type AgentEvent = {
-    readonly type: "agent_started";
-    readonly sessionId: string;
-    readonly runId: string;
-} | {
-    readonly type: "agent_finished";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly usage?: Usage;
-} | {
-    readonly type: "agent_suspended";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly interruption: AgentRunInterruption;
-    readonly version: number;
-} | {
-    readonly type: "agent_resumed";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly version: number;
-} | {
-    readonly type: "agent_denied";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly interruption: AgentRunInterruption;
-    readonly version: number;
-} | {
-    readonly type: "turn_started";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly turn: number;
-} | {
-    readonly type: "turn_finished";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly turn: number;
-} | {
-    readonly type: "provider_turn_started";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly turn: number;
-    readonly metadata: ProviderTurnMetadata;
-} | {
-    readonly type: "provider_turn_finished";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly turn: number;
-    readonly metadata: ProviderTurnMetadata;
-    readonly usage?: Usage;
-    readonly error?: ErrorInfo;
-} | {
-    readonly type: "message_started";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly message: Message;
-} | {
-    readonly type: "message_delta";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly content: ContentBlock;
-} | {
-    readonly type: "message_finished";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly message: Message;
-} | {
-    readonly type: "tool_execution_started";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly call: ToolCallContent;
-} | {
-    readonly type: "tool_execution_progress";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly toolCallId: string;
-    readonly name: string;
-    readonly progress?: unknown;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-} | {
-    readonly type: "tool_execution_finished";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly result: ToolResult;
-    readonly metadata: ToolExecutionMetadata;
-} | {
-    readonly type: "tool_execution_error";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly call: ToolCallContent;
-    readonly error: ErrorInfo;
-    readonly metadata: ToolExecutionMetadata;
-} | {
-    readonly type: "tool_execution_blocked";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly toolCallId: string;
-    readonly name: string;
-    readonly reason: string;
-    readonly error: ErrorInfo;
-    readonly metadata: ToolExecutionMetadata;
-} | {
-    readonly type: "guardrail_decision";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly toolCallId?: string;
-    readonly toolName?: string;
-    readonly record: GuardrailRecord;
-} | {
-    readonly type: "run_limit_exceeded";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly breach: RunLimitBreach;
-} | {
-    readonly type: "queue_updated";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly size: number;
-} | {
-    /** A steered message was dropped by a terminal input guardrail; the run continues without it. */
-    readonly type: "steer_rejected";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly message: Message;
-    readonly record: GuardrailRecord;
-} | {
-    readonly type: "event_subscriber_overflow";
-    readonly sessionId: string;
-    readonly runId?: string;
-    readonly droppedEvents: number;
-    readonly maxQueuedEvents: number;
-    readonly overflow: SubscriberOverflowPolicy;
-} | {
-    readonly type: "compaction_started";
-    readonly sessionId: string;
-    readonly runId?: string;
-} | {
-    readonly type: "compaction_finished";
-    readonly sessionId: string;
-    readonly runId?: string;
-    readonly summary: string;
-} | {
-    readonly type: "retry_scheduled";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly attempt: number;
-    readonly delayMs: number;
-    readonly error: ErrorInfo;
-} | {
-    readonly type: "error";
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly error: ErrorInfo;
-} | {
-    readonly type: "artifact_validation_started";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly turn: number;
-    readonly attempt: number;
-} | {
-    readonly type: "artifact_validation_finished";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly turn: number;
-    readonly attempt: number;
-    readonly result: ArtifactValidation;
-} | {
-    readonly type: "artifact_revision_started";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly turn: number;
-    readonly attempt: number;
-    readonly failure: ArtifactValidation;
-} | {
-    readonly type: "artifact_finished";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly turn: number;
-    readonly attempt: number;
-    readonly result: ArtifactValidation;
-} | {
-    readonly type: "artifact_failed";
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly turn: number;
-    readonly attempt: number;
-    readonly result: ArtifactValidation;
-};
-export type ToolEffectKind = "none" | "local_mutation" | "external_mutation";
-export type ToolEffectIdempotency = "none" | "optional" | "required" | "tool_managed" | "unsupported";
-/** Static or validated-argument classification of one tool call's side-effect behavior. */
-export interface ToolEffectDeclaration {
-    readonly kind: ToolEffectKind;
-    readonly idempotency: ToolEffectIdempotency;
-}
-/** Runs after argument validation. It must be synchronous, deterministic, bounded, and side-effect-free. */
-export type ToolEffectClassifier = (args: JsonObject, context: ToolExecutionContext) => ToolEffectDeclaration;
-/**
- * Elicitation contract declared by a tool. When a durable gated run suspends on this tool,
- * the pending decision has kind `elicitation` and carries this schema as its payload contract;
- * the resume decision's `elicitation` payload resolves the call without executing it.
- */
-export interface ToolElicitationRequest {
-    /** Typed payload contract; bounded to HARD_MAX_ELICITATION_BYTES when serialized. */
-    readonly schema: JsonObject;
-    /** Human-facing reason (e.g. the question); bounded to MAX_DECISION_REASON_BYTES. */
-    readonly reason?: string;
-    /** Answer-shape validation beyond structural schema checks; throw to reject the payload. */
-    readonly validate?: (payload: JsonObject) => void;
-}
-export interface ToolDefinition {
-    readonly name: string;
-    readonly description?: string;
-    readonly parameters?: JsonObject;
-    /** Force any provider turn containing this tool to dispatch sequentially. */
-    readonly exclusive?: boolean;
-    /** Optional side-effect declaration. Omitted tools retain legacy unmanaged dispatch. */
-    readonly effect?: ToolEffectDeclaration | ToolEffectClassifier;
-    /** Optional elicitation contract for durable gating; return undefined to fall back to plain tool approval. */
-    readonly elicitation?: (args: JsonObject, context: ToolExecutionContext) => ToolElicitationRequest | undefined;
-    execute(args: JsonObject, context: ToolExecutionContext): Promise<ToolResult> | ToolResult;
-}
-export interface ToolRegistry {
-    register(tool: ToolDefinition): void;
-    get(name: string): ToolDefinition | undefined;
-    resolve(name: string): ToolDefinition;
-    list(): readonly ToolDefinition[];
-}
-export interface ToolExecutionContext {
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly toolCallId: string;
-    readonly signal?: AbortSignal;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    /** Host-verified identity for this tool invocation, when enterprise identity is active. */
-    readonly identity?: import("./identity.js").AgentIdentity;
-    /** Core-derived stable effect key. Never accept a model-supplied key as authority. */
-    readonly idempotencyKey?: string;
-    progress?(progress?: unknown, metadata?: Readonly<Record<string, unknown>>): void | Promise<void>;
-}
-export interface ToolResult {
-    readonly toolCallId: string;
-    readonly name: string;
-    readonly content?: readonly ContentBlock[];
-    readonly value?: unknown;
-    readonly error?: ErrorInfo;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export type ToolEffectStatus = "pending" | "dispatched" | "completed" | "failed_retryable" | "failed_terminal" | "unknown";
-export interface ToolEffectRecord extends OwnershipScope {
-    readonly key: string;
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly toolCallId: string;
-    readonly toolName: string;
-    readonly argumentsHash: string;
-    readonly status: ToolEffectStatus;
-    readonly attempt: number;
-    readonly version: number;
-    readonly claimToken?: string;
-    readonly result?: ToolResult;
-    readonly resultRef?: string;
-    readonly failure?: {
-        readonly code: string;
-        readonly reference?: string;
-    };
-    readonly createdAt: string;
-    readonly updatedAt: string;
-    readonly expiresAt?: string;
-}
-export interface ToolEffectKey {
-    readonly identity: import("./identity.js").AgentIdentity;
-    readonly ownership: OwnershipScope;
-    readonly key: string;
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly toolCallId: string;
-    readonly toolName: string;
-    readonly argumentsHash: string;
-    readonly signal?: AbortSignal;
-}
-export interface ToolEffectTransition extends ToolEffectKey {
-    readonly claimToken: string;
-    readonly expectedVersion: number;
-}
-/** Durable claim/CAS store for recoverable tool effects. */
-export interface ToolEffectStore {
-    get(input: ToolEffectKey): Promise<ToolEffectRecord | undefined>;
-    begin(input: ToolEffectKey & {
-        readonly claimTtlMs?: number;
-        readonly maxAttempts?: number;
-    }): Promise<{
-        readonly outcome: "acquired" | "existing";
-        readonly record: ToolEffectRecord;
-    }>;
-    markDispatched(input: ToolEffectTransition): Promise<ToolEffectRecord>;
-    complete(input: ToolEffectTransition & {
-        readonly result?: ToolResult;
-        readonly resultRef?: string;
-    }): Promise<ToolEffectRecord>;
-    fail(input: ToolEffectTransition & {
-        readonly status: "failed_retryable" | "failed_terminal";
-        readonly failure: {
-            readonly code: string;
-            readonly reference?: string;
-        };
-    }): Promise<ToolEffectRecord>;
-    markUnknown(input: ToolEffectTransition & {
-        readonly failure?: {
-            readonly code: string;
-            readonly reference?: string;
-        };
-    }): Promise<ToolEffectRecord>;
-    resolveUnknown(input: ToolEffectKey & {
-        readonly expectedVersion: number;
-        readonly status: "completed" | "failed_retryable" | "failed_terminal";
-        readonly result?: ToolResult;
-        readonly resultRef?: string;
-        readonly failure?: {
-            readonly code: string;
-            readonly reference?: string;
-        };
-    }): Promise<ToolEffectRecord>;
-    cleanup(input: {
-        readonly ownership: OwnershipScope;
-        readonly before: string;
-        readonly limit?: number;
-        readonly signal?: AbortSignal;
-    }): Promise<{
-        readonly deleted: number;
-    }>;
-}
-export interface CommandDefinition {
-    readonly name: string;
-    readonly description?: string;
-    readonly parameters?: JsonObject;
-    execute(args: JsonObject, context: CommandExecutionContext): Promise<CommandResult> | CommandResult;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface CommandExecutionContext {
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly signal?: AbortSignal;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface CommandResult {
-    readonly name: string;
-    readonly content?: readonly ContentBlock[];
-    readonly value?: unknown;
-    readonly error?: ErrorInfo;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ContextBlock {
-    readonly id?: string;
-    readonly title?: string;
-    readonly content: string | readonly ContentBlock[];
-    readonly priority?: number;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ContextProvider {
-    readonly name: string;
-    resolve(context: ContextResolutionContext): Promise<readonly ContextBlock[]> | readonly ContextBlock[];
-}
-export interface ContextResolutionContext {
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly messages: readonly Message[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-/** When an {@link InstructionInjector} contributes to the assembled provider input. */
-export type InstructionTiming = "first_turn" | "every_turn" | "on_input";
-/** Runtime turn scope handed to an {@link InstructionInjector}. Mirrors {@link LoopContext}
- *  scope using already-redacted input/history so predicates cannot recover secrets. */
-export interface InstructionContext {
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly turn: number;
-    readonly input: readonly Message[];
-    readonly history: readonly Message[];
-    readonly metadata: Readonly<Record<string, unknown>>;
-    readonly signal: AbortSignal;
-}
-/** Output of an {@link InstructionInjector}. Only `instructions` and `contextBlocks` are
- *  honored; other fields grant nothing (no tools, skills, or permissions). */
-export interface InstructionContribution {
-    readonly instructions?: string;
-    readonly contextBlocks?: readonly ContextBlock[];
-    readonly when: InstructionTiming;
-    /** Used only when `when === "on_input"`; absent predicate means apply every turn. */
-    readonly predicate?: (ctx: InstructionContext) => boolean;
-}
-/** Additive instruction/context contribution that a package registers through
- *  {@link ExtensionAPI.registerInstructionInjector} and the host selects on
- *  {@link AgentConfig.instructionInjectors} / {@link RunOptions.instructionInjectors}.
- *  Inert until selected; cannot grant privileges beyond text/context blocks. */
-export interface InstructionInjector {
-    readonly name: string;
-    readonly description?: string;
-    apply(ctx: InstructionContext): InstructionContribution;
-}
-export interface InputBuilder {
-    readonly name: string;
-    build(input: string | Message | readonly Message[], context?: InputBuildContext): Promise<readonly Message[]> | readonly Message[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface InputBuildContext {
-    readonly inputLayout?: InputAssemblyLayout;
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-    readonly permission?: PermissionPolicy;
-    readonly trust?: TrustPolicy;
-}
-export interface PromptBuilder {
-    readonly name: string;
-    build(request: PromptBuildRequest): Promise<readonly Message[]> | readonly Message[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface PromptBuildRequest {
-    readonly messages: readonly Message[];
-    readonly context?: readonly ContextBlock[];
-    readonly skills?: readonly Skill[];
-    readonly skillsDisclosure?: import("./skill-disclosure.js").SkillsDisclosure;
-    readonly loadedSkills?: import("./skill-disclosure.js").LoadedSkillSet;
-    /** Skills demoted to catalog-only by context budget this turn. */
-    readonly demotedSkillBodies?: readonly string[];
-    readonly tools?: readonly ToolDefinition[];
-    /** Model being prompted; lets builders adapt composition to declared capabilities
-     *  (e.g. the default builder omits the `Available tools:` text for tool-capable models). */
-    readonly model?: ModelConfig;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-export interface Skill {
-    readonly name: string;
-    readonly description?: string;
-    readonly instructions?: string;
-    readonly context?: readonly ContextProvider[];
-    readonly toolNames?: readonly string[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface SkillRegistry {
-    register(skill: Skill): void;
-    get(name: string): Skill | undefined;
-    resolve(name: string): Skill;
-    list(): readonly Skill[];
-}
-/** Directory-name spelling for discovered contribution kinds. Maps to a
- *  {@link ManifestContributionDeclaration} kind for non-skill kinds:
- *  `context` → `contextProvider`, `instructions` → `systemPromptContribution`. */
-export type ContributionFileKind = "skill" | "tool" | "context" | "instructions";
-/** Inert envelope emitted by the host/CLI discovery scanner. Carries the
- *  realized {@link Skill} for skill kinds and a manifest-referenced
- *  {@link ManifestContributionDeclaration} for other kinds; the host owns
- *  any executable behavior. Contains no code, no credential. */
-export interface DiscoveredContribution {
-    readonly kind: ContributionFileKind;
-    readonly name: string;
-    readonly origin: "global" | "workspace";
-    readonly path: string;
-    /** Present when `kind === "skill"`. */
-    readonly skill?: Skill;
-    /** Present for non-skill kinds. */
-    readonly declaration?: ManifestContributionDeclaration;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export type ExtensionLifecycleEventName = "resource_discovery" | "session_start" | "session_shutdown" | "before_agent_start" | "turn" | "context" | "provider_request" | "tool_call" | "tool_result" | "compaction" | "retry";
-export interface ExtensionEvent {
-    readonly type: ExtensionLifecycleEventName | "extension_error" | string;
-    readonly payload?: unknown;
-    readonly extension?: string;
-    readonly error?: ErrorInfo;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface Extension {
-    readonly name: string;
-    setup(api: ExtensionAPI): void | Promise<void>;
-    /** Host-attested signature/digest for `ExtensionLoadPolicy.verifySignature`. */
-    readonly signature?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ProviderPackage {
-    readonly name: string;
-    readonly version?: string;
-    readonly description?: string;
-    readonly docs?: ProviderPackageDocs;
-    setup(api: ProviderPackageAPI): void | Promise<void>;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ProviderPackageDocs {
-    readonly description?: string;
-    readonly links?: readonly string[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ProviderPackageAPI extends ExtensionAPI {
-}
-export type AuthMethod = ApiKeyAuthMethod | OAuthAuthMethod | CustomAuthMethod;
-export interface ApiKeyAuthMethod {
-    readonly kind: "api_key";
-    readonly provider: string;
-    readonly name?: string;
-    readonly credentialName?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface OAuthAuthMethod {
-    readonly kind: "oauth";
-    readonly provider: string;
-    readonly name?: string;
-    readonly oauth?: OAuthProvider;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface OAuthLoginCallbacks {
-    onAuth?(url: string): void | Promise<void>;
-    onDeviceCode?(code: {
-        readonly userCode: string;
-        readonly verificationUri: string;
-        readonly expiresAt?: string;
-    }): void | Promise<void>;
-    onPrompt?(message: string): string | undefined | Promise<string | undefined>;
-    onSelect?(prompt: {
-        readonly message: string;
-        readonly choices: readonly string[];
-    }): string | undefined | Promise<string | undefined>;
-    /** Aborts OAuth login flows and device-code polling when signaled. */
-    readonly signal?: AbortSignal;
-}
-export interface OAuthCredentials {
-    readonly access?: string;
-    readonly refresh?: string;
-    readonly expires?: string | number;
-    readonly accountId?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface OAuthProvider {
-    readonly id: string;
-    login(callbacks?: OAuthLoginCallbacks): Promise<OAuthCredentials> | OAuthCredentials;
-    refresh?(credentials: OAuthCredentials): Promise<OAuthCredentials> | OAuthCredentials;
-    /** Best-effort upstream revocation; the store delete is what fails closed locally. */
-    revoke?(credentials: OAuthCredentials): Promise<void> | void;
-    getCredential?(credentials: OAuthCredentials): Promise<Credential | undefined> | Credential | undefined;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface CustomAuthMethod {
-    readonly kind: "custom" | string;
-    readonly provider: string;
-    readonly name?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ProviderRequestPolicy {
-    readonly name: string;
-    apply(context: ProviderRequestPolicyContext): Promise<ProviderRequest | ProviderRequestPolicyResult> | ProviderRequest | ProviderRequestPolicyResult;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ProviderRequestPolicyContext {
-    readonly request: ProviderRequest;
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-export interface ProviderRequestPolicyResult {
-    readonly request: ProviderRequest;
-    readonly secrets?: readonly (string | undefined)[];
-}
-export type SystemPromptMode = "append" | "prepend" | "replace" | "disable";
-export type SystemPromptSource = "package" | "app" | "user" | "run" | string;
-export interface SystemPromptContribution {
-    readonly id: string;
-    readonly source?: SystemPromptSource;
-    readonly mode?: SystemPromptMode;
-    readonly text: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export type SystemPromptConfig = false | SystemPromptContribution | readonly SystemPromptContribution[];
-export interface ExtensionAPI {
-    readonly registries: ContributionRegistries;
-    readonly middleware: MiddlewareRegistry;
-    on(type: ExtensionLifecycleEventName | string, handler: (event: ExtensionEvent) => void | Promise<void>): () => void;
-    emit(event: ExtensionEvent): Promise<void>;
-    use<T>(hook: MiddlewareHookName | string, middleware: Middleware<T>): () => void;
-    registerProvider(provider: AIProvider): void;
-    registerModel(model: ModelConfig): void;
-    registerTool(tool: ToolDefinition): void;
-    registerContextProvider(provider: ContextProvider): void;
-    registerSkill(skill: Skill): void;
-    registerCommand(command: CommandDefinition): void;
-    registerAgent(agent: AgentDefinition): void;
-    registerInputBuilder(builder: InputBuilder): void;
-    registerPromptBuilder(builder: PromptBuilder): void;
-    registerCompactionStrategy(strategy: CompactionStrategy): void;
-    registerRetryPolicy(policy: RetryPolicy): void;
-    registerStoreFactory(factory: StoreFactory): void;
-    registerResourceLoader(key: string, loader: ResourceLoader): void;
-    registerSettingsProvider(key: string, provider: SettingsProvider): void;
-    registerCredentialResolver(key: string, resolver: CredentialResolver): void;
-    registerProviderPackage(providerPackage: ProviderPackage): void;
-    registerAuthMethod(method: AuthMethod): void;
-    registerProviderRequestPolicy(policy: ProviderRequestPolicy): void;
-    registerSystemPromptContribution(contribution: SystemPromptContribution): void;
-    registerInstructionInjector(injector: InstructionInjector): void;
-}
-export type SessionEntryKind = "message" | "event" | "summary" | "metadata" | "model_change" | "label" | "custom" | "compaction";
-export declare const SESSION_ENTRY_KINDS: readonly SessionEntryKind[];
-export declare const SESSION_ENTRY_SCHEMA_VERSION = 1;
-export declare function isSessionEntryKind(value: unknown): value is SessionEntryKind;
-export interface SessionEntry {
-    readonly id: string;
-    readonly parentId?: string;
-    readonly sessionId: string;
-    readonly timestamp: string;
-    readonly kind: SessionEntryKind;
-    readonly schemaVersion?: 1;
-    readonly runId?: string;
-    readonly message?: Message;
-    readonly event?: AgentEvent;
-    readonly model?: ModelConfig;
-    readonly previousModel?: ModelConfig;
-    readonly label?: string;
-    readonly summary?: string;
-    readonly data?: unknown;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface SessionStore {
-    append(entry: SessionEntry, options?: SessionAppendOptions): Promise<void>;
-    list(sessionId: string): Promise<readonly SessionEntry[]>;
-    get?(id: string): Promise<SessionEntry | undefined>;
-    /** DB-friendly branch read: return one branch's ancestor chain as a page so adapters
-     *  avoid `list(sessionId)` (full-session scan) + in-memory rebuild. Optional — the
-     *  built-in memory/JSONL stores omit it and the runtime falls back to `list()`. */
-    readBranchPath?(query: SessionBranchRead): Promise<PersistencePage<SessionEntry>>;
-    /**
-     * Optional bounded session search. Prefer implementing this **or** returning a companion
-     * `SessionIndex` from the adapter factory — hosts must not need both. Call
-     * `resolveSessionSearchQuery` before scan/query. Memory defaults to capped linear
-     * search (`sessionSearchMode: "unsupported"` throws). JSONL throws unsupported.
-     */
-    searchSessions?(query: SessionSearchQuery): Promise<PersistencePage<SessionSearchHit>>;
-}
-/** Host-written `SessionRecord.metadata` / session metadata key for workspace filtering. */
-export declare const SESSION_SEARCH_WORKSPACE_METADATA_KEY: "workspaceRoot";
-export declare const DEFAULT_SESSION_SEARCH_LIMIT = 20;
-export declare const HARD_MAX_SESSION_SEARCH_LIMIT = 100;
-export declare const DEFAULT_MAX_SESSION_SEARCH_QUERY_BYTES: number;
-export declare const HARD_MAX_SESSION_SEARCH_QUERY_BYTES: number;
-export declare const DEFAULT_MAX_SESSION_SEARCH_SNIPPET_BYTES = 512;
-export declare const HARD_MAX_SESSION_SEARCH_SNIPPET_BYTES: number;
-export declare const DEFAULT_MAX_SESSION_SEARCH_CURSOR_BYTES: number;
-export declare const HARD_MAX_SESSION_SEARCH_CURSOR_BYTES: number;
-export declare const DEFAULT_MAX_SESSION_SEARCH_LINEAR_SESSIONS = 1000;
-export declare const HARD_MAX_SESSION_SEARCH_LINEAR_SESSIONS = 5000;
-export declare const DEFAULT_MAX_SESSION_SEARCH_LINEAR_ENTRIES = 10000;
-export declare const HARD_MAX_SESSION_SEARCH_LINEAR_ENTRIES = 50000;
-export declare const DEFAULT_MAX_SESSION_SEARCH_LINEAR_BYTES: number;
-export declare const HARD_MAX_SESSION_SEARCH_LINEAR_BYTES: number;
-export declare const DEFAULT_MAX_SESSION_SEARCH_FTS_CANDIDATES = 1000;
-export declare const HARD_MAX_SESSION_SEARCH_FTS_CANDIDATES = 5000;
-/** Bounded session search filters. Workspace matches host-written `metadata.workspaceRoot`. */
-export interface SessionSearchQuery extends PersistenceQuery, OwnershipScope {
-    readonly workspaceRoot?: string;
-    /** Optional full-text / message+summary query (adapter-defined matching). */
-    readonly query?: string;
-    readonly provider?: string;
-    readonly model?: string;
-    readonly label?: string;
-    readonly summary?: string;
-    readonly fromUpdatedAt?: string;
-    readonly toUpdatedAt?: string;
-    readonly signal?: AbortSignal;
-}
-/**
- * Safe search hit for resume/checkout. Never includes credentials or raw full transcripts.
- * `leafId` is the branch tip for `session.checkout` when known.
- */
-export interface SessionSearchHit {
-    readonly sessionId: string;
-    readonly leafId?: string;
-    readonly updatedAt?: string;
-    readonly label?: string;
-    readonly summary?: string;
-    readonly snippet?: string;
-    /** Safe display fields only (e.g. workspaceRoot); never credentials. */
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Narrow search seam; adapters may implement this instead of `SessionStore.searchSessions`. */
-export interface SessionIndex {
-    search(query: SessionSearchQuery): Promise<PersistencePage<SessionSearchHit>>;
-}
-/** Validated search query with finite `limit` / `order` filled in. */
-export interface ResolvedSessionSearchQuery extends SessionSearchQuery {
-    readonly limit: number;
-    readonly order: "asc" | "desc";
-}
-/**
- * O(1) validation before any scan/query. Applies default page limit; rejects NaN,
- * non-positive limits, oversize query/cursor/filter strings, and invalid order.
- */
-export declare function resolveSessionSearchQuery(query: SessionSearchQuery): ResolvedSessionSearchQuery;
-export declare const SESSION_SEARCH_UNSUPPORTED_CODE: "session_search_unsupported";
-/** Thrown when a store opts out of `searchSessions` (memory `unsupported`, JSONL). */
-export declare class SessionSearchUnsupportedError extends Error {
-    readonly code: "session_search_unsupported";
-    constructor(message?: string);
-}
-export declare function isSessionSearchUnsupported(error: unknown): error is SessionSearchUnsupportedError;
-/** Query for a single branch's ancestor chain (DB-friendly: one recursive/ancestor query
- *  instead of a full-session scan). Honored by `SessionStore.readBranchPath` and the pure
- *  branch helpers' reader overload. `leafId` is optional (omit for the latest leaf). */
-export interface SessionBranchRead {
-    readonly sessionId: string;
-    readonly leafId?: string;
-    readonly cursor?: string;
-    readonly limit?: number;
-}
-/** Database-neutral callable returning one branch's ancestor chain as a page. Implementations
- *  issue a single recursive CTE / ancestor walk; the pure helpers follow `nextCursor` to
- *  completion. Returns redacted `SessionEntry` values only (stores already persist redacted
- *  entries; the runtime redacts before append). */
-export type BranchReader = (query: SessionBranchRead) => Promise<PersistencePage<SessionEntry>>;
-/**
- * Options for `SessionStore.append`. Stores that honor them reject dangling
- * `expectedParentId` values and deduplicate exact retries by `idempotencyKey` +
- * parent. Production stores may add stricter branch-tip CAS and report
- * `currentLeafId` in `SessionAppendConflictError`. `idempotencyKey` is an opaque
- * host string; stores redact it like metadata when persisted. Carries no
- * credentials, credential resolvers, provider instances, or unredacted secrets.
- */
-export interface SessionAppendOptions {
-    /** Parent entry the new entry should attach to. Must exist when provided. */
-    readonly expectedParentId?: string;
-    /** Opaque host idempotency key; exact retries for one parent deduplicate. */
-    readonly idempotencyKey?: string;
-}
-/**
- * Durable pointer to a branch tip. One session may own many handles (one per
- * leaf). `BranchRecord.leafEntryId` is the persistence-side equivalent.
- */
-export interface SessionBranchHandle {
-    readonly sessionId: string;
-    readonly leafId: string;
-}
-/** Stable error code carried by `SessionAppendConflictError`. */
-export declare const SESSION_APPEND_CONFLICT_CODE: "session_append_conflict";
-/** Conflict details carried by `SessionAppendConflictError`. Carries no secrets. */
-export interface SessionAppendConflict {
-    readonly code: typeof SESSION_APPEND_CONFLICT_CODE;
-    readonly expectedParentId?: string;
-    readonly currentLeafId?: string;
-    readonly idempotencyDuplicate?: boolean;
-}
-/**
- * Thrown when `SessionStore.append` rejects an entry under `SessionAppendOptions`
- * (dangling/stale `expectedParentId`, stricter adapter CAS failure, or duplicate
- * idempotency key for the same parent). Recognize via the stable `code` and
- * `isSessionAppendConflict`, not message text.
- */
-export declare class SessionAppendConflictError extends Error {
-    readonly conflict: SessionAppendConflict;
-    readonly code: "session_append_conflict";
-    constructor(conflict: SessionAppendConflict);
-}
-/** Type guard keyed off the stable `code` (works across bundles; not message text). */
-export declare function isSessionAppendConflict(error: unknown): error is SessionAppendConflictError;
-export interface StoreFactory {
-    readonly name: string;
-    create(config?: JsonObject): Promise<SessionStore> | SessionStore;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Ownership scope identifiers. Hosts may use these for multi-tenant isolation. */
-export interface OwnershipScope {
-    readonly tenantId?: string;
-    readonly accountId?: string;
-    readonly userId?: string;
-}
-/** Cursor-paginated result page. */
-export interface PersistencePage<T> {
-    readonly items: readonly T[];
-    readonly nextCursor?: string;
-    readonly total?: number;
-}
-/** Common query controls for cursor-based pagination. */
-export interface PersistenceQuery {
-    readonly cursor?: string;
-    readonly limit?: number;
-    readonly order?: "asc" | "desc";
-}
-/** Generic versioned checkpoint key. Namespaces prevent consumer collisions. */
-export interface CheckpointKey extends OwnershipScope {
-    readonly namespace: string;
-    readonly key: string;
-    readonly signal?: AbortSignal;
-}
-/** Input for an optimistic checkpoint write. Versions must strictly increase. */
-export interface CheckpointSaveInput extends CheckpointKey {
-    readonly version: number;
-    /** Exact current version required before update; use 0 for create-only. */
-    readonly expectedVersion?: number;
-    /** Monotonic lease fence. Lower or absent worker fences cannot replace a fenced record. */
-    readonly fencingToken?: number;
-    readonly value: unknown;
-    readonly category?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Durable generic checkpoint record. */
-export interface CheckpointRecord extends OwnershipScope {
-    readonly namespace: string;
-    readonly key: string;
-    readonly version: number;
-    readonly fencingToken?: number;
-    readonly value: unknown;
-    readonly category?: string;
-    readonly createdAt: string;
-    readonly updatedAt: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Bounded checkpoint query. */
-export interface CheckpointQuery extends PersistenceQuery, OwnershipScope {
-    readonly namespace?: string;
-    readonly keyPrefix?: string;
-    readonly category?: string | readonly string[];
-    readonly signal?: AbortSignal;
-}
-/** Generic versioned checkpoint capability for persistence adapters. */
-export interface CheckpointStore {
-    saveCheckpoint(input: CheckpointSaveInput): Promise<CheckpointRecord>;
-    loadCheckpoint(input: CheckpointKey): Promise<CheckpointRecord | null>;
-    listCheckpoints(query?: CheckpointQuery): Promise<PersistencePage<CheckpointRecord>>;
-    deleteCheckpoint(input: CheckpointKey): Promise<boolean>;
-}
-/** Generic lease key. Ownership fields are part of the trust boundary. */
-export interface LeaseKey extends OwnershipScope {
-    readonly namespace: string;
-    readonly key: string;
-    readonly signal?: AbortSignal;
-}
-export interface LeaseAcquireInput extends LeaseKey {
-    readonly ownerId: string;
-    readonly ttlMs: number;
-}
-export interface LeaseClaimInput extends LeaseKey {
-    readonly ownerId: string;
-    readonly token: string;
-    readonly ttlMs?: number;
-}
-export interface LeaseRecord extends OwnershipScope {
-    readonly namespace: string;
-    readonly key: string;
-    readonly ownerId: string;
-    readonly token: string;
-    readonly fencingToken: number;
-    readonly acquiredAt: string;
-    readonly expiresAt: string;
-    readonly updatedAt: string;
-}
-/** Atomic distributed lease capability. Expired rows retain fencing counters. */
-export interface LeaseStore {
-    tryAcquireLease(input: LeaseAcquireInput): Promise<LeaseRecord | null>;
-    renewLease(input: LeaseClaimInput & {
-        readonly ttlMs: number;
-    }): Promise<LeaseRecord | null>;
-    releaseLease(input: LeaseClaimInput): Promise<boolean>;
-    getLease(input: LeaseKey): Promise<LeaseRecord | null>;
-}
-/** Stored session record. Does not include provider objects or credentials. */
-export interface SessionRecord extends OwnershipScope {
-    readonly id: string;
-    readonly parentSessionId?: string;
-    readonly agentDefinitionId?: string;
-    readonly agentDefinitionVersion?: string;
-    readonly createdAt: string;
-    readonly updatedAt: string;
-    readonly expiresAt?: string;
-    readonly retentionPolicyId?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Stored branch handle / leaf pointer. The leaf is the current entry id for the branch. */
-export interface BranchRecord {
-    readonly id: string;
-    readonly sessionId: string;
-    readonly name?: string;
-    readonly rootEntryId?: string;
-    readonly parentBranchId?: string;
-    /** Durable leaf entry id for this branch (the persistence-side branch tip). */
-    readonly leafEntryId?: string;
-    readonly createdAt: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export type RunStatus = "queued" | "running" | "suspended" | "denied" | "succeeded" | "failed" | "aborted";
-/** Stored run record. */
-export interface RunRecord extends OwnershipScope {
-    readonly id: string;
-    readonly sessionId: string;
-    readonly branchId?: string;
-    readonly agentDefinitionId?: string;
-    readonly agentDefinitionVersion?: string;
-    readonly model?: ModelConfig;
-    readonly provider?: string;
-    readonly idempotencyKey?: string;
-    readonly status?: RunStatus;
-    readonly startedAt: string;
-    readonly finishedAt?: string;
-    readonly abortReason?: string;
-    readonly error?: ErrorInfo;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export type AgentEventType = AgentEvent["type"];
-/** Stored agent event ledger row. The `event` payload should be redacted before storage when secrets are present. */
-export interface AgentEventRecord extends OwnershipScope {
-    readonly id: string;
-    readonly sessionId: string;
-    readonly runId?: string;
-    /** Durable sources allocate positive, strictly increasing per-run positions. */
-    readonly sequence?: number;
-    readonly entryId?: string;
-    readonly type: AgentEventType;
-    readonly timestamp: string;
-    readonly event: AgentEvent;
-    readonly redacted: boolean;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** An event record returned by an {@link AgentEventSource}. */
-export interface DurableAgentEventRecord extends AgentEventRecord {
-    readonly runId: string;
-    readonly sequence: number;
-}
-export interface AgentEventEnvelope {
-    readonly record: DurableAgentEventRecord;
-    /** Opaque cursor immediately after `record`. */
-    readonly cursor: string;
-}
-export interface AgentEventSourcePage {
-    readonly items: readonly AgentEventEnvelope[];
-    readonly nextCursor?: string;
-    /** True only after every event preceding a terminal event has been returned. */
-    readonly terminal: boolean;
-}
-/** Exact-owned, per-run durable event read. `after` is exclusive. */
-export interface AgentEventSourceRead {
-    readonly ownership: OwnershipScope;
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly after?: string;
-    readonly limit?: number;
-    readonly signal?: AbortSignal;
-}
-export interface AgentEventSourceCleanup {
-    readonly ownership: OwnershipScope;
-    readonly before: string;
-    readonly limit?: number;
-    readonly signal?: AbortSignal;
-}
-export interface AgentEventSourceOptions {
-    readonly maxEventBytes?: number;
-    readonly maxPageSize?: number;
-    readonly maxCursorBytes?: number;
-    readonly maxQueuedEvents?: number;
-    readonly maxSubscribers?: number;
-    readonly pollIntervalMs?: number;
-    readonly reconnectInitialMs?: number;
-    readonly reconnectMaxMs?: number;
-    readonly maxRetainedEventsPerRun?: number;
-    readonly maxRetentionAgeMs?: number;
-}
-/** Optional durable event capability. `RunLedger` remains a write-only contract. */
-export interface AgentEventSource {
-    append(record: AgentEventRecord): Promise<DurableAgentEventRecord>;
-    page(input: AgentEventSourceRead): Promise<AgentEventSourcePage>;
-    subscribe(input: AgentEventSourceRead): AsyncIterable<AgentEventEnvelope>;
-    cleanup(input: AgentEventSourceCleanup): Promise<{
-        readonly deleted: number;
-    }>;
-}
-export type ToolCallStatus = "started" | "finished" | "error" | "blocked";
-/** Stored tool-call row. The `result` payload should be redacted before storage when secrets are present. */
-export interface ToolCallRecord extends OwnershipScope {
-    readonly id: string;
-    readonly sessionId: string;
-    readonly runId?: string;
-    readonly entryId?: string;
-    readonly toolCallId: string;
-    readonly name: string;
-    readonly arguments: JsonObject;
-    readonly result?: ToolResult;
-    readonly status?: ToolCallStatus;
-    readonly reason?: string;
-    readonly progress?: unknown;
-    readonly progressMetadata?: Readonly<Record<string, unknown>>;
-    readonly progressAt?: string;
-    readonly startedAt: string;
-    readonly finishedAt?: string;
-    readonly redacted: boolean;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export type UsageScope = "provider_turn" | "run_total";
-/** Stored usage row. `scope` prevents provider-turn and aggregate totals from being summed together. */
-export interface UsageRecord extends OwnershipScope {
-    readonly id: string;
-    readonly sessionId: string;
-    readonly runId?: string;
-    readonly entryId?: string;
-    readonly scope: UsageScope;
-    readonly turn?: number;
-    readonly attempt?: number;
-    readonly usage: Usage;
-    readonly recordedAt: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Host-implemented write-side ledger for runs, events, tool calls, and usage. */
-export interface RunLedger {
-    appendRun(record: RunRecord): Promise<void> | void;
-    appendEvent(record: AgentEventRecord): Promise<void> | void;
-    appendToolCall(record: ToolCallRecord): Promise<void> | void;
-    appendUsage(record: UsageRecord): Promise<void> | void;
-}
-/** Union of records that may be handed to a {@link RunLedger}. */
-export type RunLedgerRecord = RunRecord | AgentEventRecord | ToolCallRecord | UsageRecord;
-export type RunLedgerDurability = "write_through" | "flush_on_terminal" | "buffered";
-export interface RunLedgerFlushResult {
-    readonly accepted: number;
-    readonly flushed: number;
-    readonly buffered: number;
-}
-/** Optional durability seam implemented by bounded ledger adapters. */
-export interface FlushableRunLedger extends RunLedger {
-    readonly durability: RunLedgerDurability;
-    flush(): Promise<RunLedgerFlushResult>;
-    status(): RunLedgerFlushResult;
-    dispose(options?: {
-        readonly flush?: boolean;
-    }): Promise<void>;
-}
-/** Immutable human feedback linked to an existing owned run/trace and optional evaluations. */
-export interface RunFeedbackRecord extends OwnershipScope {
-    readonly id: string;
-    readonly runId: string;
-    readonly sessionId: string;
-    readonly traceId?: string;
-    readonly rating?: number;
-    readonly comment?: string;
-    readonly tags: readonly string[];
-    readonly scorerIds: readonly string[];
-    readonly evaluationIds: readonly string[];
-    readonly createdAt: string;
-    readonly createdBy?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface AppendRunFeedbackInput extends OwnershipScope {
-    readonly id: string;
-    readonly runId: string;
-    readonly sessionId?: string;
-    readonly traceId?: string;
-    readonly rating?: number;
-    readonly comment?: string;
-    readonly tags?: readonly string[];
-    readonly scorerIds?: readonly string[];
-    readonly evaluationIds?: readonly string[];
-    readonly createdAt?: string;
-    readonly createdBy?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-/** Cursor-paginated, ownership-scoped feedback query. */
-export interface RunFeedbackQuery extends PersistenceQuery, OwnershipScope {
-    readonly runId?: string;
-    readonly sessionId?: string;
-    readonly traceId?: string;
-    readonly rating?: number;
-    readonly scorerId?: string;
-    readonly evaluationId?: string;
-    readonly tag?: string;
-    readonly fromCreatedAt?: string;
-    readonly toCreatedAt?: string;
-    readonly signal?: AbortSignal;
-}
-export interface DeleteRunFeedbackInput extends OwnershipScope {
-    readonly id: string;
-    readonly signal?: AbortSignal;
-}
-/** Feedback storage seam. Records are append-only; correction uses a new record and deletion is explicit. */
-export interface RunFeedbackStore {
-    append(input: AppendRunFeedbackInput): Promise<RunFeedbackRecord>;
-    query(query: RunFeedbackQuery): Promise<PersistencePage<RunFeedbackRecord>>;
-    delete(input: DeleteRunFeedbackInput): Promise<boolean>;
-}
-/** Stored agent definition version. Does not include provider credentials/resolvers/provider instances. */
-export interface AgentDefinitionRecord extends OwnershipScope {
-    readonly id: string;
-    readonly name: string;
-    readonly version: string;
-    readonly source?: string;
-    readonly agentDefinition: AgentDefinition;
-    readonly createdAt: string;
-    readonly createdBy?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Stored retention policy. */
-export interface RetentionPolicy extends OwnershipScope {
-    readonly id: string;
-    readonly name?: string;
-    readonly maxAgeDays?: number;
-    readonly maxEntriesPerSession?: number;
-    readonly maxTotalBytes?: number;
-    readonly archiveStore?: string;
-    readonly appliedKinds?: readonly SessionEntryKind[];
-    readonly createdAt: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Stored migration record. */
-export interface MigrationRecord {
-    readonly id: string;
-    readonly name: string;
-    readonly version: string;
-    readonly appliedAt: string;
-    readonly appliedBy?: string;
-    readonly checksum?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Query for sessions. */
-export interface SessionQuery extends PersistenceQuery, OwnershipScope {
-    readonly id?: string;
-    readonly parentSessionId?: string;
-    readonly agentDefinitionId?: string;
-    readonly agentDefinitionVersion?: string;
-    readonly retentionPolicyId?: string;
-    /** Match sessions whose `metadata` object contains this top-level key (e.g. conversation marker). */
-    readonly metadataKey?: string;
-    readonly fromCreatedAt?: string;
-    readonly toCreatedAt?: string;
-    readonly fromUpdatedAt?: string;
-    readonly toUpdatedAt?: string;
-    readonly hasExpired?: boolean;
-}
-/** Validate a top-level `SessionRecord.metadata` key used by `SessionQuery.metadataKey` filters. */
-export declare function assertSessionMetadataKey(key: string): string;
-/** Query for session entries. */
-export interface SessionEntryQuery extends PersistenceQuery, OwnershipScope {
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly parentId?: string;
-    /** Filter to entries on the branch ending at this leaf id. */
-    readonly leafId?: string;
-    readonly kind?: SessionEntryKind | readonly SessionEntryKind[];
-    readonly fromTimestamp?: string;
-    readonly toTimestamp?: string;
-}
-/** Query for branch handles/leaves. */
-export interface BranchQuery extends PersistenceQuery {
-    readonly sessionId?: string;
-    readonly name?: string;
-    readonly parentBranchId?: string;
-    readonly hasLeaf?: boolean;
-}
-/** Query for runs. */
-export interface RunQuery extends PersistenceQuery, OwnershipScope {
-    readonly sessionId?: string;
-    readonly branchId?: string;
-    readonly agentDefinitionId?: string;
-    readonly agentDefinitionVersion?: string;
-    readonly status?: RunStatus | readonly RunStatus[];
-    readonly fromStartedAt?: string;
-    readonly toStartedAt?: string;
-    readonly fromFinishedAt?: string;
-    readonly toFinishedAt?: string;
-    readonly isFinished?: boolean;
-}
-/** Query for agent event ledger rows. */
-export interface AgentEventQuery extends PersistenceQuery, OwnershipScope {
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly entryId?: string;
-    readonly type?: AgentEventType | readonly AgentEventType[];
-    readonly fromTimestamp?: string;
-    readonly toTimestamp?: string;
-    readonly redacted?: boolean;
-}
-/** Query for tool-call rows. */
-export interface ToolCallQuery extends PersistenceQuery, OwnershipScope {
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly entryId?: string;
-    readonly name?: string;
-    readonly status?: ToolCallStatus | readonly ToolCallStatus[];
-    readonly fromStartedAt?: string;
-    readonly toStartedAt?: string;
-    readonly fromFinishedAt?: string;
-    readonly toFinishedAt?: string;
-    readonly redacted?: boolean;
-}
-/** Query for usage rows. */
-export interface UsageQuery extends PersistenceQuery, OwnershipScope {
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly entryId?: string;
-    readonly scope?: UsageScope;
-    readonly turn?: number;
-    readonly attempt?: number;
-    readonly fromRecordedAt?: string;
-    readonly toRecordedAt?: string;
-}
-/** Query for agent definition versions. */
-export interface AgentDefinitionQuery extends PersistenceQuery, OwnershipScope {
-    readonly name?: string;
-    readonly version?: string;
-    readonly source?: string;
-    readonly fromCreatedAt?: string;
-    readonly toCreatedAt?: string;
-}
-/** Query for retention policies. */
-export interface RetentionPolicyQuery extends PersistenceQuery, OwnershipScope {
-    readonly name?: string;
-    readonly archiveStore?: string;
-}
-/** Query for migration records. */
-export interface MigrationQuery extends PersistenceQuery {
-    readonly name?: string;
-    readonly version?: string;
-    readonly fromAppliedAt?: string;
-    readonly toAppliedAt?: string;
-}
-/**
- * Production database-neutral persistence store contract.
- * Hosts implement this interface to provide durable, paginated storage
- * for sessions, entries, runs, events, tool calls, usage, agent definitions,
- * and migrations, with optional generic checkpoint and atomic lease capabilities. No SQL client, ORM, host file storage, or network dependency is
- * required by the contract.
- */
-export interface ProductionPersistenceStore {
-    readonly name?: string;
-    /** Optional generic write capability for resumable consumers such as workflows. */
-    readonly checkpoints?: CheckpointStore;
-    /** Optional atomic distributed lease capability for coordinators and workers. */
-    readonly leases?: LeaseStore;
-    /** Optional immutable run/trace feedback storage capability. */
-    readonly feedback?: RunFeedbackStore;
-    /** Optional durable, cross-replica-capable event source. */
-    readonly events?: AgentEventSource;
-    querySessions(query: SessionQuery): Promise<PersistencePage<SessionRecord>>;
-    queryBranches(query: BranchQuery): Promise<PersistencePage<BranchRecord>>;
-    queryEntries(query: SessionEntryQuery): Promise<PersistencePage<SessionEntry>>;
-    queryRuns(query: RunQuery): Promise<PersistencePage<RunRecord>>;
-    queryEvents(query: AgentEventQuery): Promise<PersistencePage<AgentEventRecord>>;
-    queryToolCalls(query: ToolCallQuery): Promise<PersistencePage<ToolCallRecord>>;
-    queryUsage(query: UsageQuery): Promise<PersistencePage<UsageRecord>>;
-    queryAgentDefinitions(query: AgentDefinitionQuery): Promise<PersistencePage<AgentDefinitionRecord>>;
-    queryRetentionPolicies(query: RetentionPolicyQuery): Promise<PersistencePage<RetentionPolicy>>;
-    queryMigrations(query: MigrationQuery): Promise<PersistencePage<MigrationRecord>>;
-    /** Optional session-record write capability (conversation threads, host-managed sessions).
-     *  Upserts by id; ownership columns are set on create, `metadata`/`updatedAt` on update. */
-    appendSession?(record: SessionRecord): Promise<void>;
-    /** DB-friendly branch read (mirrors `SessionStore.readBranchPath`): one ancestor-chain
-     *  query instead of `queryEntries({ sessionId })` + in-memory walk. Optional. */
-    readBranchPath?(query: SessionBranchRead): Promise<PersistencePage<SessionEntry>>;
-    /**
-     * Optional Phase 8 retention / legal-hold / export / tenant-quota lifecycle.
-     * Prefer attaching `createMemoryPersistenceLifecycle()` or adapter-native methods.
-     */
-    readonly lifecycle?: import("./persistence-lifecycle.js").PersistenceLifecycleStore;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface CompactionStrategy {
-    readonly name: string;
-    compact(context: CompactionContext): Promise<CompactionResult> | CompactionResult;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface CompactionContext {
-    readonly sessionId: string;
-    readonly entries: readonly SessionEntry[];
-    readonly keepRecentEntries?: number;
-    readonly trigger?: "manual" | "auto" | string;
-    readonly secrets?: readonly (string | undefined)[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-export interface CompactionResult {
-    readonly summary: string;
-    readonly entries?: readonly SessionEntry[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface CompactionOptions {
-    readonly strategy?: CompactionStrategy;
-    readonly thresholdEntries?: number;
-    readonly keepRecentEntries?: number;
-    readonly maxSummaryChars?: number;
-    readonly secrets?: readonly (string | undefined)[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-export interface CompactionMiddlewarePayload {
-    readonly context: CompactionContext;
-    readonly result: CompactionResult;
-}
-export interface CompactionEntryData {
-    readonly throughEntryId?: string;
-    readonly keepEntryIds?: readonly string[];
-    readonly strategy?: string;
-    readonly trigger?: "manual" | "auto" | string;
-}
-export interface RetryPolicy {
-    readonly name: string;
-    decide(context: RetryContext): Promise<RetryDecision> | RetryDecision;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface RetryContext {
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly attempt: number;
-    readonly error: ErrorInfo;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-export interface RetryDecision {
-    readonly retry: boolean;
-    readonly delayMs?: number;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface RetryOptions {
-    readonly policy?: RetryPolicy;
-    readonly maxAttempts?: number;
-    readonly baseDelayMs?: number;
-    readonly maxDelayMs?: number;
-    readonly secrets?: readonly (string | undefined)[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface RetryMiddlewarePayload {
-    readonly context: RetryContext;
-    readonly decision: RetryDecision;
-}
-export interface Resource {
-    readonly uri: string;
-    readonly mediaType?: string;
-    readonly text?: string;
-    readonly data?: Uint8Array;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ResourceLoader {
-    load(uri: string, context?: ResourceLoadContext): Promise<Resource>;
-    list?(context?: ResourceLoadContext): Promise<readonly Resource[]>;
-}
-export interface ResourceLoadContext {
-    readonly signal?: AbortSignal;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly permission?: PermissionPolicy;
-    readonly trust?: TrustPolicy;
-}
-export interface SettingsProvider {
-    get<T = unknown>(key: string): Promise<T | undefined> | T | undefined;
-}
-export interface CredentialRequest {
-    readonly name: string;
-    readonly provider?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface Credential {
-    readonly type: "bearer" | "api_key" | "basic" | "custom";
-    readonly value: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface CredentialResolver {
-    resolve(request: CredentialRequest): Promise<Credential | undefined> | Credential | undefined;
-}
-export interface CredentialResolverSource {
-    readonly name: string;
-    readonly resolver: CredentialResolver;
-}
-export interface OAuthCredentialStore {
-    set(provider: string, credentials: OAuthCredentials): void | Promise<void>;
-}
-export interface ProviderTurnResult {
-    readonly content: readonly ContentBlock[];
-    readonly calls: readonly ToolCallContent[];
-    readonly messageId?: string;
-    readonly started: boolean;
-    readonly usage?: Usage;
-}
-export interface LoopContext {
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly metadata: Readonly<Record<string, unknown>>;
-    readonly signal: AbortSignal;
-    readonly history: Message[];
-    readonly input: AgentInput;
-    readonly inputMessages: readonly Message[];
-    readonly maxToolRounds: number;
-    /** Maximum independent tool calls dispatched concurrently per provider turn. Default `1`. */
-    readonly toolConcurrency: number;
-    assemble(nextInput: AgentInput, toolResults?: readonly ToolResult[], turn?: number): Promise<ProviderRequest>;
-    /**
-     * Charges a complete tool round before any call in it can start. On durable interrupt
-     * runs this is also the round-level approval gate: it collects every gated call of the
-     * round into one suspension. Loops must await it; dispatch without it falls back to
-     * per-call single-decision suspensions.
-     */
-    chargeToolRound?(calls: readonly ToolCallContent[]): void | Promise<void>;
-    generate(request: ProviderRequest): Promise<ProviderTurnResult>;
-    dispatchToolCall(call: ToolCallContent): Promise<ToolResult>;
-    isToolCallExclusive?(call: ToolCallContent): boolean;
-    appendMessage(message: Message): Promise<void>;
-    emit(event: AgentEvent): void;
-    /** True when mid-run steers are queued for the next provider turn. */
-    hasPendingSteers?(): boolean;
-    /** Drain pending steers into history/session. Returns true when any were applied. */
-    applyPendingSteers?(): Promise<boolean>;
-    /** Snapshot captured at the last suspension when the strategy declared snapshot/restore. Present only on resume. */
-    readonly restoredLoopState?: JsonValue;
-}
-export interface AgentLoopStrategy {
-    readonly name: string;
-    /** Host-authored loop revision. Joins the durable-run fingerprint when snapshot hooks are present. */
-    readonly revision?: string;
-    run(ctx: LoopContext): Promise<Usage | undefined>;
-    /**
-     * Capture loop-local resumable state at suspension. Must return a JSON-compatible value;
-     * core bounds and redacts it inside the durable run-state envelope. Declare together with
-     * `restore`; a custom strategy without both hooks is rejected before any provider call on
-     * durable runs (`AgentLoopStateError` / `ERR_PRISM_LOOP_NOT_DURABLE`).
-     */
-    snapshot?(): JsonValue;
-    /** Rehydrate from a previously captured snapshot; must throw on drift. Called before `run` on resume. */
-    restore?(snapshot: JsonValue): void;
-}
-export type AgentLoopOptions = {
-    readonly strategy: "single-shot";
-    /** Independent tool calls per turn run concurrently up to this limit. Default `1` (sequential). */
-    readonly toolConcurrency?: number;
-} | {
-    readonly strategy: "generate-validate-revise";
-    readonly validator: ArtifactValidator<unknown>;
-    readonly parser?: ArtifactParser<unknown>;
-    readonly repairer?: ArtifactRepairer<unknown>;
-    readonly maxRevisions?: number;
-    /** Dispatch provider tool calls in artifact turns. Default `"disabled"`; `"bounded"` uses RunOptions.maxToolRounds sequentially. */
-    readonly toolCalls?: "disabled" | "bounded";
-    /** Native provider JSON-schema output. Ignored when `structuredOutputMode` is `artifact-loop`. */
-    readonly structuredOutput?: StructuredOutputOptions;
-    /** `native` maps schema to capable providers; `artifact-loop` keeps repair turns only. */
-    readonly structuredOutputMode?: "native" | "artifact-loop";
-    /**
-     * When to attach native `structuredOutput` under `toolCalls: "bounded"`.
-     * `every-turn` (default): schema on every provider request (legacy).
-     * `final-turn-only`: tool-eligible turns omit schema; artifact/revision turns send schema and withdraw tools.
-     */
-    readonly structuredOutputTiming?: "every-turn" | "final-turn-only";
-};
-export interface ArtifactValidation {
-    readonly ok: boolean;
-    readonly errors?: readonly {
-        readonly path?: string;
-        readonly message: string;
-    }[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ArtifactContext {
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly turn: number;
-    readonly signal: AbortSignal;
-    readonly metadata: Readonly<Record<string, unknown>>;
-}
-export interface ArtifactParseResult<T> {
-    readonly ok: boolean;
-    readonly value?: T;
-    readonly error?: string;
-}
-export type ArtifactParser<T> = (text: string, ctx: ArtifactContext) => ArtifactParseResult<T> | Promise<ArtifactParseResult<T>>;
-export type ArtifactValidator<T> = (value: T, ctx: ArtifactContext) => ArtifactValidation | Promise<ArtifactValidation>;
-export type ArtifactRepairer<T> = (value: T | undefined, failure: ArtifactValidation, ctx: ArtifactContext) => AgentInput | Promise<AgentInput>;
+export * from "./contracts-core.js";
+export * from "./contracts-run-state.js";
+export * from "./contracts-protocol.js";
 /** Alias re-exports so `dist/contracts.d.ts` exposes implementer contract names. */
 export type AgentIdentity = import("./identity.js").AgentIdentity;
 export type Principal = import("./identity.js").Principal;