@arnilo/prism 0.2.4 → 0.2.5

package/dist/contracts-core.d.ts

@@ -1,1426 +1,14 @@
-import type { AgentEvent, AgentEventRecord, AgentEventType, InputAssemblyLayout, ProviderTurnResult, RealtimeEvent, RunLedger, RunStatus, ToolCallRecord, ToolCallStatus, ToolEffectStore, ToolResult, UsageRecord, UsageScope } from "./contracts-protocol.js";
-import type { AgentRunStateOptions, AgentSession } from "./contracts-run-state.js";
-import type { AgentEventSource, ProviderEvent, RunRecord } from "./contracts-protocol.js";
-import type { ToolDefinition, ToolRegistry } from "./contracts-protocol.js";
-import type { AudioContent, DocumentContent, FileContent } from "./content.js";
-import type { ContributionRegistries } from "./contributions.js";
-import type { AgentInput } from "./input.js";
-import type { ManifestContributionDeclaration } from "./manifests.js";
-import type { Middleware, MiddlewareHookName, MiddlewareRegistry } from "./middleware.js";
-import type { SecretRedactor } from "./redaction.js";
-import type { PermissionPolicy, TrustPolicy } from "./security.js";
-import type { ToolValidator } from "./tools.js";
-export type JsonPrimitive = string | number | boolean | null;
-export type JsonValue = JsonPrimitive | JsonObject | JsonValue[];
-export interface JsonObject {
-    readonly [key: string]: JsonValue;
-}
-export interface ErrorInfo {
-    readonly name?: string;
-    readonly message: string;
-    readonly code?: string | number;
-    /** Provider backpressure hint (e.g. from a `Retry-After` header); retry policies
-     *  honor it capped at their own `maxDelayMs`. */
-    readonly retryAfterMs?: number;
-    readonly cause?: unknown;
-}
+/** Contracts-core barrel (0.2.5 plan 025 Task 1 god-module split): re-exports the
+ * public contracts surface from cohesive family modules so the import surface
+ * of `./contracts-core.js` is unchanged (0.1.4 barrel precedent). */
 export type { AudioContent, DocumentContent, FileContent } from "./content.js";
-export type ContentBlock = TextContent | ImageContent | AudioContent | FileContent | DocumentContent | ThinkingContent | ToolCallDeltaContent | ToolCallContent | ToolResultContent;
-export interface TextContent {
-    readonly type: "text";
-    readonly text: string;
-}
-export interface ImageContent {
-    readonly type: "image";
-    readonly mimeType?: string;
-    readonly data?: string;
-    readonly url?: string;
-    readonly resourceUri?: string;
-    readonly name?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ThinkingContent {
-    readonly type: "thinking";
-    readonly text: string;
-    readonly signature?: string;
-}
-export interface ToolCallDeltaContent {
-    readonly type: "tool_call_delta";
-    readonly index: number;
-    readonly id?: string;
-    readonly name?: string;
-    readonly argumentsText?: string;
-    /** Who executes the call. `"provider-hosted"` = the provider runs it server-side;
-     *  the host must NOT dispatch it or send a `tool_result`. Defaults to `"host"`. */
-    readonly authority?: ToolCallAuthority;
-}
-export type ToolCallAuthority = "host" | "provider-hosted";
-export interface ToolCallContent {
-    readonly type: "tool_call";
-    readonly id: string;
-    readonly name: string;
-    readonly arguments: JsonObject;
-    /** Set when streamed arguments failed JSON parse; dispatch blocks without execute(). */
-    readonly argumentsError?: ErrorInfo;
-    /** Who executes the call. `"provider-hosted"` = the provider already ran it
-     *  server-side; the host must NOT dispatch it or append a `tool_result`. The
-     *  assistant response text already incorporates the call's effect. */
-    readonly authority?: ToolCallAuthority;
-}
-export interface ToolResultContent {
-    readonly type: "tool_result";
-    readonly toolCallId: string;
-    readonly name: string;
-    readonly result?: unknown;
-    readonly error?: ErrorInfo;
-}
-export interface Message {
-    readonly id?: string;
-    readonly role: "system" | "user" | "assistant" | "tool";
-    readonly content: readonly ContentBlock[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ModelConfig {
-    readonly provider: string;
-    readonly model: string;
-    readonly displayName?: string;
-    readonly capabilities?: ModelCapabilities;
-    readonly limits?: ModelLimits;
-    readonly cost?: ModelCost;
-    readonly cache?: ModelCacheCapabilities;
-    readonly compat?: JsonObject;
-    readonly parameters?: Readonly<Record<string, unknown>>;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ModelCapabilities {
-    /** Known values include `text`, `image`, `audio`, `file`, and `document`. */
-    readonly input?: readonly string[];
-    readonly output?: readonly string[];
-    readonly reasoning?: boolean;
-    readonly tools?: boolean;
-    readonly streaming?: boolean;
-    /** Native JSON-schema structured output support for this model. */
-    readonly structuredOutput?: boolean | "json_schema";
-}
-export interface ModelLimits {
-    readonly contextWindow?: number;
-    readonly maxOutputTokens?: number;
-}
-export interface ModelCost {
-    readonly input?: number;
-    readonly output?: number;
-    readonly cacheRead?: number;
-    readonly cacheWrite?: number;
-    readonly currency?: string;
-    readonly unit?: string;
-}
-export interface Usage {
-    readonly inputTokens?: number;
-    readonly outputTokens?: number;
-    readonly totalTokens?: number;
-    readonly cacheReadTokens?: number;
-    readonly cacheWriteTokens?: number;
-    readonly cost?: number;
-    readonly currency?: string;
-}
-export interface RunLimits {
-    readonly maxTurns?: number;
-    readonly maxProviderAttempts?: number;
-    readonly maxToolRounds?: number;
-    readonly maxToolCalls?: number;
-    readonly maxWallTimeMs?: number;
-    readonly maxRequestBytes?: number;
-    readonly maxResponseBytes?: number;
-    readonly maxInputTokens?: number;
-    readonly maxOutputTokens?: number;
-    readonly maxTotalTokens?: number;
-    readonly maxCost?: {
-        readonly amount: number;
-        readonly currency: string;
-    };
-}
-export type RunLimitName = keyof Required<RunLimits>;
-export interface RunLimitCounters {
-    readonly turns: number;
-    readonly providerAttempts: number;
-    readonly toolRounds: number;
-    readonly toolCalls: number;
-    readonly wallTimeMs: number;
-    readonly requestBytes: number;
-    readonly responseBytes: number;
-    readonly inputTokens: number;
-    readonly outputTokens: number;
-    readonly totalTokens: number;
-    readonly cost: number;
-}
-export interface RunLimitBreach {
-    readonly limit: RunLimitName;
-    readonly maximum: number;
-    readonly observed: number;
-    readonly currency?: string;
-}
-export type GuardrailStage = "input" | "output" | "tool_input" | "tool_output";
-export type GuardrailAction = "allow" | "block" | "tripwire" | "interrupt";
-export type GuardrailValue<S extends GuardrailStage> = S extends "input" ? readonly Message[] : S extends "output" ? ProviderTurnResult : S extends "tool_input" ? ToolCallContent : ToolResult;
-export interface GuardrailContext<S extends GuardrailStage> {
-    readonly stage: S;
-    readonly value: GuardrailValue<S>;
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly toolCallId?: string;
-    readonly toolName?: string;
-    readonly metadata: Readonly<Record<string, unknown>>;
-    readonly signal: AbortSignal;
-}
-export interface GuardrailDecision {
-    readonly action: GuardrailAction;
-    readonly reason?: string;
-    /** Public data only; Prism JSON-normalizes, bounds, and redacts it before emission. */
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface Guardrail<S extends GuardrailStage = GuardrailStage> {
-    readonly name: string;
-    readonly stage: S;
-    /** Host-authored stable identity for durable definitions; unused by ordinary runs. */
-    readonly revision?: string;
-    evaluate(context: GuardrailContext<S>): GuardrailDecision | Promise<GuardrailDecision>;
-}
-export interface GuardrailRecord {
-    readonly guardrail: string;
-    readonly stage: GuardrailStage;
-    readonly action: GuardrailAction;
-    readonly reason?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface Guardrails {
-    readonly input?: readonly Guardrail<"input">[];
-    readonly output?: readonly Guardrail<"output">[];
-    readonly toolInput?: readonly Guardrail<"tool_input">[];
-    readonly toolOutput?: readonly Guardrail<"tool_output">[];
-    /** Defaults to sequential; at most 16 stage evaluations run at once. */
-    readonly maxConcurrency?: number;
-}
-export type CacheRetention = "none" | "short" | "long";
-export type PromptCacheKind = "implicit" | "openai_key" | "cache_control" | "provider_specific" | "none";
-export interface ModelCacheCapabilities {
-    readonly kind?: PromptCacheKind;
-    readonly maxKeyLength?: number;
-    readonly maxBreakpoints?: number;
-    readonly minCacheableTokens?: number;
-    readonly longRetention?: boolean;
-}
-export type PromptCacheMode = "auto" | "on" | "off";
-export type PromptCacheBreakpointLocation = "system_prompt" | "tools" | "stable_context" | "last_stable_message" | "last_user_message" | "message_id";
-export type PromptCacheBreakpointTtl = "short" | "long";
-export interface PromptCacheBreakpoint {
-    readonly location: PromptCacheBreakpointLocation;
-    readonly messageId?: string;
-    readonly ttl?: PromptCacheBreakpointTtl;
-}
-export interface PromptCacheHints {
-    readonly mode?: PromptCacheMode;
-    readonly key?: string;
-    readonly retention?: CacheRetention;
-    readonly breakpoints?: readonly PromptCacheBreakpoint[];
-}
-export interface StructuredOutputOptions {
-    readonly name: string;
-    readonly schema: JsonObject;
-    readonly strict?: boolean;
-}
-export interface ProviderRequestOptions {
-    readonly sessionId?: string;
-    readonly cacheRetention?: CacheRetention;
-    readonly cacheKey?: string;
-    readonly cache?: PromptCacheHints;
-    readonly headers?: Readonly<Record<string, string>>;
-    readonly compat?: JsonObject;
-    readonly extra?: JsonObject;
-    /** Provider-neutral JSON-schema structured output request. Requires model `capabilities.structuredOutput`. */
-    readonly structuredOutput?: StructuredOutputOptions;
-    /** Opaque provider continuation cursor (e.g. OpenAI `previous_response_id`). When set,
-     *  the provider resumes from this cursor instead of re-sending full history. */
-    readonly continuation?: {
-        readonly cursor: string;
-    };
-}
-export interface ProviderRequest {
-    readonly model: ModelConfig;
-    readonly messages: readonly Message[];
-    readonly tools?: readonly ToolDefinition[];
-    readonly context?: readonly ContextBlock[];
-    readonly options?: ProviderRequestOptions;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-export interface AIProvider {
-    readonly id: string;
-    generate(request: ProviderRequest): AsyncIterable<ProviderEvent>;
-}
-export type ProviderResolver = (model: ModelConfig) => AIProvider | undefined;
-/** Realtime audio/session event. Realtime is a bidirectional session, not a request/response
- *  stream, so it is a separate neutral seam from `AIProvider.generate()`. Credentials are
- *  bound to the session handshake only and never appear in events. */
-export interface RealtimeSession {
-    readonly id: string;
-    readonly provider: string;
-    /** Send an audio chunk (PCM/Opus; provider-specific format set at creation). */
-    sendAudio(chunk: Uint8Array, options?: {
-        readonly signal?: AbortSignal;
-    }): Promise<void>;
-    /** Inbound events (audio out, transcripts, hosted tool calls, interruption, close, error). */
-    events(): AsyncIterable<RealtimeEvent>;
-    /** Request the provider stop the current response mid-stream. */
-    interrupt(options?: {
-        readonly signal?: AbortSignal;
-    }): Promise<void>;
-    /** Close the session and release the transport. Idempotent. */
-    close(reason?: string, options?: {
-        readonly signal?: AbortSignal;
-    }): Promise<void>;
-}
-/** Factory a provider exposes for realtime sessions; not part of `AIProvider`. */
-export type RealtimeSessionFactory = (options: RealtimeSessionOptions) => RealtimeSession;
-export interface RealtimeSessionOptions {
-    readonly model: ModelConfig;
-    readonly signal?: AbortSignal;
-    /** Provider-specific caps override; providers enforce finite defaults. */
-    readonly caps?: RealtimeCaps;
-}
-export interface RealtimeCaps {
-    readonly maxAudioEventsPerSecond?: number;
-    readonly maxBytesPerSecond?: number;
-    readonly maxWallMs?: number;
-}
-export interface AgentDefinition {
-    readonly name: string;
-    readonly description?: string;
-    /** Direct model config, or a model id resolved from `registries.models`. */
-    readonly model?: ModelConfig | string;
-    /** Tool names to activate from the active tool registry / `registries.tools`. */
-    readonly tools?: readonly string[];
-    /** Skill names resolved through `resolveActiveSkills()`; `toolNames` enforcement applies. */
-    readonly skills?: readonly string[];
-    /** Context provider names from `registries.contextProviders`. */
-    readonly context?: readonly string[];
-    readonly systemPrompt?: SystemPromptConfig;
-    readonly instructions?: string;
-    readonly loop?: AgentLoopStrategy | AgentLoopOptions;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    /** Optional escape hatch. When present, overrides declarative resolution. */
-    create?(config?: AgentConfig): Promise<Agent> | Agent;
-}
-/** Input to {@link resolveAgentDefinition}. All fields are optional; the host
- *  controls scope by which registries it passes. */
-export interface AgentDefinitionResolutionContext {
-    readonly registries?: ContributionRegistries;
-    readonly providerSource?: ProviderResolver;
-    readonly tools?: ToolRegistry | readonly ToolDefinition[];
-    readonly skillsRegistry?: SkillRegistry;
-    /** Migration-only: omitted `tools`/`skills` activate every in-scope tool/skill. Defaults to fail-closed. */
-    readonly activateAllCapabilities?: true;
-    readonly overrides?: Partial<AgentConfig>;
-}
-export interface AgentConfig {
-    readonly id?: string;
-    readonly name?: string;
-    readonly instructions?: string;
-    readonly model: ModelConfig;
-    readonly provider?: AIProvider;
-    readonly providerSource?: ProviderResolver;
-    readonly tools?: ToolRegistry | readonly ToolDefinition[];
-    readonly context?: readonly ContextProvider[];
-    readonly skills?: SkillRegistry | readonly Skill[];
-    /** Migration opt-in: activate every registry skill by default when run options do not narrow activation. */
-    readonly activateAllSkills?: true;
-    /** Progressive: catalog (name+description) unless loaded; eager: full instructions every turn. Default progressive. */
-    readonly skillsDisclosure?: import("./skill-disclosure.js").SkillsDisclosure;
-    /** Opt-in projection-only fold for aged large tool results in provider view; store untouched. */
-    readonly toolResultFold?: import("./tool-result-fold.js").ToolResultFoldOptions;
-    readonly inputBuilder?: InputBuilder;
-    readonly promptBuilder?: PromptBuilder;
-    readonly middleware?: MiddlewareRegistry;
-    readonly resourceLoader?: ResourceLoader;
-    readonly store?: SessionStore;
-    readonly permission?: PermissionPolicy;
-    /** Optional trust check for tool and resource targets. */
-    readonly trust?: TrustPolicy;
-    readonly providerOptions?: ProviderRequestOptions;
-    readonly providerRequestPolicies?: ProviderRequestPolicy | readonly ProviderRequestPolicy[];
-    readonly systemPrompt?: SystemPromptConfig;
-    readonly redactor?: SecretRedactor;
-    readonly runLedger?: RunLedger;
-    /** Optional durable recovery store. */
-    readonly effectStore?: ToolEffectStore;
-    readonly ownership?: OwnershipScope;
-    /** Host-verified identity default for sessions created from this agent. */
-    readonly identity?: import("./identity.js").AgentIdentity;
-    readonly idempotencyKey?: string;
-    readonly compaction?: false | CompactionOptions;
-    readonly retry?: false | RetryOptions;
-    /** Agent-wide ceilings; per-run limits may only narrow these values. */
-    readonly limits?: RunLimits;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly validator?: ToolValidator;
-    readonly instructionInjectors?: readonly InstructionInjector[];
-    readonly inputLayout?: InputAssemblyLayout;
-    readonly loop?: AgentLoopStrategy | AgentLoopOptions;
-    readonly guardrails?: Guardrails;
-    /** Opt-in durable interruption/checkpointing default for this agent. */
-    readonly runState?: AgentRunStateOptions;
-    /** Internal marker set by createSecureAgent(); makes security defaults immutable per run. */
-    readonly secure?: true;
-}
-/** Opt-in fail-closed composition over the normal explicit AgentConfig API. */
-export interface SecureAgentOptions extends Omit<AgentConfig, "tools" | "validator" | "redactor" | "permission" | "trust" | "ownership" | "identity" | "limits" | "runState" | "secure"> {
-    readonly id: string;
-    readonly tools: readonly ToolDefinition[];
-    readonly toolArgumentValidator: import("./tools.js").ToolArgumentValidator;
-    readonly redactor: SecretRedactor;
-    readonly permission: PermissionPolicy;
-    readonly trust: TrustPolicy;
-    readonly ownership: OwnershipScope;
-    /** Optional host-verified identity; when set must match `ownership`. */
-    readonly identity?: import("./identity.js").AgentIdentity;
-    readonly limits: RunLimits;
-    readonly definitionRevision: string;
-    readonly runState: Omit<AgentRunStateOptions, "definitionRevision" | "interruptBeforeTool">;
-}
-export interface Agent {
-    readonly config: AgentConfig;
-    createSession(config?: AgentSessionConfig): AgentSession;
-}
-export interface AgentSessionConfig {
-    readonly id?: string;
-    readonly agent?: Agent;
-    readonly store?: SessionStore;
-    readonly leafId?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface AgentSessionForkOptions {
-    readonly leafId?: string;
-}
-export interface AgentSessionCloneOptions {
-    readonly id?: string;
-    readonly leafId?: string;
-}
-export type SubscriberOverflowPolicy = "close" | "drop_oldest" | "drop_newest";
-export interface SubscribeOptions {
-    /** Maximum queued events for a subscriber that is not actively awaiting `next()`. Defaults to 1024. */
-    readonly maxQueuedEvents?: number;
-    /** What to do when `maxQueuedEvents` is reached. Defaults to `close`. */
-    readonly overflow?: SubscriberOverflowPolicy;
-}
-export interface CommandDefinition {
-    readonly name: string;
-    readonly description?: string;
-    readonly parameters?: JsonObject;
-    execute(args: JsonObject, context: CommandExecutionContext): Promise<CommandResult> | CommandResult;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface CommandExecutionContext {
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly signal?: AbortSignal;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface CommandResult {
-    readonly name: string;
-    readonly content?: readonly ContentBlock[];
-    readonly value?: unknown;
-    readonly error?: ErrorInfo;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ContextBlock {
-    readonly id?: string;
-    readonly title?: string;
-    readonly content: string | readonly ContentBlock[];
-    readonly priority?: number;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ContextProvider {
-    readonly name: string;
-    resolve(context: ContextResolutionContext): Promise<readonly ContextBlock[]> | readonly ContextBlock[];
-}
-export interface ContextResolutionContext {
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly messages: readonly Message[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-/** When an {@link InstructionInjector} contributes to the assembled provider input. */
-export type InstructionTiming = "first_turn" | "every_turn" | "on_input";
-/** Runtime turn scope handed to an {@link InstructionInjector}. Mirrors {@link LoopContext}
- *  scope using already-redacted input/history so predicates cannot recover secrets. */
-export interface InstructionContext {
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly turn: number;
-    readonly input: readonly Message[];
-    readonly history: readonly Message[];
-    readonly metadata: Readonly<Record<string, unknown>>;
-    readonly signal: AbortSignal;
-}
-/** Output of an {@link InstructionInjector}. Only `instructions` and `contextBlocks` are
- *  honored; other fields grant nothing (no tools, skills, or permissions). */
-export interface InstructionContribution {
-    readonly instructions?: string;
-    readonly contextBlocks?: readonly ContextBlock[];
-    readonly when: InstructionTiming;
-    /** Used only when `when === "on_input"`; absent predicate means apply every turn. */
-    readonly predicate?: (ctx: InstructionContext) => boolean;
-}
-/** Additive instruction/context contribution that a package registers through
- *  {@link ExtensionAPI.registerInstructionInjector} and the host selects on
- *  {@link AgentConfig.instructionInjectors} / {@link RunOptions.instructionInjectors}.
- *  Inert until selected; cannot grant privileges beyond text/context blocks. */
-export interface InstructionInjector {
-    readonly name: string;
-    readonly description?: string;
-    apply(ctx: InstructionContext): InstructionContribution;
-}
-export interface InputBuilder {
-    readonly name: string;
-    build(input: string | Message | readonly Message[], context?: InputBuildContext): Promise<readonly Message[]> | readonly Message[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface InputBuildContext {
-    readonly inputLayout?: InputAssemblyLayout;
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-    readonly permission?: PermissionPolicy;
-    readonly trust?: TrustPolicy;
-}
-export interface PromptBuilder {
-    readonly name: string;
-    build(request: PromptBuildRequest): Promise<readonly Message[]> | readonly Message[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface PromptBuildRequest {
-    readonly messages: readonly Message[];
-    readonly context?: readonly ContextBlock[];
-    readonly skills?: readonly Skill[];
-    readonly skillsDisclosure?: import("./skill-disclosure.js").SkillsDisclosure;
-    readonly loadedSkills?: import("./skill-disclosure.js").LoadedSkillSet;
-    /** Skills demoted to catalog-only by context budget this turn. */
-    readonly demotedSkillBodies?: readonly string[];
-    readonly tools?: readonly ToolDefinition[];
-    /** Model being prompted; lets builders adapt composition to declared capabilities
-     *  (e.g. the default builder omits the `Available tools:` text for tool-capable models). */
-    readonly model?: ModelConfig;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-export interface Skill {
-    readonly name: string;
-    readonly description?: string;
-    readonly instructions?: string;
-    readonly context?: readonly ContextProvider[];
-    readonly toolNames?: readonly string[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface SkillRegistry {
-    register(skill: Skill): void;
-    get(name: string): Skill | undefined;
-    resolve(name: string): Skill;
-    list(): readonly Skill[];
-}
-/** Directory-name spelling for discovered contribution kinds. Maps to a
- *  {@link ManifestContributionDeclaration} kind for non-skill kinds:
- *  `context` → `contextProvider`, `instructions` → `systemPromptContribution`. */
-export type ContributionFileKind = "skill" | "tool" | "context" | "instructions";
-/** Inert envelope emitted by the host/CLI discovery scanner. Carries the
- *  realized {@link Skill} for skill kinds and a manifest-referenced
- *  {@link ManifestContributionDeclaration} for other kinds; the host owns
- *  any executable behavior. Contains no code, no credential. */
-export interface DiscoveredContribution {
-    readonly kind: ContributionFileKind;
-    readonly name: string;
-    readonly origin: "global" | "workspace";
-    readonly path: string;
-    /** Present when `kind === "skill"`. */
-    readonly skill?: Skill;
-    /** Present for non-skill kinds. */
-    readonly declaration?: ManifestContributionDeclaration;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export type ExtensionLifecycleEventName = "resource_discovery" | "session_start" | "session_shutdown" | "before_agent_start" | "turn" | "context" | "provider_request" | "tool_call" | "tool_result" | "compaction" | "retry";
-export interface ExtensionEvent {
-    readonly type: ExtensionLifecycleEventName | "extension_error" | string;
-    readonly payload?: unknown;
-    readonly extension?: string;
-    readonly error?: ErrorInfo;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface Extension {
-    readonly name: string;
-    setup(api: ExtensionAPI): void | Promise<void>;
-    /** Host-attested signature/digest for `ExtensionLoadPolicy.verifySignature`. */
-    readonly signature?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ProviderPackage {
-    readonly name: string;
-    readonly version?: string;
-    readonly description?: string;
-    readonly docs?: ProviderPackageDocs;
-    setup(api: ProviderPackageAPI): void | Promise<void>;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ProviderPackageDocs {
-    readonly description?: string;
-    readonly links?: readonly string[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ProviderPackageAPI extends ExtensionAPI {
-}
-export type AuthMethod = ApiKeyAuthMethod | OAuthAuthMethod | CustomAuthMethod;
-export interface ApiKeyAuthMethod {
-    readonly kind: "api_key";
-    readonly provider: string;
-    readonly name?: string;
-    readonly credentialName?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface OAuthAuthMethod {
-    readonly kind: "oauth";
-    readonly provider: string;
-    readonly name?: string;
-    readonly oauth?: OAuthProvider;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface OAuthLoginCallbacks {
-    onAuth?(url: string): void | Promise<void>;
-    onDeviceCode?(code: {
-        readonly userCode: string;
-        readonly verificationUri: string;
-        readonly expiresAt?: string;
-    }): void | Promise<void>;
-    onPrompt?(message: string): string | undefined | Promise<string | undefined>;
-    onSelect?(prompt: {
-        readonly message: string;
-        readonly choices: readonly string[];
-    }): string | undefined | Promise<string | undefined>;
-    /** Aborts OAuth login flows and device-code polling when signaled. */
-    readonly signal?: AbortSignal;
-}
-export interface OAuthCredentials {
-    readonly access?: string;
-    readonly refresh?: string;
-    readonly expires?: string | number;
-    readonly accountId?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface OAuthProvider {
-    readonly id: string;
-    login(callbacks?: OAuthLoginCallbacks): Promise<OAuthCredentials> | OAuthCredentials;
-    refresh?(credentials: OAuthCredentials): Promise<OAuthCredentials> | OAuthCredentials;
-    /** Best-effort upstream revocation; the store delete is what fails closed locally. */
-    revoke?(credentials: OAuthCredentials): Promise<void> | void;
-    getCredential?(credentials: OAuthCredentials): Promise<Credential | undefined> | Credential | undefined;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface CustomAuthMethod {
-    readonly kind: "custom" | string;
-    readonly provider: string;
-    readonly name?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ProviderRequestPolicy {
-    readonly name: string;
-    apply(context: ProviderRequestPolicyContext): Promise<ProviderRequest | ProviderRequestPolicyResult> | ProviderRequest | ProviderRequestPolicyResult;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ProviderRequestPolicyContext {
-    readonly request: ProviderRequest;
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-export interface ProviderRequestPolicyResult {
-    readonly request: ProviderRequest;
-    readonly secrets?: readonly (string | undefined)[];
-}
-export type SystemPromptMode = "append" | "prepend" | "replace" | "disable";
-export type SystemPromptSource = "package" | "app" | "user" | "run" | string;
-export interface SystemPromptContribution {
-    readonly id: string;
-    readonly source?: SystemPromptSource;
-    readonly mode?: SystemPromptMode;
-    readonly text: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export type SystemPromptConfig = false | SystemPromptContribution | readonly SystemPromptContribution[];
-export interface ExtensionAPI {
-    readonly registries: ContributionRegistries;
-    readonly middleware: MiddlewareRegistry;
-    on(type: ExtensionLifecycleEventName | string, handler: (event: ExtensionEvent) => void | Promise<void>): () => void;
-    emit(event: ExtensionEvent): Promise<void>;
-    use<T>(hook: MiddlewareHookName | string, middleware: Middleware<T>): () => void;
-    registerProvider(provider: AIProvider): void;
-    registerModel(model: ModelConfig): void;
-    registerTool(tool: ToolDefinition): void;
-    registerContextProvider(provider: ContextProvider): void;
-    registerSkill(skill: Skill): void;
-    registerCommand(command: CommandDefinition): void;
-    registerAgent(agent: AgentDefinition): void;
-    registerInputBuilder(builder: InputBuilder): void;
-    registerPromptBuilder(builder: PromptBuilder): void;
-    registerCompactionStrategy(strategy: CompactionStrategy): void;
-    registerRetryPolicy(policy: RetryPolicy): void;
-    registerStoreFactory(factory: StoreFactory): void;
-    registerResourceLoader(key: string, loader: ResourceLoader): void;
-    registerSettingsProvider(key: string, provider: SettingsProvider): void;
-    registerCredentialResolver(key: string, resolver: CredentialResolver): void;
-    registerProviderPackage(providerPackage: ProviderPackage): void;
-    registerAuthMethod(method: AuthMethod): void;
-    registerProviderRequestPolicy(policy: ProviderRequestPolicy): void;
-    registerSystemPromptContribution(contribution: SystemPromptContribution): void;
-    registerInstructionInjector(injector: InstructionInjector): void;
-}
-export type SessionEntryKind = "message" | "event" | "summary" | "metadata" | "model_change" | "label" | "custom" | "compaction";
-export declare const SESSION_ENTRY_KINDS: readonly SessionEntryKind[];
-export declare const SESSION_ENTRY_SCHEMA_VERSION = 1;
-export declare function isSessionEntryKind(value: unknown): value is SessionEntryKind;
-export interface SessionEntry {
-    readonly id: string;
-    readonly parentId?: string;
-    readonly sessionId: string;
-    readonly timestamp: string;
-    readonly kind: SessionEntryKind;
-    readonly schemaVersion?: 1;
-    readonly runId?: string;
-    readonly message?: Message;
-    readonly event?: AgentEvent;
-    readonly model?: ModelConfig;
-    readonly previousModel?: ModelConfig;
-    readonly label?: string;
-    readonly summary?: string;
-    readonly data?: unknown;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface SessionStore {
-    append(entry: SessionEntry, options?: SessionAppendOptions): Promise<void>;
-    list(sessionId: string): Promise<readonly SessionEntry[]>;
-    get?(id: string): Promise<SessionEntry | undefined>;
-    /** DB-friendly branch read: return one branch's ancestor chain as a page so adapters
-     *  avoid `list(sessionId)` (full-session scan) + in-memory rebuild. Optional — the
-     *  built-in memory/JSONL stores omit it and the runtime falls back to `list()`. */
-    readBranchPath?(query: SessionBranchRead): Promise<PersistencePage<SessionEntry>>;
-    /**
-     * Optional bounded session search. Prefer implementing this **or** returning a companion
-     * `SessionIndex` from the adapter factory — hosts must not need both. Call
-     * `resolveSessionSearchQuery` before scan/query. Memory defaults to capped linear
-     * search (`sessionSearchMode: "unsupported"` throws). JSONL throws unsupported.
-     */
-    searchSessions?(query: SessionSearchQuery): Promise<PersistencePage<SessionSearchHit>>;
-}
-/** Host-written `SessionRecord.metadata` / session metadata key for workspace filtering. */
-export declare const SESSION_SEARCH_WORKSPACE_METADATA_KEY: "workspaceRoot";
-export declare const DEFAULT_SESSION_SEARCH_LIMIT = 20;
-export declare const HARD_MAX_SESSION_SEARCH_LIMIT = 100;
-export declare const DEFAULT_MAX_SESSION_SEARCH_QUERY_BYTES: number;
-export declare const HARD_MAX_SESSION_SEARCH_QUERY_BYTES: number;
-export declare const DEFAULT_MAX_SESSION_SEARCH_SNIPPET_BYTES = 512;
-export declare const HARD_MAX_SESSION_SEARCH_SNIPPET_BYTES: number;
-export declare const DEFAULT_MAX_SESSION_SEARCH_CURSOR_BYTES: number;
-export declare const HARD_MAX_SESSION_SEARCH_CURSOR_BYTES: number;
-export declare const DEFAULT_MAX_SESSION_SEARCH_LINEAR_SESSIONS = 1000;
-export declare const HARD_MAX_SESSION_SEARCH_LINEAR_SESSIONS = 5000;
-export declare const DEFAULT_MAX_SESSION_SEARCH_LINEAR_ENTRIES = 10000;
-export declare const HARD_MAX_SESSION_SEARCH_LINEAR_ENTRIES = 50000;
-export declare const DEFAULT_MAX_SESSION_SEARCH_LINEAR_BYTES: number;
-export declare const HARD_MAX_SESSION_SEARCH_LINEAR_BYTES: number;
-export declare const DEFAULT_MAX_SESSION_SEARCH_FTS_CANDIDATES = 1000;
-export declare const HARD_MAX_SESSION_SEARCH_FTS_CANDIDATES = 5000;
-/** Bounded session search filters. Workspace matches host-written `metadata.workspaceRoot`. */
-export interface SessionSearchQuery extends PersistenceQuery, OwnershipScope {
-    readonly workspaceRoot?: string;
-    /** Optional full-text / message+summary query (adapter-defined matching). */
-    readonly query?: string;
-    readonly provider?: string;
-    readonly model?: string;
-    readonly label?: string;
-    readonly summary?: string;
-    readonly fromUpdatedAt?: string;
-    readonly toUpdatedAt?: string;
-    readonly signal?: AbortSignal;
-}
-/**
- * Safe search hit for resume/checkout. Never includes credentials or raw full transcripts.
- * `leafId` is the branch tip for `session.checkout` when known.
- */
-export interface SessionSearchHit {
-    readonly sessionId: string;
-    readonly leafId?: string;
-    readonly updatedAt?: string;
-    readonly label?: string;
-    readonly summary?: string;
-    readonly snippet?: string;
-    /** Safe display fields only (e.g. workspaceRoot); never credentials. */
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Narrow search seam; adapters may implement this instead of `SessionStore.searchSessions`. */
-export interface SessionIndex {
-    search(query: SessionSearchQuery): Promise<PersistencePage<SessionSearchHit>>;
-}
-/** Validated search query with finite `limit` / `order` filled in. */
-export interface ResolvedSessionSearchQuery extends SessionSearchQuery {
-    readonly limit: number;
-    readonly order: "asc" | "desc";
-}
-/**
- * O(1) validation before any scan/query. Applies default page limit; rejects NaN,
- * non-positive limits, oversize query/cursor/filter strings, and invalid order.
- */
-export declare function resolveSessionSearchQuery(query: SessionSearchQuery): ResolvedSessionSearchQuery;
-export declare const SESSION_SEARCH_UNSUPPORTED_CODE: "session_search_unsupported";
-/** Thrown when a store opts out of `searchSessions` (memory `unsupported`, JSONL). */
-export declare class SessionSearchUnsupportedError extends Error {
-    readonly code: "session_search_unsupported";
-    constructor(message?: string);
-}
-export declare function isSessionSearchUnsupported(error: unknown): error is SessionSearchUnsupportedError;
-/** Query for a single branch's ancestor chain (DB-friendly: one recursive/ancestor query
- *  instead of a full-session scan). Honored by `SessionStore.readBranchPath` and the pure
- *  branch helpers' reader overload. `leafId` is optional (omit for the latest leaf). */
-export interface SessionBranchRead {
-    readonly sessionId: string;
-    readonly leafId?: string;
-    readonly cursor?: string;
-    readonly limit?: number;
-}
-/** Database-neutral callable returning one branch's ancestor chain as a page. Implementations
- *  issue a single recursive CTE / ancestor walk; the pure helpers follow `nextCursor` to
- *  completion. Returns redacted `SessionEntry` values only (stores already persist redacted
- *  entries; the runtime redacts before append). */
-export type BranchReader = (query: SessionBranchRead) => Promise<PersistencePage<SessionEntry>>;
-/**
- * Options for `SessionStore.append`. Stores that honor them reject dangling
- * `expectedParentId` values and deduplicate exact retries by `idempotencyKey` +
- * parent. Production stores may add stricter branch-tip CAS and report
- * `currentLeafId` in `SessionAppendConflictError`. `idempotencyKey` is an opaque
- * host string; stores redact it like metadata when persisted. Carries no
- * credentials, credential resolvers, provider instances, or unredacted secrets.
- */
-export interface SessionAppendOptions {
-    /** Parent entry the new entry should attach to. Must exist when provided. */
-    readonly expectedParentId?: string;
-    /** Opaque host idempotency key; exact retries for one parent deduplicate. */
-    readonly idempotencyKey?: string;
-}
-/**
- * Durable pointer to a branch tip. One session may own many handles (one per
- * leaf). `BranchRecord.leafEntryId` is the persistence-side equivalent.
- */
-export interface SessionBranchHandle {
-    readonly sessionId: string;
-    readonly leafId: string;
-}
-/** Stable error code carried by `SessionAppendConflictError`. */
-export declare const SESSION_APPEND_CONFLICT_CODE: "session_append_conflict";
-/** CAS conflict code for `appendSession` metadata writes. Stable and message-independent. */
-export declare const SESSION_METADATA_CONFLICT_CODE: "metadata_conflict";
-/** Conflict details carried by `SessionMetadataConflictError`. Versions only; never metadata content. */
-export interface SessionMetadataConflict {
-    readonly code: typeof SESSION_METADATA_CONFLICT_CODE;
-    readonly id: string;
-    readonly expectedVersion: number;
-    readonly currentVersion: number;
-}
-/**
- * Thrown when `appendSession` is called with an `expectedVersion` CAS guard and the
- * stored session's version no longer matches (concurrent create/branch/archive, or a
- * delete raced the write). Recognize via the stable `code` or `isSessionMetadataConflict`.
- */
-export declare class SessionMetadataConflictError extends Error {
-    readonly conflict: SessionMetadataConflict;
-    readonly code: "metadata_conflict";
-    constructor(conflict: SessionMetadataConflict);
-}
-/** Type guard keyed off the stable `code` (works across bundles; not message text). */
-export declare function isSessionMetadataConflict(error: unknown): error is SessionMetadataConflictError;
-/** Conflict details carried by `SessionAppendConflictError`. Carries no secrets. */
-export interface SessionAppendConflict {
-    readonly code: typeof SESSION_APPEND_CONFLICT_CODE;
-    readonly expectedParentId?: string;
-    readonly currentLeafId?: string;
-    readonly idempotencyDuplicate?: boolean;
-}
-/**
- * Thrown when `SessionStore.append` rejects an entry under `SessionAppendOptions`
- * (dangling/stale `expectedParentId`, stricter adapter CAS failure, or duplicate
- * idempotency key for the same parent). Recognize via the stable `code` and
- * `isSessionAppendConflict`, not message text.
- */
-export declare class SessionAppendConflictError extends Error {
-    readonly conflict: SessionAppendConflict;
-    readonly code: "session_append_conflict";
-    constructor(conflict: SessionAppendConflict);
-}
-/** Type guard keyed off the stable `code` (works across bundles; not message text). */
-export declare function isSessionAppendConflict(error: unknown): error is SessionAppendConflictError;
-export interface StoreFactory {
-    readonly name: string;
-    create(config?: JsonObject): Promise<SessionStore> | SessionStore;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Ownership scope identifiers. Hosts may use these for multi-tenant isolation. */
-export interface OwnershipScope {
-    readonly tenantId?: string;
-    readonly accountId?: string;
-    readonly userId?: string;
-}
-/** Cursor-paginated result page. */
-export interface PersistencePage<T> {
-    readonly items: readonly T[];
-    readonly nextCursor?: string;
-    readonly total?: number;
-}
-/** Common query controls for cursor-based pagination. */
-export interface PersistenceQuery {
-    readonly cursor?: string;
-    readonly limit?: number;
-    readonly order?: "asc" | "desc";
-}
-/** Generic versioned checkpoint key. Namespaces prevent consumer collisions. */
-export interface CheckpointKey extends OwnershipScope {
-    readonly namespace: string;
-    readonly key: string;
-    readonly signal?: AbortSignal;
-}
-/** Input for an optimistic checkpoint write. Versions must strictly increase. */
-export interface CheckpointSaveInput extends CheckpointKey {
-    readonly version: number;
-    /** Exact current version required before update; use 0 for create-only. */
-    readonly expectedVersion?: number;
-    /** Monotonic lease fence. Lower or absent worker fences cannot replace a fenced record. */
-    readonly fencingToken?: number;
-    readonly value: unknown;
-    readonly category?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Durable generic checkpoint record. */
-export interface CheckpointRecord extends OwnershipScope {
-    readonly namespace: string;
-    readonly key: string;
-    readonly version: number;
-    readonly fencingToken?: number;
-    readonly value: unknown;
-    readonly category?: string;
-    readonly createdAt: string;
-    readonly updatedAt: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Bounded checkpoint query. */
-export interface CheckpointQuery extends PersistenceQuery, OwnershipScope {
-    readonly namespace?: string;
-    readonly keyPrefix?: string;
-    readonly category?: string | readonly string[];
-    readonly signal?: AbortSignal;
-}
-/** Generic versioned checkpoint capability for persistence adapters. */
-export interface CheckpointStore {
-    saveCheckpoint(input: CheckpointSaveInput): Promise<CheckpointRecord>;
-    loadCheckpoint(input: CheckpointKey): Promise<CheckpointRecord | null>;
-    listCheckpoints(query?: CheckpointQuery): Promise<PersistencePage<CheckpointRecord>>;
-    deleteCheckpoint(input: CheckpointKey): Promise<boolean>;
-}
-/** Generic lease key. Ownership fields are part of the trust boundary. */
-export interface LeaseKey extends OwnershipScope {
-    readonly namespace: string;
-    readonly key: string;
-    readonly signal?: AbortSignal;
-}
-export interface LeaseAcquireInput extends LeaseKey {
-    readonly ownerId: string;
-    readonly ttlMs: number;
-}
-export interface LeaseClaimInput extends LeaseKey {
-    readonly ownerId: string;
-    readonly token: string;
-    readonly ttlMs?: number;
-}
-export interface LeaseRecord extends OwnershipScope {
-    readonly namespace: string;
-    readonly key: string;
-    readonly ownerId: string;
-    readonly token: string;
-    readonly fencingToken: number;
-    readonly acquiredAt: string;
-    readonly expiresAt: string;
-    readonly updatedAt: string;
-}
-/** Atomic distributed lease capability. Expired rows retain fencing counters. */
-export interface LeaseStore {
-    tryAcquireLease(input: LeaseAcquireInput): Promise<LeaseRecord | null>;
-    renewLease(input: LeaseClaimInput & {
-        readonly ttlMs: number;
-    }): Promise<LeaseRecord | null>;
-    releaseLease(input: LeaseClaimInput): Promise<boolean>;
-    getLease(input: LeaseKey): Promise<LeaseRecord | null>;
-}
-/** Stored session record. Does not include provider objects or credentials. */
-export interface SessionRecord extends OwnershipScope {
-    readonly id: string;
-    readonly parentSessionId?: string;
-    readonly agentDefinitionId?: string;
-    readonly agentDefinitionVersion?: string;
-    readonly createdAt: string;
-    readonly updatedAt: string;
-    readonly expiresAt?: string;
-    readonly retentionPolicyId?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    /** Write version for optimistic metadata CAS; undefined on legacy/never-written rows. */
-    readonly version?: number;
-}
-/** Stored branch handle / leaf pointer. The leaf is the current entry id for the branch. */
-export interface BranchRecord {
-    readonly id: string;
-    readonly sessionId: string;
-    readonly name?: string;
-    readonly rootEntryId?: string;
-    readonly parentBranchId?: string;
-    /** Durable leaf entry id for this branch (the persistence-side branch tip). */
-    readonly leafEntryId?: string;
-    readonly createdAt: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface RunFeedbackRecord extends OwnershipScope {
-    readonly id: string;
-    readonly runId: string;
-    readonly sessionId: string;
-    readonly traceId?: string;
-    readonly rating?: number;
-    readonly comment?: string;
-    readonly tags: readonly string[];
-    readonly scorerIds: readonly string[];
-    readonly evaluationIds: readonly string[];
-    readonly createdAt: string;
-    readonly createdBy?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface AppendRunFeedbackInput extends OwnershipScope {
-    readonly id: string;
-    readonly runId: string;
-    readonly sessionId?: string;
-    readonly traceId?: string;
-    readonly rating?: number;
-    readonly comment?: string;
-    readonly tags?: readonly string[];
-    readonly scorerIds?: readonly string[];
-    readonly evaluationIds?: readonly string[];
-    readonly createdAt?: string;
-    readonly createdBy?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-/** Cursor-paginated, ownership-scoped feedback query. */
-export interface RunFeedbackQuery extends PersistenceQuery, OwnershipScope {
-    readonly runId?: string;
-    readonly sessionId?: string;
-    readonly traceId?: string;
-    readonly rating?: number;
-    readonly scorerId?: string;
-    readonly evaluationId?: string;
-    readonly tag?: string;
-    readonly fromCreatedAt?: string;
-    readonly toCreatedAt?: string;
-    readonly signal?: AbortSignal;
-}
-export interface DeleteRunFeedbackInput extends OwnershipScope {
-    readonly id: string;
-    readonly signal?: AbortSignal;
-}
-/** Feedback storage seam. Records are append-only; correction uses a new record and deletion is explicit. */
-export interface RunFeedbackStore {
-    append(input: AppendRunFeedbackInput): Promise<RunFeedbackRecord>;
-    query(query: RunFeedbackQuery): Promise<PersistencePage<RunFeedbackRecord>>;
-    delete(input: DeleteRunFeedbackInput): Promise<boolean>;
-}
-/** Stored agent definition version. Does not include provider credentials/resolvers/provider instances. */
-export interface AgentDefinitionRecord extends OwnershipScope {
-    readonly id: string;
-    readonly name: string;
-    readonly version: string;
-    readonly source?: string;
-    readonly agentDefinition: AgentDefinition;
-    readonly createdAt: string;
-    readonly createdBy?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Stored retention policy. */
-export interface RetentionPolicy extends OwnershipScope {
-    readonly id: string;
-    readonly name?: string;
-    readonly maxAgeDays?: number;
-    readonly maxEntriesPerSession?: number;
-    readonly maxTotalBytes?: number;
-    readonly archiveStore?: string;
-    readonly appliedKinds?: readonly SessionEntryKind[];
-    readonly createdAt: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Stored migration record. */
-export interface MigrationRecord {
-    readonly id: string;
-    readonly name: string;
-    readonly version: string;
-    readonly appliedAt: string;
-    readonly appliedBy?: string;
-    readonly checksum?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/** Query for sessions. */
-export interface SessionQuery extends PersistenceQuery, OwnershipScope {
-    readonly id?: string;
-    readonly parentSessionId?: string;
-    readonly agentDefinitionId?: string;
-    readonly agentDefinitionVersion?: string;
-    readonly retentionPolicyId?: string;
-    /** Match sessions whose `metadata` object contains this top-level key (e.g. conversation marker). */
-    readonly metadataKey?: string;
-    readonly fromCreatedAt?: string;
-    readonly toCreatedAt?: string;
-    readonly fromUpdatedAt?: string;
-    readonly toUpdatedAt?: string;
-    readonly hasExpired?: boolean;
-}
-/** Validate a top-level `SessionRecord.metadata` key used by `SessionQuery.metadataKey` filters. */
-export declare function assertSessionMetadataKey(key: string): string;
-/** Query for session entries. */
-export interface SessionEntryQuery extends PersistenceQuery, OwnershipScope {
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly parentId?: string;
-    /** Filter to entries on the branch ending at this leaf id. */
-    readonly leafId?: string;
-    readonly kind?: SessionEntryKind | readonly SessionEntryKind[];
-    readonly fromTimestamp?: string;
-    readonly toTimestamp?: string;
-}
-/** Query for branch handles/leaves. */
-export interface BranchQuery extends PersistenceQuery {
-    readonly sessionId?: string;
-    readonly name?: string;
-    readonly parentBranchId?: string;
-    readonly hasLeaf?: boolean;
-}
-/** Query for runs. */
-export interface RunQuery extends PersistenceQuery, OwnershipScope {
-    readonly sessionId?: string;
-    readonly branchId?: string;
-    readonly agentDefinitionId?: string;
-    readonly agentDefinitionVersion?: string;
-    readonly status?: RunStatus | readonly RunStatus[];
-    readonly fromStartedAt?: string;
-    readonly toStartedAt?: string;
-    readonly fromFinishedAt?: string;
-    readonly toFinishedAt?: string;
-    readonly isFinished?: boolean;
-}
-/** Query for agent event ledger rows. */
-export interface AgentEventQuery extends PersistenceQuery, OwnershipScope {
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly entryId?: string;
-    readonly type?: AgentEventType | readonly AgentEventType[];
-    readonly fromTimestamp?: string;
-    readonly toTimestamp?: string;
-    readonly redacted?: boolean;
-}
-/** Query for tool-call rows. */
-export interface ToolCallQuery extends PersistenceQuery, OwnershipScope {
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly entryId?: string;
-    readonly name?: string;
-    readonly status?: ToolCallStatus | readonly ToolCallStatus[];
-    readonly fromStartedAt?: string;
-    readonly toStartedAt?: string;
-    readonly fromFinishedAt?: string;
-    readonly toFinishedAt?: string;
-    readonly redacted?: boolean;
-}
-/** Query for usage rows. */
-export interface UsageQuery extends PersistenceQuery, OwnershipScope {
-    readonly sessionId?: string;
-    readonly runId?: string;
-    readonly entryId?: string;
-    readonly scope?: UsageScope;
-    readonly turn?: number;
-    readonly attempt?: number;
-    readonly fromRecordedAt?: string;
-    readonly toRecordedAt?: string;
-}
-/** Query for agent definition versions. */
-export interface AgentDefinitionQuery extends PersistenceQuery, OwnershipScope {
-    readonly name?: string;
-    readonly version?: string;
-    readonly source?: string;
-    readonly fromCreatedAt?: string;
-    readonly toCreatedAt?: string;
-}
-/** Query for retention policies. */
-export interface RetentionPolicyQuery extends PersistenceQuery, OwnershipScope {
-    readonly name?: string;
-    readonly archiveStore?: string;
-}
-/** Query for migration records. */
-export interface MigrationQuery extends PersistenceQuery {
-    readonly name?: string;
-    readonly version?: string;
-    readonly fromAppliedAt?: string;
-    readonly toAppliedAt?: string;
-}
-/**
- * Production database-neutral persistence store contract.
- * Hosts implement this interface to provide durable, paginated storage
- * for sessions, entries, runs, events, tool calls, usage, agent definitions,
- * and migrations, with optional generic checkpoint and atomic lease capabilities. No SQL client, ORM, host file storage, or network dependency is
- * required by the contract.
- */
-export interface ProductionPersistenceStore {
-    readonly name?: string;
-    /** Optional generic write capability for resumable consumers such as workflows. */
-    readonly checkpoints?: CheckpointStore;
-    /** Optional atomic distributed lease capability for coordinators and workers. */
-    readonly leases?: LeaseStore;
-    /** Optional immutable run/trace feedback storage capability. */
-    readonly feedback?: RunFeedbackStore;
-    /** Optional durable, cross-replica-capable event source. */
-    readonly events?: AgentEventSource;
-    querySessions(query: SessionQuery): Promise<PersistencePage<SessionRecord>>;
-    queryBranches(query: BranchQuery): Promise<PersistencePage<BranchRecord>>;
-    queryEntries(query: SessionEntryQuery): Promise<PersistencePage<SessionEntry>>;
-    queryRuns(query: RunQuery): Promise<PersistencePage<RunRecord>>;
-    queryEvents(query: AgentEventQuery): Promise<PersistencePage<AgentEventRecord>>;
-    queryToolCalls(query: ToolCallQuery): Promise<PersistencePage<ToolCallRecord>>;
-    queryUsage(query: UsageQuery): Promise<PersistencePage<UsageRecord>>;
-    queryAgentDefinitions(query: AgentDefinitionQuery): Promise<PersistencePage<AgentDefinitionRecord>>;
-    queryRetentionPolicies(query: RetentionPolicyQuery): Promise<PersistencePage<RetentionPolicy>>;
-    queryMigrations(query: MigrationQuery): Promise<PersistencePage<MigrationRecord>>;
-    /** Optional session-record write capability (conversation threads, host-managed sessions).
-     *  Upserts by id; ownership columns are set on create, `metadata`/`updatedAt` on update.
-     *  Additive CAS: pass `expectedVersion` to require the stored version to match before the
-     *  write (0 = create-only, a positive number = exact current version); omit it for legacy
-     *  last-write-wins. Returns the new `version` when the underlying store supports it. */
-    appendSession?(record: SessionRecord & {
-        readonly expectedVersion?: number;
-    }): Promise<{
-        readonly version: number;
-    } | undefined>;
-    /** DB-friendly branch read (mirrors `SessionStore.readBranchPath`): one ancestor-chain
-     *  query instead of `queryEntries({ sessionId })` + in-memory walk. Optional. */
-    readBranchPath?(query: SessionBranchRead): Promise<PersistencePage<SessionEntry>>;
-    /**
-     * Optional Phase 8 retention / legal-hold / export / tenant-quota lifecycle.
-     * Prefer attaching `createMemoryPersistenceLifecycle()` or adapter-native methods.
-     */
-    readonly lifecycle?: import("./persistence-lifecycle.js").PersistenceLifecycleStore;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface CompactionStrategy {
-    readonly name: string;
-    compact(context: CompactionContext): Promise<CompactionResult> | CompactionResult;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface CompactionContext {
-    readonly sessionId: string;
-    readonly entries: readonly SessionEntry[];
-    readonly keepRecentEntries?: number;
-    readonly trigger?: "manual" | "auto" | string;
-    readonly secrets?: readonly (string | undefined)[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-export interface CompactionResult {
-    readonly summary: string;
-    readonly entries?: readonly SessionEntry[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface CompactionOptions {
-    readonly strategy?: CompactionStrategy;
-    readonly thresholdEntries?: number;
-    readonly keepRecentEntries?: number;
-    readonly maxSummaryChars?: number;
-    readonly secrets?: readonly (string | undefined)[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-export interface CompactionMiddlewarePayload {
-    readonly context: CompactionContext;
-    readonly result: CompactionResult;
-}
-export interface CompactionEntryData {
-    readonly throughEntryId?: string;
-    readonly keepEntryIds?: readonly string[];
-    readonly strategy?: string;
-    readonly trigger?: "manual" | "auto" | string;
-}
-export interface RetryPolicy {
-    readonly name: string;
-    decide(context: RetryContext): Promise<RetryDecision> | RetryDecision;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface RetryContext {
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly attempt: number;
-    readonly error: ErrorInfo;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly signal?: AbortSignal;
-}
-export interface RetryDecision {
-    readonly retry: boolean;
-    readonly delayMs?: number;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface RetryOptions {
-    readonly policy?: RetryPolicy;
-    readonly maxAttempts?: number;
-    readonly baseDelayMs?: number;
-    readonly maxDelayMs?: number;
-    readonly secrets?: readonly (string | undefined)[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface RetryMiddlewarePayload {
-    readonly context: RetryContext;
-    readonly decision: RetryDecision;
-}
-export interface Resource {
-    readonly uri: string;
-    readonly mediaType?: string;
-    readonly text?: string;
-    readonly data?: Uint8Array;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ResourceLoader {
-    load(uri: string, context?: ResourceLoadContext): Promise<Resource>;
-    list?(context?: ResourceLoadContext): Promise<readonly Resource[]>;
-}
-export interface ResourceLoadContext {
-    readonly signal?: AbortSignal;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-    readonly permission?: PermissionPolicy;
-    readonly trust?: TrustPolicy;
-}
-export interface SettingsProvider {
-    get<T = unknown>(key: string): Promise<T | undefined> | T | undefined;
-}
-export interface CredentialRequest {
-    readonly name: string;
-    readonly provider?: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface Credential {
-    readonly type: "bearer" | "api_key" | "basic" | "custom";
-    readonly value: string;
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface CredentialResolver {
-    resolve(request: CredentialRequest): Promise<Credential | undefined> | Credential | undefined;
-}
-export interface CredentialResolverSource {
-    readonly name: string;
-    readonly resolver: CredentialResolver;
-}
-export interface OAuthCredentialStore {
-    set(provider: string, credentials: OAuthCredentials): void | Promise<void>;
-}
-export interface LoopContext {
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly metadata: Readonly<Record<string, unknown>>;
-    readonly signal: AbortSignal;
-    readonly history: Message[];
-    readonly input: AgentInput;
-    readonly inputMessages: readonly Message[];
-    readonly maxToolRounds: number;
-    /** Maximum independent tool calls dispatched concurrently per provider turn. Default `1`. */
-    readonly toolConcurrency: number;
-    assemble(nextInput: AgentInput, toolResults?: readonly ToolResult[], turn?: number): Promise<ProviderRequest>;
-    /**
-     * Charges a complete tool round before any call in it can start. On durable interrupt
-     * runs this is also the round-level approval gate: it collects every gated call of the
-     * round into one suspension. Loops must await it; dispatch without it falls back to
-     * per-call single-decision suspensions.
-     */
-    chargeToolRound?(calls: readonly ToolCallContent[]): void | Promise<void>;
-    generate(request: ProviderRequest): Promise<ProviderTurnResult>;
-    dispatchToolCall(call: ToolCallContent): Promise<ToolResult>;
-    isToolCallExclusive?(call: ToolCallContent): boolean;
-    appendMessage(message: Message): Promise<void>;
-    emit(event: AgentEvent): void;
-    /** True when mid-run steers are queued for the next provider turn. */
-    hasPendingSteers?(): boolean;
-    /** Drain pending steers into history/session. Returns true when any were applied. */
-    applyPendingSteers?(): Promise<boolean>;
-    /** Snapshot captured at the last suspension when the strategy declared snapshot/restore. Present only on resume. */
-    readonly restoredLoopState?: JsonValue;
-}
-export interface AgentLoopStrategy {
-    readonly name: string;
-    /** Host-authored loop revision. Joins the durable-run fingerprint when snapshot hooks are present. */
-    readonly revision?: string;
-    run(ctx: LoopContext): Promise<Usage | undefined>;
-    /**
-     * Capture loop-local resumable state at suspension. Must return a JSON-compatible value;
-     * core bounds and redacts it inside the durable run-state envelope. Declare together with
-     * `restore`; a custom strategy without both hooks is rejected before any provider call on
-     * durable runs (`AgentLoopStateError` / `ERR_PRISM_LOOP_NOT_DURABLE`).
-     */
-    snapshot?(): JsonValue;
-    /** Rehydrate from a previously captured snapshot; must throw on drift. Called before `run` on resume. */
-    restore?(snapshot: JsonValue): void;
-}
-export type AgentLoopOptions = {
-    readonly strategy: "single-shot";
-    /** Independent tool calls per turn run concurrently up to this limit. Default `1` (sequential). */
-    readonly toolConcurrency?: number;
-} | {
-    readonly strategy: "generate-validate-revise";
-    readonly validator: ArtifactValidator<unknown>;
-    readonly parser?: ArtifactParser<unknown>;
-    readonly repairer?: ArtifactRepairer<unknown>;
-    readonly maxRevisions?: number;
-    /** Dispatch provider tool calls in artifact turns. Default `"disabled"`; `"bounded"` uses RunOptions.maxToolRounds sequentially. */
-    readonly toolCalls?: "disabled" | "bounded";
-    /** Native provider JSON-schema output. Ignored when `structuredOutputMode` is `artifact-loop`. */
-    readonly structuredOutput?: StructuredOutputOptions;
-    /** `native` maps schema to capable providers; `artifact-loop` keeps repair turns only. */
-    readonly structuredOutputMode?: "native" | "artifact-loop";
-    /**
-     * When to attach native `structuredOutput` under `toolCalls: "bounded"`.
-     * `every-turn` (default): schema on every provider request (legacy).
-     * `final-turn-only`: tool-eligible turns omit schema; artifact/revision turns send schema and withdraw tools.
-     */
-    readonly structuredOutputTiming?: "every-turn" | "final-turn-only";
-};
-export interface ArtifactValidation {
-    readonly ok: boolean;
-    readonly errors?: readonly {
-        readonly path?: string;
-        readonly message: string;
-    }[];
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-export interface ArtifactContext {
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly turn: number;
-    readonly signal: AbortSignal;
-    readonly metadata: Readonly<Record<string, unknown>>;
-}
-export interface ArtifactParseResult<T> {
-    readonly ok: boolean;
-    readonly value?: T;
-    readonly error?: string;
-}
-export type ArtifactParser<T> = (text: string, ctx: ArtifactContext) => ArtifactParseResult<T> | Promise<ArtifactParseResult<T>>;
-export type ArtifactValidator<T> = (value: T, ctx: ArtifactContext) => ArtifactValidation | Promise<ArtifactValidation>;
-export type ArtifactRepairer<T> = (value: T | undefined, failure: ArtifactValidation, ctx: ArtifactContext) => AgentInput | Promise<AgentInput>;
+export * from "./contracts-core/content.js";
+export * from "./contracts-core/run-limits.js";
+export * from "./contracts-core/provider.js";
+export * from "./contracts-core/agent.js";
+export * from "./contracts-core/extensions.js";
+export * from "./contracts-core/session.js";
+export * from "./contracts-core/persistence.js";
+export * from "./contracts-core/compaction.js";
+export * from "./contracts-core/resources.js";
+export * from "./contracts-core/loop.js";