@canonmsg/agent-sdk 13.2.0 → 13.3.0

package/dist/internal/endpoint/media.d.ts

@@ -1,5 +1,4 @@
-import { type DeliveryObservation, type DeliveryAttention, type PreparedContent } from '../backend-contracts/index.js';
-import type { Endpoint } from './engine.js';
+import type { Endpoint, EndpointDeliveryGuard } from './engine.js';
 import { type EndpointStore } from './store.js';
 export interface EndpointMediaDescriptor {
     mimeType: string;
@@ -8,15 +7,6 @@ export interface EndpointMediaDescriptor {
     width?: number;
     height?: number;
     durationMs?: number;
-    /** Local-only source cleanup; never sent in a stage manifest. */
-    cleanupAfterSend?: boolean;
-    /** Native-only normalization to apply after durable handoff, before staging. */
-    normalization?: {
-        kind: 'jpeg';
-        maxDimension: 1600;
-        quality: 0.85;
-        fileName: 'photo.jpg';
-    };
 }
 export interface EndpointUploadSession {
     uploadId: string;
@@ -57,17 +47,9 @@ export interface EndpointMediaFlow {
     }>;
     purpose?: 'prepare';
     publicationGeneration?: number;
-    /** Frozen at initial staging; an upgrade must never move an uncertain delivery to another publisher. */
+    /** Written by versions before background delivery was retired (plaintext-retirement.md slice 6e): `background` marks a
+     * flow handed to it, which `resume` now ends. */
     deliveryMode?: 'legacy' | 'background';
-    observation?: DeliveryObservation;
-    /** Sealed at initial staging; session renewal never changes these bytes. */
-    preparedContent?: PreparedContent;
-    attention?: DeliveryAttention;
-    background?: {
-        phase: EndpointBackgroundMediaSnapshot['status'];
-        uploadedBytes: number;
-        totalBytes: number;
-    };
     status: 'pending' | 'sending' | 'prepared' | 'succeeded' | 'cancelled' | 'rejected';
     error?: {
         message: string;
@@ -82,9 +64,7 @@ export interface EndpointMediaProgress {
 export interface EndpointMediaSendOptions {
     signal?: AbortSignal;
     onProgress?: (progress: EndpointMediaProgress) => void;
-    beforePublish?: () => Promise<boolean>;
-    /** The caller's bounded preflight choice. Existing flows always keep their persisted mode. */
-    handoffMode?: 'background' | 'legacy';
+    beforePublish?: EndpointDeliveryGuard;
 }
 export interface EndpointMediaInput<Source> {
     conversationId: string;
@@ -95,38 +75,6 @@ export interface EndpointMediaInput<Source> {
         descriptor: EndpointMediaDescriptor;
     }>;
 }
-export interface EndpointBackgroundMediaSnapshot {
-    identity?: Pick<DeliveryObservation, 'messageId' | 'conversationId' | 'installationId' | 'environmentId'>;
-    schemaVersion?: 2;
-    observation?: DeliveryObservation;
-    attention?: DeliveryAttention;
-    deliveryId: string;
-    status: 'preparing' | 'uploading' | 'waiting_for_connection' | 'sending' | 'cancelling' | 'published' | 'cancelled' | 'expired' | 'rejected';
-    uploadedBytes: number;
-    totalBytes: number;
-    errorCode?: string;
-    errorMessage?: string;
-}
-/** Native owns remote work once enqueue persists the request. Implementations
- * must treat enqueue as idempotent for a deliveryId and survive missing JS callbacks. */
-export interface EndpointBackgroundMediaAdapter<Source> {
-    observationVersion?: 2;
-    preparedContentVersion?: 1;
-    available(): Promise<boolean>;
-    sourceIdentity(source: Source): string;
-    enqueue(input: EndpointMediaInput<Source> & {
-        deliveryId: string;
-        installationId: string;
-        preparedContent?: PreparedContent;
-    }): Promise<EndpointBackgroundMediaSnapshot>;
-    inspect(): Promise<EndpointBackgroundMediaSnapshot[]>;
-    /** Query server state only. Must never enqueue/renew/start transfers. */
-    reconcile?(deliveryId: string): Promise<EndpointBackgroundMediaSnapshot>;
-    subscribe(listener: (snapshot: EndpointBackgroundMediaSnapshot) => void): () => void;
-    cancel(deliveryId: string): Promise<void>;
-    cleanup(): Promise<void>;
-    cleanupSource?(source: Source): Promise<void>;
-}
 export interface EndpointMediaPipeline<Source> {
     /** Prepare durable attachments for a later policy-controlled message publication. */
     prepare(input: {
@@ -146,12 +94,6 @@ export interface EndpointMediaPipeline<Source> {
             descriptor: EndpointMediaDescriptor;
         }>;
     }, options?: EndpointMediaSendOptions): Promise<string>;
-    /** With `conversationId`, false for an encrypted room (or one whose mode is unknown): its files are prepared on the
-     * device and sent without the background handoff, so a caller decides before building their descriptors. */
-    canSendInBackground(options?: {
-        maxProbeWaitMs?: number;
-        conversationId?: string;
-    }): Promise<boolean>;
     resume(id: string, options?: EndpointMediaSendOptions): Promise<string>;
     resumePending(): Promise<void>;
     setForeground?(active: boolean): void;
@@ -173,5 +115,4 @@ export declare function createEndpointMediaPipeline<Source>(options: {
     ids?: () => string;
     clock?: () => number;
     leaseMs?: number;
-    background?: EndpointBackgroundMediaAdapter<Source>;
 }): EndpointMediaPipeline<Source>;

package/dist/internal/endpoint/mls-dev-groups.d.ts

@@ -48,6 +48,8 @@ export interface MlsDevAdmissionHold {
     readonly waitingPrincipalIds: readonly string[];
     /** This device joined after the room's first message, so its history starts later (mls-rooms-by-default.md §2.7). */
     readonly missedEarlier?: true;
+    /** The room's group exists and this device is not in it: only a device already there can add it (§2.4). */
+    readonly outside?: true;
 }
 export interface MlsDevCurrentAudience {
     readonly version: 1;
@@ -166,6 +168,8 @@ export interface MlsDevGroupBridge {
     /** Reads and applies the room's conversation snapshot from Canon, for openings of members admitted since. */
     readRoom?(conversationId: string): Promise<unknown>;
 }
+/** How many times a refused send is encrypted again by itself before it shows as not sent. */
+export declare const MLS_DEV_RESEND_MAX = 3;
 /** Internal attachment: the engine supplies its existing queue, receipt reducer,
  * event/recovery intake, store and lifetime. Native work never runs inside tx. */
 export declare function createMlsDevGroups(options: MlsDevDeviceClientOptions, context: MlsDevDeviceClientContext, keyPackages: MlsDevKeyPackageClient | undefined, bridge: MlsDevGroupBridge): {
@@ -175,6 +179,8 @@ export declare function createMlsDevGroups(options: MlsDevDeviceClientOptions, c
      * encrypted room (mls-payload-v3.md §4). Items and cards are not forwarded yet. */
     forwardText(value: unknown, operationId: string, guardId?: string): Promise<EndpointOperation>;
     sendText(value: unknown, operationId: string, guardId?: string): Promise<EndpointOperation>;
+    /** A person's Retry of a text or item Canon refused: encrypted again for the room as it is now (`resendText`). */
+    resendText(operation: EndpointOperation): Promise<EndpointOperation | undefined>;
     /** `sendText` for a person's composer: in a held room the text is kept, not refused (undefined), until `sendHeldTexts`. */
     holdText(value: unknown, operationId: string): Promise<EndpointOperation | undefined>;
     sendHeldTexts(conversationId: string): Promise<{
@@ -196,6 +202,8 @@ export declare function createMlsDevGroups(options: MlsDevDeviceClientOptions, c
     syncText(conversationId: string, options?: EndpointSyncOptions): Promise<EndpointSyncPage>;
     isTextReady: (conversationId: string) => Promise<boolean>;
     readAcceptedReceipt(operation: EndpointOperation): Promise<EndpointOperationReceipt | undefined>;
-    settleReceipt(operation: EndpointOperation, receipt: EndpointOperationReceipt): Promise<boolean>;
+    settleReceipt(operation: EndpointOperation, receipt: EndpointOperationReceipt, options?: {
+        reconcileOnly?: boolean;
+    }): Promise<boolean>;
 };
 export {};

package/dist/internal/endpoint/queue.d.ts

@@ -1,15 +1,13 @@
 import type { EndpointInboundRecord, EndpointIntent, EndpointOperation } from './engine.js';
 import type { EndpointStoreTransaction } from './store.js';
 /** `provider`: a job the server runs inline for as long as its provider takes; unordered, and never awaited by a drain. */
-export type EndpointOrdering = 'conversation' | 'message' | 'signal' | 'artifact' | 'independent' | 'provider';
+export type EndpointOrdering = 'conversation' | 'message' | 'signal' | 'independent' | 'provider';
 /** Derived here, never an adapter override. Unknown/state-changing actions stay ordered. */
 export declare function endpointIntentOrdering(intent: EndpointIntent): EndpointOrdering;
 /** Transaction sequence is ordering metadata, never an idempotency identity. */
 export declare function nextQueueSequence(tx: EndpointStoreTransaction, name: string): Promise<number>;
 export declare function orderOperation(tx: EndpointStoreTransaction, operation: EndpointOperation): Promise<EndpointOperation>;
 export declare const outboxKey: (operation: EndpointOperation) => string;
-/** Per-work lane of non-terminal shared-work operations, in authoring order. */
-export declare const artifactOrderingPrefix: (conversationId: string, artifactId: string) => string;
 export declare const operationOrderingKey: (operation: EndpointOperation) => string | undefined;
 export declare function trackOperationOrder(tx: EndpointStoreTransaction, operation: EndpointOperation): Promise<void>;
 export declare function enqueueOperation(tx: EndpointStoreTransaction, operation: EndpointOperation): Promise<void>;

package/dist/media.js

@@ -18,10 +18,10 @@ import {
   toAnthropicImageBlock,
   toAnthropicImageBlocksWithinBudget,
   uploadMediaFile
-} from "./chunks/chunk-5YKGDUJX.js";
-import "./chunks/chunk-YJUPKU47.js";
-import "./chunks/chunk-YHDDOADK.js";
-import "./chunks/chunk-5WPAB5MB.js";
+} from "./chunks/chunk-AVR7QCHK.js";
+import "./chunks/chunk-HFT75BNB.js";
+import "./chunks/chunk-NIORQKUI.js";
+import "./chunks/chunk-CUPSYLBV.js";
 export {
   DEFAULT_ANTHROPIC_REQUEST_HEADROOM_BYTES,
   DEFAULT_MEDIA_CACHE_DIR,

package/dist/mls-wasm-host.js

@@ -2,20 +2,20 @@ import {
   WASM_HOST_CONFIGURE,
   WASM_HOST_PROVISION,
   keyFile
-} from "./chunks/chunk-DTAWEQCM.js";
+} from "./chunks/chunk-BQGXOAIW.js";
 import {
   MAX_INPUT,
   NodeMlsDevCustodyError,
   parseFrame,
   rejected,
   requireValue
-} from "./chunks/chunk-YJUPKU47.js";
+} from "./chunks/chunk-HFT75BNB.js";
 import {
   __name,
   canonicalEndpointJson,
   isMlsDevReceiptClockSkew,
   parseMlsDevDeviceContext
-} from "./chunks/chunk-5WPAB5MB.js";
+} from "./chunks/chunk-CUPSYLBV.js";
 
 // src/mls-wasm-host.ts
 import { createHash } from "node:crypto";

package/dist/runner/mls.d.ts

@@ -1,5 +1,6 @@
 import { type CanonEndpoint, type CanonMlsDevOptions, type MlsDevCurrentAudience } from '../internal/core/index.js';
 import { type MlsDevDeviceContext } from '../internal/backend-contracts/index.js';
+import { type CommunicateShape } from '../internal/agent-tools/index.js';
 import type { ToolDefinition } from './types.js';
 /**
  * What `createRunner({ mls })` takes: issuer pins and custody, plus the custody's own shutdown. With `provisioned`
@@ -59,8 +60,17 @@ export declare function requireMlsSupport(input: {
  * digit, mark or `_` (`@Cipher A` does not mention `Cipher AB`).
  */
 export declare function mentionsAgent(text: string, names: ReadonlyArray<string | undefined>): boolean;
-/** An encrypted turn's `communicate`: listing, and text to its own room, which the runner encrypts. */
+/** What an encrypted turn's `communicate` offers: listing, and text to its own room, which the runner encrypts. */
+export declare const ENCRYPTED_COMMUNICATE_SHAPE: {
+    readonly list_conversations: readonly ["limit"];
+    readonly discover_agents: readonly ["limit"];
+    readonly message_existing: readonly ["conversationId", "text"];
+};
+/** An encrypted turn's `communicate`, as one flat schema (`communicateInputSchema`). */
 export declare const ENCRYPTED_COMMUNICATE: ToolDefinition;
+/** What an errand turn's `communicate` offers (§12.6): listing, its recipient and its origin, and for a person or agent, a new conversation. */
+export declare const errandShape: (contact: boolean) => CommunicateShape;
+export declare const errandCommunicate: (contact: boolean) => ToolDefinition;
 /**
  * The operator's MLS configuration file: public issuer pins and the custody helper's identity, never credentials or
  * private keys. A canonical, current-user-owned regular file, not group- or other-writable, at most 64 KiB, read once.
@@ -101,7 +111,7 @@ export declare function runMlsDevSetup(endpoint: CanonEndpoint, action: MlsSetup
     principalId: string;
     installationId: string;
     ownershipVersion: number | undefined;
-    status: "absent" | "identity_committed" | "registered" | "credential_committed" | "revoked";
+    status: "revoked" | "absent" | "identity_committed" | "registered" | "credential_committed";
     deviceId: string | null;
     credentialGeneration: number;
 }>;

package/dist/runner/runner.d.ts

@@ -4,9 +4,12 @@ import { type CanonEndpoint, type CanonRuntimeDescriptor, type CommunicateInput,
 import { type RunnerMlsOptions } from './mls.js';
 import { type RuntimeDriver } from './types.js';
 export interface RunnerOptions {
-    /** Canon refused this runner for good (its client floor, mls-cutover-operator.md §2 15b); the CLI stops and exits. */
+    /** Canon refused this runner for good (its client floor, mls-cutover-operator.md §2 15b, or the agent's home moved to
+     * another installation or Canon's relay); the CLI stops and exits. */
     onFatal?(error: Error): void;
-    /** How the runner names itself to Canon's client floor (`X-Canon-Client`); the CLI passes agent-sdk's version. */
+    /** Move the agent's home back to this installation after another one took it (`canon-agent run --take-over`). */
+    takeOver?: boolean;
+    /** How the runner names itself to Canon's client floor (`X-Canon-Client`); by default agent-sdk's own version (RUNNER_CLIENT). */
     client?: {
         kind: 'runner';
         version: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/agent-sdk",
-  "version": "13.2.0",
+  "version": "13.3.0",
   "description": "Canon Agent SDK — build AI agents that participate in Canon conversations",
   "type": "module",
   "main": "dist/index.js",
@@ -31,8 +31,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "@noble/curves": "2.4.0",
-    "chess.js": "1.4.0"
+    "@noble/curves": "2.4.0"
   },
   "peerDependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.289"

package/dist/internal/endpoint/artifact-images.d.ts

@@ -1,60 +0,0 @@
-import { type ArtifactImageRegion, type ArtifactImageVariant, type MediaAttachment } from '../backend-contracts/index.js';
-import type { Endpoint } from './engine.js';
-import { type ArtifactClient, type ArtifactWriteResult } from './artifacts.js';
-import { isTerminalImageGenerationError } from './image-generation-errors.js';
-export { isTerminalImageGenerationError };
-export type { ArtifactImageRegion };
-export interface ArtifactImageGenerateInput {
-    prompt: string;
-    label: string;
-    /** 'current' edits the current version (or generates new when there is none). */
-    from: 'current' | 'new' | {
-        variantId: string;
-    };
-    /** Fractions of the source image, origin top-left. */
-    region?: ArtifactImageRegion;
-    /** UUID for one deliberate generation; reuse it to collect the same result. */
-    requestId: string;
-    /** Cancels the wait. Once the job is submitted, the result is `generating` and nothing is published. */
-    signal?: AbortSignal;
-    /** How long to wait for the provider before returning `generating` (default 180 s). */
-    timeoutMs?: number;
-}
-export type ArtifactImageGenerateResult = {
-    status: 'added';
-    variant: ArtifactImageVariant;
-    result: ArtifactWriteResult;
-    attachment: MediaAttachment;
-} | {
-    status: 'generating';
-    requestId: string;
-};
-export interface ArtifactImageAddInput {
-    assetId: string;
-    label: string;
-    prompt?: string;
-    sourceVariantId?: string;
-    select?: boolean;
-}
-export interface ArtifactImageClient {
-    generate(conversationId: string, artifactId: string, input: ArtifactImageGenerateInput): Promise<ArtifactImageGenerateResult>;
-    add(conversationId: string, artifactId: string, input: ArtifactImageAddInput): Promise<{
-        variant: ArtifactImageVariant;
-        result: ArtifactWriteResult;
-    }>;
-}
-/** Test hooks; production uses the defaults. */
-export interface ArtifactImageClientOptions {
-    pollIntervalMs?: number;
-    /** A job may not be visible yet while its request is still being delivered. */
-    notFoundGraceMs?: number;
-    now?: () => number;
-    sleep?: (ms: number, signal?: AbortSignal) => Promise<void>;
-}
-/**
- * The provider runs on the server under a durable `image-generation:<requestId>`
- * operation; this client only waits for its result, retains it, and adds it as
- * the current version. Repeating a call with the same requestId collects the
- * same image and never starts a second generation.
- */
-export declare function createArtifactImageClient(endpoint: Endpoint, artifacts?: ArtifactClient, options?: ArtifactImageClientOptions): ArtifactImageClient;

package/dist/internal/endpoint/artifact-reducer.d.ts

@@ -1,35 +0,0 @@
-import { type ArtifactCommandRecord, type ArtifactFormValue, type ArtifactReadResult, type ArtifactSnapshot } from '../backend-contracts/index.js';
-/**
- * Integrity failures halt replay: a sequence gap, a changed artifact identity,
- * an unsupported codec, or an envelope written by a newer Canon. Nothing else does.
- */
-export declare class ArtifactReplayError extends Error {
-    readonly code: 'UNSUPPORTED_VERSION' | 'ARTIFACT_LOG_INVALID';
-    constructor(code: 'UNSUPPORTED_VERSION' | 'ARTIFACT_LOG_INVALID', message: string);
-}
-/** FEN without the half-move and full-move clocks. */
-export declare const chessPositionKey: (fen: string) => string;
-/** A form value that changed since the author looked. */
-export interface ArtifactConflict {
-    path: string[];
-    label: string;
-    expected: ArtifactFormValue;
-    current: ArtifactFormValue;
-    currentBy?: string;
-}
-/** Structured conflicts of a form command (form.set or form.fields) against the snapshot it was judged on. */
-export declare function artifactCommandConflicts(snapshot: ArtifactSnapshot, command: unknown): ArtifactConflict[];
-/** Structured conflicts of form.set changes against the snapshot they were judged on. */
-export declare function artifactFormConflicts(snapshot: ArtifactSnapshot, changes: unknown): ArtifactConflict[];
-/** Pure reduction of one relay record. Throws only for integrity halts. */
-export declare function reduceArtifactRecord(previous: ArtifactReadResult, record: ArtifactCommandRecord, conversationId: string): ArtifactReadResult;
-export interface ArtifactReplayPage {
-    previous: ArtifactReadResult;
-    commands: ArtifactCommandRecord[];
-    conversationId: string;
-    artifactId: string;
-    /** Stop once this revision is reached (historical read). */
-    revisionId?: string;
-}
-/** In-process replay of one log page. Built-in rules only: bounded and synchronous. */
-export declare function replayArtifactPage(page: ArtifactReplayPage): ArtifactReadResult;

package/dist/internal/endpoint/artifact-views.d.ts

@@ -1,113 +0,0 @@
-import { type ArtifactChessState, type ArtifactFormColumn, type ArtifactFormFieldType, type ArtifactFormRow, type ArtifactFormValue, type ArtifactKind, type ArtifactSnapshot } from '../backend-contracts/index.js';
-/** Readable projections of shared work for agents, prompts and compact UI. */
-export interface ArtifactPrincipalView {
-    id: string;
-    name?: string;
-    isYou?: boolean;
-}
-export interface ArtifactViewOptions {
-    /** The principal reading the view (marks `isYou`, seats and turn). */
-    viewerId?: string;
-    names?: Record<string, string>;
-    /** The snapshot this viewer saw last; adds `changesSinceLastView`. */
-    previous?: ArtifactSnapshot;
-}
-export interface ArtifactViewBase {
-    artifactId: string;
-    kind: ArtifactKind;
-    title: string;
-    revisionId: string;
-    archived: boolean;
-    createdBy: ArtifactPrincipalView;
-    updatedBy: ArtifactPrincipalView;
-    updatedAt: string;
-}
-export interface ArtifactChessMoveView {
-    ply: number;
-    notation: string;
-    san: string;
-    by: ArtifactPrincipalView;
-}
-export interface ArtifactChessView extends ArtifactViewBase {
-    kind: 'chess';
-    fen: string;
-    /** ASCII, rank 8 first, uppercase White, with file and rank labels. */
-    board: string;
-    turn: 'white' | 'black';
-    /** Full-move number. */
-    moveNumber: number;
-    /** e.g. "1. e4 e5 2. Nf3". */
-    moveList: string;
-    lastMove?: ArtifactChessMoveView;
-    players: {
-        white?: ArtifactPrincipalView;
-        black?: ArtifactPrincipalView;
-    };
-    yourColor?: 'white' | 'black';
-    yourTurn: boolean;
-    status: ArtifactChessState['status'];
-    result?: ArtifactChessState['result'];
-    resignedBy?: ArtifactPrincipalView;
-    check: boolean;
-    /** SAN, while the game is active. */
-    legalMoves?: string[];
-    /** Moves since the previous view. */
-    changesSinceLastView?: ArtifactChessMoveView[];
-}
-export interface ArtifactFormFieldView {
-    id: string;
-    label: string;
-    type: ArtifactFormFieldType;
-    value: ArtifactFormValue;
-    required?: boolean;
-    options?: string[];
-    placeholder?: string;
-    help?: string;
-    decimals?: number;
-}
-export interface ArtifactFormChangeView {
-    label: string;
-    path: string[];
-    before: ArtifactFormValue | Record<string, ArtifactFormValue>;
-    after: ArtifactFormValue | Record<string, ArtifactFormValue>;
-}
-export interface ArtifactFormView extends ArtifactViewBase {
-    kind: 'form';
-    fields: ArtifactFormFieldView[];
-    /** Labels of required fields that are empty. */
-    missingRequired: string[];
-    /**
-     * `sums` holds each summed column's total, rounded to the column's decimals.
-     * Form numbers are bounded, so a total is always finite; a total that is not
-     * (state written outside the shared rules) reads as null instead of failing.
-     */
-    table?: {
-        label?: string;
-        columns: ArtifactFormColumn[];
-        rows: ArtifactFormRow[];
-        sums: Record<string, number | null>;
-    };
-    changesSinceLastView?: ArtifactFormChangeView[];
-}
-export interface ArtifactImageVariantView {
-    id: string;
-    label: string;
-    prompt?: string;
-    by: ArtifactPrincipalView;
-    at: string;
-    sourceVariantId?: string;
-    assetId: string;
-    current: boolean;
-}
-export interface ArtifactImageView extends ArtifactViewBase {
-    kind: 'image';
-    variants: ArtifactImageVariantView[];
-    currentVariantId?: string;
-    /** Versions added since the previous view. */
-    changesSinceLastView?: ArtifactImageVariantView[];
-}
-export type ArtifactView = ArtifactChessView | ArtifactFormView | ArtifactImageView;
-export declare function chessBoardAscii(fen: string): string;
-export declare function describeArtifact(snapshot: ArtifactSnapshot, options?: ArtifactViewOptions): ArtifactView;
-/** One line, viewer-relative: "Chess “Game”: move 12, Black to move (you play Black). Your move. Last: 11...Nf6 by Alice." */
-export declare function summarizeArtifact(snapshot: ArtifactSnapshot, options?: Omit<ArtifactViewOptions, 'previous'>): string;

package/dist/internal/endpoint/artifacts.d.ts

@@ -1,75 +0,0 @@
-import { type ArtifactAsset, type ArtifactCommand, type ArtifactCommandBody, type ArtifactDefinition, type ArtifactDomainOutcome, type ArtifactOutcomeCode, type ArtifactReadResult, type ArtifactSnapshot } from '../backend-contracts/index.js';
-import type { Endpoint } from './engine.js';
-import { type ArtifactConflict } from './artifact-reducer.js';
-/** The command was rejected by the shared rules; nothing new was accepted. */
-export declare class ArtifactRejectedError extends Error {
-    readonly code: ArtifactOutcomeCode | 'UNSUPPORTED_VERSION';
-    readonly outcome?: ArtifactDomainOutcome;
-    readonly conflicts?: ArtifactConflict[];
-    /** The projection the command was evaluated against: the author's fresh state. */
-    readonly current?: ArtifactReadResult;
-    constructor(message: string, options: {
-        code: ArtifactOutcomeCode | 'UNSUPPORTED_VERSION';
-        outcome?: ArtifactDomainOutcome;
-        conflicts?: ArtifactConflict[];
-        current?: ArtifactReadResult;
-    });
-}
-/**
- * `accepted`: the relay stored the command and the shared rules accepted it.
- * `queued`: the durable outbox keeps retrying delivery; snapshot and outcome
- * are a local prediction. Callers must not resend.
- */
-export interface ArtifactWriteResult extends ArtifactReadResult {
-    outcome: ArtifactDomainOutcome;
-    status: 'accepted' | 'queued';
-}
-/** `unavailable` codes include NO_DEFINITION and ARTIFACT_LOADING (a long log still replaying; a later listing has it). */
-export interface ArtifactLibrary {
-    artifacts: ArtifactSnapshot[];
-    unavailable: Array<{
-        artifactId: string;
-        code: string;
-        message: string;
-    }>;
-}
-/** The client stamps the schema; a caller-supplied schema must match it. */
-export type ArtifactCommandInput = ArtifactCommandBody | ArtifactCommand;
-export interface ArtifactWriteOptions {
-    commandId?: string;
-    waitMs?: number;
-}
-export interface ArtifactCreateOptions {
-    artifactId?: string;
-    commandId?: string;
-    waitMs?: number;
-}
-export interface ArtifactClientOptions {
-    encoding?: 'json' | 'mls';
-    /** How long a listing waits for one work before reporting it as still loading (default 4 s). */
-    listItemWaitMs?: number;
-}
-export interface ArtifactClient {
-    list(conversationId: string): Promise<ArtifactLibrary>;
-    read(conversationId: string, artifactId: string, options?: {
-        revisionId?: string;
-    }): Promise<ArtifactReadResult>;
-    create(conversationId: string, definition: ArtifactDefinition, options?: ArtifactCreateOptions): Promise<ArtifactWriteResult>;
-    apply(conversationId: string, artifactId: string, command: ArtifactCommandInput, options?: ArtifactWriteOptions): Promise<ArtifactWriteResult>;
-    retainAsset(conversationId: string, artifactId: string, assetId: string): Promise<ArtifactAsset>;
-    getAsset(conversationId: string, artifactId: string, assetId: string): Promise<ArtifactAsset>;
-    /** Polls the log head only; reads (and replays) when it moves. */
-    observe(conversationId: string, artifactId: string, listener: (value: ArtifactReadResult) => void, onError?: (error: unknown) => void): () => void;
-    observeList(conversationId: string, listener: (value: ArtifactLibrary) => void, onError?: (error: unknown) => void): () => void;
-    /**
-     * An opaque command ID for one deliberate request: `cmd-` and 40 hex
-     * characters of an HMAC-SHA256 over the canonical JSON of `material`, keyed
-     * by this installation's secret. Stable for retries on this installation,
-     * unrelated elsewhere, and never a server-testable hash of its content.
-     * Throws PREPARATION_INSTALLATION_FENCED on an endpoint another logout fenced.
-     */
-    deriveCommandId(material: unknown[]): Promise<string>;
-    /** The same derivation (separate domain) as an RFC 4122-shaped UUID, for image request IDs. */
-    deriveRequestId(material: unknown[]): Promise<string>;
-}
-export declare function createArtifactClient(endpoint: Endpoint, options?: ArtifactClientOptions): ArtifactClient;