@dudousxd/nestjs-agent-core 0.18.0 → 0.20.0

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { M as ModelMessage, a as ToolDefinition, b as ToolCallRequest, c as MessageUsage, d as AgentUiComponent, A as Actor, e as ThreadSummary, f as ThreadDetail, S as StoredMessage, g as ToolResult, h as MessageAttachment, i as ToolCallStatus, U as UsagePurpose, j as ToolSpec, Q as QuotaState, k as AgentRunInput, H as HumanReply, T as ToolHandler, l as HistoryPolicy, O as OutputProcessor, P as ProcessorContext, I as InputProcessor, m as ProcessedPrompt, n as ModelAnswer, o as PageContext, p as AgentDefinition, q as AgentDelegation, D as DetachedDelivery, r as AiToolCtx, s as PromptBuilder, t as PromptContributor, u as ToolTransientRetrySetting, v as AgentIntake, w as Decision, E as ElicitationRequest, L as LlmStepEnvelope, x as ToolStepEnvelope } from './tool-CHIw-aTx.cjs';
-export { y as ASK_TOOL_DESCRIPTION, z as ASK_TOOL_NAME, B as AgentApprovalRequest, C as AgentCatalogEntry, F as AgentHistoryWindow, G as AgentStreamEvent, J as AskToolInput, K as DEFAULT_INCREMENTAL_LOOKBACK_CHARS, N as DEFAULT_INTAKE_PREAMBLE, R as DEFAULT_TOOL_TRANSIENT_RETRY_ATTEMPTS, V as DEFAULT_TOOL_TRANSIENT_RETRY_BACKOFF_MS, W as ElicitationOption, X as ElicitationOutcome, Y as ElicitationQuestion, Z as ElicitationReply, _ as ElicitationResult, $ as HistoryPolicyContext, a0 as HistorySelection, a1 as HistorySummary, a2 as IncrementalGating, a3 as InvokeWithTransientRetryOptions, a4 as MAX_ASK_QUESTIONS, a5 as MessageRole, a6 as OutputRejectedError, a7 as OutputVerdict, a8 as ProcessorFailedError, a9 as PromptContext, aa as QuotaView, ab as ToolKind, ac as ToolStepCtx, ad as ToolTransientRetryNumbers, ae as ToolTransientRetryOptions, af as askInputSchema, ag as askToolDefinition, ah as decodeStreamEvent, ai as encodeStreamEvent, aj as invokeWithTransientRetry, ak as isTransientToolError, al as normalizeElicitationReply, am as renderElicitationAnswers, an as resolveElicitation, ao as resolveToolTransientRetryNumbers, ap as settleElicitation } from './tool-CHIw-aTx.cjs';
+import { M as ModelMessage, a as ToolDefinition, b as ToolCallRequest, c as MessageUsage, d as AgentUiComponent, A as Actor, e as ThreadSummary, f as ThreadDetail, S as StoredMessage, g as ToolResult, h as MessageAttachment, i as ToolCallStatus, U as UsagePurpose, j as ToolSpec, Q as QuotaState, k as AgentRunInput, H as HumanReply, l as ToolKind, m as ToolCallApproval, T as ToolHandler, n as HistoryPolicy, O as OutputProcessor, P as ProcessorContext, I as InputProcessor, o as ProcessedPrompt, p as ModelAnswer, q as PageContext, r as AgentDefinition, s as AgentDelegation, D as DetachedDelivery, t as AiToolCtx, u as PromptBuilder, v as PromptContributor, w as ToolTransientRetrySetting, x as AgentIntake, y as Decision, E as ElicitationRequest, L as LlmStepEnvelope, z as ToolStepEnvelope } from './tool-B2Dq9ZwF.cjs';
+export { B as ASK_TOOL_DESCRIPTION, C as ASK_TOOL_NAME, F as AgentApprovalRequest, G as AgentApprovalSettlement, J as AgentCatalogEntry, K as AgentHistoryWindow, N as AgentStreamEvent, R as AskToolInput, V as DEFAULT_INCREMENTAL_LOOKBACK_CHARS, W as DEFAULT_INTAKE_PREAMBLE, X as DEFAULT_TOOL_TRANSIENT_RETRY_ATTEMPTS, Y as DEFAULT_TOOL_TRANSIENT_RETRY_BACKOFF_MS, Z as ElicitationOption, _ as ElicitationOutcome, $ as ElicitationQuestion, a0 as ElicitationReply, a1 as ElicitationResult, a2 as HistoryPolicyContext, a3 as HistorySelection, a4 as HistorySummary, a5 as IncrementalGating, a6 as InvokeWithTransientRetryOptions, a7 as MAX_ASK_QUESTIONS, a8 as MessageRole, a9 as OutputRejectedError, aa as OutputVerdict, ab as ProcessorFailedError, ac as PromptContext, ad as QuotaView, ae as ToolCallApprovalStatus, af as ToolCatalogEntry, ag as ToolConfirmation, ah as ToolPresentation, ai as ToolPresentationTone, aj as ToolResultField, ak as ToolResultView, al as ToolStepCtx, am as ToolTransientRetryNumbers, an as ToolTransientRetryOptions, ao as askInputSchema, ap as askToolDefinition, aq as decodeStreamEvent, ar as encodeStreamEvent, as as invokeWithTransientRetry, at as isTransientToolError, au as normalizeElicitationReply, av as renderElicitationAnswers, aw as resolveElicitation, ax as resolveToolTransientRetryNumbers, ay as settleElicitation } from './tool-B2Dq9ZwF.cjs';
 import { StandardSchemaV1 } from '@standard-schema/spec';
 import { ChannelRegistry } from '@dudousxd/nestjs-diagnostics';
 
@@ -284,6 +284,14 @@ interface RecordToolCallInput {
      * synthetic tool calls) can omit it; the store persists it as `null` when absent.
      */
     runId?: string;
+    /**
+     * Who has to approve this call (`'requester'` or a role), from the turn's `ApprovalPolicy`. Set on
+     * an action call that was put to a person — or approved by a remembered decision — and never
+     * otherwise; persisted as `null` when absent.
+     */
+    approver?: string;
+    /** ISO-8601 instant the approval request lapses. Absent → it never does. */
+    expiresAt?: string;
 }
 interface UpdateToolCallInput {
     toolCallId: string;
@@ -292,6 +300,17 @@ interface UpdateToolCallInput {
     error?: string;
     executionMs?: number;
     executedByRef?: string;
+    /** The approval asked for later calls of this tool in this thread to run without asking. */
+    remember?: boolean;
+    /** The surface the decision came through. See {@link import('../types.js').Decision.decidedVia}. */
+    decidedVia?: string;
+}
+/** What the approve/reject routes need to know about a call before they signal a decision on it. */
+interface ToolCallApprovalState {
+    status: ToolCallStatus;
+    /** `null` for a call no policy put to anyone (an `ask`, or a row written before approvers existed). */
+    approver: string | null;
+    expiresAt: string | null;
 }
 /** Patch applied by {@link AgentStore.updateThread}. An omitted key leaves that field untouched. */
 interface UpdateThreadInput {
@@ -457,6 +476,19 @@ interface AgentStore {
     truncateFrom(threadId: string, messageId: string): Promise<void>;
     recordToolCall(input: RecordToolCallInput): Promise<void>;
     updateToolCall(input: UpdateToolCallInput): Promise<void>;
+    /**
+     * OPTIONAL: the names of the tools whose approval someone asked to REMEMBER in this thread — an
+     * approved call persisted with `remember: true`. The loop approves a later call of one of them
+     * without asking, inside that call's own `persist:toolcall` checkpoint. Absent → nothing is ever
+     * remembered, and every call asks.
+     */
+    rememberedApprovals?(threadId: string): Promise<string[]>;
+    /**
+     * OPTIONAL: a call's approval state, or `null` when the call is unknown. Read by the approve/reject
+     * routes to enforce the recorded approver and refuse a decision on a request that already
+     * expired. Absent → every call is treated as the requester's, with no expiry (the old behaviour).
+     */
+    toolCallApproval?(toolCallId: string): Promise<ToolCallApprovalState | null>;
     /**
      * OPTIONAL: of `mediaIds`, the ones a message that still exists — in a thread owned by
      * `actorRef` — still carries as an attachment. The inverse of
@@ -1146,15 +1178,105 @@ interface AttachmentStagingStore {
  * approvals inbox renders read-only.
  */
 interface AgentApprovalPort {
+    /**
+     * `remember` approves later calls of the same tool in the same thread; `decidedVia` names the
+     * surface the decision came through (`'console'`, `'slack'`, …) and is persisted with the call.
+     */
     approve(toolCallId: string, opts?: {
         executedByRef?: string;
+        remember?: boolean;
+        decidedVia?: string;
     }): Promise<void>;
     reject(toolCallId: string, opts?: {
         executedByRef?: string;
         reason?: string;
+        decidedVia?: string;
     }): Promise<void>;
 }
 
+/** The approver that means "the person the run is acting for" — the thread's own actor. */
+declare const REQUESTER_APPROVER = "requester";
+/** The tool a requirement is asked about. `spec` is absent where this process cannot resolve it. */
+interface ApprovalToolRef {
+    name: string;
+    kind: ToolKind;
+    spec?: ToolSpec;
+}
+/** Where the call is being made. */
+interface ApprovalThreadRef {
+    threadId: string;
+    runId: string;
+    agentName?: string;
+}
+/**
+ * What an action tool call needs before it runs.
+ *
+ *  - `required: false` → the call runs without asking anyone (it is still recorded as an action).
+ *  - `approver` → who may decide: {@link REQUESTER_APPROVER} (the thread's own actor — the default)
+ *    or any other string, which the default {@link ApprovalPolicy.canDecide} reads as a ROLE the
+ *    decider must hold. Streamed on `approval-requested` and persisted on the call.
+ *  - `ttlMs` → how long the request stays open. When it lapses the call settles `expired` and the
+ *    model is told nobody approved it. Absent → it waits indefinitely.
+ */
+interface ApprovalRequirement {
+    required: boolean;
+    approver: string;
+    ttlMs?: number;
+}
+/** A decision about to be taken on a call, as {@link ApprovalPolicy.canDecide} sees it. */
+interface ApprovalDecisionRef {
+    toolCallId: string;
+    /** The approver recorded on the call when it was put to a person. */
+    approver: string;
+    /** The actorRef the run is acting for — the owner of the call's thread. */
+    requesterRef: string;
+}
+/**
+ * Who has to approve an action tool call, and for how long the request stays open.
+ *
+ * Consulted by the LOOP once per `action` call, inside the call's `persist:toolcall` checkpoint — so
+ * a durable run reads the answer back on every replay instead of re-deciding it against a policy
+ * that may have changed while it was parked. Only `action` calls are asked about: a policy cannot
+ * put a `read` behind an approval, and an `ask` (a question set) is always the requester's.
+ */
+interface ApprovalPolicy {
+    requirementFor(tool: ApprovalToolRef, actor: Actor, thread: ApprovalThreadRef): ApprovalRequirement | Promise<ApprovalRequirement>;
+    /**
+     * May `actor` settle this call? Checked by the approve/reject routes before a decision is
+     * signalled. Absent → {@link defaultCanDecide}: the requester approver means the thread's own
+     * actor, anything else is a role the actor must hold. Plug an authz Gate here for abilities.
+     */
+    canDecide?(actor: Actor, decision: ApprovalDecisionRef): boolean | Promise<boolean>;
+}
+/**
+ * The behaviour the lib always had: every `action` call waits on the person who asked, with no
+ * expiry.
+ */
+declare class DefaultApprovalPolicy implements ApprovalPolicy {
+    requirementFor(tool: ApprovalToolRef): ApprovalRequirement;
+}
+/** The default decider rule — see {@link ApprovalPolicy.canDecide}. */
+declare function defaultCanDecide(actor: Actor, decision: ApprovalDecisionRef): boolean;
+/** Resolve whether `actor` may decide, through the policy's own rule when it has one. */
+declare function mayDecideApproval(policy: ApprovalPolicy | undefined, actor: Actor, decision: ApprovalDecisionRef): Promise<boolean>;
+/** The columns a store keeps for one call's approval, however it names them. */
+interface ToolCallApprovalColumns {
+    toolCallId: string;
+    status: ToolCallStatus;
+    approver: string | null | undefined;
+    expiresAt: string | Date | null | undefined;
+    remember: boolean | null | undefined;
+    executedByRef: string | null | undefined;
+    decidedVia: string | null | undefined;
+    error: string | null | undefined;
+}
+/**
+ * Read a tool-call row back as the {@link ToolCallApproval} a thread carries, or `null` for a call
+ * no policy put to anyone (no approver recorded). Shared by every store so they agree on the
+ * status mapping: a call that ran — or ran and failed — after a decision was APPROVED.
+ */
+declare function toolCallApprovalFromRow(row: ToolCallApprovalColumns): ToolCallApproval | null;
+
 /**
  * The pure aggregation core shared by every {@link import('../spi/governance-queries.js').AgentGovernanceQueries}
  * adapter (MikroORM, Drizzle, in-memory). An adapter's only job is the DB-specific row fetch; the
@@ -2445,6 +2567,12 @@ declare class ToolRegistry {
      * tool the allow-list has already excluded is a call whose answer nothing reads.
      */
     definitionsFor(actor: Actor, policy: RolesPolicy, allowedTools?: string[]): Promise<ToolDefinition[]>;
+    /**
+     * The specs {@link definitionsFor} offers the model, whole — the same four gates (allow-list,
+     * enabled, role, `canUse`) in the same order. For a surface that lists what an actor can reach
+     * (`GET <base>/tools`), which must never disagree with what the model is actually shown.
+     */
+    visibleSpecs(actor: Actor, policy: RolesPolicy, allowedTools?: string[]): Promise<ToolSpec[]>;
     /**
      * Run a tool. Re-checks that the tool is enabled and that the role allows it (defense-in-depth —
      * a call can reach here from a replayed durable step or an approval granted before the flag
@@ -2464,6 +2592,11 @@ interface AgentLoopDeps<TOutput = unknown> {
     store: AgentStore;
     registry: ToolRegistry;
     rolesPolicy: RolesPolicy;
+    /**
+     * Who has to approve an `action` call, and for how long the request stays open. Undefined →
+     * {@link DefaultApprovalPolicy}: the requester, with no expiry — the behaviour before the SPI.
+     */
+    approvalPolicy?: ApprovalPolicy;
     quota?: QuotaStore;
     /**
      * Fallback accounting label when the provider's turn result doesn't report a `modelId`.
@@ -2696,8 +2829,18 @@ interface AgentLoopHooks {
     runId: string;
     /** A writer for this run's live token stream (data plane). */
     openSink(): SinkWriter | Promise<SinkWriter>;
-    /** HITL gate for an action tool. Inline resolves a pending promise; durable awaits a signal. */
-    awaitApproval(call: ToolCallRequest, ctx: AiToolCtx): Promise<Decision>;
+    /**
+     * HITL gate for an action tool. Inline resolves a pending promise; durable awaits a signal.
+     *
+     * `opts.timeoutMs` is the request's time to live, from the turn's `ApprovalPolicy`. When it
+     * elapses with no decision the runner resolves `{ approved: false, expired: true }` — it must not
+     * throw — and the loop settles the call `expired`. The value comes out of the call's
+     * `persist:toolcall` checkpoint, so it is the same on every replay; a durable runner hands it to
+     * its own timed wait (whose deadline the runtime journals), an inline one arms a timer.
+     */
+    awaitApproval(call: ToolCallRequest, ctx: AiToolCtx, opts?: {
+        timeoutMs?: number;
+    }): Promise<Decision>;
     /**
      * Park the run on a question set and resolve with what the human sent back. The SAME wait
      * `awaitApproval` is — the durable runner maps both to `ctx.waitForSignal` on
@@ -2890,6 +3033,8 @@ declare function withAskTool({ tools, ask, }: {
     tools: ToolDefinition[];
     ask: boolean | undefined;
 }): ToolDefinition[];
+/** The reason an expired call is denied with — on the row, the stream frame and the result. */
+declare const APPROVAL_EXPIRED_REASON = "approval expired";
 /**
  * Stored as the reason when someone declines without giving one. It is a placeholder, not something
  * a person said, so every reader has to filter it out — which is why it is exported rather than
@@ -3141,4 +3286,4 @@ type AgentDiagnosticKey = `agent:${AgentDiagnosticEvent}`;
  */
 declare function agentDiagnosticKey(event: AgentDiagnosticEvent): AgentDiagnosticKey;
 
-export { AGENT_ACTOR_DIRECTORY, AGENT_ACTOR_RESOLVER, AGENT_APPROVAL_PORT, AGENT_ATTACHMENT_STAGING, AGENT_DEPS_FACTORY, AGENT_DIAGNOSTIC_EVENTS, AGENT_DURABLE_RUNNER, AGENT_EMBEDDING_PROVIDER, AGENT_GOVERNANCE_QUERIES, AGENT_MEMORY, AGENT_MODEL, AGENT_OPTIONS, AGENT_PRICING_STORE, AGENT_PROMPT_CONTRIBUTORS, AGENT_QUOTA_STORE, AGENT_REGISTRY, AGENT_RETRIEVER, AGENT_ROLES_POLICY, AGENT_RUNNER, AGENT_SINK, AGENT_SKILLS, AGENT_SKILL_SOURCES, AGENT_SPAN_EVENTS, AGENT_STORE, AGENT_TOOL_REGISTRY, Actor, type ActorDirectory, type ActorResolver, type ActorSpendRow, type AgentApprovalPort, AgentDefinition, type AgentDelegated, AgentDelegation, type AgentDiagnosticEvent, type AgentDiagnosticKey, type AgentFollowUpsSpan, type AgentGovernanceQueries, AgentIntake, type AgentLlmTurnSpan, type AgentLoopDeps, type AgentLoopHooks, type AgentLoopResult, type AgentMemoryResolved, type AgentMemoryWritten, type AgentMessageEvent, type AgentPricingStore, type AgentQuotaExceeded, AgentRegistry, type AgentRetrievalSpan, type AgentRetrieved, type AgentRunFailed, type AgentRunFinished, AgentRunInput, type AgentRunStarted, type AgentRunner, type AgentSkillsResolved, type AgentSpanEvent, type AgentStore, AgentStreamError, type AgentStructuredOutputSpan, type AgentToolCallEvent, type AgentToolExecutionSpan, type AgentToolRetry, AgentUiComponent, AiToolCtx, type AppendMessageInput, type ApprovalWhere, type AttachmentRef, type AttachmentStagingStore, type BufferedModelTurnResult, type BuildMemoryBlockInput, type CostUsage, type CreateThreadInput, type CurrentModelPrice, DEFAULT_HISTORY_SUMMARY_INSTRUCTION, DEFAULT_MAX_FACT_CHARS, DEFAULT_MAX_MEMORIES, DEFAULT_MAX_SKILLS, DEFAULT_REFUSAL_REASON, DEFAULT_STRUCTURED_OUTPUT_INSTRUCTION, Decision, DefaultRolesPolicy, type DetachedDelegationOutcome, type DetachedDelegationReceipt, DetachedDelivery, type DetailThreadRef, ElicitationRequest, type EmbeddingProvider, type ForgetMemoryInput, type FrameBuffer, GLOBAL_SCOPE, type GovernancePage, type GovernancePageQuery, type GovernanceRange, type GovernanceRunDetail, type GovernanceThreadDetail, type GovernanceThreadDetailQuery, type GovernanceUsageInput, HistoryPolicy, HumanReply, type IncrementalGate, InputProcessor, type ListMemoriesInput, type ListSkillsInput, type ListStagedAttachmentsInput, LlmStepEnvelope, type LoadSkillInput, type MemoryAuthor, type MemoryConfig, type MemoryDigest, type MemoryDigestEntry, type MemoryFact, type MemoryForgetRequest, type MemoryOrigin, type MemoryProvider, type MemoryRecord, type MemoryVerdict, type MemoryWriteOutcome, type MemoryWriteRequest, MessageAttachment, MessageUsage, ModelAnswer, ModelMessage, type ModelPrice, type ModelPriceInput, type ModelProvider, type ModelSpendRow, type ModelTurnArgs, type ModelTurnResult, type ObservedTurnFrames, type OfferMemoriesInput, type OutputGateMode, type OutputGateResult, OutputProcessor, type OverriddenMemory, PageContext, type Passage, type PendingApprovalRow, ProcessedPrompt, ProcessorContext, PromptBuilder, PromptContributor, QuotaExceededError, QuotaState, type QuotaStore, REMEMBER_TOOL_DESCRIPTION, REMEMBER_TOOL_NAME, type RecentRunRow, type RecordRunEndInput, type RecordRunStartInput, type RecordToolCallInput, type RecordUsageInput, type RememberToolInput, type RerankOptions, type Reranker, type ResolveAttachmentInput, type ResolveMemoryDigestInput, type ResolvedDelegation, type RetrieveOptions, type Retriever, type RolesPolicy, type RunAgentBreakdownRow, RunCancelledError, type RunErrorBreakdownRow, type RunMetrics, type RunToolCallRow, type RunTrendPoint, type RunWhere, SKILL_TOOL_DESCRIPTION, SKILL_TOOL_NAME, type ScopeContext, type ScopeResolver, type SearchMemoriesInput, type SettledTask, type SinkWriter, type Skill, type SkillAuthor, type SkillCatalogEntry, type SkillContext, type SkillLoadOutcome, type SkillOffer, type SkillProvider, type SkillSummary, type SkillToolInput, type SkillWriteRequest, type SkillWriteVerdict, type SkillsConfig, type StageAttachmentInput, type StagedAttachment, type StoreMemoryInput, StoredMessage, type StreamError, type StructuredOutcome, StructuredOutputError, THREAD_DETAIL_CONTENT_CHARS, type ThreadActivityRow, ThreadDetail, type ThreadMessageRow, type ThreadMeta, type ThreadSpendRow, ThreadSummary, type ThreadTurnPage, type ThreadTurnQuery, type ThreadTurnReader, type ThreadUsageRollup, type ThreadWhere, type TokenStreamSink, type ToolCallActivityRow, ToolCallRequest, ToolCallStatus, type ToolCallWhere, ToolDefinition, ToolDisabledError, ToolForbiddenError, ToolHandler, ToolInputInvalidError, type ToolKindDeps, ToolNotFoundError, ToolRegistry, ToolResult, ToolSpec, type ToolStatRow, ToolStepEnvelope, ToolTransientRetrySetting, type TurnFrameSummary, type UpdateThreadInput, type UpdateToolCallInput, UsagePurpose, type UsageTrendPoint, type WindowHistoryOptions, type WithMemoryToolInput, type WriteMemoryInput, actorScope, agentDiagnosticKey, agentFailureCode, bucketByActor, bucketByModel, bucketByThread, bucketUsageTrend, buildMemoryBlock, buildSkillsBlock, canActorUseTool, compositeSkillProvider, createFrameBuffer, createIncrementalGate, dayBoundsUtc, defaultScopeResolver, detachedDelivered, detachedStarted, detachedUnsettled, estimateCost, estimateMessageTokens, extractJson, filterToolsByAllowList, filterToolsByCanUse, filterToolsByEnabled, filterToolsByRole, gateFollowUps, gateTail, isControlFlowSignal, isReplayIntegrityError, isToolEnabled, loadSkill, memoryForgetVerdict, memoryWriteVerdict, normalizeDelegation, observeTurnFrames, offerMemories, offerSkills, publishAgentDelegated, publishAgentMemoryResolved, publishAgentMemoryWritten, publishAgentMessage, publishAgentQuotaExceeded, publishAgentRetrieved, publishAgentRunFailed, publishAgentRunFinished, publishAgentRunStarted, publishAgentSkillsResolved, publishAgentToolCall, publishAgentToolRetry, releaseGatedFrames, rememberInputSchema, rememberToolDefinition, repairInstruction, resolveGateLookback, resolveMemoryDigest, resolveOutputGateMode, resolveSkillCatalog, rollupThreadUsage, runAgentLoop, runInputProcessors, runOutputProcessors, seedModelPrices, settleAll, settleUnsettledDelegation, skillInputSchema, skillToolDefinition, skillWriteVerdict, stampToolKinds, staticSkillProvider, summarizeWithModel, tenantScope, traceLlmTurn, traceToolExecution, truncateDetailContent, validateStructured, windowHistory, withAskTool, withMemoryTool, withSkillTool, withToolTimeout, withTurnFrames, writeMemory };
+export { AGENT_ACTOR_DIRECTORY, AGENT_ACTOR_RESOLVER, AGENT_APPROVAL_PORT, AGENT_ATTACHMENT_STAGING, AGENT_DEPS_FACTORY, AGENT_DIAGNOSTIC_EVENTS, AGENT_DURABLE_RUNNER, AGENT_EMBEDDING_PROVIDER, AGENT_GOVERNANCE_QUERIES, AGENT_MEMORY, AGENT_MODEL, AGENT_OPTIONS, AGENT_PRICING_STORE, AGENT_PROMPT_CONTRIBUTORS, AGENT_QUOTA_STORE, AGENT_REGISTRY, AGENT_RETRIEVER, AGENT_ROLES_POLICY, AGENT_RUNNER, AGENT_SINK, AGENT_SKILLS, AGENT_SKILL_SOURCES, AGENT_SPAN_EVENTS, AGENT_STORE, AGENT_TOOL_REGISTRY, APPROVAL_EXPIRED_REASON, Actor, type ActorDirectory, type ActorResolver, type ActorSpendRow, type AgentApprovalPort, AgentDefinition, type AgentDelegated, AgentDelegation, type AgentDiagnosticEvent, type AgentDiagnosticKey, type AgentFollowUpsSpan, type AgentGovernanceQueries, AgentIntake, type AgentLlmTurnSpan, type AgentLoopDeps, type AgentLoopHooks, type AgentLoopResult, type AgentMemoryResolved, type AgentMemoryWritten, type AgentMessageEvent, type AgentPricingStore, type AgentQuotaExceeded, AgentRegistry, type AgentRetrievalSpan, type AgentRetrieved, type AgentRunFailed, type AgentRunFinished, AgentRunInput, type AgentRunStarted, type AgentRunner, type AgentSkillsResolved, type AgentSpanEvent, type AgentStore, AgentStreamError, type AgentStructuredOutputSpan, type AgentToolCallEvent, type AgentToolExecutionSpan, type AgentToolRetry, AgentUiComponent, AiToolCtx, type AppendMessageInput, type ApprovalDecisionRef, type ApprovalPolicy, type ApprovalRequirement, type ApprovalThreadRef, type ApprovalToolRef, type ApprovalWhere, type AttachmentRef, type AttachmentStagingStore, type BufferedModelTurnResult, type BuildMemoryBlockInput, type CostUsage, type CreateThreadInput, type CurrentModelPrice, DEFAULT_HISTORY_SUMMARY_INSTRUCTION, DEFAULT_MAX_FACT_CHARS, DEFAULT_MAX_MEMORIES, DEFAULT_MAX_SKILLS, DEFAULT_REFUSAL_REASON, DEFAULT_STRUCTURED_OUTPUT_INSTRUCTION, Decision, DefaultApprovalPolicy, DefaultRolesPolicy, type DetachedDelegationOutcome, type DetachedDelegationReceipt, DetachedDelivery, type DetailThreadRef, ElicitationRequest, type EmbeddingProvider, type ForgetMemoryInput, type FrameBuffer, GLOBAL_SCOPE, type GovernancePage, type GovernancePageQuery, type GovernanceRange, type GovernanceRunDetail, type GovernanceThreadDetail, type GovernanceThreadDetailQuery, type GovernanceUsageInput, HistoryPolicy, HumanReply, type IncrementalGate, InputProcessor, type ListMemoriesInput, type ListSkillsInput, type ListStagedAttachmentsInput, LlmStepEnvelope, type LoadSkillInput, type MemoryAuthor, type MemoryConfig, type MemoryDigest, type MemoryDigestEntry, type MemoryFact, type MemoryForgetRequest, type MemoryOrigin, type MemoryProvider, type MemoryRecord, type MemoryVerdict, type MemoryWriteOutcome, type MemoryWriteRequest, MessageAttachment, MessageUsage, ModelAnswer, ModelMessage, type ModelPrice, type ModelPriceInput, type ModelProvider, type ModelSpendRow, type ModelTurnArgs, type ModelTurnResult, type ObservedTurnFrames, type OfferMemoriesInput, type OutputGateMode, type OutputGateResult, OutputProcessor, type OverriddenMemory, PageContext, type Passage, type PendingApprovalRow, ProcessedPrompt, ProcessorContext, PromptBuilder, PromptContributor, QuotaExceededError, QuotaState, type QuotaStore, REMEMBER_TOOL_DESCRIPTION, REMEMBER_TOOL_NAME, REQUESTER_APPROVER, type RecentRunRow, type RecordRunEndInput, type RecordRunStartInput, type RecordToolCallInput, type RecordUsageInput, type RememberToolInput, type RerankOptions, type Reranker, type ResolveAttachmentInput, type ResolveMemoryDigestInput, type ResolvedDelegation, type RetrieveOptions, type Retriever, type RolesPolicy, type RunAgentBreakdownRow, RunCancelledError, type RunErrorBreakdownRow, type RunMetrics, type RunToolCallRow, type RunTrendPoint, type RunWhere, SKILL_TOOL_DESCRIPTION, SKILL_TOOL_NAME, type ScopeContext, type ScopeResolver, type SearchMemoriesInput, type SettledTask, type SinkWriter, type Skill, type SkillAuthor, type SkillCatalogEntry, type SkillContext, type SkillLoadOutcome, type SkillOffer, type SkillProvider, type SkillSummary, type SkillToolInput, type SkillWriteRequest, type SkillWriteVerdict, type SkillsConfig, type StageAttachmentInput, type StagedAttachment, type StoreMemoryInput, StoredMessage, type StreamError, type StructuredOutcome, StructuredOutputError, THREAD_DETAIL_CONTENT_CHARS, type ThreadActivityRow, ThreadDetail, type ThreadMessageRow, type ThreadMeta, type ThreadSpendRow, ThreadSummary, type ThreadTurnPage, type ThreadTurnQuery, type ThreadTurnReader, type ThreadUsageRollup, type ThreadWhere, type TokenStreamSink, type ToolCallActivityRow, ToolCallApproval, type ToolCallApprovalColumns, type ToolCallApprovalState, ToolCallRequest, ToolCallStatus, type ToolCallWhere, ToolDefinition, ToolDisabledError, ToolForbiddenError, ToolHandler, ToolInputInvalidError, ToolKind, type ToolKindDeps, ToolNotFoundError, ToolRegistry, ToolResult, ToolSpec, type ToolStatRow, ToolStepEnvelope, ToolTransientRetrySetting, type TurnFrameSummary, type UpdateThreadInput, type UpdateToolCallInput, UsagePurpose, type UsageTrendPoint, type WindowHistoryOptions, type WithMemoryToolInput, type WriteMemoryInput, actorScope, agentDiagnosticKey, agentFailureCode, bucketByActor, bucketByModel, bucketByThread, bucketUsageTrend, buildMemoryBlock, buildSkillsBlock, canActorUseTool, compositeSkillProvider, createFrameBuffer, createIncrementalGate, dayBoundsUtc, defaultCanDecide, defaultScopeResolver, detachedDelivered, detachedStarted, detachedUnsettled, estimateCost, estimateMessageTokens, extractJson, filterToolsByAllowList, filterToolsByCanUse, filterToolsByEnabled, filterToolsByRole, gateFollowUps, gateTail, isControlFlowSignal, isReplayIntegrityError, isToolEnabled, loadSkill, mayDecideApproval, memoryForgetVerdict, memoryWriteVerdict, normalizeDelegation, observeTurnFrames, offerMemories, offerSkills, publishAgentDelegated, publishAgentMemoryResolved, publishAgentMemoryWritten, publishAgentMessage, publishAgentQuotaExceeded, publishAgentRetrieved, publishAgentRunFailed, publishAgentRunFinished, publishAgentRunStarted, publishAgentSkillsResolved, publishAgentToolCall, publishAgentToolRetry, releaseGatedFrames, rememberInputSchema, rememberToolDefinition, repairInstruction, resolveGateLookback, resolveMemoryDigest, resolveOutputGateMode, resolveSkillCatalog, rollupThreadUsage, runAgentLoop, runInputProcessors, runOutputProcessors, seedModelPrices, settleAll, settleUnsettledDelegation, skillInputSchema, skillToolDefinition, skillWriteVerdict, stampToolKinds, staticSkillProvider, summarizeWithModel, tenantScope, toolCallApprovalFromRow, traceLlmTurn, traceToolExecution, truncateDetailContent, validateStructured, windowHistory, withAskTool, withMemoryTool, withSkillTool, withToolTimeout, withTurnFrames, writeMemory };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { M as ModelMessage, a as ToolDefinition, b as ToolCallRequest, c as MessageUsage, d as AgentUiComponent, A as Actor, e as ThreadSummary, f as ThreadDetail, S as StoredMessage, g as ToolResult, h as MessageAttachment, i as ToolCallStatus, U as UsagePurpose, j as ToolSpec, Q as QuotaState, k as AgentRunInput, H as HumanReply, T as ToolHandler, l as HistoryPolicy, O as OutputProcessor, P as ProcessorContext, I as InputProcessor, m as ProcessedPrompt, n as ModelAnswer, o as PageContext, p as AgentDefinition, q as AgentDelegation, D as DetachedDelivery, r as AiToolCtx, s as PromptBuilder, t as PromptContributor, u as ToolTransientRetrySetting, v as AgentIntake, w as Decision, E as ElicitationRequest, L as LlmStepEnvelope, x as ToolStepEnvelope } from './tool-CHIw-aTx.js';
-export { y as ASK_TOOL_DESCRIPTION, z as ASK_TOOL_NAME, B as AgentApprovalRequest, C as AgentCatalogEntry, F as AgentHistoryWindow, G as AgentStreamEvent, J as AskToolInput, K as DEFAULT_INCREMENTAL_LOOKBACK_CHARS, N as DEFAULT_INTAKE_PREAMBLE, R as DEFAULT_TOOL_TRANSIENT_RETRY_ATTEMPTS, V as DEFAULT_TOOL_TRANSIENT_RETRY_BACKOFF_MS, W as ElicitationOption, X as ElicitationOutcome, Y as ElicitationQuestion, Z as ElicitationReply, _ as ElicitationResult, $ as HistoryPolicyContext, a0 as HistorySelection, a1 as HistorySummary, a2 as IncrementalGating, a3 as InvokeWithTransientRetryOptions, a4 as MAX_ASK_QUESTIONS, a5 as MessageRole, a6 as OutputRejectedError, a7 as OutputVerdict, a8 as ProcessorFailedError, a9 as PromptContext, aa as QuotaView, ab as ToolKind, ac as ToolStepCtx, ad as ToolTransientRetryNumbers, ae as ToolTransientRetryOptions, af as askInputSchema, ag as askToolDefinition, ah as decodeStreamEvent, ai as encodeStreamEvent, aj as invokeWithTransientRetry, ak as isTransientToolError, al as normalizeElicitationReply, am as renderElicitationAnswers, an as resolveElicitation, ao as resolveToolTransientRetryNumbers, ap as settleElicitation } from './tool-CHIw-aTx.js';
+import { M as ModelMessage, a as ToolDefinition, b as ToolCallRequest, c as MessageUsage, d as AgentUiComponent, A as Actor, e as ThreadSummary, f as ThreadDetail, S as StoredMessage, g as ToolResult, h as MessageAttachment, i as ToolCallStatus, U as UsagePurpose, j as ToolSpec, Q as QuotaState, k as AgentRunInput, H as HumanReply, l as ToolKind, m as ToolCallApproval, T as ToolHandler, n as HistoryPolicy, O as OutputProcessor, P as ProcessorContext, I as InputProcessor, o as ProcessedPrompt, p as ModelAnswer, q as PageContext, r as AgentDefinition, s as AgentDelegation, D as DetachedDelivery, t as AiToolCtx, u as PromptBuilder, v as PromptContributor, w as ToolTransientRetrySetting, x as AgentIntake, y as Decision, E as ElicitationRequest, L as LlmStepEnvelope, z as ToolStepEnvelope } from './tool-B2Dq9ZwF.js';
+export { B as ASK_TOOL_DESCRIPTION, C as ASK_TOOL_NAME, F as AgentApprovalRequest, G as AgentApprovalSettlement, J as AgentCatalogEntry, K as AgentHistoryWindow, N as AgentStreamEvent, R as AskToolInput, V as DEFAULT_INCREMENTAL_LOOKBACK_CHARS, W as DEFAULT_INTAKE_PREAMBLE, X as DEFAULT_TOOL_TRANSIENT_RETRY_ATTEMPTS, Y as DEFAULT_TOOL_TRANSIENT_RETRY_BACKOFF_MS, Z as ElicitationOption, _ as ElicitationOutcome, $ as ElicitationQuestion, a0 as ElicitationReply, a1 as ElicitationResult, a2 as HistoryPolicyContext, a3 as HistorySelection, a4 as HistorySummary, a5 as IncrementalGating, a6 as InvokeWithTransientRetryOptions, a7 as MAX_ASK_QUESTIONS, a8 as MessageRole, a9 as OutputRejectedError, aa as OutputVerdict, ab as ProcessorFailedError, ac as PromptContext, ad as QuotaView, ae as ToolCallApprovalStatus, af as ToolCatalogEntry, ag as ToolConfirmation, ah as ToolPresentation, ai as ToolPresentationTone, aj as ToolResultField, ak as ToolResultView, al as ToolStepCtx, am as ToolTransientRetryNumbers, an as ToolTransientRetryOptions, ao as askInputSchema, ap as askToolDefinition, aq as decodeStreamEvent, ar as encodeStreamEvent, as as invokeWithTransientRetry, at as isTransientToolError, au as normalizeElicitationReply, av as renderElicitationAnswers, aw as resolveElicitation, ax as resolveToolTransientRetryNumbers, ay as settleElicitation } from './tool-B2Dq9ZwF.js';
 import { StandardSchemaV1 } from '@standard-schema/spec';
 import { ChannelRegistry } from '@dudousxd/nestjs-diagnostics';
 
@@ -284,6 +284,14 @@ interface RecordToolCallInput {
      * synthetic tool calls) can omit it; the store persists it as `null` when absent.
      */
     runId?: string;
+    /**
+     * Who has to approve this call (`'requester'` or a role), from the turn's `ApprovalPolicy`. Set on
+     * an action call that was put to a person — or approved by a remembered decision — and never
+     * otherwise; persisted as `null` when absent.
+     */
+    approver?: string;
+    /** ISO-8601 instant the approval request lapses. Absent → it never does. */
+    expiresAt?: string;
 }
 interface UpdateToolCallInput {
     toolCallId: string;
@@ -292,6 +300,17 @@ interface UpdateToolCallInput {
     error?: string;
     executionMs?: number;
     executedByRef?: string;
+    /** The approval asked for later calls of this tool in this thread to run without asking. */
+    remember?: boolean;
+    /** The surface the decision came through. See {@link import('../types.js').Decision.decidedVia}. */
+    decidedVia?: string;
+}
+/** What the approve/reject routes need to know about a call before they signal a decision on it. */
+interface ToolCallApprovalState {
+    status: ToolCallStatus;
+    /** `null` for a call no policy put to anyone (an `ask`, or a row written before approvers existed). */
+    approver: string | null;
+    expiresAt: string | null;
 }
 /** Patch applied by {@link AgentStore.updateThread}. An omitted key leaves that field untouched. */
 interface UpdateThreadInput {
@@ -457,6 +476,19 @@ interface AgentStore {
     truncateFrom(threadId: string, messageId: string): Promise<void>;
     recordToolCall(input: RecordToolCallInput): Promise<void>;
     updateToolCall(input: UpdateToolCallInput): Promise<void>;
+    /**
+     * OPTIONAL: the names of the tools whose approval someone asked to REMEMBER in this thread — an
+     * approved call persisted with `remember: true`. The loop approves a later call of one of them
+     * without asking, inside that call's own `persist:toolcall` checkpoint. Absent → nothing is ever
+     * remembered, and every call asks.
+     */
+    rememberedApprovals?(threadId: string): Promise<string[]>;
+    /**
+     * OPTIONAL: a call's approval state, or `null` when the call is unknown. Read by the approve/reject
+     * routes to enforce the recorded approver and refuse a decision on a request that already
+     * expired. Absent → every call is treated as the requester's, with no expiry (the old behaviour).
+     */
+    toolCallApproval?(toolCallId: string): Promise<ToolCallApprovalState | null>;
     /**
      * OPTIONAL: of `mediaIds`, the ones a message that still exists — in a thread owned by
      * `actorRef` — still carries as an attachment. The inverse of
@@ -1146,15 +1178,105 @@ interface AttachmentStagingStore {
  * approvals inbox renders read-only.
  */
 interface AgentApprovalPort {
+    /**
+     * `remember` approves later calls of the same tool in the same thread; `decidedVia` names the
+     * surface the decision came through (`'console'`, `'slack'`, …) and is persisted with the call.
+     */
     approve(toolCallId: string, opts?: {
         executedByRef?: string;
+        remember?: boolean;
+        decidedVia?: string;
     }): Promise<void>;
     reject(toolCallId: string, opts?: {
         executedByRef?: string;
         reason?: string;
+        decidedVia?: string;
     }): Promise<void>;
 }
 
+/** The approver that means "the person the run is acting for" — the thread's own actor. */
+declare const REQUESTER_APPROVER = "requester";
+/** The tool a requirement is asked about. `spec` is absent where this process cannot resolve it. */
+interface ApprovalToolRef {
+    name: string;
+    kind: ToolKind;
+    spec?: ToolSpec;
+}
+/** Where the call is being made. */
+interface ApprovalThreadRef {
+    threadId: string;
+    runId: string;
+    agentName?: string;
+}
+/**
+ * What an action tool call needs before it runs.
+ *
+ *  - `required: false` → the call runs without asking anyone (it is still recorded as an action).
+ *  - `approver` → who may decide: {@link REQUESTER_APPROVER} (the thread's own actor — the default)
+ *    or any other string, which the default {@link ApprovalPolicy.canDecide} reads as a ROLE the
+ *    decider must hold. Streamed on `approval-requested` and persisted on the call.
+ *  - `ttlMs` → how long the request stays open. When it lapses the call settles `expired` and the
+ *    model is told nobody approved it. Absent → it waits indefinitely.
+ */
+interface ApprovalRequirement {
+    required: boolean;
+    approver: string;
+    ttlMs?: number;
+}
+/** A decision about to be taken on a call, as {@link ApprovalPolicy.canDecide} sees it. */
+interface ApprovalDecisionRef {
+    toolCallId: string;
+    /** The approver recorded on the call when it was put to a person. */
+    approver: string;
+    /** The actorRef the run is acting for — the owner of the call's thread. */
+    requesterRef: string;
+}
+/**
+ * Who has to approve an action tool call, and for how long the request stays open.
+ *
+ * Consulted by the LOOP once per `action` call, inside the call's `persist:toolcall` checkpoint — so
+ * a durable run reads the answer back on every replay instead of re-deciding it against a policy
+ * that may have changed while it was parked. Only `action` calls are asked about: a policy cannot
+ * put a `read` behind an approval, and an `ask` (a question set) is always the requester's.
+ */
+interface ApprovalPolicy {
+    requirementFor(tool: ApprovalToolRef, actor: Actor, thread: ApprovalThreadRef): ApprovalRequirement | Promise<ApprovalRequirement>;
+    /**
+     * May `actor` settle this call? Checked by the approve/reject routes before a decision is
+     * signalled. Absent → {@link defaultCanDecide}: the requester approver means the thread's own
+     * actor, anything else is a role the actor must hold. Plug an authz Gate here for abilities.
+     */
+    canDecide?(actor: Actor, decision: ApprovalDecisionRef): boolean | Promise<boolean>;
+}
+/**
+ * The behaviour the lib always had: every `action` call waits on the person who asked, with no
+ * expiry.
+ */
+declare class DefaultApprovalPolicy implements ApprovalPolicy {
+    requirementFor(tool: ApprovalToolRef): ApprovalRequirement;
+}
+/** The default decider rule — see {@link ApprovalPolicy.canDecide}. */
+declare function defaultCanDecide(actor: Actor, decision: ApprovalDecisionRef): boolean;
+/** Resolve whether `actor` may decide, through the policy's own rule when it has one. */
+declare function mayDecideApproval(policy: ApprovalPolicy | undefined, actor: Actor, decision: ApprovalDecisionRef): Promise<boolean>;
+/** The columns a store keeps for one call's approval, however it names them. */
+interface ToolCallApprovalColumns {
+    toolCallId: string;
+    status: ToolCallStatus;
+    approver: string | null | undefined;
+    expiresAt: string | Date | null | undefined;
+    remember: boolean | null | undefined;
+    executedByRef: string | null | undefined;
+    decidedVia: string | null | undefined;
+    error: string | null | undefined;
+}
+/**
+ * Read a tool-call row back as the {@link ToolCallApproval} a thread carries, or `null` for a call
+ * no policy put to anyone (no approver recorded). Shared by every store so they agree on the
+ * status mapping: a call that ran — or ran and failed — after a decision was APPROVED.
+ */
+declare function toolCallApprovalFromRow(row: ToolCallApprovalColumns): ToolCallApproval | null;
+
 /**
  * The pure aggregation core shared by every {@link import('../spi/governance-queries.js').AgentGovernanceQueries}
  * adapter (MikroORM, Drizzle, in-memory). An adapter's only job is the DB-specific row fetch; the
@@ -2445,6 +2567,12 @@ declare class ToolRegistry {
      * tool the allow-list has already excluded is a call whose answer nothing reads.
      */
     definitionsFor(actor: Actor, policy: RolesPolicy, allowedTools?: string[]): Promise<ToolDefinition[]>;
+    /**
+     * The specs {@link definitionsFor} offers the model, whole — the same four gates (allow-list,
+     * enabled, role, `canUse`) in the same order. For a surface that lists what an actor can reach
+     * (`GET <base>/tools`), which must never disagree with what the model is actually shown.
+     */
+    visibleSpecs(actor: Actor, policy: RolesPolicy, allowedTools?: string[]): Promise<ToolSpec[]>;
     /**
      * Run a tool. Re-checks that the tool is enabled and that the role allows it (defense-in-depth —
      * a call can reach here from a replayed durable step or an approval granted before the flag
@@ -2464,6 +2592,11 @@ interface AgentLoopDeps<TOutput = unknown> {
     store: AgentStore;
     registry: ToolRegistry;
     rolesPolicy: RolesPolicy;
+    /**
+     * Who has to approve an `action` call, and for how long the request stays open. Undefined →
+     * {@link DefaultApprovalPolicy}: the requester, with no expiry — the behaviour before the SPI.
+     */
+    approvalPolicy?: ApprovalPolicy;
     quota?: QuotaStore;
     /**
      * Fallback accounting label when the provider's turn result doesn't report a `modelId`.
@@ -2696,8 +2829,18 @@ interface AgentLoopHooks {
     runId: string;
     /** A writer for this run's live token stream (data plane). */
     openSink(): SinkWriter | Promise<SinkWriter>;
-    /** HITL gate for an action tool. Inline resolves a pending promise; durable awaits a signal. */
-    awaitApproval(call: ToolCallRequest, ctx: AiToolCtx): Promise<Decision>;
+    /**
+     * HITL gate for an action tool. Inline resolves a pending promise; durable awaits a signal.
+     *
+     * `opts.timeoutMs` is the request's time to live, from the turn's `ApprovalPolicy`. When it
+     * elapses with no decision the runner resolves `{ approved: false, expired: true }` — it must not
+     * throw — and the loop settles the call `expired`. The value comes out of the call's
+     * `persist:toolcall` checkpoint, so it is the same on every replay; a durable runner hands it to
+     * its own timed wait (whose deadline the runtime journals), an inline one arms a timer.
+     */
+    awaitApproval(call: ToolCallRequest, ctx: AiToolCtx, opts?: {
+        timeoutMs?: number;
+    }): Promise<Decision>;
     /**
      * Park the run on a question set and resolve with what the human sent back. The SAME wait
      * `awaitApproval` is — the durable runner maps both to `ctx.waitForSignal` on
@@ -2890,6 +3033,8 @@ declare function withAskTool({ tools, ask, }: {
     tools: ToolDefinition[];
     ask: boolean | undefined;
 }): ToolDefinition[];
+/** The reason an expired call is denied with — on the row, the stream frame and the result. */
+declare const APPROVAL_EXPIRED_REASON = "approval expired";
 /**
  * Stored as the reason when someone declines without giving one. It is a placeholder, not something
  * a person said, so every reader has to filter it out — which is why it is exported rather than
@@ -3141,4 +3286,4 @@ type AgentDiagnosticKey = `agent:${AgentDiagnosticEvent}`;
  */
 declare function agentDiagnosticKey(event: AgentDiagnosticEvent): AgentDiagnosticKey;
 
-export { AGENT_ACTOR_DIRECTORY, AGENT_ACTOR_RESOLVER, AGENT_APPROVAL_PORT, AGENT_ATTACHMENT_STAGING, AGENT_DEPS_FACTORY, AGENT_DIAGNOSTIC_EVENTS, AGENT_DURABLE_RUNNER, AGENT_EMBEDDING_PROVIDER, AGENT_GOVERNANCE_QUERIES, AGENT_MEMORY, AGENT_MODEL, AGENT_OPTIONS, AGENT_PRICING_STORE, AGENT_PROMPT_CONTRIBUTORS, AGENT_QUOTA_STORE, AGENT_REGISTRY, AGENT_RETRIEVER, AGENT_ROLES_POLICY, AGENT_RUNNER, AGENT_SINK, AGENT_SKILLS, AGENT_SKILL_SOURCES, AGENT_SPAN_EVENTS, AGENT_STORE, AGENT_TOOL_REGISTRY, Actor, type ActorDirectory, type ActorResolver, type ActorSpendRow, type AgentApprovalPort, AgentDefinition, type AgentDelegated, AgentDelegation, type AgentDiagnosticEvent, type AgentDiagnosticKey, type AgentFollowUpsSpan, type AgentGovernanceQueries, AgentIntake, type AgentLlmTurnSpan, type AgentLoopDeps, type AgentLoopHooks, type AgentLoopResult, type AgentMemoryResolved, type AgentMemoryWritten, type AgentMessageEvent, type AgentPricingStore, type AgentQuotaExceeded, AgentRegistry, type AgentRetrievalSpan, type AgentRetrieved, type AgentRunFailed, type AgentRunFinished, AgentRunInput, type AgentRunStarted, type AgentRunner, type AgentSkillsResolved, type AgentSpanEvent, type AgentStore, AgentStreamError, type AgentStructuredOutputSpan, type AgentToolCallEvent, type AgentToolExecutionSpan, type AgentToolRetry, AgentUiComponent, AiToolCtx, type AppendMessageInput, type ApprovalWhere, type AttachmentRef, type AttachmentStagingStore, type BufferedModelTurnResult, type BuildMemoryBlockInput, type CostUsage, type CreateThreadInput, type CurrentModelPrice, DEFAULT_HISTORY_SUMMARY_INSTRUCTION, DEFAULT_MAX_FACT_CHARS, DEFAULT_MAX_MEMORIES, DEFAULT_MAX_SKILLS, DEFAULT_REFUSAL_REASON, DEFAULT_STRUCTURED_OUTPUT_INSTRUCTION, Decision, DefaultRolesPolicy, type DetachedDelegationOutcome, type DetachedDelegationReceipt, DetachedDelivery, type DetailThreadRef, ElicitationRequest, type EmbeddingProvider, type ForgetMemoryInput, type FrameBuffer, GLOBAL_SCOPE, type GovernancePage, type GovernancePageQuery, type GovernanceRange, type GovernanceRunDetail, type GovernanceThreadDetail, type GovernanceThreadDetailQuery, type GovernanceUsageInput, HistoryPolicy, HumanReply, type IncrementalGate, InputProcessor, type ListMemoriesInput, type ListSkillsInput, type ListStagedAttachmentsInput, LlmStepEnvelope, type LoadSkillInput, type MemoryAuthor, type MemoryConfig, type MemoryDigest, type MemoryDigestEntry, type MemoryFact, type MemoryForgetRequest, type MemoryOrigin, type MemoryProvider, type MemoryRecord, type MemoryVerdict, type MemoryWriteOutcome, type MemoryWriteRequest, MessageAttachment, MessageUsage, ModelAnswer, ModelMessage, type ModelPrice, type ModelPriceInput, type ModelProvider, type ModelSpendRow, type ModelTurnArgs, type ModelTurnResult, type ObservedTurnFrames, type OfferMemoriesInput, type OutputGateMode, type OutputGateResult, OutputProcessor, type OverriddenMemory, PageContext, type Passage, type PendingApprovalRow, ProcessedPrompt, ProcessorContext, PromptBuilder, PromptContributor, QuotaExceededError, QuotaState, type QuotaStore, REMEMBER_TOOL_DESCRIPTION, REMEMBER_TOOL_NAME, type RecentRunRow, type RecordRunEndInput, type RecordRunStartInput, type RecordToolCallInput, type RecordUsageInput, type RememberToolInput, type RerankOptions, type Reranker, type ResolveAttachmentInput, type ResolveMemoryDigestInput, type ResolvedDelegation, type RetrieveOptions, type Retriever, type RolesPolicy, type RunAgentBreakdownRow, RunCancelledError, type RunErrorBreakdownRow, type RunMetrics, type RunToolCallRow, type RunTrendPoint, type RunWhere, SKILL_TOOL_DESCRIPTION, SKILL_TOOL_NAME, type ScopeContext, type ScopeResolver, type SearchMemoriesInput, type SettledTask, type SinkWriter, type Skill, type SkillAuthor, type SkillCatalogEntry, type SkillContext, type SkillLoadOutcome, type SkillOffer, type SkillProvider, type SkillSummary, type SkillToolInput, type SkillWriteRequest, type SkillWriteVerdict, type SkillsConfig, type StageAttachmentInput, type StagedAttachment, type StoreMemoryInput, StoredMessage, type StreamError, type StructuredOutcome, StructuredOutputError, THREAD_DETAIL_CONTENT_CHARS, type ThreadActivityRow, ThreadDetail, type ThreadMessageRow, type ThreadMeta, type ThreadSpendRow, ThreadSummary, type ThreadTurnPage, type ThreadTurnQuery, type ThreadTurnReader, type ThreadUsageRollup, type ThreadWhere, type TokenStreamSink, type ToolCallActivityRow, ToolCallRequest, ToolCallStatus, type ToolCallWhere, ToolDefinition, ToolDisabledError, ToolForbiddenError, ToolHandler, ToolInputInvalidError, type ToolKindDeps, ToolNotFoundError, ToolRegistry, ToolResult, ToolSpec, type ToolStatRow, ToolStepEnvelope, ToolTransientRetrySetting, type TurnFrameSummary, type UpdateThreadInput, type UpdateToolCallInput, UsagePurpose, type UsageTrendPoint, type WindowHistoryOptions, type WithMemoryToolInput, type WriteMemoryInput, actorScope, agentDiagnosticKey, agentFailureCode, bucketByActor, bucketByModel, bucketByThread, bucketUsageTrend, buildMemoryBlock, buildSkillsBlock, canActorUseTool, compositeSkillProvider, createFrameBuffer, createIncrementalGate, dayBoundsUtc, defaultScopeResolver, detachedDelivered, detachedStarted, detachedUnsettled, estimateCost, estimateMessageTokens, extractJson, filterToolsByAllowList, filterToolsByCanUse, filterToolsByEnabled, filterToolsByRole, gateFollowUps, gateTail, isControlFlowSignal, isReplayIntegrityError, isToolEnabled, loadSkill, memoryForgetVerdict, memoryWriteVerdict, normalizeDelegation, observeTurnFrames, offerMemories, offerSkills, publishAgentDelegated, publishAgentMemoryResolved, publishAgentMemoryWritten, publishAgentMessage, publishAgentQuotaExceeded, publishAgentRetrieved, publishAgentRunFailed, publishAgentRunFinished, publishAgentRunStarted, publishAgentSkillsResolved, publishAgentToolCall, publishAgentToolRetry, releaseGatedFrames, rememberInputSchema, rememberToolDefinition, repairInstruction, resolveGateLookback, resolveMemoryDigest, resolveOutputGateMode, resolveSkillCatalog, rollupThreadUsage, runAgentLoop, runInputProcessors, runOutputProcessors, seedModelPrices, settleAll, settleUnsettledDelegation, skillInputSchema, skillToolDefinition, skillWriteVerdict, stampToolKinds, staticSkillProvider, summarizeWithModel, tenantScope, traceLlmTurn, traceToolExecution, truncateDetailContent, validateStructured, windowHistory, withAskTool, withMemoryTool, withSkillTool, withToolTimeout, withTurnFrames, writeMemory };
+export { AGENT_ACTOR_DIRECTORY, AGENT_ACTOR_RESOLVER, AGENT_APPROVAL_PORT, AGENT_ATTACHMENT_STAGING, AGENT_DEPS_FACTORY, AGENT_DIAGNOSTIC_EVENTS, AGENT_DURABLE_RUNNER, AGENT_EMBEDDING_PROVIDER, AGENT_GOVERNANCE_QUERIES, AGENT_MEMORY, AGENT_MODEL, AGENT_OPTIONS, AGENT_PRICING_STORE, AGENT_PROMPT_CONTRIBUTORS, AGENT_QUOTA_STORE, AGENT_REGISTRY, AGENT_RETRIEVER, AGENT_ROLES_POLICY, AGENT_RUNNER, AGENT_SINK, AGENT_SKILLS, AGENT_SKILL_SOURCES, AGENT_SPAN_EVENTS, AGENT_STORE, AGENT_TOOL_REGISTRY, APPROVAL_EXPIRED_REASON, Actor, type ActorDirectory, type ActorResolver, type ActorSpendRow, type AgentApprovalPort, AgentDefinition, type AgentDelegated, AgentDelegation, type AgentDiagnosticEvent, type AgentDiagnosticKey, type AgentFollowUpsSpan, type AgentGovernanceQueries, AgentIntake, type AgentLlmTurnSpan, type AgentLoopDeps, type AgentLoopHooks, type AgentLoopResult, type AgentMemoryResolved, type AgentMemoryWritten, type AgentMessageEvent, type AgentPricingStore, type AgentQuotaExceeded, AgentRegistry, type AgentRetrievalSpan, type AgentRetrieved, type AgentRunFailed, type AgentRunFinished, AgentRunInput, type AgentRunStarted, type AgentRunner, type AgentSkillsResolved, type AgentSpanEvent, type AgentStore, AgentStreamError, type AgentStructuredOutputSpan, type AgentToolCallEvent, type AgentToolExecutionSpan, type AgentToolRetry, AgentUiComponent, AiToolCtx, type AppendMessageInput, type ApprovalDecisionRef, type ApprovalPolicy, type ApprovalRequirement, type ApprovalThreadRef, type ApprovalToolRef, type ApprovalWhere, type AttachmentRef, type AttachmentStagingStore, type BufferedModelTurnResult, type BuildMemoryBlockInput, type CostUsage, type CreateThreadInput, type CurrentModelPrice, DEFAULT_HISTORY_SUMMARY_INSTRUCTION, DEFAULT_MAX_FACT_CHARS, DEFAULT_MAX_MEMORIES, DEFAULT_MAX_SKILLS, DEFAULT_REFUSAL_REASON, DEFAULT_STRUCTURED_OUTPUT_INSTRUCTION, Decision, DefaultApprovalPolicy, DefaultRolesPolicy, type DetachedDelegationOutcome, type DetachedDelegationReceipt, DetachedDelivery, type DetailThreadRef, ElicitationRequest, type EmbeddingProvider, type ForgetMemoryInput, type FrameBuffer, GLOBAL_SCOPE, type GovernancePage, type GovernancePageQuery, type GovernanceRange, type GovernanceRunDetail, type GovernanceThreadDetail, type GovernanceThreadDetailQuery, type GovernanceUsageInput, HistoryPolicy, HumanReply, type IncrementalGate, InputProcessor, type ListMemoriesInput, type ListSkillsInput, type ListStagedAttachmentsInput, LlmStepEnvelope, type LoadSkillInput, type MemoryAuthor, type MemoryConfig, type MemoryDigest, type MemoryDigestEntry, type MemoryFact, type MemoryForgetRequest, type MemoryOrigin, type MemoryProvider, type MemoryRecord, type MemoryVerdict, type MemoryWriteOutcome, type MemoryWriteRequest, MessageAttachment, MessageUsage, ModelAnswer, ModelMessage, type ModelPrice, type ModelPriceInput, type ModelProvider, type ModelSpendRow, type ModelTurnArgs, type ModelTurnResult, type ObservedTurnFrames, type OfferMemoriesInput, type OutputGateMode, type OutputGateResult, OutputProcessor, type OverriddenMemory, PageContext, type Passage, type PendingApprovalRow, ProcessedPrompt, ProcessorContext, PromptBuilder, PromptContributor, QuotaExceededError, QuotaState, type QuotaStore, REMEMBER_TOOL_DESCRIPTION, REMEMBER_TOOL_NAME, REQUESTER_APPROVER, type RecentRunRow, type RecordRunEndInput, type RecordRunStartInput, type RecordToolCallInput, type RecordUsageInput, type RememberToolInput, type RerankOptions, type Reranker, type ResolveAttachmentInput, type ResolveMemoryDigestInput, type ResolvedDelegation, type RetrieveOptions, type Retriever, type RolesPolicy, type RunAgentBreakdownRow, RunCancelledError, type RunErrorBreakdownRow, type RunMetrics, type RunToolCallRow, type RunTrendPoint, type RunWhere, SKILL_TOOL_DESCRIPTION, SKILL_TOOL_NAME, type ScopeContext, type ScopeResolver, type SearchMemoriesInput, type SettledTask, type SinkWriter, type Skill, type SkillAuthor, type SkillCatalogEntry, type SkillContext, type SkillLoadOutcome, type SkillOffer, type SkillProvider, type SkillSummary, type SkillToolInput, type SkillWriteRequest, type SkillWriteVerdict, type SkillsConfig, type StageAttachmentInput, type StagedAttachment, type StoreMemoryInput, StoredMessage, type StreamError, type StructuredOutcome, StructuredOutputError, THREAD_DETAIL_CONTENT_CHARS, type ThreadActivityRow, ThreadDetail, type ThreadMessageRow, type ThreadMeta, type ThreadSpendRow, ThreadSummary, type ThreadTurnPage, type ThreadTurnQuery, type ThreadTurnReader, type ThreadUsageRollup, type ThreadWhere, type TokenStreamSink, type ToolCallActivityRow, ToolCallApproval, type ToolCallApprovalColumns, type ToolCallApprovalState, ToolCallRequest, ToolCallStatus, type ToolCallWhere, ToolDefinition, ToolDisabledError, ToolForbiddenError, ToolHandler, ToolInputInvalidError, ToolKind, type ToolKindDeps, ToolNotFoundError, ToolRegistry, ToolResult, ToolSpec, type ToolStatRow, ToolStepEnvelope, ToolTransientRetrySetting, type TurnFrameSummary, type UpdateThreadInput, type UpdateToolCallInput, UsagePurpose, type UsageTrendPoint, type WindowHistoryOptions, type WithMemoryToolInput, type WriteMemoryInput, actorScope, agentDiagnosticKey, agentFailureCode, bucketByActor, bucketByModel, bucketByThread, bucketUsageTrend, buildMemoryBlock, buildSkillsBlock, canActorUseTool, compositeSkillProvider, createFrameBuffer, createIncrementalGate, dayBoundsUtc, defaultCanDecide, defaultScopeResolver, detachedDelivered, detachedStarted, detachedUnsettled, estimateCost, estimateMessageTokens, extractJson, filterToolsByAllowList, filterToolsByCanUse, filterToolsByEnabled, filterToolsByRole, gateFollowUps, gateTail, isControlFlowSignal, isReplayIntegrityError, isToolEnabled, loadSkill, mayDecideApproval, memoryForgetVerdict, memoryWriteVerdict, normalizeDelegation, observeTurnFrames, offerMemories, offerSkills, publishAgentDelegated, publishAgentMemoryResolved, publishAgentMemoryWritten, publishAgentMessage, publishAgentQuotaExceeded, publishAgentRetrieved, publishAgentRunFailed, publishAgentRunFinished, publishAgentRunStarted, publishAgentSkillsResolved, publishAgentToolCall, publishAgentToolRetry, releaseGatedFrames, rememberInputSchema, rememberToolDefinition, repairInstruction, resolveGateLookback, resolveMemoryDigest, resolveOutputGateMode, resolveSkillCatalog, rollupThreadUsage, runAgentLoop, runInputProcessors, runOutputProcessors, seedModelPrices, settleAll, settleUnsettledDelegation, skillInputSchema, skillToolDefinition, skillWriteVerdict, stampToolKinds, staticSkillProvider, summarizeWithModel, tenantScope, toolCallApprovalFromRow, traceLlmTurn, traceToolExecution, truncateDetailContent, validateStructured, windowHistory, withAskTool, withMemoryTool, withSkillTool, withToolTimeout, withTurnFrames, writeMemory };