@dudousxd/nestjs-agent-core 0.38.1 → 0.40.0

package/dist/index.d.cts

@@ -1,10 +1,9 @@
-import { M as ModelMessage, c as ToolDefinition, d as ToolCallRequest, e as MessageUsage, f as AgentUiComponent, a as Actor, A as AgentStreamEvent, T as ToolSpec, Q as QuotaState, g as AgentRunInput, H as HumanReply, h as MessageAttachment, i as ToolKind, j as ToolCallStatus, k as ToolCallApproval, l as HistoryPolicy, P as PageContext, m as AgentDefinition, n as AgentStore, o as AgentDelegation, D as DetachedDelivery, p as PromptBuilder, q as PromptContributor, r as ToolTransientRetrySetting, s as AgentIntake, t as Decision, E as ElicitationRequest, L as LlmStepEnvelope, u as ToolStepEnvelope, C as ChatQueueStore, v as CreateThreadInput, w as ThreadSummary, x as ThreadDetail, y as ToolCallApprovalState, U as UpdateThreadInput, R as RecordRunStartInput, z as EnqueueMessageInput, B as QueuedMessage, F as QueuedMessagePatch, G as QueuePause, I as AppendMessageInput, S as StoredMessage, J as ToolResult, K as MessageFeedback, N as RecordToolCallInput, O as ToolCallOutcome, V as UpdateToolCallInput, W as RecordUsageInput } from './stream-events-rpd3d6gh.cjs';
-export { X as ALL_AGENTS, Y as ASK_TOOL_DESCRIPTION, Z as ASK_TOOL_NAME, _ as AgentApprovalRequest, $ as AgentApprovalSettlement, a0 as AgentAttachmentConfig, a1 as AgentCatalogEntry, a2 as AgentClientConfig, a3 as AgentHistoryWindow, a4 as AgentStreamErrorCode, a5 as AskToolInput, a6 as ChatQueueState, a7 as DEFAULT_INTAKE_PREAMBLE, a8 as DEFAULT_TOOL_TRANSIENT_RETRY_ATTEMPTS, a9 as DEFAULT_TOOL_TRANSIENT_RETRY_BACKOFF_MS, aa as ELICITATION_INPUT_TYPES, ab as ElicitationInput, ac as ElicitationInputType, ad as ElicitationOption, ae as ElicitationOutcome, af as ElicitationQuestion, ag as ElicitationReply, ah as ElicitationResult, ai as HistoryPolicyContext, aj as HistorySelection, ak as HistorySummary, al as InvokeWithTransientRetryOptions, am as MAX_ASK_QUESTIONS, an as MessageFeedbackValue, ao as MessageRole, ap as PromptContext, aq as QueuePauseReason, ar as QueuedMessageView, as as QuotaView, at as RUN_ENDED_BEFORE_TOOL_CALL, au as RecordRunEndInput, av as ThreadTurnPage, aw as ThreadTurnQuery, ax as ThreadTurnReader, ay as ToolCallApprovalStatus, az as ToolCatalogEntry, aA as ToolConfirmation, b as ToolPresentation, aB as ToolPresentationTone, aC as ToolResultField, aD as ToolResultView, aE as ToolStepCtx, aF as ToolTransientRetryNumbers, aG as ToolTransientRetryOptions, aH as UNFINISHED_TOOL_CALL, aI as UsagePurpose, aJ as askInputSchema, aK as askToolDefinition, aL as danglingToolCallIds, aM as decodeStreamEvent, aN as encodeStreamEvent, aO as invokeWithTransientRetry, aP as isChatQueueStore, aQ as isTransientToolError, aR as isTypedQuestion, aS as normalizeElicitationReply, aT as questionOptions, aU as queuedMessageView, aV as readElicitationInput, aW as readElicitationQuestions, aX as releaseThreadRun, aY as renderElicitationAnswers, aZ as resolveElicitation, a_ as resolveToolTransientRetryNumbers, a$ as settleDanglingToolCalls, b0 as settleElicitation, b1 as validateElicitationAnswer, b2 as validateElicitationValue } from './stream-events-rpd3d6gh.cjs';
-import { A as AiToolCtx, T as ToolHandler, a as ToolDescribeScope } from './tool-Dp8HA_f4.cjs';
-export { b as ToolDescription } from './tool-Dp8HA_f4.cjs';
+import { M as ModelMessage, d as ToolDefinition, e as ToolCallRequest, f as MessageUsage, g as AgentUiComponent, a as Actor, h as AiToolCtx, A as AgentStreamEvent, T as ToolSpec, Q as QuotaState, i as AgentRunInput, H as HumanReply, j as MessageAttachment, k as ActionProposalMutationResult, b as ToolHandler, l as AgentDefinition, m as Persona, o as PersonaCatalogEntry, q as HistoryPolicy, r as PageContext, s as AgentStore, t as AgentDelegation, D as DetachedDelivery, u as ToolDescribeScope, w as ToolPreflightResult, x as ApprovalPolicy, y as PromptBuilder, z as PromptContributor, B as ToolTransientRetrySetting, C as AgentIntake, E as Decision, F as ElicitationRequest, L as LlmStepEnvelope, G as ToolStepEnvelope, I as ClaimActionProposal, J as ActionProposal, K as ActionProposalStore, N as ActionProposalStoreOptions, O as CreateActionProposal, R as CreateActionProposalResult, S as ActionProposalScope, V as ListActionProposals, W as ActionProposalDecisionCommand, X as ExtendActionProposalLease, Y as SettleActionProposal, Z as ActionProposalOutcome, _ as ActionProposalOutcomeLease, $ as ToolCallStatus, a0 as ChatQueueStore, a1 as ActionProposalOutcomeStore, a2 as CreateThreadInput, a3 as ThreadSummary, a4 as ThreadDetail, a5 as ToolCallApprovalState, a6 as UpdateThreadInput, a7 as RecordRunStartInput, a8 as EnqueueMessageInput, a9 as QueuedMessage, aa as QueuedMessagePatch, ab as QueuePause, ac as AppendMessageInput, ad as StoredMessage, ae as ToolResult, af as MessageFeedback, ag as RecordToolCallInput, ah as ToolCallOutcome, ai as UpdateToolCallInput, aj as RecordUsageInput, ak as ToolConfirmation, al as ActionProposalDecision, am as ActionProposalSupersessionStore } from './stream-events-M0jc7lSW.cjs';
+export { an as ALL_AGENTS, ao as ASK_TOOL_DESCRIPTION, ap as ASK_TOOL_NAME, aq as ActionProposalDecisionAudit, ar as ActionProposalExecution, as as ActionProposalExecutionContext, at as ActionProposalLease, au as ActionProposalOutcomeDelivery, av as AgentApprovalRequest, aw as AgentApprovalSettlement, ax as AgentAttachmentConfig, ay as AgentCatalogEntry, az as AgentClientConfig, aA as AgentHistoryWindow, aB as AgentStreamErrorCode, aC as ApprovalDecisionRef, aD as ApprovalRequirement, aE as ApprovalThreadRef, aF as ApprovalToolRef, aG as AskToolInput, aH as ChatQueueState, aI as ClaimedActionApproval, aJ as DEFAULT_INTAKE_PREAMBLE, aK as DEFAULT_TOOL_TRANSIENT_RETRY_ATTEMPTS, aL as DEFAULT_TOOL_TRANSIENT_RETRY_BACKOFF_MS, aM as DefaultApprovalPolicy, aN as ELICITATION_INPUT_TYPES, aO as ElicitationInput, aP as ElicitationInputType, aQ as ElicitationOption, aR as ElicitationOutcome, aS as ElicitationQuestion, aT as ElicitationReply, aU as ElicitationResult, aV as EmitUiOptions, aW as HistoryPolicyContext, aX as HistorySelection, aY as HistorySummary, aZ as InvokeWithTransientRetryOptions, a_ as MAX_ASK_QUESTIONS, a$ as MessageFeedbackValue, b0 as MessageRole, b1 as PersonaRef, b2 as PromptContext, b3 as QueuePauseReason, b4 as QueuedMessageView, b5 as QuotaView, b6 as REQUESTER_APPROVER, b7 as RUN_ENDED_BEFORE_TOOL_CALL, b8 as RecordRunEndInput, b9 as ResolveActionProposalApprovalInput, ba as ThreadTurnPage, bb as ThreadTurnQuery, bc as ThreadTurnReader, bd as ToolCallApproval, be as ToolCallApprovalColumns, bf as ToolCallApprovalStatus, bg as ToolCatalogEntry, bh as ToolDescription, bi as ToolKind, bj as ToolPreflightOptions, c as ToolPresentation, bk as ToolPresentationTone, bl as ToolResultField, bm as ToolResultView, bn as ToolStepCtx, bo as ToolTransientRetryNumbers, bp as ToolTransientRetryOptions, bq as TurnPersona, br as UNFINISHED_TOOL_CALL, bs as UsagePurpose, bt as askInputSchema, bu as askToolDefinition, bv as danglingToolCallIds, bw as decodeStreamEvent, bx as defaultCanDecide, by as encodeStreamEvent, bz as invokeWithTransientRetry, bA as isChatQueueStore, bB as isTransientToolError, bC as isTypedQuestion, bD as mayDecideApproval, bE as normalizeElicitationReply, bF as questionOptions, bG as queuedMessageView, bH as readElicitationInput, bI as readElicitationQuestions, bJ as releaseThreadRun, bK as renderElicitationAnswers, bL as resolveActionProposalApproval, bM as resolveElicitation, bN as resolveToolTransientRetryNumbers, bO as settleDanglingToolCalls, bP as settleElicitation, bQ as toolCallApprovalFromRow, bR as validateElicitationAnswer, bS as validateElicitationValue } from './stream-events-M0jc7lSW.cjs';
 import { StandardSchemaV1 } from '@standard-schema/spec';
-import { O as OutputProcessor, P as ProcessorContext, I as InputProcessor, a as ProcessedPrompt, M as ModelAnswer } from './processors-CAVevaYJ.cjs';
-export { D as DEFAULT_INCREMENTAL_LOOKBACK_CHARS, b as IncrementalGating, c as OutputRejectedError, d as OutputVerdict, e as ProcessorFailedError } from './processors-CAVevaYJ.cjs';
+import { O as OutputProcessor, P as ProcessorContext, I as InputProcessor, a as ProcessedPrompt, M as ModelAnswer } from './processors-B7nfbU6E.cjs';
+export { D as DEFAULT_INCREMENTAL_LOOKBACK_CHARS, b as IncrementalGating, c as OutputRejectedError, d as OutputVerdict, e as ProcessorFailedError } from './processors-B7nfbU6E.cjs';
+import { a as Catalog } from './catalog-CrzetM3_.cjs';
 import { ChannelRegistry } from '@dudousxd/nestjs-diagnostics';
 
 /**
@@ -335,11 +334,15 @@ declare function observeTurnFrames(writer: SinkWriter, now?: () => number): Obse
 declare function withTurnFrames<T extends ModelTurnResult>(result: T, frames: TurnFrameSummary): T;
 
 /** The tool step's journaled result: the bare output, or the output plus the components it pushed. */
-declare function wrapToolStepOutput(output: unknown, ui: readonly AgentUiComponent[]): unknown;
+declare function wrapToolStepOutput(output: unknown, ui: readonly AgentUiComponent[], text?: string): unknown;
+/** Carry domain refusal across a remote step without losing its type in error serialization. */
+declare function wrapToolPreflightDenied(reason: string): unknown;
 /** Read a tool step's result back — either shape. */
 declare function unwrapToolStepOutput(raw: unknown): {
     output: unknown;
     ui: AgentUiComponent[];
+    preflightDenied?: string;
+    text?: string;
 };
 type EmitUi = AiToolCtx['emitUi'];
 /**
@@ -366,6 +369,8 @@ interface UiCollector {
 declare function createUiCollector(toolCallId: string, write?: (event: AgentStreamEvent) => void | Promise<void>): UiCollector;
 /** Merge component lists: first-seen order, the last props for each id. */
 declare function mergeUi(...lists: readonly (readonly AgentUiComponent[] | undefined)[]): AgentUiComponent[];
+/** Escape code units native PostgreSQL/MySQL TEXT cannot store; retain ordinary prose and emoji. */
+declare function escapeUnsafeToolUiText(text: string): string;
 
 /**
  * Decides whether an actor may invoke a tool. The default impl checks the actor's role
@@ -1137,6 +1142,22 @@ interface AttachmentStagingDescription {
  * approvals inbox renders read-only.
  */
 interface AgentApprovalPort {
+    approveActionProposal?(actor: Actor, target: {
+        kind: 'proposal';
+        threadId: string;
+        proposalId: string;
+    }, opts?: {
+        remember?: boolean;
+        decidedVia?: string;
+    }): Promise<ActionProposalMutationResult>;
+    rejectActionProposal?(actor: Actor, target: {
+        kind: 'proposal';
+        threadId: string;
+        proposalId: string;
+    }, opts?: {
+        reason?: string;
+        decidedVia?: string;
+    }): Promise<ActionProposalMutationResult>;
     /**
      * `remember` approves later calls of the same tool in the same thread; `decidedVia` names the
      * surface the decision came through (`'console'`, `'slack'`, …) and is persisted with the call.
@@ -1153,89 +1174,6 @@ interface AgentApprovalPort {
     }): Promise<void>;
 }
 
-/** The approver that means "the person the run is acting for" — the thread's own actor. */
-declare const REQUESTER_APPROVER = "requester";
-/** The tool a requirement is asked about. `spec` is absent where this process cannot resolve it. */
-interface ApprovalToolRef {
-    name: string;
-    kind: ToolKind;
-    spec?: ToolSpec;
-}
-/** Where the call is being made. */
-interface ApprovalThreadRef {
-    threadId: string;
-    runId: string;
-    agentName?: string;
-}
-/**
- * What an action tool call needs before it runs.
- *
- *  - `required: false` → the call runs without asking anyone (it is still recorded as an action).
- *  - `approver` → who may decide: {@link REQUESTER_APPROVER} (the thread's own actor — the default)
- *    or any other string, which the default {@link ApprovalPolicy.canDecide} reads as a ROLE the
- *    decider must hold. Streamed on `approval-requested` and persisted on the call.
- *  - `ttlMs` → how long the request stays open. When it lapses the call settles `expired` and the
- *    model is told nobody approved it. Absent → it waits indefinitely.
- */
-interface ApprovalRequirement {
-    required: boolean;
-    approver: string;
-    ttlMs?: number;
-}
-/** A decision about to be taken on a call, as {@link ApprovalPolicy.canDecide} sees it. */
-interface ApprovalDecisionRef {
-    toolCallId: string;
-    /** The approver recorded on the call when it was put to a person. */
-    approver: string;
-    /** The actorRef the run is acting for — the owner of the call's thread. */
-    requesterRef: string;
-}
-/**
- * Who has to approve an action tool call, and for how long the request stays open.
- *
- * Consulted by the LOOP once per `action` call, inside the call's `persist:toolcall` checkpoint — so
- * a durable run reads the answer back on every replay instead of re-deciding it against a policy
- * that may have changed while it was parked. Only `action` calls are asked about: a policy cannot
- * put a `read` behind an approval, and an `ask` (a question set) is always the requester's.
- */
-interface ApprovalPolicy {
-    requirementFor(tool: ApprovalToolRef, actor: Actor, thread: ApprovalThreadRef): ApprovalRequirement | Promise<ApprovalRequirement>;
-    /**
-     * May `actor` settle this call? Checked by the approve/reject routes before a decision is
-     * signalled. Absent → {@link defaultCanDecide}: the requester approver means the thread's own
-     * actor, anything else is a role the actor must hold. Plug an authz Gate here for abilities.
-     */
-    canDecide?(actor: Actor, decision: ApprovalDecisionRef): boolean | Promise<boolean>;
-}
-/**
- * The behaviour the lib always had: every `action` call waits on the person who asked, with no
- * expiry.
- */
-declare class DefaultApprovalPolicy implements ApprovalPolicy {
-    requirementFor(tool: ApprovalToolRef): ApprovalRequirement;
-}
-/** The default decider rule — see {@link ApprovalPolicy.canDecide}. */
-declare function defaultCanDecide(actor: Actor, decision: ApprovalDecisionRef): boolean;
-/** Resolve whether `actor` may decide, through the policy's own rule when it has one. */
-declare function mayDecideApproval(policy: ApprovalPolicy | undefined, actor: Actor, decision: ApprovalDecisionRef): Promise<boolean>;
-/** The columns a store keeps for one call's approval, however it names them. */
-interface ToolCallApprovalColumns {
-    toolCallId: string;
-    status: ToolCallStatus;
-    approver: string | null | undefined;
-    expiresAt: string | Date | null | undefined;
-    remember: boolean | null | undefined;
-    executedByRef: string | null | undefined;
-    decidedVia: string | null | undefined;
-    error: string | null | undefined;
-}
-/**
- * Read a tool-call row back as the {@link ToolCallApproval} a thread carries, or `null` for a call
- * no policy put to anyone (no approver recorded). Shared by every store so they agree on the
- * status mapping: a call that ran — or ran and failed — after a decision was APPROVED.
- */
-declare function toolCallApprovalFromRow(row: ToolCallApprovalColumns): ToolCallApproval | null;
-
 /**
  * The pure aggregation core shared by every {@link import('../spi/governance-queries.js').AgentGovernanceQueries}
  * adapter (MikroORM, Drizzle, in-memory). An adapter's only job is the DB-specific row fetch; the
@@ -1349,6 +1287,27 @@ declare function filterToolsByRole(tools: ToolSpec[], actor: Actor, policy: Role
  */
 declare function filterToolsByAllowList(tools: ToolSpec[], allowedTools: string[] | undefined): ToolSpec[];
 
+/**
+ * The narrower of two tool allow-lists. `undefined` is "no restriction", so it yields the other;
+ * two lists yield the names on both, in the order of the first.
+ */
+declare function intersectAllowLists(first: readonly string[] | undefined, second: readonly string[] | undefined): string[] | undefined;
+/** The persona `id` of `definition`, or `undefined` when it declares none by that id. */
+declare function findPersona(definition: Pick<AgentDefinition, 'personas'> | undefined, id: string | undefined): Persona | undefined;
+/** A persona as a picker reads it — never its prompt or its allow-list. */
+declare function personaCatalogEntry(persona: Persona): PersonaCatalogEntry;
+/** Where a former agent name now lives: an agent, and the persona of it the name stands for. */
+interface PersonaAlias {
+    agent: string;
+    persona: string;
+}
+/**
+ * Resolve `name` through the {@link Persona.aliases} of `definitions`: the agent and persona that
+ * answer for it, or `undefined` when no persona claims it. A name that IS a registered agent is
+ * never an alias — the caller checks that first, so a real agent always wins.
+ */
+declare function resolvePersonaAlias(definitions: readonly AgentDefinition[], name: string): PersonaAlias | undefined;
+
 /**
  * The built-in {@link HistoryPolicy}: keep the newest messages that fit a count and/or a token
  * budget, and (optionally) fold the rest into a summary. See `./spi/history-policy.ts` for the seam
@@ -2532,6 +2491,17 @@ declare class ToolInputInvalidError extends Error {
     readonly issues: readonly StandardSchemaV1.Issue[];
     constructor(toolName: string, issues: readonly StandardSchemaV1.Issue[]);
 }
+/** An action refused by its current domain state, rather than by a person. */
+declare class ToolPreflightDeniedError extends Error {
+    readonly toolName: string;
+    readonly reason: string;
+    constructor(toolName: string, reason: string);
+}
+/** Trusted preparation or a fresh schema parse changed the approved JSON input. */
+declare class ToolInputDriftError extends Error {
+    readonly toolName: string;
+    constructor(toolName: string);
+}
 /**
  * Holds every registered tool and gates invocation.
  *
@@ -2579,7 +2549,30 @@ declare class ToolRegistry {
      * a call can reach here from a replayed durable step or an approval granted before the flag
      * moved, neither of which went through `definitionsFor` again) and re-parses the input via Zod.
      */
-    invoke(name: string, input: unknown, ctx: AiToolCtx, policy: RolesPolicy): Promise<unknown>;
+    invoke(name: string, input: unknown, ctx: AiToolCtx, policy: RolesPolicy, options?: InvokeOptions): Promise<unknown>;
+    /** Authorize and validate without executing. The caller journals this result before approval. */
+    prepare(name: string, input: unknown, ctx: AiToolCtx, policy: RolesPolicy, options?: PrepareOptions): Promise<ToolPreflightResult>;
+    /** Expose the single schema parse; snapshotInput opts proposal callers into immutable JSON. */
+    prepareValidated(name: string, input: unknown, ctx: AiToolCtx, policy: RolesPolicy, options?: PrepareOptions): Promise<ToolPreparationResult>;
+    private validated;
+}
+/** Per-call narrowing for {@link ToolRegistry.invoke}. */
+interface InvokeOptions {
+    /**
+     * Only these tool names may run — the turn's persona allow-list. Checked after `enabled`, the
+     * roles policy and `canUse`. Undefined → no such check (every caller predating personas).
+     */
+    allowedTools?: readonly string[];
+    /** Trusted normalized JSON input. Own-property presence requires comparison even if undefined. */
+    approvedInput?: unknown;
+}
+interface PrepareOptions extends InvokeOptions {
+    /** Preserve a detached normalized JSON snapshot and refuse mutation by the prepare hook. */
+    snapshotInput?: boolean;
+}
+interface ToolPreparationResult {
+    input: unknown;
+    preflight: ToolPreflightResult;
 }
 /**
  * Default gate: a tool that names `roles` is callable by an actor holding one of them; a tool that
@@ -2629,7 +2622,27 @@ declare class ClosedRolesPolicy extends DefaultRolesPolicy {
  */
 declare function closeEmptyRoles(inner: RolesPolicy): RolesPolicy;
 
+type ActionApprovalMode = 'blocking' | 'independent';
+type ActionProposalTarget = {
+    kind: 'proposal';
+    proposalId: string;
+};
+interface ActionProposalReceipt {
+    proposalId: string;
+    status: 'pending';
+    executed: false;
+}
+declare function actionProposalReceipt(proposalId: string): ActionProposalReceipt;
+
+type ResolveToolUiCatalog = (scope: ToolDescribeScope) => Catalog | Promise<Catalog>;
+interface NegotiatedUiCollector extends UiCollector {
+    text(): string;
+}
+declare function createNegotiatedUiCollector(toolCallId: string, scope: ToolDescribeScope, resolveCatalog?: ResolveToolUiCatalog, write?: (event: AgentStreamEvent) => void | Promise<void>): NegotiatedUiCollector;
+
 interface AgentLoopDeps<TOutput = unknown> {
+    actionApprovalMode?: ActionApprovalMode;
+    resolveUiCatalog?: ResolveToolUiCatalog;
     model: ModelProvider;
     store: AgentStore;
     registry: ToolRegistry;
@@ -2680,6 +2693,12 @@ interface AgentLoopDeps<TOutput = unknown> {
     host?: unknown;
     /** Agent-level tool allow-list. Undefined → all tools (after role filtering). */
     toolAllowList?: string[];
+    /**
+     * The agent's personas. Read ONLY when the run names one (`AgentRunInput.persona`), and then only
+     * once, inside the `persona:resolve` checkpoint — so a replay runs under the persona the turn
+     * started with even after this list changed. Undefined → no personas.
+     */
+    personas?: Persona[];
     /**
      * Per-tool execution timeout in ms. A tool that runs longer is aborted and recorded as failed
      * (the model gets the timeout as its result and can adapt) rather than hanging the turn.
@@ -3128,7 +3147,7 @@ interface AgentLoopResult<TOutput = unknown> {
  * It drives the model→tools→model iteration; the runner supplies the `step`/`awaitApproval`
  * hooks that make the same loop body either in-process or a replay-safe durable workflow.
  */
-declare function runAgentLoop<TOutput = unknown>(boundDeps: AgentLoopDeps<TOutput>, input: AgentRunInput, hooks: AgentLoopHooks): Promise<AgentLoopResult<TOutput>>;
+declare function runAgentLoop<TOutput = unknown>(boundDeps: AgentLoopDeps<TOutput>, requested: AgentRunInput, hooks: AgentLoopHooks): Promise<AgentLoopResult<TOutput>>;
 
 /** Payloads carried on each `aviary:agent:*` channel. */
 interface AgentRunStarted {
@@ -3137,6 +3156,8 @@ interface AgentRunStarted {
     actorId: string;
     /** Which agent is handling the run. */
     agentName?: string;
+    /** The persona of that agent the run is under, when it is under one. */
+    persona?: string;
 }
 interface AgentMessageEvent {
     runId: string;
@@ -3362,6 +3383,51 @@ type AgentDiagnosticKey = `agent:${AgentDiagnosticEvent}`;
  */
 declare function agentDiagnosticKey(event: AgentDiagnosticEvent): AgentDiagnosticKey;
 
+/** Privileged worker-only discovery; never expose this unscoped capability on public routes. */
+interface ActionProposalWorkerStore {
+    /** Claim one queued or expired-lease action across scopes; null means no claim was won. */
+    claimNextActionProposal(command: ClaimActionProposal): Promise<ActionProposal | null>;
+    /** Expire at most limit (1..1000) due pending proposals using the store's trusted clock. */
+    expireActionProposals(command: {
+        limit: number;
+    }): Promise<number>;
+}
+/** SQL upgrade capability. Run bounded batches after additive DDL and before starting workers. */
+interface ActionProposalDiscoveryIndexStore {
+    backfillActionProposalDiscoveryIndex(command: {
+        limit: number;
+    }): Promise<number>;
+}
+
+/** Reference single-process implementation; durable adapters use the same transitions under CAS. */
+declare class InMemoryActionProposalStore implements ActionProposalStore, ActionProposalWorkerStore {
+    protected readonly rows: Map<string, ActionProposal>;
+    protected readonly clock: () => number;
+    constructor(options?: ActionProposalStoreOptions);
+    createActionProposal(input: CreateActionProposal): Promise<CreateActionProposalResult>;
+    getActionProposal(scope: ActionProposalScope, id: string): Promise<ActionProposal | null>;
+    listActionProposals(scope: ActionProposalScope, query?: ListActionProposals): Promise<ActionProposal[]>;
+    private mutate;
+    decideActionProposal(scope: ActionProposalScope, id: string, command: ActionProposalDecisionCommand): Promise<ActionProposalMutationResult>;
+    claimActionProposal(scope: ActionProposalScope, id: string, command: ClaimActionProposal): Promise<ActionProposalMutationResult>;
+    extendActionProposalLease(scope: ActionProposalScope, id: string, command: ExtendActionProposalLease): Promise<ActionProposalMutationResult>;
+    settleActionProposal(scope: ActionProposalScope, id: string, command: SettleActionProposal): Promise<ActionProposalMutationResult>;
+    claimNextActionProposal(command: ClaimActionProposal): Promise<ActionProposal | null>;
+    expireActionProposals(command: {
+        limit: number;
+    }): Promise<number>;
+    claimNextActionProposalOutcome(command: ClaimActionProposal): Promise<{
+        outcome: ActionProposalOutcome;
+        lease: ActionProposalOutcomeLease;
+    } | null>;
+    createReplacingActionProposal(input: CreateActionProposal): Promise<CreateActionProposalResult>;
+    supersedeActionProposal(scope: ActionProposalScope, id: string, command: {
+        replacementProposalId: string;
+        actorRef: string;
+        via: string;
+    }): Promise<ActionProposalMutationResult>;
+}
+
 /** A recorded usage row exposed to the governance read-model (input/output split + thread/day). */
 interface GovernanceUsageRow {
     actorRef: string;
@@ -3447,7 +3513,7 @@ interface GovernanceRunRow {
     parentRunId?: string;
 }
 /** A fully in-memory `AgentStore` for tests and the offline demo. */
-declare class InMemoryAgentStore implements AgentStore, ChatQueueStore {
+declare class InMemoryAgentStore extends InMemoryActionProposalStore implements AgentStore, ChatQueueStore, ActionProposalOutcomeStore {
     private readonly threads;
     /** Each thread's waiting messages, in run order. */
     private readonly queues;
@@ -3479,6 +3545,8 @@ declare class InMemoryAgentStore implements AgentStore, ChatQueueStore {
      * this scalar has a method to ask for it.
      */
     defaultAgentForThread(threadId: string): Promise<string | null>;
+    /** The thread's persona, projected like {@link defaultAgentForThread}. */
+    personaForThread(threadId: string): Promise<string | null>;
     /** The thread's pinned model, projected like {@link defaultAgentForThread}. */
     modelForThread(threadId: string): Promise<string | null>;
     /**
@@ -3514,6 +3582,8 @@ declare class InMemoryAgentStore implements AgentStore, ChatQueueStore {
     queuePause(threadId: string): Promise<QueuePause | null>;
     setQueuePause(threadId: string, pause: QueuePause | null): Promise<void>;
     private findQueued;
+    getThreadActionProposalScope(threadId: string): Promise<ActionProposalScope | null>;
+    admitActionProposalOutcome(command: ActionProposalOutcomeLease): ReturnType<ActionProposalOutcomeStore['admitActionProposalOutcome']>;
     appendMessage(input: AppendMessageInput): Promise<StoredMessage>;
     setMessageToolResults(messageId: string, results: ToolResult[]): Promise<void>;
     setMessageUi(messageId: string, ui: AgentUiComponent[]): Promise<void>;
@@ -3862,7 +3932,11 @@ interface StreamFrameTable {
     remove(runIds: readonly string[]): Promise<void>;
     /** Runs whose LAST row was written before `cutoff` (epoch-ms). */
     lapsedRuns(cutoff: number): Promise<string[]>;
-    /** Is this error a lost race for a `(run_id, seq)` — and nothing else (a missing table, a dead connection)? */
+    /**
+     * Is this error a lost race for a `(run_id, seq)` — a duplicate key, or the database rolling this
+     * writer back as a deadlock victim (InnoDB's way of settling two concurrent `INSERT … SELECT`) —
+     * and nothing else (a missing table, a dead connection)?
+     */
     isUniqueViolation(error: unknown): boolean;
 }
 interface SqlTokenStreamSinkOptions {
@@ -3962,4 +4036,156 @@ declare class SqlTokenStreamSink implements TokenStreamSink {
     private purgeInBackground;
 }
 
-export { AGENT_ACTOR_DIRECTORY, AGENT_ACTOR_RESOLVER, AGENT_APPROVAL_PORT, AGENT_ATTACHMENT_STAGING, AGENT_CONFIRM_TOKEN_STORE, AGENT_DEPS_FACTORY, AGENT_DIAGNOSTIC_EVENTS, AGENT_DURABLE_RUNNER, AGENT_EMBEDDING_PROVIDER, AGENT_GOVERNANCE_QUERIES, AGENT_MEMORY, AGENT_MODEL, AGENT_MODEL_CATALOG, AGENT_OPTIONS, AGENT_PRICING_STORE, AGENT_PROMPT_CONTRIBUTORS, AGENT_QUOTA_PROVIDER, AGENT_QUOTA_STORE, AGENT_REGISTRY, AGENT_RETRIEVER, AGENT_ROLES_POLICY, AGENT_RUNNER, AGENT_SINK, AGENT_SKILLS, AGENT_SKILL_SOURCES, AGENT_SPAN_EVENTS, AGENT_STORE, AGENT_TOOL_REGISTRY, APPROVAL_EXPIRED_REASON, Actor, type ActorDirectory, type ActorResolver, type ActorSpendRow, type AgentApprovalPort, AgentDefinition, type AgentDelegated, AgentDelegation, type AgentDiagnosticEvent, type AgentDiagnosticKey, type AgentFollowUpsSpan, type AgentGovernanceQueries, AgentIntake, type AgentLlmTurnSpan, type AgentLoopDeps, type AgentLoopHooks, type AgentLoopResult, type AgentMemoryResolved, type AgentMemoryWritten, type AgentMessageEvent, type AgentPricingStore, type AgentQuotaExceeded, AgentRegistry, type AgentRetrievalSpan, type AgentRetrieved, type AgentRunFailed, type AgentRunFinished, AgentRunInput, type AgentRunStartOptions, type AgentRunStarted, type AgentRunner, type AgentSkillsResolved, type AgentSpanEvent, AgentStore, AgentStreamError, AgentStreamEvent, type AgentStructuredOutputSpan, type AgentToolCallEvent, type AgentToolExecutionSpan, type AgentToolRetry, AgentUiComponent, AiToolCtx, AppendMessageInput, type ApprovalDecisionRef, type ApprovalPolicy, type ApprovalRequirement, type ApprovalThreadRef, type ApprovalToolRef, type ApprovalWhere, type AttachmentRef, type AttachmentStagingDescription, type AttachmentStagingStore, type BufferedModelTurnResult, type BuildMemoryBlockInput, CONFIRM_JSON_SCHEMA_PROPERTIES, ChatQueueStore, ClosedRolesPolicy, type ConfirmFields, type ConfirmTokenClaim, ConfirmTokenError, type ConfirmTokenStore, type ConfirmTokenSubject, type ConfirmedTool, type ConfirmedToolDone, type ConfirmedToolMessages, type ConfirmedToolOptions, type ConfirmedToolOutcome, type ConfirmedToolPreview, type ConfirmedToolResult, type ConfirmedToolSteps, type CostUsage, CreateThreadInput, type CurrentModelPrice, DEFAULT_CONFIRM_TTL_MS, DEFAULT_HISTORY_SUMMARY_INSTRUCTION, DEFAULT_MAX_FACT_CHARS, DEFAULT_MAX_MEMORIES, DEFAULT_MAX_SKILLS, DEFAULT_REFUSAL_REASON, DEFAULT_STRUCTURED_OUTPUT_INSTRUCTION, Decision, DefaultApprovalPolicy, DefaultRolesPolicy, type DetachedDelegationOutcome, type DetachedDelegationReceipt, DetachedDelivery, type DetailThreadRef, ElicitationRequest, type EmbeddingProvider, type EmitUi, type EmptyRoles, EnqueueMessageInput, type ForgetMemoryInput, type FrameBuffer, GLOBAL_SCOPE, type GovernanceMessageRow, type GovernancePage, type GovernancePageQuery, type GovernancePendingApprovalRow, type GovernanceRange, type GovernanceRunDetail, type GovernanceRunRow, type GovernanceThreadDetail, type GovernanceThreadDetailQuery, type GovernanceThreadRow, type GovernanceToolCallRow, type GovernanceUsageInput, type GovernanceUsageRow, HistoryPolicy, HumanReply, InMemoryAgentStore, InMemoryConfirmTokenStore, type IncrementalGate, InputProcessor, type ListMemoriesInput, type ListSkillsInput, type ListStagedAttachmentsInput, LlmStepEnvelope, type LoadSkillInput, type MemoryAuthor, type MemoryConfig, type MemoryDigest, type MemoryDigestEntry, type MemoryFact, type MemoryForgetRequest, type MemoryOrigin, type MemoryProvider, type MemoryRecord, type MemoryVerdict, type MemoryWriteOutcome, type MemoryWriteRequest, MessageAttachment, MessageFeedback, MessageUsage, ModelAnswer, type ModelCatalog, type ModelCatalogEntry, type ModelCatalogLock, type ModelCatalogProviderGroup, type ModelCatalogQuery, type ModelCatalogView, ModelMessage, type ModelPrice, type ModelPriceInput, type ModelProvider, type ModelSpendRow, type ModelTurnArgs, type ModelTurnResult, type ObservedTurnFrames, type OfferMemoriesInput, type OutputGateMode, type OutputGateResult, OutputProcessor, type OverriddenMemory, PageContext, type Passage, type PendingApprovalRow, ProcessedPrompt, ProcessorContext, PromptBuilder, PromptContributor, QueuePause, QueuedMessage, QueuedMessagePatch, type QuotaBlock, QuotaExceededError, type QuotaPeriod, type QuotaProvider, type QuotaQuery, type QuotaReport, QuotaState, type QuotaStore, type QuotaWarning, type QuotaWindow, REMEMBER_TOOL_DESCRIPTION, REMEMBER_TOOL_NAME, REQUESTER_APPROVER, RUN_FAILED_MESSAGE, RUN_NOT_ACTIVE_CODE, RUN_NOT_ACTIVE_MESSAGE, RUN_NO_LONGER_RUNNING, type RecentRunRow, RecordRunStartInput, RecordToolCallInput, RecordUsageInput, type RememberToolInput, type RerankOptions, type Reranker, type ResolveAttachmentInput, type ResolveMemoryDigestInput, type ResolvedDelegation, type RetrieveOptions, type Retriever, type RolesPolicy, type RolesPolicyOptions, type RunAgentBreakdownRow, RunCancelledError, type RunErrorBreakdownRow, type RunMetrics, type RunToolCallRow, type RunTrendPoint, type RunWhere, SCHEMA_EXTENSION, SKILL_TOOL_DESCRIPTION, SKILL_TOOL_NAME, type SchemaExtension, type ScopeContext, type ScopeResolver, type SearchMemoriesInput, type SettleDeadRunInput, type SettledTask, type SinkWriter, type Skill, type SkillAuthor, type SkillCatalogEntry, type SkillContext, type SkillLoadOutcome, type SkillOffer, type SkillProvider, type SkillSummary, type SkillToolInput, type SkillWriteRequest, type SkillWriteVerdict, type SkillsConfig, SqlTokenStreamSink, type SqlTokenStreamSinkOptions, type StageAttachmentInput, type StagedAttachment, type StoreMemoryInput, StoredMessage, type StreamError, type StreamFrameRow, type StreamFrameTable, type StructuredOutcome, StructuredOutputError, THREAD_DETAIL_CONTENT_CHARS, type ThreadActivityRow, ThreadDetail, type ThreadMessageRow, type ThreadMeta, type ThreadSpendRow, ThreadSummary, type ThreadUsageRollup, type ThreadWhere, type TokenStreamSink, type ToolCallActivityRow, ToolCallApproval, type ToolCallApprovalColumns, ToolCallApprovalState, ToolCallOutcome, ToolCallRequest, ToolCallStatus, type ToolCallWhere, ToolDefinition, ToolDescribeScope, ToolDisabledError, ToolForbiddenError, ToolHandler, ToolInputInvalidError, ToolKind, type ToolKindDeps, ToolNotFoundError, ToolRegistry, ToolResult, ToolSpec, type ToolStatRow, ToolStepEnvelope, ToolTransientRetrySetting, type TurnFrameSummary, type UiCollector, UpdateThreadInput, UpdateToolCallInput, type UsageTrendPoint, type WindowHistoryOptions, type WithMemoryToolInput, type WriteMemoryInput, actorScope, agentDiagnosticKey, agentFailureCode, bucketByActor, bucketByModel, bucketByThread, bucketUsageTrend, buildMemoryBlock, buildSkillsBlock, canActorUseTool, canonicalJson, closeEmptyRoles, compositeSkillProvider, confirmTokenExpiry, createFrameBuffer, createIncrementalGate, createNoopEmitUi, createUiCollector, dayBoundsUtc, defaultCanDecide, defaultScopeResolver, defineConfirmedTool, detachedDelivered, detachedStarted, detachedUnsettled, estimateCost, estimateMessageTokens, exhaustedWindow, exposeStreamErrorDetails, extractJson, filterToolsByAllowList, filterToolsByCanUse, filterToolsByEnabled, filterToolsByRole, findCatalogModel, gateFollowUps, gateTail, hashConfirmToken, isControlFlowSignal, isReplayIntegrityError, isToolEnabled, loadSkill, mayDecideApproval, memoryForgetVerdict, memoryWriteVerdict, mergeUi, normalizeDelegation, observeTurnFrames, offerMemories, offerSkills, publishAgentDelegated, publishAgentMemoryResolved, publishAgentMemoryWritten, publishAgentMessage, publishAgentQuotaExceeded, publishAgentRetrieved, publishAgentRunFailed, publishAgentRunFinished, publishAgentRunStarted, publishAgentSkillsResolved, publishAgentToolCall, publishAgentToolRetry, quotaPeriodRange, quotaUsedRatio, quotaWarning, releaseGatedFrames, rememberInputSchema, rememberToolDefinition, repairInstruction, resolveGateLookback, resolveMemoryDigest, resolveOutputGateMode, resolveSkillCatalog, rollupThreadUsage, runAgentLoop, runInputProcessors, runOutputProcessors, schemaExtensionOf, seedModelPrices, settleAll, settleDeadRun, settleUnsettledDelegation, signConfirmToken, skillInputSchema, skillToolDefinition, skillWriteVerdict, stampToolKinds, staticModelCatalog, staticSkillProvider, streamFailure, summarizeWithModel, tenantScope, toolCallApprovalFromRow, toolCallContext, traceLlmTurn, traceToolExecution, truncateDetailContent, unwrapToolStepOutput, validateStructured, verifyConfirmToken, windowHistory, withAskTool, withConfirmFields, withMemoryTool, withSelectedModel, withSkillTool, withToolTimeout, withTurnFrames, wrapToolStepOutput, writeMemory };
+declare function validateActionProposalCreation(input: CreateActionProposal): void;
+declare function validateActionProposalListQuery(query?: ListActionProposals): number;
+/** Canonical JSON snapshots keep replay equality independent of object key insertion order. */
+declare function canonicalActionProposalJson(value: unknown): string;
+declare function snapshotActionProposal<T>(value: T): T;
+declare function actionProposalScopeMatches(row: ActionProposalScope, scope: ActionProposalScope): boolean;
+declare function initialActionProposal(input: CreateActionProposal, now: number): ActionProposal;
+declare function actionProposalCreationMatches(row: ActionProposal, input: CreateActionProposal): boolean;
+declare function transitionActionProposalDecision(row: ActionProposal, command: ActionProposalDecisionCommand, now: number): ActionProposalMutationResult;
+declare function transitionActionProposalClaim(row: ActionProposal, command: ClaimActionProposal, now: number, token: string): ActionProposalMutationResult;
+declare function transitionActionProposalLease(row: ActionProposal, command: ExtendActionProposalLease, now: number): ActionProposalMutationResult;
+declare function transitionActionProposalSettlement(row: ActionProposal, command: SettleActionProposal, now: number): ActionProposalMutationResult;
+/** Caller must obtain the replacement through the same full scope and persistence authority. */
+declare function transitionActionProposalSupersession(row: ActionProposal, replacement: ActionProposal, command: {
+    replacementProposalId: string;
+    actorRef: string;
+    via: string;
+}, now: number): ActionProposalMutationResult;
+
+/** Trusted producer path: retain the original JSON and the exact data shown for approval. */
+declare function prepareActionProposal(registry: ToolRegistry, name: string, input: unknown, ctx: AiToolCtx, policy: RolesPolicy, options?: InvokeOptions): Promise<{
+    preparationInput: unknown;
+    input: unknown;
+    preflight: {
+        status: "ready";
+        confirmation?: ToolConfirmation;
+    } | {
+        status: "denied";
+        reason: string;
+    } | {
+        status: "completed";
+        output: unknown;
+    };
+    replacementKey?: string;
+}>;
+
+declare function validateActionProposalWorkerClaim(command: ClaimActionProposal, now: number): void;
+declare function validateActionProposalExpiryBatch(command: {
+    limit: number;
+}, now: number): void;
+declare function validateActionProposalDiscoveryIndexBatch(command: {
+    limit: number;
+}): void;
+
+/** Resolves current server authority; persisted role snapshots are never execution authority. */
+interface BackgroundActorResolver {
+    resolve(ref: {
+        actorRef: string;
+        tenantRef: string | null;
+    }): Promise<Actor | null>;
+}
+
+declare function attachActionProposalOutcome(row: ActionProposal, now: number, ui?: AgentUiComponent[], text?: string): ActionProposal;
+declare function claimActionProposalOutcome(row: ActionProposal, command: {
+    workerId: string;
+    leaseMs: number;
+}, now: number, token: string): ActionProposal | null;
+declare function actionProposalOutcomeFenceValid(row: ActionProposal, command: ActionProposalOutcomeLease, now: number): boolean;
+declare function actionProposalOutcomeScope(outcome: ActionProposalOutcome): ActionProposalScope;
+declare function actionProposalOutcomeText(outcome: ActionProposalOutcome): string;
+
+interface TextActionProposalCandidate {
+    id: string;
+    decision: ActionProposalDecision;
+}
+type TextActionProposalResolution = {
+    status: 'unmatched';
+} | {
+    status: 'ambiguous';
+    proposalIds: string[];
+} | {
+    status: 'decision';
+    proposalId: string;
+    decision: 'approved' | 'rejected';
+    remember: boolean;
+};
+/**
+ * Recognizes complete, explicit decision messages. This grants no authority: callers must
+ * resolve the authenticated actor and use the normal scoped decision service with via=text.
+ * Never feed model output here or consume an unmatched message as an approval.
+ */
+declare function resolveTextActionProposalDecision(text: string, proposals: readonly TextActionProposalCandidate[]): TextActionProposalResolution;
+type TextActionProposalCommand = {
+    status: 'unmatched';
+} | {
+    status: 'command';
+    decision: 'approved' | 'rejected';
+    remember: boolean;
+    proposalId?: string;
+};
+/** Parse exact consent syntax only. Authentication and target lookup remain the caller's responsibility. */
+declare function parseTextActionProposalCommand(text: string): TextActionProposalCommand;
+
+interface ActionProposalExecutionDeps {
+    registry: ToolRegistry;
+    rolesPolicy: RolesPolicy;
+    allowedTools?: string[];
+    host?: unknown;
+    resolveUiCatalog?: ResolveToolUiCatalog;
+}
+interface ActionProposalExecutorOptions {
+    resolver: BackgroundActorResolver;
+    /** Resolve exact recorded agent/persona against current configuration; throw if it disappeared. */
+    resolveExecution(proposal: ActionProposal, actor: Actor): Promise<ActionProposalExecutionDeps>;
+}
+type ActionProposalExecutionResult = {
+    status: 'succeeded';
+    result?: unknown;
+    ui: AgentUiComponent[];
+    text?: string;
+} | {
+    status: 'failed';
+    error: string;
+    ui: AgentUiComponent[];
+    text?: string;
+};
+declare class ActionProposalExecutor {
+    private readonly options;
+    constructor(options: ActionProposalExecutorOptions);
+    execute(proposal: ActionProposal): Promise<ActionProposalExecutionResult>;
+}
+
+interface ActionProposalWorkerOptions {
+    store: ActionProposalStore & ActionProposalWorkerStore & ActionProposalOutcomeStore;
+    executor: ActionProposalExecutor;
+    workerId: string;
+    pollIntervalMs?: number;
+    leaseMs?: number;
+    maxConcurrency?: number;
+    onError?(error: unknown): void;
+    onSettled?(proposal: ActionProposal): Promise<void>;
+}
+declare class ActionProposalWorker {
+    private readonly options;
+    private readonly leaseMs;
+    private readonly pollIntervalMs;
+    private readonly maxConcurrency;
+    private timer?;
+    private stopped;
+    private readonly renewals;
+    private active;
+    constructor(options: ActionProposalWorkerOptions);
+    start(): void;
+    stop(): Promise<void>;
+    runOnce(): Promise<void>;
+    private tick;
+    private execute;
+}
+
+type ActionProposalRuntimeStore = AgentStore & ActionProposalStore & ActionProposalWorkerStore & ActionProposalOutcomeStore & ActionProposalSupersessionStore;
+declare function assertIndependentActionCapabilities(store: AgentStore, resolver: BackgroundActorResolver | undefined): asserts store is ActionProposalRuntimeStore;
+
+export { AGENT_ACTOR_DIRECTORY, AGENT_ACTOR_RESOLVER, AGENT_APPROVAL_PORT, AGENT_ATTACHMENT_STAGING, AGENT_CONFIRM_TOKEN_STORE, AGENT_DEPS_FACTORY, AGENT_DIAGNOSTIC_EVENTS, AGENT_DURABLE_RUNNER, AGENT_EMBEDDING_PROVIDER, AGENT_GOVERNANCE_QUERIES, AGENT_MEMORY, AGENT_MODEL, AGENT_MODEL_CATALOG, AGENT_OPTIONS, AGENT_PRICING_STORE, AGENT_PROMPT_CONTRIBUTORS, AGENT_QUOTA_PROVIDER, AGENT_QUOTA_STORE, AGENT_REGISTRY, AGENT_RETRIEVER, AGENT_ROLES_POLICY, AGENT_RUNNER, AGENT_SINK, AGENT_SKILLS, AGENT_SKILL_SOURCES, AGENT_SPAN_EVENTS, AGENT_STORE, AGENT_TOOL_REGISTRY, APPROVAL_EXPIRED_REASON, type ActionApprovalMode, ActionProposal, ActionProposalDecision, ActionProposalDecisionCommand, type ActionProposalDiscoveryIndexStore, type ActionProposalExecutionDeps, type ActionProposalExecutionResult, ActionProposalExecutor, type ActionProposalExecutorOptions, ActionProposalMutationResult, ActionProposalOutcome, ActionProposalOutcomeLease, ActionProposalOutcomeStore, type ActionProposalReceipt, type ActionProposalRuntimeStore, ActionProposalScope, ActionProposalStore, ActionProposalStoreOptions, ActionProposalSupersessionStore, type ActionProposalTarget, ActionProposalWorker, type ActionProposalWorkerOptions, type ActionProposalWorkerStore, Actor, type ActorDirectory, type ActorResolver, type ActorSpendRow, type AgentApprovalPort, AgentDefinition, type AgentDelegated, AgentDelegation, type AgentDiagnosticEvent, type AgentDiagnosticKey, type AgentFollowUpsSpan, type AgentGovernanceQueries, AgentIntake, type AgentLlmTurnSpan, type AgentLoopDeps, type AgentLoopHooks, type AgentLoopResult, type AgentMemoryResolved, type AgentMemoryWritten, type AgentMessageEvent, type AgentPricingStore, type AgentQuotaExceeded, AgentRegistry, type AgentRetrievalSpan, type AgentRetrieved, type AgentRunFailed, type AgentRunFinished, AgentRunInput, type AgentRunStartOptions, type AgentRunStarted, type AgentRunner, type AgentSkillsResolved, type AgentSpanEvent, AgentStore, AgentStreamError, AgentStreamEvent, type AgentStructuredOutputSpan, type AgentToolCallEvent, type AgentToolExecutionSpan, type AgentToolRetry, AgentUiComponent, AiToolCtx, AppendMessageInput, ApprovalPolicy, type ApprovalWhere, type AttachmentRef, type AttachmentStagingDescription, type AttachmentStagingStore, type BackgroundActorResolver, type BufferedModelTurnResult, type BuildMemoryBlockInput, CONFIRM_JSON_SCHEMA_PROPERTIES, ChatQueueStore, ClaimActionProposal, ClosedRolesPolicy, type ConfirmFields, type ConfirmTokenClaim, ConfirmTokenError, type ConfirmTokenStore, type ConfirmTokenSubject, type ConfirmedTool, type ConfirmedToolDone, type ConfirmedToolMessages, type ConfirmedToolOptions, type ConfirmedToolOutcome, type ConfirmedToolPreview, type ConfirmedToolResult, type ConfirmedToolSteps, type CostUsage, CreateActionProposal, CreateActionProposalResult, CreateThreadInput, type CurrentModelPrice, DEFAULT_CONFIRM_TTL_MS, DEFAULT_HISTORY_SUMMARY_INSTRUCTION, DEFAULT_MAX_FACT_CHARS, DEFAULT_MAX_MEMORIES, DEFAULT_MAX_SKILLS, DEFAULT_REFUSAL_REASON, DEFAULT_STRUCTURED_OUTPUT_INSTRUCTION, Decision, DefaultRolesPolicy, type DetachedDelegationOutcome, type DetachedDelegationReceipt, DetachedDelivery, type DetailThreadRef, ElicitationRequest, type EmbeddingProvider, type EmitUi, type EmptyRoles, EnqueueMessageInput, ExtendActionProposalLease, type ForgetMemoryInput, type FrameBuffer, GLOBAL_SCOPE, type GovernanceMessageRow, type GovernancePage, type GovernancePageQuery, type GovernancePendingApprovalRow, type GovernanceRange, type GovernanceRunDetail, type GovernanceRunRow, type GovernanceThreadDetail, type GovernanceThreadDetailQuery, type GovernanceThreadRow, type GovernanceToolCallRow, type GovernanceUsageInput, type GovernanceUsageRow, HistoryPolicy, HumanReply, InMemoryActionProposalStore, InMemoryAgentStore, InMemoryConfirmTokenStore, type IncrementalGate, InputProcessor, type InvokeOptions, ListActionProposals, type ListMemoriesInput, type ListSkillsInput, type ListStagedAttachmentsInput, LlmStepEnvelope, type LoadSkillInput, type MemoryAuthor, type MemoryConfig, type MemoryDigest, type MemoryDigestEntry, type MemoryFact, type MemoryForgetRequest, type MemoryOrigin, type MemoryProvider, type MemoryRecord, type MemoryVerdict, type MemoryWriteOutcome, type MemoryWriteRequest, MessageAttachment, MessageFeedback, MessageUsage, ModelAnswer, type ModelCatalog, type ModelCatalogEntry, type ModelCatalogLock, type ModelCatalogProviderGroup, type ModelCatalogQuery, type ModelCatalogView, ModelMessage, type ModelPrice, type ModelPriceInput, type ModelProvider, type ModelSpendRow, type ModelTurnArgs, type ModelTurnResult, type NegotiatedUiCollector, type ObservedTurnFrames, type OfferMemoriesInput, type OutputGateMode, type OutputGateResult, OutputProcessor, type OverriddenMemory, PageContext, type Passage, type PendingApprovalRow, Persona, type PersonaAlias, PersonaCatalogEntry, type PrepareOptions, ProcessedPrompt, ProcessorContext, PromptBuilder, PromptContributor, QueuePause, QueuedMessage, QueuedMessagePatch, type QuotaBlock, QuotaExceededError, type QuotaPeriod, type QuotaProvider, type QuotaQuery, type QuotaReport, QuotaState, type QuotaStore, type QuotaWarning, type QuotaWindow, REMEMBER_TOOL_DESCRIPTION, REMEMBER_TOOL_NAME, RUN_FAILED_MESSAGE, RUN_NOT_ACTIVE_CODE, RUN_NOT_ACTIVE_MESSAGE, RUN_NO_LONGER_RUNNING, type RecentRunRow, RecordRunStartInput, RecordToolCallInput, RecordUsageInput, type RememberToolInput, type RerankOptions, type Reranker, type ResolveAttachmentInput, type ResolveMemoryDigestInput, type ResolveToolUiCatalog, type ResolvedDelegation, type RetrieveOptions, type Retriever, type RolesPolicy, type RolesPolicyOptions, type RunAgentBreakdownRow, RunCancelledError, type RunErrorBreakdownRow, type RunMetrics, type RunToolCallRow, type RunTrendPoint, type RunWhere, SCHEMA_EXTENSION, SKILL_TOOL_DESCRIPTION, SKILL_TOOL_NAME, type SchemaExtension, type ScopeContext, type ScopeResolver, type SearchMemoriesInput, SettleActionProposal, type SettleDeadRunInput, type SettledTask, type SinkWriter, type Skill, type SkillAuthor, type SkillCatalogEntry, type SkillContext, type SkillLoadOutcome, type SkillOffer, type SkillProvider, type SkillSummary, type SkillToolInput, type SkillWriteRequest, type SkillWriteVerdict, type SkillsConfig, SqlTokenStreamSink, type SqlTokenStreamSinkOptions, type StageAttachmentInput, type StagedAttachment, type StoreMemoryInput, StoredMessage, type StreamError, type StreamFrameRow, type StreamFrameTable, type StructuredOutcome, StructuredOutputError, THREAD_DETAIL_CONTENT_CHARS, type TextActionProposalCandidate, type TextActionProposalCommand, type TextActionProposalResolution, type ThreadActivityRow, ThreadDetail, type ThreadMessageRow, type ThreadMeta, type ThreadSpendRow, ThreadSummary, type ThreadUsageRollup, type ThreadWhere, type TokenStreamSink, type ToolCallActivityRow, ToolCallApprovalState, ToolCallOutcome, ToolCallRequest, ToolCallStatus, type ToolCallWhere, ToolConfirmation, ToolDefinition, ToolDescribeScope, ToolDisabledError, ToolForbiddenError, ToolHandler, ToolInputDriftError, ToolInputInvalidError, type ToolKindDeps, ToolNotFoundError, ToolPreflightDeniedError, ToolPreflightResult, type ToolPreparationResult, ToolRegistry, ToolResult, ToolSpec, type ToolStatRow, ToolStepEnvelope, ToolTransientRetrySetting, type TurnFrameSummary, type UiCollector, UpdateThreadInput, UpdateToolCallInput, type UsageTrendPoint, type WindowHistoryOptions, type WithMemoryToolInput, type WriteMemoryInput, actionProposalCreationMatches, actionProposalOutcomeFenceValid, actionProposalOutcomeScope, actionProposalOutcomeText, actionProposalReceipt, actionProposalScopeMatches, actorScope, agentDiagnosticKey, agentFailureCode, assertIndependentActionCapabilities, attachActionProposalOutcome, bucketByActor, bucketByModel, bucketByThread, bucketUsageTrend, buildMemoryBlock, buildSkillsBlock, canActorUseTool, canonicalActionProposalJson, canonicalJson, claimActionProposalOutcome, closeEmptyRoles, compositeSkillProvider, confirmTokenExpiry, createFrameBuffer, createIncrementalGate, createNegotiatedUiCollector, createNoopEmitUi, createUiCollector, dayBoundsUtc, defaultScopeResolver, defineConfirmedTool, detachedDelivered, detachedStarted, detachedUnsettled, escapeUnsafeToolUiText, estimateCost, estimateMessageTokens, exhaustedWindow, exposeStreamErrorDetails, extractJson, filterToolsByAllowList, filterToolsByCanUse, filterToolsByEnabled, filterToolsByRole, findCatalogModel, findPersona, gateFollowUps, gateTail, hashConfirmToken, initialActionProposal, intersectAllowLists, isControlFlowSignal, isReplayIntegrityError, isToolEnabled, loadSkill, memoryForgetVerdict, memoryWriteVerdict, mergeUi, normalizeDelegation, observeTurnFrames, offerMemories, offerSkills, parseTextActionProposalCommand, personaCatalogEntry, prepareActionProposal, publishAgentDelegated, publishAgentMemoryResolved, publishAgentMemoryWritten, publishAgentMessage, publishAgentQuotaExceeded, publishAgentRetrieved, publishAgentRunFailed, publishAgentRunFinished, publishAgentRunStarted, publishAgentSkillsResolved, publishAgentToolCall, publishAgentToolRetry, quotaPeriodRange, quotaUsedRatio, quotaWarning, releaseGatedFrames, rememberInputSchema, rememberToolDefinition, repairInstruction, resolveGateLookback, resolveMemoryDigest, resolveOutputGateMode, resolvePersonaAlias, resolveSkillCatalog, resolveTextActionProposalDecision, rollupThreadUsage, runAgentLoop, runInputProcessors, runOutputProcessors, schemaExtensionOf, seedModelPrices, settleAll, settleDeadRun, settleUnsettledDelegation, signConfirmToken, skillInputSchema, skillToolDefinition, skillWriteVerdict, snapshotActionProposal, stampToolKinds, staticModelCatalog, staticSkillProvider, streamFailure, summarizeWithModel, tenantScope, toolCallContext, traceLlmTurn, traceToolExecution, transitionActionProposalClaim, transitionActionProposalDecision, transitionActionProposalLease, transitionActionProposalSettlement, transitionActionProposalSupersession, truncateDetailContent, unwrapToolStepOutput, validateActionProposalCreation, validateActionProposalDiscoveryIndexBatch, validateActionProposalExpiryBatch, validateActionProposalListQuery, validateActionProposalWorkerClaim, validateStructured, verifyConfirmToken, windowHistory, withAskTool, withConfirmFields, withMemoryTool, withSelectedModel, withSkillTool, withToolTimeout, withTurnFrames, wrapToolPreflightDenied, wrapToolStepOutput, writeMemory };