@graphrefly/ts 0.0.1 → 0.0.2

package/dist/agent-runtime-types-tool-BEpSINol.d.ts

@@ -0,0 +1,695 @@
+import { DataIssue } from './data/index.js';
+import { C as CapacityPolicy, a as RetentionPolicy, R as ReactiveOpt } from './types-DL_05n2M.js';
+import { R as RetryPolicy } from './resilience-Dig3Q7n0.js';
+import { N as Node } from './types-C9NOgNJw.js';
+import { e as ExecutorProfile, S as SourceRef, a as AgentRuntimeAuditRecord, f as ExecutorOutcomeStatus, g as AgentRequestInput, c as ExecutorRoute, h as AgentOutputEnvelope, i as ExecutorUsage, j as AgentNeed, E as ExecutorOutcome, A as AgentRequestStatusChanged } from './agent-runtime-types-core-hU299uIC.js';
+import { S as ScheduledReadinessRequested, a as ScheduledReadinessReady } from './scheduled-readiness-5rwQlyjV.js';
+
+/**
+ * Provider-neutral tool-call request input (D359). Concrete clients, secrets,
+ * transports, and SDK handles stay in executor adapter bindings, not this fact.
+ */
+interface ToolCallInput<TArguments = unknown> {
+    readonly kind: "tool-call";
+    readonly toolName: string;
+    readonly operation?: string;
+    readonly arguments?: TArguments;
+    readonly argumentsRef?: string;
+    readonly expectedOutput?: {
+        readonly resultKind?: string;
+        readonly schemaRef?: string;
+    };
+    readonly idempotency?: {
+        readonly key?: string;
+        readonly safeToRetry?: boolean;
+    };
+    readonly timeoutMs?: number;
+    readonly subjectRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+/**
+ * Tool provider family label for optional Layer C adapters (D359). Builtin,
+ * MCP, CLI, and Composio providers stay executor/tool recipes, not WorkItem
+ * core or protocol semantics.
+ */
+type ToolProviderKind = "local-builtin" | "mcp" | "cli" | "composio" | (string & {});
+type ToolProviderSizeUnit = "bytes" | "chars" | "tokens" | "items" | "events" | "lines" | (string & {});
+/**
+ * D293-style size-capacity limit material for Layer C tool providers (D360).
+ * This is policy/evidence vocabulary only; enforcement remains adapter-owned.
+ */
+interface ToolProviderSizeLimit {
+    readonly unit: ToolProviderSizeUnit;
+    readonly softLimit?: number;
+    readonly hardLimit?: number;
+    readonly window?: string;
+    readonly perItem?: boolean;
+    readonly perBatch?: boolean;
+    readonly perArtifact?: boolean;
+    readonly perStream?: boolean;
+    readonly perRequest?: boolean;
+    readonly perTool?: boolean;
+    readonly policyScopeRefs?: readonly SourceRef[];
+    readonly measurementSource?: string;
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderSizeCapacityPolicy {
+    readonly limits: readonly ToolProviderSizeLimit[];
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderTimeoutPolicy {
+    readonly timeoutMs?: number;
+    readonly connectTimeoutMs?: number;
+    readonly idleTimeoutMs?: number;
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderRedactionPolicy {
+    readonly mode?: "none" | "summary" | "redact" | "ref-only" | (string & {});
+    readonly sensitivity?: readonly string[];
+    readonly redactKinds?: readonly string[];
+    readonly summaryMaxChars?: number;
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderPathRule {
+    readonly effect: "allow" | "deny" | "summary" | "ref-only" | (string & {});
+    readonly path?: string;
+    readonly glob?: string;
+    readonly operation?: string;
+    readonly reason?: string;
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderFilesystemPolicy {
+    readonly cwd?: string;
+    readonly pathRules?: readonly ToolProviderPathRule[];
+    readonly allowRead?: boolean;
+    readonly allowWrite?: boolean;
+    readonly followSymlinks?: boolean;
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderNetworkPolicy {
+    readonly mode?: "disabled" | "allowlist" | "denylist" | "custom" | (string & {});
+    readonly protocols?: readonly string[];
+    readonly allowedHosts?: readonly string[];
+    readonly deniedHosts?: readonly string[];
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderApprovalPolicy {
+    readonly mode?: "auto" | "require" | "never" | "custom" | (string & {});
+    readonly requiredForToolNames?: readonly string[];
+    readonly requiredForOperations?: readonly string[];
+    readonly approverRefs?: readonly SourceRef[];
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderArtifactPolicy {
+    readonly defaultDataMode?: "inline" | "summary" | "ref" | (string & {});
+    readonly inlineLimits?: readonly ToolProviderSizeLimit[];
+    readonly artifactKinds?: readonly string[];
+    readonly requireDigest?: boolean;
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+/**
+ * Data-only execution policy fact for optional Layer C tool providers (D360).
+ * It is admission/routing/audit/adapter-input material, not an enforcement
+ * runtime, security boundary, provider SDK, client handle, or secret container.
+ */
+interface ToolProviderExecutionPolicy {
+    readonly kind: "tool-provider-execution-policy";
+    readonly policyId: string;
+    readonly providerId: string;
+    readonly profileIds?: readonly string[];
+    readonly toolNames?: readonly string[];
+    readonly operations?: readonly string[];
+    readonly sizeCapacity?: ToolProviderSizeCapacityPolicy;
+    readonly timeout?: ToolProviderTimeoutPolicy;
+    readonly redaction?: ToolProviderRedactionPolicy;
+    readonly filesystem?: ToolProviderFilesystemPolicy;
+    readonly network?: ToolProviderNetworkPolicy;
+    readonly approval?: ToolProviderApprovalPolicy;
+    readonly artifacts?: ToolProviderArtifactPolicy;
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+/**
+ * Graph-visible catalog entry for a tool exposed by an executor provider
+ * (D359). Runtime clients and credentials remain private adapter state.
+ */
+interface ToolProviderCatalogEntry {
+    readonly kind: "tool-catalog-entry";
+    readonly providerId: string;
+    readonly toolName: string;
+    readonly operation?: string;
+    readonly inputKind: "tool-call";
+    readonly profileId: string;
+    readonly executorId: string;
+    readonly resultKinds?: readonly string[];
+    readonly schemaRefs?: readonly string[];
+    readonly capabilities?: Record<string, unknown>;
+    readonly limits?: Record<string, number>;
+    readonly policyRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+/**
+ * Graph-visible tool provider catalog/status surface (D359). This is passive
+ * DATA for routing/profile selection and UI inspection, not a provider runtime.
+ */
+interface ToolProviderCatalog {
+    readonly kind: "tool-provider-catalog";
+    readonly providerId: string;
+    readonly providerKind: ToolProviderKind;
+    readonly profiles: readonly ExecutorProfile[];
+    readonly tools: readonly ToolProviderCatalogEntry[];
+    readonly policies?: readonly ToolProviderExecutionPolicy[];
+    readonly policyRefs?: readonly SourceRef[];
+    readonly status?: "ready" | "unavailable" | "misconfigured";
+    readonly issues?: readonly DataIssue[];
+    readonly audit?: readonly AgentRuntimeAuditRecord[];
+    readonly metadata?: Record<string, unknown>;
+}
+/**
+ * Options for producing a local builtin tool-provider catalog (D359). Limits and
+ * capabilities are declarative policy hints; execution remains adapter-owned.
+ */
+interface LocalBuiltinToolProviderCatalogOptions {
+    readonly providerId?: string;
+    readonly executorId?: string;
+    readonly profileId?: string;
+    readonly tools?: readonly Omit<ToolProviderCatalogEntry, "kind" | "providerId" | "inputKind" | "profileId" | "executorId">[];
+    readonly limits?: Record<string, number>;
+    readonly capabilities?: Record<string, unknown>;
+    readonly policies?: readonly ToolProviderExecutionPolicy[];
+    readonly policyOverrides?: Partial<Omit<ToolProviderExecutionPolicy, "kind" | "policyId" | "providerId">>;
+    readonly metadata?: Record<string, unknown>;
+}
+type ToolProviderPolicyResolutionStatus = "pending-route" | "resolved" | "missing-tool-call" | "missing-catalog" | "ambiguous-catalog" | "missing-tool" | "missing-policy" | "invalid-policy";
+interface ToolProviderPolicyResolution {
+    readonly kind: "tool-provider-policy-resolution";
+    readonly resolutionId: string;
+    readonly status: ToolProviderPolicyResolutionStatus;
+    readonly requestId: string;
+    readonly operationId: string;
+    readonly routeId?: string;
+    readonly providerId?: string;
+    readonly executorId?: string;
+    readonly profileId?: string;
+    readonly toolName?: string;
+    readonly operation?: string;
+    readonly policyRefs?: readonly SourceRef[];
+    readonly issues?: readonly DataIssue[];
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderPolicyResolutionBundle {
+    readonly resolutions: Node<ToolProviderPolicyResolution>;
+    readonly issues: Node<DataIssue>;
+    readonly audit: Node<AgentRuntimeAuditRecord>;
+}
+type ToolProviderAdapterInputStatus = "ready" | Exclude<ToolProviderPolicyResolutionStatus, "resolved">;
+/**
+ * Data-only adapter input projection for optional Layer C tool providers
+ * (D359/D360). It packages already-routed AgentRequest/tool-call material plus
+ * selected D360 policy facts for an adapter boundary, but it never executes a
+ * tool and never carries clients, transports, credentials, subprocesses, SDK
+ * handles, or OAuth state.
+ */
+interface ToolProviderAdapterInput<TArguments = unknown> {
+    readonly kind: "tool-provider-adapter-input";
+    readonly adapterInputId: string;
+    readonly status: ToolProviderAdapterInputStatus;
+    readonly requestId: string;
+    readonly operationId: string;
+    readonly effectRunId?: string;
+    readonly agentRunId?: string;
+    readonly routeId?: string;
+    readonly providerId?: string;
+    readonly executorId?: string;
+    readonly profileId?: string;
+    readonly toolName?: string;
+    readonly operation?: string;
+    readonly input?: AgentRequestInput<ToolCallInput<TArguments>>;
+    readonly toolCall?: ToolCallInput<TArguments>;
+    readonly route?: ExecutorRoute;
+    readonly tool?: ToolProviderCatalogEntry;
+    readonly policies?: readonly ToolProviderExecutionPolicy[];
+    readonly policyRefs?: readonly SourceRef[];
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly issues?: readonly DataIssue[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderAdapterInputBundle {
+    readonly inputs: Node<ToolProviderAdapterInput>;
+    readonly issues: Node<DataIssue>;
+    readonly audit: Node<AgentRuntimeAuditRecord>;
+}
+type ToolProviderAdapterRunResult<T = unknown> = {
+    readonly kind: "result";
+    readonly result: AgentOutputEnvelope<T>;
+    readonly evidenceRefs?: readonly SourceRef[];
+    readonly issues?: readonly DataIssue[];
+    readonly usage?: ExecutorUsage;
+    readonly occurredAtMs?: number;
+    readonly metadata?: Record<string, unknown>;
+} | {
+    readonly kind: "failure";
+    readonly error: DataIssue;
+    readonly retryable?: boolean;
+    readonly evidenceRefs?: readonly SourceRef[];
+    readonly issues?: readonly DataIssue[];
+    readonly usage?: ExecutorUsage;
+    readonly occurredAtMs?: number;
+    readonly metadata?: Record<string, unknown>;
+} | {
+    readonly kind: "canceled";
+    readonly reason?: string;
+    readonly evidenceRefs?: readonly SourceRef[];
+    readonly issues?: readonly DataIssue[];
+    readonly usage?: ExecutorUsage;
+    readonly occurredAtMs?: number;
+    readonly metadata?: Record<string, unknown>;
+} | {
+    readonly kind: "timeout";
+    readonly timeoutMs?: number;
+    readonly retryable?: boolean;
+    readonly evidenceRefs?: readonly SourceRef[];
+    readonly issues?: readonly DataIssue[];
+    readonly usage?: ExecutorUsage;
+    readonly occurredAtMs?: number;
+    readonly metadata?: Record<string, unknown>;
+} | {
+    readonly kind: "blocked";
+    readonly needs: readonly AgentNeed[];
+    readonly evidenceRefs?: readonly SourceRef[];
+    readonly issues?: readonly DataIssue[];
+    readonly usage?: ExecutorUsage;
+    readonly occurredAtMs?: number;
+    readonly metadata?: Record<string, unknown>;
+};
+interface ToolProviderAdapterRunContext {
+    readonly runId?: string;
+    readonly attempt: number;
+    readonly reason?: ToolProviderAdapterRunReason;
+    readonly sourceRefs: readonly SourceRef[];
+    readonly now?: () => number;
+}
+type ToolProviderAdapterRunReason = "initial" | "retry" | "manual" | (string & {});
+/**
+ * Graph-visible D362 execution lifecycle request. Attempts stay out of
+ * ToolProviderAdapterInput identity; this fact is the visible run coordinate.
+ */
+interface ToolProviderAdapterRunRequested {
+    readonly kind: "tool-provider-adapter-run-requested";
+    readonly runId: string;
+    readonly adapterInputId: string;
+    readonly requestId: string;
+    readonly operationId: string;
+    readonly routeId?: string;
+    readonly providerId?: string;
+    readonly executorId?: string;
+    readonly profileId?: string;
+    readonly attempt: number;
+    readonly reason: ToolProviderAdapterRunReason;
+    readonly retryOfOutcomeId?: string;
+    readonly policyRefs?: readonly SourceRef[];
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+    readonly requestedAtMs?: number;
+}
+interface ToolProviderAdapterRunStatus {
+    readonly kind: "tool-provider-adapter-run-status";
+    readonly runId: string;
+    readonly adapterInputId: string;
+    readonly requestId?: string;
+    readonly operationId?: string;
+    readonly status: "requested" | "missing-request" | "missing-input" | "stale-request" | "mismatched-request" | "retention-gap" | "started" | ExecutorOutcomeStatus;
+    readonly attempt?: number;
+    readonly outcomeId?: string;
+    readonly issues?: readonly DataIssue[];
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderAdapterRunBundle {
+    readonly requests: Node<ToolProviderAdapterRunRequested>;
+    readonly status: Node<ToolProviderAdapterRunStatus>;
+    readonly issues: Node<DataIssue>;
+    readonly audit: Node<AgentRuntimeAuditRecord>;
+}
+type ToolProviderRunAdmissionOutcome = "admit" | "block" | "defer";
+type ToolProviderRunAdmissionState = "admitted" | "blocked" | "deferred" | "waiting";
+interface ToolProviderRunAdmissionProposal {
+    readonly kind: "tool-provider-run-admission-proposal";
+    readonly proposalId: string;
+    readonly runId: string;
+    readonly adapterInputId: string;
+    readonly requestId: string;
+    readonly operationId: string;
+    readonly routeId?: string;
+    readonly providerId?: string;
+    readonly executorId?: string;
+    readonly profileId?: string;
+    readonly toolName?: string;
+    readonly operation?: string;
+    readonly attempt: number;
+    readonly reason: ToolProviderAdapterRunReason;
+    readonly approvalMode: "auto" | "require" | "never" | "custom" | (string & {});
+    readonly policyRefs?: readonly SourceRef[];
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly needs?: readonly AgentNeed[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderRunAdmissionDecision {
+    readonly kind: "tool-provider-run-admission-decision";
+    readonly decisionId: string;
+    readonly proposalId: string;
+    readonly admissionId: string;
+    readonly outcome: ToolProviderRunAdmissionOutcome;
+    readonly approvedRunId?: string;
+    readonly reason?: string;
+    readonly decidedByRef?: SourceRef;
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderRunAdmission {
+    readonly kind: "tool-provider-run-admission";
+    readonly admissionId: string;
+    readonly proposalId: string;
+    readonly runId: string;
+    readonly adapterInputId: string;
+    readonly requestId: string;
+    readonly operationId: string;
+    readonly state: ToolProviderRunAdmissionState;
+    readonly decisionId?: string;
+    readonly approvedRunId?: string;
+    readonly reason?: string;
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderRunAdmissionStatus {
+    readonly kind: "tool-provider-run-admission-status";
+    readonly proposalId: string;
+    readonly runId: string;
+    readonly adapterInputId: string;
+    readonly requestId?: string;
+    readonly operationId?: string;
+    readonly state: ToolProviderRunAdmissionState | "issue";
+    readonly admissionId?: string;
+    readonly decisionId?: string;
+    readonly approvedRunId?: string;
+    readonly issues?: readonly DataIssue[];
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderRunAdmissionViews {
+    readonly admissionsByProposal: ReadonlyMap<string, ToolProviderRunAdmission>;
+    readonly admissionsByRun: ReadonlyMap<string, readonly ToolProviderRunAdmission[]>;
+    readonly proposalsByRun: ReadonlyMap<string, readonly ToolProviderRunAdmissionProposal[]>;
+}
+interface ToolProviderRunAdmissionBundle {
+    readonly proposals: Node<ToolProviderRunAdmissionProposal>;
+    readonly admissions: Node<ToolProviderRunAdmission>;
+    readonly approvedRunRequests: Node<ToolProviderAdapterRunRequested>;
+    readonly status: Node<ToolProviderRunAdmissionStatus>;
+    readonly issues: Node<DataIssue>;
+    readonly audit: Node<AgentRuntimeAuditRecord>;
+    readonly views: Node<ToolProviderRunAdmissionViews>;
+}
+interface ToolProviderRunRetryPolicy {
+    readonly kind: "tool-provider-run-retry-policy";
+    readonly policyId: string;
+    readonly retryPolicy: RetryPolicy;
+    readonly runId?: string;
+    readonly requestId?: string;
+    readonly adapterInputId?: string;
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderRunRetryProposal {
+    readonly kind: "tool-provider-run-retry-proposal";
+    readonly proposalId: string;
+    readonly outcomeId: string;
+    readonly fromRunId: string;
+    readonly fromRequestId: string;
+    readonly fromAttempt: number;
+    readonly nextAttempt: number;
+    readonly nextRunId: string;
+    readonly adapterInputId: string;
+    readonly requestId: string;
+    readonly operationId: string;
+    readonly policyId?: string;
+    readonly policyRefs?: readonly SourceRef[];
+    readonly maxAttempts: number;
+    readonly nextDelayMs?: number;
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderRunRetryScheduled {
+    readonly kind: "tool-provider-run-retry-scheduled";
+    readonly scheduleId: string;
+    readonly readinessScheduleId?: string;
+    readonly outcomeId: string;
+    readonly proposalId: string;
+    readonly fromRunId: string;
+    readonly nextRunId: string;
+    readonly nextAttempt: number;
+    readonly retryAtMs: number;
+    readonly retryAfterMs: number;
+    readonly sourceRefs?: readonly SourceRef[];
+}
+type ToolProviderRunRetryStatusState = "scheduled" | "ready" | "exhausted" | "not-retryable" | "blocked";
+interface ToolProviderRunRetryStatus {
+    readonly kind: "tool-provider-run-retry-status";
+    readonly statusId: string;
+    readonly outcomeId: string;
+    readonly proposalId: string;
+    readonly fromRunId: string;
+    readonly adapterInputId: string;
+    readonly requestId: string;
+    readonly operationId: string;
+    readonly nextRunId?: string;
+    readonly nextAttempt?: number;
+    readonly nextRetryAtMs?: number;
+    readonly state: ToolProviderRunRetryStatusState;
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly issueCodes?: readonly string[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface ToolProviderRunRetryViews {
+    readonly proposalsByOutcome: ReadonlyMap<string, ToolProviderRunRetryProposal>;
+    readonly scheduledByOutcome: ReadonlyMap<string, ToolProviderRunRetryScheduled>;
+    readonly readinessSchedulesByOutcome: ReadonlyMap<string, ScheduledReadinessRequested>;
+    readonly readinessBySchedule: ReadonlyMap<string, ScheduledReadinessReady>;
+    readonly nextRunRequestsByOutcome: ReadonlyMap<string, ToolProviderAdapterRunRequested>;
+    readonly statusByOutcome: ReadonlyMap<string, ToolProviderRunRetryStatus>;
+}
+interface ToolProviderRunRetryBundle {
+    readonly proposals: Node<ToolProviderRunRetryProposal>;
+    readonly scheduled: Node<ToolProviderRunRetryScheduled>;
+    readonly readinessSchedules: Node<ScheduledReadinessRequested>;
+    readonly runRequests: Node<ToolProviderAdapterRunRequested>;
+    readonly status: Node<ToolProviderRunRetryStatus>;
+    readonly issues: Node<DataIssue>;
+    readonly audit: Node<AgentRuntimeAuditRecord>;
+    readonly views: Node<ToolProviderRunRetryViews>;
+}
+interface ToolProviderPublicTextPolicy {
+    readonly maxMessageChars?: number;
+    readonly maxSummaryChars?: number;
+    readonly maxReasonChars?: number;
+    readonly maxMetadataStringChars?: number;
+}
+type ToolProviderAdapterRuntimeRetentionIndex = "adapterInputs" | "runRequests" | "executions" | "runStatuses" | "runIssues" | "retentionEvidence";
+type ToolProviderAdapterRuntimeRetentionOrder = "fifo";
+interface ToolProviderAdapterInputRetentionEntry {
+    readonly key: string;
+    readonly sequence: number;
+    readonly insertedAtMs?: number;
+    readonly adapterInputId: string;
+    readonly requestId: string;
+    readonly operationId: string;
+    readonly routeId?: string;
+    readonly providerId?: string;
+    readonly executorId?: string;
+    readonly profileId?: string;
+    readonly status?: ToolProviderAdapterInputStatus;
+}
+interface ToolProviderAdapterRunRequestRetentionEntry {
+    readonly key: string;
+    readonly sequence: number;
+    readonly requestedAtMs?: number;
+    readonly adapterInputId: string;
+    readonly runId: string;
+    readonly attempt: number;
+    readonly requestId: string;
+    readonly operationId: string;
+    readonly routeId?: string;
+    readonly providerId?: string;
+    readonly executorId?: string;
+    readonly profileId?: string;
+    readonly reason?: ToolProviderAdapterRunReason;
+}
+interface ToolProviderAdapterExecutionRetentionEntry {
+    readonly key: string;
+    readonly sequence: number;
+    readonly occurredAtMs?: number;
+    readonly adapterInputId: string;
+    readonly runId: string;
+    readonly attempt: number;
+    readonly requestId: string;
+    readonly operationId: string;
+    readonly routeId?: string;
+    readonly providerId?: string;
+    readonly executorId?: string;
+    readonly profileId?: string;
+    readonly outcomeId?: string;
+    readonly status?: ExecutorOutcomeStatus | "started";
+    readonly reason?: ToolProviderAdapterRunReason;
+}
+interface ToolProviderAdapterRunStatusRetentionEntry {
+    readonly key: string;
+    readonly sequence: number;
+    readonly occurredAtMs?: number;
+    readonly adapterInputId: string;
+    readonly runId: string;
+    readonly attempt?: number;
+    readonly requestId?: string;
+    readonly operationId?: string;
+    readonly status: ToolProviderAdapterRunStatus["status"];
+    readonly outcomeId?: string;
+    readonly issueCode?: string;
+}
+interface ToolProviderAdapterRunIssueRetentionEntry {
+    readonly key: string;
+    readonly sequence: number;
+    readonly occurredAtMs?: number;
+    readonly adapterInputId?: string;
+    readonly runId?: string;
+    readonly attempt?: number;
+    readonly requestId?: string;
+    readonly operationId?: string;
+    readonly issueCode: string;
+    readonly severity?: DataIssue["severity"];
+    readonly subjectId?: string;
+}
+interface ToolProviderAdapterRuntimeRetentionEvidenceEntry {
+    readonly key: string;
+    readonly sequence: number;
+    readonly occurredAtMs?: number;
+    readonly adapterInputId: string;
+    readonly evidenceKind: "adapter-input-trimmed" | "execution-high-water";
+    readonly attemptHighWater?: number;
+    readonly reason: "adapter-input-retention" | "execution-proof-retention";
+}
+type ToolProviderAdapterRuntimeIndexRetentionPolicy<Entry> = CapacityPolicy<ToolProviderAdapterRuntimeRetentionOrder> | (RetentionPolicy<Entry> & {
+    readonly maxSize: ReactiveOpt<number>;
+});
+interface ToolProviderAdapterRuntimeRetentionPolicy {
+    readonly adapterInputs?: ToolProviderAdapterRuntimeIndexRetentionPolicy<ToolProviderAdapterInputRetentionEntry>;
+    readonly runRequests?: ToolProviderAdapterRuntimeIndexRetentionPolicy<ToolProviderAdapterRunRequestRetentionEntry>;
+    readonly executions?: ToolProviderAdapterRuntimeIndexRetentionPolicy<ToolProviderAdapterExecutionRetentionEntry>;
+    readonly runStatuses?: ToolProviderAdapterRuntimeIndexRetentionPolicy<ToolProviderAdapterRunStatusRetentionEntry>;
+    readonly runIssues?: ToolProviderAdapterRuntimeIndexRetentionPolicy<ToolProviderAdapterRunIssueRetentionEntry>;
+    readonly retentionEvidence?: ToolProviderAdapterRuntimeIndexRetentionPolicy<ToolProviderAdapterRuntimeRetentionEvidenceEntry>;
+}
+type ToolProviderAdapterRuntimeStatusKind = "retention-trimmed" | "retention-gap" | "invalid-retention-policy";
+interface ToolProviderAdapterRuntimeStatus {
+    readonly kind: "tool-provider-adapter-runtime-status";
+    readonly status: ToolProviderAdapterRuntimeStatusKind;
+    readonly index?: ToolProviderAdapterRuntimeRetentionIndex;
+    readonly key?: string;
+    readonly adapterInputId?: string;
+    readonly runId?: string;
+    readonly attempt?: number;
+    readonly issueCode?: string;
+    readonly occurredAtMs?: number;
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+/**
+ * Runtime-private adapter binding for D361. Bindings may close over clients,
+ * credentials, subprocess access, transports, SDK objects, or environment
+ * handles, but the binding itself must never be graph DATA or WorkItem core
+ * material.
+ */
+interface ToolProviderAdapterBinding<TArguments = unknown, TResult = unknown> {
+    readonly providerId: string;
+    run(input: ToolProviderAdapterInput<TArguments>, ctx: ToolProviderAdapterRunContext): ToolProviderAdapterRunResult<TResult>;
+}
+interface ToolProviderAdapterRuntimeOptions<TArguments = unknown, TResult = unknown> {
+    readonly name?: string;
+    readonly inputs: Node<ToolProviderAdapterInput<TArguments>>;
+    readonly runRequests?: readonly Node<ToolProviderAdapterRunRequested>[];
+    readonly bindings: readonly ToolProviderAdapterBinding<TArguments, TResult>[] | ReadonlyMap<string, ToolProviderAdapterBinding<TArguments, TResult>>;
+    readonly autoRunReadyInputs?: boolean;
+    readonly retention?: ToolProviderAdapterRuntimeRetentionPolicy;
+    readonly now?: () => number;
+    readonly publicText?: ToolProviderPublicTextPolicy;
+}
+interface ToolProviderAdapterRuntimeHandle {
+    readonly runRequests: Node<ToolProviderAdapterRunRequested>;
+    readonly runStatus: Node<ToolProviderAdapterRunStatus>;
+    readonly runtimeStatus: Node<ToolProviderAdapterRuntimeStatus>;
+    readonly outcomes: Node<ExecutorOutcome>;
+    readonly status: Node<AgentRequestStatusChanged>;
+    readonly issues: Node<DataIssue>;
+    readonly audit: Node<AgentRuntimeAuditRecord>;
+    dispose(): void;
+}
+/**
+ * Audience selector for bounded ExecutorOutcome projections (D359).
+ */
+type ExecutorOutcomeViewAudience = "agent-observation" | "ui" | "diagnostic" | "audit";
+/**
+ * View policy for deriving bounded, audience-specific ExecutorOutcome summaries
+ * (D359/D270/D293) without inlining large/raw provider material.
+ */
+interface ExecutorOutcomeViewPolicy {
+    readonly audience?: ExecutorOutcomeViewAudience;
+    readonly maxSummaryChars?: number;
+    readonly includeIssues?: boolean;
+    readonly includeUsage?: boolean;
+    readonly includeMetadata?: boolean;
+}
+/**
+ * Bounded projection of ExecutorOutcome for agent, UI, diagnostic, or audit
+ * consumers (D359). Large/raw material stays behind refs.
+ */
+interface ExecutorOutcomeView {
+    readonly kind: "executor-outcome-view";
+    readonly viewId: string;
+    readonly audience: ExecutorOutcomeViewAudience;
+    readonly outcomeId: string;
+    readonly requestId: string;
+    readonly operationId: string;
+    readonly routeId: string;
+    readonly executorId: string;
+    readonly profileId: string;
+    readonly status: ExecutorOutcomeStatus;
+    readonly summary: string;
+    readonly summaryTruncated?: boolean;
+    readonly summaryChars?: number;
+    readonly summaryLimitChars?: number;
+    readonly errorKind?: string;
+    readonly retryable?: boolean;
+    readonly nextActions?: readonly string[];
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly materialRefs?: readonly SourceRef[];
+    readonly issues?: readonly DataIssue[];
+    readonly usage?: ExecutorUsage;
+    readonly metadata?: Record<string, unknown>;
+}
+/**
+ * Output bundle for ExecutorOutcome view projectors (D359).
+ */
+interface ExecutorOutcomeViewBundle {
+    readonly views: Node<ExecutorOutcomeView>;
+    readonly issues: Node<DataIssue>;
+    readonly audit: Node<AgentRuntimeAuditRecord>;
+}
+
+export type { ToolProviderRunAdmissionViews as $, ToolProviderPolicyResolution as A, ToolProviderRunAdmissionDecision as B, ToolProviderRunAdmissionBundle as C, ToolProviderRunRetryPolicy as D, ExecutorOutcomeViewBundle as E, ToolProviderRunRetryBundle as F, ExecutorOutcomeView as G, ExecutorOutcomeViewAudience as H, ToolCallInput as I, ToolProviderAdapterInputStatus as J, ToolProviderApprovalPolicy as K, LocalBuiltinToolProviderCatalogOptions as L, ToolProviderArtifactPolicy as M, ToolProviderCatalogEntry as N, ToolProviderExecutionPolicy as O, ToolProviderFilesystemPolicy as P, ToolProviderKind as Q, ToolProviderNetworkPolicy as R, ToolProviderPathRule as S, ToolProviderCatalog as T, ToolProviderPolicyResolutionStatus as U, ToolProviderRedactionPolicy as V, ToolProviderRunAdmission as W, ToolProviderRunAdmissionOutcome as X, ToolProviderRunAdmissionProposal as Y, ToolProviderRunAdmissionState as Z, ToolProviderRunAdmissionStatus as _, ToolProviderAdapterRunRequested as a, ToolProviderRunRetryProposal as a0, ToolProviderRunRetryScheduled as a1, ToolProviderRunRetryStatus as a2, ToolProviderRunRetryStatusState as a3, ToolProviderRunRetryViews as a4, ToolProviderSizeCapacityPolicy as a5, ToolProviderSizeLimit as a6, ToolProviderSizeUnit as a7, ToolProviderTimeoutPolicy as a8, ToolProviderAdapterRunStatus as b, ToolProviderAdapterInput as c, ToolProviderPublicTextPolicy as d, ToolProviderAdapterBinding as e, ToolProviderAdapterRuntimeOptions as f, ToolProviderAdapterRuntimeHandle as g, ToolProviderAdapterExecutionRetentionEntry as h, ToolProviderAdapterInputRetentionEntry as i, ToolProviderAdapterRunContext as j, ToolProviderAdapterRunIssueRetentionEntry as k, ToolProviderAdapterRunRequestRetentionEntry as l, ToolProviderAdapterRunResult as m, ToolProviderAdapterRunStatusRetentionEntry as n, ToolProviderAdapterRuntimeIndexRetentionPolicy as o, ToolProviderAdapterRuntimeRetentionEvidenceEntry as p, ToolProviderAdapterRuntimeRetentionIndex as q, ToolProviderAdapterRuntimeRetentionOrder as r, ToolProviderAdapterRuntimeRetentionPolicy as s, ToolProviderAdapterRuntimeStatus as t, ToolProviderAdapterRuntimeStatusKind as u, ToolProviderPolicyResolutionBundle as v, ToolProviderAdapterInputBundle as w, ExecutorOutcomeViewPolicy as x, ToolProviderAdapterRunReason as y, ToolProviderAdapterRunBundle as z };