@kodax-ai/kodax 0.7.61 → 0.7.63

package/dist/sdk-coding.d.ts

@@ -1,29 +1,316 @@
-import { a0 as KodaXToolDefinition, a2 as KodaXToolResultContentItem, a8 as KodaXWireReasoningEffort, j as KodaXMessage, a5 as KodaXToolUseBlock, c as KodaXContentBlock, o as KodaXProviderCapabilityProfile, A as KodaXReasoningCapability, E as KodaXReasoningMode, U as KodaXTaskType, e as KodaXExecutionMode, T as KodaXTaskRoutingDecision, Z as KodaXThinkingDepth, $ as KodaXTokenUsage } from './types-chunks/types.d-Bp4Lm1jv.js';
+import { a8 as KodaXWireReasoningEffort, a0 as KodaXToolDefinition, a2 as KodaXToolResultContentItem, j as KodaXMessage, a5 as KodaXToolUseBlock, c as KodaXContentBlock, o as KodaXProviderCapabilityProfile, A as KodaXReasoningCapability, E as KodaXReasoningMode, U as KodaXTaskType, e as KodaXExecutionMode, T as KodaXTaskRoutingDecision, Z as KodaXThinkingDepth, $ as KodaXTokenUsage } from './types-chunks/types.d-Bp4Lm1jv.js';
 export { b as KodaXChildFanoutClass, d as KodaXCustomProviderConfig, h as KodaXImageBlock, k as KodaXModelDescriptor, m as KodaXNormalizedReasoningRequest, n as KodaXProtocolFamily, p as KodaXProviderConfig, r as KodaXProviderConversationSemantics, u as KodaXProviderMcpSupport, x as KodaXProviderStreamOptions, z as KodaXProviderTransport, B as KodaXReasoningEffortPreset, C as KodaXReasoningEffortRequest, D as KodaXReasoningEffortWireStrategy, F as KodaXReasoningProfile, G as KodaXReasoningRequest, H as KodaXRedactedThinkingBlock, I as KodaXReviewScale, J as KodaXRiskLevel, L as KodaXStableEffortIntent, M as KodaXStreamResult, O as KodaXTaskBudgetOverrides, R as KodaXTaskResultMetadata, S as KodaXTaskResultSource, W as KodaXTextBlock, X as KodaXThinkingBlock, Y as KodaXThinkingBudgetMap, _ as KodaXThinkingWireStrategy, a1 as KodaXToolResultBlock } from './types-chunks/types.d-Bp4Lm1jv.js';
 export { K as KODAX_DEFAULT_PROVIDER, b as KODAX_PROVIDERS, c as KODAX_PROVIDER_SNAPSHOTS, d as KODAX_REASONING_MODE_SEQUENCE, f as KODAX_STABLE_EFFORT_INTENTS, g as KodaXAnthropicCompatProvider, h as KodaXError, i as KodaXModelCapabilities, k as KodaXOpenAICompatProvider, l as KodaXProviderError, m as KodaXRateLimitError, P as ProviderName, R as ResolveWireEffortInput, o as ResolvedWireEffort, q as clearRuntimeModelProviders, r as createCustomProvider, s as effortToLegacyReasoningMode, t as getAvailableProviderNames, u as getCustomModelCapabilities, v as getCustomProvider, w as getCustomProviderList, x as getCustomProviderModelDescriptors, y as getCustomProviderModels, z as getCustomProviderNames, B as getModelCapabilities, C as getProvider, D as getProviderConfiguredCapabilityProfile, E as getProviderConfiguredReasoningCapability, F as getProviderList, G as getProviderModel, H as getProviderModelDescriptors, I as getProviderModels, L as getRuntimeModelProvider, M as getRuntimeModelProviderNames, N as isCustomProviderName, O as isKnownProvider, Q as isProviderConfigured, S as isProviderName, U as isRuntimeModelProviderName, V as listAllModelCapabilities, W as listBuiltinModelCapabilities, X as listCustomProviderModelCapabilities, _ as mapLegacyReasoningModeToEffortIntent, $ as normalizeReasoningEffortValue, a1 as parseReasoningEffortEnv, a2 as registerCustomProviders, a3 as registerModelProvider, a4 as resolveModelCapabilities, a5 as resolveProvider, a6 as resolveProviderModelDescriptors, a7 as resolveReasoningEffort, a8 as resolveReasoningEffortForModelSwitch, aa as resolveWireEffort, ab as validateCustomProviderConfig } from './types-chunks/resolver.d-CGkfRULj.js';
 import { a as CostTracker } from './types-chunks/cost-tracker.d-CBLk1fiD.js';
 export { K as KodaXLlmTimeoutConfig, p as parseTimeoutSecEnvMs, t as timeoutSecToMs } from './types-chunks/cost-tracker.d-CBLk1fiD.js';
 import { K as KodaXBaseProvider } from './types-chunks/base.d-DalIRhbb.js';
 import { C as CapabilityKind, a as CapabilityProvider, b as CapabilityResult } from './types-chunks/capability.d-3C62G8Eq.js';
-import { ap as KodaXToolExecutionContext, aW as ToolSideEffect, U as KodaXRepoIntelligenceCapability, X as KodaXRepoIntelligenceTrace, V as KodaXRepoIntelligenceMode, W as KodaXRepoIntelligenceResolvedMode, Z as KodaXRepoRoutingSignals, Q as KodaXOptions, u as KodaXContextOptions, T as KodaXProviderPolicyHints, aH as ProviderResilienceConfig, aI as ProviderResiliencePolicy, F as FailureStage, aN as ResilienceClassification, aF as ProviderExecutionState, aK as RecoveryDecision, aM as RecoveryResult, _ as KodaXResult, a2 as KodaXSessionControl, a3 as KodaXSessionMutators, A as KodaXManagedProtocolPayload, E as ExtensionRuntimeContract, aS as RuntimeDefaultsSnapshot, c as BoundExtensionRuntimeController, x as KodaXEvents, g as GoalCompleteResult, aP as ResolveKodaXManualInput, aQ as ResolveKodaXManualOptions, aR as ResolveKodaXManualResult, N as KodaXManualTopicId, M as KodaXManualTopic, d as ChildSnapshotEvent, r as KodaXChildContextBundle, s as KodaXChildExecutionResult, aX as WorkflowHostPolicy, an as KodaXTimeoutConfig } from './types-chunks/bash-prefix-extractor.d-e1LD2IRl.js';
-export { B as BASH_POLICY_SPEC, a as BashPrefixExtractor, b as BashPrefixResult, C as CapabilityRuntimeContract, e as CreateBashPrefixExtractorOptions, D as DiagnosticsRequest, f as ExtractCommandPrefixOptions, G as GoalBlockedResult, h as GoalCreateInput, i as GoalLifecycleContext, j as GoalRuntimeBinding, k as GoalRuntimeBindingDeps, l as GoalToolsContext, K as KodaXActivityEventMeta, m as KodaXAgentMode, n as KodaXAgentProfile, o as KodaXBudgetDisclosureZone, p as KodaXBudgetExtensionRequest, q as KodaXChildAgentResult, t as KodaXCompactionOverride, v as KodaXContextTokenSnapshot, w as KodaXEffectiveTaskConfig, y as KodaXLiveEventMeta, z as KodaXManagedBudgetSnapshot, H as KodaXManagedTask, I as KodaXManagedTaskRuntimeState, J as KodaXManagedTaskStatusEvent, L as KodaXManualSource, O as KodaXManualTopicInput, P as KodaXMemoryStrategy, R as KodaXOrchestrationVerdict, S as KodaXParentReductionContract, Y as KodaXRepoIntelligenceTraceEvent, $ as KodaXRoleRoundSummary, a0 as KodaXRuntimeVerificationContract, a1 as KodaXSelfManualConfig, a4 as KodaXSessionOptions, a5 as KodaXSidecarMessageEvent, a6 as KodaXSkillDynamicContextPolicy, a7 as KodaXSkillInvocationContext, a8 as KodaXSkillMap, a9 as KodaXSkillProjectionConfidence, aa as KodaXTaskCapabilityHint, ab as KodaXTaskContract, ac as KodaXTaskEvidenceArtifact, ad as KodaXTaskEvidenceBundle, ae as KodaXTaskEvidenceEntry, af as KodaXTaskRole, ag as KodaXTaskRoleAssignment, ah as KodaXTaskStatus, ai as KodaXTaskSurface, aj as KodaXTaskToolPolicy, ak as KodaXTaskVerificationContract, al as KodaXTaskVerificationCriterion, am as KodaXTaskWorkItem, ao as KodaXToolEventMeta, aq as KodaXToolVisibilityMeta, ar as KodaXToolVisibilityPolicy, as as KodaXTurnCompletedEvent, at as KodaXTurnDeliveryKind, au as KodaXTurnFailedEvent, av as KodaXTurnStartedEvent, aw as KodaXVerificationScorecard, ax as KodaXVerificationScorecardCriterion, ay as KodaXWorkflowAgentDigestEvent, az as KodaXWorkflowEventMeta, aA as KodaXWorkflowTimeoutConfig, aB as LSP_SERVERS, aC as LspServerInfo, aD as LspService, aE as LspServiceConfig, aG as ProviderRecoveryEvent, aJ as RecoveryAction, aL as RecoveryLadderStep, aO as ResilienceErrorClass, aT as TodoItem, aU as TodoList, aV as TodoStatus, aY as WorkflowInvocationAction, aZ as WorkflowInvocationPolicyDecision, a_ as WorkflowInvocationPolicyInput, a$ as WorkflowInvocationSource, b0 as WorkflowRunProgressView, b1 as WorkflowStartOutcome, b2 as WorkflowToolHost, b3 as WorkflowToolHostInlineInput, b4 as WorkflowToolHostResult, b5 as WorkflowToolHostStartResult, b6 as buildGoalRuntimeBinding, b7 as createBashPrefixExtractor, b8 as decideWorkflowInvocation, b9 as extractCommandPrefix, ba as getDefaultLspService, bb as makeDisabledGoalToolsContext, bc as providerResilienceConfigFromTimeouts, bd as shutdownDefaultLspService, be as withGoalBeforeNextTurn, bf as withGoalStopHook, bg as workflowStartOutcomeConsumesTurn } from './types-chunks/bash-prefix-extractor.d-e1LD2IRl.js';
+import { aq as KodaXToolExecutionContext, aX as ToolSideEffect, o as KodaXAgentScope, V as KodaXRepoIntelligenceCapability, Y as KodaXRepoIntelligenceTrace, W as KodaXRepoIntelligenceMode, X as KodaXRepoIntelligenceResolvedMode, _ as KodaXRepoRoutingSignals, R as KodaXOptions, v as KodaXContextOptions, U as KodaXProviderPolicyHints, aI as ProviderResilienceConfig, aJ as ProviderResiliencePolicy, F as FailureStage, aO as ResilienceClassification, aG as ProviderExecutionState, aL as RecoveryDecision, aN as RecoveryResult, $ as KodaXResult, a3 as KodaXSessionControl, a4 as KodaXSessionMutators, H as KodaXManagedProtocolPayload, E as ExtensionRuntimeContract, aT as RuntimeDefaultsSnapshot, c as BoundExtensionRuntimeController, y as KodaXEvents, g as GoalCompleteResult, aQ as ResolveKodaXManualInput, aR as ResolveKodaXManualOptions, aS as ResolveKodaXManualResult, O as KodaXManualTopicId, N as KodaXManualTopic, d as ChildSnapshotEvent, s as KodaXChildContextBundle, t as KodaXChildExecutionResult, aY as WorkflowHostPolicy, ao as KodaXTimeoutConfig } from './types-chunks/bash-prefix-extractor.d-CZW9fRoa.js';
+export { B as BASH_POLICY_SPEC, a as BashPrefixExtractor, b as BashPrefixResult, C as CapabilityRuntimeContract, e as CreateBashPrefixExtractorOptions, D as DiagnosticsRequest, f as ExtractCommandPrefixOptions, G as GoalBlockedResult, h as GoalCreateInput, i as GoalLifecycleContext, j as GoalRuntimeBinding, k as GoalRuntimeBindingDeps, l as GoalToolsContext, K as KodaXActivityEventMeta, m as KodaXAgentMode, n as KodaXAgentProfile, p as KodaXBudgetDisclosureZone, q as KodaXBudgetExtensionRequest, r as KodaXChildAgentResult, u as KodaXCompactionOverride, w as KodaXContextTokenSnapshot, x as KodaXEffectiveTaskConfig, z as KodaXLiveEventMeta, A as KodaXManagedBudgetSnapshot, I as KodaXManagedTask, J as KodaXManagedTaskRuntimeState, L as KodaXManagedTaskStatusEvent, M as KodaXManualSource, P as KodaXManualTopicInput, Q as KodaXMemoryStrategy, S as KodaXOrchestrationVerdict, T as KodaXParentReductionContract, Z as KodaXRepoIntelligenceTraceEvent, a0 as KodaXRoleRoundSummary, a1 as KodaXRuntimeVerificationContract, a2 as KodaXSelfManualConfig, a5 as KodaXSessionOptions, a6 as KodaXSidecarMessageEvent, a7 as KodaXSkillDynamicContextPolicy, a8 as KodaXSkillInvocationContext, a9 as KodaXSkillMap, aa as KodaXSkillProjectionConfidence, ab as KodaXTaskCapabilityHint, ac as KodaXTaskContract, ad as KodaXTaskEvidenceArtifact, ae as KodaXTaskEvidenceBundle, af as KodaXTaskEvidenceEntry, ag as KodaXTaskRole, ah as KodaXTaskRoleAssignment, ai as KodaXTaskStatus, aj as KodaXTaskSurface, ak as KodaXTaskToolPolicy, al as KodaXTaskVerificationContract, am as KodaXTaskVerificationCriterion, an as KodaXTaskWorkItem, ap as KodaXToolEventMeta, ar as KodaXToolVisibilityMeta, as as KodaXToolVisibilityPolicy, at as KodaXTurnCompletedEvent, au as KodaXTurnDeliveryKind, av as KodaXTurnFailedEvent, aw as KodaXTurnStartedEvent, ax as KodaXVerificationScorecard, ay as KodaXVerificationScorecardCriterion, az as KodaXWorkflowAgentDigestEvent, aA as KodaXWorkflowEventMeta, aB as KodaXWorkflowTimeoutConfig, aC as LSP_SERVERS, aD as LspServerInfo, aE as LspService, aF as LspServiceConfig, aH as ProviderRecoveryEvent, aK as RecoveryAction, aM as RecoveryLadderStep, aP as ResilienceErrorClass, aU as TodoItem, aV as TodoList, aW as TodoStatus, aZ as WorkflowInvocationAction, a_ as WorkflowInvocationPolicyDecision, a$ as WorkflowInvocationPolicyInput, b0 as WorkflowInvocationSource, b1 as WorkflowRunProgressView, b2 as WorkflowStartOutcome, b3 as WorkflowToolHost, b4 as WorkflowToolHostInlineInput, b5 as WorkflowToolHostResult, b6 as WorkflowToolHostStartResult, b7 as buildGoalRuntimeBinding, b8 as createBashPrefixExtractor, b9 as decideWorkflowInvocation, ba as drainPendingSwaps, bb as extractCommandPrefix, bc as getDefaultLspService, bd as hasPendingSwap, be as makeDisabledGoalToolsContext, bf as providerResilienceConfigFromTimeouts, bg as resolveConstructedAgent, bh as shutdownDefaultLspService, bi as withGoalBeforeNextTurn, bj as withGoalStopHook, bk as workflowStartOutcomeConsumesTurn } from './types-chunks/bash-prefix-extractor.d-CZW9fRoa.js';
 export { CreateFileArtifactFromPathOptions, CreateImageArtifactFromPathOptions, CreateVideoArtifactFromPathOptions, EnqueueWithArtifactsInput, GetModelInputCapabilitiesInput, ImageResizeError, KODAX_FILE_MEDIA_TYPES, KODAX_IMAGE_MEDIA_TYPES, KODAX_VIDEO_MEDIA_TYPES, KodaXInputCapabilityStatus, KodaXMediaError, KodaXMediaErrorCode, KodaXMediaErrorOptions, KodaXModalityInputCapability, MAX_DIMENSION, ModelInputCapabilities, NormalizeImageOptions, NormalizedImage, PASTE_TMP_DIR_ENV, PASTE_TMP_TTL_MS, PersistImageAsBlockOptions, TARGET_RAW_SIZE_BYTES, ValidateInputArtifactsOptions, createFileArtifactFromPath, createImageArtifactFromPath, createVideoArtifactFromPath, enqueueWithArtifacts, getModelInputCapabilities, inferImageMediaType, inferVideoMediaType, normalizePastedImage, persistImageAsBlock, prunePasteTmpDir, readAndNormalizeClipboardImage, readClipboardImage, validateInputArtifactsForModel } from './sdk-media.js';
-import { g as AgentMessage, e as Agent, aO as RunnerLlmReturn, a0 as KodaXJsonValue, Q as KodaXExtensionSessionRecord, S as KodaXExtensionStore, _ as KodaXInputArtifact, aW as SessionErrorMetadata, aA as QualityInvariant, bg as ToolCapability, aK as RunnableTool, aP as RunnerToolCall, W as KodaXGoalState, bu as WorkflowEventCorrelation, z as Guardrail, c1 as WorkflowTaskSummaryEventUpdate, bn as WorkflowAgentBackend, bC as WorkflowModule, bS as WorkflowProcessTrackerOptions, bt as WorkflowEvent, br as WorkflowArtifactRef, bA as WorkflowMeta, bU as WorkflowRunState, bp as WorkflowApproval, bG as WorkflowProcessEvent, bq as WorkflowApprovalSummary, by as WorkflowLimits, bM as WorkflowProcessSnapshot } from './types-chunks/process.d-C93UMgPK.js';
-export { i as AgentReasoningProfile, k as AgentTool, l as AskUserMultiOptions, m as AskUserQuestionItem, n as AskUserQuestionOptions, o as CompactionAnchor, r as CompactionResult, t as CompactionUpdate, H as Handoff, J as InMemorySessionOptions, O as KodaXCompactMemoryProgress, P as KodaXCompactMemorySeed, R as KodaXExtensionSessionState, U as KodaXFileInputArtifact, Y as KodaXImageInputArtifact, Z as KodaXImageMediaType, $ as KodaXInputArtifactSource, a2 as KodaXSessionArtifactLedgerEntry, a3 as KodaXSessionBranchSummaryEntry, a5 as KodaXSessionCompactionEntry, a6 as KodaXSessionData, a7 as KodaXSessionEntry, a8 as KodaXSessionEntryBase, aa as KodaXSessionLabelEntry, ab as KodaXSessionLineage, ac as KodaXSessionMessageEntry, ad as KodaXSessionMeta, ae as KodaXSessionNavigationOptions, af as KodaXSessionRuntimeInfo, ag as KodaXSessionScope, ah as KodaXSessionStorage, ai as KodaXSessionTreeNode, aj as KodaXSessionUiHistoryItem, ak as KodaXSessionUiHistoryItemType, al as KodaXSessionUiTextHistoryItem, am as KodaXSessionUiTextHistoryItemType, an as KodaXSessionUiToolCall, ao as KodaXSessionUiToolCallStatus, ap as KodaXSessionUiToolGroupHistoryItem, aq as KodaXSessionWorkspaceKind, ar as KodaXVideoInputArtifact, as as KodaXVideoMediaType, av as MessageEntry, ay as PresetDispatcher, aD as ReasoningDepth, aH as RunEvent, aI as RunOptions, aJ as RunResult, aL as Runner, aT as Session, aV as SessionEntry, aX as SessionExtension, aY as SessionForkOptions, ce as createAgent, cf as createHandoff, cg as createInMemorySession, cx as registerPresetDispatcher } from './types-chunks/process.d-C93UMgPK.js';
-import { y as MessageQueue, X as WorkflowScriptManifest, F as WorkflowCapsule, I as WorkflowCapsuleIntent, H as WorkflowCapsuleInputs, N as WorkflowCapsuleRequirements, J as WorkflowCapsuleProvenance, w as ManagedWorkflowSnapshot$1, V as WorkflowRunManager$1, R as WorkflowQualityLintFinding, O as WorkflowPatternId } from './types-chunks/run-manager.d-DHPlNYkK.js';
-export { C as CompactionContext, a as CompactionEntry, b as CompactionEntryPayload, c as CompactionPolicy, D as DefaultSummaryCompaction, e as DefaultSummaryCompactionOptions, K as KODAX_API_MIN_INTERVAL, f as KODAX_DEFAULT_TIMEOUT, g as KODAX_HARD_TIMEOUT, h as KODAX_MAX_INCOMPLETE_RETRIES, j as KODAX_MAX_RETRIES, k as KODAX_MAX_TOKENS, l as KODAX_RETRY_BASE_DELAY, m as KODAX_STAGGER_DELAY, L as LINEAGE_ENTRY_TYPES, n as LineageArtifactLedgerPayload, o as LineageCompaction, p as LineageCompactionDelegates, q as LineageEntryType, r as LineageExtension, s as LineageLabelPayload, t as LineageTreeNode, x as ManagedWorkflowStatus, P as PROMISE_PATTERN, Y as appendSessionLineageLabel, $ as applySessionCompaction, a0 as archiveOldIslands, a2 as buildSessionTree, a4 as cleanupIncompleteToolCalls, a5 as countActiveLineageMessages, a6 as countTokens, a7 as createSessionLineage, ab as estimateTokens, ac as extractArtifactLedger, ae as extractTitleFromMessages, af as findPreviousUserEntryId, ag as forkSessionLineage, ah as generateSessionId, ai as getAgentConfigHome, aj as getAgentConfigPath, ak as getAppDataDir, an as getSessionLineagePath, ao as getSessionMessagesFromLineage, aq as mergeArtifactLedger, as as resolveSessionLineageTarget, at as rewindSessionLineage, au as setAgentConfigHome, av as setSessionLineageActiveEntry, aw as validateAndFixToolHistory } from './types-chunks/run-manager.d-DHPlNYkK.js';
+import { h as AgentMessage, f as Agent, bp as RunnerLlmReturn, a4 as KodaXJsonValue, U as KodaXExtensionSessionRecord, W as KodaXExtensionStore, a2 as KodaXInputArtifact, bx as SessionErrorMetadata, bb as QualityInvariant, bT as ToolCapability, bl as RunnableTool, bq as RunnerToolCall, _ as KodaXGoalState, c5 as WorkflowEventCorrelation, J as Guardrail, cE as WorkflowTaskSummaryEventUpdate, b_ as WorkflowAgentBackend, cd as WorkflowModule, ct as WorkflowProcessTrackerOptions, c4 as WorkflowEvent, c2 as WorkflowArtifactRef, cb as WorkflowMeta, cv as WorkflowRunState, c0 as WorkflowApproval, ch as WorkflowProcessEvent, c1 as WorkflowApprovalSummary, c9 as WorkflowLimits, cn as WorkflowProcessSnapshot } from './types-chunks/process.d-CY2g03Mb.js';
+export { j as AgentReasoningProfile, l as AgentTool, m as AskUserAnswer, n as AskUserCustomInputAnswer, o as AskUserMultiOptions, p as AskUserQuestionItem, q as AskUserQuestionOptions, r as AskUserSelectionAnswer, s as CompactionAnchor, v as CompactionResult, x as CompactionUpdate, L as Handoff, N as InMemorySessionOptions, S as KodaXCompactMemoryProgress, T as KodaXCompactMemorySeed, V as KodaXExtensionSessionState, Y as KodaXFileInputArtifact, a0 as KodaXImageInputArtifact, a1 as KodaXImageMediaType, a3 as KodaXInputArtifactSource, a6 as KodaXSessionArtifactLedgerEntry, a7 as KodaXSessionBranchSummaryEntry, a9 as KodaXSessionCompactionEntry, aa as KodaXSessionData, ab as KodaXSessionEntry, ac as KodaXSessionEntryBase, ae as KodaXSessionLabelEntry, af as KodaXSessionLineage, ag as KodaXSessionMessageEntry, ah as KodaXSessionMeta, ai as KodaXSessionNavigationOptions, ak as KodaXSessionRuntimeInfo, al as KodaXSessionScope, am as KodaXSessionStorage, an as KodaXSessionTreeNode, ao as KodaXSessionUiHistoryItem, ap as KodaXSessionUiHistoryItemType, aq as KodaXSessionUiTextHistoryItem, ar as KodaXSessionUiTextHistoryItemType, as as KodaXSessionUiToolCall, at as KodaXSessionUiToolCallStatus, au as KodaXSessionUiToolGroupHistoryItem, av as KodaXSessionWorkspaceKind, aw as KodaXVideoInputArtifact, ax as KodaXVideoMediaType, b6 as MessageEntry, b9 as PresetDispatcher, be as ReasoningDepth, bi as RunEvent, bj as RunOptions, bk as RunResult, bm as Runner, bu as Session, bw as SessionEntry, by as SessionExtension, bz as SessionForkOptions, cR as createAgent, cS as createHandoff, cT as createInMemorySession, d9 as registerPresetDispatcher } from './types-chunks/process.d-CY2g03Mb.js';
+import { y as MessageQueue, X as WorkflowScriptManifest, F as WorkflowCapsule, I as WorkflowCapsuleIntent, H as WorkflowCapsuleInputs, N as WorkflowCapsuleRequirements, J as WorkflowCapsuleProvenance, w as ManagedWorkflowSnapshot$1, V as WorkflowRunManager$1, R as WorkflowQualityLintFinding, O as WorkflowPatternId } from './types-chunks/run-manager.d-CYTnWhZY.js';
+export { C as CompactionContext, a as CompactionEntry, b as CompactionEntryPayload, c as CompactionPolicy, D as DefaultSummaryCompaction, e as DefaultSummaryCompactionOptions, K as KODAX_API_MIN_INTERVAL, f as KODAX_DEFAULT_TIMEOUT, g as KODAX_HARD_TIMEOUT, h as KODAX_MAX_INCOMPLETE_RETRIES, j as KODAX_MAX_RETRIES, k as KODAX_MAX_TOKENS, l as KODAX_RETRY_BASE_DELAY, m as KODAX_STAGGER_DELAY, L as LINEAGE_ENTRY_TYPES, n as LineageArtifactLedgerPayload, o as LineageCompaction, p as LineageCompactionDelegates, q as LineageEntryType, r as LineageExtension, s as LineageLabelPayload, t as LineageTreeNode, x as ManagedWorkflowStatus, P as PROMISE_PATTERN, Y as appendSessionLineageLabel, $ as applySessionCompaction, a0 as archiveOldIslands, a2 as buildSessionTree, a4 as cleanupIncompleteToolCalls, a5 as countActiveLineageMessages, a6 as countTokens, a7 as createSessionLineage, ab as estimateTokens, ac as extractArtifactLedger, ae as extractTitleFromMessages, af as findPreviousUserEntryId, ag as forkSessionLineage, ah as generateSessionId, ai as getAgentConfigHome, aj as getAgentConfigPath, ak as getAppDataDir, an as getSessionLineagePath, ao as getSessionMessagesFromLineage, aq as mergeArtifactLedger, as as resolveSessionLineageTarget, at as rewindSessionLineage, au as setAgentConfigHome, av as setSessionLineageActiveEntry, aw as validateAndFixToolHistory } from './types-chunks/run-manager.d-CYTnWhZY.js';
 import { b as McpServersConfig } from './types-chunks/config.d-CJy1WENT.js';
 export { M as McpConnectMode, a as McpServerConfig, c as McpTransportKind } from './types-chunks/config.d-CJy1WENT.js';
 import { k as McpProviderOptions, c as McpCapabilityProvider, l as McpReverseCapabilities, m as McpRoot } from './types-chunks/manager.d-DBD7SOTT.js';
 export { A as AuthorizationServerMetadata, D as DiscoveredOAuthEndpoints, M as McpAuthRequiredError, a as McpCapabilityDescriptor, b as McpCapabilityKind, d as McpCapabilityRisk, e as McpCatalogItem, f as McpElicitRequest, g as McpElicitResult, h as McpExpiredSessionError, i as McpIcon, j as McpManager, n as McpSamplingRequest, o as McpSamplingResult, p as McpServerCatalog, q as McpServerCatalogSnapshot, r as McpServerLogs, s as McpServerRuntime, t as McpServerRuntimeDiagnostics, u as McpServerStatus, v as McpServerToolList, w as McpToolTaskSupport, x as McpTransport, y as McpTransportEvents, O as OAuthClientInfo, z as OAuthLoginConsent, P as PerformOAuthLoginOptions, B as ProtectedResourceMetadata, W as WwwAuthenticateChallenge, C as buildInitializeCapabilities, E as createMcpCapabilityId, F as createMcpManager, G as createMcpTransport, H as defaultMcpCacheDir, I as discoverAuthorizationServerMetadata, J as discoverOAuthEndpoints, K as discoverProtectedResourceMetadata, L as extractInsufficientScope, N as extractResourceMetadataUrl, Q as getMcpCachePaths, R as loadValidToken, S as normalizeMcpCapabilityId, T as parseMcpCapabilityId, U as performOAuthLogin, V as registerOAuthClient, X as searchMcpCatalog } from './types-chunks/manager.d-DBD7SOTT.js';
-import { h as AutoRules, T as ToolCallSignal, S as SignalCollector } from './types-chunks/guardrail.d-CdqJwwN7.js';
-export { C as AUTO_MODE_DENIAL_CONSECUTIVE_THRESHOLD, i as AUTO_MODE_DENIAL_CUMULATIVE_THRESHOLD, A as AgentsFile, a as AutoModeAskUser, b as AutoModeAskUserVerdict, D as AutoModeDenialTracker, c as AutoModeEngine, d as AutoModeGuardrailConfig, e as AutoModeSharedState, f as AutoModeStats, g as AutoModeToolGuardrail, E as BREAKER_ERROR_THRESHOLD, W as BREAKER_WINDOW_MS, j as CircuitBreaker, K as KodaXMcpConnectMode, k as KodaXMcpServerConfig, l as KodaXMcpServersConfig, m as KodaXMcpTransport, L as LoadAgentsOptions, n as LoadedRulesSource, R as RulesLoadError, o as RulesLoadResult, p as SkippedRulesSource, q as TrustState, J as autoModeDenialShouldFallback, M as breakerShouldFallback, r as collectAllSignals, s as computeRulesFingerprint, v as createAutoModeDenialTracker, t as createAutoModeToolGuardrail, u as createCircuitBreaker, w as formatAgentsForPrompt, x as getKodaxGlobalDir, y as loadAgentsFiles, z as loadAutoRules, B as parseAutoRules, F as readTrustState, G as recordAutoModeAllow, H as recordAutoModeBlock, I as recordBreakerError, N as trustProjectRules } from './types-chunks/guardrail.d-CdqJwwN7.js';
-import { g as ToolGuardrail } from './types-chunks/types.d-CSZAMmU-.js';
+import { h as AutoRules, T as ToolCallSignal, S as SignalCollector } from './types-chunks/guardrail.d-MR6LwMB2.js';
+export { C as AUTO_MODE_DENIAL_CONSECUTIVE_THRESHOLD, i as AUTO_MODE_DENIAL_CUMULATIVE_THRESHOLD, A as AgentsFile, a as AutoModeAskUser, b as AutoModeAskUserVerdict, D as AutoModeDenialTracker, c as AutoModeEngine, d as AutoModeGuardrailConfig, e as AutoModeSharedState, f as AutoModeStats, g as AutoModeToolGuardrail, E as BREAKER_ERROR_THRESHOLD, W as BREAKER_WINDOW_MS, j as CircuitBreaker, K as KodaXMcpConnectMode, k as KodaXMcpServerConfig, l as KodaXMcpServersConfig, m as KodaXMcpTransport, L as LoadAgentsOptions, n as LoadedRulesSource, R as RulesLoadError, o as RulesLoadResult, p as SkippedRulesSource, q as TrustState, J as autoModeDenialShouldFallback, M as breakerShouldFallback, r as collectAllSignals, s as computeRulesFingerprint, v as createAutoModeDenialTracker, t as createAutoModeToolGuardrail, u as createCircuitBreaker, w as formatAgentsForPrompt, x as getKodaxGlobalDir, y as loadAgentsFiles, z as loadAutoRules, B as parseAutoRules, F as readTrustState, G as recordAutoModeAllow, H as recordAutoModeBlock, I as recordBreakerError, N as trustProjectRules } from './types-chunks/guardrail.d-MR6LwMB2.js';
+import { g as ToolGuardrail } from './types-chunks/types.d-1CnTg7Sd.js';
 import { Diagnostic } from 'vscode-languageserver-protocol';
 import '@anthropic-ai/sdk';
 import 'openai';
 import './types-chunks/types.d-vJExiRje.js';
 
+/**
+ * KodaX Constructed-World types (FEATURE_087, v0.7.28).
+ *
+ * Runtime-generated capabilities (tools / agents / skills / ...) live in
+ * `.kodax/constructed/` and are loaded into the same registries as builtin
+ * primitives. v0.7.28 only ships tool generation (FEATURE_088); other kinds
+ * land in FEATURE_089 / FEATURE_090.
+ *
+ * Cross-references:
+ *   - DD §14 — lifecycle, security model, registry merge semantics.
+ *   - docs/features/v0.7.28.md — capability schema, generation flow.
+ */
+
+/**
+ * Handler script source. v0.7.28 limits language to `'javascript'` so that
+ * `loadHandler()` can `await import()` the file directly without an
+ * intermediate TS → JS compile step (no esbuild / tsx dependency).
+ *
+ * TypeScript handlers are explicitly out of scope; Coding Agent generates
+ * JS strings on the wire.
+ */
+interface ScriptSource {
+    readonly kind: 'script';
+    readonly language: 'javascript';
+    readonly code: string;
+}
+/**
+ * Capability declaration.
+ *
+ * v0.7.28 ships the single-dimension form: a whitelist of builtin tool
+ * names that the handler may invoke through `ctx.tools.<name>(...)`.
+ * All I/O — fs / net / env — must flow through builtin tools (`read` /
+ * `write` / `bash` / etc.); handlers do not receive direct `ctx.fs` /
+ * `ctx.net` / `ctx.env` entry points.
+ *
+ * Forward-compatible evolution: if the future demands path/domain-level
+ * constraints, this can grow to `(string | { name; constraints })[]`
+ * without breaking existing manifests.
+ */
+interface Capabilities {
+    readonly tools: readonly string[];
+}
+/**
+ * Tool-kind artifact body (the `content` of `ConstructionArtifact` when
+ * `kind === 'tool'`).
+ */
+interface ToolContent {
+    readonly description: string;
+    readonly inputSchema: Record<string, unknown>;
+    readonly capabilities: Capabilities;
+    readonly handler: ScriptSource;
+    /**
+     * Per-tool timeout override. Defaults to {@link DEFAULT_HANDLER_TIMEOUT_MS}
+     * when omitted. Bounded by AbortController in `loadHandler()`.
+     */
+    readonly timeoutMs?: number;
+}
+/**
+ * Default handler timeout. Picked to match the historical ceiling on
+ * builtin streaming tools (30s); revisit if a constructed tool demands
+ * longer-running computation.
+ */
+declare const DEFAULT_HANDLER_TIMEOUT_MS = 30000;
+/**
+ * Lifecycle state on disk. Drives both the startup glob filter and the
+ * `revoke()` semantics. See DD §14.1 — file system is the single source
+ * of truth; no separate `_manifest.json` index file (C4 decision).
+ */
+type ArtifactStatus = 'staged' | 'active' | 'revoked';
+/**
+ * Reference to a tool by stable id. v0.7.31 (FEATURE_089) introduces
+ * Agent manifests that bundle tool refs rather than inline tool bodies;
+ * the resolver expands these refs to concrete `KodaXToolDefinition`
+ * instances at activate time.
+ *
+ * `ref` shape:
+ *   - `builtin:<name>`            — a tool from the static registry
+ *     (e.g. `builtin:read`, `builtin:bash`)
+ *   - `constructed:<name>@<ver>`  — a previously-activated constructed tool
+ */
+interface ToolRef {
+    readonly ref: string;
+}
+/**
+ * Reference to a Guardrail by stable id. The Layer A `Guardrail`
+ * declaration is name-only (no runtime hooks); resolvers map known
+ * names to constructed `ToolGuardrail` / `InputGuardrail` /
+ * `OutputGuardrail` instances at activation time.
+ */
+interface GuardrailRef {
+    readonly kind: 'input' | 'output' | 'tool';
+    readonly ref: string;
+}
+/**
+ * Reference to a handoff target by stable id (another constructed agent
+ * or a builtin role). The resolver expands `target.ref` to the actual
+ * `Agent` declaration at admission time so the handoff DAG check
+ * (`handoffLegality` invariant) sees the full graph.
+ */
+interface AgentHandoffRef {
+    readonly target: {
+        readonly ref: string;
+    };
+    readonly kind: 'continuation' | 'as-tool';
+    readonly description?: string;
+}
+/**
+ * Reasoning profile declaration mirroring the Layer A
+ * `AgentReasoningProfile`. Kept structurally identical so the resolver
+ * passes the value through without re-shaping.
+ */
+interface AgentReasoningRef {
+    readonly default: 'quick' | 'balanced' | 'deep';
+    readonly max?: 'quick' | 'balanced' | 'deep';
+    readonly escalateOnRevise?: boolean;
+}
+/**
+ * Sandbox test case. Used by `sandbox_test_agent` to verify a
+ * constructed agent before it can activate. Each case feeds `input`
+ * to a sandbox Runner instance and grades the agent's final output:
+ *
+ *   - `expectMatch`     — final text must match this regex (string form)
+ *   - `expectNotMatch`  — final text must NOT match this regex
+ *   - `expectFinalText` — exact substring match (case-sensitive)
+ *
+ * At least one of the three expect-fields must be present; the cases
+ * are graded by `runSandboxAgentTest()` (FEATURE_089 Phase 3.5).
+ */
+interface AgentTestCase {
+    readonly id: string;
+    readonly input: string;
+    readonly expectMatch?: string;
+    readonly expectNotMatch?: string;
+    readonly expectFinalText?: string;
+}
+/**
+ * Agent-kind artifact body (the `content` of `ConstructionArtifact`
+ * when `kind === 'agent'`).
+ *
+ * FEATURE_089 (v0.7.31): all fields except `instructions` are optional;
+ * a minimal "echo agent" can be expressed as `{ instructions: '...' }`.
+ * Tool / handoff / guardrail refs are resolved at admission time
+ * (Runner.admit's 5-step audit expands them and feeds the resolved
+ * Agent through the invariant chain).
+ */
+interface AgentContent {
+    readonly instructions: string;
+    readonly tools?: readonly ToolRef[];
+    readonly handoffs?: readonly AgentHandoffRef[];
+    readonly reasoning?: AgentReasoningRef;
+    readonly guardrails?: readonly GuardrailRef[];
+    readonly model?: string;
+    readonly provider?: string;
+    readonly effort?: KodaXWireReasoningEffort;
+    /**
+     * FEATURE_191 — one-sentence human-readable summary surfaced in the
+     * Worker system prompt's `=== Available specialist agents ===`
+     * block (FEATURE_191 A.3) and in `/agents list` UIs. Frontmatter
+     * `description` field of `~/.kodax/agents/<name>.md` and the
+     * `name`-paired argument of `KodaXExtensionAPI.registerAgent`
+     * funnel into this field. Optional for backward compatibility with
+     * FEATURE_089 minimal-agent shape (`{ instructions: '...' }`);
+     * the SP block renders `(no description)` when absent.
+     */
+    readonly description?: string;
+    /**
+     * Optional structured-output schema mirroring `Agent.outputSchema`.
+     * Pure pass-through to the runtime — admission does not validate
+     * shape semantics here, only well-formed JSON.
+     */
+    readonly outputSchema?: Record<string, unknown>;
+    /**
+     * Optional sandbox test cases. When present, `sandbox_test_agent`
+     * runs them; when absent, the test step performs only the static
+     * checks (manifest schema + admission audit).
+     */
+    readonly testCases?: readonly AgentTestCase[];
+    /**
+     * Maximum total budget (iteration count) the agent may consume.
+     * Plumbed onto the resolved `AgentManifest.maxBudget` and clamped by
+     * `budgetCeiling` invariant during admission.
+     */
+    readonly maxBudget?: number;
+    /**
+     * Voluntary additional invariants the LLM declares this agent
+     * commits to. Plumbed onto `AgentManifest.declaredInvariants`;
+     * unioned on top of the required set during admission.
+     */
+    readonly declaredInvariants?: readonly string[];
+}
+/**
+ * Persisted artifact shape (one JSON file per name/version under
+ * `.kodax/constructed/<kind>s/<name>/<version>.json`).
+ *
+ * Discriminated union over `kind`:
+ *   - `kind: 'tool'`  — v0.7.28 (FEATURE_088) tool generation
+ *   - `kind: 'agent'` — v0.7.31 (FEATURE_089) agent generation; passes
+ *                       through `Runner.admit()` at activation time
+ *
+ * Lifecycle fields (status / timestamps / contentHash / sourceAgent /
+ * signedBy) are common to all kinds.
+ */
+type ConstructionArtifact = ToolArtifact | AgentArtifact;
+interface ConstructionArtifactBase {
+    readonly name: string;
+    readonly version: string;
+    status: ArtifactStatus;
+    readonly signedBy?: string;
+    readonly createdAt: number;
+    readonly sourceAgent?: string;
+    testedAt?: number;
+    activatedAt?: number;
+    revokedAt?: number;
+    /**
+     * SHA-256 of `JSON.stringify(content)` captured at activate time.
+     * `rehydrateActiveArtifacts()` recomputes and compares — a mismatch
+     * indicates the manifest was edited between activation and the next
+     * boot (naive cross-session tampering, e.g. an LLM rewriting the .json
+     * via the Write tool without recomputing the hash). Mismatched
+     * artifacts are skipped at rehydrate with a stderr warning. This is
+     * NOT a defense against a coordinated attacker who recomputes the
+     * hash; the threat model is single-user CLI integrity, not multi-user
+     * supply chain.
+     */
+    contentHash?: string;
+}
+interface ToolArtifact extends ConstructionArtifactBase {
+    readonly kind: 'tool';
+    readonly content: ToolContent;
+}
+interface AgentArtifact extends ConstructionArtifactBase {
+    readonly kind: 'agent';
+    readonly content: AgentContent;
+}
+/**
+ * Returned by {@link ConstructionRuntime.stage}; opaque handle that
+ * downstream `test()` / `activate()` calls bind to.
+ */
+interface StagedHandle {
+    readonly artifact: ConstructionArtifact;
+    readonly stagedAt: number;
+}
+/**
+ * Outcome of {@link ConstructionRuntime.test}. `ok=false` blocks
+ * activation; `warnings` surface but do not block.
+ */
+interface TestResult {
+    readonly ok: boolean;
+    readonly errors?: readonly string[];
+    readonly warnings?: readonly string[];
+}
+/**
+ * Policy gate — invoked once per `activate()` before the artifact is
+ * registered. Default rejects implicit auto-approval; the REPL surface
+ * binds a dialog-based policy in `packages/repl/src/common/construction-
+ * bootstrap.ts` so user approval flows through the live askUser channel.
+ *
+ * Modeled as a function type rather than an interface (D3 decision):
+ * keeps the contract surface tiny, no class boilerplate.
+ *
+ * No declarative `kodax.config.ts` override hatch is provided — see the
+ * "Deferred Design Decisions" section in `features/v0.7.28.md` for why
+ * a `risk_mode` enum (when truly needed) is preferred over user-authored
+ * policy functions.
+ */
+type ConstructionPolicy = (artifact: ConstructionArtifact) => Promise<ConstructionPolicyVerdict>;
+type ConstructionPolicyVerdict = 'approve' | 'reject' | 'ask-user';
+/** Default policy: always ask the user; no implicit approvals. */
+declare const defaultPolicy: ConstructionPolicy;
+/**
+ * Thrown by `CtxProxy` when handler attempts to access a tool not declared
+ * in `capabilities.tools`. Caught in tracer; surfaces as a tool error.
+ */
+declare class CapabilityDeniedError extends Error {
+    readonly toolName: string;
+    readonly declaredTools: readonly string[];
+    constructor(toolName: string, declaredTools: readonly string[]);
+}
+/**
+ * Thrown when a manifest cannot be parsed / is missing required fields.
+ * Surfaces during stage() / startup glob; tracer records details.
+ */
+declare class ConstructionManifestError extends Error {
+    readonly path?: string;
+    constructor(message: string, path?: string);
+}
+
 /**
  * KodaX Core Errors
  *
@@ -328,405 +615,118 @@ declare function getAllRegisteredTools(): RegisteredToolDefinition[];
  */
 declare function isToolPlanModeAllowed(name: string): boolean;
 /**
- * v0.7.42 — does this tool mutate the filesystem?
- *
- * Wraps `sideEffect === 'mutates-fs'`. Used by the REPL permission
- * pipeline's gitRoot guard and Space's permission broker. Replaces the
- * previous practice of hardcoding `Set(["write", "edit"])`-style lookups
- * scattered across 5+ callsites.
- */
-declare function isToolFileMutation(name: string): boolean;
-/**
- * FEATURE_247 — does this tool perform a read-only network request
- * (`sideEffect === 'reads-network'`)?
- *
- * Lets an SDK embedder's permission broker (e.g. KodaX-Space Partner) allow
- * web research / MCP reads (`web_search`, `mcp_read_resource`, `mcp_get_prompt`)
- * while still blocking mutating network calls (`web_fetch`, `mcp_call` →
- * `mutates-network`). Fail-closed: unknown names return `false`.
- *
- * Note: `isToolMutation` intentionally still returns `true` for a
- * `reads-network` tool (only `readonly` is treated as non-mutating there), so
- * existing mutation-gate behavior is unchanged — use THIS predicate, or the
- * `sideEffect` value directly, to select the read-network class.
- */
-declare function isToolNetworkRead(name: string): boolean;
-/**
- * v0.7.42 — does this tool mutate anything (FS, shell, network, state)?
- *
- * True for every `sideEffect` except `'readonly'`. Fail-closed (unknown
- * names return `true` — assumed mutating until proven otherwise).
- */
-declare function isToolMutation(name: string): boolean;
-declare function getRequiredToolParams(name: string): string[];
-declare function listTools(): string[];
-declare function listToolDefinitions(): KodaXToolDefinition[];
-declare function executeTool(name: string, input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolRead(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string | readonly KodaXToolResultContentItem[]>;
-
-declare function toolWrite(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-type EditToolErrorCode = 'EDIT_NOT_FOUND' | 'EDIT_AMBIGUOUS' | 'EDIT_TOO_LARGE';
-interface EditRecoveryDiagnostic {
-    code: EditToolErrorCode;
-    filePath: string;
-    candidates: Array<{
-        startLine: number;
-        endLine: number;
-        preview: string;
-        excerpt: string;
-    }>;
-}
-declare function toolEdit(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-declare function parseEditToolError(result: string): EditToolErrorCode | undefined;
-declare function inspectEditFailure(pathValue: string, oldString: string, ctx: KodaXToolExecutionContext, windowLines: number): Promise<EditRecoveryDiagnostic>;
-
-declare function toolInsertAfterAnchor(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolBash(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-/**
- * KodaX Glob Tool
- *
- * 文件搜索工具
- */
-
-declare function toolGlob(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolGrep(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-/**
- * KodaX Undo Tool
- *
- * 撤销工具 - 恢复最后一次文件修改
- */
-
-declare function toolUndo(_input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-/**
- * KodaX AskUserQuestion Tool
- *
- * 交互式提问工具 - 允许 LLM 在需要时主动向用户提问
- * Supports: single-select, multi-select, free-text input, and multi-question modes.
- */
-
-/**
- * Ask user a question with multiple interaction modes.
- *
- * This tool requires context.askUser (select) or context.askUserInput (input)
- * callback to be provided by the REPL layer.
- */
-declare function toolAskUserQuestion(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolRepoOverview(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolChangedScope(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolChangedDiff(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolModuleContext(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolSymbolContext(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolProcessContext(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolImpactEstimate(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolWebSearch(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolWebFetch(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolCodeSearch(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolSemanticLookup(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-/**
- * KodaX Constructed-World types (FEATURE_087, v0.7.28).
- *
- * Runtime-generated capabilities (tools / agents / skills / ...) live in
- * `.kodax/constructed/` and are loaded into the same registries as builtin
- * primitives. v0.7.28 only ships tool generation (FEATURE_088); other kinds
- * land in FEATURE_089 / FEATURE_090.
- *
- * Cross-references:
- *   - DD §14 — lifecycle, security model, registry merge semantics.
- *   - docs/features/v0.7.28.md — capability schema, generation flow.
- */
-
-/**
- * Handler script source. v0.7.28 limits language to `'javascript'` so that
- * `loadHandler()` can `await import()` the file directly without an
- * intermediate TS → JS compile step (no esbuild / tsx dependency).
- *
- * TypeScript handlers are explicitly out of scope; Coding Agent generates
- * JS strings on the wire.
- */
-interface ScriptSource {
-    readonly kind: 'script';
-    readonly language: 'javascript';
-    readonly code: string;
-}
-/**
- * Capability declaration.
- *
- * v0.7.28 ships the single-dimension form: a whitelist of builtin tool
- * names that the handler may invoke through `ctx.tools.<name>(...)`.
- * All I/O — fs / net / env — must flow through builtin tools (`read` /
- * `write` / `bash` / etc.); handlers do not receive direct `ctx.fs` /
- * `ctx.net` / `ctx.env` entry points.
- *
- * Forward-compatible evolution: if the future demands path/domain-level
- * constraints, this can grow to `(string | { name; constraints })[]`
- * without breaking existing manifests.
- */
-interface Capabilities {
-    readonly tools: readonly string[];
-}
-/**
- * Tool-kind artifact body (the `content` of `ConstructionArtifact` when
- * `kind === 'tool'`).
- */
-interface ToolContent {
-    readonly description: string;
-    readonly inputSchema: Record<string, unknown>;
-    readonly capabilities: Capabilities;
-    readonly handler: ScriptSource;
-    /**
-     * Per-tool timeout override. Defaults to {@link DEFAULT_HANDLER_TIMEOUT_MS}
-     * when omitted. Bounded by AbortController in `loadHandler()`.
-     */
-    readonly timeoutMs?: number;
-}
-/**
- * Default handler timeout. Picked to match the historical ceiling on
- * builtin streaming tools (30s); revisit if a constructed tool demands
- * longer-running computation.
- */
-declare const DEFAULT_HANDLER_TIMEOUT_MS = 30000;
-/**
- * Lifecycle state on disk. Drives both the startup glob filter and the
- * `revoke()` semantics. See DD §14.1 — file system is the single source
- * of truth; no separate `_manifest.json` index file (C4 decision).
- */
-type ArtifactStatus = 'staged' | 'active' | 'revoked';
-/**
- * Reference to a tool by stable id. v0.7.31 (FEATURE_089) introduces
- * Agent manifests that bundle tool refs rather than inline tool bodies;
- * the resolver expands these refs to concrete `KodaXToolDefinition`
- * instances at activate time.
- *
- * `ref` shape:
- *   - `builtin:<name>`            — a tool from the static registry
- *     (e.g. `builtin:read`, `builtin:bash`)
- *   - `constructed:<name>@<ver>`  — a previously-activated constructed tool
- */
-interface ToolRef {
-    readonly ref: string;
-}
-/**
- * Reference to a Guardrail by stable id. The Layer A `Guardrail`
- * declaration is name-only (no runtime hooks); resolvers map known
- * names to constructed `ToolGuardrail` / `InputGuardrail` /
- * `OutputGuardrail` instances at activation time.
- */
-interface GuardrailRef {
-    readonly kind: 'input' | 'output' | 'tool';
-    readonly ref: string;
-}
-/**
- * Reference to a handoff target by stable id (another constructed agent
- * or a builtin role). The resolver expands `target.ref` to the actual
- * `Agent` declaration at admission time so the handoff DAG check
- * (`handoffLegality` invariant) sees the full graph.
- */
-interface AgentHandoffRef {
-    readonly target: {
-        readonly ref: string;
-    };
-    readonly kind: 'continuation' | 'as-tool';
-    readonly description?: string;
-}
-/**
- * Reasoning profile declaration mirroring the Layer A
- * `AgentReasoningProfile`. Kept structurally identical so the resolver
- * passes the value through without re-shaping.
- */
-interface AgentReasoningRef {
-    readonly default: 'quick' | 'balanced' | 'deep';
-    readonly max?: 'quick' | 'balanced' | 'deep';
-    readonly escalateOnRevise?: boolean;
-}
-/**
- * Sandbox test case. Used by `sandbox_test_agent` to verify a
- * constructed agent before it can activate. Each case feeds `input`
- * to a sandbox Runner instance and grades the agent's final output:
- *
- *   - `expectMatch`     — final text must match this regex (string form)
- *   - `expectNotMatch`  — final text must NOT match this regex
- *   - `expectFinalText` — exact substring match (case-sensitive)
- *
- * At least one of the three expect-fields must be present; the cases
- * are graded by `runSandboxAgentTest()` (FEATURE_089 Phase 3.5).
- */
-interface AgentTestCase {
-    readonly id: string;
-    readonly input: string;
-    readonly expectMatch?: string;
-    readonly expectNotMatch?: string;
-    readonly expectFinalText?: string;
-}
-/**
- * Agent-kind artifact body (the `content` of `ConstructionArtifact`
- * when `kind === 'agent'`).
+ * v0.7.42 — does this tool mutate the filesystem?
  *
- * FEATURE_089 (v0.7.31): all fields except `instructions` are optional;
- * a minimal "echo agent" can be expressed as `{ instructions: '...' }`.
- * Tool / handoff / guardrail refs are resolved at admission time
- * (Runner.admit's 5-step audit expands them and feeds the resolved
- * Agent through the invariant chain).
+ * Wraps `sideEffect === 'mutates-fs'`. Used by the REPL permission
+ * pipeline's gitRoot guard and Space's permission broker. Replaces the
+ * previous practice of hardcoding `Set(["write", "edit"])`-style lookups
+ * scattered across 5+ callsites.
  */
-interface AgentContent {
-    readonly instructions: string;
-    readonly tools?: readonly ToolRef[];
-    readonly handoffs?: readonly AgentHandoffRef[];
-    readonly reasoning?: AgentReasoningRef;
-    readonly guardrails?: readonly GuardrailRef[];
-    readonly model?: string;
-    readonly provider?: string;
-    readonly effort?: KodaXWireReasoningEffort;
-    /**
-     * FEATURE_191 — one-sentence human-readable summary surfaced in the
-     * Worker system prompt's `=== Available specialist agents ===`
-     * block (FEATURE_191 A.3) and in `/agents list` UIs. Frontmatter
-     * `description` field of `~/.kodax/agents/<name>.md` and the
-     * `name`-paired argument of `KodaXExtensionAPI.registerAgent`
-     * funnel into this field. Optional for backward compatibility with
-     * FEATURE_089 minimal-agent shape (`{ instructions: '...' }`);
-     * the SP block renders `(no description)` when absent.
-     */
-    readonly description?: string;
-    /**
-     * Optional structured-output schema mirroring `Agent.outputSchema`.
-     * Pure pass-through to the runtime — admission does not validate
-     * shape semantics here, only well-formed JSON.
-     */
-    readonly outputSchema?: Record<string, unknown>;
-    /**
-     * Optional sandbox test cases. When present, `sandbox_test_agent`
-     * runs them; when absent, the test step performs only the static
-     * checks (manifest schema + admission audit).
-     */
-    readonly testCases?: readonly AgentTestCase[];
-    /**
-     * Maximum total budget (iteration count) the agent may consume.
-     * Plumbed onto the resolved `AgentManifest.maxBudget` and clamped by
-     * `budgetCeiling` invariant during admission.
-     */
-    readonly maxBudget?: number;
-    /**
-     * Voluntary additional invariants the LLM declares this agent
-     * commits to. Plumbed onto `AgentManifest.declaredInvariants`;
-     * unioned on top of the required set during admission.
-     */
-    readonly declaredInvariants?: readonly string[];
-}
+declare function isToolFileMutation(name: string): boolean;
 /**
- * Persisted artifact shape (one JSON file per name/version under
- * `.kodax/constructed/<kind>s/<name>/<version>.json`).
+ * FEATURE_247 — does this tool perform a read-only network request
+ * (`sideEffect === 'reads-network'`)?
  *
- * Discriminated union over `kind`:
- *   - `kind: 'tool'`  — v0.7.28 (FEATURE_088) tool generation
- *   - `kind: 'agent'` — v0.7.31 (FEATURE_089) agent generation; passes
- *                       through `Runner.admit()` at activation time
+ * Lets an SDK embedder's permission broker (e.g. KodaX-Space Partner) allow
+ * web research / MCP reads (`web_search`, `mcp_read_resource`, `mcp_get_prompt`)
+ * while still blocking mutating network calls (`web_fetch`, `mcp_call` →
+ * `mutates-network`). Fail-closed: unknown names return `false`.
  *
- * Lifecycle fields (status / timestamps / contentHash / sourceAgent /
- * signedBy) are common to all kinds.
+ * Note: `isToolMutation` intentionally still returns `true` for a
+ * `reads-network` tool (only `readonly` is treated as non-mutating there), so
+ * existing mutation-gate behavior is unchanged — use THIS predicate, or the
+ * `sideEffect` value directly, to select the read-network class.
  */
-type ConstructionArtifact = ToolArtifact | AgentArtifact;
-interface ConstructionArtifactBase {
-    readonly name: string;
-    readonly version: string;
-    status: ArtifactStatus;
-    readonly signedBy?: string;
-    readonly createdAt: number;
-    readonly sourceAgent?: string;
-    testedAt?: number;
-    activatedAt?: number;
-    revokedAt?: number;
-    /**
-     * SHA-256 of `JSON.stringify(content)` captured at activate time.
-     * `rehydrateActiveArtifacts()` recomputes and compares — a mismatch
-     * indicates the manifest was edited between activation and the next
-     * boot (naive cross-session tampering, e.g. an LLM rewriting the .json
-     * via the Write tool without recomputing the hash). Mismatched
-     * artifacts are skipped at rehydrate with a stderr warning. This is
-     * NOT a defense against a coordinated attacker who recomputes the
-     * hash; the threat model is single-user CLI integrity, not multi-user
-     * supply chain.
-     */
-    contentHash?: string;
-}
-interface ToolArtifact extends ConstructionArtifactBase {
-    readonly kind: 'tool';
-    readonly content: ToolContent;
-}
-interface AgentArtifact extends ConstructionArtifactBase {
-    readonly kind: 'agent';
-    readonly content: AgentContent;
-}
+declare function isToolNetworkRead(name: string): boolean;
 /**
- * Returned by {@link ConstructionRuntime.stage}; opaque handle that
- * downstream `test()` / `activate()` calls bind to.
+ * v0.7.42 — does this tool mutate anything (FS, shell, network, state)?
+ *
+ * True for every `sideEffect` except `'readonly'`. Fail-closed (unknown
+ * names return `true` — assumed mutating until proven otherwise).
  */
-interface StagedHandle {
-    readonly artifact: ConstructionArtifact;
-    readonly stagedAt: number;
+declare function isToolMutation(name: string): boolean;
+declare function getRequiredToolParams(name: string): string[];
+declare function listTools(): string[];
+declare function listToolDefinitions(): KodaXToolDefinition[];
+declare function executeTool(name: string, input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolRead(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string | readonly KodaXToolResultContentItem[]>;
+
+declare function toolWrite(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+type EditToolErrorCode = 'EDIT_NOT_FOUND' | 'EDIT_AMBIGUOUS' | 'EDIT_TOO_LARGE';
+interface EditRecoveryDiagnostic {
+    code: EditToolErrorCode;
+    filePath: string;
+    candidates: Array<{
+        startLine: number;
+        endLine: number;
+        preview: string;
+        excerpt: string;
+    }>;
 }
+declare function toolEdit(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+declare function parseEditToolError(result: string): EditToolErrorCode | undefined;
+declare function inspectEditFailure(pathValue: string, oldString: string, ctx: KodaXToolExecutionContext, windowLines: number): Promise<EditRecoveryDiagnostic>;
+
+declare function toolInsertAfterAnchor(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolBash(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
 /**
- * Outcome of {@link ConstructionRuntime.test}. `ok=false` blocks
- * activation; `warnings` surface but do not block.
+ * KodaX Glob Tool
+ *
+ * 文件搜索工具
  */
-interface TestResult {
-    readonly ok: boolean;
-    readonly errors?: readonly string[];
-    readonly warnings?: readonly string[];
-}
+
+declare function toolGlob(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolGrep(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
 /**
- * Policy gate — invoked once per `activate()` before the artifact is
- * registered. Default rejects implicit auto-approval; the REPL surface
- * binds a dialog-based policy in `packages/repl/src/common/construction-
- * bootstrap.ts` so user approval flows through the live askUser channel.
- *
- * Modeled as a function type rather than an interface (D3 decision):
- * keeps the contract surface tiny, no class boilerplate.
+ * KodaX Undo Tool
  *
- * No declarative `kodax.config.ts` override hatch is provided — see the
- * "Deferred Design Decisions" section in `features/v0.7.28.md` for why
- * a `risk_mode` enum (when truly needed) is preferred over user-authored
- * policy functions.
+ * 撤销工具 - 恢复最后一次文件修改
  */
-type ConstructionPolicy = (artifact: ConstructionArtifact) => Promise<ConstructionPolicyVerdict>;
-type ConstructionPolicyVerdict = 'approve' | 'reject' | 'ask-user';
-/** Default policy: always ask the user; no implicit approvals. */
-declare const defaultPolicy: ConstructionPolicy;
+
+declare function toolUndo(_input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
 /**
- * Thrown by `CtxProxy` when handler attempts to access a tool not declared
- * in `capabilities.tools`. Caught in tracer; surfaces as a tool error.
+ * KodaX AskUserQuestion Tool
+ *
+ * Lets the LLM ask the user interactive questions. Supports single-select,
+ * multi-select, free-text input, and multi-question modes.
  */
-declare class CapabilityDeniedError extends Error {
-    readonly toolName: string;
-    readonly declaredTools: readonly string[];
-    constructor(toolName: string, declaredTools: readonly string[]);
-}
+
 /**
- * Thrown when a manifest cannot be parsed / is missing required fields.
- * Surfaces during stage() / startup glob; tracer records details.
+ * Ask user a question with multiple interaction modes.
+ *
+ * This tool requires context.askUser (select), context.askUserMulti
+ * (multi-question), or context.askUserInput (input) from the host.
  */
-declare class ConstructionManifestError extends Error {
-    readonly path?: string;
-    constructor(message: string, path?: string);
-}
+declare function toolAskUserQuestion(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolRepoOverview(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolChangedScope(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolChangedDiff(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolModuleContext(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolSymbolContext(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolProcessContext(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolImpactEstimate(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolWebSearch(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolWebFetch(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolCodeSearch(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolSemanticLookup(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
 
 /**
  * FEATURE_089 Phase 3.5 — Sandbox Agent Test Runner.
@@ -1157,77 +1157,6 @@ declare function findByVersion(name: string, version: string): RegisteredToolDef
  */
 declare function listAll(): RegisteredToolDefinition[];
 
-/**
- * FEATURE_089 (v0.7.31) Phase 3.4 — Constructed Agent Resolver.
- *
- * Module-singleton registry mapping `name` → runnable `Agent` for
- * agents that have passed admission and been activated through
- * `ConstructionRuntime.activate()`. Mirrors the way TOOL_REGISTRY
- * holds activated constructed tools, but for agents.
- *
- * Why a separate registry (not in TOOL_REGISTRY):
- *
- *   - Tools and Agents are different runtime types. A `KodaXToolDefinition`
- *     has `input_schema` + `handler`; an `Agent` has `instructions` +
- *     `tools` + `handoffs` + `reasoning`. Conflating them would force
- *     consumers to discriminate on every lookup.
- *   - Resolution semantics differ: a tool lookup returns the executable
- *     handler; an agent lookup returns the declarative spec (Runner.run
- *     drives the loop separately).
- *
- * Resolution surface:
- *
- *   - `resolveConstructedAgent(name)`     — name → Agent | undefined
- *   - `listConstructedAgents()`           — snapshot of activated agents
- *   - `registerConstructedAgent(artifact)` → unregister fn (called by
- *      runtime on activate, captured in the runtime's `_activated` map)
- *   - `_resetAgentResolverForTesting()`   — test isolation
- *
- * Tool / handoff ref resolution:
- *   - Tool refs are resolved against TOOL_REGISTRY at activation time —
- *     a snapshot. If a referenced tool is later revoked, the agent
- *     keeps its stale ref; Phase 3.5 sandbox testing catches this.
- *   - Handoff target refs lift to stub Agent objects (`name` only) when
- *     the target hasn't been activated yet. Transitive admission ran
- *     at test time so the graph is known to be acyclic; runtime
- *     traversal just walks the names.
- *
- * Non-goal: full referential consistency between tools / agents /
- * handoffs. The threat model is single-user CLI integrity (DD §14.5);
- * stale refs are an LLM-authoring footgun, not a security bypass.
- */
-
-/**
- * Look up an activated constructed agent by name. Returns the
- * resolved `Agent` (with tools / handoffs lifted from refs). Returns
- * `undefined` when no agent at that name has been activated.
- */
-declare function resolveConstructedAgent(name: string): Agent | undefined;
-/**
- * FEATURE_090 — `true` iff a self-modify activation has been staged
- * for `name` but has not yet been drained into the active registry.
- * Surfaces for tooling that wants to display "next run will use
- * version X" hints, and as a sanity-check assertion in tests.
- */
-declare function hasPendingSwap(name: string): boolean;
-/**
- * FEATURE_090 — promote every pending self-modify entry into
- * `AGENT_REGISTRY`, replacing the prior active version. Returns the
- * names that were drained so the caller can surface a hint
- * ("alpha is now running version 1.1.0").
- *
- * Idempotent: calling on an empty pending map is a no-op. Atomic at
- * the JS event-loop level (a single synchronous pass); drain cannot
- * partially complete.
- *
- * Integration contract: the REPL surface calls this immediately after
- * any top-level `Runner.run` returns. KodaX is single-process and
- * single-user, so "the run that triggered the change" and "all
- * in-flight runs" are the same set — no concurrent-run coordination
- * needed.
- */
-declare function drainPendingSwaps(): readonly string[];
-
 /**
  * FEATURE_191 (v0.7.43) — markdown-defined agent loader.
  *
@@ -1262,6 +1191,7 @@ declare function drainPendingSwaps(): readonly string[];
  * decision. Ignoring them silently keeps user `.md` files
  * forward-compatible across future feature versions.
  */
+
 /**
  * Per-file failure record returned to the boot caller. Mirrors
  * claudecode's `getAgentDefinitionsWithOverrides.failedFiles` shape so
@@ -1291,6 +1221,36 @@ interface LoadAgentsFromMarkdownOptions {
      */
     readonly configHome?: string;
 }
+interface LoadMarkdownAgentScopeOptions extends LoadAgentsFromMarkdownOptions {
+    /** Stable host-chosen id for diagnostics. Defaults to the resolved project cwd. */
+    readonly id?: string;
+}
+interface MarkdownAgentToolFilter {
+    readonly name: string;
+    readonly reason: 'not-registered' | 'admission-clamped';
+}
+interface MarkdownAgentLoadWarning {
+    readonly path: string;
+    readonly agentName?: string;
+    readonly reason: string;
+}
+interface LoadedMarkdownAgent {
+    readonly name: string;
+    readonly description: string;
+    readonly source: 'markdown:user' | 'markdown:project';
+    readonly path: string;
+    readonly requestedTools?: readonly string[];
+    readonly effectiveTools?: readonly string[];
+    readonly filteredTools: readonly MarkdownAgentToolFilter[];
+    readonly admissionWarnings: readonly string[];
+}
+interface LoadMarkdownAgentScopeResult {
+    readonly scope: KodaXAgentScope;
+    readonly loaded: readonly LoadedMarkdownAgent[];
+    readonly failed: readonly MarkdownLoadFailure[];
+    readonly warnings: readonly MarkdownAgentLoadWarning[];
+    dispose(): Promise<void>;
+}
 /**
  * FEATURE_197 (v0.7.43) — discovered markdown agent metadata.
  *
@@ -1341,6 +1301,7 @@ interface DiscoverMarkdownAgentsResult {
  * not break boot.
  */
 declare function loadAgentsFromMarkdown(opts?: LoadAgentsFromMarkdownOptions): Promise<LoadAgentsFromMarkdownResult>;
+declare function loadMarkdownAgentScope(opts?: LoadMarkdownAgentScopeOptions): Promise<LoadMarkdownAgentScopeResult>;
 /**
  * FEATURE_197 (v0.7.43) — read-only counterpart to
  * `loadAgentsFromMarkdown`. Scans the same two-tier path (user dir
@@ -5791,5 +5752,5 @@ interface AuthorWorkflowViaWorkerHandle {
  */
 declare function authorWorkflowViaWorker(input: AuthorWorkflowViaWorkerInput): AuthorWorkflowViaWorkerHandle;
 
-export { Agent, AgentMessage, AutoRules, BLOCKER_REQUIRED_CONSECUTIVE_TURNS, BUILTIN_WORKFLOWS, BoundExtensionRuntimeController, CANCELLED_TOOL_RESULT_MESSAGE, CANCELLED_TOOL_RESULT_PREFIX, CODING_AGENT_MARKER, CODING_INVARIANTS, CODING_SUMMARY_PROMPT, CODING_UPDATE_SUMMARY_PROMPT, CapabilityDeniedError, CapabilityKind, CapabilityProvider, CapabilityResult, KodaXClient as Client, CombinedExtensionRuntime, ConstructionManifestError, DEFAULT_CODING_AGENT_NAME, DEFAULT_DANGEROUS_PATTERNS, DEFAULT_HANDLER_TIMEOUT_MS, DEFAULT_RESILIENCE_CONFIG, DEFAULT_SAFE_PATTERNS, DEFAULT_SELF_MODIFY_BUDGET, DEFAULT_WINDOW_MS as DEFAULT_SPECULATIVE_WINDOW_MS, DEFAULT_TOOL_OUTPUT_MAX_BYTES, DEFAULT_TOOL_OUTPUT_MAX_LINES, DEFAULT_WORKFLOW_GENERATION_TIMEOUT_MS, EMIT_VERDICT_TOOL_NAME, ErrorCategory, ExtensionRuntimeContract, FailureStage, GENERATOR_AGENT_NAME, GoalCompleteResult, Guardrail, KODAX_TOOLS, KODAX_UNDERLYING_CAPABILITY_TOPICS, KodaXBaseProvider, KodaXChildContextBundle, KodaXClient, KodaXContentBlock, KodaXContextOptions, KodaXEvents, KodaXExecutionMode, KodaXExtensionRuntime, KodaXExtensionSessionRecord, KodaXInputArtifact, KodaXJsonValue, KodaXManualTopic, KodaXManualTopicId, KodaXMessage, KodaXOptions, KodaXProviderCapabilityProfile, KodaXProviderPolicyHints, KodaXReasoningCapability, KodaXReasoningMode, KodaXRepoIntelligenceCapability, KodaXRepoIntelligenceMode, KodaXRepoIntelligenceResolvedMode, KodaXRepoIntelligenceTrace, KodaXRepoRoutingSignals, KodaXResult, KodaXSessionControl, KodaXSessionError, KodaXSessionMutators, KodaXTaskRoutingDecision, KodaXTaskType, KodaXTerminalError, KodaXThinkingDepth, KodaXTimeoutConfig, KodaXTokenUsage, KodaXToolDefinition, KodaXToolError, KodaXToolExecutionContext, KodaXToolUseBlock, KodaXWireReasoningEffort, MANUAL_REGISTRY, MANUAL_TOPIC_IDS, McpCapabilityProvider, McpProviderOptions, McpReverseCapabilities, McpRoot, McpServersConfig, PLANNER_AGENT_NAME, PROMPT_SECTION_REGISTRY, PROTOCOL_EMITTER_TOOLS, ProviderExecutionState, ProviderRecoveryCoordinator, ProviderResilienceConfig, ProviderResiliencePolicy, READ_DEFAULT_LIMIT, READ_MAX_LINE_CHARS, READ_PREFLIGHT_SIZE_BYTES, REPO_EXPLORER_AGENT_NAME, REPO_EXPLORER_TOOL_NAMES, RecoveryDecision, RecoveryResult, ResilienceClassification, ResolveKodaXManualInput, ResolveKodaXManualOptions, ResolveKodaXManualResult, RuntimeDefaultsSnapshot, SCOUT_AGENT_NAME, SCOUT_THEN_AUTHOR_PROMPT_LINES, SELF_KNOWLEDGE_ROUTING_RULE, SYSTEM_PROMPT, SYSTEM_WORKFLOW_LIMITS, SessionErrorMetadata, SignalCollector, StableBoundaryTracker, TASK_ENGINE_ROLE_AGENTS, TOOL_RESULT_TRUNCATION_GUARDRAIL_NAME, TRACING_ENV, ToolCallSignal, ToolSideEffect, WORKER_AGENT_NAME, WORKFLOW_GENERATION_SYSTEM_PROMPT, WorkflowEventCorrelation, WorkflowHostPolicy, _resetRuntimeForTesting, activate, analyzeChangedScope, appendAuditEntry, applyAccountingDelta, applyToolResultGuardrail, authorWorkflowViaWorker, bashSignalCollector, bootstrapTracing, boundedRevise, budgetCeiling, buildApprovalSummary, buildBlockedGoal, buildCapabilityContextSections, buildClassifierPrompt, buildCompleteGoal, buildCreatedGoal, buildFallbackRoutingDecision, buildLlmReviewPrompt, buildManualToolDescription, buildMcpReverseCapabilities, buildPausedGoal, buildPromptMessageContent, buildPromptSnapshot, buildProviderCapabilitySnapshot, buildProviderPolicyHintsForDecision, buildProviderPolicyPromptNotes, buildRepoIntelligenceContext, buildRepoIntelligenceIndex, buildRepoOverview, buildResumedGoal, buildScoutThenAuthorPrompt, buildSelfKnowledgeRoutingRule, buildSystemPrompt, buildSystemPromptSnapshot, buildWorkflowGenerationSkillContext, buildWorkflowGenerationUserPrompt, checkAbsoluteDeny, checkIncompleteToolCalls, checkPromiseSignal, clampWorkflowLimits, classify, classifyBashCommand, classifyError, classifyResilienceError, combineExtensionRuntimes, computeInputSignature, configureRuntime, convertCapabilityReadResult, convertProviderSearchResults, createBashClassifierConfig, createBuiltinToolDefinition, createCodingWorkflowBackend, createCtxProxy, createDefaultCodingAgent, createDenialTracker, createExtensionRuntime, createKodaXTaskRunner, createPromptSection, createReasoningPlan, createRunGraphWriter, createSessionControl, createToolResultTruncationGuardrail, createWorkflowLifecycleController, createWorkflowPatternTemplateModule, createWorkflowRunManager, dedupeExtensionPathsByEntrypoint, defaultPolicy, deleteSavedWorkflow, disableSelfModify, discoverDefaultExtensions, discoverExtensionsInDirectory, discoverExtensionsInDirectoryDetailed, discoverMarkdownAgents, discoverSavedWorkflows, drainPendingSwaps, emitVerdict, emitWorkflowAgentDigest, ensureBuiltinRepoExplorerAgent, evaluateProviderPolicy, excludeExtensionPathsByEntrypoint, exec, executeTool, extractComparableUserMessageText, extractHtmlTitle, extractPromptComparableText, fileSignalCollector, finalizeRetrievalResult, findByVersion, formatParallelDispatchResult, formatSize, generateWorkflow, generateWorkflowFromOptions, getActiveExtensionRuntime, getAllRegisteredTools, getBuiltinRegisteredToolDefinition, getBuiltinToolDefinition, getBuiltinWorkflow, getDefaultExtensionDirectory, getDefaultWorkflowRunManager, getDenialContext, getImpactEstimate, getModuleContext, getProcessContext, getRegisteredToolDefinition, getRepoIntelligenceIndex, getRepoOverview, getRepoRoutingSignals, getRequiredToolParams, getSymbolContext, getTool, getToolDefinition, getToolRegistrations, getToolResultPolicy, getWorkflowPatternTemplate, goalTokenDelta, hasPendingSwap, inferTaskType, inspectEditFailure, inspectRepoIntelligenceRuntime, isDeniedRecently, isParallelDispatchDirective, isSessionRecoveryCandidateError, isSupportedExtensionModulePath, isToolFileMutation, isToolMutation, isToolNetworkRead, isToolPlanModeAllowed, isValidTokenBudget, languageIdForPath, listAll, list as listArtifacts, listBuiltinToolDefinitions, listBuiltinWorkflows, listConstructed, listToolDefinitions, listTools, listWorkflowPatternTemplates, loadAgentsFromMarkdown, loadGeneratedWorkflowFromRun, loadHandler, loadSavedWorkflow, loadSavedWorkflowCapsule, mcpRootsFromWorkspace, normalizeWorkflowModule, orderPromptSections, parallelInvestigation, parseClassifierOutput, parseEditToolError, parseLlmReviewVerdict, parseModelSpec, parseWorkflowGeneration, persistToolOutput, preflightWorkflowCapsule, prewarmRepoIntelligenceCaches, readArtifact, readAuditEntries, readBudget, readDisableState, readWindowFromEnv as readSpeculativeWindowFromEnv, reasoningModeToDepth, reconstructMessagesWithToolGuard, recordBlockerAttempt, recordDenial, registerCodingInvariants, registerConfiguredMcpCapabilityProvider, registerOfficialSandboxExtension, registerTool, rehydrateActiveArtifacts, remaining as remainingSelfModifyBudget, renameSavedWorkflow, renderChangedScope, renderImpactEstimate, renderModuleContext, renderProcessContext, renderPromptSections, renderRepoOverview, renderRetrievalResult, renderSymbolContext, replaceSavedWorkflow, report as reportLspDiagnostics, resetBlockerCounter, resetBudget, resolveClassifierModel, resolveConstructedAgent, resolveExtensionEntrypoint, resolveKodaXManual, resolveReasoningMode, resolveRepoIntelligenceMode, resolveRepoIntelligenceRuntimeConfig, resolveResilienceConfig, resolveToolCapability, resolveWorkflowGenerationTimeoutMs, resolveWorkflowIdentity, revoke, rollbackSelfModify, runAstRules, runKodaX, runLlmReview, runManagedTask, runOrchestration, runWorkflowFromOptions, runWorkflowModule, safeWorkflowArtifactName, saveGeneratedWorkflow, saveGeneratedWorkflowFromRun, setActiveExtensionRuntime, shouldFlipBudgetLimited, speculativeRace, stage, startKodaX, startManagedWorkflow, stripAssistantText, stripHtmlToText, test as testArtifact, toolAskUserQuestion, toolBash, toolChangedDiff, toolChangedScope, toolCodeSearch, toolEdit, toolGlob, toolGrep, toolImpactEstimate, toolInsertAfterAnchor, toolModuleContext, toolPermission, toolProcessContext, toolRead, toolRepoOverview, toolSemanticLookup, toolSymbolContext, toolUndo, toolWebFetch, toolWebSearch, toolWrite, truncateHead, truncateLine, truncateTail, turnWallTimeDelta, validateGeneratedWorkflowSource, validateSubtaskIndependence, validateToolSchemaForProvider, verifyGoalCompletion, webhook, withManualToolBranding, workerAgent };
-export type { AbsoluteDenyMatch, AbsoluteDenyMiss, AbsoluteDenyResult, AgentArtifact, ArtifactStatus, AstCheckResult, AstRuleId, AstRuleViolation, AuditEntry, AuditEventKind, AuthorWorkflowViaWorkerHandle, AuthorWorkflowViaWorkerInput, BashClassificationResult, BashClassifierConfig, BashRiskLevel, BlockerAttemptResult, BootstrapTracingOptions, BudgetState, BuildClassifierPromptInput, BuildPromptInput, Capabilities, ChangedFileEntry, ChangedFileStatus, ChangedScopeAreaSummary, ChangedScopeReport, ClassifierDecision, ClassifierPrompt, ClassifyDecision, ClassifyOptions, CodingWorkflowBackendDeps, ConstructionArtifact, ConstructionPolicy, ConstructionPolicyVerdict, CreateCtxProxyOptions, CreateKodaXTaskRunnerOptions, CreateWorkflowLifecycleControllerOptions, DeleteSavedWorkflowInput, DeleteWorkflowRunOptions, DenialRecord, DenialTracker, DisableState, DiscoverMarkdownAgentsResult, DiscoveredMarkdownAgent, EditRecoveryDiagnostic, EditToolErrorCode, ErrorClassification, ExecOptions, ExecResult, ExtensionCommandContext, ExtensionCommandDefinition, ExtensionCommandInvocation, ExtensionCommandResult, ExtensionContributionSource, ExtensionDiscoveryResult, ExtensionDiscoverySkipReason, ExtensionEventMap, ExtensionFailureDiagnostic, ExtensionFailureStage, ExtensionHookMap, ExtensionLoadSource, ExtensionLogger, ExtensionRuntimeController, ExtensionRuntimeDiagnostics, ExtensionToolBeforeHookContext, GenerateWorkflowFromOptionsInput, GenerateWorkflowInput, GeneratedWorkflow, GoalCompletionVerifier, ImpactEstimateResult, InvestigationFinding, KodaXAgentWorkerSpec, KodaXExtensionAPI, KodaXExtensionActivationResult, KodaXExtensionModule, KodaXPromptSection, KodaXPromptSectionDefinition, KodaXPromptSectionSlot, KodaXPromptSectionStability, KodaXPromptSnapshot, KodaXPromptSnapshotMetadata, KodaXProviderCapabilitySnapshot, KodaXProviderPolicyDecision, KodaXProviderPolicyIssue, KodaXProviderPolicyIssueSeverity, KodaXProviderSourceKind, KodaXRetrievalArtifact, KodaXRetrievalFreshness, KodaXRetrievalItem, KodaXRetrievalResult, KodaXRetrievalScope, KodaXRetrievalToolName, KodaXRetrievalTrust, LanguageCapabilityTier, LlmReviewClient, LlmReviewResult, LlmReviewVerdict, LoadAgentsFromMarkdownOptions, LoadAgentsFromMarkdownResult, LoadGeneratedWorkflowFromRunInput, LoadHandlerOptions, LoadHandlerScope, LoadedExtensionDiagnostic, LoadedGeneratedWorkflowFromRun, LocalToolDefinition, ManagedWorkflowRun, ManagedWorkflowSnapshot, ManagedWorkflowSource, MarkdownLoadFailure, McpReverseWorkspace, ModelProviderRegistration, ModuleCapsule, ModuleContextResult, OfficialSandboxMode, OfficialSandboxOptions, OrchestrationArtifact, OrchestrationCompletedTask, OrchestrationRunEvents, OrchestrationRunOptions, OrchestrationRunResult, OrchestrationTaskBudget, OrchestrationTaskContext, OrchestrationTaskExecution, OrchestrationTaskStatus, OrchestrationTraceEvent, OrchestrationWorkerResult, OrchestrationWorkerRunner, OrchestrationWorkerSpec, ParallelDispatchDirective, ParallelDispatchResult, ParallelInvestigationArgs, ParallelInvestigationResult, ParallelSubtask, ParsedModelSpec, ProcessCapsule, ProcessContextResult, ProcessStep, ProtocolEmitterMetadata, RegisteredCapabilityProviderDiagnostic, RegisteredCommandDiagnostic, RegisteredHookDiagnostic, RegisteredToolDefinition, RegisteredToolDiagnostic, RenameSavedWorkflowInput, ReplaceSavedWorkflowInput, ReplaceSavedWorkflowResult, RepoAreaKind, RepoAreaOverview, RepoIntelligenceIndex, RepoIntelligenceRuntimeInspection, RepoLanguageId, RepoLanguageSupport, RepoOverview, RepoSymbolKind, RepoSymbolRecord, RepoSymbolReference, ResolveClassifierModelOptions, ResolveSource, ResolvedClassifierModel, RollbackResult, RunGraphWriter, RunGraphWriterDeps, RunJsonInput, RunWorkflowFromOptionsInput, RunWorkflowModuleOptions, RunWorkflowModuleOutcome, RunningSession, SaveGeneratedWorkflowFromRunInput, SaveGeneratedWorkflowInput, SavedGeneratedWorkflowFile, SavedWorkflowDirs, SavedWorkflowExecution, SavedWorkflowRef, SavedWorkflowSource, SchemaProvider, SchemaValidationResult, ScriptSource, SelfModifyAskUser, SelfModifyAskUserInput, SelfModifyDiffSeverity, SelfModifyDiffSummary, SkippedExtensionDiscoveryEntry, SpeculativeResult, StagedHandle, StartManagedWorkflowInput, StartManagedWorkflowResult, StripOptions, SymbolContextResult, TestArtifactOptions, TestResult, TierZeroPatternId, ToolContent, ToolDefinitionSource, ToolHandler, ToolRegistrationOptions, ToolRegistry, VerifyGoalCompletionOptions, WebhookOptions, WebhookResult, WorkflowCapsulePreflightEnvironment, WorkflowCapsulePreflightInput, WorkflowCapsulePreflightIssue, WorkflowCapsulePreflightResult, WorkflowChildOptions, WorkflowGenerationResult, WorkflowGenerationTextFn, WorkflowGenerationTextRequest, WorkflowIdentityResolution, WorkflowIdentityResolverInput, WorkflowLifecycleController, WorkflowPatternTemplate, WorkflowRunListOptions, WorkflowRunManager, WorkflowRunProcessMetadata, WorkflowRunRetentionOptions, WorkflowRunRetentionResult, WorkflowScriptSnapshotInput, WorkflowScriptSnapshotRef };
+export { Agent, AgentMessage, AutoRules, BLOCKER_REQUIRED_CONSECUTIVE_TURNS, BUILTIN_WORKFLOWS, BoundExtensionRuntimeController, CANCELLED_TOOL_RESULT_MESSAGE, CANCELLED_TOOL_RESULT_PREFIX, CODING_AGENT_MARKER, CODING_INVARIANTS, CODING_SUMMARY_PROMPT, CODING_UPDATE_SUMMARY_PROMPT, CapabilityDeniedError, CapabilityKind, CapabilityProvider, CapabilityResult, KodaXClient as Client, CombinedExtensionRuntime, ConstructionManifestError, DEFAULT_CODING_AGENT_NAME, DEFAULT_DANGEROUS_PATTERNS, DEFAULT_HANDLER_TIMEOUT_MS, DEFAULT_RESILIENCE_CONFIG, DEFAULT_SAFE_PATTERNS, DEFAULT_SELF_MODIFY_BUDGET, DEFAULT_WINDOW_MS as DEFAULT_SPECULATIVE_WINDOW_MS, DEFAULT_TOOL_OUTPUT_MAX_BYTES, DEFAULT_TOOL_OUTPUT_MAX_LINES, DEFAULT_WORKFLOW_GENERATION_TIMEOUT_MS, EMIT_VERDICT_TOOL_NAME, ErrorCategory, ExtensionRuntimeContract, FailureStage, GENERATOR_AGENT_NAME, GoalCompleteResult, Guardrail, KODAX_TOOLS, KODAX_UNDERLYING_CAPABILITY_TOPICS, KodaXAgentScope, KodaXBaseProvider, KodaXChildContextBundle, KodaXClient, KodaXContentBlock, KodaXContextOptions, KodaXEvents, KodaXExecutionMode, KodaXExtensionRuntime, KodaXExtensionSessionRecord, KodaXInputArtifact, KodaXJsonValue, KodaXManualTopic, KodaXManualTopicId, KodaXMessage, KodaXOptions, KodaXProviderCapabilityProfile, KodaXProviderPolicyHints, KodaXReasoningCapability, KodaXReasoningMode, KodaXRepoIntelligenceCapability, KodaXRepoIntelligenceMode, KodaXRepoIntelligenceResolvedMode, KodaXRepoIntelligenceTrace, KodaXRepoRoutingSignals, KodaXResult, KodaXSessionControl, KodaXSessionError, KodaXSessionMutators, KodaXTaskRoutingDecision, KodaXTaskType, KodaXTerminalError, KodaXThinkingDepth, KodaXTimeoutConfig, KodaXTokenUsage, KodaXToolDefinition, KodaXToolError, KodaXToolExecutionContext, KodaXToolUseBlock, KodaXWireReasoningEffort, MANUAL_REGISTRY, MANUAL_TOPIC_IDS, McpCapabilityProvider, McpProviderOptions, McpReverseCapabilities, McpRoot, McpServersConfig, PLANNER_AGENT_NAME, PROMPT_SECTION_REGISTRY, PROTOCOL_EMITTER_TOOLS, ProviderExecutionState, ProviderRecoveryCoordinator, ProviderResilienceConfig, ProviderResiliencePolicy, READ_DEFAULT_LIMIT, READ_MAX_LINE_CHARS, READ_PREFLIGHT_SIZE_BYTES, REPO_EXPLORER_AGENT_NAME, REPO_EXPLORER_TOOL_NAMES, RecoveryDecision, RecoveryResult, ResilienceClassification, ResolveKodaXManualInput, ResolveKodaXManualOptions, ResolveKodaXManualResult, RuntimeDefaultsSnapshot, SCOUT_AGENT_NAME, SCOUT_THEN_AUTHOR_PROMPT_LINES, SELF_KNOWLEDGE_ROUTING_RULE, SYSTEM_PROMPT, SYSTEM_WORKFLOW_LIMITS, SessionErrorMetadata, SignalCollector, StableBoundaryTracker, TASK_ENGINE_ROLE_AGENTS, TOOL_RESULT_TRUNCATION_GUARDRAIL_NAME, TRACING_ENV, ToolCallSignal, ToolSideEffect, WORKER_AGENT_NAME, WORKFLOW_GENERATION_SYSTEM_PROMPT, WorkflowEventCorrelation, WorkflowHostPolicy, _resetRuntimeForTesting, activate, analyzeChangedScope, appendAuditEntry, applyAccountingDelta, applyToolResultGuardrail, authorWorkflowViaWorker, bashSignalCollector, bootstrapTracing, boundedRevise, budgetCeiling, buildApprovalSummary, buildBlockedGoal, buildCapabilityContextSections, buildClassifierPrompt, buildCompleteGoal, buildCreatedGoal, buildFallbackRoutingDecision, buildLlmReviewPrompt, buildManualToolDescription, buildMcpReverseCapabilities, buildPausedGoal, buildPromptMessageContent, buildPromptSnapshot, buildProviderCapabilitySnapshot, buildProviderPolicyHintsForDecision, buildProviderPolicyPromptNotes, buildRepoIntelligenceContext, buildRepoIntelligenceIndex, buildRepoOverview, buildResumedGoal, buildScoutThenAuthorPrompt, buildSelfKnowledgeRoutingRule, buildSystemPrompt, buildSystemPromptSnapshot, buildWorkflowGenerationSkillContext, buildWorkflowGenerationUserPrompt, checkAbsoluteDeny, checkIncompleteToolCalls, checkPromiseSignal, clampWorkflowLimits, classify, classifyBashCommand, classifyError, classifyResilienceError, combineExtensionRuntimes, computeInputSignature, configureRuntime, convertCapabilityReadResult, convertProviderSearchResults, createBashClassifierConfig, createBuiltinToolDefinition, createCodingWorkflowBackend, createCtxProxy, createDefaultCodingAgent, createDenialTracker, createExtensionRuntime, createKodaXTaskRunner, createPromptSection, createReasoningPlan, createRunGraphWriter, createSessionControl, createToolResultTruncationGuardrail, createWorkflowLifecycleController, createWorkflowPatternTemplateModule, createWorkflowRunManager, dedupeExtensionPathsByEntrypoint, defaultPolicy, deleteSavedWorkflow, disableSelfModify, discoverDefaultExtensions, discoverExtensionsInDirectory, discoverExtensionsInDirectoryDetailed, discoverMarkdownAgents, discoverSavedWorkflows, emitVerdict, emitWorkflowAgentDigest, ensureBuiltinRepoExplorerAgent, evaluateProviderPolicy, excludeExtensionPathsByEntrypoint, exec, executeTool, extractComparableUserMessageText, extractHtmlTitle, extractPromptComparableText, fileSignalCollector, finalizeRetrievalResult, findByVersion, formatParallelDispatchResult, formatSize, generateWorkflow, generateWorkflowFromOptions, getActiveExtensionRuntime, getAllRegisteredTools, getBuiltinRegisteredToolDefinition, getBuiltinToolDefinition, getBuiltinWorkflow, getDefaultExtensionDirectory, getDefaultWorkflowRunManager, getDenialContext, getImpactEstimate, getModuleContext, getProcessContext, getRegisteredToolDefinition, getRepoIntelligenceIndex, getRepoOverview, getRepoRoutingSignals, getRequiredToolParams, getSymbolContext, getTool, getToolDefinition, getToolRegistrations, getToolResultPolicy, getWorkflowPatternTemplate, goalTokenDelta, inferTaskType, inspectEditFailure, inspectRepoIntelligenceRuntime, isDeniedRecently, isParallelDispatchDirective, isSessionRecoveryCandidateError, isSupportedExtensionModulePath, isToolFileMutation, isToolMutation, isToolNetworkRead, isToolPlanModeAllowed, isValidTokenBudget, languageIdForPath, listAll, list as listArtifacts, listBuiltinToolDefinitions, listBuiltinWorkflows, listConstructed, listToolDefinitions, listTools, listWorkflowPatternTemplates, loadAgentsFromMarkdown, loadGeneratedWorkflowFromRun, loadHandler, loadMarkdownAgentScope, loadSavedWorkflow, loadSavedWorkflowCapsule, mcpRootsFromWorkspace, normalizeWorkflowModule, orderPromptSections, parallelInvestigation, parseClassifierOutput, parseEditToolError, parseLlmReviewVerdict, parseModelSpec, parseWorkflowGeneration, persistToolOutput, preflightWorkflowCapsule, prewarmRepoIntelligenceCaches, readArtifact, readAuditEntries, readBudget, readDisableState, readWindowFromEnv as readSpeculativeWindowFromEnv, reasoningModeToDepth, reconstructMessagesWithToolGuard, recordBlockerAttempt, recordDenial, registerCodingInvariants, registerConfiguredMcpCapabilityProvider, registerOfficialSandboxExtension, registerTool, rehydrateActiveArtifacts, remaining as remainingSelfModifyBudget, renameSavedWorkflow, renderChangedScope, renderImpactEstimate, renderModuleContext, renderProcessContext, renderPromptSections, renderRepoOverview, renderRetrievalResult, renderSymbolContext, replaceSavedWorkflow, report as reportLspDiagnostics, resetBlockerCounter, resetBudget, resolveClassifierModel, resolveExtensionEntrypoint, resolveKodaXManual, resolveReasoningMode, resolveRepoIntelligenceMode, resolveRepoIntelligenceRuntimeConfig, resolveResilienceConfig, resolveToolCapability, resolveWorkflowGenerationTimeoutMs, resolveWorkflowIdentity, revoke, rollbackSelfModify, runAstRules, runKodaX, runLlmReview, runManagedTask, runOrchestration, runWorkflowFromOptions, runWorkflowModule, safeWorkflowArtifactName, saveGeneratedWorkflow, saveGeneratedWorkflowFromRun, setActiveExtensionRuntime, shouldFlipBudgetLimited, speculativeRace, stage, startKodaX, startManagedWorkflow, stripAssistantText, stripHtmlToText, test as testArtifact, toolAskUserQuestion, toolBash, toolChangedDiff, toolChangedScope, toolCodeSearch, toolEdit, toolGlob, toolGrep, toolImpactEstimate, toolInsertAfterAnchor, toolModuleContext, toolPermission, toolProcessContext, toolRead, toolRepoOverview, toolSemanticLookup, toolSymbolContext, toolUndo, toolWebFetch, toolWebSearch, toolWrite, truncateHead, truncateLine, truncateTail, turnWallTimeDelta, validateGeneratedWorkflowSource, validateSubtaskIndependence, validateToolSchemaForProvider, verifyGoalCompletion, webhook, withManualToolBranding, workerAgent };
+export type { AbsoluteDenyMatch, AbsoluteDenyMiss, AbsoluteDenyResult, AgentArtifact, ArtifactStatus, AstCheckResult, AstRuleId, AstRuleViolation, AuditEntry, AuditEventKind, AuthorWorkflowViaWorkerHandle, AuthorWorkflowViaWorkerInput, BashClassificationResult, BashClassifierConfig, BashRiskLevel, BlockerAttemptResult, BootstrapTracingOptions, BudgetState, BuildClassifierPromptInput, BuildPromptInput, Capabilities, ChangedFileEntry, ChangedFileStatus, ChangedScopeAreaSummary, ChangedScopeReport, ClassifierDecision, ClassifierPrompt, ClassifyDecision, ClassifyOptions, CodingWorkflowBackendDeps, ConstructionArtifact, ConstructionPolicy, ConstructionPolicyVerdict, CreateCtxProxyOptions, CreateKodaXTaskRunnerOptions, CreateWorkflowLifecycleControllerOptions, DeleteSavedWorkflowInput, DeleteWorkflowRunOptions, DenialRecord, DenialTracker, DisableState, DiscoverMarkdownAgentsResult, DiscoveredMarkdownAgent, EditRecoveryDiagnostic, EditToolErrorCode, ErrorClassification, ExecOptions, ExecResult, ExtensionCommandContext, ExtensionCommandDefinition, ExtensionCommandInvocation, ExtensionCommandResult, ExtensionContributionSource, ExtensionDiscoveryResult, ExtensionDiscoverySkipReason, ExtensionEventMap, ExtensionFailureDiagnostic, ExtensionFailureStage, ExtensionHookMap, ExtensionLoadSource, ExtensionLogger, ExtensionRuntimeController, ExtensionRuntimeDiagnostics, ExtensionToolBeforeHookContext, GenerateWorkflowFromOptionsInput, GenerateWorkflowInput, GeneratedWorkflow, GoalCompletionVerifier, ImpactEstimateResult, InvestigationFinding, KodaXAgentWorkerSpec, KodaXExtensionAPI, KodaXExtensionActivationResult, KodaXExtensionModule, KodaXPromptSection, KodaXPromptSectionDefinition, KodaXPromptSectionSlot, KodaXPromptSectionStability, KodaXPromptSnapshot, KodaXPromptSnapshotMetadata, KodaXProviderCapabilitySnapshot, KodaXProviderPolicyDecision, KodaXProviderPolicyIssue, KodaXProviderPolicyIssueSeverity, KodaXProviderSourceKind, KodaXRetrievalArtifact, KodaXRetrievalFreshness, KodaXRetrievalItem, KodaXRetrievalResult, KodaXRetrievalScope, KodaXRetrievalToolName, KodaXRetrievalTrust, LanguageCapabilityTier, LlmReviewClient, LlmReviewResult, LlmReviewVerdict, LoadAgentsFromMarkdownOptions, LoadAgentsFromMarkdownResult, LoadGeneratedWorkflowFromRunInput, LoadHandlerOptions, LoadHandlerScope, LoadMarkdownAgentScopeOptions, LoadMarkdownAgentScopeResult, LoadedExtensionDiagnostic, LoadedGeneratedWorkflowFromRun, LoadedMarkdownAgent, LocalToolDefinition, ManagedWorkflowRun, ManagedWorkflowSnapshot, ManagedWorkflowSource, MarkdownAgentLoadWarning, MarkdownAgentToolFilter, MarkdownLoadFailure, McpReverseWorkspace, ModelProviderRegistration, ModuleCapsule, ModuleContextResult, OfficialSandboxMode, OfficialSandboxOptions, OrchestrationArtifact, OrchestrationCompletedTask, OrchestrationRunEvents, OrchestrationRunOptions, OrchestrationRunResult, OrchestrationTaskBudget, OrchestrationTaskContext, OrchestrationTaskExecution, OrchestrationTaskStatus, OrchestrationTraceEvent, OrchestrationWorkerResult, OrchestrationWorkerRunner, OrchestrationWorkerSpec, ParallelDispatchDirective, ParallelDispatchResult, ParallelInvestigationArgs, ParallelInvestigationResult, ParallelSubtask, ParsedModelSpec, ProcessCapsule, ProcessContextResult, ProcessStep, ProtocolEmitterMetadata, RegisteredCapabilityProviderDiagnostic, RegisteredCommandDiagnostic, RegisteredHookDiagnostic, RegisteredToolDefinition, RegisteredToolDiagnostic, RenameSavedWorkflowInput, ReplaceSavedWorkflowInput, ReplaceSavedWorkflowResult, RepoAreaKind, RepoAreaOverview, RepoIntelligenceIndex, RepoIntelligenceRuntimeInspection, RepoLanguageId, RepoLanguageSupport, RepoOverview, RepoSymbolKind, RepoSymbolRecord, RepoSymbolReference, ResolveClassifierModelOptions, ResolveSource, ResolvedClassifierModel, RollbackResult, RunGraphWriter, RunGraphWriterDeps, RunJsonInput, RunWorkflowFromOptionsInput, RunWorkflowModuleOptions, RunWorkflowModuleOutcome, RunningSession, SaveGeneratedWorkflowFromRunInput, SaveGeneratedWorkflowInput, SavedGeneratedWorkflowFile, SavedWorkflowDirs, SavedWorkflowExecution, SavedWorkflowRef, SavedWorkflowSource, SchemaProvider, SchemaValidationResult, ScriptSource, SelfModifyAskUser, SelfModifyAskUserInput, SelfModifyDiffSeverity, SelfModifyDiffSummary, SkippedExtensionDiscoveryEntry, SpeculativeResult, StagedHandle, StartManagedWorkflowInput, StartManagedWorkflowResult, StripOptions, SymbolContextResult, TestArtifactOptions, TestResult, TierZeroPatternId, ToolContent, ToolDefinitionSource, ToolHandler, ToolRegistrationOptions, ToolRegistry, VerifyGoalCompletionOptions, WebhookOptions, WebhookResult, WorkflowCapsulePreflightEnvironment, WorkflowCapsulePreflightInput, WorkflowCapsulePreflightIssue, WorkflowCapsulePreflightResult, WorkflowChildOptions, WorkflowGenerationResult, WorkflowGenerationTextFn, WorkflowGenerationTextRequest, WorkflowIdentityResolution, WorkflowIdentityResolverInput, WorkflowLifecycleController, WorkflowPatternTemplate, WorkflowRunListOptions, WorkflowRunManager, WorkflowRunProcessMetadata, WorkflowRunRetentionOptions, WorkflowRunRetentionResult, WorkflowScriptSnapshotInput, WorkflowScriptSnapshotRef };