@kodax-ai/kodax 0.7.62 → 0.7.63

package/dist/sdk-coding.d.ts

@@ -1,173 +1,460 @@
-import { a0 as KodaXToolDefinition, a2 as KodaXToolResultContentItem, a8 as KodaXWireReasoningEffort, j as KodaXMessage, a5 as KodaXToolUseBlock, c as KodaXContentBlock, o as KodaXProviderCapabilityProfile, A as KodaXReasoningCapability, E as KodaXReasoningMode, U as KodaXTaskType, e as KodaXExecutionMode, T as KodaXTaskRoutingDecision, Z as KodaXThinkingDepth, $ as KodaXTokenUsage } from './types-chunks/types.d-Bp4Lm1jv.js';
+import { a8 as KodaXWireReasoningEffort, a0 as KodaXToolDefinition, a2 as KodaXToolResultContentItem, j as KodaXMessage, a5 as KodaXToolUseBlock, c as KodaXContentBlock, o as KodaXProviderCapabilityProfile, A as KodaXReasoningCapability, E as KodaXReasoningMode, U as KodaXTaskType, e as KodaXExecutionMode, T as KodaXTaskRoutingDecision, Z as KodaXThinkingDepth, $ as KodaXTokenUsage } from './types-chunks/types.d-Bp4Lm1jv.js';
 export { b as KodaXChildFanoutClass, d as KodaXCustomProviderConfig, h as KodaXImageBlock, k as KodaXModelDescriptor, m as KodaXNormalizedReasoningRequest, n as KodaXProtocolFamily, p as KodaXProviderConfig, r as KodaXProviderConversationSemantics, u as KodaXProviderMcpSupport, x as KodaXProviderStreamOptions, z as KodaXProviderTransport, B as KodaXReasoningEffortPreset, C as KodaXReasoningEffortRequest, D as KodaXReasoningEffortWireStrategy, F as KodaXReasoningProfile, G as KodaXReasoningRequest, H as KodaXRedactedThinkingBlock, I as KodaXReviewScale, J as KodaXRiskLevel, L as KodaXStableEffortIntent, M as KodaXStreamResult, O as KodaXTaskBudgetOverrides, R as KodaXTaskResultMetadata, S as KodaXTaskResultSource, W as KodaXTextBlock, X as KodaXThinkingBlock, Y as KodaXThinkingBudgetMap, _ as KodaXThinkingWireStrategy, a1 as KodaXToolResultBlock } from './types-chunks/types.d-Bp4Lm1jv.js';
 export { K as KODAX_DEFAULT_PROVIDER, b as KODAX_PROVIDERS, c as KODAX_PROVIDER_SNAPSHOTS, d as KODAX_REASONING_MODE_SEQUENCE, f as KODAX_STABLE_EFFORT_INTENTS, g as KodaXAnthropicCompatProvider, h as KodaXError, i as KodaXModelCapabilities, k as KodaXOpenAICompatProvider, l as KodaXProviderError, m as KodaXRateLimitError, P as ProviderName, R as ResolveWireEffortInput, o as ResolvedWireEffort, q as clearRuntimeModelProviders, r as createCustomProvider, s as effortToLegacyReasoningMode, t as getAvailableProviderNames, u as getCustomModelCapabilities, v as getCustomProvider, w as getCustomProviderList, x as getCustomProviderModelDescriptors, y as getCustomProviderModels, z as getCustomProviderNames, B as getModelCapabilities, C as getProvider, D as getProviderConfiguredCapabilityProfile, E as getProviderConfiguredReasoningCapability, F as getProviderList, G as getProviderModel, H as getProviderModelDescriptors, I as getProviderModels, L as getRuntimeModelProvider, M as getRuntimeModelProviderNames, N as isCustomProviderName, O as isKnownProvider, Q as isProviderConfigured, S as isProviderName, U as isRuntimeModelProviderName, V as listAllModelCapabilities, W as listBuiltinModelCapabilities, X as listCustomProviderModelCapabilities, _ as mapLegacyReasoningModeToEffortIntent, $ as normalizeReasoningEffortValue, a1 as parseReasoningEffortEnv, a2 as registerCustomProviders, a3 as registerModelProvider, a4 as resolveModelCapabilities, a5 as resolveProvider, a6 as resolveProviderModelDescriptors, a7 as resolveReasoningEffort, a8 as resolveReasoningEffortForModelSwitch, aa as resolveWireEffort, ab as validateCustomProviderConfig } from './types-chunks/resolver.d-CGkfRULj.js';
 import { a as CostTracker } from './types-chunks/cost-tracker.d-CBLk1fiD.js';
 export { K as KodaXLlmTimeoutConfig, p as parseTimeoutSecEnvMs, t as timeoutSecToMs } from './types-chunks/cost-tracker.d-CBLk1fiD.js';
 import { K as KodaXBaseProvider } from './types-chunks/base.d-DalIRhbb.js';
 import { C as CapabilityKind, a as CapabilityProvider, b as CapabilityResult } from './types-chunks/capability.d-3C62G8Eq.js';
-import { ap as KodaXToolExecutionContext, aW as ToolSideEffect, U as KodaXRepoIntelligenceCapability, X as KodaXRepoIntelligenceTrace, V as KodaXRepoIntelligenceMode, W as KodaXRepoIntelligenceResolvedMode, Z as KodaXRepoRoutingSignals, Q as KodaXOptions, u as KodaXContextOptions, T as KodaXProviderPolicyHints, aH as ProviderResilienceConfig, aI as ProviderResiliencePolicy, F as FailureStage, aN as ResilienceClassification, aF as ProviderExecutionState, aK as RecoveryDecision, aM as RecoveryResult, _ as KodaXResult, a2 as KodaXSessionControl, a3 as KodaXSessionMutators, A as KodaXManagedProtocolPayload, E as ExtensionRuntimeContract, aS as RuntimeDefaultsSnapshot, c as BoundExtensionRuntimeController, x as KodaXEvents, g as GoalCompleteResult, aP as ResolveKodaXManualInput, aQ as ResolveKodaXManualOptions, aR as ResolveKodaXManualResult, N as KodaXManualTopicId, M as KodaXManualTopic, d as ChildSnapshotEvent, r as KodaXChildContextBundle, s as KodaXChildExecutionResult, aX as WorkflowHostPolicy, an as KodaXTimeoutConfig } from './types-chunks/bash-prefix-extractor.d-Do_TCAmA.js';
-export { B as BASH_POLICY_SPEC, a as BashPrefixExtractor, b as BashPrefixResult, C as CapabilityRuntimeContract, e as CreateBashPrefixExtractorOptions, D as DiagnosticsRequest, f as ExtractCommandPrefixOptions, G as GoalBlockedResult, h as GoalCreateInput, i as GoalLifecycleContext, j as GoalRuntimeBinding, k as GoalRuntimeBindingDeps, l as GoalToolsContext, K as KodaXActivityEventMeta, m as KodaXAgentMode, n as KodaXAgentProfile, o as KodaXBudgetDisclosureZone, p as KodaXBudgetExtensionRequest, q as KodaXChildAgentResult, t as KodaXCompactionOverride, v as KodaXContextTokenSnapshot, w as KodaXEffectiveTaskConfig, y as KodaXLiveEventMeta, z as KodaXManagedBudgetSnapshot, H as KodaXManagedTask, I as KodaXManagedTaskRuntimeState, J as KodaXManagedTaskStatusEvent, L as KodaXManualSource, O as KodaXManualTopicInput, P as KodaXMemoryStrategy, R as KodaXOrchestrationVerdict, S as KodaXParentReductionContract, Y as KodaXRepoIntelligenceTraceEvent, $ as KodaXRoleRoundSummary, a0 as KodaXRuntimeVerificationContract, a1 as KodaXSelfManualConfig, a4 as KodaXSessionOptions, a5 as KodaXSidecarMessageEvent, a6 as KodaXSkillDynamicContextPolicy, a7 as KodaXSkillInvocationContext, a8 as KodaXSkillMap, a9 as KodaXSkillProjectionConfidence, aa as KodaXTaskCapabilityHint, ab as KodaXTaskContract, ac as KodaXTaskEvidenceArtifact, ad as KodaXTaskEvidenceBundle, ae as KodaXTaskEvidenceEntry, af as KodaXTaskRole, ag as KodaXTaskRoleAssignment, ah as KodaXTaskStatus, ai as KodaXTaskSurface, aj as KodaXTaskToolPolicy, ak as KodaXTaskVerificationContract, al as KodaXTaskVerificationCriterion, am as KodaXTaskWorkItem, ao as KodaXToolEventMeta, aq as KodaXToolVisibilityMeta, ar as KodaXToolVisibilityPolicy, as as KodaXTurnCompletedEvent, at as KodaXTurnDeliveryKind, au as KodaXTurnFailedEvent, av as KodaXTurnStartedEvent, aw as KodaXVerificationScorecard, ax as KodaXVerificationScorecardCriterion, ay as KodaXWorkflowAgentDigestEvent, az as KodaXWorkflowEventMeta, aA as KodaXWorkflowTimeoutConfig, aB as LSP_SERVERS, aC as LspServerInfo, aD as LspService, aE as LspServiceConfig, aG as ProviderRecoveryEvent, aJ as RecoveryAction, aL as RecoveryLadderStep, aO as ResilienceErrorClass, aT as TodoItem, aU as TodoList, aV as TodoStatus, aY as WorkflowInvocationAction, aZ as WorkflowInvocationPolicyDecision, a_ as WorkflowInvocationPolicyInput, a$ as WorkflowInvocationSource, b0 as WorkflowRunProgressView, b1 as WorkflowStartOutcome, b2 as WorkflowToolHost, b3 as WorkflowToolHostInlineInput, b4 as WorkflowToolHostResult, b5 as WorkflowToolHostStartResult, b6 as buildGoalRuntimeBinding, b7 as createBashPrefixExtractor, b8 as decideWorkflowInvocation, b9 as extractCommandPrefix, ba as getDefaultLspService, bb as makeDisabledGoalToolsContext, bc as providerResilienceConfigFromTimeouts, bd as shutdownDefaultLspService, be as withGoalBeforeNextTurn, bf as withGoalStopHook, bg as workflowStartOutcomeConsumesTurn } from './types-chunks/bash-prefix-extractor.d-Do_TCAmA.js';
+import { aq as KodaXToolExecutionContext, aX as ToolSideEffect, o as KodaXAgentScope, V as KodaXRepoIntelligenceCapability, Y as KodaXRepoIntelligenceTrace, W as KodaXRepoIntelligenceMode, X as KodaXRepoIntelligenceResolvedMode, _ as KodaXRepoRoutingSignals, R as KodaXOptions, v as KodaXContextOptions, U as KodaXProviderPolicyHints, aI as ProviderResilienceConfig, aJ as ProviderResiliencePolicy, F as FailureStage, aO as ResilienceClassification, aG as ProviderExecutionState, aL as RecoveryDecision, aN as RecoveryResult, $ as KodaXResult, a3 as KodaXSessionControl, a4 as KodaXSessionMutators, H as KodaXManagedProtocolPayload, E as ExtensionRuntimeContract, aT as RuntimeDefaultsSnapshot, c as BoundExtensionRuntimeController, y as KodaXEvents, g as GoalCompleteResult, aQ as ResolveKodaXManualInput, aR as ResolveKodaXManualOptions, aS as ResolveKodaXManualResult, O as KodaXManualTopicId, N as KodaXManualTopic, d as ChildSnapshotEvent, s as KodaXChildContextBundle, t as KodaXChildExecutionResult, aY as WorkflowHostPolicy, ao as KodaXTimeoutConfig } from './types-chunks/bash-prefix-extractor.d-CZW9fRoa.js';
+export { B as BASH_POLICY_SPEC, a as BashPrefixExtractor, b as BashPrefixResult, C as CapabilityRuntimeContract, e as CreateBashPrefixExtractorOptions, D as DiagnosticsRequest, f as ExtractCommandPrefixOptions, G as GoalBlockedResult, h as GoalCreateInput, i as GoalLifecycleContext, j as GoalRuntimeBinding, k as GoalRuntimeBindingDeps, l as GoalToolsContext, K as KodaXActivityEventMeta, m as KodaXAgentMode, n as KodaXAgentProfile, p as KodaXBudgetDisclosureZone, q as KodaXBudgetExtensionRequest, r as KodaXChildAgentResult, u as KodaXCompactionOverride, w as KodaXContextTokenSnapshot, x as KodaXEffectiveTaskConfig, z as KodaXLiveEventMeta, A as KodaXManagedBudgetSnapshot, I as KodaXManagedTask, J as KodaXManagedTaskRuntimeState, L as KodaXManagedTaskStatusEvent, M as KodaXManualSource, P as KodaXManualTopicInput, Q as KodaXMemoryStrategy, S as KodaXOrchestrationVerdict, T as KodaXParentReductionContract, Z as KodaXRepoIntelligenceTraceEvent, a0 as KodaXRoleRoundSummary, a1 as KodaXRuntimeVerificationContract, a2 as KodaXSelfManualConfig, a5 as KodaXSessionOptions, a6 as KodaXSidecarMessageEvent, a7 as KodaXSkillDynamicContextPolicy, a8 as KodaXSkillInvocationContext, a9 as KodaXSkillMap, aa as KodaXSkillProjectionConfidence, ab as KodaXTaskCapabilityHint, ac as KodaXTaskContract, ad as KodaXTaskEvidenceArtifact, ae as KodaXTaskEvidenceBundle, af as KodaXTaskEvidenceEntry, ag as KodaXTaskRole, ah as KodaXTaskRoleAssignment, ai as KodaXTaskStatus, aj as KodaXTaskSurface, ak as KodaXTaskToolPolicy, al as KodaXTaskVerificationContract, am as KodaXTaskVerificationCriterion, an as KodaXTaskWorkItem, ap as KodaXToolEventMeta, ar as KodaXToolVisibilityMeta, as as KodaXToolVisibilityPolicy, at as KodaXTurnCompletedEvent, au as KodaXTurnDeliveryKind, av as KodaXTurnFailedEvent, aw as KodaXTurnStartedEvent, ax as KodaXVerificationScorecard, ay as KodaXVerificationScorecardCriterion, az as KodaXWorkflowAgentDigestEvent, aA as KodaXWorkflowEventMeta, aB as KodaXWorkflowTimeoutConfig, aC as LSP_SERVERS, aD as LspServerInfo, aE as LspService, aF as LspServiceConfig, aH as ProviderRecoveryEvent, aK as RecoveryAction, aM as RecoveryLadderStep, aP as ResilienceErrorClass, aU as TodoItem, aV as TodoList, aW as TodoStatus, aZ as WorkflowInvocationAction, a_ as WorkflowInvocationPolicyDecision, a$ as WorkflowInvocationPolicyInput, b0 as WorkflowInvocationSource, b1 as WorkflowRunProgressView, b2 as WorkflowStartOutcome, b3 as WorkflowToolHost, b4 as WorkflowToolHostInlineInput, b5 as WorkflowToolHostResult, b6 as WorkflowToolHostStartResult, b7 as buildGoalRuntimeBinding, b8 as createBashPrefixExtractor, b9 as decideWorkflowInvocation, ba as drainPendingSwaps, bb as extractCommandPrefix, bc as getDefaultLspService, bd as hasPendingSwap, be as makeDisabledGoalToolsContext, bf as providerResilienceConfigFromTimeouts, bg as resolveConstructedAgent, bh as shutdownDefaultLspService, bi as withGoalBeforeNextTurn, bj as withGoalStopHook, bk as workflowStartOutcomeConsumesTurn } from './types-chunks/bash-prefix-extractor.d-CZW9fRoa.js';
 export { CreateFileArtifactFromPathOptions, CreateImageArtifactFromPathOptions, CreateVideoArtifactFromPathOptions, EnqueueWithArtifactsInput, GetModelInputCapabilitiesInput, ImageResizeError, KODAX_FILE_MEDIA_TYPES, KODAX_IMAGE_MEDIA_TYPES, KODAX_VIDEO_MEDIA_TYPES, KodaXInputCapabilityStatus, KodaXMediaError, KodaXMediaErrorCode, KodaXMediaErrorOptions, KodaXModalityInputCapability, MAX_DIMENSION, ModelInputCapabilities, NormalizeImageOptions, NormalizedImage, PASTE_TMP_DIR_ENV, PASTE_TMP_TTL_MS, PersistImageAsBlockOptions, TARGET_RAW_SIZE_BYTES, ValidateInputArtifactsOptions, createFileArtifactFromPath, createImageArtifactFromPath, createVideoArtifactFromPath, enqueueWithArtifacts, getModelInputCapabilities, inferImageMediaType, inferVideoMediaType, normalizePastedImage, persistImageAsBlock, prunePasteTmpDir, readAndNormalizeClipboardImage, readClipboardImage, validateInputArtifactsForModel } from './sdk-media.js';
-import { h as AgentMessage, f as Agent, bo as RunnerLlmReturn, a4 as KodaXJsonValue, U as KodaXExtensionSessionRecord, W as KodaXExtensionStore, a2 as KodaXInputArtifact, bw as SessionErrorMetadata, ba as QualityInvariant, bS as ToolCapability, bk as RunnableTool, bp as RunnerToolCall, _ as KodaXGoalState, c4 as WorkflowEventCorrelation, J as Guardrail, cD as WorkflowTaskSummaryEventUpdate, bZ as WorkflowAgentBackend, cc as WorkflowModule, cs as WorkflowProcessTrackerOptions, c3 as WorkflowEvent, c1 as WorkflowArtifactRef, ca as WorkflowMeta, cu as WorkflowRunState, b$ as WorkflowApproval, cg as WorkflowProcessEvent, c0 as WorkflowApprovalSummary, c8 as WorkflowLimits, cm as WorkflowProcessSnapshot } from './types-chunks/process.d-DXkRD7hj.js';
-export { j as AgentReasoningProfile, l as AgentTool, m as AskUserAnswer, n as AskUserCustomInputAnswer, o as AskUserMultiOptions, p as AskUserQuestionItem, q as AskUserQuestionOptions, r as AskUserSelectionAnswer, s as CompactionAnchor, v as CompactionResult, x as CompactionUpdate, L as Handoff, N as InMemorySessionOptions, S as KodaXCompactMemoryProgress, T as KodaXCompactMemorySeed, V as KodaXExtensionSessionState, Y as KodaXFileInputArtifact, a0 as KodaXImageInputArtifact, a1 as KodaXImageMediaType, a3 as KodaXInputArtifactSource, a6 as KodaXSessionArtifactLedgerEntry, a7 as KodaXSessionBranchSummaryEntry, a9 as KodaXSessionCompactionEntry, aa as KodaXSessionData, ab as KodaXSessionEntry, ac as KodaXSessionEntryBase, ae as KodaXSessionLabelEntry, af as KodaXSessionLineage, ag as KodaXSessionMessageEntry, ah as KodaXSessionMeta, ai as KodaXSessionNavigationOptions, aj as KodaXSessionRuntimeInfo, ak as KodaXSessionScope, al as KodaXSessionStorage, am as KodaXSessionTreeNode, an as KodaXSessionUiHistoryItem, ao as KodaXSessionUiHistoryItemType, ap as KodaXSessionUiTextHistoryItem, aq as KodaXSessionUiTextHistoryItemType, ar as KodaXSessionUiToolCall, as as KodaXSessionUiToolCallStatus, at as KodaXSessionUiToolGroupHistoryItem, au as KodaXSessionWorkspaceKind, av as KodaXVideoInputArtifact, aw as KodaXVideoMediaType, b5 as MessageEntry, b8 as PresetDispatcher, bd as ReasoningDepth, bh as RunEvent, bi as RunOptions, bj as RunResult, bl as Runner, bt as Session, bv as SessionEntry, bx as SessionExtension, by as SessionForkOptions, cQ as createAgent, cR as createHandoff, cS as createInMemorySession, d8 as registerPresetDispatcher } from './types-chunks/process.d-DXkRD7hj.js';
-import { y as MessageQueue, X as WorkflowScriptManifest, F as WorkflowCapsule, I as WorkflowCapsuleIntent, H as WorkflowCapsuleInputs, N as WorkflowCapsuleRequirements, J as WorkflowCapsuleProvenance, w as ManagedWorkflowSnapshot$1, V as WorkflowRunManager$1, R as WorkflowQualityLintFinding, O as WorkflowPatternId } from './types-chunks/run-manager.d-CYY3pZeJ.js';
-export { C as CompactionContext, a as CompactionEntry, b as CompactionEntryPayload, c as CompactionPolicy, D as DefaultSummaryCompaction, e as DefaultSummaryCompactionOptions, K as KODAX_API_MIN_INTERVAL, f as KODAX_DEFAULT_TIMEOUT, g as KODAX_HARD_TIMEOUT, h as KODAX_MAX_INCOMPLETE_RETRIES, j as KODAX_MAX_RETRIES, k as KODAX_MAX_TOKENS, l as KODAX_RETRY_BASE_DELAY, m as KODAX_STAGGER_DELAY, L as LINEAGE_ENTRY_TYPES, n as LineageArtifactLedgerPayload, o as LineageCompaction, p as LineageCompactionDelegates, q as LineageEntryType, r as LineageExtension, s as LineageLabelPayload, t as LineageTreeNode, x as ManagedWorkflowStatus, P as PROMISE_PATTERN, Y as appendSessionLineageLabel, $ as applySessionCompaction, a0 as archiveOldIslands, a2 as buildSessionTree, a4 as cleanupIncompleteToolCalls, a5 as countActiveLineageMessages, a6 as countTokens, a7 as createSessionLineage, ab as estimateTokens, ac as extractArtifactLedger, ae as extractTitleFromMessages, af as findPreviousUserEntryId, ag as forkSessionLineage, ah as generateSessionId, ai as getAgentConfigHome, aj as getAgentConfigPath, ak as getAppDataDir, an as getSessionLineagePath, ao as getSessionMessagesFromLineage, aq as mergeArtifactLedger, as as resolveSessionLineageTarget, at as rewindSessionLineage, au as setAgentConfigHome, av as setSessionLineageActiveEntry, aw as validateAndFixToolHistory } from './types-chunks/run-manager.d-CYY3pZeJ.js';
+import { h as AgentMessage, f as Agent, bp as RunnerLlmReturn, a4 as KodaXJsonValue, U as KodaXExtensionSessionRecord, W as KodaXExtensionStore, a2 as KodaXInputArtifact, bx as SessionErrorMetadata, bb as QualityInvariant, bT as ToolCapability, bl as RunnableTool, bq as RunnerToolCall, _ as KodaXGoalState, c5 as WorkflowEventCorrelation, J as Guardrail, cE as WorkflowTaskSummaryEventUpdate, b_ as WorkflowAgentBackend, cd as WorkflowModule, ct as WorkflowProcessTrackerOptions, c4 as WorkflowEvent, c2 as WorkflowArtifactRef, cb as WorkflowMeta, cv as WorkflowRunState, c0 as WorkflowApproval, ch as WorkflowProcessEvent, c1 as WorkflowApprovalSummary, c9 as WorkflowLimits, cn as WorkflowProcessSnapshot } from './types-chunks/process.d-CY2g03Mb.js';
+export { j as AgentReasoningProfile, l as AgentTool, m as AskUserAnswer, n as AskUserCustomInputAnswer, o as AskUserMultiOptions, p as AskUserQuestionItem, q as AskUserQuestionOptions, r as AskUserSelectionAnswer, s as CompactionAnchor, v as CompactionResult, x as CompactionUpdate, L as Handoff, N as InMemorySessionOptions, S as KodaXCompactMemoryProgress, T as KodaXCompactMemorySeed, V as KodaXExtensionSessionState, Y as KodaXFileInputArtifact, a0 as KodaXImageInputArtifact, a1 as KodaXImageMediaType, a3 as KodaXInputArtifactSource, a6 as KodaXSessionArtifactLedgerEntry, a7 as KodaXSessionBranchSummaryEntry, a9 as KodaXSessionCompactionEntry, aa as KodaXSessionData, ab as KodaXSessionEntry, ac as KodaXSessionEntryBase, ae as KodaXSessionLabelEntry, af as KodaXSessionLineage, ag as KodaXSessionMessageEntry, ah as KodaXSessionMeta, ai as KodaXSessionNavigationOptions, ak as KodaXSessionRuntimeInfo, al as KodaXSessionScope, am as KodaXSessionStorage, an as KodaXSessionTreeNode, ao as KodaXSessionUiHistoryItem, ap as KodaXSessionUiHistoryItemType, aq as KodaXSessionUiTextHistoryItem, ar as KodaXSessionUiTextHistoryItemType, as as KodaXSessionUiToolCall, at as KodaXSessionUiToolCallStatus, au as KodaXSessionUiToolGroupHistoryItem, av as KodaXSessionWorkspaceKind, aw as KodaXVideoInputArtifact, ax as KodaXVideoMediaType, b6 as MessageEntry, b9 as PresetDispatcher, be as ReasoningDepth, bi as RunEvent, bj as RunOptions, bk as RunResult, bm as Runner, bu as Session, bw as SessionEntry, by as SessionExtension, bz as SessionForkOptions, cR as createAgent, cS as createHandoff, cT as createInMemorySession, d9 as registerPresetDispatcher } from './types-chunks/process.d-CY2g03Mb.js';
+import { y as MessageQueue, X as WorkflowScriptManifest, F as WorkflowCapsule, I as WorkflowCapsuleIntent, H as WorkflowCapsuleInputs, N as WorkflowCapsuleRequirements, J as WorkflowCapsuleProvenance, w as ManagedWorkflowSnapshot$1, V as WorkflowRunManager$1, R as WorkflowQualityLintFinding, O as WorkflowPatternId } from './types-chunks/run-manager.d-CYTnWhZY.js';
+export { C as CompactionContext, a as CompactionEntry, b as CompactionEntryPayload, c as CompactionPolicy, D as DefaultSummaryCompaction, e as DefaultSummaryCompactionOptions, K as KODAX_API_MIN_INTERVAL, f as KODAX_DEFAULT_TIMEOUT, g as KODAX_HARD_TIMEOUT, h as KODAX_MAX_INCOMPLETE_RETRIES, j as KODAX_MAX_RETRIES, k as KODAX_MAX_TOKENS, l as KODAX_RETRY_BASE_DELAY, m as KODAX_STAGGER_DELAY, L as LINEAGE_ENTRY_TYPES, n as LineageArtifactLedgerPayload, o as LineageCompaction, p as LineageCompactionDelegates, q as LineageEntryType, r as LineageExtension, s as LineageLabelPayload, t as LineageTreeNode, x as ManagedWorkflowStatus, P as PROMISE_PATTERN, Y as appendSessionLineageLabel, $ as applySessionCompaction, a0 as archiveOldIslands, a2 as buildSessionTree, a4 as cleanupIncompleteToolCalls, a5 as countActiveLineageMessages, a6 as countTokens, a7 as createSessionLineage, ab as estimateTokens, ac as extractArtifactLedger, ae as extractTitleFromMessages, af as findPreviousUserEntryId, ag as forkSessionLineage, ah as generateSessionId, ai as getAgentConfigHome, aj as getAgentConfigPath, ak as getAppDataDir, an as getSessionLineagePath, ao as getSessionMessagesFromLineage, aq as mergeArtifactLedger, as as resolveSessionLineageTarget, at as rewindSessionLineage, au as setAgentConfigHome, av as setSessionLineageActiveEntry, aw as validateAndFixToolHistory } from './types-chunks/run-manager.d-CYTnWhZY.js';
 import { b as McpServersConfig } from './types-chunks/config.d-CJy1WENT.js';
 export { M as McpConnectMode, a as McpServerConfig, c as McpTransportKind } from './types-chunks/config.d-CJy1WENT.js';
 import { k as McpProviderOptions, c as McpCapabilityProvider, l as McpReverseCapabilities, m as McpRoot } from './types-chunks/manager.d-DBD7SOTT.js';
 export { A as AuthorizationServerMetadata, D as DiscoveredOAuthEndpoints, M as McpAuthRequiredError, a as McpCapabilityDescriptor, b as McpCapabilityKind, d as McpCapabilityRisk, e as McpCatalogItem, f as McpElicitRequest, g as McpElicitResult, h as McpExpiredSessionError, i as McpIcon, j as McpManager, n as McpSamplingRequest, o as McpSamplingResult, p as McpServerCatalog, q as McpServerCatalogSnapshot, r as McpServerLogs, s as McpServerRuntime, t as McpServerRuntimeDiagnostics, u as McpServerStatus, v as McpServerToolList, w as McpToolTaskSupport, x as McpTransport, y as McpTransportEvents, O as OAuthClientInfo, z as OAuthLoginConsent, P as PerformOAuthLoginOptions, B as ProtectedResourceMetadata, W as WwwAuthenticateChallenge, C as buildInitializeCapabilities, E as createMcpCapabilityId, F as createMcpManager, G as createMcpTransport, H as defaultMcpCacheDir, I as discoverAuthorizationServerMetadata, J as discoverOAuthEndpoints, K as discoverProtectedResourceMetadata, L as extractInsufficientScope, N as extractResourceMetadataUrl, Q as getMcpCachePaths, R as loadValidToken, S as normalizeMcpCapabilityId, T as parseMcpCapabilityId, U as performOAuthLogin, V as registerOAuthClient, X as searchMcpCatalog } from './types-chunks/manager.d-DBD7SOTT.js';
-import { h as AutoRules, T as ToolCallSignal, S as SignalCollector } from './types-chunks/guardrail.d-DRp0Lqvx.js';
-export { C as AUTO_MODE_DENIAL_CONSECUTIVE_THRESHOLD, i as AUTO_MODE_DENIAL_CUMULATIVE_THRESHOLD, A as AgentsFile, a as AutoModeAskUser, b as AutoModeAskUserVerdict, D as AutoModeDenialTracker, c as AutoModeEngine, d as AutoModeGuardrailConfig, e as AutoModeSharedState, f as AutoModeStats, g as AutoModeToolGuardrail, E as BREAKER_ERROR_THRESHOLD, W as BREAKER_WINDOW_MS, j as CircuitBreaker, K as KodaXMcpConnectMode, k as KodaXMcpServerConfig, l as KodaXMcpServersConfig, m as KodaXMcpTransport, L as LoadAgentsOptions, n as LoadedRulesSource, R as RulesLoadError, o as RulesLoadResult, p as SkippedRulesSource, q as TrustState, J as autoModeDenialShouldFallback, M as breakerShouldFallback, r as collectAllSignals, s as computeRulesFingerprint, v as createAutoModeDenialTracker, t as createAutoModeToolGuardrail, u as createCircuitBreaker, w as formatAgentsForPrompt, x as getKodaxGlobalDir, y as loadAgentsFiles, z as loadAutoRules, B as parseAutoRules, F as readTrustState, G as recordAutoModeAllow, H as recordAutoModeBlock, I as recordBreakerError, N as trustProjectRules } from './types-chunks/guardrail.d-DRp0Lqvx.js';
-import { g as ToolGuardrail } from './types-chunks/types.d-DFf4Sfys.js';
+import { h as AutoRules, T as ToolCallSignal, S as SignalCollector } from './types-chunks/guardrail.d-MR6LwMB2.js';
+export { C as AUTO_MODE_DENIAL_CONSECUTIVE_THRESHOLD, i as AUTO_MODE_DENIAL_CUMULATIVE_THRESHOLD, A as AgentsFile, a as AutoModeAskUser, b as AutoModeAskUserVerdict, D as AutoModeDenialTracker, c as AutoModeEngine, d as AutoModeGuardrailConfig, e as AutoModeSharedState, f as AutoModeStats, g as AutoModeToolGuardrail, E as BREAKER_ERROR_THRESHOLD, W as BREAKER_WINDOW_MS, j as CircuitBreaker, K as KodaXMcpConnectMode, k as KodaXMcpServerConfig, l as KodaXMcpServersConfig, m as KodaXMcpTransport, L as LoadAgentsOptions, n as LoadedRulesSource, R as RulesLoadError, o as RulesLoadResult, p as SkippedRulesSource, q as TrustState, J as autoModeDenialShouldFallback, M as breakerShouldFallback, r as collectAllSignals, s as computeRulesFingerprint, v as createAutoModeDenialTracker, t as createAutoModeToolGuardrail, u as createCircuitBreaker, w as formatAgentsForPrompt, x as getKodaxGlobalDir, y as loadAgentsFiles, z as loadAutoRules, B as parseAutoRules, F as readTrustState, G as recordAutoModeAllow, H as recordAutoModeBlock, I as recordBreakerError, N as trustProjectRules } from './types-chunks/guardrail.d-MR6LwMB2.js';
+import { g as ToolGuardrail } from './types-chunks/types.d-1CnTg7Sd.js';
 import { Diagnostic } from 'vscode-languageserver-protocol';
 import '@anthropic-ai/sdk';
 import 'openai';
 import './types-chunks/types.d-vJExiRje.js';
 
 /**
- * KodaX Core Errors
+ * KodaX Constructed-World types (FEATURE_087, v0.7.28).
  *
- * 错误类型体系 - 提供结构化的错误处理
+ * Runtime-generated capabilities (tools / agents / skills / ...) live in
+ * `.kodax/constructed/` and are loaded into the same registries as builtin
+ * primitives. v0.7.28 only ships tool generation (FEATURE_088); other kinds
+ * land in FEATURE_089 / FEATURE_090.
+ *
+ * Cross-references:
+ *   - DD §14 — lifecycle, security model, registry merge semantics.
+ *   - docs/features/v0.7.28.md — capability schema, generation flow.
  */
-/** 基础 KodaX 错误类 */
-declare class KodaXError extends Error {
+
+/**
+ * Handler script source. v0.7.28 limits language to `'javascript'` so that
+ * `loadHandler()` can `await import()` the file directly without an
+ * intermediate TS → JS compile step (no esbuild / tsx dependency).
+ *
+ * TypeScript handlers are explicitly out of scope; Coding Agent generates
+ * JS strings on the wire.
+ */
+interface ScriptSource {
+    readonly kind: 'script';
+    readonly language: 'javascript';
     readonly code: string;
-    constructor(message: string, code?: string);
-}
-/** 工具执行错误 */
-declare class KodaXToolError extends KodaXError {
-    readonly toolName: string;
-    readonly toolId?: string | undefined;
-    constructor(message: string, toolName: string, toolId?: string | undefined);
 }
-/** 会话错误 */
-declare class KodaXSessionError extends KodaXError {
-    readonly sessionId?: string | undefined;
-    constructor(message: string, sessionId?: string | undefined);
-}
-/** 终端不支持错误 */
-declare class KodaXTerminalError extends KodaXError {
-    /** 建议的替代命令 */
-    readonly suggestions: string[];
-    constructor(message: string, suggestions?: string[]);
-}
-
 /**
- * KodaX Error Classification
+ * Capability declaration.
  *
- * 错误分类系统 - 决定适当的恢复策略
+ * v0.7.28 ships the single-dimension form: a whitelist of builtin tool
+ * names that the handler may invoke through `ctx.tools.<name>(...)`.
+ * All I/O — fs / net / env — must flow through builtin tools (`read` /
+ * `write` / `bash` / etc.); handlers do not receive direct `ctx.fs` /
+ * `ctx.net` / `ctx.env` entry points.
+ *
+ * Forward-compatible evolution: if the future demands path/domain-level
+ * constraints, this can grow to `(string | { name; constraints })[]`
+ * without breaking existing manifests.
  */
-declare enum ErrorCategory {
-    TRANSIENT = 0,// 临时错误，可重试（速率限制、超时、网络错误）
-    PERMANENT = 1,// 永久错误，不可重试（认证失败、无效请求）
-    TOOL_CALL_ID = 2,// 特定的 tool_call_id 不匹配错误
-    USER_ABORT = 3
+interface Capabilities {
+    readonly tools: readonly string[];
 }
-interface ErrorClassification {
-    category: ErrorCategory;
-    retryable: boolean;
-    maxRetries: number;
-    retryDelay: number;
-    shouldCleanup: boolean;
+/**
+ * Tool-kind artifact body (the `content` of `ConstructionArtifact` when
+ * `kind === 'tool'`).
+ */
+interface ToolContent {
+    readonly description: string;
+    readonly inputSchema: Record<string, unknown>;
+    readonly capabilities: Capabilities;
+    readonly handler: ScriptSource;
+    /**
+     * Per-tool timeout override. Defaults to {@link DEFAULT_HANDLER_TIMEOUT_MS}
+     * when omitted. Bounded by AbortController in `loadHandler()`.
+     */
+    readonly timeoutMs?: number;
 }
 /**
- * 分类错误以确定适当的恢复策略
+ * Default handler timeout. Picked to match the historical ceiling on
+ * builtin streaming tools (30s); revisit if a constructed tool demands
+ * longer-running computation.
  */
-declare function classifyError(error: Error): ErrorClassification;
-
+declare const DEFAULT_HANDLER_TIMEOUT_MS = 30000;
 /**
- * KodaX Core Constants
+ * Lifecycle state on disk. Drives both the startup glob filter and the
+ * `revoke()` semantics. See DD §14.1 — file system is the single source
+ * of truth; no separate `_manifest.json` index file (C4 decision).
  */
-
-/** Prefix used to detect user-cancelled tool results in the agent loop. */
-declare const CANCELLED_TOOL_RESULT_PREFIX = "[Cancelled]";
-/** Standard cancellation message returned when a tool is cancelled by the user. */
-declare const CANCELLED_TOOL_RESULT_MESSAGE = "[Cancelled] Operation cancelled by user";
-
+type ArtifactStatus = 'staged' | 'active' | 'revoked';
 /**
- * KodaX Tool Types
+ * Reference to a tool by stable id. v0.7.31 (FEATURE_089) introduces
+ * Agent manifests that bundle tool refs rather than inline tool bodies;
+ * the resolver expands these refs to concrete `KodaXToolDefinition`
+ * instances at activate time.
+ *
+ * `ref` shape:
+ *   - `builtin:<name>`            — a tool from the static registry
+ *     (e.g. `builtin:read`, `builtin:bash`)
+ *   - `constructed:<name>@<ver>`  — a previously-activated constructed tool
  */
-
+interface ToolRef {
+    readonly ref: string;
+}
 /**
- * Progress yield from a streaming (async generator) tool.
- * Each yield appears as a real-time status update in the REPL transcript.
+ * Reference to a Guardrail by stable id. The Layer A `Guardrail`
+ * declaration is name-only (no runtime hooks); resolvers map known
+ * names to constructed `ToolGuardrail` / `InputGuardrail` /
+ * `OutputGuardrail` instances at activation time.
  */
-interface ToolProgress {
-    readonly stage: string;
-    readonly message: string;
+interface GuardrailRef {
+    readonly kind: 'input' | 'output' | 'tool';
+    readonly ref: string;
 }
 /**
- * Final result a tool may return. Either a plain string (the default for
- * text-only tools) OR a typed-array form for multimodal returns (e.g.
- * `read` on an image path returns `[{type:'text',...}, {type:'image',...}]`).
- * Providers serialize each shape to their wire format; OpenAI-compat
- * gateways downgrade image items to a placeholder rather than rejecting.
- *
- * The array form mirrors claudecode's FileReadTool image return — Claude
- * Code packs image data into `tool_result` content so the model can
- * re-fetch images via the tool path. See
- * `c:/Works/claudecode/src/tools/FileReadTool/FileReadTool.ts:866-891`.
+ * Reference to a handoff target by stable id (another constructed agent
+ * or a builtin role). The resolver expands `target.ref` to the actual
+ * `Agent` declaration at admission time so the handoff DAG check
+ * (`handoffLegality` invariant) sees the full graph.
  */
-type ToolResult = string | readonly KodaXToolResultContentItem[];
-/** Standard tool handler — returns a final result (text or multimodal). */
-type ToolHandlerSync = (input: Record<string, unknown>, context: KodaXToolExecutionContext) => Promise<ToolResult>;
-/** Streaming tool handler — yields progress updates, returns final result. */
-type ToolHandlerStreaming = (input: Record<string, unknown>, context: KodaXToolExecutionContext) => AsyncGenerator<ToolProgress, ToolResult, void>;
-/** Union of both handler types. Existing tools use ToolHandlerSync; new long-running tools may use ToolHandlerStreaming. */
-type ToolHandler = ToolHandlerSync | ToolHandlerStreaming;
-
+interface AgentHandoffRef {
+    readonly target: {
+        readonly ref: string;
+    };
+    readonly kind: 'continuation' | 'as-tool';
+    readonly description?: string;
+}
 /**
- * FEATURE_149 (v0.7.38) — interrupt-on-submit policy for in-flight tools.
- *
- * Controls whether submitting a new prompt while THIS tool is mid-execution
- * triggers a fast-abort of the current agent round (so the new prompt starts
- * immediately) or queues the prompt to run after the tool resolves.
+ * Reasoning profile declaration mirroring the Layer A
+ * `AgentReasoningProfile`. Kept structurally identical so the resolver
+ * passes the value through without re-shaping.
+ */
+interface AgentReasoningRef {
+    readonly default: 'quick' | 'balanced' | 'deep';
+    readonly max?: 'quick' | 'balanced' | 'deep';
+    readonly escalateOnRevise?: boolean;
+}
+/**
+ * Sandbox test case. Used by `sandbox_test_agent` to verify a
+ * constructed agent before it can activate. Each case feeds `input`
+ * to a sandbox Runner instance and grades the agent's final output:
  *
- *   - `'cancel'` — long-running tools whose work the user is likely to want
- *     to abandon when they redirect (e.g., `bash` running a 30s script,
- *     `dispatch_child_task` synchronously awaiting a child, sleep-style
- *     tools). InkREPL submit handler aborts the round immediately.
+ *   - `expectMatch`     — final text must match this regex (string form)
+ *   - `expectNotMatch`  — final text must NOT match this regex
+ *   - `expectFinalText` — exact substring match (case-sensitive)
  *
- *   - `'wait'` (default) — atomic / fast tools (read, grep, glob, write,
- *     edit, …) where waiting for completion is cheaper than aborting and
- *     redoing.
+ * At least one of the three expect-fields must be present; the cases
+ * are graded by `runSandboxAgentTest()` (FEATURE_089 Phase 3.5).
+ */
+interface AgentTestCase {
+    readonly id: string;
+    readonly input: string;
+    readonly expectMatch?: string;
+    readonly expectNotMatch?: string;
+    readonly expectFinalText?: string;
+}
+/**
+ * Agent-kind artifact body (the `content` of `ConstructionArtifact`
+ * when `kind === 'agent'`).
  *
- * Mirrors Claude Code `interruptBehavior` (`utils/handlePromptSubmit.ts`).
+ * FEATURE_089 (v0.7.31): all fields except `instructions` are optional;
+ * a minimal "echo agent" can be expressed as `{ instructions: '...' }`.
+ * Tool / handoff / guardrail refs are resolved at admission time
+ * (Runner.admit's 5-step audit expands them and feeds the resolved
+ * Agent through the invariant chain).
  */
-type ToolInterruptBehavior = 'cancel' | 'wait';
-interface LocalToolDefinition extends KodaXToolDefinition {
-    handler: ToolHandler;
+interface AgentContent {
+    readonly instructions: string;
+    readonly tools?: readonly ToolRef[];
+    readonly handoffs?: readonly AgentHandoffRef[];
+    readonly reasoning?: AgentReasoningRef;
+    readonly guardrails?: readonly GuardrailRef[];
+    readonly model?: string;
+    readonly provider?: string;
+    readonly effort?: KodaXWireReasoningEffort;
     /**
-     * v0.7.42 — Required declarative side-effect class. See
-     * {@link ToolSideEffect} for category definitions and rationale. Plan
-     * mode and SDK embedders' permission brokers consume this; failure to
-     * declare is a TypeScript error (by design — `sideEffect` is required,
-     * not optional, to prevent silent drift when new tools are added).
+     * FEATURE_191 — one-sentence human-readable summary surfaced in the
+     * Worker system prompt's `=== Available specialist agents ===`
+     * block (FEATURE_191 A.3) and in `/agents list` UIs. Frontmatter
+     * `description` field of `~/.kodax/agents/<name>.md` and the
+     * `name`-paired argument of `KodaXExtensionAPI.registerAgent`
+     * funnel into this field. Optional for backward compatibility with
+     * FEATURE_089 minimal-agent shape (`{ instructions: '...' }`);
+     * the SP block renders `(no description)` when absent.
      */
-    sideEffect: ToolSideEffect;
+    readonly description?: string;
     /**
-     * v0.7.42 — Optional plan-mode override.
-     *
-     *   - `undefined` (default): plan-mode permits only `sideEffect ===
-     *     'readonly'` tools.
-     *   - `true`: explicitly permitted in plan mode even when sideEffect is
-     *     not `'readonly'`. Reserve for tools whose effect is itself part of
-     *     the planning loop (`exit_plan_mode`, `task_stop`, `todo_update`,
-     *     `todo_create`, `ask_user_question`).
-     *   - `false`: explicitly blocked in plan mode even when sideEffect is
-     *     `'readonly'`. Rare — useful for read-only tools whose output would
-     *     leak content the planner should not see.
+     * Optional structured-output schema mirroring `Agent.outputSchema`.
+     * Pure pass-through to the runtime — admission does not validate
+     * shape semantics here, only well-formed JSON.
      */
-    planModeAllowed?: boolean;
+    readonly outputSchema?: Record<string, unknown>;
     /**
-     * FEATURE_149 (v0.7.38) — submit-time interrupt policy. See
-     * {@link ToolInterruptBehavior}. Default `'wait'` when undefined.
+     * Optional sandbox test cases. When present, `sandbox_test_agent`
+     * runs them; when absent, the test step performs only the static
+     * checks (manifest schema + admission audit).
      */
-    interruptBehavior?: ToolInterruptBehavior;
+    readonly testCases?: readonly AgentTestCase[];
     /**
-     * Progressive disclosure — when `true`, the tool's full description is
-     * replaced with `searchHint` (a one-line summary) in the LLM-visible
-     * tool schema until the per-session unlock Set marks the tool name as
+     * Maximum total budget (iteration count) the agent may consume.
+     * Plumbed onto the resolved `AgentManifest.maxBudget` and clamped by
+     * `budgetCeiling` invariant during admission.
+     */
+    readonly maxBudget?: number;
+    /**
+     * Voluntary additional invariants the LLM declares this agent
+     * commits to. Plumbed onto `AgentManifest.declaredInvariants`;
+     * unioned on top of the required set during admission.
+     */
+    readonly declaredInvariants?: readonly string[];
+}
+/**
+ * Persisted artifact shape (one JSON file per name/version under
+ * `.kodax/constructed/<kind>s/<name>/<version>.json`).
+ *
+ * Discriminated union over `kind`:
+ *   - `kind: 'tool'`  — v0.7.28 (FEATURE_088) tool generation
+ *   - `kind: 'agent'` — v0.7.31 (FEATURE_089) agent generation; passes
+ *                       through `Runner.admit()` at activation time
+ *
+ * Lifecycle fields (status / timestamps / contentHash / sourceAgent /
+ * signedBy) are common to all kinds.
+ */
+type ConstructionArtifact = ToolArtifact | AgentArtifact;
+interface ConstructionArtifactBase {
+    readonly name: string;
+    readonly version: string;
+    status: ArtifactStatus;
+    readonly signedBy?: string;
+    readonly createdAt: number;
+    readonly sourceAgent?: string;
+    testedAt?: number;
+    activatedAt?: number;
+    revokedAt?: number;
+    /**
+     * SHA-256 of `JSON.stringify(content)` captured at activate time.
+     * `rehydrateActiveArtifacts()` recomputes and compares — a mismatch
+     * indicates the manifest was edited between activation and the next
+     * boot (naive cross-session tampering, e.g. an LLM rewriting the .json
+     * via the Write tool without recomputing the hash). Mismatched
+     * artifacts are skipped at rehydrate with a stderr warning. This is
+     * NOT a defense against a coordinated attacker who recomputes the
+     * hash; the threat model is single-user CLI integrity, not multi-user
+     * supply chain.
+     */
+    contentHash?: string;
+}
+interface ToolArtifact extends ConstructionArtifactBase {
+    readonly kind: 'tool';
+    readonly content: ToolContent;
+}
+interface AgentArtifact extends ConstructionArtifactBase {
+    readonly kind: 'agent';
+    readonly content: AgentContent;
+}
+/**
+ * Returned by {@link ConstructionRuntime.stage}; opaque handle that
+ * downstream `test()` / `activate()` calls bind to.
+ */
+interface StagedHandle {
+    readonly artifact: ConstructionArtifact;
+    readonly stagedAt: number;
+}
+/**
+ * Outcome of {@link ConstructionRuntime.test}. `ok=false` blocks
+ * activation; `warnings` surface but do not block.
+ */
+interface TestResult {
+    readonly ok: boolean;
+    readonly errors?: readonly string[];
+    readonly warnings?: readonly string[];
+}
+/**
+ * Policy gate — invoked once per `activate()` before the artifact is
+ * registered. Default rejects implicit auto-approval; the REPL surface
+ * binds a dialog-based policy in `packages/repl/src/common/construction-
+ * bootstrap.ts` so user approval flows through the live askUser channel.
+ *
+ * Modeled as a function type rather than an interface (D3 decision):
+ * keeps the contract surface tiny, no class boilerplate.
+ *
+ * No declarative `kodax.config.ts` override hatch is provided — see the
+ * "Deferred Design Decisions" section in `features/v0.7.28.md` for why
+ * a `risk_mode` enum (when truly needed) is preferred over user-authored
+ * policy functions.
+ */
+type ConstructionPolicy = (artifact: ConstructionArtifact) => Promise<ConstructionPolicyVerdict>;
+type ConstructionPolicyVerdict = 'approve' | 'reject' | 'ask-user';
+/** Default policy: always ask the user; no implicit approvals. */
+declare const defaultPolicy: ConstructionPolicy;
+/**
+ * Thrown by `CtxProxy` when handler attempts to access a tool not declared
+ * in `capabilities.tools`. Caught in tracer; surfaces as a tool error.
+ */
+declare class CapabilityDeniedError extends Error {
+    readonly toolName: string;
+    readonly declaredTools: readonly string[];
+    constructor(toolName: string, declaredTools: readonly string[]);
+}
+/**
+ * Thrown when a manifest cannot be parsed / is missing required fields.
+ * Surfaces during stage() / startup glob; tracer records details.
+ */
+declare class ConstructionManifestError extends Error {
+    readonly path?: string;
+    constructor(message: string, path?: string);
+}
+
+/**
+ * KodaX Core Errors
+ *
+ * 错误类型体系 - 提供结构化的错误处理
+ */
+/** 基础 KodaX 错误类 */
+declare class KodaXError extends Error {
+    readonly code: string;
+    constructor(message: string, code?: string);
+}
+/** 工具执行错误 */
+declare class KodaXToolError extends KodaXError {
+    readonly toolName: string;
+    readonly toolId?: string | undefined;
+    constructor(message: string, toolName: string, toolId?: string | undefined);
+}
+/** 会话错误 */
+declare class KodaXSessionError extends KodaXError {
+    readonly sessionId?: string | undefined;
+    constructor(message: string, sessionId?: string | undefined);
+}
+/** 终端不支持错误 */
+declare class KodaXTerminalError extends KodaXError {
+    /** 建议的替代命令 */
+    readonly suggestions: string[];
+    constructor(message: string, suggestions?: string[]);
+}
+
+/**
+ * KodaX Error Classification
+ *
+ * 错误分类系统 - 决定适当的恢复策略
+ */
+declare enum ErrorCategory {
+    TRANSIENT = 0,// 临时错误，可重试（速率限制、超时、网络错误）
+    PERMANENT = 1,// 永久错误，不可重试（认证失败、无效请求）
+    TOOL_CALL_ID = 2,// 特定的 tool_call_id 不匹配错误
+    USER_ABORT = 3
+}
+interface ErrorClassification {
+    category: ErrorCategory;
+    retryable: boolean;
+    maxRetries: number;
+    retryDelay: number;
+    shouldCleanup: boolean;
+}
+/**
+ * 分类错误以确定适当的恢复策略
+ */
+declare function classifyError(error: Error): ErrorClassification;
+
+/**
+ * KodaX Core Constants
+ */
+
+/** Prefix used to detect user-cancelled tool results in the agent loop. */
+declare const CANCELLED_TOOL_RESULT_PREFIX = "[Cancelled]";
+/** Standard cancellation message returned when a tool is cancelled by the user. */
+declare const CANCELLED_TOOL_RESULT_MESSAGE = "[Cancelled] Operation cancelled by user";
+
+/**
+ * KodaX Tool Types
+ */
+
+/**
+ * Progress yield from a streaming (async generator) tool.
+ * Each yield appears as a real-time status update in the REPL transcript.
+ */
+interface ToolProgress {
+    readonly stage: string;
+    readonly message: string;
+}
+/**
+ * Final result a tool may return. Either a plain string (the default for
+ * text-only tools) OR a typed-array form for multimodal returns (e.g.
+ * `read` on an image path returns `[{type:'text',...}, {type:'image',...}]`).
+ * Providers serialize each shape to their wire format; OpenAI-compat
+ * gateways downgrade image items to a placeholder rather than rejecting.
+ *
+ * The array form mirrors claudecode's FileReadTool image return — Claude
+ * Code packs image data into `tool_result` content so the model can
+ * re-fetch images via the tool path. See
+ * `c:/Works/claudecode/src/tools/FileReadTool/FileReadTool.ts:866-891`.
+ */
+type ToolResult = string | readonly KodaXToolResultContentItem[];
+/** Standard tool handler — returns a final result (text or multimodal). */
+type ToolHandlerSync = (input: Record<string, unknown>, context: KodaXToolExecutionContext) => Promise<ToolResult>;
+/** Streaming tool handler — yields progress updates, returns final result. */
+type ToolHandlerStreaming = (input: Record<string, unknown>, context: KodaXToolExecutionContext) => AsyncGenerator<ToolProgress, ToolResult, void>;
+/** Union of both handler types. Existing tools use ToolHandlerSync; new long-running tools may use ToolHandlerStreaming. */
+type ToolHandler = ToolHandlerSync | ToolHandlerStreaming;
+
+/**
+ * FEATURE_149 (v0.7.38) — interrupt-on-submit policy for in-flight tools.
+ *
+ * Controls whether submitting a new prompt while THIS tool is mid-execution
+ * triggers a fast-abort of the current agent round (so the new prompt starts
+ * immediately) or queues the prompt to run after the tool resolves.
+ *
+ *   - `'cancel'` — long-running tools whose work the user is likely to want
+ *     to abandon when they redirect (e.g., `bash` running a 30s script,
+ *     `dispatch_child_task` synchronously awaiting a child, sleep-style
+ *     tools). InkREPL submit handler aborts the round immediately.
+ *
+ *   - `'wait'` (default) — atomic / fast tools (read, grep, glob, write,
+ *     edit, …) where waiting for completion is cheaper than aborting and
+ *     redoing.
+ *
+ * Mirrors Claude Code `interruptBehavior` (`utils/handlePromptSubmit.ts`).
+ */
+type ToolInterruptBehavior = 'cancel' | 'wait';
+interface LocalToolDefinition extends KodaXToolDefinition {
+    handler: ToolHandler;
+    /**
+     * v0.7.42 — Required declarative side-effect class. See
+     * {@link ToolSideEffect} for category definitions and rationale. Plan
+     * mode and SDK embedders' permission brokers consume this; failure to
+     * declare is a TypeScript error (by design — `sideEffect` is required,
+     * not optional, to prevent silent drift when new tools are added).
+     */
+    sideEffect: ToolSideEffect;
+    /**
+     * v0.7.42 — Optional plan-mode override.
+     *
+     *   - `undefined` (default): plan-mode permits only `sideEffect ===
+     *     'readonly'` tools.
+     *   - `true`: explicitly permitted in plan mode even when sideEffect is
+     *     not `'readonly'`. Reserve for tools whose effect is itself part of
+     *     the planning loop (`exit_plan_mode`, `task_stop`, `todo_update`,
+     *     `todo_create`, `ask_user_question`).
+     *   - `false`: explicitly blocked in plan mode even when sideEffect is
+     *     `'readonly'`. Rare — useful for read-only tools whose output would
+     *     leak content the planner should not see.
+     */
+    planModeAllowed?: boolean;
+    /**
+     * FEATURE_149 (v0.7.38) — submit-time interrupt policy. See
+     * {@link ToolInterruptBehavior}. Default `'wait'` when undefined.
+     */
+    interruptBehavior?: ToolInterruptBehavior;
+    /**
+     * Progressive disclosure — when `true`, the tool's full description is
+     * replaced with `searchHint` (a one-line summary) in the LLM-visible
+     * tool schema until the per-session unlock Set marks the tool name as
      * unlocked. Unlocking happens via the `tool_search` tool: the LLM
      * invokes `tool_search` with a query that selects this tool, and the
      * full description + JSON schema are returned in the tool_result text.
@@ -279,454 +566,167 @@ interface KodaXRetrievalResult {
     trust: KodaXRetrievalTrust;
     freshness: KodaXRetrievalFreshness;
     provider?: string;
-    summary: string;
-    content?: string;
-    items: KodaXRetrievalItem[];
-    artifacts?: KodaXRetrievalArtifact[];
-    metadata?: Record<string, unknown>;
-}
-
-declare const KODAX_TOOLS: KodaXToolDefinition[];
-declare function registerTool(definition: LocalToolDefinition, options?: ToolRegistrationOptions): () => void;
-declare function getTool(name: string): ToolHandler | undefined;
-declare function getToolDefinition(name: string): KodaXToolDefinition | undefined;
-declare function getRegisteredToolDefinition(name: string): RegisteredToolDefinition | undefined;
-declare function getToolRegistrations(name: string): RegisteredToolDefinition[];
-declare function getBuiltinToolDefinition(name: string): KodaXToolDefinition | undefined;
-declare function getBuiltinRegisteredToolDefinition(name: string): RegisteredToolDefinition | undefined;
-declare function createBuiltinToolDefinition(name: string): LocalToolDefinition | undefined;
-declare function listBuiltinToolDefinitions(): RegisteredToolDefinition[];
-/**
- * v0.7.42 — snapshot of every currently-active tool registration.
- *
- * Returns the most-recent registration for each tool name (mirroring
- * {@link getRegisteredToolDefinition}'s single-name semantics across the
- * full registry). Use this to drive metadata-based filters such as:
- *
- *   - SDK embedder permission brokers building a blocklist by side-effect class:
- *     `getAllRegisteredTools().filter(t => t.sideEffect !== 'readonly')`
- *   - UI that displays available tools grouped by category.
- *   - Plan-mode gates that compute their own blocklist from metadata
- *     instead of hardcoded `Set<string>` of names.
- *
- * The returned array is a fresh copy per call (safe to mutate without
- * affecting the registry). Order is registration order (sorted by name
- * within each registration to keep the snapshot deterministic).
- */
-declare function getAllRegisteredTools(): RegisteredToolDefinition[];
-/**
- * v0.7.42 — plan-mode permit check driven by tool metadata.
- *
- *   - `sideEffect === 'readonly'` ⇒ permitted (unless explicitly
- *     `planModeAllowed: false`).
- *   - `planModeAllowed: true` ⇒ permitted (overrides non-readonly).
- *   - any other sideEffect ⇒ blocked.
- *
- * Returns `false` for unknown tool names (fail-closed). Use this in
- * preference to hardcoded `Set<string>` of tool names — adding a new
- * `'mutates-fs'` builtin will flow through automatically.
- */
-declare function isToolPlanModeAllowed(name: string): boolean;
-/**
- * v0.7.42 — does this tool mutate the filesystem?
- *
- * Wraps `sideEffect === 'mutates-fs'`. Used by the REPL permission
- * pipeline's gitRoot guard and Space's permission broker. Replaces the
- * previous practice of hardcoding `Set(["write", "edit"])`-style lookups
- * scattered across 5+ callsites.
- */
-declare function isToolFileMutation(name: string): boolean;
-/**
- * FEATURE_247 — does this tool perform a read-only network request
- * (`sideEffect === 'reads-network'`)?
- *
- * Lets an SDK embedder's permission broker (e.g. KodaX-Space Partner) allow
- * web research / MCP reads (`web_search`, `mcp_read_resource`, `mcp_get_prompt`)
- * while still blocking mutating network calls (`web_fetch`, `mcp_call` →
- * `mutates-network`). Fail-closed: unknown names return `false`.
- *
- * Note: `isToolMutation` intentionally still returns `true` for a
- * `reads-network` tool (only `readonly` is treated as non-mutating there), so
- * existing mutation-gate behavior is unchanged — use THIS predicate, or the
- * `sideEffect` value directly, to select the read-network class.
- */
-declare function isToolNetworkRead(name: string): boolean;
-/**
- * v0.7.42 — does this tool mutate anything (FS, shell, network, state)?
- *
- * True for every `sideEffect` except `'readonly'`. Fail-closed (unknown
- * names return `true` — assumed mutating until proven otherwise).
- */
-declare function isToolMutation(name: string): boolean;
-declare function getRequiredToolParams(name: string): string[];
-declare function listTools(): string[];
-declare function listToolDefinitions(): KodaXToolDefinition[];
-declare function executeTool(name: string, input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolRead(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string | readonly KodaXToolResultContentItem[]>;
-
-declare function toolWrite(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-type EditToolErrorCode = 'EDIT_NOT_FOUND' | 'EDIT_AMBIGUOUS' | 'EDIT_TOO_LARGE';
-interface EditRecoveryDiagnostic {
-    code: EditToolErrorCode;
-    filePath: string;
-    candidates: Array<{
-        startLine: number;
-        endLine: number;
-        preview: string;
-        excerpt: string;
-    }>;
-}
-declare function toolEdit(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-declare function parseEditToolError(result: string): EditToolErrorCode | undefined;
-declare function inspectEditFailure(pathValue: string, oldString: string, ctx: KodaXToolExecutionContext, windowLines: number): Promise<EditRecoveryDiagnostic>;
-
-declare function toolInsertAfterAnchor(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolBash(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-/**
- * KodaX Glob Tool
- *
- * 文件搜索工具
- */
-
-declare function toolGlob(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolGrep(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-/**
- * KodaX Undo Tool
- *
- * 撤销工具 - 恢复最后一次文件修改
- */
-
-declare function toolUndo(_input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-/**
- * KodaX AskUserQuestion Tool
- *
- * Lets the LLM ask the user interactive questions. Supports single-select,
- * multi-select, free-text input, and multi-question modes.
- */
-
-/**
- * Ask user a question with multiple interaction modes.
- *
- * This tool requires context.askUser (select), context.askUserMulti
- * (multi-question), or context.askUserInput (input) from the host.
- */
-declare function toolAskUserQuestion(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolRepoOverview(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolChangedScope(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolChangedDiff(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolModuleContext(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolSymbolContext(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolProcessContext(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolImpactEstimate(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolWebSearch(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolWebFetch(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolCodeSearch(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-declare function toolSemanticLookup(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
-
-/**
- * KodaX Constructed-World types (FEATURE_087, v0.7.28).
- *
- * Runtime-generated capabilities (tools / agents / skills / ...) live in
- * `.kodax/constructed/` and are loaded into the same registries as builtin
- * primitives. v0.7.28 only ships tool generation (FEATURE_088); other kinds
- * land in FEATURE_089 / FEATURE_090.
- *
- * Cross-references:
- *   - DD §14 — lifecycle, security model, registry merge semantics.
- *   - docs/features/v0.7.28.md — capability schema, generation flow.
- */
-
-/**
- * Handler script source. v0.7.28 limits language to `'javascript'` so that
- * `loadHandler()` can `await import()` the file directly without an
- * intermediate TS → JS compile step (no esbuild / tsx dependency).
- *
- * TypeScript handlers are explicitly out of scope; Coding Agent generates
- * JS strings on the wire.
- */
-interface ScriptSource {
-    readonly kind: 'script';
-    readonly language: 'javascript';
-    readonly code: string;
-}
-/**
- * Capability declaration.
- *
- * v0.7.28 ships the single-dimension form: a whitelist of builtin tool
- * names that the handler may invoke through `ctx.tools.<name>(...)`.
- * All I/O — fs / net / env — must flow through builtin tools (`read` /
- * `write` / `bash` / etc.); handlers do not receive direct `ctx.fs` /
- * `ctx.net` / `ctx.env` entry points.
- *
- * Forward-compatible evolution: if the future demands path/domain-level
- * constraints, this can grow to `(string | { name; constraints })[]`
- * without breaking existing manifests.
- */
-interface Capabilities {
-    readonly tools: readonly string[];
-}
-/**
- * Tool-kind artifact body (the `content` of `ConstructionArtifact` when
- * `kind === 'tool'`).
- */
-interface ToolContent {
-    readonly description: string;
-    readonly inputSchema: Record<string, unknown>;
-    readonly capabilities: Capabilities;
-    readonly handler: ScriptSource;
-    /**
-     * Per-tool timeout override. Defaults to {@link DEFAULT_HANDLER_TIMEOUT_MS}
-     * when omitted. Bounded by AbortController in `loadHandler()`.
-     */
-    readonly timeoutMs?: number;
-}
-/**
- * Default handler timeout. Picked to match the historical ceiling on
- * builtin streaming tools (30s); revisit if a constructed tool demands
- * longer-running computation.
- */
-declare const DEFAULT_HANDLER_TIMEOUT_MS = 30000;
-/**
- * Lifecycle state on disk. Drives both the startup glob filter and the
- * `revoke()` semantics. See DD §14.1 — file system is the single source
- * of truth; no separate `_manifest.json` index file (C4 decision).
- */
-type ArtifactStatus = 'staged' | 'active' | 'revoked';
-/**
- * Reference to a tool by stable id. v0.7.31 (FEATURE_089) introduces
- * Agent manifests that bundle tool refs rather than inline tool bodies;
- * the resolver expands these refs to concrete `KodaXToolDefinition`
- * instances at activate time.
- *
- * `ref` shape:
- *   - `builtin:<name>`            — a tool from the static registry
- *     (e.g. `builtin:read`, `builtin:bash`)
- *   - `constructed:<name>@<ver>`  — a previously-activated constructed tool
- */
-interface ToolRef {
-    readonly ref: string;
-}
-/**
- * Reference to a Guardrail by stable id. The Layer A `Guardrail`
- * declaration is name-only (no runtime hooks); resolvers map known
- * names to constructed `ToolGuardrail` / `InputGuardrail` /
- * `OutputGuardrail` instances at activation time.
- */
-interface GuardrailRef {
-    readonly kind: 'input' | 'output' | 'tool';
-    readonly ref: string;
-}
-/**
- * Reference to a handoff target by stable id (another constructed agent
- * or a builtin role). The resolver expands `target.ref` to the actual
- * `Agent` declaration at admission time so the handoff DAG check
- * (`handoffLegality` invariant) sees the full graph.
- */
-interface AgentHandoffRef {
-    readonly target: {
-        readonly ref: string;
-    };
-    readonly kind: 'continuation' | 'as-tool';
-    readonly description?: string;
-}
-/**
- * Reasoning profile declaration mirroring the Layer A
- * `AgentReasoningProfile`. Kept structurally identical so the resolver
- * passes the value through without re-shaping.
- */
-interface AgentReasoningRef {
-    readonly default: 'quick' | 'balanced' | 'deep';
-    readonly max?: 'quick' | 'balanced' | 'deep';
-    readonly escalateOnRevise?: boolean;
-}
-/**
- * Sandbox test case. Used by `sandbox_test_agent` to verify a
- * constructed agent before it can activate. Each case feeds `input`
- * to a sandbox Runner instance and grades the agent's final output:
- *
- *   - `expectMatch`     — final text must match this regex (string form)
- *   - `expectNotMatch`  — final text must NOT match this regex
- *   - `expectFinalText` — exact substring match (case-sensitive)
- *
- * At least one of the three expect-fields must be present; the cases
- * are graded by `runSandboxAgentTest()` (FEATURE_089 Phase 3.5).
- */
-interface AgentTestCase {
-    readonly id: string;
-    readonly input: string;
-    readonly expectMatch?: string;
-    readonly expectNotMatch?: string;
-    readonly expectFinalText?: string;
-}
-/**
- * Agent-kind artifact body (the `content` of `ConstructionArtifact`
- * when `kind === 'agent'`).
- *
- * FEATURE_089 (v0.7.31): all fields except `instructions` are optional;
- * a minimal "echo agent" can be expressed as `{ instructions: '...' }`.
- * Tool / handoff / guardrail refs are resolved at admission time
- * (Runner.admit's 5-step audit expands them and feeds the resolved
- * Agent through the invariant chain).
- */
-interface AgentContent {
-    readonly instructions: string;
-    readonly tools?: readonly ToolRef[];
-    readonly handoffs?: readonly AgentHandoffRef[];
-    readonly reasoning?: AgentReasoningRef;
-    readonly guardrails?: readonly GuardrailRef[];
-    readonly model?: string;
-    readonly provider?: string;
-    readonly effort?: KodaXWireReasoningEffort;
-    /**
-     * FEATURE_191 — one-sentence human-readable summary surfaced in the
-     * Worker system prompt's `=== Available specialist agents ===`
-     * block (FEATURE_191 A.3) and in `/agents list` UIs. Frontmatter
-     * `description` field of `~/.kodax/agents/<name>.md` and the
-     * `name`-paired argument of `KodaXExtensionAPI.registerAgent`
-     * funnel into this field. Optional for backward compatibility with
-     * FEATURE_089 minimal-agent shape (`{ instructions: '...' }`);
-     * the SP block renders `(no description)` when absent.
-     */
-    readonly description?: string;
-    /**
-     * Optional structured-output schema mirroring `Agent.outputSchema`.
-     * Pure pass-through to the runtime — admission does not validate
-     * shape semantics here, only well-formed JSON.
-     */
-    readonly outputSchema?: Record<string, unknown>;
-    /**
-     * Optional sandbox test cases. When present, `sandbox_test_agent`
-     * runs them; when absent, the test step performs only the static
-     * checks (manifest schema + admission audit).
-     */
-    readonly testCases?: readonly AgentTestCase[];
-    /**
-     * Maximum total budget (iteration count) the agent may consume.
-     * Plumbed onto the resolved `AgentManifest.maxBudget` and clamped by
-     * `budgetCeiling` invariant during admission.
-     */
-    readonly maxBudget?: number;
-    /**
-     * Voluntary additional invariants the LLM declares this agent
-     * commits to. Plumbed onto `AgentManifest.declaredInvariants`;
-     * unioned on top of the required set during admission.
-     */
-    readonly declaredInvariants?: readonly string[];
+    summary: string;
+    content?: string;
+    items: KodaXRetrievalItem[];
+    artifacts?: KodaXRetrievalArtifact[];
+    metadata?: Record<string, unknown>;
 }
+
+declare const KODAX_TOOLS: KodaXToolDefinition[];
+declare function registerTool(definition: LocalToolDefinition, options?: ToolRegistrationOptions): () => void;
+declare function getTool(name: string): ToolHandler | undefined;
+declare function getToolDefinition(name: string): KodaXToolDefinition | undefined;
+declare function getRegisteredToolDefinition(name: string): RegisteredToolDefinition | undefined;
+declare function getToolRegistrations(name: string): RegisteredToolDefinition[];
+declare function getBuiltinToolDefinition(name: string): KodaXToolDefinition | undefined;
+declare function getBuiltinRegisteredToolDefinition(name: string): RegisteredToolDefinition | undefined;
+declare function createBuiltinToolDefinition(name: string): LocalToolDefinition | undefined;
+declare function listBuiltinToolDefinitions(): RegisteredToolDefinition[];
 /**
- * Persisted artifact shape (one JSON file per name/version under
- * `.kodax/constructed/<kind>s/<name>/<version>.json`).
+ * v0.7.42 — snapshot of every currently-active tool registration.
  *
- * Discriminated union over `kind`:
- *   - `kind: 'tool'`  — v0.7.28 (FEATURE_088) tool generation
- *   - `kind: 'agent'` — v0.7.31 (FEATURE_089) agent generation; passes
- *                       through `Runner.admit()` at activation time
+ * Returns the most-recent registration for each tool name (mirroring
+ * {@link getRegisteredToolDefinition}'s single-name semantics across the
+ * full registry). Use this to drive metadata-based filters such as:
  *
- * Lifecycle fields (status / timestamps / contentHash / sourceAgent /
- * signedBy) are common to all kinds.
+ *   - SDK embedder permission brokers building a blocklist by side-effect class:
+ *     `getAllRegisteredTools().filter(t => t.sideEffect !== 'readonly')`
+ *   - UI that displays available tools grouped by category.
+ *   - Plan-mode gates that compute their own blocklist from metadata
+ *     instead of hardcoded `Set<string>` of names.
+ *
+ * The returned array is a fresh copy per call (safe to mutate without
+ * affecting the registry). Order is registration order (sorted by name
+ * within each registration to keep the snapshot deterministic).
  */
-type ConstructionArtifact = ToolArtifact | AgentArtifact;
-interface ConstructionArtifactBase {
-    readonly name: string;
-    readonly version: string;
-    status: ArtifactStatus;
-    readonly signedBy?: string;
-    readonly createdAt: number;
-    readonly sourceAgent?: string;
-    testedAt?: number;
-    activatedAt?: number;
-    revokedAt?: number;
-    /**
-     * SHA-256 of `JSON.stringify(content)` captured at activate time.
-     * `rehydrateActiveArtifacts()` recomputes and compares — a mismatch
-     * indicates the manifest was edited between activation and the next
-     * boot (naive cross-session tampering, e.g. an LLM rewriting the .json
-     * via the Write tool without recomputing the hash). Mismatched
-     * artifacts are skipped at rehydrate with a stderr warning. This is
-     * NOT a defense against a coordinated attacker who recomputes the
-     * hash; the threat model is single-user CLI integrity, not multi-user
-     * supply chain.
-     */
-    contentHash?: string;
-}
-interface ToolArtifact extends ConstructionArtifactBase {
-    readonly kind: 'tool';
-    readonly content: ToolContent;
-}
-interface AgentArtifact extends ConstructionArtifactBase {
-    readonly kind: 'agent';
-    readonly content: AgentContent;
-}
+declare function getAllRegisteredTools(): RegisteredToolDefinition[];
 /**
- * Returned by {@link ConstructionRuntime.stage}; opaque handle that
- * downstream `test()` / `activate()` calls bind to.
+ * v0.7.42 — plan-mode permit check driven by tool metadata.
+ *
+ *   - `sideEffect === 'readonly'` ⇒ permitted (unless explicitly
+ *     `planModeAllowed: false`).
+ *   - `planModeAllowed: true` ⇒ permitted (overrides non-readonly).
+ *   - any other sideEffect ⇒ blocked.
+ *
+ * Returns `false` for unknown tool names (fail-closed). Use this in
+ * preference to hardcoded `Set<string>` of tool names — adding a new
+ * `'mutates-fs'` builtin will flow through automatically.
  */
-interface StagedHandle {
-    readonly artifact: ConstructionArtifact;
-    readonly stagedAt: number;
-}
+declare function isToolPlanModeAllowed(name: string): boolean;
 /**
- * Outcome of {@link ConstructionRuntime.test}. `ok=false` blocks
- * activation; `warnings` surface but do not block.
+ * v0.7.42 — does this tool mutate the filesystem?
+ *
+ * Wraps `sideEffect === 'mutates-fs'`. Used by the REPL permission
+ * pipeline's gitRoot guard and Space's permission broker. Replaces the
+ * previous practice of hardcoding `Set(["write", "edit"])`-style lookups
+ * scattered across 5+ callsites.
  */
-interface TestResult {
-    readonly ok: boolean;
-    readonly errors?: readonly string[];
-    readonly warnings?: readonly string[];
-}
+declare function isToolFileMutation(name: string): boolean;
 /**
- * Policy gate — invoked once per `activate()` before the artifact is
- * registered. Default rejects implicit auto-approval; the REPL surface
- * binds a dialog-based policy in `packages/repl/src/common/construction-
- * bootstrap.ts` so user approval flows through the live askUser channel.
+ * FEATURE_247 — does this tool perform a read-only network request
+ * (`sideEffect === 'reads-network'`)?
  *
- * Modeled as a function type rather than an interface (D3 decision):
- * keeps the contract surface tiny, no class boilerplate.
+ * Lets an SDK embedder's permission broker (e.g. KodaX-Space Partner) allow
+ * web research / MCP reads (`web_search`, `mcp_read_resource`, `mcp_get_prompt`)
+ * while still blocking mutating network calls (`web_fetch`, `mcp_call` →
+ * `mutates-network`). Fail-closed: unknown names return `false`.
  *
- * No declarative `kodax.config.ts` override hatch is provided — see the
- * "Deferred Design Decisions" section in `features/v0.7.28.md` for why
- * a `risk_mode` enum (when truly needed) is preferred over user-authored
- * policy functions.
+ * Note: `isToolMutation` intentionally still returns `true` for a
+ * `reads-network` tool (only `readonly` is treated as non-mutating there), so
+ * existing mutation-gate behavior is unchanged — use THIS predicate, or the
+ * `sideEffect` value directly, to select the read-network class.
  */
-type ConstructionPolicy = (artifact: ConstructionArtifact) => Promise<ConstructionPolicyVerdict>;
-type ConstructionPolicyVerdict = 'approve' | 'reject' | 'ask-user';
-/** Default policy: always ask the user; no implicit approvals. */
-declare const defaultPolicy: ConstructionPolicy;
+declare function isToolNetworkRead(name: string): boolean;
 /**
- * Thrown by `CtxProxy` when handler attempts to access a tool not declared
- * in `capabilities.tools`. Caught in tracer; surfaces as a tool error.
+ * v0.7.42 — does this tool mutate anything (FS, shell, network, state)?
+ *
+ * True for every `sideEffect` except `'readonly'`. Fail-closed (unknown
+ * names return `true` — assumed mutating until proven otherwise).
  */
-declare class CapabilityDeniedError extends Error {
-    readonly toolName: string;
-    readonly declaredTools: readonly string[];
-    constructor(toolName: string, declaredTools: readonly string[]);
+declare function isToolMutation(name: string): boolean;
+declare function getRequiredToolParams(name: string): string[];
+declare function listTools(): string[];
+declare function listToolDefinitions(): KodaXToolDefinition[];
+declare function executeTool(name: string, input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolRead(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string | readonly KodaXToolResultContentItem[]>;
+
+declare function toolWrite(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+type EditToolErrorCode = 'EDIT_NOT_FOUND' | 'EDIT_AMBIGUOUS' | 'EDIT_TOO_LARGE';
+interface EditRecoveryDiagnostic {
+    code: EditToolErrorCode;
+    filePath: string;
+    candidates: Array<{
+        startLine: number;
+        endLine: number;
+        preview: string;
+        excerpt: string;
+    }>;
 }
+declare function toolEdit(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+declare function parseEditToolError(result: string): EditToolErrorCode | undefined;
+declare function inspectEditFailure(pathValue: string, oldString: string, ctx: KodaXToolExecutionContext, windowLines: number): Promise<EditRecoveryDiagnostic>;
+
+declare function toolInsertAfterAnchor(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolBash(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
 /**
- * Thrown when a manifest cannot be parsed / is missing required fields.
- * Surfaces during stage() / startup glob; tracer records details.
+ * KodaX Glob Tool
+ *
+ * 文件搜索工具
+ */
+
+declare function toolGlob(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolGrep(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+/**
+ * KodaX Undo Tool
+ *
+ * 撤销工具 - 恢复最后一次文件修改
+ */
+
+declare function toolUndo(_input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+/**
+ * KodaX AskUserQuestion Tool
+ *
+ * Lets the LLM ask the user interactive questions. Supports single-select,
+ * multi-select, free-text input, and multi-question modes.
  */
-declare class ConstructionManifestError extends Error {
-    readonly path?: string;
-    constructor(message: string, path?: string);
-}
+
+/**
+ * Ask user a question with multiple interaction modes.
+ *
+ * This tool requires context.askUser (select), context.askUserMulti
+ * (multi-question), or context.askUserInput (input) from the host.
+ */
+declare function toolAskUserQuestion(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolRepoOverview(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolChangedScope(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolChangedDiff(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolModuleContext(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolSymbolContext(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolProcessContext(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolImpactEstimate(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolWebSearch(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolWebFetch(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolCodeSearch(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
+
+declare function toolSemanticLookup(input: Record<string, unknown>, ctx: KodaXToolExecutionContext): Promise<string>;
 
 /**
  * FEATURE_089 Phase 3.5 — Sandbox Agent Test Runner.
@@ -1157,77 +1157,6 @@ declare function findByVersion(name: string, version: string): RegisteredToolDef
  */
 declare function listAll(): RegisteredToolDefinition[];
 
-/**
- * FEATURE_089 (v0.7.31) Phase 3.4 — Constructed Agent Resolver.
- *
- * Module-singleton registry mapping `name` → runnable `Agent` for
- * agents that have passed admission and been activated through
- * `ConstructionRuntime.activate()`. Mirrors the way TOOL_REGISTRY
- * holds activated constructed tools, but for agents.
- *
- * Why a separate registry (not in TOOL_REGISTRY):
- *
- *   - Tools and Agents are different runtime types. A `KodaXToolDefinition`
- *     has `input_schema` + `handler`; an `Agent` has `instructions` +
- *     `tools` + `handoffs` + `reasoning`. Conflating them would force
- *     consumers to discriminate on every lookup.
- *   - Resolution semantics differ: a tool lookup returns the executable
- *     handler; an agent lookup returns the declarative spec (Runner.run
- *     drives the loop separately).
- *
- * Resolution surface:
- *
- *   - `resolveConstructedAgent(name)`     — name → Agent | undefined
- *   - `listConstructedAgents()`           — snapshot of activated agents
- *   - `registerConstructedAgent(artifact)` → unregister fn (called by
- *      runtime on activate, captured in the runtime's `_activated` map)
- *   - `_resetAgentResolverForTesting()`   — test isolation
- *
- * Tool / handoff ref resolution:
- *   - Tool refs are resolved against TOOL_REGISTRY at activation time —
- *     a snapshot. If a referenced tool is later revoked, the agent
- *     keeps its stale ref; Phase 3.5 sandbox testing catches this.
- *   - Handoff target refs lift to stub Agent objects (`name` only) when
- *     the target hasn't been activated yet. Transitive admission ran
- *     at test time so the graph is known to be acyclic; runtime
- *     traversal just walks the names.
- *
- * Non-goal: full referential consistency between tools / agents /
- * handoffs. The threat model is single-user CLI integrity (DD §14.5);
- * stale refs are an LLM-authoring footgun, not a security bypass.
- */
-
-/**
- * Look up an activated constructed agent by name. Returns the
- * resolved `Agent` (with tools / handoffs lifted from refs). Returns
- * `undefined` when no agent at that name has been activated.
- */
-declare function resolveConstructedAgent(name: string): Agent | undefined;
-/**
- * FEATURE_090 — `true` iff a self-modify activation has been staged
- * for `name` but has not yet been drained into the active registry.
- * Surfaces for tooling that wants to display "next run will use
- * version X" hints, and as a sanity-check assertion in tests.
- */
-declare function hasPendingSwap(name: string): boolean;
-/**
- * FEATURE_090 — promote every pending self-modify entry into
- * `AGENT_REGISTRY`, replacing the prior active version. Returns the
- * names that were drained so the caller can surface a hint
- * ("alpha is now running version 1.1.0").
- *
- * Idempotent: calling on an empty pending map is a no-op. Atomic at
- * the JS event-loop level (a single synchronous pass); drain cannot
- * partially complete.
- *
- * Integration contract: the REPL surface calls this immediately after
- * any top-level `Runner.run` returns. KodaX is single-process and
- * single-user, so "the run that triggered the change" and "all
- * in-flight runs" are the same set — no concurrent-run coordination
- * needed.
- */
-declare function drainPendingSwaps(): readonly string[];
-
 /**
  * FEATURE_191 (v0.7.43) — markdown-defined agent loader.
  *
@@ -1262,6 +1191,7 @@ declare function drainPendingSwaps(): readonly string[];
  * decision. Ignoring them silently keeps user `.md` files
  * forward-compatible across future feature versions.
  */
+
 /**
  * Per-file failure record returned to the boot caller. Mirrors
  * claudecode's `getAgentDefinitionsWithOverrides.failedFiles` shape so
@@ -1291,6 +1221,36 @@ interface LoadAgentsFromMarkdownOptions {
      */
     readonly configHome?: string;
 }
+interface LoadMarkdownAgentScopeOptions extends LoadAgentsFromMarkdownOptions {
+    /** Stable host-chosen id for diagnostics. Defaults to the resolved project cwd. */
+    readonly id?: string;
+}
+interface MarkdownAgentToolFilter {
+    readonly name: string;
+    readonly reason: 'not-registered' | 'admission-clamped';
+}
+interface MarkdownAgentLoadWarning {
+    readonly path: string;
+    readonly agentName?: string;
+    readonly reason: string;
+}
+interface LoadedMarkdownAgent {
+    readonly name: string;
+    readonly description: string;
+    readonly source: 'markdown:user' | 'markdown:project';
+    readonly path: string;
+    readonly requestedTools?: readonly string[];
+    readonly effectiveTools?: readonly string[];
+    readonly filteredTools: readonly MarkdownAgentToolFilter[];
+    readonly admissionWarnings: readonly string[];
+}
+interface LoadMarkdownAgentScopeResult {
+    readonly scope: KodaXAgentScope;
+    readonly loaded: readonly LoadedMarkdownAgent[];
+    readonly failed: readonly MarkdownLoadFailure[];
+    readonly warnings: readonly MarkdownAgentLoadWarning[];
+    dispose(): Promise<void>;
+}
 /**
  * FEATURE_197 (v0.7.43) — discovered markdown agent metadata.
  *
@@ -1341,6 +1301,7 @@ interface DiscoverMarkdownAgentsResult {
  * not break boot.
  */
 declare function loadAgentsFromMarkdown(opts?: LoadAgentsFromMarkdownOptions): Promise<LoadAgentsFromMarkdownResult>;
+declare function loadMarkdownAgentScope(opts?: LoadMarkdownAgentScopeOptions): Promise<LoadMarkdownAgentScopeResult>;
 /**
  * FEATURE_197 (v0.7.43) — read-only counterpart to
  * `loadAgentsFromMarkdown`. Scans the same two-tier path (user dir
@@ -5791,5 +5752,5 @@ interface AuthorWorkflowViaWorkerHandle {
  */
 declare function authorWorkflowViaWorker(input: AuthorWorkflowViaWorkerInput): AuthorWorkflowViaWorkerHandle;
 
-export { Agent, AgentMessage, AutoRules, BLOCKER_REQUIRED_CONSECUTIVE_TURNS, BUILTIN_WORKFLOWS, BoundExtensionRuntimeController, CANCELLED_TOOL_RESULT_MESSAGE, CANCELLED_TOOL_RESULT_PREFIX, CODING_AGENT_MARKER, CODING_INVARIANTS, CODING_SUMMARY_PROMPT, CODING_UPDATE_SUMMARY_PROMPT, CapabilityDeniedError, CapabilityKind, CapabilityProvider, CapabilityResult, KodaXClient as Client, CombinedExtensionRuntime, ConstructionManifestError, DEFAULT_CODING_AGENT_NAME, DEFAULT_DANGEROUS_PATTERNS, DEFAULT_HANDLER_TIMEOUT_MS, DEFAULT_RESILIENCE_CONFIG, DEFAULT_SAFE_PATTERNS, DEFAULT_SELF_MODIFY_BUDGET, DEFAULT_WINDOW_MS as DEFAULT_SPECULATIVE_WINDOW_MS, DEFAULT_TOOL_OUTPUT_MAX_BYTES, DEFAULT_TOOL_OUTPUT_MAX_LINES, DEFAULT_WORKFLOW_GENERATION_TIMEOUT_MS, EMIT_VERDICT_TOOL_NAME, ErrorCategory, ExtensionRuntimeContract, FailureStage, GENERATOR_AGENT_NAME, GoalCompleteResult, Guardrail, KODAX_TOOLS, KODAX_UNDERLYING_CAPABILITY_TOPICS, KodaXBaseProvider, KodaXChildContextBundle, KodaXClient, KodaXContentBlock, KodaXContextOptions, KodaXEvents, KodaXExecutionMode, KodaXExtensionRuntime, KodaXExtensionSessionRecord, KodaXInputArtifact, KodaXJsonValue, KodaXManualTopic, KodaXManualTopicId, KodaXMessage, KodaXOptions, KodaXProviderCapabilityProfile, KodaXProviderPolicyHints, KodaXReasoningCapability, KodaXReasoningMode, KodaXRepoIntelligenceCapability, KodaXRepoIntelligenceMode, KodaXRepoIntelligenceResolvedMode, KodaXRepoIntelligenceTrace, KodaXRepoRoutingSignals, KodaXResult, KodaXSessionControl, KodaXSessionError, KodaXSessionMutators, KodaXTaskRoutingDecision, KodaXTaskType, KodaXTerminalError, KodaXThinkingDepth, KodaXTimeoutConfig, KodaXTokenUsage, KodaXToolDefinition, KodaXToolError, KodaXToolExecutionContext, KodaXToolUseBlock, KodaXWireReasoningEffort, MANUAL_REGISTRY, MANUAL_TOPIC_IDS, McpCapabilityProvider, McpProviderOptions, McpReverseCapabilities, McpRoot, McpServersConfig, PLANNER_AGENT_NAME, PROMPT_SECTION_REGISTRY, PROTOCOL_EMITTER_TOOLS, ProviderExecutionState, ProviderRecoveryCoordinator, ProviderResilienceConfig, ProviderResiliencePolicy, READ_DEFAULT_LIMIT, READ_MAX_LINE_CHARS, READ_PREFLIGHT_SIZE_BYTES, REPO_EXPLORER_AGENT_NAME, REPO_EXPLORER_TOOL_NAMES, RecoveryDecision, RecoveryResult, ResilienceClassification, ResolveKodaXManualInput, ResolveKodaXManualOptions, ResolveKodaXManualResult, RuntimeDefaultsSnapshot, SCOUT_AGENT_NAME, SCOUT_THEN_AUTHOR_PROMPT_LINES, SELF_KNOWLEDGE_ROUTING_RULE, SYSTEM_PROMPT, SYSTEM_WORKFLOW_LIMITS, SessionErrorMetadata, SignalCollector, StableBoundaryTracker, TASK_ENGINE_ROLE_AGENTS, TOOL_RESULT_TRUNCATION_GUARDRAIL_NAME, TRACING_ENV, ToolCallSignal, ToolSideEffect, WORKER_AGENT_NAME, WORKFLOW_GENERATION_SYSTEM_PROMPT, WorkflowEventCorrelation, WorkflowHostPolicy, _resetRuntimeForTesting, activate, analyzeChangedScope, appendAuditEntry, applyAccountingDelta, applyToolResultGuardrail, authorWorkflowViaWorker, bashSignalCollector, bootstrapTracing, boundedRevise, budgetCeiling, buildApprovalSummary, buildBlockedGoal, buildCapabilityContextSections, buildClassifierPrompt, buildCompleteGoal, buildCreatedGoal, buildFallbackRoutingDecision, buildLlmReviewPrompt, buildManualToolDescription, buildMcpReverseCapabilities, buildPausedGoal, buildPromptMessageContent, buildPromptSnapshot, buildProviderCapabilitySnapshot, buildProviderPolicyHintsForDecision, buildProviderPolicyPromptNotes, buildRepoIntelligenceContext, buildRepoIntelligenceIndex, buildRepoOverview, buildResumedGoal, buildScoutThenAuthorPrompt, buildSelfKnowledgeRoutingRule, buildSystemPrompt, buildSystemPromptSnapshot, buildWorkflowGenerationSkillContext, buildWorkflowGenerationUserPrompt, checkAbsoluteDeny, checkIncompleteToolCalls, checkPromiseSignal, clampWorkflowLimits, classify, classifyBashCommand, classifyError, classifyResilienceError, combineExtensionRuntimes, computeInputSignature, configureRuntime, convertCapabilityReadResult, convertProviderSearchResults, createBashClassifierConfig, createBuiltinToolDefinition, createCodingWorkflowBackend, createCtxProxy, createDefaultCodingAgent, createDenialTracker, createExtensionRuntime, createKodaXTaskRunner, createPromptSection, createReasoningPlan, createRunGraphWriter, createSessionControl, createToolResultTruncationGuardrail, createWorkflowLifecycleController, createWorkflowPatternTemplateModule, createWorkflowRunManager, dedupeExtensionPathsByEntrypoint, defaultPolicy, deleteSavedWorkflow, disableSelfModify, discoverDefaultExtensions, discoverExtensionsInDirectory, discoverExtensionsInDirectoryDetailed, discoverMarkdownAgents, discoverSavedWorkflows, drainPendingSwaps, emitVerdict, emitWorkflowAgentDigest, ensureBuiltinRepoExplorerAgent, evaluateProviderPolicy, excludeExtensionPathsByEntrypoint, exec, executeTool, extractComparableUserMessageText, extractHtmlTitle, extractPromptComparableText, fileSignalCollector, finalizeRetrievalResult, findByVersion, formatParallelDispatchResult, formatSize, generateWorkflow, generateWorkflowFromOptions, getActiveExtensionRuntime, getAllRegisteredTools, getBuiltinRegisteredToolDefinition, getBuiltinToolDefinition, getBuiltinWorkflow, getDefaultExtensionDirectory, getDefaultWorkflowRunManager, getDenialContext, getImpactEstimate, getModuleContext, getProcessContext, getRegisteredToolDefinition, getRepoIntelligenceIndex, getRepoOverview, getRepoRoutingSignals, getRequiredToolParams, getSymbolContext, getTool, getToolDefinition, getToolRegistrations, getToolResultPolicy, getWorkflowPatternTemplate, goalTokenDelta, hasPendingSwap, inferTaskType, inspectEditFailure, inspectRepoIntelligenceRuntime, isDeniedRecently, isParallelDispatchDirective, isSessionRecoveryCandidateError, isSupportedExtensionModulePath, isToolFileMutation, isToolMutation, isToolNetworkRead, isToolPlanModeAllowed, isValidTokenBudget, languageIdForPath, listAll, list as listArtifacts, listBuiltinToolDefinitions, listBuiltinWorkflows, listConstructed, listToolDefinitions, listTools, listWorkflowPatternTemplates, loadAgentsFromMarkdown, loadGeneratedWorkflowFromRun, loadHandler, loadSavedWorkflow, loadSavedWorkflowCapsule, mcpRootsFromWorkspace, normalizeWorkflowModule, orderPromptSections, parallelInvestigation, parseClassifierOutput, parseEditToolError, parseLlmReviewVerdict, parseModelSpec, parseWorkflowGeneration, persistToolOutput, preflightWorkflowCapsule, prewarmRepoIntelligenceCaches, readArtifact, readAuditEntries, readBudget, readDisableState, readWindowFromEnv as readSpeculativeWindowFromEnv, reasoningModeToDepth, reconstructMessagesWithToolGuard, recordBlockerAttempt, recordDenial, registerCodingInvariants, registerConfiguredMcpCapabilityProvider, registerOfficialSandboxExtension, registerTool, rehydrateActiveArtifacts, remaining as remainingSelfModifyBudget, renameSavedWorkflow, renderChangedScope, renderImpactEstimate, renderModuleContext, renderProcessContext, renderPromptSections, renderRepoOverview, renderRetrievalResult, renderSymbolContext, replaceSavedWorkflow, report as reportLspDiagnostics, resetBlockerCounter, resetBudget, resolveClassifierModel, resolveConstructedAgent, resolveExtensionEntrypoint, resolveKodaXManual, resolveReasoningMode, resolveRepoIntelligenceMode, resolveRepoIntelligenceRuntimeConfig, resolveResilienceConfig, resolveToolCapability, resolveWorkflowGenerationTimeoutMs, resolveWorkflowIdentity, revoke, rollbackSelfModify, runAstRules, runKodaX, runLlmReview, runManagedTask, runOrchestration, runWorkflowFromOptions, runWorkflowModule, safeWorkflowArtifactName, saveGeneratedWorkflow, saveGeneratedWorkflowFromRun, setActiveExtensionRuntime, shouldFlipBudgetLimited, speculativeRace, stage, startKodaX, startManagedWorkflow, stripAssistantText, stripHtmlToText, test as testArtifact, toolAskUserQuestion, toolBash, toolChangedDiff, toolChangedScope, toolCodeSearch, toolEdit, toolGlob, toolGrep, toolImpactEstimate, toolInsertAfterAnchor, toolModuleContext, toolPermission, toolProcessContext, toolRead, toolRepoOverview, toolSemanticLookup, toolSymbolContext, toolUndo, toolWebFetch, toolWebSearch, toolWrite, truncateHead, truncateLine, truncateTail, turnWallTimeDelta, validateGeneratedWorkflowSource, validateSubtaskIndependence, validateToolSchemaForProvider, verifyGoalCompletion, webhook, withManualToolBranding, workerAgent };
-export type { AbsoluteDenyMatch, AbsoluteDenyMiss, AbsoluteDenyResult, AgentArtifact, ArtifactStatus, AstCheckResult, AstRuleId, AstRuleViolation, AuditEntry, AuditEventKind, AuthorWorkflowViaWorkerHandle, AuthorWorkflowViaWorkerInput, BashClassificationResult, BashClassifierConfig, BashRiskLevel, BlockerAttemptResult, BootstrapTracingOptions, BudgetState, BuildClassifierPromptInput, BuildPromptInput, Capabilities, ChangedFileEntry, ChangedFileStatus, ChangedScopeAreaSummary, ChangedScopeReport, ClassifierDecision, ClassifierPrompt, ClassifyDecision, ClassifyOptions, CodingWorkflowBackendDeps, ConstructionArtifact, ConstructionPolicy, ConstructionPolicyVerdict, CreateCtxProxyOptions, CreateKodaXTaskRunnerOptions, CreateWorkflowLifecycleControllerOptions, DeleteSavedWorkflowInput, DeleteWorkflowRunOptions, DenialRecord, DenialTracker, DisableState, DiscoverMarkdownAgentsResult, DiscoveredMarkdownAgent, EditRecoveryDiagnostic, EditToolErrorCode, ErrorClassification, ExecOptions, ExecResult, ExtensionCommandContext, ExtensionCommandDefinition, ExtensionCommandInvocation, ExtensionCommandResult, ExtensionContributionSource, ExtensionDiscoveryResult, ExtensionDiscoverySkipReason, ExtensionEventMap, ExtensionFailureDiagnostic, ExtensionFailureStage, ExtensionHookMap, ExtensionLoadSource, ExtensionLogger, ExtensionRuntimeController, ExtensionRuntimeDiagnostics, ExtensionToolBeforeHookContext, GenerateWorkflowFromOptionsInput, GenerateWorkflowInput, GeneratedWorkflow, GoalCompletionVerifier, ImpactEstimateResult, InvestigationFinding, KodaXAgentWorkerSpec, KodaXExtensionAPI, KodaXExtensionActivationResult, KodaXExtensionModule, KodaXPromptSection, KodaXPromptSectionDefinition, KodaXPromptSectionSlot, KodaXPromptSectionStability, KodaXPromptSnapshot, KodaXPromptSnapshotMetadata, KodaXProviderCapabilitySnapshot, KodaXProviderPolicyDecision, KodaXProviderPolicyIssue, KodaXProviderPolicyIssueSeverity, KodaXProviderSourceKind, KodaXRetrievalArtifact, KodaXRetrievalFreshness, KodaXRetrievalItem, KodaXRetrievalResult, KodaXRetrievalScope, KodaXRetrievalToolName, KodaXRetrievalTrust, LanguageCapabilityTier, LlmReviewClient, LlmReviewResult, LlmReviewVerdict, LoadAgentsFromMarkdownOptions, LoadAgentsFromMarkdownResult, LoadGeneratedWorkflowFromRunInput, LoadHandlerOptions, LoadHandlerScope, LoadedExtensionDiagnostic, LoadedGeneratedWorkflowFromRun, LocalToolDefinition, ManagedWorkflowRun, ManagedWorkflowSnapshot, ManagedWorkflowSource, MarkdownLoadFailure, McpReverseWorkspace, ModelProviderRegistration, ModuleCapsule, ModuleContextResult, OfficialSandboxMode, OfficialSandboxOptions, OrchestrationArtifact, OrchestrationCompletedTask, OrchestrationRunEvents, OrchestrationRunOptions, OrchestrationRunResult, OrchestrationTaskBudget, OrchestrationTaskContext, OrchestrationTaskExecution, OrchestrationTaskStatus, OrchestrationTraceEvent, OrchestrationWorkerResult, OrchestrationWorkerRunner, OrchestrationWorkerSpec, ParallelDispatchDirective, ParallelDispatchResult, ParallelInvestigationArgs, ParallelInvestigationResult, ParallelSubtask, ParsedModelSpec, ProcessCapsule, ProcessContextResult, ProcessStep, ProtocolEmitterMetadata, RegisteredCapabilityProviderDiagnostic, RegisteredCommandDiagnostic, RegisteredHookDiagnostic, RegisteredToolDefinition, RegisteredToolDiagnostic, RenameSavedWorkflowInput, ReplaceSavedWorkflowInput, ReplaceSavedWorkflowResult, RepoAreaKind, RepoAreaOverview, RepoIntelligenceIndex, RepoIntelligenceRuntimeInspection, RepoLanguageId, RepoLanguageSupport, RepoOverview, RepoSymbolKind, RepoSymbolRecord, RepoSymbolReference, ResolveClassifierModelOptions, ResolveSource, ResolvedClassifierModel, RollbackResult, RunGraphWriter, RunGraphWriterDeps, RunJsonInput, RunWorkflowFromOptionsInput, RunWorkflowModuleOptions, RunWorkflowModuleOutcome, RunningSession, SaveGeneratedWorkflowFromRunInput, SaveGeneratedWorkflowInput, SavedGeneratedWorkflowFile, SavedWorkflowDirs, SavedWorkflowExecution, SavedWorkflowRef, SavedWorkflowSource, SchemaProvider, SchemaValidationResult, ScriptSource, SelfModifyAskUser, SelfModifyAskUserInput, SelfModifyDiffSeverity, SelfModifyDiffSummary, SkippedExtensionDiscoveryEntry, SpeculativeResult, StagedHandle, StartManagedWorkflowInput, StartManagedWorkflowResult, StripOptions, SymbolContextResult, TestArtifactOptions, TestResult, TierZeroPatternId, ToolContent, ToolDefinitionSource, ToolHandler, ToolRegistrationOptions, ToolRegistry, VerifyGoalCompletionOptions, WebhookOptions, WebhookResult, WorkflowCapsulePreflightEnvironment, WorkflowCapsulePreflightInput, WorkflowCapsulePreflightIssue, WorkflowCapsulePreflightResult, WorkflowChildOptions, WorkflowGenerationResult, WorkflowGenerationTextFn, WorkflowGenerationTextRequest, WorkflowIdentityResolution, WorkflowIdentityResolverInput, WorkflowLifecycleController, WorkflowPatternTemplate, WorkflowRunListOptions, WorkflowRunManager, WorkflowRunProcessMetadata, WorkflowRunRetentionOptions, WorkflowRunRetentionResult, WorkflowScriptSnapshotInput, WorkflowScriptSnapshotRef };
+export { Agent, AgentMessage, AutoRules, BLOCKER_REQUIRED_CONSECUTIVE_TURNS, BUILTIN_WORKFLOWS, BoundExtensionRuntimeController, CANCELLED_TOOL_RESULT_MESSAGE, CANCELLED_TOOL_RESULT_PREFIX, CODING_AGENT_MARKER, CODING_INVARIANTS, CODING_SUMMARY_PROMPT, CODING_UPDATE_SUMMARY_PROMPT, CapabilityDeniedError, CapabilityKind, CapabilityProvider, CapabilityResult, KodaXClient as Client, CombinedExtensionRuntime, ConstructionManifestError, DEFAULT_CODING_AGENT_NAME, DEFAULT_DANGEROUS_PATTERNS, DEFAULT_HANDLER_TIMEOUT_MS, DEFAULT_RESILIENCE_CONFIG, DEFAULT_SAFE_PATTERNS, DEFAULT_SELF_MODIFY_BUDGET, DEFAULT_WINDOW_MS as DEFAULT_SPECULATIVE_WINDOW_MS, DEFAULT_TOOL_OUTPUT_MAX_BYTES, DEFAULT_TOOL_OUTPUT_MAX_LINES, DEFAULT_WORKFLOW_GENERATION_TIMEOUT_MS, EMIT_VERDICT_TOOL_NAME, ErrorCategory, ExtensionRuntimeContract, FailureStage, GENERATOR_AGENT_NAME, GoalCompleteResult, Guardrail, KODAX_TOOLS, KODAX_UNDERLYING_CAPABILITY_TOPICS, KodaXAgentScope, KodaXBaseProvider, KodaXChildContextBundle, KodaXClient, KodaXContentBlock, KodaXContextOptions, KodaXEvents, KodaXExecutionMode, KodaXExtensionRuntime, KodaXExtensionSessionRecord, KodaXInputArtifact, KodaXJsonValue, KodaXManualTopic, KodaXManualTopicId, KodaXMessage, KodaXOptions, KodaXProviderCapabilityProfile, KodaXProviderPolicyHints, KodaXReasoningCapability, KodaXReasoningMode, KodaXRepoIntelligenceCapability, KodaXRepoIntelligenceMode, KodaXRepoIntelligenceResolvedMode, KodaXRepoIntelligenceTrace, KodaXRepoRoutingSignals, KodaXResult, KodaXSessionControl, KodaXSessionError, KodaXSessionMutators, KodaXTaskRoutingDecision, KodaXTaskType, KodaXTerminalError, KodaXThinkingDepth, KodaXTimeoutConfig, KodaXTokenUsage, KodaXToolDefinition, KodaXToolError, KodaXToolExecutionContext, KodaXToolUseBlock, KodaXWireReasoningEffort, MANUAL_REGISTRY, MANUAL_TOPIC_IDS, McpCapabilityProvider, McpProviderOptions, McpReverseCapabilities, McpRoot, McpServersConfig, PLANNER_AGENT_NAME, PROMPT_SECTION_REGISTRY, PROTOCOL_EMITTER_TOOLS, ProviderExecutionState, ProviderRecoveryCoordinator, ProviderResilienceConfig, ProviderResiliencePolicy, READ_DEFAULT_LIMIT, READ_MAX_LINE_CHARS, READ_PREFLIGHT_SIZE_BYTES, REPO_EXPLORER_AGENT_NAME, REPO_EXPLORER_TOOL_NAMES, RecoveryDecision, RecoveryResult, ResilienceClassification, ResolveKodaXManualInput, ResolveKodaXManualOptions, ResolveKodaXManualResult, RuntimeDefaultsSnapshot, SCOUT_AGENT_NAME, SCOUT_THEN_AUTHOR_PROMPT_LINES, SELF_KNOWLEDGE_ROUTING_RULE, SYSTEM_PROMPT, SYSTEM_WORKFLOW_LIMITS, SessionErrorMetadata, SignalCollector, StableBoundaryTracker, TASK_ENGINE_ROLE_AGENTS, TOOL_RESULT_TRUNCATION_GUARDRAIL_NAME, TRACING_ENV, ToolCallSignal, ToolSideEffect, WORKER_AGENT_NAME, WORKFLOW_GENERATION_SYSTEM_PROMPT, WorkflowEventCorrelation, WorkflowHostPolicy, _resetRuntimeForTesting, activate, analyzeChangedScope, appendAuditEntry, applyAccountingDelta, applyToolResultGuardrail, authorWorkflowViaWorker, bashSignalCollector, bootstrapTracing, boundedRevise, budgetCeiling, buildApprovalSummary, buildBlockedGoal, buildCapabilityContextSections, buildClassifierPrompt, buildCompleteGoal, buildCreatedGoal, buildFallbackRoutingDecision, buildLlmReviewPrompt, buildManualToolDescription, buildMcpReverseCapabilities, buildPausedGoal, buildPromptMessageContent, buildPromptSnapshot, buildProviderCapabilitySnapshot, buildProviderPolicyHintsForDecision, buildProviderPolicyPromptNotes, buildRepoIntelligenceContext, buildRepoIntelligenceIndex, buildRepoOverview, buildResumedGoal, buildScoutThenAuthorPrompt, buildSelfKnowledgeRoutingRule, buildSystemPrompt, buildSystemPromptSnapshot, buildWorkflowGenerationSkillContext, buildWorkflowGenerationUserPrompt, checkAbsoluteDeny, checkIncompleteToolCalls, checkPromiseSignal, clampWorkflowLimits, classify, classifyBashCommand, classifyError, classifyResilienceError, combineExtensionRuntimes, computeInputSignature, configureRuntime, convertCapabilityReadResult, convertProviderSearchResults, createBashClassifierConfig, createBuiltinToolDefinition, createCodingWorkflowBackend, createCtxProxy, createDefaultCodingAgent, createDenialTracker, createExtensionRuntime, createKodaXTaskRunner, createPromptSection, createReasoningPlan, createRunGraphWriter, createSessionControl, createToolResultTruncationGuardrail, createWorkflowLifecycleController, createWorkflowPatternTemplateModule, createWorkflowRunManager, dedupeExtensionPathsByEntrypoint, defaultPolicy, deleteSavedWorkflow, disableSelfModify, discoverDefaultExtensions, discoverExtensionsInDirectory, discoverExtensionsInDirectoryDetailed, discoverMarkdownAgents, discoverSavedWorkflows, emitVerdict, emitWorkflowAgentDigest, ensureBuiltinRepoExplorerAgent, evaluateProviderPolicy, excludeExtensionPathsByEntrypoint, exec, executeTool, extractComparableUserMessageText, extractHtmlTitle, extractPromptComparableText, fileSignalCollector, finalizeRetrievalResult, findByVersion, formatParallelDispatchResult, formatSize, generateWorkflow, generateWorkflowFromOptions, getActiveExtensionRuntime, getAllRegisteredTools, getBuiltinRegisteredToolDefinition, getBuiltinToolDefinition, getBuiltinWorkflow, getDefaultExtensionDirectory, getDefaultWorkflowRunManager, getDenialContext, getImpactEstimate, getModuleContext, getProcessContext, getRegisteredToolDefinition, getRepoIntelligenceIndex, getRepoOverview, getRepoRoutingSignals, getRequiredToolParams, getSymbolContext, getTool, getToolDefinition, getToolRegistrations, getToolResultPolicy, getWorkflowPatternTemplate, goalTokenDelta, inferTaskType, inspectEditFailure, inspectRepoIntelligenceRuntime, isDeniedRecently, isParallelDispatchDirective, isSessionRecoveryCandidateError, isSupportedExtensionModulePath, isToolFileMutation, isToolMutation, isToolNetworkRead, isToolPlanModeAllowed, isValidTokenBudget, languageIdForPath, listAll, list as listArtifacts, listBuiltinToolDefinitions, listBuiltinWorkflows, listConstructed, listToolDefinitions, listTools, listWorkflowPatternTemplates, loadAgentsFromMarkdown, loadGeneratedWorkflowFromRun, loadHandler, loadMarkdownAgentScope, loadSavedWorkflow, loadSavedWorkflowCapsule, mcpRootsFromWorkspace, normalizeWorkflowModule, orderPromptSections, parallelInvestigation, parseClassifierOutput, parseEditToolError, parseLlmReviewVerdict, parseModelSpec, parseWorkflowGeneration, persistToolOutput, preflightWorkflowCapsule, prewarmRepoIntelligenceCaches, readArtifact, readAuditEntries, readBudget, readDisableState, readWindowFromEnv as readSpeculativeWindowFromEnv, reasoningModeToDepth, reconstructMessagesWithToolGuard, recordBlockerAttempt, recordDenial, registerCodingInvariants, registerConfiguredMcpCapabilityProvider, registerOfficialSandboxExtension, registerTool, rehydrateActiveArtifacts, remaining as remainingSelfModifyBudget, renameSavedWorkflow, renderChangedScope, renderImpactEstimate, renderModuleContext, renderProcessContext, renderPromptSections, renderRepoOverview, renderRetrievalResult, renderSymbolContext, replaceSavedWorkflow, report as reportLspDiagnostics, resetBlockerCounter, resetBudget, resolveClassifierModel, resolveExtensionEntrypoint, resolveKodaXManual, resolveReasoningMode, resolveRepoIntelligenceMode, resolveRepoIntelligenceRuntimeConfig, resolveResilienceConfig, resolveToolCapability, resolveWorkflowGenerationTimeoutMs, resolveWorkflowIdentity, revoke, rollbackSelfModify, runAstRules, runKodaX, runLlmReview, runManagedTask, runOrchestration, runWorkflowFromOptions, runWorkflowModule, safeWorkflowArtifactName, saveGeneratedWorkflow, saveGeneratedWorkflowFromRun, setActiveExtensionRuntime, shouldFlipBudgetLimited, speculativeRace, stage, startKodaX, startManagedWorkflow, stripAssistantText, stripHtmlToText, test as testArtifact, toolAskUserQuestion, toolBash, toolChangedDiff, toolChangedScope, toolCodeSearch, toolEdit, toolGlob, toolGrep, toolImpactEstimate, toolInsertAfterAnchor, toolModuleContext, toolPermission, toolProcessContext, toolRead, toolRepoOverview, toolSemanticLookup, toolSymbolContext, toolUndo, toolWebFetch, toolWebSearch, toolWrite, truncateHead, truncateLine, truncateTail, turnWallTimeDelta, validateGeneratedWorkflowSource, validateSubtaskIndependence, validateToolSchemaForProvider, verifyGoalCompletion, webhook, withManualToolBranding, workerAgent };
+export type { AbsoluteDenyMatch, AbsoluteDenyMiss, AbsoluteDenyResult, AgentArtifact, ArtifactStatus, AstCheckResult, AstRuleId, AstRuleViolation, AuditEntry, AuditEventKind, AuthorWorkflowViaWorkerHandle, AuthorWorkflowViaWorkerInput, BashClassificationResult, BashClassifierConfig, BashRiskLevel, BlockerAttemptResult, BootstrapTracingOptions, BudgetState, BuildClassifierPromptInput, BuildPromptInput, Capabilities, ChangedFileEntry, ChangedFileStatus, ChangedScopeAreaSummary, ChangedScopeReport, ClassifierDecision, ClassifierPrompt, ClassifyDecision, ClassifyOptions, CodingWorkflowBackendDeps, ConstructionArtifact, ConstructionPolicy, ConstructionPolicyVerdict, CreateCtxProxyOptions, CreateKodaXTaskRunnerOptions, CreateWorkflowLifecycleControllerOptions, DeleteSavedWorkflowInput, DeleteWorkflowRunOptions, DenialRecord, DenialTracker, DisableState, DiscoverMarkdownAgentsResult, DiscoveredMarkdownAgent, EditRecoveryDiagnostic, EditToolErrorCode, ErrorClassification, ExecOptions, ExecResult, ExtensionCommandContext, ExtensionCommandDefinition, ExtensionCommandInvocation, ExtensionCommandResult, ExtensionContributionSource, ExtensionDiscoveryResult, ExtensionDiscoverySkipReason, ExtensionEventMap, ExtensionFailureDiagnostic, ExtensionFailureStage, ExtensionHookMap, ExtensionLoadSource, ExtensionLogger, ExtensionRuntimeController, ExtensionRuntimeDiagnostics, ExtensionToolBeforeHookContext, GenerateWorkflowFromOptionsInput, GenerateWorkflowInput, GeneratedWorkflow, GoalCompletionVerifier, ImpactEstimateResult, InvestigationFinding, KodaXAgentWorkerSpec, KodaXExtensionAPI, KodaXExtensionActivationResult, KodaXExtensionModule, KodaXPromptSection, KodaXPromptSectionDefinition, KodaXPromptSectionSlot, KodaXPromptSectionStability, KodaXPromptSnapshot, KodaXPromptSnapshotMetadata, KodaXProviderCapabilitySnapshot, KodaXProviderPolicyDecision, KodaXProviderPolicyIssue, KodaXProviderPolicyIssueSeverity, KodaXProviderSourceKind, KodaXRetrievalArtifact, KodaXRetrievalFreshness, KodaXRetrievalItem, KodaXRetrievalResult, KodaXRetrievalScope, KodaXRetrievalToolName, KodaXRetrievalTrust, LanguageCapabilityTier, LlmReviewClient, LlmReviewResult, LlmReviewVerdict, LoadAgentsFromMarkdownOptions, LoadAgentsFromMarkdownResult, LoadGeneratedWorkflowFromRunInput, LoadHandlerOptions, LoadHandlerScope, LoadMarkdownAgentScopeOptions, LoadMarkdownAgentScopeResult, LoadedExtensionDiagnostic, LoadedGeneratedWorkflowFromRun, LoadedMarkdownAgent, LocalToolDefinition, ManagedWorkflowRun, ManagedWorkflowSnapshot, ManagedWorkflowSource, MarkdownAgentLoadWarning, MarkdownAgentToolFilter, MarkdownLoadFailure, McpReverseWorkspace, ModelProviderRegistration, ModuleCapsule, ModuleContextResult, OfficialSandboxMode, OfficialSandboxOptions, OrchestrationArtifact, OrchestrationCompletedTask, OrchestrationRunEvents, OrchestrationRunOptions, OrchestrationRunResult, OrchestrationTaskBudget, OrchestrationTaskContext, OrchestrationTaskExecution, OrchestrationTaskStatus, OrchestrationTraceEvent, OrchestrationWorkerResult, OrchestrationWorkerRunner, OrchestrationWorkerSpec, ParallelDispatchDirective, ParallelDispatchResult, ParallelInvestigationArgs, ParallelInvestigationResult, ParallelSubtask, ParsedModelSpec, ProcessCapsule, ProcessContextResult, ProcessStep, ProtocolEmitterMetadata, RegisteredCapabilityProviderDiagnostic, RegisteredCommandDiagnostic, RegisteredHookDiagnostic, RegisteredToolDefinition, RegisteredToolDiagnostic, RenameSavedWorkflowInput, ReplaceSavedWorkflowInput, ReplaceSavedWorkflowResult, RepoAreaKind, RepoAreaOverview, RepoIntelligenceIndex, RepoIntelligenceRuntimeInspection, RepoLanguageId, RepoLanguageSupport, RepoOverview, RepoSymbolKind, RepoSymbolRecord, RepoSymbolReference, ResolveClassifierModelOptions, ResolveSource, ResolvedClassifierModel, RollbackResult, RunGraphWriter, RunGraphWriterDeps, RunJsonInput, RunWorkflowFromOptionsInput, RunWorkflowModuleOptions, RunWorkflowModuleOutcome, RunningSession, SaveGeneratedWorkflowFromRunInput, SaveGeneratedWorkflowInput, SavedGeneratedWorkflowFile, SavedWorkflowDirs, SavedWorkflowExecution, SavedWorkflowRef, SavedWorkflowSource, SchemaProvider, SchemaValidationResult, ScriptSource, SelfModifyAskUser, SelfModifyAskUserInput, SelfModifyDiffSeverity, SelfModifyDiffSummary, SkippedExtensionDiscoveryEntry, SpeculativeResult, StagedHandle, StartManagedWorkflowInput, StartManagedWorkflowResult, StripOptions, SymbolContextResult, TestArtifactOptions, TestResult, TierZeroPatternId, ToolContent, ToolDefinitionSource, ToolHandler, ToolRegistrationOptions, ToolRegistry, VerifyGoalCompletionOptions, WebhookOptions, WebhookResult, WorkflowCapsulePreflightEnvironment, WorkflowCapsulePreflightInput, WorkflowCapsulePreflightIssue, WorkflowCapsulePreflightResult, WorkflowChildOptions, WorkflowGenerationResult, WorkflowGenerationTextFn, WorkflowGenerationTextRequest, WorkflowIdentityResolution, WorkflowIdentityResolverInput, WorkflowLifecycleController, WorkflowPatternTemplate, WorkflowRunListOptions, WorkflowRunManager, WorkflowRunProcessMetadata, WorkflowRunRetentionOptions, WorkflowRunRetentionResult, WorkflowScriptSnapshotInput, WorkflowScriptSnapshotRef };