@kodax-ai/kodax 0.7.63 → 0.7.66

package/dist/sdk-coding.d.ts

@@ -1,315 +1,35 @@
-import { a8 as KodaXWireReasoningEffort, a0 as KodaXToolDefinition, a2 as KodaXToolResultContentItem, j as KodaXMessage, a5 as KodaXToolUseBlock, c as KodaXContentBlock, o as KodaXProviderCapabilityProfile, A as KodaXReasoningCapability, E as KodaXReasoningMode, U as KodaXTaskType, e as KodaXExecutionMode, T as KodaXTaskRoutingDecision, Z as KodaXThinkingDepth, $ as KodaXTokenUsage } from './types-chunks/types.d-Bp4Lm1jv.js';
+import { a0 as KodaXToolDefinition, a2 as KodaXToolResultContentItem, a5 as KodaXToolUseBlock, c as KodaXContentBlock, j as KodaXMessage, o as KodaXProviderCapabilityProfile, A as KodaXReasoningCapability, E as KodaXReasoningMode, U as KodaXTaskType, e as KodaXExecutionMode, T as KodaXTaskRoutingDecision, a8 as KodaXWireReasoningEffort, Z as KodaXThinkingDepth, $ as KodaXTokenUsage } from './types-chunks/types.d-Bp4Lm1jv.js';
 export { b as KodaXChildFanoutClass, d as KodaXCustomProviderConfig, h as KodaXImageBlock, k as KodaXModelDescriptor, m as KodaXNormalizedReasoningRequest, n as KodaXProtocolFamily, p as KodaXProviderConfig, r as KodaXProviderConversationSemantics, u as KodaXProviderMcpSupport, x as KodaXProviderStreamOptions, z as KodaXProviderTransport, B as KodaXReasoningEffortPreset, C as KodaXReasoningEffortRequest, D as KodaXReasoningEffortWireStrategy, F as KodaXReasoningProfile, G as KodaXReasoningRequest, H as KodaXRedactedThinkingBlock, I as KodaXReviewScale, J as KodaXRiskLevel, L as KodaXStableEffortIntent, M as KodaXStreamResult, O as KodaXTaskBudgetOverrides, R as KodaXTaskResultMetadata, S as KodaXTaskResultSource, W as KodaXTextBlock, X as KodaXThinkingBlock, Y as KodaXThinkingBudgetMap, _ as KodaXThinkingWireStrategy, a1 as KodaXToolResultBlock } from './types-chunks/types.d-Bp4Lm1jv.js';
 export { K as KODAX_DEFAULT_PROVIDER, b as KODAX_PROVIDERS, c as KODAX_PROVIDER_SNAPSHOTS, d as KODAX_REASONING_MODE_SEQUENCE, f as KODAX_STABLE_EFFORT_INTENTS, g as KodaXAnthropicCompatProvider, h as KodaXError, i as KodaXModelCapabilities, k as KodaXOpenAICompatProvider, l as KodaXProviderError, m as KodaXRateLimitError, P as ProviderName, R as ResolveWireEffortInput, o as ResolvedWireEffort, q as clearRuntimeModelProviders, r as createCustomProvider, s as effortToLegacyReasoningMode, t as getAvailableProviderNames, u as getCustomModelCapabilities, v as getCustomProvider, w as getCustomProviderList, x as getCustomProviderModelDescriptors, y as getCustomProviderModels, z as getCustomProviderNames, B as getModelCapabilities, C as getProvider, D as getProviderConfiguredCapabilityProfile, E as getProviderConfiguredReasoningCapability, F as getProviderList, G as getProviderModel, H as getProviderModelDescriptors, I as getProviderModels, L as getRuntimeModelProvider, M as getRuntimeModelProviderNames, N as isCustomProviderName, O as isKnownProvider, Q as isProviderConfigured, S as isProviderName, U as isRuntimeModelProviderName, V as listAllModelCapabilities, W as listBuiltinModelCapabilities, X as listCustomProviderModelCapabilities, _ as mapLegacyReasoningModeToEffortIntent, $ as normalizeReasoningEffortValue, a1 as parseReasoningEffortEnv, a2 as registerCustomProviders, a3 as registerModelProvider, a4 as resolveModelCapabilities, a5 as resolveProvider, a6 as resolveProviderModelDescriptors, a7 as resolveReasoningEffort, a8 as resolveReasoningEffortForModelSwitch, aa as resolveWireEffort, ab as validateCustomProviderConfig } from './types-chunks/resolver.d-CGkfRULj.js';
 import { a as CostTracker } from './types-chunks/cost-tracker.d-CBLk1fiD.js';
 export { K as KodaXLlmTimeoutConfig, p as parseTimeoutSecEnvMs, t as timeoutSecToMs } from './types-chunks/cost-tracker.d-CBLk1fiD.js';
 import { K as KodaXBaseProvider } from './types-chunks/base.d-DalIRhbb.js';
-import { C as CapabilityKind, a as CapabilityProvider, b as CapabilityResult } from './types-chunks/capability.d-3C62G8Eq.js';
-import { aq as KodaXToolExecutionContext, aX as ToolSideEffect, o as KodaXAgentScope, V as KodaXRepoIntelligenceCapability, Y as KodaXRepoIntelligenceTrace, W as KodaXRepoIntelligenceMode, X as KodaXRepoIntelligenceResolvedMode, _ as KodaXRepoRoutingSignals, R as KodaXOptions, v as KodaXContextOptions, U as KodaXProviderPolicyHints, aI as ProviderResilienceConfig, aJ as ProviderResiliencePolicy, F as FailureStage, aO as ResilienceClassification, aG as ProviderExecutionState, aL as RecoveryDecision, aN as RecoveryResult, $ as KodaXResult, a3 as KodaXSessionControl, a4 as KodaXSessionMutators, H as KodaXManagedProtocolPayload, E as ExtensionRuntimeContract, aT as RuntimeDefaultsSnapshot, c as BoundExtensionRuntimeController, y as KodaXEvents, g as GoalCompleteResult, aQ as ResolveKodaXManualInput, aR as ResolveKodaXManualOptions, aS as ResolveKodaXManualResult, O as KodaXManualTopicId, N as KodaXManualTopic, d as ChildSnapshotEvent, s as KodaXChildContextBundle, t as KodaXChildExecutionResult, aY as WorkflowHostPolicy, ao as KodaXTimeoutConfig } from './types-chunks/bash-prefix-extractor.d-CZW9fRoa.js';
-export { B as BASH_POLICY_SPEC, a as BashPrefixExtractor, b as BashPrefixResult, C as CapabilityRuntimeContract, e as CreateBashPrefixExtractorOptions, D as DiagnosticsRequest, f as ExtractCommandPrefixOptions, G as GoalBlockedResult, h as GoalCreateInput, i as GoalLifecycleContext, j as GoalRuntimeBinding, k as GoalRuntimeBindingDeps, l as GoalToolsContext, K as KodaXActivityEventMeta, m as KodaXAgentMode, n as KodaXAgentProfile, p as KodaXBudgetDisclosureZone, q as KodaXBudgetExtensionRequest, r as KodaXChildAgentResult, u as KodaXCompactionOverride, w as KodaXContextTokenSnapshot, x as KodaXEffectiveTaskConfig, z as KodaXLiveEventMeta, A as KodaXManagedBudgetSnapshot, I as KodaXManagedTask, J as KodaXManagedTaskRuntimeState, L as KodaXManagedTaskStatusEvent, M as KodaXManualSource, P as KodaXManualTopicInput, Q as KodaXMemoryStrategy, S as KodaXOrchestrationVerdict, T as KodaXParentReductionContract, Z as KodaXRepoIntelligenceTraceEvent, a0 as KodaXRoleRoundSummary, a1 as KodaXRuntimeVerificationContract, a2 as KodaXSelfManualConfig, a5 as KodaXSessionOptions, a6 as KodaXSidecarMessageEvent, a7 as KodaXSkillDynamicContextPolicy, a8 as KodaXSkillInvocationContext, a9 as KodaXSkillMap, aa as KodaXSkillProjectionConfidence, ab as KodaXTaskCapabilityHint, ac as KodaXTaskContract, ad as KodaXTaskEvidenceArtifact, ae as KodaXTaskEvidenceBundle, af as KodaXTaskEvidenceEntry, ag as KodaXTaskRole, ah as KodaXTaskRoleAssignment, ai as KodaXTaskStatus, aj as KodaXTaskSurface, ak as KodaXTaskToolPolicy, al as KodaXTaskVerificationContract, am as KodaXTaskVerificationCriterion, an as KodaXTaskWorkItem, ap as KodaXToolEventMeta, ar as KodaXToolVisibilityMeta, as as KodaXToolVisibilityPolicy, at as KodaXTurnCompletedEvent, au as KodaXTurnDeliveryKind, av as KodaXTurnFailedEvent, aw as KodaXTurnStartedEvent, ax as KodaXVerificationScorecard, ay as KodaXVerificationScorecardCriterion, az as KodaXWorkflowAgentDigestEvent, aA as KodaXWorkflowEventMeta, aB as KodaXWorkflowTimeoutConfig, aC as LSP_SERVERS, aD as LspServerInfo, aE as LspService, aF as LspServiceConfig, aH as ProviderRecoveryEvent, aK as RecoveryAction, aM as RecoveryLadderStep, aP as ResilienceErrorClass, aU as TodoItem, aV as TodoList, aW as TodoStatus, aZ as WorkflowInvocationAction, a_ as WorkflowInvocationPolicyDecision, a$ as WorkflowInvocationPolicyInput, b0 as WorkflowInvocationSource, b1 as WorkflowRunProgressView, b2 as WorkflowStartOutcome, b3 as WorkflowToolHost, b4 as WorkflowToolHostInlineInput, b5 as WorkflowToolHostResult, b6 as WorkflowToolHostStartResult, b7 as buildGoalRuntimeBinding, b8 as createBashPrefixExtractor, b9 as decideWorkflowInvocation, ba as drainPendingSwaps, bb as extractCommandPrefix, bc as getDefaultLspService, bd as hasPendingSwap, be as makeDisabledGoalToolsContext, bf as providerResilienceConfigFromTimeouts, bg as resolveConstructedAgent, bh as shutdownDefaultLspService, bi as withGoalBeforeNextTurn, bj as withGoalStopHook, bk as workflowStartOutcomeConsumesTurn } from './types-chunks/bash-prefix-extractor.d-CZW9fRoa.js';
+import { b as CapabilityResult, a as CapabilityProvider } from './types-chunks/capability.d-3C62G8Eq.js';
+export { C as CapabilityKind } from './types-chunks/capability.d-3C62G8Eq.js';
+import { aw as KodaXToolExecutionContext, t as KodaXAgentScope, b3 as RuntimeContextPressure, b0 as RuntimeContextBudgetSnapshot, $ as KodaXRepoIntelligenceCapability, a2 as KodaXRepoIntelligenceTrace, a0 as KodaXRepoIntelligenceMode, a1 as KodaXRepoIntelligenceResolvedMode, a4 as KodaXRepoRoutingSignals, X as KodaXOptions, H as KodaXContextOptions, _ as KodaXProviderPolicyHints, aO as ProviderResilienceConfig, aP as ProviderResiliencePolicy, F as FailureStage, aU as ResilienceClassification, aM as ProviderExecutionState, aR as RecoveryDecision, aT as RecoveryResult, a5 as KodaXResult, a9 as KodaXSessionControl, aa as KodaXSessionMutators, O as KodaXManagedProtocolPayload, E as ExtensionRuntimeContract, b4 as RuntimeDefaultsSnapshot, c as BoundExtensionRuntimeController, L as KodaXEvents, l as GoalCompleteResult, aW as ResolveKodaXManualInput, aX as ResolveKodaXManualOptions, aY as ResolveKodaXManualResult, U as KodaXManualTopicId, T as KodaXManualTopic, d as ChildSnapshotEvent, x as KodaXChildContextBundle, y as KodaXChildExecutionResult, be as WorkflowHostPolicy, au as KodaXTimeoutConfig } from './types-chunks/bash-prefix-extractor.d-BjkITAva.js';
+export { A as ALWAYS_RESIDENT_TOOL_NAMES, B as BASH_POLICY_SPEC, a as BashPrefixExtractor, b as BashPrefixResult, C as CapabilityRuntimeContract, e as CompactionAntiThrashConfig, f as CompactionAntiThrashState, g as CompactionSavingsDecision, h as CompactionSavingsSample, i as CompactionSkipReason, j as CreateBashPrefixExtractorOptions, D as DiagnosticsRequest, k as ExtractCommandPrefixOptions, G as GoalBlockedResult, m as GoalCreateInput, n as GoalLifecycleContext, o as GoalRuntimeBinding, p as GoalRuntimeBindingDeps, q as GoalToolsContext, K as KodaXActivityEventMeta, r as KodaXAgentMode, s as KodaXAgentProfile, u as KodaXBudgetDisclosureZone, v as KodaXBudgetExtensionRequest, w as KodaXChildAgentResult, z as KodaXCompactionOverride, I as KodaXContextTokenSnapshot, J as KodaXEffectiveTaskConfig, M as KodaXLiveEventMeta, N as KodaXManagedBudgetSnapshot, P as KodaXManagedTask, Q as KodaXManagedTaskRuntimeState, R as KodaXManagedTaskStatusEvent, S as KodaXManualSource, V as KodaXManualTopicInput, W as KodaXMemoryStrategy, Y as KodaXOrchestrationVerdict, Z as KodaXParentReductionContract, a3 as KodaXRepoIntelligenceTraceEvent, a6 as KodaXRoleRoundSummary, a7 as KodaXRuntimeVerificationContract, a8 as KodaXSelfManualConfig, ab as KodaXSessionOptions, ac as KodaXSidecarMessageEvent, ad as KodaXSkillDynamicContextPolicy, ae as KodaXSkillInvocationContext, af as KodaXSkillMap, ag as KodaXSkillProjectionConfidence, ah as KodaXTaskCapabilityHint, ai as KodaXTaskContract, aj as KodaXTaskEvidenceArtifact, ak as KodaXTaskEvidenceBundle, al as KodaXTaskEvidenceEntry, am as KodaXTaskRole, an as KodaXTaskRoleAssignment, ao as KodaXTaskStatus, ap as KodaXTaskSurface, aq as KodaXTaskToolPolicy, ar as KodaXTaskVerificationContract, as as KodaXTaskVerificationCriterion, at as KodaXTaskWorkItem, av as KodaXToolEventMeta, ax as KodaXToolVisibilityMeta, ay as KodaXToolVisibilityPolicy, az as KodaXTurnCompletedEvent, aA as KodaXTurnDeliveryKind, aB as KodaXTurnFailedEvent, aC as KodaXTurnStartedEvent, aD as KodaXVerificationScorecard, aE as KodaXVerificationScorecardCriterion, aF as KodaXWorkflowAgentDigestEvent, aG as KodaXWorkflowEventMeta, aH as KodaXWorkflowTimeoutConfig, aI as LSP_SERVERS, aJ as LspServerInfo, aK as LspService, aL as LspServiceConfig, aN as ProviderRecoveryEvent, aQ as RecoveryAction, aS as RecoveryLadderStep, aV as ResilienceErrorClass, aZ as RuntimeCompactionSkippedEvent, a_ as RuntimeContextBudgetBreakdown, a$ as RuntimeContextBudgetRecommendation, b1 as RuntimeContextBudgetSnapshotInput, b2 as RuntimeContextOptimizationProfile, b5 as RuntimeToolExposureDecision, b6 as RuntimeToolExposureMode, b7 as RuntimeToolExposurePlan, b8 as RuntimeToolExposurePlanInput, b9 as RuntimeToolExposureReason, ba as TodoItem, bb as TodoList, bc as TodoStatus, bd as ToolSideEffect, bf as WorkflowInvocationAction, bg as WorkflowInvocationPolicyDecision, bh as WorkflowInvocationPolicyInput, bi as WorkflowInvocationSource, bj as WorkflowRunProgressView, bk as WorkflowStartOutcome, bl as WorkflowToolHost, bm as WorkflowToolHostInlineInput, bn as WorkflowToolHostResult, bo as WorkflowToolHostStartResult, bp as buildGoalRuntimeBinding, bq as consumeCompactionCooldown, br as createBashPrefixExtractor, bs as createCompactionAntiThrashState, bt as createRuntimeContextBudgetSnapshot, bu as decideWorkflowInvocation, bv as drainPendingSwaps, bw as estimateToolSchemaTokens, bx as extractCommandPrefix, by as getDefaultLspService, bz as hasPendingSwap, bA as makeDisabledGoalToolsContext, bB as planToolExposure, bC as providerResilienceConfigFromTimeouts, bD as recordCompactionSavings, bE as resolveConstructedAgent, bF as shouldSkipLlmCompaction, bG as shutdownDefaultLspService, bH as withGoalBeforeNextTurn, bI as withGoalStopHook, bJ as workflowStartOutcomeConsumesTurn } from './types-chunks/bash-prefix-extractor.d-BjkITAva.js';
 export { CreateFileArtifactFromPathOptions, CreateImageArtifactFromPathOptions, CreateVideoArtifactFromPathOptions, EnqueueWithArtifactsInput, GetModelInputCapabilitiesInput, ImageResizeError, KODAX_FILE_MEDIA_TYPES, KODAX_IMAGE_MEDIA_TYPES, KODAX_VIDEO_MEDIA_TYPES, KodaXInputCapabilityStatus, KodaXMediaError, KodaXMediaErrorCode, KodaXMediaErrorOptions, KodaXModalityInputCapability, MAX_DIMENSION, ModelInputCapabilities, NormalizeImageOptions, NormalizedImage, PASTE_TMP_DIR_ENV, PASTE_TMP_TTL_MS, PersistImageAsBlockOptions, TARGET_RAW_SIZE_BYTES, ValidateInputArtifactsOptions, createFileArtifactFromPath, createImageArtifactFromPath, createVideoArtifactFromPath, enqueueWithArtifacts, getModelInputCapabilities, inferImageMediaType, inferVideoMediaType, normalizePastedImage, persistImageAsBlock, prunePasteTmpDir, readAndNormalizeClipboardImage, readClipboardImage, validateInputArtifactsForModel } from './sdk-media.js';
-import { h as AgentMessage, f as Agent, bp as RunnerLlmReturn, a4 as KodaXJsonValue, U as KodaXExtensionSessionRecord, W as KodaXExtensionStore, a2 as KodaXInputArtifact, bx as SessionErrorMetadata, bb as QualityInvariant, bT as ToolCapability, bl as RunnableTool, bq as RunnerToolCall, _ as KodaXGoalState, c5 as WorkflowEventCorrelation, J as Guardrail, cE as WorkflowTaskSummaryEventUpdate, b_ as WorkflowAgentBackend, cd as WorkflowModule, ct as WorkflowProcessTrackerOptions, c4 as WorkflowEvent, c2 as WorkflowArtifactRef, cb as WorkflowMeta, cv as WorkflowRunState, c0 as WorkflowApproval, ch as WorkflowProcessEvent, c1 as WorkflowApprovalSummary, c9 as WorkflowLimits, cn as WorkflowProcessSnapshot } from './types-chunks/process.d-CY2g03Mb.js';
-export { j as AgentReasoningProfile, l as AgentTool, m as AskUserAnswer, n as AskUserCustomInputAnswer, o as AskUserMultiOptions, p as AskUserQuestionItem, q as AskUserQuestionOptions, r as AskUserSelectionAnswer, s as CompactionAnchor, v as CompactionResult, x as CompactionUpdate, L as Handoff, N as InMemorySessionOptions, S as KodaXCompactMemoryProgress, T as KodaXCompactMemorySeed, V as KodaXExtensionSessionState, Y as KodaXFileInputArtifact, a0 as KodaXImageInputArtifact, a1 as KodaXImageMediaType, a3 as KodaXInputArtifactSource, a6 as KodaXSessionArtifactLedgerEntry, a7 as KodaXSessionBranchSummaryEntry, a9 as KodaXSessionCompactionEntry, aa as KodaXSessionData, ab as KodaXSessionEntry, ac as KodaXSessionEntryBase, ae as KodaXSessionLabelEntry, af as KodaXSessionLineage, ag as KodaXSessionMessageEntry, ah as KodaXSessionMeta, ai as KodaXSessionNavigationOptions, ak as KodaXSessionRuntimeInfo, al as KodaXSessionScope, am as KodaXSessionStorage, an as KodaXSessionTreeNode, ao as KodaXSessionUiHistoryItem, ap as KodaXSessionUiHistoryItemType, aq as KodaXSessionUiTextHistoryItem, ar as KodaXSessionUiTextHistoryItemType, as as KodaXSessionUiToolCall, at as KodaXSessionUiToolCallStatus, au as KodaXSessionUiToolGroupHistoryItem, av as KodaXSessionWorkspaceKind, aw as KodaXVideoInputArtifact, ax as KodaXVideoMediaType, b6 as MessageEntry, b9 as PresetDispatcher, be as ReasoningDepth, bi as RunEvent, bj as RunOptions, bk as RunResult, bm as Runner, bu as Session, bw as SessionEntry, by as SessionExtension, bz as SessionForkOptions, cR as createAgent, cS as createHandoff, cT as createInMemorySession, d9 as registerPresetDispatcher } from './types-chunks/process.d-CY2g03Mb.js';
-import { y as MessageQueue, X as WorkflowScriptManifest, F as WorkflowCapsule, I as WorkflowCapsuleIntent, H as WorkflowCapsuleInputs, N as WorkflowCapsuleRequirements, J as WorkflowCapsuleProvenance, w as ManagedWorkflowSnapshot$1, V as WorkflowRunManager$1, R as WorkflowQualityLintFinding, O as WorkflowPatternId } from './types-chunks/run-manager.d-CYTnWhZY.js';
-export { C as CompactionContext, a as CompactionEntry, b as CompactionEntryPayload, c as CompactionPolicy, D as DefaultSummaryCompaction, e as DefaultSummaryCompactionOptions, K as KODAX_API_MIN_INTERVAL, f as KODAX_DEFAULT_TIMEOUT, g as KODAX_HARD_TIMEOUT, h as KODAX_MAX_INCOMPLETE_RETRIES, j as KODAX_MAX_RETRIES, k as KODAX_MAX_TOKENS, l as KODAX_RETRY_BASE_DELAY, m as KODAX_STAGGER_DELAY, L as LINEAGE_ENTRY_TYPES, n as LineageArtifactLedgerPayload, o as LineageCompaction, p as LineageCompactionDelegates, q as LineageEntryType, r as LineageExtension, s as LineageLabelPayload, t as LineageTreeNode, x as ManagedWorkflowStatus, P as PROMISE_PATTERN, Y as appendSessionLineageLabel, $ as applySessionCompaction, a0 as archiveOldIslands, a2 as buildSessionTree, a4 as cleanupIncompleteToolCalls, a5 as countActiveLineageMessages, a6 as countTokens, a7 as createSessionLineage, ab as estimateTokens, ac as extractArtifactLedger, ae as extractTitleFromMessages, af as findPreviousUserEntryId, ag as forkSessionLineage, ah as generateSessionId, ai as getAgentConfigHome, aj as getAgentConfigPath, ak as getAppDataDir, an as getSessionLineagePath, ao as getSessionMessagesFromLineage, aq as mergeArtifactLedger, as as resolveSessionLineageTarget, at as rewindSessionLineage, au as setAgentConfigHome, av as setSessionLineageActiveEntry, aw as validateAndFixToolHistory } from './types-chunks/run-manager.d-CYTnWhZY.js';
+import { J as LocalToolDefinition, P as RegisteredToolDefinition, X as ToolHandler, Z as ToolRegistrationOptions, C as Capabilities, a as AgentContent, T as StagedHandle, f as ConstructionPolicy, d as ConstructionArtifact, U as TestResult, S as ScriptSource, Y as ToolHandlerSync, H as KodaXRetrievalToolName, F as KodaXRetrievalResult, B as KodaXRetrievalItem, r as ExtensionLoadSource, p as ExtensionFailureStage, m as ExtensionContributionSource, q as ExtensionHookMap, n as ExtensionEventMap, j as ExtensionCommandDefinition, u as ExtensionRuntimeDiagnostics } from './types-chunks/types.d-CUN_bZU7.js';
+export { A as AgentArtifact, b as ArtifactStatus, c as CapabilityDeniedError, e as ConstructionManifestError, g as ConstructionPolicyVerdict, D as DEFAULT_HANDLER_TIMEOUT_MS, E as ExecOptions, h as ExecResult, i as ExtensionCommandContext, k as ExtensionCommandInvocation, l as ExtensionCommandResult, o as ExtensionFailureDiagnostic, s as ExtensionLogger, t as ExtensionRuntimeController, v as ExtensionToolBeforeHookContext, K as KodaXExtensionAPI, w as KodaXExtensionActivationResult, x as KodaXExtensionModule, y as KodaXRetrievalArtifact, z as KodaXRetrievalFreshness, G as KodaXRetrievalScope, I as KodaXRetrievalTrust, L as LoadedExtensionDiagnostic, M as ModelProviderRegistration, R as RegisteredCapabilityProviderDiagnostic, N as RegisteredCommandDiagnostic, O as RegisteredHookDiagnostic, Q as RegisteredToolDiagnostic, V as ToolContent, W as ToolDefinitionSource, _ as ToolRegistry, $ as WebhookOptions, a0 as WebhookResult, a1 as defaultPolicy, a2 as exec, a3 as webhook } from './types-chunks/types.d-CUN_bZU7.js';
+import { h as AgentMessage, f as Agent, bp as RunnerLlmReturn, a2 as KodaXInputArtifact, bx as SessionErrorMetadata, bb as QualityInvariant, bT as ToolCapability, bl as RunnableTool, bq as RunnerToolCall, _ as KodaXGoalState, c5 as WorkflowEventCorrelation, J as Guardrail, cE as WorkflowTaskSummaryEventUpdate, b_ as WorkflowAgentBackend, cd as WorkflowModule, ct as WorkflowProcessTrackerOptions, c4 as WorkflowEvent, c2 as WorkflowArtifactRef, cb as WorkflowMeta, cv as WorkflowRunState, c0 as WorkflowApproval, ch as WorkflowProcessEvent, c1 as WorkflowApprovalSummary, c9 as WorkflowLimits, cn as WorkflowProcessSnapshot } from './types-chunks/process.d-CY2g03Mb.js';
+export { j as AgentReasoningProfile, l as AgentTool, m as AskUserAnswer, n as AskUserCustomInputAnswer, o as AskUserMultiOptions, p as AskUserQuestionItem, q as AskUserQuestionOptions, r as AskUserSelectionAnswer, s as CompactionAnchor, v as CompactionResult, x as CompactionUpdate, L as Handoff, N as InMemorySessionOptions, S as KodaXCompactMemoryProgress, T as KodaXCompactMemorySeed, U as KodaXExtensionSessionRecord, V as KodaXExtensionSessionState, Y as KodaXFileInputArtifact, a0 as KodaXImageInputArtifact, a1 as KodaXImageMediaType, a3 as KodaXInputArtifactSource, a4 as KodaXJsonValue, a6 as KodaXSessionArtifactLedgerEntry, a7 as KodaXSessionBranchSummaryEntry, a9 as KodaXSessionCompactionEntry, aa as KodaXSessionData, ab as KodaXSessionEntry, ac as KodaXSessionEntryBase, ae as KodaXSessionLabelEntry, af as KodaXSessionLineage, ag as KodaXSessionMessageEntry, ah as KodaXSessionMeta, ai as KodaXSessionNavigationOptions, ak as KodaXSessionRuntimeInfo, al as KodaXSessionScope, am as KodaXSessionStorage, an as KodaXSessionTreeNode, ao as KodaXSessionUiHistoryItem, ap as KodaXSessionUiHistoryItemType, aq as KodaXSessionUiTextHistoryItem, ar as KodaXSessionUiTextHistoryItemType, as as KodaXSessionUiToolCall, at as KodaXSessionUiToolCallStatus, au as KodaXSessionUiToolGroupHistoryItem, av as KodaXSessionWorkspaceKind, aw as KodaXVideoInputArtifact, ax as KodaXVideoMediaType, b6 as MessageEntry, b9 as PresetDispatcher, be as ReasoningDepth, bi as RunEvent, bj as RunOptions, bk as RunResult, bm as Runner, bu as Session, bw as SessionEntry, by as SessionExtension, bz as SessionForkOptions, cR as createAgent, cS as createHandoff, cT as createInMemorySession, d9 as registerPresetDispatcher } from './types-chunks/process.d-CY2g03Mb.js';
+import { M as MessageQueue, N as WorkflowScriptManifest, y as WorkflowCapsule, B as WorkflowCapsuleIntent, A as WorkflowCapsuleInputs, F as WorkflowCapsuleRequirements, E as WorkflowCapsuleProvenance, H as WorkflowQualityLintFinding, G as WorkflowPatternId } from './types-chunks/capsule.d-hVhPNkHd.js';
+export { C as CompactionContext, a as CompactionEntry, b as CompactionEntryPayload, c as CompactionPolicy, D as DefaultSummaryCompaction, e as DefaultSummaryCompactionOptions, K as KODAX_API_MIN_INTERVAL, f as KODAX_DEFAULT_TIMEOUT, g as KODAX_HARD_TIMEOUT, h as KODAX_MAX_INCOMPLETE_RETRIES, j as KODAX_MAX_RETRIES, k as KODAX_MAX_TOKENS, l as KODAX_RETRY_BASE_DELAY, m as KODAX_STAGGER_DELAY, L as LINEAGE_ENTRY_TYPES, n as LineageArtifactLedgerPayload, o as LineageCompaction, p as LineageCompactionDelegates, q as LineageEntryType, r as LineageExtension, s as LineageLabelPayload, t as LineageTreeNode, P as PROMISE_PATTERN, O as appendSessionLineageLabel, R as applySessionCompaction, S as archiveOldIslands, U as buildSessionTree, X as cleanupIncompleteToolCalls, Y as countActiveLineageMessages, Z as countTokens, $ as createSessionLineage, a2 as estimateTokens, a3 as extractArtifactLedger, a5 as extractTitleFromMessages, a6 as findPreviousUserEntryId, a7 as forkSessionLineage, a8 as generateSessionId, a9 as getAgentConfigHome, aa as getAgentConfigPath, ab as getAppDataDir, ad as getSessionLineagePath, ae as getSessionMessagesFromLineage, ag as mergeArtifactLedger, ai as resolveSessionLineageTarget, aj as rewindSessionLineage, ak as setAgentConfigHome, al as setSessionLineageActiveEntry, am as validateAndFixToolHistory } from './types-chunks/capsule.d-hVhPNkHd.js';
 import { b as McpServersConfig } from './types-chunks/config.d-CJy1WENT.js';
 export { M as McpConnectMode, a as McpServerConfig, c as McpTransportKind } from './types-chunks/config.d-CJy1WENT.js';
-import { k as McpProviderOptions, c as McpCapabilityProvider, l as McpReverseCapabilities, m as McpRoot } from './types-chunks/manager.d-DBD7SOTT.js';
-export { A as AuthorizationServerMetadata, D as DiscoveredOAuthEndpoints, M as McpAuthRequiredError, a as McpCapabilityDescriptor, b as McpCapabilityKind, d as McpCapabilityRisk, e as McpCatalogItem, f as McpElicitRequest, g as McpElicitResult, h as McpExpiredSessionError, i as McpIcon, j as McpManager, n as McpSamplingRequest, o as McpSamplingResult, p as McpServerCatalog, q as McpServerCatalogSnapshot, r as McpServerLogs, s as McpServerRuntime, t as McpServerRuntimeDiagnostics, u as McpServerStatus, v as McpServerToolList, w as McpToolTaskSupport, x as McpTransport, y as McpTransportEvents, O as OAuthClientInfo, z as OAuthLoginConsent, P as PerformOAuthLoginOptions, B as ProtectedResourceMetadata, W as WwwAuthenticateChallenge, C as buildInitializeCapabilities, E as createMcpCapabilityId, F as createMcpManager, G as createMcpTransport, H as defaultMcpCacheDir, I as discoverAuthorizationServerMetadata, J as discoverOAuthEndpoints, K as discoverProtectedResourceMetadata, L as extractInsufficientScope, N as extractResourceMetadataUrl, Q as getMcpCachePaths, R as loadValidToken, S as normalizeMcpCapabilityId, T as parseMcpCapabilityId, U as performOAuthLogin, V as registerOAuthClient, X as searchMcpCatalog } from './types-chunks/manager.d-DBD7SOTT.js';
-import { h as AutoRules, T as ToolCallSignal, S as SignalCollector } from './types-chunks/guardrail.d-MR6LwMB2.js';
-export { C as AUTO_MODE_DENIAL_CONSECUTIVE_THRESHOLD, i as AUTO_MODE_DENIAL_CUMULATIVE_THRESHOLD, A as AgentsFile, a as AutoModeAskUser, b as AutoModeAskUserVerdict, D as AutoModeDenialTracker, c as AutoModeEngine, d as AutoModeGuardrailConfig, e as AutoModeSharedState, f as AutoModeStats, g as AutoModeToolGuardrail, E as BREAKER_ERROR_THRESHOLD, W as BREAKER_WINDOW_MS, j as CircuitBreaker, K as KodaXMcpConnectMode, k as KodaXMcpServerConfig, l as KodaXMcpServersConfig, m as KodaXMcpTransport, L as LoadAgentsOptions, n as LoadedRulesSource, R as RulesLoadError, o as RulesLoadResult, p as SkippedRulesSource, q as TrustState, J as autoModeDenialShouldFallback, M as breakerShouldFallback, r as collectAllSignals, s as computeRulesFingerprint, v as createAutoModeDenialTracker, t as createAutoModeToolGuardrail, u as createCircuitBreaker, w as formatAgentsForPrompt, x as getKodaxGlobalDir, y as loadAgentsFiles, z as loadAutoRules, B as parseAutoRules, F as readTrustState, G as recordAutoModeAllow, H as recordAutoModeBlock, I as recordBreakerError, N as trustProjectRules } from './types-chunks/guardrail.d-MR6LwMB2.js';
-import { g as ToolGuardrail } from './types-chunks/types.d-1CnTg7Sd.js';
+import { i as McpProviderOptions, b as McpCapabilityProvider, j as McpReverseCapabilities, k as McpRoot } from './types-chunks/manager.d-Zum9cGHU.js';
+export { M as McpCapabilityDescriptor, a as McpCapabilityKind, c as McpCapabilityRisk, d as McpCatalogItem, e as McpElicitRequest, f as McpElicitResult, g as McpIcon, h as McpManager, l as McpSamplingRequest, m as McpSamplingResult, n as McpServerCatalog, o as McpServerCatalogSnapshot, p as McpServerLogs, q as McpServerRuntime, r as McpServerRuntimeDiagnostics, s as McpServerStatus, t as McpServerToolList, u as McpToolTaskSupport, v as buildInitializeCapabilities, w as createMcpCapabilityId, x as createMcpManager, y as defaultMcpCacheDir, z as getMcpCachePaths, A as normalizeMcpCapabilityId, B as parseMcpCapabilityId, C as searchMcpCatalog } from './types-chunks/manager.d-Zum9cGHU.js';
+export { A as AuthorizationServerMetadata, D as DiscoveredOAuthEndpoints, M as McpAuthRequiredError, a as McpExpiredSessionError, b as McpTransport, c as McpTransportEvents, O as OAuthClientInfo, d as OAuthLoginConsent, P as PerformOAuthLoginOptions, e as ProtectedResourceMetadata, W as WwwAuthenticateChallenge, f as createMcpTransport, g as discoverAuthorizationServerMetadata, h as discoverOAuthEndpoints, i as discoverProtectedResourceMetadata, j as extractInsufficientScope, k as extractResourceMetadataUrl, l as loadValidToken, p as performOAuthLogin, r as registerOAuthClient } from './types-chunks/oauth-login.d-Bgb4rdLN.js';
+import { c as ManagedWorkflowSnapshot$1, e as WorkflowRunManager$1 } from './types-chunks/run-manager.d-CFknOfo1.js';
+export { d as ManagedWorkflowStatus } from './types-chunks/run-manager.d-CFknOfo1.js';
+import { h as AutoRules, T as ToolCallSignal, S as SignalCollector } from './types-chunks/guardrail.d-wk-s0psS.js';
+export { C as AUTO_MODE_DENIAL_CONSECUTIVE_THRESHOLD, i as AUTO_MODE_DENIAL_CUMULATIVE_THRESHOLD, A as AgentsFile, a as AutoModeAskUser, b as AutoModeAskUserVerdict, D as AutoModeDenialTracker, c as AutoModeEngine, d as AutoModeGuardrailConfig, e as AutoModeSharedState, f as AutoModeStats, g as AutoModeToolGuardrail, E as BREAKER_ERROR_THRESHOLD, W as BREAKER_WINDOW_MS, j as CircuitBreaker, K as KodaXMcpConnectMode, k as KodaXMcpServerConfig, l as KodaXMcpServersConfig, m as KodaXMcpTransport, L as LoadAgentsOptions, n as LoadedRulesSource, R as RulesLoadError, o as RulesLoadResult, p as SkippedRulesSource, q as TrustState, J as autoModeDenialShouldFallback, M as breakerShouldFallback, r as collectAllSignals, s as computeRulesFingerprint, v as createAutoModeDenialTracker, t as createAutoModeToolGuardrail, u as createCircuitBreaker, w as formatAgentsForPrompt, x as getKodaxGlobalDir, y as loadAgentsFiles, z as loadAutoRules, B as parseAutoRules, F as readTrustState, G as recordAutoModeAllow, H as recordAutoModeBlock, I as recordBreakerError, N as trustProjectRules } from './types-chunks/guardrail.d-wk-s0psS.js';
+import { d as ToolGuardrail } from './types-chunks/guardrail.d-C_Siraua.js';
 import { Diagnostic } from 'vscode-languageserver-protocol';
 import '@anthropic-ai/sdk';
 import 'openai';
 import './types-chunks/types.d-vJExiRje.js';
-
-/**
- * KodaX Constructed-World types (FEATURE_087, v0.7.28).
- *
- * Runtime-generated capabilities (tools / agents / skills / ...) live in
- * `.kodax/constructed/` and are loaded into the same registries as builtin
- * primitives. v0.7.28 only ships tool generation (FEATURE_088); other kinds
- * land in FEATURE_089 / FEATURE_090.
- *
- * Cross-references:
- *   - DD §14 — lifecycle, security model, registry merge semantics.
- *   - docs/features/v0.7.28.md — capability schema, generation flow.
- */
-
-/**
- * Handler script source. v0.7.28 limits language to `'javascript'` so that
- * `loadHandler()` can `await import()` the file directly without an
- * intermediate TS → JS compile step (no esbuild / tsx dependency).
- *
- * TypeScript handlers are explicitly out of scope; Coding Agent generates
- * JS strings on the wire.
- */
-interface ScriptSource {
-    readonly kind: 'script';
-    readonly language: 'javascript';
-    readonly code: string;
-}
-/**
- * Capability declaration.
- *
- * v0.7.28 ships the single-dimension form: a whitelist of builtin tool
- * names that the handler may invoke through `ctx.tools.<name>(...)`.
- * All I/O — fs / net / env — must flow through builtin tools (`read` /
- * `write` / `bash` / etc.); handlers do not receive direct `ctx.fs` /
- * `ctx.net` / `ctx.env` entry points.
- *
- * Forward-compatible evolution: if the future demands path/domain-level
- * constraints, this can grow to `(string | { name; constraints })[]`
- * without breaking existing manifests.
- */
-interface Capabilities {
-    readonly tools: readonly string[];
-}
-/**
- * Tool-kind artifact body (the `content` of `ConstructionArtifact` when
- * `kind === 'tool'`).
- */
-interface ToolContent {
-    readonly description: string;
-    readonly inputSchema: Record<string, unknown>;
-    readonly capabilities: Capabilities;
-    readonly handler: ScriptSource;
-    /**
-     * Per-tool timeout override. Defaults to {@link DEFAULT_HANDLER_TIMEOUT_MS}
-     * when omitted. Bounded by AbortController in `loadHandler()`.
-     */
-    readonly timeoutMs?: number;
-}
-/**
- * Default handler timeout. Picked to match the historical ceiling on
- * builtin streaming tools (30s); revisit if a constructed tool demands
- * longer-running computation.
- */
-declare const DEFAULT_HANDLER_TIMEOUT_MS = 30000;
-/**
- * Lifecycle state on disk. Drives both the startup glob filter and the
- * `revoke()` semantics. See DD §14.1 — file system is the single source
- * of truth; no separate `_manifest.json` index file (C4 decision).
- */
-type ArtifactStatus = 'staged' | 'active' | 'revoked';
-/**
- * Reference to a tool by stable id. v0.7.31 (FEATURE_089) introduces
- * Agent manifests that bundle tool refs rather than inline tool bodies;
- * the resolver expands these refs to concrete `KodaXToolDefinition`
- * instances at activate time.
- *
- * `ref` shape:
- *   - `builtin:<name>`            — a tool from the static registry
- *     (e.g. `builtin:read`, `builtin:bash`)
- *   - `constructed:<name>@<ver>`  — a previously-activated constructed tool
- */
-interface ToolRef {
-    readonly ref: string;
-}
-/**
- * Reference to a Guardrail by stable id. The Layer A `Guardrail`
- * declaration is name-only (no runtime hooks); resolvers map known
- * names to constructed `ToolGuardrail` / `InputGuardrail` /
- * `OutputGuardrail` instances at activation time.
- */
-interface GuardrailRef {
-    readonly kind: 'input' | 'output' | 'tool';
-    readonly ref: string;
-}
-/**
- * Reference to a handoff target by stable id (another constructed agent
- * or a builtin role). The resolver expands `target.ref` to the actual
- * `Agent` declaration at admission time so the handoff DAG check
- * (`handoffLegality` invariant) sees the full graph.
- */
-interface AgentHandoffRef {
-    readonly target: {
-        readonly ref: string;
-    };
-    readonly kind: 'continuation' | 'as-tool';
-    readonly description?: string;
-}
-/**
- * Reasoning profile declaration mirroring the Layer A
- * `AgentReasoningProfile`. Kept structurally identical so the resolver
- * passes the value through without re-shaping.
- */
-interface AgentReasoningRef {
-    readonly default: 'quick' | 'balanced' | 'deep';
-    readonly max?: 'quick' | 'balanced' | 'deep';
-    readonly escalateOnRevise?: boolean;
-}
-/**
- * Sandbox test case. Used by `sandbox_test_agent` to verify a
- * constructed agent before it can activate. Each case feeds `input`
- * to a sandbox Runner instance and grades the agent's final output:
- *
- *   - `expectMatch`     — final text must match this regex (string form)
- *   - `expectNotMatch`  — final text must NOT match this regex
- *   - `expectFinalText` — exact substring match (case-sensitive)
- *
- * At least one of the three expect-fields must be present; the cases
- * are graded by `runSandboxAgentTest()` (FEATURE_089 Phase 3.5).
- */
-interface AgentTestCase {
-    readonly id: string;
-    readonly input: string;
-    readonly expectMatch?: string;
-    readonly expectNotMatch?: string;
-    readonly expectFinalText?: string;
-}
-/**
- * Agent-kind artifact body (the `content` of `ConstructionArtifact`
- * when `kind === 'agent'`).
- *
- * FEATURE_089 (v0.7.31): all fields except `instructions` are optional;
- * a minimal "echo agent" can be expressed as `{ instructions: '...' }`.
- * Tool / handoff / guardrail refs are resolved at admission time
- * (Runner.admit's 5-step audit expands them and feeds the resolved
- * Agent through the invariant chain).
- */
-interface AgentContent {
-    readonly instructions: string;
-    readonly tools?: readonly ToolRef[];
-    readonly handoffs?: readonly AgentHandoffRef[];
-    readonly reasoning?: AgentReasoningRef;
-    readonly guardrails?: readonly GuardrailRef[];
-    readonly model?: string;
-    readonly provider?: string;
-    readonly effort?: KodaXWireReasoningEffort;
-    /**
-     * FEATURE_191 — one-sentence human-readable summary surfaced in the
-     * Worker system prompt's `=== Available specialist agents ===`
-     * block (FEATURE_191 A.3) and in `/agents list` UIs. Frontmatter
-     * `description` field of `~/.kodax/agents/<name>.md` and the
-     * `name`-paired argument of `KodaXExtensionAPI.registerAgent`
-     * funnel into this field. Optional for backward compatibility with
-     * FEATURE_089 minimal-agent shape (`{ instructions: '...' }`);
-     * the SP block renders `(no description)` when absent.
-     */
-    readonly description?: string;
-    /**
-     * Optional structured-output schema mirroring `Agent.outputSchema`.
-     * Pure pass-through to the runtime — admission does not validate
-     * shape semantics here, only well-formed JSON.
-     */
-    readonly outputSchema?: Record<string, unknown>;
-    /**
-     * Optional sandbox test cases. When present, `sandbox_test_agent`
-     * runs them; when absent, the test step performs only the static
-     * checks (manifest schema + admission audit).
-     */
-    readonly testCases?: readonly AgentTestCase[];
-    /**
-     * Maximum total budget (iteration count) the agent may consume.
-     * Plumbed onto the resolved `AgentManifest.maxBudget` and clamped by
-     * `budgetCeiling` invariant during admission.
-     */
-    readonly maxBudget?: number;
-    /**
-     * Voluntary additional invariants the LLM declares this agent
-     * commits to. Plumbed onto `AgentManifest.declaredInvariants`;
-     * unioned on top of the required set during admission.
-     */
-    readonly declaredInvariants?: readonly string[];
-}
-/**
- * Persisted artifact shape (one JSON file per name/version under
- * `.kodax/constructed/<kind>s/<name>/<version>.json`).
- *
- * Discriminated union over `kind`:
- *   - `kind: 'tool'`  — v0.7.28 (FEATURE_088) tool generation
- *   - `kind: 'agent'` — v0.7.31 (FEATURE_089) agent generation; passes
- *                       through `Runner.admit()` at activation time
- *
- * Lifecycle fields (status / timestamps / contentHash / sourceAgent /
- * signedBy) are common to all kinds.
- */
-type ConstructionArtifact = ToolArtifact | AgentArtifact;
-interface ConstructionArtifactBase {
-    readonly name: string;
-    readonly version: string;
-    status: ArtifactStatus;
-    readonly signedBy?: string;
-    readonly createdAt: number;
-    readonly sourceAgent?: string;
-    testedAt?: number;
-    activatedAt?: number;
-    revokedAt?: number;
-    /**
-     * SHA-256 of `JSON.stringify(content)` captured at activate time.
-     * `rehydrateActiveArtifacts()` recomputes and compares — a mismatch
-     * indicates the manifest was edited between activation and the next
-     * boot (naive cross-session tampering, e.g. an LLM rewriting the .json
-     * via the Write tool without recomputing the hash). Mismatched
-     * artifacts are skipped at rehydrate with a stderr warning. This is
-     * NOT a defense against a coordinated attacker who recomputes the
-     * hash; the threat model is single-user CLI integrity, not multi-user
-     * supply chain.
-     */
-    contentHash?: string;
-}
-interface ToolArtifact extends ConstructionArtifactBase {
-    readonly kind: 'tool';
-    readonly content: ToolContent;
-}
-interface AgentArtifact extends ConstructionArtifactBase {
-    readonly kind: 'agent';
-    readonly content: AgentContent;
-}
-/**
- * Returned by {@link ConstructionRuntime.stage}; opaque handle that
- * downstream `test()` / `activate()` calls bind to.
- */
-interface StagedHandle {
-    readonly artifact: ConstructionArtifact;
-    readonly stagedAt: number;
-}
-/**
- * Outcome of {@link ConstructionRuntime.test}. `ok=false` blocks
- * activation; `warnings` surface but do not block.
- */
-interface TestResult {
-    readonly ok: boolean;
-    readonly errors?: readonly string[];
-    readonly warnings?: readonly string[];
-}
-/**
- * Policy gate — invoked once per `activate()` before the artifact is
- * registered. Default rejects implicit auto-approval; the REPL surface
- * binds a dialog-based policy in `packages/repl/src/common/construction-
- * bootstrap.ts` so user approval flows through the live askUser channel.
- *
- * Modeled as a function type rather than an interface (D3 decision):
- * keeps the contract surface tiny, no class boilerplate.
- *
- * No declarative `kodax.config.ts` override hatch is provided — see the
- * "Deferred Design Decisions" section in `features/v0.7.28.md` for why
- * a `risk_mode` enum (when truly needed) is preferred over user-authored
- * policy functions.
- */
-type ConstructionPolicy = (artifact: ConstructionArtifact) => Promise<ConstructionPolicyVerdict>;
-type ConstructionPolicyVerdict = 'approve' | 'reject' | 'ask-user';
-/** Default policy: always ask the user; no implicit approvals. */
-declare const defaultPolicy: ConstructionPolicy;
-/**
- * Thrown by `CtxProxy` when handler attempts to access a tool not declared
- * in `capabilities.tools`. Caught in tracer; surfaces as a tool error.
- */
-declare class CapabilityDeniedError extends Error {
-    readonly toolName: string;
-    readonly declaredTools: readonly string[];
-    constructor(toolName: string, declaredTools: readonly string[]);
-}
-/**
- * Thrown when a manifest cannot be parsed / is missing required fields.
- * Surfaces during stage() / startup glob; tracer records details.
- */
-declare class ConstructionManifestError extends Error {
-    readonly path?: string;
-    constructor(message: string, path?: string);
-}
+import './types-chunks/types.d-BMLxKV69.js';
 
 /**
  * KodaX Core Errors
@@ -371,208 +91,6 @@ declare const CANCELLED_TOOL_RESULT_PREFIX = "[Cancelled]";
 /** Standard cancellation message returned when a tool is cancelled by the user. */
 declare const CANCELLED_TOOL_RESULT_MESSAGE = "[Cancelled] Operation cancelled by user";
 
-/**
- * KodaX Tool Types
- */
-
-/**
- * Progress yield from a streaming (async generator) tool.
- * Each yield appears as a real-time status update in the REPL transcript.
- */
-interface ToolProgress {
-    readonly stage: string;
-    readonly message: string;
-}
-/**
- * Final result a tool may return. Either a plain string (the default for
- * text-only tools) OR a typed-array form for multimodal returns (e.g.
- * `read` on an image path returns `[{type:'text',...}, {type:'image',...}]`).
- * Providers serialize each shape to their wire format; OpenAI-compat
- * gateways downgrade image items to a placeholder rather than rejecting.
- *
- * The array form mirrors claudecode's FileReadTool image return — Claude
- * Code packs image data into `tool_result` content so the model can
- * re-fetch images via the tool path. See
- * `c:/Works/claudecode/src/tools/FileReadTool/FileReadTool.ts:866-891`.
- */
-type ToolResult = string | readonly KodaXToolResultContentItem[];
-/** Standard tool handler — returns a final result (text or multimodal). */
-type ToolHandlerSync = (input: Record<string, unknown>, context: KodaXToolExecutionContext) => Promise<ToolResult>;
-/** Streaming tool handler — yields progress updates, returns final result. */
-type ToolHandlerStreaming = (input: Record<string, unknown>, context: KodaXToolExecutionContext) => AsyncGenerator<ToolProgress, ToolResult, void>;
-/** Union of both handler types. Existing tools use ToolHandlerSync; new long-running tools may use ToolHandlerStreaming. */
-type ToolHandler = ToolHandlerSync | ToolHandlerStreaming;
-
-/**
- * FEATURE_149 (v0.7.38) — interrupt-on-submit policy for in-flight tools.
- *
- * Controls whether submitting a new prompt while THIS tool is mid-execution
- * triggers a fast-abort of the current agent round (so the new prompt starts
- * immediately) or queues the prompt to run after the tool resolves.
- *
- *   - `'cancel'` — long-running tools whose work the user is likely to want
- *     to abandon when they redirect (e.g., `bash` running a 30s script,
- *     `dispatch_child_task` synchronously awaiting a child, sleep-style
- *     tools). InkREPL submit handler aborts the round immediately.
- *
- *   - `'wait'` (default) — atomic / fast tools (read, grep, glob, write,
- *     edit, …) where waiting for completion is cheaper than aborting and
- *     redoing.
- *
- * Mirrors Claude Code `interruptBehavior` (`utils/handlePromptSubmit.ts`).
- */
-type ToolInterruptBehavior = 'cancel' | 'wait';
-interface LocalToolDefinition extends KodaXToolDefinition {
-    handler: ToolHandler;
-    /**
-     * v0.7.42 — Required declarative side-effect class. See
-     * {@link ToolSideEffect} for category definitions and rationale. Plan
-     * mode and SDK embedders' permission brokers consume this; failure to
-     * declare is a TypeScript error (by design — `sideEffect` is required,
-     * not optional, to prevent silent drift when new tools are added).
-     */
-    sideEffect: ToolSideEffect;
-    /**
-     * v0.7.42 — Optional plan-mode override.
-     *
-     *   - `undefined` (default): plan-mode permits only `sideEffect ===
-     *     'readonly'` tools.
-     *   - `true`: explicitly permitted in plan mode even when sideEffect is
-     *     not `'readonly'`. Reserve for tools whose effect is itself part of
-     *     the planning loop (`exit_plan_mode`, `task_stop`, `todo_update`,
-     *     `todo_create`, `ask_user_question`).
-     *   - `false`: explicitly blocked in plan mode even when sideEffect is
-     *     `'readonly'`. Rare — useful for read-only tools whose output would
-     *     leak content the planner should not see.
-     */
-    planModeAllowed?: boolean;
-    /**
-     * FEATURE_149 (v0.7.38) — submit-time interrupt policy. See
-     * {@link ToolInterruptBehavior}. Default `'wait'` when undefined.
-     */
-    interruptBehavior?: ToolInterruptBehavior;
-    /**
-     * Progressive disclosure — when `true`, the tool's full description is
-     * replaced with `searchHint` (a one-line summary) in the LLM-visible
-     * tool schema until the per-session unlock Set marks the tool name as
-     * unlocked. Unlocking happens via the `tool_search` tool: the LLM
-     * invokes `tool_search` with a query that selects this tool, and the
-     * full description + JSON schema are returned in the tool_result text.
-     * The next `getActiveToolDefinitions` call for the same session sees
-     * the unlock and emits the full description.
-     *
-     * Use for tools with rich descriptions (>500 bytes) whose teaching
-     * content the model only needs to consume when it actually plans to
-     * call the tool. Saves turn-1 context without dropping the tool.
-     *
-     * Mirrors claudecode `Tool.shouldDefer` — see
-     * `c:/Works/claudecode/src/tools/Tool.ts` for the parent design and
-     * `c:/Works/claudecode/src/tools/ToolSearchTool/` for the bootstrap.
-     */
-    shouldDefer?: boolean;
-    /**
-     * One-line hint shown in place of the full description when this tool
-     * is deferred and not yet unlocked. Required when `shouldDefer: true`.
-     * Should answer "when would I want to look this up" in ≤ 100 chars
-     * so the LLM can decide whether to invoke `tool_search` for the full
-     * schema. Example: `'Fetch a specific remote URL — use tool_search to load full schema.'`
-     */
-    searchHint?: string;
-    /**
-     * Classifier projection — REQUIRED (FEATURE_092 v0.7.33).
-     *
-     * Returns a one-line string that the auto-mode classifier sees as the
-     * `<action>` to evaluate. The classifier asks: "Given the user's
-     * intent + rules, should the agent be allowed to run this?"
-     *
-     * THREE-TIER STRATEGY (pick by tool's risk profile):
-     *
-     *   1. ZERO RISK (read-only, structural):
-     *      → return ''  (Tier 1 — classifier is skipped entirely, zero token cost)
-     *      Examples: read, grep, glob, ask_user_question, exit_plan_mode
-     *
-     *   2. HIGH RISK (mutates state, network, exec, spawn):
-     *      → write a CUSTOM projection that surfaces the risk-bearing fields
-     *      Examples: bash (`Bash: ${i.command}`), web_fetch (`WebFetch ${i.url}`)
-     *      See `classifier-projection.ts` for examples by category.
-     *
-     *   3. LOW RISK (structured input, side-effect-capable):
-     *      → return defaultToClassifierInput(name, input)  (one-line helper)
-     *      Examples: semantic_lookup (refresh: true rebuilds index)
-     *
-     * KEEP IT SHORT: ≤ 100 chars typical. Variable-length user-provided fields
-     * (bash command, URL, dispatch_child_task objective) may legitimately
-     * exceed this — the projection's job is to make the risk visible, not to
-     * fit a fixed budget at the cost of hiding it.
-     *
-     * NEVER include: raw file contents, secrets, API keys, full LLM-emitted
-     * reasoning, or untrusted text passed through verbatim. Use byte/line
-     * counts as proxies (`Write ${path} (${content.length} bytes)`).
-     *
-     * See `docs/features/v0.7.33.md` "Tool 接口扩展" for design rationale.
-     */
-    toClassifierInput: (input: unknown) => string;
-}
-interface ToolDefinitionSource {
-    /**
-     * Origin of the registered tool. `'constructed'` (FEATURE_087, v0.7.28)
-     * marks tools materialized at runtime by `ConstructionRuntime` from
-     * `.kodax/constructed/tools/<name>/<version>.json` artifacts.
-     */
-    kind: 'builtin' | 'extension' | 'constructed';
-    id?: string;
-    label?: string;
-    /**
-     * Constructed-only: semver of the activated artifact. Used by
-     * `findByVersion()` and by `revoke()` to locate a specific stack entry.
-     */
-    version?: string;
-    /**
-     * Constructed-only: absolute path to the artifact JSON on disk.
-     * Lets revoke / inspect operations round-trip back to the source of
-     * truth without re-globbing.
-     */
-    manifestPath?: string;
-}
-interface RegisteredToolDefinition extends LocalToolDefinition {
-    registrationId: string;
-    requiredParams: string[];
-    source: ToolDefinitionSource;
-}
-interface ToolRegistrationOptions {
-    source?: ToolDefinitionSource;
-}
-type ToolRegistry = Map<string, RegisteredToolDefinition[]>;
-type KodaXRetrievalToolName = 'web_search' | 'web_fetch' | 'code_search' | 'semantic_lookup' | 'mcp_search' | 'mcp_describe' | 'mcp_call' | 'mcp_read_resource' | 'mcp_get_prompt';
-type KodaXRetrievalScope = 'workspace' | 'remote';
-type KodaXRetrievalTrust = 'workspace' | 'provider' | 'open-world';
-type KodaXRetrievalFreshness = 'fresh' | 'snapshot' | 'unknown';
-interface KodaXRetrievalArtifact {
-    kind: 'url' | 'path' | 'symbol' | 'module' | 'process' | 'provider';
-    label: string;
-    value: string;
-}
-interface KodaXRetrievalItem {
-    title: string;
-    locator?: string;
-    snippet?: string;
-    score?: number;
-    metadata?: Record<string, unknown>;
-}
-interface KodaXRetrievalResult {
-    tool: KodaXRetrievalToolName;
-    query?: string;
-    scope: KodaXRetrievalScope;
-    trust: KodaXRetrievalTrust;
-    freshness: KodaXRetrievalFreshness;
-    provider?: string;
-    summary: string;
-    content?: string;
-    items: KodaXRetrievalItem[];
-    artifacts?: KodaXRetrievalArtifact[];
-    metadata?: Record<string, unknown>;
-}
-
 declare const KODAX_TOOLS: KodaXToolDefinition[];
 declare function registerTool(definition: LocalToolDefinition, options?: ToolRegistrationOptions): () => void;
 declare function getTool(name: string): ToolHandler | undefined;
@@ -990,9 +508,9 @@ declare function _resetRuntimeForTesting(): void;
  * refuses to overwrite. Bumping the semver is the supported update path.
  *
  * Why "any status", not just `'active'`:
- *   The handler's `.js` module is loaded via `await import(file://…)`
+ *   The handler's `.mjs` module is loaded via `await import(file://…)`
  *   which the ESM module cache keys by absolute file URL. Re-writing
- *   `<version>.js` in place leaves the cached module pointing at the
+ *   `<version>.mjs` in place leaves the cached module pointing at the
  *   OLD code; subsequent loadHandler() calls return the cached export.
  *   Even revoking first does not flush the cache (Node has no public
  *   ESM cache eviction API). The only safe-by-construction policy is
@@ -1097,8 +615,9 @@ declare function activate(handle: StagedHandle): Promise<void>;
  * tools.
  *
  * Returns counts so callers can surface a loaded/failed/tampered banner.
- * Failures are logged (console.warn) and rehydration continues for the
- * remaining artifacts; a single bad manifest must not break boot.
+ * Failures are emitted through the diagnostic channel and rehydration
+ * continues for the remaining artifacts; a single bad manifest must not
+ * break boot.
  */
 declare function rehydrateActiveArtifacts(): Promise<{
     loaded: number;
@@ -1349,8 +868,8 @@ declare function ensureBuiltinRepoExplorerAgent(): Promise<boolean>;
 /**
  * CtxProxy — runtime gate for constructed tool handlers.
  *
- * Constructed handlers run in the host process (no JS-level sandbox; see
- * DD §14.5 for why we deliberately avoid worker_threads / isolated-vm).
+ * Constructed handlers run in a disposable Worker. Capability and policy
+ * checks still execute in the host through reverse tool RPC.
  * Safety derives from a four-layer model — Guardrail static check,
  * `capabilities.tools` whitelist declaration, this CtxProxy at runtime,
  * and policy gate on activate.
@@ -1373,8 +892,9 @@ declare function ensureBuiltinRepoExplorerAgent(): Promise<boolean>;
  *     keeps the parent agent loop alive and reportable.
  *   - Direct `ctx.tools` enumeration / introspection is gated; the
  *     proxied `tools` object only exposes whitelisted names.
- *   - All other `ctx.<x>` properties (executionCwd, abortSignal, etc.)
- *     pass through unchanged — they are framework infra, not tool calls.
+ *   - The host proxy retains the live execution context for reverse tool RPC.
+ *     The handler Worker receives only cloneable informational fields plus a
+ *     bridged AbortSignal; host callbacks and mutable services stay here.
  *
  * Anti-tampering:
  *   - Returned proxy is `Object.freeze`d at the top level so handlers
@@ -1400,43 +920,13 @@ interface CreateCtxProxyOptions {
 }
 declare function createCtxProxy(ctx: unknown, capabilities: Capabilities, options?: CreateCtxProxyOptions): unknown;
 
-/**
- * loadHandler — turns a manifest's handler script into a callable
- * `ToolHandler` ready to register into `TOOL_REGISTRY`.
- *
- * Pipeline:
- *   1. Validate language === 'javascript' (v0.7.28 hard limit).
- *   2. Materialize the handler source onto disk under
- *      `<cwd>/.kodax/constructed/tools/<name>/<version>.js`.
- *   3. Dynamic `import()` of the file URL — host-process module load,
- *      no worker / vm isolation (DD §14.4).
- *   4. Wrap with `createCtxProxy` + a Promise.race timeout.
- *
- * Design notes:
- *   - Returning `ToolHandlerSync` (not the streaming variant) — v0.7.28
- *     constructed tools are non-streaming computations.
- *   - Handler return value is stringified for the agent loop, mirroring
- *     builtin tool result conventions.
- *   - ESM module cache is intentional: re-loading the same `<version>.js`
- *     returns the cached module. Constructed artifacts are immutable per
- *     version, so this is correct (revoke + new version is the proper
- *     update path).
- *   - Timeout is enforced via Promise.race; the underlying handler
- *     promise is *not* hard-aborted (Node has no general task abort).
- *     Long-running CPU loops will leak past timeout — accepted in the
- *     v0.7.28 threat model (LLM hallucination, not adversarial DoS).
- */
-
 interface LoadHandlerScope {
     readonly name: string;
     readonly version: string;
-    /** Workspace root; defaults to `process.cwd()`. */
     readonly cwd?: string;
 }
 interface LoadHandlerOptions {
-    /** Per-tool override; falls back to {@link DEFAULT_HANDLER_TIMEOUT_MS}. */
     readonly timeoutMs?: number;
-    /** Pass-through to {@link createCtxProxy}. */
     readonly ctxProxyOptions?: CreateCtxProxyOptions;
 }
 declare function loadHandler(scope: LoadHandlerScope, source: ScriptSource, capabilities: Capabilities, options?: LoadHandlerOptions): Promise<ToolHandlerSync>;
@@ -1830,484 +1320,6 @@ interface RollbackResult {
  */
 declare function rollbackSelfModify(name: string): Promise<RollbackResult>;
 
-interface ExecOptions {
-    /** Extra environment variables to inject (merged with safe base env). */
-    readonly env?: Readonly<Record<string, string>>;
-    /** Working directory. Defaults to process.cwd(). */
-    readonly cwd?: string;
-    /** Timeout in milliseconds. Defaults to 30000. */
-    readonly timeout?: number;
-    /** Shell to use. Defaults to 'bash' on Unix, 'powershell' on Windows. */
-    readonly shell?: 'bash' | 'powershell';
-}
-interface ExecResult {
-    readonly exitCode: number;
-    readonly stdout: string;
-    readonly stderr: string;
-}
-/**
- * Run a shell command with a sandboxed environment.
- *
- * SECURITY: Only a whitelist of safe environment variables is passed to the
- * subprocess. API keys and tokens from the parent environment are NOT inherited.
- */
-declare function exec(command: string, options?: ExecOptions): Promise<ExecResult>;
-interface WebhookOptions {
-    /** HTTP method. Defaults to 'POST'. */
-    readonly method?: 'POST' | 'PUT';
-    /** Extra HTTP headers. */
-    readonly headers?: Readonly<Record<string, string>>;
-    /** Timeout in milliseconds. Defaults to 10000. */
-    readonly timeout?: number;
-}
-interface WebhookResult {
-    readonly ok: boolean;
-    readonly status: number;
-    readonly body?: string;
-}
-/**
- * Send an HTTP webhook with timeout support.
- * Returns a result object instead of throwing on errors.
- */
-declare function webhook(url: string, payload: unknown, options?: WebhookOptions): Promise<WebhookResult>;
-
-interface ModelProviderRegistration {
-    name: string;
-    factory: () => KodaXBaseProvider;
-}
-interface ExtensionCommandDefinition {
-    name: string;
-    aliases?: string[];
-    description: string;
-    usage?: string;
-    metadata?: Record<string, unknown>;
-    handler: (args: string[], context: ExtensionCommandContext) => Promise<ExtensionCommandResult | void> | ExtensionCommandResult | void;
-}
-interface ExtensionModelSelection {
-    provider?: string;
-    model?: string;
-}
-interface ExtensionLogger {
-    debug: (...args: unknown[]) => void;
-    info: (...args: unknown[]) => void;
-    warn: (...args: unknown[]) => void;
-    error: (...args: unknown[]) => void;
-}
-interface ExtensionFileContributionSource {
-    kind: 'extension';
-    id: string;
-    label: string;
-    path: string;
-}
-interface RuntimeContributionSource {
-    kind: 'runtime';
-    id: string;
-    label: string;
-    path?: string;
-}
-type ExtensionContributionSource = ExtensionFileContributionSource | RuntimeContributionSource;
-type ExtensionLoadSource = 'api' | 'cli' | 'config' | 'discovery';
-interface LoadedExtensionDiagnostic {
-    path: string;
-    label: string;
-    loadSource: ExtensionLoadSource;
-    sessionStateKeys?: string[];
-    sessionRecordCounts?: Record<string, number>;
-}
-interface RegisteredCapabilityProviderDiagnostic {
-    id: string;
-    kinds: CapabilityKind[];
-    source: ExtensionContributionSource;
-    metadata?: Record<string, unknown>;
-}
-interface RegisteredCommandDiagnostic {
-    name: string;
-    aliases?: string[];
-    description: string;
-    usage?: string;
-    metadata?: Record<string, unknown>;
-    source: ExtensionContributionSource;
-}
-interface RegisteredToolDiagnostic {
-    name: string;
-    description: string;
-    requiredParams: string[];
-    source: RegisteredToolDefinition['source'];
-    shadowedSources: RegisteredToolDefinition['source'][];
-}
-interface RegisteredHookDiagnostic {
-    hook: keyof ExtensionHookMap;
-    order: number;
-    source: ExtensionContributionSource;
-}
-type ExtensionFailureStage = 'load' | 'reload' | 'event' | 'hook' | 'persistence';
-interface ExtensionFailureDiagnostic {
-    stage: ExtensionFailureStage;
-    target: string;
-    message: string;
-    occurredAt: string;
-    source: ExtensionContributionSource;
-}
-interface ExtensionRuntimeDiagnostics {
-    loadedExtensions: LoadedExtensionDiagnostic[];
-    capabilityProviders: RegisteredCapabilityProviderDiagnostic[];
-    commands: RegisteredCommandDiagnostic[];
-    tools: RegisteredToolDiagnostic[];
-    hooks: RegisteredHookDiagnostic[];
-    failures: ExtensionFailureDiagnostic[];
-    defaults: {
-        activeTools?: string[];
-        modelSelection: ExtensionModelSelection;
-        thinkingLevel?: KodaXWireReasoningEffort;
-    };
-}
-interface ExtensionCommandInvocation {
-    prompt: string;
-    displayName?: string;
-    disableModelInvocation?: boolean;
-    allowedTools?: string;
-    context?: 'fork';
-    model?: string;
-}
-interface ExtensionCommandResult {
-    success?: boolean;
-    message?: string;
-    data?: unknown;
-    invocation?: ExtensionCommandInvocation;
-}
-interface ExtensionCommandContext {
-    sessionId?: string;
-    gitRoot?: string;
-    workingDirectory: string;
-    reloadExtensions: () => Promise<void>;
-    getDiagnostics: () => ExtensionRuntimeDiagnostics;
-    logger: ExtensionLogger;
-}
-interface ExtensionToolBeforeHookContext {
-    name: string;
-    input: Record<string, unknown>;
-    toolId?: string;
-    executionCwd?: string;
-    gitRoot?: string;
-}
-interface ExtensionProviderBeforeHookContext {
-    provider: string;
-    model?: string;
-    reasoningMode?: KodaXWireReasoningEffort;
-    systemPrompt: string;
-    block: (reason: string) => void;
-    replaceProvider: (provider: string) => void;
-    replaceModel: (model?: string) => void;
-    replaceSystemPrompt: (systemPrompt: string) => void;
-    setThinkingLevel: (level: KodaXWireReasoningEffort) => void;
-}
-interface ExtensionTurnSettleHookContext {
-    sessionId: string;
-    lastText: string;
-    hadToolCalls: boolean;
-    success: boolean;
-    signal?: 'COMPLETE' | 'BLOCKED' | 'DECIDE';
-    queueUserMessage: (message: string | KodaXMessage) => void;
-    setModelSelection: (next: ExtensionModelSelection) => void;
-    setThinkingLevel: (level: KodaXWireReasoningEffort) => void;
-}
-/**
- * FEATURE_184 (v0.7.45) — Stop Hook bridge context for extensions.
- *
- * Fires ONLY when the model terminates a turn text-only (no tool_use)
- * — a strict subset of `turn:settle`, which fires on every turn end
- * including mid-task tool turns. Use this hook for verification or
- * "is the task actually done?" checks. The three-state return surface
- * mirrors `RunOptions.stopHook` at the agent layer; the bridge passes
- * the extension's return through unchanged.
- *
- * Coding-layer first-party consumers (Sidecar Verifier, FEATURE_184
- * Phase D) wire directly to the agent `stopHook`. Third-party
- * extensions write `api.hook('turn:complete', handler)` and the bridge
- * dispatches to them inside the agent's `stopHook` callback. Handlers
- * fire in registration order, first non-`void` return short-circuits
- * the chain (matches `tool:before` semantics).
- *
- * Scope note: this hook fires on the AMA `runner-driven` path only
- * (main loop, B1 retry, V2 worker). SA-path child agents dispatched
- * via `dispatch_child_task` go through `runKodaX` and do NOT trigger
- * this hook — observe their lifecycle via `turn:settle` on the SA
- * path. Extensions wanting "every agent termination" semantics must
- * register both hooks.
- */
-interface ExtensionTurnCompleteHookContext {
-    sessionId: string;
-    lastAssistantText: string;
-    signal: 'natural-end';
-    reanimateCount: number;
-    reanimateBudget: number;
-}
-/**
- * FEATURE_184 (v0.7.45) — Extension `turn:complete` return surface.
- *
- *   - `void` / `undefined` → accept the termination, defer to next
- *     handler (or fall through to agent terminal path if none).
- *   - `string` → reanimate: synthesize a user message, run another
- *     turn. Bounded by Runner's `stopHookReanimateBudget`.
- *   - `{ abort: true, reason }` → halt the run, surface reason to
- *     caller via `RunResult.output` + `stoppedByHook = true`.
- */
-type ExtensionTurnCompleteHookResult = void | string | {
-    readonly abort: true;
-    readonly reason: string;
-};
-interface ExtensionSessionHydrateHookContext {
-    sessionId: string;
-    getState: <T = KodaXJsonValue>(key: string) => T | undefined;
-    setState: (key: string, value: KodaXJsonValue | undefined) => void;
-    listRecords: (type?: string) => KodaXExtensionSessionRecord[];
-    appendRecord: (type: string, data?: KodaXJsonValue, options?: {
-        dedupeKey?: string;
-    }) => KodaXExtensionSessionRecord | undefined;
-    clearRecords: (type?: string) => number;
-}
-interface ExtensionEventMap {
-    'session:start': {
-        provider: string;
-        sessionId: string;
-    };
-    'turn:start': {
-        sessionId: string;
-        iteration: number;
-        maxIter: number;
-    };
-    'text:delta': {
-        text: string;
-    };
-    'thinking:delta': {
-        text: string;
-    };
-    'thinking:end': {
-        thinking: string;
-    };
-    'tool:start': {
-        name: string;
-        id: string;
-        input?: Record<string, unknown>;
-    };
-    'tool:result': {
-        id: string;
-        name: string;
-        content: string;
-    };
-    'provider:selected': {
-        provider: string;
-        model?: string;
-    };
-    'provider:rate-limit': {
-        provider: string;
-        attempt: number;
-        maxRetries: number;
-        delayMs: number;
-    };
-    'capability:search': {
-        providerId: string;
-        query: string;
-        kind?: CapabilityKind;
-        limit?: number;
-    };
-    'capability:describe': {
-        providerId: string;
-        capabilityId: string;
-    };
-    'capability:invoke': {
-        providerId: string;
-        capabilityId: string;
-        kind: CapabilityKind;
-    };
-    'capability:refresh': {
-        providerId: string;
-    };
-    'stream:end': undefined;
-    'turn:end': {
-        sessionId: string;
-        iteration: number;
-        lastText: string;
-        hadToolCalls: boolean;
-        signal?: 'COMPLETE' | 'BLOCKED' | 'DECIDE';
-    };
-    'complete': {
-        success: boolean;
-        signal?: 'COMPLETE' | 'BLOCKED' | 'DECIDE';
-    };
-    'error': {
-        error: Error;
-    };
-    'todo:created': {
-        id: string;
-        item: KodaXTodoItem;
-        source: TodoMutationSource;
-    };
-    'todo:updated': {
-        id: string;
-        before: KodaXTodoItem;
-        after: KodaXTodoItem;
-        changedFields: readonly (keyof KodaXTodoItem)[];
-        source: TodoMutationSource;
-    };
-    'todo:deleted': {
-        id: string;
-        item: KodaXTodoItem;
-        source: TodoMutationSource;
-    };
-}
-/**
- * FEATURE_170 v0.7.41 — provenance tag for todo:* events / hooks. Lets
- * extension authors distinguish LLM-driven mutations (`tool`) from
- * runner-side automation (`internal`) — e.g. an extension that audits
- * todo churn should ignore `internal` flips to avoid false positives.
- */
-type TodoMutationSource = 'tool' | 'internal';
-/**
- * FEATURE_170 v0.7.41 — seed shape passed to `'todo:before-create'`.
- * Mirrors `TodoAddSeed` from todo-store.ts (kept structurally compatible
- * to avoid coupling extension authors to the internal task-engine type).
- *
- * v0.7.42 — `content` renamed to `subject` + optional `description` to
- * match claudecode V2 `TaskCreateTool` schema. See `TodoItem` JSDoc in
- * packages/coding/src/types.ts.
- */
-interface ExtensionTodoCreateSeed {
-    readonly subject: string;
-    readonly description?: string;
-    readonly activeForm?: string;
-    readonly evaluator?: 'build' | 'test' | 'lint';
-    readonly owner?: string;
-    readonly sourceObligationIndex?: number;
-    readonly metadata?: Record<string, unknown>;
-}
-/**
- * FEATURE_170 v0.7.41 — minimal todo item shape exposed to extensions
- * via the todo:* events. Kept structurally identical to the engine's
- * `TodoItem` so the runtime can pass values straight through without
- * conversion, but redeclared here so extension consumers don't import
- * from `packages/coding/src/types.ts` (which is task-engine internal).
- *
- * Drift guard: a compile-time assignability assertion at the bottom of
- * this file fires if `TodoItem` (engine) gains a field that this
- * extension-facing shape does NOT mirror — see `__todoItemParity` below.
- */
-interface KodaXTodoItem {
-    readonly id: string;
-    /** v0.7.42 — see TodoItem.subject JSDoc in packages/coding/src/types.ts. */
-    readonly subject: string;
-    readonly description?: string;
-    readonly status: 'pending' | 'in_progress' | 'completed' | 'failed' | 'skipped' | 'cancelled';
-    readonly owner?: string;
-    readonly sourceObligationIndex?: number;
-    readonly note?: string;
-    readonly evaluator?: 'build' | 'test' | 'lint';
-    readonly activeForm?: string;
-    readonly metadata?: Record<string, unknown>;
-}
-interface ExtensionHookMap {
-    'tool:before': (context: ExtensionToolBeforeHookContext) => Promise<void | string | false> | void | string | false;
-    'provider:before': (context: ExtensionProviderBeforeHookContext) => Promise<void> | void;
-    'turn:settle': (context: ExtensionTurnSettleHookContext) => Promise<void> | void;
-    'turn:complete': (context: ExtensionTurnCompleteHookContext) => Promise<ExtensionTurnCompleteHookResult> | ExtensionTurnCompleteHookResult;
-    'session:hydrate': (context: ExtensionSessionHydrateHookContext) => Promise<void> | void;
-    'todo:before-create': (context: {
-        seed: ExtensionTodoCreateSeed;
-    }) => Promise<void | string | false> | void | string | false;
-    'todo:before-complete': (context: {
-        id: string;
-        item: KodaXTodoItem;
-    }) => Promise<void | string | false> | void | string | false;
-}
-interface ExtensionRuntimeController {
-    queueUserMessage(message: string | KodaXMessage): void;
-    getSessionState<T = KodaXJsonValue>(key: string): T | undefined;
-    setSessionState(key: string, value: KodaXJsonValue | undefined): void;
-    appendSessionRecord(type: string, data?: KodaXJsonValue, options?: {
-        dedupeKey?: string;
-    }): KodaXExtensionSessionRecord | undefined;
-    listSessionRecords(type?: string): KodaXExtensionSessionRecord[];
-    clearSessionRecords(type?: string): number;
-    getActiveTools(): string[];
-    setActiveTools(toolNames: string[]): void;
-    getModelSelection(): ExtensionModelSelection;
-    setModelSelection(next: ExtensionModelSelection): void;
-    getThinkingLevel(): KodaXWireReasoningEffort | undefined;
-    setThinkingLevel(level: KodaXWireReasoningEffort): void;
-}
-interface KodaXExtensionAPI {
-    registerTool: (definition: LocalToolDefinition) => () => void;
-    getTool: (name: string) => RegisteredToolDefinition | undefined;
-    getBuiltinTool: (name: string) => RegisteredToolDefinition | undefined;
-    registerModelProvider: (registration: ModelProviderRegistration) => () => void;
-    registerCapabilityProvider: (provider: CapabilityProvider) => () => void;
-    registerCommand: (command: ExtensionCommandDefinition) => () => void;
-    registerSkillPath: (skillPath: string) => () => void;
-    /**
-     * FEATURE_191 (v0.7.43) — register a constructed agent at extension
-     * activate time. The extension supplies the agent name and an
-     * `AgentContent` body (instructions + optional tools/handoffs/
-     * reasoning/model/description); the runtime threads it through
-     * `buildAdmissionManifest` + `Runner.admit` and registers the
-     * activated Agent via `registerConstructedAgent({ source:
-     * 'extension' })`. The returned dispose fn (also auto-pushed onto
-     * the extension's disposables list) unregisters the agent on
-     * extension deactivate.
-     *
-     * Returns `Promise<() => void>` — **you MUST `await` the call**
-     * before invoking the dispose function. Unlike sibling
-     * `registerTool` (sync), this is async because `Runner.admit` is
-     * declared async (FEATURE_101 admission contract — admission may
-     * consult disk for handoff-target staged-agent resolution).
-     *
-     * @example
-     * ```ts
-     * // CORRECT — await unwraps the Promise to a sync dispose
-     * export default async function activate(api: KodaXExtensionAPI) {
-     *   const dispose = await api.registerAgent('db-reviewer', {
-     *     instructions: 'You review DB migrations.',
-     *     description: 'DB migration reviewer',
-     *   });
-     *   // dispose() is now callable on demand; the runtime also auto-
-     *   // disposes via the extension's disposables list at deactivate.
-     * }
-     * ```
-     *
-     * @example
-     * ```ts
-     * // WRONG — TypeScript catches this; .js / @ts-ignore consumers
-     * // hit a runtime TypeError because Promise is not a function.
-     * export default function activate(api: KodaXExtensionAPI) {
-     *   const dispose = api.registerAgent('x', { instructions: '...' });
-     *   dispose();  // TypeError: dispose is not a function
-     * }
-     * ```
-     *
-     * Throws on admission rejection (with the verdict reason) so the
-     * extension author sees the failure at activate time rather than
-     * having a silently-dropped registration. The throw also halts
-     * extension loading — the extension's other registrations roll back
-     * via `LoadedExtensionRecord.disposables` reverse-iterate.
-     */
-    registerAgent: (name: string, content: AgentContent) => Promise<() => void>;
-    on: <TEvent extends keyof ExtensionEventMap>(event: TEvent, handler: (payload: ExtensionEventMap[TEvent]) => Promise<void> | void) => () => void;
-    hook: <THook extends keyof ExtensionHookMap>(hook: THook, handler: ExtensionHookMap[THook]) => () => void;
-    logger: ExtensionLogger;
-    config: Readonly<Record<string, unknown>>;
-    runtime: ExtensionRuntimeController;
-    /** Extension-scoped key-value store that persists across sessions. */
-    persistence: KodaXExtensionStore;
-    /** Run a shell command with sandboxed environment (no API key leakage). */
-    exec: (command: string, options?: ExecOptions) => Promise<ExecResult>;
-    /** Send an HTTP webhook with timeout support. */
-    webhook: (url: string, payload: unknown, options?: WebhookOptions) => Promise<WebhookResult>;
-}
-type KodaXExtensionActivationResult = void | (() => void | Promise<void>) | Promise<void | (() => void | Promise<void>)>;
-interface KodaXExtensionModule {
-    default?: (api: KodaXExtensionAPI) => KodaXExtensionActivationResult;
-    activate?: (api: KodaXExtensionAPI) => KodaXExtensionActivationResult;
-}
-
 declare function stripHtmlToText(html: string): string;
 declare function extractHtmlTitle(html: string): string | undefined;
 declare function convertProviderSearchResults(results: unknown[], limit: number): KodaXRetrievalItem[];
@@ -2346,6 +1358,22 @@ declare function truncateLine(line: string, maxChars?: number): {
 };
 declare function persistToolOutput(toolName: string, content: string, ctx?: Pick<KodaXToolExecutionContext, 'gitRoot' | 'executionCwd'>): Promise<string>;
 
+type ToolResultBudgetReason = 'large_window' | 'normal_pressure' | 'small_window_pressure' | 'critical_pressure';
+interface ToolResultBudget {
+    readonly pressure: RuntimeContextPressure;
+    readonly contextWindow: number;
+    readonly aggregateInlineBytes: number;
+    readonly perResultInlineBytes: number;
+    readonly reason: ToolResultBudgetReason;
+}
+interface ToolResultBudgetUsageInput {
+    readonly contextWindow: number;
+    readonly currentTokens: number;
+}
+declare function buildToolResultBudget(snapshot: RuntimeContextBudgetSnapshot): ToolResultBudget;
+declare function buildToolResultBudgetFromUsage(input: ToolResultBudgetUsageInput): ToolResultBudget;
+declare function clampToolResultPolicyToBudget(policy: ToolResultPolicy, budget: ToolResultBudget | undefined): ToolResultPolicy;
+
 interface ToolResultPolicy {
     maxLines: number;
     maxBytes: number;
@@ -2375,6 +1403,8 @@ interface ApplyToolResultGuardrailOptions {
      * but together exceed the envelope cap.
      */
     forceSpill?: boolean;
+    /** Optional context-aware cap; omitted keeps the legacy per-tool policy. */
+    toolResultBudget?: ToolResultBudget;
 }
 declare function applyToolResultGuardrail(toolName: string, content: string, ctx: KodaXToolExecutionContext, options?: ApplyToolResultGuardrailOptions): Promise<GuardedToolResult>;
 
@@ -2897,6 +1927,32 @@ declare function buildPromptMessageContent(prompt: string, inputArtifacts?: read
 declare function extractPromptComparableText(content: string | readonly KodaXContentBlock[]): string;
 declare function extractComparableUserMessageText(message: KodaXMessage | undefined): string | undefined;
 
+interface ToolSearchIndexEntry {
+    readonly name: string;
+    readonly text: string;
+    readonly terms: ReadonlyMap<string, number>;
+    readonly tokenCount: number;
+}
+interface ToolSearchIndex {
+    readonly entries: readonly ToolSearchIndexEntry[];
+    readonly documentFrequency: ReadonlyMap<string, number>;
+}
+interface ToolSearchQueryParts {
+    readonly required: readonly string[];
+    readonly loose: readonly string[];
+}
+interface ToolSearchIndexOptions {
+    readonly hints?: Readonly<Record<string, string>>;
+}
+interface ToolSearchResult {
+    readonly name: string;
+    readonly score: number;
+    readonly matchedTerms: readonly string[];
+}
+declare function buildToolSearchIndex(definitions: readonly KodaXToolDefinition[], options?: ToolSearchIndexOptions): ToolSearchIndex;
+declare function searchToolIndex(index: ToolSearchIndex, query: string | ToolSearchQueryParts, maxResults: number): readonly ToolSearchResult[];
+declare function parseToolSearchQuery(query: string): ToolSearchQueryParts;
+
 type KodaXProviderSourceKind = 'builtin' | 'runtime' | 'custom' | 'unknown';
 interface KodaXProviderCapabilitySnapshot {
     provider: string;
@@ -5752,5 +4808,5 @@ interface AuthorWorkflowViaWorkerHandle {
  */
 declare function authorWorkflowViaWorker(input: AuthorWorkflowViaWorkerInput): AuthorWorkflowViaWorkerHandle;
 
-export { Agent, AgentMessage, AutoRules, BLOCKER_REQUIRED_CONSECUTIVE_TURNS, BUILTIN_WORKFLOWS, BoundExtensionRuntimeController, CANCELLED_TOOL_RESULT_MESSAGE, CANCELLED_TOOL_RESULT_PREFIX, CODING_AGENT_MARKER, CODING_INVARIANTS, CODING_SUMMARY_PROMPT, CODING_UPDATE_SUMMARY_PROMPT, CapabilityDeniedError, CapabilityKind, CapabilityProvider, CapabilityResult, KodaXClient as Client, CombinedExtensionRuntime, ConstructionManifestError, DEFAULT_CODING_AGENT_NAME, DEFAULT_DANGEROUS_PATTERNS, DEFAULT_HANDLER_TIMEOUT_MS, DEFAULT_RESILIENCE_CONFIG, DEFAULT_SAFE_PATTERNS, DEFAULT_SELF_MODIFY_BUDGET, DEFAULT_WINDOW_MS as DEFAULT_SPECULATIVE_WINDOW_MS, DEFAULT_TOOL_OUTPUT_MAX_BYTES, DEFAULT_TOOL_OUTPUT_MAX_LINES, DEFAULT_WORKFLOW_GENERATION_TIMEOUT_MS, EMIT_VERDICT_TOOL_NAME, ErrorCategory, ExtensionRuntimeContract, FailureStage, GENERATOR_AGENT_NAME, GoalCompleteResult, Guardrail, KODAX_TOOLS, KODAX_UNDERLYING_CAPABILITY_TOPICS, KodaXAgentScope, KodaXBaseProvider, KodaXChildContextBundle, KodaXClient, KodaXContentBlock, KodaXContextOptions, KodaXEvents, KodaXExecutionMode, KodaXExtensionRuntime, KodaXExtensionSessionRecord, KodaXInputArtifact, KodaXJsonValue, KodaXManualTopic, KodaXManualTopicId, KodaXMessage, KodaXOptions, KodaXProviderCapabilityProfile, KodaXProviderPolicyHints, KodaXReasoningCapability, KodaXReasoningMode, KodaXRepoIntelligenceCapability, KodaXRepoIntelligenceMode, KodaXRepoIntelligenceResolvedMode, KodaXRepoIntelligenceTrace, KodaXRepoRoutingSignals, KodaXResult, KodaXSessionControl, KodaXSessionError, KodaXSessionMutators, KodaXTaskRoutingDecision, KodaXTaskType, KodaXTerminalError, KodaXThinkingDepth, KodaXTimeoutConfig, KodaXTokenUsage, KodaXToolDefinition, KodaXToolError, KodaXToolExecutionContext, KodaXToolUseBlock, KodaXWireReasoningEffort, MANUAL_REGISTRY, MANUAL_TOPIC_IDS, McpCapabilityProvider, McpProviderOptions, McpReverseCapabilities, McpRoot, McpServersConfig, PLANNER_AGENT_NAME, PROMPT_SECTION_REGISTRY, PROTOCOL_EMITTER_TOOLS, ProviderExecutionState, ProviderRecoveryCoordinator, ProviderResilienceConfig, ProviderResiliencePolicy, READ_DEFAULT_LIMIT, READ_MAX_LINE_CHARS, READ_PREFLIGHT_SIZE_BYTES, REPO_EXPLORER_AGENT_NAME, REPO_EXPLORER_TOOL_NAMES, RecoveryDecision, RecoveryResult, ResilienceClassification, ResolveKodaXManualInput, ResolveKodaXManualOptions, ResolveKodaXManualResult, RuntimeDefaultsSnapshot, SCOUT_AGENT_NAME, SCOUT_THEN_AUTHOR_PROMPT_LINES, SELF_KNOWLEDGE_ROUTING_RULE, SYSTEM_PROMPT, SYSTEM_WORKFLOW_LIMITS, SessionErrorMetadata, SignalCollector, StableBoundaryTracker, TASK_ENGINE_ROLE_AGENTS, TOOL_RESULT_TRUNCATION_GUARDRAIL_NAME, TRACING_ENV, ToolCallSignal, ToolSideEffect, WORKER_AGENT_NAME, WORKFLOW_GENERATION_SYSTEM_PROMPT, WorkflowEventCorrelation, WorkflowHostPolicy, _resetRuntimeForTesting, activate, analyzeChangedScope, appendAuditEntry, applyAccountingDelta, applyToolResultGuardrail, authorWorkflowViaWorker, bashSignalCollector, bootstrapTracing, boundedRevise, budgetCeiling, buildApprovalSummary, buildBlockedGoal, buildCapabilityContextSections, buildClassifierPrompt, buildCompleteGoal, buildCreatedGoal, buildFallbackRoutingDecision, buildLlmReviewPrompt, buildManualToolDescription, buildMcpReverseCapabilities, buildPausedGoal, buildPromptMessageContent, buildPromptSnapshot, buildProviderCapabilitySnapshot, buildProviderPolicyHintsForDecision, buildProviderPolicyPromptNotes, buildRepoIntelligenceContext, buildRepoIntelligenceIndex, buildRepoOverview, buildResumedGoal, buildScoutThenAuthorPrompt, buildSelfKnowledgeRoutingRule, buildSystemPrompt, buildSystemPromptSnapshot, buildWorkflowGenerationSkillContext, buildWorkflowGenerationUserPrompt, checkAbsoluteDeny, checkIncompleteToolCalls, checkPromiseSignal, clampWorkflowLimits, classify, classifyBashCommand, classifyError, classifyResilienceError, combineExtensionRuntimes, computeInputSignature, configureRuntime, convertCapabilityReadResult, convertProviderSearchResults, createBashClassifierConfig, createBuiltinToolDefinition, createCodingWorkflowBackend, createCtxProxy, createDefaultCodingAgent, createDenialTracker, createExtensionRuntime, createKodaXTaskRunner, createPromptSection, createReasoningPlan, createRunGraphWriter, createSessionControl, createToolResultTruncationGuardrail, createWorkflowLifecycleController, createWorkflowPatternTemplateModule, createWorkflowRunManager, dedupeExtensionPathsByEntrypoint, defaultPolicy, deleteSavedWorkflow, disableSelfModify, discoverDefaultExtensions, discoverExtensionsInDirectory, discoverExtensionsInDirectoryDetailed, discoverMarkdownAgents, discoverSavedWorkflows, emitVerdict, emitWorkflowAgentDigest, ensureBuiltinRepoExplorerAgent, evaluateProviderPolicy, excludeExtensionPathsByEntrypoint, exec, executeTool, extractComparableUserMessageText, extractHtmlTitle, extractPromptComparableText, fileSignalCollector, finalizeRetrievalResult, findByVersion, formatParallelDispatchResult, formatSize, generateWorkflow, generateWorkflowFromOptions, getActiveExtensionRuntime, getAllRegisteredTools, getBuiltinRegisteredToolDefinition, getBuiltinToolDefinition, getBuiltinWorkflow, getDefaultExtensionDirectory, getDefaultWorkflowRunManager, getDenialContext, getImpactEstimate, getModuleContext, getProcessContext, getRegisteredToolDefinition, getRepoIntelligenceIndex, getRepoOverview, getRepoRoutingSignals, getRequiredToolParams, getSymbolContext, getTool, getToolDefinition, getToolRegistrations, getToolResultPolicy, getWorkflowPatternTemplate, goalTokenDelta, inferTaskType, inspectEditFailure, inspectRepoIntelligenceRuntime, isDeniedRecently, isParallelDispatchDirective, isSessionRecoveryCandidateError, isSupportedExtensionModulePath, isToolFileMutation, isToolMutation, isToolNetworkRead, isToolPlanModeAllowed, isValidTokenBudget, languageIdForPath, listAll, list as listArtifacts, listBuiltinToolDefinitions, listBuiltinWorkflows, listConstructed, listToolDefinitions, listTools, listWorkflowPatternTemplates, loadAgentsFromMarkdown, loadGeneratedWorkflowFromRun, loadHandler, loadMarkdownAgentScope, loadSavedWorkflow, loadSavedWorkflowCapsule, mcpRootsFromWorkspace, normalizeWorkflowModule, orderPromptSections, parallelInvestigation, parseClassifierOutput, parseEditToolError, parseLlmReviewVerdict, parseModelSpec, parseWorkflowGeneration, persistToolOutput, preflightWorkflowCapsule, prewarmRepoIntelligenceCaches, readArtifact, readAuditEntries, readBudget, readDisableState, readWindowFromEnv as readSpeculativeWindowFromEnv, reasoningModeToDepth, reconstructMessagesWithToolGuard, recordBlockerAttempt, recordDenial, registerCodingInvariants, registerConfiguredMcpCapabilityProvider, registerOfficialSandboxExtension, registerTool, rehydrateActiveArtifacts, remaining as remainingSelfModifyBudget, renameSavedWorkflow, renderChangedScope, renderImpactEstimate, renderModuleContext, renderProcessContext, renderPromptSections, renderRepoOverview, renderRetrievalResult, renderSymbolContext, replaceSavedWorkflow, report as reportLspDiagnostics, resetBlockerCounter, resetBudget, resolveClassifierModel, resolveExtensionEntrypoint, resolveKodaXManual, resolveReasoningMode, resolveRepoIntelligenceMode, resolveRepoIntelligenceRuntimeConfig, resolveResilienceConfig, resolveToolCapability, resolveWorkflowGenerationTimeoutMs, resolveWorkflowIdentity, revoke, rollbackSelfModify, runAstRules, runKodaX, runLlmReview, runManagedTask, runOrchestration, runWorkflowFromOptions, runWorkflowModule, safeWorkflowArtifactName, saveGeneratedWorkflow, saveGeneratedWorkflowFromRun, setActiveExtensionRuntime, shouldFlipBudgetLimited, speculativeRace, stage, startKodaX, startManagedWorkflow, stripAssistantText, stripHtmlToText, test as testArtifact, toolAskUserQuestion, toolBash, toolChangedDiff, toolChangedScope, toolCodeSearch, toolEdit, toolGlob, toolGrep, toolImpactEstimate, toolInsertAfterAnchor, toolModuleContext, toolPermission, toolProcessContext, toolRead, toolRepoOverview, toolSemanticLookup, toolSymbolContext, toolUndo, toolWebFetch, toolWebSearch, toolWrite, truncateHead, truncateLine, truncateTail, turnWallTimeDelta, validateGeneratedWorkflowSource, validateSubtaskIndependence, validateToolSchemaForProvider, verifyGoalCompletion, webhook, withManualToolBranding, workerAgent };
-export type { AbsoluteDenyMatch, AbsoluteDenyMiss, AbsoluteDenyResult, AgentArtifact, ArtifactStatus, AstCheckResult, AstRuleId, AstRuleViolation, AuditEntry, AuditEventKind, AuthorWorkflowViaWorkerHandle, AuthorWorkflowViaWorkerInput, BashClassificationResult, BashClassifierConfig, BashRiskLevel, BlockerAttemptResult, BootstrapTracingOptions, BudgetState, BuildClassifierPromptInput, BuildPromptInput, Capabilities, ChangedFileEntry, ChangedFileStatus, ChangedScopeAreaSummary, ChangedScopeReport, ClassifierDecision, ClassifierPrompt, ClassifyDecision, ClassifyOptions, CodingWorkflowBackendDeps, ConstructionArtifact, ConstructionPolicy, ConstructionPolicyVerdict, CreateCtxProxyOptions, CreateKodaXTaskRunnerOptions, CreateWorkflowLifecycleControllerOptions, DeleteSavedWorkflowInput, DeleteWorkflowRunOptions, DenialRecord, DenialTracker, DisableState, DiscoverMarkdownAgentsResult, DiscoveredMarkdownAgent, EditRecoveryDiagnostic, EditToolErrorCode, ErrorClassification, ExecOptions, ExecResult, ExtensionCommandContext, ExtensionCommandDefinition, ExtensionCommandInvocation, ExtensionCommandResult, ExtensionContributionSource, ExtensionDiscoveryResult, ExtensionDiscoverySkipReason, ExtensionEventMap, ExtensionFailureDiagnostic, ExtensionFailureStage, ExtensionHookMap, ExtensionLoadSource, ExtensionLogger, ExtensionRuntimeController, ExtensionRuntimeDiagnostics, ExtensionToolBeforeHookContext, GenerateWorkflowFromOptionsInput, GenerateWorkflowInput, GeneratedWorkflow, GoalCompletionVerifier, ImpactEstimateResult, InvestigationFinding, KodaXAgentWorkerSpec, KodaXExtensionAPI, KodaXExtensionActivationResult, KodaXExtensionModule, KodaXPromptSection, KodaXPromptSectionDefinition, KodaXPromptSectionSlot, KodaXPromptSectionStability, KodaXPromptSnapshot, KodaXPromptSnapshotMetadata, KodaXProviderCapabilitySnapshot, KodaXProviderPolicyDecision, KodaXProviderPolicyIssue, KodaXProviderPolicyIssueSeverity, KodaXProviderSourceKind, KodaXRetrievalArtifact, KodaXRetrievalFreshness, KodaXRetrievalItem, KodaXRetrievalResult, KodaXRetrievalScope, KodaXRetrievalToolName, KodaXRetrievalTrust, LanguageCapabilityTier, LlmReviewClient, LlmReviewResult, LlmReviewVerdict, LoadAgentsFromMarkdownOptions, LoadAgentsFromMarkdownResult, LoadGeneratedWorkflowFromRunInput, LoadHandlerOptions, LoadHandlerScope, LoadMarkdownAgentScopeOptions, LoadMarkdownAgentScopeResult, LoadedExtensionDiagnostic, LoadedGeneratedWorkflowFromRun, LoadedMarkdownAgent, LocalToolDefinition, ManagedWorkflowRun, ManagedWorkflowSnapshot, ManagedWorkflowSource, MarkdownAgentLoadWarning, MarkdownAgentToolFilter, MarkdownLoadFailure, McpReverseWorkspace, ModelProviderRegistration, ModuleCapsule, ModuleContextResult, OfficialSandboxMode, OfficialSandboxOptions, OrchestrationArtifact, OrchestrationCompletedTask, OrchestrationRunEvents, OrchestrationRunOptions, OrchestrationRunResult, OrchestrationTaskBudget, OrchestrationTaskContext, OrchestrationTaskExecution, OrchestrationTaskStatus, OrchestrationTraceEvent, OrchestrationWorkerResult, OrchestrationWorkerRunner, OrchestrationWorkerSpec, ParallelDispatchDirective, ParallelDispatchResult, ParallelInvestigationArgs, ParallelInvestigationResult, ParallelSubtask, ParsedModelSpec, ProcessCapsule, ProcessContextResult, ProcessStep, ProtocolEmitterMetadata, RegisteredCapabilityProviderDiagnostic, RegisteredCommandDiagnostic, RegisteredHookDiagnostic, RegisteredToolDefinition, RegisteredToolDiagnostic, RenameSavedWorkflowInput, ReplaceSavedWorkflowInput, ReplaceSavedWorkflowResult, RepoAreaKind, RepoAreaOverview, RepoIntelligenceIndex, RepoIntelligenceRuntimeInspection, RepoLanguageId, RepoLanguageSupport, RepoOverview, RepoSymbolKind, RepoSymbolRecord, RepoSymbolReference, ResolveClassifierModelOptions, ResolveSource, ResolvedClassifierModel, RollbackResult, RunGraphWriter, RunGraphWriterDeps, RunJsonInput, RunWorkflowFromOptionsInput, RunWorkflowModuleOptions, RunWorkflowModuleOutcome, RunningSession, SaveGeneratedWorkflowFromRunInput, SaveGeneratedWorkflowInput, SavedGeneratedWorkflowFile, SavedWorkflowDirs, SavedWorkflowExecution, SavedWorkflowRef, SavedWorkflowSource, SchemaProvider, SchemaValidationResult, ScriptSource, SelfModifyAskUser, SelfModifyAskUserInput, SelfModifyDiffSeverity, SelfModifyDiffSummary, SkippedExtensionDiscoveryEntry, SpeculativeResult, StagedHandle, StartManagedWorkflowInput, StartManagedWorkflowResult, StripOptions, SymbolContextResult, TestArtifactOptions, TestResult, TierZeroPatternId, ToolContent, ToolDefinitionSource, ToolHandler, ToolRegistrationOptions, ToolRegistry, VerifyGoalCompletionOptions, WebhookOptions, WebhookResult, WorkflowCapsulePreflightEnvironment, WorkflowCapsulePreflightInput, WorkflowCapsulePreflightIssue, WorkflowCapsulePreflightResult, WorkflowChildOptions, WorkflowGenerationResult, WorkflowGenerationTextFn, WorkflowGenerationTextRequest, WorkflowIdentityResolution, WorkflowIdentityResolverInput, WorkflowLifecycleController, WorkflowPatternTemplate, WorkflowRunListOptions, WorkflowRunManager, WorkflowRunProcessMetadata, WorkflowRunRetentionOptions, WorkflowRunRetentionResult, WorkflowScriptSnapshotInput, WorkflowScriptSnapshotRef };
+export { Agent, AgentMessage, AutoRules, BLOCKER_REQUIRED_CONSECUTIVE_TURNS, BUILTIN_WORKFLOWS, BoundExtensionRuntimeController, CANCELLED_TOOL_RESULT_MESSAGE, CANCELLED_TOOL_RESULT_PREFIX, CODING_AGENT_MARKER, CODING_INVARIANTS, CODING_SUMMARY_PROMPT, CODING_UPDATE_SUMMARY_PROMPT, Capabilities, CapabilityProvider, CapabilityResult, KodaXClient as Client, CombinedExtensionRuntime, ConstructionArtifact, ConstructionPolicy, DEFAULT_CODING_AGENT_NAME, DEFAULT_DANGEROUS_PATTERNS, DEFAULT_RESILIENCE_CONFIG, DEFAULT_SAFE_PATTERNS, DEFAULT_SELF_MODIFY_BUDGET, DEFAULT_WINDOW_MS as DEFAULT_SPECULATIVE_WINDOW_MS, DEFAULT_TOOL_OUTPUT_MAX_BYTES, DEFAULT_TOOL_OUTPUT_MAX_LINES, DEFAULT_WORKFLOW_GENERATION_TIMEOUT_MS, EMIT_VERDICT_TOOL_NAME, ErrorCategory, ExtensionCommandDefinition, ExtensionContributionSource, ExtensionEventMap, ExtensionFailureStage, ExtensionHookMap, ExtensionLoadSource, ExtensionRuntimeContract, ExtensionRuntimeDiagnostics, FailureStage, GENERATOR_AGENT_NAME, GoalCompleteResult, Guardrail, KODAX_TOOLS, KODAX_UNDERLYING_CAPABILITY_TOPICS, KodaXAgentScope, KodaXBaseProvider, KodaXChildContextBundle, KodaXClient, KodaXContentBlock, KodaXContextOptions, KodaXEvents, KodaXExecutionMode, KodaXExtensionRuntime, KodaXInputArtifact, KodaXManualTopic, KodaXManualTopicId, KodaXMessage, KodaXOptions, KodaXProviderCapabilityProfile, KodaXProviderPolicyHints, KodaXReasoningCapability, KodaXReasoningMode, KodaXRepoIntelligenceCapability, KodaXRepoIntelligenceMode, KodaXRepoIntelligenceResolvedMode, KodaXRepoIntelligenceTrace, KodaXRepoRoutingSignals, KodaXResult, KodaXRetrievalItem, KodaXRetrievalResult, KodaXRetrievalToolName, KodaXSessionControl, KodaXSessionError, KodaXSessionMutators, KodaXTaskRoutingDecision, KodaXTaskType, KodaXTerminalError, KodaXThinkingDepth, KodaXTimeoutConfig, KodaXTokenUsage, KodaXToolDefinition, KodaXToolError, KodaXToolExecutionContext, KodaXToolUseBlock, KodaXWireReasoningEffort, LocalToolDefinition, MANUAL_REGISTRY, MANUAL_TOPIC_IDS, McpCapabilityProvider, McpProviderOptions, McpReverseCapabilities, McpRoot, McpServersConfig, PLANNER_AGENT_NAME, PROMPT_SECTION_REGISTRY, PROTOCOL_EMITTER_TOOLS, ProviderExecutionState, ProviderRecoveryCoordinator, ProviderResilienceConfig, ProviderResiliencePolicy, READ_DEFAULT_LIMIT, READ_MAX_LINE_CHARS, READ_PREFLIGHT_SIZE_BYTES, REPO_EXPLORER_AGENT_NAME, REPO_EXPLORER_TOOL_NAMES, RecoveryDecision, RecoveryResult, RegisteredToolDefinition, ResilienceClassification, ResolveKodaXManualInput, ResolveKodaXManualOptions, ResolveKodaXManualResult, RuntimeContextBudgetSnapshot, RuntimeContextPressure, RuntimeDefaultsSnapshot, SCOUT_AGENT_NAME, SCOUT_THEN_AUTHOR_PROMPT_LINES, SELF_KNOWLEDGE_ROUTING_RULE, SYSTEM_PROMPT, SYSTEM_WORKFLOW_LIMITS, ScriptSource, SessionErrorMetadata, SignalCollector, StableBoundaryTracker, StagedHandle, TASK_ENGINE_ROLE_AGENTS, TOOL_RESULT_TRUNCATION_GUARDRAIL_NAME, TRACING_ENV, TestResult, ToolCallSignal, ToolHandler, ToolRegistrationOptions, WORKER_AGENT_NAME, WORKFLOW_GENERATION_SYSTEM_PROMPT, WorkflowEventCorrelation, WorkflowHostPolicy, _resetRuntimeForTesting, activate, analyzeChangedScope, appendAuditEntry, applyAccountingDelta, applyToolResultGuardrail, authorWorkflowViaWorker, bashSignalCollector, bootstrapTracing, boundedRevise, budgetCeiling, buildApprovalSummary, buildBlockedGoal, buildCapabilityContextSections, buildClassifierPrompt, buildCompleteGoal, buildCreatedGoal, buildFallbackRoutingDecision, buildLlmReviewPrompt, buildManualToolDescription, buildMcpReverseCapabilities, buildPausedGoal, buildPromptMessageContent, buildPromptSnapshot, buildProviderCapabilitySnapshot, buildProviderPolicyHintsForDecision, buildProviderPolicyPromptNotes, buildRepoIntelligenceContext, buildRepoIntelligenceIndex, buildRepoOverview, buildResumedGoal, buildScoutThenAuthorPrompt, buildSelfKnowledgeRoutingRule, buildSystemPrompt, buildSystemPromptSnapshot, buildToolResultBudget, buildToolResultBudgetFromUsage, buildToolSearchIndex, buildWorkflowGenerationSkillContext, buildWorkflowGenerationUserPrompt, checkAbsoluteDeny, checkIncompleteToolCalls, checkPromiseSignal, clampToolResultPolicyToBudget, clampWorkflowLimits, classify, classifyBashCommand, classifyError, classifyResilienceError, combineExtensionRuntimes, computeInputSignature, configureRuntime, convertCapabilityReadResult, convertProviderSearchResults, createBashClassifierConfig, createBuiltinToolDefinition, createCodingWorkflowBackend, createCtxProxy, createDefaultCodingAgent, createDenialTracker, createExtensionRuntime, createKodaXTaskRunner, createPromptSection, createReasoningPlan, createRunGraphWriter, createSessionControl, createToolResultTruncationGuardrail, createWorkflowLifecycleController, createWorkflowPatternTemplateModule, createWorkflowRunManager, dedupeExtensionPathsByEntrypoint, deleteSavedWorkflow, disableSelfModify, discoverDefaultExtensions, discoverExtensionsInDirectory, discoverExtensionsInDirectoryDetailed, discoverMarkdownAgents, discoverSavedWorkflows, emitVerdict, emitWorkflowAgentDigest, ensureBuiltinRepoExplorerAgent, evaluateProviderPolicy, excludeExtensionPathsByEntrypoint, executeTool, extractComparableUserMessageText, extractHtmlTitle, extractPromptComparableText, fileSignalCollector, finalizeRetrievalResult, findByVersion, formatParallelDispatchResult, formatSize, generateWorkflow, generateWorkflowFromOptions, getActiveExtensionRuntime, getAllRegisteredTools, getBuiltinRegisteredToolDefinition, getBuiltinToolDefinition, getBuiltinWorkflow, getDefaultExtensionDirectory, getDefaultWorkflowRunManager, getDenialContext, getImpactEstimate, getModuleContext, getProcessContext, getRegisteredToolDefinition, getRepoIntelligenceIndex, getRepoOverview, getRepoRoutingSignals, getRequiredToolParams, getSymbolContext, getTool, getToolDefinition, getToolRegistrations, getToolResultPolicy, getWorkflowPatternTemplate, goalTokenDelta, inferTaskType, inspectEditFailure, inspectRepoIntelligenceRuntime, isDeniedRecently, isParallelDispatchDirective, isSessionRecoveryCandidateError, isSupportedExtensionModulePath, isToolFileMutation, isToolMutation, isToolNetworkRead, isToolPlanModeAllowed, isValidTokenBudget, languageIdForPath, listAll, list as listArtifacts, listBuiltinToolDefinitions, listBuiltinWorkflows, listConstructed, listToolDefinitions, listTools, listWorkflowPatternTemplates, loadAgentsFromMarkdown, loadGeneratedWorkflowFromRun, loadHandler, loadMarkdownAgentScope, loadSavedWorkflow, loadSavedWorkflowCapsule, mcpRootsFromWorkspace, normalizeWorkflowModule, orderPromptSections, parallelInvestigation, parseClassifierOutput, parseEditToolError, parseLlmReviewVerdict, parseModelSpec, parseToolSearchQuery, parseWorkflowGeneration, persistToolOutput, preflightWorkflowCapsule, prewarmRepoIntelligenceCaches, readArtifact, readAuditEntries, readBudget, readDisableState, readWindowFromEnv as readSpeculativeWindowFromEnv, reasoningModeToDepth, reconstructMessagesWithToolGuard, recordBlockerAttempt, recordDenial, registerCodingInvariants, registerConfiguredMcpCapabilityProvider, registerOfficialSandboxExtension, registerTool, rehydrateActiveArtifacts, remaining as remainingSelfModifyBudget, renameSavedWorkflow, renderChangedScope, renderImpactEstimate, renderModuleContext, renderProcessContext, renderPromptSections, renderRepoOverview, renderRetrievalResult, renderSymbolContext, replaceSavedWorkflow, report as reportLspDiagnostics, resetBlockerCounter, resetBudget, resolveClassifierModel, resolveExtensionEntrypoint, resolveKodaXManual, resolveReasoningMode, resolveRepoIntelligenceMode, resolveRepoIntelligenceRuntimeConfig, resolveResilienceConfig, resolveToolCapability, resolveWorkflowGenerationTimeoutMs, resolveWorkflowIdentity, revoke, rollbackSelfModify, runAstRules, runKodaX, runLlmReview, runManagedTask, runOrchestration, runWorkflowFromOptions, runWorkflowModule, safeWorkflowArtifactName, saveGeneratedWorkflow, saveGeneratedWorkflowFromRun, searchToolIndex, setActiveExtensionRuntime, shouldFlipBudgetLimited, speculativeRace, stage, startKodaX, startManagedWorkflow, stripAssistantText, stripHtmlToText, test as testArtifact, toolAskUserQuestion, toolBash, toolChangedDiff, toolChangedScope, toolCodeSearch, toolEdit, toolGlob, toolGrep, toolImpactEstimate, toolInsertAfterAnchor, toolModuleContext, toolPermission, toolProcessContext, toolRead, toolRepoOverview, toolSemanticLookup, toolSymbolContext, toolUndo, toolWebFetch, toolWebSearch, toolWrite, truncateHead, truncateLine, truncateTail, turnWallTimeDelta, validateGeneratedWorkflowSource, validateSubtaskIndependence, validateToolSchemaForProvider, verifyGoalCompletion, withManualToolBranding, workerAgent };
+export type { AbsoluteDenyMatch, AbsoluteDenyMiss, AbsoluteDenyResult, AstCheckResult, AstRuleId, AstRuleViolation, AuditEntry, AuditEventKind, AuthorWorkflowViaWorkerHandle, AuthorWorkflowViaWorkerInput, BashClassificationResult, BashClassifierConfig, BashRiskLevel, BlockerAttemptResult, BootstrapTracingOptions, BudgetState, BuildClassifierPromptInput, BuildPromptInput, ChangedFileEntry, ChangedFileStatus, ChangedScopeAreaSummary, ChangedScopeReport, ClassifierDecision, ClassifierPrompt, ClassifyDecision, ClassifyOptions, CodingWorkflowBackendDeps, CreateCtxProxyOptions, CreateKodaXTaskRunnerOptions, CreateWorkflowLifecycleControllerOptions, DeleteSavedWorkflowInput, DeleteWorkflowRunOptions, DenialRecord, DenialTracker, DisableState, DiscoverMarkdownAgentsResult, DiscoveredMarkdownAgent, EditRecoveryDiagnostic, EditToolErrorCode, ErrorClassification, ExtensionDiscoveryResult, ExtensionDiscoverySkipReason, GenerateWorkflowFromOptionsInput, GenerateWorkflowInput, GeneratedWorkflow, GoalCompletionVerifier, ImpactEstimateResult, InvestigationFinding, KodaXAgentWorkerSpec, KodaXPromptSection, KodaXPromptSectionDefinition, KodaXPromptSectionSlot, KodaXPromptSectionStability, KodaXPromptSnapshot, KodaXPromptSnapshotMetadata, KodaXProviderCapabilitySnapshot, KodaXProviderPolicyDecision, KodaXProviderPolicyIssue, KodaXProviderPolicyIssueSeverity, KodaXProviderSourceKind, LanguageCapabilityTier, LlmReviewClient, LlmReviewResult, LlmReviewVerdict, LoadAgentsFromMarkdownOptions, LoadAgentsFromMarkdownResult, LoadGeneratedWorkflowFromRunInput, LoadHandlerOptions, LoadHandlerScope, LoadMarkdownAgentScopeOptions, LoadMarkdownAgentScopeResult, LoadedGeneratedWorkflowFromRun, LoadedMarkdownAgent, ManagedWorkflowRun, ManagedWorkflowSnapshot, ManagedWorkflowSource, MarkdownAgentLoadWarning, MarkdownAgentToolFilter, MarkdownLoadFailure, McpReverseWorkspace, ModuleCapsule, ModuleContextResult, OfficialSandboxMode, OfficialSandboxOptions, OrchestrationArtifact, OrchestrationCompletedTask, OrchestrationRunEvents, OrchestrationRunOptions, OrchestrationRunResult, OrchestrationTaskBudget, OrchestrationTaskContext, OrchestrationTaskExecution, OrchestrationTaskStatus, OrchestrationTraceEvent, OrchestrationWorkerResult, OrchestrationWorkerRunner, OrchestrationWorkerSpec, ParallelDispatchDirective, ParallelDispatchResult, ParallelInvestigationArgs, ParallelInvestigationResult, ParallelSubtask, ParsedModelSpec, ProcessCapsule, ProcessContextResult, ProcessStep, ProtocolEmitterMetadata, RenameSavedWorkflowInput, ReplaceSavedWorkflowInput, ReplaceSavedWorkflowResult, RepoAreaKind, RepoAreaOverview, RepoIntelligenceIndex, RepoIntelligenceRuntimeInspection, RepoLanguageId, RepoLanguageSupport, RepoOverview, RepoSymbolKind, RepoSymbolRecord, RepoSymbolReference, ResolveClassifierModelOptions, ResolveSource, ResolvedClassifierModel, RollbackResult, RunGraphWriter, RunGraphWriterDeps, RunJsonInput, RunWorkflowFromOptionsInput, RunWorkflowModuleOptions, RunWorkflowModuleOutcome, RunningSession, SaveGeneratedWorkflowFromRunInput, SaveGeneratedWorkflowInput, SavedGeneratedWorkflowFile, SavedWorkflowDirs, SavedWorkflowExecution, SavedWorkflowRef, SavedWorkflowSource, SchemaProvider, SchemaValidationResult, SelfModifyAskUser, SelfModifyAskUserInput, SelfModifyDiffSeverity, SelfModifyDiffSummary, SkippedExtensionDiscoveryEntry, SpeculativeResult, StartManagedWorkflowInput, StartManagedWorkflowResult, StripOptions, SymbolContextResult, TestArtifactOptions, TierZeroPatternId, ToolResultBudget, ToolResultBudgetReason, ToolResultBudgetUsageInput, ToolSearchIndex, ToolSearchIndexEntry, ToolSearchIndexOptions, ToolSearchQueryParts, ToolSearchResult, VerifyGoalCompletionOptions, WorkflowCapsulePreflightEnvironment, WorkflowCapsulePreflightInput, WorkflowCapsulePreflightIssue, WorkflowCapsulePreflightResult, WorkflowChildOptions, WorkflowGenerationResult, WorkflowGenerationTextFn, WorkflowGenerationTextRequest, WorkflowIdentityResolution, WorkflowIdentityResolverInput, WorkflowLifecycleController, WorkflowPatternTemplate, WorkflowRunListOptions, WorkflowRunManager, WorkflowRunProcessMetadata, WorkflowRunRetentionOptions, WorkflowRunRetentionResult, WorkflowScriptSnapshotInput, WorkflowScriptSnapshotRef };