@kodax-ai/kodax 0.7.77 → 0.7.78

package/dist/sdk-runtime.d.ts

@@ -1,23 +1,23 @@
 import { F as KodaXReasoningMode, d as KodaXCustomProviderConfig } from './types-chunks/types.d-DIpZJKUl.js';
 export { k as KodaXMessage } from './types-chunks/types.d-DIpZJKUl.js';
-import { a1 as KodaXOptions, aj as KodaXShellExecutionContract, W as KodaXManagedTaskStatusEvent, Q as KodaXEvents, ac as KodaXResult, be as RuntimeContextBudgetSnapshot, bl as RuntimeToolExposurePlan, a4 as KodaXPromptCacheDiagnosticEvent, N as KodaXContextOptions, K as KodaXActivityEventMeta, aJ as KodaXToolEventMeta, aQ as KodaXTurnStartedEvent, aN as KodaXTurnCompletedEvent, aP as KodaXTurnFailedEvent, L as KodaXContextCompactionFinishedEvent, M as KodaXContextIdentity } from './types-chunks/bash-prefix-extractor.d-pZdu6qt7.js';
-import { C as AgentDispatchContext, Q as AgentExecutorFactory, D as AgentDispatchPolicy, y as AgentCredentialBroker, m as AgentArtifactPolicy, bu as KodaXImageInputArtifact, bx as KodaXInputArtifactSource, c3 as KodaXVideoInputArtifact, ea as WorkflowProcessSnapshot, e4 as WorkflowProcessEvent, M as AgentExecutionKind, al as AgentRegistrationService, b1 as DispatchableAgentQuery, a$ as DispatchableAgentListing, ad as AgentPreflightInput, ae as AgentPreflightResult, aA as AgentTreeSnapshot, B as AgentDetail, an as AgentSpawnInput, aD as AgentTurnRef, z as AgentDataClassification, $ as AgentFollowupResult, ac as AgentOutput, J as AgentEvent } from './types-chunks/types.d-RdWRfUEs.js';
-import { i as SkillMetadata } from './types-chunks/types.d-DCQVBqVn.js';
+import { F as AgentDispatchContext, cK as LearningQuery, cJ as LearningPage, cm as LearnedCapabilityRecord, cP as LearningSurfaceSnapshot, cF as LearningEvent, cO as LearningSubscribeOptions, T as AgentExecutorFactory, G as AgentDispatchPolicy, C as AgentCredentialBroker, p as AgentArtifactPolicy, bB as KodaXImageInputArtifact, bE as KodaXInputArtifactSource, cb as KodaXVideoInputArtifact, e_ as WorkflowProcessSnapshot, eU as WorkflowProcessEvent, P as AgentExecutionKind, ao as AgentRegistrationService, b7 as DispatchableAgentQuery, b5 as DispatchableAgentListing, ag as AgentPreflightInput, ah as AgentPreflightResult, aD as AgentTreeSnapshot, E as AgentDetail, aq as AgentSpawnInput, aG as AgentTurnRef, D as AgentDataClassification, a2 as AgentFollowupResult, af as AgentOutput, M as AgentEvent } from './types-chunks/types.d-BA-Jwpfs.js';
+import { i as SkillMetadata } from './types-chunks/types.d-BbtGlKZu.js';
 import { a as McpServerConfig } from './types-chunks/config.d-CJy1WENT.js';
 import { t as McpServerStatus, u as McpServerToolList } from './types-chunks/manager.d-B67TmPO1.js';
-import { K as KodaXSessionHistoryHit } from './types-chunks/history-retrieval.d-B__aEN62.js';
-import { c as ManagedWorkflowSnapshot } from './types-chunks/run-manager.d-B47hIqnI.js';
-import { L as LoadedExtensionDiagnostic, u as ExtensionRuntimeDiagnostics } from './types-chunks/types.d-DCsKM8aT.js';
-import { r as AutoModeStats } from './types-chunks/guardrail.d-B0PwAZVR.js';
-import { M as saveConfig, c as CommandInfo } from './types-chunks/utils.d-CDduqbFw.js';
-import { k as FullTranscriptSessionData, Z as SessionTranscriptEntry, c as CompactSessionResult } from './types-chunks/public-api.d--fF88JrC.js';
-import { n as LearningQuery, m as LearningPage, b as LearnedCapabilityRecord, p as LearningSurfaceSnapshot, j as LearningEvent, o as LearningSubscribeOptions } from './types-chunks/center-types.d-BBT122uJ.js';
+import { K as KodaXSessionHistoryHit } from './types-chunks/history-retrieval.d-DtCy7x64.js';
+import { c as ManagedWorkflowSnapshot } from './types-chunks/run-manager.d-D1twIhF9.js';
+import { a1 as KodaXOptions, ak as KodaXShellExecutionContract, aQ as KodaXToolSandboxObservationUpdate, aO as KodaXToolEventMeta, W as KodaXManagedTaskStatusEvent, Q as KodaXEvents, ad as KodaXResult, bk as RuntimeContextBudgetSnapshot, br as RuntimeToolExposurePlan, a5 as KodaXPromptCacheDiagnosticEvent, N as KodaXContextOptions, K as KodaXActivityEventMeta, aW as KodaXTurnStartedEvent, aT as KodaXTurnCompletedEvent, aV as KodaXTurnFailedEvent, L as KodaXContextCompactionFinishedEvent, M as KodaXContextIdentity } from './types-chunks/bash-prefix-extractor.d-uAe2Oqda.js';
+import { L as LoadedExtensionDiagnostic, u as ExtensionRuntimeDiagnostics } from './types-chunks/types.d-DVDTIfB_.js';
+import { h as AutoModeDecisionDiagnostics, s as AutoModeStats } from './types-chunks/guardrail.d-CXDYRgZ3.js';
+import { M as saveConfig, c as CommandInfo } from './types-chunks/utils.d-CVp6bFl9.js';
+import { k as FullTranscriptSessionData, Z as SessionTranscriptEntry, c as CompactSessionResult } from './types-chunks/public-api.d-B3AohsxN.js';
+import './types-chunks/capability.d-K664nHOS.js';
 import 'vscode-languageserver-protocol';
 import './types-chunks/cost-tracker.d-BeaenODW.js';
-import './types-chunks/types-LanCEDj8.js';
-import './types-chunks/capability.d-K664nHOS.js';
+import './types-chunks/types-D3g6XUQr.js';
 import './types-chunks/base.d-4e74xDdy.js';
-import './types-chunks/guardrail.d-CJx9RRd3.js';
+import './types-chunks/guardrail.d-BRE_ErEj.js';
+import './types-chunks/side-query.d-DTuLPcC5.js';
 import 'readline';
 import 'child_process';
 
@@ -163,18 +163,18 @@ interface RuntimeAgentBindingService {
 
 interface RuntimeLearningService {
     list(query?: LearningQuery): Promise<LearningPage>;
-    get(nameOrSlug: string): Promise<LearnedCapabilityRecord>;
+    get(nameOrSlugOrId: string): Promise<LearnedCapabilityRecord>;
     getSnapshot(): Promise<LearningSurfaceSnapshot>;
     events(afterRevision?: number): Promise<readonly LearningEvent[]>;
     subscribe(options?: LearningSubscribeOptions): AsyncIterable<LearningEvent>;
-    acknowledge(nameOrSlug: string): Promise<void>;
-    snooze(nameOrSlug: string, until: string): Promise<void>;
-    reject(nameOrSlug: string): Promise<void>;
-    disable(nameOrSlug: string): Promise<void>;
-    rollback(nameOrSlug: string): Promise<void>;
-    promote(nameOrSlug: string, scope: 'user'): Promise<void>;
-    review(nameOrSlug: string): Promise<void>;
-    trust(nameOrSlug: string): Promise<void>;
+    acknowledge(nameOrSlugOrId: string): Promise<void>;
+    snooze(nameOrSlugOrId: string, until: string): Promise<void>;
+    reject(nameOrSlugOrId: string): Promise<void>;
+    disable(nameOrSlugOrId: string): Promise<void>;
+    rollback(nameOrSlugOrId: string): Promise<void>;
+    promote(nameOrSlugOrId: string, scope: 'user'): Promise<void>;
+    review(nameOrSlugOrId: string): Promise<void>;
+    trust(nameOrSlugOrId: string): Promise<void>;
 }
 
 declare const KODAX_DAEMON_PROTOCOL = "kodax-runtime-daemon";
@@ -861,10 +861,10 @@ declare function listRuntimeDaemonSchemaMethods(): readonly RuntimeDaemonMethod[
 declare class RuntimeDaemonCapabilityUpgradeError extends Error {
     readonly preflight?: RuntimeDaemonPreflight | undefined;
     readonly code: "daemon_capability_upgrade_required";
-    readonly capability: "runtimeAutoModeGuardrail";
     readonly recoverable: true;
     readonly restartRequired: true;
-    constructor(message: string, preflight?: RuntimeDaemonPreflight | undefined, options?: ErrorOptions);
+    readonly capability: string;
+    constructor(message: string, preflight?: RuntimeDaemonPreflight | undefined, options?: ErrorOptions, capability?: string);
 }
 /** A recoverable Auto LLM configuration error that must never become approval work. */
 declare class RuntimeAutoModeConfigurationError extends Error {
@@ -873,8 +873,8 @@ declare class RuntimeAutoModeConfigurationError extends Error {
     constructor(message: string);
 }
 
-type KodaXRuntimeMode = 'embedded' | 'daemon';
-type KodaXRuntimeIsolation = 'inline' | 'worker' | 'process';
+type KodaXRuntimeMode = "embedded" | "daemon";
+type KodaXRuntimeIsolation = "inline" | "worker" | "process";
 
 interface RuntimeInlineOwnerHandle {
     readonly profile: string;
@@ -883,7 +883,7 @@ interface RuntimeInlineOwnerHandle {
     close(): void;
 }
 interface RuntimeOwnerPolicyState {
-    readonly mode: 'daemon' | 'inline';
+    readonly mode: "daemon" | "inline";
     readonly revision: number;
     readonly updatedAt: string;
 }
@@ -891,12 +891,12 @@ interface RuntimeOwnerIdentity {
     readonly runtimeId: string;
     readonly pid: number;
     readonly createdAt: string;
-    readonly kind?: 'daemon' | 'inline';
+    readonly kind?: "daemon" | "inline";
 }
 interface RuntimeOwnerState {
     readonly profile: string;
     readonly policy: RuntimeOwnerPolicyState;
-    readonly ownerStatus: 'unowned' | 'owned' | 'unreadable';
+    readonly ownerStatus: "unowned" | "owned" | "unreadable";
     readonly owner: RuntimeOwnerIdentity | null;
 }
 /**
@@ -922,12 +922,12 @@ declare function enableKodaXDaemonOwner(input?: {
     readonly profile?: string;
 }): RuntimeOwnerPolicyState;
 declare function setKodaXRuntimeOwnerMode(input: {
-    readonly mode: 'daemon' | 'inline';
+    readonly mode: "daemon" | "inline";
     readonly expectedRevision: number;
     readonly homeDir?: string;
     readonly profile?: string;
 }): {
-    readonly mode: 'daemon' | 'inline';
+    readonly mode: "daemon" | "inline";
     readonly revision: number;
     readonly updatedAt: string;
 };
@@ -962,7 +962,7 @@ interface RuntimeClientCapabilities {
     readonly contextDiagnostics?: boolean;
     readonly operationDeduplication?: boolean;
 }
-type RuntimeGrantedScope = 'session:observe' | 'session:write' | 'run:control' | 'interaction:respond' | 'permission:respond' | 'permission:grant-admin' | 'integration:admin' | 'workflow:control' | 'learning:read' | 'learning:control' | 'artifact:write' | 'agent:control' | 'credential:register' | 'host-tool:register' | 'owner:admin' | 'daemon:admin';
+type RuntimeGrantedScope = "session:observe" | "session:write" | "run:control" | "interaction:respond" | "permission:respond" | "permission:grant-admin" | "integration:admin" | "workflow:control" | "learning:read" | "learning:control" | "artifact:write" | "agent:control" | "credential:register" | "host-tool:register" | "owner:admin" | "daemon:admin";
 interface RuntimeExternalAgentsOptions {
     readonly factories: readonly AgentExecutorFactory[];
     readonly policy: AgentDispatchPolicy;
@@ -976,7 +976,7 @@ interface CreateKodaXRuntimeOptions {
     /** Runtime ownership form. Defaults to a caller-owned embedded Runtime. */
     readonly mode?: KodaXRuntimeMode;
     /** Embedded-only execution location. Daemon mode selects host isolation internally. */
-    readonly isolation?: 'inline' | 'worker';
+    readonly isolation?: "inline" | "worker";
     /** Requires `isolation: 'worker'`; rejected instead of being silently ignored. */
     readonly worker?: RuntimeWorkerOptions;
     /** Base directory that owns `.kodax`, matching CLI `--home`; not the `.kodax` directory used by `KODAX_HOME`. */
@@ -992,6 +992,11 @@ interface CreateKodaXRuntimeOptions {
     readonly daemonHostRuntimeId?: string;
     readonly daemonStartupTimeoutMs?: number;
     readonly daemonConnectTimeoutMs?: number;
+    /**
+     * Auto-started daemon only: after the last logical client disconnects,
+     * stop once governed work is idle. Omit to keep the normal persistent daemon.
+     */
+    readonly daemonOrphanExitMs?: number;
     readonly daemonTransport?: RuntimeDaemonClientTransport;
     readonly daemonEndpoint?: string | RuntimeDaemonEndpoint;
     /** Defaults to true for daemon mode unless a transport or endpoint is supplied. */
@@ -1017,11 +1022,17 @@ interface ConnectKodaXRuntimeOptions {
     readonly permissionTimeoutMs?: number;
     readonly daemonStartupTimeoutMs?: number;
     readonly daemonConnectTimeoutMs?: number;
+    /** Auto-started daemon idle-exit policy; see CreateKodaXRuntimeOptions. */
+    readonly daemonOrphanExitMs?: number;
     readonly daemonToken?: string;
     readonly clientInfo?: RuntimeClientInfo;
     readonly capabilities?: RuntimeClientCapabilities;
     readonly requirements?: RuntimeCapabilityRequirements;
 }
+/** SDK facts that embedders can inspect before auto-starting a daemon. */
+declare const KODAX_RUNTIME_SDK_CAPABILITIES: Readonly<{
+    readonly daemonOrphanExit: 1;
+}>;
 interface RuntimeCapabilityRequirements {
     /** Reject inline and shared daemon hosts; only a Worker-hosted Runtime satisfies this. */
     readonly hardDispose?: boolean;
@@ -1035,6 +1046,7 @@ interface RuntimeCapabilityRequirements {
     readonly sessionObservation?: 1;
     readonly afterTurnInput?: 1;
     readonly learningCenter?: 1;
+    readonly skillLearningLoop?: 1;
     readonly interruptInput?: 1;
     readonly askUserTransport?: 1;
     readonly permissionCas?: 1;
@@ -1057,11 +1069,15 @@ interface RuntimeCapabilityRequirements {
     readonly sharedSessionSettings?: 1;
     readonly durableRecoveryQueries?: 1;
     readonly daemonManagement?: 1;
+    /** Require an auto-started daemon whose current host has orphan idle-exit enabled. */
+    readonly daemonOrphanExit?: 1;
+    /** Optional integration failures are isolated, observable, and hot-recoverable. */
+    readonly integrationConfigResilience?: 1;
     readonly actorControlPlane?: 1;
     /** Runtime owns Auto LLM/rules classification before shared permission brokering. */
-    readonly runtimeAutoModeGuardrail?: 1 | 2 | 3;
+    readonly runtimeAutoModeGuardrail?: 1 | 2 | 3 | 4;
 }
-type RuntimeOperationState = 'accepted' | 'dispatched' | 'applied' | 'rejected' | 'interrupted' | 'unknown';
+type RuntimeOperationState = "accepted" | "dispatched" | "applied" | "rejected" | "interrupted" | "unknown";
 interface RuntimeOperationReceipt {
     readonly operationId: string;
     readonly journalEpoch: string;
@@ -1088,7 +1104,7 @@ interface RuntimeDiagnosticFilter {
     readonly sessionId?: string;
     readonly runId?: string;
     /** Defaults to root so child physical requests do not replace root diagnostics. */
-    readonly contextKind?: 'root' | 'child';
+    readonly contextKind?: "root" | "child";
     readonly agentId?: string;
 }
 interface RuntimeDiagnosticsService {
@@ -1097,7 +1113,7 @@ interface RuntimeDiagnosticsService {
     latestProviderCacheDiagnostic(filter?: RuntimeDiagnosticFilter): Promise<KodaXPromptCacheDiagnosticEvent | null>;
 }
 interface RuntimeConnectionState {
-    readonly state: 'connected' | 'disconnected';
+    readonly state: "connected" | "disconnected";
     readonly connectionId: string;
     readonly runtimeEpoch: string;
     readonly journalEpoch?: string;
@@ -1182,15 +1198,15 @@ interface RuntimeCommandInfo {
     readonly name: string;
     readonly aliases?: readonly string[];
     readonly description: string;
-    readonly source: CommandInfo['source'];
+    readonly source: CommandInfo["source"];
     readonly usage?: string;
     readonly argumentHint?: string;
-    readonly location?: CommandInfo['location'];
+    readonly location?: CommandInfo["location"];
     readonly path?: string;
     readonly userInvocable?: boolean;
     readonly disableModelInvocation?: boolean;
     readonly allowedTools?: string;
-    readonly context?: 'fork';
+    readonly context?: "fork";
     readonly agent?: string;
     readonly model?: string;
 }
@@ -1213,7 +1229,7 @@ interface RuntimeSkillSummary {
     readonly userInvocable: boolean;
     readonly argumentHint?: string;
     readonly path: string;
-    readonly source: SkillMetadata['source'];
+    readonly source: SkillMetadata["source"];
     readonly disableModelInvocation: boolean;
 }
 interface RuntimeSkillDescription extends RuntimeSkillSummary {
@@ -1272,7 +1288,7 @@ interface RuntimeMcpService {
     reloadServers(): Promise<RuntimeMcpReloadResult>;
     listTools(filter?: RuntimeMcpToolListFilter): Promise<readonly McpServerToolList[]>;
 }
-type RuntimeArtifactKind = 'image' | 'file' | 'video';
+type RuntimeArtifactKind = "image" | "file" | "video";
 interface RuntimeCreateArtifactInput {
     readonly kind: RuntimeArtifactKind;
     readonly path: string;
@@ -1364,7 +1380,7 @@ interface RuntimeTranscriptEntryChunk {
     readonly revision: string;
     readonly entryIndex: number;
     readonly entryId?: string;
-    readonly encoding: 'base64-json';
+    readonly encoding: "base64-json";
     readonly data: string;
     readonly hasMore: boolean;
     readonly nextCursor?: string;
@@ -1373,8 +1389,8 @@ interface RuntimeTranscriptSearchInput {
     readonly sessionId: string;
     readonly query: string;
     readonly limit?: number;
-    readonly role?: 'user' | 'assistant';
-    readonly scope?: 'compacted' | 'all';
+    readonly role?: "user" | "assistant";
+    readonly scope?: "compacted" | "all";
 }
 interface RuntimeTranscriptSearchHit extends KodaXSessionHistoryHit {
     /** Index accepted by transcriptEntryChunk for this exact transcript revision. */
@@ -1386,7 +1402,7 @@ interface RuntimeTranscriptSearchResult {
 }
 interface RuntimeSessionFilter {
     readonly projectRoot?: string;
-    readonly scope?: 'user' | 'managed-task-worker' | 'all';
+    readonly scope?: "user" | "managed-task-worker" | "all";
     readonly includeArchived?: boolean;
     readonly limit?: number;
     readonly before?: string;
@@ -1403,14 +1419,14 @@ interface RuntimeForkSessionInput {
 interface RuntimeSessionSettings {
     readonly provider?: string;
     readonly model?: string;
-    readonly effort?: KodaXOptions['effort'];
+    readonly effort?: KodaXOptions["effort"];
     readonly thinking?: boolean;
     readonly reasoningMode?: KodaXReasoningMode;
     readonly permissionMode?: string;
     readonly executionCwd?: string;
     readonly shellExecution?: KodaXShellExecutionContract;
-    readonly agentMode?: KodaXOptions['agentMode'];
-    readonly autoModeEngine?: 'llm' | 'rules';
+    readonly agentMode?: KodaXOptions["agentMode"];
+    readonly autoModeEngine?: "llm" | "rules";
     readonly autoModeClassifierModel?: string;
     readonly autoModeTimeoutMs?: number;
     readonly autoModeSpeculativeWindowMs?: number;
@@ -1422,14 +1438,14 @@ interface RuntimeSessionSettings {
 interface RuntimeSessionSettingsPatch {
     readonly provider?: string | null;
     readonly model?: string | null;
-    readonly effort?: KodaXOptions['effort'] | null;
+    readonly effort?: KodaXOptions["effort"] | null;
     readonly thinking?: boolean | null;
     readonly reasoningMode?: KodaXReasoningMode | null;
     readonly permissionMode?: string | null;
     readonly executionCwd?: string | null;
     readonly shellExecution?: KodaXShellExecutionContract | null;
-    readonly agentMode?: KodaXOptions['agentMode'] | null;
-    readonly autoModeEngine?: 'llm' | 'rules' | null;
+    readonly agentMode?: KodaXOptions["agentMode"] | null;
+    readonly autoModeEngine?: "llm" | "rules" | null;
     readonly autoModeClassifierModel?: string | null;
     readonly autoModeTimeoutMs?: number | null;
     readonly autoModeSpeculativeWindowMs?: number | null;
@@ -1476,6 +1492,7 @@ interface RuntimeActiveToolProjection {
     readonly turnId?: string;
     readonly started: unknown;
     readonly progress?: unknown;
+    readonly sandbox?: RuntimeToolSandboxEventPayload;
 }
 interface RuntimePendingUserInputProjection {
     readonly requestId: string;
@@ -1535,21 +1552,21 @@ interface RuntimeSessionService {
     unarchive(sessionId: string): Promise<void>;
     delete(sessionId: string): Promise<void>;
 }
-type RuntimeRunPhase = 'queued' | 'running' | 'waiting_permission' | 'waiting_user_input' | 'completed' | 'failed' | 'cancelled' | 'interrupted';
-type RuntimeRunMode = 'coding' | 'managed_task';
+type RuntimeRunPhase = "queued" | "running" | "waiting_permission" | "waiting_user_input" | "completed" | "failed" | "cancelled" | "interrupted";
+type RuntimeRunMode = "coding" | "managed_task";
 interface RuntimeTextInput {
-    readonly type: 'text';
+    readonly type: "text";
     readonly text: string;
 }
 interface RuntimeImageInput {
-    readonly type: 'image';
+    readonly type: "image";
     readonly path: string;
-    readonly mediaType?: KodaXImageInputArtifact['mediaType'];
+    readonly mediaType?: KodaXImageInputArtifact["mediaType"];
     readonly source?: KodaXInputArtifactSource;
     readonly description?: string;
 }
 interface RuntimeFileInput {
-    readonly type: 'file';
+    readonly type: "file";
     readonly path: string;
     readonly mediaType?: string;
     readonly mimeType?: string;
@@ -1558,20 +1575,20 @@ interface RuntimeFileInput {
     readonly description?: string;
 }
 interface RuntimeVideoInput {
-    readonly type: 'video';
+    readonly type: "video";
     readonly path: string;
-    readonly mediaType: KodaXVideoInputArtifact['mediaType'];
+    readonly mediaType: KodaXVideoInputArtifact["mediaType"];
     readonly name?: string;
     readonly source?: KodaXInputArtifactSource;
     readonly description?: string;
 }
 interface RuntimeArtifactRefInput {
-    readonly type: 'artifact_ref';
+    readonly type: "artifact_ref";
     readonly artifactId: string;
     readonly description?: string;
 }
 type RuntimeInput = RuntimeTextInput | RuntimeImageInput | RuntimeFileInput | RuntimeVideoInput | RuntimeArtifactRefInput;
-type RuntimePermissionBroker = 'runtime' | 'client';
+type RuntimePermissionBroker = "runtime" | "client";
 interface RuntimeStartRunInput {
     readonly sessionId: string;
     readonly prompt?: string;
@@ -1595,7 +1612,7 @@ interface RuntimeStartRunInput {
 interface RuntimeSubmitInput {
     readonly sessionId: string;
     readonly afterRunId: string;
-    readonly delivery: 'after_turn' | 'interrupt';
+    readonly delivery: "after_turn" | "interrupt";
     readonly input: RuntimeInput | readonly RuntimeInput[];
     /** Continuations receive only bindings explicitly supplied for this input. */
     readonly credential?: {
@@ -1609,14 +1626,14 @@ interface RuntimeSubmitInput {
 }
 type RuntimeSubmitInputResult = {
     readonly accepted: true;
-    readonly delivery: 'after_turn';
+    readonly delivery: "after_turn";
     readonly runId: string;
     readonly sessionId: string;
     readonly afterRunId: string;
     readonly sessionOrder: number;
 } | {
     readonly accepted: true;
-    readonly delivery: 'interrupt';
+    readonly delivery: "interrupt";
     readonly inputId: string;
     /** The existing active Run that owns this input; no new Run is created. */
     readonly runId: string;
@@ -1625,32 +1642,32 @@ type RuntimeSubmitInputResult = {
     readonly sessionOrder: number;
 } | {
     readonly accepted: false;
-    readonly delivery: 'after_turn' | 'interrupt';
+    readonly delivery: "after_turn" | "interrupt";
     readonly sessionId: string;
     readonly afterRunId: string;
-    readonly reason: 'stale_run' | 'unsupported_capability' | 'interrupt_window_closed';
+    readonly reason: "stale_run" | "unsupported_capability" | "interrupt_window_closed";
 };
 interface RuntimeOperationOptions {
     readonly operationId?: string;
     readonly journalEpoch?: string;
     readonly expectedRevision?: number;
 }
-type RuntimeKodaXOptions = Omit<KodaXOptions, 'provider' | 'session' | 'events'> & {
+type RuntimeKodaXOptions = Omit<KodaXOptions, "provider" | "session" | "events"> & {
     readonly provider?: string;
-    readonly session?: KodaXOptions['session'];
+    readonly session?: KodaXOptions["session"];
     readonly events?: KodaXEvents;
 };
-type RuntimeDaemonContextOptions = Pick<KodaXContextOptions, 'memoryIdentity' | 'gitRoot' | 'executionCwd' | 'shellExecution' | 'contextTokenSnapshot' | 'projectSnapshot' | 'longRunning' | 'providerPolicyHints' | 'repoRoutingSignals' | 'repoIntelligenceMode' | 'repoIntelligenceTrace' | 'contextDiagnostics' | 'disableAutoTaskReroute' | 'toolConstructionMode' | 'skillsPrompt' | 'rawUserInput' | 'skillInvocation' | 'repoIntelligenceContext' | 'inputArtifacts' | 'promptOverlay' | 'taskSurface' | 'liveTurn' | 'managedTaskWorkspaceDir' | 'managedProtocolEmission' | 'excludeTools' | 'systemPromptOverride' | 'taskMetadata' | 'taskVerification' | 'agentProfile' | 'currentAgentId' | 'parentAgentId'>;
-type RuntimeDaemonKodaXOptions = Pick<RuntimeKodaXOptions, 'provider' | 'model' | 'modelOverride' | 'effort' | 'thinking' | 'reasoningMode' | 'agentMode' | 'maxIter' | 'workflowHostPolicy' | 'workflowRunsBaseDir' | 'modelTiers' | 'maxOutputTokens' | 'disablePromptCache' | 'lsp' | 'workflow' | 'selfManual' | 'compaction' | 'timeouts'> & {
+type RuntimeDaemonContextOptions = Pick<KodaXContextOptions, "gitRoot" | "executionCwd" | "shellExecution" | "contextTokenSnapshot" | "projectSnapshot" | "longRunning" | "providerPolicyHints" | "repoRoutingSignals" | "repoIntelligenceMode" | "repoIntelligenceTrace" | "contextDiagnostics" | "disableAutoTaskReroute" | "toolConstructionMode" | "skillsPrompt" | "rawUserInput" | "skillInvocation" | "repoIntelligenceContext" | "inputArtifacts" | "promptOverlay" | "taskSurface" | "liveTurn" | "managedTaskWorkspaceDir" | "managedProtocolEmission" | "excludeTools" | "systemPromptOverride" | "taskMetadata" | "taskVerification" | "agentProfile" | "currentAgentId" | "parentAgentId">;
+type RuntimeDaemonKodaXOptions = Pick<RuntimeKodaXOptions, "provider" | "model" | "modelOverride" | "effort" | "thinking" | "reasoningMode" | "agentMode" | "maxIter" | "workflowHostPolicy" | "workflowRunsBaseDir" | "modelTiers" | "maxOutputTokens" | "disablePromptCache" | "lsp" | "workflow" | "selfManual" | "compaction" | "timeouts"> & {
     readonly context?: RuntimeDaemonContextOptions;
 };
-type RuntimeDaemonStartRunInput = Omit<RuntimeStartRunInput, 'options' | 'agentContext' | 'permissionBroker'> & {
+type RuntimeDaemonStartRunInput = Omit<RuntimeStartRunInput, "options" | "agentContext" | "permissionBroker"> & {
     readonly options?: RuntimeDaemonKodaXOptions;
 };
-interface RuntimeDaemonRunService extends Omit<RuntimeRunService, 'start'> {
+interface RuntimeDaemonRunService extends Omit<RuntimeRunService, "start"> {
     start(input: RuntimeDaemonStartRunInput): Promise<RuntimeRunHandle>;
 }
-type KodaXDaemonRuntime = Omit<KodaXRuntime, 'runs'> & {
+type KodaXDaemonRuntime = Omit<KodaXRuntime, "runs"> & {
     readonly runs: RuntimeDaemonRunService;
     readonly daemon: RuntimeDaemonManagementService;
 };
@@ -1687,36 +1704,36 @@ interface RuntimeRunRequirements {
     readonly credential?: {
         readonly leaseId: string;
         readonly provider: string;
-        readonly state: 'ready' | 'expired' | 'terminal';
+        readonly state: "ready" | "expired" | "terminal";
     };
     readonly hostTools?: {
         readonly leaseId: string;
-        readonly state: 'ready' | 'waiting_host' | 'expired' | 'terminal';
+        readonly state: "ready" | "waiting_host" | "expired" | "terminal";
     };
 }
 interface RuntimeContinuationStatus {
     readonly inputId: string;
     readonly afterRunId: string;
-    readonly delivery: 'after_turn';
-    readonly state: 'queued' | 'delivered' | 'terminal';
+    readonly delivery: "after_turn";
+    readonly state: "queued" | "delivered" | "terminal";
     readonly contentPreview: string;
 }
 interface RuntimeInterruptInputStatus {
     readonly inputId: string;
     readonly afterRunId: string;
-    readonly delivery: 'interrupt';
-    readonly state: 'queued' | 'delivered' | 'terminal';
+    readonly delivery: "interrupt";
+    readonly state: "queued" | "delivered" | "terminal";
     readonly contentPreview: string;
     readonly queuedAt: string;
     readonly deliveredAt?: string;
-    readonly origin?: RuntimeRunStatus['origin'];
+    readonly origin?: RuntimeRunStatus["origin"];
 }
-type RuntimeTerminalCode = 'completed' | 'run_failed' | 'blocked' | 'cancelled' | 'interrupted' | 'runtime_restarted' | 'daemon_crashed' | 'credential_unavailable' | 'host_not_dispatched' | 'host_outcome_unknown' | 'control_history_untrusted';
+type RuntimeTerminalCode = "completed" | "run_failed" | "blocked" | "cancelled" | "interrupted" | "runtime_restarted" | "daemon_crashed" | "credential_unavailable" | "host_not_dispatched" | "host_outcome_unknown" | "control_history_untrusted";
 interface RuntimeTerminalFact {
     readonly revision: number;
-    readonly kind: 'completed' | 'failed' | 'cancelled' | 'interrupted';
+    readonly kind: "completed" | "failed" | "cancelled" | "interrupted";
     readonly code: RuntimeTerminalCode;
-    readonly effectOutcome: 'none' | 'known' | 'unknown';
+    readonly effectOutcome: "none" | "known" | "unknown";
     readonly message?: string;
 }
 interface RuntimeRunResult {
@@ -1748,7 +1765,7 @@ interface RuntimeRunService {
     setProvider(runId: string, provider: string): Promise<void>;
     setReasoning(runId: string, reasoning: KodaXReasoningMode | undefined): Promise<void>;
 }
-type RuntimeEventType = 'session.created' | 'session.loaded' | 'session.settings.updated' | 'session.notice.appended' | 'session.rewound' | 'session.active_entry.updated' | 'session.compacted' | 'run.queued' | 'run.started' | 'run.updated' | 'run.progress' | 'run.input.queued' | 'run.input.delivered' | 'turn.started' | 'turn.completed' | 'turn.failed' | 'assistant.delta' | 'thinking.delta' | 'thinking.finished' | 'tool.started' | 'tool.progress' | 'tool.finished' | 'user_input.requested' | 'user_input.resolved' | 'permission.requested' | 'permission.resolved' | 'permission.grant.changed' | 'workflow.started' | 'workflow.updated' | 'workflow.finished' | 'context.compaction.started' | 'context.compaction.stats' | 'context.compaction.finished' | 'context.compaction.messages' | 'context.compaction.ended' | 'context.compaction.skipped' | 'context.budget.snapshot' | 'tool.exposure.planned' | 'child_activity.finished' | 'provider.retry' | 'provider.recovery' | 'provider.cache.diagnostics' | 'repo_intelligence.trace' | 'todo.updated' | 'todo.warning' | 'sidecar.message' | 'run.completed' | 'run.failed' | 'run.cancelled' | 'run.interrupted' | 'artifact.created' | 'config.effective' | 'runtime.warning';
+type RuntimeEventType = "session.created" | "session.loaded" | "session.settings.updated" | "session.notice.appended" | "session.rewound" | "session.active_entry.updated" | "session.compacted" | "run.queued" | "run.started" | "run.updated" | "run.progress" | "run.input.queued" | "run.input.delivered" | "turn.started" | "turn.completed" | "turn.failed" | "assistant.delta" | "thinking.delta" | "thinking.finished" | "tool.started" | "tool.progress" | "tool.sandbox" | "tool.finished" | "user_input.requested" | "user_input.resolved" | "permission.requested" | "permission.resolved" | "permission.grant.changed" | "workflow.started" | "workflow.updated" | "workflow.finished" | "context.compaction.started" | "context.compaction.stats" | "context.compaction.finished" | "context.compaction.messages" | "context.compaction.ended" | "context.compaction.skipped" | "context.budget.snapshot" | "tool.exposure.planned" | "child_activity.finished" | "provider.retry" | "provider.recovery" | "provider.cache.diagnostics" | "repo_intelligence.trace" | "todo.updated" | "todo.warning" | "sidecar.message" | "run.completed" | "run.failed" | "run.cancelled" | "run.interrupted" | "artifact.created" | "config.effective" | "runtime.warning";
 interface RuntimeTextDeltaEventPayload {
     readonly text: string;
     readonly meta?: KodaXActivityEventMeta;
@@ -1776,6 +1793,10 @@ type RuntimeToolProgressEventPayload = {
     readonly partialJson: string;
     readonly meta?: KodaXToolEventMeta;
 };
+interface RuntimeToolSandboxEventPayload {
+    readonly update: KodaXToolSandboxObservationUpdate;
+    readonly meta?: KodaXToolEventMeta;
+}
 interface RuntimeToolFinishedEventPayload {
     readonly result: {
         readonly id: string;
@@ -1785,21 +1806,21 @@ interface RuntimeToolFinishedEventPayload {
     readonly meta?: KodaXToolEventMeta;
 }
 type RuntimeRunProgressEventPayload = {
-    readonly kind: 'managed_task_status';
+    readonly kind: "managed_task_status";
     readonly status: KodaXManagedTaskStatusEvent;
 } | {
-    readonly kind: 'stream_end' | 'complete';
+    readonly kind: "stream_end" | "complete";
     readonly meta?: KodaXActivityEventMeta;
 } | {
-    readonly kind: 'iteration_start';
+    readonly kind: "iteration_start";
     readonly iter: number;
     readonly maxIter: number;
     readonly meta?: KodaXActivityEventMeta;
 } | {
-    readonly kind: 'iteration_end';
+    readonly kind: "iteration_end";
     readonly info: Readonly<Record<string, unknown>>;
 } | {
-    readonly kind: 'mid_turn_user_messages';
+    readonly kind: "mid_turn_user_messages";
     readonly contents: readonly string[];
     readonly meta?: KodaXActivityEventMeta;
 };
@@ -1816,7 +1837,7 @@ interface RuntimeDeliveredInterruptInput {
     readonly input: RuntimeInput | readonly RuntimeInput[];
     readonly queuedAt: string;
     readonly deliveredAt: string;
-    readonly origin?: RuntimeRunStatus['origin'];
+    readonly origin?: RuntimeRunStatus["origin"];
 }
 interface RuntimeRunInputDeliveredEventPayload {
     readonly inputs: readonly RuntimeDeliveredInterruptInput[];
@@ -1828,7 +1849,7 @@ interface RuntimeInteractionResolvedEventPayload {
     readonly kind?: RuntimeUserInputKind;
 }
 interface RuntimePermissionGrantChangedEventPayload {
-    readonly action: 'created' | 'revoked' | 'expired';
+    readonly action: "created" | "revoked" | "expired";
     readonly grant: RuntimePermissionGrant;
     readonly revision: number;
 }
@@ -1871,44 +1892,45 @@ type RuntimeUserInputRequestedEventPayload = RuntimeUserInputRequest | {
 type RuntimeEventPayloadDefaults = {
     readonly [K in RuntimeEventType]: unknown;
 };
-type RuntimeEventPayloadMap = Omit<RuntimeEventPayloadDefaults, 'session.created' | 'session.loaded' | 'run.queued' | 'run.started' | 'run.updated' | 'run.completed' | 'run.failed' | 'run.cancelled' | 'run.interrupted' | 'assistant.delta' | 'thinking.delta' | 'thinking.finished' | 'tool.started' | 'tool.progress' | 'tool.finished' | 'run.progress' | 'run.input.queued' | 'run.input.delivered' | 'todo.updated' | 'user_input.requested' | 'user_input.resolved' | 'permission.requested' | 'permission.resolved' | 'permission.grant.changed' | 'session.settings.updated' | 'turn.started' | 'turn.completed' | 'turn.failed' | 'workflow.started' | 'workflow.updated' | 'workflow.finished' | 'context.budget.snapshot' | 'provider.cache.diagnostics' | 'tool.exposure.planned' | 'context.compaction.messages' | 'context.compaction.finished' | 'runtime.warning'> & {
-    readonly 'session.created': RuntimeSession;
-    readonly 'session.loaded': RuntimeSessionLoadedEventPayload;
-    readonly 'run.queued': RuntimeRunStatus;
-    readonly 'run.started': RuntimeRunStatus;
-    readonly 'run.updated': RuntimeRunStatus;
-    readonly 'run.completed': RuntimeRunStatus;
-    readonly 'run.failed': RuntimeRunStatus;
-    readonly 'run.cancelled': RuntimeRunStatus;
-    readonly 'run.interrupted': RuntimeRunStatus;
-    readonly 'assistant.delta': RuntimeTextDeltaEventPayload;
-    readonly 'thinking.delta': RuntimeTextDeltaEventPayload;
-    readonly 'thinking.finished': RuntimeThinkingFinishedEventPayload;
-    readonly 'tool.started': RuntimeToolStartedEventPayload;
-    readonly 'tool.progress': RuntimeToolProgressEventPayload;
-    readonly 'tool.finished': RuntimeToolFinishedEventPayload;
-    readonly 'run.progress': RuntimeRunProgressEventPayload;
-    readonly 'run.input.queued': RuntimeRunInputQueuedEventPayload;
-    readonly 'run.input.delivered': RuntimeRunInputDeliveredEventPayload;
-    readonly 'todo.updated': RuntimeTodoUpdatedEventPayload;
-    readonly 'user_input.requested': RuntimeUserInputRequestedEventPayload;
-    readonly 'user_input.resolved': RuntimeInteractionResolvedEventPayload;
-    readonly 'permission.requested': RuntimePermissionRequest;
-    readonly 'permission.resolved': RuntimeInteractionResolvedEventPayload;
-    readonly 'permission.grant.changed': RuntimePermissionGrantChangedEventPayload;
-    readonly 'session.settings.updated': RuntimeSessionSettingsUpdatedEventPayload;
-    readonly 'turn.started': KodaXTurnStartedEvent;
-    readonly 'turn.completed': KodaXTurnCompletedEvent;
-    readonly 'turn.failed': KodaXTurnFailedEvent;
-    readonly 'workflow.started': WorkflowProcessEvent;
-    readonly 'workflow.updated': WorkflowProcessEvent;
-    readonly 'workflow.finished': WorkflowProcessEvent;
-    readonly 'context.budget.snapshot': RuntimeContextBudgetSnapshot;
-    readonly 'provider.cache.diagnostics': KodaXPromptCacheDiagnosticEvent;
-    readonly 'tool.exposure.planned': RuntimeToolExposurePlan;
-    readonly 'context.compaction.messages': RuntimeContextCompactionMessagesEventPayload;
-    readonly 'context.compaction.finished': RuntimeContextCompactionFinishedEventPayload;
-    readonly 'runtime.warning': RuntimeWarningEventPayload;
+type RuntimeEventPayloadMap = Omit<RuntimeEventPayloadDefaults, "session.created" | "session.loaded" | "run.queued" | "run.started" | "run.updated" | "run.completed" | "run.failed" | "run.cancelled" | "run.interrupted" | "assistant.delta" | "thinking.delta" | "thinking.finished" | "tool.started" | "tool.progress" | "tool.sandbox" | "tool.finished" | "run.progress" | "run.input.queued" | "run.input.delivered" | "todo.updated" | "user_input.requested" | "user_input.resolved" | "permission.requested" | "permission.resolved" | "permission.grant.changed" | "session.settings.updated" | "turn.started" | "turn.completed" | "turn.failed" | "workflow.started" | "workflow.updated" | "workflow.finished" | "context.budget.snapshot" | "provider.cache.diagnostics" | "tool.exposure.planned" | "context.compaction.messages" | "context.compaction.finished" | "runtime.warning"> & {
+    readonly "session.created": RuntimeSession;
+    readonly "session.loaded": RuntimeSessionLoadedEventPayload;
+    readonly "run.queued": RuntimeRunStatus;
+    readonly "run.started": RuntimeRunStatus;
+    readonly "run.updated": RuntimeRunStatus;
+    readonly "run.completed": RuntimeRunStatus;
+    readonly "run.failed": RuntimeRunStatus;
+    readonly "run.cancelled": RuntimeRunStatus;
+    readonly "run.interrupted": RuntimeRunStatus;
+    readonly "assistant.delta": RuntimeTextDeltaEventPayload;
+    readonly "thinking.delta": RuntimeTextDeltaEventPayload;
+    readonly "thinking.finished": RuntimeThinkingFinishedEventPayload;
+    readonly "tool.started": RuntimeToolStartedEventPayload;
+    readonly "tool.progress": RuntimeToolProgressEventPayload;
+    readonly "tool.sandbox": RuntimeToolSandboxEventPayload;
+    readonly "tool.finished": RuntimeToolFinishedEventPayload;
+    readonly "run.progress": RuntimeRunProgressEventPayload;
+    readonly "run.input.queued": RuntimeRunInputQueuedEventPayload;
+    readonly "run.input.delivered": RuntimeRunInputDeliveredEventPayload;
+    readonly "todo.updated": RuntimeTodoUpdatedEventPayload;
+    readonly "user_input.requested": RuntimeUserInputRequestedEventPayload;
+    readonly "user_input.resolved": RuntimeInteractionResolvedEventPayload;
+    readonly "permission.requested": RuntimePermissionRequest;
+    readonly "permission.resolved": RuntimeInteractionResolvedEventPayload;
+    readonly "permission.grant.changed": RuntimePermissionGrantChangedEventPayload;
+    readonly "session.settings.updated": RuntimeSessionSettingsUpdatedEventPayload;
+    readonly "turn.started": KodaXTurnStartedEvent;
+    readonly "turn.completed": KodaXTurnCompletedEvent;
+    readonly "turn.failed": KodaXTurnFailedEvent;
+    readonly "workflow.started": WorkflowProcessEvent;
+    readonly "workflow.updated": WorkflowProcessEvent;
+    readonly "workflow.finished": WorkflowProcessEvent;
+    readonly "context.budget.snapshot": RuntimeContextBudgetSnapshot;
+    readonly "provider.cache.diagnostics": KodaXPromptCacheDiagnosticEvent;
+    readonly "tool.exposure.planned": RuntimeToolExposurePlan;
+    readonly "context.compaction.messages": RuntimeContextCompactionMessagesEventPayload;
+    readonly "context.compaction.finished": RuntimeContextCompactionFinishedEventPayload;
+    readonly "runtime.warning": RuntimeWarningEventPayload;
 };
 interface RuntimeEventEnvelope<TPayload = unknown> {
     readonly id: string;
@@ -1954,7 +1976,7 @@ interface RuntimeEventService {
     subscribe(filter: RuntimeEventFilter, listener: RuntimeEventListener): RuntimeSubscription;
     replay(filter?: RuntimeEventReplayFilter): Promise<readonly RuntimeEvent[]>;
 }
-type RuntimePermissionRisk = 'low' | 'medium' | 'high';
+type RuntimePermissionRisk = "low" | "medium" | "high";
 interface RuntimePermissionScope {
     readonly toolName?: string;
     readonly sessionId?: string;
@@ -1964,7 +1986,7 @@ interface RuntimePermissionScope {
 interface RuntimePermissionGrantSuggestion {
     /** Opaque pending-request-local identifier; clients must return it unchanged. */
     readonly id: string;
-    readonly kind: 'session' | 'persistent';
+    readonly kind: "session" | "persistent";
     readonly label: string;
 }
 interface RuntimePermissionRequest {
@@ -1979,6 +2001,8 @@ interface RuntimePermissionRequest {
     readonly inputPreview?: string;
     /** Effective directory used to resolve relative tool paths for this run. */
     readonly executionCwd?: string;
+    /** Structured Auto[LLM] decision metadata; never includes prompt or response text. */
+    readonly autoModeDiagnostics?: AutoModeDecisionDiagnostics;
     readonly grantSuggestions?: readonly RuntimePermissionGrantSuggestion[];
     readonly createdAt: string;
     readonly expiresAt?: string;
@@ -1993,6 +2017,8 @@ interface RuntimePermissionRequestInput {
     readonly risk?: RuntimePermissionRisk;
     readonly inputPreview?: string;
     readonly executionCwd?: string;
+    /** Structured Auto[LLM] decision metadata; never includes prompt or response text. */
+    readonly autoModeDiagnostics?: AutoModeDecisionDiagnostics;
     readonly expiresAt?: string;
     readonly timeoutMs?: number;
     /**
@@ -2002,12 +2028,12 @@ interface RuntimePermissionRequestInput {
     readonly toolInput?: Readonly<Record<string, unknown>>;
 }
 type RuntimePermissionDecision = {
-    readonly type: 'allow_once';
+    readonly type: "allow_once";
 } | {
-    readonly type: 'allow_session';
+    readonly type: "allow_session";
     readonly suggestionId: string;
 } | {
-    readonly type: 'allow_always';
+    readonly type: "allow_always";
     readonly suggestionId: string;
 }
 /**
@@ -2015,11 +2041,12 @@ type RuntimePermissionDecision = {
  * its narrower concrete candidate and never persists the supplied scope.
  */
  | {
-    readonly type: 'allow_always';
+    readonly type: "allow_always";
     readonly scope: RuntimePermissionScope;
 } | {
-    readonly type: 'reject';
+    readonly type: "reject";
     readonly reason?: string;
+    readonly cause?: "approval_timeout";
 };
 interface RuntimePermissionFilter {
     readonly sessionId?: string;
@@ -2033,7 +2060,7 @@ interface RuntimePermissionGrant {
     readonly id: string;
     readonly scope: RuntimePermissionScope;
     readonly createdAt: string;
-    readonly persistence?: 'session' | 'persistent';
+    readonly persistence?: "session" | "persistent";
     readonly label?: string;
     readonly sourcePermissionId?: string;
 }
@@ -2044,7 +2071,7 @@ interface RuntimePermissionService {
     listGrants(): Promise<RuntimeVersionedValue<readonly RuntimePermissionGrant[]>>;
     revokeGrant(grantId: string, expectedRevision: number): Promise<boolean>;
 }
-type RuntimeUserInputKind = 'askUser' | 'askUserMulti' | 'askUserInput';
+type RuntimeUserInputKind = "askUser" | "askUserMulti" | "askUserInput";
 interface RuntimeUserInputRequest {
     readonly id: string;
     readonly revision: number;
@@ -2063,7 +2090,7 @@ interface RuntimeUserInputFilter {
 interface RuntimeUserInputResolution {
     readonly requestId: string;
     readonly accepted: boolean;
-    readonly status: 'answered' | 'dismissed' | 'already_resolved';
+    readonly status: "answered" | "dismissed" | "already_resolved";
 }
 interface RuntimeUserInputService {
     listPending(filter?: RuntimeUserInputFilter): Promise<readonly RuntimeUserInputRequest[]>;
@@ -2100,7 +2127,7 @@ interface RuntimeHostToolDescriptor {
     readonly name: string;
     readonly description: string;
     readonly inputSchema: Readonly<Record<string, unknown>>;
-    readonly sideEffect: 'none' | 'idempotent' | 'non_idempotent';
+    readonly sideEffect: "none" | "idempotent" | "non_idempotent";
 }
 interface RuntimeHostToolInvocation {
     readonly invocationId: string;
@@ -2125,7 +2152,7 @@ interface RuntimeHostToolInvocationStatus {
     readonly toolName: string;
     readonly sessionId: string;
     readonly runId: string;
-    readonly state: 'prepared' | 'dispatched' | 'completed' | 'unknown' | 'not_dispatched';
+    readonly state: "prepared" | "dispatched" | "completed" | "unknown" | "not_dispatched";
     readonly updatedAt: string;
 }
 interface RuntimeHostToolService {
@@ -2171,7 +2198,7 @@ interface RuntimeDaemonPreflight {
     readonly activeAgentTasks: readonly RuntimeActiveAgentTurn[];
     readonly pendingPermissions: readonly RuntimePermissionRequest[];
     readonly pendingUserInputs: readonly RuntimeUserInputRequest[];
-    readonly blockers: readonly ('connected_clients' | 'active_runs' | 'queued_runs' | 'active_workflows' | 'active_agent_turns' | 'active_agent_tasks' | 'pending_interactions')[];
+    readonly blockers: readonly ("connected_clients" | "active_runs" | "queued_runs" | "active_workflows" | "active_agent_turns" | "active_agent_tasks" | "pending_interactions")[];
     readonly canStop: boolean;
 }
 interface RuntimeActiveAgentTurn {
@@ -2180,6 +2207,24 @@ interface RuntimeActiveAgentTurn {
     readonly turnId: string;
     readonly kind: AgentExecutionKind;
 }
+interface RuntimeIntegrationDiagnostic {
+    readonly code: "invalid-config" | "activation-failed" | "watcher-degraded";
+    readonly message: string;
+    readonly time: string;
+}
+interface RuntimeIntegrationDomainStatus {
+    readonly domain: "mcp" | "a2a" | "extensions";
+    readonly path: string;
+    readonly revision?: string;
+    readonly source?: "user" | "legacy-user" | "default";
+    readonly lastReloadAt?: string;
+    readonly diagnostic?: RuntimeIntegrationDiagnostic;
+    readonly watching: boolean;
+}
+interface RuntimeIntegrationHealth {
+    readonly state: "healthy" | "degraded";
+    readonly domains: readonly RuntimeIntegrationDomainStatus[];
+}
 interface RuntimeDaemonManagementState {
     readonly runtimeId: string;
     /** Monotonic for logical client, mutation, Runtime event, and preflight state changes. */
@@ -2187,6 +2232,8 @@ interface RuntimeDaemonManagementState {
     readonly ownerPolicy: RuntimeOwnerPolicyState;
     readonly owner: RuntimeOwnerIdentity;
     readonly preflight: RuntimeDaemonPreflight;
+    /** Optional integrations never make the core daemon unavailable. */
+    readonly integrations?: RuntimeIntegrationHealth;
 }
 interface RuntimeDaemonRollbackInput {
     readonly expectedRuntimeId: string;
@@ -2199,7 +2246,7 @@ interface RuntimeDaemonRollbackResult {
     readonly runtimeId: string;
     readonly revision: number;
     readonly ownerPolicy: RuntimeOwnerPolicyState & {
-        readonly mode: 'inline';
+        readonly mode: "inline";
     };
 }
 interface RuntimeDaemonManagementService {
@@ -2211,10 +2258,10 @@ interface RuntimeStatusService {
     preflight(): Promise<RuntimeDaemonPreflight>;
 }
 declare function createKodaXRuntime(options: CreateKodaXRuntimeOptions & {
-    readonly mode: 'daemon';
+    readonly mode: "daemon";
 }): Promise<KodaXDaemonRuntime>;
 declare function createKodaXRuntime(options?: CreateKodaXRuntimeOptions): Promise<KodaXRuntime>;
 declare function connectKodaXRuntime(options?: ConnectKodaXRuntimeOptions): Promise<KodaXDaemonRuntime>;
 
-export { KODAX_DAEMON_PROTOCOL, KODAX_DAEMON_PROTOCOL_VERSION, KodaXEvents, KodaXPromptCacheDiagnosticEvent, KodaXResult, RUNTIME_DAEMON_METHODS, RUNTIME_DAEMON_METHOD_SCHEMAS, RUNTIME_DAEMON_NOTIFICATION_SCHEMAS, RUNTIME_DAEMON_PROTOCOL_SCHEMA, RUNTIME_DAEMON_PROTOCOL_SCHEMA_JSON, RuntimeAutoModeConfigurationError, RuntimeContextBudgetSnapshot, RuntimeDaemonCapabilityUpgradeError, RuntimePermissionScopeUpgradeRequiredError, RuntimeToolExposurePlan, RuntimeTransportBoundaryError, SessionTranscriptEntry, acquireKodaXInlineOwner, connectKodaXRuntime, createKodaXRuntime, enableKodaXDaemonOwner, getKodaXRuntimeOwnerPolicy, getKodaXRuntimeOwnerState, listRuntimeDaemonSchemaMethods, parseRuntimeEvent, setKodaXRuntimeOwnerMode };
-export type { ConnectKodaXRuntimeOptions, CreateKodaXRuntimeOptions, KodaXDaemonRuntime, KodaXRuntime, KodaXRuntimeIsolation, KodaXRuntimeMode, RuntimeActiveAgentTurn, RuntimeActiveToolProjection, RuntimeAdminService, RuntimeAgentBindingService, RuntimeAgentOwnerSession, RuntimeAgentService, RuntimeAppendNoticeInput, RuntimeArtifact, RuntimeArtifactKind, RuntimeArtifactRefInput, RuntimeArtifactService, RuntimeBoundDefaultAgent, RuntimeBoundLocalAgent, RuntimeCapabilityRequirements, RuntimeCatalogService, RuntimeClientCapabilities, RuntimeClientInfo, RuntimeCommandInfo, RuntimeCommandResolveInput, RuntimeCompactSessionInput, RuntimeCompactSessionResult, RuntimeConfigPatch, RuntimeConfigReloadResult, RuntimeConfigService, RuntimeConnectionService, RuntimeConnectionState, RuntimeContextCompactionFinishedEventPayload, RuntimeContextCompactionMessagesEventPayload, RuntimeContinuationStatus, RuntimeCreateArtifactInput, RuntimeCreateSessionInput, RuntimeCredentialBroker, RuntimeCredentialLease, RuntimeCredentialRequest, RuntimeCredentialService, RuntimeDaemonClientTransport, RuntimeDaemonContextOptions, RuntimeDaemonEndpoint, RuntimeDaemonError, RuntimeDaemonErrorCode, RuntimeDaemonFrame, RuntimeDaemonJsonSchema, RuntimeDaemonKodaXOptions, RuntimeDaemonManagementService, RuntimeDaemonManagementState, RuntimeDaemonMethod, RuntimeDaemonMethodSchema, RuntimeDaemonNotification, RuntimeDaemonNotificationMethod, RuntimeDaemonPreflight, RuntimeDaemonProtocolSchema, RuntimeDaemonRequest, RuntimeDaemonRollbackInput, RuntimeDaemonRollbackResult, RuntimeDaemonRunService, RuntimeDaemonStartRunInput, RuntimeDaemonTransportLifecycleState, RuntimeDefaultAgentStartInput, RuntimeDeliveredInterruptInput, RuntimeDiagnosticFilter, RuntimeDiagnosticsService, RuntimeEffectiveSkillRef, RuntimeEvent, RuntimeEventEnvelope, RuntimeEventFilter, RuntimeEventListener, RuntimeEventParseResult, RuntimeEventPayloadMap, RuntimeEventReplayFilter, RuntimeEventService, RuntimeEventType, RuntimeExactCallPermissionMatcher, RuntimeExactCommandPermissionMatcher, RuntimeExactPathPermissionMatcher, RuntimeExecutionToolPolicy, RuntimeExtensionListResult, RuntimeExtensionReloadResult, RuntimeExternalAgentsOptions, RuntimeFileInput, RuntimeForkSessionInput, RuntimeGrantedScope, RuntimeHostToolDescriptor, RuntimeHostToolHandler, RuntimeHostToolInvocation, RuntimeHostToolInvocationStatus, RuntimeHostToolLease, RuntimeHostToolResult, RuntimeHostToolService, RuntimeIdentity, RuntimeImageInput, RuntimeInlineOwnerHandle, RuntimeInput, RuntimeInteractionResolvedEventPayload, RuntimeInterruptInputStatus, RuntimeKodaXOptions, RuntimeLocalAgentStartInput, RuntimeManagedTaskProjection, RuntimeMcpReloadResult, RuntimeMcpService, RuntimeMcpToolListFilter, RuntimeMcpValidateResult, RuntimeModelListFilter, RuntimeOperationOptions, RuntimeOperationReceipt, RuntimeOperationService, RuntimeOperationState, RuntimeOwnerIdentity, RuntimeOwnerPolicyState, RuntimeOwnerState, RuntimePendingUserInputProjection, RuntimePermissionBroker, RuntimePermissionDecision, RuntimePermissionFilter, RuntimePermissionGrant, RuntimePermissionGrantChangedEventPayload, RuntimePermissionGrantSuggestion, RuntimePermissionHostPlatform, RuntimePermissionMatcher, RuntimePermissionRequest, RuntimePermissionRequestInput, RuntimePermissionRespondOptions, RuntimePermissionRisk, RuntimePermissionScope, RuntimePermissionService, RuntimeResolvedLocalAgent, RuntimeRewindSessionInput, RuntimeRunFilter, RuntimeRunHandle, RuntimeRunInputDeliveredEventPayload, RuntimeRunInputQueuedEventPayload, RuntimeRunMode, RuntimeRunPhase, RuntimeRunProgressEventPayload, RuntimeRunRequirements, RuntimeRunResult, RuntimeRunService, RuntimeRunSessionLoadedEventPayload, RuntimeRunStatus, RuntimeSession, RuntimeSessionFilter, RuntimeSessionLiveProjection, RuntimeSessionLoadedEventPayload, RuntimeSessionObservation, RuntimeSessionObservationSnapshot, RuntimeSessionService, RuntimeSessionSettings, RuntimeSessionSettingsPatch, RuntimeSessionSettingsUpdatedEventPayload, RuntimeSessionSummary, RuntimeSetActiveEntryInput, RuntimeSkillDescribeInput, RuntimeSkillDescription, RuntimeSkillFileSummary, RuntimeSkillListFilter, RuntimeSkillSummary, RuntimeStartRunInput, RuntimeStatusService, RuntimeStatusSnapshot, RuntimeSubmitInput, RuntimeSubmitInputResult, RuntimeSubscription, RuntimeTerminalCode, RuntimeTerminalFact, RuntimeTextDeltaEventPayload, RuntimeTextInput, RuntimeThinkingFinishedEventPayload, RuntimeTodoUpdatedEventPayload, RuntimeToolFinishedEventPayload, RuntimeToolProgressEventPayload, RuntimeToolStartedEventPayload, RuntimeTranscript, RuntimeTranscriptEntryChunk, RuntimeTranscriptEntryChunkInput, RuntimeTranscriptPageInput, RuntimeTranscriptSearchHit, RuntimeTranscriptSearchInput, RuntimeTranscriptSearchResult, RuntimeTranscriptSlice, RuntimeTranscriptSliceEntry, RuntimeTypedEvent, RuntimeTypedEventListener, RuntimeUserInputFilter, RuntimeUserInputKind, RuntimeUserInputRequest, RuntimeUserInputRequestedEventPayload, RuntimeUserInputResolution, RuntimeUserInputService, RuntimeUserMarkdownAgentRef, RuntimeVersionedUpdateOptions, RuntimeVersionedValue, RuntimeVideoInput, RuntimeWarningEventPayload, RuntimeWorkerOptions, RuntimeWorkerResourceLimits, RuntimeWorkflowFilter, RuntimeWorkflowListener, RuntimeWorkflowService, RuntimeWorkflowSnapshot, RuntimeWorkflowSummary, RuntimeWorkspaceBinding };
+export { KODAX_DAEMON_PROTOCOL, KODAX_DAEMON_PROTOCOL_VERSION, KODAX_RUNTIME_SDK_CAPABILITIES, KodaXEvents, KodaXPromptCacheDiagnosticEvent, KodaXResult, RUNTIME_DAEMON_METHODS, RUNTIME_DAEMON_METHOD_SCHEMAS, RUNTIME_DAEMON_NOTIFICATION_SCHEMAS, RUNTIME_DAEMON_PROTOCOL_SCHEMA, RUNTIME_DAEMON_PROTOCOL_SCHEMA_JSON, RuntimeAutoModeConfigurationError, RuntimeContextBudgetSnapshot, RuntimeDaemonCapabilityUpgradeError, RuntimePermissionScopeUpgradeRequiredError, RuntimeToolExposurePlan, RuntimeTransportBoundaryError, SessionTranscriptEntry, acquireKodaXInlineOwner, connectKodaXRuntime, createKodaXRuntime, enableKodaXDaemonOwner, getKodaXRuntimeOwnerPolicy, getKodaXRuntimeOwnerState, listRuntimeDaemonSchemaMethods, parseRuntimeEvent, setKodaXRuntimeOwnerMode };
+export type { ConnectKodaXRuntimeOptions, CreateKodaXRuntimeOptions, KodaXDaemonRuntime, KodaXRuntime, KodaXRuntimeIsolation, KodaXRuntimeMode, RuntimeActiveAgentTurn, RuntimeActiveToolProjection, RuntimeAdminService, RuntimeAgentBindingService, RuntimeAgentOwnerSession, RuntimeAgentService, RuntimeAppendNoticeInput, RuntimeArtifact, RuntimeArtifactKind, RuntimeArtifactRefInput, RuntimeArtifactService, RuntimeBoundDefaultAgent, RuntimeBoundLocalAgent, RuntimeCapabilityRequirements, RuntimeCatalogService, RuntimeClientCapabilities, RuntimeClientInfo, RuntimeCommandInfo, RuntimeCommandResolveInput, RuntimeCompactSessionInput, RuntimeCompactSessionResult, RuntimeConfigPatch, RuntimeConfigReloadResult, RuntimeConfigService, RuntimeConnectionService, RuntimeConnectionState, RuntimeContextCompactionFinishedEventPayload, RuntimeContextCompactionMessagesEventPayload, RuntimeContinuationStatus, RuntimeCreateArtifactInput, RuntimeCreateSessionInput, RuntimeCredentialBroker, RuntimeCredentialLease, RuntimeCredentialRequest, RuntimeCredentialService, RuntimeDaemonClientTransport, RuntimeDaemonContextOptions, RuntimeDaemonEndpoint, RuntimeDaemonError, RuntimeDaemonErrorCode, RuntimeDaemonFrame, RuntimeDaemonJsonSchema, RuntimeDaemonKodaXOptions, RuntimeDaemonManagementService, RuntimeDaemonManagementState, RuntimeDaemonMethod, RuntimeDaemonMethodSchema, RuntimeDaemonNotification, RuntimeDaemonNotificationMethod, RuntimeDaemonPreflight, RuntimeDaemonProtocolSchema, RuntimeDaemonRequest, RuntimeDaemonRollbackInput, RuntimeDaemonRollbackResult, RuntimeDaemonRunService, RuntimeDaemonStartRunInput, RuntimeDaemonTransportLifecycleState, RuntimeDefaultAgentStartInput, RuntimeDeliveredInterruptInput, RuntimeDiagnosticFilter, RuntimeDiagnosticsService, RuntimeEffectiveSkillRef, RuntimeEvent, RuntimeEventEnvelope, RuntimeEventFilter, RuntimeEventListener, RuntimeEventParseResult, RuntimeEventPayloadMap, RuntimeEventReplayFilter, RuntimeEventService, RuntimeEventType, RuntimeExactCallPermissionMatcher, RuntimeExactCommandPermissionMatcher, RuntimeExactPathPermissionMatcher, RuntimeExecutionToolPolicy, RuntimeExtensionListResult, RuntimeExtensionReloadResult, RuntimeExternalAgentsOptions, RuntimeFileInput, RuntimeForkSessionInput, RuntimeGrantedScope, RuntimeHostToolDescriptor, RuntimeHostToolHandler, RuntimeHostToolInvocation, RuntimeHostToolInvocationStatus, RuntimeHostToolLease, RuntimeHostToolResult, RuntimeHostToolService, RuntimeIdentity, RuntimeImageInput, RuntimeInlineOwnerHandle, RuntimeInput, RuntimeIntegrationDiagnostic, RuntimeIntegrationDomainStatus, RuntimeIntegrationHealth, RuntimeInteractionResolvedEventPayload, RuntimeInterruptInputStatus, RuntimeKodaXOptions, RuntimeLearningService, RuntimeLocalAgentStartInput, RuntimeManagedTaskProjection, RuntimeMcpReloadResult, RuntimeMcpService, RuntimeMcpToolListFilter, RuntimeMcpValidateResult, RuntimeModelListFilter, RuntimeOperationOptions, RuntimeOperationReceipt, RuntimeOperationService, RuntimeOperationState, RuntimeOwnerIdentity, RuntimeOwnerPolicyState, RuntimeOwnerState, RuntimePendingUserInputProjection, RuntimePermissionBroker, RuntimePermissionDecision, RuntimePermissionFilter, RuntimePermissionGrant, RuntimePermissionGrantChangedEventPayload, RuntimePermissionGrantSuggestion, RuntimePermissionHostPlatform, RuntimePermissionMatcher, RuntimePermissionRequest, RuntimePermissionRequestInput, RuntimePermissionRespondOptions, RuntimePermissionRisk, RuntimePermissionScope, RuntimePermissionService, RuntimeResolvedLocalAgent, RuntimeRewindSessionInput, RuntimeRunFilter, RuntimeRunHandle, RuntimeRunInputDeliveredEventPayload, RuntimeRunInputQueuedEventPayload, RuntimeRunMode, RuntimeRunPhase, RuntimeRunProgressEventPayload, RuntimeRunRequirements, RuntimeRunResult, RuntimeRunService, RuntimeRunSessionLoadedEventPayload, RuntimeRunStatus, RuntimeSession, RuntimeSessionFilter, RuntimeSessionLiveProjection, RuntimeSessionLoadedEventPayload, RuntimeSessionObservation, RuntimeSessionObservationSnapshot, RuntimeSessionService, RuntimeSessionSettings, RuntimeSessionSettingsPatch, RuntimeSessionSettingsUpdatedEventPayload, RuntimeSessionSummary, RuntimeSetActiveEntryInput, RuntimeSkillDescribeInput, RuntimeSkillDescription, RuntimeSkillFileSummary, RuntimeSkillListFilter, RuntimeSkillSummary, RuntimeStartRunInput, RuntimeStatusService, RuntimeStatusSnapshot, RuntimeSubmitInput, RuntimeSubmitInputResult, RuntimeSubscription, RuntimeTerminalCode, RuntimeTerminalFact, RuntimeTextDeltaEventPayload, RuntimeTextInput, RuntimeThinkingFinishedEventPayload, RuntimeTodoUpdatedEventPayload, RuntimeToolFinishedEventPayload, RuntimeToolProgressEventPayload, RuntimeToolSandboxEventPayload, RuntimeToolStartedEventPayload, RuntimeTranscript, RuntimeTranscriptEntryChunk, RuntimeTranscriptEntryChunkInput, RuntimeTranscriptPageInput, RuntimeTranscriptSearchHit, RuntimeTranscriptSearchInput, RuntimeTranscriptSearchResult, RuntimeTranscriptSlice, RuntimeTranscriptSliceEntry, RuntimeTypedEvent, RuntimeTypedEventListener, RuntimeUserInputFilter, RuntimeUserInputKind, RuntimeUserInputRequest, RuntimeUserInputRequestedEventPayload, RuntimeUserInputResolution, RuntimeUserInputService, RuntimeUserMarkdownAgentRef, RuntimeVersionedUpdateOptions, RuntimeVersionedValue, RuntimeVideoInput, RuntimeWarningEventPayload, RuntimeWorkerOptions, RuntimeWorkerResourceLimits, RuntimeWorkflowFilter, RuntimeWorkflowListener, RuntimeWorkflowService, RuntimeWorkflowSnapshot, RuntimeWorkflowSummary, RuntimeWorkspaceBinding };