@kodax-ai/kodax 0.7.78 → 0.7.80

package/dist/types-chunks/{types.d-BA-Jwpfs.d.ts → controller.d-C2aHqzHj.d.ts}

@@ -1,4 +1,4 @@
-import { k as KodaXMessage, a1 as KodaXToolDefinition, F as KodaXReasoningMode, a9 as KodaXWireReasoningEffort, a3 as KodaXToolResultContentItem, Y as KodaXThinkingBlock, I as KodaXRedactedThinkingBlock } from './types.d-DIpZJKUl.js';
+import { k as KodaXMessage, a2 as KodaXToolDefinition, G as KodaXReasoningMode, aa as KodaXWireReasoningEffort, a4 as KodaXToolResultContentItem, Z as KodaXThinkingBlock, J as KodaXRedactedThinkingBlock } from './types.d-CgrXrFrq.js';
 
 type AgentActorState = 'running' | 'idle' | 'closed';
 type AgentTurnState = 'accepted' | 'running' | 'completed' | 'failed' | 'interrupted';
@@ -124,6 +124,8 @@ interface AgentTreeSnapshot {
     readonly activeNonRootTurns: number;
     readonly maxConcurrentThreads: number;
     readonly revision: number;
+    /** Turn-admission state revision; absent only on older/custom clients. */
+    readonly admissionRevision?: number;
 }
 interface AgentTurnSummary {
     readonly turnId: string;
@@ -203,12 +205,16 @@ interface AgentMutationOptions {
     readonly expectedRevision?: number;
     /** Optimistic tree revision checked inside the serialized durable mutation. */
     readonly expectedTreeRevision?: number;
+    /** Optimistic turn-admission revision, excluding progress and mailbox writes. */
+    readonly expectedAdmissionRevision?: number;
 }
 interface AgentTurnExecutor {
     execute(input: AgentExecutionInput): Promise<AgentExecutionResult>;
 }
 interface AgentActorSnapshotContents {
     readonly revision: number;
+    /** Added after schema v2; legacy snapshots derive it from revision on load. */
+    readonly admissionRevision?: number;
     readonly maxConcurrentThreads: number;
     readonly actors: readonly AgentActor[];
     readonly turns: readonly AgentTurn[];
@@ -246,6 +252,8 @@ interface AgentActorStore {
 /** Runtime-bound actor control surface. The caller path is minted by Runtime. */
 interface AgentActorClient {
     readonly callerPath: string;
+    /** Stable in-process identity shared by clients bound to the same Actor tree. */
+    readonly admissionScope?: object;
     spawn(input: AgentSpawnInput, options?: AgentMutationOptions): Promise<AgentTurnRef>;
     send(targetPath: string, content: string, classification?: AgentDataClassification, forwardedMessageId?: string): Promise<AgentMailboxMessage>;
     followup(targetPath: string, objective: string, metadata?: Readonly<Record<string, AgentMetadataValue>>, options?: AgentMutationOptions): Promise<AgentFollowupResult>;
@@ -1979,6 +1987,172 @@ declare function buildAssistantMessageFromLlmResult(result: RunnerLlmResult): Ag
  */
 declare function buildToolResultMessage(calls: readonly RunnerToolCall[], results: readonly RunnerToolResult[]): AgentMessage;
 
+/**
+ * Guardrail Runtime — FEATURE_085 (v0.7.26).
+ *
+ * Three-tier runtime for Agent guardrails:
+ *
+ *   - `InputGuardrail`: runs once before the first LLM turn, inspects the
+ *     full input transcript, may allow / rewrite / block / escalate.
+ *   - `OutputGuardrail`: runs once before returning, inspects the final
+ *     assistant message, may allow / rewrite / block / escalate.
+ *   - `ToolGuardrail`: runs before and/or after each tool invocation,
+ *     inspects the call / result, may allow / rewrite / block / escalate.
+ *
+ * The four verdict actions:
+ *
+ *   - `allow`: continue with the current value.
+ *   - `rewrite`: replace the current value with `payload`.
+ *   - `block`: throw `GuardrailBlockedError` (for input/output) or surface
+ *     an error tool_result (for tool-before); the LLM / caller sees a
+ *     rejection and must adapt.
+ *   - `escalate`: throw `GuardrailEscalateError`; the SDK consumer catches
+ *     and decides whether to prompt the user, retry under different
+ *     constraints, etc.
+ *
+ * Every guardrail invocation emits a `GuardrailSpan` under the agent's
+ * span when tracing is active.
+ *
+ * @experimental API shape may adjust during v0.7.x rollout.
+ */
+
+/**
+ * Runtime-authenticated intent metadata for permission guardrails.
+ *
+ * This is deliberately separate from the model-visible transcript: a child
+ * briefing is context generated by the Runtime, not a new user authorization.
+ */
+interface GuardrailPermissionIntent {
+    readonly rootUserIntent?: string;
+    readonly delegatedObjective?: string;
+    readonly bindingConstraints?: readonly string[];
+    readonly scopeHint?: string;
+    readonly readOnly?: boolean;
+}
+/**
+ * Shared execution context passed to every guardrail.
+ *
+ * `messages` is the live conversation transcript at the moment this
+ * guardrail fires. For tool-side guardrails this is the transcript at
+ * call-site time — it does NOT yet include the assistant turn that
+ * emitted the current tool_use, since that turn is appended only after
+ * the full tool batch settles. Optional so existing guardrails that
+ * don't read context still type-check; populated by the Runner for all
+ * production hook points.
+ *
+ * Added in FEATURE_092 (v0.7.33) so the auto-mode classifier guardrail
+ * can extract intent context (user prompt + prior tool_use / tool_result
+ * blocks) without reaching into Runner internals.
+ */
+interface GuardrailContext {
+    readonly agent: Agent;
+    readonly abortSignal?: AbortSignal;
+    readonly messages?: readonly AgentMessage[];
+    readonly permissionIntent?: GuardrailPermissionIntent;
+}
+/**
+ * Outcome of a single guardrail check. `payload` shape depends on the hook
+ * point — see the specific guardrail interface for the expected type.
+ */
+type GuardrailVerdict = {
+    readonly action: 'allow';
+} | {
+    readonly action: 'rewrite';
+    readonly payload: unknown;
+    readonly reason?: string;
+} | {
+    readonly action: 'block';
+    readonly reason: string;
+} | {
+    readonly action: 'escalate';
+    readonly reason: string;
+};
+/**
+ * Input-side guardrail. Expected `rewrite` payload shape:
+ * `readonly AgentMessage[]` — the replacement transcript.
+ */
+interface InputGuardrail extends Guardrail {
+    readonly kind: 'input';
+    check(input: readonly AgentMessage[], ctx: GuardrailContext): Promise<GuardrailVerdict>;
+}
+/**
+ * Output-side guardrail. Expected `rewrite` payload shape:
+ * `AgentMessage` — the replacement final assistant message.
+ */
+interface OutputGuardrail extends Guardrail {
+    readonly kind: 'output';
+    check(output: AgentMessage, ctx: GuardrailContext): Promise<GuardrailVerdict>;
+}
+/**
+ * Tool-side guardrail. `beforeTool` rewrite payload shape: `RunnerToolCall`
+ * (replacement call). `afterTool` rewrite payload shape: `RunnerToolResult`
+ * (replacement result). Either hook is optional.
+ */
+interface ToolGuardrail extends Guardrail {
+    readonly kind: 'tool';
+    beforeTool?(call: RunnerToolCall, ctx: GuardrailContext): Promise<GuardrailVerdict>;
+    afterTool?(call: RunnerToolCall, result: RunnerToolResult, ctx: GuardrailContext): Promise<GuardrailVerdict>;
+}
+/**
+ * Thrown when any guardrail returns `{ action: 'block' }`. The Runner
+ * propagates this up to the caller — the run is aborted at that point.
+ */
+declare class GuardrailBlockedError extends Error {
+    readonly guardrailName: string;
+    readonly hookPoint: 'input' | 'output' | 'tool';
+    constructor(guardrailName: string, hookPoint: 'input' | 'output' | 'tool', reason: string);
+}
+/**
+ * Thrown when any guardrail returns `{ action: 'escalate' }`. Callers can
+ * catch and prompt the user or apply a stricter policy before retrying.
+ */
+declare class GuardrailEscalateError extends Error {
+    readonly guardrailName: string;
+    readonly hookPoint: 'input' | 'output' | 'tool';
+    constructor(guardrailName: string, hookPoint: 'input' | 'output' | 'tool', reason: string);
+}
+/** Filter a guardrail list by hook-point. */
+declare function collectGuardrails(guardrails: readonly Guardrail[] | undefined): {
+    input: readonly InputGuardrail[];
+    output: readonly OutputGuardrail[];
+    tool: readonly ToolGuardrail[];
+};
+/**
+ * Run all input guardrails in declaration order. Returns the (possibly
+ * rewritten) transcript. Throws on block / escalate.
+ */
+declare function runInputGuardrails(transcript: readonly AgentMessage[], guardrails: readonly InputGuardrail[], ctx: GuardrailContext, agentSpan: Span | null): Promise<readonly AgentMessage[]>;
+/**
+ * Run all output guardrails in declaration order. Returns the (possibly
+ * rewritten) final assistant message. Throws on block / escalate.
+ */
+declare function runOutputGuardrails(output: AgentMessage, guardrails: readonly OutputGuardrail[], ctx: GuardrailContext, agentSpan: Span | null): Promise<AgentMessage>;
+/**
+ * Outcome of the before-tool guardrail stage.
+ *   - `{ kind: 'allow', call }`: continue to executeRunnerToolCall with `call`
+ *   - `{ kind: 'block', result }`: skip execution; return `result` as the
+ *     tool_result to the LLM (so it sees the rejection and can adapt)
+ */
+type ToolBeforeOutcome = {
+    readonly kind: 'allow';
+    readonly call: RunnerToolCall;
+} | {
+    readonly kind: 'block';
+    readonly call: RunnerToolCall;
+    readonly result: RunnerToolResult;
+};
+/**
+ * Run before-tool guardrails in declaration order. Rewrite replaces the
+ * tool call. Block surfaces an error tool_result to the LLM instead of
+ * throwing — the LLM sees the rejection and adapts. Escalate still throws.
+ */
+declare function runToolBeforeGuardrails(call: RunnerToolCall, guardrails: readonly ToolGuardrail[], ctx: GuardrailContext, agentSpan: Span | null): Promise<ToolBeforeOutcome>;
+/**
+ * Run after-tool guardrails in declaration order. Rewrite replaces the
+ * result content. Block replaces with an error result. Escalate throws.
+ */
+declare function runToolAfterGuardrails(call: RunnerToolCall, result: RunnerToolResult, guardrails: readonly ToolGuardrail[], ctx: GuardrailContext, agentSpan: Span | null): Promise<RunnerToolResult>;
+
 /**
  * Layer A Primitive: Runner
  *
@@ -2055,18 +2229,21 @@ interface RunOptions {
      * this union. See `@kodax-ai/agent/primitives/guardrail.ts` for shape.
      */
     readonly guardrails?: readonly Guardrail[];
+    /** Trusted authority context kept separate from the conversation transcript. */
+    readonly permissionIntent?: GuardrailPermissionIntent;
     /**
      * Per-run override for the tool-loop iteration cap. When omitted, the
-     * loop uses `MAX_TOOL_LOOP_ITERATIONS` (20) — a safe ceiling for
-     * stand-alone agent runs. Managed-task orchestration (multi-role
-     * handoff chain: Scout → Planner → Generator → Evaluator) needs a much
-     * higher cap because the iteration counter is shared across every
-     * role in the chain. Legacy `runManagedTask` gave each role its own
-     * `DEFAULT_MANAGED_WORK_BUDGET` (200) — the Runner-driven path passes
-     * that value here so long investigations don't trip the safety valve
-     * after ~20 tool calls.
+     * loop uses `MAX_TOOL_LOOP_ITERATIONS` (20), a safe ceiling for
+     * stand-alone runs. Terminal continuations may consume the Runner's small
+     * bounded continuation reserve unless `maxTotalIterations` narrows it.
      */
     readonly maxToolLoopIterations?: number;
+    /**
+     * Optional absolute per-run ceiling that continuation reserves cannot
+     * extend. Callers that omit it retain the bounded continuation reserve;
+     * managed orchestration uses it as a mechanical runaway fuse.
+     */
+    readonly maxTotalIterations?: number;
     /**
      * v0.7.26 parity: observer callbacks fired around every tool
      * invocation. Legacy `runManagedTask` emitted `events.onToolResult`
@@ -2349,6 +2526,13 @@ interface RunnerRecoveryTranscriptCarrier {
 }
 declare function attachRunnerRecoveryTranscript(error: Error, messages: readonly AgentMessage[]): void;
 declare function readRunnerRecoveryTranscript(error: unknown): readonly AgentMessage[] | undefined;
+/** Structured failure emitted when a Runner exhausts its mechanical fuse. */
+declare class RunnerIterationLimitError extends Error {
+    readonly code = "RUNNER_ITERATION_LIMIT";
+    readonly limitReached = true;
+    constructor(message: string, messages: readonly AgentMessage[]);
+}
+declare function isRunnerIterationLimitError(error: unknown): error is RunnerIterationLimitError;
 /**
  * Stream events emitted by `Runner.runStream`. The event surface is
  * intentionally small in v0.7.23; FEATURE_084 expands it to mirror the
@@ -4592,5 +4776,154 @@ interface CreateAgentExecutorPlaneOptions {
     readonly closeTimeoutMs?: number;
 }
 
-export { ASK_USER_BACK_SIGNAL as A, ASK_USER_CUSTOM_INPUT_SIGNAL as a, DEFAULT_SYSTEM_CAP as a$, InvariantSession as bq, LearningCapabilityError as cB, MAX_TOOL_LOOP_ITERATIONS as cS, LearnedAreaStore as ce, Runner as dO, SpanImpl as e8, WorkflowEventRecorder as eE, Tracer as eq, learningEventKindForLifecycle as f$, createAgent as fA, createHandoff as fB, createInMemorySession as fC, createInvariantSessionForAgent as fD, createLearnedCapabilityScope as fE, createLearnedSkillRecord as fF, createStateWriter as fG, createTrace as fH, createWorkflowProcessTracker as fI, defaultTracer as fJ, detectInstructionsInjection as fK, discoverInstances as fL, eventFromCapability as fM, exactInvokedSkillSnapshotForSession as fN, executeRunnerToolCall as fO, extractAssistantTextFromMessage as fP, getActiveUserInteraction as fQ, getAdmittedAgentBindings as fR, hashMemoryIdentityComponent as fS, invokeLearnedSkillCanary as fT, isAskUserCustomInputAnswer as fU, isFinalWorkflowProcessStatus as fV, isLearnedCapabilityRecordV2 as fW, isRunnableTool as fX, isRunnerLlmResult as fY, isUnifiedLearningReviewModelInput as fZ, learningEventIdFor as f_, _resetAdmittedAgentBindings as fm, _resetPresetDispatchers as fn, admitAndRecordLearnedSkillInvocation as fo, admitLearnedSkillBinding as fp, asSingleSelection as fq, assertLearnedCapabilityTransition as fr, attachRunnerRecoveryTranscript as fs, buildAssistantMessageFromLlmResult as ft, buildSystemPrompt as fu, buildToolResultMessage as fv, canTransitionLearnedCapability as fw, commitLearnedSkillRevision as fx, completeLearnedSkillOutcome as fy, completeLearnedSkillSessionOutcomes as fz, listLearnedSkillUsageReceipts as g0, matchesMemoryApplicability as g1, memoryApplicabilityFingerprint as g2, normalizeHostMetadata as g3, normalizeUnifiedLearningReview as g4, quarantineLearnedSkillRevision as g5, readRunnerRecoveryTranscript as g6, reconcileLearnedSkillBindingOutcomes as g7, recordLearnedSkillOffered as g8, registerPresetDispatcher as g9, releaseLearnedSkillBinding as ga, renderDeclarativeSkill as gb, resolveLearnedAreaPaths as gc, resolveProjectLearnedAreaRoot as gd, runAdmissionAudit as ge, sanitizeUnifiedLearningReviewInput as gf, setActiveUserInteraction as gg, setAdmittedAgentBindings as gh, slugifyLearnedCapabilityName as gi, stageLearnedSkillRevision as gj, validateDeclarativeSkillSpec as gk };
-export type { AgentExecutorProtocol as $, AgentContinuationInput as B, AgentCredentialBroker as C, AgentDataClassification as D, AgentDetail as E, AgentDispatchContext as F, AgentDispatchPolicy as G, AgentDispatchPolicyDecision as H, AgentDispatchPolicyInput as I, AgentDispatchabilitySnapshot as J, AgentDispatchabilityStatus as K, AgentEffectDeclaration as L, AgentEvent as M, AgentEventKind as N, AgentExecutionInput as O, AgentExecutionKind as P, AgentExecutionResult as Q, AgentExecutor as R, AgentExecutorEvent as S, AgentExecutorFactory as T, AgentExecutorFactoryContext as U, AgentExecutorPlane as V, AgentExecutorPlaneBackgroundErrorContext as W, AgentExecutorPlaneBackgroundErrorHandler as X, AgentExecutorPlaneBinding as Y, AgentExecutorPlaneStore as Z, AgentExecutorPreflightResult as _, AgentExecutorTaskReference as a0, AgentExecutorTaskSnapshot as a1, AgentFollowupResult as a2, AgentForkTurns as a3, AgentInterruptScope as a4, AgentJsonObject as a5, AgentJsonValue as a6, AgentLimitReached as a7, AgentListEntry as a8, AgentMailboxMessage as a9, AgentTaskState as aA, AgentTaskUsage as aB, AgentTool as aC, AgentTreeSnapshot as aD, AgentTurn as aE, AgentTurnExecutor as aF, AgentTurnRef as aG, AgentTurnState as aH, AgentTurnSummary as aI, AskUserAnswer as aJ, AskUserCustomInputAnswer as aK, AskUserMultiOptions as aL, AskUserQuestionItem as aM, AskUserQuestionOptions as aN, AskUserSelectionAnswer as aO, CapabilitySupport as aP, CommitLearnedSkillRevisionInput as aQ, CompactionAnchor as aR, CompactionConfig as aS, CompactionDetails as aT, CompactionReport as aU, CompactionResult as aV, CompactionSpanData as aW, CompactionUpdate as aX, CreateAgentExecutorPlaneOptions as aY, CreateLearnedSkillRecordInput as aZ, CurrentTodoSummary as a_, AgentManifest as aa, AgentMessage as ab, AgentMetadataValue as ac, AgentMiddlewareDeclaration as ad, AgentMutationOptions as ae, AgentOutput as af, AgentPreflightInput as ag, AgentPreflightResult as ah, AgentProgressItem as ai, AgentProgressKind as aj, AgentProgressUpdate as ak, AgentReasoningProfile as al, AgentRegistrationEnabledMutationOptions as am, AgentRegistrationMutationOptions as an, AgentRegistrationService as ao, AgentSpanData as ap, AgentSpawnInput as aq, AgentTaskCancellation as ar, AgentTaskCorrelation as as, AgentTaskEvent as at, AgentTaskFilter as au, AgentTaskProgress as av, AgentTaskRegistrationSnapshot as aw, AgentTaskService as ax, AgentTaskSnapshot as ay, AgentTaskStartInput as az, AdmissionAuditOptions as b, KodaXSessionRuntimeInfo as b$, DeclarativeSkillSpec as b0, Deliverable as b1, DiscoveredInstance as b2, DiscoveryOptions as b3, DispatchableAgentDescriptor as b4, DispatchableAgentListing as b5, DispatchableAgentOrigin as b6, DispatchableAgentQuery as b7, EvidenceSpanData as b8, ExactInvokedSkillSnapshot as b9, KodaXGoalStatus as bA, KodaXImageInputArtifact as bB, KodaXImageMediaType as bC, KodaXInputArtifact as bD, KodaXInputArtifactSource as bE, KodaXJsonValue as bF, KodaXMemoryInfluenceRef as bG, KodaXMemoryIntent as bH, KodaXMemoryOutcomeDigest as bI, KodaXMemoryOutcomeEvidence as bJ, KodaXSessionArchiveMarkerEntry as bK, KodaXSessionArtifactLedgerEntry as bL, KodaXSessionBranchSummaryEntry as bM, KodaXSessionClientNoticeEntry as bN, KodaXSessionCompactionEntry as bO, KodaXSessionData as bP, KodaXSessionEntry as bQ, KodaXSessionEntryBase as bR, KodaXSessionGoalEntry as bS, KodaXSessionLabelEntry as bT, KodaXSessionLineage as bU, KodaXSessionMemoryOutcomeDigestEntry as bV, KodaXSessionMemoryReviewReceiptEntry as bW, KodaXSessionMessageEntry as bX, KodaXSessionMeta as bY, KodaXSessionNavigationOptions as bZ, KodaXSessionRewindMarkerEntry as b_, ExternalAgentEffectDeclaration as ba, ExternalAgentHealth as bb, ExternalAgentProtocol as bc, ExternalAgentRegistration as bd, ExternalAgentRegistrationSummary as be, FanoutSpanData as bf, FileOperations as bg, GenerationSpanData as bh, Guardrail as bi, GuardrailSpanData as bj, Handoff as bk, HandoffSpanData as bl, InMemorySessionOptions as bm, InstanceDiscoveryFs as bn, InvariantId as bo, InvariantResult as bp, KodaXCompactMemoryProgress as br, KodaXCompactMemorySeed as bs, KodaXExtensionSessionRecord as bt, KodaXExtensionSessionState as bu, KodaXExtensionStore as bv, KodaXExtensionStoreEntry as bw, KodaXFileInputArtifact as bx, KodaXGoalEventType as by, KodaXGoalState as bz, AdmissionCtx as c, MemoryAutoCuratorResult as c$, KodaXSessionScope as c0, KodaXSessionStorage as c1, KodaXSessionTreeNode as c2, KodaXSessionUiHistoryItem as c3, KodaXSessionUiHistoryItemType as c4, KodaXSessionUiTextHistoryItem as c5, KodaXSessionUiTextHistoryItemType as c6, KodaXSessionUiToolCall as c7, KodaXSessionUiToolCallStatus as c8, KodaXSessionUiToolGroupHistoryItem as c9, LearningActionDriver as cA, LearningCapabilityErrorCode as cC, LearningClientEventState as cD, LearningClientRecord as cE, LearningEvent as cF, LearningEventKind as cG, LearningExplicitUserAuthority as cH, LearningNotificationState as cI, LearningPage as cJ, LearningQuery as cK, LearningReviewEvidencePacket as cL, LearningReviewQualification as cM, LearningReviewVerifierFact as cN, LearningSubscribeOptions as cO, LearningSurfaceSnapshot as cP, LocalAgentTaskInput as cQ, LocalAgentTaskUpdate as cR, ManifestPatch as cT, MemoryActionProposal as cU, MemoryApplicability as cV, MemoryApplyPreview as cW, MemoryApplyResult as cX, MemoryApproval as cY, MemoryAuthority as cZ, MemoryAutoCuratorInput as c_, KodaXSessionWorkspaceKind as ca, KodaXVideoInputArtifact as cb, KodaXVideoMediaType as cc, LearnedAreaPaths as cd, LearnedCapabilityArtifact as cf, LearnedCapabilityCanary as cg, LearnedCapabilityCanaryBinding as ch, LearnedCapabilityCanaryInvocation as ci, LearnedCapabilityCarrier as cj, LearnedCapabilityLifecycle as ck, LearnedCapabilityProvenance as cl, LearnedCapabilityRecord as cm, LearnedCapabilityRecordV1 as cn, LearnedCapabilityRecordV2 as co, LearnedCapabilityScope as cp, LearnedCapabilitySource as cq, LearnedSkillBindingAdmission as cr, LearnedSkillCanaryOutcome as cs, LearnedSkillDecisionDisposition as ct, LearnedSkillInvocationAdmission as cu, LearnedSkillInvokedReceipt as cv, LearnedSkillOfferedReceipt as cw, LearnedSkillOutcomeReceipt as cx, LearnedSkillUsageReceipt as cy, LearningAction as cz, AdmissionVerdict as d, SessionEntry as d$, MemoryBodySnapshot as d0, MemoryClaimKind as d1, MemoryContextIdentity as d2, MemoryController as d3, MemoryCuratorInput as d4, MemoryDecisionTraceReceipt as d5, MemoryEpisodeReviewResult as d6, MemoryEvent as d7, MemoryGovernanceFinding as d8, MemoryGovernanceFindingKind as d9, NormalizedLearnedSkillDecision as dA, ObserveCtx as dB, PersistedSessionState as dC, PresetDispatcher as dD, PresetTracingContext as dE, QualityInvariant as dF, ReadonlyMutationTracker as dG, ReadonlyRecorder as dH, ReasoningDepth as dI, RecentlyModifiedFile as dJ, RunEvent as dK, RunOptions as dL, RunResult as dM, RunnableTool as dN, RunnerEvent as dP, RunnerLlmResult as dQ, RunnerLlmReturn as dR, RunnerRecoveryTranscriptCarrier as dS, RunnerToolCall as dT, RunnerToolContext as dU, RunnerToolObserver as dV, RunnerToolResult as dW, RunnerToolResultBatch as dX, RunnerToolResultBatchTransform as dY, Session as dZ, SessionDispatchResult as d_, MemoryGovernanceReport as da, MemoryItemRef as db, MemoryLifecycle as dc, MemoryLifecycleOperationResult as dd, MemoryPack as de, MemoryPackHint as df, MemoryPackInput as dg, MemoryPackTraceMetadata as dh, MemoryProposalAction as di, MemoryRefFilter as dj, MemoryRefKind as dk, MemoryRejectResult as dl, MemoryReviewCandidateRef as dm, MemoryReviewDraftAction as dn, MemoryReviewInput as dp, MemoryReviewModelInput as dq, MemoryReviewPersistenceDecision as dr, MemoryReviewPersistenceKind as ds, MemoryReviewPlan as dt, MemoryReviewRunner as du, MemoryReviewTrigger as dv, MemoryScope as dw, MemorySourceAdapter as dx, MemoryVisibility as dy, MessageEntry as dz, AdmittedHandle as e, WorkflowProcessSource as e$, SessionErrorMetadata as e0, SessionExtension as e1, SessionForkOptions as e2, SessionMeta as e3, SessionStateSnapshot as e4, Span as e5, SpanData as e6, SpanError as e7, SpanImplOptions as e9, WorkflowArtifactRef as eA, WorkflowBudget as eB, WorkflowEvent as eC, WorkflowEventCorrelation as eD, WorkflowEventType as eF, WorkflowIsolation as eG, WorkflowLimits as eH, WorkflowLogEvent as eI, WorkflowMeta as eJ, WorkflowModelHint as eK, WorkflowModule as eL, WorkflowOutcome as eM, WorkflowOutcomeError as eN, WorkflowOutcomeResult as eO, WorkflowOutcomeStatus as eP, WorkflowOutcomeUsage as eQ, WorkflowParallelOptions as eR, WorkflowProcessArtifact as eS, WorkflowProcessCounts as eT, WorkflowProcessEvent as eU, WorkflowProcessItem as eV, WorkflowProcessItemKind as eW, WorkflowProcessItemOrigin as eX, WorkflowProcessItemStatus as eY, WorkflowProcessProgress as eZ, WorkflowProcessSnapshot as e_, StagedLearnedSkillArtifact as ea, StartTraceOptions as eb, StateWriter as ec, StateWriterFs as ed, StateWriterOptions as ee, StopHookContext as ef, StopHookFn as eg, StopHookResult as eh, StopHookSpanData as ei, SystemCap as ej, TerminalCtx as ek, ToolCallSpanData as el, ToolCapability as em, ToolPermission as en, Trace as eo, TraceOptions as ep, TracerOptions as er, UnifiedLearningReviewModelInput as es, UnifiedLearningReviewResult as et, UnifiedLearningReviewRunner as eu, UserInteraction as ev, WorkflowAgentBackend as ew, WorkflowApi as ex, WorkflowApproval as ey, WorkflowApprovalSummary as ez, Agent as f, WorkflowProcessStatus as f0, WorkflowProcessSummaryStatus as f1, WorkflowProcessTokenUsage as f2, WorkflowProcessTracker as f3, WorkflowProcessTrackerOptions as f4, WorkflowRun as f5, WorkflowRunState as f6, WorkflowRunStatus as f7, WorkflowSpawnAgentInput as f8, WorkflowSynthesis as f9, WorkflowSynthesizeInput as fa, WorkflowTaskHandle as fb, WorkflowTaskResult as fc, WorkflowTaskSnapshot as fd, WorkflowTaskStatus as fe, WorkflowTaskSummaryEventUpdate as ff, WorkflowTaskSummaryKind as fg, WorkflowTaskSummaryUpdate as fh, WorkflowTaskUsage as fi, WorkflowTaskVerification as fj, WorkflowTaskVerificationResult as fk, WorkflowWaitOptions as fl, AgentActor as g, AgentActorClient as h, AgentActorOwner as i, AgentActorSnapshot as j, AgentActorSnapshotV1 as k, AgentActorSnapshotV2 as l, AgentActorState as m, AgentActorStore as n, AgentArtifactDescriptor as o, AgentArtifactPolicy as p, AgentArtifactPolicyDecision as q, AgentArtifactPolicyInput as r, AgentArtifactReference as s, AgentBudgetAdmission as t, AgentBudgetAdmissionInput as u, AgentBudgetExhausted as v, AgentBudgetPort as w, AgentCapabilities as x, AgentCapabilityDeclaration as y, AgentCapabilityRequirements as z };
+interface AgentControllerOptions {
+    readonly maxConcurrentThreadsPerSession?: number;
+    readonly rootCapabilities?: AgentCapabilities;
+    readonly executor?: AgentTurnExecutor;
+    readonly executorFor?: (kind: AgentExecutionKind) => AgentTurnExecutor;
+    readonly budget?: AgentBudgetPort;
+    readonly store?: AgentActorStore;
+    /** Unique Runtime/controller claim for one durable Session Actor tree. */
+    readonly owner?: AgentActorOwner;
+    /** Conservative liveness probe for a persisted foreign owner. Omitted means alive. */
+    readonly isOwnerAlive?: (owner: AgentActorOwner) => boolean | Promise<boolean>;
+    readonly now?: () => string;
+    readonly warn?: (message: string) => void;
+    readonly onBackgroundError?: (error: unknown) => void;
+    readonly onHealthChanged?: (health: AgentControllerHealth) => void;
+    /** Post-durability event sink. Callback failures never roll back committed actor state. */
+    readonly onEventCommitted?: (event: AgentEvent) => void | Promise<void>;
+    /** Post-durability mailbox sink. Callback failures never roll back committed actor state. */
+    readonly onMessageCommitted?: (message: AgentMailboxMessage) => void | Promise<void>;
+}
+interface AgentControllerHealth {
+    readonly state: 'healthy' | 'recovering' | 'unknown';
+    readonly code?: 'actor_settlement_not_persisted';
+    readonly turnId?: string;
+    readonly message?: string;
+}
+declare class AgentActorController {
+    private readonly options;
+    private readonly actors;
+    private readonly turns;
+    private readonly mailboxes;
+    private readonly acknowledgedCompletionTurnIds;
+    private readonly pendingRootCompletionTurnIds;
+    private readonly eventsLog;
+    private readonly abortControllers;
+    private readonly waiters;
+    private readonly pendingSettlements;
+    private readonly settlementRecoveryMessages;
+    private readonly scheduler;
+    private readonly budget;
+    private readonly now;
+    private readonly admissionScope;
+    private mutationTail;
+    private revision;
+    private admissionRevision;
+    private snapshotSchemaVersion;
+    private durableOwner?;
+    private initialized;
+    private ownershipLost;
+    private ownershipReleased;
+    private closing;
+    private settlementGeneration;
+    private settlementValidityGeneration;
+    private shutdownFailure?;
+    private indeterminateFailure?;
+    private shutdownPromise?;
+    private committedSnapshot;
+    private health;
+    constructor(options?: AgentControllerOptions);
+    healthSnapshot(): AgentControllerHealth;
+    initialize(): Promise<void>;
+    ownsDurableFence(): boolean;
+    bind(callerPath: string): AgentActorClient;
+    /** Trusted host API: register a zero-slot Workflow protocol owner in this tree. */
+    createProtocolOwner(callerPath: string, ownerId: string): Promise<AgentActorClient>;
+    /** Trusted host API: settle a zero-slot Workflow protocol owner. */
+    settleProtocolOwner(ownerPath: string, state: 'completed' | 'failed' | 'interrupted', result: AgentExecutionResult & {
+        readonly error?: string;
+    }): Promise<void>;
+    /** Trusted host API: cancellation signal for a zero-slot Workflow protocol owner. */
+    protocolOwnerSignal(ownerPath: string): AbortSignal;
+    spawn(callerPath: string, input: AgentSpawnInput, options?: AgentMutationOptions): Promise<AgentTurnRef>;
+    send(callerPath: string, targetPath: string, content: string, classification?: AgentDataClassification, forwardedMessageId?: string): Promise<AgentMailboxMessage>;
+    acknowledgeCompletions(callerPath: string, turnIds: readonly string[]): Promise<number>;
+    followup(callerPath: string, targetPath: string, objective: string, metadata?: Readonly<Record<string, AgentMetadataValue>>, options?: AgentMutationOptions): Promise<AgentFollowupResult>;
+    interrupt(callerPath: string, targetPath: string, reason?: string, scope?: AgentInterruptScope): Promise<void>;
+    close(callerPath: string, targetPath: string, reason?: string): Promise<void>;
+    /**
+     * Final local teardown after the host has durably removed the backing store.
+     * No mutation is allowed here because there is no longer a snapshot to save.
+     */
+    disposeAfterStoreRemoval(reason?: string): void;
+    /** Interrupts every local execution while retaining the durable owner fence. */
+    quiesce(reason?: string): Promise<void>;
+    /** Stops in-flight work for process shutdown while preserving reusable Actor identities. */
+    shutdown(reason?: string): Promise<void>;
+    private performShutdown;
+    list(callerPath: string): AgentTreeSnapshot;
+    get(callerPath: string, targetPath: string): AgentDetail;
+    output(callerPath: string, targetPath: string, turnId?: string): AgentOutput;
+    eventSnapshot(callerPath: string, afterSequence?: number): readonly AgentEvent[];
+    private isAcknowledgedDirectChildTerminal;
+    wait(callerPath: string, afterSequence?: number, timeoutMs?: number, signal?: AbortSignal): Promise<AgentEvent | undefined>;
+    private prepareSpawn;
+    private prepareExistingTurn;
+    private admitTurn;
+    private commitStart;
+    private launch;
+    private trackSettlement;
+    private flushPendingSettlements;
+    private completeExecution;
+    private failExecution;
+    private commitExecutionSettlement;
+    private setHealth;
+    private publishSettlementHealth;
+    private finishTurn;
+    private appendCompletion;
+    private drainMailbox;
+    private unreadMailbox;
+    private recordProgress;
+    private resolveForwarding;
+    private appendMessage;
+    private appendEvent;
+    private requireControl;
+    private assertMessagePermission;
+    private isVisible;
+    private visibleActors;
+    private latestTurnSummary;
+    private descendantsInclusive;
+    private createActor;
+    private createTurn;
+    private requireActor;
+    private requireTurn;
+    private requireCommittedActor;
+    private requireCommittedTurn;
+    private requireCommittedControl;
+    private installRoot;
+    private mutate;
+    private snapshot;
+    private restore;
+    private republishUnacknowledgedRootCompletions;
+    private recoverUnmatchedTurns;
+    private claimOwnership;
+    private releaseOwnershipAfterInitializationFailure;
+    private assertWritableOwner;
+    private fenceUnknownSettlement;
+    private stopLocalWork;
+    private fenceAfterSnapshotConflict;
+    private isInterruptionDurable;
+    private notify;
+    private publishCommittedEvent;
+    private publishCommittedMessage;
+    private reportBackgroundError;
+    private reportBackgroundCallbackFailure;
+    private assertExpectedTreeRevision;
+    private assertExpectedAdmissionRevision;
+}
+declare function createAgentActorController(options?: AgentControllerOptions): Promise<AgentActorController>;
+
+export { ASK_USER_BACK_SIGNAL as A, ASK_USER_CUSTOM_INPUT_SIGNAL as a, DEFAULT_SYSTEM_CAP as b2, GuardrailBlockedError as bm, GuardrailEscalateError as bo, InvariantSession as bz, MAX_TOOL_LOOP_ITERATIONS as c$, LearningCapabilityError as cK, LearnedAreaStore as cn, Runner as dY, RunnerIterationLimitError as d_, Tracer as eD, WorkflowEventRecorder as eR, SpanImpl as ej, eventFromCapability as f$, _resetPresetDispatchers as fA, admitAndRecordLearnedSkillInvocation as fB, admitLearnedSkillBinding as fC, asSingleSelection as fD, assertLearnedCapabilityTransition as fE, attachRunnerRecoveryTranscript as fF, buildAssistantMessageFromLlmResult as fG, buildSystemPrompt as fH, buildToolResultMessage as fI, canTransitionLearnedCapability as fJ, collectGuardrails as fK, commitLearnedSkillRevision as fL, completeLearnedSkillOutcome as fM, completeLearnedSkillSessionOutcomes as fN, createAgent as fO, createAgentActorController as fP, createHandoff as fQ, createInMemorySession as fR, createInvariantSessionForAgent as fS, createLearnedCapabilityScope as fT, createLearnedSkillRecord as fU, createStateWriter as fV, createTrace as fW, createWorkflowProcessTracker as fX, defaultTracer as fY, detectInstructionsInjection as fZ, discoverInstances as f_, _resetAdmittedAgentBindings as fz, exactInvokedSkillSnapshotForSession as g0, executeRunnerToolCall as g1, extractAssistantTextFromMessage as g2, getActiveUserInteraction as g3, getAdmittedAgentBindings as g4, hashMemoryIdentityComponent as g5, invokeLearnedSkillCanary as g6, isAskUserCustomInputAnswer as g7, isFinalWorkflowProcessStatus as g8, isLearnedCapabilityRecordV2 as g9, setActiveUserInteraction as gA, setAdmittedAgentBindings as gB, slugifyLearnedCapabilityName as gC, stageLearnedSkillRevision as gD, validateDeclarativeSkillSpec as gE, isRunnableTool as ga, isRunnerIterationLimitError as gb, isRunnerLlmResult as gc, isUnifiedLearningReviewModelInput as gd, learningEventIdFor as ge, learningEventKindForLifecycle as gf, listLearnedSkillUsageReceipts as gg, matchesMemoryApplicability as gh, memoryApplicabilityFingerprint as gi, normalizeHostMetadata as gj, normalizeUnifiedLearningReview as gk, quarantineLearnedSkillRevision as gl, readRunnerRecoveryTranscript as gm, reconcileLearnedSkillBindingOutcomes as gn, recordLearnedSkillOffered as go, registerPresetDispatcher as gp, releaseLearnedSkillBinding as gq, renderDeclarativeSkill as gr, resolveLearnedAreaPaths as gs, resolveProjectLearnedAreaRoot as gt, runAdmissionAudit as gu, runInputGuardrails as gv, runOutputGuardrails as gw, runToolAfterGuardrails as gx, runToolBeforeGuardrails as gy, sanitizeUnifiedLearningReviewInput as gz, AgentActorController as i };
+export type { AgentExecutorPlaneBinding as $, AgentCapabilityRequirements as B, AgentContinuationInput as C, AgentControllerHealth as D, AgentControllerOptions as E, AgentCredentialBroker as F, AgentDataClassification as G, AgentDetail as H, AgentDispatchContext as I, AgentDispatchPolicy as J, AgentDispatchPolicyDecision as K, AgentDispatchPolicyInput as L, AgentDispatchabilitySnapshot as M, AgentDispatchabilityStatus as N, AgentEffectDeclaration as O, AgentEvent as P, AgentEventKind as Q, AgentExecutionInput as R, AgentExecutionKind as S, AgentExecutionResult as T, AgentExecutor as U, AgentExecutorEvent as V, AgentExecutorFactory as W, AgentExecutorFactoryContext as X, AgentExecutorPlane as Y, AgentExecutorPlaneBackgroundErrorContext as Z, AgentExecutorPlaneBackgroundErrorHandler as _, CreateAgentExecutorPlaneOptions as a$, AgentExecutorPlaneStore as a0, AgentExecutorPreflightResult as a1, AgentExecutorProtocol as a2, AgentExecutorTaskReference as a3, AgentExecutorTaskSnapshot as a4, AgentFollowupResult as a5, AgentForkTurns as a6, AgentInterruptScope as a7, AgentJsonObject as a8, AgentJsonValue as a9, AgentTaskService as aA, AgentTaskSnapshot as aB, AgentTaskStartInput as aC, AgentTaskState as aD, AgentTaskUsage as aE, AgentTool as aF, AgentTreeSnapshot as aG, AgentTurn as aH, AgentTurnExecutor as aI, AgentTurnRef as aJ, AgentTurnState as aK, AgentTurnSummary as aL, AskUserAnswer as aM, AskUserCustomInputAnswer as aN, AskUserMultiOptions as aO, AskUserQuestionItem as aP, AskUserQuestionOptions as aQ, AskUserSelectionAnswer as aR, CapabilitySupport as aS, CommitLearnedSkillRevisionInput as aT, CompactionAnchor as aU, CompactionConfig as aV, CompactionDetails as aW, CompactionReport as aX, CompactionResult as aY, CompactionSpanData as aZ, CompactionUpdate as a_, AgentLimitReached as aa, AgentListEntry as ab, AgentMailboxMessage as ac, AgentManifest as ad, AgentMessage as ae, AgentMetadataValue as af, AgentMiddlewareDeclaration as ag, AgentMutationOptions as ah, AgentOutput as ai, AgentPreflightInput as aj, AgentPreflightResult as ak, AgentProgressItem as al, AgentProgressKind as am, AgentProgressUpdate as an, AgentReasoningProfile as ao, AgentRegistrationEnabledMutationOptions as ap, AgentRegistrationMutationOptions as aq, AgentRegistrationService as ar, AgentSpanData as as, AgentSpawnInput as at, AgentTaskCancellation as au, AgentTaskCorrelation as av, AgentTaskEvent as aw, AgentTaskFilter as ax, AgentTaskProgress as ay, AgentTaskRegistrationSnapshot as az, AdmissionAuditOptions as b, KodaXSessionGoalEntry as b$, CreateLearnedSkillRecordInput as b0, CurrentTodoSummary as b1, DeclarativeSkillSpec as b3, Deliverable as b4, DiscoveredInstance as b5, DiscoveryOptions as b6, DispatchableAgentDescriptor as b7, DispatchableAgentListing as b8, DispatchableAgentOrigin as b9, KodaXCompactMemoryProgress as bA, KodaXCompactMemorySeed as bB, KodaXExtensionSessionRecord as bC, KodaXExtensionSessionState as bD, KodaXExtensionStore as bE, KodaXExtensionStoreEntry as bF, KodaXFileInputArtifact as bG, KodaXGoalEventType as bH, KodaXGoalState as bI, KodaXGoalStatus as bJ, KodaXImageInputArtifact as bK, KodaXImageMediaType as bL, KodaXInputArtifact as bM, KodaXInputArtifactSource as bN, KodaXJsonValue as bO, KodaXMemoryInfluenceRef as bP, KodaXMemoryIntent as bQ, KodaXMemoryOutcomeDigest as bR, KodaXMemoryOutcomeEvidence as bS, KodaXSessionArchiveMarkerEntry as bT, KodaXSessionArtifactLedgerEntry as bU, KodaXSessionBranchSummaryEntry as bV, KodaXSessionClientNoticeEntry as bW, KodaXSessionCompactionEntry as bX, KodaXSessionData as bY, KodaXSessionEntry as bZ, KodaXSessionEntryBase as b_, DispatchableAgentQuery as ba, EvidenceSpanData as bb, ExactInvokedSkillSnapshot as bc, ExternalAgentEffectDeclaration as bd, ExternalAgentHealth as be, ExternalAgentProtocol as bf, ExternalAgentRegistration as bg, ExternalAgentRegistrationSummary as bh, FanoutSpanData as bi, FileOperations as bj, GenerationSpanData as bk, Guardrail as bl, GuardrailContext as bn, GuardrailPermissionIntent as bp, GuardrailSpanData as bq, GuardrailVerdict as br, Handoff as bs, HandoffSpanData as bt, InMemorySessionOptions as bu, InputGuardrail as bv, InstanceDiscoveryFs as bw, InvariantId as bx, InvariantResult as by, AdmissionCtx as c, KodaXSessionLabelEntry as c0, KodaXSessionLineage as c1, KodaXSessionMemoryOutcomeDigestEntry as c2, KodaXSessionMemoryReviewReceiptEntry as c3, KodaXSessionMessageEntry as c4, KodaXSessionMeta as c5, KodaXSessionNavigationOptions as c6, KodaXSessionRewindMarkerEntry as c7, KodaXSessionRuntimeInfo as c8, KodaXSessionScope as c9, LearnedSkillBindingAdmission as cA, LearnedSkillCanaryOutcome as cB, LearnedSkillDecisionDisposition as cC, LearnedSkillInvocationAdmission as cD, LearnedSkillInvokedReceipt as cE, LearnedSkillOfferedReceipt as cF, LearnedSkillOutcomeReceipt as cG, LearnedSkillUsageReceipt as cH, LearningAction as cI, LearningActionDriver as cJ, LearningCapabilityErrorCode as cL, LearningClientEventState as cM, LearningClientRecord as cN, LearningEvent as cO, LearningEventKind as cP, LearningExplicitUserAuthority as cQ, LearningNotificationState as cR, LearningPage as cS, LearningQuery as cT, LearningReviewEvidencePacket as cU, LearningReviewQualification as cV, LearningReviewVerifierFact as cW, LearningSubscribeOptions as cX, LearningSurfaceSnapshot as cY, LocalAgentTaskInput as cZ, LocalAgentTaskUpdate as c_, KodaXSessionStorage as ca, KodaXSessionTreeNode as cb, KodaXSessionUiHistoryItem as cc, KodaXSessionUiHistoryItemType as cd, KodaXSessionUiTextHistoryItem as ce, KodaXSessionUiTextHistoryItemType as cf, KodaXSessionUiToolCall as cg, KodaXSessionUiToolCallStatus as ch, KodaXSessionUiToolGroupHistoryItem as ci, KodaXSessionWorkspaceKind as cj, KodaXVideoInputArtifact as ck, KodaXVideoMediaType as cl, LearnedAreaPaths as cm, LearnedCapabilityArtifact as co, LearnedCapabilityCanary as cp, LearnedCapabilityCanaryBinding as cq, LearnedCapabilityCanaryInvocation as cr, LearnedCapabilityCarrier as cs, LearnedCapabilityLifecycle as ct, LearnedCapabilityProvenance as cu, LearnedCapabilityRecord as cv, LearnedCapabilityRecordV1 as cw, LearnedCapabilityRecordV2 as cx, LearnedCapabilityScope as cy, LearnedCapabilitySource as cz, AdmissionVerdict as d, RunnerLlmResult as d$, ManifestPatch as d0, MemoryActionProposal as d1, MemoryApplicability as d2, MemoryApplyPreview as d3, MemoryApplyResult as d4, MemoryApproval as d5, MemoryAuthority as d6, MemoryAutoCuratorInput as d7, MemoryAutoCuratorResult as d8, MemoryBodySnapshot as d9, MemoryReviewPersistenceDecision as dA, MemoryReviewPersistenceKind as dB, MemoryReviewPlan as dC, MemoryReviewRunner as dD, MemoryReviewTrigger as dE, MemoryScope as dF, MemorySourceAdapter as dG, MemoryVisibility as dH, MessageEntry as dI, NormalizedLearnedSkillDecision as dJ, ObserveCtx as dK, OutputGuardrail as dL, PersistedSessionState as dM, PresetDispatcher as dN, PresetTracingContext as dO, QualityInvariant as dP, ReadonlyMutationTracker as dQ, ReadonlyRecorder as dR, ReasoningDepth as dS, RecentlyModifiedFile as dT, RunEvent as dU, RunOptions as dV, RunResult as dW, RunnableTool as dX, RunnerEvent as dZ, MemoryClaimKind as da, MemoryContextIdentity as db, MemoryController as dc, MemoryCuratorInput as dd, MemoryDecisionTraceReceipt as de, MemoryEpisodeReviewResult as df, MemoryEvent as dg, MemoryGovernanceFinding as dh, MemoryGovernanceFindingKind as di, MemoryGovernanceReport as dj, MemoryItemRef as dk, MemoryLifecycle as dl, MemoryLifecycleOperationResult as dm, MemoryPack as dn, MemoryPackHint as dp, MemoryPackInput as dq, MemoryPackTraceMetadata as dr, MemoryProposalAction as ds, MemoryRefFilter as dt, MemoryRefKind as du, MemoryRejectResult as dv, MemoryReviewCandidateRef as dw, MemoryReviewDraftAction as dx, MemoryReviewInput as dy, MemoryReviewModelInput as dz, AdmittedHandle as e, WorkflowOutcomeResult as e$, RunnerLlmReturn as e0, RunnerRecoveryTranscriptCarrier as e1, RunnerToolCall as e2, RunnerToolContext as e3, RunnerToolObserver as e4, RunnerToolResult as e5, RunnerToolResultBatch as e6, RunnerToolResultBatchTransform as e7, Session as e8, SessionDispatchResult as e9, ToolPermission as eA, Trace as eB, TraceOptions as eC, TracerOptions as eE, UnifiedLearningReviewModelInput as eF, UnifiedLearningReviewResult as eG, UnifiedLearningReviewRunner as eH, UserInteraction as eI, WorkflowAgentBackend as eJ, WorkflowApi as eK, WorkflowApproval as eL, WorkflowApprovalSummary as eM, WorkflowArtifactRef as eN, WorkflowBudget as eO, WorkflowEvent as eP, WorkflowEventCorrelation as eQ, WorkflowEventType as eS, WorkflowIsolation as eT, WorkflowLimits as eU, WorkflowLogEvent as eV, WorkflowMeta as eW, WorkflowModelHint as eX, WorkflowModule as eY, WorkflowOutcome as eZ, WorkflowOutcomeError as e_, SessionEntry as ea, SessionErrorMetadata as eb, SessionExtension as ec, SessionForkOptions as ed, SessionMeta as ee, SessionStateSnapshot as ef, Span as eg, SpanData as eh, SpanError as ei, SpanImplOptions as ek, StagedLearnedSkillArtifact as el, StartTraceOptions as em, StateWriter as en, StateWriterFs as eo, StateWriterOptions as ep, StopHookContext as eq, StopHookFn as er, StopHookResult as es, StopHookSpanData as et, SystemCap as eu, TerminalCtx as ev, ToolBeforeOutcome as ew, ToolCallSpanData as ex, ToolCapability as ey, ToolGuardrail as ez, Agent as f, WorkflowOutcomeStatus as f0, WorkflowOutcomeUsage as f1, WorkflowParallelOptions as f2, WorkflowProcessArtifact as f3, WorkflowProcessCounts as f4, WorkflowProcessEvent as f5, WorkflowProcessItem as f6, WorkflowProcessItemKind as f7, WorkflowProcessItemOrigin as f8, WorkflowProcessItemStatus as f9, WorkflowProcessProgress as fa, WorkflowProcessSnapshot as fb, WorkflowProcessSource as fc, WorkflowProcessStatus as fd, WorkflowProcessSummaryStatus as fe, WorkflowProcessTokenUsage as ff, WorkflowProcessTracker as fg, WorkflowProcessTrackerOptions as fh, WorkflowRun as fi, WorkflowRunState as fj, WorkflowRunStatus as fk, WorkflowSpawnAgentInput as fl, WorkflowSynthesis as fm, WorkflowSynthesizeInput as fn, WorkflowTaskHandle as fo, WorkflowTaskResult as fp, WorkflowTaskSnapshot as fq, WorkflowTaskStatus as fr, WorkflowTaskSummaryEventUpdate as fs, WorkflowTaskSummaryKind as ft, WorkflowTaskSummaryUpdate as fu, WorkflowTaskUsage as fv, WorkflowTaskVerification as fw, WorkflowTaskVerificationResult as fx, WorkflowWaitOptions as fy, AgentActor as g, AgentActorClient as h, AgentActorOwner as j, AgentActorSnapshot as k, AgentActorSnapshotV1 as l, AgentActorSnapshotV2 as m, AgentActorState as n, AgentActorStore as o, AgentArtifactDescriptor as p, AgentArtifactPolicy as q, AgentArtifactPolicyDecision as r, AgentArtifactPolicyInput as s, AgentArtifactReference as t, AgentBudgetAdmission as u, AgentBudgetAdmissionInput as v, AgentBudgetExhausted as w, AgentBudgetPort as x, AgentCapabilities as y, AgentCapabilityDeclaration as z };