@kodax-ai/kodax 0.7.96 → 0.7.97-alpha.2

package/dist/sdk-runtime.d.ts

@@ -1,27 +1,158 @@
-import { G as KodaXReasoningMode, d as KodaXCustomProviderConfig } from './types-chunks/types.d-BrQMB-hy.js';
-export { k as KodaXMessage } from './types-chunks/types.d-BrQMB-hy.js';
-import { b as KodaXContextOverflowFacts } from './types-chunks/base.d-Bt9lhwSV.js';
-import { a9 as KodaXOptions, aA as KodaXShellExecutionContract, V as KodaXExecutionFailure, ae as KodaXOutputSegmentProjection, b9 as KodaXToolSandboxObservationUpdate, b7 as KodaXToolEventMeta, a2 as KodaXManagedTaskStatusEvent, U as KodaXEvents, as as KodaXResult, bO as RuntimeContextBudgetSnapshot, bV as RuntimeToolExposurePlan, ak as KodaXPromptCacheDiagnosticEvent, R as KodaXContextOptions, ah as KodaXOutputSegmentStarted, K as KodaXActivityEventMeta, bk as KodaXTurnStartedEvent, bh as KodaXTurnCompletedEvent, bj as KodaXTurnFailedEvent, Z as KodaXLiveEventMeta, M as KodaXCompactionEndResult, bL as RuntimeCompactionSkippedEvent, P as KodaXContextCompactionFinishedEvent, Q as KodaXContextIdentity } from './types-chunks/bash-prefix-extractor.d-DWFIMg0v.js';
-import { V as KodaXExtensionSessionRecord, w as AgentExecutionKind, N as AgentTreeSnapshot, s as AgentDetail, M as AgentSpawnInput, Q as AgentTurnRef, r as AgentDataClassification, y as AgentFollowupResult, I as AgentOutput, t as AgentEvent } from './types-chunks/types.d-CSv0_cZC.js';
-import { r as AgentDispatchContext, bB as LearningQuery, bA as LearningPage, bd as LearnedCapabilityRecord, bG as LearningSurfaceSnapshot, bw as LearningEvent, bF as LearningSubscribeOptions, B as AgentExecutorFactory, s as AgentDispatchPolicy, q as AgentCredentialBroker, h as AgentArtifactPolicy, a_ as KodaXImageInputArtifact, b1 as KodaXInputArtifactSource, b2 as KodaXVideoInputArtifact, dk as WorkflowProcessSnapshot, de as WorkflowProcessEvent, W as AgentRegistrationService, az as DispatchableAgentQuery, ax as DispatchableAgentListing, R as AgentPreflightInput, S as AgentPreflightResult } from './types-chunks/controller.d-J2t1q8Ly.js';
-import { i as SkillMetadata } from './types-chunks/types.d-Cb8RdrjU.js';
+import { e as ClientCommandService, a4 as ClientReviewInput, d as ClientCommandResult, c as ClientCommandInput, ao as ClientStatisticsService, H as ClientLifecycleService, am as ClientSessionView, Y as ClientObserveOptions, W as ClientObservation, E as ClientItemReadOptions, D as ClientItemContent, v as ClientHistoryReadOptions, u as ClientHistoryPage, w as ClientHistorySearchInput, x as ClientHistorySearchResult, K as ClientLineageSummary, j as ClientCreateSessionInput, aa as ClientSession, ae as ClientSessionFilter, al as ClientSessionSummary, ap as ClientSubmitInput, y as ClientInputAcceptance, z as ClientInteraction, A as ClientInteractionResponse, B as ClientInteractionResult, V as ClientModelSelection, a as ClientCapabilityProbeResult, a1 as ClientProviderInfo } from './types-chunks/client-contract-A1jdk6xz.js';
+import { h as RuntimeExecutionAuthorization, R as RuntimeClientInfo, b as RuntimeCredentialBinding, f as RuntimeCredentialService, o as RuntimeHostToolService, g as RuntimeDaemonClientType } from './types-chunks/runtime-client-info-CxnlZlW5.js';
+export { c as RuntimeCredentialBroker, d as RuntimeCredentialLease, e as RuntimeCredentialRequest, i as RuntimeHostToolDescriptor, j as RuntimeHostToolHandler, k as RuntimeHostToolInvocation, l as RuntimeHostToolInvocationStatus, m as RuntimeHostToolLease, n as RuntimeHostToolResult, p as RuntimeScopedCredentialBroker, q as RuntimeScopedCredentialPurpose, r as RuntimeScopedCredentialRequest, s as RuntimeScopedCredentialTarget } from './types-chunks/runtime-client-info-CxnlZlW5.js';
+import { b9 as MemoryManagementController, by as PendingEpisodeReviewSummary, af as KodaXGoalState, aa as KodaXExtensionSessionRecord, w as AgentExecutionKind, N as AgentTreeSnapshot, s as AgentDetail, M as AgentSpawnInput, Q as AgentTurnRef, r as AgentDataClassification, y as AgentFollowupResult, I as AgentOutput, t as AgentEvent } from './types-chunks/review-inbox.d-BeaLRNHx.js';
+import { G as KodaXReasoningMode, d as KodaXCustomProviderConfig } from './types-chunks/types.d-BjOq57-z.js';
+export { k as KodaXMessage } from './types-chunks/types.d-BjOq57-z.js';
+import { b as KodaXContextOverflowFacts } from './types-chunks/base.d-ZBOdjDUT.js';
+import { j as AgentDispatchContext, aN as LearningQuery, aM as LearningPage, ax as LearnedCapabilityRecord, aP as LearningSurfaceSnapshot, aI as LearningEvent, aO as LearningSubscribeOptions, s as AgentExecutorFactory, k as AgentDispatchPolicy, i as AgentCredentialBroker, b as AgentArtifactPolicy, ak as KodaXImageInputArtifact, an as KodaXInputArtifactSource, ao as KodaXVideoInputArtifact, bt as WorkflowProcessSnapshot, bm as WorkflowProcessEvent, K as AgentRegistrationService, ac as DispatchableAgentQuery, aa as DispatchableAgentListing, G as AgentPreflightInput, H as AgentPreflightResult } from './types-chunks/types.d-o7t9dds4.js';
+import { h as SkillHooks, i as SkillMetadata } from './types-chunks/types.d-Cb8RdrjU.js';
 import { a as McpServerConfig } from './types-chunks/config.d-CJy1WENT.js';
-import { t as McpServerStatus, u as McpServerToolList } from './types-chunks/manager.d-rtmywU9M.js';
-import { K as KodaXSessionHistoryHit } from './types-chunks/history-retrieval.d-CPN5PMBV.js';
-import { c as ManagedWorkflowSnapshot } from './types-chunks/run-manager.d-hm1XgEou.js';
-import { L as LoadedExtensionDiagnostic, v as ExtensionRuntimeDiagnostics } from './types-chunks/types.d-CtO8mR1s.js';
-import { V as ExecPolicyRuleInput, h as AutoModeDecisionDiagnostics, r as AutoModeStats } from './types-chunks/exec-policy.d-BPESl90L.js';
-import { Q as saveConfig, c as CommandInfo } from './types-chunks/utils.d-DcznBeQ3.js';
-import { n as FullTranscriptSessionData, ak as SessionTranscriptEntry, a5 as SessionConversationHistoryData, a9 as SessionConversationHistoryStatus, a7 as SessionConversationHistoryIssue, a6 as SessionConversationHistoryEntry, e as CompactSessionResult } from './types-chunks/public-api.d-amBop8Nk.js';
+import { t as McpServerStatus, u as McpServerToolList } from './types-chunks/manager.d-C_20XqCV.js';
+import { K as KodaXSessionHistoryHit } from './types-chunks/history-retrieval.d-JdFfkeF3.js';
+import { aP as KodaXSkillInvocationContext, aa as KodaXOptions, aB as KodaXShellExecutionContract, W as KodaXExecutionFailure, af as KodaXOutputSegmentProjection, ba as KodaXToolSandboxObservationUpdate, b8 as KodaXToolEventMeta, a3 as KodaXManagedTaskStatusEvent, V as KodaXEvents, at as KodaXResult, S as KodaXContextOptions, ai as KodaXOutputSegmentStarted, K as KodaXActivityEventMeta, bl as KodaXTurnStartedEvent, bi as KodaXTurnCompletedEvent, bk as KodaXTurnFailedEvent, bP as RuntimeContextBudgetSnapshot, al as KodaXPromptCacheDiagnosticEvent, bW as RuntimeToolExposurePlan, _ as KodaXLiveEventMeta, N as KodaXCompactionEndResult, bM as RuntimeCompactionSkippedEvent, Q as KodaXContextCompactionFinishedEvent, R as KodaXContextIdentity } from './types-chunks/bash-prefix-extractor.d-DvswAXKS.js';
+import { L as LoadedExtensionDiagnostic, v as ExtensionRuntimeDiagnostics } from './types-chunks/types.d-BJTN-RZr.js';
+import { W as ExecPolicyRuleInput, h as AutoModeDecisionDiagnostics, r as AutoModeStats, a4 as ManagedWorkflowSnapshot, al as WorkflowRunProcessMetadata } from './types-chunks/run-manager.d-C7Q71rin.js';
+import { Y as saveConfig, d as CommandInfo } from './types-chunks/utils.d-CWiMhFfu.js';
+import { n as FullTranscriptSessionData, ak as SessionTranscriptEntry, a5 as SessionConversationHistoryData, a9 as SessionConversationHistoryStatus, a7 as SessionConversationHistoryIssue, a6 as SessionConversationHistoryEntry, e as CompactSessionResult } from './types-chunks/public-api.d-Cq8ILMte.js';
+import './types-chunks/provider-request-observation.d-jL8T6wVO.js';
+import './types-chunks/provider-credential-context.d-BH2OaB1b.js';
+import './types-chunks/capability.d-DOF3r0fJ.js';
 import 'vscode-languageserver-protocol';
-import './types-chunks/cost-tracker.d-BWI4lFWn.js';
+import './types-chunks/controller.d-yyKajPTi.js';
 import 'node:child_process';
+import './types-chunks/cost-tracker.d-BeaenODW.js';
 import './types-chunks/types-DDJu9iWX.js';
-import './types-chunks/capability.d-Ch5Vos33.js';
-import './types-chunks/side-query.d-DHWG1JZg.js';
+import './types-chunks/side-query.d-DTrhVd_r.js';
+import './types-chunks/manifest.d-Bw2i-zQi.js';
 import 'readline';
 import 'child_process';
 
+interface RuntimeBuildIdentity {
+    readonly origin: string;
+    readonly fingerprint: string;
+}
+
+type RuntimePreparedReview = {
+    readonly kind: "prepared";
+    readonly invocation: {
+        readonly prompt: string;
+        readonly source: "prompt";
+        readonly displayName: string;
+    };
+} | {
+    readonly kind: "workflow";
+    readonly workflow: {
+        readonly request: string;
+        readonly displayName: string;
+        readonly builtinName: "scoped-review";
+        readonly builtinArgs: Record<string, unknown>;
+    };
+} | {
+    readonly kind: "empty";
+} | {
+    readonly kind: "error";
+    readonly message: string;
+};
+type RuntimePreparedAgentsLean = {
+    readonly kind: "prepared";
+    readonly invocation: {
+        readonly prompt: string;
+        readonly source: "prompt";
+        readonly displayName: string;
+    };
+} | {
+    readonly kind: "missing";
+};
+
+interface RuntimePreparedSkillInvocation {
+    readonly prompt: string;
+    readonly source: "skill";
+    readonly displayName: string;
+    readonly path: string;
+    readonly disableModelInvocation?: boolean;
+    readonly allowedTools?: string;
+    readonly context?: "fork";
+    readonly agent?: string;
+    readonly argumentHint?: string;
+    readonly model?: string;
+    readonly hooks?: SkillHooks;
+    readonly skillInvocation: Omit<KodaXSkillInvocationContext, "runtimePolicy"> & {
+        readonly runtimePolicy: {
+            readonly enforceAtRuntime: true;
+        };
+    };
+}
+type RuntimePreparedSkill = {
+    readonly kind: "prepared";
+    readonly invocation: RuntimePreparedSkillInvocation;
+} | {
+    readonly kind: "unknown";
+};
+/** FEATURE_298 T37 — discovered prompt-command preparation projection. */
+interface RuntimePreparedCommandInvocation {
+    readonly prompt: string;
+    readonly source: "prompt";
+    readonly displayName: string;
+    readonly path?: string;
+    readonly disableModelInvocation?: boolean;
+    readonly userInvocable?: boolean;
+    readonly allowedTools?: string;
+    readonly context?: "fork";
+    readonly agent?: string;
+    readonly argumentHint?: string;
+    readonly model?: string;
+    readonly hooks?: SkillHooks;
+    readonly frontmatter?: Record<string, unknown>;
+}
+type RuntimePreparedCommand = {
+    readonly kind: "prepared";
+    readonly invocation: RuntimePreparedCommandInvocation;
+}
+/** Registry-known non-prompt commands have no discovered prompt to prepare. */
+ | {
+    readonly kind: "local";
+} | {
+    readonly kind: "unknown";
+};
+interface RuntimeInvocationService {
+    prepareSkill(input: {
+        readonly projectRoot: string;
+        readonly name: string;
+        readonly argumentsText?: string;
+        readonly sessionId?: string;
+    }, options?: {
+        readonly signal?: AbortSignal;
+    }): Promise<RuntimePreparedSkill>;
+    prepareCommand(input: {
+        readonly projectRoot: string;
+        readonly name: string;
+    }): Promise<RuntimePreparedCommand>;
+    /** FEATURE_298 T37 — /review preparation (git capture + packets Host-side). */
+    prepareReview(input: {
+        readonly projectRoot: string;
+        readonly sessionId: string;
+        readonly args: readonly string[];
+    }): Promise<RuntimePreparedReview>;
+    /** FEATURE_298 T37 — /agents lean prompt preparation. */
+    prepareAgentsLean(input: {
+        readonly projectRoot: string;
+    }): Promise<RuntimePreparedAgentsLean>;
+}
+
+interface RuntimeProductCommandService {
+    readCommandPrompt: ClientCommandService['readPrompt'];
+    startReview(input: ClientReviewInput & {
+        readonly authorization?: RuntimeExecutionAuthorization;
+    }): Promise<ClientCommandResult>;
+    startAgentsLean(input: Omit<ClientReviewInput, 'args'> & {
+        readonly authorization?: RuntimeExecutionAuthorization;
+    }): Promise<ClientCommandResult>;
+    executeCommand(input: ClientCommandInput & {
+        readonly authorization?: RuntimeExecutionAuthorization;
+    }): Promise<ClientCommandResult>;
+}
+
 type RuntimePermissionHostPlatform = 'win32' | 'posix';
 interface RuntimePermissionMatcherBase {
     readonly version: 1;
@@ -164,12 +295,16 @@ interface RuntimeAgentBindingService {
     closeOwnerSession(ownerSessionId: string): Promise<void>;
 }
 
+interface RuntimeLearningSubscription extends AsyncIterableIterator<LearningEvent> {
+    /** Registration only; read a snapshot after awaiting ready. */
+    readonly ready: Promise<void>;
+}
 interface RuntimeLearningService {
     list(query?: LearningQuery): Promise<LearningPage>;
     get(nameOrSlugOrId: string): Promise<LearnedCapabilityRecord>;
     getSnapshot(): Promise<LearningSurfaceSnapshot>;
     events(afterRevision?: number): Promise<readonly LearningEvent[]>;
-    subscribe(options?: LearningSubscribeOptions): AsyncIterable<LearningEvent>;
+    subscribe(options?: LearningSubscribeOptions): RuntimeLearningSubscription;
     acknowledge(nameOrSlugOrId: string): Promise<void>;
     snooze(nameOrSlugOrId: string, until: string): Promise<void>;
     reject(nameOrSlugOrId: string): Promise<void>;
@@ -180,18 +315,55 @@ interface RuntimeLearningService {
     trust(nameOrSlugOrId: string): Promise<void>;
 }
 
+/**
+ * FEATURE_298 T36 — the Host-owned Memory management surface. Callers name a
+ * project root; the Host derives the Memory identity itself (the same
+ * derivation the run path uses) and owns the storage root, the control
+ * plane, index rebuilds, and open-target resolution. The UI keeps only
+ * presentation and the editor launch.
+ */
+interface RuntimeMemoryRebuildResult {
+    readonly status: "missing-dir" | "no-topics" | "rebuilt";
+    readonly memoryRoot: string;
+    readonly entrypointPath: string;
+    readonly entryCount: number;
+    readonly malformedFiles: readonly string[];
+    readonly warnings: readonly string[];
+}
+type RuntimeMemoryController = Pick<MemoryManagementController, "listInbox" | "showProposal" | "approveProposal" | "rejectProposal" | "listRefs" | "readRef" | "remember" | "forgetRef">;
+interface RuntimeMemoryPlane {
+    readonly controller: RuntimeMemoryController;
+    readonly memoryRoot: string;
+    readonly entrypointPath: string;
+    /** Pending episode reviews for the identities this project actually reads. */
+    listReviews(): Promise<readonly PendingEpisodeReviewSummary[]>;
+    /** Whether the Host's Memory reviewer Provider is usable. */
+    reviewerProviderConfigured(): boolean;
+    /** Rebuild the derived MEMORY.md index; topic files are never modified. */
+    rebuild(): Promise<RuntimeMemoryRebuildResult>;
+    /**
+     * Validate a `/memory open` target against the project memory root
+     * (mkdir of the untouched root is Host-owned; realpath containment blocks
+     * escapes). The editor launch itself stays in the UI.
+     */
+    ensureOpenTarget(targetPath: string): Promise<string>;
+}
+interface RuntimeMemoryService {
+    forProject(projectRoot: string): RuntimeMemoryPlane | Promise<RuntimeMemoryPlane>;
+}
+
 declare const KODAX_DAEMON_PROTOCOL = "kodax-runtime-daemon";
 declare const KODAX_DAEMON_PROTOCOL_VERSION = 1;
-type RuntimeDaemonMethod = 'initialize' | 'runtime.initialize' | 'ping' | 'runtime.identity' | 'runtime.status' | 'runtime.shutdown' | 'runtime.capabilities' | 'daemon.status' | 'daemon.stop' | 'daemon.logs' | 'daemon.preflight' | 'daemon.management.get' | 'daemon.rollbackToInline' | 'operation.get' | 'session.create' | 'session.load' | 'session.list' | 'session.status' | 'session.transcript' | 'session.transcript.page' | 'session.transcript.entryChunk' | 'session.transcript.search' | 'session.conversation' | 'session.conversation.page' | 'session.conversation.entryChunk' | 'session.observe' | 'session.diagnostics' | 'session.fork' | 'session.notice.append' | 'session.rewind' | 'session.identityAlias.confirm' | 'session.active_entry.set' | 'session.activeEntry.set' | 'session.compact' | 'session.archive' | 'session.unarchive' | 'session.cancel' | 'session.delete' | 'session.settings.get' | 'session.settings.getVersioned' | 'session.autoMode.getStats' | 'session.settings.update' | 'session.settings.updateVersioned' | 'run.start' | 'run.input.submit' | 'run.get' | 'run.list' | 'run.await' | 'run.abort' | 'run.model.set' | 'run.provider.set' | 'run.reasoning.set' | 'run.setModel' | 'run.setProvider' | 'run.setReasoning' | 'request.cancel' | 'request.ack' | 'event.subscribe' | 'event.unsubscribe' | 'event.replay' | 'permission.list' | 'permission.listPending' | 'permission.request' | 'permission.respond' | 'permission.grants.list' | 'permission.grants.revoke' | 'user_input.listPending' | 'user_input.respond' | 'user_input.dismiss' | 'credential.register' | 'credential.get' | 'credential.revoke' | 'credential.supply' | 'host_tool.register' | 'host_tool.get' | 'host_tool.invocation.get' | 'host_tool.revoke' | 'host_tool.complete' | 'workflow.list' | 'workflow.get' | 'workflow.subscribe' | 'workflow.unsubscribe' | 'workflow.pause' | 'workflow.resume' | 'workflow.stop' | 'learning.list' | 'learning.get' | 'learning.snapshot' | 'learning.events' | 'learning.acknowledge' | 'learning.snooze' | 'learning.reject' | 'learning.disable' | 'learning.rollback' | 'learning.promote' | 'learning.review' | 'learning.trust' | 'config.read' | 'config.effective' | 'config.patch' | 'config.reload' | 'model.list' | 'provider.list' | 'provider.custom.list' | 'provider.custom.upsert' | 'provider.custom.remove' | 'mcp.server.list' | 'mcp.server.get' | 'mcp.server.validate' | 'mcp.server.upsert' | 'mcp.server.delete' | 'mcp.server.remove' | 'mcp.server.reload' | 'mcp.tool.list' | 'extension.list' | 'extension.reload' | 'command.list' | 'command.resolve' | 'skill.list' | 'skill.describe' | 'skill.read' | 'artifact.create' | 'artifact.get' | 'artifact.delete' | 'agentRegistrations.list' | 'agentRegistrations.upsert' | 'agentRegistrations.setEnabled' | 'agentRegistrations.remove' | 'agents.listDispatchable' | 'agents.describe' | 'agents.preflight' | 'agents.tree' | 'agents.detail' | 'agents.spawn' | 'agents.send' | 'agents.followup' | 'agents.interrupt' | 'agents.output' | 'agents.events' | 'agents.wait' | 'context.budget.get' | 'tool.exposure.preview' | 'provider.cache.diagnostics.get';
-type RuntimeDaemonRetiredMethod = 'agentTasks.list' | 'agentTasks.start' | 'agentTasks.get' | 'agentTasks.events' | 'agentTasks.wait' | 'agentTasks.sendInput' | 'agentTasks.cancel' | 'agentTasks.reconcile';
+type RuntimeDaemonMethod = 'initialize' | 'runtime.initialize' | 'ping' | 'runtime.identity' | 'runtime.status' | 'runtime.shutdown' | 'client.exit.request' | 'client.exit.read' | 'client.exit.pending' | 'session.facts.read' | 'session.facts.requests' | 'session.facts.tools' | 'runtime.capabilities' | 'daemon.status' | 'daemon.stop' | 'daemon.logs' | 'daemon.preflight' | 'daemon.management.get' | 'session.create' | 'session.load' | 'session.list' | 'session.status' | 'session.transcript' | 'session.transcript.page' | 'session.transcript.entryChunk' | 'session.transcript.search' | 'session.conversation' | 'session.conversation.page' | 'session.conversation.entryChunk' | 'session.observe' | 'session.view.observe' | 'session.view.close' | 'session.view.item' | 'session.diagnostics' | 'session.fork' | 'session.recover' | 'session.notice.append' | 'session.goal.get' | 'session.lineage.get' | 'session.lineage.label' | 'session.goal.create' | 'session.goal.pause' | 'session.goal.resume' | 'session.goal.clear' | 'session.rewind' | 'session.identityAlias.confirm' | 'session.active_entry.set' | 'session.activeEntry.set' | 'session.compact' | 'session.archive' | 'session.unarchive' | 'session.cancel' | 'session.delete' | 'session.settings.get' | 'session.settings.getVersioned' | 'session.autoMode.getStats' | 'session.settings.update' | 'session.settings.updateVersioned' | 'input.submit' | 'input.withdraw' | 'run.start' | 'run.input.submit' | 'input.read' | 'run.get' | 'run.list' | 'run.await' | 'run.abort' | 'run.model.set' | 'run.provider.set' | 'run.reasoning.set' | 'run.setModel' | 'run.setProvider' | 'run.setReasoning' | 'request.cancel' | 'request.ack' | 'subscription.close' | 'permission.grants.list' | 'permission.grants.revoke' | 'interaction.list' | 'interaction.respond' | 'credential.register' | 'credential.get' | 'credential.revoke' | 'credential.supply' | 'host_tool.register' | 'host_tool.get' | 'host_tool.invocation.get' | 'host_tool.revoke' | 'host_tool.complete' | 'workflow.list' | 'workflow.get' | 'workflow.subscribe' | 'workflow.unsubscribe' | 'workflow.pause' | 'workflow.resume' | 'workflow.stop' | 'workflow.start' | 'learning.list' | 'learning.get' | 'learning.snapshot' | 'learning.events' | 'learning.subscribe' | 'learning.unsubscribe' | 'learning.acknowledge' | 'learning.snooze' | 'learning.reject' | 'learning.disable' | 'learning.rollback' | 'learning.promote' | 'learning.review' | 'learning.trust' | 'config.read' | 'config.effective' | 'config.patch' | 'config.reload' | 'model.list' | 'provider.list' | 'provider.reasoning.efforts' | 'provider.reasoning.probe' | 'provider.capabilities.forget' | 'provider.custom.list' | 'provider.custom.upsert' | 'provider.custom.remove' | 'mcp.server.list' | 'mcp.server.status' | 'mcp.server.get' | 'mcp.server.validate' | 'mcp.server.upsert' | 'mcp.server.delete' | 'mcp.server.remove' | 'mcp.server.reload' | 'mcp.tool.list' | 'extension.list' | 'extension.reload' | 'command.list' | 'command.resolve' | 'skill.list' | 'skill.describe' | 'skill.read' | 'memory.describe' | 'memory.listReviews' | 'memory.listInbox' | 'memory.showProposal' | 'memory.listRefs' | 'memory.readRef' | 'memory.remember' | 'memory.forgetRef' | 'memory.approveProposal' | 'memory.rejectProposal' | 'memory.rebuild' | 'memory.ensureOpenTarget' | 'invocations.prepareSkill' | 'invocations.prepareCommand' | 'invocations.readCommandPrompt' | 'invocations.executeCommand' | 'invocations.startReview' | 'invocations.startAgentsLean' | 'invocations.prepareReview' | 'invocations.prepareAgentsLean' | 'artifact.create' | 'artifact.get' | 'artifact.delete' | 'agentRegistrations.list' | 'agentRegistrations.upsert' | 'agentRegistrations.setEnabled' | 'agentRegistrations.remove' | 'agents.listDispatchable' | 'agents.describe' | 'agents.preflight' | 'agents.tree' | 'agents.detail' | 'agents.spawn' | 'agents.send' | 'agents.followup' | 'agents.interrupt' | 'agents.output' | 'agents.events' | 'agents.wait';
+type RuntimeDaemonRetiredMethod = 'permission.request' | 'permission.list' | 'permission.listPending' | 'permission.respond' | 'user_input.listPending' | 'user_input.respond' | 'user_input.dismiss' | 'agentTasks.list' | 'agentTasks.start' | 'agentTasks.get' | 'agentTasks.events' | 'agentTasks.wait' | 'agentTasks.sendInput' | 'agentTasks.cancel' | 'agentTasks.reconcile';
 type RuntimeDaemonWireMethod = RuntimeDaemonMethod | RuntimeDaemonRetiredMethod;
-type RuntimeDaemonNotificationMethod = 'event' | 'observation.invalidated' | 'credential.request' | 'host_tool.invoke' | 'runtime.warning';
+type RuntimeDaemonNotificationMethod = 'subscription.error' | 'session.view' | 'event' | 'observation.invalidated' | 'credential.request' | 'host_tool.invoke' | 'runtime.warning';
 interface RuntimeDaemonError {
     readonly code: RuntimeDaemonErrorCode;
     readonly message: string;
     readonly data?: unknown;
 }
-type RuntimeDaemonErrorCode = 'invalid_frame' | 'invalid_request' | 'invalid_params' | 'not_initialized' | 'method_not_found' | 'unauthorized' | 'permission_denied' | 'conflict' | 'not_found' | 'session_not_admitted' | 'cancelled' | 'overloaded' | 'client_upgrade_required' | 'operation_required' | 'operation_epoch_mismatch' | 'operation_id_reuse' | 'operation_interrupted' | 'operation_unknown' | 'control_history_untrusted' | 'resync_required' | 'read_timeout' | 'read_cancelled' | 'data_changed' | 'observation_invalidated' | 'runtime_changed' | 'data_corrupt' | 'version_incompatible' | 'credential_unavailable' | 'host_tool_unavailable' | 'host_tool_unknown' | 'internal_error';
+type RuntimeDaemonErrorCode = 'invalid_frame' | 'invalid_request' | 'invalid_params' | 'not_initialized' | 'method_not_found' | 'unauthorized' | 'permission_denied' | 'conflict' | 'not_found' | 'session_not_admitted' | 'cancelled' | 'overloaded' | 'client_upgrade_required' | 'resync_required' | 'read_timeout' | 'read_cancelled' | 'data_changed' | 'observation_invalidated' | 'runtime_changed' | 'data_corrupt' | 'version_incompatible' | 'credential_unavailable' | 'host_tool_unavailable' | 'host_tool_unknown' | 'internal_error';
 interface RuntimeDaemonFrameBase {
     readonly protocol: typeof KODAX_DAEMON_PROTOCOL;
     readonly version: typeof KODAX_DAEMON_PROTOCOL_VERSION;
@@ -201,11 +373,6 @@ interface RuntimeDaemonRequest<Method extends RuntimeDaemonWireMethod = RuntimeD
     readonly id: string;
     readonly method: Method;
     readonly params?: unknown;
-    readonly operation?: RuntimeDaemonOperationEnvelope;
-}
-interface RuntimeDaemonOperationEnvelope {
-    readonly operationId: string;
-    readonly journalEpoch: string;
 }
 interface RuntimeDaemonSuccessResponse extends RuntimeDaemonFrameBase {
     readonly kind: 'response';
@@ -226,14 +393,13 @@ type RuntimeDaemonFrame = RuntimeDaemonRequest<RuntimeDaemonWireMethod> | Runtim
 declare const RUNTIME_DAEMON_METHODS: readonly RuntimeDaemonMethod[];
 
 interface RuntimeDaemonClientTransport {
-    request(method: RuntimeDaemonMethod, params?: unknown, operation?: RuntimeDaemonOperationEnvelope, control?: RuntimeDaemonRequestControl): Promise<unknown>;
+    request(method: RuntimeDaemonMethod, params?: unknown, control?: RuntimeDaemonRequestControl): Promise<unknown>;
     subscribe(listener: (notification: RuntimeDaemonNotification) => void): RuntimeSubscription;
     subscribeLifecycle?(listener: (state: RuntimeDaemonTransportLifecycleState) => void): RuntimeSubscription;
     close?(): Promise<void> | void;
 }
 interface RuntimeDaemonRequestControl {
     readonly signal?: AbortSignal;
-    readonly onLateResult?: (value: unknown) => void;
 }
 /** Factual state for one daemon connection; disconnected does not imply daemon crash. */
 interface RuntimeDaemonTransportLifecycleState {
@@ -266,20 +432,6 @@ interface RuntimeDaemonShutdownOutcome {
     readonly completedAt: string;
     readonly error?: string;
 }
-interface RuntimeDaemonLockOwner {
-    readonly runtimeId: string;
-    readonly pid: number;
-    readonly createdAt: string;
-    readonly kind?: 'daemon' | 'inline';
-    /** OS-issued identity used to distinguish a live owner from PID reuse. */
-    readonly processStartIdentity?: string;
-    /** Present when the daemon was assigned to a Windows Job before user code could start. */
-    readonly processContainment?: 'windows-job';
-    /** Process outside the Job whose exit proves that the Job became empty. */
-    readonly supervisorPid?: number;
-    /** OS-issued identity that distinguishes the original supervisor from PID reuse. */
-    readonly supervisorProcessStartIdentity?: string;
-}
 
 interface RuntimeDaemonShutdownVerificationOwner {
     readonly runtimeId: string;
@@ -314,71 +466,6 @@ type RuntimeDaemonShutdownVerification = {
  */
 declare function waitForRuntimeDaemonShutdown(input: RuntimeDaemonShutdownVerificationInput): Promise<RuntimeDaemonShutdownVerification>;
 
-type RuntimeExitSettlementBlockReason = 'active_work' | 'cleanup_failed' | 'cleanup_unverified' | 'containment_active' | 'containment_unavailable' | 'owner_changed' | 'owner_identity_mismatch' | 'owner_unverified' | 'stop_not_accepted';
-type RuntimeExitSettlement = {
-    readonly status: 'clean' | 'recovered';
-    readonly repairs: readonly ('windows_process_tree' | 'windows_sandbox_acl')[];
-} | {
-    readonly status: 'blocked';
-    readonly reason: RuntimeExitSettlementBlockReason;
-    readonly nextAction: 'keep-open' | 'relaunch-space' | 'retry-automatically' | 'restart-system' | 'manual-recovery';
-    readonly message: string;
-};
-interface RuntimeExitSettlementOwnerPolicy {
-    readonly mode: 'daemon' | 'inline';
-    readonly revision: number;
-    readonly updatedAt: string;
-}
-interface RuntimeExitSettlementRuntime {
-    readonly identity: {
-        readonly runtimeId: string;
-        readonly mode: string;
-    };
-    readonly daemon: {
-        inspect(): Promise<{
-            readonly runtimeId: string;
-            readonly revision: number;
-            readonly ownerPolicy: RuntimeExitSettlementOwnerPolicy;
-            readonly owner: RuntimeDaemonLockOwner;
-            readonly preflight: {
-                readonly blockers: readonly string[];
-                readonly canStop: boolean;
-            };
-        }>;
-        stopForInline(input: {
-            readonly expectedRuntimeId: string;
-            readonly expectedRevision: number;
-            readonly expectedOwnerPolicyRevision: number;
-            readonly operation?: {
-                readonly operationId: string;
-            };
-        }): Promise<{
-            readonly accepted: true;
-        }>;
-    };
-    close(): Promise<void>;
-}
-interface RuntimeExitSettlementInput {
-    readonly configHome: string;
-    readonly profile?: string;
-    readonly runtime?: RuntimeExitSettlementRuntime;
-}
-
-interface RuntimeWorkerResourceLimits {
-    readonly maxOldGenerationSizeMb?: number;
-    readonly maxYoungGenerationSizeMb?: number;
-    readonly stackSizeMb?: number;
-}
-interface RuntimeWorkerOptions {
-    readonly resourceLimits?: RuntimeWorkerResourceLimits;
-    readonly shutdownTimeoutMs?: number;
-    /**
-     * Load `<homeDir>/.kodax/integrations/a2a.json` inside the Worker owner.
-     * Defaults to false so SDK hosts explicitly opt into ambient user integration.
-     */
-    readonly configuredA2A?: boolean;
-}
-
 interface RuntimeDaemonEndpoint {
     readonly kind: 'pipe' | 'unix';
     readonly path: string;
@@ -443,35 +530,51 @@ declare const RUNTIME_DAEMON_METHOD_SCHEMAS: {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
-    'runtime.capabilities': {
+    'client.exit.request': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
-    'daemon.status': {
+    'client.exit.read': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
-    'daemon.stop': {
+    'client.exit.pending': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
-    'daemon.logs': {
+    'session.facts.read': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
-    'daemon.preflight': {
+    'session.facts.requests': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
-    'daemon.management.get': {
+    'session.facts.tools': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'runtime.capabilities': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'daemon.status': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
-    'daemon.rollbackToInline': {
+    'daemon.stop': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
-    'operation.get': {
+    'daemon.logs': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'daemon.preflight': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'daemon.management.get': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
@@ -511,6 +614,18 @@ declare const RUNTIME_DAEMON_METHOD_SCHEMAS: {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
+    'session.view.observe': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'session.view.close': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'session.view.item': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
     'session.conversation': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
@@ -531,6 +646,38 @@ declare const RUNTIME_DAEMON_METHOD_SCHEMAS: {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
+    'session.recover': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'session.goal.get': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'session.lineage.get': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'session.lineage.label': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'session.goal.create': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'session.goal.pause': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'session.goal.resume': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'session.goal.clear': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
     'session.notice.append': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
@@ -587,6 +734,18 @@ declare const RUNTIME_DAEMON_METHOD_SCHEMAS: {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
+    'input.submit': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'input.withdraw': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'input.read': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
     'run.start': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
@@ -647,31 +806,7 @@ declare const RUNTIME_DAEMON_METHOD_SCHEMAS: {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
-    'event.subscribe': {
-        params: RuntimeDaemonJsonSchema;
-        result: RuntimeDaemonJsonSchema;
-    };
-    'event.unsubscribe': {
-        params: RuntimeDaemonJsonSchema;
-        result: RuntimeDaemonJsonSchema;
-    };
-    'event.replay': {
-        params: RuntimeDaemonJsonSchema;
-        result: RuntimeDaemonJsonSchema;
-    };
-    'permission.list': {
-        params: RuntimeDaemonJsonSchema;
-        result: RuntimeDaemonJsonSchema;
-    };
-    'permission.listPending': {
-        params: RuntimeDaemonJsonSchema;
-        result: RuntimeDaemonJsonSchema;
-    };
-    'permission.request': {
-        params: RuntimeDaemonJsonSchema;
-        result: RuntimeDaemonJsonSchema;
-    };
-    'permission.respond': {
+    'subscription.close': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
@@ -683,15 +818,11 @@ declare const RUNTIME_DAEMON_METHOD_SCHEMAS: {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
-    'user_input.listPending': {
-        params: RuntimeDaemonJsonSchema;
-        result: RuntimeDaemonJsonSchema;
-    };
-    'user_input.respond': {
+    'interaction.list': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
-    'user_input.dismiss': {
+    'interaction.respond': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
@@ -755,6 +886,14 @@ declare const RUNTIME_DAEMON_METHOD_SCHEMAS: {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
+    'learning.subscribe': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'learning.unsubscribe': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
     'workflow.pause': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
@@ -767,6 +906,12 @@ declare const RUNTIME_DAEMON_METHOD_SCHEMAS: {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
+    'workflow.start': {
+        params: RuntimeDaemonJsonSchema;
+        result: {
+            oneOf: RuntimeDaemonJsonSchema[];
+        };
+    };
     'learning.list': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
@@ -841,6 +986,21 @@ declare const RUNTIME_DAEMON_METHOD_SCHEMAS: {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
+    'provider.reasoning.efforts': {
+        params: RuntimeDaemonJsonSchema;
+        result: {
+            type: "array";
+            items: RuntimeDaemonJsonSchema;
+        };
+    };
+    'provider.reasoning.probe': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'provider.capabilities.forget': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
     'provider.custom.list': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
@@ -857,6 +1017,10 @@ declare const RUNTIME_DAEMON_METHOD_SCHEMAS: {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
+    'mcp.server.status': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
     'mcp.server.get': {
         params: RuntimeDaemonJsonSchema;
         result: {
@@ -917,6 +1081,88 @@ declare const RUNTIME_DAEMON_METHOD_SCHEMAS: {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
+    'memory.describe': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'memory.listReviews': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'memory.listInbox': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'memory.rebuild': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'memory.showProposal': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'memory.readRef': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'memory.listRefs': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'memory.remember': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'memory.forgetRef': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'memory.approveProposal': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'memory.rejectProposal': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'memory.ensureOpenTarget': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'invocations.prepareSkill': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'invocations.prepareCommand': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'invocations.readCommandPrompt': {
+        params: RuntimeDaemonJsonSchema;
+        result: {
+            oneOf: RuntimeDaemonJsonSchema[];
+        };
+    };
+    'invocations.startReview': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'invocations.startAgentsLean': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'invocations.executeCommand': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'invocations.prepareReview': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
+    'invocations.prepareAgentsLean': {
+        params: RuntimeDaemonJsonSchema;
+        result: RuntimeDaemonJsonSchema;
+    };
     'artifact.create': {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
@@ -993,26 +1239,10 @@ declare const RUNTIME_DAEMON_METHOD_SCHEMAS: {
         params: RuntimeDaemonJsonSchema;
         result: RuntimeDaemonJsonSchema;
     };
-    'context.budget.get': {
-        params: RuntimeDaemonJsonSchema;
-        result: {
-            oneOf: RuntimeDaemonJsonSchema[];
-        };
-    };
-    'tool.exposure.preview': {
-        params: RuntimeDaemonJsonSchema;
-        result: {
-            oneOf: RuntimeDaemonJsonSchema[];
-        };
-    };
-    'provider.cache.diagnostics.get': {
-        params: RuntimeDaemonJsonSchema;
-        result: {
-            oneOf: RuntimeDaemonJsonSchema[];
-        };
-    };
 };
 declare const RUNTIME_DAEMON_NOTIFICATION_SCHEMAS: {
+    'subscription.error': RuntimeDaemonJsonSchema;
+    'session.view': RuntimeDaemonJsonSchema;
     event: RuntimeDaemonJsonSchema;
     'observation.invalidated': RuntimeDaemonJsonSchema;
     'credential.request': RuntimeDaemonJsonSchema;
@@ -1023,14 +1253,6 @@ declare const RUNTIME_DAEMON_PROTOCOL_SCHEMA: RuntimeDaemonProtocolSchema;
 declare const RUNTIME_DAEMON_PROTOCOL_SCHEMA_JSON: string;
 declare function listRuntimeDaemonSchemaMethods(): readonly RuntimeDaemonMethod[];
 
-/**
- * SDK subpath entry - `@kodax-ai/kodax/runtime`.
- *
- * FEATURE_253 (v0.7.64): embedded runtime contract. This module composes the
- * existing coding run loop, REPL-backed session storage, and agent workflow
- * process manager without introducing a daemon or a fifth workspace package.
- */
-
 declare class RuntimeDaemonCapabilityUpgradeError extends Error {
     readonly preflight?: RuntimeDaemonPreflight | undefined;
     readonly code: "daemon_capability_upgrade_required";
@@ -1047,8 +1269,7 @@ declare class RuntimeAutoModeConfigurationError extends Error {
 }
 
 type KodaXRuntimeMode = "embedded" | "daemon";
-type KodaXRuntimeIsolation = "inline" | "worker" | "process";
-
+type KodaXRuntimeIsolation = "inline" | "process";
 interface RuntimeInlineOwnerHandle {
     readonly profile: string;
     readonly ownerId: string;
@@ -1087,10 +1308,6 @@ declare function acquireKodaXInlineOwner(input?: {
     readonly profile?: string;
     readonly enableRollback?: boolean;
 }): RuntimeInlineOwnerHandle;
-declare function getKodaXRuntimeOwnerPolicy(input?: {
-    readonly homeDir?: string;
-    readonly profile?: string;
-}): RuntimeOwnerPolicyState;
 declare function getKodaXRuntimeOwnerState(input?: {
     readonly homeDir?: string;
     readonly profile?: string;
@@ -1122,22 +1339,11 @@ interface RuntimeIdentity {
     readonly profile: string;
     readonly startedAt: string;
     readonly version: string;
+    /** Frozen installation identity for the local launcher; not a UI capability version. */
+    readonly build?: RuntimeBuildIdentity;
     readonly isolation?: KodaXRuntimeIsolation;
-    readonly workerThreadId?: number;
 }
-/** Client-supplied metadata; display fields are not authenticated identity. */
-interface RuntimeClientInfo {
-    readonly name: string;
-    /** Stable host-generated identity used only after daemon authentication. */
-    readonly instanceId?: string;
-    /** Stable host-generated secret; persist in OS keychain to resume client-owned leases. */
-    readonly instanceSecret?: string;
-    readonly title?: string;
-    readonly version?: string;
-    /** Display-only classification; never use it for authorization or process control. */
-    readonly clientType?: RuntimeDaemonClientType;
-}
-type RuntimeDaemonClientType = "app" | "cli" | "diagnostic" | "automation" | "unknown";
+
 /**
  * A read-only connection observation. Display metadata remains client-supplied
  * and must not authorize work ownership, destructive actions, or process control.
@@ -1161,7 +1367,6 @@ interface RuntimeClientCapabilities {
     readonly skillCatalog?: boolean;
     readonly artifactUpload?: boolean;
     readonly contextDiagnostics?: boolean;
-    readonly operationDeduplication?: boolean;
 }
 type RuntimeGrantedScope = "session:observe" | "session:write" | "run:control" | "interaction:respond" | "permission:respond" | "permission:grant-admin" | "integration:admin" | "workflow:control" | "learning:read" | "learning:control" | "artifact:write" | "agent:control" | "credential:register" | "host-tool:register" | "owner:admin" | "daemon:admin";
 interface RuntimeExternalAgentsOptions {
@@ -1176,10 +1381,6 @@ interface RuntimeExternalAgentsOptions {
 interface CreateKodaXRuntimeOptions {
     /** Runtime ownership form. Defaults to a caller-owned embedded Runtime. */
     readonly mode?: KodaXRuntimeMode;
-    /** Embedded-only execution location. Daemon mode selects host isolation internally. */
-    readonly isolation?: "inline" | "worker";
-    /** Requires `isolation: 'worker'`; rejected instead of being silently ignored. */
-    readonly worker?: RuntimeWorkerOptions;
     /** Base directory that owns `.kodax`, matching CLI `--home`; not the `.kodax` directory used by `KODAX_HOME`. */
     readonly homeDir?: string;
     readonly profile?: string;
@@ -1209,7 +1410,7 @@ interface CreateKodaXRuntimeOptions {
     readonly clientInfo?: RuntimeClientInfo;
     readonly capabilities?: RuntimeClientCapabilities;
     readonly requirements?: RuntimeCapabilityRequirements;
-    /** Inline host injection. Functions never cross daemon or Worker transport. */
+    /** Inline host injection. Functions never cross the daemon transport. */
     readonly externalAgents?: RuntimeExternalAgentsOptions;
     /** Trusted host-owned Exec Policy inputs. Detached daemon mode accepts them only for a new auto-started owner. */
     readonly execPolicy?: RuntimeExecPolicyOptions;
@@ -1229,7 +1430,7 @@ interface RuntimeAutoReviewOptions {
 }
 interface ConnectKodaXRuntimeOptions {
     readonly profile?: string;
-    /** Attach-only by default; set true to start or reuse the local profile daemon. */
+    /** @deprecated Connect is passive. Use ensureKodaXRuntime for startup; true is rejected here. */
     readonly autoStart?: boolean;
     readonly endpoint?: string | RuntimeDaemonEndpoint;
     readonly transport?: RuntimeDaemonClientTransport;
@@ -1243,6 +1444,8 @@ interface ConnectKodaXRuntimeOptions {
     /** AskUser deadline for a newly started daemon. Defaults to five minutes. */
     readonly userInputTimeoutMs?: number;
     readonly daemonStartupTimeoutMs?: number;
+    /** Local startup cancellation; never crosses the Host protocol. */
+    readonly daemonStartupSignal?: AbortSignal;
     readonly daemonConnectTimeoutMs?: number;
     /** Auto-started daemon idle-exit policy; see CreateKodaXRuntimeOptions. */
     readonly daemonOrphanExitMs?: number;
@@ -1253,6 +1456,7 @@ interface ConnectKodaXRuntimeOptions {
 }
 /** SDK facts that embedders can inspect before auto-starting a daemon. */
 declare const KODAX_RUNTIME_SDK_CAPABILITIES: Readonly<{
+    readonly productClient: 1;
     readonly actorSettlementConvergence: 2;
     readonly conversationHistory: 2;
     readonly crashOutcomeModel: 2;
@@ -1261,23 +1465,25 @@ declare const KODAX_RUNTIME_SDK_CAPABILITIES: Readonly<{
     readonly effectiveConfig: 1;
     readonly managedRunDurability: 1;
     readonly runtimeAutoModeGuardrail: 6;
-    readonly runtimeExitSettlement: 2;
     readonly sandboxRuntime: 11;
-    readonly sessionEventJournal: 1;
     readonly sharedSessionSettings: 2;
     readonly runtimeEventCoalescing: 1;
     readonly liveOutputSegments: 1;
 }>;
 interface RuntimeCapabilityRequirements {
-    /** Reject inline and shared daemon hosts; only a Worker-hosted Runtime satisfies this. */
-    readonly hardDispose?: boolean;
+    readonly productExitControl?: 1;
+    readonly productExecutionFacts?: 1;
+    readonly productActorAuthorization?: 1;
+    readonly productHistoryBoundaries?: 1;
+    readonly productExecutionAuthorization?: 1;
+    /** Unified product business operations and current-view lifecycle. */
+    readonly productClient?: 1;
     /** Reject hosts that do not advertise an installed external Agent executor plane. */
     readonly externalAgents?: boolean;
     /** Require owner/revision-fenced external Agent registration administration. */
     readonly externalAgentAdmin?: 1;
     /** Require a daemon that owns and hot-reconciles its A2A integration config. */
     readonly a2aConfigReconciler?: 1;
-    readonly operationDeduplication?: 1;
     readonly sessionObservation?: 1;
     readonly afterTurnInput?: 1;
     readonly learningCenter?: 1;
@@ -1310,8 +1516,7 @@ interface RuntimeCapabilityRequirements {
     readonly managedRunDurability?: 1;
     /** Require fail-closed root fencing plus automatic same-owner Actor settlement repair. */
     readonly actorSettlementConvergence?: 1 | 2;
-    /** Require Session-local sequences, epoch-bound cursors, and scoped event access. */
-    readonly sessionEventJournal?: 1;
+    /** Require Session-local event ordering and scoped event access. */
     readonly daemonManagement?: 1;
     /** Require a read-only inventory of initialized logical daemon clients. */
     readonly daemonClientInventory?: 1;
@@ -1333,46 +1538,10 @@ interface RuntimeCapabilityRequirements {
     /** Runtime owns Auto[LLM] review at the proven host boundary. */
     readonly runtimeAutoModeGuardrail?: 1 | 2 | 3 | 4 | 5 | 6;
 }
-type RuntimeOperationState = "accepted" | "dispatched" | "applied" | "rejected" | "interrupted" | "unknown";
-interface RuntimeOperationReceipt {
-    readonly operationId: string;
-    readonly journalEpoch: string;
-    readonly principalId: string;
-    readonly method: string;
-    readonly resourceId?: string;
-    readonly requestDigest: string;
-    readonly state: RuntimeOperationState;
-    /** Serialized mutation result when state is applied; exact retries return the same value. */
-    readonly result?: unknown;
-    readonly updatedAt: string;
-    readonly error?: {
-        readonly code: string;
-        readonly message: string;
-    };
-}
-interface RuntimeOperationService {
-    get(input: {
-        readonly operationId: string;
-        readonly journalEpoch: string;
-    }): Promise<RuntimeOperationReceipt>;
-}
-interface RuntimeDiagnosticFilter {
-    readonly sessionId?: string;
-    readonly runId?: string;
-    /** Defaults to root so child physical requests do not replace root diagnostics. */
-    readonly contextKind?: "root" | "child";
-    readonly agentId?: string;
-}
-interface RuntimeDiagnosticsService {
-    latestContextBudget(filter?: RuntimeDiagnosticFilter): Promise<RuntimeContextBudgetSnapshot | null>;
-    latestToolExposure(filter?: RuntimeDiagnosticFilter): Promise<RuntimeToolExposurePlan | null>;
-    latestProviderCacheDiagnostic(filter?: RuntimeDiagnosticFilter): Promise<KodaXPromptCacheDiagnosticEvent | null>;
-}
 interface RuntimeConnectionState {
     readonly state: "connected" | "disconnected";
     readonly connectionId: string;
     readonly runtimeEpoch: string;
-    readonly journalEpoch?: string;
     readonly code?: RuntimeDaemonTransportLifecycleState["code"];
     readonly reason?: string;
     readonly reconnectable: boolean;
@@ -1382,6 +1551,8 @@ interface RuntimeConnectionService {
     subscribe(listener: (state: RuntimeConnectionState) => void): RuntimeSubscription;
 }
 interface KodaXRuntime {
+    readonly statistics?: ClientStatisticsService;
+    readonly lifecycle?: ClientLifecycleService;
     readonly identity: RuntimeIdentity;
     /** Server-advertised facts. Authorization remains defined by grantedScopes. */
     readonly capabilities?: Readonly<Record<string, unknown>>;
@@ -1391,24 +1562,29 @@ interface KodaXRuntime {
     readonly events: RuntimeEventService;
     readonly permissions: RuntimePermissionService;
     readonly userInputs: RuntimeUserInputService;
+    /** Typed Interaction surface: precise request ids, first valid answer wins. */
+    readonly interactions: RuntimeInteractionService;
     readonly credentials: RuntimeCredentialService;
     readonly hostTools: RuntimeHostToolService;
-    readonly operations: RuntimeOperationService;
     readonly workflows: RuntimeWorkflowService;
     readonly learning: RuntimeLearningService;
+    readonly memory: RuntimeMemoryService;
+    /** FEATURE_298 T37 — trusted Skill/command preparation lives Host-side. */
+    readonly invocations: RuntimeInvocationService & RuntimeProductCommandService;
     readonly config: RuntimeConfigService;
     readonly catalog: RuntimeCatalogService;
     readonly mcp: RuntimeMcpService;
     readonly artifacts: RuntimeArtifactService;
     readonly status: RuntimeStatusService;
-    readonly diagnostics: RuntimeDiagnosticsService;
     /** Present on daemon facades; emits disconnects without waiting for polling. */
     readonly connection?: RuntimeConnectionService;
+    /** Present on daemon facades; the embedded Host's owner closes instead. */
+    readonly daemon?: RuntimeDaemonManagementService;
     readonly admin: RuntimeAdminService;
     readonly agents: RuntimeAgentService;
     /**
-     * Release this facade. Inline closes its private Runtime, Worker mode shuts
-     * down and terminates its Worker, and daemon mode only detaches this client.
+     * Release this facade. Inline closes its private Runtime and daemon mode
+     * only detaches this client.
      */
     close(): Promise<void>;
 }
@@ -1432,7 +1608,9 @@ interface RuntimeAgentService {
     events(sessionId: string, afterSequence?: number): Promise<readonly AgentEvent[]>;
     wait(sessionId: string, afterSequence?: number, timeoutMs?: number, options?: Readonly<Pick<RuntimeReadOptions, "signal">>): Promise<AgentEvent | undefined>;
 }
-type RuntimeConfigPatch = Partial<Pick<ReplRuntimeConfigPatch, RuntimeConfigPatchKey>>;
+type RuntimeConfigPatch = {
+    [K in RuntimeConfigPatchKey]?: ReplRuntimeConfigPatch[K] | null;
+};
 interface RuntimeConfigReloadResult {
     readonly ok: true;
     readonly config: unknown;
@@ -1533,7 +1711,15 @@ interface RuntimeExtensionListResult {
     readonly diagnostics?: ExtensionRuntimeDiagnostics;
 }
 interface RuntimeCatalogService {
-    providers(): Promise<unknown>;
+    reasoningEfforts(input: ClientModelSelection): Promise<readonly string[]>;
+    probeReasoningEfforts(input: ClientModelSelection & {
+        readonly efforts: readonly string[];
+    }): Promise<readonly ClientCapabilityProbeResult[]>;
+    forgetCapabilities(input?: {
+        readonly provider?: string;
+        readonly model?: string;
+    }): Promise<void>;
+    providers(): Promise<readonly ClientProviderInfo[]>;
     models(filter?: RuntimeModelListFilter): Promise<unknown>;
     commands(projectRoot?: string): Promise<readonly RuntimeCommandInfo[]>;
     resolveCommand(input: RuntimeCommandResolveInput): Promise<RuntimeCommandInfo | null>;
@@ -1561,6 +1747,7 @@ type RuntimeMcpValidateResult = {
     readonly error: string;
 };
 interface RuntimeMcpService {
+    status(): Promise<readonly McpServerStatus[]>;
     listServers(): Promise<Record<string, McpServerConfig>>;
     getServer(name: string): Promise<McpServerConfig | undefined>;
     validateServer(name: string, config: unknown): Promise<RuntimeMcpValidateResult>;
@@ -1596,25 +1783,9 @@ interface RuntimeArtifactService {
     get(artifactId: string): Promise<RuntimeArtifact | undefined>;
     delete(artifactId: string): Promise<boolean>;
 }
-interface RuntimeCreateSessionInput {
-    readonly sessionId?: string;
-    readonly title?: string;
-    readonly projectPath?: string;
-    readonly gitRoot?: string;
-    readonly surface?: string;
-    readonly profileId?: string;
-    readonly tag?: string;
-    readonly operation?: RuntimeOperationOptions;
-}
-interface RuntimeSession {
-    readonly id: string;
-    readonly title: string;
-    readonly gitRoot?: string;
-    readonly workspaceRoot?: string;
-    readonly surface?: string;
-    readonly profileId?: string;
-    readonly createdAt?: string;
+interface RuntimeCreateSessionInput extends ClientCreateSessionInput {
 }
+type RuntimeSession = ClientSession;
 /** Payload emitted when an executing run binds its provider session. */
 interface RuntimeRunSessionLoadedEventPayload {
     readonly provider: string;
@@ -1624,14 +1795,7 @@ interface RuntimeRunSessionLoadedEventPayload {
 }
 /** Durable compatibility event emitted when a run binds its provider session. */
 type RuntimeSessionLoadedEventPayload = RuntimeSession | RuntimeRunSessionLoadedEventPayload;
-interface RuntimeSessionSummary extends RuntimeSession {
-    /** Opaque continuation token accepted by RuntimeSessionFilter.cursor. */
-    readonly cursor?: string;
-    readonly msgCount: number;
-    readonly tag?: string;
-    readonly projectKey?: string;
-    readonly archived?: boolean;
-}
+type RuntimeSessionSummary = ClientSessionSummary;
 type RuntimeTranscript = FullTranscriptSessionData;
 interface RuntimeConversationHistory extends SessionConversationHistoryData {
     /** Content-derived identity shared by direct and paged conversation reads. */
@@ -1720,7 +1884,7 @@ interface RuntimeSessionDiagnostics {
     readonly runtimeMode: KodaXRuntimeMode;
     readonly sessionId: string;
     readonly observation: {
-        readonly cursor: RuntimeSessionCursor;
+        readonly seq: number;
         readonly transcriptRevision: string;
     };
     readonly run: RuntimeSessionDiagnosticRun;
@@ -1770,23 +1934,20 @@ interface RuntimeTranscriptSearchResult {
     readonly revision: string;
     readonly hits: readonly RuntimeTranscriptSearchHit[];
 }
-interface RuntimeSessionFilter {
-    readonly projectRoot?: string;
-    readonly scope?: "user" | "managed-task-worker" | "all";
-    readonly includeArchived?: boolean;
-    readonly limit?: number;
-    readonly before?: string;
-    readonly tag?: string;
-    readonly surface?: string;
-    readonly cursor?: string;
-}
+type RuntimeSessionFilter = ClientSessionFilter;
 interface RuntimeForkSessionInput {
+    readonly before?: boolean;
     readonly sessionId: string;
     readonly selector?: string;
     readonly newSessionId?: string;
     readonly title?: string;
     readonly historyBoundary?: RuntimeConversationHistoryBoundary;
 }
+interface RuntimeRecoverSessionInput {
+    readonly sessionId: string;
+    readonly title?: string;
+    readonly reason?: string;
+}
 interface RuntimeConversationHistoryBoundary {
     readonly entryId: string;
     readonly sourceRevision: string;
@@ -1797,6 +1958,9 @@ type RuntimeCompactionReasoning = boolean | {
     readonly effort: NonNullable<KodaXOptions["effort"]>;
 };
 interface RuntimeSessionSettings {
+    readonly planModeEffort?: KodaXOptions["effort"];
+    readonly repoIntelligenceMode?: NonNullable<KodaXOptions['context']>['repoIntelligenceMode'];
+    readonly repoIntelligenceTrace?: boolean;
     /** Shared manual/automatic summary policy; independent of the main turn's effort. */
     readonly compactionReasoning?: RuntimeCompactionReasoning;
     readonly provider?: string;
@@ -1813,8 +1977,13 @@ interface RuntimeSessionSettings {
     readonly compactionTriggerPercent?: number;
     /** Optional absolute auto-compaction threshold. Missing or zero is inactive. */
     readonly compactionTriggerTokens?: number;
+    /** Per-run iteration fuse; unset falls back to the engine default. */
+    readonly maxIter?: number;
 }
 interface RuntimeSessionSettingsPatch {
+    readonly planModeEffort?: KodaXOptions["effort"] | null;
+    readonly repoIntelligenceMode?: RuntimeSessionSettings['repoIntelligenceMode'] | null;
+    readonly repoIntelligenceTrace?: boolean | null;
     readonly compactionReasoning?: RuntimeCompactionReasoning | null;
     readonly provider?: string | null;
     readonly model?: string | null;
@@ -1825,15 +1994,10 @@ interface RuntimeSessionSettingsPatch {
     readonly executionCwd?: string | null;
     readonly shellExecution?: KodaXShellExecutionContract | null;
     readonly agentMode?: KodaXOptions["agentMode"] | null;
-    /** @deprecated Accepted as inert migration input. Auto always uses the LLM reviewer. */
-    readonly autoModeEngine?: "llm" | "rules" | null;
     readonly autoModeClassifierModel?: string | null;
-    /** @deprecated Accepted as inert migration input. Reviewer deadlines are fixed. */
-    readonly autoModeTimeoutMs?: number | null;
-    /** @deprecated Accepted as inert migration input. Sandbox-first routing has no speculative window. */
-    readonly autoModeSpeculativeWindowMs?: number | null;
     readonly compactionTriggerPercent?: number | null;
     readonly compactionTriggerTokens?: number | null;
+    readonly maxIter?: number | null;
 }
 interface RuntimeAppendNoticeInput {
     readonly sessionId: string;
@@ -1843,6 +2007,7 @@ interface RuntimeAppendNoticeInput {
 interface RuntimeRewindSessionInput {
     readonly sessionId: string;
     readonly selector?: string;
+    readonly expectedHead?: string | null;
     readonly historyBoundary?: RuntimeConversationHistoryBoundary;
 }
 /** Host-confirmed alias backed by an existing interrupt delivery event. */
@@ -1863,6 +2028,8 @@ interface RuntimeConfirmIdentityAliasInput {
 interface RuntimeSetActiveEntryInput {
     readonly sessionId: string;
     readonly entryId: string;
+    /** FEATURE_298 T34 — summarize the abandoned branch before switching (REPL /branch semantics). */
+    readonly summarizeCurrentBranch?: boolean;
 }
 interface RuntimeCompactSessionInput {
     readonly sessionId: string;
@@ -1876,12 +2043,15 @@ interface RuntimeCompactSessionInput {
     readonly triggerTokens?: number;
     /** Daemon-issued credential lease used only by this compaction operation. */
     readonly credential?: RuntimeCredentialBinding;
-    /** Stable mutation identity for safe retry after a lost daemon response. */
-    readonly operation?: RuntimeOperationOptions;
 }
+/**
+ * FEATURE_298 T30 — agent mutations carry their own domain identity
+ * (followup expectedRevision, actor turn semantics); the generic operation
+ * envelope is deliberately not part of this contract.
+ */
 interface RuntimeAgentOperationOptions {
     readonly credential?: RuntimeCredentialBinding;
-    readonly operation?: RuntimeOperationOptions;
+    readonly authorization?: RuntimeExecutionAuthorization;
 }
 interface RuntimeAgentFollowupOptions extends RuntimeAgentOperationOptions {
     readonly expectedRevision?: number;
@@ -1893,7 +2063,7 @@ interface RuntimeVersionedValue<T> {
     readonly revision: number;
     readonly value: T;
 }
-interface RuntimeVersionedUpdateOptions extends RuntimeOperationOptions {
+interface RuntimeVersionedUpdateOptions {
     readonly expectedRevision: number;
 }
 interface RuntimeActiveToolProjection {
@@ -1930,7 +2100,8 @@ interface RuntimeSessionLiveProjection {
 }
 interface RuntimeSessionObservationSnapshot {
     readonly runtimeId: string;
-    readonly cursor: RuntimeSessionCursor;
+    /** Live event ordering high-water at capture; events with seq <= this are already reflected in the snapshot. */
+    readonly seq: number;
     /** Content-derived token for the transcript captured at this observation boundary. */
     readonly transcriptRevision: string;
     readonly session: RuntimeSession;
@@ -1951,6 +2122,26 @@ interface RuntimeObservationInvalidation {
     readonly message: string;
 }
 interface RuntimeSessionService {
+    observeView(sessionId: string, listener: (view: ClientSessionView) => void, options?: ClientObserveOptions): Promise<ClientObservation>;
+    readViewItem(sessionId: string, itemId: string, options?: ClientItemReadOptions): Promise<ClientItemContent | null>;
+    readHistory(sessionId: string, options?: ClientHistoryReadOptions): Promise<ClientHistoryPage>;
+    readHistoryEntry(sessionId: string, itemId: string, options?: ClientItemReadOptions): Promise<ClientItemContent | null>;
+    searchHistory(sessionId: string, input: ClientHistorySearchInput): Promise<ClientHistorySearchResult>;
+    readGoal(sessionId: string): Promise<KodaXGoalState | null>;
+    createGoal(input: {
+        readonly sessionId: string;
+        readonly objective: string;
+        readonly tokenBudget?: number;
+    }): Promise<KodaXGoalState>;
+    pauseGoal(sessionId: string): Promise<KodaXGoalState>;
+    resumeGoal(sessionId: string): Promise<KodaXGoalState>;
+    clearGoal(sessionId: string): Promise<void>;
+    readLineage(sessionId: string): Promise<ClientLineageSummary | null>;
+    labelEntry(input: {
+        readonly sessionId: string;
+        readonly selector: string;
+        readonly label?: string;
+    }): Promise<ClientLineageSummary>;
     cancel(input: RuntimeSessionCancelInput): Promise<RuntimeSessionCancelReceipt>;
     create(input?: RuntimeCreateSessionInput): Promise<RuntimeSession>;
     load(sessionId: string, options?: RuntimeReadOptions): Promise<RuntimeSession>;
@@ -1970,6 +2161,7 @@ interface RuntimeSessionService {
      */
     diagnostics(input: RuntimeSessionDiagnosticsInput): Promise<RuntimeSessionDiagnostics>;
     fork(input: RuntimeForkSessionInput): Promise<RuntimeSession | null>;
+    recover(input: RuntimeRecoverSessionInput): Promise<RuntimeSession>;
     getSettings(sessionId: string): Promise<RuntimeSessionSettings>;
     getSettingsVersioned(sessionId: string): Promise<RuntimeVersionedValue<RuntimeSessionSettings>>;
     /** Runtime-owned Auto classifier state used by diagnostics and status UI. */
@@ -2031,7 +2223,10 @@ interface RuntimeArtifactRefInput {
 type RuntimeInput = RuntimeTextInput | RuntimeImageInput | RuntimeFileInput | RuntimeVideoInput | RuntimeArtifactRefInput;
 type RuntimePermissionBroker = "runtime" | "client";
 interface RuntimeStartRunInput {
+    readonly authorization?: RuntimeExecutionAuthorization;
     readonly sessionId: string;
+    /** Stable product identity for an explicit tool invocation. */
+    readonly inputId?: string;
     readonly prompt?: string;
     readonly input?: RuntimeInput | readonly RuntimeInput[];
     readonly mode?: RuntimeRunMode;
@@ -2045,7 +2240,6 @@ interface RuntimeStartRunInput {
     readonly hostTools?: {
         readonly leaseId: string;
     };
-    readonly operation?: RuntimeOperationOptions;
 }
 interface RuntimeSubmitInput {
     readonly sessionId: string;
@@ -2057,7 +2251,6 @@ interface RuntimeSubmitInput {
     readonly hostTools?: {
         readonly leaseId: string;
     };
-    readonly operation?: RuntimeOperationOptions;
 }
 type RuntimeSubmitInputResult = {
     readonly accepted: true;
@@ -2082,11 +2275,6 @@ type RuntimeSubmitInputResult = {
     readonly afterRunId: string;
     readonly reason: "stale_run" | "unsupported_capability" | "interrupt_window_closed";
 };
-interface RuntimeOperationOptions {
-    readonly operationId?: string;
-    readonly journalEpoch?: string;
-    readonly expectedRevision?: number;
-}
 type RuntimeKodaXOptions = Omit<KodaXOptions, "provider" | "session" | "events"> & {
     readonly provider?: string;
     readonly session?: KodaXOptions["session"];
@@ -2107,6 +2295,10 @@ type KodaXDaemonRuntime = Omit<KodaXRuntime, "runs"> & {
     readonly daemon: RuntimeDaemonManagementService;
 };
 interface RuntimeRunStatus {
+    readonly productInput?: {
+        readonly inputId: string;
+        readonly digest: string;
+    };
     readonly runId: string;
     readonly sessionId: string;
     readonly turnId?: string;
@@ -2130,7 +2322,6 @@ interface RuntimeRunStatus {
         readonly principalId: string;
         readonly clientName?: string;
         readonly clientVersion?: string;
-        readonly operationId?: string;
     };
     readonly model?: string;
     readonly reasoning?: KodaXReasoningMode;
@@ -2208,7 +2399,7 @@ interface RuntimeSessionCancelReceipt extends RuntimeSessionCancelInput {
     readonly frontier: number;
     readonly receipts: readonly RuntimeRunStopReceipt[];
 }
-type RuntimeTerminalCode = "completed" | "run_failed" | "blocked" | "cancelled" | "interrupted" | "runtime_restarted" | "daemon_crashed" | "credential_unavailable" | "host_not_dispatched" | "host_outcome_unknown" | "actor_settlement_not_persisted" | "control_history_untrusted";
+type RuntimeTerminalCode = "completed" | "run_failed" | "blocked" | "cancelled" | "interrupted" | "runtime_restarted" | "daemon_crashed" | "credential_unavailable" | "host_not_dispatched" | "host_outcome_unknown" | "actor_settlement_not_persisted";
 /** Credential-safe failure category; raw provider error text is never required. */
 type RuntimeRunFailureKind = "auth" | "rate_limit" | "network" | "not_found" | "unknown_provider" | "request" | "upstream" | "cancelled" | "provider_aborted" | "invalid_response" | "runtime_cleanup" | "local_execution" | "context_capacity" | "provider";
 type RuntimeFailureStage = "catalog" | "credential" | "request_build" | "transport" | "response_stream" | "runtime_control" | "local_execution" | "runtime_settlement";
@@ -2269,6 +2460,11 @@ interface RuntimeRunFilter {
     readonly phase?: RuntimeRunPhase | readonly RuntimeRunPhase[];
 }
 interface RuntimeRunService {
+    acceptInput(input: ClientSubmitInput & {
+        readonly authorization?: RuntimeExecutionAuthorization;
+    }): Promise<ClientInputAcceptance>;
+    getInput(sessionId: string, inputId: string): Promise<ClientInputAcceptance | null>;
+    withdrawInput(sessionId: string, inputId: string): Promise<ClientSubmitInput>;
     start(input: RuntimeStartRunInput): Promise<RuntimeRunHandle>;
     submitInput(input: RuntimeSubmitInput): Promise<RuntimeSubmitInputResult>;
     await(runId: string): Promise<RuntimeRunResult>;
@@ -2287,7 +2483,7 @@ interface RuntimeRunService {
 type RuntimeEventType = "session.created" | "session.loaded" | "session.settings.updated" | "session.notice.appended" | "session.rewound" | "session.active_entry.updated" | "session.compacted" | "run.queued" | "run.started" | "run.updated" | "run.progress" | "run.input.queued" | "run.input.delivered" | "turn.started" | "turn.completed" | "turn.failed" | "output.segment.started" | "assistant.delta" | "thinking.delta" | "thinking.finished" | "tool.started" | "tool.progress" | "tool.sandbox" | "tool.finished" | "user_input.requested" | "user_input.resolved" | "permission.requested" | "permission.resolved" | "permission.grant.changed" | "workflow.started" | "workflow.updated" | "workflow.finished" | "context.compaction.started" | "context.compaction.stats" | "context.compaction.finished" | "context.compaction.messages" | "context.compaction.ended" | "context.compaction.skipped" | "context.budget.snapshot" | "tool.exposure.planned" | "child_activity.finished" | "provider.retry" | "provider.recovery" | "provider.cache.diagnostics" | "repo_intelligence.trace" | "todo.updated" | "todo.warning" | "sidecar.message" | "run.completed" | "run.failed" | "run.cancelled" | "run.interrupted" | "artifact.created" | "config.effective" | "runtime.warning";
 interface RuntimeTextDeltaEventPayload {
     readonly text: string;
-    /** Absent only in historical journals written before liveOutputSegments:1. */
+    /** Absent only in events emitted before liveOutputSegments:1. */
     readonly providerRequestId?: string;
     readonly meta?: KodaXActivityEventMeta;
 }
@@ -2480,9 +2676,8 @@ type RuntimeEventPayloadMap = Omit<RuntimeEventPayloadDefaults, "session.created
 };
 interface RuntimeEventEnvelope<TPayload = unknown> {
     readonly id: string;
+    /** Live in-process ordering hint within one Session; not comparable across restarts or Sessions. */
     readonly seq: number;
-    /** Session-bound replay position. Numeric seq values are not comparable across Sessions. */
-    readonly cursor: RuntimeSessionCursor;
     readonly time: string;
     readonly sessionId: string;
     readonly runId: string;
@@ -2490,11 +2685,6 @@ interface RuntimeEventEnvelope<TPayload = unknown> {
     readonly type: RuntimeEventType;
     readonly payload: TPayload;
 }
-interface RuntimeSessionCursor {
-    readonly sessionId: string;
-    readonly journalEpoch: string;
-    readonly seq: number;
-}
 type RuntimeTypedEvent<TType extends RuntimeEventType = RuntimeEventType> = {
     readonly [K in TType]: RuntimeEventEnvelope<RuntimeEventPayloadMap[K]> & {
         readonly type: K;
@@ -2512,17 +2702,9 @@ type RuntimeEventParseResult = {
 interface RuntimeEventFilterFields {
     readonly type?: RuntimeEventType | readonly RuntimeEventType[];
 }
-type RuntimeEventFilter = RuntimeEventFilterFields & ({
+type RuntimeEventFilter = RuntimeEventFilterFields & {
     readonly sessionId: string;
     readonly runId?: string;
-} | {
-    readonly sessionId?: string;
-    readonly runId: string;
-});
-type RuntimeEventReplayFilter = RuntimeEventFilter & {
-    readonly after?: RuntimeSessionCursor;
-    /** Positive safe-integer result bound. */
-    readonly limit?: number;
 };
 type RuntimeEventListener = (event: RuntimeEvent) => void;
 type RuntimeTypedEventListener = (event: RuntimeTypedEvent) => void;
@@ -2533,7 +2715,6 @@ interface RuntimeSubscription {
 }
 interface RuntimeEventService {
     subscribe(filter: RuntimeEventFilter, listener: RuntimeEventListener): RuntimeSubscription;
-    replay(filter: RuntimeEventReplayFilter): Promise<readonly RuntimeEvent[]>;
 }
 type RuntimePermissionRisk = "low" | "medium" | "high";
 interface RuntimePermissionScope {
@@ -2549,6 +2730,8 @@ interface RuntimePermissionGrantSuggestion {
     readonly label: string;
 }
 interface RuntimePermissionRequest {
+    /** Full finalized plan when the pending operation is exit_plan_mode. */
+    readonly plan?: string;
     readonly id: string;
     readonly sessionId: string;
     readonly runId: string;
@@ -2567,6 +2750,7 @@ interface RuntimePermissionRequest {
     readonly expiresAt?: string;
 }
 interface RuntimePermissionRequestInput {
+    readonly plan?: string;
     readonly sessionId: string;
     readonly runId: string;
     readonly turnId?: string;
@@ -2678,125 +2862,78 @@ interface RuntimeUserInputService {
         readonly runId?: string;
     }): Promise<RuntimeUserInputResolution>;
 }
-interface RuntimeCredentialRequest {
-    readonly leaseId: string;
-    readonly provider: string;
-    readonly sessionId: string;
-    readonly runId: string;
-}
-type RuntimeCredentialBroker = (request: RuntimeCredentialRequest) => Promise<string | undefined>;
-/** Public binding only carries authority; credential material never crosses this input. */
-type RuntimeCredentialBinding = {
-    readonly leaseId: string;
-    /** v1 compatibility: one credential is acquired for the complete Run. */
-    readonly provider: string;
-} | {
-    readonly leaseId: string;
-    readonly mode: "scoped";
-    /** Operation-local narrowing of the registered v2 lease allowlist. */
-    readonly providers: readonly string[];
-};
-type RuntimeScopedCredentialTarget = {
-    readonly kind: "run";
-    readonly runId: string;
-    readonly operationId?: string;
-} | {
-    readonly kind: "operation";
-    readonly operationId: string;
-    readonly operation: "session.compact";
-} | {
-    readonly kind: "actor_turn";
-    readonly actorPath: string;
-    readonly turnId: string;
-    readonly parentRunId?: string;
-} | {
-    readonly kind: "workflow";
-    readonly workflowRunId: string;
-    readonly parentRunId?: string;
-};
-type RuntimeScopedCredentialPurpose = "primary" | "fallback" | "classifier" | "sidecar" | "compaction" | "workflow" | "utility";
-interface RuntimeScopedCredentialRequest {
-    readonly requestId: string;
-    readonly leaseId: string;
-    readonly provider: string;
-    readonly sessionId: string;
-    readonly target: RuntimeScopedCredentialTarget;
-    readonly purpose: RuntimeScopedCredentialPurpose;
-}
-type RuntimeScopedCredentialBroker = (request: RuntimeScopedCredentialRequest) => Promise<string | undefined>;
-interface RuntimeCredentialLease {
-    readonly id: string;
-    readonly providers: readonly string[];
-    readonly expiresAt?: string;
-    /** Absent on legacy v1 daemons. */
-    readonly brokerVersion?: 1 | 2;
-}
-interface RuntimeCredentialService {
-    register(input: {
-        readonly providers: readonly string[];
-        readonly expiresAt?: string;
-    }, broker: RuntimeCredentialBroker): Promise<RuntimeCredentialLease>;
-    resume(leaseId: string, broker: RuntimeCredentialBroker): Promise<RuntimeCredentialLease>;
-    registerScoped(input: {
-        readonly providers: readonly string[];
-        readonly expiresAt?: string;
-    }, broker: RuntimeScopedCredentialBroker): Promise<RuntimeCredentialLease>;
-    resumeScoped(leaseId: string, broker: RuntimeScopedCredentialBroker): Promise<RuntimeCredentialLease>;
-    revoke(leaseId: string): Promise<boolean>;
-}
-interface RuntimeHostToolDescriptor {
-    readonly name: string;
-    readonly description: string;
-    readonly inputSchema: Readonly<Record<string, unknown>>;
-    readonly sideEffect: "none" | "idempotent" | "non_idempotent";
-}
-interface RuntimeHostToolInvocation {
-    readonly invocationId: string;
-    readonly leaseId: string;
-    readonly toolName: string;
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly input: Readonly<Record<string, unknown>>;
-}
-interface RuntimeHostToolResult {
-    readonly content: string;
-    readonly structuredContent?: unknown;
-}
-type RuntimeHostToolHandler = (invocation: RuntimeHostToolInvocation) => Promise<RuntimeHostToolResult>;
-interface RuntimeHostToolLease {
-    readonly id: string;
-    readonly tools: readonly RuntimeHostToolDescriptor[];
-}
-interface RuntimeHostToolInvocationStatus {
-    readonly invocationId: string;
-    readonly leaseId: string;
-    readonly toolName: string;
-    readonly sessionId: string;
-    readonly runId: string;
-    readonly state: "prepared" | "dispatched" | "completed" | "unknown" | "not_dispatched";
-    readonly updatedAt: string;
-}
-interface RuntimeHostToolService {
-    register(tools: readonly RuntimeHostToolDescriptor[], handlers: Readonly<Record<string, RuntimeHostToolHandler>>): Promise<RuntimeHostToolLease>;
-    resume(leaseId: string, handlers: Readonly<Record<string, RuntimeHostToolHandler>>): Promise<RuntimeHostToolLease>;
-    getInvocation(invocationId: string): Promise<RuntimeHostToolInvocationStatus | undefined>;
-    revoke(leaseId: string): Promise<boolean>;
+/**
+ * Typed Interaction surface over the user-input and permission registries
+ * (FEATURE_298 T05). The client path works with precise request ids only; no
+ * interaction revision or lease is required.
+ */
+interface RuntimeInteractionService {
+    list(filter?: {
+        readonly sessionId?: string;
+    }): Promise<readonly ClientInteraction[]>;
+    respond(requestId: string, response: ClientInteractionResponse): Promise<ClientInteractionResult>;
 }
 interface RuntimeWorkflowFilter {
     readonly runId?: string;
     readonly activeOnly?: boolean;
     readonly limit?: number;
 }
-type RuntimeWorkflowSummary = ManagedWorkflowSnapshot;
+type RuntimeWorkflowSummary = ManagedWorkflowSnapshot & {
+    /** Host process facts; absent on older daemons. */
+    readonly updatedAt?: string;
+    readonly displayName?: string;
+};
 type RuntimeWorkflowSnapshot = WorkflowProcessSnapshot;
 type RuntimeWorkflowListener = (event: WorkflowProcessEvent) => void;
+/**
+ * FEATURE_298 T22 — serializable start sources. `inline`/`request` travel to
+ * the Host verbatim and are validated Host-side (the same gate the run_workflow
+ * tool uses); `name` resolves inside the Host against built-ins and the saved
+ * workflow directories. Clients never send a prepared module.
+ */
+type RuntimeWorkflowStartSource = {
+    readonly kind: "inline";
+    readonly manifest: unknown;
+    readonly source: string;
+} | {
+    readonly kind: "request";
+    readonly request: string;
+} | {
+    readonly kind: "name";
+    readonly name: string;
+};
+interface RuntimeWorkflowStartInput {
+    readonly authorization?: RuntimeExecutionAuthorization;
+    /** Select product defaults; omitted low-level calls retain their existing defaults. */
+    readonly settingsDefaults?: 'product';
+    readonly sessionId?: string;
+    readonly credential?: RuntimeCredentialBinding;
+    readonly projectRoot: string;
+    readonly source: RuntimeWorkflowStartSource;
+    readonly args?: unknown;
+    readonly provider?: string;
+    readonly model?: string;
+    /** FEATURE_298 T22 — serializable run lineage the Host attaches verbatim. */
+    readonly metadata?: WorkflowRunProcessMetadata;
+}
+type RuntimeWorkflowStartResult = {
+    readonly kind: "declined";
+    readonly reason: string;
+} | {
+    readonly kind: "started";
+    readonly runId: string;
+};
 interface RuntimeWorkflowService {
     list(filter?: RuntimeWorkflowFilter): Promise<readonly RuntimeWorkflowSummary[]>;
     get(runId: string): Promise<RuntimeWorkflowSnapshot | undefined>;
-    subscribe(filter: RuntimeWorkflowFilter, listener: RuntimeWorkflowListener): RuntimeSubscription;
+    subscribe(filter: RuntimeWorkflowFilter, listener: RuntimeWorkflowListener, onError?: (error: unknown) => void): RuntimeSubscription;
     pause(runId: string): Promise<boolean>;
     resume(runId: string): Promise<boolean>;
-    stop(runId: string): Promise<boolean>;
+    stop(runId: string, options?: {
+        readonly sessionId: string;
+    }): Promise<boolean>;
+    /** FEATURE_298 T22 — start a workflow on the Host manager. */
+    start(input: RuntimeWorkflowStartInput): Promise<RuntimeWorkflowStartResult>;
 }
 interface RuntimeStatusSnapshot {
     readonly runtimeId: string;
@@ -2858,23 +2995,11 @@ interface RuntimeDaemonManagementState {
     /** Optional integrations never make the core daemon unavailable. */
     readonly integrations?: RuntimeIntegrationHealth;
 }
-interface RuntimeDaemonRollbackInput {
-    readonly expectedRuntimeId: string;
-    readonly expectedRevision: number;
-    readonly expectedOwnerPolicyRevision: number;
-    readonly operation?: RuntimeOperationOptions;
-}
-interface RuntimeDaemonRollbackResult {
-    readonly accepted: true;
-    readonly runtimeId: string;
-    readonly revision: number;
-    readonly ownerPolicy: RuntimeOwnerPolicyState & {
-        readonly mode: "inline";
-    };
-}
 interface RuntimeDaemonManagementService {
+    shutdown(): Promise<{
+        readonly accepted: true;
+    }>;
     inspect(): Promise<RuntimeDaemonManagementState>;
-    stopForInline(input: RuntimeDaemonRollbackInput): Promise<RuntimeDaemonRollbackResult>;
 }
 interface RuntimeStatusService {
     snapshot(): Promise<RuntimeStatusSnapshot>;
@@ -2885,16 +3010,19 @@ interface RuntimeStatusService {
  * ownership of, resuming, or otherwise mutating the Session.
  */
 declare function captureRuntimeSessionDiagnostics(runtime: KodaXRuntime, input: RuntimeSessionDiagnosticsInput): Promise<RuntimeSessionDiagnostics>;
+/**
+ * Durable Stop reason marking a user redirect: the old execution is cancelled
+ * but the explicitly requested follow-up input keeps its queue continuation.
+ * Distinct from a plain stop, which never auto-continues queued work.
+ */
+declare const RUNTIME_REDIRECT_STOP_REASON = "runtime run redirected by user";
 declare function createKodaXRuntime(options: CreateKodaXRuntimeOptions & {
     readonly mode: "daemon";
 }): Promise<KodaXDaemonRuntime>;
 declare function createKodaXRuntime(options?: CreateKodaXRuntimeOptions): Promise<KodaXRuntime>;
 declare function connectKodaXRuntime(options?: ConnectKodaXRuntimeOptions): Promise<KodaXDaemonRuntime>;
-/**
- * Resume a durable exit ticket. Only this exact prepared-ticket path may attach
- * a management-only client that does not satisfy the normal execution contract.
- */
-declare function settleKodaXRuntimeExit(input: RuntimeExitSettlementInput): Promise<RuntimeExitSettlement>;
+/** Starts the product Host when absent and updates an idle older Host before attaching. */
+declare function ensureKodaXRuntime(options?: Omit<ConnectKodaXRuntimeOptions, "autoStart" | "transport">): Promise<KodaXDaemonRuntime>;
 
-export { KODAX_DAEMON_PROTOCOL, KODAX_DAEMON_PROTOCOL_VERSION, KODAX_RUNTIME_SDK_CAPABILITIES, KodaXEvents, KodaXPromptCacheDiagnosticEvent, KodaXResult, RUNTIME_DAEMON_METHODS, RUNTIME_DAEMON_METHOD_SCHEMAS, RUNTIME_DAEMON_NOTIFICATION_SCHEMAS, RUNTIME_DAEMON_PROTOCOL_SCHEMA, RUNTIME_DAEMON_PROTOCOL_SCHEMA_JSON, RuntimeAutoModeConfigurationError, RuntimeContextBudgetSnapshot, RuntimeDaemonCapabilityUpgradeError, RuntimeDaemonDisconnectError, RuntimePermissionScopeUpgradeRequiredError, RuntimeToolExposurePlan, RuntimeTransportBoundaryError, SessionTranscriptEntry, acquireKodaXInlineOwner, captureRuntimeSessionDiagnostics, connectKodaXRuntime, createKodaXRuntime, enableKodaXDaemonOwner, getKodaXRuntimeOwnerPolicy, getKodaXRuntimeOwnerState, handleRuntimePermissionRequest, isRuntimeDaemonDisconnectError, listRuntimeDaemonSchemaMethods, parseRuntimeEvent, setKodaXRuntimeOwnerMode, settleKodaXRuntimeExit, waitForRuntimeDaemonShutdown };
-export type { ConnectKodaXRuntimeOptions, CreateKodaXRuntimeOptions, KodaXDaemonRuntime, KodaXRuntime, KodaXRuntimeIsolation, KodaXRuntimeMode, RuntimeActiveAgentTurn, RuntimeActiveToolProjection, RuntimeAdminService, RuntimeAgentBindingService, RuntimeAgentFollowupOptions, RuntimeAgentOperationOptions, RuntimeAgentOwnerSession, RuntimeAgentService, RuntimeAppendNoticeInput, RuntimeArtifact, RuntimeArtifactKind, RuntimeArtifactRefInput, RuntimeArtifactService, RuntimeAutoReviewOptions, RuntimeBoundDefaultAgent, RuntimeBoundLocalAgent, RuntimeCapabilityRequirements, RuntimeCatalogService, RuntimeClientCapabilities, RuntimeClientInfo, RuntimeCommandInfo, RuntimeCommandResolveInput, RuntimeCompactSessionInput, RuntimeCompactSessionResult, RuntimeCompactionReasoning, RuntimeConfigPatch, RuntimeConfigReloadResult, RuntimeConfigService, RuntimeConfirmIdentityAliasInput, RuntimeConnectionService, RuntimeConnectionState, RuntimeContextCompactionEndedEventPayload, RuntimeContextCompactionFinishedEventPayload, RuntimeContextCompactionMessagesEventPayload, RuntimeContextCompactionSkippedEventPayload, RuntimeContextCompactionStartedEventPayload, RuntimeContextCompactionStatsEventPayload, RuntimeContinuationStatus, RuntimeConversationHistory, RuntimeConversationHistoryBoundary, RuntimeConversationHistoryEntryChunk, RuntimeConversationHistoryEntryChunkInput, RuntimeConversationHistoryPageInput, RuntimeConversationHistorySlice, RuntimeConversationHistorySliceEntry, RuntimeCreateArtifactInput, RuntimeCreateSessionInput, RuntimeCredentialBinding, RuntimeCredentialBroker, RuntimeCredentialLease, RuntimeCredentialRequest, RuntimeCredentialService, RuntimeDaemonClientSnapshot, RuntimeDaemonClientTransport, RuntimeDaemonClientType, RuntimeDaemonContextOptions, RuntimeDaemonDisconnectCode, RuntimeDaemonEndpoint, RuntimeDaemonError, RuntimeDaemonErrorCode, RuntimeDaemonFrame, RuntimeDaemonJsonSchema, RuntimeDaemonKodaXOptions, RuntimeDaemonManagementService, RuntimeDaemonManagementState, RuntimeDaemonMethod, RuntimeDaemonMethodSchema, RuntimeDaemonNotification, RuntimeDaemonNotificationMethod, RuntimeDaemonPreflight, RuntimeDaemonProtocolSchema, RuntimeDaemonRequest, RuntimeDaemonRequestControl, RuntimeDaemonRollbackInput, RuntimeDaemonRollbackResult, RuntimeDaemonRunService, RuntimeDaemonShutdownVerification, RuntimeDaemonShutdownVerificationInput, RuntimeDaemonShutdownVerificationOwner, RuntimeDaemonStartRunInput, RuntimeDaemonTransportLifecycleState, RuntimeDefaultAgentStartInput, RuntimeDeliveredInterruptInput, RuntimeDiagnosticFilter, RuntimeDiagnosticsService, RuntimeEffectiveConfigEntry, RuntimeEffectiveConfigSnapshot, RuntimeEffectiveConfigSource, RuntimeEffectiveCredentialEntry, RuntimeEffectiveSkillRef, RuntimeEvent, RuntimeEventEnvelope, RuntimeEventFilter, RuntimeEventListener, RuntimeEventParseResult, RuntimeEventPayloadMap, RuntimeEventReplayFilter, RuntimeEventService, RuntimeEventType, RuntimeExactCallPermissionMatcher, RuntimeExactCommandPermissionMatcher, RuntimeExactPathPermissionMatcher, RuntimeExecPolicyOptions, RuntimeExecutionToolPolicy, RuntimeExitSettlement, RuntimeExitSettlementBlockReason, RuntimeExitSettlementInput, RuntimeExtensionListResult, RuntimeExtensionReloadResult, RuntimeExternalAgentsOptions, RuntimeFailureDetail, RuntimeFailureStage, RuntimeFileInput, RuntimeForkSessionInput, RuntimeGrantedScope, RuntimeHostToolDescriptor, RuntimeHostToolHandler, RuntimeHostToolInvocation, RuntimeHostToolInvocationStatus, RuntimeHostToolLease, RuntimeHostToolResult, RuntimeHostToolService, RuntimeIdentity, RuntimeImageInput, RuntimeInlineOwnerHandle, RuntimeInput, RuntimeIntegrationDiagnostic, RuntimeIntegrationDomainStatus, RuntimeIntegrationHealth, RuntimeInteractionResolvedEventPayload, RuntimeInterruptInputStatus, RuntimeKodaXOptions, RuntimeLearningService, RuntimeLocalAgentStartInput, RuntimeManagedTaskProjection, RuntimeMcpReloadResult, RuntimeMcpService, RuntimeMcpToolListFilter, RuntimeMcpValidateResult, RuntimeModelListFilter, RuntimeObservationInvalidation, RuntimeOperationOptions, RuntimeOperationReceipt, RuntimeOperationService, RuntimeOperationState, RuntimeOutputSegmentStartedEventPayload, RuntimeOwnerIdentity, RuntimeOwnerPolicyState, RuntimeOwnerState, RuntimePendingUserInputProjection, RuntimePermissionBroker, RuntimePermissionDecision, RuntimePermissionFilter, RuntimePermissionGrant, RuntimePermissionGrantChangedEventPayload, RuntimePermissionGrantSuggestion, RuntimePermissionHostPlatform, RuntimePermissionMatcher, RuntimePermissionMode, RuntimePermissionModeInput, RuntimePermissionPrompt, RuntimePermissionPromptContext, RuntimePermissionPromptResolution, RuntimePermissionRequest, RuntimePermissionRequestInput, RuntimePermissionRespondOptions, RuntimePermissionRisk, RuntimePermissionScope, RuntimePermissionService, RuntimeProviderErrorCode, RuntimeReadOptions, RuntimeResolvedLocalAgent, RuntimeRewindSessionInput, RuntimeRunFailureKind, RuntimeRunFilter, RuntimeRunHandle, RuntimeRunInputDeliveredEventPayload, RuntimeRunInputQueuedEventPayload, RuntimeRunLifecycleError, RuntimeRunMode, RuntimeRunPhase, RuntimeRunProgressEventPayload, RuntimeRunRequirements, RuntimeRunResult, RuntimeRunService, RuntimeRunSessionLoadedEventPayload, RuntimeRunStage, RuntimeRunStatus, RuntimeRunStopReceipt, RuntimeRunStopStatus, RuntimeScopedCredentialBroker, RuntimeScopedCredentialPurpose, RuntimeScopedCredentialRequest, RuntimeScopedCredentialTarget, RuntimeSession, RuntimeSessionCancelInput, RuntimeSessionCancelReceipt, RuntimeSessionCursor, RuntimeSessionDiagnosticError, RuntimeSessionDiagnosticErrorCode, RuntimeSessionDiagnosticRun, RuntimeSessionDiagnostics, RuntimeSessionDiagnosticsInput, RuntimeSessionFilter, RuntimeSessionLiveProjection, RuntimeSessionLoadedEventPayload, RuntimeSessionObservation, RuntimeSessionObservationSnapshot, RuntimeSessionService, RuntimeSessionSettings, RuntimeSessionSettingsPatch, RuntimeSessionSettingsUpdatedEventPayload, RuntimeSessionStatus, RuntimeSessionSummary, RuntimeSetActiveEntryInput, RuntimeSkillDescribeInput, RuntimeSkillDescription, RuntimeSkillFileSummary, RuntimeSkillListFilter, RuntimeSkillSummary, RuntimeStartRunInput, RuntimeStatusService, RuntimeStatusSnapshot, RuntimeSubmitInput, RuntimeSubmitInputResult, RuntimeSubscription, RuntimeTerminalCode, RuntimeTerminalFact, RuntimeTextDeltaEventPayload, RuntimeTextInput, RuntimeThinkingFinishedEventPayload, RuntimeTodoUpdatedEventPayload, RuntimeToolFinishedEventPayload, RuntimeToolProgressEventPayload, RuntimeToolSandboxEventPayload, RuntimeToolStartedEventPayload, RuntimeTranscript, RuntimeTranscriptEntryChunk, RuntimeTranscriptEntryChunkInput, RuntimeTranscriptPageInput, RuntimeTranscriptSearchHit, RuntimeTranscriptSearchInput, RuntimeTranscriptSearchResult, RuntimeTranscriptSlice, RuntimeTranscriptSliceEntry, RuntimeTypedEvent, RuntimeTypedEventListener, RuntimeUserInputFilter, RuntimeUserInputKind, RuntimeUserInputRequest, RuntimeUserInputRequestedEventPayload, RuntimeUserInputResolution, RuntimeUserInputService, RuntimeUserMarkdownAgentRef, RuntimeVersionedUpdateOptions, RuntimeVersionedValue, RuntimeVideoInput, RuntimeWarningEventPayload, RuntimeWorkerOptions, RuntimeWorkerResourceLimits, RuntimeWorkflowFilter, RuntimeWorkflowListener, RuntimeWorkflowService, RuntimeWorkflowSnapshot, RuntimeWorkflowSummary, RuntimeWorkspaceBinding };
+export { KODAX_DAEMON_PROTOCOL, KODAX_DAEMON_PROTOCOL_VERSION, KODAX_RUNTIME_SDK_CAPABILITIES, KodaXEvents, KodaXPromptCacheDiagnosticEvent, KodaXResult, RUNTIME_DAEMON_METHODS, RUNTIME_DAEMON_METHOD_SCHEMAS, RUNTIME_DAEMON_NOTIFICATION_SCHEMAS, RUNTIME_DAEMON_PROTOCOL_SCHEMA, RUNTIME_DAEMON_PROTOCOL_SCHEMA_JSON, RUNTIME_REDIRECT_STOP_REASON, RuntimeAutoModeConfigurationError, RuntimeClientInfo, RuntimeContextBudgetSnapshot, RuntimeCredentialBinding, RuntimeCredentialService, RuntimeDaemonCapabilityUpgradeError, RuntimeDaemonClientType, RuntimeDaemonDisconnectError, RuntimeExecutionAuthorization, RuntimeHostToolService, RuntimePermissionScopeUpgradeRequiredError, RuntimeToolExposurePlan, RuntimeTransportBoundaryError, SessionTranscriptEntry, acquireKodaXInlineOwner, captureRuntimeSessionDiagnostics, connectKodaXRuntime, createKodaXRuntime, enableKodaXDaemonOwner, ensureKodaXRuntime, getKodaXRuntimeOwnerState, handleRuntimePermissionRequest, isRuntimeDaemonDisconnectError, listRuntimeDaemonSchemaMethods, parseRuntimeEvent, setKodaXRuntimeOwnerMode, waitForRuntimeDaemonShutdown };
+export type { ConnectKodaXRuntimeOptions, CreateKodaXRuntimeOptions, KodaXDaemonRuntime, KodaXRuntime, KodaXRuntimeIsolation, KodaXRuntimeMode, RuntimeActiveAgentTurn, RuntimeActiveToolProjection, RuntimeAdminService, RuntimeAgentBindingService, RuntimeAgentFollowupOptions, RuntimeAgentOperationOptions, RuntimeAgentOwnerSession, RuntimeAgentService, RuntimeAppendNoticeInput, RuntimeArtifact, RuntimeArtifactKind, RuntimeArtifactRefInput, RuntimeArtifactService, RuntimeAutoReviewOptions, RuntimeBoundDefaultAgent, RuntimeBoundLocalAgent, RuntimeBuildIdentity, RuntimeCapabilityRequirements, RuntimeCatalogService, RuntimeClientCapabilities, RuntimeCommandInfo, RuntimeCommandResolveInput, RuntimeCompactSessionInput, RuntimeCompactSessionResult, RuntimeCompactionReasoning, RuntimeConfigPatch, RuntimeConfigReloadResult, RuntimeConfigService, RuntimeConfirmIdentityAliasInput, RuntimeConnectionService, RuntimeConnectionState, RuntimeContextCompactionEndedEventPayload, RuntimeContextCompactionFinishedEventPayload, RuntimeContextCompactionMessagesEventPayload, RuntimeContextCompactionSkippedEventPayload, RuntimeContextCompactionStartedEventPayload, RuntimeContextCompactionStatsEventPayload, RuntimeContinuationStatus, RuntimeConversationHistory, RuntimeConversationHistoryBoundary, RuntimeConversationHistoryEntryChunk, RuntimeConversationHistoryEntryChunkInput, RuntimeConversationHistoryPageInput, RuntimeConversationHistorySlice, RuntimeConversationHistorySliceEntry, RuntimeCreateArtifactInput, RuntimeCreateSessionInput, RuntimeDaemonClientSnapshot, RuntimeDaemonClientTransport, RuntimeDaemonContextOptions, RuntimeDaemonDisconnectCode, RuntimeDaemonEndpoint, RuntimeDaemonError, RuntimeDaemonErrorCode, RuntimeDaemonFrame, RuntimeDaemonJsonSchema, RuntimeDaemonKodaXOptions, RuntimeDaemonManagementService, RuntimeDaemonManagementState, RuntimeDaemonMethod, RuntimeDaemonMethodSchema, RuntimeDaemonNotification, RuntimeDaemonNotificationMethod, RuntimeDaemonPreflight, RuntimeDaemonProtocolSchema, RuntimeDaemonRequest, RuntimeDaemonRequestControl, RuntimeDaemonRunService, RuntimeDaemonShutdownVerification, RuntimeDaemonShutdownVerificationInput, RuntimeDaemonShutdownVerificationOwner, RuntimeDaemonStartRunInput, RuntimeDaemonTransportLifecycleState, RuntimeDefaultAgentStartInput, RuntimeDeliveredInterruptInput, RuntimeEffectiveConfigEntry, RuntimeEffectiveConfigSnapshot, RuntimeEffectiveConfigSource, RuntimeEffectiveCredentialEntry, RuntimeEffectiveSkillRef, RuntimeEvent, RuntimeEventEnvelope, RuntimeEventFilter, RuntimeEventListener, RuntimeEventParseResult, RuntimeEventPayloadMap, RuntimeEventService, RuntimeEventType, RuntimeExactCallPermissionMatcher, RuntimeExactCommandPermissionMatcher, RuntimeExactPathPermissionMatcher, RuntimeExecPolicyOptions, RuntimeExecutionToolPolicy, RuntimeExtensionListResult, RuntimeExtensionReloadResult, RuntimeExternalAgentsOptions, RuntimeFailureDetail, RuntimeFailureStage, RuntimeFileInput, RuntimeForkSessionInput, RuntimeGrantedScope, RuntimeIdentity, RuntimeImageInput, RuntimeInlineOwnerHandle, RuntimeInput, RuntimeIntegrationDiagnostic, RuntimeIntegrationDomainStatus, RuntimeIntegrationHealth, RuntimeInteractionResolvedEventPayload, RuntimeInteractionService, RuntimeInterruptInputStatus, RuntimeInvocationService, RuntimeKodaXOptions, RuntimeLearningService, RuntimeLocalAgentStartInput, RuntimeManagedTaskProjection, RuntimeMcpReloadResult, RuntimeMcpService, RuntimeMcpToolListFilter, RuntimeMcpValidateResult, RuntimeMemoryPlane, RuntimeMemoryRebuildResult, RuntimeMemoryService, RuntimeModelListFilter, RuntimeObservationInvalidation, RuntimeOutputSegmentStartedEventPayload, RuntimeOwnerIdentity, RuntimeOwnerPolicyState, RuntimeOwnerState, RuntimePendingUserInputProjection, RuntimePermissionBroker, RuntimePermissionDecision, RuntimePermissionFilter, RuntimePermissionGrant, RuntimePermissionGrantChangedEventPayload, RuntimePermissionGrantSuggestion, RuntimePermissionHostPlatform, RuntimePermissionMatcher, RuntimePermissionMode, RuntimePermissionModeInput, RuntimePermissionPrompt, RuntimePermissionPromptContext, RuntimePermissionPromptResolution, RuntimePermissionRequest, RuntimePermissionRequestInput, RuntimePermissionRespondOptions, RuntimePermissionRisk, RuntimePermissionScope, RuntimePermissionService, RuntimeProviderErrorCode, RuntimeReadOptions, RuntimeRecoverSessionInput, RuntimeResolvedLocalAgent, RuntimeRewindSessionInput, RuntimeRunFailureKind, RuntimeRunFilter, RuntimeRunHandle, RuntimeRunInputDeliveredEventPayload, RuntimeRunInputQueuedEventPayload, RuntimeRunLifecycleError, RuntimeRunMode, RuntimeRunPhase, RuntimeRunProgressEventPayload, RuntimeRunRequirements, RuntimeRunResult, RuntimeRunService, RuntimeRunSessionLoadedEventPayload, RuntimeRunStage, RuntimeRunStatus, RuntimeRunStopReceipt, RuntimeRunStopStatus, RuntimeSession, RuntimeSessionCancelInput, RuntimeSessionCancelReceipt, RuntimeSessionDiagnosticError, RuntimeSessionDiagnosticErrorCode, RuntimeSessionDiagnosticRun, RuntimeSessionDiagnostics, RuntimeSessionDiagnosticsInput, RuntimeSessionFilter, RuntimeSessionLiveProjection, RuntimeSessionLoadedEventPayload, RuntimeSessionObservation, RuntimeSessionObservationSnapshot, RuntimeSessionService, RuntimeSessionSettings, RuntimeSessionSettingsPatch, RuntimeSessionSettingsUpdatedEventPayload, RuntimeSessionStatus, RuntimeSessionSummary, RuntimeSetActiveEntryInput, RuntimeSkillDescribeInput, RuntimeSkillDescription, RuntimeSkillFileSummary, RuntimeSkillListFilter, RuntimeSkillSummary, RuntimeStartRunInput, RuntimeStatusService, RuntimeStatusSnapshot, RuntimeSubmitInput, RuntimeSubmitInputResult, RuntimeSubscription, RuntimeTerminalCode, RuntimeTerminalFact, RuntimeTextDeltaEventPayload, RuntimeTextInput, RuntimeThinkingFinishedEventPayload, RuntimeTodoUpdatedEventPayload, RuntimeToolFinishedEventPayload, RuntimeToolProgressEventPayload, RuntimeToolSandboxEventPayload, RuntimeToolStartedEventPayload, RuntimeTranscript, RuntimeTranscriptEntryChunk, RuntimeTranscriptEntryChunkInput, RuntimeTranscriptPageInput, RuntimeTranscriptSearchHit, RuntimeTranscriptSearchInput, RuntimeTranscriptSearchResult, RuntimeTranscriptSlice, RuntimeTranscriptSliceEntry, RuntimeTypedEvent, RuntimeTypedEventListener, RuntimeUserInputFilter, RuntimeUserInputKind, RuntimeUserInputRequest, RuntimeUserInputRequestedEventPayload, RuntimeUserInputResolution, RuntimeUserInputService, RuntimeUserMarkdownAgentRef, RuntimeVersionedUpdateOptions, RuntimeVersionedValue, RuntimeVideoInput, RuntimeWarningEventPayload, RuntimeWorkflowFilter, RuntimeWorkflowListener, RuntimeWorkflowService, RuntimeWorkflowSnapshot, RuntimeWorkflowStartInput, RuntimeWorkflowStartResult, RuntimeWorkflowStartSource, RuntimeWorkflowSummary, RuntimeWorkspaceBinding };