@kodax-ai/kodax 0.7.96 → 0.7.97-alpha.2

package/dist/types-chunks/{controller.d-J2t1q8Ly.d.ts → controller.d-yyKajPTi.d.ts}

@@ -1,7 +1,8 @@
-import { a3 as KodaXToolDefinition, k as KodaXMessage, G as KodaXReasoningMode, ab as KodaXWireReasoningEffort, a5 as KodaXToolResultContentItem, _ as KodaXThinkingBlock, L as KodaXRedactedThinkingBlock, I as KodaXReasoningRequest, a2 as KodaXTokenUsage } from './types.d-BrQMB-hy.js';
-import { a as KodaXContextOverflowError } from './base.d-Bt9lhwSV.js';
+import { a3 as KodaXToolDefinition, k as KodaXMessage, G as KodaXReasoningMode, ab as KodaXWireReasoningEffort, a5 as KodaXToolResultContentItem, _ as KodaXThinkingBlock, L as KodaXRedactedThinkingBlock, U as KodaXTaskResultMetadata } from './types.d-BjOq57-z.js';
+import { a as KodaXContextOverflowError } from './base.d-ZBOdjDUT.js';
 import { ChildProcess } from 'node:child_process';
-import { b6 as MemoryReviewModelInput, a4 as KodaXMemoryOutcomeDigest, b9 as MemoryReviewPlan, U as KodaXCompactMemorySeed, a7 as KodaXSessionArtifactLedgerEntry, q as AgentCapabilities, P as AgentTurnExecutor, w as AgentExecutionKind, p as AgentBudgetPort, k as AgentActorStore, b as AgentActorOwner, t as AgentEvent, F as AgentMailboxMessage, a as AgentActorClient, x as AgentExecutionResult, M as AgentSpawnInput, H as AgentMutationOptions, A as AgentActor, O as AgentTurn, Q as AgentTurnRef, r as AgentDataClassification, G as AgentMetadataValue, y as AgentFollowupResult, B as AgentInterruptScope, N as AgentTreeSnapshot, s as AgentDetail, I as AgentOutput } from './types.d-CSv0_cZC.js';
+import { am as KodaXInputArtifact, ax as LearnedCapabilityRecord, aI as LearningEvent, aH as LearningClientRecord, aA as LearnedCapabilityScope, aw as LearnedCapabilityProvenance, az as LearnedCapabilityRecordV2, aq as LearnedCapabilityArtifact } from './types.d-o7t9dds4.js';
+import { bn as MemoryReviewModelInput, al as KodaXMemoryOutcomeDigest, bq as MemoryReviewPlan, q as AgentCapabilities, P as AgentTurnExecutor, w as AgentExecutionKind, p as AgentBudgetPort, k as AgentActorStore, b as AgentActorOwner, t as AgentEvent, F as AgentMailboxMessage, a as AgentActorClient, x as AgentExecutionResult, M as AgentSpawnInput, H as AgentMutationOptions, A as AgentActor, O as AgentTurn, Q as AgentTurnRef, r as AgentDataClassification, G as AgentMetadataValue, y as AgentFollowupResult, B as AgentInterruptScope, N as AgentTreeSnapshot, s as AgentDetail, I as AgentOutput } from './review-inbox.d-BeaLRNHx.js';
 
 /**
  * Layer A Primitive: Agent / Handoff / Guardrail / AgentReasoningProfile
@@ -1158,6 +1159,8 @@ interface RunnerToolCall {
  */
 interface RunnerLlmResult {
     readonly text: string;
+    /** Identity shared by live output and the assistant message committed from this result. */
+    readonly outputId?: string;
     readonly toolCalls?: readonly RunnerToolCall[];
     readonly stopReason?: string;
     /**
@@ -1985,177 +1988,150 @@ declare function registerManagedChildProcess(child: ChildProcess, metadata: Mana
 declare function cleanupRegisteredManagedChildren(options?: CleanupOptions): Promise<ManagedChildCleanupSummary>;
 
 /**
- * FEATURE_222 — user-interaction primitive (agent layer).
- *
- * "Ask the user a question" is needed at BOTH layers: the coding `ask_user_*`
- * tools (LLM-initiated) AND the MCP elicitation reverse capability
- * (server-initiated). The capability historically lived only in
- * `@kodax-ai/coding`, but the MCP runtime lives one layer below in
- * `@kodax-ai/agent` and cannot reach up to it. So the primitive is owned here,
- * at the agent layer, and the host injects ONE implementation that both layers
- * share — coding re-exports these types for backward compatibility.
- *
- * The agent layer is UI-less by design: these are the contract the host
- * (REPL / ACP / SDK) fulfils with its real interaction surface. A headless host
- * leaves them undefined and consumers degrade gracefully (cancel / decline).
- */
-/** A single question item used in multi-question mode. */
-interface AskUserQuestionItem {
-    question: string;
-    header?: string;
-    options: Array<{
-        label: string;
-        description?: string;
-        value: string;
-    }>;
-    multiSelect?: boolean;
+ * @kodax-ai/agent/messaging — Message queue types
+ *
+ * FEATURE_115 (v0.7.36): agentId-scoped 2-tier priority queue infrastructure.
+ *
+ * Per ADR-021: messaging is a generic agent-platform primitive (not coding-
+ * specific). Downstream consumers:
+ *   - @kodax-ai/coding runner-driven mid-turn drain
+ *   - @kodax-ai/repl InkREPL ESC soft-pause + text injection (FEATURE_111 absorbed)
+ *   - subagent task-notification routing (FEATURE_155 idle-yield wakeup)
+ *
+ * Phase 0.6 study (`c:/tmp/claude-code-actual-usage.md`): Claude Code's
+ * `'now'` priority has zero production usage; KodaX simplifies to 2 tiers.
+ */
+
+type MessagePriority = 'user' | 'background';
+/**
+ * Delivery owner for user prompts. Ordinary messages are runtime-deliverable.
+ * `host` is reserved for prompts that must re-enter a trusted host command
+ * pipeline (for example an explicit user Skill invocation) before any model
+ * can observe them.
+ */
+type MessageDelivery = 'runtime' | 'host';
+/**
+ * Delivery semantics, independent of priority:
+ * - `prompt`: user-authored input; delivered as a real user turn.
+ * - `agent-message`: Runtime-authenticated Agent communication.
+ * - `task-notification`: structured Agent completion evidence.
+ * - `system-reminder`: Runtime-authored synthetic guidance.
+ */
+type MessageMode = 'prompt' | 'agent-message' | 'task-notification' | 'system-reminder';
+type QueuedInputArtifact = KodaXInputArtifact;
+interface QueuedMessage {
+    /** Stable id for tracing / dedup. Format: `msg-<sequence>`. */
+    readonly id: string;
+    readonly priority: MessagePriority;
     /**
-     * FEATURE_222 — only meaningful when `multiSelect` is true. The host should
-     * reject (re-prompt / show an error, do NOT resolve) a selection with fewer
-     * than `minSelections` items. Absent ⇒ no lower bound.
+     * Routing key:
+     *   undefined = main thread / coordinator agent
+     *   'agent-id-XYZ' = subagent / specific consumer
+     *
+     * Drain consumers MUST filter by agentId match — undefined matches only
+     * undefined-agentId messages, not "any agent".
      */
-    minSelections?: number;
+    readonly agentId?: string;
+    readonly mode: MessageMode;
+    /** Omitted means `runtime`; `host` messages must not be spliced into a model turn. */
+    readonly delivery?: MessageDelivery;
+    readonly content: string;
+    /** Accepted client input identity; joins the canonical user message to its Host admission. */
+    readonly inputId?: string;
+    readonly inputArtifacts?: readonly QueuedInputArtifact[];
+    readonly taskResult?: KodaXTaskResultMetadata;
+    /** Wall-clock timestamp (`Date.now()`) for tracing only — not used for ordering. */
+    readonly enqueuedAt: number;
+}
+interface DequeueFilter {
     /**
-     * FEATURE_222 — only meaningful when `multiSelect` is true. The host should
-     * reject a selection with more than `maxSelections` items. Absent ⇒ no upper
-     * bound. Lets a host render + validate "pick at most N" structurally instead
-     * of parsing it out of natural-language question text.
+     * Only return messages with this agentId.
+     * undefined matches messages with no agentId (main-thread messages only).
      */
-    maxSelections?: number;
-    /** Runtime-validated option value selected if the interaction expires. */
-    default?: string;
+    readonly agentId?: string;
     /**
-     * Choice surfaces are open-ended by default: hosts SHOULD offer a synthetic
-     * custom-input option unless this is explicitly false.
+     * Highest priority level included in the drain.
+     *   'user'       → only user priority drained, background stays queued
+     *   'background' → both user + background drained (Sleep-gated case)
      */
-    allowCustomInput?: boolean;
-    customInputLabel?: string;
-    customInputPrompt?: string;
-    customInputDefault?: string;
-}
-/** Options for multi-question mode — multiple independent questions in one call. */
-interface AskUserMultiOptions {
-    questions: AskUserQuestionItem[];
-}
-/** Options for a single question (select or free-text input). */
-interface AskUserQuestionOptions {
-    question: string;
-    kind?: 'select' | 'input';
-    /** Required for kind="select", ignored for kind="input". */
-    options?: Array<{
-        label: string;
-        description?: string;
-        value: string;
-    }>;
-    multiSelect?: boolean;
-    /** FEATURE_222 — see {@link AskUserQuestionItem.minSelections}. */
-    minSelections?: number;
-    /** FEATURE_222 — see {@link AskUserQuestionItem.maxSelections}. */
-    maxSelections?: number;
-    /** Input text or a Runtime-validated option value selected on expiry. */
-    default?: string;
+    readonly maxPriority: MessagePriority;
     /**
-     * Choice surfaces are open-ended by default: hosts SHOULD offer a synthetic
-     * custom-input option unless this is explicitly false.
+     * Optional cap on number of messages drained in this call.
+     * Defaults to unlimited (drains all matching).
      */
-    allowCustomInput?: boolean;
-    customInputLabel?: string;
-    customInputPrompt?: string;
-    customInputDefault?: string;
-}
-/** Host return value for a user-entered answer chosen through a select dialog's
- *  synthetic "Other..." option. */
-interface AskUserCustomInputAnswer {
-    kind: 'customInput';
-    value: string;
-}
-type AskUserSelectionAnswer = string | AskUserCustomInputAnswer;
-type AskUserAnswer = AskUserSelectionAnswer | AskUserSelectionAnswer[];
-/**
- * FEATURE_222 — reserved option value a host may append as a synthetic option
- * (e.g. a "← Back" entry) in `askUserMulti`'s per-question flow to mean "return
- * to the previous question" instead of answering the current one. Only
- * meaningful for `questions[]` index > 0 (there is no previous before the
- * first). The coding `ask_user_question` tool rejects this as a normal
- * `option.value` supplied by the model, so a host may safely reuse it for its
- * own back-navigation UI. A host that ignores this constant simply never offers
- * back-navigation — the default multi-question flow is unaffected either way.
- */
-declare const ASK_USER_BACK_SIGNAL = "__back__";
-/** Reserved synthetic option value for a host-provided custom input entry. */
-declare const ASK_USER_CUSTOM_INPUT_SIGNAL = "__custom_input__";
-declare function isAskUserCustomInputAnswer(value: unknown): value is AskUserCustomInputAnswer;
-/**
- * FEATURE_222 — narrow an `askUser` result to a single string for the many
- * callers that only ever ask single-select questions (they never set
- * `multiSelect: true`, so the array branch is unreachable at runtime). Collapses
- * an unexpected array to its first element so a mis-configured host degrades
- * predictably instead of leaking `[object Array]` into a string comparison.
- */
-declare function asSingleSelection(answer: AskUserAnswer): string;
-/** Lifecycle signal supplied by a bounded interaction owner. */
-interface UserInteractionPromptContext {
-    /** Aborted when the interaction expires or its owner settles it elsewhere. */
-    readonly signal: AbortSignal;
-}
-/**
- * The host-provided user-interaction surface. Each method is optional — a
- * headless host omits them and callers degrade gracefully. This is the single
- * primitive shared by the coding `ask_user_*` tools and the agent's MCP
- * elicitation reverse capability.
- */
-interface UserInteraction {
+    readonly limit?: number;
     /**
-     * Ask one question (select mode by default). Single-select resolves the
-     * chosen option value as a string. Multi-select resolves the selected values
-     * as an array. If the user chooses the host-provided custom-input option,
-     * return `{ kind: 'customInput', value }` in the single or array position.
-     * Plain string/string[] hosts remain valid for backward compatibility.
+     * FEATURE_159 (v0.7.40) — optional mode filter. Lets REPL split the
+     * single queue into mode-typed views (e.g. `mode:'prompt'` for user
+     * input vs `mode:'task-notification'` for child completion banners)
+     * without separate queues. When omitted, all modes match.
      */
-    askUser?: (options: AskUserQuestionOptions, context?: UserInteractionPromptContext) => Promise<AskUserAnswer>;
-    /** Ask several independent questions sequentially. Resolves a per-question
-     *  value map using the same `AskUserAnswer` shape as `askUser`, or undefined
-     *  when the user cancels. */
-    askUserMulti?: (options: AskUserMultiOptions, context?: UserInteractionPromptContext) => Promise<Record<string, AskUserAnswer> | undefined>;
-    /** Ask for free-text input. Resolves the text, or undefined when cancelled. */
-    askUserInput?: (options: {
-        question: string;
-        default?: string;
-    }, context?: UserInteractionPromptContext) => Promise<string | undefined>;
-}
-/** Register the live user-interaction surface (host calls this when interactive). */
-declare function setActiveUserInteraction(interaction: UserInteraction | undefined): void;
-/** The live user-interaction surface, or undefined when none is active. */
-declare function getActiveUserInteraction(): UserInteraction | undefined;
-
-type KodaXImageMediaType = 'image/png' | 'image/jpeg' | 'image/webp' | 'image/gif';
-type KodaXVideoMediaType = 'video/mp4' | 'video/mpeg' | 'video/quicktime' | 'video/x-msvideo' | 'video/x-flv' | 'video/webm' | 'video/x-ms-wmv' | 'video/3gpp';
-type KodaXInputArtifactSource = 'user-inline' | 'clipboard' | 'drag-drop' | 'file-picker';
-interface KodaXImageInputArtifact {
-    readonly kind: 'image';
-    readonly path: string;
-    readonly mediaType?: KodaXImageMediaType;
-    readonly source?: KodaXInputArtifactSource;
-    readonly description?: string;
-}
-interface KodaXFileInputArtifact {
-    readonly kind: 'file';
-    readonly path: string;
-    readonly mediaType?: string;
-    readonly mimeType?: string;
-    readonly name?: string;
-    readonly source?: KodaXInputArtifactSource;
-    readonly description?: string;
+    readonly mode?: MessageMode;
+    /**
+     * FEATURE_159 (v0.7.40) — optional precise-id filter. Single-message
+     * targeted removal — drives Esc-pop-this-uuid in REPL. When set, all
+     * other filters still apply (agentId / priority / mode mismatches still
+     * skip the message), so callers can't accidentally remove a message
+     * outside their scope.
+     */
+    readonly id?: string;
+    /**
+     * FEATURE_159 (v0.7.40) — optional escape-hatch predicate, AND-ed with
+     * the structured filters. Lets SDK consumers express conditions the
+     * typed fields don't cover (e.g. timestamp ranges, content-match) without
+     * forcing every new use case to extend `DequeueFilter`. KodaX-internal
+     * code should prefer the typed fields for readability; this is the
+     * "data-driven main path + predicate escape" pattern.
+     *
+     * Evaluated AFTER the typed filters succeed — so a `predicate` that
+     * inspects `message.content` never runs on messages outside the
+     * caller's `agentId` / `mode` / `id` scope.
+     */
+    readonly predicate?: (message: QueuedMessage) => boolean;
 }
-interface KodaXVideoInputArtifact {
-    readonly kind: 'video';
-    readonly path: string;
-    readonly mediaType: KodaXVideoMediaType;
-    readonly name?: string;
-    readonly source?: KodaXInputArtifactSource;
-    readonly description?: string;
+/**
+ * FEATURE_159 (v0.7.40) — structured queue event emitted to subscribers.
+ *
+ * Replaces the prior `() => void` bare-notify signal. Carries the kind +
+ * affected messages so SDK observability consumers (logging, tracing,
+ * metrics) can react per-event without re-diffing snapshots.
+ *
+ * Event granularity rules:
+ *   - `enqueued` fires ONCE per `enqueue()` call (always 1 message).
+ *   - `dequeued` fires ONCE per `dequeue()` call that removed ≥1 message,
+ *     carrying ALL drained messages in priority+FIFO order. No-op drains
+ *     (filter matched nothing) fire no event — quiet by design so the
+ *     idle consumers can probe without spamming subscribers.
+ *   - `cleared` fires ONCE per `clear()` call that removed ≥1 message,
+ *     carrying the pre-clear messages. Empty-queue clear fires nothing.
+ *
+ * The `useSyncExternalStore` React hook ignores the event payload (it
+ * only needs the change signal); SDK / tracer consumers read the event.
+ */
+type QueueEvent = {
+    readonly kind: 'enqueued';
+    readonly message: QueuedMessage;
+} | {
+    readonly kind: 'dequeued';
+    readonly messages: readonly QueuedMessage[];
+} | {
+    readonly kind: 'cleared';
+    readonly messages: readonly QueuedMessage[];
+};
+/** FEATURE_159 — `MessageQueue.subscribe` listener signature. */
+type QueueEventListener = (event: QueueEvent) => void;
+interface EnqueueInput {
+    readonly priority: MessagePriority;
+    readonly mode: MessageMode;
+    /** Accepted client input identity carried onto the drained user message. */
+    readonly inputId?: string;
+    /** Omitted means `runtime`; use `host` for command-pipeline-owned prompts. */
+    readonly delivery?: MessageDelivery;
+    readonly content: string;
+    readonly agentId?: string;
+    readonly inputArtifacts?: readonly QueuedInputArtifact[];
+    readonly taskResult?: KodaXTaskResultMetadata;
 }
-type KodaXInputArtifact = KodaXImageInputArtifact | KodaXFileInputArtifact | KodaXVideoInputArtifact;
 
 /**
  * FEATURE_125 (v0.7.41) — Team Mode Layer 1: per-instance state broadcast.
@@ -2385,154 +2361,6 @@ interface DiscoveryOptions {
  */
 declare function discoverInstances(options?: DiscoveryOptions): DiscoveredInstance[];
 
-type LearnedCapabilityCarrier = 'skill' | 'extension' | 'workflow_handoff';
-type LearnedCapabilityLifecycle = 'opportunity' | 'drafting' | 'ready' | 'testing' | 'active_learned' | 'promoted_user' | 'quarantined' | 'archived' | 'rejected';
-type LearningEventKind = 'opportunity' | 'drafting' | 'ready' | 'testing' | 'activated' | 'promoted' | 'attention' | 'archived' | 'rejected';
-type LearningAction = 'review' | 'trust' | 'reject' | 'disable' | 'rollback' | 'archive' | 'restore' | 'promote';
-interface LearnedCapabilitySource {
-    readonly kind: 'learning_controller' | 'f224_proposal' | 'skill_learning_loop' | 'legacy_manual';
-    readonly proposalId?: string;
-}
-interface LearnedCapabilityRecordBase {
-    readonly capabilityId: string;
-    readonly displayName: string;
-    readonly slug: string;
-    readonly carrier: LearnedCapabilityCarrier;
-    readonly lifecycle: LearnedCapabilityLifecycle;
-    readonly revision: number;
-    readonly createdAt: string;
-    readonly updatedAt: string;
-    readonly source: LearnedCapabilitySource;
-    /** The control action that produced this revision, when it is not implied by lifecycle. */
-    readonly lastAction?: LearningAction;
-    readonly artifactPath?: string;
-    readonly previousGoodRevision?: number;
-    readonly previousLifecycle?: LearnedCapabilityLifecycle;
-    readonly diagnostics?: readonly string[];
-}
-interface LearnedCapabilityRecordV1 extends LearnedCapabilityRecordBase {
-    readonly schemaVersion: 1;
-}
-interface LearnedCapabilityScope {
-    readonly configHomeHash: string;
-    readonly tenantHash: string;
-    readonly projectHash: string;
-}
-interface LearnedCapabilityArtifact {
-    readonly kind: 'skill_markdown';
-    readonly relativePath: string;
-    readonly fingerprint: string;
-    readonly contentRevision: number;
-}
-interface LearnedCapabilityProvenance {
-    readonly jobId: string;
-    readonly inputHash: string;
-    readonly decisionId: string;
-    readonly actionId: string;
-}
-interface LearnedCapabilityCanaryBinding {
-    readonly bindingId: string;
-    readonly ownerSessionRef: string;
-    readonly expiresAt: string;
-}
-interface LearnedCapabilityCanaryInvocation {
-    readonly invocationId: string;
-    readonly bindingId: string;
-    /** Durable usage-ledger identity for recovery after the binding expires. */
-    readonly usageSessionHash?: string;
-    readonly artifactRevision?: number;
-    readonly artifactFingerprint?: string;
-    readonly status: 'pending' | 'verified_success' | 'credible_negative' | 'inconclusive';
-    readonly evidenceRefs: readonly string[];
-    readonly invokedAt: string;
-    readonly completedAt?: string;
-}
-interface LearnedCapabilityCanary {
-    readonly maxInvocations: 3;
-    readonly invocationCount: number;
-    readonly verifiedSuccesses: number;
-    readonly credibleNegatives: number;
-    readonly binding?: LearnedCapabilityCanaryBinding;
-    readonly invocations: readonly LearnedCapabilityCanaryInvocation[];
-}
-interface LearnedCapabilityRecordV2 extends LearnedCapabilityRecordBase {
-    readonly schemaVersion: 2;
-    readonly carrier: 'skill';
-    readonly scope: LearnedCapabilityScope;
-    readonly artifact: LearnedCapabilityArtifact;
-    readonly previousGoodArtifact?: LearnedCapabilityArtifact;
-    readonly provenance: LearnedCapabilityProvenance;
-    readonly canary: LearnedCapabilityCanary;
-}
-type LearnedCapabilityRecord = LearnedCapabilityRecordV1 | LearnedCapabilityRecordV2;
-interface LearningEvent {
-    readonly schemaVersion: 1;
-    readonly sequence: number;
-    readonly eventId: string;
-    readonly capabilityId: string;
-    readonly capabilityRevision: number;
-    readonly kind: LearningEventKind;
-    readonly lifecycle: LearnedCapabilityLifecycle;
-    readonly displayName: string;
-    readonly slug: string;
-    readonly carrier: LearnedCapabilityCarrier;
-    readonly createdAt: string;
-}
-type LearningNotificationState = 'unread' | 'seen' | 'acknowledged' | 'snoozed';
-interface LearningClientEventState {
-    readonly state: LearningNotificationState;
-    readonly capabilityRevision: number;
-    readonly updatedAt: string;
-    readonly snoozedUntil?: string;
-}
-interface LearningClientRecord {
-    readonly schemaVersion: 1;
-    readonly clientIdentity: string;
-    readonly events: Readonly<Record<string, LearningClientEventState>>;
-}
-interface LearningSurfaceSnapshot {
-    readonly ready: number;
-    readonly newlyActive: number;
-    readonly attention: number;
-    readonly active: number;
-    readonly revision: number;
-}
-interface LearningQuery {
-    readonly search?: string;
-    readonly carrier?: LearnedCapabilityCarrier;
-    readonly lifecycle?: LearnedCapabilityLifecycle;
-    readonly limit?: number;
-    readonly cursor?: string;
-}
-interface LearningPage {
-    readonly items: readonly LearnedCapabilityRecord[];
-    readonly nextCursor?: string;
-    readonly revision: number;
-}
-interface LearningSubscribeOptions {
-    readonly afterRevision?: number;
-}
-interface LearningExplicitUserAuthority {
-    readonly authority: 'explicit_user';
-    readonly expectedRevision: number;
-    readonly expectedFingerprint?: string;
-}
-interface LearningActionDriver {
-    readonly carrier: LearnedCapabilityCarrier;
-    readonly actions: readonly LearningAction[];
-    execute(action: LearningAction, capability: LearnedCapabilityRecord): Promise<LearnedCapabilityRecord>;
-}
-type LearningCapabilityErrorCode = 'ambiguous_name' | 'action_failed' | 'capability_not_found' | 'invalid_record' | 'invalid_transition' | 'store_integrity_error' | 'unsupported_action';
-declare class LearningCapabilityError extends Error {
-    readonly code: LearningCapabilityErrorCode;
-    constructor(code: LearningCapabilityErrorCode, message: string);
-}
-declare function canTransitionLearnedCapability(from: LearnedCapabilityLifecycle, to: LearnedCapabilityLifecycle): boolean;
-declare function assertLearnedCapabilityTransition(from: LearnedCapabilityLifecycle, to: LearnedCapabilityLifecycle): void;
-declare function slugifyLearnedCapabilityName(displayName: string): string;
-declare function learningEventKindForLifecycle(lifecycle: LearnedCapabilityLifecycle): LearningEventKind;
-declare function learningEventIdFor(record: LearnedCapabilityRecord): string;
-
 interface LearnedAreaPaths {
     readonly root: string;
     readonly skills: string;
@@ -2780,1074 +2608,6 @@ declare function sanitizeUnifiedLearningReviewInput(input: UnifiedLearningReview
 declare function isUnifiedLearningReviewModelInput(value: unknown): value is UnifiedLearningReviewModelInput;
 declare function normalizeUnifiedLearningReview(input: UnifiedLearningReviewModelInput, raw: unknown): UnifiedLearningReviewResult;
 
-/**
- * ../../index.js Compaction Types
- */
-
-interface CompactionConfig {
-    /** Independent of the main turn; defaults off, or to a low supported effort on always-on models. */
-    reasoning?: boolean | KodaXReasoningRequest;
-    /** @deprecated Automatic large compaction is always enabled. */
-    enabled: boolean;
-    /**
-     * Automatic large-compaction threshold percentage. Defaults to 75 and is
-     * normalized to the inclusive 15-90 range.
-     */
-    triggerPercent: number;
-    /**
-     * Optional absolute token threshold. Missing or zero is inactive; otherwise
-     * the smaller percentage/absolute/physical threshold wins.
-     */
-    triggerTokens?: number;
-    /**
-     * @deprecated V2 compaction no longer uses this option.
-     * FEATURE_272 derives protection from the effective trigger and covers the
-     * complete eligible prefix in one logical wave.
-     */
-    keepRecentPercent?: number;
-    /**
-     * @deprecated Large compaction protects 20% of its effective trigger.
-     * Retained only for source compatibility with v0.7.x callers.
-     */
-    protectionPercent?: number;
-    /**
-     * @deprecated FEATURE_272 replaces rolling summary passes with one complete
-     * eligible-prefix wave. Retained for source compatibility.
-     */
-    rollingSummaryPercent?: number;
-    /**
-     * Explicit legacy opt-in for destructive emergency pruning after semantic
-     * compaction cannot restore a physically valid request. Undefined keeps the
-     * fallback disabled.
-     */
-    pruningThresholdTokens?: number;
-    /**
-     * Legacy deterministic-pruning gap ratio. Only relevant when
-     * `pruningThresholdTokens` is explicitly configured.
-     */
-    pruningGapRatio?: number;
-    /** Optional override for the provider context window. */
-    contextWindow?: number;
-}
-interface CompactionDetails {
-    readFiles: string[];
-    modifiedFiles: string[];
-}
-interface CompactionAnchor {
-    summary: string;
-    tokensBefore: number;
-    tokensAfter: number;
-    entriesRemoved: number;
-    reason: string;
-    artifactLedgerId?: string;
-    details?: CompactionDetails;
-    memorySeed?: KodaXCompactMemorySeed;
-}
-interface CompactionUpdate {
-    /**
-     * Exact host-only snapshot used to reconcile lineage before durable commit.
-     * It is intentionally not part of the persisted CompactionEntry or provider
-     * context. Hosts may evict old message bodies only after saving this state.
-     */
-    preCompactionMessages?: readonly KodaXMessage[];
-    anchor?: CompactionAnchor;
-    artifactLedger?: KodaXSessionArtifactLedgerEntry[];
-    memorySeed?: KodaXCompactMemorySeed;
-    /**
-     * FEATURE_072: ledger-summary + file-content messages produced by
-     * `buildPostCompactAttachments` + `buildFileContentMessages`. Agent.ts
-     * passes these separately from the kept-tail messages so REPL-side
-     * `applySessionCompaction` can store them natively on the CompactionEntry
-     * rather than inlining them as loose `[Post-compact: ...]` system messages
-     * in lineage. Agent.ts keeps inlining them into its local flat `messages`
-     * via `injectPostCompactAttachments` (P4 belt-and-suspenders); the lineage
-     * is the persistence source of truth.
-     */
-    postCompactAttachments?: readonly KodaXMessage[];
-    /** Canonical metrics for one committed large-compaction transaction. */
-    report?: CompactionReport;
-}
-interface CompactionReport {
-    /** Physical summary calls, including map/reduce; never contains prompt or output text. */
-    readonly summaryRequests?: readonly CompactionRequestMetrics[];
-    /** Durable history commit only; excludes summary generation. */
-    readonly commitMs?: number;
-    readonly strategy: 'full_prefix' | 'map_reduce';
-    readonly triggerSource: 'percentage' | 'absolute' | 'physical_capacity';
-    readonly effectiveTriggerTokens: number;
-    readonly protectedBudgetTokens: number;
-    readonly fixedInputTokens: number;
-    readonly eligibleTokens: number;
-    readonly rawTailTokens: number;
-    readonly summaryTokens: number;
-    readonly queryLedgerTokens: number;
-}
-interface CompactionRequestMetrics {
-    readonly provider: string;
-    readonly model: string;
-    /** Requested summary policy; the provider may adapt it to its capabilities. */
-    readonly reasoning: boolean | KodaXReasoningRequest;
-    readonly prepareMs: number;
-    readonly credentialMs: number;
-    /** Includes retries and their waits. firstDeltaMs is an offset within this duration. */
-    readonly providerMs: number;
-    readonly firstDeltaMs?: number;
-    /** Retries reported by the provider adapter; excludes opaque upstream retries. */
-    readonly retryCount: number;
-    readonly retryWaitMs: number;
-    readonly usage?: KodaXTokenUsage;
-    readonly stopReason?: string;
-    readonly outcome: 'succeeded' | 'failed';
-}
-interface CompactionResult {
-    compacted: boolean;
-    messages: KodaXMessage[];
-    summary?: string;
-    tokensBefore: number;
-    tokensAfter: number;
-    entriesRemoved: number;
-    details?: CompactionDetails;
-    artifactLedger?: KodaXSessionArtifactLedgerEntry[];
-    anchor?: CompactionAnchor;
-    memorySeed?: KodaXCompactMemorySeed;
-    report?: CompactionReport;
-}
-interface FileOperations {
-    readFiles: string[];
-    modifiedFiles: string[];
-}
-
-/**
- * FEATURE_217 (v0.7.49) — Workflow run-graph events.
- *
- * Append-only event stream for a workflow run. Each event carries a
- * monotonic `seq` so ordering is stable and verifiable regardless of
- * wall-clock (the durable writer in Phase D adds timestamps via an
- * injected clock). The run graph models agent relationships as a
- * thread/edge/event stream, not just a final summary blob.
- */
-type WorkflowEventType = 'workflow_started' | 'phase_started' | 'phase_finished' | 'agent_spawned' | 'agent_message_sent' | 'agent_completed' | 'agent_unverified' | 'agent_failed' | 'agent_summary_updated' | 'agent_stopped' | 'agent_replayed' | 'workflow_log' | 'artifact_written' | 'synthesis_completed' | 'workflow_completed' | 'workflow_stopped' | 'workflow_failed';
-interface WorkflowEvent {
-    /** Monotonic sequence number — stable append ordering. */
-    readonly seq: number;
-    readonly type: WorkflowEventType;
-    /** Structured payload (agent name/id, phase name, error message, …). */
-    readonly data?: Record<string, unknown>;
-}
-/**
- * Append-only event recorder. Assigns sequential `seq` and fans each
- * event out to an optional sink (the durable JSONL writer / UI consumer
- * subscribes here in Phase D).
- */
-declare class WorkflowEventRecorder {
-    private readonly sink?;
-    private seq;
-    private readonly events;
-    constructor(sink?: ((event: WorkflowEvent) => void) | undefined);
-    /** Append an event, returning the materialized record. */
-    emit(type: WorkflowEventType, data?: Record<string, unknown>): WorkflowEvent;
-    /** Immutable snapshot of all events emitted so far. */
-    snapshot(): readonly WorkflowEvent[];
-}
-
-/**
- * FEATURE_217 (v0.7.49) — Dynamic Workflow Harness Runtime: public types.
- *
- * Domain-neutral workflow orchestration surface. A workflow *script*
- * coordinates (decompose / fan-out / loop / wait / stop / verify /
- * synthesize); it never touches files or shell directly. The actual
- * agent execution is delegated to an injected `WorkflowAgentBackend`
- * (the coding layer provides the real one in Phase B; tests inject a
- * fake). This keeps `@kodax-ai/agent` free of any `@kodax-ai/coding`
- * dependency (ADR-021 layer independence).
- */
-/** Lifecycle status of a single workflow-spawned agent. */
-type WorkflowTaskStatus = 'running' | 'completed' | 'completed_unverified' | 'failed' | 'stopped';
-/** Routing hint for which provider/model tier the child should use. */
-type WorkflowModelHint = 'fast' | 'balanced' | 'deep';
-/** Isolation policy for a spawned agent. `shared-cwd` is the default
- *  (FEATURE_188); `worktree` is opt-in for high-risk parallel writes. */
-type WorkflowIsolation = 'shared-cwd' | 'worktree';
-/**
- * Machine-checkable postconditions for a workflow child task. The agent
- * package only defines the contract; concrete backends decide which evidence
- * they can verify.
- */
-interface WorkflowTaskVerification {
-    readonly enforcement?: 'hard' | 'warn';
-    readonly requiresMutation?: boolean;
-    readonly requiredChangedPaths?: readonly string[];
-    /** Read-tool paths that must be observed before accepting a review verdict. */
-    readonly requiredReadPaths?: readonly string[];
-    readonly minFinalTextChars?: number;
-    readonly rejectPreparatoryFinalText?: boolean;
-}
-interface WorkflowTaskVerificationResult {
-    readonly ok: boolean;
-    readonly enforcement?: 'hard' | 'warn';
-    readonly reasons: readonly string[];
-    readonly changedPaths?: readonly string[];
-    readonly mutationToolCalls?: readonly string[];
-    readonly mutationEvidence?: boolean;
-    readonly readPaths?: readonly string[];
-}
-interface WorkflowAgentTarget {
-    readonly agentId: string;
-    readonly expectedConfigurationRevision?: string;
-}
-interface WorkflowSpawnAgentInput {
-    /** Human-readable label for the agent — surfaces in events / UI. */
-    readonly name: string;
-    /**
-     * Optional progress-group tag (FEATURE_246 Part E). When set, this agent is
-     * grouped under a phase of that name in the progress display — the per-agent
-     * equivalent of wrapping a block in `wf.phase(name, fn)`, matching the harness
-     * `agent(..., { phase })`. The phase group is created on first use. Agents
-     * with no `phase` fall under the currently-active `wf.phase(...)` block (if any).
-     */
-    readonly phase?: string;
-    /** The task prompt handed to the child agent. */
-    readonly prompt: string;
-    /** Compact scope summary copied into the child briefing without retyping the diff. */
-    readonly scopeSummary?: string;
-    /** Binding constraints/interfaces the child cannot discover locally. */
-    readonly constraints?: readonly string[];
-    /** When true, the child runs with a read-only tool whitelist. */
-    readonly readOnly?: boolean;
-    /** Route to a registered specialist agent (FEATURE_191). */
-    readonly subagentType?: string;
-    /** Route through the shared dispatchable-agent catalog (FEATURE_258). */
-    readonly target?: WorkflowAgentTarget;
-    /**
-     * Per-agent model TIER (FEATURE_120 model_hint). The script expresses semantic
-     * intent — 'fast' (cheap), 'deep' (strong), 'balanced' (default) — NOT a
-     * concrete model name: the authoring model has no cognition of which
-     * providers/models a given operator has configured. The operator maps the
-     * tiers to concrete models via env (KODAX_FAST/DEEP_PROVIDER/MODEL); when a
-     * tier is unconfigured the child inherits the parent provider/model. 'fast'
-     * applies to read-only children
-     * only (write/codegen stays on the parent tier — a quality guard).
-     */
-    readonly modelHint?: WorkflowModelHint;
-    /** Isolation policy; defaults to `shared-cwd`. */
-    readonly isolation?: WorkflowIsolation;
-    /** Per-child reasoning effort hint (e.g. 'low' | 'medium' | 'high' | 'max').
-     *  The backend maps it onto the child's reasoning resolver; omit to inherit
-     *  the parent/default effort. Opaque string so the agent layer needs no
-     *  coding effort-enum dependency. */
-    readonly effort?: string;
-    /** Evidence refs (`task_id:<id>` etc.) seeded into the child context. */
-    readonly evidenceRefs?: readonly string[];
-    /** Optional machine-checkable postconditions for this child task. */
-    readonly verification?: WorkflowTaskVerification;
-    /**
-     * Optional JSON Schema (FEATURE_246 Part B). When set, the child is asked to
-     * end with a fenced JSON block matching the schema; the backend parses and
-     * validates it (with one bounded repair turn on a hard miss) and returns the
-     * parsed object on `WorkflowTaskResult.structured`. Orthogonal to
-     * `verification` (which checks side-effects, not return shape). Carried as an
-     * opaque value so the agent layer needs no JSON-Schema dependency.
-     */
-    readonly outputSchema?: unknown;
-    /** Register concise finalText for digest reuse; trusted host provenance is checked separately. */
-    readonly terseResult?: boolean;
-}
-/** Returned by `spawnAgent` — the child is in-flight, not yet complete. */
-interface WorkflowTaskHandle {
-    readonly taskId: string;
-    readonly name: string;
-}
-interface WorkflowTaskUsage {
-    readonly inputTokens?: number;
-    readonly outputTokens?: number;
-    readonly totalTokens?: number;
-    readonly cacheReadTokens?: number;
-}
-type WorkflowTaskSummaryKind = 'digest' | 'excerpt' | 'digest-failed' | 'pending';
-interface WorkflowTaskSummaryEventUpdate {
-    readonly summary?: string;
-    readonly summaryKind: WorkflowTaskSummaryKind;
-    readonly usage?: WorkflowTaskUsage;
-}
-/** Terminal result of a spawned agent (from `wait` / `runAgent`). */
-interface WorkflowTaskResult {
-    readonly taskId: string;
-    readonly name: string;
-    readonly status: WorkflowTaskStatus;
-    readonly finalText: string;
-    /** Schema-validated structured result (FEATURE_246 Part B), present when the
-     *  spawn carried `outputSchema` and a JSON value was parsed from the child's
-     *  output. The workflow script consumes it directly (e.g. `result.structured`). */
-    readonly structured?: unknown;
-    /** Durable artifacts produced by this Agent turn. */
-    readonly artifacts?: readonly string[];
-    /** Short user-facing digest, separate from the full finalText used for synthesis/audit. */
-    readonly digest?: string;
-    /** True when a digest was attempted but failed (error/timeout/empty); the UI then labels the excerpt fallback. */
-    readonly digestFailed?: boolean;
-    /** True when a digest was scheduled asynchronously and may arrive via `agent_summary_updated`. */
-    readonly digestPending?: boolean;
-    /** Task postcondition check, when a backend evaluated one. */
-    readonly verification?: WorkflowTaskVerificationResult;
-    /** True when the child exhausted its iteration budget before completing. */
-    readonly limitReached?: boolean;
-    /** Best-known provider/model used by the child, for host correlation only. */
-    readonly provider?: string;
-    readonly model?: string;
-    /** Requested semantic tier and how the local runtime resolved it. */
-    readonly requestedTier?: WorkflowModelHint | 'inherited';
-    readonly tierOutcome?: 'applied' | 'balanced-parent' | 'fast-write-ineligible' | 'unconfigured' | 'shadowed-by-selector' | 'inherited';
-    readonly providerSource?: 'explicit' | 'specialist' | 'tier' | 'parent' | 'default';
-    readonly modelSource?: 'explicit' | 'specialist' | 'tier' | 'parent';
-    readonly initialProvider?: string;
-    readonly initialModel?: string;
-    readonly finalProvider?: string;
-    readonly finalModel?: string;
-    readonly fallbackReason?: string;
-    readonly resolvedEffort?: string;
-    readonly iterations?: number;
-    readonly durationMs?: number;
-    readonly digestUsage?: WorkflowTaskUsage;
-    readonly usage?: WorkflowTaskUsage;
-}
-/** Point-in-time snapshot of a (possibly still-running) agent. */
-interface WorkflowTaskSnapshot {
-    readonly taskId: string;
-    readonly name: string;
-    readonly status: WorkflowTaskStatus;
-    readonly lastText?: string;
-}
-interface WorkflowWaitOptions {
-    readonly timeoutMs?: number;
-}
-interface WorkflowParallelOptions {
-    /** In-flight cap for this parallel block; clamped by workflow
-     *  maxConcurrency. */
-    readonly concurrency?: number;
-}
-interface WorkflowSynthesizeInput {
-    readonly inputs: readonly unknown[] | string | Record<string, unknown>;
-    readonly rubric: string;
-}
-interface WorkflowSynthesis {
-    readonly text: string;
-}
-interface WorkflowArtifactRef {
-    readonly name: string;
-    readonly path?: string;
-}
-interface WorkflowLogEvent {
-    readonly message: string;
-    readonly data?: unknown;
-}
-/**
- * Token budget accounting. The runtime hard-stops before launching a new
- * agent once completed children have exhausted the configured budget.
- */
-interface WorkflowBudget {
-    /** Configured token budget, or null when unbounded. */
-    readonly total: number | null;
-    /** Tokens accounted across completed agents so far. */
-    spent(): number;
-    /** `max(0, total - spent())`, or Infinity when unbounded. */
-    remaining(): number;
-}
-interface WorkflowLimits {
-    /** Total agents spawnable across the whole run lifetime. */
-    readonly maxAgents?: number;
-    /** Maximum simultaneously in-flight agents (via runAgent / parallel). */
-    readonly maxConcurrency?: number;
-    /** Token budget. New spawns stop once completed usage exhausts it. */
-    readonly tokenBudget?: number;
-}
-/**
- * The surface a workflow script consumes. The script never gets raw
- * fs/shell — all effects route through agent tools behind the backend.
- */
-interface WorkflowApi {
-    readonly runId: string;
-    readonly args: unknown;
-    readonly budget: WorkflowBudget;
-    /** Group operations under a named phase (emits phase_started/finished). */
-    phase<T>(name: string, fn: () => Promise<T>): Promise<T>;
-    /** Start a child agent; returns immediately with a handle. */
-    spawnAgent(input: WorkflowSpawnAgentInput): Promise<WorkflowTaskHandle>;
-    /** spawnAgent + wait convenience; returns the terminal result, or `null` if
-     *  the child ended failed/stopped (FEATURE_246 Part E lenient failure — the
-     *  harness `agent()` semantics, so scripts can `.filter(Boolean)` instead of
-     *  wrapping every call in try/catch). Abort and budget/agent-cap limits still
-     *  throw. */
-    runAgent(input: WorkflowSpawnAgentInput): Promise<WorkflowTaskResult | null>;
-    /** Await a spawned agent's terminal result. */
-    wait(taskId: string, opts?: WorkflowWaitOptions): Promise<WorkflowTaskResult>;
-    /** Snapshot a (possibly running) agent. */
-    snapshot(taskId: string): Promise<WorkflowTaskSnapshot>;
-    /** Snapshot a (possibly running) agent.
-     *  @deprecated Prefer `snapshot(taskId)`; `output` is kept as a compatibility alias. */
-    output(taskId: string): Promise<WorkflowTaskSnapshot>;
-    /** Send a message to a running Agent through its Actor mailbox. */
-    send(taskId: string, content: string): Promise<void>;
-    /** Stop a running agent (graceful abort). */
-    stop(taskId: string, reason: string): Promise<void>;
-    /** Run lazy thunks concurrently under the concurrency gate. Thunks
-     *  MUST be `() => Promise<T>` (not already-started promises) so the
-     *  runtime can bound concurrency. A thunk that throws (or whose agent fails)
-     *  resolves to `null` in the result array — the call itself never rejects, so
-     *  `.filter(Boolean)` before use (FEATURE_246 Part E, harness parity). Abort
-     *  still tears down the whole run. */
-    parallel<T>(items: readonly (() => Promise<T>)[], opts?: WorkflowParallelOptions): Promise<(T | null)[]>;
-    /**
-     * Stream items through ordered stages with NO barrier between stages: an
-     * item advances to stage N+1 as soon as its own stage N resolves,
-     * independent of other items (wall-clock = slowest single chain, not
-     * sum-of-slowest-per-stage). Each stage receives `(prev, item, index)`
-     * where `prev` is the previous stage's result (the original item at
-     * stage 1). A stage that throws drops that item to `null` and skips its
-     * remaining stages; results preserve input order. Agent spawns inside
-     * stages stay bounded by the workflow `maxConcurrency` gate. Optional:
-     * the restricted-script bootstrap always provides it; SDK consumers get
-     * it from the runtime. */
-    pipeline?(items: readonly unknown[], ...stages: readonly ((prev: unknown, item: unknown, index: number) => unknown)[]): Promise<unknown[]>;
-    /** Synthesize across inputs. Runs as a gated agent through the runtime
-     *  (spawn → wait), so it counts toward maxAgents / concurrency / budget
-     *  and emits run-graph events — it is NOT a backend side-channel. */
-    synthesize(input: WorkflowSynthesizeInput): Promise<WorkflowSynthesis>;
-    /**
-     * Run another saved/built-in workflow inline as a sub-step (FEATURE_246 Part E,
-     * harness parity). Resolves the module by name via the host-injected resolver
-     * and runs it under THIS run's runtime — sharing the same concurrency cap,
-     * agent counter, token budget, and abort signal. **One level only**: calling
-     * `workflow(...)` from inside a nested workflow throws. Returns whatever the
-     * sub-workflow's `run` returns. Optional: present when a resolver is wired
-     * (the restricted-script bootstrap provides it; SDK consumers may omit). */
-    workflow?(name: string, args?: unknown): Promise<unknown>;
-    /** Persist a named artifact. */
-    artifact(name: string, value: unknown): Promise<WorkflowArtifactRef>;
-    /** Emit a free-text progress log event. */
-    log(event: WorkflowLogEvent): void;
-}
-/** Metadata a workflow declares (name, description, default caps). */
-interface WorkflowMeta {
-    readonly name: string;
-    readonly description: string;
-    /** Best-effort expected child-agent count for progress UI; not a hard cap. */
-    readonly plannedAgents?: number;
-    readonly maxAgents?: number;
-    readonly maxConcurrency?: number;
-    readonly tokenBudget?: number;
-    /** True when the workflow only ever spawns read-only agents (no file
-     *  writes) — surfaced in the approval prompt. */
-    readonly readOnly?: boolean;
-    /** Declared phase names, for the approval prompt preview. */
-    readonly phases?: readonly string[];
-}
-/** Summary shown to the user before a workflow's first run. */
-interface WorkflowApprovalSummary {
-    readonly name: string;
-    readonly description: string;
-    readonly phases: readonly string[];
-    readonly plannedAgents?: number;
-    readonly maxAgents: number | null;
-    readonly maxConcurrency: number | null;
-    readonly tokenBudget: number | null;
-    /** Whether the workflow may write files (false for read-only workflows). */
-    readonly writesFiles: boolean;
-}
-/** Approval gate — returns true to proceed, false to cancel the run. */
-type WorkflowApproval = (summary: WorkflowApprovalSummary) => boolean | Promise<boolean>;
-/** A workflow's entry function: coordinates agents via the `WorkflowApi`. */
-type WorkflowRun<TArgs = unknown, TResult = unknown> = (wf: WorkflowApi, args: TArgs) => Promise<TResult>;
-/** A self-contained workflow: metadata + entry function. Built-in
- *  workflows (Phase C) and saved `.kodax/workflows/*.ts` (Phase E) both
- *  materialize to this shape. */
-interface WorkflowModule<TArgs = unknown, TResult = unknown> {
-    readonly meta: WorkflowMeta;
-    readonly run: WorkflowRun<TArgs, TResult>;
-}
-/** Injected execution backend over the host's Runtime-owned Actor plane. */
-interface WorkflowAgentBackend {
-    spawn(input: WorkflowSpawnAgentInput): Promise<WorkflowTaskHandle>;
-    /** Wait until the global Actor scheduler can admit a step. False means no slot can ever exist. */
-    waitForAgentCapacity?(signal?: AbortSignal): Promise<boolean>;
-    wait(taskId: string, opts?: WorkflowWaitOptions): Promise<WorkflowTaskResult>;
-    output(taskId: string): Promise<WorkflowTaskSnapshot>;
-    send(taskId: string, content: string): Promise<void>;
-    stop(taskId: string, reason: string): Promise<void>;
-    /** Optional late summary stream for presentation-only async digests. */
-    subscribeTaskSummaryUpdates?(listener: (taskId: string, update: WorkflowTaskSummaryEventUpdate) => void): () => void;
-    /** Optional durable artifact writer (Phase D wires the run graph).
-     *  `wf.synthesize` is NOT a backend method — it runs as a gated agent
-     *  through `spawn`/`wait` so it counts toward the runtime's caps. */
-    writeArtifact?(name: string, value: unknown): Promise<WorkflowArtifactRef>;
-}
-type WorkflowRunStatus = 'running' | 'completed' | 'failed' | 'stopped';
-type WorkflowOutcomeStatus = 'completed' | 'partial' | 'failed' | 'interrupted';
-interface WorkflowOutcomeResult {
-    readonly taskId: string;
-    readonly name: string;
-    readonly status: WorkflowTaskStatus;
-    readonly summary: string;
-    readonly structured?: unknown;
-    readonly artifacts: readonly string[];
-    readonly usage?: WorkflowTaskUsage;
-}
-interface WorkflowOutcomeError {
-    readonly taskId?: string;
-    readonly name?: string;
-    readonly message: string;
-}
-interface WorkflowOutcomeUsage extends WorkflowTaskUsage {
-    readonly totalSpawned: number;
-}
-/** Stable terminal payload exposed through the Workflow protocol owner's Agent output. */
-interface WorkflowOutcome {
-    readonly runId: string;
-    readonly status: WorkflowOutcomeStatus;
-    readonly summary: string;
-    readonly results: readonly WorkflowOutcomeResult[];
-    readonly artifacts: readonly WorkflowArtifactRef[];
-    readonly coverage: readonly string[];
-    readonly unresolved: readonly string[];
-    readonly errors: readonly WorkflowOutcomeError[];
-    readonly usage: WorkflowOutcomeUsage;
-}
-/** Immutable snapshot of a workflow run's accumulated state. */
-interface WorkflowRunState {
-    readonly runId: string;
-    readonly status: WorkflowRunStatus;
-    readonly totalSpawned: number;
-    readonly results: readonly WorkflowTaskResult[];
-    readonly events: readonly WorkflowEvent[];
-    readonly artifacts: readonly WorkflowArtifactRef[];
-}
-
-type WorkflowProcessStatus = 'running' | 'paused' | 'completed' | 'failed' | 'cancelled';
-type WorkflowProcessItemStatus = 'pending' | 'running' | 'completed' | 'failed' | 'cancelled' | 'skipped';
-type WorkflowProcessItemKind = 'phase' | 'agent' | 'step' | 'artifact';
-/**
- * FEATURE_246 resume telemetry — how an agent item came to be in a resumed run.
- * `ran` = executed live this run; `replayed-from-cache` = returned instantly from
- * a prior run's content-addressed result cache (resumeFromRunId). Only populated
- * on resumed runs; absent on a fresh run (treat absent as `ran`).
- */
-type WorkflowProcessItemOrigin = 'ran' | 'replayed-from-cache';
-type WorkflowProcessSummaryStatus = 'pending' | 'result' | 'notice' | 'unavailable';
-type WorkflowProcessSource = 'command' | 'review' | 'sdk' | 'capsule' | 'extension' | 'automation';
-interface WorkflowProcessItem {
-    readonly id: string;
-    readonly title: string;
-    readonly kind: WorkflowProcessItemKind;
-    readonly status: WorkflowProcessItemStatus;
-    readonly phaseId?: string;
-    readonly parentId?: string;
-    readonly agentId?: string;
-    readonly childAgentId?: string;
-    readonly provider?: string;
-    readonly model?: string;
-    readonly startedAt?: string;
-    readonly endedAt?: string;
-    readonly summary?: string;
-    readonly summaryStatus?: WorkflowProcessSummaryStatus;
-    readonly error?: string;
-    /** FEATURE_246 resume telemetry — see {@link WorkflowProcessItemOrigin}. */
-    readonly origin?: WorkflowProcessItemOrigin;
-}
-interface WorkflowEventCorrelation {
-    readonly workflowRunId: string;
-    readonly childAgentId?: string;
-    readonly phaseId?: string;
-    readonly itemId?: string;
-}
-interface WorkflowProcessCounts {
-    readonly pending: number;
-    readonly running: number;
-    readonly completed: number;
-    readonly failed: number;
-    readonly cancelled: number;
-    readonly skipped: number;
-}
-interface WorkflowProcessProgress {
-    readonly spawnedAgents: number;
-    readonly finishedAgents: number;
-    readonly activeAgents: number;
-    readonly failedAgents: number;
-    readonly stoppedAgents: number;
-    readonly agentCap?: number;
-    readonly plannedItems?: number;
-    /** FEATURE_246 resume telemetry — count of agents that replayed from a prior
-     *  run's cache (origin `replayed-from-cache`). Present only when > 0, so a
-     *  fresh run's progress is unchanged. */
-    readonly replayedAgents?: number;
-}
-interface WorkflowProcessTokenUsage {
-    readonly spent: number;
-    readonly total?: number;
-}
-interface WorkflowProcessArtifact {
-    readonly name: string;
-    readonly path?: string;
-    readonly description?: string;
-}
-interface WorkflowProcessSnapshot {
-    readonly runId: string;
-    readonly workflowName: string;
-    readonly displayName?: string;
-    readonly status: WorkflowProcessStatus;
-    readonly startedAt: string;
-    readonly updatedAt: string;
-    readonly elapsedMs?: number;
-    readonly goal?: string;
-    readonly source?: WorkflowProcessSource;
-    readonly savedWorkflowName?: string;
-    readonly sourceRunId?: string;
-    readonly sourceWorkflowName?: string;
-    readonly revisionOf?: string;
-    /** FEATURE_246 resume telemetry — the prior run this run resumed from
-     *  (content-addressed replay). Absent on a fresh (non-resumed) run. */
-    readonly resumedFromRunId?: string;
-    readonly hostMetadata?: Record<string, string>;
-    readonly activePhaseId?: string;
-    readonly activePhaseIndex?: number;
-    readonly phaseCount?: number;
-    readonly items: readonly WorkflowProcessItem[];
-    readonly counts: WorkflowProcessCounts;
-    readonly progress: WorkflowProcessProgress;
-    readonly tokens?: WorkflowProcessTokenUsage;
-    readonly latestMessage?: string;
-    readonly resultSummary?: string;
-    readonly error?: string;
-    readonly artifacts?: readonly WorkflowProcessArtifact[];
-}
-type WorkflowProcessEvent = {
-    readonly type: 'workflow_started';
-    readonly snapshot: WorkflowProcessSnapshot;
-} | {
-    readonly type: 'workflow_updated';
-    readonly snapshot: WorkflowProcessSnapshot;
-    readonly message?: string;
-} | {
-    readonly type: 'workflow_finished';
-    readonly snapshot: WorkflowProcessSnapshot;
-};
-interface WorkflowProcessTrackerOptions {
-    readonly runId: string;
-    readonly workflowName: string;
-    readonly displayName?: string;
-    readonly goal?: string;
-    readonly source?: WorkflowProcessSource;
-    readonly savedWorkflowName?: string;
-    readonly sourceRunId?: string;
-    readonly sourceWorkflowName?: string;
-    readonly revisionOf?: string;
-    /** FEATURE_246 resume telemetry — the prior run this run resumed from. */
-    readonly resumedFromRunId?: string;
-    readonly hostMetadata?: Record<string, string>;
-    readonly phases?: readonly string[];
-    readonly maxAgents?: number;
-    readonly plannedAgents?: number;
-    readonly tokenBudget?: number;
-    readonly resultSummary?: string;
-    readonly artifacts?: readonly WorkflowArtifactRef[];
-    readonly now?: () => string;
-}
-interface WorkflowTaskSummaryUpdate {
-    readonly summary?: string;
-    readonly summaryStatus: WorkflowProcessSummaryStatus;
-}
-interface WorkflowProcessTracker {
-    applyEvent(event: WorkflowEvent): WorkflowProcessEvent;
-    updateTaskSummary(taskId: string, update: WorkflowTaskSummaryUpdate): WorkflowProcessEvent | undefined;
-    setStatus(status: WorkflowProcessStatus, message?: string): WorkflowProcessEvent;
-    setResultSummary(resultSummary: string | undefined): WorkflowProcessEvent;
-    getSnapshot(): WorkflowProcessSnapshot;
-}
-declare function isFinalWorkflowProcessStatus(status: WorkflowProcessStatus): boolean;
-declare function normalizeHostMetadata(value: unknown): Record<string, string> | undefined;
-declare function createWorkflowProcessTracker(options: WorkflowProcessTrackerOptions): WorkflowProcessTracker;
-
-type DispatchableAgentOrigin = 'native' | 'constructed' | 'external';
-type AgentExecutorProtocol = 'native' | 'a2a' | 'mcp' | 'http';
-type ExternalAgentProtocol = Exclude<AgentExecutorProtocol, 'native'>;
-type CapabilitySupport = 'supported' | 'unsupported' | 'conditional';
-type AgentJsonValue = string | number | boolean | null | AgentJsonObject | readonly AgentJsonValue[];
-interface AgentJsonObject {
-    readonly [key: string]: AgentJsonValue;
-}
-interface AgentCapabilityDeclaration {
-    readonly streaming: CapabilitySupport;
-    readonly durableTasks: CapabilitySupport;
-    readonly inputRequired: CapabilitySupport;
-    readonly cancellation: CapabilitySupport;
-    readonly artifacts: CapabilitySupport;
-}
-interface AgentEffectDeclaration {
-    readonly remote: 'none' | 'read' | 'write' | 'unknown';
-    readonly workspace: 'none' | 'proposal' | 'direct';
-}
-interface ExternalAgentEffectDeclaration extends AgentEffectDeclaration {
-    readonly workspace: 'none' | 'proposal';
-}
-interface DispatchableAgentDescriptor {
-    readonly agentId: string;
-    readonly displayName: string;
-    readonly description?: string;
-    readonly origin: DispatchableAgentOrigin;
-    readonly protocol: AgentExecutorProtocol;
-    readonly configurationRevision: string;
-    readonly skills: readonly string[];
-    readonly inputModalities: readonly string[];
-    readonly outputModalities: readonly string[];
-    readonly capabilities: AgentCapabilityDeclaration;
-    readonly effects: AgentEffectDeclaration;
-}
-type AgentDispatchabilityStatus = 'dispatchable' | 'degraded' | 'busy' | 'unavailable';
-interface AgentDispatchabilitySnapshot {
-    readonly status: AgentDispatchabilityStatus;
-    readonly checkedAt: string;
-    readonly reasons: readonly string[];
-    readonly retryAfterMs?: number;
-}
-interface DispatchableAgentListing {
-    readonly descriptor: DispatchableAgentDescriptor;
-    readonly dispatchability: AgentDispatchabilitySnapshot;
-}
-interface AgentDispatchContext {
-    readonly actorId: string;
-    readonly projectId?: string;
-    readonly workflowId?: string;
-    readonly parentTaskId?: string;
-    readonly runId?: string;
-    readonly nodeId?: string;
-    readonly dataClassifications?: readonly string[];
-    readonly budget?: number;
-}
-interface AgentCapabilityRequirements {
-    readonly streaming?: boolean;
-    readonly durableTasks?: boolean;
-    readonly inputRequired?: boolean;
-    readonly cancellation?: boolean;
-    readonly artifacts?: boolean;
-}
-interface DispatchableAgentQuery extends AgentDispatchContext {
-    readonly requiredSkills?: readonly string[];
-    readonly requiredCapabilities?: AgentCapabilityRequirements;
-    readonly readOnly?: boolean;
-}
-interface ExternalAgentHealth {
-    readonly status: 'healthy' | 'degraded' | 'unhealthy';
-    readonly checkedAt: string;
-    readonly retryAfterMs?: number;
-    readonly diagnostic?: string;
-}
-interface ExternalAgentRegistration {
-    readonly agentId: string;
-    readonly displayName: string;
-    readonly description?: string;
-    readonly managementOwner?: string;
-    readonly enabled: boolean;
-    readonly executorId: string;
-    readonly protocol: ExternalAgentProtocol;
-    /**
-     * Stable content identity for this execution route. Producers must issue a
-     * new value whenever immutable execution content changes. The same immutable
-     * content may reuse its stable revision after removal or Runtime restart;
-     * different content must never reuse a revision.
-     */
-    readonly configurationRevision: string;
-    readonly endpointIdentityHash: string;
-    readonly credentialRef?: string;
-    /** Public, JSON-safe executor configuration. Secrets must remain references. */
-    readonly executorConfig?: AgentJsonObject;
-    readonly skills?: readonly string[];
-    readonly inputModalities?: readonly string[];
-    readonly outputModalities?: readonly string[];
-    readonly capabilities: AgentCapabilityDeclaration;
-    readonly effects: ExternalAgentEffectDeclaration;
-    readonly health?: ExternalAgentHealth;
-    readonly maxConcurrency?: number;
-    readonly minimumBudget?: number;
-    readonly allowedDataClassifications?: readonly string[];
-}
-interface ExternalAgentRegistrationSummary {
-    readonly agentId: string;
-    readonly displayName: string;
-    readonly description?: string;
-    readonly managementOwner?: string;
-    readonly enabled: boolean;
-    readonly executorId: string;
-    readonly protocol: ExternalAgentProtocol;
-    readonly configurationRevision: string;
-    readonly endpointIdentityHash: string;
-    readonly credentialConfigured: boolean;
-    readonly capabilities: AgentCapabilityDeclaration;
-    readonly effects: ExternalAgentEffectDeclaration;
-    readonly health?: ExternalAgentHealth;
-    readonly diagnostics: readonly string[];
-}
-interface AgentDispatchPolicyInput {
-    readonly registration: ExternalAgentRegistration;
-    readonly query: DispatchableAgentQuery;
-}
-interface AgentDispatchPolicyDecision {
-    readonly allowed: boolean;
-    readonly reasons?: readonly string[];
-}
-type AgentDispatchPolicy = (input: AgentDispatchPolicyInput) => AgentDispatchPolicyDecision | Promise<AgentDispatchPolicyDecision>;
-interface AgentCredentialBroker {
-    isAvailable?(credentialRef: string): boolean | Promise<boolean>;
-    withCredential<T>(credentialRef: string, use: (credential: string) => Promise<T>): Promise<T>;
-}
-interface AgentArtifactReference {
-    readonly name: string;
-    readonly mimeType?: string;
-    readonly size?: number;
-    readonly hash?: string;
-    readonly uri?: string;
-    readonly provenance?: string;
-    readonly producingAgentId?: string;
-    readonly remoteTaskId?: string;
-}
-interface AgentArtifactPolicyInput {
-    readonly registration: ExternalAgentRegistration;
-    readonly artifact: AgentArtifactReference;
-}
-interface AgentArtifactPolicyDecision {
-    readonly allowed: boolean;
-    readonly reason?: string;
-}
-type AgentArtifactPolicy = (input: AgentArtifactPolicyInput) => AgentArtifactPolicyDecision | Promise<AgentArtifactPolicyDecision>;
-interface AgentTaskUsage {
-    readonly inputTokens?: number;
-    readonly outputTokens?: number;
-    readonly totalTokens?: number;
-    readonly cost?: number;
-    readonly currency?: string;
-}
-type AgentTaskState = 'submitted' | 'working' | 'input-required' | 'auth-required' | 'completed' | 'failed' | 'canceled' | 'rejected' | 'unknown';
-type AgentTaskCancellation = 'none' | 'requested' | 'confirmed' | 'unsupported' | 'failed' | 'unknown';
-interface AgentTaskProgress {
-    readonly message?: string;
-    readonly percent?: number;
-}
-interface AgentTaskCorrelation {
-    readonly parentTaskId?: string;
-    readonly workflowId?: string;
-    readonly runId?: string;
-    readonly nodeId?: string;
-}
-interface AgentTaskRegistrationSnapshot {
-    readonly agentId: string;
-    readonly origin: DispatchableAgentOrigin;
-    readonly executorId: string;
-    readonly protocol: AgentExecutorProtocol;
-    readonly configurationRevision: string;
-    readonly endpointIdentityHash?: string;
-    readonly capabilities: AgentCapabilityDeclaration;
-    readonly effects: AgentEffectDeclaration;
-}
-interface AgentExecutorTaskReference {
-    readonly idempotencyKey: string;
-    readonly remoteTaskId?: string;
-    readonly metadata?: AgentJsonObject;
-}
-interface AgentTaskSnapshot extends AgentTaskCorrelation {
-    readonly taskId: string;
-    readonly route: 'local' | 'external';
-    readonly agentId: string;
-    readonly objective: string;
-    readonly state: AgentTaskState;
-    readonly cancellation: AgentTaskCancellation;
-    readonly registration: AgentTaskRegistrationSnapshot;
-    readonly idempotencyKey: string;
-    readonly dispatchAttempt: number;
-    readonly createdAt: string;
-    readonly updatedAt: string;
-    readonly remoteTaskId?: string;
-    readonly executorReference?: AgentExecutorTaskReference;
-    readonly progress?: AgentTaskProgress;
-    readonly output?: string;
-    readonly error?: string;
-    readonly cancellationError?: string;
-    readonly artifacts?: readonly AgentArtifactReference[];
-    readonly usage?: AgentTaskUsage;
-}
-interface AgentExecutorTaskSnapshot {
-    readonly state: AgentTaskState;
-    readonly progress?: AgentTaskProgress;
-    readonly output?: string;
-    readonly error?: string;
-    readonly artifacts?: readonly AgentArtifactReference[];
-    readonly usage?: AgentTaskUsage;
-}
-interface AgentTaskStartInput {
-    readonly taskId?: string;
-    readonly agentId: string;
-    readonly objective: string;
-    readonly context: AgentDispatchContext;
-    readonly readOnly?: boolean;
-    readonly requiredSkills?: readonly string[];
-    readonly requiredCapabilities?: AgentCapabilityRequirements;
-    readonly expectedConfigurationRevision?: string;
-    readonly idempotencyKey?: string;
-    readonly input?: string;
-}
-interface AgentContinuationInput {
-    readonly content: string;
-}
-interface AgentExecutorEvent {
-    readonly state?: AgentTaskState;
-    readonly progress?: AgentTaskProgress;
-    readonly output?: string;
-    readonly error?: string;
-    readonly artifacts?: readonly AgentArtifactReference[];
-    readonly usage?: AgentTaskUsage;
-}
-interface AgentTaskEvent extends AgentExecutorEvent {
-    readonly taskId: string;
-    readonly seq: number;
-    readonly timestamp: string;
-    readonly type: 'submitted' | 'state' | 'progress' | 'output' | 'artifact' | 'usage' | 'error' | 'cancellation';
-    readonly cancellation?: AgentTaskCancellation;
-}
-interface AgentExecutorPreflightResult {
-    readonly ok: boolean;
-    readonly reasons?: readonly string[];
-}
-interface AgentExecutor {
-    preflight?(input: AgentTaskStartInput): Promise<AgentExecutorPreflightResult>;
-    start(input: AgentTaskStartInput, signal?: AbortSignal): Promise<AgentExecutorTaskReference>;
-    events(reference: AgentExecutorTaskReference): AsyncIterable<AgentExecutorEvent>;
-    get(reference: AgentExecutorTaskReference): Promise<AgentExecutorTaskSnapshot>;
-    sendInput(reference: AgentExecutorTaskReference, input: AgentContinuationInput): Promise<void>;
-    cancel(reference: AgentExecutorTaskReference, reason?: string): Promise<AgentExecutorTaskSnapshot>;
-    reconcile(reference: AgentExecutorTaskReference): Promise<AgentExecutorTaskSnapshot>;
-    dispose(): Promise<void>;
-}
-interface AgentExecutorFactoryContext {
-    withCredential<T>(credentialRef: string, use: (credential: string) => Promise<T>): Promise<T>;
-    authorizeArtifact(artifact: AgentArtifactReference): Promise<void>;
-}
-interface AgentExecutorFactory {
-    readonly executorId: string;
-    readonly protocol: ExternalAgentProtocol;
-    create(registration: ExternalAgentRegistration, context: AgentExecutorFactoryContext): Promise<AgentExecutor>;
-}
-interface AgentPreflightInput {
-    readonly agentId: string;
-    readonly query: DispatchableAgentQuery;
-    readonly expectedConfigurationRevision?: string;
-}
-interface AgentPreflightResult {
-    readonly ok: boolean;
-    readonly descriptor?: DispatchableAgentDescriptor;
-    readonly dispatchability: AgentDispatchabilitySnapshot;
-    readonly reasons: readonly string[];
-}
-interface AgentTaskFilter {
-    readonly agentId?: string;
-    readonly parentTaskId?: string;
-    readonly workflowId?: string;
-    readonly runId?: string;
-    readonly state?: AgentTaskState | readonly AgentTaskState[];
-}
-interface LocalAgentTaskInput extends AgentTaskCorrelation {
-    readonly taskId: string;
-    readonly agentId: string;
-    readonly objective: string;
-    readonly configurationRevision: string;
-    readonly origin?: 'native' | 'constructed';
-}
-interface LocalAgentTaskUpdate {
-    readonly state?: AgentTaskState;
-    readonly progress?: AgentTaskProgress;
-    readonly output?: string;
-    readonly error?: string;
-    readonly artifacts?: readonly AgentArtifactReference[];
-    readonly usage?: AgentTaskUsage;
-}
-interface AgentExecutorPlaneStore {
-    loadRegistrations(): Promise<readonly ExternalAgentRegistration[]>;
-    saveRegistrations(registrations: readonly ExternalAgentRegistration[]): Promise<void>;
-    /**
-     * Optional compatibility extension for durable executor recovery across a
-     * registration update/removal. Built-in stores implement both hooks. A
-     * custom store that omits them can only recover through a still-current
-     * registration with the same revision; otherwise recovery fails closed.
-     * Implement both hooks or neither. The plane is the single writer and
-     * serializes whole-map replacements. Credential fields in snapshots are
-     * references only; `executorConfig` must likewise contain public data or secret
-     * references, never secret material. A store must never resolve or persist a
-     * referenced secret value.
-     */
-    loadTaskRegistrationSnapshots?(): Promise<readonly ExternalAgentRegistration[]>;
-    saveTaskRegistrationSnapshots?(registrations: readonly ExternalAgentRegistration[]): Promise<void>;
-    loadTasks(): Promise<readonly AgentTaskSnapshot[]>;
-    saveTask(task: AgentTaskSnapshot): Promise<void>;
-    loadEvents(taskId: string): Promise<readonly AgentTaskEvent[]>;
-    appendEvent(event: AgentTaskEvent): Promise<void>;
-}
-interface AgentRegistrationMutationOptions {
-    /** `null` means that no registration may exist; `undefined` disables CAS. */
-    readonly expectedConfigurationRevision?: string | null;
-    /** `null` means that no manager may own the registration; `undefined` disables owner CAS. */
-    readonly expectedManagementOwner?: string | null;
-}
-interface AgentRegistrationEnabledMutationOptions extends AgentRegistrationMutationOptions {
-    /** Atomically claims an unowned registration; a different existing owner is rejected. */
-    readonly claimOwner?: string;
-}
-interface AgentRegistrationService {
-    list(): Promise<readonly ExternalAgentRegistrationSummary[]>;
-    upsert(input: ExternalAgentRegistration, options?: AgentRegistrationMutationOptions): Promise<ExternalAgentRegistrationSummary>;
-    setEnabled(agentId: string, enabled: boolean, options?: AgentRegistrationEnabledMutationOptions): Promise<ExternalAgentRegistrationSummary | undefined>;
-    remove(agentId: string, options?: AgentRegistrationMutationOptions): Promise<boolean>;
-}
-interface AgentTaskService {
-    start(input: AgentTaskStartInput, signal?: AbortSignal): Promise<AgentTaskSnapshot>;
-    list(filter?: AgentTaskFilter): Promise<readonly AgentTaskSnapshot[]>;
-    get(taskId: string): Promise<AgentTaskSnapshot>;
-    events(taskId: string, cursor?: number): Promise<readonly AgentTaskEvent[]>;
-    wait(taskId: string, timeoutMs?: number): Promise<AgentTaskSnapshot>;
-    sendInput(taskId: string, input: AgentContinuationInput): Promise<AgentTaskSnapshot>;
-    cancel(taskId: string, reason?: string): Promise<AgentTaskSnapshot>;
-    reconcile(taskId: string): Promise<AgentTaskSnapshot>;
-    recordLocal(input: LocalAgentTaskInput): Promise<AgentTaskSnapshot>;
-    updateLocal(taskId: string, update: LocalAgentTaskUpdate): Promise<AgentTaskSnapshot>;
-}
-interface AgentExecutorPlaneBinding {
-    readonly plane: AgentExecutorPlane;
-    readonly context: AgentDispatchContext;
-}
-interface AgentExecutorPlane {
-    readonly registrations: AgentRegistrationService;
-    readonly tasks: AgentTaskService;
-    listDispatchable(query: DispatchableAgentQuery, localAgents?: readonly DispatchableAgentDescriptor[]): Promise<readonly DispatchableAgentListing[]>;
-    describe(agentId: string, query: DispatchableAgentQuery, localAgents?: readonly DispatchableAgentDescriptor[]): Promise<DispatchableAgentListing | undefined>;
-    preflight(input: AgentPreflightInput, localAgents?: readonly DispatchableAgentDescriptor[]): Promise<AgentPreflightResult>;
-    close(): Promise<void>;
-}
-interface AgentExecutorPlaneBackgroundErrorContext {
-    readonly operation: 'event-pump-recovery' | 'task-admission-event' | 'executor-dispose';
-    readonly taskId?: string;
-    readonly agentId?: string;
-    readonly configurationRevision?: string;
-}
-type AgentExecutorPlaneBackgroundErrorHandler = (error: Error, context: AgentExecutorPlaneBackgroundErrorContext) => void | Promise<void>;
-interface CreateAgentExecutorPlaneOptions {
-    readonly factories: readonly AgentExecutorFactory[];
-    readonly policy: AgentDispatchPolicy;
-    readonly credentialBroker?: AgentCredentialBroker;
-    readonly artifactPolicy?: AgentArtifactPolicy;
-    /** Receives failures from detached event handling and best-effort resource cleanup. */
-    readonly onBackgroundError?: AgentExecutorPlaneBackgroundErrorHandler;
-    readonly store?: AgentExecutorPlaneStore;
-    readonly now?: () => Date;
-    readonly createTaskId?: () => string;
-    readonly createIdempotencyKey?: () => string;
-    /** Overall bound for draining admitted work and disposing executors during close. */
-    readonly closeTimeoutMs?: number;
-}
-
 interface AgentControllerOptions {
     readonly maxConcurrentThreadsPerSession?: number;
     readonly rootCapabilities?: AgentCapabilities;
@@ -4034,5 +2794,5 @@ declare class AgentActorController {
 }
 declare function createAgentActorController(options?: AgentControllerOptions): Promise<AgentActorController>;
 
-export { ASK_USER_BACK_SIGNAL as A, ASK_USER_CUSTOM_INPUT_SIGNAL as a, GuardrailBlockedError as aL, GuardrailEscalateError as aN, InvariantSession as aY, DEFAULT_SYSTEM_CAP as ar, LearnedAreaStore as b5, MAX_TOOL_LOOP_ITERATIONS as bJ, LearningCapabilityError as bs, Runner as c5, RunnerIterationLimitError as c7, Tracer as cL, WorkflowEventRecorder as c_, SpanImpl as cr, createAgentActorController as d$, _resetAdmittedAgentBindings as dJ, _resetPresetDispatchers as dK, admitAndRecordLearnedSkillInvocation as dL, admitLearnedSkillBinding as dM, asSingleSelection as dN, assertLearnedCapabilityTransition as dO, attachRunnerRecoveryTranscript as dP, buildAssistantMessageFromLlmResult as dQ, buildSystemPrompt as dR, buildToolResultMessage as dS, canTransitionLearnedCapability as dT, cleanupManagedRunChildProcess as dU, cleanupRegisteredManagedChildren as dV, collectGuardrails as dW, commitLearnedSkillRevision as dX, completeLearnedSkillOutcome as dY, completeLearnedSkillSessionOutcomes as dZ, createAgent as d_, createHandoff as e0, createInMemorySession as e1, createInvariantSessionForAgent as e2, createLearnedCapabilityScope as e3, createLearnedSkillRecord as e4, createStateWriter as e5, createTrace as e6, createWorkflowProcessTracker as e7, defaultTracer as e8, detectInstructionsInjection as e9, releaseLearnedSkillBinding as eA, renderDeclarativeSkill as eB, resolveLearnedAreaPaths as eC, resolveProjectLearnedAreaRoot as eD, runAdmissionAudit as eE, runInputGuardrails as eF, runOutputGuardrails as eG, runToolAfterGuardrails as eH, runToolBeforeGuardrails as eI, sanitizeUnifiedLearningReviewInput as eJ, setActiveUserInteraction as eK, setAdmittedAgentBindings as eL, slugifyLearnedCapabilityName as eM, stageLearnedSkillRevision as eN, validateDeclarativeSkillSpec as eO, discoverInstances as ea, eventFromCapability as eb, exactInvokedSkillSnapshotForSession as ec, executeRunnerToolCall as ed, extractAssistantTextFromMessage as ee, getActiveUserInteraction as ef, getAdmittedAgentBindings as eg, invokeLearnedSkillCanary as eh, isAskUserCustomInputAnswer as ei, isFinalWorkflowProcessStatus as ej, isLearnedCapabilityRecordV2 as ek, isRunnableTool as el, isRunnerIterationLimitError as em, isRunnerLlmResult as en, isUnifiedLearningReviewModelInput as eo, learningEventIdFor as ep, learningEventKindForLifecycle as eq, listLearnedSkillUsageReceipts as er, normalizeHostMetadata as es, normalizeUnifiedLearningReview as et, quarantineLearnedSkillRevision as eu, readRunnerRecoveryTranscript as ev, reconcileLearnedSkillBindingOutcomes as ew, recordLearnedSkillOffered as ex, registerManagedChildProcess as ey, registerPresetDispatcher as ez, AgentActorController as g };
-export type { AgentTaskFilter as $, AgentExecutorFactory as B, AgentExecutorFactoryContext as C, AgentExecutorPlane as D, AgentExecutorPlaneBackgroundErrorContext as E, AgentExecutorPlaneBackgroundErrorHandler as F, AgentExecutorPlaneBinding as G, AgentExecutorPlaneStore as H, AgentExecutorPreflightResult as I, AgentExecutorProtocol as J, AgentExecutorTaskReference as K, AgentExecutorTaskSnapshot as L, AgentJsonObject as M, AgentJsonValue as N, AgentManifest as O, AgentMessage as P, AgentMiddlewareDeclaration as Q, AgentPreflightInput as R, AgentPreflightResult as S, AgentReasoningProfile as T, AgentRegistrationEnabledMutationOptions as U, AgentRegistrationMutationOptions as V, AgentRegistrationService as W, AgentSpanData as X, AgentTaskCancellation as Y, AgentTaskCorrelation as Z, AgentTaskEvent as _, KodaXImageMediaType as a$, AgentTaskProgress as a0, AgentTaskRegistrationSnapshot as a1, AgentTaskService as a2, AgentTaskSnapshot as a3, AgentTaskStartInput as a4, AgentTaskState as a5, AgentTaskUsage as a6, AgentTool as a7, AskUserAnswer as a8, AskUserCustomInputAnswer as a9, EvidenceSpanData as aA, ExactInvokedSkillSnapshot as aB, ExternalAgentEffectDeclaration as aC, ExternalAgentHealth as aD, ExternalAgentProtocol as aE, ExternalAgentRegistration as aF, ExternalAgentRegistrationSummary as aG, FanoutSpanData as aH, FileOperations as aI, GenerationSpanData as aJ, Guardrail as aK, GuardrailContext as aM, GuardrailPermissionIntent as aO, GuardrailSpanData as aP, GuardrailVerdict as aQ, Handoff as aR, HandoffSpanData as aS, InMemorySessionOptions as aT, InputGuardrail as aU, InstanceDiscoveryFs as aV, InvariantId as aW, InvariantResult as aX, KodaXFileInputArtifact as aZ, KodaXImageInputArtifact as a_, AskUserMultiOptions as aa, AskUserQuestionItem as ab, AskUserQuestionOptions as ac, AskUserSelectionAnswer as ad, CapabilitySupport as ae, CommitLearnedSkillRevisionInput as af, CompactionAnchor as ag, CompactionConfig as ah, CompactionDetails as ai, CompactionReport as aj, CompactionRequestMetrics as ak, CompactionResult as al, CompactionSpanData as am, CompactionUpdate as an, CreateAgentExecutorPlaneOptions as ao, CreateLearnedSkillRecordInput as ap, CurrentTodoSummary as aq, DeclarativeSkillSpec as as, Deliverable as at, DiscoveredInstance as au, DiscoveryOptions as av, DispatchableAgentDescriptor as aw, DispatchableAgentListing as ax, DispatchableAgentOrigin as ay, DispatchableAgentQuery as az, AdmissionAuditOptions as b, ReasoningDepth as b$, KodaXInputArtifact as b0, KodaXInputArtifactSource as b1, KodaXVideoInputArtifact as b2, KodaXVideoMediaType as b3, LearnedAreaPaths as b4, LearnedCapabilityArtifact as b6, LearnedCapabilityCanary as b7, LearnedCapabilityCanaryBinding as b8, LearnedCapabilityCanaryInvocation as b9, LearningPage as bA, LearningQuery as bB, LearningReviewEvidencePacket as bC, LearningReviewQualification as bD, LearningReviewVerifierFact as bE, LearningSubscribeOptions as bF, LearningSurfaceSnapshot as bG, LocalAgentTaskInput as bH, LocalAgentTaskUpdate as bI, ManagedChildCleanupSummary as bK, ManagedChildProcessMetadata as bL, ManagedChildRegistrationOptions as bM, ManagedRunChildCleanupResult as bN, ManagedRunChildProcessReference as bO, ManifestPatch as bP, MemoryDecisionTraceReceipt as bQ, MessageEntry as bR, NormalizedLearnedSkillDecision as bS, ObserveCtx as bT, OutputGuardrail as bU, PersistedSessionState as bV, PresetDispatcher as bW, PresetTracingContext as bX, QualityInvariant as bY, ReadonlyMutationTracker as bZ, ReadonlyRecorder as b_, LearnedCapabilityCarrier as ba, LearnedCapabilityLifecycle as bb, LearnedCapabilityProvenance as bc, LearnedCapabilityRecord as bd, LearnedCapabilityRecordV1 as be, LearnedCapabilityRecordV2 as bf, LearnedCapabilityScope as bg, LearnedCapabilitySource as bh, LearnedSkillBindingAdmission as bi, LearnedSkillCanaryOutcome as bj, LearnedSkillDecisionDisposition as bk, LearnedSkillInvocationAdmission as bl, LearnedSkillInvokedReceipt as bm, LearnedSkillOfferedReceipt as bn, LearnedSkillOutcomeReceipt as bo, LearnedSkillUsageReceipt as bp, LearningAction as bq, LearningActionDriver as br, LearningCapabilityErrorCode as bt, LearningClientEventState as bu, LearningClientRecord as bv, LearningEvent as bw, LearningEventKind as bx, LearningExplicitUserAuthority as by, LearningNotificationState as bz, AdmissionCtx as c, WorkflowEventType as c$, RecentlyModifiedFile as c0, RunEvent as c1, RunOptions as c2, RunResult as c3, RunnableTool as c4, RunnerEvent as c6, RunnerLlmResult as c8, RunnerLlmReturn as c9, StopHookResult as cA, StopHookSpanData as cB, SystemCap as cC, TerminalCtx as cD, ToolBeforeOutcome as cE, ToolCallSpanData as cF, ToolCapability as cG, ToolGuardrail as cH, ToolPermission as cI, Trace as cJ, TraceOptions as cK, TracerOptions as cM, UnifiedLearningReviewModelInput as cN, UnifiedLearningReviewResult as cO, UnifiedLearningReviewRunner as cP, UserInteraction as cQ, UserInteractionPromptContext as cR, WorkflowAgentBackend as cS, WorkflowApi as cT, WorkflowApproval as cU, WorkflowApprovalSummary as cV, WorkflowArtifactRef as cW, WorkflowBudget as cX, WorkflowEvent as cY, WorkflowEventCorrelation as cZ, RunnerRecoveryTranscriptCarrier as ca, RunnerToolCall as cb, RunnerToolContext as cc, RunnerToolObserver as cd, RunnerToolResult as ce, RunnerToolResultBatch as cf, RunnerToolResultBatchTransform as cg, Session as ch, SessionDispatchResult as ci, SessionEntry as cj, SessionExtension as ck, SessionForkOptions as cl, SessionMeta as cm, SessionStateSnapshot as cn, Span as co, SpanData as cp, SpanError as cq, SpanImplOptions as cs, StagedLearnedSkillArtifact as ct, StartTraceOptions as cu, StateWriter as cv, StateWriterFs as cw, StateWriterOptions as cx, StopHookContext as cy, StopHookFn as cz, AdmissionVerdict as d, WorkflowIsolation as d0, WorkflowLimits as d1, WorkflowLogEvent as d2, WorkflowMeta as d3, WorkflowModelHint as d4, WorkflowModule as d5, WorkflowOutcome as d6, WorkflowOutcomeError as d7, WorkflowOutcomeResult as d8, WorkflowOutcomeStatus as d9, WorkflowTaskSnapshot as dA, WorkflowTaskStatus as dB, WorkflowTaskSummaryEventUpdate as dC, WorkflowTaskSummaryKind as dD, WorkflowTaskSummaryUpdate as dE, WorkflowTaskUsage as dF, WorkflowTaskVerification as dG, WorkflowTaskVerificationResult as dH, WorkflowWaitOptions as dI, WorkflowOutcomeUsage as da, WorkflowParallelOptions as db, WorkflowProcessArtifact as dc, WorkflowProcessCounts as dd, WorkflowProcessEvent as de, WorkflowProcessItem as df, WorkflowProcessItemKind as dg, WorkflowProcessItemOrigin as dh, WorkflowProcessItemStatus as di, WorkflowProcessProgress as dj, WorkflowProcessSnapshot as dk, WorkflowProcessSource as dl, WorkflowProcessStatus as dm, WorkflowProcessSummaryStatus as dn, WorkflowProcessTokenUsage as dp, WorkflowProcessTracker as dq, WorkflowProcessTrackerOptions as dr, WorkflowRun as ds, WorkflowRunState as dt, WorkflowRunStatus as du, WorkflowSpawnAgentInput as dv, WorkflowSynthesis as dw, WorkflowSynthesizeInput as dx, WorkflowTaskHandle as dy, WorkflowTaskResult as dz, AdmittedHandle as e, Agent as f, AgentArtifactPolicy as h, AgentArtifactPolicyDecision as i, AgentArtifactPolicyInput as j, AgentArtifactReference as k, AgentCapabilityDeclaration as l, AgentCapabilityRequirements as m, AgentContinuationInput as n, AgentControllerHealth as o, AgentControllerOptions as p, AgentCredentialBroker as q, AgentDispatchContext as r, AgentDispatchPolicy as s, AgentDispatchPolicyDecision as t, AgentDispatchPolicyInput as u, AgentDispatchabilitySnapshot as v, AgentDispatchabilityStatus as w, AgentEffectDeclaration as x, AgentExecutor as y, AgentExecutorEvent as z };
+export { GuardrailEscalateError as B, DEFAULT_SYSTEM_CAP as D, InvariantSession as R, LearnedAreaStore as T, MAX_TOOL_LOOP_ITERATIONS as a3, SpanImpl as aT, Runner as ax, RunnerIterationLimitError as az, resolveLearnedAreaPaths as b$, createLearnedSkillRecord as bA, createStateWriter as bB, createTrace as bC, defaultTracer as bD, detectInstructionsInjection as bE, discoverInstances as bF, eventFromCapability as bG, exactInvokedSkillSnapshotForSession as bH, executeRunnerToolCall as bI, extractAssistantTextFromMessage as bJ, getAdmittedAgentBindings as bK, invokeLearnedSkillCanary as bL, isLearnedCapabilityRecordV2 as bM, isRunnableTool as bN, isRunnerIterationLimitError as bO, isRunnerLlmResult as bP, isUnifiedLearningReviewModelInput as bQ, listLearnedSkillUsageReceipts as bR, normalizeUnifiedLearningReview as bS, quarantineLearnedSkillRevision as bT, readRunnerRecoveryTranscript as bU, reconcileLearnedSkillBindingOutcomes as bV, recordLearnedSkillOffered as bW, registerManagedChildProcess as bX, registerPresetDispatcher as bY, releaseLearnedSkillBinding as bZ, renderDeclarativeSkill as b_, Tracer as bb, _resetAdmittedAgentBindings as bg, _resetPresetDispatchers as bh, admitAndRecordLearnedSkillInvocation as bi, admitLearnedSkillBinding as bj, attachRunnerRecoveryTranscript as bk, buildAssistantMessageFromLlmResult as bl, buildSystemPrompt as bm, buildToolResultMessage as bn, cleanupManagedRunChildProcess as bo, cleanupRegisteredManagedChildren as bp, collectGuardrails as bq, commitLearnedSkillRevision as br, completeLearnedSkillOutcome as bs, completeLearnedSkillSessionOutcomes as bt, createAgent as bu, createAgentActorController as bv, createHandoff as bw, createInMemorySession as bx, createInvariantSessionForAgent as by, createLearnedCapabilityScope as bz, resolveProjectLearnedAreaRoot as c0, runAdmissionAudit as c1, runInputGuardrails as c2, runOutputGuardrails as c3, runToolAfterGuardrails as c4, runToolBeforeGuardrails as c5, sanitizeUnifiedLearningReviewInput as c6, setAdmittedAgentBindings as c7, stageLearnedSkillRevision as c8, validateDeclarativeSkillSpec as c9, AgentActorController as e, GuardrailBlockedError as y };
+export type { LearnedSkillUsageReceipt as $, AdmissionAuditOptions as A, CommitLearnedSkillRevisionInput as C, EnqueueInput as E, FanoutSpanData as F, GenerationSpanData as G, GuardrailPermissionIntent as H, GuardrailSpanData as I, GuardrailVerdict as J, Handoff as K, HandoffSpanData as L, InMemorySessionOptions as M, InputGuardrail as N, InstanceDiscoveryFs as O, InvariantId as P, InvariantResult as Q, LearnedAreaPaths as S, LearnedSkillBindingAdmission as U, LearnedSkillCanaryOutcome as V, LearnedSkillDecisionDisposition as W, LearnedSkillInvocationAdmission as X, LearnedSkillInvokedReceipt as Y, LearnedSkillOfferedReceipt as Z, LearnedSkillOutcomeReceipt as _, AdmissionCtx as a, StopHookFn as a$, LearningReviewEvidencePacket as a0, LearningReviewQualification as a1, LearningReviewVerifierFact as a2, ManagedChildCleanupSummary as a4, ManagedChildProcessMetadata as a5, ManagedChildRegistrationOptions as a6, ManagedRunChildCleanupResult as a7, ManagedRunChildProcessReference as a8, ManifestPatch as a9, RunnerLlmResult as aA, RunnerLlmReturn as aB, RunnerRecoveryTranscriptCarrier as aC, RunnerToolCall as aD, RunnerToolContext as aE, RunnerToolObserver as aF, RunnerToolResult as aG, RunnerToolResultBatch as aH, RunnerToolResultBatchTransform as aI, Session as aJ, SessionDispatchResult as aK, SessionEntry as aL, SessionExtension as aM, SessionForkOptions as aN, SessionMeta as aO, SessionStateSnapshot as aP, Span as aQ, SpanData as aR, SpanError as aS, SpanImplOptions as aU, StagedLearnedSkillArtifact as aV, StartTraceOptions as aW, StateWriter as aX, StateWriterFs as aY, StateWriterOptions as aZ, StopHookContext as a_, MemoryDecisionTraceReceipt as aa, MessageDelivery as ab, MessageEntry as ac, MessageMode as ad, MessagePriority as ae, NormalizedLearnedSkillDecision as af, ObserveCtx as ag, OutputGuardrail as ah, PersistedSessionState as ai, PresetDispatcher as aj, PresetTracingContext as ak, QualityInvariant as al, QueueEventListener as am, QueuedInputArtifact as an, QueuedMessage as ao, ReadonlyMutationTracker as ap, ReadonlyRecorder as aq, ReasoningDepth as ar, RecentlyModifiedFile as as, RunEvent as at, RunOptions as au, RunResult as av, RunnableTool as aw, RunnerEvent as ay, AdmissionVerdict as b, StopHookResult as b0, StopHookSpanData as b1, SystemCap as b2, TerminalCtx as b3, ToolBeforeOutcome as b4, ToolCallSpanData as b5, ToolCapability as b6, ToolGuardrail as b7, ToolPermission as b8, Trace as b9, TraceOptions as ba, TracerOptions as bc, UnifiedLearningReviewModelInput as bd, UnifiedLearningReviewResult as be, UnifiedLearningReviewRunner as bf, AdmittedHandle as c, Agent as d, AgentControllerHealth as f, AgentControllerOptions as g, AgentManifest as h, AgentMessage as i, AgentMiddlewareDeclaration as j, AgentReasoningProfile as k, AgentSpanData as l, AgentTool as m, CompactionSpanData as n, CreateLearnedSkillRecordInput as o, CurrentTodoSummary as p, DeclarativeSkillSpec as q, Deliverable as r, DequeueFilter as s, DiscoveredInstance as t, DiscoveryOptions as u, EvidenceSpanData as v, ExactInvokedSkillSnapshot as w, Guardrail as x, GuardrailContext as z };