@mono-agent/agent-runtime 0.3.0 → 0.4.1

package/types/ai/types.d.ts

@@ -0,0 +1,702 @@
+/**
+ * @typedef {"claude" | "pi" | "codex" | "opencode" | (string & {})} RuntimeSdkId
+ * Canonical active runtime id. See ACTIVE_RUNTIME_KINDS (model-refs.js) for
+ * the enforced-at-runtime vocabulary.
+ */
+/**
+ * @typedef {"claude" | "claude-code" | "codex-app" | "opencode-app" | "pi" | (string & {})} RuntimeBridgeId
+ * Registry bridge id (distinct from RuntimeSdkId: a single sdk can be served
+ * by more than one bridge, e.g. sdk "claude" is served by both the "claude"
+ * SDK bridge and the "claude-code" CLI bridge). See
+ * src/ai/runtime/registry.js's builtinBridgeSpecs.
+ */
+/**
+ * @typedef {Object} RuntimeModelRef
+ * @property {RuntimeSdkId} sdk           Canonical active runtime id.
+ * @property {string} model               Provider model id.
+ * @property {string} [reference]         Original canonical model reference; always set by
+ *                                         parseRuntimeModelReference, but router.js's chain
+ *                                         shorthand accepts bare {sdk, model} refs without one.
+ * @property {string} [provider]          Pi/OpenCode provider id when sdk === "pi" | "opencode".
+ */
+/**
+ * @typedef {{type: string, [key: string]: *}} RuntimeEvent
+ * Structured runtime/telemetry event. `type` is the only required field;
+ * every event kind (tool_approval_pending, provider_failover_started,
+ * context_compaction_applied, ...) adds its own extra fields.
+ */
+/**
+ * @typedef {Object} RuntimeObserver
+ * Per-call or host-level observer merged by createObserverHub (ai/observer.js).
+ * Loose on purpose: observer.js is not a kernel seam file.
+ * @property {(event: RuntimeEvent) => (void|Promise<void>)} [onEvent]
+ * @property {() => (void|Promise<void>)} [flush]
+ */
+/**
+ * @typedef {Object} RuntimeToolLimits
+ * Typed per-run tool-output limits (the supported replacement for the
+ * `agent_tool_*` / `agent_mcp_*` keys of the deprecated `settings` bag). Every
+ * field is optional; an omitted field falls back to the kernel default (see
+ * resolveAgentCompactionPolicy, agent/compaction.js).
+ * @property {number} [toolTextLimitChars]        Max chars of a builtin tool's text result.
+ * @property {number} [bashOutputLimitChars]      Max chars of bash stdout/stderr.
+ * @property {number} [mcpTextLimitChars]         Max chars of an MCP tool's text result.
+ * @property {number} [searchResultLimit]         Max Grep/search hits returned.
+ * @property {number} [imageInlineMaxBytes]       Max bytes of an inlined image result.
+ * @property {number} [toolPayloadMaxBytes]       Hard cap on a single tool_result payload.
+ * @property {number} [mcpCallTimeoutMs]          Per-MCP-call inactivity timeout.
+ * @property {number} [mcpCallMaxTotalTimeoutMs]  Hard wall-clock cap for one MCP call.
+ * @property {number} [bashTimeoutMs]             Documented for forward-compat; NOT wired to
+ *   any tool today (no `agent_bash_*_timeout` mechanism exists — bash reads its per-call
+ *   `timeout` argument), so setting it has no effect until a run-level default is introduced.
+ */
+/**
+ * @typedef {Object} RuntimeCompactionPolicy
+ * Typed per-run context-compaction policy (the supported replacement for the
+ * `agent_compaction_*` keys of the deprecated `settings` bag). Every field is
+ * optional; an omitted field falls back to the kernel default.
+ * @property {boolean} [enabled]              Whether auto-compaction runs at all.
+ * @property {number} [triggerRatio]          Fraction of the context window that arms the proactive trigger.
+ * @property {number} [keepRecentTokens]      Recent-token budget preserved across a compaction.
+ * @property {number} [summaryMaxTokens]      Max tokens of the generated summary.
+ * @property {number} [minSavingsTokens]      Minimum token savings required to keep a compaction.
+ * @property {boolean} [fixedOverheadEnabled] Whether the system-prompt + tool-schema overhead correction is folded into the trigger.
+ * @property {number} [contextWindowOverride] Forces the compaction window instead of the live-model-recognized one (applied at resolveLiveCompactionPolicy; has no legacy settings equivalent).
+ */
+/**
+ * @typedef {Object} RuntimePromptOverrides
+ * Optional overrides for the kernel's built-in prompt fragments. Precedence is
+ * run over host over the kernel default: an absent field leaves the built-in
+ * string in place. Supplied on both AgentRuntimeHostOptions (host default) and
+ * RuntimeRunOptions (per-run).
+ * @property {(systemPrompt: string) => string} [structuredOutputInstruction]
+ *   Replaces the StructuredOutput system-prompt instruction (receives the raw
+ *   system prompt, returns the augmented one). Only applied when an outputSchema is active.
+ * @property {() => string} [structuredOutputFinalization]
+ *   Replaces the structured-output finalization re-prompt.
+ * @property {(body: string) => string} [liveInputGuidance]
+ *   Replaces the live-input steering wrapper (receives the raw guidance body).
+ */
+/**
+ * @typedef {Object} RuntimeRunOptions
+ * The options object a host passes to `createRuntime(host).run(systemPrompt, options)`.
+ * @property {RuntimeModelRef} model                     Resolved model reference; see parseRuntimeModelReference.
+ * @property {string} [executionMode]                     "sdk" (default) or "cli"; selects which bridge variant handles the model.
+ * @property {boolean} [liveInput]                        Whether this run expects a live/streaming input channel.
+ * @property {ReadonlyArray<*>} [observers]               Per-call observers (see RuntimeObserver) merged with host-level (createRuntime) observers.
+ * @property {(event: RuntimeEvent) => void} [onEvent]
+ * @property {ReadonlyArray<Object>} [messages]
+ * @property {string} [effort]
+ * @property {boolean} [fastMode]
+ * @property {string} [cwd]
+ * @property {Object<string, Object>} [mcpServers]
+ * @property {ReadonlyArray<string>} [allowedTools]
+ * @property {ReadonlyArray<string>} [disallowedTools]
+ * @property {string} [permissionMode]
+ * @property {number} [maxTurns]
+ * @property {Object} [outputSchema]
+ * @property {string} [runArtifactDir]
+ * @property {AbortSignal} [abortSignal]
+ * @property {import('../agent/sandbox-seam.js').SandboxPolicy} [sandboxPolicy] Per-run sandbox policy; merged monotonically with the host policy (see resolveSandboxPolicy, agent/tools/shared/tool-context.js).
+ * @property {import('../agent/sandbox-seam.js').RuntimeSandboxEngine} [sandboxEngine] Per-run concrete sandbox engine handed to the active sandbox implementation.
+ * @property {import('../agent/sandbox-seam.js').RuntimeSandbox} [sandbox] Per-run sandbox IMPLEMENTATION override; when set it enforces this run's tools instead of the host/ToolContext impl (precedence run > host > passthrough). Policy DATA still merges monotonically (I13); this overrides only the enforcing code.
+ * @property {RuntimeToolLimits} [toolLimits] Typed per-run tool-output limits (supported replacement for the deprecated `settings` tool keys).
+ * @property {RuntimeCompactionPolicy} [compaction] Typed per-run compaction policy (supported replacement for the deprecated `settings` compaction keys).
+ * @property {RuntimePromptOverrides} [prompts] Per-run prompt-fragment overrides (run wins over the host default).
+ * @property {Object} [settings] DEPRECATED. Legacy flat settings bag; consumed only as a per-group FALLBACK when the corresponding typed object (`toolLimits` / `compaction`) is absent. Consuming any key emits one `deprecated_settings_option` runtime_warning per run. Migrate via resolveRuntimePolicies (@mono-agent/runtime-adapter).
+ * @property {Object} [nativeSubagents] Same-runtime teammate helpers exposed through native provider subagent surfaces.
+ * @property {Object} [diagnosticsSeed] Set by createRouterRuntime (ai/runtime/router.js) with a `resume_snapshot` when
+ *   failing over mid-chain; a host-level coordinator may relay it forward (see agent/transcript.js), not read by any
+ *   bridge in this package today.
+ * @property {string} [systemPromptPrefix] Set by createRouterRuntime alongside diagnosticsSeed; the router also
+ *   prepends the same text to the systemPrompt argument directly, so bridges that ignore this field still continue
+ *   correctly.
+ */
+/**
+ * @typedef {RuntimeRunOptions
+ *   & Pick<AgentRuntimeHostOptions, "resolveCustomPricing" | "resolvePiApiKey" | "persistArtifact" | "onCompactionRecorded" | "onToolApprovalRequest" | "toolRiskTiers" | "approvalDefaultRiskTier" | "approvalTimeoutMs" | "approvalAlwaysAllowTools">
+ *   & {runtimeBrand: import('../runtime-brand.js').RuntimeBrand, toolContext?: import('../agent/tools/shared/tool-context.js').ToolContext, observerHub: {emit: (event: RuntimeEvent) => void, flush: () => Promise<void>}}
+ * } RuntimeRequest
+ * The request shape a bridge's `execute(systemPrompt, req)` receives as its
+ * second (options) argument: the host-supplied RuntimeRunOptions, merged by
+ * createRuntime (runtime.js) with the bound HOST_KEYS host-integration
+ * callbacks, the resolved runtimeBrand, the per-instance toolContext (read by
+ * internal tool helpers; absent when a host drives a bridge directly without
+ * createRuntime), and the per-run observerHub (onEvent is overridden to the
+ * hub's emit). `systemPrompt` is passed positionally, not folded into this object.
+ */
+/**
+ * @typedef {Object} RuntimeResult
+ * @property {string|null} [text]
+ * @property {*} [structuredResult]
+ * @property {string|null} [structuredResultSource]
+ * @property {Array<RuntimeEvent>} [events]
+ * @property {Object} [usage]
+ * @property {number} [durationMs]
+ * @property {number} [numTurns]
+ * @property {string} [model]
+ * @property {string} [effort]
+ * @property {RuntimeSdkId} [sdk]
+ * @property {boolean} [cancelled]
+ * @property {string|null} [error]
+ * @property {Object|null} [errorDetails]
+ * @property {string|null} [failureKind]
+ * @property {string|null} [providerSessionId]
+ * @property {string|null} [stderrTail] Bounded stderr tail from a CLI-backed bridge; see createStderrTail (ai/failure.js).
+ * @property {Array<Object>} [runtimeWarnings]
+ * @property {Object} [diagnostics]
+ * @property {Object} [capabilitiesUsed]
+ * @property {Array<{model: RuntimeModelRef, failureKind: (string|null), requestId?: (string|null), retryableSubkind?: (string|null), requirements?: Object}>} [failoverHistory] Set by createRouterRuntime (ai/runtime/router.js) on every attempt after the first.
+ */
+/**
+ * @typedef {Object} RuntimeCapabilities
+ * Capability flags a bridge reports for a given model reference. Structural,
+ * not sealed: bridges may report extra provider-specific flags (e.g.
+ * supports_fast_mode) alongside the common ones from COMMON_CAPABILITIES
+ * (ai/runtime/capabilities.js).
+ * @property {string} [kind]
+ * @property {string} [runtime]
+ * @property {boolean} [streaming]
+ * @property {boolean} [structured_output]
+ * @property {boolean} [supports_session_resume]
+ * @property {*} [native_runtime_config]
+ * @property {boolean} [supports_mcp]
+ * @property {boolean} [supports_skills]
+ * @property {boolean} [supports_builtin_tools]
+ * @property {boolean} [supports_live_input]
+ * @property {boolean} [supports_native_subagents]
+ * @property {boolean} [supports_fast_mode]
+ */
+/**
+ * @typedef {Object} RuntimeBridge
+ * A fully loaded bridge (registry.js's resolveRuntimeBridge result): the
+ * executable provider implementation. Unlike RuntimeBridgeDescriptor,
+ * `capabilities` here is the bridge module's own static value (computed once
+ * at module load, e.g. `runtimeCapabilities("pi")`), not a callable.
+ * @property {RuntimeBridgeId} id
+ * @property {(ref: RuntimeModelRef, options?: Object) => boolean} supports
+ * @property {RuntimeCapabilities} capabilities
+ * @property {(systemPrompt: string, req: RuntimeRequest) => Promise<RuntimeResult>} execute
+ */
+/**
+ * @typedef {Object} RuntimeBridgeDescriptor
+ * The introspection-only projection of a RuntimeBridge (registry.js's
+ * listRuntimeBridges result): id/supports/capabilities without execute, so
+ * hosts can describe backend support without loading provider modules.
+ * @property {RuntimeBridgeId} id
+ * @property {(ref: RuntimeModelRef, options?: Object) => boolean} supports
+ * @property {(ref?: RuntimeModelRef) => RuntimeCapabilities} capabilities
+ */
+/**
+ * @typedef {Object} ApprovalRequestPayload
+ * Payload passed to a host's `onToolApprovalRequest` callback (agent/approval.js).
+ * @property {string} requestId
+ * @property {string} toolName
+ * @property {string|null} toolUseId
+ * @property {string} argumentsSummary Secret-redacted, length-capped JSON summary of the tool call arguments.
+ * @property {"low"|"medium"|"high"} riskTier
+ * @property {string|null} model
+ */
+/**
+ * @typedef {Object} ApprovalDecision
+ * A host's response to an ApprovalRequestPayload.
+ * @property {"approve"|"deny"|"always"} decision
+ * @property {string} [reason]
+ */
+/**
+ * @typedef {Object} CompactionRecordedPayload
+ * Payload passed to a host's `onCompactionRecorded` callback (ai/providers/pi-native.js)
+ * after a successful context compaction, so the host can persist the row.
+ * @property {string|null} task_run_id
+ * @property {string} trigger
+ * @property {string} provider_kind
+ * @property {string|null} model
+ * @property {number|null} tokens_before
+ * @property {string} summary
+ * @property {string|null} first_kept_entry_id
+ * @property {"succeeded"} status
+ * @property {number} created_at
+ */
+/**
+ * @typedef {Object} AgentRuntimeHostOptions
+ * The `host` object passed to `createRuntime(host)` / `createRouterRuntime({host, chain})`.
+ * Combines the tool-runtime keys (forwarded to configureToolRuntime) and the
+ * host-integration callbacks (bound once, applied to every run via hostDefaults).
+ * @property {string} [workspace]
+ * @property {string} [repoRoot]
+ * @property {string} [ripgrepPath]
+ * @property {string} [qaOutputDir]
+ * @property {import('../agent/sandbox-seam.js').SandboxPolicy} [sandboxPolicy]
+ * @property {import('../agent/sandbox-seam.js').RuntimeSandboxEngine} [sandboxEngine]
+ * @property {import('../agent/sandbox-seam.js').RuntimeSandbox} [sandbox] Sandbox seam implementation (see agent/sandbox-seam.js); defaults to the zero-dependency passthroughSandbox. Real hosts inject runtime-adapter's implementation from packages/runtime-adapter/src/sandbox.ts.
+ * @property {RuntimePromptOverrides} [prompts] Host-level prompt-fragment override defaults; a per-run `options.prompts` field wins over these (see resolvePrompts, runtime.js).
+ * @property {ReadonlyArray<*>} [observers] Observer instances (see RuntimeObserver); loose because observer.js is not a kernel seam file.
+ * @property {*} [runtimeBrand] See resolveRuntimeBrand (runtime-brand.js); accepts a partial RuntimeBrand.
+ * @property {(parsed: {sdk: (string|null), provider?: string, model: string}) => (import('./cost.js').NormalizedPricing|null)} [resolveCustomPricing] See resolvePricing (ai/cost.js).
+ * @property {import('../pi-auth.js').PiApiKeyResolver} [resolvePiApiKey] See createPiOAuthApiKeyResolver (pi-auth.js) for a ready-made implementation.
+ * @property {(artifact: {filename: string, buffer: Buffer, toolName: string, toolUseId: (string|null)}) => (string|null)} [persistArtifact]
+ * @property {(record: CompactionRecordedPayload) => void} [onCompactionRecorded]
+ * @property {(payload: ApprovalRequestPayload) => Promise<ApprovalDecision>} [onToolApprovalRequest]
+ * @property {Object<string, ("low"|"medium"|"high")>} [toolRiskTiers]
+ * @property {"low"|"medium"|"high"} [approvalDefaultRiskTier]
+ * @property {number} [approvalTimeoutMs]
+ * @property {ReadonlyArray<string>} [approvalAlwaysAllowTools]
+ */
+/**
+ * @typedef {Object} AgentRuntimeToolOptions
+ * The subset of AgentRuntimeHostOptions accepted by `runtime.configureTools(next)`
+ * (createRuntime's TOOL_RUNTIME_KEYS pick).
+ * @property {string} [workspace]
+ * @property {string} [repoRoot]
+ * @property {string} [ripgrepPath]
+ * @property {string} [qaOutputDir]
+ * @property {import('../agent/sandbox-seam.js').SandboxPolicy} [sandboxPolicy]
+ * @property {import('../agent/sandbox-seam.js').RuntimeSandboxEngine} [sandboxEngine]
+ * @property {import('../agent/sandbox-seam.js').RuntimeSandbox} [sandbox]
+ */
+/**
+ * @typedef {Object} AgentRuntimeInstance
+ * The object `createRuntime`/`createRouterRuntime` return.
+ * @property {(systemPrompt: string, options: RuntimeRunOptions) => Promise<RuntimeResult>} run
+ * @property {(next?: AgentRuntimeToolOptions) => void} configureTools
+ * @property {(providerSessionId: string) => Promise<boolean|void>} disposeSession
+ * @property {() => Promise<void>} disposeAllSessions
+ */
+export const PROVIDER_KIND_VALUES: string[];
+/**
+ * Canonical active runtime id. See ACTIVE_RUNTIME_KINDS (model-refs.js) for
+ * the enforced-at-runtime vocabulary.
+ */
+export type RuntimeSdkId = "claude" | "pi" | "codex" | "opencode" | (string & {});
+/**
+ * Registry bridge id (distinct from RuntimeSdkId: a single sdk can be served
+ * by more than one bridge, e.g. sdk "claude" is served by both the "claude"
+ * SDK bridge and the "claude-code" CLI bridge). See
+ * src/ai/runtime/registry.js's builtinBridgeSpecs.
+ */
+export type RuntimeBridgeId = "claude" | "claude-code" | "codex-app" | "opencode-app" | "pi" | (string & {});
+export type RuntimeModelRef = {
+    /**
+     * Canonical active runtime id.
+     */
+    sdk: RuntimeSdkId;
+    /**
+     * Provider model id.
+     */
+    model: string;
+    /**
+     * Original canonical model reference; always set by
+     *           parseRuntimeModelReference, but router.js's chain
+     *           shorthand accepts bare {sdk, model} refs without one.
+     */
+    reference?: string;
+    /**
+     * Pi/OpenCode provider id when sdk === "pi" | "opencode".
+     */
+    provider?: string;
+};
+/**
+ * Structured runtime/telemetry event. `type` is the only required field;
+ * every event kind (tool_approval_pending, provider_failover_started,
+ * context_compaction_applied, ...) adds its own extra fields.
+ */
+export type RuntimeEvent = {
+    type: string;
+    [key: string]: any;
+};
+/**
+ * Per-call or host-level observer merged by createObserverHub (ai/observer.js).
+ * Loose on purpose: observer.js is not a kernel seam file.
+ */
+export type RuntimeObserver = {
+    onEvent?: (event: RuntimeEvent) => (void | Promise<void>);
+    flush?: () => (void | Promise<void>);
+};
+/**
+ * Typed per-run tool-output limits (the supported replacement for the
+ * `agent_tool_*` / `agent_mcp_*` keys of the deprecated `settings` bag). Every
+ * field is optional; an omitted field falls back to the kernel default (see
+ * resolveAgentCompactionPolicy, agent/compaction.js).
+ */
+export type RuntimeToolLimits = {
+    /**
+     * Max chars of a builtin tool's text result.
+     */
+    toolTextLimitChars?: number;
+    /**
+     * Max chars of bash stdout/stderr.
+     */
+    bashOutputLimitChars?: number;
+    /**
+     * Max chars of an MCP tool's text result.
+     */
+    mcpTextLimitChars?: number;
+    /**
+     * Max Grep/search hits returned.
+     */
+    searchResultLimit?: number;
+    /**
+     * Max bytes of an inlined image result.
+     */
+    imageInlineMaxBytes?: number;
+    /**
+     * Hard cap on a single tool_result payload.
+     */
+    toolPayloadMaxBytes?: number;
+    /**
+     * Per-MCP-call inactivity timeout.
+     */
+    mcpCallTimeoutMs?: number;
+    /**
+     * Hard wall-clock cap for one MCP call.
+     */
+    mcpCallMaxTotalTimeoutMs?: number;
+    /**
+     * Documented for forward-compat; NOT wired to
+     * any tool today (no `agent_bash_*_timeout` mechanism exists — bash reads its per-call
+     * `timeout` argument), so setting it has no effect until a run-level default is introduced.
+     */
+    bashTimeoutMs?: number;
+};
+/**
+ * Typed per-run context-compaction policy (the supported replacement for the
+ * `agent_compaction_*` keys of the deprecated `settings` bag). Every field is
+ * optional; an omitted field falls back to the kernel default.
+ */
+export type RuntimeCompactionPolicy = {
+    /**
+     * Whether auto-compaction runs at all.
+     */
+    enabled?: boolean;
+    /**
+     * Fraction of the context window that arms the proactive trigger.
+     */
+    triggerRatio?: number;
+    /**
+     * Recent-token budget preserved across a compaction.
+     */
+    keepRecentTokens?: number;
+    /**
+     * Max tokens of the generated summary.
+     */
+    summaryMaxTokens?: number;
+    /**
+     * Minimum token savings required to keep a compaction.
+     */
+    minSavingsTokens?: number;
+    /**
+     * Whether the system-prompt + tool-schema overhead correction is folded into the trigger.
+     */
+    fixedOverheadEnabled?: boolean;
+    /**
+     * Forces the compaction window instead of the live-model-recognized one (applied at resolveLiveCompactionPolicy; has no legacy settings equivalent).
+     */
+    contextWindowOverride?: number;
+};
+/**
+ * Optional overrides for the kernel's built-in prompt fragments. Precedence is
+ * run over host over the kernel default: an absent field leaves the built-in
+ * string in place. Supplied on both AgentRuntimeHostOptions (host default) and
+ * RuntimeRunOptions (per-run).
+ */
+export type RuntimePromptOverrides = {
+    /**
+     * Replaces the StructuredOutput system-prompt instruction (receives the raw
+     * system prompt, returns the augmented one). Only applied when an outputSchema is active.
+     */
+    structuredOutputInstruction?: (systemPrompt: string) => string;
+    /**
+     * Replaces the structured-output finalization re-prompt.
+     */
+    structuredOutputFinalization?: () => string;
+    /**
+     * Replaces the live-input steering wrapper (receives the raw guidance body).
+     */
+    liveInputGuidance?: (body: string) => string;
+};
+/**
+ * The options object a host passes to `createRuntime(host).run(systemPrompt, options)`.
+ */
+export type RuntimeRunOptions = {
+    /**
+     * Resolved model reference; see parseRuntimeModelReference.
+     */
+    model: RuntimeModelRef;
+    /**
+     * "sdk" (default) or "cli"; selects which bridge variant handles the model.
+     */
+    executionMode?: string;
+    /**
+     * Whether this run expects a live/streaming input channel.
+     */
+    liveInput?: boolean;
+    /**
+     * Per-call observers (see RuntimeObserver) merged with host-level (createRuntime) observers.
+     */
+    observers?: ReadonlyArray<any>;
+    onEvent?: (event: RuntimeEvent) => void;
+    messages?: ReadonlyArray<any>;
+    effort?: string;
+    fastMode?: boolean;
+    cwd?: string;
+    mcpServers?: {
+        [x: string]: any;
+    };
+    allowedTools?: ReadonlyArray<string>;
+    disallowedTools?: ReadonlyArray<string>;
+    permissionMode?: string;
+    maxTurns?: number;
+    outputSchema?: any;
+    runArtifactDir?: string;
+    abortSignal?: AbortSignal;
+    /**
+     * Per-run sandbox policy; merged monotonically with the host policy (see resolveSandboxPolicy, agent/tools/shared/tool-context.js).
+     */
+    sandboxPolicy?: import("../agent/sandbox-seam.js").SandboxPolicy;
+    /**
+     * Per-run concrete sandbox engine handed to the active sandbox implementation.
+     */
+    sandboxEngine?: import("../agent/sandbox-seam.js").RuntimeSandboxEngine;
+    /**
+     * Per-run sandbox IMPLEMENTATION override; when set it enforces this run's tools instead of the host/ToolContext impl (precedence run > host > passthrough). Policy DATA still merges monotonically (I13); this overrides only the enforcing code.
+     */
+    sandbox?: import("../agent/sandbox-seam.js").RuntimeSandbox;
+    /**
+     * Typed per-run tool-output limits (supported replacement for the deprecated `settings` tool keys).
+     */
+    toolLimits?: RuntimeToolLimits;
+    /**
+     * Typed per-run compaction policy (supported replacement for the deprecated `settings` compaction keys).
+     */
+    compaction?: RuntimeCompactionPolicy;
+    /**
+     * Per-run prompt-fragment overrides (run wins over the host default).
+     */
+    prompts?: RuntimePromptOverrides;
+    /**
+     * DEPRECATED. Legacy flat settings bag; consumed only as a per-group FALLBACK when the corresponding typed object (`toolLimits` / `compaction`) is absent. Consuming any key emits one `deprecated_settings_option` runtime_warning per run. Migrate via resolveRuntimePolicies (@mono-agent/runtime-adapter).
+     */
+    settings?: any;
+    /**
+     * Same-runtime teammate helpers exposed through native provider subagent surfaces.
+     */
+    nativeSubagents?: any;
+    /**
+     * Set by createRouterRuntime (ai/runtime/router.js) with a `resume_snapshot` when
+     * failing over mid-chain; a host-level coordinator may relay it forward (see agent/transcript.js), not read by any
+     * bridge in this package today.
+     */
+    diagnosticsSeed?: any;
+    /**
+     * Set by createRouterRuntime alongside diagnosticsSeed; the router also
+     * prepends the same text to the systemPrompt argument directly, so bridges that ignore this field still continue
+     * correctly.
+     */
+    systemPromptPrefix?: string;
+};
+/**
+ * The request shape a bridge's `execute(systemPrompt, req)` receives as its
+ * second (options) argument: the host-supplied RuntimeRunOptions, merged by
+ * createRuntime (runtime.js) with the bound HOST_KEYS host-integration
+ * callbacks, the resolved runtimeBrand, the per-instance toolContext (read by
+ * internal tool helpers; absent when a host drives a bridge directly without
+ * createRuntime), and the per-run observerHub (onEvent is overridden to the
+ * hub's emit). `systemPrompt` is passed positionally, not folded into this object.
+ */
+export type RuntimeRequest = RuntimeRunOptions & Pick<AgentRuntimeHostOptions, "resolveCustomPricing" | "resolvePiApiKey" | "persistArtifact" | "onCompactionRecorded" | "onToolApprovalRequest" | "toolRiskTiers" | "approvalDefaultRiskTier" | "approvalTimeoutMs" | "approvalAlwaysAllowTools"> & {
+    runtimeBrand: import("../runtime-brand.js").RuntimeBrand;
+    toolContext?: import("../agent/tools/shared/tool-context.js").ToolContext;
+    observerHub: {
+        emit: (event: RuntimeEvent) => void;
+        flush: () => Promise<void>;
+    };
+};
+export type RuntimeResult = {
+    text?: string | null;
+    structuredResult?: any;
+    structuredResultSource?: string | null;
+    events?: Array<RuntimeEvent>;
+    usage?: any;
+    durationMs?: number;
+    numTurns?: number;
+    model?: string;
+    effort?: string;
+    sdk?: RuntimeSdkId;
+    cancelled?: boolean;
+    error?: string | null;
+    errorDetails?: any | null;
+    failureKind?: string | null;
+    providerSessionId?: string | null;
+    /**
+     * Bounded stderr tail from a CLI-backed bridge; see createStderrTail (ai/failure.js).
+     */
+    stderrTail?: string | null;
+    runtimeWarnings?: Array<any>;
+    diagnostics?: any;
+    capabilitiesUsed?: any;
+    /**
+     * Set by createRouterRuntime (ai/runtime/router.js) on every attempt after the first.
+     */
+    failoverHistory?: Array<{
+        model: RuntimeModelRef;
+        failureKind: (string | null);
+        requestId?: (string | null);
+        retryableSubkind?: (string | null);
+        requirements?: any;
+    }>;
+};
+/**
+ * Capability flags a bridge reports for a given model reference. Structural,
+ * not sealed: bridges may report extra provider-specific flags (e.g.
+ * supports_fast_mode) alongside the common ones from COMMON_CAPABILITIES
+ * (ai/runtime/capabilities.js).
+ */
+export type RuntimeCapabilities = {
+    kind?: string;
+    runtime?: string;
+    streaming?: boolean;
+    structured_output?: boolean;
+    supports_session_resume?: boolean;
+    native_runtime_config?: any;
+    supports_mcp?: boolean;
+    supports_skills?: boolean;
+    supports_builtin_tools?: boolean;
+    supports_live_input?: boolean;
+    supports_native_subagents?: boolean;
+    supports_fast_mode?: boolean;
+};
+/**
+ * A fully loaded bridge (registry.js's resolveRuntimeBridge result): the
+ * executable provider implementation. Unlike RuntimeBridgeDescriptor,
+ * `capabilities` here is the bridge module's own static value (computed once
+ * at module load, e.g. `runtimeCapabilities("pi")`), not a callable.
+ */
+export type RuntimeBridge = {
+    id: RuntimeBridgeId;
+    supports: (ref: RuntimeModelRef, options?: any) => boolean;
+    capabilities: RuntimeCapabilities;
+    execute: (systemPrompt: string, req: RuntimeRequest) => Promise<RuntimeResult>;
+};
+/**
+ * The introspection-only projection of a RuntimeBridge (registry.js's
+ * listRuntimeBridges result): id/supports/capabilities without execute, so
+ * hosts can describe backend support without loading provider modules.
+ */
+export type RuntimeBridgeDescriptor = {
+    id: RuntimeBridgeId;
+    supports: (ref: RuntimeModelRef, options?: any) => boolean;
+    capabilities: (ref?: RuntimeModelRef) => RuntimeCapabilities;
+};
+/**
+ * Payload passed to a host's `onToolApprovalRequest` callback (agent/approval.js).
+ */
+export type ApprovalRequestPayload = {
+    requestId: string;
+    toolName: string;
+    toolUseId: string | null;
+    /**
+     * Secret-redacted, length-capped JSON summary of the tool call arguments.
+     */
+    argumentsSummary: string;
+    riskTier: "low" | "medium" | "high";
+    model: string | null;
+};
+/**
+ * A host's response to an ApprovalRequestPayload.
+ */
+export type ApprovalDecision = {
+    decision: "approve" | "deny" | "always";
+    reason?: string;
+};
+/**
+ * Payload passed to a host's `onCompactionRecorded` callback (ai/providers/pi-native.js)
+ * after a successful context compaction, so the host can persist the row.
+ */
+export type CompactionRecordedPayload = {
+    task_run_id: string | null;
+    trigger: string;
+    provider_kind: string;
+    model: string | null;
+    tokens_before: number | null;
+    summary: string;
+    first_kept_entry_id: string | null;
+    status: "succeeded";
+    created_at: number;
+};
+/**
+ * The `host` object passed to `createRuntime(host)` / `createRouterRuntime({host, chain})`.
+ * Combines the tool-runtime keys (forwarded to configureToolRuntime) and the
+ * host-integration callbacks (bound once, applied to every run via hostDefaults).
+ */
+export type AgentRuntimeHostOptions = {
+    workspace?: string;
+    repoRoot?: string;
+    ripgrepPath?: string;
+    qaOutputDir?: string;
+    sandboxPolicy?: import("../agent/sandbox-seam.js").SandboxPolicy;
+    sandboxEngine?: import("../agent/sandbox-seam.js").RuntimeSandboxEngine;
+    /**
+     * Sandbox seam implementation (see agent/sandbox-seam.js); defaults to the zero-dependency passthroughSandbox. Real hosts inject runtime-adapter's implementation from packages/runtime-adapter/src/sandbox.ts.
+     */
+    sandbox?: import("../agent/sandbox-seam.js").RuntimeSandbox;
+    /**
+     * Host-level prompt-fragment override defaults; a per-run `options.prompts` field wins over these (see resolvePrompts, runtime.js).
+     */
+    prompts?: RuntimePromptOverrides;
+    /**
+     * Observer instances (see RuntimeObserver); loose because observer.js is not a kernel seam file.
+     */
+    observers?: ReadonlyArray<any>;
+    /**
+     * See resolveRuntimeBrand (runtime-brand.js); accepts a partial RuntimeBrand.
+     */
+    runtimeBrand?: any;
+    /**
+     * See resolvePricing (ai/cost.js).
+     */
+    resolveCustomPricing?: (parsed: {
+        sdk: (string | null);
+        provider?: string;
+        model: string;
+    }) => (import("./cost.js").NormalizedPricing | null);
+    /**
+     * See createPiOAuthApiKeyResolver (pi-auth.js) for a ready-made implementation.
+     */
+    resolvePiApiKey?: import("../pi-auth.js").PiApiKeyResolver;
+    persistArtifact?: (artifact: {
+        filename: string;
+        buffer: Buffer;
+        toolName: string;
+        toolUseId: (string | null);
+    }) => (string | null);
+    onCompactionRecorded?: (record: CompactionRecordedPayload) => void;
+    onToolApprovalRequest?: (payload: ApprovalRequestPayload) => Promise<ApprovalDecision>;
+    toolRiskTiers?: {
+        [x: string]: "low" | "medium" | "high";
+    };
+    approvalDefaultRiskTier?: "low" | "medium" | "high";
+    approvalTimeoutMs?: number;
+    approvalAlwaysAllowTools?: ReadonlyArray<string>;
+};
+/**
+ * The subset of AgentRuntimeHostOptions accepted by `runtime.configureTools(next)`
+ * (createRuntime's TOOL_RUNTIME_KEYS pick).
+ */
+export type AgentRuntimeToolOptions = {
+    workspace?: string;
+    repoRoot?: string;
+    ripgrepPath?: string;
+    qaOutputDir?: string;
+    sandboxPolicy?: import("../agent/sandbox-seam.js").SandboxPolicy;
+    sandboxEngine?: import("../agent/sandbox-seam.js").RuntimeSandboxEngine;
+    sandbox?: import("../agent/sandbox-seam.js").RuntimeSandbox;
+};
+/**
+ * The object `createRuntime`/`createRouterRuntime` return.
+ */
+export type AgentRuntimeInstance = {
+    run: (systemPrompt: string, options: RuntimeRunOptions) => Promise<RuntimeResult>;
+    configureTools: (next?: AgentRuntimeToolOptions) => void;
+    disposeSession: (providerSessionId: string) => Promise<boolean | void>;
+    disposeAllSessions: () => Promise<void>;
+};