@namzu/sdk 49.0.0 → 50.1.0

package/src/provider/errors.ts

@@ -386,6 +386,71 @@ function vendorRetryAfter(err: unknown): string | undefined {
 	return undefined
 }
 
+/** Response headers that name the request, as the vendors that send one spell it. */
+const REQUEST_ID_HEADERS = ['x-request-id', 'request-id', 'x-goog-request-id'] as const
+
+/** A header off an SDK error's captured response headers (a `Headers` or a plain object). */
+function vendorHeader(err: unknown, names: readonly string[]): string | undefined {
+	if (typeof err !== 'object' || err === null) return undefined
+	const headers =
+		(err as { headers?: unknown }).headers ??
+		(err as { $response?: { headers?: unknown } }).$response?.headers
+	if (!headers) return undefined
+	for (const name of names) {
+		if (typeof (headers as Headers).get === 'function') {
+			const value = (headers as Headers).get(name)
+			if (value) return value
+			continue
+		}
+		const value = (headers as Record<string, unknown>)[name]
+		if (typeof value === 'string' && value) return value
+	}
+	return undefined
+}
+
+const FIELD_VALUE = /^[A-Za-z0-9][A-Za-z0-9._:/-]{0,127}$/
+
+function fieldValue(value: unknown): string | undefined {
+	return typeof value === 'string' && FIELD_VALUE.test(value) && redactSecrets(value) === value
+		? value
+		: undefined
+}
+
+/**
+ * The provider's structured fields beside its sentence, in the one body shape every host already
+ * reads (`{"error":{"message","type","code","param"},"request_id"}`).
+ *
+ * A vendor SDK whose error message is only the parsed sentence (OpenAI's "403 <message>") still
+ * holds the body's `type`, `code`, `param` and the response's request ID as fields; a host that
+ * receives the message alone cannot show them, while Anthropic's message carries its whole body
+ * and so shows them. The fields are bounded identifiers (never a body), so nothing echoed can ride
+ * along. With nothing but a sentence the result is that sentence unchanged.
+ */
+export function structuredVendorDetail(input: {
+	readonly message: string | undefined
+	readonly type?: unknown
+	readonly code?: unknown
+	readonly param?: unknown
+	readonly requestId?: unknown
+}): string | undefined {
+	const message = vendorDetail(input.message?.replace(/^\d{3}\s+/, ''))
+	const type = fieldValue(input.type)
+	const code = fieldValue(input.code)
+	const param = fieldValue(input.param)
+	const requestId = fieldValue(input.requestId)
+	if (!type && !code && !param && !requestId) return message
+	if (!message) return undefined
+	return JSON.stringify({
+		error: {
+			message,
+			...(type ? { type } : {}),
+			...(code ? { code } : {}),
+			...(param ? { param } : {}),
+		},
+		...(requestId ? { request_id: requestId } : {}),
+	})
+}
+
 /**
  * Classify an error thrown by a vendor SDK and replace it.
  *
@@ -460,7 +525,18 @@ export function providerVendorError(input: {
 		input.retryAfter ?? vendorRetryAfter(error),
 		input.now ?? Date.now(),
 	)
-	const detail = vendorDetail(message)
+	const fields = error as { type?: unknown; param?: unknown; requestID?: unknown } | null
+	// A message that already carries its body (Anthropic's) has the fields; one that is only the
+	// parsed sentence (OpenAI's) gets them from the SDK error's own properties.
+	const detail = carriesBody(message)
+		? vendorDetail(message)
+		: structuredVendorDetail({
+				message,
+				type: fields?.type,
+				code: exactProviderCode,
+				param: fields?.param,
+				requestId: fields?.requestID ?? vendorHeader(error, REQUEST_ID_HEADERS),
+			})
 	return new ProviderRequestError({
 		kind,
 		providerId: input.providerId,
@@ -471,6 +547,51 @@ export function providerVendorError(input: {
 	})
 }
 
+/** Anthropic's SDK words a failure "<status> <JSON body>"; OpenAI's is "<status> <sentence>", which may itself hold a brace. */
+function carriesBody(message: string): boolean {
+	const rest = message.replace(/^\d{3}\s+/, '').trim()
+	if (!rest.startsWith('{')) return false
+	try {
+		const parsed: unknown = JSON.parse(rest)
+		return typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)
+	} catch {
+		return false
+	}
+}
+
+function parsedBody(body: unknown): Record<string, unknown> | undefined {
+	let decoded = body
+	if (typeof decoded === 'string') {
+		try {
+			decoded = JSON.parse(decoded)
+		} catch {
+			return undefined
+		}
+	}
+	return typeof decoded === 'object' && decoded !== null && !Array.isArray(decoded)
+		? (decoded as Record<string, unknown>)
+		: undefined
+}
+
+/** `type`/`status`, `code` and `param` of a `{ error: {...} }` body, only where it spells them. */
+function bodyErrorFields(body: Record<string, unknown> | undefined): {
+	type?: unknown
+	code?: unknown
+	param?: unknown
+} {
+	const inner =
+		body && typeof body.error === 'object' && body.error !== null
+			? (body.error as Record<string, unknown>)
+			: undefined
+	if (!inner) return {}
+	// Google names its type `status` ("PERMISSION_DENIED") and sends a numeric `code` that is the HTTP status.
+	return {
+		type: inner.type ?? (typeof inner.status === 'string' ? inner.status : undefined),
+		code: typeof inner.code === 'string' ? inner.code : undefined,
+		param: inner.param,
+	}
+}
+
 /**
  * Build a classified error from a failed HTTP response.
  *
@@ -482,11 +603,23 @@ export function providerHttpError(input: {
 	readonly status: number
 	readonly body?: string | null
 	readonly retryAfter?: string | null
+	/** The response's request ID header, when the driver read one. */
+	readonly requestId?: string | null
 	readonly now?: number
 }): ProviderRequestError {
 	const kind = classifyProviderHttpStatus(input.status, input.body)
 	const retryAfterMs = parseRetryAfterMs(input.retryAfter, input.now ?? Date.now())
-	const detail = vendorDetail(input.body)
+	const body = parsedBody(input.body)
+	const bodyError = bodyErrorFields(body)
+	const detail = body
+		? structuredVendorDetail({
+				message: vendorDetail(input.body),
+				type: bodyError.type,
+				code: bodyError.code,
+				param: bodyError.param,
+				requestId: input.requestId,
+			})
+		: vendorDetail(input.body)
 	const exactProviderCode = providerCode(input.body)
 	return new ProviderRequestError({
 		kind,

package/src/provider/strict-schema.ts

@@ -157,6 +157,37 @@ export function findStrictSchemaViolations(schema: unknown, path = ''): StrictSc
 			})
 			continue
 		}
+		// Every branch of a union has to state its `type`.
+		//
+		// `anyOf` is in the subset but its BRANCHES are still schemas, and a
+		// branch that says only `{ const: 'end' }` says what value it admits
+		// without saying what kind of value it is. Measured on the Zen
+		// free-tier gateway, which enforces `strict` on every model that
+		// reaches it: the answer is `Invalid schema for function 'edit': In
+		// context=('properties', 'insertLine', 'anyOf', '1'), schema must have
+		// a 'type' key`, and it refuses the whole request — so the tool never
+		// mounts and the turn dies before a single token.
+		//
+		// This is the structural half the deny-list could not see: no keyword
+		// here is banned, only absent. Stating the type costs nothing, because
+		// `{ type: 'string', const: 'end' }` admits exactly the strings the
+		// bare form did.
+		if ((keyword === 'anyOf' || keyword === 'allOf') && Array.isArray(value)) {
+			for (const [index, branch] of value.entries()) {
+				if (
+					typeof branch !== 'object' ||
+					branch === null ||
+					Array.isArray(branch) ||
+					!('type' in branch)
+				) {
+					found.push({
+						path: `${here}[${index}]`,
+						keyword,
+						remedy: 'state a `type` on every branch of a union',
+					})
+				}
+			}
+		}
 		found.push(...findStrictSchemaViolations(value, here))
 	}
 	return found
@@ -180,3 +211,62 @@ export function assertStrictSchema(toolName: string, schema: unknown): void {
 		`Tool "${toolName}" is marked for strict input validation, but its model-facing schema uses ${violations.length} construct(s) the strict subset does not accept. The request would be rejected whole, taking every other tool in it down as well.\n${detail}`,
 	)
 }
+
+/**
+ * Whether a wire enforcing `strict` would actually take this schema.
+ *
+ * Wider than {@link findStrictSchemaViolations}, and the difference is not
+ * redundancy. That function answers "can this schema be SAID in the strict
+ * dialect" — it denies keywords the dialect has no spelling for, and it is
+ * what registration checks, because a schema that fails it could never be
+ * sent anywhere. A schema can pass it and still be REFUSED by a wire that
+ * applies the dialect's structural rules on top, and the two questions have
+ * different owners: registration decides whether a tool may ask for the
+ * guarantee at all, a driver decides whether to claim it on THIS wire.
+ *
+ * The structural rule measured here: every object that declares `properties`
+ * must list all of them in `required`. The Zen free-tier gateway says so in
+ * as many words — `In context=('properties', 'edits', 'items'), 'required' is
+ * required to be supplied and to be an array including every key in
+ * properties` — and it refuses the WHOLE request, so one optional field in one
+ * tool takes every other tool in the call down with it.
+ *
+ * That is why a driver must ask rather than assume. Namzu's tool contracts are
+ * written with optional fields, on purpose: `edit` accepts a find-and-replace
+ * OR an insertion, and saying "either, never both" as `required` on a union
+ * would be a worse schema, not a stricter one. So the schema stays as it is
+ * and the driver stops vouching for a guarantee the wire cannot carry — the
+ * same call the Zen driver already makes for the Responses wire, and the one
+ * OpenCode makes for every tool on this gateway (`strict: false`).
+ */
+export function acceptsStrictSchema(schema: unknown): boolean {
+	// A missing schema cannot be vouched for. `findStrictSchemaViolations`
+	// walks nothing in `undefined` and finds nothing, so without this the
+	// predicate would answer `true` for a tool that declared no schema at all
+	// — and the driver would put `strict: true` on a wire whose `parameters`
+	// came from somewhere else entirely.
+	if (typeof schema !== 'object' || schema === null || Array.isArray(schema)) return false
+	if (findStrictSchemaViolations(schema).length > 0) return false
+	return !hasUngatedProperties(schema)
+}
+
+/**
+ * Whether any object declares `properties` without requiring all of them.
+ */
+function hasUngatedProperties(node: unknown): boolean {
+	if (Array.isArray(node)) return node.some((item) => hasUngatedProperties(item))
+	if (typeof node !== 'object' || node === null) return false
+
+	const record = node as Record<string, unknown>
+	const properties = record.properties
+	if (
+		typeof properties === 'object' &&
+		properties !== null &&
+		!Array.isArray(properties) &&
+		(!Array.isArray(record.required) ||
+			Object.keys(properties).some((key) => !(record.required as unknown[]).includes(key)))
+	)
+		return true
+
+	return Object.values(record).some((value) => hasUngatedProperties(value))
+}

package/src/public-runtime.ts

@@ -11,6 +11,8 @@
 // ─── version + config ────────────────────────────────────────────────────
 
 export { VERSION } from './version.js'
+export { createHarnessSession, HarnessSessionError } from './runtime/harness-session/index.js'
+export { BackgroundJobOutputWaitLimitError } from './runtime/jobs/registry.js'
 
 // The opt-in model-authored-code backend. `RunCodeToolOptions.runtime` has
 // always accepted this contract; exporting the implementation and its refusal
@@ -266,6 +268,7 @@ export {
 // Strict tool input is a SUBSET of JSON Schema, and a keyword outside it makes
 // the vendor reject the whole request rather than degrade one field.
 export {
+	acceptsStrictSchema,
 	assertStrictSchema,
 	findStrictSchemaViolations,
 } from './provider/strict-schema.js'
@@ -355,7 +358,7 @@ export type {
 // Closing a paused or interrupted turn without resuming it, and compacting a
 // session between turns.
 export { abandonTurn } from './runtime/query/abandon-turn.js'
-export type { SessionLocatorOptions } from './runtime/query/abandon-turn.js'
+export type { AbandonTurnOptions, SessionLocatorOptions } from './runtime/query/abandon-turn.js'
 export { compactSession } from './runtime/query/compact-session.js'
 export type { CompactSessionParams } from './runtime/query/compact-session.js'
 export { prepareForkState } from './runtime/query/fork/prepare.js'
@@ -407,7 +410,10 @@ export { SESSION_MEMORY_TAG, createMemoryPromoter } from './turn/index.js'
 export type { MemoryPromoterOptions } from './turn/index.js'
 export { createMemoryRecallStep } from './turn/memory-recall.js'
 export type { MemoryRecallOptions } from './turn/memory-recall.js'
-export { createEvidenceRecallStep, refineEvidenceRecallTerms } from './turn/evidence-recall.js'
+export {
+	createEvidenceRecallStep,
+	refineEvidenceRecallTerms,
+} from './turn/evidence-recall.js'
 export type {
 	EvidenceRecallOptions,
 	EvidenceRecallRequest,
@@ -563,7 +569,10 @@ export {
 	RegistryCollisionError,
 	ToolNameCollisionError,
 } from './registry/index.js'
-export type { ManagedRegistryConfig, RegistryCollisionPolicy } from './registry/index.js'
+export type {
+	ManagedRegistryConfig,
+	RegistryCollisionPolicy,
+} from './registry/index.js'
 
 // Toolsets (plan.md v3 §1-2): the unit every tool comes from, and the
 // runtime-owned resolver of them. `toolset()` builds a plain static one;
@@ -576,7 +585,10 @@ export type { ManagedRegistryConfig, RegistryCollisionPolicy } from './registry/
 export { combineToolsets, ToolsetConflictError } from './toolsets/combine.js'
 export { defineCapability, dynamicCapability } from './capabilities/index.js'
 export { ToolManager } from './toolsets/manager.js'
-export type { ToolManagerConfig, ToolsetChangeReport } from './toolsets/manager.js'
+export type {
+	ToolManagerConfig,
+	ToolsetChangeReport,
+} from './toolsets/manager.js'
 export { matchesSourceIdGlob } from './toolsets/source-glob.js'
 export { toolset } from './toolsets/toolset.js'
 export { toToolSourceRef } from './toolsets/types.js'
@@ -729,7 +741,10 @@ export {
 	SandboxProviderFactory,
 	walkFilesViaExec,
 } from './sandbox/index.js'
-export type { LocalSandboxProviderOptions, SandboxFileWalkExec } from './sandbox/index.js'
+export type {
+	LocalSandboxProviderOptions,
+	SandboxFileWalkExec,
+} from './sandbox/index.js'
 
 // The classified provider-failure surface: a driver states what went wrong
 // first-hand, and the turn boundary reads it to choose between a pause and a
@@ -906,6 +921,7 @@ export type {
 	AcpServerOptions,
 } from './bridge/acp/index.js'
 export type {
+	AcpFileChangePreview,
 	AcpFsReadParams,
 	AcpFsReadResult,
 	AcpFsWriteParams,
@@ -986,7 +1002,10 @@ export {
 	resolveScriptPrograms,
 	unknownProgramInLine,
 } from './authorization/program.js'
-export type { CommandProgramPositions, ProgramPosition } from './authorization/program.js'
+export type {
+	CommandProgramPositions,
+	ProgramPosition,
+} from './authorization/program.js'
 
 // NZ-BOOT-03: the module-attributed invariant registry. `compaction.ts` and
 // `claim-disk.ts` register themselves against the shared `invariants`
@@ -1216,7 +1235,10 @@ export {
 	planWorkingSet,
 	scoreMessages,
 } from './compaction/salience/index.js'
-export { DEFAULT_SOFT_TARGET, planSalienceWorkingSet } from './compaction/plan.js'
+export {
+	DEFAULT_SOFT_TARGET,
+	planSalienceWorkingSet,
+} from './compaction/plan.js'
 export {
 	CONSOLIDATION_TAG,
 	consolidationEntry,
@@ -1442,7 +1464,10 @@ export {
 } from './read-model/index.js'
 
 // Asking a session what happened, including what compaction removed.
-export { SessionQuery, SessionTranscriptUnavailableError } from './session-query/index.js'
+export {
+	SessionQuery,
+	SessionTranscriptUnavailableError,
+} from './session-query/index.js'
 
 // A host-scoped pseudo-terminal primitive, or a refusal that names the
 // binding to install. It neither creates a sandbox nor owns a descendant
@@ -1515,9 +1540,15 @@ export type {
 export type { JobProcess } from './runtime/jobs/registry.js'
 export { WORKING_STATE_MIME } from './connector/mcp/adapter.js'
 
-export { snapshotRequestContext, diffRequestContext } from './runtime/query/request-context.js'
+export {
+	snapshotRequestContext,
+	diffRequestContext,
+} from './runtime/query/request-context.js'
 
-export { DiskResidentStore, ResidentConflictError } from './manager/resident/store.js'
+export {
+	DiskResidentStore,
+	ResidentConflictError,
+} from './manager/resident/store.js'
 export { runResident, stepResident } from './manager/resident/loop.js'
 export { DiskResidentAgenda } from './manager/resident/agenda.js'
 export { inspectResidentConsumption } from './manager/resident/consumption.js'
@@ -1529,14 +1560,20 @@ export { validateResidentProposal } from './manager/resident/proposal.js'
 export { deliverResidentMessage } from './manager/resident/outbox.js'
 export { createResidentDeliveryWindow } from './manager/resident/delivery-window.js'
 
-export { hashResidentSkill, projectResidentLearning } from './manager/resident/learning.js'
+export {
+	hashResidentSkill,
+	projectResidentLearning,
+} from './manager/resident/learning.js'
 export { runResidentLearningCycle } from './manager/resident/learning-cycle.js'
 
 export {
 	createSessionEvidenceSource,
 	createSessionTextEvidenceSource,
 } from './store/evidence/disk.js'
-export { classifyEvidenceSource, EVIDENCE_RECORD_GUIDANCE } from './store/evidence/source-kind.js'
+export {
+	classifyEvidenceSource,
+	EVIDENCE_RECORD_GUIDANCE,
+} from './store/evidence/source-kind.js'
 export { createResidentToolEvidenceSource } from './manager/resident/tool-evidence.js'
 
 export { createResidentEvidenceRecallStep } from './manager/resident/evidence-recall.js'
@@ -1689,3 +1726,72 @@ export {
 	udsPeerAddress,
 	writePeerRecord,
 } from './peers/index.js'
+export { DiskPalStore, PalConflictError } from './pals/store.js'
+export { PalRuntime, PalUnavailableError } from './pals/runtime.js'
+export { buildPalSystemPrompt, palConversationGreeting } from './pals/prompt.js'
+export {
+	preparePalReferenceImages,
+	importPalReferenceImages,
+} from './pals/reference-images.js'
+
+export { isInboundDeliveryRef } from './types/message/inbound-delivery.js'
+
+export {
+	DiskPalCommunicationStore,
+	PalCommunicationConflictError,
+} from './pals/communication/store.js'
+export { PalMessageBroker } from './pals/communication/broker.js'
+export { PalOperatorMessageBroker } from './pals/communication/operator.js'
+export { createPalInboxSource } from './pals/communication/inbound.js'
+export { dispatchPalMessagesOnce } from './pals/communication/dispatch.js'
+export {
+	DiskPalMessagePolicy,
+	PalMessagePermissionConflictError,
+} from './pals/communication/policy.js'
+export {
+	createPalActivitySource,
+	PalActivityAccessDeniedError,
+	PalActivityIntegrityError,
+	PalActivityReadLimitError,
+} from './pals/activity/source.js'
+
+export { PalIngressBlockedError } from './pals/communication/store.js'
+export {
+	createPalIngressInboxSource,
+	reconcilePalIngressDelivery,
+} from './pals/communication/ingress-inbound.js'
+export { dispatchPalIngressOnce } from './pals/communication/ingress-dispatch.js'
+export { verifyIngressRecorded } from './pals/communication/verify.js'
+export {
+	PAL_OBSERVATION_NAMESPACE,
+	PAL_CHANNEL_NAMESPACE,
+	PAL_OPERATOR_NAMESPACE,
+	ingressMessageRef,
+} from './pals/communication/ingress-types.js'
+export { DiskPalChannelRoutes, PalChannelRouteConflictError } from './pals/channels/routes.js'
+export { PalChannelIngress } from './pals/channels/ingress.js'
+export { PalChannelRouter } from './pals/channels/routing.js'
+export {
+	DiskPalActivitySubscriptionStore,
+	PalActivitySubscriptionConflictError,
+} from './pals/activity/subscription-store.js'
+export {
+	DiskPalActivitySubscriptionPolicy,
+	PalActivitySubscriptionPermissionConflictError,
+} from './pals/activity/subscription-policy.js'
+export {
+	publishPalActivityOnce,
+	PalActivitySubscriptionDeniedError,
+} from './pals/activity/subscriptions.js'
+export {
+	createPalActivityCausalityResolver,
+	PalActivityCausalityUnavailableError,
+} from './pals/activity/causality.js'
+
+export {
+	ingressIntentId,
+	ingressIntentDigest,
+	ingressRouteId,
+} from './pals/communication/ingress-schema.js'
+
+export { ingressAuthorizationRequest } from './pals/communication/ingress-types.js'

package/src/public-tools.ts

@@ -12,6 +12,7 @@
 // ─── Tool definition primitive ───────────────────────────────────────────
 
 export { defineTool } from './tools/defineTool.js'
+export { admitToolFacts } from './tools/admit-facts.js'
 // Containment, for a host or sibling package that resolves caller-supplied
 // paths against a root. Both were internal while three call sites outside
 // this file needed them.
@@ -20,6 +21,7 @@ export {
 	isWithin,
 	pathOutsideRoots,
 	resolveWithin,
+	resolveWithinAnyReal,
 	resolveWithinReal,
 	toolRoots,
 } from './tools/paths.js'
@@ -55,13 +57,15 @@ export {
 	findCommandShell,
 	findCommandShellForDialect,
 	hostCommandShell,
+	describeSpawnFailure,
 	hostShellSpawn,
 	installedCommandShellForDialect,
+	spawnHostShell,
 	withoutBashStartup,
 } from './tools/command-shell.js'
 export { ReadFileTool } from './tools/builtins/read-file.js'
 export { WriteFileTool } from './tools/builtins/write-file.js'
-export { EditTool } from './tools/builtins/edit.js'
+export { EditTool, dryRunEdit } from './tools/builtins/edit.js'
 export {
 	BashTool,
 	type ExecHostShellProgress,
@@ -133,6 +137,11 @@ export type { RunCodeToolOptions } from './tools/builtins/run-code.js'
 export { LsTool } from './tools/builtins/ls.js'
 export { SearchToolsTool } from './tools/builtins/search-tools.js'
 export { VerifyOutputsTool } from './tools/builtins/verify-outputs.js'
+export {
+	ViewImageTool,
+	createViewImageTool,
+} from './tools/builtins/view-image.js'
+export { createPalReferenceImageTool } from './pals/reference-images.js'
 export {
 	createStructuredOutputTool,
 	STRUCTURED_OUTPUT_TOOL_NAME,
@@ -235,3 +244,6 @@ export {
 } from './runtime/query/file-evidence-seed.js'
 
 export { buildResidentToolEvidenceTools } from './tools/resident-tool-evidence.js'
+
+export { createPalMessagingTools } from './pals/communication/tools.js'
+export { createPalOperatorMessagingTools } from './pals/communication/operator.js'

package/src/public-types.ts

@@ -14,11 +14,24 @@
 // ─── per-domain shape surfaces ────────────────────────────────────────────
 
 export type * from './types/ids/index.js'
+export type * from './types/harness/session.js'
+export type * from './pals/types.js'
+export type { PalConversationGreeting, PalSystemPromptOptions } from './pals/prompt.js'
+export type {
+	PalReferenceImage,
+	PalReferenceImageImportReceipt,
+	PalReferenceImageImportOptions,
+	PalReferenceImageToolOptions,
+} from './pals/reference-images.js'
+export type { ViewImageToolOptions } from './tools/builtins/view-image.js'
 export type * from './types/message/index.js'
+export type * from './types/message/inbound-delivery.js'
 export type * from './types/common/index.js'
+export type { AcpPromptOptions, AcpTask, AcpTaskUpdate } from './types/acp/index.js'
 export type { CoalesceOptions } from './streaming/coalesce.js'
 export type * from './types/bidi/index.js'
 export type * from './types/tool/index.js'
+export type * from './types/job/index.js'
 export type { WorkerCodeRuntimeOptions } from './execution/code-runtime/worker.js'
 export type {
 	CodeRunOutcome,
@@ -80,7 +93,10 @@ export type * from './types/structured-output/index.js'
 export type * from './types/invocation/index.js'
 export type * from './types/computer-use/index.js'
 export type * from './types/browser/index.js'
-export type { BrowserActToolInput, BrowserToolInput } from './tools/builtins/browser.js'
+export type {
+	BrowserActToolInput,
+	BrowserToolInput,
+} from './tools/builtins/browser.js'
 export type {
 	BrowserOriginVerdict,
 	BrowserSitePatternVerdict,
@@ -270,7 +286,10 @@ export type {
 	ResolveExternalSessionOptions,
 } from './bridge/external-session.js'
 
-export type { CheckpointRecords, RecordedPark } from './runtime/query/checkpoint.js'
+export type {
+	CheckpointRecords,
+	RecordedPark,
+} from './runtime/query/checkpoint.js'
 
 export type { TaskContextScope } from './store/task/context.js'
 
@@ -486,7 +505,11 @@ export type {
 	RequestContextChange,
 } from './runtime/query/request-context.js'
 
-export type { ResidentDecision, ResidentState, ResidentStore } from './manager/resident/store.js'
+export type {
+	ResidentDecision,
+	ResidentState,
+	ResidentStore,
+} from './manager/resident/store.js'
 export type {
 	ResidentActivityScope,
 	ResidentAdmission,
@@ -538,7 +561,10 @@ export type {
 	ResidentSelection,
 	ResidentSelector,
 } from './manager/resident/initiative.js'
-export type { ResidentHostOptions, ResidentObserver } from './manager/resident/host.js'
+export type {
+	ResidentHostOptions,
+	ResidentObserver,
+} from './manager/resident/host.js'
 export type {
 	ResidentProposal,
 	ResidentProposalLimits,
@@ -558,7 +584,10 @@ export type {
 } from './manager/resident/outbox.js'
 export type { ResidentDeliveryWindowConfig } from './manager/resident/delivery-window.js'
 
-export type { ResidentStepContext, ResidentContextualStep } from './manager/resident/host.js'
+export type {
+	ResidentStepContext,
+	ResidentContextualStep,
+} from './manager/resident/host.js'
 export type {
 	ResidentLearningEvidence,
 	ResidentSkillCandidate,
@@ -716,7 +745,10 @@ export type {
 	ResolvePeerRuntimeDirOptions,
 } from './peers/dir.js'
 export type { PeerRecord } from './peers/record.js'
-export type { ListLivePeersOptions, PeerLivenessOptions } from './peers/registry.js'
+export type {
+	ListLivePeersOptions,
+	PeerLivenessOptions,
+} from './peers/registry.js'
 export type {
 	DeliverRequest,
 	DeliverResponse,
@@ -735,6 +767,36 @@ export type {
 	SubscribeIdleRequest,
 	SubscribeIdleResponse,
 } from './peers/protocol.js'
-export type { CreatePeerEndpointOptions, PeerEndpoint } from './peers/endpoint.js'
+export type {
+	CreatePeerEndpointOptions,
+	PeerEndpoint,
+} from './peers/endpoint.js'
 export type { PeerClientOptions, PeerClientResult } from './peers/client.js'
 export type { PeerMessageEnvelopeInput } from './peers/envelope.js'
+
+export type * from './pals/communication/types.js'
+export type { PalMessagingToolsOptions, PalMessagingRecipient } from './pals/communication/tools.js'
+export type {
+	PalOperatorConversation,
+	PalOperatorMessageBrokerOptions,
+	PalOperatorMessageSender,
+	PalOperatorMessagingToolsOptions,
+	PalOperatorRecipient,
+	PalOperatorSendRequest,
+} from './pals/communication/operator.js'
+export type {
+	PalMessagePermission,
+	PalMessagePermissionUpdate,
+} from './pals/communication/policy.js'
+export type { PalLifecycleEvent, PalLifecycleListener } from './pals/lifecycle.js'
+export type * from './pals/activity/types.js'
+
+export type * from './pals/communication/ingress-types.js'
+export type * from './pals/channels/types.js'
+export type * from './pals/activity/subscription-types.js'
+export type {
+	PalActivitySubscriptionPermission,
+	PalActivitySubscriptionPermissionUpdate,
+} from './pals/activity/subscription-policy.js'
+export type { PalActivitySubscriptionRunnerOptions } from './pals/activity/subscriptions.js'
+export type { PalActivityCausalityOptions } from './pals/activity/causality.js'