@nuvin/nuvin-core 1.13.1 → 1.13.4

package/dist/VERSION

@@ -1,4 +1,4 @@
 {
-  "version": "1.13.1",
-  "commit": "bbe2746"
+  "version": "1.13.4",
+  "commit": "c55099e"
 }

package/dist/index.d.ts

@@ -32,6 +32,7 @@ type CompleteAgent = Required<Pick<AgentTemplate, 'id' | 'name' | 'description'
 type SpecialistAgentConfig = {
     agentId: string;
     agentName: string;
+    agentType?: string;
     taskDescription: string;
     systemPrompt: string;
     tools: string[];
@@ -48,6 +49,8 @@ type SpecialistAgentConfig = {
     conversationId?: string;
     messageId?: string;
     toolCallId?: string;
+    resumeSessionId?: string;
+    previousMessages?: Message[];
 };
 /**
  * Specialist Agent Result
@@ -65,6 +68,7 @@ type SpecialistAgentResult = {
         events?: AgentEvent[];
         errorMessage?: string;
         metrics?: MetricsSnapshot;
+        sessionId?: string;
     };
 };
 /**
@@ -73,6 +77,9 @@ type SpecialistAgentResult = {
 type AssignParams = {
     agent: string;
     task: string;
+    description?: string;
+    run_in_background?: boolean;
+    resume?: string;
 };
 
 interface AgentFilePersistenceOptions {
@@ -345,7 +352,7 @@ type DelegationMetadata = {
     agentId: string;
     agentName: string;
     delegationDepth: number;
-    status: 'success' | 'error' | 'timeout';
+    status?: 'success' | 'error' | 'timeout';
     executionTimeMs: number;
     toolCallsExecuted: number;
     tokensUsed?: number;
@@ -355,6 +362,8 @@ type DelegationMetadata = {
     model?: string;
     conversationHistoryLength?: number;
     eventsEmitted?: number;
+    sessionId?: string;
+    runningInBackground?: boolean;
 };
 
 type BashToolMetadata = CommandMetadata & {
@@ -810,7 +819,7 @@ interface AgentAwareToolPort {
     getAgentRegistry(): AgentRegistry | undefined;
 }
 interface OrchestratorAwareToolPort {
-    setOrchestrator(config: AgentConfig, tools: ToolPort, llmFactory?: LLMFactory, configResolver?: () => Partial<AgentConfig>): void;
+    setOrchestrator(config: AgentConfig, tools: ToolPort, llmFactory?: LLMFactory, configResolver?: () => Partial<AgentConfig>, createMemoryForAgent?: (agentKey: string) => MemoryPort<Message>): void;
 }
 type MemorySnapshot<T = unknown> = Record<string, T[]>;
 interface MemoryPersistence<T = unknown> {
@@ -1171,7 +1180,7 @@ declare function buildInjectedSystem(p: InjectedSystemParams, { withSubAgent }?:
  * System prompt for the agent creation LLM
  * This prompt guides the LLM to generate specialist agent configurations
  */
-declare const AGENT_CREATOR_SYSTEM_PROMPT = "You are an elite AI agent architect. Your job is to translate user requirements into a precise, reliable agent specification and final system prompt that downstream systems can use directly.\n\n### Context you may receive\n- Project materials (e.g., CLAUDE.md), coding standards, project structure, and custom requirements. Inherit these patterns explicitly in your design.\n\n### Your high-level objective\n- Produce a complete, self-sufficient agent spec that includes: a concise identifier, a clear \"when to use\" description with examples, and a robust system prompt that governs behavior.\n\n### Operating principles (follow in order)\n1) **Extract Core Intent**\n   - Identify purpose, scope, users, inputs, outputs, success criteria, constraints, and any implicit needs.\n   - If code-review is requested, default scope to *recently written or changed code* unless the user explicitly requests a full-repo review.\n2) **Design Expert Persona**\n   - Define a domain-specific role (e.g., senior code reviewer, API docs writer), decision style, and domain heuristics.\n   - Assume the role of a recognized domain expert with deep mastery of relevant concepts, methodologies, and best practices. Let this expertise guide your decision-making through nuanced understanding, authoritative judgment, and strategic thinking that anticipates challenges and recognizes proven patterns.\n   - Communicate with professional confidence while acknowledging uncertainty when appropriate.\n1) **Decompose the Task**\n   - Lay out a short pipeline (PLAN \u2192 EXECUTE \u2192 VERIFY \u2192 OUTPUT). Keep steps concrete and checklist-driven. (Structured, decomposed prompts improve reliability.)\n2) **Specify Inputs, Tools, and Boundaries**\n   - Name required inputs; state assumptions if missing.\n   - List allowed tools/APIs and how to invoke them; define fallback behavior if tools fail.\n   - Include stop conditions and escalation rules (when to ask the user for clarification, when to return partial results).\n3) **Quality & Reliability**\n   - Build in self-checks: requirement coverage, constraint adherence, formatting validation.\n   - Where applicable, instruct the agent to generate and verify reasoning internally, then present only the final, concise result.\n   - Encourage evidence/verification for factual claims when sources are available.\n4) **Output Contract**\n   - Define exact output formats (schemas, sections, or bullet checklists) so downstream consumers are deterministic.\n\n### System-prompt structure you must generate (use this template)\n\n# Role\nYou are <expert-persona>. You optimize for correctness, clarity, and adherence to project standards.\n\n# Goals\n- <bullet list of concrete goals>\n\n# Inputs\n- <required inputs>\n- Assumptions if missing: <rules to infer or request>\n\n# Process\n- PLAN: <brief checklist>\n- EXECUTE: <methods, frameworks, heuristics>\n- VERIFY: <self-checks, requirement coverage, constraint audit>\n- OUTPUT: <exact sections / schema>\n\n# Policies & Boundaries\n- Follow project coding standards from CLAUDE.md if provided.\n- Review only recent changes unless told otherwise.\n- If information is insufficient, ask precisely targeted questions (max 3) before proceeding; otherwise proceed with clearly stated assumptions.\n- Stop and escalate if safety, legal, or data-governance risks are detected.\n\n# Quality Bar\n- Ensure: correctness > completeness > speed.\n- Run a final \"Spec QA\" checklist before responding:\n  1) All user requirements mapped to sections?\n  2) Output format matches the contract exactly?\n  3) Edge cases addressed?\n  4) Examples included when helpful?\n\"\"\"\n\n### What to return\n- A **JSON object** with exactly these fields:\n  - 'id': short, kebab-case, descriptive (2\u20134 words), no generic terms like 'helper' or 'assistant'.\n  - 'description': starts with \"Use this agent when...\" and includes at least two concrete examples showing tool invocation (not direct replies). Include proactive triggers if implied.\n  - 'systemPrompt': the final second-person system prompt built from the template above.\n\n### Additional guidance\n- Prefer explicit instructions over prohibitions; say what to do. (Specific, structured prompts improve outcomes.)\n- Use few-shot examples when they clarify behavior.\n- Be concise but complete\u2014every line should add execution value.\n- If constraints conflict, state the trade-off and your resolution.\n- Only include optional advanced reasoning guidance when beneficial; keep the final user-visible output clean.\n\n\n### REQUIRED OUTPUT: You MUST return a JSON object with at least the 'systemPrompt' field.\n\n**OPTIONAL FIELDS**: You may also include any of these fields (they have defaults if omitted):\n- 'id': A kebab-case identifier (e.g., \"security-auditor\", \"data-analyzer\")\n- 'name': A human-readable name (e.g., \"Security Auditor\", \"Data Analyzer\")\n- 'description': A brief description of when to use this agent\n- 'tools': An array of tool names the agent should have access to\n- 'temperature': A number between 0 and 1 (default: 0.7)\n\nExample outputs:\n\n{\n  \"id\": \"security-auditor\",\n  \"name\": \"Security Auditor\",\n  \"description\": \"Use this agent when you need to perform a security audit on a codebase or application. For example, you might invoke this agent when you want to check for vulnerabilities in a web application or when you need to ensure compliance with security best practices.\",\n  \"systemPrompt\": \"\n      You are a security auditing specialist. Your role is to analyze code for security vulnerabilities, including SQL injection, XSS, CSRF, authentication issues, and insecure dependencies.\n\n      Approach:\n      1. Read and analyze the codebase systematically\n      2. Check for common vulnerability patterns\n      3. Review dependencies for known CVEs\n      4. Provide specific, actionable remediation steps\n\n      Always prioritize critical security issues and explain the potential impact.\",\n  \"tools\": [\"file_read\", \"web_search\", \"bash_tool\"],\n  \"temperature\": 0.3\n}\n\n{\n  \"systemPrompt\": \"You are a helpful specialist agent that assists with general programming tasks. You can read files, search for information, and provide clear explanations.\"\n}\n\nRemember: 'systemPrompt' is REQUIRED. All other fields are optional and will have defaults applied if omitted.\nIMPORTANT: Return ONLY the JSON object as your response. Do NOT include any additional text or explanation.\n";
+declare const AGENT_CREATOR_SYSTEM_PROMPT = "You are an elite AI agent architect. Your job is to translate user requirements into a precise, reliable agent specification and final system prompt that downstream systems can use directly.\n\n### Context you may receive\n- Project materials (e.g., CLAUDE.md), coding standards, project structure, and custom requirements. Inherit these patterns explicitly in your design.\n\n### Your high-level objective\n- Produce a complete, self-sufficient agent spec that includes: a concise identifier, a clear \"when to use\" description with examples, and a robust system prompt that governs behavior.\n\n### Operating principles (follow in order)\n1) **Extract Core Intent**\n   - Identify purpose, scope, users, inputs, outputs, success criteria, constraints, and any implicit needs.\n   - If code-review is requested, default scope to *recently written or changed code* unless the user explicitly requests a full-repo review.\n2) **Design Expert Persona**\n   - Define a domain-specific role (e.g., senior code reviewer, API docs writer), decision style, and domain heuristics.\n   - Assume the role of a recognized domain expert with deep mastery of relevant concepts, methodologies, and best practices.\n3) **Decompose the Task**\n   - Lay out a short pipeline (PLAN \u2192 EXECUTE \u2192 VERIFY \u2192 OUTPUT). Keep steps concrete and checklist-driven.\n4) **Specify Inputs, Tools, and Boundaries**\n   - Name required inputs; state assumptions if missing.\n   - List allowed tools and how to invoke them; define fallback behavior if tools fail.\n   - Include stop conditions and escalation rules (when to ask the user for clarification, when to return partial results).\n5) **Quality & Reliability**\n   - Build in self-checks: requirement coverage, constraint adherence, formatting validation.\n   - Where applicable, instruct the agent to generate and verify reasoning internally, then present only the final, concise result.\n6) **Output Contract**\n   - Define exact output formats (schemas, sections, or bullet checklists) so downstream consumers are deterministic.\n\n### System-prompt structure you must generate\n\n# Role\nYou are <expert-persona>. You optimize for correctness, clarity, and adherence to project standards.\n\n# Goals\n- <bullet list of concrete goals>\n\n# Inputs\n- <required inputs>\n- Assumptions if missing: <rules to infer or request>\n\n# Process\n- PLAN: <brief checklist>\n- EXECUTE: <methods, frameworks, heuristics>\n- VERIFY: <self-checks, requirement coverage, constraint audit>\n- OUTPUT: <exact sections / schema>\n\n# Policies & Boundaries\n- Follow project coding standards from CLAUDE.md if provided.\n- Review only recent changes unless told otherwise.\n- If information is insufficient, ask precisely targeted questions (max 3) before proceeding; otherwise proceed with clearly stated assumptions.\n- Stop and escalate if safety, legal, or data-governance risks are detected.\n\n# Quality Bar\n- Ensure: correctness > completeness > speed.\n- Run a final \"Spec QA\" checklist before responding:\n  1) All user requirements mapped to sections?\n  2) Output format matches the contract exactly?\n  3) Edge cases addressed?\n  4) Examples included when helpful?\n\n### What to return\nReturn a **JSON object** with exactly these fields:\n- **systemPrompt** (REQUIRED): The final second-person system prompt built from the template above.\n- **id** (optional): A kebab-case identifier (e.g., \"security-auditor\", \"data-analyzer\"). If omitted, one will be auto-generated.\n- **name** (optional): A human-readable name (e.g., \"Security Auditor\", \"Data Analyzer\"). Defaults to \"Custom Agent\".\n- **description** (optional): Starts with \"Use this agent when...\" with 2+ concrete examples showing tool invocation. Defaults to generic description.\n- **tools** (optional): Array of tool names the agent should use. Defaults to [\"file_read\", \"web_search\"].\n- **temperature** (optional): Number between 0-1 for sampling. Lower values = more deterministic. Recommended: 0.3-0.5.\n- **model** (optional): Specific model to use (e.g., \"gpt-4\", \"claude-3-sonnet\"). If omitted, inherits from parent.\n- **provider** (optional): LLM provider (e.g., \"openrouter\", \"github\", \"anthropic\").\n- **topP** (optional): Top-p sampling parameter. Recommended: 1.\n- **maxTokens** (optional): Maximum tokens for response. Recommended: 64000 or omitted.\n- **timeoutMs** (optional): Timeout in milliseconds. Default: 300000 (5 minutes).\n\n### Examples\n\nExample 1:\n{\n  \"id\": \"security-auditor\",\n  \"name\": \"Security Auditor\",\n  \"description\": \"Use this agent when you need to perform a security audit on a codebase or application. For example, you might invoke this agent when you want to check for vulnerabilities in a web application or when you need to ensure compliance with security best practices.\",\n  \"systemPrompt\": \"You are a security auditing specialist. Your role is to analyze code for security vulnerabilities, including SQL injection, XSS, CSRF, authentication issues, and insecure dependencies. Approach: 1. file_read and analyze the codebase systematically. 2. Check for common vulnerability patterns. 3. Review dependencies for known CVEs. 4. Provide specific, actionable remediation steps. Always prioritize critical security issues and explain the potential impact.\",\n  \"tools\": [\"file_read\", \"web_search\", \"bash_tool\", \"grep_tool\"],\n  \"temperature\": 0.3\n}\n\nExample 2 (minimal):\n{\n  \"systemPrompt\": \"You are a helpful specialist agent that assists with general programming tasks. You can read files, search for information, and provide clear explanations.\",\n  \"tools\": [\"file_read\", \"web_search\"]\n}\n\n### Important guidelines\n- Use explicit instructions over prohibitions; say what to do.\n- Use few-shot examples when they clarify behavior.\n- Be concise but complete\u2014every line should add execution value.\n- If constraints conflict, state the trade-off and your resolution.\n- Include specific tool names from the available tools list.\n- Lower temperature (0.3) produces more consistent results.\n\n**Remember: Return ONLY the JSON object as your response. Do NOT include any additional text or explanation.**";
 /**
  * Generate a user prompt for agent creation
  */
@@ -1218,6 +1227,27 @@ declare class PersistedMemory<T = unknown> implements MemoryPort<T> {
     importSnapshot(snapshot: MemorySnapshot<T>): Promise<void>;
 }
 
+interface MultiFileMemoryPersistenceOptions {
+    directory: string;
+    /** Converts a memory key to a filename. Default: `history.${key}.json` */
+    getFilename?: (key: string) => string;
+    /** Extracts the key from a filename. Default: extracts from `history.{key}.json` */
+    getKeyFromFilename?: (filename: string) => string | null;
+}
+/**
+ * Multi-file persistence adapter that stores each memory key in its own file.
+ * Files are named using the pattern: history.{key}.json
+ * Only keys starting with 'agent:' are persisted to separate files.
+ */
+declare class MultiFileMemoryPersistence<T = unknown> implements MemoryPersistence<T> {
+    private options;
+    private getFilename;
+    private getKeyFromFilename;
+    constructor(options: MultiFileMemoryPersistenceOptions);
+    load(): Promise<MemorySnapshot<T>>;
+    save(snapshot: MemorySnapshot<T>): Promise<void>;
+}
+
 declare class MemoryPortMetadataAdapter<T> implements MetadataPort<T> {
     private memory;
     private prefix;
@@ -1398,19 +1428,6 @@ interface AgentCatalog {
     list(): AgentTemplate[];
     get(agentId: string): AgentTemplate | undefined;
 }
-interface DelegationPolicyInput {
-    agent: AgentTemplate;
-    enabledAgents: Record<string, boolean>;
-    params: AssignParams;
-    context?: ToolExecutionContext;
-}
-interface PolicyDecision {
-    allowed: boolean;
-    reason?: string;
-}
-interface DelegationPolicy {
-    evaluate(input: DelegationPolicyInput): PolicyDecision;
-}
 interface SpecialistAgentFactoryInput {
     template: AgentTemplate;
     params: AssignParams;
@@ -1418,7 +1435,7 @@ interface SpecialistAgentFactoryInput {
     currentDepth: number;
 }
 interface SpecialistAgentFactory {
-    create(input: SpecialistAgentFactoryInput): SpecialistAgentConfig;
+    create(input: SpecialistAgentFactoryInput): SpecialistAgentConfig | Promise<SpecialistAgentConfig>;
 }
 interface AgentCommandRunner {
     run(config: SpecialistAgentConfig, context?: ToolExecutionContext): Promise<SpecialistAgentResult>;
@@ -1429,21 +1446,18 @@ interface DelegationResult {
     metadata?: Record<string, unknown>;
     error?: string;
 }
-interface DelegationResultFormatter {
-    formatSuccess(agentId: string, result: SpecialistAgentResult): Pick<DelegationResult, 'summary' | 'metadata'>;
-    formatError(error: unknown): string;
+interface BackgroundDelegationResult {
+    success: boolean;
+    sessionId?: string;
+    error?: string;
 }
 interface DelegationService {
     setEnabledAgents(enabledAgents: Record<string, boolean>): void;
     listEnabledAgents(): AgentTemplate[];
     delegate(params: AssignParams, context?: ToolExecutionContext): Promise<DelegationResult>;
-}
-
-/**
- * Default policy checks whether the agent is enabled (if explicitly configured).
- */
-declare class DefaultDelegationPolicy implements DelegationPolicy {
-    evaluate(input: DelegationPolicyInput): PolicyDecision;
+    delegateBackground?(params: AssignParams, context?: ToolExecutionContext): Promise<BackgroundDelegationResult>;
+    getBackgroundResult?(sessionId: string, blocking?: boolean): Promise<DelegationResult | null>;
+    isBackgroundAgentRunning?(sessionId: string): boolean;
 }
 
 type SystemContext = {
@@ -1467,8 +1481,46 @@ declare class DefaultSpecialistAgentFactory implements SpecialistAgentFactory {
         systemContextProvider?: SystemContextProvider;
         agentListProvider?: AgentListProvider;
         idGenerator?: IdGenerator;
+        createMemoryForAgent?: (agentKey: string) => MemoryPort<Message>;
     } | undefined);
-    create(input: SpecialistAgentFactoryInput): SpecialistAgentConfig;
+    create(input: SpecialistAgentFactoryInput): Promise<SpecialistAgentConfig>;
+}
+
+interface AgentSession {
+    id: string;
+    agentType: string;
+    parentConversationId: string;
+    state: 'pending' | 'running' | 'completed' | 'failed';
+    taskDescription: string;
+    startTime: number;
+    endTime?: number;
+    result?: string;
+    error?: string;
+    metrics?: {
+        tokensUsed?: number;
+        toolCallsExecuted?: number;
+        executionTimeMs?: number;
+    };
+}
+interface AgentStateManager {
+    create(agentType: string, parentConvoId: string, taskDescription: string): string;
+    get(sessionId: string): AgentSession | undefined;
+    update(sessionId: string, updates: Partial<AgentSession>): void;
+    getRunning(): AgentSession[];
+    getByParent(parentConvoId: string): AgentSession[];
+    getAllSessions(): AgentSession[];
+    cleanup(maxAgeMs: number): number;
+}
+declare class DefaultAgentStateManager implements AgentStateManager {
+    private sessions;
+    private idGenerator;
+    create(agentType: string, parentConvoId: string, taskDescription: string): string;
+    get(sessionId: string): AgentSession | undefined;
+    update(sessionId: string, updates: Partial<AgentSession>): void;
+    getRunning(): AgentSession[];
+    getByParent(parentConvoId: string): AgentSession[];
+    getAllSessions(): AgentSession[];
+    cleanup(maxAgeMs: number): number;
 }
 
 /**
@@ -1480,10 +1532,13 @@ declare class AgentManager {
     private llmFactory?;
     private eventCallback?;
     private configResolver?;
+    private metricsPort?;
     private llmResolver;
     private activeAgents;
     private eventCollectors;
-    constructor(delegatingConfig: AgentConfig, delegatingTools: ToolPort, llmFactory?: LLMFactory | undefined, eventCallback?: ((event: AgentEvent) => void) | undefined, configResolver?: (() => Partial<AgentConfig>) | undefined);
+    private stateManager;
+    private createMemoryForAgent?;
+    constructor(delegatingConfig: AgentConfig, delegatingTools: ToolPort, llmFactory?: LLMFactory | undefined, eventCallback?: ((event: AgentEvent) => void) | undefined, configResolver?: (() => Partial<AgentConfig>) | undefined, createMemoryForAgent?: (agentKey: string) => MemoryPort<Message>, metricsPort?: MetricsPort | undefined);
     /**
      * Create and execute a specialist agent for a specific task
      */
@@ -1508,6 +1563,10 @@ declare class AgentManager {
      * Cleanup all active agents (emergency stop)
      */
     cleanup(): void;
+    /**
+     * Get the state manager for querying sessions
+     */
+    getStateManager(): AgentStateManager;
 }
 
 declare class AgentManagerCommandRunner implements AgentCommandRunner {
@@ -1515,37 +1574,25 @@ declare class AgentManagerCommandRunner implements AgentCommandRunner {
     private readonly delegatingTools;
     private readonly llmFactory?;
     private readonly configResolver?;
-    constructor(delegatingConfig: AgentConfig, delegatingTools: ToolPort, llmFactory?: LLMFactory | undefined, configResolver?: (() => Partial<AgentConfig>) | undefined);
+    private readonly createMemoryForAgent?;
+    private readonly metricsPort?;
+    constructor(delegatingConfig: AgentConfig, delegatingTools: ToolPort, llmFactory?: LLMFactory | undefined, configResolver?: (() => Partial<AgentConfig>) | undefined, createMemoryForAgent?: ((agentKey: string) => MemoryPort<Message>) | undefined, metricsPort?: MetricsPort | undefined);
     run(config: Parameters<AgentManager['executeTask']>[0], context?: ToolExecutionContext): Promise<SpecialistAgentResult>;
 }
 
 declare class DefaultDelegationService implements DelegationService {
     private readonly catalog;
-    private readonly policy;
     private readonly factory;
     private readonly runner;
-    private readonly formatter;
     private enabledAgents;
-    constructor(catalog: AgentCatalog, policy: DelegationPolicy, factory: SpecialistAgentFactory, runner: AgentCommandRunner, formatter: DelegationResultFormatter);
+    private backgroundAgents;
+    constructor(catalog: AgentCatalog, factory: SpecialistAgentFactory, runner: AgentCommandRunner);
     setEnabledAgents(enabledAgents: Record<string, boolean>): void;
     listEnabledAgents(): AgentTemplate[];
     delegate(params: AssignParams, context?: ToolExecutionContext): Promise<DelegationResult>;
-}
-
-declare class DefaultDelegationResultFormatter implements DelegationResultFormatter {
-    formatSuccess(agentId: string, result: SpecialistAgentResult): {
-        summary: string;
-        metadata: {
-            agentId: string;
-            agentName: string;
-            status: "success" | "error" | "timeout";
-            executionTimeMs: number;
-            toolCallsExecuted: number;
-            tokensUsed: number | undefined;
-            metrics: MetricsSnapshot | undefined;
-        };
-    };
-    formatError(error: unknown): string;
+    delegateBackground(params: AssignParams, context?: ToolExecutionContext): Promise<BackgroundDelegationResult>;
+    getBackgroundResult(sessionId: string, blocking?: boolean): Promise<DelegationResult | null>;
+    isBackgroundAgentRunning(sessionId: string): boolean;
 }
 
 interface DelegationServiceConfig {
@@ -1556,6 +1603,7 @@ interface DelegationServiceConfig {
         name: string;
         description: string;
     }>;
+    createMemoryForAgent?: (agentKey: string) => MemoryPort<Message>;
 }
 declare class DelegationServiceFactory {
     create(config: DelegationServiceConfig): DelegationService;
@@ -1574,6 +1622,10 @@ declare class ToolRegistry implements ToolPort, AgentAwareToolPort, Orchestrator
     private delegationServiceFactory?;
     private assignTool?;
     private enabledAgentsConfig;
+    private orchestratorConfig?;
+    private orchestratorTools?;
+    private orchestratorLLMFactory?;
+    private orchestratorConfigResolver?;
     constructor(opts?: {
         todoMemory?: MemoryPort<TodoItem>;
         toolsMemory?: MemoryPort<string>;
@@ -1586,7 +1638,12 @@ declare class ToolRegistry implements ToolPort, AgentAwareToolPort, Orchestrator
     /**
      * Initialize AssignTool with orchestrator dependencies (lazy initialization)
      */
-    setOrchestrator(config: AgentConfig, tools: ToolPort, llmFactory?: LLMFactory, configResolver?: () => Partial<AgentConfig>): void;
+    setOrchestrator(config: AgentConfig, tools: ToolPort, llmFactory?: LLMFactory, configResolver?: () => Partial<AgentConfig>, createMemoryForAgent?: (agentKey: string) => MemoryPort<Message>): void;
+    /**
+     * Update memory factory for sub-agent sessions.
+     * Called when session is lazily initialized and memory needs to switch from in-memory to persisted.
+     */
+    setSharedMemory(createMemoryForAgent: (agentKey: string) => MemoryPort<Message>): void;
     /**
      * Get the agent registry
      */
@@ -2086,6 +2143,25 @@ type AssignErrorResult = ExecResultError & {
 };
 type AssignResult = AssignSuccessResult$1 | AssignErrorResult;
 
+interface TaskOutputParams {
+    session_id: string;
+    blocking?: boolean;
+    timeout_ms?: number;
+}
+interface TaskOutputMetadata {
+    sessionId: string;
+    state: 'running' | 'completed' | 'failed' | 'not_found';
+    metrics?: {
+        tokensUsed?: number;
+        toolCallsExecuted?: number;
+        executionTimeMs?: number;
+    };
+}
+type TaskOutputSuccessResult = ExecResultSuccess & {
+    metadata: TaskOutputMetadata;
+};
+type TaskOutputResult = TaskOutputSuccessResult | ExecResultError;
+
 declare function isSuccess(result: ExecResult): result is ExecResultSuccess;
 declare function isError(result: ExecResult): result is ExecResultError;
 declare function isTextResult(result: ExecResult): result is Extract<ExecResult, {
@@ -2537,4 +2613,4 @@ declare function resolveBackspaces(s: string): string;
 declare function stripAnsiAndControls(s: string): string;
 declare function canonicalizeTerminalPaste(raw: string): string;
 
-export { AGENT_CREATOR_SYSTEM_PROMPT, AbortError, type AgentAwareToolPort, type AgentCatalog, type AgentConfig, type AgentEvent, AgentEventTypes, AgentFilePersistence, AgentManager, AgentManagerCommandRunner, AgentOrchestrator, AgentRegistry, type AgentTemplate, AnthropicAISDKLLM, type AssignErrorResult, type AssignParams, type AssignResult, type AssignSuccessResult$1 as AssignSuccessResult, type AssignTaskArgs, type AssignTaskMetadata, type BaseLLMOptions, type BashErrorResult, type BashParams, type BashResult, type BashSuccessResult$1 as BashSuccessResult, BashTool, type BashToolArgs, type BashToolMetadata, CommandFilePersistence, type CommandMetadata, type CommandSource, type CompleteAgent, type CompleteCustomCommand, CompositeToolPort, type Conversation, ConversationContext, type ConversationMetadata, type ConversationSnapshot, ConversationStore, CoreMCPClient, type CustomCommandFrontmatter, type CustomCommandTemplate, DEFAULT_RETRY_CONFIG, DefaultDelegationPolicy, DefaultDelegationResultFormatter, DefaultDelegationService, DefaultSpecialistAgentFactory, type DelegationMetadata, type DelegationService, type DelegationServiceConfig, DelegationServiceFactory, type DirEntry, type ErrorMetadata, ErrorReason, type ExecResult, type ExecResultError, type ExecResultSuccess, type FileEditArgs, type FileEditMetadata, type FileEditResult, type FileEditSuccessResult$1 as FileEditSuccessResult, type FileMetadata, type FileNewArgs, type FileNewMetadata, type FileNewParams, type FileNewResult, type FileNewSuccessResult$1 as FileNewSuccessResult, type FileReadArgs, type FileReadErrorResult, type FileReadMetadata, type FileReadParams, type FileReadResult, type FileReadSuccessResult$1 as FileReadSuccessResult, type FolderTreeOptions, type FunctionTool, GithubLLM, type GlobArgs, type GlobParams, type GlobResult, type GlobSuccessResult$1 as GlobSuccessResult, type GlobToolMetadata, type GrepArgs, type GrepParams, type GrepResult, type GrepSuccessResult$1 as GrepSuccessResult, type GrepToolMetadata, InMemoryMemory, InMemoryMetadata, InMemoryMetricsPort, JsonFileMemoryPersistence, type LLMConfig, LLMError, type LLMFactory, type LLMOptions, type LLMPort, LLMResolver, type LineRangeMetadata, type LsArgs, type LsMetadata, type LsParams, type LsResult, type LsSuccessResult$1 as LsSuccessResult, type MCPConfig, type MCPServerConfig, MCPToolPort, type MemoryPort, MemoryPortMetadataAdapter, type Message, type MessageContent, type MessageContentPart, type MetadataPort, type MetricsChangeHandler, type MetricsPort, type MetricsSnapshot, type ModelInfo, type ModelLimits, NoopMetricsPort, NoopReminders, type OrchestratorAwareToolPort, type ParseResult, PersistedMemory, PersistingConsoleEventPort, type RetryConfig, RetryTransport, RuntimeEnv, type SendMessageOptions, SimpleContextBuilder, SimpleCost, SimpleId, type SpecialistAgentConfig, type SpecialistAgentResult, type SubAgentState, type SubAgentToolCall, SystemClock, type TodoWriteArgs, type TodoWriteMetadata, type TodoWriteResult, type TodoWriteSuccessResult$1 as TodoWriteSuccessResult, type ToolApprovalDecision, type ToolArguments, type ToolCall, type ToolCallConversionResult, type ToolCallValidation, type ToolErrorMetadata, type ToolExecutionContext, type ToolExecutionResult, type ToolMetadataMap, type ToolName, type ToolParameterMap, type ToolPort, ToolRegistry, type ToolValidator, type TypedToolInvocation, type UsageData, type UserAttachment, type UserMessagePayload, type ValidationError, type ValidationResult, type WebFetchArgs, type WebFetchMetadata, type WebFetchParams, type WebFetchResult, type WebFetchSuccessResult$1 as WebFetchSuccessResult, type WebSearchArgs, type WebSearchMetadata, type WebSearchParams, type WebSearchResult, type WebSearchSuccessResult$1 as WebSearchSuccessResult, type WebSearchToolResult, assignTaskSchema, bashToolSchema, buildAgentCreationPrompt, buildInjectedSystem, canonicalizeTerminalPaste, convertToolCall, convertToolCalls, convertToolCallsWithErrorHandling, createEmptySnapshot, createLLM, deduplicateModels, err, fileEditSchema, fileNewSchema, fileReadSchema, generateFolderTree, getAvailableProviders, getFallbackLimits, getProviderAuthMethods, getProviderDefaultModels, getProviderLabel, globToolSchema, grepToolSchema, isAssignResult, isAssignSuccess, isAssignTaskArgs, isBashResult, isBashSuccess, isBashToolArgs, isError, isFileEditArgs, isFileEditResult, isFileEditSuccess, isFileNewArgs, isFileNewResult, isFileNewSuccess, isFileReadArgs, isFileReadResult, isFileReadSuccess, isGlobArgs, isGlobResult, isGlobSuccess, isGrepArgs, isGrepResult, isGrepSuccess, isJsonResult, isLsArgs, isLsToolResult, isLsToolSuccess, isRetryableError, isRetryableStatusCode, isSuccess, isSuccessJson, isSuccessText, isTextResult, isTodoWriteArgs, isTodoWriteResult, isTodoWriteSuccess, isValidCommandId, isWebFetchArgs, isWebFetchResult, isWebFetchSuccess, isWebSearchArgs, isWebSearchResult, isWebSearchSuccess, lsToolSchema, normalizeModelInfo, normalizeModelLimits, normalizeNewlines, okJson, okText, parseJSON, parseSubAgentToolCallArguments, parseToolArguments, renderTemplate, resolveBackspaces, resolveCarriageReturns, sanitizeCommandId, stripAnsiAndControls, supportsGetModels, todoWriteSchema, toolSchemas, toolValidators, validateToolParams, webFetchSchema, webSearchSchema };
+export { AGENT_CREATOR_SYSTEM_PROMPT, AbortError, type AgentAwareToolPort, type AgentCatalog, type AgentConfig, type AgentEvent, AgentEventTypes, AgentFilePersistence, AgentManager, AgentManagerCommandRunner, AgentOrchestrator, AgentRegistry, type AgentSession, type AgentStateManager, type AgentTemplate, AnthropicAISDKLLM, type AssignErrorResult, type AssignParams, type AssignResult, type AssignSuccessResult$1 as AssignSuccessResult, type AssignTaskArgs, type AssignTaskMetadata, type BaseLLMOptions, type BashErrorResult, type BashParams, type BashResult, type BashSuccessResult$1 as BashSuccessResult, BashTool, type BashToolArgs, type BashToolMetadata, CommandFilePersistence, type CommandMetadata, type CommandSource, type CompleteAgent, type CompleteCustomCommand, CompositeToolPort, type Conversation, ConversationContext, type ConversationMetadata, type ConversationSnapshot, ConversationStore, CoreMCPClient, type CustomCommandFrontmatter, type CustomCommandTemplate, DEFAULT_RETRY_CONFIG, DefaultAgentStateManager, DefaultDelegationService, DefaultSpecialistAgentFactory, type DelegationMetadata, type DelegationService, type DelegationServiceConfig, DelegationServiceFactory, type DirEntry, type ErrorMetadata, ErrorReason, type ExecResult, type ExecResultError, type ExecResultSuccess, type FileEditArgs, type FileEditMetadata, type FileEditResult, type FileEditSuccessResult$1 as FileEditSuccessResult, type FileMetadata, type FileNewArgs, type FileNewMetadata, type FileNewParams, type FileNewResult, type FileNewSuccessResult$1 as FileNewSuccessResult, type FileReadArgs, type FileReadErrorResult, type FileReadMetadata, type FileReadParams, type FileReadResult, type FileReadSuccessResult$1 as FileReadSuccessResult, type FolderTreeOptions, type FunctionTool, GithubLLM, type GlobArgs, type GlobParams, type GlobResult, type GlobSuccessResult$1 as GlobSuccessResult, type GlobToolMetadata, type GrepArgs, type GrepParams, type GrepResult, type GrepSuccessResult$1 as GrepSuccessResult, type GrepToolMetadata, InMemoryMemory, InMemoryMetadata, InMemoryMetricsPort, JsonFileMemoryPersistence, type LLMConfig, LLMError, type LLMFactory, type LLMOptions, type LLMPort, LLMResolver, type LineRangeMetadata, type LsArgs, type LsMetadata, type LsParams, type LsResult, type LsSuccessResult$1 as LsSuccessResult, type MCPConfig, type MCPServerConfig, MCPToolPort, type MemoryPort, MemoryPortMetadataAdapter, type Message, type MessageContent, type MessageContentPart, type MetadataPort, type MetricsChangeHandler, type MetricsPort, type MetricsSnapshot, type ModelInfo, type ModelLimits, MultiFileMemoryPersistence, NoopMetricsPort, NoopReminders, type OrchestratorAwareToolPort, type ParseResult, PersistedMemory, PersistingConsoleEventPort, type RetryConfig, RetryTransport, RuntimeEnv, type SendMessageOptions, SimpleContextBuilder, SimpleCost, SimpleId, type SpecialistAgentConfig, type SpecialistAgentResult, type SubAgentState, type SubAgentToolCall, SystemClock, type TaskOutputMetadata, type TaskOutputParams, type TaskOutputResult, type TaskOutputSuccessResult, type TodoWriteArgs, type TodoWriteMetadata, type TodoWriteResult, type TodoWriteSuccessResult$1 as TodoWriteSuccessResult, type ToolApprovalDecision, type ToolArguments, type ToolCall, type ToolCallConversionResult, type ToolCallValidation, type ToolErrorMetadata, type ToolExecutionContext, type ToolExecutionResult, type ToolMetadataMap, type ToolName, type ToolParameterMap, type ToolPort, ToolRegistry, type ToolValidator, type TypedToolInvocation, type UsageData, type UserAttachment, type UserMessagePayload, type ValidationError, type ValidationResult, type WebFetchArgs, type WebFetchMetadata, type WebFetchParams, type WebFetchResult, type WebFetchSuccessResult$1 as WebFetchSuccessResult, type WebSearchArgs, type WebSearchMetadata, type WebSearchParams, type WebSearchResult, type WebSearchSuccessResult$1 as WebSearchSuccessResult, type WebSearchToolResult, assignTaskSchema, bashToolSchema, buildAgentCreationPrompt, buildInjectedSystem, canonicalizeTerminalPaste, convertToolCall, convertToolCalls, convertToolCallsWithErrorHandling, createEmptySnapshot, createLLM, deduplicateModels, err, fileEditSchema, fileNewSchema, fileReadSchema, generateFolderTree, getAvailableProviders, getFallbackLimits, getProviderAuthMethods, getProviderDefaultModels, getProviderLabel, globToolSchema, grepToolSchema, isAssignResult, isAssignSuccess, isAssignTaskArgs, isBashResult, isBashSuccess, isBashToolArgs, isError, isFileEditArgs, isFileEditResult, isFileEditSuccess, isFileNewArgs, isFileNewResult, isFileNewSuccess, isFileReadArgs, isFileReadResult, isFileReadSuccess, isGlobArgs, isGlobResult, isGlobSuccess, isGrepArgs, isGrepResult, isGrepSuccess, isJsonResult, isLsArgs, isLsToolResult, isLsToolSuccess, isRetryableError, isRetryableStatusCode, isSuccess, isSuccessJson, isSuccessText, isTextResult, isTodoWriteArgs, isTodoWriteResult, isTodoWriteSuccess, isValidCommandId, isWebFetchArgs, isWebFetchResult, isWebFetchSuccess, isWebSearchArgs, isWebSearchResult, isWebSearchSuccess, lsToolSchema, normalizeModelInfo, normalizeModelLimits, normalizeNewlines, okJson, okText, parseJSON, parseSubAgentToolCallArguments, parseToolArguments, renderTemplate, resolveBackspaces, resolveCarriageReturns, sanitizeCommandId, stripAnsiAndControls, supportsGetModels, todoWriteSchema, toolSchemas, toolValidators, validateToolParams, webFetchSchema, webSearchSchema };