@ordewell/core 0.4.23 → 0.5.1

package/dist/Task-BxQkPlXO.d.ts

@@ -0,0 +1,664 @@
+/**
+ * Why isolated execution is unavailable for a workspace. The orchestrator needs
+ * the reason, not just a boolean: `dirty` is offered a stash or an explicit
+ * "run without isolation", while the others fall back to the shared
+ * workspace root with a one-line notice.
+ */
+type IsolationInactiveReason = 'disabled' | 'git-missing' | 'not-git' | 'no-commits' | 'dirty' | 'nested-repos';
+/**
+ * `repos` names, relative to the workspace, the repositories behind the answer:
+ * when active, the ones that will isolate, with `shared` the paths every task
+ * will share live; otherwise the nested ones `nested-repos` refuses, the dirty
+ * ones of a `dirty` group, or the commitless ones of a `no-commits` group. A
+ * group of one names none.
+ */
+type IsolationAvailability = {
+    active: true;
+    repos?: string[];
+    shared?: string[];
+} | {
+    active: false;
+    reason: IsolationInactiveReason;
+    repos?: string[];
+};
+/**
+ * Where a run's tasks work, as the planner is told it: the repos of the group
+ * and the paths shared live between tasks. A lone repository is `['.']` with
+ * nothing shared.
+ */
+interface RepoGroupLayout {
+    repos: string[];
+    shared: string[];
+}
+type IsolationOutcome = 'merged' | 'conflict' | 'failed';
+/**
+ * `active` — worktree exists, a runner may be writing to it.
+ * `kept` — released with its worktree and branch preserved for inspection.
+ * `conflict` — integration stopped on a merge conflict; worktree and refs kept.
+ * `repairing` — a conflict repair (ADR-0015) is working in the kept worktree;
+ *   one that ends without landing leaves the task `conflict` again.
+ * `failed` — integration hit a git error other than a conflict; refs kept.
+ * `merged` — landed on the integration branch; worktree and task branch removed.
+ */
+type IsolationTaskStatus = 'active' | 'kept' | 'conflict' | 'repairing' | 'failed' | 'merged';
+/** One repo's share of a task: its worktree inside the task workspace. */
+interface IsolationTaskRepo {
+    /** Absolute path of this repo's worktree: the task workspace joined with the repo's path. */
+    worktree: string;
+    /**
+     * Paths bootstrapped from the real repo (symlinks, junctions, copies).
+     * Recorded so the commit step can leave them out — a symlink is not matched
+     * by a `node_modules/` ignore rule and would otherwise be committed.
+     */
+    linked: string[];
+    /** Whether the task brought commits to this repo; unknown until it first integrates. */
+    changed?: boolean;
+}
+interface IsolationTaskRecord {
+    taskId: string;
+    order: number;
+    title: string;
+    /** One branch name, the same in every repo, so a task is one name to look up across the group. */
+    branch: string;
+    /**
+     * Absolute path of the task workspace, holding one worktree per repo at the
+     * repo's path. The Runner's cwd is inside it when the workspace is a repo
+     * subdirectory; for a group of one it is the worktree.
+     */
+    workspace: string;
+    /** For the task as a whole: landing is atomic across the repos it changed. */
+    status: IsolationTaskStatus;
+    /** Keyed by repo path. */
+    repos: Record<string, IsolationTaskRepo>;
+    /** The repo whose merge stopped the task from landing, while `status` is `conflict` or `failed`. */
+    conflictRepo?: string;
+    /** Repo-relative paths, in `conflictRepo`, that conflicted; set only while `status` is `conflict` or `repairing`. */
+    conflictFiles?: string[];
+    /**
+     * Conflict repairs started for this task (ADR-0015). Counted when one starts,
+     * so a crash cannot hand the spent attempt back; absent reads as none.
+     */
+    repairs?: number;
+    /**
+     * Keyed by repo path: each changed repo's integration tip when the repair in
+     * flight started — what the task branch must contain before it may land.
+     * Set only while `status` is `repairing`.
+     */
+    repairBase?: Record<string, string>;
+    /**
+     * Every file a repair was started for, across all of them: as `conflictFiles`
+     * names it in a group of one, prefixed with its repo's path in a group.
+     */
+    repairedFiles?: string[];
+}
+/**
+ * A task's landing in flight: each changed repo's integration tip from before
+ * the task's merge. On the run rather than the task record because it must
+ * outlive that record — a retry drops and recreates it — until every repo is
+ * back at its tip or the task has landed.
+ */
+interface IsolationLanding {
+    taskId: string;
+    /** Keyed by repo path. */
+    tips: Record<string, string>;
+}
+/**
+ * One repository of the group (ADR-0014). Every git operation on it runs in
+ * `root`, never in the workspace root.
+ */
+interface IsolationRepo {
+    /** Relative to the workspace root; `.` when the workspace is itself the repository. */
+    path: string;
+    /**
+     * Absolute: the workspace root joined with `path`. For a group of one that is
+     * the workspace root, which may be a subdirectory of the repository.
+     */
+    root: string;
+    /** The commit checked out at run start. Switching branches mid-run does not retarget it. */
+    baseRef: string;
+    /** Branch name checked out at run start; absent on a detached HEAD. */
+    baseBranch?: string;
+    integrationBranch: string;
+}
+/**
+ * One Execute-Plan click or one manual task run over the workspace's repo
+ * group. Plain JSON on purpose: the orchestrator persists it with the plan
+ * state so a resumed session can find its integration branches again. The
+ * module mutates `tasks` in place.
+ */
+interface IsolationRun {
+    id: string;
+    workspaceRoot: string;
+    repos: IsolationRepo[];
+    /**
+     * Workspace paths outside every isolated repo, linked live into each task
+     * workspace: loose entries of the workspace root, the entries beside a deeper
+     * repo, and `sharedRepos`. Empty for a group of one.
+     */
+    shared: string[];
+    /** Repos of the group that could not be isolated — no commits, or git refused a worktree — and are among `shared`. */
+    sharedRepos: string[];
+    /** Keyed by task id — ids are unique within one plan and a run belongs to one plan. */
+    tasks: Record<string, IsolationTaskRecord>;
+    /**
+     * Set before a task's first merge and cleared once it has landed or been
+     * rolled back. One found set — after a crash, or a rollback git refused —
+     * names exactly what to return each repo's integration branch to.
+     */
+    landing?: IsolationLanding;
+}
+/**
+ * What a plan persists of isolated execution (`LegacyPlanState.isolation`): its
+ * run, and which added tasks resolve which conflicts. Belongs to that plan and
+ * its branches alone, so a copy of the plan (a fork) must not carry it.
+ */
+interface PlanIsolation {
+    run: IsolationRun;
+    /** Resolver task id → the conflicted task whose branch it merges. */
+    resolvers: Record<string, string>;
+}
+/**
+ * A task's isolation as a surface shows it. `kept` covers every record whose
+ * worktree stays for inspection — a failed verdict, an interrupted attempt, an
+ * integration git refused — because to the user they are one thing: work that
+ * did not land and can be looked at. `none` is a task with no worktree in a plan
+ * that has an isolation run.
+ */
+type TaskIsolationState = 'none' | 'active' | 'integrated' | 'conflict' | 'repairing' | 'kept';
+type TaskIsolation = {
+    state: 'none';
+} | {
+    state: Exclude<TaskIsolationState, 'none'>;
+    branch: string;
+    /** The task workspace; for a group of one, the task's worktree. */
+    worktree: string;
+    /** Paths of the repos the task changed. */
+    repos: string[];
+    conflictRepo?: string;
+    /** Repo-relative paths, in `conflictRepo`, that conflicted. */
+    conflictFiles?: string[];
+    /** The conflict repair running or last run, of the most a task may have; absent before its first. */
+    repair?: {
+        attempt: number;
+        limit: number;
+    };
+    /** What {@link IsolationTaskRecord.repairedFiles} says. */
+    repairedFiles?: string[];
+};
+interface IsolationLandedTask {
+    taskId: string;
+    order: number;
+    title: string;
+    /** Set when the task landed only after a conflict repair (ADR-0015): the files it was started for. */
+    repairedFiles?: string[];
+}
+interface IsolationHandoffRepo {
+    path: string;
+    integrationBranch: string;
+    baseRef: string;
+    /** Tasks whose work landed in this repo, in plan order. */
+    landed: IsolationLandedTask[];
+}
+interface IsolationHandoff {
+    repos: IsolationHandoffRepo[];
+    /** Tasks that landed on the integration branches, in plan order. */
+    landed: IsolationLandedTask[];
+}
+/** A plan's isolation as a surface shows it: a mark for each task the run touched, and its handoff. */
+interface IsolationView {
+    tasks: Record<string, TaskIsolation>;
+    handoff: IsolationHandoff;
+}
+/**
+ * Why "Merge all" would not touch a repo. `partial-landing`: a task's landing
+ * was interrupted and could not be rolled back there, so its integration
+ * branch holds part of a task.
+ */
+type IsolationMergeBlockReason = 'merge-in-progress' | 'conflict' | 'uncommitted-changes' | 'partial-landing' | 'git-error';
+interface IsolationMergeBlock {
+    repo: string;
+    reason: IsolationMergeBlockReason;
+    /** The files that would conflict, or the user's uncommitted ones the merge also changes; empty for the other reasons. */
+    files: string[];
+}
+/**
+ * How "Merge all" went.
+ * - `merged`: every repo with work on its integration branch took it.
+ * - `blocked`: the preflight found repos that could not, so nothing was
+ *   touched anywhere; `blocked` says which and why.
+ * - `conflict` / `failed`: a merge stopped in `repo` — on git older than 2.38,
+ *   which cannot preflight, or for a reason no preflight could foresee. That
+ *   merge was aborted, leaving `repo` as it was; `landed` names the repos
+ *   merged before it, which stay merged, and is absent when there are none.
+ *
+ * A group of one is blocked only by a partial landing; otherwise its one merge
+ * lands or is aborted whole, so it reports as it always has.
+ */
+type IsolationMergeResult = {
+    outcome: 'merged';
+} | {
+    outcome: 'blocked';
+    blocked: IsolationMergeBlock[];
+} | {
+    outcome: 'conflict' | 'failed';
+    repo: string;
+    files?: string[];
+    landed?: string[];
+};
+/**
+ * What `discard` does with each repo's integration branch: `keep` it for review
+ * or merge, `delete` it, or delete it only in the repos whose checked-out HEAD
+ * already contains it (`delete-merged`) — the one way that can never give up
+ * landed work the user has not merged.
+ */
+type IntegrationDisposal = 'keep' | 'delete' | 'delete-merged';
+/**
+ * Whether a conflict repair's work may land. `not-merged`: the task branch in
+ * `repo` does not contain the tip the repair started from. `conflict-markers`:
+ * it adds leftover conflict markers to `files`. `failed`: git could not tell.
+ */
+type RepairEvidence = {
+    ok: true;
+} | {
+    ok: false;
+    reason: 'not-merged' | 'conflict-markers' | 'failed';
+    repo: string;
+    files?: string[];
+};
+interface PreparedTask {
+    cwd: string;
+    branch: string;
+    /**
+     * Paths, relative to the task workspace, that are copies rather than links
+     * because a hard link was impossible (Windows, another volume). Edits to them
+     * stay in the task, so the user is told.
+     */
+    copied: string[];
+}
+interface IWorktreeIsolation {
+    /**
+     * A repo group with at least one repo to isolate, a clean tracked tree in
+     * each, and the config enabled; otherwise the reason it is not.
+     */
+    isActive(workspaceRoot: string): Promise<IsolationAvailability>;
+    /**
+     * Put the tracked changes of every dirty repo of the group on its git stash,
+     * the user's way out of a `dirty` refusal. Untracked files stay: they never
+     * block isolation.
+     */
+    stash(workspaceRoot: string): Promise<void>;
+    /**
+     * Mint a run: resolve each repo's base ref to a commit now, and share the
+     * repos that cannot be isolated. Only meaningful after `isActive` said yes;
+     * throws when no repo of the group can be isolated after all.
+     */
+    startRun(workspaceRoot: string): Promise<IsolationRun>;
+    /**
+     * Create the task workspace — one worktree per isolated repo from its
+     * integration tip, the shared paths linked in — and return the cwd to spawn
+     * the Runner into. A second `prepare` for the same task is a retry: the old
+     * attempt is discarded and the workspace recreated from the tips, so the
+     * task sees everything its predecessors have integrated.
+     */
+    prepare(task: Task, run: IsolationRun): Promise<PreparedTask>;
+    /**
+     * Hand a conflicted task's kept workspace to a conflict repair (ADR-0015)
+     * as it is — nothing is re-cut — and return the same cwd. Records each
+     * changed repo's integration tip as `repairBase`, counts the repair, and
+     * moves the task to `repairing`. Throws for a task that is not `conflict`.
+     */
+    reopen(task: Task, run: IsolationRun): Promise<PreparedTask>;
+    /**
+     * The evidence a repair must show before it lands: its work committed, and
+     * in each repo of `repairBase` the task branch containing that tip
+     * (`git merge-base --is-ancestor`) and adding no leftover conflict markers
+     * (`git diff --check`; whitespace warnings do not count). Changes nothing
+     * else: a task that fails stays `repairing` until released.
+     */
+    verifyRepair(task: Task, run: IsolationRun): Promise<RepairEvidence>;
+    /**
+     * Land the task atomically across the repos it changed: commit each
+     * worktree, then `git merge --no-ff` the task branch into each changed
+     * repo's integration branch. If any merge conflicts or fails, it is aborted
+     * and the merges already made for the task are reset away, so `merged`
+     * always means the whole task landed. Serialized inside the module; among
+     * tasks waiting at once the lowest plan order goes first. On anything but
+     * `merged` the worktrees and refs stay, and nothing is resolved here: a
+     * conflict is repaired, if at all, by a new attempt of the task in its own
+     * worktree (ADR-0015), never inside this queue.
+     *
+     * `persist` is called once `run.landing` is set and before the first
+     * merge; the caller saves the run there, synchronously, which is what
+     * lets `pruneOrphans` finish a landing a crash interrupted.
+     */
+    integrate(task: Task, run: IsolationRun, persist?: () => void): Promise<IsolationOutcome>;
+    /**
+     * `keep: false` removes the task's worktree, branch and record (cancel, task
+     * removal). `keep: true` leaves the worktree and branch exactly as they are
+     * for inspection — a failed verdict — and only moves the task off `active`,
+     * so a crash-recovery prune does not sweep it away; a repair it ends leaves
+     * the task `conflict`, as it was before the repair. Takes the run rather than
+     * a bare task id: ids are only unique within one plan, and one daemon serves
+     * many (ADR-0007).
+     */
+    release(run: IsolationRun, taskId: string, opts: {
+        keep: boolean;
+    }): Promise<void>;
+    /** End of run: park the integration branch for review and report what landed. */
+    handoff(run: IsolationRun): Promise<IsolationHandoff>;
+    /**
+     * Drop what a crash left behind: a landing it interrupted is rolled back in
+     * every repo, a repair it interrupted leaves its task `conflict`, then stale
+     * active worktrees and directories no record owns go.
+     */
+    pruneOrphans(run: IsolationRun): Promise<void>;
+    /** Unified diff of each repo's integration branch against its base ref. */
+    reviewDiff(run: IsolationRun): Promise<string>;
+    /**
+     * "Merge all": merge each repo's integration branch into whatever the user
+     * has checked out there. The one irreversible step, so it only ever happens
+     * when a caller asks for it. Every repo with work is preflighted first — no
+     * merge of the user's in progress, no conflict against their HEAD, no
+     * uncommitted edit to a file the merge changes — and unless all pass,
+     * nothing is merged anywhere. Only a merge Ordewell itself just started is
+     * ever aborted; nothing of the user's is reset.
+     */
+    mergeIntoCheckedOut(run: IsolationRun): Promise<IsolationMergeResult>;
+    /**
+     * Remove every worktree and task branch of the run, and settle each repo's
+     * integration branch as `integration` says. Anything but `keep` also clears
+     * the run's task records.
+     */
+    discard(run: IsolationRun, opts: {
+        integration: IntegrationDisposal;
+    }): Promise<void>;
+    /**
+     * Clear what other runs left in each repo of `run`'s group: every
+     * `ordewell/<run-id>/…` branch the repo's checked-out HEAD already contains.
+     * Never a branch of `run` itself, one a worktree has checked out, or any
+     * branch of a run that still has a worktree — that run may be live in
+     * another plan. Tries every repo, then throws naming those where git failed.
+     */
+    sweep(run: IsolationRun): Promise<void>;
+}
+
+interface UserStep {
+    order: number;
+    instruction: string;
+    completed: boolean;
+}
+/** One deterministic signal gathered while verifying a completed task. */
+interface VerificationCheck {
+    name: 'exit_code' | 'completion_marker' | 'manual';
+    passed: boolean;
+    /** A check that did not apply. Skipped checks don't affect the verdict. */
+    skipped: boolean;
+    detail: string;
+}
+/** Evidence-based verdict for a completed task. Single end-to-end outcome produced by verification. */
+interface Verdict {
+    outcome: 'pass' | 'fail';
+    reason: string;
+    checks: VerificationCheck[];
+    decidedAt: string;
+}
+interface TaskOutputSummary {
+    reviewReason: string;
+    logTail: string;
+    capturedAt: string;
+}
+type TaskType = 'ai' | 'user';
+type TaskStatus = 'pending' | 'approved' | 'in_progress' | 'completed' | 'failed' | 'blocked' | 'awaiting_user';
+type TaskMode = string;
+interface TaskModelAssignment {
+    modelId: string;
+    modelLabel: string;
+    thinkingEffort?: string;
+    /**
+     * All variant ids the model offered when this assignment was made. Carried
+     * on the assignment because runners need it at spawn time (opencode's TUI
+     * only honors an assigned variant when the others are config-disabled) and
+     * the discovery catalog isn't available there.
+     */
+    availableVariants?: string[];
+}
+type RunnerId = string;
+interface Task {
+    id: string;
+    order: number;
+    title: string;
+    description: string;
+    type: TaskType;
+    status: TaskStatus;
+    dependencies: string[];
+    prompt?: string;
+    userSteps?: UserStep[];
+    subtasks: Task[];
+    verdict?: Verdict;
+    outputSummary?: TaskOutputSummary;
+    assignedModel?: TaskModelAssignment;
+    assignedRunner: RunnerId;
+    thinkingEffort?: string;
+    taskMode?: TaskMode;
+    completionMarker: string;
+    autonomy?: 'AFK' | 'HITL';
+    sliceType?: 'HITL' | 'AFK';
+    userStoriesCovered?: string[];
+}
+interface DiscoveredMode {
+    id: string;
+    label: string;
+    description: string;
+}
+type ResearchToolType = 'read_file' | 'read_files' | 'glob' | 'grep' | 'find_symbol' | 'list_dir' | 'bash' | 'fetch' | 'web_search' | 'spawn_research_agent'
+/**
+ * A tool belonging to a harness planner's own toolbox (ADR-0009) that has no
+ * Ordewell equivalent — Edit, WebFetch, TodoWrite, whatever a coding agent
+ * ships next. The real name travels in `toolLabel` rather than being
+ * relabelled as a tool it is not; the union stays closed so the
+ * exhaustiveness checks in every surface's icon/label switch survive.
+ */
+ | 'agent_tool';
+/**
+ * What happened when a research tool call ran, for honest per-surface
+ * rendering. The broadcast seam carries this on every `research_step_done` so
+ * surfaces do not have to pattern-match refusal text to tell a refused `rm`
+ * from a successful `rm` — the old render path flipped a `✓` for both.
+ */
+type ResearchStepOutcome = 'success' | 'failure' | 'refused' | 'denied' | 'not_executed';
+interface ResearchStep {
+    id: string;
+    tool: ResearchToolType;
+    /** The tool's own name when it came from a harness planner — always set for `agent_tool`. */
+    toolLabel?: string;
+    args: string;
+    result: string;
+    success: boolean;
+    outcome: ResearchStepOutcome;
+    /** The model's tool_call id, so a surface can match `tool_result` to the
+     * pending `tool_call` it announced — robust under parallel same-tool rounds. */
+    toolCallId?: string;
+    timestamp: string;
+    thinkingText?: string;
+}
+interface UserPromptEntry {
+    id: string;
+    type: 'user_prompt' | 'system';
+    content: string;
+    timestamp: string;
+}
+type ResearchLogEntry = ResearchStep | UserPromptEntry;
+interface ResearchProgress {
+    type: 'thinking' | 'tool_call' | 'tool_result' | 'plan_token' | 'interrupted' | 'liveness';
+    text?: string;
+    tool?: string;
+    /** Harness planners (ADR-0009): the agent's own name for a tool Ordewell has no member for. */
+    toolLabel?: string;
+    toolArgs?: string;
+    toolResult?: string;
+    planToken?: string;
+    step?: ResearchStep;
+    /** The model's tool_call id, threaded on tool_call and tool_result so a
+     * surface can match the result to its pending call — robust under parallel
+     * same-tool rounds where LIFO-by-name matching mislabels summaries. */
+    toolCallId?: string;
+    /** Present when this event originates from (or reports on) one spawned research subagent (issue #34). */
+    subagentId?: string;
+}
+interface ThinkingBlock {
+    id: string;
+    text: string;
+}
+interface StreamThinkingEvent {
+    type: 'thinking';
+    block: ThinkingBlock;
+}
+interface StreamStepEvent {
+    type: 'step';
+    step: ResearchStep;
+}
+type StreamEvent = StreamThinkingEvent | StreamStepEvent;
+interface DiscoveredModel {
+    modelId: string;
+    modelLabel: string;
+    runnerProvider?: string;
+    /**
+     * Human-facing provider name as the runner itself reports it (e.g.
+     * "OpenCode Zen" for `runnerProvider: 'opencode'`). Populated from the
+     * runner's own provider catalog when available; when absent the UI derives a
+     * label from `runnerProvider` by title-casing.
+     */
+    runnerProviderLabel?: string;
+    /**
+     * The runner whose catalog listed this model. Stamped once, at the single
+     * `ModelDiscovery.discover` choke point, so a flat cross-runner list can
+     * still say where each entry came from — `runnerProvider` alone cannot:
+     * OpenCode reports most of its catalog as `openrouter`, which names the
+     * serving backend, not the agent Ordewell would spawn.
+     */
+    runnerId?: string;
+    /** The runner's display name (`OpenCode`), from its manifest. */
+    runnerLabel?: string;
+    variants: {
+        id: string;
+        label: string;
+    }[];
+}
+type PlanStatus = 'draft' | 'approved' | 'rejected' | 'running' | 'completed';
+/**
+ * One entry of the planner's persisted dialogue (ADR-0002). The single source
+ * of truth for both UI redisplay and conversational context. Tool-call results
+ * are NOT stored here — they live in the AI service's tool-use history;
+ * `researchLog` remains the persisted tool trace for the UI.
+ */
+interface ConversationMessage {
+    role: 'user' | 'assistant';
+    content: string;
+    timestamp: string;
+    /**
+     * Timeline marker: 'plan_generated' records the point in the dialogue where
+     * the plan was committed (the UI anchors the plan card there on restore);
+     * 'system' is a host-injected notice; 'compaction' is the summary a
+     * user-triggered compaction left in place of the earlier messages — always
+     * the transcript's first entry. Absent for ordinary chat turns, so
+     * sessions saved before markers existed degrade gracefully.
+     */
+    kind?: 'plan_generated' | 'system' | 'compaction';
+}
+interface QueuedMessage {
+    id: string;
+    text: string;
+    timestamp: string;
+}
+interface PlanModificationWarnings {
+    deletedCompleted: string[];
+    changedCompleted: string[];
+    deletedInProgress: string[];
+    modifiedInProgress: string[];
+    brokenDependencies: string[];
+}
+declare function emptyWarnings(): PlanModificationWarnings;
+interface LegacyPlanState {
+    tasks: Task[];
+    generatedAt: string;
+    status: PlanStatus;
+    runners: RunnerId[];
+    lastUpdated: string;
+    researchLog?: ResearchLogEntry[];
+    /** The planner dialogue — user messages and assistant messages, in order (ADR-0002). */
+    conversationHistory?: ConversationMessage[];
+    /** Full markdown PRD once written by the planner (PRD mode), also saved to .scratch/<slug>/PRD.md. */
+    prdMarkdown?: string;
+    /** Follow-ups queued while tasks execute — applied as plan modifications between batches. */
+    queuedMessages?: QueuedMessage[];
+    /**
+     * The plan's isolation run (ADR-0013), written from the orchestrator at
+     * persist time and read back only when a saved plan is adopted. It names
+     * branches and worktrees that belong to this plan alone: a fork of the plan
+     * must leave it behind rather than share it.
+     */
+    isolation?: PlanIsolation;
+}
+interface Message {
+    id: string;
+    role: 'user' | 'planner' | 'system';
+    content: string;
+    timestamp: number;
+}
+interface TaskSnapshot extends Task {
+    completedAt: number;
+    verdict?: Verdict;
+    retryCount: number;
+    finalized: boolean;
+}
+type PlanState = {
+    phase: 'planning';
+    history: Message[];
+    message: string;
+    pendingTasks: Task[];
+} | {
+    phase: 'executing';
+    history: Message[];
+    message: string;
+    executionLog: TaskSnapshot[];
+    pendingTasks: Task[];
+    goal: string;
+    runners: string[];
+    status: PlanStatus;
+};
+declare function migratePlanState(raw: unknown): PlanState;
+declare function migrateLegacyPlan(legacy: LegacyPlanState): PlanState;
+
+declare function createTask(overrides?: Partial<Task>): Task;
+declare function createEmptyPlan(): LegacyPlanState;
+declare function flattenTasks(tasks: Task[]): Task[];
+/** A flattened task with the parent it hangs under, null for a top-level task. */
+interface TaskWithParent {
+    task: Task;
+    parent: Task | null;
+}
+declare function flattenTasksWithParents(tasks: Task[]): TaskWithParent[];
+declare function migrateTask(task: Record<string, unknown>): Task;
+declare function addTaskToPlan(tasks: Task[], partial: Partial<Task>): Task[];
+declare function removeTaskFromPlan(tasks: Task[], taskId: string): Task[];
+declare function updateTaskInPlan(tasks: Task[], taskId: string, changes: Partial<Task>): Task[];
+declare function renumberTasks(tasks: Task[]): Task[];
+declare function validateModifiedPlan(original: Task[], modified: Task[]): PlanModificationWarnings;
+interface ActiveTaskSession {
+    id: string;
+    taskId: string;
+}
+interface ValidationResult {
+    valid: boolean;
+    errors: string[];
+}
+interface ValidationContext {
+    executionLog: TaskSnapshot[];
+    oldPending: Task[];
+    newPending: Task[];
+    activeSessions: Map<string, ActiveTaskSession>;
+}
+type ValidationCheck = (ctx: ValidationContext) => ValidationResult;
+declare function warningsText(w: PlanModificationWarnings): string | null;
+
+export { type UserStep as $, type ActiveTaskSession as A, type ResearchStepOutcome as B, type ConversationMessage as C, type DiscoveredMode as D, type ResearchToolType as E, type RunnerId as F, type StreamStepEvent as G, type StreamThinkingEvent as H, type IWorktreeIsolation as I, type TaskIsolation as J, type TaskIsolationState as K, type LegacyPlanState as L, type Message as M, type TaskMode as N, type TaskModelAssignment as O, type PlanIsolation as P, type QueuedMessage as Q, type RepairEvidence as R, type StreamEvent as S, type Task as T, type TaskOutputSummary as U, type TaskSnapshot as V, type TaskStatus as W, type TaskType as X, type TaskWithParent as Y, type ThinkingBlock as Z, type UserPromptEntry as _, type DiscoveredModel as a, type ValidationCheck as a0, type ValidationContext as a1, type ValidationResult as a2, type Verdict as a3, type VerificationCheck as a4, addTaskToPlan as a5, createEmptyPlan as a6, createTask as a7, emptyWarnings as a8, flattenTasks as a9, flattenTasksWithParents as aa, migrateLegacyPlan as ab, migratePlanState as ac, migrateTask as ad, removeTaskFromPlan as ae, renumberTasks as af, updateTaskInPlan as ag, validateModifiedPlan as ah, warningsText as ai, type IntegrationDisposal as b, type IsolationAvailability as c, type IsolationHandoff as d, type IsolationHandoffRepo as e, type IsolationInactiveReason as f, type IsolationLandedTask as g, type IsolationLanding as h, type IsolationMergeBlock as i, type IsolationMergeBlockReason as j, type IsolationMergeResult as k, type IsolationOutcome as l, type IsolationRepo as m, type IsolationRun as n, type IsolationTaskRecord as o, type IsolationTaskRepo as p, type IsolationTaskStatus as q, type IsolationView as r, type PlanModificationWarnings as s, type PlanState as t, type PlanStatus as u, type PreparedTask as v, type RepoGroupLayout as w, type ResearchLogEntry as x, type ResearchProgress as y, type ResearchStep as z };