@ordewell/core 0.5.6 → 0.6.0

package/dist/index.d.ts

@@ -1,14 +1,14 @@
-import { aG as RunnerId, ag as PlanStatus, a6 as LegacyPlanState, I as IApproval, k as ApprovalDecision, p as ApprovalRequest, j as ApprovalAnswer, L as ITerminalRunner, J as IConfig, h as AiProvider, as as ProviderModelLists, m as ApprovalMode, X as IsolationMergeResult, T as IsolationLandedTask, N as IWorktreeIsolation, a2 as IsolationTaskStatus, ad as PlanIsolation, aL as RunnerTransport, az as RepoGroupLayout, M as ITerminalSession, w as DiscoveredModel, aU as Task, f as AgentProcessDeps, c as AgentAdapter, aB as ResearchProgress, aA as ResearchLogEntry, u as ConversationMessage, b9 as UsageRecord, b1 as TaskSnapshot, r as AwaitingReason, Q as IsolationHandoff, $ as IsolationRun, a0 as IsolationTaskRecord, aV as TaskIsolation, a3 as IsolationView, Y as IsolationOutcome, ay as RepairEvidence, bg as Verdict, aJ as RunnerRegistry, ax as QueuedTaskMessage, aw as QueuedMessage, b as ActiveTaskSession, ac as OrchestratorOption, aY as TaskModeAgentAdapter, g as AgentStartOptions, e as AgentEvent, aE as ResearchToolType, ai as PlannerUsage, n as ApprovalPolicy, af as PlanState, aH as RunnerInvocation, A as AbstractRunner, a as AbstractTerminalSession, aQ as StructuredSessionCapability, b2 as TaskStartOptions, aR as StructuredTurnEnd, aP as StructuredEvent, aK as RunnerSpawnOptions, K as IPluginStore, aI as RunnerPluginManifest, aF as ResolveContext } from './Task-Dyxp67s2.js';
-export { d as AgentAdapterFactory, i as AllProviderModels, l as ApprovalKind, o as ApprovalPolicyOptions, q as ApprovalSource, B as BlockingPrompt, C as CMD_EXE_MAX_COMMAND_LINE, s as CatalogModel, t as CommandLineTooLongError, D as DENY_ALL, v as DiscoveredMode, x as DiscoveryCommand, E as EmbeddedNewlineError, y as ExecutableNotFoundError, F as FetchAllProviderModelsOptions, H as HeadlessRunner, z as HeadlessRunnerDeps, G as HeadlessSession, O as IntegrationDisposal, P as IsolationAvailability, R as IsolationHandoffRepo, S as IsolationInactiveReason, U as IsolationLanding, V as IsolationMergeBlock, W as IsolationMergeBlockReason, Z as IsolationPruneResult, _ as IsolationRepo, a1 as IsolationTaskRepo, a4 as LaunchDeps, a5 as LaunchPlan, a7 as LineBuffer, a8 as Message, a9 as ModelCatalog, aa as ModelShortcut, ab as ORCHESTRATOR_SHORTCUTS, ae as PlanModificationWarnings, ah as PlannerStartOptions, aj as PluginCloneFn, ak as PluginEntry, al as PluginFeatures, am as PluginMode, an as PluginModelDiscovery, ao as PluginRunnerDef, ap as PreparedLaunch, aq as PreparedTask, ar as ProviderCredentialSource, at as ProviderModelsResult, au as PtySize, av as PtyWrapOptions, aC as ResearchStep, aD as ResearchStepOutcome, aM as StreamEvent, aN as StreamStepEvent, aO as StreamThinkingEvent, aS as SubagentLogEntry, aT as SubagentOutcome, aW as TaskIsolationState, aX as TaskMode, aZ as TaskModeUnsupportedError, a_ as TaskModelAssignment, a$ as TaskOutputSummary, b0 as TaskRunnerFlags, b3 as TaskStatus, b4 as TaskTransport, b5 as TaskType, b6 as TaskWithParent, b7 as ThinkingBlock, b8 as UsageLine, ba as UsageTotals, bb as UserPromptEntry, bc as UserStep, bd as ValidationCheck, be as ValidationContext, bf as ValidationResult, bh as VerificationCheck, bi as WINDOWS_MAX_COMMAND_LINE, bj as addPlannerUsage, bk as addTaskToPlan, bl as addUsage, bm as buildShellInvocation, bn as collectProviderCredentials, bo as createEmptyPlan, bp as createTask, bq as emptyWarnings, br as enabledRunners, bs as fetchAllProviderModels, bt as flattenTasks, bu as flattenTasksWithParents, bv as isAwaitingReason, bw as isExecutableResolved, bx as isGranted, by as isMeasured, bz as isReservedRunnerName, bA as isRunnerApproval, bB as isRunnerTransport, bC as isStructuredSession, bD as keepExecutionState, bE as knownModelId, bF as migrateLegacyPlan, bG as migratePlanState, bH as migrateTask, bI as partedPromptUsage, bJ as planDirectLaunch, bK as planShellLaunch, bL as plannerContextFill, bM as posixShellQuote, bN as removeTaskFromPlan, bO as renumberTasks, bP as resolveModelShortcut, bQ as resolveProvider, bR as stripAnsi, bS as toApprovalDecision, bT as toOrchestratorOptions, bU as updateTaskInPlan, bV as usageLine, bW as validateModifiedPlan, bX as warningsText, bY as windowsCommandLine, bZ as wrapWithPty } from './Task-Dyxp67s2.js';
-import { t as TaskOp, l as SessionBroadcaster, A as ApplyTaskOpsResult, m as SessionMessage, n as SessionNotice, r as TaskLogEvent } from './plan-utils-BMyEiDKv.js';
-export { a as ApprovalBlock, b as ApprovalStatus, C as CHECKPOINT_TRUNCATE_LENGTH, c as ConversationInput, d as ConversationView, D as DisplayBlock, E as EMPTY_CONVERSATION, e as EMPTY_HOLD, f as EMPTY_TASK_LOG, G as GatedConversation, L as LocalEntry, M as MessageBlock, g as MessageRole, N as NO_TURN, O as OutputPreview, P as PlanBlock, h as PlanMarkerStatus, i as PromptHold, S as SerializedPlan, j as SerializedTask, k as SerializedTaskStatus, o as SubagentBlock, p as SubagentChild, q as SubagentStatus, T as TakenPrompt, s as TaskLogView, u as TaskRef, v as ThinkingDisplayBlock, w as ToolBlock, x as ToolHeadline, y as ToolStatus, z as TurnGate, U as UsageBlock, B as aheadOfDraft, F as applyTaskOps, H as canMergeTasks, I as canSetDependencies, J as canSplitTask, K as capConflictFiles, Q as classifyOutcome, R as coalesceTaskLog, V as dependencyCandidates, W as dependentsOf, X as drainNext, Y as executionSummary, Z as followTurn, _ as fromTranscript, $ as hasHiddenDetail, a0 as holdPrompt, a1 as outputLines, a2 as outputPreview, a3 as parseTaskOpsJson, a4 as reduceConversation, a5 as reduceTaskLog, a6 as replayTaskLog, a7 as runnerToolSubject, a8 as serializePlan, a9 as serializeTask, aa as serializeTaskStatus, ab as stopTurn, ac as summarizeToolCall, ad as taskStartedNotice, ae as textHasTaskOps, af as toTaskLogEvent, ag as toolHeadline, ah as trimToolOutput, ai as truncateCheckpointSummary, aj as unsendAll, ak as unsendLatest } from './plan-utils-BMyEiDKv.js';
-import { I as IFileSystem, R as ReadFileOpts, T as ToolOutcome, b as GrepOptions, a as GlobOptions, F as FindSymbolOptions } from './IFileSystem-C0l-4MGT.js';
-export { G as GREP_DEFAULT_HEAD_LIMIT, c as GrepOutputMode, S as SEARCH_EXCLUSIONS } from './IFileSystem-C0l-4MGT.js';
-import { R as RunnerModeInfo } from './ModeResolver-CjpG5Wli.js';
-export { M as ManifestLookup, b as buildModeGuide, f as filteredBuildModes, r as resolveDefaultMode, a as resolveTaskMode, c as runnerModesFrom } from './ModeResolver-CjpG5Wli.js';
+import { aG as RunnerId, ag as PlanStatus, a6 as LegacyPlanState, I as IApproval, k as ApprovalDecision, p as ApprovalRequest, j as ApprovalAnswer, L as ITerminalRunner, J as IConfig, h as AiProvider, as as ProviderModelLists, m as ApprovalMode, X as IsolationMergeResult, T as IsolationLandedTask, N as IWorktreeIsolation, a2 as IsolationTaskStatus, ad as PlanIsolation, aL as RunnerTransport, az as RepoGroupLayout, M as ITerminalSession, w as DiscoveredModel, aU as Task, f as AgentProcessDeps, c as AgentAdapter, aB as ResearchProgress, aA as ResearchLogEntry, u as ConversationMessage, b9 as UsageRecord, b1 as TaskSnapshot, r as AwaitingReason, Q as IsolationHandoff, $ as IsolationRun, a0 as IsolationTaskRecord, aV as TaskIsolation, a3 as IsolationView, Y as IsolationOutcome, ay as RepairEvidence, bg as Verdict, aJ as RunnerRegistry, ax as QueuedTaskMessage, aw as QueuedMessage, b as ActiveTaskSession, ac as OrchestratorOption, aY as TaskModeAgentAdapter, g as AgentStartOptions, e as AgentEvent, aE as ResearchToolType, ai as PlannerUsage, n as ApprovalPolicy, af as PlanState, aH as RunnerInvocation, A as AbstractRunner, a as AbstractTerminalSession, aQ as StructuredSessionCapability, b2 as TaskStartOptions, aR as StructuredTurnEnd, aP as StructuredEvent, aK as RunnerSpawnOptions, K as IPluginStore, aI as RunnerPluginManifest, aF as ResolveContext, b0 as TaskRunnerFlags } from './Task-CZJr6rmz.js';
+export { d as AgentAdapterFactory, i as AllProviderModels, l as ApprovalKind, o as ApprovalPolicyOptions, q as ApprovalSource, B as BlockingPrompt, C as CMD_EXE_MAX_COMMAND_LINE, s as CatalogModel, t as CommandLineTooLongError, D as DENY_ALL, v as DiscoveredMode, x as DiscoveryCommand, E as EmbeddedNewlineError, y as ExecutableNotFoundError, F as FetchAllProviderModelsOptions, H as HeadlessRunner, z as HeadlessRunnerDeps, G as HeadlessSession, O as IntegrationDisposal, P as IsolationAvailability, R as IsolationHandoffRepo, S as IsolationInactiveReason, U as IsolationLanding, V as IsolationMergeBlock, W as IsolationMergeBlockReason, Z as IsolationPruneResult, _ as IsolationRepo, a1 as IsolationTaskRepo, a4 as LaunchDeps, a5 as LaunchPlan, a7 as LineBuffer, a8 as Message, a9 as ModelCatalog, aa as ModelShortcut, ab as ORCHESTRATOR_SHORTCUTS, ae as PlanModificationWarnings, ah as PlannerStartOptions, aj as PluginCloneFn, ak as PluginEntry, al as PluginFeatures, am as PluginMode, an as PluginModelDiscovery, ao as PluginRunnerDef, ap as PreparedLaunch, aq as PreparedTask, ar as ProviderCredentialSource, at as ProviderModelsResult, au as PtySize, av as PtyWrapOptions, aC as ResearchStep, aD as ResearchStepOutcome, aM as StreamEvent, aN as StreamStepEvent, aO as StreamThinkingEvent, aS as SubagentLogEntry, aT as SubagentOutcome, aW as TaskIsolationState, aX as TaskMode, aZ as TaskModeUnsupportedError, a_ as TaskModelAssignment, a$ as TaskOutputSummary, b3 as TaskStatus, b4 as TaskTransport, b5 as TaskType, b6 as TaskWithParent, b7 as ThinkingBlock, b8 as UsageLine, ba as UsageTotals, bb as UserPromptEntry, bc as UserStep, bd as ValidationCheck, be as ValidationContext, bf as ValidationResult, bh as VerificationCheck, bi as WINDOWS_MAX_COMMAND_LINE, bj as addPlannerUsage, bk as addTaskToPlan, bl as addUsage, bm as approvalScopes, bn as buildShellInvocation, bo as collectProviderCredentials, bp as createEmptyPlan, bq as createTask, br as emptyWarnings, bs as enabledRunners, bt as fetchAllProviderModels, bu as flattenTasks, bv as flattenTasksWithParents, bw as isAwaitingReason, bx as isExecutableResolved, by as isGranted, bz as isMeasured, bA as isReservedRunnerName, bB as isRunnerApproval, bC as isRunnerTransport, bD as isStructuredSession, bE as keepExecutionState, bF as knownModelId, bG as migrateLegacyPlan, bH as migratePlanState, bI as migrateTask, bJ as partedPromptUsage, bK as planDirectLaunch, bL as planShellLaunch, bM as plannerContextFill, bN as posixShellQuote, bO as removeTaskFromPlan, bP as renumberTasks, bQ as resolveModelShortcut, bR as resolveProvider, bS as stripAnsi, bT as toApprovalDecision, bU as toOrchestratorOptions, bV as updateTaskInPlan, bW as usageLine, bX as validateModifiedPlan, bY as warningsText, bZ as windowsCommandLine, b_ as wrapWithPty } from './Task-CZJr6rmz.js';
+import { t as TaskOp, l as SessionBroadcaster, A as ApplyTaskOpsResult, m as SessionMessage, n as SessionNotice, r as TaskLogEvent } from './plan-utils-_T5S7Mnk.js';
+export { a as ApprovalBlock, b as ApprovalStatus, C as CHECKPOINT_TRUNCATE_LENGTH, c as ConversationInput, d as ConversationView, D as DisplayBlock, E as EMPTY_CONVERSATION, e as EMPTY_HOLD, f as EMPTY_TASK_LOG, G as GatedConversation, L as LocalEntry, M as MessageBlock, g as MessageRole, N as NO_TURN, O as OutputPreview, P as PlanBlock, h as PlanMarkerStatus, i as PromptHold, S as SerializedPlan, j as SerializedTask, k as SerializedTaskStatus, o as SubagentBlock, p as SubagentChild, q as SubagentStatus, T as TakenPrompt, s as TaskLogView, u as TaskRef, v as ThinkingDisplayBlock, w as ToolBlock, x as ToolHeadline, y as ToolStatus, z as TurnGate, U as UsageBlock, B as aheadOfDraft, F as applyTaskOps, H as canMergeTasks, I as canSetDependencies, J as canSplitTask, K as capConflictFiles, Q as classifyOutcome, R as coalesceTaskLog, V as dependencyCandidates, W as dependentsOf, X as drainNext, Y as executionSummary, Z as followTurn, _ as fromTranscript, $ as hasHiddenDetail, a0 as holdPrompt, a1 as outputLines, a2 as outputPreview, a3 as parseTaskOpsJson, a4 as reduceConversation, a5 as reduceTaskLog, a6 as replayTaskLog, a7 as runnerToolSubject, a8 as serializePlan, a9 as serializeTask, aa as serializeTaskStatus, ab as stopTurn, ac as summarizeToolCall, ad as taskStartedNotice, ae as textHasTaskOps, af as toTaskLogEvent, ag as toolHeadline, ah as trimToolOutput, ai as truncateCheckpointSummary, aj as unsendAll, ak as unsendLatest } from './plan-utils-_T5S7Mnk.js';
+import { I as IFileSystem, R as ReadFileOpts, T as ToolOutcome, b as GrepOptions, a as GlobOptions, F as FindSymbolOptions } from './IFileSystem-D4dAl2r8.js';
+export { G as GREP_DEFAULT_HEAD_LIMIT, c as GrepOutputMode, S as SEARCH_EXCLUSIONS } from './IFileSystem-D4dAl2r8.js';
+import { R as RunnerModeInfo } from './ModeResolver-DVYVRbJp.js';
+export { M as ManifestLookup, a as autonomyLevelLabel, b as buildModeGuide, f as filteredBuildModes, p as parseAutonomyLevel, r as resolveDefaultMode, c as resolveTaskMode, d as runnerModesFrom } from './ModeResolver-DVYVRbJp.js';
 import { ChildProcess } from 'child_process';
-import { b as PlanParseError } from './parsing-EcmCsF1y.js';
-export { P as PLAN_ENVELOPE_KEY, a as PartialPlanTask, T as TASK_OPS_ENVELOPE_KEY, c as TASK_QUERY_ENVELOPE_KEY, d as checkDepsResolve, e as checkImmutableLog, f as checkInProgress, g as checkNoCycles, h as checkUniqueIds, i as escapeControlCharsInStrings, j as extractJsonObject, k as extractObjectWithBalance, l as extractObjectsWithKey, m as looksLikePlanAttempt, o as opensWithJsonObject, p as parsePartialPlan, n as parsePlanJson, s as stripModelNoise, q as stripTrailingCommas, v as validatePlanModification } from './parsing-EcmCsF1y.js';
+import { b as PlanParseError } from './parsing-Bd6-b644.js';
+export { P as PLAN_ENVELOPE_KEY, a as PartialPlanTask, T as TASK_OPS_ENVELOPE_KEY, c as TASK_QUERY_ENVELOPE_KEY, d as checkDepsResolve, e as checkImmutableLog, f as checkInProgress, g as checkNoCycles, h as checkUniqueIds, i as escapeControlCharsInStrings, j as extractJsonObject, k as extractObjectWithBalance, l as extractObjectsWithKey, m as looksLikePlanAttempt, o as opensWithJsonObject, p as parsePartialPlan, n as parsePlanJson, s as stripModelNoise, q as stripTrailingCommas, v as validatePlanModification } from './parsing-Bd6-b644.js';
 export { resolveOrderLabel, taskOrderLabel } from './order-labels.js';
 import 'events';
 
@@ -261,16 +261,19 @@ declare abstract class BaseFileSystem implements IFileSystem {
      * Path confinement for `bash`: an `auto`-tier binary (`cat`, `find`, `rg`, …)
      * is only auto because *reading* is read-only — its arguments can still
      * name a path outside the workspace, which is the exact escape confinement
-     * closes for `readFile`/`glob`/`grep`. Each escaping path needs its own
-     * approval (scoped to its containing directory); approving one does not
-     * approve another, so a single command touching two external dirs prompts
-     * once per distinct scope rather than carrying the first grant to the rest.
+     * closes for `readFile`/`glob`/`grep`. Each escaping path is scoped to its
+     * containing directory, one entry per distinct scope.
      */
-    private authorizeCommandPaths;
+    private outsidePaths;
     /**
      * Three tiers (see `commandPolicy.ts`): read-only inspection runs silently,
      * anything else asks once and is remembered, and writes are refused outright
      * because a planner that mutates the workspace has stopped being a planner.
+     *
+     * Everything a command needs — its own approval and every outside directory
+     * it touches — is one request, so one command is one prompt. Each scope is
+     * still granted separately: approving the pair does not approve another
+     * directory the next command names.
      */
     bash(command: string, signal?: AbortSignal): Promise<ToolOutcome>;
 }
@@ -698,8 +701,8 @@ interface UserSettings {
      */
     enabledRunners?: string[];
     /**
-     * How tasks' runners are driven (ADR-0018). Experimental; a run copies it
-     * onto its plan when it starts, so a change applies from the next run.
+     * How tasks' runners are driven (ADR-0018). A run copies it onto its plan
+     * when it starts, so a change applies from the next run.
      */
     runnerTransport: RunnerTransport;
 }
@@ -718,6 +721,12 @@ declare class SettingsService {
     private filePath;
     private cache;
     private cachedMtimeMs;
+    /**
+     * Whether the transport on disk (or just set) is the user's own choice.
+     * Writing the default back out would turn it into one, and a later change of
+     * default would then never reach this user.
+     */
+    private transportChosen;
     constructor(filePath?: string);
     getAll(): UserSettings;
     private fileMtimeMs;
@@ -2568,6 +2577,8 @@ declare abstract class StdioAgentAdapter implements AgentAdapter {
     private betweenTurns;
     /** Set once a turn has ended: after that, out-of-turn events are stale, not startup. */
     private hadTurn;
+    /** A task's session, which wants what the agent says on its own after a turn closed; a planner registers none and drops it. */
+    private outOfTurnListener;
     private disposed;
     /** Resolves when the process ends, so a handshake can lose the race instead of waiting out its timeout. */
     protected processEnded: Promise<void>;
@@ -2590,6 +2601,7 @@ declare abstract class StdioAgentAdapter implements AgentAdapter {
     protected handshake(_opts: AgentStartOptions): Promise<void>;
     start(opts: AgentStartOptions): Promise<void>;
     send(message: string, onEvent: (event: AgentEvent) => void, signal?: AbortSignal, onActivity?: () => void): Promise<void>;
+    onOutOfTurn(listener: (event: AgentEvent) => void): void;
     nativeSessionId(): string | null;
     onProcessExit(listener: (code: number) => void): void;
     dispose(): void;
@@ -2639,6 +2651,18 @@ declare class ClaudeCodeAdapter extends StdioAgentAdapter implements TaskModeAge
     private readonly openSubagents;
     /** Subagent messages already counted. A message arrives as one line per content block, each repeating its usage. */
     private readonly countedSubagentMessages;
+    /** Background tasks (shells, agents) the CLI reports as still running, as of its last `background_tasks_changed`. */
+    private backgroundTaskCount;
+    /**
+     * A task's turn whose `result` arrived while background work was still open.
+     * The CLI reports that result when the model stops talking, then opens a turn
+     * of its own when the work finishes; a turn ended at the first result would
+     * lose everything said after it, the completion marker included.
+     */
+    private resultHeld;
+    private followOnTimer;
+    /** The mode a task asked for, to hold the CLI to it once its `init` says what it started in. */
+    private requestedMode;
     /** The session `--resume` asked for, until the CLI's `init` shows it was taken up. */
     private pendingResume;
     protected spawnSpec(opts: AgentStartOptions): SpawnSpec;
@@ -2672,8 +2696,18 @@ declare class ClaudeCodeAdapter extends StdioAgentAdapter implements TaskModeAge
      * a grant of Ordewell's making.
      */
     answerPermission(id: string, decision: ApprovalDecision): boolean;
+    dispose(): void;
+    private clearFollowOnTimer;
     protected turnPayload(message: string): string;
     protected handleLine(line: string, emit: (event: AgentEvent) => void): void;
+    /**
+     * `--permission-mode auto` on a model or account without auto mode is not
+     * refused: the CLI says nothing and starts in `default`, then asks about every
+     * write — a request nobody is there to answer. The plan, not the CLI, decides
+     * the mode (ADR-0001), so a different one fails the turn rather than running.
+     */
+    private refuseOtherMode;
+    private awaitFollowOnTurn;
     private startSubagent;
     /**
      * A subagent's messages do not stream, so each line's usage is the snapshot
@@ -2706,8 +2740,10 @@ declare class ClaudeCodeAdapter extends StdioAgentAdapter implements TaskModeAge
 }
 
 /**
- * Codex as a planner, over its `app-server` stdio JSON-RPC transport
- * (ADR-0009).
+ * Codex as a planner (ADR-0009) and as a task's runner (ADR-0018, #54), over
+ * its `app-server` stdio JSON-RPC transport. The start switch decides the
+ * thread's settings and who answers its requests; everything a turn reports
+ * is read the same way for both.
  *
  * Ordewell already speaks a slice of this protocol — `ModelDiscovery` drives
  * `initialize` → `model/list` to build the Codex model catalog — so the
@@ -2719,7 +2755,7 @@ declare class ClaudeCodeAdapter extends StdioAgentAdapter implements TaskModeAge
  * version that renames them will surface as a visible dead turn rather than a
  * hang, because the base class watches the process as well as the protocol.
  */
-declare class CodexAdapter extends StdioAgentAdapter {
+declare class CodexAdapter extends StdioAgentAdapter implements TaskModeAgentAdapter {
     readonly agentId = "codex";
     private threadId;
     /** The model Codex opened the thread with — usage records name it. */
@@ -2730,6 +2766,28 @@ declare class CodexAdapter extends StdioAgentAdapter {
     private startOpts;
     /** Whether this turn has already emitted prose — see the `agentMessage` case. */
     private turnHasText;
+    /**
+     * The turn in flight. Its id arrives with `turn/started` or the `turn/start`
+     * response, whichever lands first; `turn/interrupt` cannot be sent without it.
+     */
+    private turn;
+    /** The JSON-RPC id of the `turn/start` that opened {@link turn}. */
+    private turnRequestId;
+    /** The last turn this adapter ended — so its second end signal, landing late, ends nothing. */
+    private endedTurnId;
+    /** An interrupt was asked for during this turn, so however it ends, it was cut short. */
+    private interruptRequested;
+    /** An interrupt asked for before Codex named the turn, sent once it does. */
+    private interruptOnStart;
+    /** A task's approval requests still waiting for an answer, by the request id as a string. */
+    private readonly openPermissions;
+    /**
+     * The files each in-flight `fileChange` item touches. Its approval request
+     * names only the item, and a person deciding needs to see the files.
+     */
+    private readonly fileChangePaths;
+    /** Requests this adapter sent and awaits an answer to, by JSON-RPC id. */
+    private readonly pendingRequests;
     private resumeAttempted;
     private resumeFallbackSent;
     private sandbox;
@@ -2739,26 +2797,43 @@ declare class CodexAdapter extends StdioAgentAdapter {
      * one stream; the thread id is what tells them apart (see {@link subagentOf}).
      */
     private readonly subagents;
-    /** Codex only plans for now (#54): its tasks stay on the terminal transport. */
-    start(opts: AgentStartOptions): Promise<void>;
     protected spawnSpec(opts: AgentStartOptions): SpawnSpec;
     /**
-     * `initialize`, then `thread/start`, both before the first user message. The
-     * thread is pinned to the read-only sandbox with approvals set to `never` —
-     * with nobody watching a planner's prompts, "ask" would mean "hang", which is
-     * ADR-0008's absent-is-denial invariant kept by construction.
+     * `initialize`, then `thread/start`, both before the first user message. A
+     * planner's thread is pinned to the read-only sandbox with approvals set to
+     * `never` — with nobody watching a planner's prompts, "ask" would mean
+     * "hang", which is ADR-0008's absent-is-denial invariant kept by
+     * construction. A task's runs as its mode says (see {@link threadParams}).
      */
     protected handshake(opts: AgentStartOptions): Promise<void>;
     /**
-     * Open the thread this session plans in. A resume id means the previous
+     * Open this session's thread. A resume id means the previous
      * process died mid-session: `thread/resume` puts the agent back in front of
-     * the context it already paid to read. A failed resume is not an error — the
-     * response handler falls back to a fresh thread, which is the same
-     * degradation `restoreChat` performs on every surface (T4).
+     * the context it already paid to read. A planner's failed resume is not an
+     * error — the response handler falls back to a fresh thread, which is the
+     * same degradation `restoreChat` performs on every surface (T4). A task's
+     * is: Continue (K1) offers the session that did the work, and a fresh thread
+     * in its place would pretend it was resumed.
      */
     private startThread;
+    private threadParams;
+    private effort;
+    /**
+     * `turn/interrupt` names the turn as well as the thread, so an interrupt
+     * asked for before Codex has named the turn waits for it. Codex acknowledges
+     * with an empty result, then ends the turn as `interrupted`.
+     */
+    interrupt(timeoutMs: number): Promise<boolean>;
+    /**
+     * Answer an open approval in its own result schema. Codex's decline carries
+     * no message, so a deny note reaches the agent as input steered into the
+     * running turn.
+     */
+    answerPermission(id: string, decision: ApprovalDecision): boolean;
     protected turnPayload(message: string): string;
     protected handleLine(line: string, emit: (event: AgentEvent) => void): void;
+    private turnStarted;
+    private closeTurn;
     /**
      * The child thread id when `threadId` names a subagent's thread, or undefined
      * for the planner's own. Codex replays both threads on one stream and only
@@ -2779,6 +2854,14 @@ declare class CodexAdapter extends StdioAgentAdapter {
      * not added a second time. Codex reports no price.
      */
     private emitUsage;
+    /**
+     * A task's server→client request. An approval stays open for someone to
+     * answer (ADR-0018, A1); everything else is answered at once, because an
+     * unanswered request stalls the turn forever.
+     */
+    private openTaskRequest;
+    /** The request as a person sees it, led by the field that says what it is about. */
+    private approvalInput;
     /**
      * Refuse one server→client request. Requests whose result schema can express
      * a refusal get that payload; everything else — a permission grant, a
@@ -2804,7 +2887,8 @@ declare class CodexAdapter extends StdioAgentAdapter {
 }
 
 /**
- * OpenCode as a planner, over its headless HTTP server (ADR-0009).
+ * OpenCode as a planner or a task runner, over its headless HTTP server
+ * (ADR-0009, ADR-0018).
  *
  * The odd one out: `opencode serve` is a real server rather than a stdio
  * protocol, so this adapter owns both halves of the boundary — it spawns the
@@ -2812,31 +2896,80 @@ declare class CodexAdapter extends StdioAgentAdapter {
  * talks to it through the injected `fetch`. Both are part of the one seam the
  * tests drive.
  *
- * The turn ends when the message POST resolves, and its response is the
+ * A planner turn ends when the message POST resolves, and its response is the
  * authoritative copy of the reply's last message. Everything else — reply text
  * as it streams, earlier model calls' text and reasoning, per-call usage, the
  * subagents a `task` call runs — arrives only on the server's `/event` channel.
  * An event name that changes between OpenCode versions therefore costs that
- * detail, never the final reply.
+ * detail, never the final reply. A task turn is posted asynchronously and read
+ * entirely from the stream — see {@link sendTask}.
  */
-declare class OpenCodeAdapter implements AgentAdapter {
+declare class OpenCodeAdapter implements TaskModeAgentAdapter {
     private deps;
     readonly agentId = "opencode";
     private process;
     private baseUrl;
+    /** Sent on every request to a task's server, which a per-task password secures. */
+    private authorization;
     private sessionId;
     private stderrTail;
     private exited;
+    private exitCode;
     private disposed;
-    private opts;
+    private markEnded;
+    private readonly processEnded;
+    private planner;
+    private task;
     /** Whether this turn has already emitted reply text — see {@link emitPart}. */
     private turnHasText;
     /** The last assistant message already settled — the baseline {@link recoverReply} measures a new reply against. */
     private lastAssistantId;
+    private taskTurn;
+    /** An abort was posted during the current task turn, so the idle that follows ends it as interrupted. */
+    private interruptRequested;
+    /** A task's requests waiting for an answer, by request id, with the session that asked. */
+    private readonly openPermissions;
     constructor(deps: AgentProcessDeps);
-    /** OpenCode only plans for now (#55): its tasks stay on the terminal transport. */
-    start(options: AgentStartOptions): Promise<void>;
+    start(opts: AgentStartOptions): Promise<void>;
     send(message: string, onEvent: (event: AgentEvent) => void, signal?: AbortSignal, onActivity?: () => void): Promise<void>;
+    /**
+     * One task turn. `prompt_async` only queues the work, so the turn is over
+     * when the session goes idle — OpenCode's own `run` rules: an idle frame
+     * counts once `/session/status` confirms it, because a late idle can belong
+     * to the turn before, and {@link pollStatus} stands behind the stream,
+     * which can miss a status frame. No request is held open for the turn, so
+     * fetch's 300s header timeout, the planner's reason for
+     * {@link recoverReply}, never applies.
+     */
+    private sendTask;
+    /**
+     * Whatever of the turn's own messages the stream missed. Each part is
+     * emitted once, so a turn the stream saw whole adds nothing here; one that
+     * lost its last text part still reaches the plain-text channel, where the
+     * done marker is looked for.
+     */
+    private readBack;
+    /**
+     * The stream can drop a status frame while still delivering the rest, so a
+     * task turn also reads the status itself. A busy session is this turn's own
+     * work as surely as a frame is.
+     */
+    private pollStatus;
+    /** An idle frame ends the turn only if the server agrees now. When it will not say, the frame is trusted, as upstream trusts it. */
+    private confirmIdle;
+    /** Whether the task's session is working, or null when the server will not say. A session absent from the map is idle. */
+    private sessionBusy;
+    /** What a frame of the task's own session says about the turn's end. */
+    private followTaskTurn;
+    /**
+     * Abort the running turn, keeping the server and its session. OpenCode
+     * acknowledges by going idle, which is also what ends the turn — as
+     * interrupted, because the request is remembered.
+     */
+    interrupt(timeoutMs: number): Promise<boolean>;
+    onProcessExit(listener: (code: number) => void): void;
+    answerPermission(id: string, decision: ApprovalDecision): boolean;
+    private role;
     /**
      * Turn one settled assistant message into events. The settled response is
      * authoritative: it names the assistant message, so its parts are the ones
@@ -2905,6 +3038,27 @@ declare class OpenCodeAdapter implements AgentAdapter {
      * shows the planner reaching for something it may not have.
      */
     private denyPermission;
+    /**
+     * A task's request. Under a mode whose manifest sets `approvals: auto` —
+     * `build`, which the terminal transport runs with `--auto` — it is answered
+     * at once with what `run --auto` answers, so the same plan behaves the same
+     * on both transports (ADR-0001), and announced already decided so the log
+     * still shows it. Any other mode leaves it open for an approval card.
+     */
+    private askPermission;
+    /**
+     * `POST /permission/:id/reply` is the current answer. The per-session path
+     * it replaced is tried only when a server too old to know the new one 404s.
+     */
+    private replyPermission;
+    /**
+     * Open `/event` for one turn and wait until it is connected. The stream
+     * stopped being best-effort the moment permission answers moved onto it: a
+     * request raised before we connect is one nobody answers, and the turn
+     * hangs on it. Waiting is bounded so a server that never opens `/event`
+     * still gets its turn.
+     */
+    private openStream;
     /**
      * Server-sent events from `/event`: the turn's live text, reasoning, tool
      * activity and usage, and the only channel permission requests arrive on —
@@ -2912,6 +3066,8 @@ declare class OpenCodeAdapter implements AgentAdapter {
      */
     private streamEvents;
     private json;
+    private request;
+    private headers;
     nativeSessionId(): string | null;
     dispose(): void;
     private exitMessage;
@@ -4625,7 +4781,16 @@ declare class StructuredSession extends AbstractTerminalSession implements Struc
      */
     private restartInterrupted;
     private startAdapter;
+    private openTurn;
     private deliver;
+    private route;
+    /**
+     * The runner spoke with no message of ours in flight. When it is working — a
+     * turn it opened itself once background work finished — that is a turn of the
+     * task like any other: the state says working, a queued message waits, and its
+     * end settles it. A message with no text in `turn_start` marks it as not ours.
+     */
+    private handleOutOfTurn;
     private openPermission;
     private cancelPermission;
     private handleEvent;
@@ -5007,14 +5172,11 @@ declare function resolveArgs(manifest: RunnerPluginManifest, ctx: ResolveContext
 /**
  * The manifest's meaning of a task's mode and effort, for a runner driven over
  * its programmatic protocol rather than a command line built from
- * `argsTemplate` (ADR-0018, C1). Same functions and the same `{{if thinking}}`
- * gate as the template path, so a structured task and a terminal task given
- * the same plan run under the same permission mode and effort.
+ * `argsTemplate` (ADR-0018, C1). The effort stays a raw id behind the same
+ * `{{if thinking}}` gate as the template path: how an effort reaches the
+ * runner is protocol, which each adapter owns.
  */
-declare function resolveTaskRunnerFlags(manifest: RunnerPluginManifest, ctx: Pick<ResolveContext, 'mode' | 'model' | 'thinkingEffort'>): {
-    permissionMode: string;
-    effortArgs: string[];
-};
+declare function resolveTaskRunnerFlags(manifest: RunnerPluginManifest, ctx: Pick<ResolveContext, 'mode' | 'model' | 'thinkingEffort'>): TaskRunnerFlags;
 
 declare const CLAUDE_CODE_MANIFEST: RunnerPluginManifest;
 
@@ -5145,4 +5307,4 @@ declare const DEFAULT_MAX_PARALLEL = 3;
  */
 declare function parseMaxParallel(value: unknown): number | null;
 
-export { ALLOWED_PLUGIN_HOSTS, ALL_PROVIDERS, AUTO_COMMANDS, AbstractRunner, AbstractTerminalSession, ActiveTaskSession, type Adr0013IsolationRun, type Adr0013PlanIsolation, type Adr0013TaskRecord, AgentAdapter, AgentEvent, AgentProcessDeps, AgentStartOptions, AiProvider, ApplyTaskOpsResult, ApprovalAnswer, ApprovalDecision, ApprovalMode, ApprovalPolicy, ApprovalRequest, type AskOptions, AwaitingReason, BUILTIN_SKILL_NAMES, BaseAiService, BaseConfig, BaseFileSystem, BufferedTaskOutputSource, CLAUDE_CODE_MANIFEST, CLI_PROVIDERS, CORE_PLANNER_PROMPT, type CappedRows, type CheckpointListener, ClaudeCodeAdapter, CliAgentAiService, type CliAgentAiServiceDeps, CodexAdapter, type CommandClassification, type CommandTier, type ComposeOptions, ConsoleLogger, ContextCollector, type Continuability, ConversationBusyError, type ConversationCompaction, ConversationEditError, type ConversationFork, ConversationMessage, type ConversationRequest, type ConversationRewind, type ConversationTurn, type ConversationVariant, DAEMON_SUBPROTOCOL, DAEMON_TOKEN_SUBPROTOCOL_PREFIX, DEFAULT_MAX_PARALLEL, DiscoveredModel, type EnvAdmission, EnvConfig, type ExecFileFn, type ExecImpl, FindSymbolOptions, FsPluginStore, GIT_READONLY_SUBCOMMANDS, GeminiService, type GitExecFn, GlobOptions, type GrepInvocation, GrepOptions, type HasBinFn, HomeTranscriptReader, type IAiService, IApproval, IConfig, IFileSystem, type ILogger, type INotification, IPluginStore, ITerminalRunner, ITerminalSession, IWorktreeIsolation, IsolationHandoff, IsolationLandedTask, IsolationMergeResult, IsolationOutcome, IsolationRun, IsolationTaskRecord, IsolationTaskStatus, IsolationView, JSON_REPAIR_INSTRUCTION, type KillTreeDeps, LegacyPlanState, type LiveOutputLookup, type LiveTail, type LiveTailOptions, type MappedTool, ModelResolver, type ModelResolverDeps, type ModifyPlanRequest, type NotificationAction, OPENCODE_MANIFEST, ORDEWELL_SETTABLE_ENV, OUTPUT_LINES_DEFAULT, OUTPUT_LINES_MAX, OpenAiService, OpenCodeAdapter, type OrchestratorObserver, OrchestratorOption, PLUGIN_NAME_PATTERN, PROVIDER_CREDENTIAL_ENV, PROVIDER_DETECT_PRIORITY, PROVIDER_LABEL, PROVIDER_PRIORITY, PROVIDER_SHORT_LABEL, type PendingApproval, PendingApprovals, type PendingApprovalsOptions, PlanEditError, PlanIsolation, PlanParseError, type PlanRequest, PlanState, PlanStatus, PlanStore, Planner, type PlannerModelCandidate, type PlannerModelChoice, PlannerModelMemory, type PlannerModelRecall, type PlannerModelStore, type PlannerReplyClassification, type PlannerRuntimeToggles, PlannerUsage, type PluginSource, type PrdBlock, type PriorOutput, type ProbeFn, ProviderModelLists, type ProviderRegistration, QueuedMessage, QueuedTaskMessage, REFUSED_COMMANDS, ReadFileOpts, RepairEvidence, type RepairLoopOpts, type RepairVerdict, RepoGroupLayout, type ResearchChat, ResearchLogEntry, ResearchProgress, type ResearchShell, type ResearchShellDeps, ResearchToolType, type ResearchTurn, ResolveContext, type RewindTarget, RunnerApprovals, type RunnerCatalog, RunnerId, RunnerInstallation, RunnerInvocation, type RunnerMode, RunnerModeInfo, RunnerPluginManifest, RunnerRegistry, RunnerSpawnOptions, RunnerTransport, SETTINGS_ENV_ALLOWLIST, SETTINGS_ENV_REFUSED, STATE_DIR, STOPPED_TOOL_RESULT, SYMBOL_LANGUAGES, type SaveSession, Session, SessionBroadcaster, type SessionData, type SessionDeps, SessionMessage, type SessionMeta, SessionNotice, type SessionPlanner, type SessionRuntimeSettings, SettingsService, type ShellDialect, type SkillInfo, type SkillMetadata, SkillsService, type SpawnSpec, StdioAgentAdapter, StructuredEvent, StructuredRunner, type StructuredRunnerDeps, StructuredSession, StructuredSessionCapability, StructuredTurnEnd, TASK_QUERY_ANSWER_MAX_CHARS, TASK_QUERY_ANSWER_OR_OPS, TASK_QUERY_FIELDS, TASK_QUERY_PROTOCOL, TASK_QUERY_REMINDER, TRUNCATED_PLAN_REPAIR_INSTRUCTION, Task, type TaskAttemptSnapshot, TaskControlError, TaskIsolation, TaskLogEvent, type TaskLogFile, type TaskLogLocation, TaskLogRecorder, type TaskLogRecorderDeps, TaskModeAgentAdapter, TaskOp, TaskOrchestrator, type TaskOrchestratorDeps, type TaskOrchestratorOptions, type TaskOutputAttempt, type TaskOutputSource, type TaskQuery, type TaskQueryCatalog, type TaskQueryField, TaskSnapshot, TaskStartOptions, TmuxRunner, type TmuxRunnerDeps, type TokenCarriers, type ToolCall, ToolOutcome, type ToolResult, type TranscriptQuery, type TranscriptReader, type TransportRoute, TransportRouter, UsageRecord, type UserSettings, Verdict, VerdictEngine, type VerdictListener, type WorkspaceCheckDeps, WorkspaceNotAProjectError, WorkspaceNotFoundError, type WorkspaceProjectCheckDeps, type WorktreeIsolationDeps, admitSettingsEnv, applyHeadLimit, assertInstallablePluginUrl, assertPlainPluginName, assertWorkspaceExists, assertWorkspaceIsProject, augmentPromptWithPriorOutputs, augmentedPath, bearerHeaderValue, buildConflictRepairPrompt, buildConflictResolutionPrompt, buildConversationSystemPrompt, buildFallbackGrepArgs, buildGlobArgs, buildGrepArgs, buildMergePrompt, buildModifyDuringExecutionPrompt, buildModifyPlanPrompt, buildPlanWithResults, buildResearchPrompt, buildResearchToolsPrompt, buildRunnerInvocation, buildSplitPrompt, buildSubagentSystemPrompt, canContinue, clampThinkingEffort, classifyCommand, classifyPlannerReply, classifyPluginSource, clearAugmentedPathCache, clearDaemonToken, clearResearchShellCache, clearState, clipboardCopyCommand, coerceAssignments, collectDirectDependencyOutputs, composeAugmentedPrompt, composeContinuationPrompt, configuredProviders, continuability, createAiService, createSession, createSkillsService, createTaskAdapter, createTaskOrchestrator, createWorktreeIsolation, daemonTokenPath, defaultLogger, definitionPattern, deleteSession, describeMergeResult, discoverGeminiModels, effectiveAllowlist, ensureDir, ensurePrivateDir, ensureStateDirIgnored, executionLogBlock, extractPrdBlock, extractPresentedToken, filterFallbackByAnchoredInclude, filterModelsForPrompt, formatSearchOutput, generatePlanWithRepair, getLatestSession, getProviderMeta, getSettingsPath, getStateDir, globalDataDir, grantScopeFor, hasTmux, idSegment, includeGlobFor, isCliProvider, isOpenAiProvider, isPlainPluginName, isValidManifest, killTree, languageForId, listSessions, listTaskLogAttempts, loadSession, loadSessionPlanState, loadState, mapAgentTool, migrateOldConfigDir, migratePlanIsolation, mintDaemonToken, mintSessionId, modelContextBlock, modifyValidationFeedback, normalizeAgentArgs, normalizeGeminiModel, openTaskLog, parseMaxParallel, parseTaskQueryJson, pendingEditRulesBlock, prefixModelId, providerForRunner, reEmitPlanPrompt, reEmitTaskOpsPrompt, reEmitTaskQueryPrompt, readDaemonToken, readTaskLog, referencePattern, renderPlanMap, renderPriorOutputs, renderTaskQueryAnswer, repairLoop, researchShellWarning, researchToolsPath, resolveArgs, resolvePluginInstallDir, resolveProviderFromPrefix, resolveResearchShell, resolveSkillInvocation, resolveTaskRunnerFlags, resolveWithin, retargetTaskRunner, routeTransport, runnerAssignment, runnerForProvider, sanitizeSlug, savePrdMarkdown, saveSession, saveState, sessionDataDir, sessionRuntimeSettings, stateExists, stripModelPrefix, summarizeOutput, supportsTaskMode, taskOpsRejectedPrompt, taskQuerySignature, textHasTaskQuery, tmuxSessionName, tmuxSocketName, tmuxWindowName, tokenSubprotocols, tokensMatch, truncatedPlanReEmitPrompt, wellKnownBinDirs, withPath, writePrivateFile };
+export { ALLOWED_PLUGIN_HOSTS, ALL_PROVIDERS, AUTO_COMMANDS, AbstractRunner, AbstractTerminalSession, ActiveTaskSession, type Adr0013IsolationRun, type Adr0013PlanIsolation, type Adr0013TaskRecord, AgentAdapter, AgentEvent, AgentProcessDeps, AgentStartOptions, AiProvider, ApplyTaskOpsResult, ApprovalAnswer, ApprovalDecision, ApprovalMode, ApprovalPolicy, ApprovalRequest, type AskOptions, AwaitingReason, BUILTIN_SKILL_NAMES, BaseAiService, BaseConfig, BaseFileSystem, BufferedTaskOutputSource, CLAUDE_CODE_MANIFEST, CLI_PROVIDERS, CORE_PLANNER_PROMPT, type CappedRows, type CheckpointListener, ClaudeCodeAdapter, CliAgentAiService, type CliAgentAiServiceDeps, CodexAdapter, type CommandClassification, type CommandTier, type ComposeOptions, ConsoleLogger, ContextCollector, type Continuability, ConversationBusyError, type ConversationCompaction, ConversationEditError, type ConversationFork, ConversationMessage, type ConversationRequest, type ConversationRewind, type ConversationTurn, type ConversationVariant, DAEMON_SUBPROTOCOL, DAEMON_TOKEN_SUBPROTOCOL_PREFIX, DEFAULT_MAX_PARALLEL, DiscoveredModel, type EnvAdmission, EnvConfig, type ExecFileFn, type ExecImpl, FindSymbolOptions, FsPluginStore, GIT_READONLY_SUBCOMMANDS, GeminiService, type GitExecFn, GlobOptions, type GrepInvocation, GrepOptions, type HasBinFn, HomeTranscriptReader, type IAiService, IApproval, IConfig, IFileSystem, type ILogger, type INotification, IPluginStore, ITerminalRunner, ITerminalSession, IWorktreeIsolation, IsolationHandoff, IsolationLandedTask, IsolationMergeResult, IsolationOutcome, IsolationRun, IsolationTaskRecord, IsolationTaskStatus, IsolationView, JSON_REPAIR_INSTRUCTION, type KillTreeDeps, LegacyPlanState, type LiveOutputLookup, type LiveTail, type LiveTailOptions, type MappedTool, ModelResolver, type ModelResolverDeps, type ModifyPlanRequest, type NotificationAction, OPENCODE_MANIFEST, ORDEWELL_SETTABLE_ENV, OUTPUT_LINES_DEFAULT, OUTPUT_LINES_MAX, OpenAiService, OpenCodeAdapter, type OrchestratorObserver, OrchestratorOption, PLUGIN_NAME_PATTERN, PROVIDER_CREDENTIAL_ENV, PROVIDER_DETECT_PRIORITY, PROVIDER_LABEL, PROVIDER_PRIORITY, PROVIDER_SHORT_LABEL, type PendingApproval, PendingApprovals, type PendingApprovalsOptions, PlanEditError, PlanIsolation, PlanParseError, type PlanRequest, PlanState, PlanStatus, PlanStore, Planner, type PlannerModelCandidate, type PlannerModelChoice, PlannerModelMemory, type PlannerModelRecall, type PlannerModelStore, type PlannerReplyClassification, type PlannerRuntimeToggles, PlannerUsage, type PluginSource, type PrdBlock, type PriorOutput, type ProbeFn, ProviderModelLists, type ProviderRegistration, QueuedMessage, QueuedTaskMessage, REFUSED_COMMANDS, ReadFileOpts, RepairEvidence, type RepairLoopOpts, type RepairVerdict, RepoGroupLayout, type ResearchChat, ResearchLogEntry, ResearchProgress, type ResearchShell, type ResearchShellDeps, ResearchToolType, type ResearchTurn, ResolveContext, type RewindTarget, RunnerApprovals, type RunnerCatalog, RunnerId, RunnerInstallation, RunnerInvocation, type RunnerMode, RunnerModeInfo, RunnerPluginManifest, RunnerRegistry, RunnerSpawnOptions, RunnerTransport, SETTINGS_ENV_ALLOWLIST, SETTINGS_ENV_REFUSED, STATE_DIR, STOPPED_TOOL_RESULT, SYMBOL_LANGUAGES, type SaveSession, Session, SessionBroadcaster, type SessionData, type SessionDeps, SessionMessage, type SessionMeta, SessionNotice, type SessionPlanner, type SessionRuntimeSettings, SettingsService, type ShellDialect, type SkillInfo, type SkillMetadata, SkillsService, type SpawnSpec, StdioAgentAdapter, StructuredEvent, StructuredRunner, type StructuredRunnerDeps, StructuredSession, StructuredSessionCapability, StructuredTurnEnd, TASK_QUERY_ANSWER_MAX_CHARS, TASK_QUERY_ANSWER_OR_OPS, TASK_QUERY_FIELDS, TASK_QUERY_PROTOCOL, TASK_QUERY_REMINDER, TRUNCATED_PLAN_REPAIR_INSTRUCTION, Task, type TaskAttemptSnapshot, TaskControlError, TaskIsolation, TaskLogEvent, type TaskLogFile, type TaskLogLocation, TaskLogRecorder, type TaskLogRecorderDeps, TaskModeAgentAdapter, TaskOp, TaskOrchestrator, type TaskOrchestratorDeps, type TaskOrchestratorOptions, type TaskOutputAttempt, type TaskOutputSource, type TaskQuery, type TaskQueryCatalog, type TaskQueryField, TaskRunnerFlags, TaskSnapshot, TaskStartOptions, TmuxRunner, type TmuxRunnerDeps, type TokenCarriers, type ToolCall, ToolOutcome, type ToolResult, type TranscriptQuery, type TranscriptReader, type TransportRoute, TransportRouter, UsageRecord, type UserSettings, Verdict, VerdictEngine, type VerdictListener, type WorkspaceCheckDeps, WorkspaceNotAProjectError, WorkspaceNotFoundError, type WorkspaceProjectCheckDeps, type WorktreeIsolationDeps, admitSettingsEnv, applyHeadLimit, assertInstallablePluginUrl, assertPlainPluginName, assertWorkspaceExists, assertWorkspaceIsProject, augmentPromptWithPriorOutputs, augmentedPath, bearerHeaderValue, buildConflictRepairPrompt, buildConflictResolutionPrompt, buildConversationSystemPrompt, buildFallbackGrepArgs, buildGlobArgs, buildGrepArgs, buildMergePrompt, buildModifyDuringExecutionPrompt, buildModifyPlanPrompt, buildPlanWithResults, buildResearchPrompt, buildResearchToolsPrompt, buildRunnerInvocation, buildSplitPrompt, buildSubagentSystemPrompt, canContinue, clampThinkingEffort, classifyCommand, classifyPlannerReply, classifyPluginSource, clearAugmentedPathCache, clearDaemonToken, clearResearchShellCache, clearState, clipboardCopyCommand, coerceAssignments, collectDirectDependencyOutputs, composeAugmentedPrompt, composeContinuationPrompt, configuredProviders, continuability, createAiService, createSession, createSkillsService, createTaskAdapter, createTaskOrchestrator, createWorktreeIsolation, daemonTokenPath, defaultLogger, definitionPattern, deleteSession, describeMergeResult, discoverGeminiModels, effectiveAllowlist, ensureDir, ensurePrivateDir, ensureStateDirIgnored, executionLogBlock, extractPrdBlock, extractPresentedToken, filterFallbackByAnchoredInclude, filterModelsForPrompt, formatSearchOutput, generatePlanWithRepair, getLatestSession, getProviderMeta, getSettingsPath, getStateDir, globalDataDir, grantScopeFor, hasTmux, idSegment, includeGlobFor, isCliProvider, isOpenAiProvider, isPlainPluginName, isValidManifest, killTree, languageForId, listSessions, listTaskLogAttempts, loadSession, loadSessionPlanState, loadState, mapAgentTool, migrateOldConfigDir, migratePlanIsolation, mintDaemonToken, mintSessionId, modelContextBlock, modifyValidationFeedback, normalizeAgentArgs, normalizeGeminiModel, openTaskLog, parseMaxParallel, parseTaskQueryJson, pendingEditRulesBlock, prefixModelId, providerForRunner, reEmitPlanPrompt, reEmitTaskOpsPrompt, reEmitTaskQueryPrompt, readDaemonToken, readTaskLog, referencePattern, renderPlanMap, renderPriorOutputs, renderTaskQueryAnswer, repairLoop, researchShellWarning, researchToolsPath, resolveArgs, resolvePluginInstallDir, resolveProviderFromPrefix, resolveResearchShell, resolveSkillInvocation, resolveTaskRunnerFlags, resolveWithin, retargetTaskRunner, routeTransport, runnerAssignment, runnerForProvider, sanitizeSlug, savePrdMarkdown, saveSession, saveState, sessionDataDir, sessionRuntimeSettings, stateExists, stripModelPrefix, summarizeOutput, supportsTaskMode, taskOpsRejectedPrompt, taskQuerySignature, textHasTaskQuery, tmuxSessionName, tmuxSocketName, tmuxWindowName, tokenSubprotocols, tokensMatch, truncatedPlanReEmitPrompt, wellKnownBinDirs, withPath, writePrivateFile };