@ordewell/core 0.6.0 → 0.6.2

package/dist/index.d.mts

@@ -1,14 +1,14 @@
-import { aG as RunnerId, ag as PlanStatus, a6 as LegacyPlanState, I as IApproval, k as ApprovalDecision, p as ApprovalRequest, j as ApprovalAnswer, L as ITerminalRunner, J as IConfig, h as AiProvider, as as ProviderModelLists, m as ApprovalMode, X as IsolationMergeResult, T as IsolationLandedTask, N as IWorktreeIsolation, a2 as IsolationTaskStatus, ad as PlanIsolation, aL as RunnerTransport, az as RepoGroupLayout, M as ITerminalSession, w as DiscoveredModel, aU as Task, f as AgentProcessDeps, c as AgentAdapter, aB as ResearchProgress, aA as ResearchLogEntry, u as ConversationMessage, b9 as UsageRecord, b1 as TaskSnapshot, r as AwaitingReason, Q as IsolationHandoff, $ as IsolationRun, a0 as IsolationTaskRecord, aV as TaskIsolation, a3 as IsolationView, Y as IsolationOutcome, ay as RepairEvidence, bg as Verdict, aJ as RunnerRegistry, ax as QueuedTaskMessage, aw as QueuedMessage, b as ActiveTaskSession, ac as OrchestratorOption, aY as TaskModeAgentAdapter, g as AgentStartOptions, e as AgentEvent, aE as ResearchToolType, ai as PlannerUsage, n as ApprovalPolicy, af as PlanState, aH as RunnerInvocation, A as AbstractRunner, a as AbstractTerminalSession, aQ as StructuredSessionCapability, b2 as TaskStartOptions, aR as StructuredTurnEnd, aP as StructuredEvent, aK as RunnerSpawnOptions, K as IPluginStore, aI as RunnerPluginManifest, aF as ResolveContext, b0 as TaskRunnerFlags } from './Task-CZJr6rmz.mjs';
-export { d as AgentAdapterFactory, i as AllProviderModels, l as ApprovalKind, o as ApprovalPolicyOptions, q as ApprovalSource, B as BlockingPrompt, C as CMD_EXE_MAX_COMMAND_LINE, s as CatalogModel, t as CommandLineTooLongError, D as DENY_ALL, v as DiscoveredMode, x as DiscoveryCommand, E as EmbeddedNewlineError, y as ExecutableNotFoundError, F as FetchAllProviderModelsOptions, H as HeadlessRunner, z as HeadlessRunnerDeps, G as HeadlessSession, O as IntegrationDisposal, P as IsolationAvailability, R as IsolationHandoffRepo, S as IsolationInactiveReason, U as IsolationLanding, V as IsolationMergeBlock, W as IsolationMergeBlockReason, Z as IsolationPruneResult, _ as IsolationRepo, a1 as IsolationTaskRepo, a4 as LaunchDeps, a5 as LaunchPlan, a7 as LineBuffer, a8 as Message, a9 as ModelCatalog, aa as ModelShortcut, ab as ORCHESTRATOR_SHORTCUTS, ae as PlanModificationWarnings, ah as PlannerStartOptions, aj as PluginCloneFn, ak as PluginEntry, al as PluginFeatures, am as PluginMode, an as PluginModelDiscovery, ao as PluginRunnerDef, ap as PreparedLaunch, aq as PreparedTask, ar as ProviderCredentialSource, at as ProviderModelsResult, au as PtySize, av as PtyWrapOptions, aC as ResearchStep, aD as ResearchStepOutcome, aM as StreamEvent, aN as StreamStepEvent, aO as StreamThinkingEvent, aS as SubagentLogEntry, aT as SubagentOutcome, aW as TaskIsolationState, aX as TaskMode, aZ as TaskModeUnsupportedError, a_ as TaskModelAssignment, a$ as TaskOutputSummary, b3 as TaskStatus, b4 as TaskTransport, b5 as TaskType, b6 as TaskWithParent, b7 as ThinkingBlock, b8 as UsageLine, ba as UsageTotals, bb as UserPromptEntry, bc as UserStep, bd as ValidationCheck, be as ValidationContext, bf as ValidationResult, bh as VerificationCheck, bi as WINDOWS_MAX_COMMAND_LINE, bj as addPlannerUsage, bk as addTaskToPlan, bl as addUsage, bm as approvalScopes, bn as buildShellInvocation, bo as collectProviderCredentials, bp as createEmptyPlan, bq as createTask, br as emptyWarnings, bs as enabledRunners, bt as fetchAllProviderModels, bu as flattenTasks, bv as flattenTasksWithParents, bw as isAwaitingReason, bx as isExecutableResolved, by as isGranted, bz as isMeasured, bA as isReservedRunnerName, bB as isRunnerApproval, bC as isRunnerTransport, bD as isStructuredSession, bE as keepExecutionState, bF as knownModelId, bG as migrateLegacyPlan, bH as migratePlanState, bI as migrateTask, bJ as partedPromptUsage, bK as planDirectLaunch, bL as planShellLaunch, bM as plannerContextFill, bN as posixShellQuote, bO as removeTaskFromPlan, bP as renumberTasks, bQ as resolveModelShortcut, bR as resolveProvider, bS as stripAnsi, bT as toApprovalDecision, bU as toOrchestratorOptions, bV as updateTaskInPlan, bW as usageLine, bX as validateModifiedPlan, bY as warningsText, bZ as windowsCommandLine, b_ as wrapWithPty } from './Task-CZJr6rmz.mjs';
-import { t as TaskOp, l as SessionBroadcaster, A as ApplyTaskOpsResult, m as SessionMessage, n as SessionNotice, r as TaskLogEvent } from './plan-utils-Ba-l8EZS.mjs';
-export { a as ApprovalBlock, b as ApprovalStatus, C as CHECKPOINT_TRUNCATE_LENGTH, c as ConversationInput, d as ConversationView, D as DisplayBlock, E as EMPTY_CONVERSATION, e as EMPTY_HOLD, f as EMPTY_TASK_LOG, G as GatedConversation, L as LocalEntry, M as MessageBlock, g as MessageRole, N as NO_TURN, O as OutputPreview, P as PlanBlock, h as PlanMarkerStatus, i as PromptHold, S as SerializedPlan, j as SerializedTask, k as SerializedTaskStatus, o as SubagentBlock, p as SubagentChild, q as SubagentStatus, T as TakenPrompt, s as TaskLogView, u as TaskRef, v as ThinkingDisplayBlock, w as ToolBlock, x as ToolHeadline, y as ToolStatus, z as TurnGate, U as UsageBlock, B as aheadOfDraft, F as applyTaskOps, H as canMergeTasks, I as canSetDependencies, J as canSplitTask, K as capConflictFiles, Q as classifyOutcome, R as coalesceTaskLog, V as dependencyCandidates, W as dependentsOf, X as drainNext, Y as executionSummary, Z as followTurn, _ as fromTranscript, $ as hasHiddenDetail, a0 as holdPrompt, a1 as outputLines, a2 as outputPreview, a3 as parseTaskOpsJson, a4 as reduceConversation, a5 as reduceTaskLog, a6 as replayTaskLog, a7 as runnerToolSubject, a8 as serializePlan, a9 as serializeTask, aa as serializeTaskStatus, ab as stopTurn, ac as summarizeToolCall, ad as taskStartedNotice, ae as textHasTaskOps, af as toTaskLogEvent, ag as toolHeadline, ah as trimToolOutput, ai as truncateCheckpointSummary, aj as unsendAll, ak as unsendLatest } from './plan-utils-Ba-l8EZS.mjs';
-import { I as IFileSystem, R as ReadFileOpts, T as ToolOutcome, b as GrepOptions, a as GlobOptions, F as FindSymbolOptions } from './IFileSystem-CFYf4yR2.mjs';
-export { G as GREP_DEFAULT_HEAD_LIMIT, c as GrepOutputMode, S as SEARCH_EXCLUSIONS } from './IFileSystem-CFYf4yR2.mjs';
-import { R as RunnerModeInfo } from './ModeResolver-a4xJFlEp.mjs';
-export { M as ManifestLookup, a as autonomyLevelLabel, b as buildModeGuide, f as filteredBuildModes, p as parseAutonomyLevel, r as resolveDefaultMode, c as resolveTaskMode, d as runnerModesFrom } from './ModeResolver-a4xJFlEp.mjs';
+import { aG as RunnerId, ag as PlanStatus, a6 as LegacyPlanState, I as IApproval, k as ApprovalDecision, p as ApprovalRequest, j as ApprovalAnswer, L as ITerminalRunner, J as IConfig, h as AiProvider, as as ProviderModelLists, m as ApprovalMode, X as IsolationMergeResult, T as IsolationLandedTask, N as IWorktreeIsolation, a2 as IsolationTaskStatus, ad as PlanIsolation, aL as RunnerTransport, az as RepoGroupLayout, M as ITerminalSession, w as DiscoveredModel, aU as Task, f as AgentProcessDeps, c as AgentAdapter, aB as ResearchProgress, aA as ResearchLogEntry, u as ConversationMessage, ba as UsageRecord, b1 as TaskSnapshot, r as AwaitingReason, Q as IsolationHandoff, $ as IsolationRun, a0 as IsolationTaskRecord, aV as TaskIsolation, a3 as IsolationView, Y as IsolationOutcome, ay as RepairEvidence, b8 as TreeSnapshot, bh as Verdict, aJ as RunnerRegistry, ax as QueuedTaskMessage, aw as QueuedMessage, b as ActiveTaskSession, ac as OrchestratorOption, aY as TaskModeAgentAdapter, g as AgentStartOptions, e as AgentEvent, aE as ResearchToolType, ai as PlannerUsage, n as ApprovalPolicy, af as PlanState, aH as RunnerInvocation, A as AbstractRunner, a as AbstractTerminalSession, aQ as StructuredSessionCapability, b2 as TaskStartOptions, aR as StructuredTurnEnd, aP as StructuredEvent, aK as RunnerSpawnOptions, K as IPluginStore, aI as RunnerPluginManifest, aF as ResolveContext, b0 as TaskRunnerFlags } from './Task-ib_U0YP7.mjs';
+export { d as AgentAdapterFactory, i as AllProviderModels, l as ApprovalKind, o as ApprovalPolicyOptions, q as ApprovalSource, B as BlockingPrompt, C as CMD_EXE_MAX_COMMAND_LINE, s as CatalogModel, t as CommandLineTooLongError, D as DENY_ALL, v as DiscoveredMode, x as DiscoveryCommand, E as EmbeddedNewlineError, y as ExecutableNotFoundError, F as FetchAllProviderModelsOptions, H as HeadlessRunner, z as HeadlessRunnerDeps, G as HeadlessSession, O as IntegrationDisposal, P as IsolationAvailability, R as IsolationHandoffRepo, S as IsolationInactiveReason, U as IsolationLanding, V as IsolationMergeBlock, W as IsolationMergeBlockReason, Z as IsolationPruneResult, _ as IsolationRepo, a1 as IsolationTaskRepo, a4 as LaunchDeps, a5 as LaunchPlan, a7 as LineBuffer, a8 as Message, a9 as ModelCatalog, aa as ModelShortcut, ab as ORCHESTRATOR_SHORTCUTS, ae as PlanModificationWarnings, ah as PlannerStartOptions, aj as PluginCloneFn, ak as PluginEntry, al as PluginFeatures, am as PluginMode, an as PluginModelDiscovery, ao as PluginRunnerDef, ap as PreparedLaunch, aq as PreparedTask, ar as ProviderCredentialSource, at as ProviderModelsResult, au as PtySize, av as PtyWrapOptions, aC as ResearchStep, aD as ResearchStepOutcome, aM as StreamEvent, aN as StreamStepEvent, aO as StreamThinkingEvent, aS as SubagentLogEntry, aT as SubagentOutcome, aW as TaskIsolationState, aX as TaskMode, aZ as TaskModeUnsupportedError, a_ as TaskModelAssignment, a$ as TaskOutputSummary, b3 as TaskStatus, b4 as TaskTransport, b5 as TaskType, b6 as TaskWithParent, b7 as ThinkingBlock, b9 as UsageLine, bb as UsageTotals, bc as UserPromptEntry, bd as UserStep, be as ValidationCheck, bf as ValidationContext, bg as ValidationResult, bi as VerificationCheck, bj as WINDOWS_MAX_COMMAND_LINE, bk as addPlannerUsage, bl as addTaskToPlan, bm as addUsage, bn as approvalScopes, bo as buildShellInvocation, bp as collectProviderCredentials, bq as createEmptyPlan, br as createTask, bs as emptyWarnings, bt as enabledRunners, bu as fetchAllProviderModels, bv as flattenTasks, bw as flattenTasksWithParents, bx as isAwaitingReason, by as isExecutableResolved, bz as isGranted, bA as isMeasured, bB as isReservedRunnerName, bC as isRunnerApproval, bD as isRunnerTransport, bE as isStructuredSession, bF as keepExecutionState, bG as knownModelId, bH as migrateLegacyPlan, bI as migratePlanState, bJ as migrateTask, bK as partedPromptUsage, bL as planDirectLaunch, bM as planShellLaunch, bN as plannerContextFill, bO as posixShellQuote, bP as removeTaskFromPlan, bQ as renumberTasks, bR as resolveModelShortcut, bS as resolveProvider, bT as stripAnsi, bU as toApprovalDecision, bV as toOrchestratorOptions, bW as updateTaskInPlan, bX as usageLine, bY as validateModifiedPlan, bZ as warningsText, b_ as windowsCommandLine, b$ as wrapWithPty } from './Task-ib_U0YP7.mjs';
+import { u as TaskOp, M as MergeGateView, m as SessionBroadcaster, A as ApplyTaskOpsResult, n as SessionMessage, o as SessionNotice, s as TaskLogEvent } from './plan-utils-D94CJ7CA.mjs';
+export { a as ApprovalBlock, b as ApprovalStatus, C as CHECKPOINT_TRUNCATE_LENGTH, c as ConversationInput, d as ConversationView, D as DisplayBlock, E as EMPTY_CONVERSATION, e as EMPTY_HOLD, f as EMPTY_TASK_LOG, G as GatedConversation, L as LocalEntry, g as MessageBlock, h as MessageRole, N as NO_TURN, O as OutputPreview, P as PlanBlock, i as PlanMarkerStatus, j as PromptHold, S as SerializedPlan, k as SerializedTask, l as SerializedTaskStatus, p as SubagentBlock, q as SubagentChild, r as SubagentStatus, T as TakenPrompt, t as TaskLogView, v as TaskRef, w as ThinkingDisplayBlock, x as ToolBlock, y as ToolHeadline, z as ToolStatus, B as TurnGate, U as UsageBlock, F as aheadOfDraft, H as applyTaskOps, I as canMergeTasks, J as canSetDependencies, K as canSplitTask, Q as capConflictFiles, R as classifyOutcome, V as coalesceTaskLog, W as dependencyCandidates, X as dependentsOf, Y as digestTaskLog, Z as drainNext, _ as executionSummary, $ as followTurn, a0 as fromTranscript, a1 as hasHiddenDetail, a2 as holdPrompt, a3 as outputLines, a4 as outputPreview, a5 as parseTaskOpsJson, a6 as reduceConversation, a7 as reduceTaskLog, a8 as replayTaskLog, a9 as runnerToolSubject, aa as serializePlan, ab as serializeTask, ac as serializeTaskStatus, ad as stopTurn, ae as summarizeToolCall, af as taskStartedNotice, ag as textHasTaskOps, ah as toTaskLogEvent, ai as toolHeadline, aj as trimToolOutput, ak as truncateCheckpointSummary, al as unsendAll, am as unsendLatest } from './plan-utils-D94CJ7CA.mjs';
+import { I as IFileSystem, R as ReadFileOpts, T as ToolOutcome, b as GrepOptions, a as GlobOptions, F as FindSymbolOptions } from './IFileSystem-d_SV7jAH.mjs';
+export { G as GREP_DEFAULT_HEAD_LIMIT, c as GrepOutputMode, S as SEARCH_EXCLUSIONS } from './IFileSystem-d_SV7jAH.mjs';
+import { R as RunnerModeInfo } from './ModeResolver-DIReYAOq.mjs';
+export { M as ManifestLookup, a as autonomyLevelLabel, b as buildModeGuide, f as filteredBuildModes, p as parseAutonomyLevel, r as resolveDefaultMode, c as resolveTaskMode, d as runnerModesFrom } from './ModeResolver-DIReYAOq.mjs';
 import { ChildProcess } from 'child_process';
-import { b as PlanParseError } from './parsing-DIaGZmiQ.mjs';
-export { P as PLAN_ENVELOPE_KEY, a as PartialPlanTask, T as TASK_OPS_ENVELOPE_KEY, c as TASK_QUERY_ENVELOPE_KEY, d as checkDepsResolve, e as checkImmutableLog, f as checkInProgress, g as checkNoCycles, h as checkUniqueIds, i as escapeControlCharsInStrings, j as extractJsonObject, k as extractObjectWithBalance, l as extractObjectsWithKey, m as looksLikePlanAttempt, o as opensWithJsonObject, p as parsePartialPlan, n as parsePlanJson, s as stripModelNoise, q as stripTrailingCommas, v as validatePlanModification } from './parsing-DIaGZmiQ.mjs';
+import { b as PlanParseError } from './parsing-DjRJJX-y.mjs';
+export { P as PLAN_ENVELOPE_KEY, a as PartialPlanTask, T as TASK_OPS_ENVELOPE_KEY, c as TASK_QUERY_ENVELOPE_KEY, d as checkDepsResolve, e as checkImmutableLog, f as checkInProgress, g as checkNoCycles, h as checkUniqueIds, i as escapeControlCharsInStrings, j as extractJsonObject, k as extractObjectWithBalance, l as extractObjectsWithKey, m as looksLikePlanAttempt, o as opensWithJsonObject, p as parsePartialPlan, n as parsePlanJson, s as stripModelNoise, q as stripTrailingCommas, v as validatePlanModification } from './parsing-DjRJJX-y.mjs';
 export { resolveOrderLabel, taskOrderLabel } from './order-labels.mjs';
 import 'events';
 
@@ -189,6 +189,12 @@ declare const REFUSED_COMMANDS: string[];
  */
 interface CommandPolicyOptions {
     dialect?: ShellDialect;
+    /**
+     * `CDPATH` is set in the environment the command will run in. A relative
+     * `cd` may then land in a directory the command line never names, so `cd`
+     * stops being navigation the classifier can follow.
+     */
+    cdpathSet?: boolean;
 }
 type CommandTier = 'auto' | 'ask' | 'refuse';
 interface CommandClassification {
@@ -265,6 +271,7 @@ declare abstract class BaseFileSystem implements IFileSystem {
      * containing directory, one entry per distinct scope.
      */
     private outsidePaths;
+    private policyOptions;
     /**
      * Three tiers (see `commandPolicy.ts`): read-only inspection runs silently,
      * anything else asks once and is remembered, and writes are refused outright
@@ -312,7 +319,8 @@ interface ResolvedPath {
     abs: string;
     inside: boolean;
 }
-declare function resolveWithin(root: string, target: string): ResolvedPath;
+/** `from` is where a relative `target` starts; containment is still judged against `root`. */
+declare function resolveWithin(root: string, target: string, from?: string): ResolvedPath;
 /** The directory a grant covers for `target` — its parent for files, itself for directories. */
 declare function grantScopeFor(abs: string, kind: 'file' | 'directory'): string;
 
@@ -469,19 +477,27 @@ interface GrepInvocation {
 declare function buildGrepArgs(pattern: string, opts: GrepOptions, root: string): GrepInvocation;
 /** Build the ripgrep invocation that lists files matching a glob. */
 declare function buildGlobArgs(pattern: string, root: string): string[];
+/**
+ * Which regex dialect the machine's `grep` can run: GNU grep has `-P` (PCRE);
+ * BSD grep (macOS) rejects it, but its `-E` is the enhanced regex library and
+ * reads the same non-capturing groups, `\b`, `\s` and `\d`.
+ */
+type GrepRegex = 'pcre' | 'ere';
+/** Run `grep` with these args: it exits 1 ("no match") when `-P` exists and 2 when it does not. */
+declare const GREP_PCRE_PROBE_ARGS: string[];
+declare function grepRegexFromProbe(exitCode: number | null): GrepRegex;
 /**
  * The POSIX-grep fallback for machines without ripgrep. Ordering and `--sort`
  * are unavailable.
  *
- * `-P` (PCRE) is required, not optional: patterns built in core — most
+ * A regex mode is required, not optional: patterns built in core — most
  * notably `find_symbol`'s `definitionPattern` — use non-capturing groups and
- * `\b`, which BRE has no syntax for and ERE (`-E`) still cannot express
- * ((?:...) is a PCRE construct). Without `-P`, GNU grep either errors
- * ("Unmatched \{") or, worse, silently treats `(`/`)`/`|` as literal
- * characters and reports a confident empty result. `-P` and `-F` are
- * mutually exclusive, so literal mode skips it.
+ * `\b`, which BRE has no syntax for. Without `-P` or an enhanced `-E`, grep
+ * either errors ("Unmatched \{") or, worse, silently treats `(`/`)`/`|` as
+ * literal characters and reports a confident empty result. The regex flags and
+ * `-F` are mutually exclusive, so literal mode skips them.
  */
-declare function buildFallbackGrepArgs(pattern: string, opts: GrepOptions, root: string): string[];
+declare function buildFallbackGrepArgs(pattern: string, opts: GrepOptions, root: string, regex?: GrepRegex): string[];
 /**
  * GNU grep's own `--include` glob only ever matches a basename, so it silently
  * matches nothing against an anchored pattern like `subdir/*.txt` (there is no
@@ -1350,6 +1366,8 @@ declare class PlanStore {
     private _planTasks;
     private _allTasks;
     private _taskMap;
+    /** Task id → the top-level task it hangs under, itself for a top-level task. */
+    private _rootMap;
     private _planRunners;
     private _onMutate;
     private _executionLog;
@@ -1365,6 +1383,11 @@ declare class PlanStore {
     isCompleted(id: string): boolean;
     isFailed(id: string): boolean;
     get(taskId: string): Readonly<Task> | undefined;
+    /**
+     * Whether a task runs as an ops task (ADR-0020). Only a top-level AI task
+     * can be one; a subtask runs with the top-level task it hangs under.
+     */
+    isOps(taskId: string): boolean;
     /** A copy of the task tree, detached from the store: later status changes do not reach it. */
     snapshot(): Task[];
     getExecutionLog(): ReadonlyArray<TaskSnapshot>;
@@ -1401,6 +1424,8 @@ declare class PlanStore {
     markAwaitingUser(id: string, reason?: AwaitingReason): void;
     markPending(id: string): void;
     retry(id: string): void;
+    /** Kept on the task: it was force-started past its merge gate, before these dependencies' work was merged (ADR-0020). */
+    setForcedPastGate(id: string, dependencies: string[]): void;
     /** A reason outlives nothing: any status but `awaiting_user` drops it. */
     private setStatus;
     blockDependents(id: string): void;
@@ -1440,6 +1465,7 @@ interface IsolationRunListener {
     /**
      * A run opened — the one moment shared by Execute, a manual task run and
      * a force start, so whatever a run pins for its whole length is read here.
+     * Whether it isolates is decided later, at its first change task.
      */
     opened(): void;
     /** A run did not start: `repos` of the group have tracked changes. */
@@ -1462,12 +1488,13 @@ interface IsolationRunControllerDeps {
     listener: IsolationRunListener;
 }
 /**
- * The lifecycle of a plan's isolation run (ADR-0013, ADR-0014), between the
- * scheduler and the git layer: deciding at a run's start whether it executes
- * in worktrees, a blocked run and how it goes on, each attempt's working
- * directory, releasing worktrees, the handoff when the run closes, and what the
- * user does with it afterwards. The record it keeps outlives one run — a
- * resumed plan continues it.
+ * The lifecycle of a plan's isolation run (ADR-0013, ADR-0014, ADR-0020),
+ * between the scheduler and the git layer: deciding, at a run's first change
+ * task, whether it executes in worktrees, a blocked run and how it goes on,
+ * each attempt's working directory, releasing worktrees, which landed work the
+ * user has merged, the tree check of an ops task, the handoff when the run
+ * closes, and what the user does with it afterwards. The record it keeps
+ * outlives one run — a resumed plan continues it.
  */
 declare class IsolationRunController {
     private readonly isolation;
@@ -1479,9 +1506,9 @@ declare class IsolationRunController {
     /** Copied paths already reported for the current run: every task gets the same copies. */
     private reportedCopies;
     /**
-     * How the open run executes; null while no run is open. A run is one
-     * Execute-Plan or one manual task run, from its start until it settles or
-     * is stopped.
+     * How the open run executes; null while no run is open, `undecided` until
+     * its first change task asks. A run is one Execute-Plan or one manual task
+     * run, from its start until it settles or is stopped.
      */
     private mode;
     /** Resolver task id → the conflicted task it resolves; see {@link linkResolver}. */
@@ -1495,6 +1522,8 @@ declare class IsolationRunController {
     /** The plan's run record, open or not; null when the plan has not isolated. */
     get current(): IsolationRun | null;
     get isOpen(): boolean;
+    /** The open run has decided whether it isolates. */
+    get decided(): boolean;
     /** The open run executes in worktrees. */
     get isolating(): boolean;
     /** A run is waiting on the user to stash or to go on without isolation. */
@@ -1518,12 +1547,15 @@ declare class IsolationRunController {
      * would otherwise write a new session file on every reload.
      */
     adopt(state: PlanIsolation | null): Promise<void>;
+    /** Open a run if none is, leaving whether it isolates to its first change task. */
+    open(): void;
     /**
-     * Open a run if none is: decide once, at its start, whether it executes in
-     * worktrees. `resume` is what a dirty tree parks until the user chooses how
-     * to go on. Resolves false when the run did not start.
+     * Decide once per run, as its first change task starts, whether it executes
+     * in worktrees (ADR-0020): an ops task needs none, so a run of only ops
+     * tasks never asks. `resume` is what a dirty tree parks until the user
+     * chooses how to go on. Resolves false while the run waits on that choice.
      */
-    open(resume: () => Promise<void>): Promise<boolean>;
+    decide(resume: () => Promise<void>): Promise<boolean>;
     /**
      * Whether the run in force, or else the next one, gives each task its own
      * worktrees, and of which repo group — what the planner is told, since it
@@ -1550,6 +1582,7 @@ declare class IsolationRunController {
      */
     attemptCwd(task: Task, opts: {
         repair: boolean;
+        ops?: boolean;
     }): Promise<{
         cwd: string;
         worktree: boolean;
@@ -1571,8 +1604,33 @@ declare class IsolationRunController {
     release(taskId: string, opts: {
         keep: boolean;
     }, landing?: Promise<unknown> | null): Promise<void>;
-    /** Close the open run. An isolated one hands its integration branch over for review. */
+    /**
+     * Close the open run. An isolated one hands its integration branch over for
+     * review — unless the user merged everything it landed at merge gates
+     * already, which leaves nothing to hand over, so it is cleared up as a Merge
+     * all would have.
+     */
     close(): Promise<void>;
+    /**
+     * Whether a task's landed work still waits to be merged into the user's
+     * branch — what holds an ops or user task at its merge gate (ADR-0020). A
+     * task with no record never landed anything to wait for.
+     */
+    awaitsMerge(taskId: string): boolean;
+    /**
+     * Look again for landed work the user has merged — by Merge all, or by hand
+     * with git. Resolves true when some was found.
+     */
+    refreshInHead(): Promise<boolean>;
+    /**
+     * The tracked state of the workspace as an ops task starts, for
+     * {@link filesChangedSince} (ADR-0020). Null where the check does not run:
+     * a run that shares the workspace root, where every task's edits land in
+     * it, or a workspace git cannot isolate at all.
+     */
+    snapshotWorkspace(): Promise<TreeSnapshot | null>;
+    /** Tracked files changed since `snapshot`; none when the run has since gone on in the workspace root. */
+    filesChangedSince(snapshot: TreeSnapshot | null): Promise<string[]>;
     /**
      * A stop or a plan load: the open run ends without a handoff and a parked
      * start is dropped. `keepOpen` spares a run the scheduler is still driving.
@@ -1591,9 +1649,11 @@ declare class IsolationRunController {
     reviewDiff(): Promise<string>;
     /**
      * "Merge all": the run's integration branches into whatever the user has
-     * checked out, in every repo or none. Once everything merged, the run has
-     * nothing left to hand over, so it is cleared up and forgotten; a branch
-     * the user's HEAD somehow does not contain stays for the next run's sweep.
+     * checked out, in every repo or none. During a run it merges what has
+     * landed so far and the run goes on (ADR-0020): its branches stay for the
+     * tasks still to land. Once a settled run merged everything, it has nothing
+     * left to hand over, so it is cleared up and forgotten; a branch the user's
+     * HEAD somehow does not contain stays for the next run's sweep.
      */
     merge(): Promise<IsolationMergeResult>;
     /** Worktrees and task branches go; the integration branch and the record stay for review and merge. */
@@ -1602,7 +1662,7 @@ declare class IsolationRunController {
     discard(): Promise<void>;
     private clearMerged;
     private forget;
-    private decide;
+    private assess;
     private activate;
     private begin;
     /** What earlier runs left merged in the group goes; a failure here is worth a word, never a stopped run. */
@@ -1848,6 +1908,8 @@ interface TaskOrchestratorDeps {
     tddEnabled: () => boolean;
     /** Read once as a run opens, never per spawn (ADR-0018, S1). */
     runnerTransport: () => RunnerTransport;
+    /** What the task's last saved attempt did, or null when it left no log (ADR-0020). */
+    previousAttemptFromLog: (taskId: string) => string | null;
 }
 /**
  * What a caller supplies to {@link createTaskOrchestrator}; every optional one
@@ -1866,6 +1928,7 @@ interface TaskOrchestratorOptions {
     workspaceEnv?: (cwd: string) => Promise<WorkspaceEnv>;
     tddEnabled?: () => boolean;
     runnerTransport?: () => RunnerTransport;
+    previousAttemptFromLog?: (taskId: string) => string | null;
 }
 /**
  * The pure scheduler. Owns execution state (`running`, `planStatus`,
@@ -1899,6 +1962,10 @@ declare class TaskOrchestrator {
      * pending and nothing ran until the user also re-ran the whole plan.
      */
     private haltedByFailure;
+    /** A Merge all is under way: no ops task starts until it ends (ADR-0020). */
+    private merging;
+    /** The last "waiting for Merge all" notice, so a run paused at a gate says it once, not on every tick. */
+    private gateNotice;
     /** The workspace's own variables for a task's cwd (ADR-0016); swapped out in tests. */
     private workspaceEnv;
     /** What the workspace env has already warned about, so a run says it once, not per task. */
@@ -1919,6 +1986,7 @@ declare class TaskOrchestrator {
     private observers;
     private tddEnabled;
     private readRunnerTransport;
+    private previousAttemptFromLog;
     /**
      * The setting as the latest run copied it when it opened. Every spawn of
      * that run uses this, so flipping the setting mid-run changes the next run
@@ -1936,6 +2004,14 @@ declare class TaskOrchestrator {
     static compose(options: TaskOrchestratorOptions): TaskOrchestrator;
     /** Advisory silence timestamp for a task's live runner, or null if not idle. */
     getIdleSince(taskId: string): string | null;
+    /**
+     * What an ops retry is told about the attempt before. The saved log is read
+     * whether or not the session was reloaded, so both behave alike; the terminal
+     * buffer is the fallback for a runner that has no log. A reload clears the
+     * attempt count along with the buffer, so a retry made since is what says
+     * there was an attempt to report on.
+     */
+    private opsPreviousAttempt;
     /** Recent clean output of a task's latest attempt, running or ended; null if it never ran. */
     getLiveOutput(taskId: string, opts: LiveTailOptions): LiveTail | null;
     get storeInstance(): PlanStore;
@@ -2006,8 +2082,26 @@ declare class TaskOrchestrator {
      */
     adoptIsolation(state: PlanIsolation | null): Promise<void>;
     reviewRunDiff(): Promise<string>;
-    /** "Merge all"; a run that merged everything is cleared up and forgotten. */
+    /**
+     * "Merge all"; a settled run that merged everything is cleared up and
+     * forgotten. During a run it merges what has landed and the run goes on:
+     * the tasks waiting at a merge gate for that work then start (ADR-0020).
+     * Never while an ops task runs, and no ops task starts until it ends — the
+     * one overlap the plan cannot order, because the merge is the user's.
+     */
     mergeRun(): Promise<IsolationMergeResult>;
+    /**
+     * The run as a surface offers Merge all mid-run (ADR-0020): what has landed
+     * and is not merged, and whether the run is paused at its gates with nothing
+     * else running. Null while no task waits at a gate.
+     */
+    mergeGateView(): MergeGateView | null;
+    /**
+     * The dependencies an ops or user task waits on at its merge gate: those
+     * whose landed work is not in the user's branch yet (ADR-0020). Empty once
+     * the task has started, and for every other task.
+     */
+    getMergeGate(taskId: string): string[];
     /** Worktrees and task branches go; the integration branch and the record stay for review and merge. */
     cleanupRun(): Promise<void>;
     /** The run and everything it made go, and the plan forgets it; the next run starts afresh. */
@@ -2077,6 +2171,14 @@ declare class TaskOrchestrator {
     linkConflictResolver(resolverId: string, conflictedId: string): void;
     private landResolved;
     getReadyTasks(): Task[];
+    private readiness;
+    /**
+     * Open the run a task starts in, and for a change task decide whether it
+     * isolates (ADR-0020): an ops task needs no worktree, so it never waits on
+     * that choice. False while a dirty tree waits on the user; `resume` is what
+     * their choice replays.
+     */
+    private openFor;
     /**
      * Cancel a running (or scheduled) task: kill its session and return it to
      * 'pending' — "not executed". The task is put on hold so the scheduler
@@ -2126,6 +2228,13 @@ declare class TaskOrchestrator {
      * No-op if the task is unknown, not an AI task, or already running.
      */
     forceStartTask(taskId: string): Promise<void>;
+    private refuseOpsDuringMerge;
+    /**
+     * A force start passes a merge gate (ADR-0020), and the surface confirmed it
+     * first; the choice is kept on the task and said, because the work it acts
+     * on is not in the user's branch.
+     */
+    private notePastGate;
     /**
      * Run exactly one task outside full-plan scheduling. The active/starting
      * session still contributes to {@link hasLiveWork} so every surface exposes
@@ -2148,6 +2257,11 @@ declare class TaskOrchestrator {
         parallelGroups: number[][];
     };
     tick(): Promise<void>;
+    /**
+     * A run paused at merge gates says so, as plainly as a task that waits on
+     * the user: which tasks wait, and that Merge all lets them go on (ADR-0020).
+     */
+    private sayGate;
     private startTask;
     /**
      * The fallible half of starting a task: resolving its cwd/worktree and
@@ -2929,6 +3043,8 @@ declare class OpenCodeAdapter implements TaskModeAgentAdapter {
     private interruptRequested;
     /** A task's requests waiting for an answer, by request id, with the session that asked. */
     private readonly openPermissions;
+    /** Set once the server turns out to speak the 2.x API, which then owns the session. */
+    private v2;
     constructor(deps: AgentProcessDeps);
     start(opts: AgentStartOptions): Promise<void>;
     send(message: string, onEvent: (event: AgentEvent) => void, signal?: AbortSignal, onActivity?: () => void): Promise<void>;
@@ -2969,6 +3085,12 @@ declare class OpenCodeAdapter implements TaskModeAgentAdapter {
     interrupt(timeoutMs: number): Promise<boolean>;
     onProcessExit(listener: (code: number) => void): void;
     answerPermission(id: string, decision: ApprovalDecision): boolean;
+    /**
+     * OpenCode 2.x replaced the 1.x HTTP surface rather than extending it, and
+     * only 2.x answers `/api/info` with its version. A 1.x server — or one that
+     * answers with anything else — keeps the 1.x protocol this class speaks.
+     */
+    private speaksV2;
     private role;
     /**
      * Turn one settled assistant message into events. The settled response is
@@ -3457,7 +3579,7 @@ interface SessionEventRelayDeps {
     /** Where isolation notices go, for a host whose notifications are not seen by the user. */
     onNotice?: (notice: SessionNotice) => void;
     store: Pick<PlanStore, 'allTasks' | 'snapshot'>;
-    orchestrator: Pick<TaskOrchestrator, 'getIdleSince' | 'getTaskIsolation' | 'getQueuedTaskMessages'>;
+    orchestrator: Pick<TaskOrchestrator, 'getIdleSince' | 'getTaskIsolation' | 'getQueuedTaskMessages' | 'getMergeGate' | 'mergeGateView'>;
     /** Shared with the Session, which snapshots, restores and clears it. */
     usage: PlannerUsageLedger;
     /** How many of a task's runner requests wait for an answer (ADR-0018, A1). */
@@ -3571,13 +3693,6 @@ interface SessionRuntimeSettings {
     /** Read once as a run starts, never per spawn (ADR-0018, S1). Absent means terminal. */
     runnerTransport?: RunnerTransport;
 }
-/**
- * The whole of what a host reads off disk for a Session. Both hosts used to
- * assemble this by hand, mapping each toggle's settings key to its runtime key
- * in two blocks nothing kept in step — which is how one toggle came to be
- * dropped. `MODE_TOGGLES` holds the mapping now; this adds the one field that
- * is not a toggle.
- */
 declare function sessionRuntimeSettings(settings: UserSettings): SessionRuntimeSettings;
 /**
  * Resolve `/skill-name` invocations to their skill's markdown content. Pure
@@ -3978,13 +4093,19 @@ declare class Session {
      * session asks here instead.
      */
     isolationView(): IsolationView | null;
+    /** The dependencies a task waits on at its merge gate (ADR-0020); empty when it waits for no Merge all. */
+    mergeGate(taskId: string): string[];
+    /** What Merge all would merge mid-run, while any task waits at a merge gate; null otherwise. */
+    mergeGateView(): MergeGateView | null;
     /** The run's integration branch against its base ref, as a unified diff. */
     reviewRunDiff(): Promise<string>;
     /**
      * "Merge all": each repo's integration branch into whatever the user has
      * checked out there — every repo, or none if any cannot take it. The one
      * irreversible step of isolated execution, so this explicit call is the
-     * only way it ever happens.
+     * only way it ever happens. During a run it merges what has landed so far,
+     * which is what opens a merge gate (ADR-0020); it waits for no ops task,
+     * and refuses while one runs.
      */
     mergeRun(): Promise<IsolationMergeResult>;
     /** Remove the run's worktrees and task branches; keep its integration branch to review or merge. */
@@ -4169,6 +4290,12 @@ declare class VerdictEngine {
     private idleSince;
     /** Tasks waiting on the user, whose silence is expected rather than a sign of a stuck runner. */
     private idlePaused;
+    /**
+     * Open tool approvals per structured task. They arrive mid-turn and leave the
+     * status alone (ADR-0018, W1), but a task waiting on one is waiting on the
+     * user, so it is not idle either.
+     */
+    private openApprovals;
     onVerdict(listener: VerdictListener): void;
     onCheckpoint(listener: CheckpointListener): void;
     onIdleChange(listener: IdleListener): void;
@@ -4201,6 +4328,8 @@ declare class VerdictEngine {
      * when the marker was never observed.
      */
     watch(task: Task, session: ITerminalSession): void;
+    private approvalOpened;
+    private approvalClosed;
     /** Scan only the new text plus the unmatched carry, so a long run stays linear. */
     private scanCheckpoints;
     private bumpGeneration;
@@ -4566,6 +4695,8 @@ interface ComposeOptions {
     planMapEnabled?: boolean;
     planMapMaxEntries?: number;
     tddEnabled?: boolean;
+    /** An ops task's last attempt, as its output ended (ADR-0020); absent on a first attempt. */
+    previousAttempt?: string;
 }
 declare function composeAugmentedPrompt(task: Task, allTasks: readonly Task[], opts?: ComposeOptions): string;
 /**
@@ -4574,7 +4705,9 @@ declare function composeAugmentedPrompt(task: Task, allTasks: readonly Task[], o
  * original prompt, so it is not sent again — but it holds the old worktree
  * too, and this attempt's is fresh from the integration branch.
  */
-declare function composeContinuationPrompt(task: Task, message: string): string;
+declare function composeContinuationPrompt(task: Task, message: string, opts?: {
+    ops?: boolean;
+}): string;
 
 type ExecFileFn = (command: string, args: string[]) => Promise<{
     stdout: string;
@@ -5307,4 +5440,4 @@ declare const DEFAULT_MAX_PARALLEL = 3;
  */
 declare function parseMaxParallel(value: unknown): number | null;
 
-export { ALLOWED_PLUGIN_HOSTS, ALL_PROVIDERS, AUTO_COMMANDS, AbstractRunner, AbstractTerminalSession, ActiveTaskSession, type Adr0013IsolationRun, type Adr0013PlanIsolation, type Adr0013TaskRecord, AgentAdapter, AgentEvent, AgentProcessDeps, AgentStartOptions, AiProvider, ApplyTaskOpsResult, ApprovalAnswer, ApprovalDecision, ApprovalMode, ApprovalPolicy, ApprovalRequest, type AskOptions, AwaitingReason, BUILTIN_SKILL_NAMES, BaseAiService, BaseConfig, BaseFileSystem, BufferedTaskOutputSource, CLAUDE_CODE_MANIFEST, CLI_PROVIDERS, CORE_PLANNER_PROMPT, type CappedRows, type CheckpointListener, ClaudeCodeAdapter, CliAgentAiService, type CliAgentAiServiceDeps, CodexAdapter, type CommandClassification, type CommandTier, type ComposeOptions, ConsoleLogger, ContextCollector, type Continuability, ConversationBusyError, type ConversationCompaction, ConversationEditError, type ConversationFork, ConversationMessage, type ConversationRequest, type ConversationRewind, type ConversationTurn, type ConversationVariant, DAEMON_SUBPROTOCOL, DAEMON_TOKEN_SUBPROTOCOL_PREFIX, DEFAULT_MAX_PARALLEL, DiscoveredModel, type EnvAdmission, EnvConfig, type ExecFileFn, type ExecImpl, FindSymbolOptions, FsPluginStore, GIT_READONLY_SUBCOMMANDS, GeminiService, type GitExecFn, GlobOptions, type GrepInvocation, GrepOptions, type HasBinFn, HomeTranscriptReader, type IAiService, IApproval, IConfig, IFileSystem, type ILogger, type INotification, IPluginStore, ITerminalRunner, ITerminalSession, IWorktreeIsolation, IsolationHandoff, IsolationLandedTask, IsolationMergeResult, IsolationOutcome, IsolationRun, IsolationTaskRecord, IsolationTaskStatus, IsolationView, JSON_REPAIR_INSTRUCTION, type KillTreeDeps, LegacyPlanState, type LiveOutputLookup, type LiveTail, type LiveTailOptions, type MappedTool, ModelResolver, type ModelResolverDeps, type ModifyPlanRequest, type NotificationAction, OPENCODE_MANIFEST, ORDEWELL_SETTABLE_ENV, OUTPUT_LINES_DEFAULT, OUTPUT_LINES_MAX, OpenAiService, OpenCodeAdapter, type OrchestratorObserver, OrchestratorOption, PLUGIN_NAME_PATTERN, PROVIDER_CREDENTIAL_ENV, PROVIDER_DETECT_PRIORITY, PROVIDER_LABEL, PROVIDER_PRIORITY, PROVIDER_SHORT_LABEL, type PendingApproval, PendingApprovals, type PendingApprovalsOptions, PlanEditError, PlanIsolation, PlanParseError, type PlanRequest, PlanState, PlanStatus, PlanStore, Planner, type PlannerModelCandidate, type PlannerModelChoice, PlannerModelMemory, type PlannerModelRecall, type PlannerModelStore, type PlannerReplyClassification, type PlannerRuntimeToggles, PlannerUsage, type PluginSource, type PrdBlock, type PriorOutput, type ProbeFn, ProviderModelLists, type ProviderRegistration, QueuedMessage, QueuedTaskMessage, REFUSED_COMMANDS, ReadFileOpts, RepairEvidence, type RepairLoopOpts, type RepairVerdict, RepoGroupLayout, type ResearchChat, ResearchLogEntry, ResearchProgress, type ResearchShell, type ResearchShellDeps, ResearchToolType, type ResearchTurn, ResolveContext, type RewindTarget, RunnerApprovals, type RunnerCatalog, RunnerId, RunnerInstallation, RunnerInvocation, type RunnerMode, RunnerModeInfo, RunnerPluginManifest, RunnerRegistry, RunnerSpawnOptions, RunnerTransport, SETTINGS_ENV_ALLOWLIST, SETTINGS_ENV_REFUSED, STATE_DIR, STOPPED_TOOL_RESULT, SYMBOL_LANGUAGES, type SaveSession, Session, SessionBroadcaster, type SessionData, type SessionDeps, SessionMessage, type SessionMeta, SessionNotice, type SessionPlanner, type SessionRuntimeSettings, SettingsService, type ShellDialect, type SkillInfo, type SkillMetadata, SkillsService, type SpawnSpec, StdioAgentAdapter, StructuredEvent, StructuredRunner, type StructuredRunnerDeps, StructuredSession, StructuredSessionCapability, StructuredTurnEnd, TASK_QUERY_ANSWER_MAX_CHARS, TASK_QUERY_ANSWER_OR_OPS, TASK_QUERY_FIELDS, TASK_QUERY_PROTOCOL, TASK_QUERY_REMINDER, TRUNCATED_PLAN_REPAIR_INSTRUCTION, Task, type TaskAttemptSnapshot, TaskControlError, TaskIsolation, TaskLogEvent, type TaskLogFile, type TaskLogLocation, TaskLogRecorder, type TaskLogRecorderDeps, TaskModeAgentAdapter, TaskOp, TaskOrchestrator, type TaskOrchestratorDeps, type TaskOrchestratorOptions, type TaskOutputAttempt, type TaskOutputSource, type TaskQuery, type TaskQueryCatalog, type TaskQueryField, TaskRunnerFlags, TaskSnapshot, TaskStartOptions, TmuxRunner, type TmuxRunnerDeps, type TokenCarriers, type ToolCall, ToolOutcome, type ToolResult, type TranscriptQuery, type TranscriptReader, type TransportRoute, TransportRouter, UsageRecord, type UserSettings, Verdict, VerdictEngine, type VerdictListener, type WorkspaceCheckDeps, WorkspaceNotAProjectError, WorkspaceNotFoundError, type WorkspaceProjectCheckDeps, type WorktreeIsolationDeps, admitSettingsEnv, applyHeadLimit, assertInstallablePluginUrl, assertPlainPluginName, assertWorkspaceExists, assertWorkspaceIsProject, augmentPromptWithPriorOutputs, augmentedPath, bearerHeaderValue, buildConflictRepairPrompt, buildConflictResolutionPrompt, buildConversationSystemPrompt, buildFallbackGrepArgs, buildGlobArgs, buildGrepArgs, buildMergePrompt, buildModifyDuringExecutionPrompt, buildModifyPlanPrompt, buildPlanWithResults, buildResearchPrompt, buildResearchToolsPrompt, buildRunnerInvocation, buildSplitPrompt, buildSubagentSystemPrompt, canContinue, clampThinkingEffort, classifyCommand, classifyPlannerReply, classifyPluginSource, clearAugmentedPathCache, clearDaemonToken, clearResearchShellCache, clearState, clipboardCopyCommand, coerceAssignments, collectDirectDependencyOutputs, composeAugmentedPrompt, composeContinuationPrompt, configuredProviders, continuability, createAiService, createSession, createSkillsService, createTaskAdapter, createTaskOrchestrator, createWorktreeIsolation, daemonTokenPath, defaultLogger, definitionPattern, deleteSession, describeMergeResult, discoverGeminiModels, effectiveAllowlist, ensureDir, ensurePrivateDir, ensureStateDirIgnored, executionLogBlock, extractPrdBlock, extractPresentedToken, filterFallbackByAnchoredInclude, filterModelsForPrompt, formatSearchOutput, generatePlanWithRepair, getLatestSession, getProviderMeta, getSettingsPath, getStateDir, globalDataDir, grantScopeFor, hasTmux, idSegment, includeGlobFor, isCliProvider, isOpenAiProvider, isPlainPluginName, isValidManifest, killTree, languageForId, listSessions, listTaskLogAttempts, loadSession, loadSessionPlanState, loadState, mapAgentTool, migrateOldConfigDir, migratePlanIsolation, mintDaemonToken, mintSessionId, modelContextBlock, modifyValidationFeedback, normalizeAgentArgs, normalizeGeminiModel, openTaskLog, parseMaxParallel, parseTaskQueryJson, pendingEditRulesBlock, prefixModelId, providerForRunner, reEmitPlanPrompt, reEmitTaskOpsPrompt, reEmitTaskQueryPrompt, readDaemonToken, readTaskLog, referencePattern, renderPlanMap, renderPriorOutputs, renderTaskQueryAnswer, repairLoop, researchShellWarning, researchToolsPath, resolveArgs, resolvePluginInstallDir, resolveProviderFromPrefix, resolveResearchShell, resolveSkillInvocation, resolveTaskRunnerFlags, resolveWithin, retargetTaskRunner, routeTransport, runnerAssignment, runnerForProvider, sanitizeSlug, savePrdMarkdown, saveSession, saveState, sessionDataDir, sessionRuntimeSettings, stateExists, stripModelPrefix, summarizeOutput, supportsTaskMode, taskOpsRejectedPrompt, taskQuerySignature, textHasTaskQuery, tmuxSessionName, tmuxSocketName, tmuxWindowName, tokenSubprotocols, tokensMatch, truncatedPlanReEmitPrompt, wellKnownBinDirs, withPath, writePrivateFile };
+export { ALLOWED_PLUGIN_HOSTS, ALL_PROVIDERS, AUTO_COMMANDS, AbstractRunner, AbstractTerminalSession, ActiveTaskSession, type Adr0013IsolationRun, type Adr0013PlanIsolation, type Adr0013TaskRecord, AgentAdapter, AgentEvent, AgentProcessDeps, AgentStartOptions, AiProvider, ApplyTaskOpsResult, ApprovalAnswer, ApprovalDecision, ApprovalMode, ApprovalPolicy, ApprovalRequest, type AskOptions, AwaitingReason, BUILTIN_SKILL_NAMES, BaseAiService, BaseConfig, BaseFileSystem, BufferedTaskOutputSource, CLAUDE_CODE_MANIFEST, CLI_PROVIDERS, CORE_PLANNER_PROMPT, type CappedRows, type CheckpointListener, ClaudeCodeAdapter, CliAgentAiService, type CliAgentAiServiceDeps, CodexAdapter, type CommandClassification, type CommandTier, type ComposeOptions, ConsoleLogger, ContextCollector, type Continuability, ConversationBusyError, type ConversationCompaction, ConversationEditError, type ConversationFork, ConversationMessage, type ConversationRequest, type ConversationRewind, type ConversationTurn, type ConversationVariant, DAEMON_SUBPROTOCOL, DAEMON_TOKEN_SUBPROTOCOL_PREFIX, DEFAULT_MAX_PARALLEL, DiscoveredModel, type EnvAdmission, EnvConfig, type ExecFileFn, type ExecImpl, FindSymbolOptions, FsPluginStore, GIT_READONLY_SUBCOMMANDS, GREP_PCRE_PROBE_ARGS, GeminiService, type GitExecFn, GlobOptions, type GrepInvocation, GrepOptions, type GrepRegex, type HasBinFn, HomeTranscriptReader, type IAiService, IApproval, IConfig, IFileSystem, type ILogger, type INotification, IPluginStore, ITerminalRunner, ITerminalSession, IWorktreeIsolation, IsolationHandoff, IsolationLandedTask, IsolationMergeResult, IsolationOutcome, IsolationRun, IsolationTaskRecord, IsolationTaskStatus, IsolationView, JSON_REPAIR_INSTRUCTION, type KillTreeDeps, LegacyPlanState, type LiveOutputLookup, type LiveTail, type LiveTailOptions, type MappedTool, MergeGateView, ModelResolver, type ModelResolverDeps, type ModifyPlanRequest, type NotificationAction, OPENCODE_MANIFEST, ORDEWELL_SETTABLE_ENV, OUTPUT_LINES_DEFAULT, OUTPUT_LINES_MAX, OpenAiService, OpenCodeAdapter, type OrchestratorObserver, OrchestratorOption, PLUGIN_NAME_PATTERN, PROVIDER_CREDENTIAL_ENV, PROVIDER_DETECT_PRIORITY, PROVIDER_LABEL, PROVIDER_PRIORITY, PROVIDER_SHORT_LABEL, type PendingApproval, PendingApprovals, type PendingApprovalsOptions, PlanEditError, PlanIsolation, PlanParseError, type PlanRequest, PlanState, PlanStatus, PlanStore, Planner, type PlannerModelCandidate, type PlannerModelChoice, PlannerModelMemory, type PlannerModelRecall, type PlannerModelStore, type PlannerReplyClassification, type PlannerRuntimeToggles, PlannerUsage, type PluginSource, type PrdBlock, type PriorOutput, type ProbeFn, ProviderModelLists, type ProviderRegistration, QueuedMessage, QueuedTaskMessage, REFUSED_COMMANDS, ReadFileOpts, RepairEvidence, type RepairLoopOpts, type RepairVerdict, RepoGroupLayout, type ResearchChat, ResearchLogEntry, ResearchProgress, type ResearchShell, type ResearchShellDeps, ResearchToolType, type ResearchTurn, ResolveContext, type RewindTarget, RunnerApprovals, type RunnerCatalog, RunnerId, RunnerInstallation, RunnerInvocation, type RunnerMode, RunnerModeInfo, RunnerPluginManifest, RunnerRegistry, RunnerSpawnOptions, RunnerTransport, SETTINGS_ENV_ALLOWLIST, SETTINGS_ENV_REFUSED, STATE_DIR, STOPPED_TOOL_RESULT, SYMBOL_LANGUAGES, type SaveSession, Session, SessionBroadcaster, type SessionData, type SessionDeps, SessionMessage, type SessionMeta, SessionNotice, type SessionPlanner, type SessionRuntimeSettings, SettingsService, type ShellDialect, type SkillInfo, type SkillMetadata, SkillsService, type SpawnSpec, StdioAgentAdapter, StructuredEvent, StructuredRunner, type StructuredRunnerDeps, StructuredSession, StructuredSessionCapability, StructuredTurnEnd, TASK_QUERY_ANSWER_MAX_CHARS, TASK_QUERY_ANSWER_OR_OPS, TASK_QUERY_FIELDS, TASK_QUERY_PROTOCOL, TASK_QUERY_REMINDER, TRUNCATED_PLAN_REPAIR_INSTRUCTION, Task, type TaskAttemptSnapshot, TaskControlError, TaskIsolation, TaskLogEvent, type TaskLogFile, type TaskLogLocation, TaskLogRecorder, type TaskLogRecorderDeps, TaskModeAgentAdapter, TaskOp, TaskOrchestrator, type TaskOrchestratorDeps, type TaskOrchestratorOptions, type TaskOutputAttempt, type TaskOutputSource, type TaskQuery, type TaskQueryCatalog, type TaskQueryField, TaskRunnerFlags, TaskSnapshot, TaskStartOptions, TmuxRunner, type TmuxRunnerDeps, type TokenCarriers, type ToolCall, ToolOutcome, type ToolResult, type TranscriptQuery, type TranscriptReader, type TransportRoute, TransportRouter, TreeSnapshot, UsageRecord, type UserSettings, Verdict, VerdictEngine, type VerdictListener, type WorkspaceCheckDeps, WorkspaceNotAProjectError, WorkspaceNotFoundError, type WorkspaceProjectCheckDeps, type WorktreeIsolationDeps, admitSettingsEnv, applyHeadLimit, assertInstallablePluginUrl, assertPlainPluginName, assertWorkspaceExists, assertWorkspaceIsProject, augmentPromptWithPriorOutputs, augmentedPath, bearerHeaderValue, buildConflictRepairPrompt, buildConflictResolutionPrompt, buildConversationSystemPrompt, buildFallbackGrepArgs, buildGlobArgs, buildGrepArgs, buildMergePrompt, buildModifyDuringExecutionPrompt, buildModifyPlanPrompt, buildPlanWithResults, buildResearchPrompt, buildResearchToolsPrompt, buildRunnerInvocation, buildSplitPrompt, buildSubagentSystemPrompt, canContinue, clampThinkingEffort, classifyCommand, classifyPlannerReply, classifyPluginSource, clearAugmentedPathCache, clearDaemonToken, clearResearchShellCache, clearState, clipboardCopyCommand, coerceAssignments, collectDirectDependencyOutputs, composeAugmentedPrompt, composeContinuationPrompt, configuredProviders, continuability, createAiService, createSession, createSkillsService, createTaskAdapter, createTaskOrchestrator, createWorktreeIsolation, daemonTokenPath, defaultLogger, definitionPattern, deleteSession, describeMergeResult, discoverGeminiModels, effectiveAllowlist, ensureDir, ensurePrivateDir, ensureStateDirIgnored, executionLogBlock, extractPrdBlock, extractPresentedToken, filterFallbackByAnchoredInclude, filterModelsForPrompt, formatSearchOutput, generatePlanWithRepair, getLatestSession, getProviderMeta, getSettingsPath, getStateDir, globalDataDir, grantScopeFor, grepRegexFromProbe, hasTmux, idSegment, includeGlobFor, isCliProvider, isOpenAiProvider, isPlainPluginName, isValidManifest, killTree, languageForId, listSessions, listTaskLogAttempts, loadSession, loadSessionPlanState, loadState, mapAgentTool, migrateOldConfigDir, migratePlanIsolation, mintDaemonToken, mintSessionId, modelContextBlock, modifyValidationFeedback, normalizeAgentArgs, normalizeGeminiModel, openTaskLog, parseMaxParallel, parseTaskQueryJson, pendingEditRulesBlock, prefixModelId, providerForRunner, reEmitPlanPrompt, reEmitTaskOpsPrompt, reEmitTaskQueryPrompt, readDaemonToken, readTaskLog, referencePattern, renderPlanMap, renderPriorOutputs, renderTaskQueryAnswer, repairLoop, researchShellWarning, researchToolsPath, resolveArgs, resolvePluginInstallDir, resolveProviderFromPrefix, resolveResearchShell, resolveSkillInvocation, resolveTaskRunnerFlags, resolveWithin, retargetTaskRunner, routeTransport, runnerAssignment, runnerForProvider, sanitizeSlug, savePrdMarkdown, saveSession, saveState, sessionDataDir, sessionRuntimeSettings, stateExists, stripModelPrefix, summarizeOutput, supportsTaskMode, taskOpsRejectedPrompt, taskQuerySignature, textHasTaskQuery, tmuxSessionName, tmuxSocketName, tmuxWindowName, tokenSubprotocols, tokensMatch, truncatedPlanReEmitPrompt, wellKnownBinDirs, withPath, writePrivateFile };