@ordewell/core 0.6.4 → 0.7.0

package/dist/index.d.mts

@@ -1,16 +1,17 @@
-import { aG as RunnerId, ag as PlanStatus, a6 as LegacyPlanState, I as IApproval, k as ApprovalDecision, p as ApprovalRequest, j as ApprovalAnswer, L as ITerminalRunner, J as IConfig, h as AiProvider, as as ProviderModelLists, m as ApprovalMode, X as IsolationMergeResult, T as IsolationLandedTask, N as IWorktreeIsolation, a2 as IsolationTaskStatus, ad as PlanIsolation, aL as RunnerTransport, az as RepoGroupLayout, M as ITerminalSession, w as DiscoveredModel, aV as Task, f as AgentProcessDeps, c as AgentAdapter, aB as ResearchProgress, aA as ResearchLogEntry, u as ConversationMessage, bb as UsageRecord, b2 as TaskSnapshot, r as AwaitingReason, Q as IsolationHandoff, $ as IsolationRun, a0 as IsolationTaskRecord, aW as TaskIsolation, a3 as IsolationView, Y as IsolationOutcome, ay as RepairEvidence, b9 as TreeSnapshot, bi as Verdict, aJ as RunnerRegistry, ax as QueuedTaskMessage, aw as QueuedMessage, b as ActiveTaskSession, ac as OrchestratorOption, aZ as TaskModeAgentAdapter, g as AgentStartOptions, e as AgentEvent, aE as ResearchToolType, ai as PlannerUsage, n as ApprovalPolicy, af as PlanState, aH as RunnerInvocation, A as AbstractRunner, a as AbstractTerminalSession, aM as RunnerVersionProbe, aR as StructuredSessionCapability, b3 as TaskStartOptions, aS as StructuredTurnEnd, aQ as StructuredEvent, aK as RunnerSpawnOptions, K as IPluginStore, aI as RunnerPluginManifest, aF as ResolveContext, b1 as TaskRunnerFlags } from './Task-xqdxugt2.mjs';
-export { d as AgentAdapterFactory, i as AllProviderModels, l as ApprovalKind, o as ApprovalPolicyOptions, q as ApprovalSource, B as BlockingPrompt, C as CMD_EXE_MAX_COMMAND_LINE, s as CatalogModel, t as CommandLineTooLongError, D as DENY_ALL, v as DiscoveredMode, x as DiscoveryCommand, E as EmbeddedNewlineError, y as ExecutableNotFoundError, F as FetchAllProviderModelsOptions, H as HeadlessRunner, z as HeadlessRunnerDeps, G as HeadlessSession, O as IntegrationDisposal, P as IsolationAvailability, R as IsolationHandoffRepo, S as IsolationInactiveReason, U as IsolationLanding, V as IsolationMergeBlock, W as IsolationMergeBlockReason, Z as IsolationPruneResult, _ as IsolationRepo, a1 as IsolationTaskRepo, a4 as LaunchDeps, a5 as LaunchPlan, a7 as LineBuffer, a8 as Message, a9 as ModelCatalog, aa as ModelShortcut, ab as ORCHESTRATOR_SHORTCUTS, ae as PlanModificationWarnings, ah as PlannerStartOptions, aj as PluginCloneFn, ak as PluginEntry, al as PluginFeatures, am as PluginMode, an as PluginModelDiscovery, ao as PluginRunnerDef, ap as PreparedLaunch, aq as PreparedTask, ar as ProviderCredentialSource, at as ProviderModelsResult, au as PtySize, av as PtyWrapOptions, aC as ResearchStep, aD as ResearchStepOutcome, aN as StreamEvent, aO as StreamStepEvent, aP as StreamThinkingEvent, aT as SubagentLogEntry, aU as SubagentOutcome, aX as TaskIsolationState, aY as TaskMode, a_ as TaskModeUnsupportedError, a$ as TaskModelAssignment, b0 as TaskOutputSummary, b4 as TaskStatus, b5 as TaskTransport, b6 as TaskType, b7 as TaskWithParent, b8 as ThinkingBlock, ba as UsageLine, bc as UsageTotals, bd as UserPromptEntry, be as UserStep, bf as ValidationCheck, bg as ValidationContext, bh as ValidationResult, bj as VerificationCheck, bk as WINDOWS_MAX_COMMAND_LINE, bl as addPlannerUsage, bm as addTaskToPlan, bn as addUsage, bo as approvalScopes, bp as buildShellInvocation, bq as collectProviderCredentials, br as createEmptyPlan, bs as createTask, bt as emptyWarnings, bu as enabledRunners, bv as fetchAllProviderModels, bw as flattenTasks, bx as flattenTasksWithParents, by as isAwaitingReason, bz as isExecutableResolved, bA as isGranted, bB as isMeasured, bC as isReservedRunnerName, bD as isRunnerApproval, bE as isRunnerTransport, bF as isStructuredSession, bG as keepExecutionState, bH as knownModelId, bI as migrateLegacyPlan, bJ as migratePlanState, bK as migrateTask, bL as partedPromptUsage, bM as planDirectLaunch, bN as planShellLaunch, bO as plannerContextFill, bP as posixShellQuote, bQ as removeTaskFromPlan, bR as renumberTasks, bS as resolveModelShortcut, bT as resolveProvider, bU as stripAnsi, bV as toApprovalDecision, bW as toOrchestratorOptions, bX as updateTaskInPlan, bY as usageLine, bZ as validateModifiedPlan, b_ as warningsText, b$ as windowsCommandLine, c0 as wrapWithPty } from './Task-xqdxugt2.mjs';
-import { u as TaskOp, M as MergeGateView, m as SessionBroadcaster, A as ApplyTaskOpsResult, n as SessionMessage, o as SessionNotice, s as TaskLogEvent } from './plan-utils-DMgajMvd.mjs';
-export { a as ApprovalBlock, b as ApprovalStatus, C as CHECKPOINT_TRUNCATE_LENGTH, c as ConversationInput, d as ConversationView, D as DisplayBlock, E as EMPTY_CONVERSATION, e as EMPTY_HOLD, f as EMPTY_TASK_LOG, G as GatedConversation, L as LocalEntry, g as MessageBlock, h as MessageRole, N as NO_TURN, O as OutputPreview, P as PlanBlock, i as PlanMarkerStatus, j as PromptHold, S as SerializedPlan, k as SerializedTask, l as SerializedTaskStatus, p as SubagentBlock, q as SubagentChild, r as SubagentStatus, T as TakenPrompt, t as TaskLogView, v as TaskRef, w as ThinkingDisplayBlock, x as ToolBlock, y as ToolHeadline, z as ToolStatus, B as TurnGate, U as UsageBlock, F as aheadOfDraft, H as applyTaskOps, I as canMergeTasks, J as canSetDependencies, K as canSplitTask, Q as capConflictFiles, R as classifyOutcome, V as coalesceTaskLog, W as dependencyCandidates, X as dependentsOf, Y as digestTaskLog, Z as drainNext, _ as executionSummary, $ as followTurn, a0 as fromTranscript, a1 as hasHiddenDetail, a2 as holdPrompt, a3 as outputLines, a4 as outputPreview, a5 as parseTaskOpsJson, a6 as reduceConversation, a7 as reduceTaskLog, a8 as replayTaskLog, a9 as runnerToolSubject, aa as serializePlan, ab as serializeTask, ac as serializeTaskStatus, ad as stopTurn, ae as summarizeToolCall, af as taskStartedNotice, ag as textHasTaskOps, ah as toTaskLogEvent, ai as toolHeadline, aj as trimToolOutput, ak as truncateCheckpointSummary, al as unsendAll, am as unsendLatest } from './plan-utils-DMgajMvd.mjs';
-import { I as IFileSystem, R as ReadFileOpts, T as ToolOutcome, b as GrepOptions, a as GlobOptions, F as FindSymbolOptions } from './IFileSystem-Qj2MWHn_.mjs';
-export { G as GREP_DEFAULT_HEAD_LIMIT, c as GrepOutputMode, S as SEARCH_EXCLUSIONS } from './IFileSystem-Qj2MWHn_.mjs';
-import { R as RunnerModeInfo } from './ModeResolver-rqaY_4Ex.mjs';
-export { M as ManifestLookup, a as autonomyLevelLabel, b as buildModeGuide, f as filteredBuildModes, p as parseAutonomyLevel, r as resolveDefaultMode, c as resolveTaskMode, d as runnerModesFrom } from './ModeResolver-rqaY_4Ex.mjs';
+import { aX as RunnerId, av as PlanStatus, a9 as LegacyPlanState, L as IApproval, k as ApprovalDecision, p as ApprovalRequest, j as ApprovalAnswer, O as ITerminalRunner, M as IConfig, h as AiProvider, aJ as ProviderModelLists, m as ApprovalMode, _ as IsolationMergeResult, W as IsolationLandedTask, Q as IWorktreeIsolation, a5 as IsolationTaskStatus, as as PlanIsolation, b0 as RunnerTransport, aQ as RepoGroupLayout, P as ITerminalSession, y as DiscoveredModel, bc as Task, f as AgentProcessDeps, c as AgentAdapter, ap as OrdewellMcpServer, aS as ResearchProgress, aR as ResearchLogEntry, w as ConversationMessage, ay as PlannerToolHandler, bz as UsageRecord, bo as TaskSnapshot, r as AwaitingReason, T as IsolationHandoff, a2 as IsolationRun, a3 as IsolationTaskRecord, be as TaskIsolation, a6 as IsolationView, $ as IsolationOutcome, aP as RepairEvidence, bx as TreeSnapshot, bG as Verdict, a_ as RunnerRegistry, aO as QueuedTaskMessage, aN as QueuedMessage, b as ActiveTaskSession, ao as OrchestratorOption, bh as TaskModeAgentAdapter, g as AgentStartOptions, e as AgentEvent, aV as ResearchToolType, az as PlannerUsage, n as ApprovalPolicy, au as PlanState, bd as TaskCompleteArgs, t as CheckpointAnswer, aY as RunnerInvocation, A as AbstractRunner, a as AbstractTerminalSession, b1 as RunnerVersionProbe, b6 as StructuredSessionCapability, bp as TaskStartOptions, br as TaskTokenScope, b7 as StructuredTurnEnd, b5 as StructuredEvent, a$ as RunnerSpawnOptions, N as IPluginStore, aZ as RunnerPluginManifest, aW as ResolveContext, bn as TaskRunnerFlags } from './Task-CoKhvBa1.mjs';
+export { d as AgentAdapterFactory, i as AllProviderModels, l as ApprovalKind, o as ApprovalPolicyOptions, q as ApprovalSource, B as BlockingPrompt, C as CMD_EXE_MAX_COMMAND_LINE, s as CatalogModel, u as CheckpointArgs, v as CommandLineTooLongError, D as DENY_ALL, x as DiscoveredMode, z as DiscoveryCommand, E as EditPlanArgs, F as EmbeddedNewlineError, G as ExecutableNotFoundError, H as FetchAllProviderModelsOptions, I as HeadlessRunner, J as HeadlessRunnerDeps, K as HeadlessSession, R as IntegrationDisposal, S as IsolationAvailability, U as IsolationHandoffRepo, V as IsolationInactiveReason, X as IsolationLanding, Y as IsolationMergeBlock, Z as IsolationMergeBlockReason, a0 as IsolationPruneResult, a1 as IsolationRepo, a4 as IsolationTaskRepo, a7 as LaunchDeps, a8 as LaunchPlan, aa as LineBuffer, ab as ListModelsArgs, ac as ListRunnersArgs, ad as McpClientConfig, ae as McpCredential, af as McpTool, ag as McpToolContext, ah as McpToolReply, ai as Message, aj as ModelCatalog, ak as ModelShortcut, al as ORCHESTRATOR_SHORTCUTS, am as ORDEWELL_MCP_PATH, an as ORDEWELL_MCP_SERVER_NAME, aq as OwnerOnlyFile, ar as PLANNER_TOOLS, at as PlanModificationWarnings, aw as PlannerStartOptions, ax as PlannerTokenScope, aA as PluginCloneFn, aB as PluginEntry, aC as PluginFeatures, aD as PluginMode, aE as PluginModelDiscovery, aF as PluginRunnerDef, aG as PreparedLaunch, aH as PreparedTask, aI as ProviderCredentialSource, aK as ProviderModelsResult, aL as PtySize, aM as PtyWrapOptions, aT as ResearchStep, aU as ResearchStepOutcome, b2 as StreamEvent, b3 as StreamStepEvent, b4 as StreamThinkingEvent, b8 as SubagentLogEntry, b9 as SubagentOutcome, ba as SubmitPlanArgs, bb as TASK_TOOLS, bf as TaskIsolationState, bg as TaskMode, bi as TaskModeUnsupportedError, bj as TaskModelAssignment, bk as TaskOutputArgs, bl as TaskOutputSummary, bm as TaskQueryArgs, bq as TaskStatus, bs as TaskToolHandler, bt as TaskTransport, bu as TaskType, bv as TaskWithParent, bw as ThinkingBlock, by as UsageLine, bA as UsageTotals, bB as UserPromptEntry, bC as UserStep, bD as ValidationCheck, bE as ValidationContext, bF as ValidationResult, bH as VerificationCheck, bI as WINDOWS_MAX_COMMAND_LINE, bJ as addPlannerUsage, bK as addTaskToPlan, bL as addUsage, bM as approvalScopes, bN as buildShellInvocation, bO as collectProviderCredentials, bP as createEmptyPlan, bQ as createTask, bR as emptyWarnings, bS as enabledRunners, bT as fetchAllProviderModels, bU as flattenTasks, bV as flattenTasksWithParents, bW as isAwaitingReason, bX as isExecutableResolved, bY as isGranted, bZ as isMeasured, b_ as isReservedRunnerName, b$ as isRunnerApproval, c0 as isRunnerTransport, c1 as isStructuredSession, c2 as keepExecutionState, c3 as knownModelId, c4 as mcpClientConfig, c5 as migrateLegacyPlan, c6 as migratePlanState, c7 as migrateTask, c8 as ownerOnlyConfigFile, c9 as partedPromptUsage, ca as planDirectLaunch, cb as planShellLaunch, cc as plannerContextFill, cd as posixShellQuote, ce as removeTaskFromPlan, cf as renumberTasks, cg as resolveModelShortcut, ch as resolveProvider, ci as sharedMcpServer, cj as stripAnsi, ck as toApprovalDecision, cl as toOrchestratorOptions, cm as updateTaskInPlan, cn as usageLine, co as validateModifiedPlan, cp as warningsText, cq as windowsCommandLine, cr as wrapWithPty } from './Task-CoKhvBa1.mjs';
+import { x as TaskOp, M as MergeGateView, p as SessionBroadcaster, A as ApplyTaskOpsResult, q as SessionMessage, r as SessionNotice, v as TaskLogEvent } from './plan-utils-CD1Xu65s.mjs';
+export { a as ApprovalBlock, b as ApprovalStatus, C as CHECKPOINT_TRUNCATE_LENGTH, c as ConversationInput, d as ConversationView, D as DiffRow, e as DiffRowKind, f as DiffStat, g as DisplayBlock, E as EMPTY_CONVERSATION, h as EMPTY_HOLD, i as EMPTY_TASK_LOG, G as GatedConversation, L as LocalEntry, j as MessageBlock, k as MessageRole, N as NO_TURN, O as OutputPreview, P as PlanBlock, l as PlanMarkerStatus, m as PromptHold, S as SerializedPlan, n as SerializedTask, o as SerializedTaskStatus, s as SubagentBlock, t as SubagentChild, u as SubagentStatus, T as TakenPrompt, w as TaskLogView, y as TaskRef, z as ThinkingDisplayBlock, B as ToolBlock, F as ToolHeadline, H as ToolStatus, I as TurnGate, U as UsageBlock, J as aheadOfDraft, K as applyTaskOps, Q as canMergeTasks, R as canSetDependencies, V as canSplitTask, W as capConflictFiles, X as classifyOutcome, Y as coalesceTaskLog, Z as dependencyCandidates, _ as dependentsOf, $ as diffRows, a0 as diffStat, a1 as diffSummary, a2 as digestTaskLog, a3 as drainNext, a4 as executionSummary, a5 as followTurn, a6 as fromTranscript, a7 as hasHiddenDetail, a8 as holdPrompt, a9 as outputLines, aa as outputPreview, ab as parseTaskOpsJson, ac as reduceConversation, ad as reduceTaskLog, ae as replayTaskLog, af as runnerToolSubject, ag as serializePlan, ah as serializeTask, ai as serializeTaskStatus, aj as stopTurn, ak as summarizeToolCall, al as taskStartedNotice, am as textHasTaskOps, an as toTaskLogEvent, ao as toolHeadline, ap as trimToolOutput, aq as truncateCheckpointSummary, ar as unsendAll, as as unsendLatest } from './plan-utils-CD1Xu65s.mjs';
+import { I as IFileSystem, R as ReadFileOpts, T as ToolOutcome, b as GrepOptions, a as GlobOptions, F as FindSymbolOptions } from './IFileSystem-DgpX0BU7.mjs';
+export { G as GREP_DEFAULT_HEAD_LIMIT, c as GrepOutputMode, S as SEARCH_EXCLUSIONS } from './IFileSystem-DgpX0BU7.mjs';
+import { R as RunnerModeInfo } from './ModeResolver-Cv01ZDd9.mjs';
+export { M as ManifestLookup, a as autonomyLevelLabel, b as buildModeGuide, f as filteredBuildModes, p as parseAutonomyLevel, r as resolveDefaultMode, c as resolveTaskMode, d as runnerModesFrom } from './ModeResolver-Cv01ZDd9.mjs';
 import { ChildProcess } from 'child_process';
-import { b as PlanParseError } from './parsing-DDZ1rUYa.mjs';
-export { P as PLAN_ENVELOPE_KEY, a as PartialPlanTask, T as TASK_OPS_ENVELOPE_KEY, c as TASK_QUERY_ENVELOPE_KEY, d as checkDepsResolve, e as checkImmutableLog, f as checkInProgress, g as checkNoCycles, h as checkUniqueIds, i as escapeControlCharsInStrings, j as extractJsonObject, k as extractObjectWithBalance, l as extractObjectsWithKey, m as looksLikePlanAttempt, o as opensWithJsonObject, p as parsePartialPlan, n as parsePlanJson, s as stripModelNoise, q as stripTrailingCommas, v as validatePlanModification } from './parsing-DDZ1rUYa.mjs';
+import { b as PlanParseError } from './parsing-B4OCHH1_.mjs';
+export { P as PLAN_ENVELOPE_KEY, a as PartialPlanTask, c as PlanTaskError, d as PlanTasksResult, T as TASK_OPS_ENVELOPE_KEY, e as TASK_QUERY_ENVELOPE_KEY, f as checkDepsResolve, g as checkImmutableLog, h as checkInProgress, i as checkNoCycles, j as checkUniqueIds, k as escapeControlCharsInStrings, l as extractJsonObject, m as extractObjectWithBalance, n as extractObjectsWithKey, o as looksLikePlanAttempt, p as opensWithJsonObject, q as parsePartialPlan, r as parsePlanJson, s as stripModelNoise, t as stripTrailingCommas, v as validatePlanModification, u as validatePlanTasks } from './parsing-B4OCHH1_.mjs';
 export { resolveOrderLabel, taskOrderLabel } from './order-labels.mjs';
 import 'events';
+import 'zod/v4';
 
 interface SessionMeta {
     id: string;
@@ -935,6 +936,8 @@ interface CliAgentAiServiceDeps extends Partial<AgentProcessDeps> {
     createAdapter?: (runner: string, deps: AgentProcessDeps) => AgentAdapter | null;
     /** Workspace root the agent explores. Defaults to the host process's cwd. */
     workspaceRoot?: () => string;
+    /** Where a conversation's planner tools are served (ADR-0022). Absent: every planner gets the envelopes. */
+    mcpServer?: OrdewellMcpServer;
 }
 /**
  * A coding agent driven as Ordewell's planner (ADR-0009).
@@ -963,6 +966,11 @@ declare class CliAgentAiService implements IAiService {
      */
     private lastNativeSessionId;
     private conversation;
+    private readonly mcpServer;
+    /** The planner token the running process was spawned with; revoked with the process (ADR-0022, A3). */
+    private plannerToken;
+    /** Whether the running planner was spawned with its tools and the CLI reported them connected. */
+    private toolsAttached;
     private activeAbort;
     /**
      * Every subagent this conversation has reported starting, and finishing.
@@ -981,6 +989,8 @@ declare class CliAgentAiService implements IAiService {
      * on the old model. No conversation yet is vacuously "current".
      */
     conversationMatchesConfig(): boolean;
+    /** Whether this conversation's planner submits through the Ordewell MCP server rather than the envelopes. */
+    plannerToolsAttached(): boolean;
     /** The agent's own session id, a resumption hint only — Ordewell's transcript is authoritative (T4). */
     nativeSessionId(): string | null;
     reset(): void;
@@ -1008,6 +1018,10 @@ declare class CliAgentAiService implements IAiService {
      * mode from here without changing this signature.
      */
     private startAdapter;
+    /** Spawn with the Ordewell server injected. False, with nothing left running, when it did not connect. */
+    private startWithTools;
+    /** Kill the planner process, and with it the token it was spawned with. */
+    private disposeAdapter;
     /**
      * The live agent process, restarted from its own session id if it died
      * between turns. Resume is a hint: when it fails, the caller's next
@@ -1036,6 +1050,15 @@ declare class CliAgentAiService implements IAiService {
     sendPlanningPrompt(prompt: string, runners: RunnerId[], runnerModes?: Record<RunnerId, RunnerModeInfo[]>, autonomousDefault?: boolean): Promise<Task[]>;
 }
 
+/**
+ * The planner tools a session offers its conversation (ADR-0022). A backend
+ * that can inject the Ordewell MCP server into its planner issues a planner
+ * token bound to `sessionId` and these handlers; any other ignores the offer.
+ */
+interface PlannerToolsOffer {
+    sessionId: string;
+    handler: PlannerToolHandler;
+}
 /**
  * Everything the conversation loop needs to start planning (ADR-0002).
  * The AI service keeps the tool-use message history internally across turns;
@@ -1072,6 +1095,7 @@ interface ConversationRequest {
      * carries the user's new message.
      */
     initialMessage?: string;
+    plannerTools?: PlannerToolsOffer;
 }
 /**
  * One planner turn's outcome. The planner talks to the user (`message`),
@@ -1134,6 +1158,13 @@ interface IAiService {
      * `continueConversation`, restart instead so the new model takes effect.
      */
     conversationMatchesConfig?(): boolean;
+    /**
+     * Whether the planner reads the catalog and submits plans through Ordewell's
+     * MCP tools (ADR-0022). Optional, and false when absent: only a harness
+     * planner the server attached to has them, and every other planner keeps
+     * the per-turn catalog and the envelopes.
+     */
+    plannerToolsAttached?(): boolean;
     /**
      * Optional: prune bulky raw tool output out of the live conversation, in
      * place, keeping subagent digests. Returns the characters removed. Absent
@@ -2727,20 +2758,10 @@ declare abstract class StdioAgentAdapter implements AgentAdapter {
     protected static parse<T>(line: string): T | null;
 }
 
-/**
- * Claude Code as a planner, over its bidirectional streaming-JSON transport
- * (ADR-0009).
- *
- * `-p --input-format stream-json --output-format stream-json` keeps one process
- * alive across turns: user messages go in as JSON lines, and the session's
- * assistant blocks, tool uses, tool results and turn boundaries come back the
- * same way. It is the richest of the three streams — partial messages and
- * separate thinking blocks — which is why this agent went first.
- */
 declare class ClaudeCodeAdapter extends StdioAgentAdapter implements TaskModeAgentAdapter {
     readonly agentId = "claude-code";
-    private interruptCount;
-    /** Interrupts sent and not yet acknowledged, by request id. */
+    private controlCount;
+    /** Control requests sent and not yet answered, by request id. */
     private readonly pendingControl;
     /** An interrupt was sent during the current turn, so an aborted result is that interrupt, not a failure. */
     private interruptRequested;
@@ -2779,6 +2800,10 @@ declare class ClaudeCodeAdapter extends StdioAgentAdapter implements TaskModeAge
     private requestedMode;
     /** The session `--resume` asked for, until the CLI's `init` shows it was taken up. */
     private pendingResume;
+    /** The `--mcp-config` file of the running process, which holds its token; removed with the process. */
+    private mcpConfig;
+    /** `mcp__ordewell__`, once this process was given the server. */
+    private ordewellToolPrefix;
     protected spawnSpec(opts: AgentStartOptions): SpawnSpec;
     /**
      * A task's run: the manifest decides what its mode and effort mean
@@ -2789,6 +2814,18 @@ declare class ClaudeCodeAdapter extends StdioAgentAdapter implements TaskModeAge
      * without it `-p` refuses them silently and nothing can ever surface one.
      */
     private taskSpawnSpec;
+    /**
+     * `--mcp-config` takes a path as well as inline JSON; the path keeps the
+     * token out of the argv every local user can list (ADR-0022, A5). The file
+     * lives exactly as long as the process that reads it. `alwaysLoad` because
+     * the CLI otherwise defers MCP tools behind its tool search, and a model
+     * that has to look an Ordewell tool up first tends to go on without it.
+     */
+    private ordewellServerArgs;
+    private removeMcpConfig;
+    start(opts: AgentStartOptions): Promise<void>;
+    /** Asks the CLI itself, which reports `pending` until its connection attempt settles. */
+    mcpAttached(): Promise<boolean>;
     /**
      * Claude Code's soft interrupt: the turn stops, the process and its session
      * stay. The CLI acknowledges on the control channel, then closes the turn
@@ -2796,6 +2833,8 @@ declare class ClaudeCodeAdapter extends StdioAgentAdapter implements TaskModeAge
      * as an interrupted `turn_end`.
      */
     interrupt(timeoutMs: number): Promise<boolean>;
+    /** Send a control request and wait for its answer; null when none came in time or the process ended. */
+    private control;
     /**
      * A `--resume` the CLI cannot find is answered at once with an error result
      * and no `init`, after which it waits on stdin for input it never reads — a
@@ -2900,11 +2939,16 @@ declare class CodexAdapter extends StdioAgentAdapter implements TaskModeAgentAda
      * names only the item, and a person deciding needs to see the files.
      */
     private readonly fileChangePaths;
+    /** The row each announced file of an in-flight `fileChange` item is shown under, by the file's shown path. */
+    private readonly fileChangeRows;
     /** Requests this adapter sent and awaits an answer to, by JSON-RPC id. */
     private readonly pendingRequests;
     private resumeAttempted;
     private resumeFallbackSent;
     private sandbox;
+    /** The Ordewell server's startup state, as Codex last reported it for this thread. */
+    private mcpStartup;
+    private mcpStartupSettled;
     /**
      * Subagent threads this session has spawned, keyed by the child thread id.
      * Codex runs a subagent in its own thread and replays both threads' events on
@@ -2931,6 +2975,12 @@ declare class CodexAdapter extends StdioAgentAdapter implements TaskModeAgentAda
      */
     private startThread;
     private threadParams;
+    /**
+     * Codex's own startup report for the server, which it sends once the thread
+     * has tried to connect (ADR-0022, S4). A report that came before this was
+     * asked is kept, so asking late still gets the answer.
+     */
+    mcpAttached(): Promise<boolean>;
     private effort;
     /**
      * `turn/interrupt` names the turn as well as the thread, so an interrupt
@@ -2987,6 +3037,16 @@ declare class CodexAdapter extends StdioAgentAdapter implements TaskModeAgentAda
     /** A tool item entering `inProgress` — announce the call so the timeline moves. */
     private emitItemStart;
     private emitItemDone;
+    /**
+     * One row per changed file: a patch is several files, and one row naming
+     * them all reads as a single cut-off path. The first file keeps the item's
+     * id, which an approval for the patch points at. Announcing a file twice
+     * returns the row it already has, so a change first seen completed still
+     * gets its call.
+     */
+    private announceFileChange;
+    /** Relative to the task's worktree, where every path but a stray one lies; a move names both ends. */
+    private shownChangePath;
     /**
      * A `collabAgentToolCall` — the planner spawning, waiting on or messaging a
      * subagent. The call itself is planner-level tool activity; the lifecycle it
@@ -3045,6 +3105,8 @@ declare class OpenCodeAdapter implements TaskModeAgentAdapter {
     private readonly openPermissions;
     /** Set once the server turns out to speak the 2.x API, which then owns the session. */
     private v2;
+    /** The Ordewell server this process was configured with; null when none was given or its config could not be merged. */
+    private ordewell;
     constructor(deps: AgentProcessDeps);
     start(opts: AgentStartOptions): Promise<void>;
     send(message: string, onEvent: (event: AgentEvent) => void, signal?: AbortSignal, onActivity?: () => void): Promise<void>;
@@ -3191,6 +3253,8 @@ declare class OpenCodeAdapter implements TaskModeAgentAdapter {
     private request;
     private headers;
     nativeSessionId(): string | null;
+    /** Asks the server, which lists every MCP server it has with the state of its connection. */
+    mcpAttached(): Promise<boolean>;
     dispose(): void;
     private exitMessage;
 }
@@ -3219,6 +3283,22 @@ interface ForkedDialogue {
     researchLog: ResearchLogEntry[];
 }
 
+/** A read made through a planner tool: refused once the turn's budget is gone, else answered, told to land when the budget asks it to. */
+type ToolRead<T> = {
+    status: 'refused';
+} | {
+    status: 'answered';
+    value: T;
+    landNow: boolean;
+};
+/** A plan or task edit handed to the open turn over a channel other than its reply (ADR-0022). */
+type PlannerSubmission = {
+    kind: 'plan';
+    tasks: Task[];
+} | {
+    kind: 'task_ops';
+    ops: TaskOp[];
+};
 /** Everything (re)opening a conversation needs besides the dialogue itself. */
 type ConversationOpening = Omit<ConversationRequest, 'goal' | 'onProgress' | 'signal' | 'priorHistory' | 'initialMessage'>;
 /**
@@ -3333,13 +3413,36 @@ declare class PlannerConversation {
     private savedInBackground;
     private turnsInFlight;
     private compacting;
-    private openTurnId;
+    private openTurn;
     constructor(host: PlannerConversationHost);
     get transcript(): readonly ConversationMessage[];
     /** Whether a user turn is between its transcript append and its settled outcome. */
     get isTurnInFlight(): boolean;
     /** The user turn being answered, for what the host raises during it — an approval the turn's research asks for. */
     get currentTurnId(): string | undefined;
+    /**
+     * Hand the open turn a plan (already validated) or a task edit. The turn
+     * settles with it exactly as with the same plan or ops parsed out of its
+     * reply, and it wins over any envelope that reply carries. A later
+     * submission replaces an earlier one. False when no user turn is open.
+     */
+    submit(submission: PlannerSubmission): boolean;
+    /**
+     * The edit the open turn already holds, for a further edit in the same reply
+     * to join rather than replace. Empty when it holds nothing; null when it holds
+     * a whole plan, which an edit cannot be layered on.
+     */
+    pendingOps(): TaskOp[] | null;
+    /** Whether the turn would park this edit until a batch boundary instead of applying it as it settles. */
+    editWouldQueue(ops: TaskOp[]): boolean;
+    /**
+     * A read the planner makes through a tool. It spends the same per-turn budget
+     * as an envelope read, so a planner cannot read more by switching channels:
+     * past the soft limit, or on a repeated question, the answer still comes but
+     * is told to land the turn; at the hard limit it is refused. `signature`
+     * names the question, for the repeat check.
+     */
+    read<T>(signature: string, answer: () => Promise<T>): Promise<ToolRead<T>>;
     /** Whether the model still holds this conversation in memory. */
     get isActive(): boolean;
     append(role: ConversationMessage['role'], content: string, opts?: {
@@ -3472,6 +3575,13 @@ declare class PlannerConversation {
      * would cost it the chance to fix the edit.
      */
     private drainTaskQueries;
+    /**
+     * The backend's answer, with what was handed in while it ran standing in
+     * for whatever its reply carried. Taken once: a corrective re-send after a
+     * rejected edit must not settle on the same submission again. A stopped
+     * turn commits nothing, the same as a stopped reply with a plan in it.
+     */
+    private claimSubmission;
     /**
      * Render one read out of live state. Never persisted to the transcript: the
      * detail is context for the planner's next reply, and re-sending it on every
@@ -3498,7 +3608,8 @@ declare class PlannerConversation {
      *
      * The host's catalog is allowlist-filtered, so a restricted allowlist stays a
      * hard bound on every turn, and reads the plan's runners live, so a runner
-     * admitted mid-session by a retarget is shown like every other.
+     * admitted mid-session by a retarget is shown like every other. A planner
+     * with Ordewell's tools gets a reminder to read the catalog instead.
      */
     private catalogBlock;
     /**
@@ -3534,6 +3645,10 @@ declare class SkillsService {
     constructor(workspaceRoot?: string | undefined);
     private localDir;
     private globalDir;
+    private readSeedManifest;
+    private recordSeed;
+    /** A seed the user never edited: safe to replace with a newer built-in. */
+    private isUntouchedSeed;
     private seed;
     seedBuiltinSkill(name: string): boolean;
     /** Removes a retired built-in's seed from the global dir, but only if it's untouched by the user. */
@@ -3692,6 +3807,8 @@ interface SessionRuntimeSettings {
     modelAllowlist?: Record<string, string[]>;
     /** Read once as a run starts, never per spawn (ADR-0018, S1). Absent means terminal. */
     runnerTransport?: RunnerTransport;
+    /** Absent means the user never chose, and `config.enabledRunners` (the host's defaults) decides. */
+    enabledRunners?: RunnerId[];
 }
 declare function sessionRuntimeSettings(settings: UserSettings): SessionRuntimeSettings;
 /**
@@ -3724,10 +3841,10 @@ interface ConversationRewind extends ConversationFork {
 type SaveSession = (plan: LegacyPlanState, goal: string, workspace: string, sessionId: string) => void;
 /**
  * Everything a delivery surface constructs to host a session. Structural config
- * (enabledRunners, orchestratorModel, providerModelLists) is snapshotted inside
- * `config` at construction and never re-read from the environment. Runtime
- * settings (tdd, verification) are read live via the `settings` callback so a toggle
- * between generate and execute takes effect.
+ * (orchestratorModel, providerModelLists) is snapshotted inside `config` at
+ * construction and never re-read from the environment. Runtime settings (tdd,
+ * verification, enabled runners) are read live via the `settings` callback so a
+ * toggle between operations takes effect.
  */
 interface SessionDeps {
     config: IConfig;
@@ -3744,7 +3861,7 @@ interface SessionDeps {
     onNotice?: (notice: SessionNotice) => void;
     /** Shared across sessions — sole producer of model catalogs and routing lists. */
     modelResolver: ModelResolver;
-    /** Live runtime settings (tdd, verification). Read at each operation that needs them. */
+    /** Live runtime settings (tdd, verification, enabled runners). Read at each operation that needs them. */
     settings: () => SessionRuntimeSettings;
     /**
      * Host-assigned session id. When set, every persist writes under this id so
@@ -3780,6 +3897,8 @@ interface SessionDeps {
     saveSession?: SaveSession;
     /** Where a structured task's log is saved (ADR-0018, P1). Defaults to a file per attempt beside the session's. */
     openTaskLog?: (location: TaskLogLocation, taskId: string) => TaskLogFile;
+    /** The Ordewell MCP server a harness planner's tools are served from (ADR-0022). Defaults to the process's one. */
+    mcpServer?: OrdewellMcpServer;
 }
 /**
  * The composition root: builds every collaborator a Session drives and wires
@@ -3852,6 +3971,7 @@ declare class Session {
     private currentSessionId;
     private readonly skillsService;
     private readonly conversation;
+    private readonly plannerTools;
     constructor(parts: SessionParts);
     /**
      * Answer an outstanding approval. Every surface funnels here — the web
@@ -3912,6 +4032,14 @@ declare class Session {
      * session.
      */
     reset(): void;
+    /**
+     * What a planner may assign right now: every enabled runner, its modes, and
+     * its allowlisted models — read as of this call, so a runner enabled or an
+     * allowlist edited since planning started is in it (#69). Discovers a
+     * runner's models the first time it is asked for.
+     */
+    liveCatalog(): Promise<TaskQueryCatalog>;
+    private catalogOf;
     private runnerModesFor;
     /**
      * The catalog a model/task-mode edit is checked against — the same
@@ -3922,6 +4050,8 @@ declare class Session {
      * allowlist itself, the same way `coerceAssignments` does.
      */
     private editCatalog;
+    /** The runners enabled right now — a toggle made since the session was built counts (#69). */
+    private enabledRunners;
     /**
      * The allowlist in force right now. Unset means no restriction — falling
      * back to the one planning started under would keep a restriction the user
@@ -4008,6 +4138,26 @@ declare class Session {
      */
     compactConversation(signal?: AbortSignal): Promise<ConversationCompaction>;
     rewindTargets(): RewindTarget[];
+    /**
+     * Hand the planner turn in flight a validated plan or a task edit; the turn
+     * commits it as it would the same JSON in the planner's reply. False when
+     * no turn is open.
+     */
+    submitToTurn(submission: PlannerSubmission): boolean;
+    /**
+     * A plan the planner submitted through its tool, already checked against the
+     * live catalog. Its runners join `plan.runners` here, so a runner enabled
+     * since planning started is not snapped back by the commit (#69).
+     */
+    private submitPlanFromTool;
+    /**
+     * A task edit the planner made through its tool. Checked against the live
+     * catalog, then handed to the open turn, which commits it as it would the
+     * same ops in a taskOps reply — including parking it behind a running batch,
+     * which the envelope does before any check, so a queued edit is not checked
+     * here either. Edits made in one reply join one batch.
+     */
+    private editPlanFromTool;
     /** Whether the planner conversation is live (started and not yet committed to a plan). */
     get isConversationActive(): boolean;
     /**
@@ -4263,6 +4413,8 @@ declare function writePrivateFile(filePath: string, content: string): void;
 
 type VerdictListener = (taskId: string, verdict: Verdict) => void;
 type CheckpointListener = (taskId: string, summary: string) => void;
+/** A tool-raised checkpoint whose call went away while its attempt lives on, so nothing is left to answer it. */
+type CheckpointWithdrawnListener = (taskId: string) => void;
 /** Fires on every idleSince transition (null→timestamp on silence, timestamp→null on resume/teardown). */
 type IdleListener = (taskId: string, idleSince: string | null) => void;
 declare class VerdictEngine {
@@ -4272,6 +4424,13 @@ declare class VerdictEngine {
     private pausedSessions;
     private listeners;
     private checkpointListeners;
+    private withdrawnListeners;
+    /**
+     * The open `checkpoint` tool call per task (ADR-0022, V5): settling it is how
+     * an answer reaches a runner that asked through the tool, where the marker's
+     * answer is typed into the session instead.
+     */
+    private toolCheckpoints;
     private idleListeners;
     /**
      * Per-task generation. Replaced on every watch(), clear() and verdict.
@@ -4298,6 +4457,7 @@ declare class VerdictEngine {
     private openApprovals;
     onVerdict(listener: VerdictListener): void;
     onCheckpoint(listener: CheckpointListener): void;
+    onCheckpointWithdrawn(listener: CheckpointWithdrawnListener): void;
     onIdleChange(listener: IdleListener): void;
     /** Advisory silence timestamp for a task, or null if it isn't idle. */
     getIdleSince(taskId: string): string | null;
@@ -4325,9 +4485,26 @@ declare class VerdictEngine {
      * Attach to a spawned session: scan the output tail for the task's completion
      * marker (delivering a verdict immediately while leaving interactive sessions
      * open), scan for checkpoint markers, and on exit produce a failed verdict
-     * when the marker was never observed.
+     * when the marker was never observed. A structured session's `task_complete`
+     * call is evidence too (ADR-0022, V2): whichever signal comes first decides.
+     *
+     * Returns the attempt's generation, what {@link signalComplete} is checked against.
+     */
+    watch(task: Task, session: ITerminalSession): number;
+    /**
+     * The runner's own `task_complete` call (ADR-0022, V1/V3): settles the
+     * attempt exactly as the marker does, unless that attempt is no longer the
+     * task's current one or another signal already settled it.
+     */
+    signalComplete(taskId: string, generation: number, report: TaskCompleteArgs): void;
+    /**
+     * The runner's `checkpoint` call (ADR-0022, V5): raised through the same
+     * listeners as the marker, so the task waits on the user the same way, and
+     * settled by {@link approveCheckpoint} or {@link rejectCheckpoint}. It is
+     * withdrawn, never left hanging, once the attempt is over or the call goes.
      */
-    watch(task: Task, session: ITerminalSession): void;
+    raiseCheckpoint(taskId: string, generation: number, question: string, signal: AbortSignal): Promise<CheckpointAnswer>;
+    private withdrawToolCheckpoint;
     private approvalOpened;
     private approvalClosed;
     /** Scan only the new text plus the unmatched carry, so a long run stays linear. */
@@ -4478,6 +4655,8 @@ declare function buildSubagentSystemPrompt(): string;
 interface ConversationVariant {
     /** Harness planner (ADR-0009): the agent owns its own tools and research budget. */
     harness?: boolean;
+    /** The planner reads the catalog and submits the plan through Ordewell's MCP tools (ADR-0022), not the JSON envelope. */
+    plannerTools?: boolean;
     /** Every AI task gets its own worktree (ADR-0013), so file overlap no longer forces an order; of every repo of a group (ADR-0014). */
     isolatedExecution?: IsolatedExecution;
 }
@@ -4497,13 +4676,13 @@ declare function buildModifyDuringExecutionPrompt(executionLog: TaskSnapshot[],
  * task-ops protocol (with the "merge" op) is injected alongside it by
  * `planContextBlock`. The model emits a single taskOps merge op.
  */
-declare function buildMergePrompt(taskIds: string[], tasks: readonly Task[]): string;
+declare function buildMergePrompt(taskIds: string[], tasks: readonly Task[], tools?: boolean): string;
 /**
  * User-message prompt for a planner-driven split: asks the model to decompose
  * one task into a sequence of smaller tasks. The model decides the breakdown —
  * the user does not hand-type the parts.
  */
-declare function buildSplitPrompt(taskId: string, tasks: readonly Task[]): string;
+declare function buildSplitPrompt(taskId: string, tasks: readonly Task[], tools?: boolean): string;
 /**
  * Runner prompt for the opt-in task that resolves an integration conflict
  * (ADR-0013). The resolver's own worktree starts at the integration tip, so the
@@ -4682,6 +4861,18 @@ declare function summarizeOutput(reviewReason: string | undefined, output: strin
     capturedAt: string;
 };
 declare function collectDirectDependencyOutputs(task: Task, allTasks: readonly Task[]): PriorOutput[];
+/**
+ * Break marker tokens carried in a predecessor's captured output. Interactive
+ * runners echo the prompt they are given, and the watcher scans that terminal
+ * output — a quoted marker would settle this task on the previous one's
+ * evidence. Hyphenated rather than spaced: the scanner also reads a
+ * whitespace-flattened view of the terminal, which would rejoin a space.
+ *
+ * A completion marker also loses its id: transcripts are bound to a task by
+ * that id, and a dependent's transcript quoting it would answer for the
+ * predecessor the next time the predecessor runs.
+ */
+declare function defuseMarkers(text: string): string;
 declare function renderPriorOutputs(outputs: PriorOutput[]): string;
 declare function augmentPromptWithPriorOutputs(task: Task, allTasks: readonly Task[]): string;
 /**
@@ -4699,6 +4890,8 @@ interface ComposeOptions {
     tddEnabled?: boolean;
     /** An ops task's last attempt, as its output ended (ADR-0020); absent on a first attempt. */
     previousAttempt?: string;
+    /** The runner is given the `task_complete` and `checkpoint` tools (ADR-0022); the markers stay as their fallback. */
+    completionTool?: boolean;
 }
 declare function composeAugmentedPrompt(task: Task, allTasks: readonly Task[], opts?: ComposeOptions): string;
 /**
@@ -4709,6 +4902,7 @@ declare function composeAugmentedPrompt(task: Task, allTasks: readonly Task[], o
  */
 declare function composeContinuationPrompt(task: Task, message: string, opts?: {
     ops?: boolean;
+    completionTool?: boolean;
 }): string;
 
 type ExecFileFn = (command: string, args: string[]) => Promise<{
@@ -4853,6 +5047,8 @@ interface StructuredRunnerDeps {
     /** Overrides adapter construction; production picks by runner id and refuses runners without a connector. */
     createAdapter?: (runner: string, deps: AgentProcessDeps) => TaskModeAgentAdapter;
     interruptGraceMs?: number;
+    /** Serves the task tools of the runners that take them (ADR-0022). Defaults to the process's one server. */
+    mcp?: OrdewellMcpServer;
 }
 interface SessionLaunch {
     runner: string;
@@ -4860,6 +5056,11 @@ interface SessionLaunch {
     createAdapter: (runner: string, deps: AgentProcessDeps) => TaskModeAgentAdapter;
     startOptions: TaskStartOptions;
     interruptGraceMs: number;
+    /** Where this attempt's task tools are served, when its runner takes them (ADR-0022). */
+    tools?: {
+        server: OrdewellMcpServer;
+        scope: TaskTokenScope;
+    };
 }
 /**
  * One task driven over its runner's programmatic protocol (ADR-0018). It *is*
@@ -4893,10 +5094,24 @@ declare class StructuredSession extends AbstractTerminalSession implements Struc
      * requests — while an approval must be answerable by id across the session.
      */
     private readonly permissions;
+    /** The launch's start options, with this attempt's server once its token is issued. */
+    private startOptions;
+    /** This attempt's MCP token, until the session ends (ADR-0022, A2). */
+    private toolToken;
+    private checkpointHandler;
     constructor(id: string, taskId: string, launch: SessionLaunch);
     /** Start the runner and send the task's prompt as its first turn. */
     start(prompt: string): Promise<void>;
     getOutput(): string;
+    onTaskComplete(listener: (report: TaskCompleteArgs) => void): void;
+    onToolCheckpoint(handler: (question: string, signal: AbortSignal) => Promise<CheckpointAnswer>): void;
+    /**
+     * A server that cannot start costs the task its tools, not its run: the
+     * prompt still teaches the marker (ADR-0022, S2).
+     */
+    private issueTools;
+    private revokeTools;
+    protected baseHandleExit(code: number): void;
     /** A reply typed at the task — a checkpoint answer, most often — is a user message. */
     write(text: string): void;
     kill(): void;
@@ -4951,6 +5166,7 @@ declare class StructuredRunner extends AbstractRunner<StructuredSession> {
     private readonly processDeps;
     private readonly createAdapter;
     private readonly interruptGraceMs;
+    private readonly mcp;
     constructor(deps?: StructuredRunnerDeps);
     spawn(opts: RunnerSpawnOptions): Promise<ITerminalSession>;
 }
@@ -5445,4 +5661,4 @@ declare const DEFAULT_MAX_PARALLEL = 3;
  */
 declare function parseMaxParallel(value: unknown): number | null;
 
-export { ALLOWED_PLUGIN_HOSTS, ALL_PROVIDERS, AUTO_COMMANDS, AbstractRunner, AbstractTerminalSession, ActiveTaskSession, type Adr0013IsolationRun, type Adr0013PlanIsolation, type Adr0013TaskRecord, AgentAdapter, AgentEvent, AgentProcessDeps, AgentStartOptions, AiProvider, ApplyTaskOpsResult, ApprovalAnswer, ApprovalDecision, ApprovalMode, ApprovalPolicy, ApprovalRequest, type AskOptions, AwaitingReason, BUILTIN_SKILL_NAMES, BaseAiService, BaseConfig, BaseFileSystem, BufferedTaskOutputSource, CLAUDE_CODE_MANIFEST, CLI_PROVIDERS, CORE_PLANNER_PROMPT, type CappedRows, type CheckpointListener, ClaudeCodeAdapter, CliAgentAiService, type CliAgentAiServiceDeps, CodexAdapter, type CommandClassification, type CommandTier, type ComposeOptions, ConsoleLogger, ContextCollector, type Continuability, ConversationBusyError, type ConversationCompaction, ConversationEditError, type ConversationFork, ConversationMessage, type ConversationRequest, type ConversationRewind, type ConversationTurn, type ConversationVariant, DAEMON_SUBPROTOCOL, DAEMON_TOKEN_SUBPROTOCOL_PREFIX, DEFAULT_MAX_PARALLEL, DiscoveredModel, type EnvAdmission, EnvConfig, type ExecFileFn, type ExecImpl, FindSymbolOptions, FsPluginStore, GIT_READONLY_SUBCOMMANDS, GREP_PCRE_PROBE_ARGS, GeminiService, type GitExecFn, GlobOptions, type GrepInvocation, GrepOptions, type GrepRegex, type HasBinFn, HomeTranscriptReader, type IAiService, IApproval, IConfig, IFileSystem, type ILogger, type INotification, IPluginStore, ITerminalRunner, ITerminalSession, IWorktreeIsolation, IsolationHandoff, IsolationLandedTask, IsolationMergeResult, IsolationOutcome, IsolationRun, IsolationTaskRecord, IsolationTaskStatus, IsolationView, JSON_REPAIR_INSTRUCTION, type KillTreeDeps, LegacyPlanState, type LiveOutputLookup, type LiveTail, type LiveTailOptions, type MappedTool, MergeGateView, ModelResolver, type ModelResolverDeps, type ModifyPlanRequest, type NotificationAction, OPENCODE_MANIFEST, ORDEWELL_SETTABLE_ENV, OUTPUT_LINES_DEFAULT, OUTPUT_LINES_MAX, OpenAiService, OpenCodeAdapter, type OrchestratorObserver, OrchestratorOption, PLUGIN_NAME_PATTERN, PROVIDER_CREDENTIAL_ENV, PROVIDER_DETECT_PRIORITY, PROVIDER_LABEL, PROVIDER_PRIORITY, PROVIDER_SHORT_LABEL, type PendingApproval, PendingApprovals, type PendingApprovalsOptions, PlanEditError, PlanIsolation, PlanParseError, type PlanRequest, PlanState, PlanStatus, PlanStore, Planner, type PlannerModelCandidate, type PlannerModelChoice, PlannerModelMemory, type PlannerModelRecall, type PlannerModelStore, type PlannerReplyClassification, type PlannerRuntimeToggles, PlannerUsage, type PluginSource, type PrdBlock, type PriorOutput, type ProbeFn, ProviderModelLists, type ProviderRegistration, QueuedMessage, QueuedTaskMessage, REFUSED_COMMANDS, ReadFileOpts, RepairEvidence, type RepairLoopOpts, type RepairVerdict, RepoGroupLayout, type ResearchChat, ResearchLogEntry, ResearchProgress, type ResearchShell, type ResearchShellDeps, ResearchToolType, type ResearchTurn, ResolveContext, type RewindTarget, RunnerApprovals, type RunnerCatalog, RunnerId, RunnerInstallation, RunnerInvocation, type RunnerMode, RunnerModeInfo, RunnerPluginManifest, RunnerRegistry, RunnerSpawnOptions, RunnerTransport, SETTINGS_ENV_ALLOWLIST, SETTINGS_ENV_REFUSED, STATE_DIR, STOPPED_TOOL_RESULT, SYMBOL_LANGUAGES, type SaveSession, Session, SessionBroadcaster, type SessionData, type SessionDeps, SessionMessage, type SessionMeta, SessionNotice, type SessionPlanner, type SessionRuntimeSettings, SettingsService, type ShellDialect, type SkillInfo, type SkillMetadata, SkillsService, type SpawnSpec, StdioAgentAdapter, StructuredEvent, StructuredRunner, type StructuredRunnerDeps, StructuredSession, StructuredSessionCapability, StructuredTurnEnd, TASK_QUERY_ANSWER_MAX_CHARS, TASK_QUERY_ANSWER_OR_OPS, TASK_QUERY_FIELDS, TASK_QUERY_PROTOCOL, TASK_QUERY_REMINDER, TRUNCATED_PLAN_REPAIR_INSTRUCTION, Task, type TaskAttemptSnapshot, TaskControlError, TaskIsolation, TaskLogEvent, type TaskLogFile, type TaskLogLocation, TaskLogRecorder, type TaskLogRecorderDeps, TaskModeAgentAdapter, TaskOp, TaskOrchestrator, type TaskOrchestratorDeps, type TaskOrchestratorOptions, type TaskOutputAttempt, type TaskOutputSource, type TaskQuery, type TaskQueryCatalog, type TaskQueryField, TaskRunnerFlags, TaskSnapshot, TaskStartOptions, TmuxRunner, type TmuxRunnerDeps, type TokenCarriers, type ToolCall, ToolOutcome, type ToolResult, type TranscriptQuery, type TranscriptReader, type TransportRoute, TransportRouter, TreeSnapshot, UsageRecord, type UserSettings, Verdict, VerdictEngine, type VerdictListener, type WorkspaceCheckDeps, WorkspaceNotAProjectError, WorkspaceNotFoundError, type WorkspaceProjectCheckDeps, type WorktreeIsolationDeps, admitSettingsEnv, applyHeadLimit, assertInstallablePluginUrl, assertPlainPluginName, assertWorkspaceExists, assertWorkspaceIsProject, augmentPromptWithPriorOutputs, augmentedPath, bearerHeaderValue, buildConflictRepairPrompt, buildConflictResolutionPrompt, buildConversationSystemPrompt, buildFallbackGrepArgs, buildGlobArgs, buildGrepArgs, buildMergePrompt, buildModifyDuringExecutionPrompt, buildModifyPlanPrompt, buildPlanWithResults, buildResearchPrompt, buildResearchToolsPrompt, buildRunnerInvocation, buildSplitPrompt, buildSubagentSystemPrompt, canContinue, clampThinkingEffort, classifyCommand, classifyPlannerReply, classifyPluginSource, clearAugmentedPathCache, clearDaemonToken, clearResearchShellCache, clearState, clipboardCopyCommand, coerceAssignments, collectDirectDependencyOutputs, composeAugmentedPrompt, composeContinuationPrompt, configuredProviders, continuability, createAiService, createSession, createSkillsService, createTaskAdapter, createTaskOrchestrator, createWorktreeIsolation, daemonTokenPath, defaultLogger, definitionPattern, deleteSession, describeMergeResult, discoverGeminiModels, effectiveAllowlist, ensureDir, ensurePrivateDir, ensureStateDirIgnored, executionLogBlock, extractPrdBlock, extractPresentedToken, filterFallbackByAnchoredInclude, filterModelsForPrompt, formatSearchOutput, generatePlanWithRepair, getLatestSession, getProviderMeta, getSettingsPath, getStateDir, globalDataDir, grantScopeFor, grepRegexFromProbe, hasTmux, idSegment, includeGlobFor, isCliProvider, isOpenAiProvider, isPlainPluginName, isValidManifest, killTree, languageForId, listSessions, listTaskLogAttempts, loadSession, loadSessionPlanState, loadState, mapAgentTool, migrateOldConfigDir, migratePlanIsolation, mintDaemonToken, mintSessionId, modelContextBlock, modifyValidationFeedback, normalizeAgentArgs, normalizeGeminiModel, openTaskLog, parseMaxParallel, parseTaskQueryJson, pendingEditRulesBlock, prefixModelId, providerForRunner, reEmitPlanPrompt, reEmitTaskOpsPrompt, reEmitTaskQueryPrompt, readDaemonToken, readTaskLog, referencePattern, renderPlanMap, renderPriorOutputs, renderTaskQueryAnswer, repairLoop, researchShellWarning, researchToolsPath, resolveArgs, resolvePluginInstallDir, resolveProviderFromPrefix, resolveResearchShell, resolveSkillInvocation, resolveTaskRunnerFlags, resolveWithin, retargetTaskRunner, routeTransport, runnerAssignment, runnerForProvider, sanitizeSlug, savePrdMarkdown, saveSession, saveState, sessionDataDir, sessionRuntimeSettings, stateExists, stripModelPrefix, summarizeOutput, supportsTaskMode, taskOpsRejectedPrompt, taskQuerySignature, textHasTaskQuery, tmuxSessionName, tmuxSocketName, tmuxWindowName, tokenSubprotocols, tokensMatch, truncatedPlanReEmitPrompt, wellKnownBinDirs, withPath, writePrivateFile };
+export { ALLOWED_PLUGIN_HOSTS, ALL_PROVIDERS, AUTO_COMMANDS, AbstractRunner, AbstractTerminalSession, ActiveTaskSession, type Adr0013IsolationRun, type Adr0013PlanIsolation, type Adr0013TaskRecord, AgentAdapter, AgentEvent, AgentProcessDeps, AgentStartOptions, AiProvider, ApplyTaskOpsResult, ApprovalAnswer, ApprovalDecision, ApprovalMode, ApprovalPolicy, ApprovalRequest, type AskOptions, AwaitingReason, BUILTIN_SKILL_NAMES, BaseAiService, BaseConfig, BaseFileSystem, BufferedTaskOutputSource, CLAUDE_CODE_MANIFEST, CLI_PROVIDERS, CORE_PLANNER_PROMPT, type CappedRows, CheckpointAnswer, type CheckpointListener, ClaudeCodeAdapter, CliAgentAiService, type CliAgentAiServiceDeps, CodexAdapter, type CommandClassification, type CommandTier, type ComposeOptions, ConsoleLogger, ContextCollector, type Continuability, ConversationBusyError, type ConversationCompaction, ConversationEditError, type ConversationFork, ConversationMessage, type ConversationRequest, type ConversationRewind, type ConversationTurn, type ConversationVariant, DAEMON_SUBPROTOCOL, DAEMON_TOKEN_SUBPROTOCOL_PREFIX, DEFAULT_MAX_PARALLEL, DiscoveredModel, type EnvAdmission, EnvConfig, type ExecFileFn, type ExecImpl, FindSymbolOptions, FsPluginStore, GIT_READONLY_SUBCOMMANDS, GREP_PCRE_PROBE_ARGS, GeminiService, type GitExecFn, GlobOptions, type GrepInvocation, GrepOptions, type GrepRegex, type HasBinFn, HomeTranscriptReader, type IAiService, IApproval, IConfig, IFileSystem, type ILogger, type INotification, IPluginStore, ITerminalRunner, ITerminalSession, IWorktreeIsolation, IsolationHandoff, IsolationLandedTask, IsolationMergeResult, IsolationOutcome, IsolationRun, IsolationTaskRecord, IsolationTaskStatus, IsolationView, JSON_REPAIR_INSTRUCTION, type KillTreeDeps, LegacyPlanState, type LiveOutputLookup, type LiveTail, type LiveTailOptions, type MappedTool, MergeGateView, ModelResolver, type ModelResolverDeps, type ModifyPlanRequest, type NotificationAction, OPENCODE_MANIFEST, ORDEWELL_SETTABLE_ENV, OUTPUT_LINES_DEFAULT, OUTPUT_LINES_MAX, OpenAiService, OpenCodeAdapter, type OrchestratorObserver, OrchestratorOption, OrdewellMcpServer, PLUGIN_NAME_PATTERN, PROVIDER_CREDENTIAL_ENV, PROVIDER_DETECT_PRIORITY, PROVIDER_LABEL, PROVIDER_PRIORITY, PROVIDER_SHORT_LABEL, type PendingApproval, PendingApprovals, type PendingApprovalsOptions, PlanEditError, PlanIsolation, PlanParseError, type PlanRequest, PlanState, PlanStatus, PlanStore, Planner, type PlannerModelCandidate, type PlannerModelChoice, PlannerModelMemory, type PlannerModelRecall, type PlannerModelStore, type PlannerReplyClassification, type PlannerRuntimeToggles, type PlannerSubmission, PlannerToolHandler, PlannerUsage, type PluginSource, type PrdBlock, type PriorOutput, type ProbeFn, ProviderModelLists, type ProviderRegistration, QueuedMessage, QueuedTaskMessage, REFUSED_COMMANDS, ReadFileOpts, RepairEvidence, type RepairLoopOpts, type RepairVerdict, RepoGroupLayout, type ResearchChat, ResearchLogEntry, ResearchProgress, type ResearchShell, type ResearchShellDeps, ResearchToolType, type ResearchTurn, ResolveContext, type RewindTarget, RunnerApprovals, type RunnerCatalog, RunnerId, RunnerInstallation, RunnerInvocation, type RunnerMode, RunnerModeInfo, RunnerPluginManifest, RunnerRegistry, RunnerSpawnOptions, RunnerTransport, SETTINGS_ENV_ALLOWLIST, SETTINGS_ENV_REFUSED, STATE_DIR, STOPPED_TOOL_RESULT, SYMBOL_LANGUAGES, type SaveSession, Session, SessionBroadcaster, type SessionData, type SessionDeps, SessionMessage, type SessionMeta, SessionNotice, type SessionPlanner, type SessionRuntimeSettings, SettingsService, type ShellDialect, type SkillInfo, type SkillMetadata, SkillsService, type SpawnSpec, StdioAgentAdapter, StructuredEvent, StructuredRunner, type StructuredRunnerDeps, StructuredSession, StructuredSessionCapability, StructuredTurnEnd, TASK_QUERY_ANSWER_MAX_CHARS, TASK_QUERY_ANSWER_OR_OPS, TASK_QUERY_FIELDS, TASK_QUERY_PROTOCOL, TASK_QUERY_REMINDER, TRUNCATED_PLAN_REPAIR_INSTRUCTION, Task, type TaskAttemptSnapshot, TaskCompleteArgs, TaskControlError, TaskIsolation, TaskLogEvent, type TaskLogFile, type TaskLogLocation, TaskLogRecorder, type TaskLogRecorderDeps, TaskModeAgentAdapter, TaskOp, TaskOrchestrator, type TaskOrchestratorDeps, type TaskOrchestratorOptions, type TaskOutputAttempt, type TaskOutputSource, type TaskQuery, type TaskQueryCatalog, type TaskQueryField, TaskRunnerFlags, TaskSnapshot, TaskStartOptions, TaskTokenScope, TmuxRunner, type TmuxRunnerDeps, type TokenCarriers, type ToolCall, ToolOutcome, type ToolResult, type TranscriptQuery, type TranscriptReader, type TransportRoute, TransportRouter, TreeSnapshot, UsageRecord, type UserSettings, Verdict, VerdictEngine, type VerdictListener, type WorkspaceCheckDeps, WorkspaceNotAProjectError, WorkspaceNotFoundError, type WorkspaceProjectCheckDeps, type WorktreeIsolationDeps, admitSettingsEnv, applyHeadLimit, assertInstallablePluginUrl, assertPlainPluginName, assertWorkspaceExists, assertWorkspaceIsProject, augmentPromptWithPriorOutputs, augmentedPath, bearerHeaderValue, buildConflictRepairPrompt, buildConflictResolutionPrompt, buildConversationSystemPrompt, buildFallbackGrepArgs, buildGlobArgs, buildGrepArgs, buildMergePrompt, buildModifyDuringExecutionPrompt, buildModifyPlanPrompt, buildPlanWithResults, buildResearchPrompt, buildResearchToolsPrompt, buildRunnerInvocation, buildSplitPrompt, buildSubagentSystemPrompt, canContinue, clampThinkingEffort, classifyCommand, classifyPlannerReply, classifyPluginSource, clearAugmentedPathCache, clearDaemonToken, clearResearchShellCache, clearState, clipboardCopyCommand, coerceAssignments, collectDirectDependencyOutputs, composeAugmentedPrompt, composeContinuationPrompt, configuredProviders, continuability, createAiService, createSession, createSkillsService, createTaskAdapter, createTaskOrchestrator, createWorktreeIsolation, daemonTokenPath, defaultLogger, definitionPattern, defuseMarkers, deleteSession, describeMergeResult, discoverGeminiModels, effectiveAllowlist, ensureDir, ensurePrivateDir, ensureStateDirIgnored, executionLogBlock, extractPrdBlock, extractPresentedToken, filterFallbackByAnchoredInclude, filterModelsForPrompt, formatSearchOutput, generatePlanWithRepair, getLatestSession, getProviderMeta, getSettingsPath, getStateDir, globalDataDir, grantScopeFor, grepRegexFromProbe, hasTmux, idSegment, includeGlobFor, isCliProvider, isOpenAiProvider, isPlainPluginName, isValidManifest, killTree, languageForId, listSessions, listTaskLogAttempts, loadSession, loadSessionPlanState, loadState, mapAgentTool, migrateOldConfigDir, migratePlanIsolation, mintDaemonToken, mintSessionId, modelContextBlock, modifyValidationFeedback, normalizeAgentArgs, normalizeGeminiModel, openTaskLog, parseMaxParallel, parseTaskQueryJson, pendingEditRulesBlock, prefixModelId, providerForRunner, reEmitPlanPrompt, reEmitTaskOpsPrompt, reEmitTaskQueryPrompt, readDaemonToken, readTaskLog, referencePattern, renderPlanMap, renderPriorOutputs, renderTaskQueryAnswer, repairLoop, researchShellWarning, researchToolsPath, resolveArgs, resolvePluginInstallDir, resolveProviderFromPrefix, resolveResearchShell, resolveSkillInvocation, resolveTaskRunnerFlags, resolveWithin, retargetTaskRunner, routeTransport, runnerAssignment, runnerForProvider, sanitizeSlug, savePrdMarkdown, saveSession, saveState, sessionDataDir, sessionRuntimeSettings, stateExists, stripModelPrefix, summarizeOutput, supportsTaskMode, taskOpsRejectedPrompt, taskQuerySignature, textHasTaskQuery, tmuxSessionName, tmuxSocketName, tmuxWindowName, tokenSubprotocols, tokensMatch, truncatedPlanReEmitPrompt, wellKnownBinDirs, withPath, writePrivateFile };