@poncho-ai/harness 0.40.1 → 0.42.0

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @poncho-ai/harness@0.40.1 build /home/runner/work/poncho-ai/poncho-ai/packages/harness
+> @poncho-ai/harness@0.42.0 build /home/runner/work/poncho-ai/poncho-ai/packages/harness
 > node scripts/embed-docs.js && tsup src/index.ts --format esm --dts
 
 [embed-docs] Generated poncho-docs.ts with 4 topics
@@ -8,9 +8,9 @@
 CLI tsup v8.5.1
 CLI Target: es2022
 ESM Build start
-ESM dist/index.js            489.88 KB
+ESM dist/index.js            504.78 KB
 ESM dist/isolate-VY35DGLM.js 49.43 KB
-ESM ⚡️ Build success in 205ms
+ESM ⚡️ Build success in 228ms
 DTS Build start
-DTS ⚡️ Build success in 7664ms
-DTS dist/index.d.ts 75.12 KB
+DTS ⚡️ Build success in 7856ms
+DTS dist/index.d.ts 79.11 KB

package/CHANGELOG.md

@@ -1,5 +1,142 @@
 # @poncho-ai/harness
 
+## 0.42.0
+
+### Minor Changes
+
+- [`39793b0`](https://github.com/cesr/poncho-ai/commit/39793b0ab11ed26f140af6fc9c0cd3e1b1c83fec) Thanks [@cesr](https://github.com/cesr)! - harness: extract `runConversationTurn` helper; refactor CLI to use it
+
+  Lifts the inline turn lifecycle from the CLI's
+  `POST /api/conversations/:id/messages` handler (~280 lines of orchestration)
+  into a new public helper at `@poncho-ai/harness`.
+
+  The helper handles the full conversation lifecycle for a primary chat
+  turn: load the conversation with archive, resolve canonical history,
+  upload files via the harness's upload store, build stable user/assistant
+  ids, persist the user message immediately, drive `executeConversationTurn`,
+  periodically persist the in-flight assistant draft on `step:completed`
+  and `tool:approval:required`, persist on `tool:approval:checkpoint` and
+  `run:completed` continuation, rebuild history on `compaction:completed`,
+  apply turn metadata on success, and persist partial state on
+  cancel/error.
+
+  Caller responsibilities (auth, active-run dedup, streaming, continuation
+  HTTP self-fetch, title inference) stay outside the helper — passed in
+  via opts or handled around the call. `opts.onEvent` is invoked for every
+  `AgentEvent` for downstream forwarding (SSE, WebSocket, telemetry, etc.).
+
+  The CLI's handler now delegates to `runConversationTurn` (drops from
+  ~430 to ~150 lines). Consumers like PonchOS can call the same helper
+  to ship the _exact_ same conversation lifecycle without duplicating
+  the orchestration.
+
+  Public API additions:
+  - `runConversationTurn(opts): Promise<RunConversationTurnResult>`
+  - `RunConversationTurnOpts`
+  - `RunConversationTurnResult`
+
+  No behavior changes. The helper is a verbatim extraction of the CLI's
+  prior inline implementation.
+
+### Patch Changes
+
+- [`111d24e`](https://github.com/cesr/poncho-ai/commit/111d24efaab054ef7543c396085f8f4d41e7976a) Thanks [@cesr](https://github.com/cesr)! - cli: include VFS skills in the chat input slash command menu
+
+  The `/api/slash-commands` endpoint was returning only repo-loaded skills,
+  so tenant-authored skills stored in the VFS (`/skills/<name>/SKILL.md`)
+  never appeared in the `/` autocomplete bar even though the agent could
+  already see and run them at conversation time.
+
+  The endpoint now resolves skills per-tenant via a new
+  `harness.listSkillsForTenant(tenantId)` and applies the same repo-wins
+  collision semantics used elsewhere in the harness.
+
+## 0.41.0
+
+### Minor Changes
+
+- [#110](https://github.com/cesr/poncho-ai/pull/110) [`7d57a88`](https://github.com/cesr/poncho-ai/commit/7d57a88e55a49ec04de3dbd415b2440bb727e31f) Thanks [@cesr](https://github.com/cesr)! - harness: allow programmatic agent + storage injection (no AGENT.md required)
+
+  `HarnessOptions` gains two optional fields that let callers construct a
+  `Harness` without an `AGENT.md` on disk and without the
+  `ensureAgentIdentity` filesystem dance:
+  - `agentDefinition?: string | ParsedAgent` — raw markdown or a pre-parsed
+    agent. When provided, `initialize()` skips the `AGENT.md` read.
+  - `storageEngine?: StorageEngine` — pre-constructed engine; required
+    whenever `agentDefinition` is provided. The engine's `agentId` (now a
+    public readonly field on the `StorageEngine` interface) becomes the
+    source of truth for partitioning, and is mirrored onto
+    `parsedAgent.frontmatter.id` so existing downstream readers continue
+    to resolve correctly.
+
+  When neither field is provided, behaviour is unchanged: the harness
+  reads `AGENT.md` from `workingDir`, calls `ensureAgentIdentity`, and
+  constructs the `StorageEngine` internally.
+
+  `refreshAgentIfChanged()` short-circuits when an agent definition was
+  injected — callers who update an agent re-instantiate the harness
+  rather than relying on disk file watching.
+
+  This is the first of a small set of changes that lets `@poncho-ai/harness`
+  be embedded as a library by consumer SaaS apps where each user has
+  their own per-tenant agent state in a database, no filesystem layout.
+
+- [#111](https://github.com/cesr/poncho-ai/pull/111) [`ac18616`](https://github.com/cesr/poncho-ai/commit/ac18616b864189c91d0957c72c537933497505f4) Thanks [@cesr](https://github.com/cesr)! - harness: allow programmatic `PonchoConfig` injection
+
+  `HarnessOptions` gains an optional `config?: PonchoConfig` field. When
+  provided, `initialize()` skips `loadPonchoConfig` (which imports
+  `poncho.config.js` from `workingDir`) and uses the supplied object
+  directly. Downstream resolvers (`resolveMemoryConfig`,
+  `resolveStateConfig`, etc.) run as today, so any validation/normalization
+  they perform applies to injected configs identically.
+
+  Behaviour is unchanged when the field is absent: the disk loader runs
+  as before.
+
+  This is part of a small series of changes that enables
+  `@poncho-ai/harness` to be embedded as a library by a consumer SaaS
+  where each user's agent configuration comes from a database row, not a
+  `poncho.config.js` on disk.
+
+- [#112](https://github.com/cesr/poncho-ai/pull/112) [`c22416b`](https://github.com/cesr/poncho-ai/commit/c22416b3d4c4557277aeabf53e70877be6436e85) Thanks [@cesr](https://github.com/cesr)! - harness: cache MCP clients per `(serverName, tenantId)` instead of rebuilding per call
+
+  When a tenant resolves a different bearer token than the host's
+  `process.env` default for an MCP server, the per-call handler used to
+  construct a brand-new `StreamableHttpMcpRpcClient` on every tool call.
+  For builders this rarely triggered. For consumer/SaaS deployments where
+  **every** call resolves a different per-user token, every tool call
+  forced a fresh `initialize` round-trip — no session reuse, high
+  latency, and a behaviour the recently-added 404 session-retry can't
+  help with because there was nothing to retry.
+
+  `LocalMcpBridge` now keeps a `Map<key, { client, token, lastUsed }>`
+  keyed by `(serverName, tenantId)`. Lookups reuse the cached client when
+  the token is unchanged and the entry is within the configured idle TTL
+  (default 15 minutes). On token rotation or TTL expiry the entry is
+  evicted lazily and rebuilt. `stopLocalServers()` closes all cached
+  tenant clients alongside the server-default ones.
+
+  The TTL is configurable via a constructor option (`tenantClientTtlMs`)
+  for tests and tuning.
+
+### Patch Changes
+
+- [#109](https://github.com/cesr/poncho-ai/pull/109) [`4b5d974`](https://github.com/cesr/poncho-ai/commit/4b5d974345733ac9e68f36201dff7e7d8a8f0327) Thanks [@cesr](https://github.com/cesr)! - harness: re-initialize MCP session on 404 instead of staying wedged
+
+  Streamable-HTTP MCP clients with session state (e.g. Arcade's gateway
+  for Gmail / Google Calendar) issue an `Mcp-Session-Id` on initialize
+  and expire it after some idle window. The bridge cached `sessionId`
+  and `initialized` in process memory and never reset them, so once the
+  server returned 404 for a stale session every subsequent tool call
+  also 404'd until the host process restarted. Long-lived deployments
+  (e.g. Railway) hit this; serverless platforms masked it because each
+  invocation re-initialized.
+
+  The client now treats `404` with a stored `sessionId` as a session
+  expiry signal: it clears the session, re-runs `initialize`, and
+  retries the request once. A 404 from initialize itself (no session
+  yet) is still treated as a hard endpoint failure with no retry.
+
 ## 0.40.1
 
 ### Patch Changes

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { LanguageModel } from 'ai';
 import * as _poncho_ai_sdk from '@poncho-ai/sdk';
-import { Message, ToolContext, ToolDefinition, JsonSchema, RunResult, AgentFailure, RunInput, AgentEvent } from '@poncho-ai/sdk';
+import { Message, ToolContext, ToolDefinition, JsonSchema, RunResult, AgentFailure, RunInput, AgentEvent, FileInput } from '@poncho-ai/sdk';
 export { ToolDefinition, defineTool } from '@poncho-ai/sdk';
 import { z } from 'zod';
 import { IFileSystem, BufferEncoding, FsStat, FileContent, MkdirOptions, RmOptions, CpOptions, Bash } from 'just-bash';
@@ -370,12 +370,26 @@ declare class LocalMcpBridge {
     private readonly unavailableServers;
     private readonly authFailedServers;
     private envResolver?;
+    /**
+     * Per-tenant MCP client cache. For consumer/SaaS deployments where every
+     * call resolves a different bearer token, building a fresh
+     * `StreamableHttpMcpRpcClient` per call would force a fresh `initialize`
+     * round-trip every time. We keep one client per `(serverName, tenantId)`
+     * with TTL-based idle eviction; on token rotation we evict the entry
+     * lazily and rebuild.
+     */
+    private readonly tenantClients;
+    /** Test/observability hook: bumped every time a new tenant client is constructed. */
+    tenantClientConstructions: number;
+    private readonly tenantClientTtlMs;
     /**
      * Set a resolver for per-tenant env vars (e.g. MCP auth tokens).
      * Called by the harness after creating the secrets store.
      */
     setEnvResolver(resolver: (tenantId: string | undefined, envName: string) => Promise<string | undefined>): void;
-    constructor(config: McpConfig | undefined);
+    constructor(config: McpConfig | undefined, options?: {
+        tenantClientTtlMs?: number;
+    });
     private getServerName;
     private log;
     /** Set of servers where discovery was deferred (no default token, has env resolver). */
@@ -389,6 +403,7 @@ declare class LocalMcpBridge {
     private tryDeferredDiscovery;
     startLocalServers(): Promise<void>;
     stopLocalServers(): Promise<void>;
+    private getOrCreateTenantClient;
     listServers(): RemoteMcpServerConfig[];
     listRemoteServers(): RemoteMcpServerConfig[];
     checkRemoteConnectivity(): Promise<Array<{
@@ -806,6 +821,8 @@ interface VfsDirEntry {
     type: "file" | "directory" | "symlink";
 }
 interface StorageEngine {
+    /** Partition key: every read/write is scoped to this agent id. */
+    readonly agentId: string;
     /** Run migrations and prepare the storage backend. */
     initialize(): Promise<void>;
     /** Gracefully release resources. */
@@ -1007,6 +1024,27 @@ interface HarnessOptions {
     toolDefinitions?: ToolDefinition[];
     modelProvider?: ModelProviderFactory;
     uploadStore?: UploadStore;
+    /**
+     * Inject the agent definition directly instead of reading AGENT.md from
+     * `workingDir`. Pass raw markdown (string) or a pre-parsed `ParsedAgent`.
+     * When provided, `storageEngine` is also required — the engine's
+     * `agentId` becomes the source of truth for partitioning, and the
+     * filesystem identity dance (`ensureAgentIdentity`) is skipped.
+     */
+    agentDefinition?: string | ParsedAgent;
+    /**
+     * Pre-constructed storage engine. When provided, the harness will not
+     * create one internally. The engine's `agentId` is used wherever the
+     * harness today reads `parsedAgent.frontmatter.id`.
+     */
+    storageEngine?: StorageEngine;
+    /**
+     * Inject a `PonchoConfig` object directly instead of importing
+     * `poncho.config.js` from `workingDir`. When provided, the disk-based
+     * loader is skipped. Downstream resolvers (`resolveMemoryConfig`,
+     * `resolveStateConfig`, etc.) run as today regardless of source.
+     */
+    config?: PonchoConfig;
 }
 interface HarnessRunOutput {
     runId: string;
@@ -1037,6 +1075,7 @@ declare class AgentHarness {
     reminderStore?: ReminderStore;
     secretsStore?: SecretsStore;
     private loadedConfig?;
+    private readonly injectedConfig?;
     private loadedSkills;
     private skillFingerprint;
     private lastSkillRefreshAt;
@@ -1051,6 +1090,8 @@ declare class AgentHarness {
     private _browserMod?;
     private parsedAgent?;
     private agentFileFingerprint;
+    private injectedAgentDefinition?;
+    private injectedStorageEngine;
     private mcpBridge?;
     private subagentManager?;
     private readonly archivedToolResultsByConversation;
@@ -1145,6 +1186,10 @@ declare class AgentHarness {
         name: string;
         description: string;
     }>;
+    listSkillsForTenant(tenantId: string | undefined | null): Promise<Array<{
+        name: string;
+        description: string;
+    }>>;
     /**
      * Wraps the run() generator with an OTel root span (invoke_agent) so all
      * child spans (LLM calls via AI SDK, tool execution) group under one trace.
@@ -1279,7 +1324,7 @@ declare class TelemetryEmitter {
 }
 
 declare class InMemoryEngine implements StorageEngine {
-    private readonly agentId;
+    readonly agentId: string;
     private convs;
     private mem;
     private todoData;
@@ -1394,7 +1439,7 @@ declare class ConversationEgressMeter {
 }
 declare abstract class SqlStorageEngine implements StorageEngine {
     protected readonly dialect: Dialect;
-    protected readonly agentId: string;
+    readonly agentId: string;
     protected abstract readonly executor: QueryExecutor;
     protected readonly egressMeter: ConversationEgressMeter;
     constructor(dialect: Dialect, agentId: string);
@@ -1838,4 +1883,46 @@ declare class AgentOrchestrator {
     recoverStaleSubagents(): Promise<void>;
 }
 
-export { type ActiveConversationRun, type ActiveSubagentRun, type AgentFrontmatter, AgentHarness, type AgentIdentity, type AgentLimitsConfig, type AgentModelConfig, AgentOrchestrator, type ApprovalEventItem, type ArchivedToolResult$1 as ArchivedToolResult, type BashConfig, BashEnvironmentManager, type BashExecutionLimits, type BuiltInToolToggles, CALLBACK_LOCK_STALE_MS, type CompactMessagesOptions, type CompactResult, type CompactionConfig, type ContinuationHooks, type Conversation, type ConversationCreateInit, type ConversationState, type ConversationStatusSnapshot, type ConversationStore, type ConversationSummary, type CreateSkillToolsOptions, type CronJobConfig, type EventSink, type ExecuteTurnResult, type HarnessOptions, type HarnessRunOutput, type HistorySource, InMemoryConversationStore, InMemoryEngine, InMemoryStateStore, type IsolateBinding, type IsolateConfig, LocalMcpBridge, LocalUploadStore, MAX_CONCURRENT_SUBAGENTS, MAX_CONTINUATION_COUNT, MAX_SUBAGENT_CALLBACK_COUNT, MAX_SUBAGENT_NESTING, type MainMemory, type McpConfig, type MemoryConfig, type MemoryStore, type MessagingChannelConfig, type ModelProviderFactory, type NetworkConfig, OPENAI_CODEX_CLIENT_ID, type OpenAICodexAuthConfig, type OpenAICodexDeviceAuthRequest, type OpenAICodexSession, type OrchestratorHooks, type OrchestratorOptions, type OtlpConfig, type OtlpOption, PONCHO_UPLOAD_SCHEME, type ParsedAgent, type PendingSubagentApproval, type PendingSubagentResult, type PendingToolCall, type PonchoConfig, PonchoFsAdapter, PostgresEngine, type ProviderConfig, type Recurrence, type RecurrenceType, type Reminder, type ReminderCreateInput, type ReminderStatus, type ReminderStore, type RemoteMcpServerConfig, type RunOutcome, type RunRequest, type RuntimeRenderContext, S3UploadStore, STALE_SUBAGENT_THRESHOLD_MS, STORAGE_SCHEMA_VERSION, type SecretsStore, type SkillContextEntry, type SkillMetadata, type SkillSource, SqliteEngine, type StateConfig, type StateProviderName, type StateStore, type StorageConfig, type StorageEngine, type StorageFactoryOptions, type StorageProvider, type StoredApproval, type SubagentManager, type SubagentResult, type SubagentSpawnResult, type SubagentSummary, TOOL_RESULT_ARCHIVE_PARAM, type TelemetryConfig, TelemetryEmitter, type TenantTokenPayload, type ToolAccess, type ToolCall, ToolDispatcher, type ToolExecutionResult, type TurnDraftState, type TurnResultMetadata, type TurnSection, type UploadStore, type UploadsConfig, VFS_SCHEME, VercelBlobUploadStore, type VfsDirEntry, type VfsStat, applyTurnMetadata, buildAgentDirectoryName, buildApprovalCheckpoints, buildAssistantMetadata, buildSkillContextWindow, buildToolCompletedText, cloneSections, compactMessages, completeOpenAICodexDeviceAuth, computeNextOccurrence, createBashTool, createConversationStore, createConversationStoreFromEngine, createDefaultTools, createDeleteDirectoryTool, createDeleteTool, createEditTool, createMemoryStore, createMemoryStoreFromEngine, createMemoryTools, createModelProvider, createReminderStore, createReminderStoreFromEngine, createReminderTools, createSearchTools, createSecretsStore, createSkillTools, createStateStore, createStorageEngine, createSubagentTools, createTodoStoreFromEngine, createTurnDraftState, createUploadStore, createWriteTool, deleteOpenAICodexSession, deriveUploadKey, ensureAgentIdentity, estimateTokens, estimateTotalTokens, executeConversationTurn, findSafeSplitPoint, flushTurnDraft, generateAgentId, getAgentStoreDirectory, getModelContextWindow, getOpenAICodexAccessToken, getOpenAICodexAuthFilePath, getOpenAICodexRequiredScopes, getPonchoStoreRoot, isMessageArray, jsonSchemaToZod, loadCanonicalHistory, loadPonchoConfig, loadRunHistory, loadSkillContext, loadSkillInstructions, loadSkillMetadata, loadVfsSkillMetadata, mergeSkills, normalizeApprovalCheckpoint, normalizeOtlp, normalizeScriptPolicyPath, parseAgentFile, parseAgentMarkdown, parseSkillFrontmatter, ponchoDocsTool, readOpenAICodexSession, readSkillResource, recordStandardTurnEvent, renderAgentPrompt, resolveAgentIdentity, resolveCompactionConfig, resolveEnv, resolveMemoryConfig, resolveRunRequest, resolveSkillDirs, resolveStateConfig, slugifyStorageComponent, startOpenAICodexDeviceAuth, verifyTenantToken, withToolResultArchiveParam, writeOpenAICodexSession };
+interface RunConversationTurnOpts {
+    /** Initialised harness instance. */
+    harness: AgentHarness;
+    /** Conversation store backing the turn (typically `engine.conversations` from a StorageEngine). */
+    conversationStore: ConversationStore;
+    conversationId: string;
+    /** The user's new message text. Required (use `""` if you only want to attach files). */
+    task: string;
+    /**
+     * Optional file attachments (FileInput.data is base64 / data URI / https URL).
+     * Files are uploaded via `harness.uploadStore` first so the persisted user
+     * message references stable URLs instead of fat base64 blobs.
+     */
+    files?: FileInput[];
+    /**
+     * Extra parameters merged into runInput.parameters. Use this for recall
+     * corpus, archive lookup keys, messaging metadata, etc. Do NOT include
+     * `__activeConversationId`, `__ownerId`, or the tool-result-archive — the
+     * helper sets those itself.
+     */
+    parameters?: Record<string, unknown>;
+    abortSignal?: AbortSignal;
+    tenantId?: string | null;
+    /** Per-event hook — called for every AgentEvent yielded by the run, in order. */
+    onEvent?: (event: AgentEvent) => void | Promise<void>;
+}
+interface RunConversationTurnResult {
+    /** runId of the most recent run started during this turn. */
+    latestRunId: string;
+    /** True if the run was cancelled (via abortSignal or run:cancelled event). */
+    cancelled: boolean;
+    /** True if the run errored. The error has been emitted via onEvent as run:error. */
+    errored: boolean;
+    /** True if the run requested a continuation. Caller is responsible for triggering the continuation. */
+    continuation: boolean;
+    /** True if the run paused at a tool-approval checkpoint. */
+    checkpointed: boolean;
+    contextTokens: number;
+    contextWindow: number;
+}
+declare const runConversationTurn: (opts: RunConversationTurnOpts) => Promise<RunConversationTurnResult>;
+
+export { type ActiveConversationRun, type ActiveSubagentRun, type AgentFrontmatter, AgentHarness, type AgentIdentity, type AgentLimitsConfig, type AgentModelConfig, AgentOrchestrator, type ApprovalEventItem, type ArchivedToolResult$1 as ArchivedToolResult, type BashConfig, BashEnvironmentManager, type BashExecutionLimits, type BuiltInToolToggles, CALLBACK_LOCK_STALE_MS, type CompactMessagesOptions, type CompactResult, type CompactionConfig, type ContinuationHooks, type Conversation, type ConversationCreateInit, type ConversationState, type ConversationStatusSnapshot, type ConversationStore, type ConversationSummary, type CreateSkillToolsOptions, type CronJobConfig, type EventSink, type ExecuteTurnResult, type HarnessOptions, type HarnessRunOutput, type HistorySource, InMemoryConversationStore, InMemoryEngine, InMemoryStateStore, type IsolateBinding, type IsolateConfig, LocalMcpBridge, LocalUploadStore, MAX_CONCURRENT_SUBAGENTS, MAX_CONTINUATION_COUNT, MAX_SUBAGENT_CALLBACK_COUNT, MAX_SUBAGENT_NESTING, type MainMemory, type McpConfig, type MemoryConfig, type MemoryStore, type MessagingChannelConfig, type ModelProviderFactory, type NetworkConfig, OPENAI_CODEX_CLIENT_ID, type OpenAICodexAuthConfig, type OpenAICodexDeviceAuthRequest, type OpenAICodexSession, type OrchestratorHooks, type OrchestratorOptions, type OtlpConfig, type OtlpOption, PONCHO_UPLOAD_SCHEME, type ParsedAgent, type PendingSubagentApproval, type PendingSubagentResult, type PendingToolCall, type PonchoConfig, PonchoFsAdapter, PostgresEngine, type ProviderConfig, type Recurrence, type RecurrenceType, type Reminder, type ReminderCreateInput, type ReminderStatus, type ReminderStore, type RemoteMcpServerConfig, type RunConversationTurnOpts, type RunConversationTurnResult, type RunOutcome, type RunRequest, type RuntimeRenderContext, S3UploadStore, STALE_SUBAGENT_THRESHOLD_MS, STORAGE_SCHEMA_VERSION, type SecretsStore, type SkillContextEntry, type SkillMetadata, type SkillSource, SqliteEngine, type StateConfig, type StateProviderName, type StateStore, type StorageConfig, type StorageEngine, type StorageFactoryOptions, type StorageProvider, type StoredApproval, type SubagentManager, type SubagentResult, type SubagentSpawnResult, type SubagentSummary, TOOL_RESULT_ARCHIVE_PARAM, type TelemetryConfig, TelemetryEmitter, type TenantTokenPayload, type ToolAccess, type ToolCall, ToolDispatcher, type ToolExecutionResult, type TurnDraftState, type TurnResultMetadata, type TurnSection, type UploadStore, type UploadsConfig, VFS_SCHEME, VercelBlobUploadStore, type VfsDirEntry, type VfsStat, applyTurnMetadata, buildAgentDirectoryName, buildApprovalCheckpoints, buildAssistantMetadata, buildSkillContextWindow, buildToolCompletedText, cloneSections, compactMessages, completeOpenAICodexDeviceAuth, computeNextOccurrence, createBashTool, createConversationStore, createConversationStoreFromEngine, createDefaultTools, createDeleteDirectoryTool, createDeleteTool, createEditTool, createMemoryStore, createMemoryStoreFromEngine, createMemoryTools, createModelProvider, createReminderStore, createReminderStoreFromEngine, createReminderTools, createSearchTools, createSecretsStore, createSkillTools, createStateStore, createStorageEngine, createSubagentTools, createTodoStoreFromEngine, createTurnDraftState, createUploadStore, createWriteTool, deleteOpenAICodexSession, deriveUploadKey, ensureAgentIdentity, estimateTokens, estimateTotalTokens, executeConversationTurn, findSafeSplitPoint, flushTurnDraft, generateAgentId, getAgentStoreDirectory, getModelContextWindow, getOpenAICodexAccessToken, getOpenAICodexAuthFilePath, getOpenAICodexRequiredScopes, getPonchoStoreRoot, isMessageArray, jsonSchemaToZod, loadCanonicalHistory, loadPonchoConfig, loadRunHistory, loadSkillContext, loadSkillInstructions, loadSkillMetadata, loadVfsSkillMetadata, mergeSkills, normalizeApprovalCheckpoint, normalizeOtlp, normalizeScriptPolicyPath, parseAgentFile, parseAgentMarkdown, parseSkillFrontmatter, ponchoDocsTool, readOpenAICodexSession, readSkillResource, recordStandardTurnEvent, renderAgentPrompt, resolveAgentIdentity, resolveCompactionConfig, resolveEnv, resolveMemoryConfig, resolveRunRequest, resolveSkillDirs, resolveStateConfig, runConversationTurn, slugifyStorageComponent, startOpenAICodexDeviceAuth, verifyTenantToken, withToolResultArchiveParam, writeOpenAICodexSession };