@poncho-ai/harness 0.43.1 → 0.45.0

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @poncho-ai/harness@0.43.1 build /home/runner/work/poncho-ai/poncho-ai/packages/harness
+> @poncho-ai/harness@0.45.0 build /home/runner/work/poncho-ai/poncho-ai/packages/harness
 > node scripts/embed-docs.js && tsup src/index.ts --format esm --dts
 
 [embed-docs] Generated poncho-docs.ts with 4 topics
@@ -8,9 +8,9 @@
 CLI tsup v8.5.1
 CLI Target: es2022
 ESM Build start
-ESM dist/index.js            506.50 KB
 ESM dist/isolate-VY35DGLM.js 49.43 KB
-ESM ⚡️ Build success in 164ms
+ESM dist/index.js            524.35 KB
+ESM ⚡️ Build success in 230ms
 DTS Build start
-DTS ⚡️ Build success in 6912ms
-DTS dist/index.d.ts 80.85 KB
+DTS ⚡️ Build success in 7575ms
+DTS dist/index.d.ts 85.07 KB

package/CHANGELOG.md

@@ -1,5 +1,123 @@
 # @poncho-ai/harness
 
+## 0.45.0
+
+### Minor Changes
+
+- [`1adaae2`](https://github.com/cesr/poncho-ai/commit/1adaae2d4cc55800f01d602f2a7d6ecc65031443) Thanks [@cesr](https://github.com/cesr)! - harness: device-dispatch mode for tools that execute on a connected client
+
+  Tools can now be marked `dispatch: "device"` on `loadedConfig.tools`. When
+  the model calls such a tool the dispatcher pauses the run, emits a new
+  `tool:device:required` event, and checkpoints with the new
+  `kind: "device"` discriminator on `pendingApprovals` — same plumbing as
+  the approval flow, different trigger and different resume payload.
+  Consumers (e.g. PonchOS for iOS device tools) drive the external
+  execution and feed the result back via `continueFromToolResult`.
+
+  Approval can be combined: `{access: "approval", dispatch: "device"}`
+  yields the approval card first, then on resume falls through to the
+  device-required event. The wire vocabulary for approvals
+  (`approvalId` etc.) is unchanged; the `pendingApprovals` column /
+  field name stays.
+
+  `ToolAccess` is broadened to accept both the legacy string `"approval"`
+  and the new `{access?, dispatch?}` object form. Existing configs keep
+  working unchanged.
+
+- [`6132601`](https://github.com/cesr/poncho-ai/commit/613260159cdd80fcc02d68aa58ad52d4465bcede) Thanks [@cesr](https://github.com/cesr)! - harness: add `read_subagent` tool for fetching subagent transcripts
+
+  Parent agents can now read a spawned subagent's conversation directly
+  instead of using `message_subagent` to ask it to repeat its work. The
+  new tool accepts a `mode` parameter — `"final"` (last assistant message,
+  default), `"assistant"` (assistant messages only), or `"full"` (every
+  message including tool calls and results) — plus optional `since_index`
+  and `max_messages` for paging long transcripts.
+
+  Access is restricted to direct children: a parent can only read
+  transcripts of subagents whose `parentConversationId` matches its own
+  conversation. The `SubagentManager` interface gains a corresponding
+  `getTranscript` method.
+
+### Patch Changes
+
+- Updated dependencies [[`1adaae2`](https://github.com/cesr/poncho-ai/commit/1adaae2d4cc55800f01d602f2a7d6ecc65031443)]:
+  - @poncho-ai/sdk@1.11.0
+
+## 0.44.0
+
+### Minor Changes
+
+- [`e6f5c14`](https://github.com/cesr/poncho-ai/commit/e6f5c142a368389b3eb62e80731612048d9198b5) Thanks [@cesr](https://github.com/cesr)! - VFS adapter now supports read-only virtual mounts. `HarnessOptions.virtualMounts` accepts entries like `{ prefix: "/system/", source: "/path/on/disk" }`; reads under the prefix are served from the local filesystem source directory, writes are rejected with `EROFS`. Used by platforms (e.g. PonchOS) to expose deployment-shipped defaults without persisting them in each tenant's VFS — improvements ship via normal deploys and tenant data stays portable. Empty by default; CLI/dev workflows are unaffected.
+
+### Patch Changes
+
+- [`b171c0e`](https://github.com/cesr/poncho-ai/commit/b171c0e9c4cdc149e8282611f7333519b5e04e38) Thanks [@cesr](https://github.com/cesr)! - harness: properly decode `FileInput.data` per its documented contract
+
+  `FileInput.data` is documented in `@poncho-ai/sdk` as accepting raw
+  base64, `data:<mime>;base64,<…>` URIs, or `https?://` URLs. The
+  runtime used to call `Buffer.from(data, "base64")` unconditionally,
+  which silently produced garbage bytes for data URIs (Node's base64
+  decoder ignores invalid chars like `:` `;` `,` rather than throwing,
+  so the file's magic bytes were destroyed). Anthropic responded with
+  "Could not process image" on every turn that attached an image as a
+  data URI — including PonchOS's `resolveAttachment`, which built data
+  URIs by following the documented format.
+
+  Introduce `decodeFileInputData(data)` in `upload-store.ts` that
+  detects the three formats and decodes accordingly, and call it from
+  `AgentHarness.run` and `runConversationTurn` instead of the inline
+  `Buffer.from(_, "base64")`. Pinned by a new test that exercises raw
+  base64, simple data URIs, and data URIs with mime parameters.
+
+  Callers that have been passing raw base64 all along see no behavior
+  change.
+
+- [`4d322f7`](https://github.com/cesr/poncho-ai/commit/4d322f79900f449d1f7783f697eef0351cd45f0a) Thanks [@cesr](https://github.com/cesr)! - fix(harness): reminders.scheduledAt no longer rounds on Postgres
+
+  Two related Postgres-only bugs in reminder storage:
+  1. **Schema precision**: the `reminders.scheduled_at` column was declared
+     `REAL` so SQLite would get its 8-byte double. Postgres maps `REAL` to
+     `float4` (4 bytes, ~7 digit precision), which silently rounds
+     millisecond epoch values (13 digits). Every reminder write+read on
+     Postgres returned a different value than it stored — and recurring
+     reminders would fire at wrong times. New migration v7 alters the
+     column to `BIGINT` (Postgres only; SQLite's `REAL` is already
+     double-precision and stays).
+  2. **Wire-format coercion**: `rowToReminder` declared `scheduledAt: row.scheduled_at as number`
+     but didn't actually coerce. With BIGINT, postgres-js returns the
+     value as a string (deliberate, to avoid JS-side precision loss).
+     The `as` cast is type-only; the runtime value stayed a string,
+     making strict equality and arithmetic fail. Now coerces with
+     `Number(...)`, which is safe — ms epochs max at ~10^16 in year 2286,
+     well under `Number.MAX_SAFE_INTEGER` (2^53).
+
+  Same coercion applied to `occurrenceCount` for consistency.
+
+  Discovered while wiring `/me/reminders` in PonchOS — every PATCH-back
+  returned a different scheduledAt than was sent.
+
+- [`1499eb4`](https://github.com/cesr/poncho-ai/commit/1499eb4f63cc480fb42ec4e5568e023b84e54b5a) Thanks [@cesr](https://github.com/cesr)! - harness: discover VFS skills written without running bash
+
+  Per-tenant VFS skill discovery was tied to the storage engine's
+  in-memory path cache, which was only ever populated by
+  `bash-manager.refreshPathCache` before a bash invocation. Chat-only
+  flows (PonchOS's iOS Files browser, the `write_file` tool, any agent
+  that never shells out) left the cache empty, the patched `writeFile`'s
+  incremental update was a silent no-op (it only mutates when the cache
+  is already initialized for that tenant), and the skill fingerprint
+  stuck at `""` for the lifetime of the harness instance — so any
+  SKILL.md authored after `getSkillsForTenant` first ran for a tenant
+  was invisible from that point forward.
+
+  Refresh the engine's path cache inside `getSkillsForTenant` before
+  computing the fingerprint. One extra SELECT-paths round-trip per
+  turn (skills are checked once per `buildSystemPrompt`); correctness
+  for the increasingly common no-bash deployments wins easily over the
+  saved query.
+
+  Surfaced by PonchOS (no bash, iOS Files + write_file is the only way
+  SKILL.md ends up in `/skills/`).
+
 ## 0.43.1
 
 ### Patch Changes

package/dist/index.d.ts

@@ -2,8 +2,8 @@ import { LanguageModel } from 'ai';
 import * as _poncho_ai_sdk from '@poncho-ai/sdk';
 import { Message, ToolContext, ToolDefinition, JsonSchema, RunResult, AgentFailure, RunInput, AgentEvent, FileInput } from '@poncho-ai/sdk';
 export { ToolDefinition, defineTool } from '@poncho-ai/sdk';
-import { z } from 'zod';
 import { IFileSystem, BufferEncoding, FsStat, FileContent, MkdirOptions, RmOptions, CpOptions, Bash } from 'just-bash';
+import { z } from 'zod';
 
 interface AgentModelConfig {
     provider: string;
@@ -167,6 +167,15 @@ interface Conversation {
             input: Record<string, unknown>;
         }>;
         decision?: "approved" | "denied";
+        /**
+         * Checkpoint kind discriminator.
+         * - "approval" (default for legacy rows): user approve/deny gate.
+         * - "device":   tool executes on a connected client device (e.g. iOS); the
+         *               consumer of the harness POSTs a tool result back to resume.
+         * Treat `undefined` as "approval" for backward compatibility with rows
+         * persisted before this field existed.
+         */
+        kind?: "approval" | "device";
     }>;
     runStatus?: "running" | "idle";
     ownerId: string;
@@ -450,7 +459,20 @@ interface UploadsConfig {
     region?: string;
     endpoint?: string;
 }
-type ToolAccess = boolean | "approval";
+type ToolAccess = boolean | "approval" | {
+    access?: "approval";
+    dispatch?: "device";
+};
+/**
+ * Normalize any ToolAccess value into a {access, dispatch} struct.
+ * `boolean` collapses to no special handling — the boolean only encodes
+ * enable/disable, not dispatch — callers gate behavior on `dispatch` and
+ * `access`.
+ */
+declare const normalizeToolAccess: (value: ToolAccess | undefined) => {
+    access?: "approval";
+    dispatch?: "device";
+};
 /** @deprecated Use flat tool keys on `tools` instead. Kept for backward compat. */
 type BuiltInToolToggles = {
     list_directory?: boolean;
@@ -738,6 +760,15 @@ interface UploadStore {
 }
 /** Derive a content-addressed key from file data. */
 declare const deriveUploadKey: (data: Buffer, mediaType: string) => string;
+/**
+ * Decode the `FileInput.data` field per its documented contract: it may be a
+ * raw base64 string, a `data:<mime>;base64,<…>` URI, or an `https?://` URL.
+ * Returns the decoded bytes. Older versions of the harness called
+ * `Buffer.from(data, "base64")` unconditionally; that silently produced
+ * garbage bytes for data URIs (the `:` / `;` / `,` in the prefix are not
+ * valid base64 chars but Node's decoder ignores them rather than throwing).
+ */
+declare const decodeFileInputData: (data: string) => Promise<Buffer>;
 declare class LocalUploadStore implements UploadStore {
     private readonly uploadsDir;
     constructor(workingDir: string);
@@ -935,6 +966,78 @@ interface StorageEngine {
     };
 }
 
+/**
+ * Read-only virtual mount mapping a VFS path prefix to a local filesystem
+ * directory. All read operations under the prefix resolve via local FS;
+ * writes throw. The prefix is normalised internally to end with "/".
+ */
+interface VirtualMount {
+    /** VFS prefix, e.g. "/system/". Leading slash required; trailing slash
+     *  optional (normalised). Must be a single non-root segment in practice
+     *  but no validation is enforced here. */
+    prefix: string;
+    /** Absolute local FS path to serve from, e.g. "/srv/poncho/system". */
+    source: string;
+}
+declare class PonchoFsAdapter implements IFileSystem {
+    private engine;
+    private tenantId;
+    private limits;
+    private mounts;
+    constructor(engine: StorageEngine, tenantId: string, limits: {
+        maxFileSize: number;
+        maxTotalStorage: number;
+    }, mounts?: VirtualMount[]);
+    /** Find which mount, if any, a normalised VFS path falls under.
+     *  Returns the relative path within the mount's source dir (empty string
+     *  when the path is exactly the mount root). */
+    private routeToMount;
+    /** Treat `np` as a directory and return mount-root segments that should be
+     *  listed as virtual subdirectories. E.g. with mount "/system/", reading
+     *  "/" returns ["system"]; reading "/system" goes via routeToMount and
+     *  serves from local FS instead. */
+    private virtualChildrenAt;
+    private toLocal;
+    /** Build an FsStat from a node fs.Stats. */
+    private toFsStat;
+    /** Synthesise a directory stat for a virtual ancestor (e.g. "/system"
+     *  when "/system/jobs/" is mounted but "/system" itself isn't a real dir
+     *  on disk). Used so `ls /` and `stat /system` work without surprises. */
+    private syntheticDirStat;
+    readFile(path: string, _options?: {
+        encoding?: BufferEncoding | null;
+    } | BufferEncoding): Promise<string>;
+    readFileBuffer(path: string): Promise<Uint8Array>;
+    exists(path: string): Promise<boolean>;
+    stat(path: string): Promise<FsStat>;
+    readdir(path: string): Promise<string[]>;
+    readdirWithFileTypes(path: string): Promise<Array<{
+        name: string;
+        isFile: boolean;
+        isDirectory: boolean;
+        isSymbolicLink: boolean;
+    }>>;
+    writeFile(path: string, content: FileContent, _options?: {
+        encoding?: BufferEncoding;
+    } | BufferEncoding): Promise<void>;
+    appendFile(path: string, content: FileContent, _options?: {
+        encoding?: BufferEncoding;
+    } | BufferEncoding): Promise<void>;
+    mkdir(path: string, options?: MkdirOptions): Promise<void>;
+    rm(path: string, options?: RmOptions): Promise<void>;
+    cp(src: string, dest: string, options?: CpOptions): Promise<void>;
+    mv(src: string, dest: string): Promise<void>;
+    resolvePath(base: string, path: string): string;
+    realpath(path: string): Promise<string>;
+    getAllPaths(): string[];
+    chmod(path: string, mode: number): Promise<void>;
+    utimes(path: string, _atime: Date, mtime: Date): Promise<void>;
+    symlink(target: string, linkPath: string): Promise<void>;
+    link(existingPath: string, newPath: string): Promise<void>;
+    readlink(path: string): Promise<string>;
+    lstat(path: string): Promise<FsStat>;
+}
+
 interface SecretsStore {
     get(tenantId: string): Promise<Record<string, string>>;
     set(tenantId: string, key: string, value: string): Promise<void>;
@@ -1020,6 +1123,16 @@ interface SubagentSummary {
 interface SubagentSpawnResult {
     subagentId: string;
 }
+type SubagentTranscriptMode = "final" | "assistant" | "full";
+interface SubagentTranscript {
+    subagentId: string;
+    task: string;
+    status: string;
+    totalMessages: number;
+    startIndex: number;
+    messages: Message[];
+    truncated: boolean;
+}
 interface SubagentManager {
     spawn(opts: {
         task: string;
@@ -1030,6 +1143,13 @@ interface SubagentManager {
     sendMessage(subagentId: string, message: string): Promise<SubagentSpawnResult>;
     stop(subagentId: string): Promise<void>;
     list(parentConversationId: string): Promise<SubagentSummary[]>;
+    getTranscript(opts: {
+        subagentId: string;
+        parentConversationId: string;
+        mode: SubagentTranscriptMode;
+        sinceIndex?: number;
+        maxMessages?: number;
+    }): Promise<SubagentTranscript>;
 }
 
 interface ToolCall {
@@ -1082,6 +1202,15 @@ interface HarnessOptions {
      * `resolveStateConfig`, etc.) run as today regardless of source.
      */
     config?: PonchoConfig;
+    /**
+     * Read-only virtual mounts overlaid on the VFS. Each mount maps a VFS
+     * prefix (e.g. "/system/") to a local filesystem directory; reads under
+     * the prefix are served from local disk, writes are rejected. Used by
+     * platforms like PonchOS to expose deployment-shipped defaults (system
+     * jobs, system skills) without storing them in each tenant's VFS.
+     * Empty by default — no system mounts in the CLI / dev workflow.
+     */
+    virtualMounts?: VirtualMount[];
 }
 interface HarnessRunOutput {
     runId: string;
@@ -1136,7 +1265,11 @@ declare class AgentHarness {
     storageEngine?: StorageEngine;
     /** Bash environment manager (creates per-tenant bash instances). */
     private bashManager?;
+    /** Read-only virtual mounts overlaid on the VFS. Empty by default. */
+    private virtualMounts;
     private resolveToolAccess;
+    /** Returns the normalized {access, dispatch} mode for the tool. */
+    private resolveToolMode;
     private isToolEnabled;
     private registerIfMissing;
     /**
@@ -1602,48 +1735,6 @@ declare function createMemoryStoreFromEngine(engine: StorageEngine, tenantId?: s
 declare function createTodoStoreFromEngine(engine: StorageEngine): TodoStore;
 declare function createReminderStoreFromEngine(engine: StorageEngine): ReminderStore;
 
-declare class PonchoFsAdapter implements IFileSystem {
-    private engine;
-    private tenantId;
-    private limits;
-    constructor(engine: StorageEngine, tenantId: string, limits: {
-        maxFileSize: number;
-        maxTotalStorage: number;
-    });
-    readFile(path: string, _options?: {
-        encoding?: BufferEncoding | null;
-    } | BufferEncoding): Promise<string>;
-    readFileBuffer(path: string): Promise<Uint8Array>;
-    exists(path: string): Promise<boolean>;
-    stat(path: string): Promise<FsStat>;
-    readdir(path: string): Promise<string[]>;
-    readdirWithFileTypes(path: string): Promise<Array<{
-        name: string;
-        isFile: boolean;
-        isDirectory: boolean;
-        isSymbolicLink: boolean;
-    }>>;
-    writeFile(path: string, content: FileContent, _options?: {
-        encoding?: BufferEncoding;
-    } | BufferEncoding): Promise<void>;
-    appendFile(path: string, content: FileContent, _options?: {
-        encoding?: BufferEncoding;
-    } | BufferEncoding): Promise<void>;
-    mkdir(path: string, options?: MkdirOptions): Promise<void>;
-    rm(path: string, options?: RmOptions): Promise<void>;
-    cp(src: string, dest: string, options?: CpOptions): Promise<void>;
-    mv(src: string, dest: string): Promise<void>;
-    resolvePath(base: string, path: string): string;
-    realpath(path: string): Promise<string>;
-    getAllPaths(): string[];
-    chmod(path: string, mode: number): Promise<void>;
-    utimes(path: string, _atime: Date, mtime: Date): Promise<void>;
-    symlink(target: string, linkPath: string): Promise<void>;
-    link(existingPath: string, newPath: string): Promise<void>;
-    readlink(path: string): Promise<string>;
-    lstat(path: string): Promise<FsStat>;
-}
-
 declare class BashEnvironmentManager {
     private engine;
     private limits;
@@ -1651,10 +1742,11 @@ declare class BashEnvironmentManager {
     private filesystems;
     private readonly workingDir;
     private readonly bashOptions;
+    private readonly virtualMounts;
     constructor(engine: StorageEngine, limits: {
         maxFileSize: number;
         maxTotalStorage: number;
-    }, workingDir: string | null, bashConfig?: BashConfig, network?: NetworkConfig);
+    }, workingDir: string | null, bashConfig?: BashConfig, network?: NetworkConfig, virtualMounts?: VirtualMount[]);
     /** Return the combined IFileSystem (VFS + optional /project mount) for a tenant. */
     getFs(tenantId: string): IFileSystem;
     getOrCreate(tenantId: string): Bash;
@@ -1769,12 +1861,13 @@ declare const executeConversationTurn: ({ harness, runInput, events, initialCont
     onEvent?: (event: AgentEvent, draft: TurnDraftState) => void | Promise<void>;
 }) => Promise<ExecuteTurnResult>;
 declare const normalizeApprovalCheckpoint: (approval: StoredApproval, fallbackMessages: Message[]) => StoredApproval;
-declare const buildApprovalCheckpoints: ({ approvals, runId, checkpointMessages, baseMessageCount, pendingToolCalls, }: {
+declare const buildApprovalCheckpoints: ({ approvals, runId, checkpointMessages, baseMessageCount, pendingToolCalls, kind, }: {
     approvals: ApprovalEventItem[];
     runId: string;
     checkpointMessages: Message[];
     baseMessageCount: number;
     pendingToolCalls: PendingToolCall[];
+    kind?: "approval" | "device";
 }) => NonNullable<Conversation["pendingApprovals"]>;
 declare const applyTurnMetadata: (conv: Conversation, meta: TurnResultMetadata, opts?: {
     clearContinuation?: boolean;
@@ -1962,4 +2055,4 @@ interface RunConversationTurnResult {
 }
 declare const runConversationTurn: (opts: RunConversationTurnOpts) => Promise<RunConversationTurnResult>;
 
-export { type ActiveConversationRun, type ActiveSubagentRun, type AgentFrontmatter, AgentHarness, type AgentIdentity, type AgentLimitsConfig, type AgentModelConfig, AgentOrchestrator, type ApprovalEventItem, type ArchivedToolResult$1 as ArchivedToolResult, type BashConfig, BashEnvironmentManager, type BashExecutionLimits, type BuiltInToolToggles, CALLBACK_LOCK_STALE_MS, type CompactMessagesOptions, type CompactResult, type CompactionConfig, type ContinuationHooks, type Conversation, type ConversationCreateInit, type ConversationState, type ConversationStatusSnapshot, type ConversationStore, type ConversationSummary, type CreateSkillToolsOptions, type CronJobConfig, DEFAULT_AGENT_DESCRIPTION, DEFAULT_AGENT_NAME, DEFAULT_MAX_STEPS, DEFAULT_MODEL_NAME, DEFAULT_MODEL_PROVIDER, DEFAULT_TEMPERATURE, DEFAULT_TIMEOUT, type DefaultAgentDefinitionOptions, type EventSink, type ExecuteTurnResult, type HarnessOptions, type HarnessRunOutput, type HistorySource, InMemoryConversationStore, InMemoryEngine, InMemoryStateStore, type IsolateBinding, type IsolateConfig, LocalMcpBridge, LocalUploadStore, MAX_CONCURRENT_SUBAGENTS, MAX_CONTINUATION_COUNT, MAX_SUBAGENT_CALLBACK_COUNT, MAX_SUBAGENT_NESTING, type MainMemory, type McpConfig, type MemoryConfig, type MemoryStore, type MessagingChannelConfig, type ModelProviderFactory, type NetworkConfig, OPENAI_CODEX_CLIENT_ID, type OpenAICodexAuthConfig, type OpenAICodexDeviceAuthRequest, type OpenAICodexSession, type OrchestratorHooks, type OrchestratorOptions, type OtlpConfig, type OtlpOption, PONCHO_UPLOAD_SCHEME, type ParsedAgent, type PendingSubagentApproval, type PendingSubagentResult, type PendingToolCall, type PonchoConfig, PonchoFsAdapter, PostgresEngine, type ProviderConfig, type Recurrence, type RecurrenceType, type Reminder, type ReminderCreateInput, type ReminderStatus, type ReminderStore, type RemoteMcpServerConfig, type RunConversationTurnOpts, type RunConversationTurnResult, type RunOutcome, type RunRequest, type RuntimeRenderContext, S3UploadStore, STALE_SUBAGENT_THRESHOLD_MS, STORAGE_SCHEMA_VERSION, type SecretsStore, type SkillContextEntry, type SkillMetadata, type SkillSource, SqliteEngine, type StateConfig, type StateProviderName, type StateStore, type StorageConfig, type StorageEngine, type StorageFactoryOptions, type StorageProvider, type StoredApproval, type SubagentManager, type SubagentResult, type SubagentSpawnResult, type SubagentSummary, TOOL_RESULT_ARCHIVE_PARAM, type TelemetryConfig, TelemetryEmitter, type TenantTokenPayload, type ToolAccess, type ToolCall, ToolDispatcher, type ToolExecutionResult, type TurnDraftState, type TurnResultMetadata, type TurnSection, type UploadStore, type UploadsConfig, VFS_SCHEME, VercelBlobUploadStore, type VfsDirEntry, type VfsStat, applyTurnMetadata, buildAgentDirectoryName, buildApprovalCheckpoints, buildAssistantMetadata, buildSkillContextWindow, buildToolCompletedText, cloneSections, compactMessages, completeOpenAICodexDeviceAuth, computeNextOccurrence, createBashTool, createConversationStore, createConversationStoreFromEngine, createDefaultTools, createDeleteDirectoryTool, createDeleteTool, createEditTool, createMemoryStore, createMemoryStoreFromEngine, createMemoryTools, createModelProvider, createReminderStore, createReminderStoreFromEngine, createReminderTools, createSearchTools, createSecretsStore, createSkillTools, createStateStore, createStorageEngine, createSubagentTools, createTodoStoreFromEngine, createTurnDraftState, createUploadStore, createWriteTool, defaultAgentDefinition, deleteOpenAICodexSession, deriveUploadKey, ensureAgentIdentity, estimateTokens, estimateTotalTokens, executeConversationTurn, findSafeSplitPoint, flushTurnDraft, generateAgentId, getAgentStoreDirectory, getModelContextWindow, getOpenAICodexAccessToken, getOpenAICodexAuthFilePath, getOpenAICodexRequiredScopes, getPonchoStoreRoot, isMessageArray, jsonSchemaToZod, loadCanonicalHistory, loadPonchoConfig, loadRunHistory, loadSkillContext, loadSkillInstructions, loadSkillMetadata, loadVfsSkillMetadata, mergeSkills, normalizeApprovalCheckpoint, normalizeOtlp, normalizeScriptPolicyPath, parseAgentFile, parseAgentMarkdown, parseSkillFrontmatter, ponchoDocsTool, readOpenAICodexSession, readSkillResource, recordStandardTurnEvent, renderAgentPrompt, resolveAgentIdentity, resolveCompactionConfig, resolveEnv, resolveMemoryConfig, resolveRunRequest, resolveSkillDirs, resolveStateConfig, runConversationTurn, slugifyStorageComponent, startOpenAICodexDeviceAuth, verifyTenantToken, withToolResultArchiveParam, writeOpenAICodexSession };
+export { type ActiveConversationRun, type ActiveSubagentRun, type AgentFrontmatter, AgentHarness, type AgentIdentity, type AgentLimitsConfig, type AgentModelConfig, AgentOrchestrator, type ApprovalEventItem, type ArchivedToolResult$1 as ArchivedToolResult, type BashConfig, BashEnvironmentManager, type BashExecutionLimits, type BuiltInToolToggles, CALLBACK_LOCK_STALE_MS, type CompactMessagesOptions, type CompactResult, type CompactionConfig, type ContinuationHooks, type Conversation, type ConversationCreateInit, type ConversationState, type ConversationStatusSnapshot, type ConversationStore, type ConversationSummary, type CreateSkillToolsOptions, type CronJobConfig, DEFAULT_AGENT_DESCRIPTION, DEFAULT_AGENT_NAME, DEFAULT_MAX_STEPS, DEFAULT_MODEL_NAME, DEFAULT_MODEL_PROVIDER, DEFAULT_TEMPERATURE, DEFAULT_TIMEOUT, type DefaultAgentDefinitionOptions, type EventSink, type ExecuteTurnResult, type HarnessOptions, type HarnessRunOutput, type HistorySource, InMemoryConversationStore, InMemoryEngine, InMemoryStateStore, type IsolateBinding, type IsolateConfig, LocalMcpBridge, LocalUploadStore, MAX_CONCURRENT_SUBAGENTS, MAX_CONTINUATION_COUNT, MAX_SUBAGENT_CALLBACK_COUNT, MAX_SUBAGENT_NESTING, type MainMemory, type McpConfig, type MemoryConfig, type MemoryStore, type MessagingChannelConfig, type ModelProviderFactory, type NetworkConfig, OPENAI_CODEX_CLIENT_ID, type OpenAICodexAuthConfig, type OpenAICodexDeviceAuthRequest, type OpenAICodexSession, type OrchestratorHooks, type OrchestratorOptions, type OtlpConfig, type OtlpOption, PONCHO_UPLOAD_SCHEME, type ParsedAgent, type PendingSubagentApproval, type PendingSubagentResult, type PendingToolCall, type PonchoConfig, PonchoFsAdapter, PostgresEngine, type ProviderConfig, type Recurrence, type RecurrenceType, type Reminder, type ReminderCreateInput, type ReminderStatus, type ReminderStore, type RemoteMcpServerConfig, type RunConversationTurnOpts, type RunConversationTurnResult, type RunOutcome, type RunRequest, type RuntimeRenderContext, S3UploadStore, STALE_SUBAGENT_THRESHOLD_MS, STORAGE_SCHEMA_VERSION, type SecretsStore, type SkillContextEntry, type SkillMetadata, type SkillSource, SqliteEngine, type StateConfig, type StateProviderName, type StateStore, type StorageConfig, type StorageEngine, type StorageFactoryOptions, type StorageProvider, type StoredApproval, type SubagentManager, type SubagentResult, type SubagentSpawnResult, type SubagentSummary, type SubagentTranscript, type SubagentTranscriptMode, TOOL_RESULT_ARCHIVE_PARAM, type TelemetryConfig, TelemetryEmitter, type TenantTokenPayload, type ToolAccess, type ToolCall, ToolDispatcher, type ToolExecutionResult, type TurnDraftState, type TurnResultMetadata, type TurnSection, type UploadStore, type UploadsConfig, VFS_SCHEME, VercelBlobUploadStore, type VfsDirEntry, type VfsStat, type VirtualMount, applyTurnMetadata, buildAgentDirectoryName, buildApprovalCheckpoints, buildAssistantMetadata, buildSkillContextWindow, buildToolCompletedText, cloneSections, compactMessages, completeOpenAICodexDeviceAuth, computeNextOccurrence, createBashTool, createConversationStore, createConversationStoreFromEngine, createDefaultTools, createDeleteDirectoryTool, createDeleteTool, createEditTool, createMemoryStore, createMemoryStoreFromEngine, createMemoryTools, createModelProvider, createReminderStore, createReminderStoreFromEngine, createReminderTools, createSearchTools, createSecretsStore, createSkillTools, createStateStore, createStorageEngine, createSubagentTools, createTodoStoreFromEngine, createTurnDraftState, createUploadStore, createWriteTool, decodeFileInputData, defaultAgentDefinition, deleteOpenAICodexSession, deriveUploadKey, ensureAgentIdentity, estimateTokens, estimateTotalTokens, executeConversationTurn, findSafeSplitPoint, flushTurnDraft, generateAgentId, getAgentStoreDirectory, getModelContextWindow, getOpenAICodexAccessToken, getOpenAICodexAuthFilePath, getOpenAICodexRequiredScopes, getPonchoStoreRoot, isMessageArray, jsonSchemaToZod, loadCanonicalHistory, loadPonchoConfig, loadRunHistory, loadSkillContext, loadSkillInstructions, loadSkillMetadata, loadVfsSkillMetadata, mergeSkills, normalizeApprovalCheckpoint, normalizeOtlp, normalizeScriptPolicyPath, normalizeToolAccess, parseAgentFile, parseAgentMarkdown, parseSkillFrontmatter, ponchoDocsTool, readOpenAICodexSession, readSkillResource, recordStandardTurnEvent, renderAgentPrompt, resolveAgentIdentity, resolveCompactionConfig, resolveEnv, resolveMemoryConfig, resolveRunRequest, resolveSkillDirs, resolveStateConfig, runConversationTurn, slugifyStorageComponent, startOpenAICodexDeviceAuth, verifyTenantToken, withToolResultArchiveParam, writeOpenAICodexSession };