@robota-sdk/agent-core 3.0.0-beta.76 → 3.0.0-beta.78

package/dist/browser/index.d.ts

@@ -1,3 +1,5 @@
+import { TypeOf, ZodType } from "zod";
+
 //#region src/interfaces/messages.d.ts
 /**
  * Message Contracts (Single Source of Truth)
@@ -275,6 +277,83 @@ interface ICacheOptions {
   ttlMs: number;
 }
 //#endregion
+//#region src/interfaces/interaction.d.ts
+/**
+ * UI-agnostic "ask the user" contract (CMD-004).
+ *
+ * The SSOT for the interaction action lives in agent-core so every interaction *source* can reach it:
+ * command execution (`ICommandHostContext`, agent-framework) AND tool execution
+ * (`IToolExecutionContext`, agent-core, for model-issued questions — CMD-005). These are pure types
+ * with no runtime dependency, so the contract crosses a serialization/transport boundary unchanged
+ * (no function-valued fields).
+ *
+ * A single shape covers every interaction kind, parameterised by fields rather than split into
+ * variants:
+ * - confirm    → two options, `maxSelect` 1
+ * - single     → options, `maxSelect` 1
+ * - multi      → options, `maxSelect` > 1
+ * - free text  → no options, `allowFreeText` true
+ * - secret     → free text with `masked` true
+ */
+/** One predefined option the user can choose. */
+interface IActionOption {
+  value: string;
+  label: string;
+  description?: string;
+}
+/** Pre-selected option values and/or prefilled free text for an action request. */
+interface IActionDefault {
+  values?: readonly string[];
+  text?: string;
+}
+/** One request for the user to answer. See the module doc for how the fields encode each kind. */
+interface IActionRequest {
+  /** Correlation key; the ask port resolves a given id exactly once (idempotent, first-answer wins). */
+  id: string;
+  title: string;
+  description?: string;
+  /** Predefined options. Empty/omitted ⇒ pure free-text entry. */
+  options?: readonly IActionOption[];
+  /** Minimum selections required (default 1). */
+  minSelect?: number;
+  /** Maximum selections allowed (default 1 ⇒ single; > 1 ⇒ multi). */
+  maxSelect?: number;
+  /** Allow a typed custom answer in addition to / instead of the options. */
+  allowFreeText?: boolean;
+  /** Free-text entry is masked (secret entry such as an API key); the renderer hides input. */
+  masked?: boolean;
+  /** Allow submitting empty free text. */
+  allowEmpty?: boolean;
+  /** Placeholder shown in the free-text field. */
+  placeholder?: string;
+  /** Maximum options shown before scrolling (renderer hint). */
+  maxVisible?: number;
+  /** Pre-selected option values and/or prefilled free text. */
+  default?: IActionDefault;
+}
+/**
+ * The user's answer to an {@link IActionRequest}. `answer` carries the selected option values and/or
+ * the typed text; `cancelled` means the user dismissed the request, or no interactive renderer was
+ * available to answer it.
+ */
+type TActionResponse = {
+  type: 'answer';
+  values: readonly string[];
+  text?: string;
+} | {
+  type: 'cancelled';
+};
+/**
+ * The injected "ask the user" port — a single seam reachable by every interaction source (command
+ * execution now; tool execution for model-issued questions later) and rendered per-environment by each
+ * transport. The concurrency model (broadcast to attached interactive channels, first answer wins,
+ * later answers for an already-resolved `id` ignored) is owned by the port implementation, not the
+ * contract.
+ */
+interface IUserInteraction {
+  ask(request: IActionRequest): Promise<TActionResponse>;
+}
+//#endregion
 //#region src/interfaces/provider-capabilities.d.ts
 interface IProviderFunctionCallingCapability {
   supported: boolean;
@@ -452,6 +531,20 @@ type TProviderNativeRawPayloadCallback = (event: IProviderNativeRawPayloadEvent)
  * native effort concept ignore it as a documented no-op.
  */
 type TModelEffort = 'low' | 'medium' | 'high' | 'xhigh' | 'max';
+/**
+ * Tool-invocation directive threaded per model invocation (CORE-017).
+ *
+ * Canonical SSOT for the union. `'auto'` lets the model decide (provider default),
+ * `'none'` suppresses tool calls for the invocation, `'required'` forces the model to call
+ * some tool, and `{ tool: name }` forces a call to the named tool. Core validates that a
+ * named tool exists in the invocation's tool list and that `'required'`/named forcing is
+ * only used when tools are present — a violation throws instead of degrading silently.
+ * Within a multi-round run, forcing directives apply to the FIRST model call only; rounds
+ * after tool results revert to `'auto'` so the model can consume the results and finish.
+ */
+type TToolChoice = 'auto' | 'none' | 'required' | {
+  tool: string;
+};
 /**
  * Options for AI provider chat requests
  */
@@ -478,11 +571,20 @@ interface IChatOptions extends IProviderSpecificOptions {
   onProviderNativeRawPayload?: TProviderNativeRawPayloadCallback;
   /** AbortSignal for cancelling the provider call */
   signal?: AbortSignal;
+  /**
+   * Tool-invocation directive for this call. Adapters map it onto their wire format
+   * (`tool_choice` / `functionCallingConfig`); omitted = provider default ('auto').
+   */
+  toolChoice?: TToolChoice;
   /** Provider-native hosted web tools requested for this call */
   nativeWebTools?: IProviderNativeWebToolRequest;
-  /** Request structured output from the provider. */
+  /** Request structured output from the provider (CORE-015: `json_schema` carries the schema). */
   responseFormat?: {
     type: 'text' | 'json_object';
+  } | {
+    type: 'json_schema';
+    name?: string;
+    schema: Record<string, unknown>;
   };
 }
 /**
@@ -1070,6 +1172,12 @@ interface IToolExecutionResult {
 interface IToolExecutionContext {
   toolName: string;
   parameters: TToolParameters;
+  /**
+   * Run-scoped cancellation signal (CORE-018). Long-running tools MUST honor it: terminate
+   * the underlying work (kill the child process, abort the network request) and return an
+   * interrupted/failed result. Completing silently after an abort is a contract violation.
+   */
+  signal?: AbortSignal;
   executionId?: string;
   userId?: string;
   sessionId?: string;
@@ -1117,6 +1225,13 @@ interface IToolExecutionContext {
    * Owner-bound instances must not be layered across different owners.
    */
   baseEventService?: IEventService;
+  /**
+   * Injected "ask the user" port (CMD-004). Present when an interactive renderer is attached, letting
+   * a tool solicit a structured answer from the user (the model-issued question seam consumed by
+   * CMD-005). Absent in non-interactive contexts; a tool that asks must treat absence as "no human
+   * available" (never a silent guess).
+   */
+  ask?: IUserInteraction['ask'];
 }
 /**
  * Parameter validation result
@@ -1300,6 +1415,12 @@ interface IPluginContract<TOptions extends IPluginOptions = IPluginOptions, TSta
   category: PluginCategory;
   priority: number;
   initialize(options?: TOptions): Promise<void>;
+  /**
+   * CORE-022: the single component-level disposal entry point. The base implementation
+   * unsubscribes module events; overrides release owned resources (timers, sockets,
+   * storage) — always calling `super.dispose()`. Driven by `Robota.destroy()`.
+   */
+  dispose(): Promise<void>;
   cleanup?(): Promise<void>;
   getData?(): IPluginData;
   getStats?(): TStats;
@@ -1545,6 +1666,84 @@ declare abstract class AbstractTool<TParameters = TToolParameters, TResult = ITo
   getName(): string;
 }
 //#endregion
+//#region src/schema/zod-schema-types.d.ts
+interface IZodParseResult {
+  success: boolean;
+  data?: unknown;
+  error?: unknown;
+}
+interface IZodSchemaDef {
+  typeName?: string;
+  innerType?: IZodSchema;
+  valueType?: IZodSchema;
+  checks?: Array<{
+    kind: string;
+    value?: TUniversalValue;
+  }>;
+  shape?: () => Record<string, IZodSchema>;
+  type?: IZodSchema;
+  values?: TUniversalValue[];
+  description?: string;
+  unknownKeys?: 'passthrough' | 'strip' | 'strict';
+}
+interface IZodSchema {
+  parse(value: unknown): unknown;
+  safeParse(value: unknown): IZodParseResult;
+  _def?: IZodSchemaDef;
+}
+/**
+ * Schema conversion options
+ */
+interface ISchemaConversionOptions {
+  includeDescription?: boolean;
+  strictTypes?: boolean;
+  allowAdditionalProperties?: boolean;
+}
+//#endregion
+//#region src/schema/structured-output.d.ts
+/** Explicit raw-JSON-schema form of `IRunOptions.output`. */
+interface IJsonSchemaOutput {
+  /** JSON Schema (object root, universal subset) the response must match. */
+  jsonSchema: IToolSchema['parameters'];
+  /** Optional schema name forwarded to provider native surfaces. */
+  name?: string;
+}
+/** Accepted `IRunOptions.output` values: a Zod schema or an explicit JSON-schema wrapper. */
+type TStructuredOutputSchema = IZodSchema | IJsonSchemaOutput;
+type TStructuredOutputValidation = {
+  success: true;
+  value: unknown;
+} | {
+  success: false;
+  issues: string[];
+};
+/** Internal SSOT representation every `output` value normalizes to. */
+interface IStructuredOutputSpec {
+  name: string;
+  jsonSchema: IToolSchema['parameters'];
+  validate(value: unknown): TStructuredOutputValidation;
+}
+/** Normalize an accepted `output` value into the internal spec. */
+declare function normalizeStructuredOutput(output: TStructuredOutputSchema): IStructuredOutputSpec;
+/**
+ * Validate a value against the universal JSON-schema subset used by tool
+ * parameters (`IParameterSchema`). Covers type, required, enum, items, nested
+ * properties, and numeric bounds — the full expressible surface of the subset.
+ */
+declare function validateAgainstJsonSchema(schema: IToolSchema['parameters'] | IParameterSchema, value: unknown, path: string): string[];
+/**
+ * Parse the model's final text into a JSON value. Tolerates a fenced
+ * ```json code block wrapper (providers without native enforcement commonly
+ * emit one); the parsed value is still strictly schema-validated afterwards.
+ */
+declare function parseStructuredResponseText(text: string): {
+  success: true;
+  value: unknown;
+} | {
+  success: false;
+  issue: string;
+};
+//#endregion
 //#region src/interfaces/agent.d.ts
 /**
  * IExecutionContextInjection
@@ -1597,9 +1796,9 @@ interface IAgentConfig {
     model: string;
     temperature?: number;
     maxTokens?: number;
-    topP?: number;
-    systemMessage?: string; /** Reasoning-effort dial threaded to the provider request builder per call. */
-    effort?: TModelEffort;
+    topP?: number; /** Reasoning-effort dial threaded to the provider request builder per call. */
+    effort?: TModelEffort; /** Default tool-invocation directive for every run (CORE-017). `IRunOptions.toolChoice` wins. */
+    toolChoice?: TToolChoice;
   };
   tools?: Array<IToolWithEventService>;
   plugins?: Array<IPluginContract<IPluginOptions, IPluginStats>>;
@@ -1609,6 +1808,17 @@ interface IAgentConfig {
   conversationId?: string;
   sessionId?: string;
   userId?: string;
+  /**
+   * Run-isolated (stateless) mode (CORE-014). Default `true`: history accumulates for the
+   * instance's lifetime and the FULL history is sent to the provider on EVERY call — token cost
+   * grows every turn. Set `false` to make the conversation store ephemeral per run: a run executes
+   * on whatever is currently in the store (system prompt + any injected context + the prompt), and
+   * the store resets after the run settles, so nothing accumulates across runs (the system prompt
+   * re-applies on the next run). Equivalent to calling `clearHistory()` around every run, but
+   * declared once and immune to a missed clear. `getHistory()` after a run returns empty in this
+   * mode — read the response from the run's return value or execution events.
+   */
+  retainHistory?: boolean;
   metadata?: TUniversalMessageMetadata;
   context?: Record<string, TConfigValue>;
   logging?: {
@@ -1618,11 +1828,13 @@ interface IAgentConfig {
     destination?: string;
   };
   providerConfig?: IAgentProviderConfig;
-  stream?: boolean;
-  toolChoice?: 'auto' | 'none' | string;
   responseFormat?: IResponseFormatConfig;
   safetySettings?: ISafetySetting[];
   timeout?: number;
+  /**
+   * Default maximum execution rounds per run (round = one model call + its requested tool
+   * executions; see `IRunOptions.maxExecutionRounds` for the full semantics). 0 = no cap.
+   */
   maxExecutionRounds?: number;
   maxSameToolInputs?: number;
   retryAttempts?: number;
@@ -1634,6 +1846,12 @@ interface IAgentConfig {
   eventService?: IEventService;
   executionContext?: IExecutionContextInjection;
   cache?: ICacheOptions;
+  /**
+   * Injected "ask the user" port (CMD-005). When present, tool executions receive it as
+   * `IToolExecutionContext.ask` so a model-invoked tool (AskUserQuestion) can solicit a structured
+   * answer. Absent in headless/automation contexts.
+   */
+  ask?: IUserInteraction['ask'];
 }
 /**
  * Agent template interface
@@ -1654,10 +1872,18 @@ interface IAgentTemplate {
  * Agent run options - type-safe interface for all agent execution options
  */
 interface IRunOptions {
+  /** Run-scoped temperature override — wins over `defaultModel.temperature` (CORE-016). */
   temperature?: number;
+  /** Run-scoped max output tokens override — wins over `defaultModel.maxTokens` (CORE-016). */
   maxTokens?: number;
-  stream?: boolean;
-  toolChoice?: 'auto' | 'none' | string;
+  /**
+   * Run-scoped tool-invocation directive — wins over `defaultModel.toolChoice` (CORE-017).
+   * `'auto'` (model decides), `'none'` (suppress tool calls), `'required'` (must call some
+   * tool), or `{ tool: name }` (must call the named tool; the name is validated against the
+   * run's tool list and a miss throws). Forcing applies to the run's first model call only;
+   * rounds after tool results revert to `'auto'` (see `TToolChoice`).
+   */
+  toolChoice?: TToolChoice;
   sessionId?: string;
   userId?: string;
   metadata?: TMetadata;
@@ -1668,13 +1894,48 @@ interface IRunOptions {
   /** Per-run replay event callback for provider/tool execution boundaries. */
   onExecutionEvent?: TExecutionEventCallback;
   /**
-   * Maximum model/tool rounds for this run.
-   * Use 0 for no core round cap.
+   * Maximum execution rounds for this run. A **round** is one provider (model) call plus the
+   * execution of every tool call that reply requested; a reply with no tool calls ends the loop,
+   * so a plain Q&A turn is exactly 1 round. This caps model/tool cycles within ONE `run()` — it is
+   * not a tool-count limit and not a multi-turn conversation limit. When the cap is hit the run
+   * stops after the current round. Use 0 for no core round cap. Defaults to
+   * `IAgentConfig.maxExecutionRounds`.
    */
   maxExecutionRounds?: number;
   /** Max times the same tool may be called with identical input before aborting. Unset = no limit. */
   maxSameToolInputs?: number;
+  /**
+   * Treat a turn that ends in tool calls (no trailing text) as a valid completion instead of
+   * forcing one extra provider call to generate a summary (CORE-011). For decision-agent patterns
+   * (router/orchestrator/classifier) the tool call IS the answer — this removes the one-call tax.
+   * The run result's content may be empty; consumers read the outcome from the tool results.
+   */
+  allowToolOnlyCompletion?: boolean;
+  /**
+   * Schema-enforced structured output (CORE-015). Accepts a Zod schema or an explicit
+   * `{ jsonSchema }` wrapper. `run` then resolves to the validated, typed object instead of a
+   * string: the schema is forwarded to the provider's native structured-output surface where one
+   * exists, and the final response is always parsed and validated core-side; a violation triggers
+   * a bounded retry with the validation issues fed back as the next turn's input. Every attempt is
+   * a real conversation turn (history stays append-only). Exhausted retries throw
+   * `StructuredOutputError`.
+   */
+  output?: TStructuredOutputSchema;
+  /**
+   * Retry budget for structured output validation failures — the number of additional attempts
+   * after the first (default 2). Only meaningful with `output` set.
+   */
+  outputRetries?: number;
 }
+/**
+ * Run options whose `output` is pinned to a concrete schema type (CORE-015).
+ * Built with `Omit` rather than an intersection on `output` because Zod v3 object
+ * schemas are not assignable to intersections containing themselves (deepPartial
+ * variance), which would silently knock out the typed overloads.
+ */
+type TRunOptionsWithOutput<TOutput> = Omit<IRunOptions, 'output'> & {
+  output: TOutput;
+};
 type TExecutionEventData = Record<string, unknown>;
 type TExecutionEventCallback = (event: string, data: TExecutionEventData) => void;
 /**
@@ -1710,8 +1971,11 @@ interface IAgent<TConfig = IAgentConfig, TContext = IRunOptions, TMessage = TUni
  * Response format configuration
  */
 interface IResponseFormatConfig {
-  type?: 'text' | 'json_object';
+  type?: 'text' | 'json_object' | 'json_schema';
+  /** JSON schema payload; required when `type` is `'json_schema'` (CORE-015). */
   schema?: Record<string, TConfigValue>;
+  /** Schema name forwarded to provider native structured-output surfaces. */
+  name?: string;
 }
 /**
  * Safety setting configuration
@@ -1723,7 +1987,7 @@ interface ISafetySetting {
 }
 //#endregion
 //#region src/interfaces/provider-definition.d.ts
-interface IProviderConfig {
+interface IProviderDefinitionConfig {
   name: string;
   model: string;
   apiKey?: string;
@@ -1824,7 +2088,7 @@ interface IProviderDefinition {
   setupSteps?: readonly IProviderSetupStepDefinition[];
   credentialRequirement?: IProviderCredentialRequirement;
   requiresApiKey?: boolean;
-  createProvider: (config: IProviderConfig) => IAIProvider;
+  createProvider: (config: IProviderDefinitionConfig) => IAIProvider;
   probeProfile?: (profile: IProviderProfileConfig) => Promise<IProviderProbeResult>;
 }
 declare function findProviderDefinition(definitions: readonly IProviderDefinition[], type: string): IProviderDefinition | undefined;
@@ -2122,6 +2386,42 @@ interface IToolFactory {
   createMCPTool(config: IMCPToolConfig): ITool;
 }
 //#endregion
+//#region src/interfaces/interaction-builders.d.ts
+/** Option value for the affirmative choice of a confirmation. */
+declare const CONFIRM_YES = "yes";
+/** Option value for the negative choice of a confirmation. */
+declare const CONFIRM_NO = "no";
+/** Build a yes/no confirmation action (two options, single selection). */
+declare function confirmAction(id: string, message: string, extra?: {
+  description?: string;
+  defaultYes?: boolean;
+}): IActionRequest;
+/** Build a single-select action (optionally allowing a typed custom answer). */
+declare function selectAction(id: string, title: string, options: readonly IActionOption[], extra?: {
+  description?: string;
+  allowFreeText?: boolean;
+  maxVisible?: number;
+  default?: IActionDefault;
+}): IActionRequest;
+/** Build a multi-select action (min/max selections; defaults: min 1, max = number of options). */
+declare function multiSelectAction(id: string, title: string, options: readonly IActionOption[], extra?: {
+  description?: string;
+  minSelect?: number;
+  maxSelect?: number;
+  maxVisible?: number;
+  default?: IActionDefault;
+}): IActionRequest;
+/** Build a free-text action (optionally masked for secret entry such as an API key). */
+declare function textAction(id: string, title: string, extra?: {
+  description?: string;
+  masked?: boolean;
+  allowEmpty?: boolean;
+  placeholder?: string;
+  default?: IActionDefault;
+}): IActionRequest;
+/** True when the user answered a {@link confirmAction} affirmatively (selected "Yes"). */
+declare function isConfirmed(response: TActionResponse): boolean;
+//#endregion
 //#region src/interfaces/progress-reporting.d.ts
 /**
  * Execution step definition for tools that support step-by-step progress reporting
@@ -2248,6 +2548,8 @@ interface IToolExecutionRequest {
   ownerPath?: IOwnerPathSegment[];
   eventService?: IEventService;
   baseEventService?: IEventService;
+  /** Injected "ask the user" port propagated into the tool's execution context (CMD-005). */
+  ask?: IUserInteraction['ask'];
 }
 /**
  * Conversation context containing messages and metadata
@@ -2738,7 +3040,7 @@ type TProviderLoggingData = Record<string, string | number | boolean | Date | st
 /**
  * Provider configuration base interface
  */
-interface IProviderConfig$1 {
+interface IProviderRuntimeConfig {
   apiKey?: string;
   baseUrl?: string;
   timeout?: number;
@@ -2768,7 +3070,7 @@ interface IExecutorAwareProviderConfig {
  *
  * @template TConfig - Provider configuration type
  */
-declare abstract class AbstractAIProvider<TConfig = IProviderConfig$1> implements IAIProvider {
+declare abstract class AbstractAIProvider<TConfig = IProviderRuntimeConfig> implements IAIProvider {
   abstract readonly name: string;
   abstract readonly version: string;
   protected config?: TConfig;
@@ -3075,6 +3377,22 @@ declare class ValidationError extends RobotaError {
   readonly recoverable = false;
   constructor(message: string, field?: string | undefined, context?: TErrorContextData);
 }
+/**
+ * Structured output validation exhausted its retry budget (CORE-015).
+ *
+ * Thrown by `run(input, { output })` when the model's final response still fails
+ * schema validation after the configured number of retries. `issues` holds the
+ * validation messages from the last attempt; `attempts` is the total number of
+ * provider turns spent (initial + retries).
+ */
+declare class StructuredOutputError extends RobotaError {
+  readonly issues: string[];
+  readonly attempts: number;
+  readonly code = "STRUCTURED_OUTPUT_ERROR";
+  readonly category: "provider";
+  readonly recoverable = true;
+  constructor(message: string, issues: string[], attempts: number, context?: TErrorContextData);
+}
 /**
  * Provider related errors
  */
@@ -3209,6 +3527,45 @@ interface IPeriodicTaskOptions {
 declare function startPeriodicTask(logger: ILogger, options: IPeriodicTaskOptions, task: () => Promise<void>): TTimerId;
 declare function stopPeriodicTask(timer: TTimerId | undefined): void;
 //#endregion
+//#region src/utils/platform-shell.d.ts
+/**
+ * TERM-008: cross-platform shell resolution (SSOT).
+ *
+ * Single source of truth for "which shell do we spawn, and how", shared by every shell-running site
+ * (the Shell tool, the hook `command` executor, and the interactive drop-to-shell). Resolution is a
+ * pure function of `(env, platform)` so every branch is testable without touching the host shell.
+ */
+/** Shell family — drives non-interactive arg shape, quoting, and LLM syntax guidance. */
+type TShellKind = 'bash' | 'sh' | 'powershell' | 'cmd';
+/** The active shell resolved for a platform, plus the metadata callers need to drive and describe it. */
+interface IPlatformShell {
+  /** Executable to spawn (e.g. `/bin/sh`, `powershell.exe`, or `$SHELL`). */
+  readonly command: string;
+  /** Shell family. */
+  readonly kind: TShellKind;
+  /** Node platform this was resolved for (`process.platform`). */
+  readonly platform: NodeJS.Platform;
+  /** Args to run a single command string non-interactively. */
+  commandArgs(command: string): string[];
+  /** Args for an interactive shell session (drop-to-shell). */
+  readonly interactiveArgs: string[];
+  /** Human label for the active shell, for tool/UI descriptions (e.g. `PowerShell (Windows)`). */
+  readonly label: string;
+  /** One-line syntax guidance for an LLM authoring commands. */
+  readonly syntaxHint: string;
+}
+/**
+ * Resolve the shell to spawn for the current (or a given) platform.
+ *
+ * - `ROBOTA_SHELL` (if set) wins on every platform.
+ * - **win32:** PowerShell.
+ * - **posix:** `$SHELL` if set, else `/bin/sh`.
+ *
+ * @param env - Environment to read overrides from. Defaults to `process.env`.
+ * @param platform - Platform to resolve for. Defaults to `process.platform`. Pass explicitly in tests.
+ */
+declare function resolvePlatformShell(env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): IPlatformShell;
+//#endregion
 //#region src/utils/index.d.ts
 /**
  * Cross-platform timer identifier type
@@ -3216,6 +3573,24 @@ declare function stopPeriodicTask(timer: TTimerId | undefined): void;
  */
 type TTimerId = ReturnType<typeof setTimeout>;
 //#endregion
+//#region src/schema/zod-to-json-schema.d.ts
+/**
+ * Convert Zod schema to JSON Schema format with safe undefined handling
+ */
+declare function zodToJsonSchema(schema: IZodSchema, options?: ISchemaConversionOptions): IToolSchema['parameters'];
+/**
+ * Safely extract enum values from Zod schema
+ */
+declare function extractEnumValues(schema: IZodSchema): TUniversalValue[];
+/**
+ * Check if schema has validation constraints
+ */
+declare function hasValidationConstraints(schema: IZodSchema): boolean;
+/**
+ * Safe schema type name extraction
+ */
+declare function getSchemaTypeName(schema: IZodSchema): string;
+//#endregion
 //#region src/managers/conversation-store.d.ts
 /** API message format for provider consumption */
 interface IProviderApiMessage {
@@ -3243,6 +3618,11 @@ declare class ConversationStore implements IConversationHistory {
   addUserMessage(content: string, metadata?: TUniversalMessageMetadata, parts?: TUniversalMessagePart[]): void;
   addAssistantMessage(content: string | null, toolCalls?: IToolCall[], metadata?: TUniversalMessageMetadata, parts?: TUniversalMessagePart[]): void;
   addSystemMessage(content: string, metadata?: TUniversalMessageMetadata, parts?: TUniversalMessagePart[]): void;
+  /**
+   * Set the single head system prompt (live instruction state). Replaces any existing system
+   * message in place; idempotent and never appends. See agent-core SPEC → System Prompt (SSOT).
+   */
+  setSystemPrompt(content: string, metadata?: TUniversalMessageMetadata, parts?: TUniversalMessagePart[]): void;
   addToolMessage(content: string, toolCallId: string, toolName?: string, metadata?: TUniversalMessageMetadata, parts?: TUniversalMessagePart[]): void;
   addToolMessageWithId(content: string, toolCallId: string, toolName: string, metadata?: TUniversalMessageMetadata, parts?: TUniversalMessagePart[]): void;
   /** Add a raw history entry (events, etc.) */
@@ -3532,18 +3912,22 @@ declare class EventEmitterPlugin extends AbstractPlugin<IEventEmitterPluginOptio
   flushBuffer(): Promise<void>;
   getStats(): IEventEmitterPluginStats;
   clearAllListeners(): void;
-  destroy(): Promise<void>;
+  /** CORE-022: dispose() is the single disposal entry point — releases the flush timer. */
+  dispose(): Promise<void>;
 }
 //#endregion
 //#region src/core/robota-types.d.ts
-/** Shared model configuration shape used in setModel / getModel. */
+/**
+ * Shared model configuration shape used in setModel / getModel. The system prompt is intentionally
+ * absent: it is an agent-level concern (top-level `config.systemMessage`), updated live via
+ * `Robota.updateSystemPrompt`, not part of model config.
+ */
 interface IModelConfig {
   provider: string;
   model: string;
   temperature?: number;
   maxTokens?: number;
   topP?: number;
-  systemMessage?: string;
   /** Reasoning effort tier read per-call by the execution round (PRESET-013 live re-application channel). */
   effort?: TModelEffort;
 }
@@ -3815,6 +4199,19 @@ declare class Tools extends AbstractManager implements IToolManager {
 /** Agent statistics metadata type */
 type TAgentStatsMetadata = Record<string, string | number | boolean | Date | string[]>;
 //#endregion
+//#region src/services/tool-execution-service.d.ts
+/**
+ * ToolExecutionService owned events
+ * Local event names only (no dots). Full names are composed at emit time.
+ */
+declare const TOOL_EVENTS: {
+  readonly CALL_START: "call_start";
+  readonly CALL_COMPLETE: "call_complete";
+  readonly CALL_ERROR: "call_error";
+  readonly CALL_RESPONSE_READY: "call_response_ready";
+};
+declare const TOOL_EVENT_PREFIX: "tool";
+//#endregion
 //#region src/services/execution-constants.d.ts
 /**
  * ExecutionService owned events.
@@ -3860,6 +4257,10 @@ declare function buildAgentStats(deps: IRobotaStatsDeps): {
   historyStats: TAgentStatsMetadata;
   uptime: number;
 };
+/** Result of a best-effort destroy: cleanup failures are collected, never thrown (CORE-013). */
+interface IDestroyResult {
+  errors: Error[];
+}
 //#endregion
 //#region src/core/robota.d.ts
 /** @public */
@@ -3879,6 +4280,8 @@ declare class Robota extends RobotaBase implements IAgent<IAgentConfig, IRunOpti
   private conversationId;
   private logger;
   private initializationPromise?;
+  /** Terminal state (CORE-022): once destroyed, run/runStream reject and re-init is impossible. */
+  private destroyed;
   private isFullyInitialized;
   private startTime;
   private configVersion;
@@ -3893,8 +4296,34 @@ declare class Robota extends RobotaBase implements IAgent<IAgentConfig, IRunOpti
    * "must be fully initialized" guard.
    */
   ensureReady(): Promise<void>;
+  /**
+   * Concurrency contract (CORE-012): a Robota instance owns ONE conversation history, so
+   * concurrent `run`/`runStream` calls on the same instance are serialized on an internal queue —
+   * a call issued while another is in flight waits its turn (its `signal` is honored while queued).
+   * Interleaved histories are therefore impossible by construction.
+   *
+   * Structured output (CORE-015): with `options.output` set the promise resolves to the validated
+   * object (typed `z.infer<S>` for a Zod schema) instead of a string. Note the structured typing
+   * is visible on `Robota` directly; through the generic `IAgent` interface the return type stays
+   * `Promise<string>`.
+   */
+  run<S extends ZodType>(input: string, options: TRunOptionsWithOutput<S>): Promise<TypeOf<S>>;
+  run(input: string, options: TRunOptionsWithOutput<IJsonSchemaOutput>): Promise<unknown>;
   run(input: string, options?: IRunOptions): Promise<string>;
+  runStream<S extends ZodType>(input: string, options: TRunOptionsWithOutput<S>): AsyncGenerator<string, TypeOf<S>, undefined>;
+  runStream(input: string, options: TRunOptionsWithOutput<IJsonSchemaOutput>): AsyncGenerator<string, unknown, undefined>;
   runStream(input: string, options?: IRunOptions): AsyncGenerator<string, void, undefined>;
+  /**
+   * Run-isolated mode (CORE-014): with `retainHistory: false` the conversation store is
+   * ephemeral per run — reset after every run settles (success, abort, or error) so nothing
+   * accumulates across runs. The system prompt re-applies on the next run (CORE-010).
+   */
+  private resetEphemeralHistory;
+  /** Tail of the internal run queue (CORE-012). */
+  private runQueueTail;
+  /** Wait for the previous run to settle, then hold the slot until `release` is called. */
+  private acquireRunSlot;
+  private enqueueRun;
   private executionDeps;
   getHistory(): TUniversalMessage[];
   getFullHistory(): IHistoryEntry[];
@@ -3914,12 +4343,30 @@ declare class Robota extends RobotaBase implements IAgent<IAgentConfig, IRunOpti
   getConfiguration(): Promise<IConfigurationSnapshot>;
   setModel(mc: IModelConfig): void;
   getModel(): IModelConfig;
+  /**
+   * Live system-prompt update (SSOT). Updates the agent's `config.systemMessage` and the active
+   * conversation store's single head system message, so the next provider request carries the
+   * change. This is the propagation path for a session's persona, self-verification toggle, and
+   * AGENTS.md/CLAUDE.md staleness refresh. See agent-core SPEC → System Prompt (single source of
+   * truth).
+   */
+  updateSystemPrompt(content: string): void;
+  /** Current live system prompt. */
+  getSystemPrompt(): string | undefined;
   registerTool(tool: AbstractTool): void;
   unregisterTool(toolName: string): void;
   getConfig(): IAgentConfig;
   swapDefaultProvider(newProvider: IAIProvider, model: string): void;
   getStats(): ReturnType<typeof buildAgentStats>;
-  destroy(): Promise<void>;
+  /**
+   * Best-effort disposal (CORE-013): never rejects for cleanup failures, so
+   * `void agent.destroy()` is safe to fire-and-forget. Every cleanup step runs even if an
+   * earlier one fails; failures are logged and returned in `errors` for callers that want a
+   * hard signal.
+   */
+  destroy(): Promise<IDestroyResult>;
+  /** CORE-022: a destroyed agent never revives — reject before touching the run queue. */
+  private assertNotDestroyed;
   protected initialize(): Promise<void>;
   private ensureFullyInitialized;
   private doAsyncInit;
@@ -4124,6 +4571,18 @@ declare class AgentFactory {
 }
 //#endregion
 //#region src/services/execution-usage.d.ts
+/** Aggregate token totals over a whole session/sub-session history. */
+interface ISessionUsageTotals {
+  promptTokens: number;
+  completionTokens: number;
+  totalTokens: number;
+}
+/**
+ * ANALYTICS-001 (Phase 2): sum assistant token usage across a history timeline — used to capture a
+ * subagent / background task's total usage so it can be attributed to its source in the parent log.
+ * Returns undefined when no usage was reported (so callers can skip recording an empty entry).
+ */
+declare function sumHistoryUsage(history: readonly IHistoryEntry[]): ISessionUsageTotals | undefined;
 interface IAssistantUsageMetadata {
   inputTokens: number;
   outputTokens: number;
@@ -4149,19 +4608,6 @@ declare class EventHistoryModule implements IEventHistoryModule {
   private nextSequenceId;
 }
 //#endregion
-//#region src/services/tool-execution-service.d.ts
-/**
- * ToolExecutionService owned events
- * Local event names only (no dots). Full names are composed at emit time.
- */
-declare const TOOL_EVENTS: {
-  readonly CALL_START: "call_start";
-  readonly CALL_COMPLETE: "call_complete";
-  readonly CALL_ERROR: "call_error";
-  readonly CALL_RESPONSE_READY: "call_response_ready";
-};
-declare const TOOL_EVENT_PREFIX: "tool";
-//#endregion
 //#region src/agents/constants.d.ts
 /**
  * Agent event constants
@@ -4693,7 +5139,7 @@ declare function evaluatePermission(toolName: string, toolArgs: TToolArgs, mode:
 /**
  * Tool names known to the permission system
  */
-type TKnownToolName = 'Bash' | 'Read' | 'Write' | 'Edit' | 'Glob' | 'Grep' | 'WebFetch' | 'WebSearch';
+type TKnownToolName = 'Shell' | 'Bash' | 'Read' | 'Write' | 'Edit' | 'Glob' | 'Grep' | 'WebFetch' | 'WebSearch' | 'AskUserQuestion';
 /**
  * Permission mode → tool policy matrix
  * Maps each mode to a decision for each known tool.
@@ -4840,7 +5286,7 @@ interface IPromptHookDefinition {
   prompt: string;
   model?: string;
 }
-/** Agent hook — delegates to a sub-agent */
+/** Agent hook — delegates to a subagent */
 interface IAgentHookDefinition {
   type: 'agent';
   agent: string;
@@ -4937,5 +5383,5 @@ interface IRunHooksResult {
  */
 declare function runHooks(config: THooksConfig | undefined, event: THookEvent, input: IHookInput, executors?: IHookTypeExecutor[]): Promise<IRunHooksResult>;
 //#endregion
-export { AGENT_EVENTS, AGENT_EVENT_PREFIX, AbstractAIProvider, AbstractAgent, AbstractEventService, AbstractExecutor, AbstractManager, AbstractPlugin, AbstractTool, AgentFactory, AgentTemplates, AuthenticationError, CLAUDE_MODELS, CONTEXT_ESTIMATE_CHARS_PER_TOKEN, CacheIntegrityError, CircuitBreakerOpenError, ConfigurationError, ConsoleLogger, ConversationHistory, ConversationStore, DEFAULT_ABSTRACT_EVENT_SERVICE, DEFAULT_CONTEXT_WINDOW, DEFAULT_MAX_OUTPUT, DefaultEventService, ENV_REFERENCE_PREFIX, EVENT_EMITTER_EVENTS, EXECUTION_EVENTS, EXECUTION_EVENT_PREFIX, ErrorUtils, EventEmitterPlugin, EventHistoryModule, ExecutionProxy, type IAIProvider, type IAIProviderInstance, type IAIProviderManager, IAbstractTool, IAbstractToolOptions, type IAgent, type IAgentConfig, type IAgentCreationOptions, type IAgentCreationStats, type IAgentEventData, type IAgentFactory, type IAgentFactoryOptions, type IAgentHookDefinition, type IAgentLifecycleEvents, type IAgentTemplate, type IAssistantMessage, type IAssistantUsageMetadata, type IBaseEventData, type IBaseMessage, type ICacheEntry, type ICacheKey, type ICacheOptions, type ICacheStats, type ICacheStorage, type IChatExecutionRequest, type IChatOptions, type ICommandHookDefinition, type IConfigValidationResult, type IContextOptions, type IContextTokenEstimate, type IContextTokenEstimateOptions, type IContextTokenUsage, type IContextWindowState, type IConversationContext, type IConversationResponse, type IConversationService, type IConversationServiceOptions, type IDirent, type IEventContext, type IEventEmitterEventData, type IEventEmitterHierarchicalEventData, type IEventEmitterMetrics, type IEventEmitterMetricsSnapshot, type IEventEmitterPlugin, type IEventEmitterPluginOptions, type IEventHistoryModule, type IEventHistoryRecord, type IEventHistorySnapshot, type IEventObjectValue, type IEventService, type IEventServiceOwnerBinding, type IExecutionEventData, type IExecutionService, type IExecutionServiceOptions, type IExecutor, IExecutorAwareProviderConfig, type IFileSystem, type IFileSystemAsync, type IFunctionTool, type IHistoryEntry, type IHookGroup, type IHookInput, type IHookResult, type IHookTypeExecutor, type IHttpHookDefinition, type IImageComposeRequest, type IImageEditRequest, type IImageGenerationProvider, type IImageGenerationRequest, type IImageGenerationResult, type IInlineImageInputSource, type IInlineImageMessagePart, type ILocalExecutorConfig, ILogger, type IMCPToolConfig, type IMediaOutputRef, type IMessageTokenUsage, type IModelDefinition, type IModelPrice, type IOpenAPIToolConfig, type IOwnerPathSegment, type IParameterSchema, type IParameterValidationResult, type IPermissionLists, type IPlugin, type IPluginConfig, IPluginContext, type IPluginContract, type IPluginData, type IPluginErrorContext, type IPluginExecutionContext, type IPluginExecutionResult, type IPluginHooks, type IPluginOptions, type IPluginStats, type IProgressReportingTool, type IPromptHookDefinition, type IProviderCapabilities, IProviderConfig, type IProviderCredentialRequirement, type IProviderDefinition, type IProviderFunctionCallingCapability, type IProviderMediaError, type IProviderModelCatalog, type IProviderModelCatalogEntry, type IProviderModelCatalogRefreshOptions, type IProviderNativeRawPayloadEvent, type IProviderNativeWebToolCapabilities, type IProviderNativeWebToolCapability, type IProviderNativeWebToolRequest, type IProviderOptions, type IProviderProbeResult, type IProviderProfileConfig, type IProviderProfileDefaults, type IProviderRequest, type IProviderSetupHelpLink, type IProviderSetupStepDefinition, type IProviderSpecificOptions, type IRawProviderResponse, type IRemoteExecutorConfig, type IRunOptions, type ISession, ISimpleValidationResult, type ISpinner, type IStats, type IStreamExecutionRequest, type IStreamingChunk, type ISystemMessage, type ITemplateApplicationResult, type ITerminalOutput, type ITextMessagePart, type ITokenUsage, type ITool, type IToolCall, IToolContract, type IToolEventData, type IToolExecutionContext, type IToolExecutionRequest, type IToolExecutionResult, type IToolExecutionService, type IToolExecutionStep, type IToolFactory, type IToolManager, type IToolMessage, type IToolRegistry, type IToolResult, type IToolSchema, IToolWithEventService, IUniversalObjectValue, type IUriImageInputSource, type IUriImageMessagePart, type IUserMessage, IUtilLogEntry, type IValidationIssue, type IValidationOptions, type IValidationResult, type IVideoGenerationProvider, type IVideoGenerationRequest, type IVideoJobAccepted, type IVideoJobSnapshot, type IWorkflowConfig, type IWorkflowConversionOptions, type IWorkflowConversionResult, type IWorkflowConverter, type IWorkflowData, type IWorkflowMetadata, type IWorkflowValidator, InMemoryEventEmitterMetrics, LocalExecutor, MODEL_PRICES, MODE_POLICY, MessageConverter, ModelNotAvailableError, NetworkError, ObservableEventService, PluginCategory, PluginError, PluginPriority, ProviderError, RateLimitError, Robota, RobotaError, SilentLogger, StorageError, StructuredEventService, TASK_EVENTS, TASK_EVENT_PREFIX, type TAgentCreationMetadata, TComplexConfigValue, TConfigData, TConfigValue, TContextData, type TConversationContextMetadata, TErrorContextData, TErrorExternalInput, type TEventEmitterListener, type TEventExtensionValue, type TEventListener, type TEventLoggerData, type TEventName, type TEventUniversalValue, type TExecutionEventCallback, type TExecutionEventData, type TExecutionEventName, type TExecutionMetadata, type THookDefinition, type THookEvent, type THooksConfig, type TImageInputSource, type TJSONSchemaEnum, type TJSONSchemaKind, type TKnownToolName, TLoggerData, type TManagerToolParameters, TMessageConverterRegistry, TMessageFormatConverter, type TMessageState, TMetadata, TMetadataValue, type TModelEffort, TOOL_EVENTS, TOOL_EVENT_PREFIX, type TParameterDefaultValue, type TPermissionDecision, type TPermissionMode, TPrimitiveValue, type TProviderConfigValue, type TProviderCredentialField, TProviderLoggingData, type TProviderMediaResult, TProviderMessage, type TProviderModelCapability, type TProviderModelCatalogRefresh, type TProviderModelCatalogStatus, type TProviderModelLifecycle, type TProviderNativeRawPayload, type TProviderNativeRawPayloadCallback, type TProviderNativeRawPayloadKind, type TProviderOptionValueBase, type TProviderSetupField, type TProviderSetupHelpLinkKind, TRUST_TO_MODE, type TResponseMetadata, type TSessionEndReason, type TTextDeltaCallback, TTimerId, type TToolArgs, TToolExecutionFunction, type TToolExecutionParameters, type TToolExecutor, type TToolMetadata, TToolParameters, type TToolProgressCallback, type TTrustLevel, TUniversalArrayValue, type TUniversalMessage, type TUniversalMessageMetadata, type TUniversalMessagePart, type TUniversalMessageRole, TUniversalValue, type TUserEvent, TUtilLogLevel, ToolExecutionError, TypeUtils, UNKNOWN_TOOL_FALLBACK, USER_EVENTS, USER_EVENT_PREFIX, ValidationError, type ValidationSeverity, Validator, assertProviderNativeWebToolsAvailable, bindEventServiceOwner, bindWithOwnerPath, calculateModelCost, chatEntryToMessage, collectAssistantUsageMetadata, composeEventName, createAssistantMessage, createDefaultProviderCapabilities, createExecutionProxy, createLogger, createSystemMessage, createToolMessage, createUserMessage, estimateBlendedCostPer1000, estimateContextTokensFromMessages, estimateSerializedContextTokens, evaluatePermission, findProviderDefinition, formatEnvReference, formatSupportedProviderTypes, formatTokenCount, getGlobalLogLevel, getMessagesForAPI, getModelContextWindow, getModelMaxOutput, getModelName, getProviderCapabilities, getProviderCredentialRequirement, getToolEstimatedDuration, getToolExecutionSteps, hasUsableSecretReference, isAssistantMessage, isChatEntry, isDefaultEventService, isEnvReference, isImageGenerationProvider, isProgressReportingTool, isSystemMessage, isToolMessage, isUserMessage, isVideoGenerationProvider, logger, lookupModelPrice, messageToHistoryEntry, readTokenUsageFromMessage, readTokenUsageFromMetadata, resolveEnvReference, runHooks, setGlobalLogLevel, setToolProgressCallback, startPeriodicTask, stopPeriodicTask, validateAgentConfig, validateApiKey, validateModelName, validateProviderName, validateUserInput, withEventEmission };
+export { AGENT_EVENTS, AGENT_EVENT_PREFIX, AbstractAIProvider, AbstractAgent, AbstractEventService, AbstractExecutor, AbstractManager, AbstractPlugin, AbstractTool, AgentFactory, AgentTemplates, AuthenticationError, CLAUDE_MODELS, CONFIRM_NO, CONFIRM_YES, CONTEXT_ESTIMATE_CHARS_PER_TOKEN, CacheIntegrityError, CircuitBreakerOpenError, ConfigurationError, ConsoleLogger, ConversationHistory, ConversationStore, DEFAULT_ABSTRACT_EVENT_SERVICE, DEFAULT_CONTEXT_WINDOW, DEFAULT_MAX_OUTPUT, DefaultEventService, ENV_REFERENCE_PREFIX, EVENT_EMITTER_EVENTS, EXECUTION_EVENTS, EXECUTION_EVENT_PREFIX, ErrorUtils, EventEmitterPlugin, EventHistoryModule, ExecutionProxy, type IAIProvider, type IAIProviderInstance, type IAIProviderManager, IAbstractTool, IAbstractToolOptions, type IActionDefault, type IActionOption, type IActionRequest, type IAgent, type IAgentConfig, type IAgentCreationOptions, type IAgentCreationStats, type IAgentEventData, type IAgentFactory, type IAgentFactoryOptions, type IAgentHookDefinition, type IAgentLifecycleEvents, type IAgentTemplate, type IAssistantMessage, type IAssistantUsageMetadata, type IBaseEventData, type IBaseMessage, type ICacheEntry, type ICacheKey, type ICacheOptions, type ICacheStats, type ICacheStorage, type IChatExecutionRequest, type IChatOptions, type ICommandHookDefinition, type IConfigValidationResult, type IContextOptions, type IContextTokenEstimate, type IContextTokenEstimateOptions, type IContextTokenUsage, type IContextWindowState, type IConversationContext, type IConversationResponse, type IConversationService, type IConversationServiceOptions, type IDestroyResult, type IDirent, type IEventContext, type IEventEmitterEventData, type IEventEmitterHierarchicalEventData, type IEventEmitterMetrics, type IEventEmitterMetricsSnapshot, type IEventEmitterPlugin, type IEventEmitterPluginOptions, type IEventHistoryModule, type IEventHistoryRecord, type IEventHistorySnapshot, type IEventObjectValue, type IEventService, type IEventServiceOwnerBinding, type IExecutionEventData, type IExecutionService, type IExecutionServiceOptions, type IExecutor, IExecutorAwareProviderConfig, type IFileSystem, type IFileSystemAsync, type IFunctionTool, type IHistoryEntry, type IHookGroup, type IHookInput, type IHookResult, type IHookTypeExecutor, type IHttpHookDefinition, type IImageComposeRequest, type IImageEditRequest, type IImageGenerationProvider, type IImageGenerationRequest, type IImageGenerationResult, type IInlineImageInputSource, type IInlineImageMessagePart, type IJsonSchemaOutput, type ILocalExecutorConfig, ILogger, type IMCPToolConfig, type IMediaOutputRef, type IMessageTokenUsage, type IModelDefinition, type IModelPrice, type IOpenAPIToolConfig, type IOwnerPathSegment, type IParameterSchema, type IParameterValidationResult, type IPermissionLists, IPlatformShell, type IPlugin, type IPluginConfig, IPluginContext, type IPluginContract, type IPluginData, type IPluginErrorContext, type IPluginExecutionContext, type IPluginExecutionResult, type IPluginHooks, type IPluginOptions, type IPluginStats, type IProgressReportingTool, type IPromptHookDefinition, type IProviderCapabilities, type IProviderCredentialRequirement, type IProviderDefinition, type IProviderDefinitionConfig, type IProviderFunctionCallingCapability, type IProviderMediaError, type IProviderModelCatalog, type IProviderModelCatalogEntry, type IProviderModelCatalogRefreshOptions, type IProviderNativeRawPayloadEvent, type IProviderNativeWebToolCapabilities, type IProviderNativeWebToolCapability, type IProviderNativeWebToolRequest, type IProviderOptions, type IProviderProbeResult, type IProviderProfileConfig, type IProviderProfileDefaults, type IProviderRequest, IProviderRuntimeConfig, type IProviderSetupHelpLink, type IProviderSetupStepDefinition, type IProviderSpecificOptions, type IRawProviderResponse, type IRemoteExecutorConfig, type IRunOptions, type ISchemaConversionOptions, type ISession, type ISessionUsageTotals, ISimpleValidationResult, type ISpinner, type IStats, type IStreamExecutionRequest, type IStreamingChunk, type IStructuredOutputSpec, type ISystemMessage, type ITemplateApplicationResult, type ITerminalOutput, type ITextMessagePart, type ITokenUsage, type ITool, type IToolCall, IToolContract, type IToolEventData, type IToolExecutionContext, type IToolExecutionRequest, type IToolExecutionResult, type IToolExecutionService, type IToolExecutionStep, type IToolFactory, type IToolManager, type IToolMessage, type IToolRegistry, type IToolResult, type IToolSchema, IToolWithEventService, IUniversalObjectValue, type IUriImageInputSource, type IUriImageMessagePart, type IUserInteraction, type IUserMessage, IUtilLogEntry, type IValidationIssue, type IValidationOptions, type IValidationResult, type IVideoGenerationProvider, type IVideoGenerationRequest, type IVideoJobAccepted, type IVideoJobSnapshot, type IWorkflowConfig, type IWorkflowConversionOptions, type IWorkflowConversionResult, type IWorkflowConverter, type IWorkflowData, type IWorkflowMetadata, type IWorkflowValidator, type IZodParseResult, type IZodSchema, type IZodSchemaDef, InMemoryEventEmitterMetrics, LocalExecutor, MODEL_PRICES, MODE_POLICY, MessageConverter, ModelNotAvailableError, NetworkError, ObservableEventService, PluginCategory, PluginError, PluginPriority, ProviderError, RateLimitError, Robota, RobotaError, SilentLogger, StorageError, StructuredEventService, StructuredOutputError, TASK_EVENTS, TASK_EVENT_PREFIX, type TActionResponse, type TAgentCreationMetadata, TComplexConfigValue, TConfigData, TConfigValue, TContextData, type TConversationContextMetadata, TErrorContextData, TErrorExternalInput, type TEventEmitterListener, type TEventExtensionValue, type TEventListener, type TEventLoggerData, type TEventName, type TEventUniversalValue, type TExecutionEventCallback, type TExecutionEventData, type TExecutionEventName, type TExecutionMetadata, type THookDefinition, type THookEvent, type THooksConfig, type TImageInputSource, type TJSONSchemaEnum, type TJSONSchemaKind, type TKnownToolName, TLoggerData, type TManagerToolParameters, TMessageConverterRegistry, TMessageFormatConverter, type TMessageState, TMetadata, TMetadataValue, type TModelEffort, TOOL_EVENTS, TOOL_EVENT_PREFIX, type TParameterDefaultValue, type TPermissionDecision, type TPermissionMode, TPrimitiveValue, type TProviderConfigValue, type TProviderCredentialField, TProviderLoggingData, type TProviderMediaResult, TProviderMessage, type TProviderModelCapability, type TProviderModelCatalogRefresh, type TProviderModelCatalogStatus, type TProviderModelLifecycle, type TProviderNativeRawPayload, type TProviderNativeRawPayloadCallback, type TProviderNativeRawPayloadKind, type TProviderOptionValueBase, type TProviderSetupField, type TProviderSetupHelpLinkKind, TRUST_TO_MODE, type TResponseMetadata, type TSessionEndReason, TShellKind, type TStructuredOutputSchema, type TStructuredOutputValidation, type TTextDeltaCallback, TTimerId, type TToolArgs, type TToolChoice, TToolExecutionFunction, type TToolExecutionParameters, type TToolExecutor, type TToolMetadata, TToolParameters, type TToolProgressCallback, type TTrustLevel, TUniversalArrayValue, type TUniversalMessage, type TUniversalMessageMetadata, type TUniversalMessagePart, type TUniversalMessageRole, TUniversalValue, type TUserEvent, TUtilLogLevel, ToolExecutionError, TypeUtils, UNKNOWN_TOOL_FALLBACK, USER_EVENTS, USER_EVENT_PREFIX, ValidationError, type ValidationSeverity, Validator, assertProviderNativeWebToolsAvailable, bindEventServiceOwner, bindWithOwnerPath, calculateModelCost, chatEntryToMessage, collectAssistantUsageMetadata, composeEventName, confirmAction, createAssistantMessage, createDefaultProviderCapabilities, createExecutionProxy, createLogger, createSystemMessage, createToolMessage, createUserMessage, estimateBlendedCostPer1000, estimateContextTokensFromMessages, estimateSerializedContextTokens, evaluatePermission, extractEnumValues, findProviderDefinition, formatEnvReference, formatSupportedProviderTypes, formatTokenCount, getGlobalLogLevel, getMessagesForAPI, getModelContextWindow, getModelMaxOutput, getModelName, getProviderCapabilities, getProviderCredentialRequirement, getSchemaTypeName, getToolEstimatedDuration, getToolExecutionSteps, hasUsableSecretReference, hasValidationConstraints, isAssistantMessage, isChatEntry, isConfirmed, isDefaultEventService, isEnvReference, isImageGenerationProvider, isProgressReportingTool, isSystemMessage, isToolMessage, isUserMessage, isVideoGenerationProvider, logger, lookupModelPrice, messageToHistoryEntry, multiSelectAction, normalizeStructuredOutput, parseStructuredResponseText, readTokenUsageFromMessage, readTokenUsageFromMetadata, resolveEnvReference, resolvePlatformShell, runHooks, selectAction, setGlobalLogLevel, setToolProgressCallback, startPeriodicTask, stopPeriodicTask, sumHistoryUsage, textAction, validateAgainstJsonSchema, validateAgentConfig, validateApiKey, validateModelName, validateProviderName, validateUserInput, withEventEmission, zodToJsonSchema };
 //# sourceMappingURL=index.d.ts.map