@robota-sdk/agent-core 3.0.0-beta.86 → 3.0.0-beta.88

package/dist/browser/index.d.ts

@@ -129,7 +129,35 @@ interface IUriImageMessagePart {
   uri: string;
   mimeType?: string;
 }
-type TUniversalMessagePart = ITextMessagePart | IInlineImageMessagePart | IUriImageMessagePart;
+/** An inline audio observation; provider support is determined by the adapter. */
+interface IInlineAudioMessagePart {
+  type: 'audio_inline';
+  mimeType: string;
+  data: string;
+}
+/** An opaque reference, never authority to fetch its URI. */
+interface IResourceLinkMessagePart {
+  type: 'resource_link';
+  uri: string;
+  name: string;
+  mimeType?: string;
+  title?: string;
+  description?: string;
+  size?: number;
+}
+/** Embedded untrusted resource content, tied to the contributor's opaque URI. */
+type TEmbeddedResourceMessagePart = {
+  type: 'resource_embedded';
+  uri: string;
+  mimeType?: string;
+} & ({
+  text: string;
+  blob?: never;
+} | {
+  blob: string;
+  text?: never;
+});
+type TUniversalMessagePart = ITextMessagePart | IInlineImageMessagePart | IUriImageMessagePart | IInlineAudioMessagePart | IResourceLinkMessagePart | TEmbeddedResourceMessagePart;
 /**
  * Tool call (OpenAI tool calling format).
  */
@@ -263,7 +291,7 @@ type TProviderModelCapability = 'tools' | 'vision' |
 'json_object' | 'reasoning' | 'native_web' | 'streaming' |
 /**
  * CLI-1990: the vendor documents a server-side tool search — deferred definitions the API expands
- * on demand. Declaration-only in v1: Robota runs its own client-side catalog on every provider
+ * on demand. Declaration-only in v1: ConversationAgent runs its own client-side catalog on every provider
  * and emits no vendor block. The member exists so a later offload can be capability-gated in this
  * table rather than by provider name.
  */
@@ -353,9 +381,9 @@ type TErrorContextData = Record<string, string | number | boolean | Date | Error
  */
 type TErrorExternalInput = Error | string | Record<string, string | number | boolean> | null | undefined;
 /**
- * Base error class for all Robota errors
+ * Base error class for all ConversationAgent errors
  */
-declare abstract class RobotaError extends Error {
+declare abstract class AgentRuntimeError extends Error {
   readonly context?: TErrorContextData | undefined;
   abstract readonly code: string;
   abstract readonly category: 'user' | 'system' | 'provider';
@@ -365,7 +393,7 @@ declare abstract class RobotaError extends Error {
 /**
  * Configuration related errors
  */
-declare class ConfigurationError extends RobotaError {
+declare class ConfigurationError extends AgentRuntimeError {
   readonly code = "CONFIGURATION_ERROR";
   readonly category: "user";
   readonly recoverable = false;
@@ -374,7 +402,7 @@ declare class ConfigurationError extends RobotaError {
 /**
  * Input validation errors
  */
-declare class ValidationError extends RobotaError {
+declare class ValidationError extends AgentRuntimeError {
   readonly field?: string | undefined;
   readonly code = "VALIDATION_ERROR";
   readonly category: "user";
@@ -389,7 +417,7 @@ declare class ValidationError extends RobotaError {
  * validation messages from the last attempt; `attempts` is the total number of
  * provider turns spent (initial + retries).
  */
-declare class StructuredOutputError extends RobotaError {
+declare class StructuredOutputError extends AgentRuntimeError {
   readonly issues: string[];
   readonly attempts: number;
   readonly code = "STRUCTURED_OUTPUT_ERROR";
@@ -407,7 +435,7 @@ interface IProviderFailureDetails {
 /**
  * Provider related errors
  */
-declare class ProviderError extends RobotaError {
+declare class ProviderError extends AgentRuntimeError {
   readonly provider: string;
   readonly originalError?: Error | undefined;
   readonly code = "PROVIDER_ERROR";
@@ -420,7 +448,7 @@ declare class ProviderError extends RobotaError {
 /**
  * Authentication errors
  */
-declare class AuthenticationError extends RobotaError {
+declare class AuthenticationError extends AgentRuntimeError {
   readonly provider?: string | undefined;
   readonly code = "AUTHENTICATION_ERROR";
   readonly category: "user";
@@ -430,7 +458,7 @@ declare class AuthenticationError extends RobotaError {
 /**
  * Rate limit errors
  */
-declare class RateLimitError extends RobotaError {
+declare class RateLimitError extends AgentRuntimeError {
   readonly retryAfter?: number | undefined;
   readonly provider?: string | undefined;
   readonly code = "RATE_LIMIT_ERROR";
@@ -441,7 +469,7 @@ declare class RateLimitError extends RobotaError {
 /**
  * Network/connectivity errors
  */
-declare class NetworkError extends RobotaError {
+declare class NetworkError extends AgentRuntimeError {
   readonly originalError?: Error | undefined;
   /** `undefined` for a network failure with no provider context (e.g. a generic timeout). */
   readonly provider?: string | undefined;
@@ -455,7 +483,7 @@ declare class NetworkError extends RobotaError {
 /**
  * Tool execution errors
  */
-declare class ToolExecutionError extends RobotaError {
+declare class ToolExecutionError extends AgentRuntimeError {
   readonly toolName: string;
   readonly originalError?: Error | undefined;
   readonly code = "TOOL_EXECUTION_ERROR";
@@ -472,13 +500,13 @@ declare class ToolExecutionError extends RobotaError {
  * `success: true, interrupted: true` — reporting a run that produced no answer as a success.
  *
  * Named rather than a bare `Error` for the reason the SPEC was reaching for by naming a type at all:
- * a caller must be able to tell "the agent looped" from "the network died". `RobotaError` carries
+ * a caller must be able to tell "the agent looped" from "the network died". `AgentRuntimeError` carries
  * `code`/`category`/`recoverable` out through CORE-027's failure path intact.
  *
  * `recoverable` is TRUE: the loop is a property of this turn's prompt and tool set, not of the
  * system, and a caller that varies either can reasonably try again.
  */
-declare class SameToolInputLoopError extends RobotaError {
+declare class SameToolInputLoopError extends AgentRuntimeError {
   readonly toolName: string;
   readonly callCount: number;
   readonly maxSameToolInputs: number;
@@ -502,7 +530,7 @@ declare class SameToolInputLoopError extends RobotaError {
  * `recoverable` is TRUE: like `SameToolInputLoopError`, this is a property of this turn's prompt and
  * model response, not of the system, and a caller that varies either can reasonably try again.
  */
-declare class EmptyCompletionError extends RobotaError {
+declare class EmptyCompletionError extends AgentRuntimeError {
   readonly round: number;
   readonly code = "EMPTY_COMPLETION";
   readonly category: "provider";
@@ -512,7 +540,7 @@ declare class EmptyCompletionError extends RobotaError {
 /**
  * Model not available errors
  */
-declare class ModelNotAvailableError extends RobotaError {
+declare class ModelNotAvailableError extends AgentRuntimeError {
   /** `undefined` when the failure names no model — a provider adapter classifying a raw HTTP
    *  response by status alone does not always know which model the vendor meant. */
   readonly model: string | undefined;
@@ -535,7 +563,7 @@ declare class ModelNotAvailableError extends RobotaError {
 /**
  * Circuit breaker open error
  */
-declare class CircuitBreakerOpenError extends RobotaError {
+declare class CircuitBreakerOpenError extends AgentRuntimeError {
   readonly code = "CIRCUIT_BREAKER_OPEN";
   readonly category: "system";
   readonly recoverable = true;
@@ -544,7 +572,7 @@ declare class CircuitBreakerOpenError extends RobotaError {
 /**
  * Plugin errors
  */
-declare class PluginError extends RobotaError {
+declare class PluginError extends AgentRuntimeError {
   readonly pluginName: string;
   readonly code = "PLUGIN_ERROR";
   readonly category: "system";
@@ -554,7 +582,7 @@ declare class PluginError extends RobotaError {
 /**
  * Storage related errors
  */
-declare class StorageError extends RobotaError {
+declare class StorageError extends AgentRuntimeError {
   readonly code = "STORAGE_ERROR";
   readonly category: "system";
   readonly recoverable = true;
@@ -563,7 +591,7 @@ declare class StorageError extends RobotaError {
 /**
  * Cache integrity validation errors
  */
-declare class CacheIntegrityError extends RobotaError {
+declare class CacheIntegrityError extends AgentRuntimeError {
   readonly code = "CACHE_INTEGRITY_ERROR";
   readonly category: "system";
   readonly recoverable = false;
@@ -1427,6 +1455,10 @@ declare function readModelFallbackNotice(data: Readonly<Record<string, unknown>>
 declare const TOOL_BODY_EVENTS: {
   readonly COMPLETED: "tool_body_completed";
 };
+/** Submission to scheduler selection or refusal; never permission or effect completion. */
+declare const TOOL_QUEUE_EVENTS: {
+  readonly COMPLETED: "tool_queue_completed";
+};
 /** Content-free decision reached for one tool call before any body runs. */
 declare const TOOL_PERMISSION_EVENTS: {
   readonly DECIDED: "tool_permission_decided";
@@ -1566,7 +1598,22 @@ interface IDeferredToolCatalog {
 //#region src/interfaces/tool.d.ts
 /** Awaited host admission for effective parameters, immediately before a tool body. */
 type TToolEffectAdmission<TParameters = TToolParameters> = (parameters: TParameters) => Promise<void>;
-type TToolContextExtensionValue = TUniversalValue | Date | Error | TLoggerData | TContextData | TToolParameters | TToolMetadata;
+/** Trusted caller scheduling; plugin annotations grant neither authority nor retry permission. */
+interface IToolCallScheduling {
+  dependsOn?: readonly string[];
+  /** Omitted means unknown shared state; an empty array explicitly declares independence. */
+  resources?: readonly {
+    key: string;
+    access: 'read' | 'write';
+  }[];
+}
+interface IToolExecutionPolicy {
+  mode?: 'parallel' | 'sequential';
+  maxConcurrency?: number;
+  continueOnError?: boolean;
+  scheduling?: ReadonlyMap<string, IToolCallScheduling>;
+}
+type TToolContextExtensionValue = TUniversalValue | Date | Error | TLoggerData | TContextData | TToolParameters | TToolMetadata | TUniversalMessagePart[];
 /**
  * Tool metadata structure - specific type definition
  */
@@ -1584,6 +1631,8 @@ type TToolMetadata = Record<string, string | number | boolean | string[] | numbe
 interface IToolResult {
   success: boolean;
   data?: TUniversalValue;
+  /** Ordered observations accompanying structured data; images stay typed through history. */
+  parts?: TUniversalMessagePart[];
   error?: string;
   metadata?: TToolMetadata;
   [key: string]: TToolContextExtensionValue | undefined;
@@ -1598,6 +1647,8 @@ interface IToolExecutionResult {
   toolName?: string;
   /** Execution result or data */
   result?: TUniversalValue;
+  /** Ordered observations retained with the durable execution settlement. */
+  parts?: TUniversalMessagePart[];
   /** Error message if execution failed */
   error?: string;
   /** Execution duration in milliseconds */
@@ -1736,7 +1787,18 @@ type TToolExecutor<TParams = TToolParameters, TResult = TUniversalValue> = (para
 /**
  * Base tool interface
  */
+/** Host-declared tool attribution. It identifies a source; it never grants execution authority. */
+interface IToolProvenance {
+  readonly sourceId: string;
+  readonly component: string;
+  readonly origin: string;
+  /** A declared source version, not proof of installed bytes. */
+  readonly version?: string;
+  readonly protocolVersion?: string;
+  readonly generation?: string;
+}
 interface ITool {
+  readonly provenance?: IToolProvenance;
   /** Tool schema */
   schema: IToolSchema;
   /**
@@ -2575,7 +2637,7 @@ interface IPluginContract<TOptions extends IPluginOptions = IPluginOptions, TSta
   /**
    * CORE-022: the single component-level disposal entry point. The base implementation
    * unsubscribes module events; overrides release owned resources (timers, sockets,
-   * storage) — always calling `super.dispose()`. Driven by `Robota.destroy()`.
+   * storage) — always calling `super.dispose()`. Driven by `ConversationAgent.destroy()`.
    */
   dispose(): Promise<void>;
   cleanup?(): Promise<void>;
@@ -2675,7 +2737,7 @@ declare class ConsoleLogger implements ILogger {
    * This logger's own threshold. `undefined` means "follow the process-wide level".
    *
    * CORE-029: the field existed and nothing ever set it, so the only way to change a level was
-   * `setGlobalLogLevel` — and `Robota`'s constructor called it from `config.logging`, which meant one
+   * `setGlobalLogLevel` — and `ConversationAgent`'s constructor called it from `config.logging`, which meant one
    * agent's per-agent setting silenced every other agent AND every other package in the process.
    * A per-agent option has to reach a per-agent logger.
    */
@@ -2687,7 +2749,7 @@ declare class ConsoleLogger implements ILogger {
    *
    * It used to be `logger || SilentLogger`, decided once in the constructor. No call site in the
    * repository ever passed one and there was no way to set one afterwards, so every diagnostic this
-   * package emits — 157 `logger.*` calls, including "Robota initialization failed" and every
+   * package emits — 157 `logger.*` calls, including "ConversationAgent initialization failed" and every
    * catch-and-log-only path — went to `SilentLogger` by construction. Not "was not configured":
    * could not be.
    *
@@ -2782,6 +2844,7 @@ interface IAbstractTool<TParams = TToolParameters, TResult = IToolResult> {
  */
 interface IToolContract<TParameters = TToolParameters, TResult = IToolResult> {
   readonly schema: IToolSchema;
+  readonly provenance?: IToolProvenance;
   execute(parameters: TParameters, context: IToolExecutionContext): Promise<TResult>;
   /**
    * Wrappers await admission exactly once with final canonical arguments after preconditions and before
@@ -2794,10 +2857,10 @@ interface IToolContract<TParameters = TToolParameters, TResult = IToolResult> {
   getName(): string;
 }
 /**
- * Runtime tool instance contract used by Robota internals.
+ * Runtime tool instance contract used by ConversationAgent internals.
  *
  * Tools passed into Agent configuration must support EventService injection
- * so Robota can emit unified tool lifecycle events.
+ * so ConversationAgent can emit unified tool lifecycle events.
  */
 interface IToolWithEventService<TParameters = TToolParameters, TResult = IToolResult> extends IToolContract<TParameters, TResult> {
   setEventService(eventService: IEventService | undefined): void;
@@ -2862,6 +2925,8 @@ interface IAgentConfig {
     toolChoice?: TToolChoice;
   };
   tools?: Array<IToolWithEventService>;
+  /** Host-owned per-round policy. Absent declarations serialize unknown shared-state operations. */
+  toolExecutionPolicy?: (calls: readonly IToolCall[]) => IToolExecutionPolicy;
   /**
    * CLI-1990: whether tools that declare `deferLoading` are withheld from the model until loaded.
    * `'auto'` (the default) decides by threshold — `resolveToolSearchMode` — so a small tool set is
@@ -3410,6 +3475,8 @@ interface IToolManager {
    * Execute a tool
    */
   executeTool(name: string, parameters: TToolParameters, context?: IToolExecutionContext): Promise<TUniversalValue>;
+  /** Full result port; absent on legacy value-only manager implementations. */
+  executeToolResult?(name: string, parameters: TToolParameters, context?: IToolExecutionContext): Promise<IToolResult>;
   /**
    * Check if tool exists
    */
@@ -3871,7 +3938,7 @@ interface ILocalExecutorConfig {
 /**
  * Configuration options for a remote executor.
  *
- * @deprecated Robota ships no remote executor, so nothing reads this type. It stays exported only
+ * @deprecated ConversationAgent ships no remote executor, so nothing reads this type. It stays exported only
  * so existing imports keep compiling; describe your own executor's options instead.
  */
 interface IRemoteExecutorConfig {
@@ -4018,7 +4085,7 @@ interface IFileSystemAsync {
  */
 /** A secret's name: the owning service and the account within it, both chosen by the caller. */
 interface ICredentialKey {
-  /** A namespace for the caller, e.g. `robota.remote-control`. */
+  /** A namespace for the caller, e.g. `agent.remote-control`. */
   readonly service: string;
   /** The secret's name within that namespace. */
   readonly account: string;
@@ -4032,6 +4099,12 @@ interface ICredentialStore {
   delete(key: ICredentialKey): Promise<void>;
 }
 //#endregion
+//#region src/utils/tool-provenance.d.ts
+/** Copy only the declared public attribution, before handing control to a tool. */
+declare function snapshotToolProvenance(source?: IToolProvenance): IToolProvenance | undefined;
+/** The execution owner's attribution overrides any result-supplied claim. */
+declare function withToolProvenance(result: IToolResult, source?: IToolProvenance): IToolResult;
+//#endregion
 //#region src/abstracts/abstract-agent.d.ts
 declare abstract class AbstractAgent<TConfig = IAgentConfig, TContext = IRunOptions, TMessage = TUniversalMessage> implements IAgent<TConfig, TContext, TMessage> {
   protected history: TMessage[];
@@ -4555,6 +4628,7 @@ declare abstract class AbstractExecutor implements IExecutor {
  */
 declare abstract class AbstractTool<TParameters = TToolParameters, TResult = IToolResult> implements IToolWithEventService<TParameters, TResult> {
   abstract readonly schema: IToolSchema;
+  readonly provenance?: IToolProvenance;
   /**
    * Logger for tool operations
    */
@@ -4715,7 +4789,7 @@ declare class ErrorUtils {
   /**
    * Create error from unknown value
    */
-  static fromUnknown(error: TErrorExternalInput, defaultMessage?: string): RobotaError;
+  static fromUnknown(error: TErrorExternalInput, defaultMessage?: string): AgentRuntimeError;
   /**
    * Wrap external errors
    */
@@ -4803,7 +4877,7 @@ interface IPlatformShellResolutionRequest {
   readonly platform?: NodeJS.Platform;
 }
 /** An explicit executable whose basename has no supported command argument family. */
-declare class UnsupportedShellError extends RobotaError {
+declare class UnsupportedShellError extends AgentRuntimeError {
   readonly executable: string;
   readonly code = "UNSUPPORTED_SHELL";
   readonly category: "user";
@@ -4845,9 +4919,9 @@ declare function toolTraceContextFor(traceContext: IRunTraceContext, toolBodyId:
  */
 declare function traceEnvFor(subprocessClass: TSubprocessTraceClass, traceContext: IRunTraceContext | undefined, spanId: string): ISubprocessTraceEnv | undefined;
 /**
- * A fresh child environment: `base`, then Robota's trace, then `overrides`. When Robota's value
+ * A fresh child environment: `base`, then ConversationAgent's trace, then `overrides`. When ConversationAgent's value
  * applies, the ambient `TRACESTATE` is dropped because it belongs to a different parent. When
- * `overrides` sets its own `TRACEPARENT`, Robota's value does not apply and `base` passes unchanged.
+ * `overrides` sets its own `TRACEPARENT`, ConversationAgent's value does not apply and `base` passes unchanged.
  * `base` itself is never modified.
  */
 declare function subprocessTraceEnvironment(base: Readonly<Record<string, string | undefined>>, traceEnv: ISubprocessTraceEnv | undefined, overrides?: Readonly<Record<string, string>>): Record<string, string | undefined>;
@@ -5495,10 +5569,13 @@ declare class ToolRegistry implements IToolRegistry {
  * circular runtime dependency (tools -> agents -> tools).
  */
 declare class FunctionTool implements IFunctionTool {
+  private readonly resultExecutor?;
   readonly schema: IToolSchema;
   readonly fn: TToolExecutor;
   private eventService;
-  constructor(schema: IToolSchema, fn: TToolExecutor);
+  constructor(schema: IToolSchema, fn: TToolExecutor, resultExecutor?: TToolExecutor<TToolParameters, IToolResult> | undefined);
+  /** Register an envelope executor explicitly; ordinary function values remain domain data. */
+  static fromResult(schema: IToolSchema, execute: TToolExecutor<TToolParameters, IToolResult>): FunctionTool;
   /**
    * Get tool name
    */
@@ -5546,11 +5623,11 @@ declare const DEFERRED_WITHOUT_LOADER_MESSAGE: string;
  */
 declare function assertResidentToolRemains(schemas: readonly IToolSchema[]): void;
 //#endregion
-//#region src/core/robota-types.d.ts
+//#region src/core/agent-types.d.ts
 /**
  * Shared model configuration shape used in setModel / getModel. The system prompt is intentionally
  * absent: it is an agent-level concern (top-level `config.systemMessage`), updated live via
- * `Robota.updateSystemPrompt`, not part of model config.
+ * `ConversationAgent.updateSystemPrompt`, not part of model config.
  */
 interface IModelConfig {
   provider: string;
@@ -5595,7 +5672,7 @@ type TExecuteModuleResult = {
   duration?: number;
 };
 //#endregion
-//#region src/core/robota-base.d.ts
+//#region src/core/conversation-agent-base.d.ts
 type TPlugin = IPluginContract<IPluginOptions, IPluginStats> & IPluginHooks;
 interface IModuleManagerProxy {
   registerModule(module: IModule, options?: TRegisterModuleOptions): Promise<void>;
@@ -5615,11 +5692,11 @@ interface IPluginManagerProxy {
   getPlugins(): TPlugin[];
   getPluginNames(): string[];
 }
-declare abstract class RobotaBase extends AbstractAgent<IAgentConfig, IRunOptions, TUniversalMessage> {
+declare abstract class ConversationAgentBase extends AbstractAgent<IAgentConfig, IRunOptions, TUniversalMessage> {
   protected moduleManager: IModuleManagerProxy;
   protected pluginManager: IPluginManagerProxy;
   /**
-   * Narrowed from `AbstractAgent`'s optional `config`: a Robota agent always has one, assigned in the
+   * Narrowed from `AbstractAgent`'s optional `config`: a ConversationAgent agent always has one, assigned in the
    * constructor. Declared HERE so `name` below can read it without a fallback that would lie.
    */
   protected config: IAgentConfig;
@@ -5765,6 +5842,8 @@ declare class Tools extends AbstractManager implements IToolManager {
    * Register a tool with schema and executor function
    */
   addTool(schema: IToolSchema, executor: TToolExecutor): void;
+  /** Register a typed result executor without discarding its observations or failure envelope. */
+  addResultTool(schema: IToolSchema, executor: TToolExecutor<TToolParameters, IToolResult>, provenance?: IToolProvenance): void;
   /**
    * Remove a tool by name
    */
@@ -5803,6 +5882,8 @@ declare class Tools extends AbstractManager implements IToolManager {
    * Execute a tool with parameters
    */
   executeTool(name: string, parameters: TToolParameters, context?: IToolExecutionContext): Promise<TUniversalValue>;
+  /** Execute the full result envelope for runtime observation and durable settlement. */
+  executeToolResult(name: string, parameters: TToolParameters, context?: IToolExecutionContext): Promise<IToolResult>;
   /**
    * Check if tool exists
    */
@@ -5825,7 +5906,7 @@ declare class Tools extends AbstractManager implements IToolManager {
   getToolCount(): number;
 }
 //#endregion
-//#region src/core/robota-config-manager.d.ts
+//#region src/core/agent-config-manager.d.ts
 /** Agent statistics metadata type */
 type TAgentStatsMetadata = Record<string, string | number | boolean | Date | string[]>;
 //#endregion
@@ -5864,9 +5945,9 @@ declare const EXECUTION_EVENTS: {
 };
 declare const EXECUTION_EVENT_PREFIX: "execution";
 //#endregion
-//#region src/core/robota-lifecycle.d.ts
+//#region src/core/agent-lifecycle.d.ts
 /** Dependencies required by getStats. @internal */
-interface IRobotaStatsDeps {
+interface IAgentStatsDeps {
   readonly name: string;
   readonly version: string;
   readonly conversationId: string;
@@ -5879,7 +5960,7 @@ interface IRobotaStatsDeps {
   getHistory(): TUniversalMessage[];
 }
 /** Build comprehensive agent statistics. @internal */
-declare function buildAgentStats(deps: IRobotaStatsDeps): {
+declare function buildAgentStats(deps: IAgentStatsDeps): {
   name: string;
   version: string;
   conversationId: string;
@@ -5897,9 +5978,9 @@ interface IDestroyResult {
   errors: Error[];
 }
 //#endregion
-//#region src/core/robota.d.ts
+//#region src/core/conversation-agent.d.ts
 /** @public */
-declare class Robota extends RobotaBase implements IAgent<IAgentConfig, IRunOptions, TUniversalMessage> {
+declare class ConversationAgent extends ConversationAgentBase implements IAgent<IAgentConfig, IRunOptions, TUniversalMessage> {
   readonly version: string;
   private aiProviders;
   private tools;
@@ -5942,14 +6023,14 @@ declare class Robota extends RobotaBase implements IAgent<IAgentConfig, IRunOpti
    */
   resumeToolCalls(value: IResumeToolCallsOptions): Promise<IResumeToolCallsResult>;
   /**
-   * Concurrency contract (CORE-012): a Robota instance owns ONE conversation history, so
+   * Concurrency contract (CORE-012): a ConversationAgent instance owns ONE conversation history, so
    * concurrent `run`/`runStream` calls on the same instance are serialized on an internal queue —
    * a call issued while another is in flight waits its turn (its `signal` is honored while queued).
    * Interleaved histories are therefore impossible by construction.
    *
    * Structured output (CORE-015): with `options.output` set the promise resolves to the validated
    * object (typed `z.infer<S>` for a Zod schema) instead of a string. Note the structured typing
-   * is visible on `Robota` directly; through the generic `IAgent` interface the return type stays
+   * is visible on `ConversationAgent` directly; through the generic `IAgent` interface the return type stays
    * `Promise<string>`.
    */
   run<S extends ZodType>(input: string, options: TRunOptionsWithOutput<S>): Promise<TypeOf<S>>;
@@ -6916,10 +6997,17 @@ declare const UNCLASSIFIED_TOOL_FALLBACK: Record<TPermissionMode, TPermissionDec
 declare const PROTECTED_DIRECTORY_NAMES: readonly string[];
 /** Files that configure git, npm, MCP servers or the user's shell, wherever they sit. */
 declare const PROTECTED_FILE_NAMES: readonly string[];
+/** Additional host-owned state protection; common repository and shell protection always applies. */
+interface IPathProtectionPolicy {
+  readonly protectedDirectoryNames: readonly string[];
+  readonly protectedPaths: readonly string[];
+  readonly writableWorktreeContainers: readonly string[];
+}
 /** Whether a path names a protected directory, something inside one, or a protected file. */
-declare function isProtectedPath(path: string): boolean;
+declare function isProtectedPath(path: string, context?: ICriticalPathContext): boolean;
 /** Where a removal is judged from. Either may be unknown; what is unknown is not guessed. */
 interface ICriticalPathContext {
+  readonly pathProtection?: IPathProtectionPolicy;
   /** The session's execution root. */
   cwd?: string;
   /** The user's home directory. */
@@ -7628,5 +7716,9 @@ declare function decodeHookVerdict(raw: string, source: THookDefinition['type'],
 /** Does a hook that reached no verdict block at this event? */
 declare function isEnforcing(event: THookEvent): boolean;
 //#endregion
-export { AGENT_EVENTS, AGENT_EVENT_PREFIX, AbstractAIProvider, AbstractAgent, AbstractEventService, AbstractExecutor, AbstractManager, AbstractPlugin, AbstractTool, AgentFactory, AgentTemplates, AuthenticationError, CONFIRM_NO, CONFIRM_YES, CONTEXT_ESTIMATE_CHARS_PER_TOKEN, CacheIntegrityError, CircuitBreakerOpenError, ConfigurationError, ConsoleLogger, ConversationHistory, ConversationStore, DEFAULT_ABSTRACT_EVENT_SERVICE, DEFAULT_BACKGROUND_PERMISSION_POLICY, DEFAULT_CONTEXT_WINDOW, DEFAULT_MAX_OUTPUT, DEFAULT_TOOL_RESULT_HARD_CHARS, DEFAULT_TOOL_RESULT_WARNING_CHARS, DEFERRED_WITHOUT_LOADER_MESSAGE, DefaultEventService, ENV_REFERENCE_PREFIX, EVENT_EMITTER_EVENTS, EXECUTION_EVENTS, EXECUTION_EVENT_PREFIX, EmptyCompletionError, ErrorUtils, EventEmitterPlugin, EventHistoryModule, ExecutionJournalError, ExecutionProxy, ExecutionRecoveryError, ExecutionSuspendedError, FunctionTool, GuardrailExecutor, type IAIProvider, type IAIProviderInstance, type IAIProviderManager, type IAbstractTool, type IAbstractToolOptions, type IActionDefault, type IActionOption, type IActionRequest, type IAgent, type IAgentConfig, type IAgentCreationStats, type IAgentEventData, type IAgentFactoryOptions, type IAgentHookDefinition, type IAgentLifecycleEvents, type IAgentTemplate, type IAssistantMessage, type IAssistantUsageMetadata, type IBaseEventData, type IBaseMessage, type IBoundedOutput, type IBoundedOutputOptions, type ICacheEntry, type ICacheKey, type ICacheOptions, type ICacheStats, type ICacheStorage, type IChatExecutionRequest, type IChatOptions, type ICommandHookDefinition, type IContextOptions, type IContextTokenEstimate, type IContextTokenEstimateOptions, type IContextTokenUsage, type IContextWindowState, type IConversationContext, type IConversationResponse, type IConversationService, type IConversationServiceOptions, type ICredentialKey, type ICredentialStore, type ICriticalPathContext, type IDeferredToolCatalog, type IDestroyResult, type IDirent, type IEventContext, type IEventEmitterEventData, type IEventEmitterHierarchicalEventData, type IEventEmitterMetrics, type IEventEmitterMetricsSnapshot, type IEventEmitterPlugin, type IEventEmitterPluginOptions, type IEventHistoryModule, type IEventHistoryRecord, type IEventHistorySnapshot, type IEventObjectValue, type IEventService, type IEventServiceOwnerBinding, type IExecutionContinuationState, type IExecutionEventData, type IExecutionJournal, type IExecutionProxyConfig, type IExecutionRoundCheckpoint, type IExecutor, IExecutorAwareProviderConfig, type IExecutorChatResult, type IExecutorStreamMessageEvent, type IExecutorStreamTerminalEvent, type IFileSystem, type IFileSystemAsync, type IFunctionTool, type IGroupChatOrchestrationSpec, type IGuardrailHookDefinition, type IGuardrailResult, type IHandoffOrchestrationSpec, type IHierarchicalOrchestrationSpec, type IHistoryEntry, type IHookGroup, type IHookInput, type IHookTypeExecutor, type IHttpHookDefinition, type IImageComposeRequest, type IImageEditRequest, type IImageGenerationProvider, type IImageGenerationRequest, type IImageGenerationResult, type IInlineImageInputSource, type IInlineImageMessagePart, type IJsonSchemaOutput, type ILocalExecutorConfig, ILogger, ILoggerOptions, IManagerLifecycleOptions, type IMediaOutputRef, type IMediaProviderConfig, type IMediaProviderCredentialRequirement, type IMediaProviderDefinition, type IMediaProviderOverrides, type IMessageTokenUsage, type IModelCapabilityDeviation, type IModelDefinition, type IModelEffortCapability, type IModelEffortOutcome, type IModelEffortResolution, type IModelFallbackNotice, type IModelJournalContext, type IModelPrice, type IModelRef, type IObjectParameterSchema, type IOpenAPIToolConfig, type IOrchestrationDelegation, type IOrchestrationEventData, type IOrchestrationRunResult, type IOrchestrationStep, type IOrchestrationStepResult, type IOutboundTraceContext, type IOwnerPathSegment, type IParallelOrchestrationSpec, type IParameterRule, type IParameterSchema, type IParameterValidationResult, type IPermissionEvaluationContext, type IPermissionLists, type IPermissionPatternProblem, type IPermissionPolicyContext, type IPermissionPolicyProjection, IPlatformShell, IPlatformShellResolutionRequest, type IPlugin, type IPluginConfig, type IPluginContext, type IPluginContract, type IPluginData, type IPluginErrorContext, type IPluginExecutionContext, type IPluginExecutionResult, type IPluginHooks, type IPluginOptions, type IPluginStats, type IProgressReportingTool, type IPromptHookDefinition, type IProviderCapabilities, type IProviderCapabilityTable, type IProviderCredentialRequirement, type IProviderDefinition, type IProviderDefinitionConfig, type IProviderEndpoint, type IProviderFailureClassification, IProviderFailureDetails, type IProviderFunctionCallingCapability, type IProviderMediaError, type IProviderModelCatalog, type IProviderModelCatalogEntry, type IProviderModelEffortTable, type IProviderNativeRawPayloadEvent, type IProviderNativeWebToolCapabilities, type IProviderNativeWebToolCapability, type IProviderNativeWebToolRequest, type IProviderOptions, type IProviderProbeResult, type IProviderProfileConfig, type IProviderProfileDefaults, type IProviderRequest, IProviderRuntimeConfig, type IProviderSetupHelpLink, type IProviderSetupStepDefinition, type IProviderSpecificOptions, type IProviderStructuredOutputCapability, type IRawProviderResponse, type IReadOnlyCommandContext, type IRecoverableExecutionJournal, type IRegistryOwnedLifecycle, type IRegistryTransactionError, type IRegistryTransactionStep, type IRemoteExecutorConfig, type IResponseFormatConfig, type IResumeExecutionOptions, type IResumeToolCallsOptions, type IResumeToolCallsResult, type IRunOptions, type IRunTraceContext, type ISchemaClosureChange, type ISchemaClosureOptions, type ISchemaConversionOptions, type ISequentialOrchestrationSpec, type ISession, type ISessionUsageTotals, ISimpleValidationResult, type ISpanCompletionEventData, type ISpinner, type IStats, type IStreamExecutionRequest, type IStreamingChunk, type IStructuredOutputResolutionInput, type IStructuredOutputSpec, type ISubprocessTraceEnv, type ISystemMessage, type ITemplateApplicationResult, type ITerminalOutput, type ITextMessagePart, type ITokenUsage, type ITokenUsageWithCacheRead, type ITool, type IToolActionIdentity, type IToolCall, type IToolContinuation, type IToolContinuationPrompt, type IToolContract, type IToolEventData, type IToolExecutionContext, type IToolExecutionRequest, type IToolExecutionResult, type IToolExecutionStep, type IToolFactory, type IToolManager, type IToolMessage, type IToolPermissionArgument, type IToolPermissionProfile, type IToolRegistry, type IToolResult, type IToolResultAdmissionOptions, type IToolResultSpillStore, type IToolSchema, type IToolSchemaProjection, type IToolSchemaProjectionChange, type IToolSchemaProjectionProfile, type IToolWaitRequest, type IToolWaitResponse, type IToolWaitState, type IToolWithEventService, type IUniversalObjectValue, type IUriImageInputSource, type IUriImageMessagePart, type IUserInteraction, type IUserMessage, IUtilLogEntry, type IVerifiedProviderCallUsage, type IVideoGenerationProvider, type IVideoGenerationRequest, type IVideoJobAccepted, type IVideoJobSnapshot, type IZodParseResult, type IZodSchema, type IZodSchemaDef, InMemoryEventEmitterMetrics, LocalExecutor, MAX_TOOL_RESULT_CHARS, MODEL_EFFORT_VALUES, MODEL_PRICES, MessageConverter, ModelNotAvailableError, NetworkError, ORCHESTRATION_EVENTS, ORCHESTRATION_EVENT_PREFIX, ObservableEventService, PARAMETER_SCHEMA_KEYWORDS, PERMISSIVE_TOOL_SCHEMA_PROFILE, PROTECTED_DIRECTORY_NAMES, PROTECTED_FILE_NAMES, PROVIDER_CALL_EVENTS, PROVIDER_FALLBACK_EVENTS, PluginCategory, PluginError, PluginPriority, ProviderError, RISK_CLASS_POLICY, RateLimitError, Robota, RobotaError, SPAN_EVENTS, SPAN_EVENT_PREFIX, STRICT_TOOL_SCHEMA_PROFILE, SameToolInputLoopError, SilentLogger, StorageError, StructuredEventService, StructuredOutputError, TASK_EVENTS, TASK_EVENT_PREFIX, type TActionResponse, type TArgumentKind, type TBackgroundPermissionPolicy, TComplexConfigValue, TConfigData, TConfigValue, TContextData, type TConversationContextMetadata, type TEnvResolver, TErrorContextData, TErrorExternalInput, type TEventEmitterListener, type TEventExtensionValue, type TEventListener, type TEventLoggerData, type TEventName, type TEventUniversalValue, type TExecutionEventCallback, type TExecutionEventData, type TExecutionEventName, type TExecutionJournalRecord, type TExecutionRecoveryErrorCode, type TExecutorStreamEvent, type TGuardrail, type THookDefinition, type THookEvent, type THookOutcome, type THooksConfig, type TImageInputSource, type TJSONSchemaEnum, type TJSONSchemaKind, type TJournalModelOptions, TLoggerData, type TManagerToolParameters, type TMatchDirection, TMessageConverterRegistry, TMessageFormatConverter, type TMessageState, TMetadata, TMetadataValue, type TModelEffort, type TModelEffortDisposition, type TModelEffortNativeControl, type TModelEffortOutcomeCallback, type TModelEffortProviderDispatch, type TModelEffortSelection, type TModelFallbackCallback, TOOL_BODY_EVENTS, TOOL_EVENTS, TOOL_EVENT_PREFIX, TOOL_PERMISSION_EVENTS, TOOL_SCHEMA_PROJECTION_MAX_DEPTH, TOOL_SCHEMA_PROJECTION_MAX_NODES, TOOL_SEARCH_TOOL_NAME, type TOrchestrationEvent, type TOrchestrationPrimitive, type TOutputRetention, type TParameterDefaultValue, type TPermissionDecision, type TPermissionMode, type TPrimitiveValue, type TProviderConfigValue, type TProviderCredentialField, type TProviderFailureReason, TProviderLoggingData, type TProviderMediaResult, TProviderMessage, type TProviderModelCapability, type TProviderModelCatalogStatus, type TProviderModelLifecycle, type TProviderNativeRawPayload, type TProviderNativeRawPayloadCallback, type TProviderNativeRawPayloadKind, type TProviderOptionValueBase, type TProviderSetupField, type TProviderSetupHelpLinkKind, type TProviderUsageProvenance, TRUST_TO_MODE, type TResolveInWorkspace, type TResponseMetadata, type TRoleModelMap, type TSessionEndReason, TShellKind, type TSpanEvent, type TStructuredOutputMechanism, type TStructuredOutputProvenance, type TStructuredOutputSchema, type TStructuredOutputValidation, type TSubprocessTraceClass, type TTextDeltaCallback, type TTimerId, type TToolArgs, type TToolChoice, type TToolEffectAdmission, type TToolExecutionFunction, type TToolExecutionParameters, type TToolExecutor, type TToolMetadata, TToolParameters, type TToolProgressCallback, type TToolResultAdmissionErrorCode, type TToolRiskClass, type TToolSchemaProjectionOutcome, type TToolSchemaProjectionProfileBase, type TToolSearchMode, type TToolSearchSetting, type TTrustLevel, type TUniversalArrayValue, type TUniversalMessage, type TUniversalMessageMetadata, type TUniversalMessagePart, type TUniversalMessageRole, type TUniversalValue, type TUserEvent, TUtilLogLevel, ToolExecutionError, ToolRegistry, ToolResultAdmissionError, TypeUtils, UNCLASSIFIED_TOOL_FALLBACK, USER_EVENTS, USER_EVENT_PREFIX, UnsupportedShellError, ValidationError, Validator, admitToolResult, allowRulesForAutoMode, applyPresetToolLists, assertProviderNativeWebToolsAvailable, assertResidentToolRemains, bindEventServiceOwner, bindWithOwnerPath, buildTraceparent, calculateModelCost, callJournaledProvider, chatEntryToMessage, classifyProviderFailure, clearRegisteredToolProfiles, closeObjectSchemas, collectAssistantUsageMetadata, composeEventName, confirmAction, createAssistantMessage, createBoundedOutput, createDefaultProviderCapabilities, createExecutionProxy, createImageProviderFromDefinition, createLogger, createModelEffortOutcome, createProviderFromConfig, createRecordEnvResolver, createSystemMessage, createToolMessage, createUserMessage, createVideoProviderFromDefinition, decodeHookVerdict, estimateBlendedCostPer1000, estimateContextTokensFromMessages, estimateSerializedContextTokens, estimateToolSchemaTokens, evaluatePermission, extractEnumValues, findInvalidPermissionPatterns, findMediaProviderDefinition, findModelDefinition, findPermissionPatternWarnings, findProviderDefinition, formatEnvReference, formatSupportedProviderTypes, formatTokenCount, generateSpanId, getGlobalLogLevel, getGlobalLoggerSink, getMessagesForAPI, getModelContextWindow, getModelMaxOutput, getModelName, getProviderCapabilities, getProviderCredentialRequirement, getSchemaTypeName, getToolEstimatedDuration, getToolExecutionSteps, getToolPermissionProfile, hasUsableSecretReference, hasValidationConstraints, hashToolSchema, isAbortFailure, isAssistantMessage, isBroadExecutionAllowRule, isChatEntry, isConfirmed, isDefaultEventService, isEnforcing, isEnvReference, isExecutionControlError, isImageGenerationProvider, isMediaProviderDefinition, isMintedSpanId, isModelEffort, isProgressReportingTool, isProtectedPath, isReadOnlyCommandLine, isRegistryTransactionError, isSystemMessage, isToolDeniedOutright, isToolMessage, isUserMessage, isVideoGenerationProvider, lifecycleOf, logger, lookupModelPrice, matchesAnyPattern, messageToHistoryEntry, modelDeclaresCapability, multiSelectAction, normalizeProviderConfig, normalizeStructuredOutput, outboundTraceContextFor, parseParameterRule, parseStructuredResponseText, peerDriverOf, printablePeerDriver, processEnvResolver, projectPermissionPolicy, projectToolSchema, providerCallSpanId, readModelFallbackNotice, readProviderFailureDetails, readTokenUsageFromMessage, readTokenUsageFromMetadata, registerModelMetadata, registerToolPermissionProfile, removesCriticalPath, requiresFreshApproval, resolveEnvReference, resolveMediaProviderConfig, resolveModelCapabilities, resolveModelCapability, resolveModelEffort, resolvePlatformShell, resolveStructuredOutputCapability, runHooks, runRegistryTransaction, scrubSecrets, selectAction, setGlobalLogLevel, setGlobalLoggerSink, setToolProgressCallback, shellArgumentForDisplay, spanIdFromMintedId, splitCommandSegments, startPeriodicTask, stopPeriodicTask, subprocessTraceEnvironment, sumHistoryUsage, sumMessagesUsage, textAction, toProviderError, toolNameMatches, toolNamesToPatterns, toolTraceContextFor, traceEnvFor, traceHeadersFor, validateAgainstJsonSchema, validateAgentConfig, validateApiKey, validateModelName, validatePermissionPattern, validateProviderName, validateUserInput, verifiedProviderCallUsage, wasToolResultAdmitted, withEventEmission, zodToJsonSchema };
+//#region src/utils/non-visual-observation-text.d.ts
+/** Text projection for adapters without native resource or audio payload support. Never resolves URIs. */
+declare function nonVisualObservationText(part: TUniversalMessagePart): string | undefined;
+//#endregion
+export { AGENT_EVENTS, AGENT_EVENT_PREFIX, AbstractAIProvider, AbstractAgent, AbstractEventService, AbstractExecutor, AbstractManager, AbstractPlugin, AbstractTool, AgentFactory, AgentRuntimeError, AgentTemplates, AuthenticationError, CONFIRM_NO, CONFIRM_YES, CONTEXT_ESTIMATE_CHARS_PER_TOKEN, CacheIntegrityError, CircuitBreakerOpenError, ConfigurationError, ConsoleLogger, ConversationAgent, ConversationAgent as Robota, ConversationHistory, ConversationStore, DEFAULT_ABSTRACT_EVENT_SERVICE, DEFAULT_BACKGROUND_PERMISSION_POLICY, DEFAULT_CONTEXT_WINDOW, DEFAULT_MAX_OUTPUT, DEFAULT_TOOL_RESULT_HARD_CHARS, DEFAULT_TOOL_RESULT_WARNING_CHARS, DEFERRED_WITHOUT_LOADER_MESSAGE, DefaultEventService, ENV_REFERENCE_PREFIX, EVENT_EMITTER_EVENTS, EXECUTION_EVENTS, EXECUTION_EVENT_PREFIX, EmptyCompletionError, ErrorUtils, EventEmitterPlugin, EventHistoryModule, ExecutionJournalError, ExecutionProxy, ExecutionRecoveryError, ExecutionSuspendedError, FunctionTool, GuardrailExecutor, type IAIProvider, type IAIProviderInstance, type IAIProviderManager, type IAbstractTool, type IAbstractToolOptions, type IActionDefault, type IActionOption, type IActionRequest, type IAgent, type IAgentConfig, type IAgentCreationStats, type IAgentEventData, type IAgentFactoryOptions, type IAgentHookDefinition, type IAgentLifecycleEvents, type IAgentTemplate, type IAssistantMessage, type IAssistantUsageMetadata, type IBaseEventData, type IBaseMessage, type IBoundedOutput, type IBoundedOutputOptions, type ICacheEntry, type ICacheKey, type ICacheOptions, type ICacheStats, type ICacheStorage, type IChatExecutionRequest, type IChatOptions, type ICommandHookDefinition, type IContextOptions, type IContextTokenEstimate, type IContextTokenEstimateOptions, type IContextTokenUsage, type IContextWindowState, type IConversationContext, type IConversationResponse, type IConversationService, type IConversationServiceOptions, type ICredentialKey, type ICredentialStore, type ICriticalPathContext, type IDeferredToolCatalog, type IDestroyResult, type IDirent, type IEventContext, type IEventEmitterEventData, type IEventEmitterHierarchicalEventData, type IEventEmitterMetrics, type IEventEmitterMetricsSnapshot, type IEventEmitterPlugin, type IEventEmitterPluginOptions, type IEventHistoryModule, type IEventHistoryRecord, type IEventHistorySnapshot, type IEventObjectValue, type IEventService, type IEventServiceOwnerBinding, type IExecutionContinuationState, type IExecutionEventData, type IExecutionJournal, type IExecutionProxyConfig, type IExecutionRoundCheckpoint, type IExecutor, IExecutorAwareProviderConfig, type IExecutorChatResult, type IExecutorStreamMessageEvent, type IExecutorStreamTerminalEvent, type IFileSystem, type IFileSystemAsync, type IFunctionTool, type IGroupChatOrchestrationSpec, type IGuardrailHookDefinition, type IGuardrailResult, type IHandoffOrchestrationSpec, type IHierarchicalOrchestrationSpec, type IHistoryEntry, type IHookGroup, type IHookInput, type IHookTypeExecutor, type IHttpHookDefinition, type IImageComposeRequest, type IImageEditRequest, type IImageGenerationProvider, type IImageGenerationRequest, type IImageGenerationResult, type IInlineAudioMessagePart, type IInlineImageInputSource, type IInlineImageMessagePart, type IJsonSchemaOutput, type ILocalExecutorConfig, ILogger, ILoggerOptions, IManagerLifecycleOptions, type IMediaOutputRef, type IMediaProviderConfig, type IMediaProviderCredentialRequirement, type IMediaProviderDefinition, type IMediaProviderOverrides, type IMessageTokenUsage, type IModelCapabilityDeviation, type IModelDefinition, type IModelEffortCapability, type IModelEffortOutcome, type IModelEffortResolution, type IModelFallbackNotice, type IModelJournalContext, type IModelPrice, type IModelRef, type IObjectParameterSchema, type IOpenAPIToolConfig, type IOrchestrationDelegation, type IOrchestrationEventData, type IOrchestrationRunResult, type IOrchestrationStep, type IOrchestrationStepResult, type IOutboundTraceContext, type IOwnerPathSegment, type IParallelOrchestrationSpec, type IParameterRule, type IParameterSchema, type IParameterValidationResult, type IPathProtectionPolicy, type IPermissionEvaluationContext, type IPermissionLists, type IPermissionPatternProblem, type IPermissionPolicyContext, type IPermissionPolicyProjection, IPlatformShell, IPlatformShellResolutionRequest, type IPlugin, type IPluginConfig, type IPluginContext, type IPluginContract, type IPluginData, type IPluginErrorContext, type IPluginExecutionContext, type IPluginExecutionResult, type IPluginHooks, type IPluginOptions, type IPluginStats, type IProgressReportingTool, type IPromptHookDefinition, type IProviderCapabilities, type IProviderCapabilityTable, type IProviderCredentialRequirement, type IProviderDefinition, type IProviderDefinitionConfig, type IProviderEndpoint, type IProviderFailureClassification, IProviderFailureDetails, type IProviderFunctionCallingCapability, type IProviderMediaError, type IProviderModelCatalog, type IProviderModelCatalogEntry, type IProviderModelEffortTable, type IProviderNativeRawPayloadEvent, type IProviderNativeWebToolCapabilities, type IProviderNativeWebToolCapability, type IProviderNativeWebToolRequest, type IProviderOptions, type IProviderProbeResult, type IProviderProfileConfig, type IProviderProfileDefaults, type IProviderRequest, IProviderRuntimeConfig, type IProviderSetupHelpLink, type IProviderSetupStepDefinition, type IProviderSpecificOptions, type IProviderStructuredOutputCapability, type IRawProviderResponse, type IReadOnlyCommandContext, type IRecoverableExecutionJournal, type IRegistryOwnedLifecycle, type IRegistryTransactionError, type IRegistryTransactionStep, type IRemoteExecutorConfig, type IResourceLinkMessagePart, type IResponseFormatConfig, type IResumeExecutionOptions, type IResumeToolCallsOptions, type IResumeToolCallsResult, type IRunOptions, type IRunTraceContext, type ISchemaClosureChange, type ISchemaClosureOptions, type ISchemaConversionOptions, type ISequentialOrchestrationSpec, type ISession, type ISessionUsageTotals, ISimpleValidationResult, type ISpanCompletionEventData, type ISpinner, type IStats, type IStreamExecutionRequest, type IStreamingChunk, type IStructuredOutputResolutionInput, type IStructuredOutputSpec, type ISubprocessTraceEnv, type ISystemMessage, type ITemplateApplicationResult, type ITerminalOutput, type ITextMessagePart, type ITokenUsage, type ITokenUsageWithCacheRead, type ITool, type IToolActionIdentity, type IToolCall, type IToolCallScheduling, type IToolContinuation, type IToolContinuationPrompt, type IToolContract, type IToolEventData, type IToolExecutionContext, type IToolExecutionPolicy, type IToolExecutionRequest, type IToolExecutionResult, type IToolExecutionStep, type IToolFactory, type IToolManager, type IToolMessage, type IToolPermissionArgument, type IToolPermissionProfile, type IToolProvenance, type IToolRegistry, type IToolResult, type IToolResultAdmissionOptions, type IToolResultSpillStore, type IToolSchema, type IToolSchemaProjection, type IToolSchemaProjectionChange, type IToolSchemaProjectionProfile, type IToolWaitRequest, type IToolWaitResponse, type IToolWaitState, type IToolWithEventService, type IUniversalObjectValue, type IUriImageInputSource, type IUriImageMessagePart, type IUserInteraction, type IUserMessage, IUtilLogEntry, type IVerifiedProviderCallUsage, type IVideoGenerationProvider, type IVideoGenerationRequest, type IVideoJobAccepted, type IVideoJobSnapshot, type IZodParseResult, type IZodSchema, type IZodSchemaDef, InMemoryEventEmitterMetrics, LocalExecutor, MAX_TOOL_RESULT_CHARS, MODEL_EFFORT_VALUES, MODEL_PRICES, MessageConverter, ModelNotAvailableError, NetworkError, ORCHESTRATION_EVENTS, ORCHESTRATION_EVENT_PREFIX, ObservableEventService, PARAMETER_SCHEMA_KEYWORDS, PERMISSIVE_TOOL_SCHEMA_PROFILE, PROTECTED_DIRECTORY_NAMES, PROTECTED_FILE_NAMES, PROVIDER_CALL_EVENTS, PROVIDER_FALLBACK_EVENTS, PluginCategory, PluginError, PluginPriority, ProviderError, RISK_CLASS_POLICY, RateLimitError, SPAN_EVENTS, SPAN_EVENT_PREFIX, STRICT_TOOL_SCHEMA_PROFILE, SameToolInputLoopError, SilentLogger, StorageError, StructuredEventService, StructuredOutputError, TASK_EVENTS, TASK_EVENT_PREFIX, type TActionResponse, type TArgumentKind, type TBackgroundPermissionPolicy, TComplexConfigValue, TConfigData, TConfigValue, TContextData, type TConversationContextMetadata, type TEmbeddedResourceMessagePart, type TEnvResolver, TErrorContextData, TErrorExternalInput, type TEventEmitterListener, type TEventExtensionValue, type TEventListener, type TEventLoggerData, type TEventName, type TEventUniversalValue, type TExecutionEventCallback, type TExecutionEventData, type TExecutionEventName, type TExecutionJournalRecord, type TExecutionRecoveryErrorCode, type TExecutorStreamEvent, type TGuardrail, type THookDefinition, type THookEvent, type THookOutcome, type THooksConfig, type TImageInputSource, type TJSONSchemaEnum, type TJSONSchemaKind, type TJournalModelOptions, TLoggerData, type TManagerToolParameters, type TMatchDirection, TMessageConverterRegistry, TMessageFormatConverter, type TMessageState, TMetadata, TMetadataValue, type TModelEffort, type TModelEffortDisposition, type TModelEffortNativeControl, type TModelEffortOutcomeCallback, type TModelEffortProviderDispatch, type TModelEffortSelection, type TModelFallbackCallback, TOOL_BODY_EVENTS, TOOL_EVENTS, TOOL_EVENT_PREFIX, TOOL_PERMISSION_EVENTS, TOOL_QUEUE_EVENTS, TOOL_SCHEMA_PROJECTION_MAX_DEPTH, TOOL_SCHEMA_PROJECTION_MAX_NODES, TOOL_SEARCH_TOOL_NAME, type TOrchestrationEvent, type TOrchestrationPrimitive, type TOutputRetention, type TParameterDefaultValue, type TPermissionDecision, type TPermissionMode, type TPrimitiveValue, type TProviderConfigValue, type TProviderCredentialField, type TProviderFailureReason, TProviderLoggingData, type TProviderMediaResult, TProviderMessage, type TProviderModelCapability, type TProviderModelCatalogStatus, type TProviderModelLifecycle, type TProviderNativeRawPayload, type TProviderNativeRawPayloadCallback, type TProviderNativeRawPayloadKind, type TProviderOptionValueBase, type TProviderSetupField, type TProviderSetupHelpLinkKind, type TProviderUsageProvenance, TRUST_TO_MODE, type TResolveInWorkspace, type TResponseMetadata, type TRoleModelMap, type TSessionEndReason, TShellKind, type TSpanEvent, type TStructuredOutputMechanism, type TStructuredOutputProvenance, type TStructuredOutputSchema, type TStructuredOutputValidation, type TSubprocessTraceClass, type TTextDeltaCallback, type TTimerId, type TToolArgs, type TToolChoice, type TToolEffectAdmission, type TToolExecutionFunction, type TToolExecutionParameters, type TToolExecutor, type TToolMetadata, TToolParameters, type TToolProgressCallback, type TToolResultAdmissionErrorCode, type TToolRiskClass, type TToolSchemaProjectionOutcome, type TToolSchemaProjectionProfileBase, type TToolSearchMode, type TToolSearchSetting, type TTrustLevel, type TUniversalArrayValue, type TUniversalMessage, type TUniversalMessageMetadata, type TUniversalMessagePart, type TUniversalMessageRole, type TUniversalValue, type TUserEvent, TUtilLogLevel, ToolExecutionError, ToolRegistry, ToolResultAdmissionError, TypeUtils, UNCLASSIFIED_TOOL_FALLBACK, USER_EVENTS, USER_EVENT_PREFIX, UnsupportedShellError, ValidationError, Validator, admitToolResult, allowRulesForAutoMode, applyPresetToolLists, assertProviderNativeWebToolsAvailable, assertResidentToolRemains, bindEventServiceOwner, bindWithOwnerPath, buildTraceparent, calculateModelCost, callJournaledProvider, chatEntryToMessage, classifyProviderFailure, clearRegisteredToolProfiles, closeObjectSchemas, collectAssistantUsageMetadata, composeEventName, confirmAction, createAssistantMessage, createBoundedOutput, createDefaultProviderCapabilities, createExecutionProxy, createImageProviderFromDefinition, createLogger, createModelEffortOutcome, createProviderFromConfig, createRecordEnvResolver, createSystemMessage, createToolMessage, createUserMessage, createVideoProviderFromDefinition, decodeHookVerdict, estimateBlendedCostPer1000, estimateContextTokensFromMessages, estimateSerializedContextTokens, estimateToolSchemaTokens, evaluatePermission, extractEnumValues, findInvalidPermissionPatterns, findMediaProviderDefinition, findModelDefinition, findPermissionPatternWarnings, findProviderDefinition, formatEnvReference, formatSupportedProviderTypes, formatTokenCount, generateSpanId, getGlobalLogLevel, getGlobalLoggerSink, getMessagesForAPI, getModelContextWindow, getModelMaxOutput, getModelName, getProviderCapabilities, getProviderCredentialRequirement, getSchemaTypeName, getToolEstimatedDuration, getToolExecutionSteps, getToolPermissionProfile, hasUsableSecretReference, hasValidationConstraints, hashToolSchema, isAbortFailure, isAssistantMessage, isBroadExecutionAllowRule, isChatEntry, isConfirmed, isDefaultEventService, isEnforcing, isEnvReference, isExecutionControlError, isImageGenerationProvider, isMediaProviderDefinition, isMintedSpanId, isModelEffort, isProgressReportingTool, isProtectedPath, isReadOnlyCommandLine, isRegistryTransactionError, isSystemMessage, isToolDeniedOutright, isToolMessage, isUserMessage, isVideoGenerationProvider, lifecycleOf, logger, lookupModelPrice, matchesAnyPattern, messageToHistoryEntry, modelDeclaresCapability, multiSelectAction, nonVisualObservationText, normalizeProviderConfig, normalizeStructuredOutput, outboundTraceContextFor, parseParameterRule, parseStructuredResponseText, peerDriverOf, printablePeerDriver, processEnvResolver, projectPermissionPolicy, projectToolSchema, providerCallSpanId, readModelFallbackNotice, readProviderFailureDetails, readTokenUsageFromMessage, readTokenUsageFromMetadata, registerModelMetadata, registerToolPermissionProfile, removesCriticalPath, requiresFreshApproval, resolveEnvReference, resolveMediaProviderConfig, resolveModelCapabilities, resolveModelCapability, resolveModelEffort, resolvePlatformShell, resolveStructuredOutputCapability, runHooks, runRegistryTransaction, scrubSecrets, selectAction, setGlobalLogLevel, setGlobalLoggerSink, setToolProgressCallback, shellArgumentForDisplay, snapshotToolProvenance, spanIdFromMintedId, splitCommandSegments, startPeriodicTask, stopPeriodicTask, subprocessTraceEnvironment, sumHistoryUsage, sumMessagesUsage, textAction, toProviderError, toolNameMatches, toolNamesToPatterns, toolTraceContextFor, traceEnvFor, traceHeadersFor, validateAgainstJsonSchema, validateAgentConfig, validateApiKey, validateModelName, validatePermissionPattern, validateProviderName, validateUserInput, verifiedProviderCallUsage, wasToolResultAdmitted, withEventEmission, withToolProvenance, zodToJsonSchema };
 //# sourceMappingURL=index.d.ts.map