@robota-sdk/agent-core 3.0.0-beta.86 → 3.0.0-beta.88

package/dist/node/{index-CPwJEiFl.d.cts → index-CagopdzH.d.cts}

@@ -106,7 +106,35 @@ interface IUriImageMessagePart {
   uri: string;
   mimeType?: string;
 }
-type TUniversalMessagePart = ITextMessagePart | IInlineImageMessagePart | IUriImageMessagePart;
+/** An inline audio observation; provider support is determined by the adapter. */
+interface IInlineAudioMessagePart {
+  type: 'audio_inline';
+  mimeType: string;
+  data: string;
+}
+/** An opaque reference, never authority to fetch its URI. */
+interface IResourceLinkMessagePart {
+  type: 'resource_link';
+  uri: string;
+  name: string;
+  mimeType?: string;
+  title?: string;
+  description?: string;
+  size?: number;
+}
+/** Embedded untrusted resource content, tied to the contributor's opaque URI. */
+type TEmbeddedResourceMessagePart = {
+  type: 'resource_embedded';
+  uri: string;
+  mimeType?: string;
+} & ({
+  text: string;
+  blob?: never;
+} | {
+  blob: string;
+  text?: never;
+});
+type TUniversalMessagePart = ITextMessagePart | IInlineImageMessagePart | IUriImageMessagePart | IInlineAudioMessagePart | IResourceLinkMessagePart | TEmbeddedResourceMessagePart;
 /**
  * Tool call (OpenAI tool calling format).
  */
@@ -240,7 +268,7 @@ type TProviderModelCapability = 'tools' | 'vision' |
 'json_object' | 'reasoning' | 'native_web' | 'streaming' |
 /**
  * CLI-1990: the vendor documents a server-side tool search — deferred definitions the API expands
- * on demand. Declaration-only in v1: Robota runs its own client-side catalog on every provider
+ * on demand. Declaration-only in v1: ConversationAgent runs its own client-side catalog on every provider
  * and emits no vendor block. The member exists so a later offload can be capability-gated in this
  * table rather than by provider name.
  */
@@ -330,9 +358,9 @@ type TErrorContextData = Record<string, string | number | boolean | Date | Error
  */
 type TErrorExternalInput = Error | string | Record<string, string | number | boolean> | null | undefined;
 /**
- * Base error class for all Robota errors
+ * Base error class for all ConversationAgent errors
  */
-declare abstract class RobotaError extends Error {
+declare abstract class AgentRuntimeError extends Error {
   readonly context?: TErrorContextData | undefined;
   abstract readonly code: string;
   abstract readonly category: 'user' | 'system' | 'provider';
@@ -342,7 +370,7 @@ declare abstract class RobotaError extends Error {
 /**
  * Configuration related errors
  */
-declare class ConfigurationError extends RobotaError {
+declare class ConfigurationError extends AgentRuntimeError {
   readonly code = "CONFIGURATION_ERROR";
   readonly category: "user";
   readonly recoverable = false;
@@ -351,7 +379,7 @@ declare class ConfigurationError extends RobotaError {
 /**
  * Input validation errors
  */
-declare class ValidationError extends RobotaError {
+declare class ValidationError extends AgentRuntimeError {
   readonly field?: string | undefined;
   readonly code = "VALIDATION_ERROR";
   readonly category: "user";
@@ -366,7 +394,7 @@ declare class ValidationError extends RobotaError {
  * validation messages from the last attempt; `attempts` is the total number of
  * provider turns spent (initial + retries).
  */
-declare class StructuredOutputError extends RobotaError {
+declare class StructuredOutputError extends AgentRuntimeError {
   readonly issues: string[];
   readonly attempts: number;
   readonly code = "STRUCTURED_OUTPUT_ERROR";
@@ -384,7 +412,7 @@ interface IProviderFailureDetails {
 /**
  * Provider related errors
  */
-declare class ProviderError extends RobotaError {
+declare class ProviderError extends AgentRuntimeError {
   readonly provider: string;
   readonly originalError?: Error | undefined;
   readonly code = "PROVIDER_ERROR";
@@ -397,7 +425,7 @@ declare class ProviderError extends RobotaError {
 /**
  * Authentication errors
  */
-declare class AuthenticationError extends RobotaError {
+declare class AuthenticationError extends AgentRuntimeError {
   readonly provider?: string | undefined;
   readonly code = "AUTHENTICATION_ERROR";
   readonly category: "user";
@@ -407,7 +435,7 @@ declare class AuthenticationError extends RobotaError {
 /**
  * Rate limit errors
  */
-declare class RateLimitError extends RobotaError {
+declare class RateLimitError extends AgentRuntimeError {
   readonly retryAfter?: number | undefined;
   readonly provider?: string | undefined;
   readonly code = "RATE_LIMIT_ERROR";
@@ -418,7 +446,7 @@ declare class RateLimitError extends RobotaError {
 /**
  * Network/connectivity errors
  */
-declare class NetworkError extends RobotaError {
+declare class NetworkError extends AgentRuntimeError {
   readonly originalError?: Error | undefined;
   /** `undefined` for a network failure with no provider context (e.g. a generic timeout). */
   readonly provider?: string | undefined;
@@ -432,7 +460,7 @@ declare class NetworkError extends RobotaError {
 /**
  * Tool execution errors
  */
-declare class ToolExecutionError extends RobotaError {
+declare class ToolExecutionError extends AgentRuntimeError {
   readonly toolName: string;
   readonly originalError?: Error | undefined;
   readonly code = "TOOL_EXECUTION_ERROR";
@@ -449,13 +477,13 @@ declare class ToolExecutionError extends RobotaError {
  * `success: true, interrupted: true` — reporting a run that produced no answer as a success.
  *
  * Named rather than a bare `Error` for the reason the SPEC was reaching for by naming a type at all:
- * a caller must be able to tell "the agent looped" from "the network died". `RobotaError` carries
+ * a caller must be able to tell "the agent looped" from "the network died". `AgentRuntimeError` carries
  * `code`/`category`/`recoverable` out through CORE-027's failure path intact.
  *
  * `recoverable` is TRUE: the loop is a property of this turn's prompt and tool set, not of the
  * system, and a caller that varies either can reasonably try again.
  */
-declare class SameToolInputLoopError extends RobotaError {
+declare class SameToolInputLoopError extends AgentRuntimeError {
   readonly toolName: string;
   readonly callCount: number;
   readonly maxSameToolInputs: number;
@@ -479,7 +507,7 @@ declare class SameToolInputLoopError extends RobotaError {
  * `recoverable` is TRUE: like `SameToolInputLoopError`, this is a property of this turn's prompt and
  * model response, not of the system, and a caller that varies either can reasonably try again.
  */
-declare class EmptyCompletionError extends RobotaError {
+declare class EmptyCompletionError extends AgentRuntimeError {
   readonly round: number;
   readonly code = "EMPTY_COMPLETION";
   readonly category: "provider";
@@ -489,7 +517,7 @@ declare class EmptyCompletionError extends RobotaError {
 /**
  * Model not available errors
  */
-declare class ModelNotAvailableError extends RobotaError {
+declare class ModelNotAvailableError extends AgentRuntimeError {
   /** `undefined` when the failure names no model — a provider adapter classifying a raw HTTP
    *  response by status alone does not always know which model the vendor meant. */
   readonly model: string | undefined;
@@ -512,7 +540,7 @@ declare class ModelNotAvailableError extends RobotaError {
 /**
  * Circuit breaker open error
  */
-declare class CircuitBreakerOpenError extends RobotaError {
+declare class CircuitBreakerOpenError extends AgentRuntimeError {
   readonly code = "CIRCUIT_BREAKER_OPEN";
   readonly category: "system";
   readonly recoverable = true;
@@ -521,7 +549,7 @@ declare class CircuitBreakerOpenError extends RobotaError {
 /**
  * Plugin errors
  */
-declare class PluginError extends RobotaError {
+declare class PluginError extends AgentRuntimeError {
   readonly pluginName: string;
   readonly code = "PLUGIN_ERROR";
   readonly category: "system";
@@ -531,7 +559,7 @@ declare class PluginError extends RobotaError {
 /**
  * Storage related errors
  */
-declare class StorageError extends RobotaError {
+declare class StorageError extends AgentRuntimeError {
   readonly code = "STORAGE_ERROR";
   readonly category: "system";
   readonly recoverable = true;
@@ -540,7 +568,7 @@ declare class StorageError extends RobotaError {
 /**
  * Cache integrity validation errors
  */
-declare class CacheIntegrityError extends RobotaError {
+declare class CacheIntegrityError extends AgentRuntimeError {
   readonly code = "CACHE_INTEGRITY_ERROR";
   readonly category: "system";
   readonly recoverable = false;
@@ -1302,6 +1330,10 @@ declare function readModelFallbackNotice(data: Readonly<Record<string, unknown>>
 declare const TOOL_BODY_EVENTS: {
   readonly COMPLETED: "tool_body_completed";
 };
+/** Submission to scheduler selection or refusal; never permission or effect completion. */
+declare const TOOL_QUEUE_EVENTS: {
+  readonly COMPLETED: "tool_queue_completed";
+};
 /** Content-free decision reached for one tool call before any body runs. */
 declare const TOOL_PERMISSION_EVENTS: {
   readonly DECIDED: "tool_permission_decided";
@@ -1441,7 +1473,22 @@ interface IDeferredToolCatalog {
 //#region src/interfaces/tool.d.ts
 /** Awaited host admission for effective parameters, immediately before a tool body. */
 type TToolEffectAdmission<TParameters = TToolParameters> = (parameters: TParameters) => Promise<void>;
-type TToolContextExtensionValue = TUniversalValue | Date | Error | TLoggerData | TContextData | TToolParameters | TToolMetadata;
+/** Trusted caller scheduling; plugin annotations grant neither authority nor retry permission. */
+interface IToolCallScheduling {
+  dependsOn?: readonly string[];
+  /** Omitted means unknown shared state; an empty array explicitly declares independence. */
+  resources?: readonly {
+    key: string;
+    access: 'read' | 'write';
+  }[];
+}
+interface IToolExecutionPolicy {
+  mode?: 'parallel' | 'sequential';
+  maxConcurrency?: number;
+  continueOnError?: boolean;
+  scheduling?: ReadonlyMap<string, IToolCallScheduling>;
+}
+type TToolContextExtensionValue = TUniversalValue | Date | Error | TLoggerData | TContextData | TToolParameters | TToolMetadata | TUniversalMessagePart[];
 /**
  * Tool metadata structure - specific type definition
  */
@@ -1459,6 +1506,8 @@ type TToolMetadata = Record<string, string | number | boolean | string[] | numbe
 interface IToolResult {
   success: boolean;
   data?: TUniversalValue;
+  /** Ordered observations accompanying structured data; images stay typed through history. */
+  parts?: TUniversalMessagePart[];
   error?: string;
   metadata?: TToolMetadata;
   [key: string]: TToolContextExtensionValue | undefined;
@@ -1473,6 +1522,8 @@ interface IToolExecutionResult {
   toolName?: string;
   /** Execution result or data */
   result?: TUniversalValue;
+  /** Ordered observations retained with the durable execution settlement. */
+  parts?: TUniversalMessagePart[];
   /** Error message if execution failed */
   error?: string;
   /** Execution duration in milliseconds */
@@ -1611,7 +1662,18 @@ type TToolExecutor<TParams = TToolParameters, TResult = TUniversalValue> = (para
 /**
  * Base tool interface
  */
+/** Host-declared tool attribution. It identifies a source; it never grants execution authority. */
+interface IToolProvenance {
+  readonly sourceId: string;
+  readonly component: string;
+  readonly origin: string;
+  /** A declared source version, not proof of installed bytes. */
+  readonly version?: string;
+  readonly protocolVersion?: string;
+  readonly generation?: string;
+}
 interface ITool {
+  readonly provenance?: IToolProvenance;
   /** Tool schema */
   schema: IToolSchema;
   /**
@@ -2450,7 +2512,7 @@ interface IPluginContract<TOptions extends IPluginOptions = IPluginOptions, TSta
   /**
    * CORE-022: the single component-level disposal entry point. The base implementation
    * unsubscribes module events; overrides release owned resources (timers, sockets,
-   * storage) — always calling `super.dispose()`. Driven by `Robota.destroy()`.
+   * storage) — always calling `super.dispose()`. Driven by `ConversationAgent.destroy()`.
    */
   dispose(): Promise<void>;
   cleanup?(): Promise<void>;
@@ -2550,7 +2612,7 @@ declare class ConsoleLogger implements ILogger {
    * This logger's own threshold. `undefined` means "follow the process-wide level".
    *
    * CORE-029: the field existed and nothing ever set it, so the only way to change a level was
-   * `setGlobalLogLevel` — and `Robota`'s constructor called it from `config.logging`, which meant one
+   * `setGlobalLogLevel` — and `ConversationAgent`'s constructor called it from `config.logging`, which meant one
    * agent's per-agent setting silenced every other agent AND every other package in the process.
    * A per-agent option has to reach a per-agent logger.
    */
@@ -2562,7 +2624,7 @@ declare class ConsoleLogger implements ILogger {
    *
    * It used to be `logger || SilentLogger`, decided once in the constructor. No call site in the
    * repository ever passed one and there was no way to set one afterwards, so every diagnostic this
-   * package emits — 157 `logger.*` calls, including "Robota initialization failed" and every
+   * package emits — 157 `logger.*` calls, including "ConversationAgent initialization failed" and every
    * catch-and-log-only path — went to `SilentLogger` by construction. Not "was not configured":
    * could not be.
    *
@@ -2657,6 +2719,7 @@ interface IAbstractTool<TParams = TToolParameters, TResult = IToolResult> {
  */
 interface IToolContract<TParameters = TToolParameters, TResult = IToolResult> {
   readonly schema: IToolSchema;
+  readonly provenance?: IToolProvenance;
   execute(parameters: TParameters, context: IToolExecutionContext): Promise<TResult>;
   /**
    * Wrappers await admission exactly once with final canonical arguments after preconditions and before
@@ -2669,10 +2732,10 @@ interface IToolContract<TParameters = TToolParameters, TResult = IToolResult> {
   getName(): string;
 }
 /**
- * Runtime tool instance contract used by Robota internals.
+ * Runtime tool instance contract used by ConversationAgent internals.
  *
  * Tools passed into Agent configuration must support EventService injection
- * so Robota can emit unified tool lifecycle events.
+ * so ConversationAgent can emit unified tool lifecycle events.
  */
 interface IToolWithEventService<TParameters = TToolParameters, TResult = IToolResult> extends IToolContract<TParameters, TResult> {
   setEventService(eventService: IEventService | undefined): void;
@@ -2737,6 +2800,8 @@ interface IAgentConfig {
     toolChoice?: TToolChoice;
   };
   tools?: Array<IToolWithEventService>;
+  /** Host-owned per-round policy. Absent declarations serialize unknown shared-state operations. */
+  toolExecutionPolicy?: (calls: readonly IToolCall[]) => IToolExecutionPolicy;
   /**
    * CLI-1990: whether tools that declare `deferLoading` are withheld from the model until loaded.
    * `'auto'` (the default) decides by threshold — `resolveToolSearchMode` — so a small tool set is
@@ -3285,6 +3350,8 @@ interface IToolManager {
    * Execute a tool
    */
   executeTool(name: string, parameters: TToolParameters, context?: IToolExecutionContext): Promise<TUniversalValue>;
+  /** Full result port; absent on legacy value-only manager implementations. */
+  executeToolResult?(name: string, parameters: TToolParameters, context?: IToolExecutionContext): Promise<IToolResult>;
   /**
    * Check if tool exists
    */
@@ -3746,7 +3813,7 @@ interface ILocalExecutorConfig {
 /**
  * Configuration options for a remote executor.
  *
- * @deprecated Robota ships no remote executor, so nothing reads this type. It stays exported only
+ * @deprecated ConversationAgent ships no remote executor, so nothing reads this type. It stays exported only
  * so existing imports keep compiling; describe your own executor's options instead.
  */
 interface IRemoteExecutorConfig {
@@ -3893,7 +3960,7 @@ interface IFileSystemAsync {
  */
 /** A secret's name: the owning service and the account within it, both chosen by the caller. */
 interface ICredentialKey {
-  /** A namespace for the caller, e.g. `robota.remote-control`. */
+  /** A namespace for the caller, e.g. `agent.remote-control`. */
   readonly service: string;
   /** The secret's name within that namespace. */
   readonly account: string;
@@ -3907,6 +3974,12 @@ interface ICredentialStore {
   delete(key: ICredentialKey): Promise<void>;
 }
 //#endregion
+//#region src/utils/tool-provenance.d.ts
+/** Copy only the declared public attribution, before handing control to a tool. */
+declare function snapshotToolProvenance(source?: IToolProvenance): IToolProvenance | undefined;
+/** The execution owner's attribution overrides any result-supplied claim. */
+declare function withToolProvenance(result: IToolResult, source?: IToolProvenance): IToolResult;
+//#endregion
 //#region src/abstracts/abstract-agent.d.ts
 declare abstract class AbstractAgent<TConfig = IAgentConfig, TContext = IRunOptions, TMessage = TUniversalMessage> implements IAgent<TConfig, TContext, TMessage> {
   protected history: TMessage[];
@@ -4430,6 +4503,7 @@ declare abstract class AbstractExecutor implements IExecutor {
  */
 declare abstract class AbstractTool<TParameters = TToolParameters, TResult = IToolResult> implements IToolWithEventService<TParameters, TResult> {
   abstract readonly schema: IToolSchema;
+  readonly provenance?: IToolProvenance;
   /**
    * Logger for tool operations
    */
@@ -4590,7 +4664,7 @@ declare class ErrorUtils {
   /**
    * Create error from unknown value
    */
-  static fromUnknown(error: TErrorExternalInput, defaultMessage?: string): RobotaError;
+  static fromUnknown(error: TErrorExternalInput, defaultMessage?: string): AgentRuntimeError;
   /**
    * Wrap external errors
    */
@@ -4678,7 +4752,7 @@ interface IPlatformShellResolutionRequest {
   readonly platform?: NodeJS.Platform;
 }
 /** An explicit executable whose basename has no supported command argument family. */
-declare class UnsupportedShellError extends RobotaError {
+declare class UnsupportedShellError extends AgentRuntimeError {
   readonly executable: string;
   readonly code = "UNSUPPORTED_SHELL";
   readonly category: "user";
@@ -4720,9 +4794,9 @@ declare function toolTraceContextFor(traceContext: IRunTraceContext, toolBodyId:
  */
 declare function traceEnvFor(subprocessClass: TSubprocessTraceClass, traceContext: IRunTraceContext | undefined, spanId: string): ISubprocessTraceEnv | undefined;
 /**
- * A fresh child environment: `base`, then Robota's trace, then `overrides`. When Robota's value
+ * A fresh child environment: `base`, then ConversationAgent's trace, then `overrides`. When ConversationAgent's value
  * applies, the ambient `TRACESTATE` is dropped because it belongs to a different parent. When
- * `overrides` sets its own `TRACEPARENT`, Robota's value does not apply and `base` passes unchanged.
+ * `overrides` sets its own `TRACEPARENT`, ConversationAgent's value does not apply and `base` passes unchanged.
  * `base` itself is never modified.
  */
 declare function subprocessTraceEnvironment(base: Readonly<Record<string, string | undefined>>, traceEnv: ISubprocessTraceEnv | undefined, overrides?: Readonly<Record<string, string>>): Record<string, string | undefined>;
@@ -5370,10 +5444,13 @@ declare class ToolRegistry implements IToolRegistry {
  * circular runtime dependency (tools -> agents -> tools).
  */
 declare class FunctionTool implements IFunctionTool {
+  private readonly resultExecutor?;
   readonly schema: IToolSchema;
   readonly fn: TToolExecutor;
   private eventService;
-  constructor(schema: IToolSchema, fn: TToolExecutor);
+  constructor(schema: IToolSchema, fn: TToolExecutor, resultExecutor?: TToolExecutor<TToolParameters, IToolResult> | undefined);
+  /** Register an envelope executor explicitly; ordinary function values remain domain data. */
+  static fromResult(schema: IToolSchema, execute: TToolExecutor<TToolParameters, IToolResult>): FunctionTool;
   /**
    * Get tool name
    */
@@ -5421,11 +5498,11 @@ declare const DEFERRED_WITHOUT_LOADER_MESSAGE: string;
  */
 declare function assertResidentToolRemains(schemas: readonly IToolSchema[]): void;
 //#endregion
-//#region src/core/robota-types.d.ts
+//#region src/core/agent-types.d.ts
 /**
  * Shared model configuration shape used in setModel / getModel. The system prompt is intentionally
  * absent: it is an agent-level concern (top-level `config.systemMessage`), updated live via
- * `Robota.updateSystemPrompt`, not part of model config.
+ * `ConversationAgent.updateSystemPrompt`, not part of model config.
  */
 interface IModelConfig {
   provider: string;
@@ -5470,7 +5547,7 @@ type TExecuteModuleResult = {
   duration?: number;
 };
 //#endregion
-//#region src/core/robota-base.d.ts
+//#region src/core/conversation-agent-base.d.ts
 type TPlugin = IPluginContract<IPluginOptions, IPluginStats> & IPluginHooks;
 interface IModuleManagerProxy {
   registerModule(module: IModule, options?: TRegisterModuleOptions): Promise<void>;
@@ -5490,11 +5567,11 @@ interface IPluginManagerProxy {
   getPlugins(): TPlugin[];
   getPluginNames(): string[];
 }
-declare abstract class RobotaBase extends AbstractAgent<IAgentConfig, IRunOptions, TUniversalMessage> {
+declare abstract class ConversationAgentBase extends AbstractAgent<IAgentConfig, IRunOptions, TUniversalMessage> {
   protected moduleManager: IModuleManagerProxy;
   protected pluginManager: IPluginManagerProxy;
   /**
-   * Narrowed from `AbstractAgent`'s optional `config`: a Robota agent always has one, assigned in the
+   * Narrowed from `AbstractAgent`'s optional `config`: a ConversationAgent agent always has one, assigned in the
    * constructor. Declared HERE so `name` below can read it without a fallback that would lie.
    */
   protected config: IAgentConfig;
@@ -5640,6 +5717,8 @@ declare class Tools extends AbstractManager implements IToolManager {
    * Register a tool with schema and executor function
    */
   addTool(schema: IToolSchema, executor: TToolExecutor): void;
+  /** Register a typed result executor without discarding its observations or failure envelope. */
+  addResultTool(schema: IToolSchema, executor: TToolExecutor<TToolParameters, IToolResult>, provenance?: IToolProvenance): void;
   /**
    * Remove a tool by name
    */
@@ -5678,6 +5757,8 @@ declare class Tools extends AbstractManager implements IToolManager {
    * Execute a tool with parameters
    */
   executeTool(name: string, parameters: TToolParameters, context?: IToolExecutionContext): Promise<TUniversalValue>;
+  /** Execute the full result envelope for runtime observation and durable settlement. */
+  executeToolResult(name: string, parameters: TToolParameters, context?: IToolExecutionContext): Promise<IToolResult>;
   /**
    * Check if tool exists
    */
@@ -5700,7 +5781,7 @@ declare class Tools extends AbstractManager implements IToolManager {
   getToolCount(): number;
 }
 //#endregion
-//#region src/core/robota-config-manager.d.ts
+//#region src/core/agent-config-manager.d.ts
 /** Agent statistics metadata type */
 type TAgentStatsMetadata = Record<string, string | number | boolean | Date | string[]>;
 //#endregion
@@ -5739,9 +5820,9 @@ declare const EXECUTION_EVENTS: {
 };
 declare const EXECUTION_EVENT_PREFIX: "execution";
 //#endregion
-//#region src/core/robota-lifecycle.d.ts
+//#region src/core/agent-lifecycle.d.ts
 /** Dependencies required by getStats. @internal */
-interface IRobotaStatsDeps {
+interface IAgentStatsDeps {
   readonly name: string;
   readonly version: string;
   readonly conversationId: string;
@@ -5754,7 +5835,7 @@ interface IRobotaStatsDeps {
   getHistory(): TUniversalMessage[];
 }
 /** Build comprehensive agent statistics. @internal */
-declare function buildAgentStats(deps: IRobotaStatsDeps): {
+declare function buildAgentStats(deps: IAgentStatsDeps): {
   name: string;
   version: string;
   conversationId: string;
@@ -5772,9 +5853,9 @@ interface IDestroyResult {
   errors: Error[];
 }
 //#endregion
-//#region src/core/robota.d.ts
+//#region src/core/conversation-agent.d.ts
 /** @public */
-declare class Robota extends RobotaBase implements IAgent<IAgentConfig, IRunOptions, TUniversalMessage> {
+declare class ConversationAgent extends ConversationAgentBase implements IAgent<IAgentConfig, IRunOptions, TUniversalMessage> {
   readonly version: string;
   private aiProviders;
   private tools;
@@ -5817,14 +5898,14 @@ declare class Robota extends RobotaBase implements IAgent<IAgentConfig, IRunOpti
    */
   resumeToolCalls(value: IResumeToolCallsOptions): Promise<IResumeToolCallsResult>;
   /**
-   * Concurrency contract (CORE-012): a Robota instance owns ONE conversation history, so
+   * Concurrency contract (CORE-012): a ConversationAgent instance owns ONE conversation history, so
    * concurrent `run`/`runStream` calls on the same instance are serialized on an internal queue —
    * a call issued while another is in flight waits its turn (its `signal` is honored while queued).
    * Interleaved histories are therefore impossible by construction.
    *
    * Structured output (CORE-015): with `options.output` set the promise resolves to the validated
    * object (typed `z.infer<S>` for a Zod schema) instead of a string. Note the structured typing
-   * is visible on `Robota` directly; through the generic `IAgent` interface the return type stays
+   * is visible on `ConversationAgent` directly; through the generic `IAgent` interface the return type stays
    * `Promise<string>`.
    */
   run<S extends ZodType>(input: string, options: TRunOptionsWithOutput<S>): Promise<TypeOf<S>>;
@@ -6791,10 +6872,17 @@ declare const UNCLASSIFIED_TOOL_FALLBACK: Record<TPermissionMode, TPermissionDec
 declare const PROTECTED_DIRECTORY_NAMES: readonly string[];
 /** Files that configure git, npm, MCP servers or the user's shell, wherever they sit. */
 declare const PROTECTED_FILE_NAMES: readonly string[];
+/** Additional host-owned state protection; common repository and shell protection always applies. */
+interface IPathProtectionPolicy {
+  readonly protectedDirectoryNames: readonly string[];
+  readonly protectedPaths: readonly string[];
+  readonly writableWorktreeContainers: readonly string[];
+}
 /** Whether a path names a protected directory, something inside one, or a protected file. */
-declare function isProtectedPath(path: string): boolean;
+declare function isProtectedPath(path: string, context?: ICriticalPathContext): boolean;
 /** Where a removal is judged from. Either may be unknown; what is unknown is not guessed. */
 interface ICriticalPathContext {
+  readonly pathProtection?: IPathProtectionPolicy;
   /** The session's execution root. */
   cwd?: string;
   /** The user's home directory. */
@@ -7297,5 +7385,9 @@ declare function decodeHookVerdict(raw: string, source: THookDefinition['type'],
 /** Does a hook that reached no verdict block at this event? */
 declare function isEnforcing(event: THookEvent): boolean;
 //#endregion
-export { parseParameterRule as $, IProviderSetupStepDefinition as $a, assertProviderNativeWebToolsAvailable as $c, IProgressReportingTool as $i, isAssistantMessage as $l, ConversationStore as $n, TStructuredOutputValidation as $o, isAbortFailure as $r, USER_EVENT_PREFIX as $s, IRegistryOwnedLifecycle as $t, allowRulesForAutoMode as A, IProviderMediaError as Aa, IRawProviderResponse as Ac, ITerminalOutput as Ai, IModelCapabilityDeviation as Al, EventEmitterPlugin as An, IPluginContext as Ao, TShellKind as Ar, TToolEffectAdmission as As, IHandoffOrchestrationSpec as At, IPermissionPolicyProjection as B, IProviderStructuredOutputCapability as Ba, getProviderCapabilities as Bc, IRemoteExecutorConfig as Bi, ISystemMessage as Bl, createBoundedOutput as Bn, PluginPriority as Bo, ExecutionJournalError as Br, IUserInteraction as Bs, AGENT_EVENTS as Bt, IContextTokenEstimate as C, IImageComposeRequest as Ca, TEventLoggerData as Cc, ICredentialStore as Ci, StructuredOutputError as Cl, EXECUTION_EVENT_PREFIX as Cn, getGlobalLogLevel as Co, spanIdFromMintedId as Cr, IFunctionTool as Cs, createExecutionProxy as Ct, estimateToolSchemaTokens as D, IImageGenerationResult as Da, IProviderNativeRawPayloadEvent as Dc, IStats as Di, ValidationError as Dl, assertResidentToolRemains as Dn, setGlobalLoggerSink as Do, traceHeadersFor as Dr, IToolExecutionResult as Ds, ORCHESTRATION_EVENT_PREFIX as Dt, estimateSerializedContextTokens as E, IImageGenerationRequest as Ea, IChatOptions as Ec, IFileSystemAsync as Ei, ToolExecutionError as El, DEFERRED_WITHOUT_LOADER_MESSAGE as En, setGlobalLogLevel as Eo, traceEnvFor as Er, IToolExecutionContext as Es, ORCHESTRATION_EVENTS as Et, IPermissionPatternProblem as F, IVideoJobSnapshot as Fa, TProviderNativeRawPayloadCallback as Fc, IExecutor as Fi, TProviderModelCapability as Fl, InMemoryEventEmitterMetrics as Fn, IPluginExecutionResult as Fo, TTimerId as Fr, TToolSearchMode as Fs, IOrchestrationStep as Ft, IToolPermissionArgument as G, IProviderDefinitionConfig as Ga, TJSONSchemaKind as Gc, IConversationResponse as Gi, IUserMessage as Gl, resolveEnvReference as Gn, TEventName as Go, validateApiKey as Gr, SPAN_EVENTS as Gs, IAssistantUsageMetadata as Gt, IParameterRule as H, TStructuredOutputProvenance as Ha, IParameterSchema as Hc, TExecutorStreamEvent as Hi, IToolCall as Hl, formatEnvReference as Hn, IEventEmitterEventData as Ho, ISimpleValidationResult as Hr, ISpanCompletionEventData as Hs, peerDriverOf as Ht, findInvalidPermissionPatterns as I, TImageInputSource as Ia, TProviderNativeRawPayloadKind as Ic, IExecutorChatResult as Ii, IAssistantMessage as Il, shellArgumentForDisplay as In, IPluginHooks as Io, isExecutionControlError as Ir, TToolSearchSetting as Is, IOrchestrationStepResult as It, clearRegisteredToolProfiles as J, IProviderModelCatalogEntry as Ja, IProviderCapabilities as Jc, IStreamingChunk as Ji, TUniversalMessageMetadata as Jl, ConversationHistory as Jn, TExecutionEventCallback as Jo, validateUserInput as Jr, TOOL_PERMISSION_EVENTS as Js, sumHistoryUsage as Jt, IToolPermissionProfile as K, IProviderEndpoint as Ka, TParameterDefaultValue as Kc, IConversationService as Ki, TMessageState as Kl, IAIProviderInstance as Kn, TExecutionEventName as Ko, validateModelName as Kr, SPAN_EVENT_PREFIX as Ks, ISessionUsageTotals as Kt, findPermissionPatternWarnings as L, TProviderMediaResult as La, TProviderOptionValueBase as Lc, IExecutorStreamMessageEvent as Li, IBaseMessage as Ll, IBoundedOutput as Ln, IPluginOptions as Lo, ExecutionRecoveryError as Lr, IActionDefault as Ls, IParallelOrchestrationSpec as Lt, splitCommandSegments as M, IVideoGenerationProvider as Ma, ITokenUsageWithCacheRead as Mc, IEventHistoryRecord as Mi, modelDeclaresCapability as Ml, IEventEmitterPluginOptions as Mn, IPluginData as Mo, resolvePlatformShell as Mr, TToolMetadata as Ms, IOrchestrationDelegation as Mt, applyPresetToolLists as N, IVideoGenerationRequest as Na, TProviderConfigValue as Nc, IEventHistorySnapshot as Ni, resolveModelCapabilities as Nl, IEventEmitterMetrics as Nn, IPluginErrorContext as No, startPeriodicTask as Nr, IDeferredToolCatalog as Ns, IOrchestrationEventData as Nt, IContextTokenUsage as O, IInlineImageInputSource as Oa, IProviderOptions as Oc, ISession as Oi, IModelRef as Ol, FunctionTool as On, IPlugin as Oo, IPlatformShell as Or, IToolRegistry as Os, TOrchestrationEvent as Ot, toolNamesToPatterns as P, IVideoJobAccepted as Pa, TProviderNativeRawPayload as Pc, IChatExecutionRequest as Pi, resolveModelCapability as Pl, IEventEmitterMetricsSnapshot as Pn, IPluginExecutionContext as Po, stopPeriodicTask as Pr, TOOL_SEARCH_TOOL_NAME as Ps, IOrchestrationRunResult as Pt, matchesAnyPattern as Q, IProviderSetupHelpLink as Qa, IProviderNativeWebToolRequest as Qc, TToolExecutionParameters as Qi, getMessagesForAPI as Ql, createUserMessage as Qn, TStructuredOutputSchema as Qo, TProviderMessage as Qr, USER_EVENTS as Qs, verifiedProviderCallUsage as Qt, validatePermissionPattern as R, isImageGenerationProvider as Ra, TTextDeltaCallback as Rc, IExecutorStreamTerminalEvent as Ri, IHistoryEntry as Rl, IBoundedOutputOptions as Rn, IPluginStats as Ro, TExecutionRecoveryErrorCode as Rr, IActionOption as Rs, ISequentialOrchestrationSpec as Rt, CONTEXT_ESTIMATE_CHARS_PER_TOKEN as S, isMediaProviderDefinition as Sa, TEventListener as Sc, ICredentialKey as Si, StorageError as Sl, EXECUTION_EVENTS as Sn, createLogger as So, providerCallSpanId as Sr, TJournalModelOptions as Ss, ExecutionProxy as St, estimateContextTokensFromMessages as T, IImageGenerationProvider as Ta, IAIProvider as Tc, IFileSystem as Ti, TErrorExternalInput as Tl, TOOL_EVENT_PREFIX as Tn, logger as To, toolTraceContextFor as Tr, ITool as Ts, IExecutionProxyConfig as Tt, IPermissionEvaluationContext as U, IProviderCredentialRequirement as Ua, IToolSchema as Uc, IContextOptions as Ui, IToolMessage as Ul, hasUsableSecretReference as Un, IEventEmitterPlugin as Uo, Validator as Ur, PROVIDER_CALL_EVENTS as Us, printablePeerDriver as Ut, projectPermissionPolicy as V, TStructuredOutputMechanism as Va, IObjectParameterSchema as Vc, IStreamExecutionRequest as Vi, ITextMessagePart as Vl, ENV_REFERENCE_PREFIX as Vn, EVENT_EMITTER_EVENTS as Vo, ErrorUtils as Vr, TActionResponse as Vs, AGENT_EVENT_PREFIX as Vt, IPermissionLists as W, IProviderDefinition as Wa, TJSONSchemaEnum as Wc, IConversationContext as Wi, IUriImageMessagePart as Wl, isEnvReference as Wn, TEventEmitterListener as Wo, validateAgentConfig as Wr, PROVIDER_FALLBACK_EVENTS as Ws, EventHistoryModule as Wt, getToolPermissionProfile as X, IProviderProfileConfig as Xa, IProviderNativeWebToolCapabilities as Xc, TConversationContextMetadata as Xi, TUniversalMessageRole as Xl, createSystemMessage as Xn, IJsonSchemaOutput as Xo, TMessageConverterRegistry as Xr, readModelFallbackNotice as Xs, IVerifiedProviderCallUsage as Xt, evaluatePermission as Y, IProviderProbeResult as Ya, IProviderFunctionCallingCapability as Yc, IToolExecutionRequest as Yi, TUniversalMessagePart as Yl, createAssistantMessage as Yn, TExecutionEventData as Yo, MessageConverter as Yr, TSpanEvent as Ys, sumMessagesUsage as Yt, isToolDeniedOutright as Z, IProviderProfileDefaults as Za, IProviderNativeWebToolCapability as Zc, TResponseMetadata as Zi, chatEntryToMessage as Zl, createToolMessage as Zn, IStructuredOutputSpec as Zo, TMessageFormatConverter as Zr, TUserEvent as Zs, TProviderUsageProvenance as Zt, getModelName as _, TManagerToolParameters as _a, IEventServiceOwnerBinding as _c, hashToolSchema as _i, PluginError as _l, ToolResultAdmissionError as _n, ILogger as _o, zodToJsonSchema as _r, IRecoverableExecutionJournal as _s, TBackgroundPermissionPolicy as _t, TMetadataValue as _u, IModelPrice as a, setToolProgressCallback as aa, ObservableEventService as ac, IProviderRuntimeConfig as ai, classifyProviderFailure as al, AgentFactory as an, findProviderDefinition as ao, resolveMediaProviderConfig as ar, IZodSchema as as, PROTECTED_FILE_NAMES as at, IToolActionIdentity as au, readTokenUsageFromMessage as b, IMediaProviderDefinition as ba, IToolEventData as bc, IManagerLifecycleOptions as bi, RobotaError as bl, Robota as bn, SilentLogger as bo, isMintedSpanId as br, IResumeToolCallsResult as bs, TRUST_TO_MODE as bt, estimateBlendedCostPer1000 as c, confirmAction as ca, bindWithOwnerPath as cc, IToolSchemaProjectionChange as ci, toProviderError as cl, IAgentCreationStats as cn, IAgent as co, processEnvResolver as cr, ICacheEntry as cs, RISK_CLASS_POLICY as ct, IToolWaitRequest as cu, DEFAULT_MAX_OUTPUT as d, selectAction as da, isDefaultEventService as dc, PERMISSIVE_TOOL_SCHEMA_PROFILE as di, CircuitBreakerOpenError as dl, DEFAULT_TOOL_RESULT_HARD_CHARS as dn, IAbstractTool as do, extractEnumValues as dr, ICacheStats as ds, TArgumentKind as dt, TComplexConfigValue as du, IToolExecutionStep as ea, TASK_EVENTS as ec, AbstractTool as ei, createDefaultProviderCapabilities as el, IRegistryTransactionError as en, TProviderCredentialField as eo, createProviderFromConfig as er, normalizeStructuredOutput as es, registerToolPermissionProfile as et, isChatEntry as eu, IModelDefinition as f, textAction as fa, IAgentEventData as fc, STRICT_TOOL_SCHEMA_PROFILE as fi, ConfigurationError as fl, DEFAULT_TOOL_RESULT_WARNING_CHARS as fn, IAbstractToolOptions as fo, getSchemaTypeName as fr, ICacheStorage as fs, TMatchDirection as ft, TConfigData as fu, getModelMaxOutput as g, IToolManager as ga, IEventService as gc, TToolSchemaProjectionProfileBase as gi, NetworkError as gl, TToolResultAdmissionErrorCode as gn, ConsoleLogger as go, closeObjectSchemas as gr, IModelJournalContext as gs, DEFAULT_BACKGROUND_PERMISSION_POLICY as gt, TMetadata as gu, getModelContextWindow as h, IAIProviderManager as ha, IEventObjectValue as hc, TToolSchemaProjectionOutcome as hi, ModelNotAvailableError as hl, MAX_TOOL_RESULT_CHARS as hn, TToolExecutionFunction as ho, ISchemaClosureOptions as hr, IExecutionRoundCheckpoint as hs, isReadOnlyCommandLine as ht, TLoggerData as hu, runHooks as i, isProgressReportingTool as ia, DefaultEventService as ic, IExecutorAwareProviderConfig as ii, TProviderFailureReason as il, runRegistryTransaction as in, TProviderSetupHelpLinkKind as io, createVideoProviderFromDefinition as ir, IZodParseResult as is, PROTECTED_DIRECTORY_NAMES as it, messageToHistoryEntry as iu, isBroadExecutionAllowRule as j, IUriImageInputSource as ja, ITokenUsage as jc, IEventHistoryModule as ji, IProviderCapabilityTable as jl, IEventEmitterHierarchicalEventData as jn, IPluginContract as jo, UnsupportedShellError as jr, TToolExecutor as js, IHierarchicalOrchestrationSpec as jt, IContextWindowState as k, IMediaOutputRef as ka, IProviderRequest as kc, ISpinner as ki, TRoleModelMap as kl, ToolRegistry as kn, IPluginConfig as ko, IPlatformShellResolutionRequest as kr, IToolResult as ks, IGroupChatOrchestrationSpec as kt, lookupModelPrice as l, isConfirmed as la, composeEventName as lc, IToolSchemaProjectionProfile as li, AuthenticationError as ll, IAgentFactoryOptions as ln, IAgentConfig as lo, IStructuredOutputResolutionInput as lr, ICacheKey as ls, TToolRiskClass as lt, IToolWaitResponse as lu, formatTokenCount as m, IToolFactory as ma, IEventContext as mc, TOOL_SCHEMA_PROJECTION_MAX_NODES as mi, IProviderFailureDetails as ml, IToolResultSpillStore as mn, IToolWithEventService as mo, ISchemaClosureChange as mr, IExecutionJournal as ms, TResolveInWorkspace as mt, TContextData as mu, decodeHookVerdict as n, getToolEstimatedDuration as na, AbstractEventService as nc, AbstractPlugin as ni, TModelFallbackCallback as nl, isRegistryTransactionError as nn, TProviderModelLifecycle as no, IMediaProviderOverrides as nr, validateAgainstJsonSchema as ns, toolNameMatches as nt, isToolMessage as nu, MODEL_PRICES as o, CONFIRM_NO as oa, StructuredEventService as oc, TProviderLoggingData as oi, readProviderFailureDetails as ol, AgentTemplates as on, formatSupportedProviderTypes as oo, TEnvResolver as or, IZodSchemaDef as os, isProtectedPath as ot, IToolContinuation as ou, findModelDefinition as p, IOpenAPIToolConfig as pa, IBaseEventData as pc, TOOL_SCHEMA_PROJECTION_MAX_DEPTH as pi, EmptyCompletionError as pl, IToolResultAdmissionOptions as pn, IToolContract as po, hasValidationConstraints as pr, IExecutionContinuationState as ps, IReadOnlyCommandContext as pt, TConfigValue as pu, TToolArgs as q, IProviderModelCatalog as qa, IProviderSpecificOptions as qc, IConversationServiceOptions as qi, TUniversalMessage as ql, LocalExecutor as qn, IRunOptions as qo, validateProviderName as qr, TOOL_BODY_EVENTS as qs, collectAssistantUsageMetadata as qt, GuardrailExecutor as r, getToolExecutionSteps as ra, DEFAULT_ABSTRACT_EVENT_SERVICE as rc, AbstractAIProvider as ri, IProviderFailureClassification as rl, lifecycleOf as rn, TProviderSetupField as ro, createImageProviderFromDefinition as rr, ISchemaConversionOptions as rs, ICriticalPathContext as rt, isUserMessage as ru, calculateModelCost as s, CONFIRM_YES as sa, bindEventServiceOwner as sc, IToolSchemaProjection as si, scrubSecrets as sl, ITemplateApplicationResult as sn, getProviderCredentialRequirement as so, createRecordEnvResolver as sr, IResponseFormatConfig as ss, removesCriticalPath as st, IToolContinuationPrompt as su, isEnforcing as t, TToolProgressCallback as ta, TASK_EVENT_PREFIX as tc, AbstractExecutor as ti, IModelFallbackNotice as tl, IRegistryTransactionStep as tn, TProviderModelCatalogStatus as to, normalizeProviderConfig as tr, parseStructuredResponseText as ts, requiresFreshApproval as tt, isSystemMessage as tu, DEFAULT_CONTEXT_WINDOW as u, multiSelectAction as ua, generateSpanId as uc, PARAMETER_SCHEMA_KEYWORDS as ui, CacheIntegrityError as ul, IAgentLifecycleEvents as un, IAgentTemplate as uo, resolveStructuredOutputCapability as ur, ICacheOptions as us, UNCLASSIFIED_TOOL_FALLBACK as ut, IToolWaitState as uu, registerModelMetadata as v, IMediaProviderConfig as va, IExecutionEventData as vc, projectToolSchema as vi, ProviderError as vl, admitToolResult as vn, ILoggerOptions as vo, callJournaledProvider as vr, IResumeExecutionOptions as vs, TPermissionDecision$1 as vt, TToolParameters as vu, IContextTokenEstimateOptions as w, IImageEditRequest as wa, TEventUniversalValue as wc, IDirent as wi, TErrorContextData as wl, TOOL_EVENTS as wn, getGlobalLoggerSink as wo, subprocessTraceEnvironment as wr, IParameterValidationResult as ws, withEventEmission as wt, readTokenUsageFromMetadata as x, findMediaProviderDefinition as xa, TEventExtensionValue as xc, AbstractAgent as xi, SameToolInputLoopError as xl, IDestroyResult as xn, TUtilLogLevel as xo, outboundTraceContextFor as xr, TExecutionJournalRecord as xs, TTrustLevel as xt, IMessageTokenUsage as y, IMediaProviderCredentialRequirement as ya, IOwnerPathSegment as yc, AbstractManager as yi, RateLimitError as yl, wasToolResultAdmitted as yn, IUtilLogEntry as yo, buildTraceparent as yr, IResumeToolCallsOptions as ys, TPermissionMode as yt, TypeUtils as yu, IPermissionPolicyContext as z, isVideoGenerationProvider as za, TToolChoice as zc, ILocalExecutorConfig as zi, IInlineImageMessagePart as zl, TOutputRetention as zn, PluginCategory as zo, ExecutionSuspendedError as zr, IActionRequest as zs, TOrchestrationPrimitive as zt };
-//# sourceMappingURL=index-CPwJEiFl.d.cts.map
+//#region src/utils/non-visual-observation-text.d.ts
+/** Text projection for adapters without native resource or audio payload support. Never resolves URIs. */
+declare function nonVisualObservationText(part: TUniversalMessagePart): string | undefined;
+//#endregion
+export { matchesAnyPattern as $, IProviderProbeResult as $a, TJSONSchemaKind as $c, IToolExecutionRequest as $i, IToolMessage as $l, createToolMessage as $n, TExecutionEventData as $o, TMessageFormatConverter as $r, SPAN_EVENT_PREFIX as $s, TProviderUsageProvenance as $t, IContextWindowState as A, IImageGenerationRequest as Aa, TEventListener as Ac, IFileSystemAsync as Ai, StorageError as Al, FunctionTool as An, setGlobalLogLevel as Ao, IPlatformShell as Ar, IToolCallScheduling as As, TOrchestrationEvent as At, TypeUtils as Au, IPermissionPolicyContext as B, TImageInputSource as Ba, ITokenUsageWithCacheRead as Bc, IExecutorChatResult as Bi, modelDeclaresCapability as Bl, IBoundedOutputOptions as Bn, IPluginHooks as Bo, TExecutionRecoveryErrorCode as Br, IDeferredToolCatalog as Bs, ISequentialOrchestrationSpec as Bt, CONTEXT_ESTIMATE_CHARS_PER_TOKEN as C, IMediaProviderCredentialRequirement as Ca, IEventObjectValue as Cc, AbstractAgent as Ci, IProviderFailureDetails as Cl, IDestroyResult as Cn, IUtilLogEntry as Co, outboundTraceContextFor as Cr, IResumeToolCallsOptions as Cs, TTrustLevel as Ct, TConfigData as Cu, estimateSerializedContextTokens as D, IImageComposeRequest as Da, IOwnerPathSegment as Dc, ICredentialStore as Di, ProviderError as Dl, TOOL_EVENT_PREFIX as Dn, getGlobalLogLevel as Do, toolTraceContextFor as Dr, IFunctionTool as Ds, IExecutionProxyConfig as Dt, TMetadata as Du, estimateContextTokensFromMessages as E, isMediaProviderDefinition as Ea, IExecutionEventData as Ec, ICredentialKey as Ei, PluginError as El, TOOL_EVENTS as En, createLogger as Eo, subprocessTraceEnvironment as Er, TJournalModelOptions as Es, withEventEmission as Et, TLoggerData as Eu, toolNamesToPatterns as F, IUriImageInputSource as Fa, IProviderNativeRawPayloadEvent as Fc, IEventHistoryModule as Fi, ValidationError as Fl, IEventEmitterMetrics as Fn, IPluginContract as Fo, startPeriodicTask as Fr, IToolRegistry as Fs, IOrchestrationEventData as Ft, IPermissionLists as G, TStructuredOutputMechanism as Ga, TProviderOptionValueBase as Gc, IStreamExecutionRequest as Gi, IBaseMessage as Gl, hasUsableSecretReference as Gn, EVENT_EMITTER_EVENTS as Go, Validator as Gr, IActionOption as Gs, printablePeerDriver as Gt, projectPermissionPolicy as H, isImageGenerationProvider as Ha, TProviderNativeRawPayload as Hc, IExecutorStreamTerminalEvent as Hi, resolveModelCapability as Hl, createBoundedOutput as Hn, IPluginStats as Ho, ExecutionJournalError as Hr, TToolSearchMode as Hs, AGENT_EVENTS as Ht, IPermissionPatternProblem as I, IVideoGenerationProvider as Ia, IProviderOptions as Ic, IEventHistoryRecord as Ii, IModelRef as Il, IEventEmitterMetricsSnapshot as In, IPluginData as Io, stopPeriodicTask as Ir, IToolResult as Is, IOrchestrationRunResult as It, TToolArgs as J, IProviderDefinition as Ja, getProviderCapabilities as Jc, IConversationContext as Ji, IInlineImageMessagePart as Jl, IAIProviderInstance as Jn, TEventEmitterListener as Jo, validateModelName as Jr, TActionResponse as Js, ISessionUsageTotals as Jt, IToolPermissionArgument as K, TStructuredOutputProvenance as Ka, TTextDeltaCallback as Kc, TExecutorStreamEvent as Ki, IHistoryEntry as Kl, isEnvReference as Kn, IEventEmitterEventData as Ko, validateAgentConfig as Kr, IActionRequest as Ks, EventHistoryModule as Kt, findInvalidPermissionPatterns as L, IVideoGenerationRequest as La, IProviderRequest as Lc, IEventHistorySnapshot as Li, TRoleModelMap as Ll, InMemoryEventEmitterMetrics as Ln, IPluginErrorContext as Lo, TTimerId as Lr, TToolEffectAdmission as Ls, IOrchestrationStep as Lt, isBroadExecutionAllowRule as M, IInlineImageInputSource as Ma, TEventUniversalValue as Mc, ISession as Mi, TErrorContextData as Ml, EventEmitterPlugin as Mn, IPlugin as Mo, TShellKind as Mr, IToolExecutionPolicy as Ms, IHandoffOrchestrationSpec as Mt, splitCommandSegments as N, IMediaOutputRef as Na, IAIProvider as Nc, ISpinner as Ni, TErrorExternalInput as Nl, IEventEmitterHierarchicalEventData as Nn, IPluginConfig as No, UnsupportedShellError as Nr, IToolExecutionResult as Ns, IHierarchicalOrchestrationSpec as Nt, estimateToolSchemaTokens as O, IImageEditRequest as Oa, IToolEventData as Oc, IDirent as Oi, RateLimitError as Ol, DEFERRED_WITHOUT_LOADER_MESSAGE as On, getGlobalLoggerSink as Oo, traceEnvFor as Or, IParameterValidationResult as Os, ORCHESTRATION_EVENTS as Ot, TMetadataValue as Ou, applyPresetToolLists as P, IProviderMediaError as Pa, IChatOptions as Pc, ITerminalOutput as Pi, ToolExecutionError as Pl, IEventEmitterPluginOptions as Pn, IPluginContext as Po, resolvePlatformShell as Pr, IToolProvenance as Ps, IOrchestrationDelegation as Pt, isToolDeniedOutright as Q, IProviderModelCatalogEntry as Qa, TJSONSchemaEnum as Qc, IStreamingChunk as Qi, IToolCall as Ql, createSystemMessage as Qn, TExecutionEventCallback as Qo, TMessageConverterRegistry as Qr, SPAN_EVENTS as Qs, IVerifiedProviderCallUsage as Qt, findPermissionPatternWarnings as R, IVideoJobAccepted as Ra, IRawProviderResponse as Rc, IChatExecutionRequest as Ri, IModelCapabilityDeviation as Rl, shellArgumentForDisplay as Rn, IPluginExecutionContext as Ro, isExecutionControlError as Rr, TToolExecutor as Rs, IOrchestrationStepResult as Rt, readTokenUsageFromMetadata as S, IMediaProviderConfig as Sa, IEventContext as Sc, IManagerLifecycleOptions as Si, EmptyCompletionError as Sl, ConversationAgent as Sn, ILoggerOptions as So, isMintedSpanId as Sr, IResumeExecutionOptions as Ss, TRUST_TO_MODE as St, TComplexConfigValue as Su, IContextTokenEstimateOptions as T, findMediaProviderDefinition as Ta, IEventServiceOwnerBinding as Tc, withToolProvenance as Ti, NetworkError as Tl, EXECUTION_EVENT_PREFIX as Tn, TUtilLogLevel as To, spanIdFromMintedId as Tr, TExecutionJournalRecord as Ts, createExecutionProxy as Tt, TContextData as Tu, IParameterRule as U, isVideoGenerationProvider as Ua, TProviderNativeRawPayloadCallback as Uc, ILocalExecutorConfig as Ui, TProviderModelCapability as Ul, ENV_REFERENCE_PREFIX as Un, PluginCategory as Uo, ErrorUtils as Ur, TToolSearchSetting as Us, AGENT_EVENT_PREFIX as Ut, IPermissionPolicyProjection as V, TProviderMediaResult as Va, TProviderConfigValue as Vc, IExecutorStreamMessageEvent as Vi, resolveModelCapabilities as Vl, TOutputRetention as Vn, IPluginOptions as Vo, ExecutionSuspendedError as Vr, TOOL_SEARCH_TOOL_NAME as Vs, TOrchestrationPrimitive as Vt, IPermissionEvaluationContext as W, IProviderStructuredOutputCapability as Wa, TProviderNativeRawPayloadKind as Wc, IRemoteExecutorConfig as Wi, IAssistantMessage as Wl, formatEnvReference as Wn, PluginPriority as Wo, ISimpleValidationResult as Wr, IActionDefault as Ws, peerDriverOf as Wt, evaluatePermission as X, IProviderEndpoint as Xa, IParameterSchema as Xc, IConversationService as Xi, ISystemMessage as Xl, ConversationHistory as Xn, TExecutionEventName as Xo, validateUserInput as Xr, PROVIDER_CALL_EVENTS as Xs, sumHistoryUsage as Xt, clearRegisteredToolProfiles as Y, IProviderDefinitionConfig as Ya, IObjectParameterSchema as Yc, IConversationResponse as Yi, IResourceLinkMessagePart as Yl, LocalExecutor as Yn, TEventName as Yo, validateProviderName as Yr, ISpanCompletionEventData as Ys, collectAssistantUsageMetadata as Yt, getToolPermissionProfile as Z, IProviderModelCatalog as Za, IToolSchema as Zc, IConversationServiceOptions as Zi, ITextMessagePart as Zl, createAssistantMessage as Zn, IRunOptions as Zo, MessageConverter as Zr, PROVIDER_FALLBACK_EVENTS as Zs, sumMessagesUsage as Zt, getModelMaxOutput as _, IOpenAPIToolConfig as _a, composeEventName as _c, TToolSchemaProjectionOutcome as _i, AgentRuntimeError as _l, MAX_TOOL_RESULT_CHARS as _n, IToolContract as _o, ISchemaClosureOptions as _r, IExecutionContinuationState as _s, isReadOnlyCommandLine as _t, IToolContinuation as _u, runHooks as a, TToolProgressCallback as aa, TUserEvent as ac, AbstractAIProvider as ai, IProviderNativeWebToolCapability as al, lifecycleOf as an, TProviderModelCatalogStatus as ao, createImageProviderFromDefinition as ar, parseStructuredResponseText as as, IPathProtectionPolicy as at, TUniversalMessageMetadata as au, IMessageTokenUsage as b, IToolManager as ba, IAgentEventData as bc, projectToolSchema as bi, CircuitBreakerOpenError as bl, admitToolResult as bn, ConsoleLogger as bo, callJournaledProvider as br, IModelJournalContext as bs, TPermissionDecision$1 as bt, IToolWaitResponse as bu, calculateModelCost as c, isProgressReportingTool as ca, TASK_EVENTS as cc, TProviderLoggingData as ci, createDefaultProviderCapabilities as cl, AgentTemplates as cn, TProviderSetupHelpLinkKind as co, TEnvResolver as cr, IZodParseResult as cs, isProtectedPath as ct, chatEntryToMessage as cu, DEFAULT_CONTEXT_WINDOW as d, CONFIRM_YES as da, DEFAULT_ABSTRACT_EVENT_SERVICE as dc, IToolSchemaProjectionProfile as di, IProviderFailureClassification as dl, IAgentFactoryOptions as dn, getProviderCredentialRequirement as do, IStructuredOutputResolutionInput as dr, IResponseFormatConfig as ds, TToolRiskClass as dt, isChatEntry as du, TConversationContextMetadata as ea, TOOL_BODY_EVENTS as ec, TProviderMessage as ei, TParameterDefaultValue as el, verifiedProviderCallUsage as en, IProviderProfileConfig as eo, createUserMessage as er, IJsonSchemaOutput as es, parseParameterRule as et, IUriImageMessagePart as eu, DEFAULT_MAX_OUTPUT as f, confirmAction as fa, DefaultEventService as fc, PARAMETER_SCHEMA_KEYWORDS as fi, TProviderFailureReason as fl, IAgentLifecycleEvents as fn, IAgent as fo, resolveStructuredOutputCapability as fr, ICacheEntry as fs, UNCLASSIFIED_TOOL_FALLBACK as ft, isSystemMessage as fu, getModelContextWindow as g, textAction as ga, bindWithOwnerPath as gc, TOOL_SCHEMA_PROJECTION_MAX_NODES as gi, toProviderError as gl, IToolResultSpillStore as gn, IAbstractToolOptions as go, ISchemaClosureChange as gr, ICacheStorage as gs, TResolveInWorkspace as gt, IToolActionIdentity as gu, formatTokenCount as h, selectAction as ha, bindEventServiceOwner as hc, TOOL_SCHEMA_PROJECTION_MAX_DEPTH as hi, scrubSecrets as hl, IToolResultAdmissionOptions as hn, IAbstractTool as ho, hasValidationConstraints as hr, ICacheStats as hs, IReadOnlyCommandContext as ht, messageToHistoryEntry as hu, GuardrailExecutor as i, IToolExecutionStep as ia, readModelFallbackNotice as ic, AbstractPlugin as ii, IProviderNativeWebToolCapabilities as il, isRegistryTransactionError as in, TProviderCredentialField as io, IMediaProviderOverrides as ir, normalizeStructuredOutput as is, ICriticalPathContext as it, TUniversalMessage as iu, allowRulesForAutoMode as j, IImageGenerationResult as ja, TEventLoggerData as jc, IStats as ji, StructuredOutputError as jl, ToolRegistry as jn, setGlobalLoggerSink as jo, IPlatformShellResolutionRequest as jr, IToolExecutionContext as js, IGroupChatOrchestrationSpec as jt, IContextTokenUsage as k, IImageGenerationProvider as ka, TEventExtensionValue as kc, IFileSystem as ki, SameToolInputLoopError as kl, assertResidentToolRemains as kn, logger as ko, traceHeadersFor as kr, ITool as ks, ORCHESTRATION_EVENT_PREFIX as kt, TToolParameters as ku, estimateBlendedCostPer1000 as l, setToolProgressCallback as la, TASK_EVENT_PREFIX as lc, IToolSchemaProjection as li, IModelFallbackNotice as ll, ITemplateApplicationResult as ln, findProviderDefinition as lo, createRecordEnvResolver as lr, IZodSchema as ls, removesCriticalPath as lt, getMessagesForAPI as lu, findModelDefinition as m, multiSelectAction as ma, StructuredEventService as mc, STRICT_TOOL_SCHEMA_PROFILE as mi, readProviderFailureDetails as ml, DEFAULT_TOOL_RESULT_WARNING_CHARS as mn, IAgentTemplate as mo, getSchemaTypeName as mr, ICacheOptions as ms, TMatchDirection as mt, isUserMessage as mu, isEnforcing as n, TToolExecutionParameters as na, TOOL_QUEUE_EVENTS as nc, AbstractTool as ni, IProviderCapabilities as nl, IRegistryTransactionError as nn, IProviderSetupHelpLink as no, createProviderFromConfig as nr, TStructuredOutputSchema as ns, requiresFreshApproval as nt, TEmbeddedResourceMessagePart as nu, IModelPrice as o, getToolEstimatedDuration as oa, USER_EVENTS as oc, IExecutorAwareProviderConfig as oi, IProviderNativeWebToolRequest as ol, runRegistryTransaction as on, TProviderModelLifecycle as oo, createVideoProviderFromDefinition as or, validateAgainstJsonSchema as os, PROTECTED_DIRECTORY_NAMES as ot, TUniversalMessagePart as ou, IModelDefinition as p, isConfirmed as pa, ObservableEventService as pc, PERMISSIVE_TOOL_SCHEMA_PROFILE as pi, classifyProviderFailure as pl, DEFAULT_TOOL_RESULT_HARD_CHARS as pn, IAgentConfig as po, extractEnumValues as pr, ICacheKey as ps, TArgumentKind as pt, isToolMessage as pu, IToolPermissionProfile as q, IProviderCredentialRequirement as qa, TToolChoice as qc, IContextOptions as qi, IInlineAudioMessagePart as ql, resolveEnvReference as qn, IEventEmitterPlugin as qo, validateApiKey as qr, IUserInteraction as qs, IAssistantUsageMetadata as qt, decodeHookVerdict as r, IProgressReportingTool as ra, TSpanEvent as rc, AbstractExecutor as ri, IProviderFunctionCallingCapability as rl, IRegistryTransactionStep as rn, IProviderSetupStepDefinition as ro, normalizeProviderConfig as rr, TStructuredOutputValidation as rs, toolNameMatches as rt, TMessageState as ru, MODEL_PRICES as s, getToolExecutionSteps as sa, USER_EVENT_PREFIX as sc, IProviderRuntimeConfig as si, assertProviderNativeWebToolsAvailable as sl, AgentFactory as sn, TProviderSetupField as so, resolveMediaProviderConfig as sr, ISchemaConversionOptions as ss, PROTECTED_FILE_NAMES as st, TUniversalMessageRole as su, nonVisualObservationText as t, TResponseMetadata as ta, TOOL_PERMISSION_EVENTS as tc, isAbortFailure as ti, IProviderSpecificOptions as tl, IRegistryOwnedLifecycle as tn, IProviderProfileDefaults as to, ConversationStore as tr, IStructuredOutputSpec as ts, registerToolPermissionProfile as tt, IUserMessage as tu, lookupModelPrice as u, CONFIRM_NO as ua, AbstractEventService as uc, IToolSchemaProjectionChange as ui, TModelFallbackCallback as ul, IAgentCreationStats as un, formatSupportedProviderTypes as uo, processEnvResolver as ur, IZodSchemaDef as us, RISK_CLASS_POLICY as ut, isAssistantMessage as uu, getModelName as v, IToolFactory as va, generateSpanId as vc, TToolSchemaProjectionProfileBase as vi, AuthenticationError as vl, TToolResultAdmissionErrorCode as vn, IToolWithEventService as vo, closeObjectSchemas as vr, IExecutionJournal as vs, DEFAULT_BACKGROUND_PERMISSION_POLICY as vt, IToolContinuationPrompt as vu, IContextTokenEstimate as w, IMediaProviderDefinition as wa, IEventService as wc, snapshotToolProvenance as wi, ModelNotAvailableError as wl, EXECUTION_EVENTS as wn, SilentLogger as wo, providerCallSpanId as wr, IResumeToolCallsResult as ws, ExecutionProxy as wt, TConfigValue as wu, readTokenUsageFromMessage as x, TManagerToolParameters as xa, IBaseEventData as xc, AbstractManager as xi, ConfigurationError as xl, wasToolResultAdmitted as xn, ILogger as xo, buildTraceparent as xr, IRecoverableExecutionJournal as xs, TPermissionMode as xt, IToolWaitState as xu, registerModelMetadata as y, IAIProviderManager as ya, isDefaultEventService as yc, hashToolSchema as yi, CacheIntegrityError as yl, ToolResultAdmissionError as yn, TToolExecutionFunction as yo, zodToJsonSchema as yr, IExecutionRoundCheckpoint as ys, TBackgroundPermissionPolicy as yt, IToolWaitRequest as yu, validatePermissionPattern as z, IVideoJobSnapshot as za, ITokenUsage as zc, IExecutor as zi, IProviderCapabilityTable as zl, IBoundedOutput as zn, IPluginExecutionResult as zo, ExecutionRecoveryError as zr, TToolMetadata as zs, IParallelOrchestrationSpec as zt };
+//# sourceMappingURL=index-CagopdzH.d.cts.map