@robota-sdk/agent-framework 3.0.0-beta.82 → 3.0.0-beta.84

package/dist/node/{createInteractiveRuntime-Bmh2KYP6.d.ts → createInteractiveRuntime-3MZpPTdw.d.ts}

@@ -1,19 +1,27 @@
 import { IAIProvider, IContextWindowState, IFileSystem, IFileSystemAsync, IHistoryEntry, IHookInput, IHookTypeExecutor, IProviderDefinition, IProviderDefinitionConfig, IProviderProbeResult, IProviderProfileConfig, IResponseFormatConfig, ISession, ITerminalOutput, IToolExecutionResult, IToolResultSpillStore, IToolSchema, IToolWithEventService, IUserInteraction, TActionResponse, TBackgroundPermissionPolicy, TGuardrail, THookDefinition, THookOutcome, THooksConfig, TModelEffort, TModelEffortSelection, TPermissionMode, TRoleModelMap, TSessionEndReason, TSubprocessTraceClass, TToolArgs, TToolParameters, TUniversalMessage, TUniversalValue } from "@robota-sdk/agent-core";
-import { IActiveBranchPointer, IBranchEvent, ICompactEvent, IContextReferenceItem, IExecutionResult, IExecutionResult as IExecutionResult$2, IGoalState, IInteractionChannel as IInteractionChannel$1, IInteractiveSession as IInteractiveSession$1, IInteractiveSessionEvents as IInteractiveSessionEvents$1, IInteractiveSessionRecord, IInteractiveSessionRecord as IInteractiveSessionRecord$1, IInteractiveSessionStore, IInteractiveSessionStore as IInteractiveSessionStore$1, IMemoryEvent, IMemoryReference, IPeerTurnContext, IPlanArtifact, IPromptFileReferenceRecord, IPromptHistorySource, IPromptHistoryWriter, IResumableSessionSummary, ISessionListEntry, ISessionLoopState, ISkillActivationEvent, ISubmitOptions, ITerminalHandoff, IToolState, IToolSummary, ITurnHandle, TContextReferenceLoadType, TContextReferenceStatus, TDriverId, TGoalStopReason, TInteractiveEventName as TInteractiveEventName$1, TInteractivePermissionHandler, TMemoryType, TPermissionResultValue, TPermissionResultValue as TPermissionResultValue$1, TPromptFileReferenceReason, TSessionLoadOutcome, TTurnNotRunReason, TTurnSource } from "@robota-sdk/agent-interface-session";
+import { IActiveBranchPointer, IBranchEvent, ICompactEvent, IContextReferenceItem, IExecutionResult, IExecutionResult as IExecutionResult$2, IGoalState, IHistoryDisplaySegment, IInteractionChannel as IInteractionChannel$1, IInteractiveSession as IInteractiveSession$1, IInteractiveSessionEvents as IInteractiveSessionEvents$1, IInteractiveSessionRecord, IInteractiveSessionRecord as IInteractiveSessionRecord$1, IInteractiveSessionStore, IInteractiveSessionStore as IInteractiveSessionStore$1, IMemoryEvent, IMemoryReference, IModelCatalogEntry, IModelListSnapshot, IPeerTurnContext, IPlanArtifact, IPromptFileReferenceRecord, IPromptHistorySource, IPromptHistoryWriter, IResumableSessionSummary, ISessionListEntry, ISessionLoopState, ISessionProjectRead, ISessionStatusSnapshot, ISettingsProvidersSection, ISkillActivationEvent, ISubmitOptions, ITerminalHandoff, IToolState, IToolSummary, ITurnHandle, TContextReferenceLoadType, TContextReferenceStatus, TDriverId, TGoalStopReason, TInteractiveEventName as TInteractiveEventName$1, TInteractivePermissionHandler, TMemoryType, TPermissionResultValue, TPermissionResultValue as TPermissionResultValue$1, TProjectDiffRead, TProjectMemoryRead, TProjectStatusRead, TPromptFileReferenceReason, TSessionLoadOutcome, TSessionLoadOutcome as TSessionLoadOutcome$1, TTurnNotRunReason, TTurnSource, TWaitingLoopStopOutcome } from "@robota-sdk/agent-interface-session";
 import { IBackgroundTaskManager, IBackgroundTaskRunner, IBackgroundTaskRunner as IBackgroundTaskRunner$1, IScheduleEditPatch, ISubagentManager, ISubagentRunner, TObserverFailureReporter } from "@robota-sdk/agent-executor";
 import { IRetrievalAdapter, ISandboxClient, IWorkspaceManifest, createZodFunctionTool } from "@robota-sdk/agent-tools";
 import { z } from "zod";
-import { FileSessionLogger, IExternalPayloadReference, IExternalPayloadSink, IExternalPayloadSource, INodeToolResultSpillStoreOptions, IPermissionDenial, ISessionLogSink, ISessionLogSource, ISessionLogger, ISessionReplayValidationResult, ITerminalOutput as ITerminalOutput$1, Session, TAutoCompactThreshold, TAutoCompactThreshold as TAutoCompactThreshold$2, TPermissionHandler, TPermissionResult } from "@robota-sdk/agent-session";
+import { FileSessionLogger, ICommandSandboxApproval, IExternalPayloadReference, IExternalPayloadSink, IExternalPayloadSource, INodeToolResultSpillStoreOptions, IPermissionDenial, ISessionLogSink, ISessionLogSource, ISessionLogger, ISessionReplayValidationResult, ITerminalOutput as ITerminalOutput$1, Session, TAutoCompactThreshold, TAutoCompactThreshold as TAutoCompactThreshold$2, TPermissionHandler, TPermissionResult } from "@robota-sdk/agent-session";
 import { LineCounter } from "yaml";
-import { ITransportAdapter } from "@robota-sdk/agent-interface-transport";
+import { IAccessTokenVerifier, IAccessTokenVerifierConfig, IExternalEventGrant, ITransportAdapter, TExternalEventAuditRecord, TExternalEventRefusal } from "@robota-sdk/agent-interface-transport";
 import { IPeerMessageAck, IPeerMessageIngress, IPeerOrigin, TWorkspaceRelation } from "@robota-sdk/agent-interface-session-mobility";
-import { IAppearanceSettings, ICapabilityDescriptor, ICommand, ICommandListEntry, ICommandListEntry as ICommandListEntry$1, ICommandPluginAdapter, ICommandResult as ICommandResult$1, ICommandSource, ISkillExecutionPort, IStatusLineCommandSettings, TAppearanceSettingsPatch, TCapabilitySafety, TCommandHostAction, TCommandInvocationSource, TCommandInvocationSource as TCommandInvocationSource$1, TCommandUiIntent, TStatusLineCommandSettingsPatch } from "@robota-sdk/agent-interface-command";
+import { IAppearanceSettings, ICapabilityDescriptor, ICommand, ICommandListEntry, ICommandListEntry as ICommandListEntry$1, ICommandPluginAdapter, ICommandResult as ICommandResult$1, ICommandSkillListEntry, ICommandSource, ISkillExecutionPort, IStatusLineCommandSettings, TAppearanceSettingsPatch, TCapabilitySafety, TCommandHostAction, TCommandInvocationSource, TCommandInvocationSource as TCommandInvocationSource$1, TCommandRunner, TCommandSurface, TCommandSurfaceLocality, TCommandSurfaceLocality as TCommandSurfaceLocality$1, TCommandUiIntent, TStatusLineCommandSettingsPatch } from "@robota-sdk/agent-interface-command";
 import { ILivePromptContentBatch, ILivePromptContentPolicy, ILivePromptTraceBatch, IUsageSource } from "@robota-sdk/agent-interface-analytics";
-import { IAgentBackgroundTaskRequest, IBackgroundJobGroupCreateRequest, IBackgroundJobGroupCreateRequest as IBackgroundJobGroupCreateRequest$1, IBackgroundJobGroupState, IBackgroundJobGroupState as IBackgroundJobGroupState$1, IBackgroundJobGroupSummary, IBackgroundTaskInput, IBackgroundTaskListFilter, IBackgroundTaskLogCursor, IBackgroundTaskLogPage, IBackgroundTaskState, ICreateExecutionWorkspaceSnapshotInput, ICreateLineDetailPageInput, ICreateMainThreadDetailPageInput, IExecutionDetailCursor, IExecutionDetailPage, IExecutionOrigin, IExecutionOrigin as IExecutionOrigin$1, IExecutionPendingRequest, IExecutionPendingRequest as IExecutionPendingRequest$1, IExecutionWorkspaceEntry, IExecutionWorkspaceEntryRef, IExecutionWorkspaceFilter, IExecutionWorkspaceSnapshot, IExecutionWorkspaceSnapshot as IExecutionWorkspaceSnapshot$1, IExecutionWorkspaceSnapshotOptions, ISubagentJobResult, ISubagentJobState, TBackgroundJobGroupEvent, TBackgroundJobGroupEvent as TBackgroundJobGroupEvent$1, TBackgroundJobGroupEventListener, TBackgroundJobGroupIdFactory, TBackgroundPrimitive, TBackgroundTaskEvent, TBackgroundTaskIsolation, TBackgroundTaskMode, TExecutionWorkspaceUpdateCause } from "@robota-sdk/agent-interface-execution";
+import { IAgentBackgroundTaskRequest, IBackgroundJobGroupCreateRequest, IBackgroundJobGroupCreateRequest as IBackgroundJobGroupCreateRequest$1, IBackgroundJobGroupState, IBackgroundJobGroupState as IBackgroundJobGroupState$1, IBackgroundJobGroupSummary, IBackgroundTaskInput, IBackgroundTaskListFilter, IBackgroundTaskLogCursor, IBackgroundTaskLogPage, IBackgroundTaskState, ICreateExecutionWorkspaceSnapshotInput, ICreateLineDetailPageInput, ICreateMainThreadDetailPageInput, IExecutionDetailCursor, IExecutionDetailPage, IExecutionOrigin, IExecutionOrigin as IExecutionOrigin$1, IExecutionPendingRequest, IExecutionPendingRequest as IExecutionPendingRequest$1, IExecutionSelfPacedLoopSummary, IExecutionWorkspaceEntry, IExecutionWorkspaceEntryRef, IExecutionWorkspaceFilter, IExecutionWorkspaceSnapshot, IExecutionWorkspaceSnapshot as IExecutionWorkspaceSnapshot$1, IExecutionWorkspaceSnapshotOptions, ISubagentJobResult, ISubagentJobState, TBackgroundJobGroupEvent, TBackgroundJobGroupEvent as TBackgroundJobGroupEvent$1, TBackgroundJobGroupEventListener, TBackgroundJobGroupIdFactory, TBackgroundPrimitive, TBackgroundTaskEvent, TBackgroundTaskIsolation, TBackgroundTaskMode, TExecutionWorkspaceUpdateCause } from "@robota-sdk/agent-interface-execution";
 //#region src/effort/effort-resolution.d.ts
 type TEffortSelection = TModelEffort | 'auto';
 type TEffortSource = 'command' | 'flag' | 'environment' | 'settings' | 'preset' | 'model-default';
 type TEffortDisposition = 'applied' | 'model-default' | 'clamped' | 'not-applied';
+/**
+ * #3282 §2 — the plain label for each effort selection, shared by every surface that reports an
+ * effort choice or change: `/effort`'s own outcome text, the TUI/GUI pickers, and headless `/goal`
+ * output (`transport-host/headless/headless-output.ts`). Lives here (not in `agent-command`, which
+ * depends on this package) so `agent-framework`'s own headless output can use it without a circular
+ * dependency; `agent-command`'s `effort-command.ts` re-exports it unchanged.
+ */
+declare const EFFORT_LEVEL_LABELS: Readonly<Record<TEffortSelection, string>>;
 interface IModelEffortResolution {
   readonly requested: TEffortSelection;
   readonly effective: TModelEffort;
@@ -42,6 +50,7 @@ interface IProviderErrorGuidance {
   readonly forbidden?: string;
   readonly rateLimit?: string;
   readonly network?: string;
+  readonly modelUnavailable?: string;
 }
 //#endregion
 //#region src/agents/agent-definition-types.d.ts
@@ -74,7 +83,18 @@ interface IAgentDefinition {
   tools?: string[];
   /** Denylist of tool names. These tools are removed from the inherited set. */
   disallowedTools?: string[];
+  /**
+   * #3282 §4: where this definition came from, in plain words a person picking an agent can read —
+   * a discovered file's path (`AgentDefinitionLoader`), or absent for the built-in tier (a pack
+   * injection composed ahead of `BUILT_IN_AGENTS` included — see `buildAgentRuntime`). A reader that
+   * wants a label for every agent, built-in included, falls back to `DEFAULT_AGENT_DEFINED_IN`.
+   */
+  definedIn?: string;
 }
+/** The plain-words source shown for an agent definition that carries no `definedIn` of its own. */
+declare const DEFAULT_AGENT_DEFINED_IN = "Built-in";
+/** The agent type `/agent <prompt>` falls back to when none is named or selected as default. */
+declare const DEFAULT_AGENT_TYPE = "general-purpose";
 //#endregion
 //#region src/checkpoints/edit-checkpoint-types.d.ts
 interface IEditCheckpointRecorder {
@@ -153,16 +173,6 @@ interface IOrgPolicy {
 }
 //#endregion
 //#region src/command-api/host-context-types.d.ts
-interface ICommandSkillListEntry {
-  readonly name: string;
-  readonly description: string;
-  readonly source: string;
-  readonly modelInvocable: boolean;
-  readonly userInvocable: boolean;
-  readonly argumentHint?: string;
-  readonly context?: string;
-  readonly agent?: string;
-}
 interface ICommandSkillActivationRequest {
   readonly invocationSource: TCommandInvocationSource$1;
   readonly displayInput?: string;
@@ -460,10 +470,25 @@ declare function createExecutionWorkspaceTaskSpawner(options: ICreateExecutionWo
 //#region src/command-api/agent-job-roles.d.ts
 /** Starting, steering and ending subagent jobs. */
 interface IAgentJobDispatch {
+  /**
+   * #3282 §4: the agent switcher's roster — `definedIn` is a plain-words location (a discovered
+   * file's path, or "Built-in") a person picking an agent can read.
+   */
   listAgentDefinitions(): Array<{
     name: string;
     description: string;
+    definedIn: string;
   }>;
+  /**
+   * #3282 §4: the agent type `/agent <name>` (no prompt) currently selects — the agent switcher
+   * shows it checked. Never throws; a host without the agent runtime just has the fallback default.
+   */
+  getDefaultAgentType(): string;
+  /**
+   * #3282 §4: `/agent <name>` (bare, no prompt) sets this — the agent type used as the default
+   * `agentType` whenever one is not otherwise named. Throws if the agent runtime is unavailable.
+   */
+  setDefaultAgentType(agentType: string): void;
   listAgentJobs(): ISubagentJobState[];
   spawnAgentJob(input: {
     agentType: string;
@@ -546,7 +571,7 @@ interface IAgentJobMonitors {
 interface IAgentJobLogs {
   readBackgroundTaskLog(taskId: string, cursor?: IBackgroundTaskLogCursor): Promise<IBackgroundTaskLogPage>;
 }
-/** Aggregate: all 15 members remain source-compatible. Declare a role port instead of this. */
+/** Aggregate of the five role interfaces above, kept source-compatible. Declare a role port instead of this. */
 interface IAgentJobHostContext extends IAgentJobDispatch, IAgentJobGroups, IAgentJobSchedules, IAgentJobMonitors, IAgentJobLogs {}
 //#endregion
 //#region src/command-api/preset/preset-application-types.d.ts
@@ -857,7 +882,57 @@ declare function createUserPromptHistoryFile(history: string): IPromptHistoryWri
  */
 declare function createUserSessionStore(sessions: string): IInteractiveSessionStore$1;
 declare function listResumableSessionSummaries(sessionStore: IInteractiveSessionStore$1 | undefined, cwd: string): IResumableSessionSummary[];
+/**
+ * The sessions this build cannot read (TRANS-007).
+ *
+ * `listResumableSessionSummaries` returns only what can be resumed, which is what its name promises
+ * — an unreadable session is genuinely not resumable. What it must not do is make those sessions
+ * DISAPPEAR: before this, both stores dropped what they could not parse, so a damaged or
+ * older-format session read as gone rather than as unreadable. A surface that wants to say "3
+ * sessions here were written by a different build" asks this.
+ *
+ * Not filtered by `cwd`: an unreadable entry has no record, so it has no `cwd` to compare in general
+ * — {@link listUnreadableSessionsForWorkspace} answers that question for the entries that DO carry
+ * one.
+ */
+declare function listUnreadableSessions(sessionStore: IInteractiveSessionStore$1 | undefined): readonly {
+  readonly id: string;
+  readonly outcome: TSessionLoadOutcome$1;
+}[];
+/**
+ * The unreadable sessions of ONE workspace (#3289 §1).
+ *
+ * A store shared across workspaces (the user-level `~/.robota/sessions`) holds unreadable records
+ * from every folder ever worked in there, and a brand-new folder used to be told about all of them —
+ * "191 sessions could not be read" on a folder that had never seen one. An unreadable record still
+ * carries its raw `cwd` when the bytes are readable enough for that (TRANS-007's best-effort peek);
+ * this asks only for the ones whose peeked `cwd` is THIS workspace. A record whose workspace cannot
+ * be told at all is left out here — it is not lost, it simply is not this workspace's business.
+ */
+declare function listUnreadableSessionsForWorkspace(sessionStore: IInteractiveSessionStore$1 | undefined, cwd: string): readonly {
+  readonly id: string;
+}[];
 declare function resolveLatestSessionId(sessionStore: IInteractiveSessionStore$1 | undefined, cwd: string): string | undefined;
+/**
+ * An existing session of this workspace with no messages yet, that no OTHER client is on and has no
+ * work of its own in progress — the one a fresh "New session" (a serve/daemon start, or the button)
+ * should reuse instead of adding another empty row to the list (#3289 §1). `excludeSessionId` lets a
+ * caller leaving a session (e.g. deleting it) ask "reuse some OTHER empty session" without that one
+ * answering its own question.
+ *
+ * `otherClientsOf` reports how many clients are on a session besides the one asking, when the caller
+ * knows; omitted, every candidate is treated as free (the common case: nothing is live yet, as at a
+ * serve/daemon start, when nothing could be bound to anything). `isBusy` reports whether a candidate
+ * has work of its own in progress even with no client on it — a background task or a self-paced loop
+ * outlives the client that started it, and "New session" landing someone there would join that work
+ * mid-flight rather than starting fresh. Omitted, no candidate is treated as busy, for the same
+ * "nothing is live yet" reason `otherClientsOf` is omittable.
+ */
+declare function resolveReusableEmptySessionId(sessionStore: IInteractiveSessionStore$1 | undefined, cwd: string, options?: {
+  readonly excludeSessionId?: string;
+  readonly otherClientsOf?: (sessionId: string) => number;
+  readonly isBusy?: (sessionId: string) => boolean;
+}): string | undefined;
 declare function resolveSessionIdByIdOrName(sessionStore: IInteractiveSessionStore$1 | undefined, idOrName: string): string | undefined;
 //#endregion
 //#region src/advisor/advisor-spec.d.ts
@@ -947,9 +1022,22 @@ interface IPermissionRuleLayer {
   readonly deny: readonly string[];
   readonly ask: readonly string[];
 }
+/** One rule to remove from the settings layer it was declared in (#3282 §4a). */
+interface IPermissionRuleRemoval {
+  /** The `scope` of the {@link IPermissionRuleLayer} the rule was read from. */
+  readonly scope: string;
+  readonly kind: 'allow' | 'deny' | 'ask';
+  readonly pattern: string;
+}
 /** Where each configured permission rule comes from, read fresh on every call. */
 interface ICommandPermissionRulesAdapter {
   readLayers(): readonly IPermissionRuleLayer[];
+  /**
+   * #3282 §4a: remove one declared rule from its settings layer. Optional — a host with no write
+   * target for any layer (read-only rule discovery) makes rule removal fail EXPLICITLY wherever it
+   * is offered, never a silent no-op. Returns `false` when no writable layer matched the removal.
+   */
+  removeRule?(removal: IPermissionRuleRemoval): boolean;
 }
 /** How shell commands are confined: not at all, confined without prompts, or confined and asked. */
 type TSandboxCommandMode = 'off' | 'auto-allow' | 'regular';
@@ -962,6 +1050,22 @@ interface ICommandSandboxStatus {
   readonly network: boolean;
   readonly excludedCommands: readonly string[];
 }
+/** One external-event grant as the owner sees it: never the principal, a token or any content. */
+interface ICommandExternalEventGrant {
+  readonly grantId: string;
+  readonly principal: 'subject' | 'client';
+  readonly state: 'open' | 'revoked';
+  readonly counters: {
+    readonly accepted: number;
+    readonly refused: Readonly<Partial<Record<string, number>>>;
+    readonly settled: Readonly<Partial<Record<string, number>>>;
+  };
+}
+/** The session's external-event grants: `/events` lists them and withdraws one. */
+interface ICommandExternalEventsAdapter {
+  list(): readonly ICommandExternalEventGrant[];
+  revoke(grantId: string): 'revoked' | 'unknown-grant';
+}
 /** The OS sandbox, live: `/sandbox` reads it and changes the mode for the next command. */
 interface ICommandSandboxAdapter {
   status(): ICommandSandboxStatus;
@@ -1029,6 +1133,15 @@ interface ICommandMCPActivationSummary {
   readonly provenanceId: string;
   readonly definitionFingerprint: string;
   readonly securityIdentity: string;
+  /**
+   * #3282 §4 part b-2: this process's live connection outcome for an `allowed` server — absent for
+   * one that is not `allowed`, or has not been attempted yet. `'failed'`'s reason is
+   * {@link connectionFailureReason}; a connected server's tool names are {@link toolNames}.
+   */
+  readonly connection?: 'connected' | 'failed';
+  readonly connectionFailureReason?: string;
+  /** The names of the tools this server currently contributes; empty when not connected. */
+  readonly toolNames?: readonly string[];
 }
 /**
  * A definition-source-level problem — issue #2794: a configuration root that is not an object, no
@@ -1149,6 +1262,33 @@ interface ICommandMCPActivationAdapter {
    * a name it already had. Called once per sign-in that returned tools.
    */
   oauthToolsAdded?(serverId: string, added: readonly string[]): void;
+  /**
+   * #3282 §4 part b-2: `/mcp reload` and the Settings screen's "Reload servers" button. Retries
+   * every allowed server that is not currently connected; a server already connected is left
+   * running. Never rejects: a server that still cannot connect keeps its `list()` failure reason.
+   * Absent: the host offers no reload (the button/command then say so).
+   */
+  reload?(): Promise<{
+    readonly tools: readonly IToolWithEventService[];
+    readonly connectedServerIds: readonly string[];
+    readonly failedServerIds: readonly string[];
+    /**
+     * Identifies this call's staged tool provenance for `reloadToolsAdded`; absent when there is
+     * nothing to acknowledge (no server newly connected). Two `reload()` calls outstanding at once
+     * — `/mcp reload` runs inline, unblocked by the mid-turn gate, and an `update-settings` write
+     * is fire-and-forget, so this is reachable, not hypothetical — join the same connection pass
+     * and get the same token back; a fresh call started only after the last one's token was
+     * acknowledged gets a new one.
+     */
+    readonly reloadToken?: string;
+  }>;
+  /**
+   * Which of `reload`'s tools the session actually took, keyed to the `reloadToken` it returned;
+   * any other was left out for a name it already had. `token` not matching the currently staged
+   * reload — already committed, or superseded by a later call — makes this a no-op, so a late or
+   * duplicate acknowledgement can never clear or corrupt a different reload's provenance.
+   */
+  reloadToolsAdded?(token: string, added: readonly string[]): void;
 }
 /**
  * PEER-004 (#1863): a live session this one can address, as the operator sees it.
@@ -1169,6 +1309,16 @@ interface ILocalPeerSummary {
   /** `mismatched` when the peer's claim disagreed with what this session read; it is not believed. */
   readonly workspaceClaim?: 'verified' | 'mismatched' | 'absent';
 }
+/**
+ * Another of the user's devices with an admitted device-mesh link to this session, as the operator
+ * sees it. `deviceId` names it for a later `send`; `locality` is where the carrier established it
+ * runs, shown and never an authority input.
+ */
+interface ILinkedDeviceSummary {
+  readonly deviceId: string;
+  readonly name?: string;
+  readonly locality: 'same-host' | 'another-host';
+}
 /**
  * PEER-004: what `/peers` reads. The registry, the guarded directory and the liveness rule all live
  * in the composition root — a command never touches the filesystem, for the same reason it never
@@ -1184,6 +1334,16 @@ interface ICommandLocalPeersAdapter {
   listWithWorkspace?(): Promise<readonly ILocalPeerSummary[]>;
   /** This session's own id, so the command can mark which row is the reader. */
   ownSessionId(): string;
+  /**
+   * The user's other devices linked to this session over the device mesh, addressed by device id
+   * wherever a session id is taken. Absent on a host with no device mesh.
+   */
+  listDevices?(): readonly ILinkedDeviceSummary[];
+  /**
+   * Why sessions on this host cannot be listed, when local discovery is off for this session; the
+   * linked devices still are. Absent when discovery is on.
+   */
+  readonly localDiscoveryOff?: string;
   /**
    * PEER-006: hand `text` to another announced session, and report what came back.
    *
@@ -1405,6 +1565,8 @@ interface ICommandHostAdapters {
   workspace?: ICommandWorkspaceAdapter;
   /** Absent on a host with no OS sandbox — `/sandbox` then says so. */
   sandbox?: ICommandSandboxAdapter;
+  /** Absent when the session holds no external-event grant — `/events` then says so. */
+  externalEvents?: ICommandExternalEventsAdapter;
 }
 //#endregion
 //#region src/checkpoints/edit-checkpoint-store.d.ts
@@ -1482,7 +1644,7 @@ declare class EditCheckpointStore {
 declare function wrapEditCheckpointTools(tools: readonly IToolWithEventService[], recorder: IEditCheckpointRecorder): IToolWithEventService[];
 //#endregion
 //#region src/context/prompt-file-reference-types.d.ts
-type TPromptFileReferenceDiagnosticCode = 'not-found' | 'outside-root' | 'directory-not-supported' | 'file-too-large' | 'total-too-large' | 'too-many-references' | 'max-depth' | 'circular-reference' | 'unreadable';
+type TPromptFileReferenceDiagnosticCode = 'not-found' | 'outside-root' | 'directory-not-supported' | 'file-too-large' | 'total-too-large' | 'too-many-references' | 'max-depth' | 'circular-reference' | 'unreadable' | 'binary-file';
 interface IPromptFileReferenceToken {
   original: string;
   path: string;
@@ -1585,6 +1747,12 @@ interface IGoalControllerDeps {
  * payload is schema-validated at the tool layer, so this is deterministic — never prose parsing.
  */
 declare function extractGoalSignal(toolSummaries: readonly IToolSummary[]): IGoalSignal | null;
+/**
+ * True when `args` (the `/goal` command's raw argument string) asks to cancel the current goal —
+ * the single vocabulary both the command (`goal-command.ts`, agent-command) and the mid-turn CONTROL
+ * path (`InteractiveSession.executeCommand`, this package) match against, so the two never drift.
+ */
+declare function isGoalCancelVerb(args: string): boolean;
 declare class GoalController {
   private readonly deps;
   private goal;
@@ -1826,6 +1994,17 @@ interface ICommandHostUserInteraction {
    */
   getUserInteraction(): IUserInteraction | undefined;
 }
+/**
+ * Whether THIS session is running with no provider configured yet (issue #3282 §3 setup mode).
+ *
+ * Exists for exactly one command (`/provider add`, deciding hot-swap vs. restart) — never inferred
+ * from settings, because an ordinary session started from an env-default provider also has none
+ * persisted. The member is optional so a host with no concept of setup mode costs nothing and is
+ * correctly read as "not in it" (`?.() === true`), never mistaken for a required capability.
+ */
+interface ICommandHostSetupState {
+  isSetupRequired?(): boolean;
+}
 /** Re-applying preset-owned configuration to the live session. */
 interface ICommandHostPresetApplication {
   /** Apply an additive response style to the live system prompt. */
@@ -1864,6 +2043,12 @@ interface ICommandHostContextReferences {
 interface ICommandHostWorkspace {
   getCwd(): string;
   getCommandInvocationSource(): TCommandInvocationSource;
+  /**
+   * #3282 §4 part b-2: whether THIS invocation is provably on this machine. Optional so an older or
+   * narrower host still satisfies this interface; a caller that needs it treats a missing method the
+   * same as `'local'` (allow-by-default, matching the rest of the command layer).
+   */
+  getCommandSurfaceLocality?(): TCommandSurfaceLocality;
 }
 /** What commands and skills this host can dispatch. */
 interface ICommandHostCatalog {
@@ -1945,8 +2130,8 @@ interface ICommandHostTerminalHandoff {
 interface ICommandHostAdapterAccess {
   getCommandHostAdapters?(): ICommandHostAdapters;
 }
-/** Aggregate: all 47 members remain source-compatible. Declare a role port instead of this. */
-interface ICommandHostContext extends ICommandHostSessionAccess, ICommandHostAgentJobs, ICommandHostUserInteraction, ICommandHostPresetApplication, ICommandHostContextWindow, ICommandHostContextReferences, ICommandHostWorkspace, ICommandHostCatalog, ICommandHostCheckpoints, ICommandHostMemory, ICommandHostBackgroundTasks, ICommandHostGoal, ICommandHostPlan, ICommandHostTerminalHandoff, ICommandHostAdapterAccess {}
+/** Aggregate: all 48 members remain source-compatible. Declare a role port instead of this. */
+interface ICommandHostContext extends ICommandHostSessionAccess, ICommandHostAgentJobs, ICommandHostUserInteraction, ICommandHostSetupState, ICommandHostPresetApplication, ICommandHostContextWindow, ICommandHostContextReferences, ICommandHostWorkspace, ICommandHostCatalog, ICommandHostCheckpoints, ICommandHostMemory, ICommandHostBackgroundTasks, ICommandHostGoal, ICommandHostPlan, ICommandHostTerminalHandoff, ICommandHostAdapterAccess {}
 //#endregion
 //#region src/command-api/contracts.d.ts
 type TSystemCommandLifecycle = 'inline' | 'blocking' | 'background';
@@ -1980,6 +2165,10 @@ interface ISystemCommand {
   argumentHint?: string;
   safety?: TCapabilitySafety;
   subcommands?: readonly ICommand[];
+  /** Who runs this command; absent → `'runtime'`. See `ICommand.runner`. */
+  runner?: TCommandRunner;
+  /** The surfaces a `'client'` command can run on. See `ICommand.surfaces`. */
+  surfaces?: readonly TCommandSurface[];
   lifecycle?: TSystemCommandLifecycle;
   /**
    * Whether executing this command requires explicit user permission/confirmation.
@@ -2252,6 +2441,37 @@ declare function resolveEnvDefaultProvider(providerDefinitions: readonly IProvid
 declare function readProviderSettings(sources: readonly TSettingsSource[], options?: IReadProviderSettingsOptions): IProviderDefinitionConfig;
 declare function createProviderFromSettings(sources: readonly TSettingsSource[], modelOverride?: string, options?: IReadProviderSettingsOptions): IAIProvider;
 //#endregion
+//#region src/command-api/provider/provider-model-catalog.d.ts
+/**
+ * The models every configured profile offers, current profile first (#3282 §2). A profile missing
+ * `type` or `model` is skipped — it could not run even by an explicit `/provider switch`, so `/model`
+ * does not offer it either. `allowedProviders`, when set, is the org policy's allowlist of provider
+ * PROFILE NAMES (`IOrgPolicy.allowedProviders`) — a profile it excludes is skipped the same way, so
+ * a control built from this snapshot never offers a switch org policy would then refuse.
+ */
+declare function buildModelListSnapshot(providers: Record<string, IProviderProfileSettings> | undefined, currentProfileName: string | undefined, currentModel: string, providerDefinitions: readonly IProviderDefinition[], allowedProviders?: readonly string[]): IModelListSnapshot;
+/** Where an `id` resolves: which profile offers it, and its display label. Group order IS the tie-break. */
+interface IModelListSelection {
+  readonly profileName: string;
+  readonly model: IModelCatalogEntry;
+}
+/**
+ * Resolve a typed/clicked model id against the snapshot. Groups are already ordered current-profile
+ * first, so the first match found — never a special case here — is the one the current profile's
+ * provider offers, matching the "prefer the current profile" rule for an id offered by more than one.
+ */
+declare function resolveModelListSelection(snapshot: IModelListSnapshot, id: string): IModelListSelection | undefined;
+//#endregion
+//#region src/command-api/provider/provider-profile-summary.d.ts
+/**
+ * Every configured profile, in settings order (the Settings screen marks the current one with
+ * `current` rather than reordering around it — unlike the model list's current-first order, which
+ * exists only to break a same-id tie). `allowedProviders`, when set, is the org policy's allowlist of
+ * profile names (`IOrgPolicy.allowedProviders`) — the same filter `buildModelListSnapshot` applies,
+ * so Settings never offers managing a profile a switch would then refuse.
+ */
+declare function buildProviderProfilesSnapshot(providers: Record<string, IProviderProfileSettings> | undefined, currentProfileName: string | undefined, providerDefinitions: readonly IProviderDefinition[], allowedProviders?: readonly string[]): ISettingsProvidersSection;
+//#endregion
 //#region src/command-api/help/help-command-api.d.ts
 declare const HELP_COMMAND_DESCRIPTION = "Show available commands";
 declare function formatCommandHelpMessage(context: ICommandHostCatalog): string;
@@ -2312,6 +2532,12 @@ interface IPermissionsCommandState {
 /** Where a rule the gate reads comes from when no settings layer declares it: a flag, a preset, a command. */
 declare const RUNTIME_RULE_SOURCE = "this session (CLI flags, preset, commands)";
 declare const VALID_PERMISSION_MODES: readonly TPermissionMode[];
+/**
+ * #3282 §2 — the plain label every surface shows for a permission mode, so the TUI's inline picker
+ * and the GUI's mode menu agree instead of each inventing (or skipping) one. `description` stays the
+ * secondary line under it; neither name is an internal id a person has to already know.
+ */
+declare const PERMISSION_MODE_LABELS: Readonly<Record<TPermissionMode, string>>;
 declare function buildPermissionModeSubcommands(source?: string): ICommand[];
 declare function parsePermissionModeArgument(args: string): string | undefined;
 declare function isPermissionMode(value: string): value is TPermissionMode;
@@ -2423,7 +2649,7 @@ declare function applyAppearanceSettings(settingsPath: string, patch: TAppearanc
 //#endregion
 //#region src/command-api/plugin/plugin-command-api.d.ts
 declare const PLUGIN_COMMAND_DESCRIPTION = "Manage plugins";
-declare const PLUGIN_COMMAND_ARGUMENT_HINT = "manage | install <name@marketplace> | uninstall <name@marketplace> | enable <name@marketplace> | disable <name@marketplace> | marketplace <action>";
+declare const PLUGIN_COMMAND_ARGUMENT_HINT = "manage | list | install <name@marketplace> | uninstall <name@marketplace> | enable <name@marketplace> | disable <name@marketplace> | marketplace <action>";
 declare const RELOAD_PLUGINS_COMMAND_DESCRIPTION = "Reload all plugin resources";
 /** CMD-004: `/plugin manage` asks the REQUESTING surface to open its plugin manager (UI intent). */
 declare function createShowPluginManagerIntent(): TCommandUiIntent;
@@ -7053,6 +7279,11 @@ interface ISubagentOptions {
   taskDisallowedTools?: readonly string[];
   /** Permission handler from parent. */
   permissionHandler?: TPermissionHandler;
+  /**
+   * The sandbox the subagent's shell tools run under, as the approval it gives a confined command.
+   * Built from the same sandbox instance as those tools: the instance knows what it could not restore.
+   */
+  commandSandbox?: ICommandSandboxApproval;
   /** Plugin hooks configuration from parent session. */
   hooks?: Record<string, unknown>;
   /** Hook type executors from parent session (prompt, agent, etc.). */
@@ -7602,6 +7833,12 @@ interface IAgentToolDeps extends IInProcessSubagentRunnerDeps {
   getParentModelEffort?: () => TModelEffort | undefined;
   /** PRESET-016 — runtime gate; when present and returns false, subagent dispatch is refused. */
   isParallelSubagentsEnabled?: () => boolean;
+  /**
+   * #3282 §4: the agent type `/agent <name>` (no prompt) selects and the agent switcher shows
+   * checked — mutable session-scoped state, read back through `getDefaultAgentType`. Absent means
+   * `DEFAULT_AGENT_TYPE` (`general-purpose`), never persisted past this session.
+   */
+  defaultAgentType?: string;
 }
 //#endregion
 //#region src/tools/agent-tool.d.ts
@@ -7700,7 +7937,7 @@ type TKnownMarketplacesRegistry = Record<string, IKnownMarketplaceEntry>;
  *
  * A vector is what makes it safe by construction rather than by quoting: no shell parses these values,
  * so there is no quoting to get right. The repository already reached this conclusion once —
- * `apps/action/src/build-invocation.ts` (SEC-006) replaced `execSync(args.join(' '))` for the same
+ * `apps/action/src/build-invocation.mjs` (SEC-006) replaced `execSync(args.join(' '))` for the same
  * reason — and this is that fix applied to the plugin surface.
  *
  * `file` is the executable. `args` is readonly because an implementation must not be able to fold an
@@ -8340,6 +8577,12 @@ interface IExecutionControllerCallbacks {
   recordPrompt?: TPromptHistoryRecorder;
   /** Runs after turn history is final but before the turn handle settles or the next input drains. */
   onWakeTurnFinalizing?: (wakeTaskId: string, result: IExecutionResult$2 | undefined, outcome: 'success' | 'failure' | 'interrupted', toolExecutions: readonly ICompletedToolExecution[]) => Promise<void>;
+  /**
+   * #3288: provider tool name → source `/command` name, for the projected model-command tools this
+   * session assembled (`model-command-tool-projection.ts`). Read at `tool_start` so the emitted
+   * `IToolState.commandName` lets a surface show "Ran /<name>" without hardcoding the tool prefix.
+   */
+  modelCommandToolNames?: ReadonlyMap<string, string>;
 }
 interface ICompletedToolExecution {
   name: string;
@@ -8474,9 +8717,9 @@ declare class SessionHistoryTracker {
   private editCheckpointStore;
   private readonly branchEvents;
   /**
-   * SELFHOST-007: a persisted active-branch pointer restored (in the constructor) BEFORE the checkpoint
-   * store exists on the standard/async construction path — stashed here and applied the moment the
-   * store is set, so `--resume` reaches the store instead of silently dropping the pointer.
+   * SELFHOST-007: a persisted active-branch pointer restored on resume, before the session (and
+   * possibly the store) exists — stashed here and applied on the first checkpoint operation, so
+   * `--resume` reaches the store instead of throwing or silently dropping the pointer.
    */
   private pendingActiveBranch;
   private memoryEvents;
@@ -8503,9 +8746,10 @@ declare class SessionHistoryTracker {
   /** SELFHOST-007: the active-branch pointer to persist (so a branch survives --resume). */
   getActiveBranchPointer(): IActiveBranchPointer | undefined;
   /**
-   * SELFHOST-007: restore the active branch from a persisted pointer on resume (graceful on drift). If
-   * the checkpoint store is not yet created (standard async construction path — the store is injected
-   * later via {@link setEditCheckpointStore}), stash the pointer and apply it when the store arrives.
+   * SELFHOST-007: restore the active branch from a persisted pointer on resume (graceful on drift).
+   * The pointer is always stashed and applied on the first checkpoint operation: on the standard
+   * path a resume restores its record before the underlying session exists, so the session id the
+   * store keys by cannot be read yet, whether or not the store was given at construction.
    */
   restoreActiveBranch(pointer: IActiveBranchPointer | undefined): void;
   /** Apply a stashed active-branch pointer once the store exists (idempotent; clears the stash). */
@@ -8525,6 +8769,11 @@ declare class SessionHistoryTracker {
   getSkillActivationEvents(): ISkillActivationEvent[];
   recordSkillActivationEvent(event: ISkillActivationEvent, appendHistory: boolean): void;
   private getCheckpointStore;
+  /**
+   * The host is checked first: where no project write can be proven safe, trusting the workspace
+   * would not bring checkpoints back, so naming trust there would send the user the wrong way.
+   */
+  private noStoreReason;
 }
 //#endregion
 //#region src/config/config-merge.d.ts
@@ -8542,6 +8791,9 @@ interface IHookDefinitionSource {
   readonly source: string;
 }
 //#endregion
+//#region src/assembly/sandbox-approval.d.ts
+declare function sandboxApprovalFor(client: ISandboxClient): ICommandSandboxApproval;
+//#endregion
 //#region src/assembly/subagent-logger.d.ts
 /**
  * Create a FileSessionLogger for a subagent session.
@@ -8567,13 +8819,158 @@ declare function createSubagentLogger(parentSessionId: string, _agentId: string,
  */
 declare function resolveSubagentLogDir(parentSessionId: string, baseLogsDir: string): string;
 //#endregion
+//#region src/interactive/peer-turn-rate-limit.d.ts
+/**
+ * How many turns one peer's messages may start in this session over time.
+ *
+ * A message from another session carries no authority, but it still runs this session's model, at
+ * this owner's cost. The conversation limits bound one exchange; nothing bounded a peer that keeps
+ * opening new ones. This does, per sender, over sliding windows.
+ */
+interface IPeerTurnRateWindow {
+  readonly windowMs: number;
+  readonly maxTurns: number;
+}
+/**
+ * Counts each sender's messages the session took for a turn — one later coalesced or dropped by the
+ * queue included, so a flood cannot slip past by being replaced — and refuses those over a limit.
+ */
+declare class PeerTurnRateLimiter {
+  private readonly windows;
+  private readonly now;
+  private readonly started;
+  private readonly longestWindowMs;
+  constructor(windows?: readonly IPeerTurnRateWindow[], now?: () => number);
+  /**
+   * Admit one more message from `sender` and count it, or say why not. A message refused here is not
+   * counted, so a sender that keeps sending is not locked out beyond the window.
+   */
+  admit(sender: string): string | undefined;
+  private forgetIdleSenders;
+}
+//#endregion
+//#region src/interactive/external-event-ingress.d.ts
+/**
+ * One grant's source. The ingress builds the grant's verifier from `grant.verifier` with the factory
+ * its host was constructed with, so the principal the grant pins is the one its tokens are checked
+ * against; opening a grant carries no verifier and no factory. The host carries the pair a carrier
+ * delivers and trusts nothing else it says.
+ */
+interface IExternalEventSourceOptions {
+  readonly grant: IExternalEventGrant;
+  /** Receives one content-free record per refusal and per settlement. A throw is ignored. */
+  readonly audit?: (record: TExternalEventAuditRecord) => void;
+}
+type TExternalEventSettlement = {
+  readonly outcome: 'completed';
+  readonly response: string;
+} | {
+  readonly outcome: 'interrupted';
+} | {
+  readonly outcome: 'not-run';
+  readonly reason: TTurnNotRunReason;
+} | {
+  readonly outcome: 'failed';
+  readonly reason: string;
+};
+/** An admission names its turn; `settled` is for the host, never for the sender. */
+type TExternalEventReceipt = {
+  readonly admitted: true;
+  readonly turnId: string;
+  readonly settled: Promise<TExternalEventSettlement>;
+} | {
+  readonly admitted: false;
+  readonly refusal: TExternalEventRefusal;
+};
+interface IExternalEventSource {
+  readonly grantId: string;
+  /** Take one delivery (`IExternalEventDelivery`) exactly as a carrier received it. */
+  receive(delivery: unknown): Promise<TExternalEventReceipt>;
+  /** Stop admission synchronously; already-submitted turns retain their exact settlement. */
+  close(): void;
+  /**
+   * Withdraw the grant: a later event whose token the grant's verifier admits is refused as revoked
+   * (any other is refused as a live grant would refuse it), its queued and running turns are
+   * stopped, and the label cannot be opened again on this ingress.
+   */
+  revoke(): void;
+}
+interface IExternalEventHost {
+  getPermissionMode(): TPermissionMode;
+  addPermissionModeGuard(guard: (next: TPermissionMode) => void): () => void;
+  submit(input: string, options: ISubmitOptions): Promise<ITurnHandle>;
+  /** The host's one way to build a verifier; the ingress calls it with each grant's own config. */
+  createVerifier(config: IAccessTokenVerifierConfig): IAccessTokenVerifier;
+  /** Wall-clock milliseconds, for rate windows, token expiry and audit times. */
+  now?: () => number;
+  /** Whether the session has begun shutting down; a refused submission is then named so. */
+  isShuttingDown?: () => boolean;
+  /**
+   * The run's grant history (#3189). A run that switches sessions lends every session the same one,
+   * so spent tokens, rate windows and revocations belong to the run: a switch replays nothing and
+   * resets no rate. Without it, the history lives and ends with this session.
+   */
+  history?: ExternalEventGrantHistory;
+}
+/** What a grant has spent, kept per grant label so a closed and reopened grant cannot spend it again. */
+interface IGrantHistory {
+  /** Spent token ids and when each stops verifying. */
+  readonly spent: Map<string, number>;
+  readonly rate: PeerTurnRateLimiter;
+  /** The rate windows `rate` counts against; a reopen with other windows starts a new count. */
+  readonly windows: string;
+  revoked: boolean;
+}
+declare const GRANTS: unique symbol;
+/** What a run remembers about each grant across the sessions it holds; opaque to its holder. */
+declare class ExternalEventGrantHistory {
+  readonly [GRANTS]: Map<string, IGrantHistory>;
+}
+/** One history per run: create it once and pass it to every session the run builds. */
+declare function createExternalEventGrantHistory(): ExternalEventGrantHistory;
+/**
+ * Session-owned admission and turn settlement for external events. The sender is the grant whose
+ * verifier admitted the token; nothing in the delivery names it.
+ */
+declare class ExternalEventIngress {
+  private readonly host;
+  private readonly sources;
+  private readonly history;
+  /** Grants revoked on this ingress; one revoked on another session of the run opens revoked. */
+  private readonly revokedHere;
+  private pending;
+  private releaseGuard?;
+  private readonly now;
+  constructor(host: IExternalEventHost);
+  open(options: IExternalEventSourceOptions): IExternalEventSource;
+  private historyOf;
+  closeAll(): void;
+  private record;
+  private hasActiveSource;
+  private close;
+  private maybeRelease;
+  /** Refuse a spent token, or one without a name; `undefined` means it may be spent. */
+  private replayRefusal;
+  private receive;
+  private submit;
+}
+//#endregion
 //#region src/interactive/interactive-session-options.d.ts
+type TExternalEventVerifierFactory = (config: IAccessTokenVerifierConfig) => IAccessTokenVerifier;
 /** Standard construction: cwd + provider. Config/context loaded internally. */
 interface IInteractiveSessionStandardOptions {
   /** Additive response style applied to the composed system prompt. */
   outputStyle?: IOutputStylePrompt;
   cwd: string;
   provider: IAIProvider;
+  /**
+   * #3282 §3: `provider` is a placeholder that never calls a model — a host started this session
+   * without a configured provider (a served runtime's first run). `getStatusSnapshot()` reports it so
+   * a client can show a setup screen instead of a composer, and `submit()` refuses a turn outright
+   * instead of reaching the placeholder. Cleared once `/provider switch` (or the setup flow's own
+   * hot-swap) puts a real provider in place — see `switchProvider`.
+   */
+  setupRequired?: boolean;
   /** Optional product-owned remediation for recognized provider errors; scoped to this session. */
   providerErrorGuidance?: IProviderErrorGuidance;
   /** Host-selected model-visible enclosure for attached file references. */
@@ -8617,6 +9014,11 @@ interface IInteractiveSessionStandardOptions {
   /** Explicit authority- and permission-backed edit checkpoint capability. */
   editCheckpointStore?: EditCheckpointStore;
   sessionName?: string;
+  /**
+   * #3189: name the session once, after its first turn, with its own provider, unless it already has
+   * a name. Off unless set: a one-shot print run has no use for a title.
+   */
+  autoName?: boolean;
   resumeSessionId?: string;
   forkSession?: boolean;
   /**
@@ -8690,6 +9092,13 @@ interface IInteractiveSessionStandardOptions {
    * `canHandoffTerminal === false` for transports with no interactive TTY (headless).
    */
   terminalHandoff?: ITerminalHandoff;
+  /** Builds each external-event grant's verifier; absent, the session opens no grant. */
+  externalEventVerifierFactory?: TExternalEventVerifierFactory;
+  /**
+   * The run's grant history, shared by every session a run builds (#3189): a session switch replays
+   * no spent token and resets no rate. Absent, the history lives and ends with the session.
+   */
+  externalEventGrantHistory?: ExternalEventGrantHistory;
   /** Model-visible command descriptors derived from the composed command executor. */
   commandDescriptors?: readonly ICapabilityDescriptor[];
   /** Provider definitions for hot-swap via /provider switch. */
@@ -8771,6 +9180,8 @@ interface IInteractiveSessionInjectedOptions {
   observerFailureWarningCode?: ICreateSessionOptions['observerFailureWarningCode'];
   cwd?: string;
   provider?: IAIProvider;
+  /** #3282 §3 — see {@link IInteractiveSessionStandardOptions.setupRequired}. */
+  setupRequired?: boolean;
   /** Trusted-or-restricted project decision made by the host. Absence is Restricted. */
   projectAccess?: TWorkspaceProjectAccess;
   userSettingsSources?: readonly INodeHostSettingsSource[];
@@ -8789,6 +9200,8 @@ interface IInteractiveSessionInjectedOptions {
   /** Explicit authority- and permission-backed edit checkpoint capability. */
   editCheckpointStore?: EditCheckpointStore;
   sessionName?: string;
+  /** See the standard options. */
+  autoName?: boolean;
   resumeSessionId?: string;
   forkSession?: boolean;
   /** Optional command modules composed into this injected session. */
@@ -8797,6 +9210,13 @@ interface IInteractiveSessionInjectedOptions {
   commandHostAdapters?: ICommandHostAdapters;
   /** TERM-001: transport-provided terminal-handoff capability (see standard options). */
   terminalHandoff?: ITerminalHandoff;
+  /** Builds each external-event grant's verifier; absent, the session opens no grant. */
+  externalEventVerifierFactory?: TExternalEventVerifierFactory;
+  /**
+   * The run's grant history, shared by every session a run builds (#3189): a session switch replays
+   * no spent token and resets no rate. Absent, the history lives and ends with the session.
+   */
+  externalEventGrantHistory?: ExternalEventGrantHistory;
 }
 /** Union of standard and injected construction options. */
 type TInteractiveSessionOptions = IInteractiveSessionStandardOptions | IInteractiveSessionInjectedOptions;
@@ -8882,6 +9302,8 @@ declare class SessionSkillRouter {
   reapplyCommandModuleSelection(enabled: readonly string[] | undefined, disabled: readonly string[] | undefined): readonly IUnknownCommandModuleName[];
   shutdownModules(): Promise<unknown[]>;
   getCommandInvocationSource(): TCommandInvocationSource$1;
+  /** #3282 §4 part b-2: allow-by-default, matching every other transport-origin default here. */
+  getCommandSurfaceLocality(): TCommandSurfaceLocality$1;
   getCommandOriginDriverId(): TDriverId | undefined;
   getCommandHostAdapters(): ICommandHostAdapters;
   listCommands(): ICommandListEntry$1[];
@@ -8891,8 +9313,8 @@ declare class SessionSkillRouter {
     description: string;
   }>;
   findSkillCommand(name: string): ICommand | undefined;
-  executeCommand(name: string, args: string, source?: TCommandInvocationSource$1, originDriverId?: TDriverId): Promise<ICommandResult$1 | null>;
-  executeCommandWithSource(source: TCommandInvocationSource$1, command: ISystemCommand, args: string, originDriverId?: TDriverId): Promise<ICommandResult$1>;
+  executeCommand(name: string, args: string, source?: TCommandInvocationSource$1, originDriverId?: TDriverId, locality?: TCommandSurfaceLocality$1): Promise<ICommandResult$1 | null>;
+  executeCommandWithSource(source: TCommandInvocationSource$1, command: ISystemCommand, args: string, originDriverId?: TDriverId, locality?: TCommandSurfaceLocality$1): Promise<ICommandResult$1>;
   executeModelCommand(name: string, args: string): Promise<ICommandResult$1 | null>;
   executeSkillCommandByName(name: string, args: string, request: ICommandSkillActivationRequest): Promise<ICommandResult$1 | null>;
   executeUserResolvedSkillCommand(skill: ICommand, args: string, displayInput: string | undefined, rawInput: string | undefined, invocation: ISkillActivationEvent['invocation'],
@@ -8928,6 +9350,12 @@ declare class SessionExecutionController {
   /** RUNTIME-003: the registry that makes `ITurnHandle.completed` able to promise it settles. */
   readonly turns: TurnSettlerRegistry;
   get executing(): boolean;
+  /**
+   * #3288 §2: the same tool-name -> `/command` projection `applyToolStart` reads live, exposed so the
+   * history-replay projector can classify a STORED call's `commandName`/`internal` identically — the
+   * mapping is a property of the session's current command registration, not of the moment a call ran.
+   */
+  get modelCommandToolNames(): ReadonlyMap<string, string> | undefined;
   /** The HEAD queued prompt (next to run), or null — backward-compatible single-prompt read. */
   get pendingPrompt(): string | null;
   /** REMOTE-014 E5: total queued inputs (0 when idle) — a co-drive "N queued" hint. */
@@ -8981,12 +9409,13 @@ declare abstract class InteractiveSessionBase {
   getStreamingText(): string;
   getActiveTools(): SessionExecutionController['activeTools'];
   cancelQueue(): void;
-  executeCommand(name: string, args: string, source?: TCommandInvocationSource$1, originDriverId?: TDriverId): Promise<ICommandResult$1 | null>;
+  executeCommand(name: string, args: string, source?: TCommandInvocationSource$1, originDriverId?: TDriverId, locality?: TCommandSurfaceLocality$1): Promise<ICommandResult$1 | null>;
   executeModelCommand(name: string, args: string): Promise<ICommandResult$1 | null>;
   getSessionUsage(): readonly ISessionUsageRecord[];
   /** ARCH-029 TC-08: one replay-validation path with no fallback branch. */
   validateCurrentSessionReplayLog(): ICommandSessionReplayValidationReport;
   getCommandInvocationSource(): TCommandInvocationSource$1;
+  getCommandSurfaceLocality(): TCommandSurfaceLocality$1;
   executeSkillCommandByName(name: string, args: string, request: ICommandSkillActivationRequest): Promise<ICommandResult$1 | null>;
   listCommands(): ICommandListEntry$1[];
   listSkills(): ICommandSkillListEntry[];
@@ -9000,6 +9429,8 @@ declare abstract class InteractiveSessionBase {
   compactContext(instructions?: string): Promise<void>;
   getFullHistory(): IHistoryEntry[];
   getMessages(): TUniversalMessage[];
+  /** #3288 §2: `getMessages()`'s chat entries, projected for a reload/reconnect/resume replay. */
+  getMessagesDisplay(): IHistoryDisplaySegment[];
   listEditCheckpoints(): IEditCheckpointSummary[];
   inspectEditCheckpoint(checkpointId: string): IEditCheckpointInspection;
   restoreEditCheckpoint(checkpointId: string): Promise<IEditCheckpointRestoreResult>;
@@ -9024,6 +9455,19 @@ declare abstract class InteractiveSessionBase {
   getBackgroundJobGroup(groupId: string): IBackgroundJobGroupState$1 | undefined;
   waitBackgroundJobGroup(groupId: string): Promise<IBackgroundJobGroupState$1>;
   getExecutionWorkspaceSnapshot(options?: IExecutionWorkspaceSnapshotOptions): IExecutionWorkspaceSnapshot$1;
+  /**
+   * #3288 §1: this session's self-paced loops, summarized for the execution workspace. Overridden
+   * by {@link InteractiveSession} (the only subclass with self-paced loops at all); the default
+   * here keeps a hypothetical other subclass working with none, rather than requiring one.
+   */
+  protected getSelfPacedLoopWorkspaceSummaries(): readonly IExecutionSelfPacedLoopSummary[];
+  /**
+   * #3288 §1: a single self-paced loop's own durable state, for its detail page (`readWorkspaceDetail`
+   * — its entry has no `IBackgroundTaskState` of its own to read). Overridden by
+   * {@link InteractiveSession}; the default here keeps a hypothetical other subclass working with
+   * none, matching {@link getSelfPacedLoopWorkspaceSummaries}.
+   */
+  protected getSelfPacedLoopDetail(_loopId: string): ISessionLoopState | undefined;
   listExecutionWorkspaceEntries(filter?: IExecutionWorkspaceFilter): IExecutionWorkspaceEntry[];
   getExecutionWorkspaceEntry(entryId: string): IExecutionWorkspaceEntry | undefined;
   readExecutionWorkspaceDetail(entryId: string, cursor?: IExecutionDetailCursor): Promise<IExecutionDetailPage>;
@@ -9031,7 +9475,10 @@ declare abstract class InteractiveSessionBase {
   listAgentDefinitions(): Array<{
     name: string;
     description: string;
+    definedIn: string;
   }>;
+  getDefaultAgentType(): string;
+  setDefaultAgentType(agentType: string): void;
   listAgentJobs(): ISubagentJobState[];
   spawnAgentJob(input: ISpawnAgentJobInput): Promise<ISubagentJobState>;
   waitAgentJob(taskId: string): Promise<ISubagentJobResult>;
@@ -9060,68 +9507,12 @@ declare abstract class InteractiveSessionBase {
   editSchedule(taskId: string, patch: IScheduleEditPatch): Promise<void>;
 }
 //#endregion
-//#region src/interactive/external-event-ingress.d.ts
-/** Identity and content attested by a trusted source adapter, never parsed from prompt text. */
-interface IAuthenticatedExternalEvent {
-  readonly senderId: string;
-  readonly conversationId: string;
-  readonly content: string;
-}
-interface IExternalEventSourceOptions {
-  readonly id: string;
-  readonly allowedSenders: readonly string[];
-  /** Verify the platform signature/credential and return its real sender; null means unauthenticated. */
-  readonly authenticate: (raw: unknown) => IAuthenticatedExternalEvent | null | Promise<IAuthenticatedExternalEvent | null>;
-}
-type TExternalEventSettlement = {
-  readonly outcome: 'completed';
-  readonly response: string;
-} | {
-  readonly outcome: 'interrupted';
-} | {
-  readonly outcome: 'not-run';
-  readonly reason: TTurnNotRunReason;
-} | {
-  readonly outcome: 'failed';
-  readonly reason: string;
-};
-interface IExternalEventReceipt {
-  readonly outcome: 'accepted' | 'ignored' | 'refused';
-  readonly reason?: string;
-  readonly turnId?: string;
-  readonly settled?: Promise<TExternalEventSettlement>;
-}
-interface IExternalEventSource {
-  receive(raw: unknown): Promise<IExternalEventReceipt>;
-  /** Stop admission synchronously; already-submitted turns retain their exact settlement. */
-  close(): void;
-}
-interface IExternalEventHost {
-  getPermissionMode(): TPermissionMode;
-  addPermissionModeGuard(guard: (next: TPermissionMode) => void): () => void;
-  submit(input: string, options: ISubmitOptions): Promise<ITurnHandle>;
-}
-/** Session-owned admission and turn settlement; adapters own platform authentication. */
-declare class ExternalEventIngress {
-  private readonly host;
-  private readonly sources;
-  private pending;
-  private releaseGuard?;
-  constructor(host: IExternalEventHost);
-  open(options: IExternalEventSourceOptions): IExternalEventSource;
-  closeAll(): void;
-  private hasActiveSource;
-  private close;
-  private maybeRelease;
-  private receive;
-}
-//#endregion
 //#region src/interactive/interactive-session.d.ts
 interface IInteractiveSessionShutdownOptions {
   reason?: TSessionEndReason;
   message?: string;
 }
-declare class InteractiveSession extends InteractiveSessionBase implements ISession, IAgentJobHostContext, IInteractiveSession$1, ICommandHostContext {
+declare class InteractiveSession extends InteractiveSessionBase implements ISession, IAgentJobHostContext, IInteractiveSession$1, ICommandHostContext, ISessionProjectRead {
   private session;
   private readonly listeners;
   private initialized;
@@ -9177,6 +9568,8 @@ declare class InteractiveSession extends InteractiveSessionBase implements ISess
   private providerDefinitions;
   private activeOutputStyleId;
   private orgPolicy;
+  /** #3282 §3 — see the option doc comment on `IInteractiveSessionStandardOptions.setupRequired`. */
+  private setupRequired;
   /** The model fallback chain the session started with, re-read for each primary a switch picks. */
   private modelFallback?;
   protected readonly bgTracker: SessionBackgroundTaskTracker;
@@ -9193,6 +9586,8 @@ declare class InteractiveSession extends InteractiveSessionBase implements ISess
   private currentTurnSource;
   /** TERM-001: exclusivity + fast-fail over the transport-provided handoff capability. */
   private readonly terminalHandoffGate;
+  private readonly externalEventVerifierFactory?;
+  private readonly externalEventGrantHistory?;
   /**
    * REMOTE-007: the framework's event-emitting "ask the user" default (never undefined). It emits
    * `ask_request` and parks the answer in {@link promptRegistry}. `getUserInteraction()` gates the
@@ -9206,6 +9601,7 @@ declare class InteractiveSession extends InteractiveSessionBase implements ISess
   private readonly promptFileReferenceTag?;
   private readonly resolveDefaultLoopPrompt?;
   private readonly userSettingsSources;
+  private readonly statusPush;
   constructor(options: TInteractiveSessionOptions);
   protected getPendingRequest(): IExecutionPendingRequest | undefined;
   getProjectAccess(): TWorkspaceProjectAccess;
@@ -9225,6 +9621,25 @@ declare class InteractiveSession extends InteractiveSessionBase implements ISess
    * split-brain).
    */
   getMemoryStore(): IMemoryStore;
+  /**
+   * #3282 §4c — the Project panel's "Changes" section. The SAME reader `/git status` runs
+   * (`readProjectGitStatus`, `agent-framework/src/git`), over this session's own `cwd` — a
+   * `not-a-repository` result is the panel's one plain sentence, never a thrown error.
+   */
+  readProjectStatus(): Promise<TProjectStatusRead>;
+  /**
+   * #3282 §4c — the Project panel's "File diff" section, for one file `readProjectStatus` reported.
+   * `readProjectGitDiff` checks workspace containment itself (`isPathInside`, SEC-006) before any git
+   * or filesystem call.
+   */
+  readProjectDiff(path: string): Promise<TProjectDiffRead>;
+  /**
+   * #3282 §4c — the Project panel's "Memory" section: the SAME store `/memory show` reads
+   * (`getMemoryStore()`), read-only. `getMemoryStore()` throwing (memory off by default, or
+   * unavailable on this host — `WorkspaceAuthorityRequiredError`) becomes the panel's plain message,
+   * never a thrown error — the same fix `executeMemoryCommand` needed for the red toast.
+   */
+  readProjectMemory(): Promise<TProjectMemoryRead>;
   get sessionId(): string;
   on<E extends TInteractiveEventName$1>(event: E, handler: IInteractiveSessionEvents$1[E]): void;
   off<E extends TInteractiveEventName$1>(event: E, handler: IInteractiveSessionEvents$1[E]): void;
@@ -9234,7 +9649,7 @@ declare class InteractiveSession extends InteractiveSessionBase implements ISess
     signal?: AbortSignal;
   }): Promise<IToolExecutionResult>;
   submit(input: string, displayInput?: string, rawInput?: string, options?: ISubmitOptions): Promise<ITurnHandle>;
-  /** Explicit host opt-in for one authenticated external source; MCP configuration alone cannot enable it. */
+  /** Explicit host opt-in for one external-event grant; its verifier alone decides who is admitted. */
   openExternalEventSource(options: IExternalEventSourceOptions): Promise<IExternalEventSource>;
   private submitNewTurn;
   private resumeQueuedTurn;
@@ -9249,7 +9664,7 @@ declare class InteractiveSession extends InteractiveSessionBase implements ISess
    * by the decision recorded on `IScheduledBackgroundTaskRequest`. `turnSource: 'agent-wakeup'` is
    * how a consumer tells it apart from a typed prompt; it does not change what the turn may do.
    */
-  requestWakeup(instruction: string, sourceTaskId: string): boolean;
+  requestWakeup(instruction: string, sourceTaskId: string, displayInput?: string): boolean;
   private armSessionLoopExpiry;
   listSchedules(): IBackgroundTaskState[];
   private assertNotSelfPacedTimer;
@@ -9258,9 +9673,13 @@ declare class InteractiveSession extends InteractiveSessionBase implements ISess
   editSchedule(taskId: string, patch: Parameters<InteractiveSessionBase['editSchedule']>[1]): Promise<void>;
   /** Session-owned self-paced loops remain addressable after a one-shot timer has completed. */
   listSelfPacedLoops(): readonly ISessionLoopState[];
+  protected getSelfPacedLoopWorkspaceSummaries(): readonly IExecutionSelfPacedLoopSummary[];
+  protected getSelfPacedLoopDetail(loopId: string): ISessionLoopState | undefined;
   createSelfPacedLoop(instruction: string, options?: {
     useDefaultPrompt?: boolean;
   }): Promise<ISessionLoopState>;
+  /** #3189: stop the one loop waiting for its wake; with several waiting, say how to choose. */
+  stopWaitingSelfPacedLoop(reason?: string): Promise<TWaitingLoopStopOutcome>;
   stopSelfPacedLoop(loopId: string, reason?: string): Promise<void>;
   private selfPacedWakeId;
   private parseSelfPacedWakeId;
@@ -9287,6 +9706,11 @@ declare class InteractiveSession extends InteractiveSessionBase implements ISess
   private notifyQueueCleared;
   shutdown(options?: IInteractiveSessionShutdownOptions): Promise<void>;
   get isInitialized(): boolean;
+  /**
+   * Resolves once initialization has finished — the session is then saved, so it is listed — and
+   * rejects with the reason if it failed. A host waits on it before making this session current.
+   */
+  whenInitialized(): Promise<void>;
   /** Passive, content-free host observation; never registers an answering prompt listener. */
   getLocalActivityStatus(): 'working' | 'needs-input' | 'idle' | undefined;
   getAutoCompactThresholdSource(): TAutoCompactThresholdSource;
@@ -9356,6 +9780,21 @@ declare class InteractiveSession extends InteractiveSessionBase implements ISess
   setAutoCompactThreshold(threshold: TAutoCompactThreshold$2, source?: TAutoCompactThresholdSource): void;
   clearConversationHistory(): void;
   getName(): string | undefined;
+  /** The one status read every client renders beside the conversation (#3186). */
+  getStatusSnapshot(): ISessionStatusSnapshot;
+  /**
+   * The models a client's model menu may switch to (#3282 §2), grouped by configured provider
+   * profile. Reads the same merged settings and `providerDefinitions` `/provider switch` and
+   * `/model` already read, so the GUI's list and what `/model <id>` accepts never drift apart.
+   */
+  listModels(): IModelListSnapshot;
+  /**
+   * #3282 §3 — {@link ICommandHostSetupState}: whether THIS session is still running the placeholder
+   * provider. `/provider add` reads this (never settings) to decide hot-swap vs. restart, because a
+   * settings-inferred "no `currentProvider`" is also true of an ordinary env-default session that was
+   * never in setup mode.
+   */
+  isSetupRequired(): boolean;
   attachTransport(transport: ITransportAdapter<IInteractiveSession$1>): void;
   setName(name: string): void;
   private getBackgroundTaskManager;
@@ -9404,7 +9843,7 @@ declare class InteractiveSession extends InteractiveSessionBase implements ISess
   private switchProvider;
   /** CMD-004: after the command runs, the HOST applies its host actions via
    * {@link applyCommandHostActions} and emits requester-routed `ui_intent` events. */
-  executeCommand(name: string, args: string, source?: TCommandInvocationSource$1, originDriverId?: TDriverId): Promise<ICommandResult$1 | null>;
+  executeCommand(name: string, args: string, source?: TCommandInvocationSource$1, originDriverId?: TDriverId, locality?: TCommandSurfaceLocality$1): Promise<ICommandResult$1 | null>;
 }
 //#endregion
 //#region src/interactive/session-naming.d.ts
@@ -9475,6 +9914,22 @@ declare class PeerMessageIngress {
   receive(ingress: IPeerMessageIngress): Promise<IIngressResult>;
 }
 //#endregion
+//#region src/interactive/interactive-session-rename.d.ts
+/** Thrown when a session exists on disk in a form this build cannot read, so a rename cannot land. */
+declare class SessionRenameUnavailableError extends Error {
+  readonly sessionId: string;
+  readonly outcome: 'corrupt' | 'unsupported';
+  constructor(sessionId: string, outcome: 'corrupt' | 'unsupported');
+}
+/**
+ * Persist a new name onto the stored record.
+ *
+ * `missing` is not an error: a session with nothing saved yet is renamed in memory and written by
+ * the next persist. `corrupt` and `unsupported` are — the record is there, this build cannot read
+ * it, and reporting nothing is what made a rename appear to succeed while changing nothing on disk.
+ */
+declare function persistSessionRename(sessionStore: IInteractiveSessionStore, sessionId: string, name: string): void;
+//#endregion
 //#region src/interaction/InteractiveRuntime.d.ts
 interface IInteractiveRuntime {
   start(): Promise<void>;
@@ -9502,5 +9957,5 @@ interface IInteractiveRuntimeOptions {
 type IInteractiveRuntimeTestOptions = Omit<IInteractiveRuntimeOptions, 'provider' | 'cwd'>;
 declare function createInteractiveRuntime(options: IInteractiveRuntimeOptions): IInteractiveRuntime;
 //#endregion
-export { IHostBundlePluginLoaderOptions as $, ICommandHostPresetApplication as $a, EXECUTION_ORIGIN_METADATA_KEYS as $c, THostSettingsScope as $i, ICommandSessionInfo as $n, IPromptFileReferenceResolveOptions as $o, writeCommandPermissionMode as $r, isSafeSessionId$1 as $s, IReversibleToolSafetyReport as $t, hasBlockingPromptFileReferenceDiagnostics as A, deleteProviderProfile as Aa, IOutputStylePrompt as Ac, IActiveModelChangeResult as Ai, IEditCheckpointRestoreResult as Al, createSystemCommands as An, GOAL_SIGNAL_TOOL_NAME as Ao, isStatusLineCommandSettingsPatch as Ar, ICommandWorkspaceAdapter as As, ISkillPromptContext as At, IForkExecutionOptions as B, TSystemCommandLifecycle as Ba, IBackgroundTaskRunner$1 as Bc, TSettingsScope as Bi, TEffortSelection as Bl, REWIND_COMMAND_ARGUMENT_HINT as Bn, IContextReferenceClearResult as Bo, TPermissionRuleKind as Br, IAdvisorStatus as Bs, TSubagentRunnerFactory as Bt, TSettingsMergeRule as C, IProviderProfileSettings as Ca, TWorkspaceProjectAuthorityCandidate as Cc, readProviderSettings as Ci, IOrgPolicy as Cl, IContributionSource as Cn, IStartupMemory as Co, isAppearanceSettingsPatch as Cr, ICommandPickerAdapter as Cs, BuiltinCommandSource as Ct, buildPromptWithFileReferences as D, TProviderSettingsDocument as Da, TWorkspaceProjectStateDirectories as Dc, readMergedProviderSettingsFromSources as Di, IEditCheckpointInspectionPlan as Dl, TEnvResolvedSettings as Dn, isMemoryType as Do, STATUSLINE_COMMAND_DESCRIPTION as Dr, ICommandSandboxStatus as Ds, retrieveAgentToolDeps as Dt, parsePromptFileReferences as E, IProviderSetupPatch as Ea, TWorkspaceProjectSettingsWriteDecision as Ec, mergeSettings as Ei, IEditCheckpointInspection as El, IResolvedConfig as En, ProjectMemoryStore as Eo, STATUSLINE_COMMAND_ARGUMENT_HINT as Er, ICommandSandboxAdapter as Es, createAgentTool as Et, IPromptHistoryOptions as F, ICommandModule as Fa, IAgentJobLogs as Fc, resolveProviderSettingsWriteTarget as Fi, IAgentDefinition as Fl, createCommandMemoryStores as Fn, IGoalSignal as Fo, IPermissionsCommandState as Fr, TRemoteControlStatus as Fs, ICreateSessionOptions as Ft, selectCommandModules as G, ICommandHostCatalog as Ga, ISpawnProcessTaskRequest as Gc, IProjectSettingsPath as Gi, listCommandEditCheckpointBranches as Gn, createContextReferenceItem as Go, groupPermissionRulesBySource as Gr, IHostToolResultSpillStore as Gs, ISubagentPromptOptions as Gt, ISkillExecutionResult as H, ICommandHostAdapterAccess as Ha, ICreateExecutionWorkspaceTaskSpawnerOptions as Hc, readSettings as Hi, parseModelEffort as Hl, buildRewindCommandSubcommands as Hn, IContextReferenceRemoveResult as Ho, buildPermissionModeSubcommands as Hr, formatAdvisorSpec as Hs, ISubagentOptions as Ht, IRemoteCommandPolicy as I, TCommandModuleSessionRequirement as Ia, IAgentJobMonitors as Ic, createWorkspaceProjectSettingsStore as Ii, IProviderErrorGuidance as Il, hasSensitiveCommandMemoryContent as In, IGoalStartOptions as Io, PERMISSIONS_COMMAND_DESCRIPTION as Ir, TSandboxCommandMode as Is, TSessionResponseFormat as It, BundlePluginInstaller as J, ICommandHostContextReferences as Ja, createMainThreadDetailPage as Jc, TSettingsSource as Ji, rollbackCommandEditCheckpoint as Jn, toContextReferenceRecords as Jo, parsePermissionModeArgument as Jr, createNodeHostSessionStore as Js, getForkWorkerSuffix as Jt, SystemCommandExecutor as K, ICommandHostCheckpoints as Ka, createExecutionWorkspaceTaskSpawner as Kc, IWorkspaceProjectSettingsSource as Ki, listCommandEditCheckpoints as Kn, listActiveContextReferences as Ko, isPermissionMode as Kr, IInteractiveSessionRecord$1 as Ks, TSubagentSuffix as Kt, createDefaultRemoteCommandPolicy as L, DuplicateSystemCommandSemanticRoleError as La, IAgentJobSchedules as Lc, createNodeHostSettingsStore as Li, IModelEffortInputs as Ll, isCommandMemoryType as Ln, TGoalDecision as Lo, PERMISSION_MODE_ARGUMENT_HINT as Lr, ADVISOR_OFF as Ls, IToolCallHandoffPolicy as Lt, IExecutionResult$2 as M, setCurrentProvider as Ma, IAgentJobDispatch as Mc, applyActiveModelChange as Mi, IEditCheckpointTurnInput as Ml, MEMORY_COMMAND_DESCRIPTION as Mn, DEFAULT_GOAL_MAX_ITERATIONS as Mo, IPresetApplicationResult as Mr, IHandoffStaysBehind as Ms, preprocessShellCommands as Mt, TInteractivePermissionHandler as N, upsertProviderProfile as Na, IAgentJobGroups as Nc, applyProviderConfiguration as Ni, TEditCheckpointFileRestoreAction as Nl, MEMORY_COMMAND_USAGE as Nn, DEFAULT_GOAL_NO_PROGRESS_LIMIT as No, applyPresetToSession as Nr, IPermissionRuleLayer as Ns, substituteVariables as Nt, createPromptFileReferenceHistoryEntry as O, buildProviderProfile as Oa, TWorkspaceProjectStateNamespace as Oc, resolveActiveProvider as Oi, IEditCheckpointManifest as Ol, TSandboxSettings as On, buildGoalContinuationPrompt as Oo, applyStatusLineSettings as Or, ICommandSettingsAdapter as Os, storeAgentToolDeps as Ot, TPermissionResultValue$1 as P, validateProviderProfile as Pa, IAgentJobHostContext as Pc, applyProviderSwitch as Pi, ICapabilityDescriptor as Pl, buildMemoryCommandSubcommands as Pn, GoalController as Po, IPermissionRuleGroup as Pr, IWorkspaceMoveRequest as Ps, ILivePromptTracePort as Pt, MarketplaceClient as Q, ICommandHostPlan as Qa, createExecutionWorkspaceSnapshot as Qc, createNodeHostSettingsSource as Qi, EXIT_COMMAND_DESCRIPTION as Qn, IPromptFileReferenceLimits as Qo, retryCommandPermissionDenial as Qr, createUserSessionStore as Qs, IReversibleToolSafetyInput as Qt, ISkillActivationHistoryData as R, ISystemCommand as Ra, MONITOR_SHELL_TOOL as Rc, ISettingsDocumentStore as Ri, IModelEffortResolution as Rl, listCommandUsedMemoryReferences as Rn, extractGoalSignal as Ro, PERMISSION_MODE_COMMAND_DESCRIPTION as Rr, IAdvisorSetResult as Rs, IToolCallHandoffProvenance as Rt, IHookDefinitionSource as S, ILegacyProviderSettings as Sa, TWorkspaceProjectAccess as Sc, readMergedProviderSettings as Si, ICommandResult$1 as Sl, inspectSkillSources as Sn, IProjectMemorySummary as So, applyAppearanceSettings as Sr, ICommandPermissionRulesAdapter as Ss, TMarketplaceSource as St, resolvePromptFileReferences as T, IProviderSetupInput as Ta, TWorkspaceProjectSettingsTarget as Tc, mergeProviders as Ti, IEditCheckpointFileRecord as Tl, ILoadContextOptions as Tn, MEMORY_INDEX_MAX_LINES as To, DEFAULT_STATUS_LINE_COMMAND_SETTINGS as Tr, ICommandRemoteControlAdapter as Ts, CommandRegistry as Tt, executeSkill as U, ICommandHostAgentJobs as Ua, IExecutionWorkspaceTaskSpawner as Uc, updateModelInSettings as Ui, resolveModelEffort as Ul, forkCommandEditCheckpoint as Un, IContextReferenceUpsertResult as Uo, formatCommandPermissionsMessage as Ur, parseAdvisorSpec as Us, ISubagentParentContext as Ut, ISkillExecutionCallbacks as V, TSystemCommandSemanticRole as Va, IBackgroundTaskSpawnerGroupRequest as Vc, deleteSettings as Vi, TEffortSource as Vl, REWIND_COMMAND_DESCRIPTION as Vn, IContextReferenceInventoryLimits as Vo, VALID_PERMISSION_MODES as Vr, ICommandAdvisorAdapter as Vs, createInProcessSubagentRunner as Vt, findUnknownModuleNames as W, ICommandHostBackgroundTasks as Wa, ISpawnAgentTaskRequest as Wc, writeSettings as Wi, inspectCommandEditCheckpoint as Wn, clearContextReferences as Wo, formatInvalidPermissionModeMessage as Wr, resolveStartupAdvisorSpec as Ws, createSubagentSession as Wt, IInstalledPluginRecord as X, ICommandHostGoal as Xa, TExecutionAttachOutcome as Xc, readSettingsSourceText as Xi, CLEAR_COMMAND_DESCRIPTION as Xn, IPromptFileReferenceDiagnostic as Xo, readCommandPermissionsState as Xr, createProjectSessionStore as Xs, IReversibleExecutionOptions as Xt, IBundlePluginInstallerOptions as Y, ICommandHostContextWindow as Ya, IResolveExecutionAttachInput as Yc, createWorkspaceProjectSettingsSources as Yi, switchCommandEditCheckpointBranch as Yn, upsertContextReference as Yo, readCommandPermissionMode as Yr, createNodeToolResultSpillStore as Ys, getSubagentSuffix as Yt, TInstalledPluginsRegistry as Z, ICommandHostMemory as Za, resolveExecutionAttach as Zc, INodeHostSettingsSource as Zi, COST_COMMAND_DESCRIPTION as Zn, IPromptFileReferenceHistoryData as Zo, resolvePermissionModeAdapter as Zr, createUserPromptHistoryFile as Zs, IReversibleToolSafetyContext as Zt, ISessionRecordRestoreResult as _, resetAutoCompactThresholdSetting as _a, IWorkspaceTrustCause as _c, HELP_COMMAND_DESCRIPTION as _i, ICommandSessionReplayValidationReport as _l, ISkillRootInspection as _n, IMemoryRetrievalResult as _o, resolvePluginCommandAdapter as _r, ICommandMCPOAuthStatus as _s, IKnownMarketplaceEntry as _t, PeerMessageIngress as a, AUTO_COMPACT_THRESHOLD_SETTINGS_KEY as aa, WorkspaceSessionLogSource as ac, formatLanguageUsageMessage as ai, BackgroundJobOrchestrator as al, wrapReversibleExecutionTools as an, IMemoryBudget as ao, createSessionExitHostAction as ar, EditCheckpointStore as as, IBundlePluginHookIssue as at, createSubagentLogger as b, IProviderCommandModuleOptions as ba, IWorkspaceTrustStoreSnapshot as bc, ProviderConfigError as bi, IUnknownCommandModuleName as bl, SkillCommandSource as bn, IAppendMemoryInput as bo, IAppearanceSettings as br, ICommandOutputStyleSummary as bs, IMarketplacePluginEntry as bt, IInteractiveSessionShutdownOptions as c, TAutoCompactThreshold$2 as ca, IWorkspaceAncestorTextEntry as cc, BACKGROUND_COMMAND_USAGE as ci, ISessionUsageRecord as cl, PromptExecutor as cn, IMemoryStore as co, formatCommandSessionReplayValidationReport as cr, ICommandEffortAdapter as cs, IBundlePluginMcpFault as ct, IAuthenticatedExternalEvent as d, compactCommandContext as da, IWorkspaceIdentityResolver as dc, closeCommandBackgroundTask as di, ICommandSessionIdentity as dl, IAgentExecutorOptions as dn, ISemanticMemoryAdapter as do, validateCommandSessionReplayLog as dr, ICommandMCPActivationAdapter as ds, IBundleSkill as dt, TSettingsCheck as ea, listResumableSessionSummaries as ec, LANGUAGE_COMMAND_ARGUMENT_HINT as ei, createBackgroundGroupExecutionEntryId as el, TReversibleExecutionIsolation as en, ICommandHostSessionAccess as eo, RENAME_COMMAND_DESCRIPTION as er, IPromptFileReferenceToken as es, createHostBundlePluginLoader as et, IExternalEventReceipt as f, listCommandContextReferences as fa, IWorkspaceProjectAuthority as fc, formatCommandBackgroundTask as fi, ICommandSessionModel as fl, IAgentSession as fn, ISemanticMemoryQueryResult as fo, PLUGIN_COMMAND_ARGUMENT_HINT as fr, ICommandMCPActivationSummary as fs, ILoadedBundlePlugin as ft, IInteractiveSession$1 as g, removeCommandContextReference as ga, IWorkspaceProjectStateStorage as gc, readCommandBackgroundTaskLog as gi, ICommandHostNoCapability as gl, ISkillRootDescriptor as gn, IMemoryPendingRecord as go, createShowPluginManagerIntent as gr, ICommandMCPOAuthRedirectPrompt as gs, NodeHostPluginSettingsStore as gt, TExternalEventSettlement as h, readCommandContextState as ha, IWorkspaceProjectSettingsWriter as hc, parseCommandBackgroundLogCursor as hi, ICommandSessionRuntime as hl, listFrameworkProjectContributionPaths as hn, IMemoryExtractionInput as ho, buildPluginCommandSubcommands as hr, ICommandMCPOAuthLogoutResult as hs, IPluginSettings as ht, IInteractiveRuntime as i, testProviderProfileCommand as ia, WorkspaceSessionLogSink as ic, buildLanguageCommandSubcommands as ii, parseExecutionWorkspaceEntryId as il, evaluateReversibleToolSafety as in, IDurableMemoryReader as io, clearConversationHistory as ir, wrapEditCheckpointTools as is, IBundlePluginFeatures as it, toPromptFileReferenceRecords as j, mergeProviderPatch as ja, IPresetApplicationOptions as jc, IProviderSwitchOptions as ji, IEditCheckpointSummary as jl, MEMORY_COMMAND_ARGUMENT_HINT as jn, createGoalStatusTool as jo, readStatusLineSettings as jr, IHandoffProgress as js, TShellExecFn as jt, formatPromptFileReferenceDiagnostics as k, buildProviderSetupPatch as ka, TWorkspaceTrustState as kc, IActiveModelChangeOptions as ki, IEditCheckpointRecorder as kl, TSettings as kn, buildGoalStartPrompt as ko, buildStatusLineCommandSubcommands as kr, ICommandSettingsDocument as ks, IAgentToolDeps as kt, InteractiveSession as l, addCommandContextReference as la, IWorkspaceDirectoryEntry as lc, buildBackgroundCommandSubcommands as li, ICommandSessionContextWindow as ll, TProviderFactory as ln, IMemoryWriter as lo, parseSessionNameArgument as lr, ICommandHandoffAdapter as ls, IBundlePluginMcpServer as lt, IExternalEventSourceOptions as m, readAutoCompactThresholdSource as ma, IWorkspaceProjectReader as mc, listCommandBackgroundTasks as mi, ICommandSessionPreset as ml, IProjectContributionPath as mn, IMemoryCandidate as mo, RELOAD_PLUGINS_COMMAND_DESCRIPTION as mr, ICommandMCPOAuthLoginResult as ms, TEnabledPlugins as mt, IInteractiveRuntimeTestOptions as n, checkSettingsDocument as na, resolveSessionIdByIdOrName as nc, RECOMMENDED_RESPONSE_LANGUAGES as ni, createExecutionOriginMetadata as nl, TReversibleSafetyStatus as nn, ICommandHostUserInteraction as no, RESUME_COMMAND_DESCRIPTION as nr, IResolvedPromptFileReferences as ns, loadHostBundlePluginsFromScopes as nt, IGenerateSessionNameOptions as o, DEFAULT_AUTO_COMPACT_THRESHOLD as oa, IRestrictedWorkspaceProjectAccess as oc, parseLanguageArgument as oi, IBackgroundJobOrchestratorOptions as ol, IPromptExecutorOptions as on, IMemoryCurationQueue as oo, createSessionRenameHostAction as or, ICommandCostBudget as os, IBundlePluginInspection as ot, IExternalEventSource as p, readAutoCompactThreshold as pa, IWorkspaceProjectMutation as pc, formatCommandBackgroundTaskList as pi, ICommandSessionPermissions as pl, TSessionFactory as pn, IAutomaticMemoryConfig as po, PLUGIN_COMMAND_DESCRIPTION as pr, ICommandMCPOAuthLoginRequest as ps, TBundlePluginSkipReason as pt, PluginCommandSource as q, ICommandHostContext as qa, createLineDetailPage as qc, TProjectSettingsScope as qi, restoreCommandEditCheckpoint as qn, removeContextReference as qo, listCommandSessionAllowedTools as qr, IInteractiveSessionStore$1 as qs, assembleSubagentPrompt as qt, createInteractiveRuntime as r, probeProviderProfile as ra, WorkspaceProjectSessionStore as rc, TRecommendedResponseLanguage as ri, createMainThreadExecutionEntryId as rl, TReversibleSideEffect as rn, ICommandHostWorkspace as ro, VALIDATE_SESSION_COMMAND_DESCRIPTION as rr, TPromptFileReferenceDiagnosticCode as rs, BundlePluginLoader as rt, generateSessionName as s, ICompactContextResult as sa, ITrustedWorkspaceProjectAccess as sc, BACKGROUND_COMMAND_DESCRIPTION as si, summarizeBackgroundJobGroup as sl, IPromptProvider as sn, IMemoryRecaller as so, createShowSessionPickerIntent as sr, ICommandCostBudgetAdapter as ss, IBundlePluginManifest as st, IInteractiveRuntimeOptions as t, checkNodeHostSettingsFile as ta, resolveLatestSessionId as tc, LANGUAGE_COMMAND_DESCRIPTION as ti, createBackgroundTaskExecutionEntryId as tl, TReversibleRollbackLayer as tn, ICommandHostTerminalHandoff as to, RENAME_COMMAND_USAGE as tr, IResolvedPromptFileReference as ts, loadHostBundlePluginInspectionFromScopes as tt, ExternalEventIngress as u, clearCommandContextReferences as ua, IWorkspaceIdentity as uc, cancelCommandBackgroundTask as ui, ICommandSessionHistory as ul, AgentExecutor as un, IPerTurnRecallConfig as uo, readCommandSessionInfo as ur, ICommandHostAdapters as us, IBundlePluginSkip as ut, restoreSessionRecordIntoSession as v, setCommandAutoCompactThreshold as va, IWorkspaceTrustGrant as vc, formatCommandHelpMessage as vi, ICommandSkillListEntry as vl, ISkillSourceInspection as vn, TMemoryCandidateStatus as vo, APPEARANCE_SETTINGS_KEYS as vr, ICommandMCPSourceProblem as vs, IMarketplaceClientOptions as vt, resolvePromptFileReferencePaths as w, IProviderSettingsBuildOptions as wa, TWorkspaceProjectMutationDecision as wc, resolveEnvDefaultProvider as wi, IEditCheckpointFileInspection as wl, createWorkspaceProjectContributionSource as wn, MEMORY_INDEX_MAX_BYTES as wo, readAppearanceSettings as wr, ICommandProcessAdapter as ws, createBuiltinCommandModule as wt, resolveSubagentLogDir as x, IProviderCommandSettingsAdapter as xa, TWorkspaceContributionKind as xc, createProviderFromSettings as xi, TAutoCompactThresholdSource as xl, TSkillSkipReason as xn, IAppendMemoryResult as xo, TAppearanceSettingsPatch as xr, ICommandPermissionModeAdapter as xs, TKnownMarketplacesRegistry as xt, TInteractiveSessionOptions as y, writeAutoCompactThresholdSetting as ya, IWorkspaceTrustStore as yc, IReadProviderSettingsOptions as yi, IModelReapplyOptions as yl, ISkillSourceSkip as yn, TMemoryPolicyMode as yo, DEFAULT_APPEARANCE_SETTINGS as yr, ICommandOutputStyleRegistryAdapter as ys, IMarketplaceManifest as yt, createSkillExecutionPort as z, ISystemCommandSemanticRoles as za, MonitorCommandRefusedError as zc, TSettingsData as zi, TEffortDisposition as zl, recordCommandMemoryEvent as zn, IContextReferenceAddResult as zo, RUNTIME_RULE_SOURCE as zr, IAdvisorSpec as zs, IInProcessSubagentRunnerDeps as zt };
-//# sourceMappingURL=createInteractiveRuntime-Bmh2KYP6.d.ts.map
+export { IBundlePluginInstallerOptions as $, ICommandHostBackgroundTasks as $a, IAgentJobLogs as $c, writeSettings as $i, DEFAULT_AGENT_DEFINED_IN as $l, switchCommandEditCheckpointBranch as $n, IContextReferenceRemoveResult as $o, parsePermissionModeArgument as $r, IAdvisorSetResult as $s, getSubagentSuffix as $t, parsePromptFileReferences as A, IProviderCommandSettingsAdapter as Aa, IWorkspaceProjectAuthority as Ac, createProviderFromSettings as Ai, ICommandSessionModel as Al, IResolvedConfig as An, IAppendMemoryInput as Ao, STATUSLINE_COMMAND_ARGUMENT_HINT as Ar, ICommandMCPOAuthStatus as As, createAgentTool as At, IRemoteCommandPolicy as B, mergeProviderPatch as Ba, TWorkspaceProjectAccess as Bc, IProviderSwitchOptions as Bi, ICommandResult$1 as Bl, hasSensitiveCommandMemoryContent as Bn, GOAL_SIGNAL_TOOL_NAME as Bo, PERMISSIONS_COMMAND_DESCRIPTION as Br, ICommandSandboxStatus as Bs, TSessionResponseFormat as Bt, createSubagentLogger as C, readAutoCompactThresholdSource as Ca, WorkspaceSessionLogSource as Cc, formatCommandHelpMessage as Ci, BackgroundJobOrchestrator as Cl, ISkillSourceSkip as Cn, IAutomaticMemoryConfig as Co, DEFAULT_APPEARANCE_SETTINGS as Cr, ICommandHostAdapters as Cs, IMarketplaceManifest as Ct, TSettingsMergeRule as D, setCommandAutoCompactThreshold as Da, IWorkspaceDirectoryEntry as Dc, resolveModelListSelection as Di, ICommandSessionContextWindow as Dl, IContributionSource as Dn, IMemoryRetrievalResult as Do, isAppearanceSettingsPatch as Dr, ICommandMCPOAuthLoginResult as Ds, BuiltinCommandSource as Dt, IHookDefinitionSource as E, resetAutoCompactThresholdSetting as Ea, IWorkspaceAncestorTextEntry as Ec, buildModelListSnapshot as Ei, ISessionUsageRecord as El, inspectSkillSources as En, IMemoryPendingRecord as Eo, applyAppearanceSettings as Er, ICommandMCPOAuthLoginRequest as Es, TMarketplaceSource as Et, toPromptFileReferenceRecords as F, IProviderSetupPatch as Fa, IWorkspaceTrustCause as Fc, mergeSettings as Fi, ICommandSessionReplayValidationReport as Fl, MEMORY_COMMAND_ARGUMENT_HINT as Fn, MEMORY_INDEX_MAX_LINES as Fo, readStatusLineSettings as Fr, ICommandPermissionRulesAdapter as Fs, TShellExecFn as Ft, ISkillExecutionCallbacks as G, TCommandModuleSessionRequirement as Ga, TWorkspaceProjectStateDirectories as Gc, createWorkspaceProjectSettingsStore as Gi, IEditCheckpointInspectionPlan as Gl, REWIND_COMMAND_DESCRIPTION as Gn, IGoalSignal as Go, TPermissionRuleKind as Gr, IHandoffStaysBehind as Gs, createInProcessSubagentRunner as Gt, ISkillActivationHistoryData as H, upsertProviderProfile as Ha, TWorkspaceProjectMutationDecision as Hc, applyProviderConfiguration as Hi, IEditCheckpointFileInspection as Hl, listCommandUsedMemoryReferences as Hn, DEFAULT_GOAL_MAX_ITERATIONS as Ho, PERMISSION_MODE_COMMAND_DESCRIPTION as Hr, ICommandSettingsDocument as Hs, IToolCallHandoffProvenance as Ht, IExecutionResult$2 as I, TProviderSettingsDocument as Ia, IWorkspaceTrustGrant as Ic, readMergedProviderSettingsFromSources as Ii, ICommandSkillListEntry as Il, MEMORY_COMMAND_DESCRIPTION as In, ProjectMemoryStore as Io, IPresetApplicationResult as Ir, ICommandPickerAdapter as Is, preprocessShellCommands as It, findUnknownModuleNames as J, ISystemCommandSemanticRoles as Ja, IOutputStylePrompt as Jc, TSettingsData as Ji, IEditCheckpointRestoreResult as Jl, inspectCommandEditCheckpoint as Jn, extractGoalSignal as Jo, formatCommandPermissionsMessage as Jr, IPermissionRuleRemoval as Js, createSubagentSession as Jt, ISkillExecutionResult as K, DuplicateSystemCommandSemanticRoleError as Ka, TWorkspaceProjectStateNamespace as Kc, createNodeHostSettingsStore as Ki, IEditCheckpointManifest as Kl, buildRewindCommandSubcommands as Kn, IGoalStartOptions as Ko, VALID_PERMISSION_MODES as Kr, ILinkedDeviceSummary as Ks, ISubagentOptions as Kt, TInteractivePermissionHandler as L, buildProviderProfile as La, IWorkspaceTrustStore as Lc, resolveActiveProvider as Li, IModelReapplyOptions as Ll, MEMORY_COMMAND_USAGE as Ln, isMemoryType as Lo, applyPresetToSession as Lr, ICommandProcessAdapter as Ls, substituteVariables as Lt, createPromptFileReferenceHistoryEntry as M, IProviderProfileSettings as Ma, IWorkspaceProjectReader as Mc, readProviderSettings as Mi, ICommandSessionPreset as Ml, TSandboxSettings as Mn, IProjectMemorySummary as Mo, applyStatusLineSettings as Mr, ICommandOutputStyleRegistryAdapter as Ms, storeAgentToolDeps as Mt, formatPromptFileReferenceDiagnostics as N, IProviderSettingsBuildOptions as Na, IWorkspaceProjectSettingsWriter as Nc, resolveEnvDefaultProvider as Ni, ICommandSessionRuntime as Nl, TSettings as Nn, IStartupMemory as No, buildStatusLineCommandSubcommands as Nr, ICommandOutputStyleSummary as Ns, IAgentToolDeps as Nt, resolvePromptFileReferencePaths as O, writeAutoCompactThresholdSetting as Oa, IWorkspaceIdentity as Oc, IReadProviderSettingsOptions as Oi, ICommandSessionHistory as Ol, createWorkspaceProjectContributionSource as On, TMemoryCandidateStatus as Oo, readAppearanceSettings as Or, ICommandMCPOAuthLogoutResult as Os, createBuiltinCommandModule as Ot, hasBlockingPromptFileReferenceDiagnostics as P, IProviderSetupInput as Pa, IWorkspaceProjectStateStorage as Pc, mergeProviders as Pi, ICommandHostNoCapability as Pl, createSystemCommands as Pn, MEMORY_INDEX_MAX_BYTES as Po, isStatusLineCommandSettingsPatch as Pr, ICommandPermissionModeAdapter as Ps, ISkillPromptContext as Pt, BundlePluginInstaller as Q, ICommandHostAgentJobs as Qa, IAgentJobHostContext as Qc, updateModelInSettings as Qi, ICapabilityDescriptor as Ql, rollbackCommandEditCheckpoint as Qn, IContextReferenceInventoryLimits as Qo, listCommandSessionAllowedTools as Qr, ADVISOR_OFF as Qs, getForkWorkerSuffix as Qt, TPermissionResultValue$1 as R, buildProviderSetupPatch as Ra, IWorkspaceTrustStoreSnapshot as Rc, IActiveModelChangeOptions as Ri, IUnknownCommandModuleName as Rl, buildMemoryCommandSubcommands as Rn, buildGoalContinuationPrompt as Ro, IPermissionRuleGroup as Rr, ICommandRemoteControlAdapter as Rs, ILivePromptTracePort as Rt, createExternalEventGrantHistory as S, readAutoCompactThreshold as Sa, WorkspaceSessionLogSink as Sc, HELP_COMMAND_DESCRIPTION as Si, parseExecutionWorkspaceEntryId as Sl, ISkillSourceInspection as Sn, ISemanticMemoryQueryResult as So, APPEARANCE_SETTINGS_KEYS as Sr, ICommandHandoffAdapter as Ss, IMarketplaceClientOptions as St, sandboxApprovalFor as T, removeCommandContextReference as Ta, ITrustedWorkspaceProjectAccess as Tc, IModelListSelection as Ti, summarizeBackgroundJobGroup as Tl, TSkillSkipReason as Tn, IMemoryExtractionInput as To, TAppearanceSettingsPatch as Tr, ICommandMCPActivationSummary as Ts, TKnownMarketplacesRegistry as Tt, createSkillExecutionPort as U, validateProviderProfile as Ua, TWorkspaceProjectSettingsTarget as Uc, applyProviderSwitch as Ui, IEditCheckpointFileRecord as Ul, recordCommandMemoryEvent as Un, DEFAULT_GOAL_NO_PROGRESS_LIMIT as Uo, PERMISSION_MODE_LABELS as Ur, ICommandWorkspaceAdapter as Us, IInProcessSubagentRunnerDeps as Ut, createDefaultRemoteCommandPolicy as V, setCurrentProvider as Va, TWorkspaceProjectAuthorityCandidate as Vc, applyActiveModelChange as Vi, IOrgPolicy as Vl, isCommandMemoryType as Vn, createGoalStatusTool as Vo, PERMISSION_MODE_ARGUMENT_HINT as Vr, ICommandSettingsAdapter as Vs, IToolCallHandoffPolicy as Vt, IForkExecutionOptions as W, ICommandModule as Wa, TWorkspaceProjectSettingsWriteDecision as Wc, resolveProviderSettingsWriteTarget as Wi, IEditCheckpointInspection as Wl, REWIND_COMMAND_ARGUMENT_HINT as Wn, GoalController as Wo, RUNTIME_RULE_SOURCE as Wr, IHandoffProgress as Ws, TSubagentRunnerFactory as Wt, SystemCommandExecutor as X, TSystemCommandSemanticRole as Xa, IAgentJobDispatch as Xc, deleteSettings as Xi, IEditCheckpointTurnInput as Xl, listCommandEditCheckpoints as Xn, IContextReferenceAddResult as Xo, groupPermissionRulesBySource as Xr, TRemoteControlStatus as Xs, TSubagentSuffix as Xt, selectCommandModules as Y, TSystemCommandLifecycle as Ya, IPresetApplicationOptions as Yc, TSettingsScope as Yi, IEditCheckpointSummary as Yl, listCommandEditCheckpointBranches as Yn, isGoalCancelVerb as Yo, formatInvalidPermissionModeMessage as Yr, IWorkspaceMoveRequest as Ys, ISubagentPromptOptions as Yt, PluginCommandSource as Z, ICommandHostAdapterAccess as Za, IAgentJobGroups as Zc, readSettings as Zi, TEditCheckpointFileRestoreAction as Zl, restoreCommandEditCheckpoint as Zn, IContextReferenceClearResult as Zo, isPermissionMode as Zr, TSandboxCommandMode as Zs, assembleSubagentPrompt as Zt, ExternalEventIngress as _, TAutoCompactThreshold$2 as _a, listUnreadableSessionsForWorkspace as _c, formatCommandBackgroundTask as _i, EXECUTION_ORIGIN_METADATA_KEYS as _l, TSessionFactory as _n, IMemoryRecaller as _o, PLUGIN_COMMAND_DESCRIPTION as _r, ICommandCostBudget as _s, TBundlePluginSkipReason as _t, SessionRenameUnavailableError as a, readSettingsSourceText as aa, resolveStartupAdvisorSpec as ac, LANGUAGE_COMMAND_ARGUMENT_HINT as ai, IBackgroundTaskSpawnerGroupRequest as al, TReversibleRollbackLayer as an, ICommandHostGoal as ao, RENAME_COMMAND_USAGE as ar, toContextReferenceRecords as as, loadHostBundlePluginInspectionFromScopes as at, IModelEffortResolution as au, TExternalEventReceipt as b, compactCommandContext as ba, resolveSessionIdByIdOrName as bc, parseCommandBackgroundLogCursor as bi, createExecutionOriginMetadata as bl, ISkillRootDescriptor as bn, IPerTurnRecallConfig as bo, createShowPluginManagerIntent as br, ICommandExternalEventGrant as bs, NodeHostPluginSettingsStore as bt, IGenerateSessionNameOptions as c, THostSettingsScope as ca, IInteractiveSessionStore$1 as cc, TRecommendedResponseLanguage as ci, ISpawnAgentTaskRequest as cl, evaluateReversibleToolSafety as cn, ICommandHostPresetApplication as co, clearConversationHistory as cr, IPromptFileReferenceHistoryData as cs, IBundlePluginFeatures as ct, TEffortSource as cu, InteractiveSession as d, checkSettingsDocument as da, createProjectSessionStore as dc, parseLanguageArgument as di, createLineDetailPage as dl, IPromptProvider as dn, ICommandHostTerminalHandoff as do, createShowSessionPickerIntent as dr, IPromptFileReferenceToken as ds, IBundlePluginManifest as dt, IProjectSettingsPath as ea, IAdvisorSpec as ec, readCommandPermissionMode as ei, IAgentJobMonitors as el, IReversibleExecutionOptions as en, ICommandHostCatalog as eo, CLEAR_COMMAND_DESCRIPTION as er, IContextReferenceUpsertResult as es, IInstalledPluginRecord as et, DEFAULT_AGENT_TYPE as eu, IInteractiveSession$1 as f, probeProviderProfile as fa, createUserPromptHistoryFile as fc, BACKGROUND_COMMAND_DESCRIPTION as fi, createMainThreadDetailPage as fl, PromptExecutor as fn, ICommandHostUserInteraction as fo, formatCommandSessionReplayValidationReport as fr, IResolvedPromptFileReference as fs, IBundlePluginMcpFault as ft, ExternalEventGrantHistory as g, ICompactContextResult as ga, listUnreadableSessions as gc, closeCommandBackgroundTask as gi, createExecutionWorkspaceSnapshot as gl, IAgentSession as gn, IMemoryCurationQueue as go, PLUGIN_COMMAND_ARGUMENT_HINT as gr, EditCheckpointStore as gs, ILoadedBundlePlugin as gt, TInteractiveSessionOptions as h, DEFAULT_AUTO_COMPACT_THRESHOLD as ha, listResumableSessionSummaries as hc, cancelCommandBackgroundTask as hi, resolveExecutionAttach as hl, IAgentExecutorOptions as hn, IMemoryBudget as ho, validateCommandSessionReplayLog as hr, wrapEditCheckpointTools as hs, IBundleSkill as ht, IInteractiveRuntime as i, createWorkspaceProjectSettingsSources as ia, parseAdvisorSpec as ic, writeCommandPermissionMode as ii, IBackgroundTaskRunner$1 as il, TReversibleExecutionIsolation as in, ICommandHostContextWindow as io, RENAME_COMMAND_DESCRIPTION as ir, removeContextReference as is, createHostBundlePluginLoader as it, IModelEffortInputs as iu, buildPromptWithFileReferences as j, ILegacyProviderSettings as ja, IWorkspaceProjectMutation as jc, readMergedProviderSettings as ji, ICommandSessionPermissions as jl, TEnvResolvedSettings as jn, IAppendMemoryResult as jo, STATUSLINE_COMMAND_DESCRIPTION as jr, ICommandMCPSourceProblem as js, retrieveAgentToolDeps as jt, resolvePromptFileReferences as k, IProviderCommandModuleOptions as ka, IWorkspaceIdentityResolver as kc, ProviderConfigError as ki, ICommandSessionIdentity as kl, ILoadContextOptions as kn, TMemoryPolicyMode as ko, DEFAULT_STATUS_LINE_COMMAND_SETTINGS as kr, ICommandMCPOAuthRedirectPrompt as ks, CommandRegistry as kt, generateSessionName as l, TSettingsCheck as la, createNodeHostSessionStore as lc, buildLanguageCommandSubcommands as li, ISpawnProcessTaskRequest as ll, wrapReversibleExecutionTools as ln, ICommandHostSessionAccess as lo, createSessionExitHostAction as lr, IPromptFileReferenceLimits as ls, IBundlePluginHookIssue as lt, parseModelEffort as lu, restoreSessionRecordIntoSession as m, AUTO_COMPACT_THRESHOLD_SETTINGS_KEY as ma, isSafeSessionId$1 as mc, buildBackgroundCommandSubcommands as mi, TExecutionAttachOutcome as ml, AgentExecutor as mn, IDurableMemoryReader as mo, readCommandSessionInfo as mr, TPromptFileReferenceDiagnosticCode as ms, IBundlePluginSkip as mt, IInteractiveRuntimeTestOptions as n, TProjectSettingsScope as na, ICommandAdvisorAdapter as nc, resolvePermissionModeAdapter as ni, MONITOR_SHELL_TOOL as nl, IReversibleToolSafetyInput as nn, ICommandHostContext as no, EXIT_COMMAND_DESCRIPTION as nr, createContextReferenceItem as ns, MarketplaceClient as nt, IProviderErrorGuidance as nu, persistSessionRename as o, INodeHostSettingsSource as oa, IHostToolResultSpillStore as oc, LANGUAGE_COMMAND_DESCRIPTION as oi, ICreateExecutionWorkspaceTaskSpawnerOptions as ol, TReversibleSafetyStatus as on, ICommandHostMemory as oo, RESUME_COMMAND_DESCRIPTION as or, upsertContextReference as os, loadHostBundlePluginsFromScopes as ot, TEffortDisposition as ou, ISessionRecordRestoreResult as p, testProviderProfileCommand as pa, createUserSessionStore as pc, BACKGROUND_COMMAND_USAGE as pi, IResolveExecutionAttachInput as pl, TProviderFactory as pn, ICommandHostWorkspace as po, parseSessionNameArgument as pr, IResolvedPromptFileReferences as ps, IBundlePluginMcpServer as pt, executeSkill as q, ISystemCommand as qa, TWorkspaceTrustState as qc, ISettingsDocumentStore as qi, IEditCheckpointRecorder as ql, forkCommandEditCheckpoint as qn, TGoalDecision as qo, buildPermissionModeSubcommands as qr, IPermissionRuleLayer as qs, ISubagentParentContext as qt, createInteractiveRuntime as r, TSettingsSource as ra, formatAdvisorSpec as rc, retryCommandPermissionDenial as ri, MonitorCommandRefusedError as rl, IReversibleToolSafetyReport as rn, ICommandHostContextReferences as ro, ICommandSessionInfo as rr, listActiveContextReferences as rs, IHostBundlePluginLoaderOptions as rt, EFFORT_LEVEL_LABELS as ru, PeerMessageIngress as s, createNodeHostSettingsSource as sa, IInteractiveSessionRecord$1 as sc, RECOMMENDED_RESPONSE_LANGUAGES as si, IExecutionWorkspaceTaskSpawner as sl, TReversibleSideEffect as sn, ICommandHostPlan as so, VALIDATE_SESSION_COMMAND_DESCRIPTION as sr, IPromptFileReferenceDiagnostic as ss, BundlePluginLoader as st, TEffortSelection as su, IInteractiveRuntimeOptions as t, IWorkspaceProjectSettingsSource as ta, IAdvisorStatus as tc, readCommandPermissionsState as ti, IAgentJobSchedules as tl, IReversibleToolSafetyContext as tn, ICommandHostCheckpoints as to, COST_COMMAND_DESCRIPTION as tr, clearContextReferences as ts, TInstalledPluginsRegistry as tt, IAgentDefinition as tu, IInteractiveSessionShutdownOptions as u, checkNodeHostSettingsFile as ua, createNodeToolResultSpillStore as uc, formatLanguageUsageMessage as ui, createExecutionWorkspaceTaskSpawner as ul, IPromptExecutorOptions as un, ICommandHostSetupState as uo, createSessionRenameHostAction as ur, IPromptFileReferenceResolveOptions as us, IBundlePluginInspection as ut, resolveModelEffort as uu, IExternalEventSource as v, addCommandContextReference as va, resolveLatestSessionId as vc, formatCommandBackgroundTaskList as vi, createBackgroundGroupExecutionEntryId as vl, IProjectContributionPath as vn, IMemoryStore as vo, RELOAD_PLUGINS_COMMAND_DESCRIPTION as vr, ICommandCostBudgetAdapter as vs, TEnabledPlugins as vt, resolveSubagentLogDir as w, readCommandContextState as wa, IRestrictedWorkspaceProjectAccess as wc, buildProviderProfilesSnapshot as wi, IBackgroundJobOrchestratorOptions as wl, SkillCommandSource as wn, IMemoryCandidate as wo, IAppearanceSettings as wr, ICommandMCPActivationAdapter as ws, IMarketplacePluginEntry as wt, TExternalEventSettlement as x, listCommandContextReferences as xa, WorkspaceProjectSessionStore as xc, readCommandBackgroundTaskLog as xi, createMainThreadExecutionEntryId as xl, ISkillRootInspection as xn, ISemanticMemoryAdapter as xo, resolvePluginCommandAdapter as xr, ICommandExternalEventsAdapter as xs, IKnownMarketplaceEntry as xt, IExternalEventSourceOptions as y, clearCommandContextReferences as ya, resolveReusableEmptySessionId as yc, listCommandBackgroundTasks as yi, createBackgroundTaskExecutionEntryId as yl, listFrameworkProjectContributionPaths as yn, IMemoryWriter as yo, buildPluginCommandSubcommands as yr, ICommandEffortAdapter as ys, IPluginSettings as yt, IPromptHistoryOptions as z, deleteProviderProfile as za, TWorkspaceContributionKind as zc, IActiveModelChangeResult as zi, TAutoCompactThresholdSource as zl, createCommandMemoryStores as zn, buildGoalStartPrompt as zo, IPermissionsCommandState as zr, ICommandSandboxAdapter as zs, ICreateSessionOptions as zt };
+//# sourceMappingURL=createInteractiveRuntime-3MZpPTdw.d.ts.map