@rowan-agent/agent 0.27.0 → 0.29.0

package/dist/index.d.ts

@@ -1,8 +1,27 @@
 import * as _rowan_agent_models from '@rowan-agent/models';
-import { ContentBlock, ModelRef, LlmTokenUsage, LlmContentPart, ScopeRef, ToolCallStatus, JsonValue as JsonValue$1, ToolProgress, ToolCallContent, ToolCallLocation, JsonObject as JsonObject$1, ToolKind, ModelConfig, StreamFn, ToolAnnotations, ThinkingLevel, ToolCall as ToolCall$1, ToolCallUpdate } from '@rowan-agent/models';
+import { ModelRef, ContentBlock, LlmTokenUsage, LlmContentPart, ScopeRef, ToolKind, ToolAnnotations, ToolCallStatus, ToolProgress, ToolCallContent, ToolCallLocation, JsonValue as JsonValue$1, JsonObject as JsonObject$1, ModelConfig, StreamFn, ThinkingLevel, ToolCall as ToolCall$1, ToolCallUpdate } from '@rowan-agent/models';
 export { ModelConfig, ModelRef, ProviderCallContext, ProviderConfig, ProviderModelConfig, ProviderStreamFn, ScopeRef, StreamFn, ThinkingLevel, ToolAnnotations, ToolCall, ToolCallContent, ToolCallLocation, ToolCallOptions, ToolCallOutcome, ToolCallStatus, ToolCallUpdate, ToolDefinitionSummary, ToolKind, ToolProgress } from '@rowan-agent/models';
 import Type from 'typebox';
 
+type PhaseRegistrySelection = Readonly<{
+    entryPhaseId: string | null;
+    phaseIds: readonly string[];
+}>;
+type AgentDefinition = Readonly<{
+    name: string;
+    description: string;
+    prompt: string;
+    tools?: readonly string[];
+    skills?: readonly string[];
+    /** Host-supplied Skills private to this Agent Definition/Bundle. */
+    bundledSkills?: readonly Skill[];
+    phases?: PhaseRegistrySelection;
+    contexts?: readonly string[];
+    model?: ModelRef;
+}>;
+/** Parse one Markdown definition using the same frontmatter vocabulary as Phase resources. */
+declare function parseAgentDefinition(raw: string): AgentDefinition;
+
 type ModelInvokeOutput = {
     text: string;
     contentBlocks: ContentBlock[];
@@ -16,25 +35,13 @@ type InternalModelLoopOptions = {
     tools?: readonly string[];
     maxToolRounds?: number;
 };
-/** Snapshot of phase-level context for restore */
-type PhaseContextSnapshot = {
-    systemPrompt: string;
-    messages: AgentMessage[];
-    currentPhase: string;
-    availablePhases: string[];
-    turnNumber: number;
-    payload?: unknown;
-};
 /** Execution capabilities for a phase — operates on PhaseContext. */
 type PhaseExecution = {
-    snapshot(): PhaseContextSnapshot;
-    restore(snapshot: PhaseContextSnapshot): void;
     invokeModel(context: PhaseContext, options?: {
         output?: "reply" | "internal";
     }): Promise<ModelInvokeOutput>;
     runInternalModelLoop(context: PhaseContext, options: InternalModelLoopOptions): Promise<ModelInvokeOutput>;
     reportStatus(status: PhaseStatus): Promise<void>;
-    executeTool(context: AgentContext, toolCall: ToolCall): Promise<ToolResult>;
     executeTools(context: AgentContext, toolCalls: readonly ToolCall[], contentBlocks?: readonly ContentBlock[], meta?: {
         model?: ModelRef;
         usage?: LlmTokenUsage;
@@ -64,150 +71,241 @@ type PhaseMessageManager = {
     discard(messageId: string): void;
 };
 
-type PhaseRegistrySelection = Readonly<{
-    entryPhaseId: string | null;
-    phaseIds: readonly string[];
-}>;
-type AgentDefinition = Readonly<{
+interface ExtensionStateStore {
+    get(key: string): Promise<JsonValue | undefined>;
+    set(key: string, value: JsonValue): Promise<void>;
+    delete(key: string): Promise<void>;
+}
+interface ExtensionHost {
+    getConfig(extensionId: string, scope?: ScopeRef): Promise<JsonObject | null> | JsonObject | null;
+    onConfigChanged?(listener: (extensionId: string, scope: ScopeRef) => void): (() => void) | void;
+    getAgentState(extensionId: string, agentId: string, key: string): Promise<JsonValue | undefined> | JsonValue | undefined;
+    setAgentState(extensionId: string, agentId: string, key: string, value: JsonValue): Promise<void> | void;
+    deleteAgentState(extensionId: string, agentId: string, key: string): Promise<void> | void;
+    getGlobalState(extensionId: string, key: string): Promise<JsonValue | undefined> | JsonValue | undefined;
+    setGlobalState(extensionId: string, key: string, value: JsonValue): Promise<void> | void;
+    deleteGlobalState(extensionId: string, key: string): Promise<void> | void;
+    /**
+     * Called once per extension load. The returned namespaces are merged into that extension's `api`
+     * (a name already used by Rowan's own API is an error). `dispose` runs when the extension is
+     * unloaded, reloaded or fails activation, so the host can drop everything that extension registered.
+     */
+    extendApi?(extensionId: string): HostApiExtension | undefined;
+}
+interface HostApiExtension {
+    readonly namespaces: Readonly<Record<string, unknown>>;
+    dispose?(): void;
+}
+type ExtensionToolContribution = {
+    kind: "tool";
     name: string;
     description: string;
-    prompt: string;
-    tools?: readonly string[];
-    skills?: readonly string[];
-    /** Host-supplied Skills private to this Agent Definition/Bundle. */
-    bundledSkills?: readonly Skill[];
-    phases?: PhaseRegistrySelection;
-    contexts?: readonly string[];
-    model?: ModelRef;
-}>;
-/** Parse one Markdown definition using the same frontmatter vocabulary as Phase resources. */
-declare function parseAgentDefinition(raw: string): AgentDefinition;
-
-type ResourceKind = "agent" | "tool" | "skill" | "phase";
-type ResourceSourceId = string;
-/** Rowan-native contribution aliases. Hosts may adapt their domain handlers to
- * these existing Tool/Phase lifecycles without importing host Scope types. */
-type ToolContribution = Tool$1;
-type PhaseContribution = Phase;
-type ResourceView = Readonly<{
-    agents: readonly ResourceSourceId[];
-    tools: readonly ResourceSourceId[];
-    skills: readonly ResourceSourceId[];
-    phases: readonly ResourceSourceId[];
-}>;
-type ResourceRef = Readonly<{
-    kind: ResourceKind;
-    sourceId: ResourceSourceId;
+};
+type ExtensionCapabilityContribution = ExtensionToolContribution;
+type ExtensionCapability = {
+    extensionId: string;
+    kind: "tool";
     name: string;
-}>;
-type ResourceDiagnostic = Readonly<{
-    kind: "invalid" | "missing" | "collision";
-    sourceId: ResourceSourceId;
-    message: string;
-    path?: string;
-}>;
-type LoadResult = Readonly<{
-    revision: string;
-    registered: readonly ResourceRef[];
-    skipped: readonly ResourceDiagnostic[];
-}>;
-type LoadInput<T> = Readonly<{
-    sourceId: ResourceSourceId;
-    directory?: string;
-    values?: readonly T[];
-}>;
-type ResolvedResourceView = Readonly<{
-    agents: readonly AgentDefinition[];
-    tools: readonly Tool$1[];
-    skills: readonly Skill[];
-    phases: readonly Phase[];
-    revisions: Readonly<Record<ResourceKind, readonly string[]>>;
-    refs: Readonly<Record<ResourceKind, readonly ResourceRef[]>>;
-}>;
-type ResourceRegistryErrorCode = "invalid_source_id" | "invalid_resource_name" | "resource_collision" | "resource_input_missing" | "resource_directory_not_supported" | "unknown_resource_source" | "implicit_source_protected";
-declare class ResourceRegistryError extends Error {
-    readonly code: ResourceRegistryErrorCode;
-    constructor(code: ResourceRegistryErrorCode, message: string);
-}
-type RegistryValue = AgentDefinition | Tool$1 | Skill | Phase;
-/**
- * Runtime Resource Registry source transaction and view resolver.
- *
- * Directory normalization is intentionally added by the typed loader slice;
- * this first module owns only the atomic source/revision/collision semantics.
- */
-declare class ResourceRegistry {
-    private readonly sources;
-    /** Sources registered by the bootstrap boundary (currently Extensions). */
-    private readonly implicitSources;
-    private revisionSequence;
-    loadAgents(input: LoadInput<AgentDefinition>): Promise<LoadResult>;
-    loadSkills(input: LoadInput<Skill>): Promise<LoadResult>;
-    loadPhases(input: LoadInput<Phase>): Promise<LoadResult>;
-    loadTools(input: Readonly<{
-        sourceId: ResourceSourceId;
-        values: readonly ToolContribution[];
-    }>): Promise<LoadResult>;
-    unload(input: Readonly<{
-        kind: ResourceKind;
-        sourceId: ResourceSourceId;
-    }>): Promise<LoadResult>;
-    resolveView(view: ResourceView): ResolvedResourceView;
-    /** Mark one already-loaded source as implicit for every Resource View. */
-    protected markImplicit(kind: ResourceKind, sourceId: ResourceSourceId): void;
-    /** Bootstrap-only helper for replacing an implicit contribution source. */
-    protected replaceImplicit<T extends RegistryValue>(kind: ResourceKind, sourceId: ResourceSourceId, values: readonly T[]): Promise<LoadResult>;
-    protected hasImplicit(kind: ResourceKind, sourceId: ResourceSourceId): boolean;
-    private withImplicit;
-    private collect;
-    private commit;
-    private resolveKind;
-    private resolveRevisions;
-    private resolveRefs;
-    private sourcesFor;
-    private nextRevision;
+    description: string;
+};
+interface SourceInfo {
+    source: string;
+    baseDir?: string;
+    displayName?: string;
 }
-
+/** A loaded directory Bundle used by an extension. */
+type PhaseDefinition = Phase;
+/** Register a Phase by directory path or Phase object; PHASE.md and direct child Skills are loaded atomically when a path is supplied. */
+type PhaseRegistration = string | Phase;
+type RegisteredPhase = {
+    definition: PhaseDefinition;
+    source: {
+        extensionPath: string;
+    };
+    sourceId: string;
+    scope?: ScopeRef;
+};
+/** Register a Skill directory (containing SKILL.md) or a Skill object. Registering an existing name replaces it. */
+type SkillRegistration = string | Skill;
+type RegisteredSkill = {
+    definition: Skill;
+    source: {
+        extensionPath: string;
+    };
+    sourceId: string;
+    scope?: ScopeRef;
+};
 /**
- * EventBus — simple pub/sub for inter-extension communication.
- *
- * Extensions can emit and subscribe to arbitrary events via `api.events`.
- * This allows extensions to coordinate without direct coupling.
+ * Tool definition for registering LLM-callable tools via `api.tools.register()`.
  *
  * @example
  * ```typescript
- * // Extension A
- * api.events.on("my-plugin:ready", (data) => {
- *   console.log("Plugin ready:", data);
+ * api.tools.register({
+ *   name: "search_docs",
+ *   description: "Search documentation",
+ *   parameters: { type: "object", properties: { query: { type: "string" } } },
+ *   execute: async (args, ctx) => {
+ *     return { content: [{ type: "text", text: "result" }] };
+ *   },
  * });
- *
- * // Extension B
- * api.events.emit("my-plugin:ready", { version: "1.0" });
  * ```
  */
-type Listener = (...args: unknown[]) => void;
-interface EventBus {
-    /** Subscribe to an event. Returns unsubscribe function. */
-    on(event: string, listener: Listener): () => void;
-    /** Emit an event to all subscribers. */
-    emit(event: string, ...args: unknown[]): void;
-    /** Remove all listeners for an event, or all listeners if no event specified. */
-    off(event?: string): void;
-    /** Check if there are listeners for an event. */
-    has(event: string): boolean;
-    /** Get listener count for an event. */
-    count(event: string): number;
+interface ToolDefinition {
+    /** Tool name (used in LLM tool calls) */
+    name: string;
+    /** Description for LLM */
+    description: string;
+    /** Parameter schema (JSON Schema) */
+    parameters: Record<string, unknown>;
+    /** Optional: one-line snippet shown in the system prompt tool list */
+    promptSnippet?: string;
+    /** Optional: additional guidelines appended to system prompt */
+    promptGuidelines?: string[];
+    kind?: ToolKind;
+    annotations?: ToolAnnotations;
+    _meta?: JsonObject;
+    present?: (call: {
+        status: ToolCallStatus;
+        args: JsonValue;
+        progress?: ToolProgress;
+        result?: ToolExecutionResult;
+    }) => {
+        title?: string;
+        content?: ToolCallContent[];
+        locations?: ToolCallLocation[];
+        _meta?: JsonObject;
+    } | undefined | void | Promise<{
+        title?: string;
+        content?: ToolCallContent[];
+        locations?: ToolCallLocation[];
+        _meta?: JsonObject;
+    } | undefined | void>;
+    /** Execute the tool */
+    execute: (args: unknown, context: ToolInvocationContext, signal?: AbortSignal) => Promise<ToolExecutionResult>;
+    /** Optional: per-tool execution mode override */
+    executionMode?: "sequential" | "parallel";
 }
 
 /**
- * @module extensions/context
- *
- * Extension context types — runtime state and phase execution context.
- *
- * For ExtensionAPI and createExtensionAPI, see ./api.ts
+ * Registered tool with source metadata.
  */
-
-/**
+interface RegisteredTool {
+    definition: ToolDefinition;
+    sourceInfo: SourceInfo;
+    sourceId: string;
+    scope?: ScopeRef;
+}
+/**
+ * Structured extension error with attribution.
+ */
+interface ExtensionError {
+    /** Path of the extension that caused the error */
+    extensionPath: string;
+    /** Event or operation that caused the error */
+    event: string;
+    /** Error message */
+    error: string;
+    /** Optional stack trace */
+    stack?: string;
+}
+/** Error listener callback type. */
+type ExtensionErrorListener = (error: ExtensionError) => void;
+type ExecOptions = {
+    /** Working directory for the command. Defaults to cwd passed to runtime. */
+    cwd?: string;
+    /** Environment variables to add/override. */
+    env?: Record<string, string>;
+    /** Timeout in milliseconds. */
+    timeout?: number;
+    /** AbortSignal for cancellation. */
+    signal?: AbortSignal;
+};
+type ExecResult = {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+};
+/**
+ * Shared runtime state created by loader, used during registration and runtime.
+ * All ExtensionAPI instances reference this shared state.
+ *
+ * It only owns the lifetime guard shared by captured Extension API objects.
+ */
+interface ExtensionRuntime {
+    /** Throws when this extension instance is stale after runtime replacement. */
+    assertActive: () => void;
+    /** Marks this extension instance as stale after runtime replacement or reload. */
+    invalidate: (message?: string) => void;
+}
+/**
+ * Result of loading extensions from filesystem.
+ * The runner takes these and creates Extension tracking objects.
+ */
+type LoadExtensionsResult = {
+    extensions: LoadedExtension[];
+    errors: Array<{
+        path: string;
+        error: string;
+    }>;
+};
+/**
+ * Pre-initialization extension form — factory + metadata.
+ * Runner.loadExtensions() calls the factory and creates the full Extension object.
+ */
+interface LoadedExtension {
+    id?: string;
+    path: string;
+    name: string;
+    factory: ExtensionFactory;
+    manifest?: ExtensionManifest;
+}
+/** Extension manifest from package.json `rowan` field. */
+interface ExtensionManifest {
+    id?: string;
+    entry?: string;
+    name?: string;
+}
+
+/**
+ * EventBus — simple pub/sub for inter-extension communication.
+ *
+ * Extensions can emit and subscribe to arbitrary events via `api.events`.
+ * This allows extensions to coordinate without direct coupling.
+ *
+ * @example
+ * ```typescript
+ * // Extension A
+ * api.events.on("my-plugin:ready", (data) => {
+ *   console.log("Plugin ready:", data);
+ * });
+ *
+ * // Extension B
+ * api.events.emit("my-plugin:ready", { version: "1.0" });
+ * ```
+ */
+type Listener = (...args: unknown[]) => void;
+interface EventBus {
+    /** Subscribe to an event. Returns unsubscribe function. */
+    on(event: string, listener: Listener): () => void;
+    /** Emit an event to all subscribers. */
+    emit(event: string, ...args: unknown[]): void;
+    /** Remove all listeners for an event, or all listeners if no event specified. */
+    off(event?: string): void;
+    /** Check if there are listeners for an event. */
+    has(event: string): boolean;
+    /** Get listener count for an event. */
+    count(event: string): number;
+}
+
+/**
+ * @module extensions/context
+ *
+ * Extension context types — runtime state and phase execution context.
+ *
+ * For ExtensionAPI and createExtensionAPI, see ./api.ts
+ */
+
+/**
  * Runtime context available to extensions during event handler execution.
  *
  * Provides access to agent state, working directory, and utility methods.
@@ -290,1534 +388,1422 @@ interface ExtensionUtils {
     formatJson(value: unknown): string;
 }
 
-declare class InMemoryExtensionHost implements ExtensionHost {
-    private readonly configs;
-    private readonly agentState;
-    private readonly globalState;
-    private readonly listeners;
-    extendApi?(extensionId: string): HostApiExtension | undefined;
-    constructor(options?: {
-        configs?: Record<string, Record<string, JsonObject>>;
-        agentState?: Record<string, Record<string, Record<string, JsonValue>>>;
-        globalState?: Record<string, Record<string, JsonValue>>;
-        extendApi?: (extensionId: string) => HostApiExtension | undefined;
-    });
-    setConfig(extensionId: string, config: JsonObject | null, scope?: ScopeRef): void;
-    getConfig(extensionId: string, scope?: ScopeRef): JsonObject | null;
-    onConfigChanged(listener: (extensionId: string, scope: ScopeRef) => void): () => void;
-    notifyConfigChanged(extensionId: string, scope?: ScopeRef): void;
-    getAgentState(extensionId: string, agentId: string, key: string): JsonValue | undefined;
-    setAgentState(extensionId: string, agentId: string, key: string, value: JsonValue): void;
-    deleteAgentState(extensionId: string, agentId: string, key: string): void;
-    getGlobalState(extensionId: string, key: string): JsonValue | undefined;
-    setGlobalState(extensionId: string, key: string, value: JsonValue): void;
-    deleteGlobalState(extensionId: string, key: string): void;
-}
-
-/**
- * Extension runner — manages extension loading and hook execution.
- *
- * Architecture reference: PI's ExtensionRunner
- * - Per-extension tracking via Extension objects
- * - Shared ExtensionRuntime with invalidate/assertActive
- * - Direct `on()` API for hook registration
- * - Error listener pattern for structured error handling
- * - Tool registration support
- */
-
-/** The Resource Source an Extension registration lands in: Global (`[]`) is `rowan.extensions`, any other Scope `rowan.extensions:<scopeToKey(scope)>`. */
-declare function extensionSourceId(scope?: ScopeRef): string;
-type ExtensionRunnerOptions = {
-    entryPhaseId?: string | null;
-    cwd?: string;
-    host?: ExtensionHost;
-};
 /**
- * Manages extensions and provides hooks for the agent loop.
- *
- * Features:
- * - Per-extension tracking (handlers, tools, phases)
- * - Shared runtime with lifecycle protection (invalidate/assertActive)
- * - Error listener pattern for structured error handling
- * - Direct hook API and extension-loaded hook API
- * - Tool registration for LLM-callable tools
- * - EventBus for inter-extension communication
+ * Extension API object passed to extension factory function.
  *
  * @example
- * ```ts
- * const runner = createExtensionRunner();
- *
- * // Direct hook registration
- * const unsub = runner.on("before_tool_call", (event) => {
- *   return { allow: false, reason: "Blocked" };
- * });
- *
- * // Error handling
- * runner.onError((error) => {
- *   console.error(`Extension error in ${error.extensionPath}:`, error.error);
- * });
- *
- * // Load extensions
- * await runner.loadExtensions(extensions);
- * runner.bind();
+ * ```typescript
+ * export default function(api: ExtensionAPI) {
+ *   // api provides all extension APIs
+ * }
  * ```
  */
-declare class ExtensionRunner {
-    readonly hooks: HooksManager;
-    readonly runtime: ExtensionRuntime;
-    readonly events: EventBus;
-    readonly host: ExtensionHost;
-    private readonly cwd;
-    private readonly abortController;
-    private _idle;
-    private readonly extensions;
-    private readonly runState;
-    private readonly configChangeListeners;
-    private readonly hostUnsubscribers;
-    private readonly phases;
-    private _phaseCache;
-    private readonly skills;
-    private readonly pendingProviders;
-    private bound;
-    private readonly errorListeners;
-    private readonly capabilityListeners;
-    private readonly resourceChangeListeners;
-    /** Current agent context — set by the agent before each phase */
-    currentContext?: AgentContext;
-    constructor(options?: ExtensionRunnerOptions);
-    /** Whether the agent is currently idle (not streaming). */
-    get isIdle(): boolean;
-    /** Set idle state — called by the agent loop. */
-    setIdle(idle: boolean): void;
-    /** Abort signal for the current runner instance. */
-    get signal(): AbortSignal;
-    /** Abort the current runner operation. */
-    abort(): void;
-    /**
-     * Register an error listener.
-     * Returns an unsubscribe function.
-     */
-    onError(listener: ExtensionErrorListener): () => void;
-    /**
-     * Emit a structured extension error to all listeners.
-     */
-    emitError(error: ExtensionError): void;
-    /**
-     * Mark all extension contexts as stale.
-     * After calling this, any captured ExtensionAPI or ExtensionContext will throw
-     * on use. Used during runtime replacement or reload.
-     */
-    invalidate(message?: string): void;
-    /**
-     * Subscribe to a specific hook event type.
-     * Returns an unsubscribe function.
-     *
-     * @example
-     * ```ts
-     * const unsub = runner.on("before_tool_call", (event) => {
-     *   return { allow: false, reason: "Blocked" };
-     * });
-     * unsub(); // Cancel subscription
-     * ```
-     */
-    on<K extends HookEventType>(type: K, handler: HookHandler<K>): () => void;
-    /**
-     * Load and initialize extensions.
-     * Creates Extension tracking objects and calls each factory with an ExtensionAPI.
-     */
-    loadExtensions(extensions: LoadedExtension[]): Promise<void>;
-    /** Dispose all active Extensions in reverse activation order. */
-    close(): Promise<void>;
-    get extensionHost(): ExtensionHost;
-    notifyConfigChanged(extensionId: string, scope: ScopeRef): Promise<void>;
-    getRunState(runId: string, extensionId: string, key: string): JsonValue | undefined;
-    setRunState(runId: string, extensionId: string, key: string, value: JsonValue): void;
-    deleteRunState(runId: string, extensionId: string, key: string): void;
-    dropRunState(runId: string): void;
-    /** Get all registered tools from all extensions. */
-    getAllRegisteredTools(): RegisteredTool[];
-    /**
-     * Get a tool definition by name. Returns undefined if not found.
-     */
-    getToolDefinition(toolName: string): RegisteredTool["definition"] | undefined;
-    /** Get all contributed capabilities across all extensions. */
-    getCapabilities(): readonly ExtensionCapability[];
-    /**
-     * Subscribe to capability changes (contributions added, removed, or extensions disposed).
-     * Returns an unsubscribe function.
-     */
-    onCapabilitiesChanged(listener: (capabilities: readonly ExtensionCapability[]) => void): () => void;
-    /**
-     * Subscribe to resource changes (tools, phases, skills registered, unregistered, or disposed).
-     * Used by RuntimeBootstrapRegistry to re-commit implicit sources after activation.
-     */
-    onResourceChange(listener: (kind: "tool" | "phase" | "skill") => Promise<void> | void): () => void;
-    private notifyResourceChange;
-    triggerUiAction(event: {
-        contributionId: string;
-        actionId: string;
-        scope?: ScopeRef;
-    }): void;
-    getPhase(name: string): Phase | undefined;
-    getPhases(): Phase[];
-    getRegisteredPhases(): readonly RegisteredPhase[];
-    createPhaseRegistry(input?: {
-        entryPhaseId?: string | null;
-    }): PhaseRegistry;
-    /** Adapt an extension RegisteredPhase to the core Phase type. */
-    adaptToPhase(reg: RegisteredPhase): Phase;
-    getSkills(): Skill[];
-    getRegisteredSkills(): readonly RegisteredSkill[];
-    /**
-     * Bind the runner — flushes pending provider registrations and
-     * replaces runtime stubs with real implementations.
-     */
-    bind(): void;
-    /**
-     * Generic emit — fire-and-forget for any event type.
-     */
-    emit<K extends HookEventType>(eventType: K, event: Parameters<HookHandler<K>>[0]): Promise<void>;
-    /**
-     * Unified hook emission — returns the first non-undefined result.
-     */
-    private emitHook;
-    emitBeforePhase(phaseId: string, input: PhaseContext): Promise<{
-        abort?: any;
-        skip?: any;
-        input?: PhaseContext;
-    }>;
-    emitAfterPhase(phaseId: string, output: PhaseOutput): Promise<{
-        abort?: any;
-        retry?: PhaseContext;
-        output?: PhaseOutput;
-    }>;
-    emitBeforePrompt(phaseId: string, input: PhaseContext): Promise<PhaseContext>;
-    emitRunStart(event: {
-        runId: string;
-        agentId: string;
-        metadata: Readonly<Record<string, unknown>>;
-        turn: JsonObject;
-    }): Promise<void>;
-    emitRunEnd(event: {
-        runId: string;
-        agentId: string;
-        outcome: unknown;
-    }): Promise<void>;
-    emitBeforeToolCall(tool: Tool, args: unknown, context?: {
-        runId?: string;
-        agentId?: string;
-        toolCallId?: string;
-        metadata?: Readonly<Record<string, unknown>>;
-        agentMetadata?: Readonly<Record<string, unknown>>;
-        answer?: unknown;
-        scope?: ScopeRef;
-        turn?: JsonObject;
-    }): Promise<BeforeToolCallResult>;
-    emitAfterToolCall(tool: Tool, result: ToolResult, context?: {
-        runId?: string;
-        agentId?: string;
-        toolCallId?: string;
-        metadata?: Readonly<Record<string, unknown>>;
-        scope?: ScopeRef;
-        turn?: JsonObject;
-    }): Promise<ToolResult>;
-    /**
-     * Create an ExtensionAPI for a specific extension.
-     * Registration methods write to the extension tracking object.
-     * Action methods delegate to the shared runtime.
-     */
-    private createExtensionAPI;
-    private registerTool;
-    private unregisterTool;
-    private contributeCapability;
-    private notifyCapabilitiesChanged;
-    private registerPhase;
-    private registerPhaseDefinition;
-    private unregisterPhase;
-    private loadRegisteredPhase;
-    private registerSkill;
-    private registerSkillDefinition;
-    private unregisterSkill;
-    private loadRegisteredSkill;
-    private registerProvider;
-    private unregisterProvider;
-    private flushPendingProviders;
-    private getRegisteredPhase;
-    private collectRegisteredPhases;
-    private rollbackExtension;
-    private disposeExtension;
+interface ExtensionAPI {
+    /** Hook events — subscribe or unsubscribe. */
+    hooks: {
+        /**
+         * Subscribe to a hook event.
+         *
+         * @param eventType - Hook type, e.g. "before_tool_call"
+         * @param handler - Hook handler, can return result to modify behavior
+         */
+        on<K extends HookEventType>(eventType: K, handler: HookHandler<K>): void;
+        /** Unsubscribe from a hook event. */
+        off<K extends HookEventType>(eventType: K, handler: HookHandler<K>): void;
+    };
+    /** Extension configuration — read own layered config or listen for changes. */
+    config: {
+        /** Get the extension's own effective configuration block. */
+        get(scope?: ScopeRef): Promise<JsonObject | null>;
+        /** Listen for configuration changes for a scope. */
+        changed(handler: (scope: ScopeRef) => void): void;
+    };
+    /** Extension state — scoped to run (in-memory) or agent (durable) or global (durable). */
+    state: {
+        /** Run-scoped in-memory state; dropped when the Run ends. */
+        run(runId: string): ExtensionStateStore;
+        /** Agent-scoped durable state; persisted with the Agent record. */
+        agent(agentId: string): ExtensionStateStore;
+        /** Extension-scoped durable state; survives process restarts. */
+        global(): ExtensionStateStore;
+    };
+    /** Tool capabilities — register and unregister custom tools. */
+    tools: {
+        /** Register a custom LLM-callable tool. */
+        register(tool: ToolDefinition, scope?: ScopeRef): Promise<void>;
+        /** Unregister a previously registered tool by name. */
+        unregister(toolName: string, scope?: ScopeRef): Promise<void>;
+    };
+    /** Capability contributions — advertise tools or features to the host. */
+    capabilities: {
+        /** Contribute a capability to the host. Returns a disposer to remove the contribution. */
+        contribute(contribution: ExtensionCapabilityContribution): () => void;
+    };
+    /** Model provider registration. */
+    providers: {
+        /** Register a model provider. Registering with an existing id replaces it. */
+        register(config: _rowan_agent_models.ProviderConfig): void;
+        /** Unregister a model provider by id. */
+        unregister(id: string): void;
+    };
+    /** Phase execution capabilities — provides Phase In/Out, phase identity, phase routing, and registration. */
+    phases: {
+        /** Register a Phase directory bundle or Phase object. */
+        register(phase: PhaseRegistration, scope?: ScopeRef): Promise<void>;
+        /** Unregister a previously registered phase by name. */
+        unregister(phaseName: string, scope?: ScopeRef): Promise<void> | void;
+        /** Phase In: get payload from previous phase */
+        getPayload(): unknown;
+        /** Phase Out: set payload for next phase */
+        setPayload(payload: unknown): void;
+        /** Phase Out: set outcome message */
+        setMessage(message: string): void;
+        /** Get current phase name */
+        getCurrentPhase(): string;
+        /** Set next phase (lower priority than PHASE.md target) */
+        setNextPhase(phaseName: string): void;
+        /** Get the next phase set by setNextPhase */
+        getNextPhase(): string | undefined;
+        /** Get the message set by setMessage */
+        getMessage(): string | undefined;
+    };
+    /** Skill capabilities — register and unregister standalone skills. */
+    skills: {
+        /** Register a Skill directory (containing SKILL.md) or a Skill object. Registering an existing name replaces it. */
+        register(skill: SkillRegistration, scope?: ScopeRef): Promise<void>;
+        /** Unregister a previously registered Skill by name. */
+        unregister(skillName: string, scope?: ScopeRef): Promise<void> | void;
+    };
+    /** Extension manifest from package.json `rowan` field. */
+    manifest?: ExtensionManifest;
+    /** Utility functions. */
+    utils: ExtensionUtils;
+    /** Runtime context — cwd, signal, exec, message access, etc. */
+    context: ExtensionContext;
+    /** Shared event bus for inter-extension communication. */
+    events: EventBus;
 }
+/**
+ * Extension factory function.
+ * Receives ExtensionAPI for registering hooks, phases, and providers.
+ */
+type ExtensionDisposer = () => void | Promise<void>;
+type ExtensionFactoryResult = void | ExtensionDisposer;
+type ExtensionFactory = (api: ExtensionAPI) => ExtensionFactoryResult | Promise<ExtensionFactoryResult>;
 
-type ToolCallPresentationInput = Readonly<{
-    status: ToolCallStatus;
-    args: JsonValue$1;
-    progress?: ToolProgress;
-    result?: ToolExecutionResult;
+type PhaseStatusState = "running" | "completed";
+/** Normalized status event exposed to Runtime consumers. */
+type PhaseStatus = Readonly<{
+    state: PhaseStatusState;
+    /** Stable consumer-facing status identifier, e.g. `compacting`. */
+    kind: string;
+    /** Optional human-readable detail for UI/status consumers. */
+    message?: string;
+    /** Structured status payload. */
+    payload?: unknown;
 }>;
-type ToolCallPresentationOutput = {
-    title?: string;
-    content?: ToolCallContent[];
-    locations?: ToolCallLocation[];
-    _meta?: JsonObject$1;
-};
-type ToolCallMergeTarget = {
-    title?: string;
-    kind?: ToolKind;
-    status?: ToolCallStatus;
-    locations?: ToolCallLocation[];
-    content?: ToolCallContent[];
-    rawInput?: JsonValue$1;
-    rawOutput?: JsonValue$1;
-    _meta?: JsonObject$1;
+/** Unified phase output — model-driven routing is optional; programmatic phases may normalize omission to stop. */
+type PhaseOutput = {
+    /** User-visible assistant message. */
+    message?: string;
+    /** Final status update for non-conversational consumers. */
+    status?: PhaseStatus;
+    /** Route to next phase, or "continue" to re-execute current phase, or "stop" to end. Undefined means no model route. */
+    route?: string;
+    /** Phase name that produced this output */
+    phase?: string;
+    /** Tool calls from the model invocation (used by framework for route extraction) */
+    toolCalls?: Array<{
+        id: string;
+        name: string;
+        args: unknown;
+    }>;
+    /** Route reason extracted from route tool call (for hooks to inspect) */
+    routeReason?: string;
+    /** Structured data from this phase, passed to the next phase */
+    payload?: unknown;
 };
-type ToolCallMergePatch = {
-    title?: string;
-    kind?: ToolKind;
-    status?: ToolCallStatus;
-    locations?: ToolCallLocation[];
-    content?: ToolCallContent[];
-    rawInput?: JsonValue$1;
-    rawOutput?: JsonValue$1;
-    _meta?: JsonObject$1;
-};
-declare function mergeToolCall<T extends ToolCallMergeTarget>(target: T, patch: ToolCallMergePatch): T;
-
-type ExtensionContribution = LoadedExtension;
-type ExtensionLoadInput = LoadInput<ExtensionContribution>;
-type ExtensionActivationError = Readonly<{
-    path: string;
-    error: string;
-}>;
-type ExtensionActivationResult = Readonly<{
-    active: readonly string[];
-    errors: readonly ExtensionActivationError[];
-    revision?: string;
-    registered?: readonly string[];
-    skipped?: readonly ResourceDiagnostic[];
-}>;
-type ExtensionLifetimeErrorCode = "extensions_frozen" | "extensions_closed";
-declare class ExtensionLifetimeError extends Error {
-    readonly code: ExtensionLifetimeErrorCode;
-    constructor(code: ExtensionLifetimeErrorCode, message: string);
-}
-/** Runtime-global Extension activation and lifetime boundary. */
-declare class RuntimeExtensionLifetime {
-    private readonly runner;
-    private frozen;
-    private closed;
-    constructor(options?: {
-        cwd?: string;
-        host?: ExtensionHost;
-    });
-    activate(extensions: readonly LoadedExtension[]): Promise<ExtensionActivationResult>;
-    tools(): readonly RegisteredTool[];
-    phases(): readonly Phase[];
-    registeredPhases(): readonly RegisteredPhase[];
-    skills(): readonly Skill[];
-    registeredSkills(): readonly RegisteredSkill[];
-    get extensionRunner(): ExtensionRunner;
-    get extensionHost(): ExtensionHost;
-    onResourceChange(listener: (kind: "tool" | "phase" | "skill") => Promise<void> | void): () => void;
-    dropRunState(runId: string): void;
-    close(): Promise<void>;
-}
-/** Bootstrap-only Registry facade; its Extension method disappears after init. */
-declare class RuntimeBootstrapRegistry extends ResourceRegistry {
-    private readonly extensions;
-    private readonly knownSources;
-    private commitQueue;
-    constructor(extensions?: RuntimeExtensionLifetime);
-    private recommit;
-    get extensionHost(): ExtensionHost;
-    /** Install Rowan-owned implicit resources before any host source is read. */
-    ensureCoreResources(): Promise<void>;
-    loadExtensions(input: readonly LoadedExtension[] | ExtensionLoadInput): Promise<ExtensionActivationResult>;
-    get extensionRunner(): ExtensionRunner;
-    get extensionTools(): readonly RegisteredTool[];
-    get extensionPhases(): readonly Phase[];
-    closeExtensions(): Promise<void>;
+/** Phase machine state — tracks position and inter-phase data */
+interface PhaseState {
+    current: string;
+    available: string[];
+    iterations: number;
+    payload?: unknown;
 }
-
-type DefinitionLayer = Readonly<{
-    description?: string;
-    prompt?: string;
-    model?: ModelRef;
-    tools?: readonly string[];
-    skills?: readonly string[];
-    phases?: PhaseRegistrySelection;
-}>;
-type AgentConfiguration = Readonly<{
-    identity: string;
-    definition: Readonly<{
-        name: string;
-        layer?: DefinitionLayer;
-    }>;
-    resourceView: ResourceView;
-    contexts?: readonly ContextCandidate[];
-    /** Trusted Host-owned Contexts rendered as durable user messages. */
-    additionalContexts?: readonly ContextCandidate[];
-    cwd?: string;
-    maxAttempts?: number;
-    model: ModelConfig | ModelRef;
-    stream?: StreamFn;
-}>;
-type ConfigurationSnapshot = Readonly<{
-    identity: string;
-    definition: AgentDefinition;
-    resources: Readonly<{
-        tools: readonly Tool$1[];
-        skills: readonly Skill[];
-        phases?: PhaseRegistry;
-        revisions: Readonly<Record<ResourceKind, readonly string[]>>;
-        refs: Readonly<Record<ResourceKind, readonly ResourceRef[]>>;
-    }>;
-    contexts: readonly ContextCandidate[];
-    additionalContexts: readonly ContextCandidate[];
-    resourceView: ResourceView;
+type PhaseInvocation = {
+    mode: "serial";
+    instanceId: string;
+} | {
+    mode: "parallel";
+    instanceId: string;
+    groupId: string;
+    index: number;
+    count: number;
+    sourcePhaseId: string;
+};
+/** Durable identity of the Run execution currently invoking a Phase. */
+type PhaseExecutionIdentity = Readonly<{
+    agentId: string;
+    runId: string;
+    executionId: string;
+    /** Original durable Run input, before any Phase-local interpretation. */
+    input?: UserContent;
+    /** Opaque metadata captured at the durable boundary; Rowan does not decode it. */
+    agentMetadata?: Readonly<Record<string, unknown>>;
+    runMetadata?: Readonly<Record<string, unknown>>;
+    scope?: _rowan_agent_models.ScopeRef;
     cwd?: string;
-    maxAttempts?: number;
-    model: ModelConfig | ModelRef;
-    stream?: StreamFn;
-}>;
-/** Resolve one Definition request into one immutable, source-qualified snapshot. */
-declare function resolveConfigurationSnapshot(registry: ResourceRegistry, input: AgentConfiguration): ConfigurationSnapshot;
-/** Whether one stored configuration is already a resolved snapshot. A snapshot
- * is used as it stands; a request is resolved against the current sources. */
-declare function isConfigurationSnapshot(config: AgentConfiguration | ConfigurationSnapshot): config is ConfigurationSnapshot;
-
-type UserInput = string | Readonly<{
-    content: UserContent;
-    metadata?: Metadata;
-    thinkingLevel?: ThinkingLevel;
-    providerOptions?: JsonObject;
-}>;
-type HistorySeed = readonly Message[];
-type ContextStatus = Readonly<{
-    tokens: number;
-    contextWindow: number;
-    percent: number;
-    thresholdTokens: number;
-    estimated: boolean;
-    coveredThrough?: Readonly<{
-        messageId: MessageId;
-        sequence: number;
-    }>;
-}>;
-type ContextCompactionRecord = Readonly<{
-    id: string;
-    agentId: AgentId;
-    summary: string;
-    coveredThrough?: Readonly<{
-        messageId: MessageId;
-        sequence: number;
-    }>;
-    instructions?: string;
-    createdAt: string;
-}>;
-/** Who is calling which tool, without the ability to ask or suspend. Hosts that
- * describe a call before it runs (for example to build a confirmation) only
- * have this much. */
-type ToolCallContext = Readonly<{
-    agentId: AgentId;
-    runId: RunId;
-    /** Opaque JSON metadata captured from the Agent and Run records. Rowan does
-     * not interpret host/domain fields. */
-    agentMetadata?: Metadata;
-    runMetadata?: Metadata;
-    toolCallId: ToolCallId;
-    /** The model's id for this call, matching `tool_call_delta` events; absent when a host runs the tool itself. */
-    providerToolCallId?: string;
-    scope?: ScopeRef;
-    turn?: JsonObject;
-    reportProgress(progress: ToolProgress): void;
-}>;
-type ToolInvocationContext = ToolCallContext & Readonly<{
-    interaction: RunInteractionDriver;
-}>;
-
-type Tool$1 = Readonly<{
-    name: string;
-    /** Rowan-owned Core Tool; Core Tools bypass Definition/Phase filtering. */
-    core?: boolean;
-    description: string;
-    parameters: Type.TSchema;
-    promptSnippet?: string;
-    promptGuidelines?: readonly string[];
-    kind?: ToolKind;
-    annotations?: ToolAnnotations;
-    _meta?: JsonObject;
-    present?(call: ToolCallPresentationInput): {
-        title?: string;
-        content?: ToolCallContent[];
-        locations?: ToolCallLocation[];
-        _meta?: JsonObject;
-    } | undefined | void | Promise<{
-        title?: string;
-        content?: ToolCallContent[];
-        locations?: ToolCallLocation[];
-        _meta?: JsonObject;
-    } | undefined | void>;
-    execute(args: JsonValue, context: ToolInvocationContext, signal: AbortSignal): Promise<ToolExecutionResult>;
-}>;
-type BeforeToolCallDecision = Readonly<{
-    allow: true;
-}> | Readonly<{
-    allow: false;
-    reason: string;
-}> | Readonly<{
-    interaction: RunInteractionRequest;
-}>;
-type BeforeToolCall = (input: Readonly<{
-    tool: Tool$1;
-    args: JsonValue;
-    context: ToolInvocationContext;
-    signal: AbortSignal;
-    answer?: JsonValue;
-}>) => BeforeToolCallDecision | Promise<BeforeToolCallDecision>;
-type AfterToolCall = (input: Readonly<{
-    tool: Tool$1;
-    result: ToolExecutionResult;
-    context: ToolInvocationContext;
-    signal: AbortSignal;
-}>) => ToolExecutionResult | Promise<ToolExecutionResult>;
-type InvocationSource = "auto" | "implicit" | "external";
-type InvocationCatalogEntry = Readonly<{
-    kind: "phase" | "skill";
-    name: string;
-    description: string;
-    input?: Phase["input"];
-    core?: boolean;
-    disableAutoInvocation: boolean;
-    disableImplicitInvocation: boolean;
-    filePath: string;
-}>;
-type AgentRecord = Readonly<{
-    id: AgentId;
-    metadata?: Metadata;
-    currentConfigToken?: ConfigToken;
-    currentConfigIdentity?: string;
-    createdAt: string;
-    activatedAt?: string;
-    updatedAt: string;
-}>;
-type AgentDeletionRequest = Readonly<{
-    agentId: AgentId;
-    expectedRunIds: readonly RunId[];
-    confirmation: "agent-delete-v1";
 }>;
-type ExecutionToken = Readonly<{
-    runId: RunId;
-    ownerEpoch: number;
-    executionId: ExecutionId;
-}>;
-type ExecutionCheckpoint = Readonly<{
-    codec: string;
-    version: number;
-    data: JsonValue;
-}>;
-type OwnerLease = Readonly<{
-    ownerId: string;
-    token: OwnerToken;
-    epoch: number;
-    expiresAt: string;
-}>;
-type RunClaim = Readonly<{
-    run: RunRecord;
-    execution: ExecutionToken;
-    history: readonly Message[];
-}>;
-type ToolCallReservation = Readonly<{
-    providerToolCallId: string;
-    name: string;
-    args: JsonValue;
-    toolCallId?: ToolCallId;
-    title?: string;
-    kind?: ToolKind;
-    locations?: ToolCallLocation[];
-    content?: ToolCallContent[];
-    _meta?: JsonObject;
-}>;
-type ToolCommit = Readonly<{
-    run: RunRecord;
-    toolCall: ToolCallSnapshot;
-}>;
-type ToolBatchCommit = Readonly<{
-    run: RunRecord;
-    toolCalls: readonly ToolCallSnapshot[];
-}>;
-type EntryPhaseSpec = Readonly<{
-    phase: string;
-    payload?: JsonValue;
-}>;
-type RunRecord = Readonly<{
-    id: RunId;
-    agentId: AgentId;
-    agentSequence: number;
-    readySequence: number;
-    revision: number;
-    state: RunState;
-    input: UserInput;
-    scope?: ScopeRef;
-    cwd?: string;
-    initialMessageId?: MessageId;
-    invalidatedBy?: Readonly<{
-        messageId: MessageId;
-        messageRevision: number;
-    }>;
-    metadata?: Metadata;
-    phasePayload?: JsonValue;
-    entryPhases?: readonly EntryPhaseSpec[];
-    pinnedConfigToken?: ConfigToken;
-    checkpoint?: ExecutionCheckpoint;
-    currentPhaseId?: string;
-    openInteractions?: readonly RunInteraction[];
-    interactionAnswers?: Readonly<Record<string, JsonValue>>;
-    execution?: ExecutionToken;
-    outcome?: Outcome$1;
-    failure?: RunFailure;
-    cancellationReason?: string;
-    createdAt: string;
-    updatedAt: string;
-}>;
-type MessageRevisionResult = Readonly<{
-    message: UserMessage & Readonly<{
-        messageRevision: number;
-    }>;
-    replacementRun: RunRecord;
-    invalidatedRunIds: readonly RunId[];
-    affectedToolCallIds: readonly ToolCallId[];
-    effectDigest?: string;
-}>;
-type RetentionResult = Readonly<{
-    deletedRunIds: readonly RunId[];
-    deletedToolCallIds: readonly ToolCallId[];
-    deletedEventCount: number;
-    retentionFloor: EventCursor;
-    skipped?: "active_consumers" | "no_eligible_events";
-}>;
-type AgentSummary = Readonly<{
-    id: AgentId;
-    metadata?: Metadata;
-    currentConfigIdentity?: string;
-    createdAt: string;
-    activatedAt: string;
-    updatedAt: string;
-}>;
-type RunSummary = Readonly<{
-    id: RunId;
-    agentId: AgentId;
-    agentSequence: number;
-    state: RunState;
-    metadata?: Metadata;
-    createdAt: string;
-    updatedAt: string;
-}>;
-type Page<T, Cursor> = Readonly<{
-    items: readonly T[];
-    next?: Cursor;
-}>;
-type RunSnapshotBase = Readonly<{
-    runId: RunId;
-    agentId: AgentId;
-    agentSequence: number;
-    revision: number;
-    input: UserInput;
-    scope?: ScopeRef;
-    cwd?: string;
-    metadata?: Metadata;
-    /** Effective entry Phase payload the Run started with (defaults filled). */
-    phasePayload?: JsonValue;
-    entryPhases?: readonly EntryPhaseSpec[];
-    messageCount: number;
-    toolCallCount: number;
-    currentPhaseId?: string;
-    createdAt: string;
-    updatedAt: string;
-    cursor: EventCursor;
-}>;
-type RunSnapshot = RunSnapshotBase & (Readonly<{
-    state: "queued" | "running";
-    currentPhaseId?: string;
-    interactions?: readonly RunInteraction[];
-}> | Readonly<{
-    state: "input_required";
-    interactions: readonly RunInteraction[];
-    answers: Readonly<Record<string, JsonValue>>;
-}> | Readonly<{
-    state: "completed";
-    outcome: Outcome$1;
-    output?: AssistantMessage;
-}> | Readonly<{
-    state: "failed";
-    failure: RunFailure;
-}> | Readonly<{
-    state: "cancelled";
-    reason?: string;
-}>);
-type RunBoundary = Readonly<{
-    type: "input_required";
-    interactions: readonly RunInteraction[];
-    answers: Readonly<Record<string, JsonValue>>;
-}> | Readonly<{
-    type: "completed";
-    outcome: Outcome$1;
-    output?: AssistantMessage;
-}> | Readonly<{
-    type: "failed";
-    failure: RunFailure;
-}> | Readonly<{
-    type: "cancelled";
-    reason?: string;
-}>;
-type ConfigResolution = Readonly<{
-    kind: "available";
-    config: AgentConfiguration | ConfigurationSnapshot;
-} | {
-    kind: "deferred";
-    retryAfterMs?: number;
-} | {
-    kind: "unavailable";
-    reason: string;
-}>;
-type ConfigPutResult = Readonly<{
-    kind: "stored";
-    token: string;
-} | {
-    kind: "identity_conflict";
-}>;
-interface ConfigProvider {
-    put(input: {
-        agentId: AgentId;
-        agentMetadata?: Metadata;
-        config: AgentConfiguration | ConfigurationSnapshot;
-        operationId: string;
-        signal: AbortSignal;
-    }): Promise<ConfigPutResult>;
-    resolve(input: {
-        agentId: AgentId;
-        agentMetadata?: Metadata;
-        token: ConfigToken;
-        signal: AbortSignal;
-    }): Promise<ConfigResolution>;
-}
-interface OwnedStore {
-    readonly lease: OwnerLease;
-    reserveAgent(input: {
-        idempotencyKey: string;
-        metadata?: Metadata;
-        configIdentity?: string;
-        historySeed?: HistorySeed;
-    }): Promise<AgentRecord>;
-    activateAgent(agentId: AgentId, configToken?: ConfigToken, configIdentity?: string): Promise<AgentRecord>;
-    updateAgentConfigToken(input: {
-        agentId: AgentId;
-        token: ConfigToken;
-        configIdentity?: string;
-        idempotencyKey: string;
-    }): Promise<AgentRecord>;
-    deleteAgent(input: AgentDeletionRequest): Promise<void>;
-    reviseMessage(input: {
-        agentId: AgentId;
-        messageId: MessageId;
-        expectedMessageRevision: number;
-        content: UserContent;
-        operationId: string;
-        effectDigestConfirmation?: string;
-    }): Promise<MessageRevisionResult>;
-    compact(input?: {
-        now?: string;
-        retentionMs?: number;
-    }): Promise<RetentionResult>;
-    contextStatus(agentId: AgentId, contextWindow: number): Promise<ContextStatus>;
-    contextMessages(agentId: AgentId, recentTokenBudget?: number): Promise<readonly Message[]>;
-    commitContextCompaction(record: ContextCompactionRecord): Promise<ContextCompactionRecord>;
-    createRun(input: {
-        agentId: AgentId;
-        input: UserInput;
-        metadata?: Metadata;
-        scope?: ScopeRef;
-        cwd?: string;
-        phasePayload?: JsonValue;
-        entryPhases?: readonly EntryPhaseSpec[];
-        pinnedConfigToken?: ConfigToken;
-        idempotencyKey: string;
-    }): Promise<RunRecord>;
-    claimRun(input: {
-        runId: RunId;
-        expectedRevision: number;
-        executionId?: ExecutionId;
-        messageId?: MessageId;
-        configToken?: ConfigToken;
-        additionalContexts?: readonly ContextCandidate[];
-    }): Promise<RunClaim>;
-    failQueuedRun(input: {
-        runId: RunId;
-        expectedRevision: number;
-        failure: QueuedRunFailure;
-    }): Promise<RunRecord>;
-    commitPhaseEntered(input: {
-        runId: RunId;
-        execution: ExecutionToken;
-        expectedRevision: number;
-        phaseId: string;
-        visit: number;
-    }): Promise<RunRecord>;
-    commitPhaseOutput(input: {
-        runId: RunId;
-        execution: ExecutionToken;
-        expectedRevision: number;
-        message: AssistantMessage;
-    }): Promise<RunRecord>;
-    commitInputRequired(input: {
-        runId: RunId;
-        execution: ExecutionToken;
-        expectedRevision: number;
-        phase: string;
-        prompt?: AssistantMessage;
-        checkpoint: ExecutionCheckpoint;
-        interactions?: readonly RunInteraction[];
-        interactionAnswers?: Readonly<Record<string, JsonValue>>;
-        pendingToolCallIds?: readonly ToolCallId[];
-    }): Promise<RunRecord>;
-    answerInteraction(input: {
-        runId: RunId;
-        interactionId: string;
-        expectedRevision: number;
-        input?: JsonValue;
-        cancel?: boolean;
-    }): Promise<RunRecord>;
-    commitOutcome(input: {
-        runId: RunId;
-        execution: ExecutionToken;
-        expectedRevision: number;
-        outcome?: Outcome$1;
-        failure?: RunFailure;
-        output?: AssistantMessage;
-    }): Promise<RunRecord>;
-    reserveToolCall(input: {
-        runId: RunId;
-        execution: ExecutionToken;
-        expectedRevision: number;
-        requestMessageId: MessageId;
-        name: string;
-        args: JsonValue;
-        toolCallId?: ToolCallId;
-        providerToolCallId?: string;
-        title?: string;
-        kind?: ToolKind;
-        locations?: ToolCallLocation[];
-        content?: ToolCallContent[];
-        _meta?: JsonObject;
-        model?: ModelRef;
-        usage?: LlmTokenUsage;
-    }): Promise<ToolCommit>;
-    reserveToolCalls(input: {
-        runId: RunId;
-        execution: ExecutionToken;
-        expectedRevision: number;
-        requestMessageId: MessageId;
-        calls: readonly ToolCallReservation[];
-        /** The model response's blocks, so the request message keeps what preceded the Tool Calls. */
-        contentBlocks?: readonly ContentBlock[];
-        model?: ModelRef;
-        usage?: LlmTokenUsage;
-    }): Promise<ToolBatchCommit>;
-    startToolCall(input: {
-        runId: RunId;
-        execution: ExecutionToken;
-        expectedRevision: number;
-        toolCallId: ToolCallId;
-        title?: string;
-        kind?: ToolKind;
-        locations?: ToolCallLocation[];
-        content?: ToolCallContent[];
-        _meta?: JsonObject;
-    }): Promise<ToolCommit>;
-    suspendToolCall(input: {
-        runId: RunId;
-        execution: ExecutionToken;
-        expectedRevision: number;
-        toolCallId: ToolCallId;
-    }): Promise<ToolCommit>;
-    commitToolResult(input: {
-        runId: RunId;
-        execution: ExecutionToken;
-        expectedRevision: number;
-        toolCallId: ToolCallId;
-        result: ToolExecutionResult;
-        state: "completed" | "failed" | "indeterminate";
-        reason?: string;
-        title?: string;
-        kind?: ToolKind;
-        content?: ToolCallContent[];
-        locations?: ToolCallLocation[];
-        rawOutput?: JsonValue;
-        _meta?: JsonObject;
-    }): Promise<ToolCommit>;
-    cancelRun(input: {
-        runId: RunId;
-        expectedRevision?: number;
-        reason?: string;
-        output?: AssistantMessage;
-    }): Promise<RunRecord>;
-    recordToolCall(input: {
-        runId: RunId;
-        execution?: ExecutionToken;
-        update: ToolCall$1 | ToolCallUpdate;
-        external?: boolean;
-        contentIndex?: number;
-    }): Promise<DurableRunEvent>;
-    snapshotRun(runId: RunId): Promise<RunSnapshot>;
-    history(agentId: AgentId): Promise<readonly Message[]>;
-    listAgents(): Promise<readonly AgentRecord[]>;
-    listRuns(input?: {
-        agentId?: AgentId;
-        states?: readonly RunState[];
-    }): Promise<readonly RunRecord[]>;
-    listEvents(input?: {
-        after?: EventCursor;
-    }): Promise<readonly DurableRunEvent[]>;
-    openConsumer(consumerId: string): Promise<ConsumerRegistration>;
-    advanceConsumerCheckpoint(input: {
-        consumerId: string;
-        cursor: EventCursor;
-    }): Promise<void>;
-    renewOwner(leaseMs: number): Promise<OwnerLease>;
-    sealAndReleaseOwner(): Promise<void>;
+/** Everything a phase needs to execute */
+interface PhaseContext {
+    systemPrompt: string;
+    messages: AgentMessage[];
+    /** Phase-filtered tools */
+    tools: Tool[];
+    /** Phase-filtered skills */
+    skills: Skill[];
+    /** Phase machine state */
+    state: PhaseState;
+    /** Identity and dispatch metadata for this phase execution */
+    readonly invocation: PhaseInvocation;
+    /** Durable Run identity for cross-store integrations and idempotent commands. */
+    readonly execution: PhaseExecutionIdentity;
+    /** Additional guideline bullets appended to the system prompt */
+    promptGuidelines?: string[];
+    /** Text to append after the system prompt */
+    appendSystemPrompt?: string;
 }
-interface DurableStore {
-    openOwner(input: {
-        ownerId: string;
-        leaseMs: number;
-    }): Promise<OwnedStore>;
+/** JSON-safe structural defaults declared by a Phase's `input` mapping. */
+type PhaseInput = Readonly<Record<string, JsonValue>>;
+/** JSON-safe option metadata exposed to a host Settings surface. */
+interface SettingsOption {
+    value: string;
+    label: string;
+    description?: string;
+    disabled?: boolean;
 }
-type AgentRuntimeOptions = Readonly<{
-    store: DurableStore;
-    configs?: ConfigProvider;
-    concurrency?: number;
-    bootstrap?: (registry: RuntimeBootstrapRegistry) => void | Promise<void>;
-    host?: ExtensionHost;
-    sessionFiles?: Readonly<{
-        dir: string;
-    }>;
-    /** @internal Private / testing parameter to override retry delay */
-    retryDelayMs?: number;
+interface SettingsBadge {
+    label: string;
+    tone?: "neutral" | "success" | "review" | "danger";
+}
+interface SettingsItem {
+    id: string;
+    title: string;
+    description?: string;
+    badges?: readonly SettingsBadge[];
+}
+type SettingsControl = {
+    type: "boolean";
+    path: string;
+    label: string;
+    description?: string;
+} | {
+    type: "number";
+    path: string;
+    label: string;
+    description?: string;
+    min?: number;
+    max?: number;
+    step?: number;
+    unit?: string;
+    scale?: number;
+} | {
+    type: "select";
+    path: string;
+    label: string;
+    description?: string;
+    options: readonly SettingsOption[];
+} | {
+    type: "text";
+    path: string;
+    label: string;
+    description?: string;
+    placeholder?: string;
+    format?: "string" | "string-array" | "key-value";
+    multiline?: boolean;
+} | {
+    type: "collection";
+    path: string;
+    label: string;
+    description?: string;
+    items: readonly SettingsItem[];
+    fields: readonly SettingsControl[];
+    add?: {
+        label: string;
+        idLabel?: string;
+        fields: readonly SettingsControl[];
+    };
+    removeLabel?: string;
+};
+interface SettingsSection {
+    id: string;
+    title: string;
+    description?: string;
+    controls: readonly SettingsControl[];
+}
+/** Declarative, host-neutral Settings surface. */
+interface SettingsDefinition {
+    description?: string;
+    sections: readonly SettingsSection[];
+}
+/**
+ * Loaded Phase object
+ */
+interface Phase {
+    /** Unique phase identity and display name. */
+    name: string;
+    /** Rowan-owned built-in Phase; built-ins are never filtered or disabled. */
+    core?: boolean;
+    /** Description */
+    description: string;
+    /** Restricted tools (undefined = all tools available) */
+    tools?: string[];
+    /** Skills bundled directly inside this phase directory. Inline phases may omit this (equivalent to []). */
+    skills?: Skill[];
+    /** Forced next phase */
+    target?: string;
+    /** Additional system-prompt guidance while this Phase is in the auto route catalog. */
+    promptGuidelines?: string[];
+    /** Structural JSON-safe input defaults */
+    input?: PhaseInput;
+    /** If true, phase gets a fresh context when executed in parallel */
+    isolated?: boolean;
+    /** Path to PHASE.md file */
+    filePath: string;
+    /** Phase directory path */
+    baseDir: string;
+    /** PHASE.md body content */
+    content: string;
+    /** Model override for this phase (resolved from frontmatter) */
+    model?: ModelRef;
+    /** Do not automatically inject this Phase into the model route catalog/context. */
+    disableAutoInvocation?: boolean;
+    /** Do not expose this Phase to direct user invocation. */
+    disableImplicitInvocation?: boolean;
+    metadata?: Readonly<Record<string, JsonValue>>;
+    /** ExtensionAPI factory function used for registration or programmatic execution. */
+    factory?: (api: ExtensionAPI) => Promise<void>;
+    /** Direct run function */
+    run?: (context: PhaseContext, execution: PhaseExecution) => Promise<PhaseOutput | void>;
+}
+/**
+ * Phase registry containing all loaded phases
+ */
+interface PhaseRegistry {
+    /** Map of phase name to Phase object */
+    phases: Map<string, Phase>;
+    /** Entry phase name (null until Agent applies its default phase) */
+    entryPhaseId: string | null;
+}
+
+type ResourceKind = "agent" | "tool" | "skill" | "phase";
+type ResourceSourceId = string;
+/** Rowan-native contribution aliases. Hosts may adapt their domain handlers to
+ * these existing Tool/Phase lifecycles without importing host Scope types. */
+type ToolContribution = Tool$1;
+type PhaseContribution = Phase;
+type ResourceView = Readonly<{
+    agents: readonly ResourceSourceId[];
+    tools: readonly ResourceSourceId[];
+    skills: readonly ResourceSourceId[];
+    phases: readonly ResourceSourceId[];
 }>;
-type DurableConsumer = Readonly<{
-    caughtUp: Promise<void>;
-    done: Promise<void>;
-    stop(): void;
+type ResourceRef = Readonly<{
+    kind: ResourceKind;
+    sourceId: ResourceSourceId;
+    name: string;
 }>;
-interface AgentRun {
-    readonly id: RunId;
-    snapshot(): Promise<RunSnapshot>;
-    observe(options?: {
-        after?: EventCursor;
-        signal?: AbortSignal;
-    }): AsyncIterable<RunEvent>;
-    wait(options?: {
-        signal?: AbortSignal;
-    }): Promise<RunBoundary>;
-    respondInteraction(input: {
-        interactionId: string;
-        input?: JsonValue;
-        cancel?: boolean;
-    }): Promise<void>;
-    cancel(reason?: string): Promise<RunBoundary>;
+type ResourceDiagnostic = Readonly<{
+    kind: "invalid" | "missing" | "collision";
+    sourceId: ResourceSourceId;
+    message: string;
+    path?: string;
+}>;
+type LoadResult = Readonly<{
+    revision: string;
+    registered: readonly ResourceRef[];
+    skipped: readonly ResourceDiagnostic[];
+}>;
+type LoadInput<T> = Readonly<{
+    sourceId: ResourceSourceId;
+    directory?: string;
+    values?: readonly T[];
+}>;
+type ResolvedResourceView = Readonly<{
+    agents: readonly AgentDefinition[];
+    tools: readonly Tool$1[];
+    skills: readonly Skill[];
+    phases: readonly Phase[];
+    revisions: Readonly<Record<ResourceKind, readonly string[]>>;
+    refs: Readonly<Record<ResourceKind, readonly ResourceRef[]>>;
+}>;
+type ResourceRegistryErrorCode = "invalid_source_id" | "invalid_resource_name" | "resource_collision" | "resource_input_missing" | "resource_directory_not_supported" | "unknown_resource_source" | "implicit_source_protected";
+declare class ResourceRegistryError extends Error {
+    readonly code: ResourceRegistryErrorCode;
+    constructor(code: ResourceRegistryErrorCode, message: string);
+}
+type RegistryValue = AgentDefinition | Tool$1 | Skill | Phase;
+/**
+ * Runtime Resource Registry source transaction and view resolver.
+ *
+ * Directory normalization is intentionally added by the typed loader slice;
+ * this first module owns only the atomic source/revision/collision semantics.
+ */
+declare class ResourceRegistry {
+    private readonly sources;
+    /** Sources registered by the bootstrap boundary (currently Extensions). */
+    private readonly implicitSources;
+    private revisionSequence;
+    loadAgents(input: LoadInput<AgentDefinition>): Promise<LoadResult>;
+    loadSkills(input: LoadInput<Skill>): Promise<LoadResult>;
+    loadPhases(input: LoadInput<Phase>): Promise<LoadResult>;
+    loadTools(input: Readonly<{
+        sourceId: ResourceSourceId;
+        values: readonly ToolContribution[];
+    }>): Promise<LoadResult>;
+    unload(input: Readonly<{
+        kind: ResourceKind;
+        sourceId: ResourceSourceId;
+    }>): Promise<LoadResult>;
+    resolveView(view: ResourceView): ResolvedResourceView;
+    /** Mark one already-loaded source as implicit for every Resource View. */
+    protected markImplicit(kind: ResourceKind, sourceId: ResourceSourceId): void;
+    /** Bootstrap-only helper for replacing an implicit contribution source. */
+    protected replaceImplicit<T extends RegistryValue>(kind: ResourceKind, sourceId: ResourceSourceId, values: readonly T[]): Promise<LoadResult>;
+    protected hasImplicit(kind: ResourceKind, sourceId: ResourceSourceId): boolean;
+    private withImplicit;
+    private collect;
+    private commit;
+    private resolveKind;
+    private resolveRevisions;
+    private resolveRefs;
+    private sourcesFor;
+    private nextRevision;
+}
+
+declare class InMemoryExtensionHost implements ExtensionHost {
+    private readonly configs;
+    private readonly agentState;
+    private readonly globalState;
+    private readonly listeners;
+    extendApi?(extensionId: string): HostApiExtension | undefined;
+    constructor(options?: {
+        configs?: Record<string, Record<string, JsonObject>>;
+        agentState?: Record<string, Record<string, Record<string, JsonValue>>>;
+        globalState?: Record<string, Record<string, JsonValue>>;
+        extendApi?: (extensionId: string) => HostApiExtension | undefined;
+    });
+    setConfig(extensionId: string, config: JsonObject | null, scope?: ScopeRef): void;
+    getConfig(extensionId: string, scope?: ScopeRef): JsonObject | null;
+    onConfigChanged(listener: (extensionId: string, scope: ScopeRef) => void): () => void;
+    notifyConfigChanged(extensionId: string, scope?: ScopeRef): void;
+    getAgentState(extensionId: string, agentId: string, key: string): JsonValue | undefined;
+    setAgentState(extensionId: string, agentId: string, key: string, value: JsonValue): void;
+    deleteAgentState(extensionId: string, agentId: string, key: string): void;
+    getGlobalState(extensionId: string, key: string): JsonValue | undefined;
+    setGlobalState(extensionId: string, key: string, value: JsonValue): void;
+    deleteGlobalState(extensionId: string, key: string): void;
 }
-interface AgentRuntime$1 {
+
+/** The Resource Source an Extension registration lands in: Global (`[]`) is `rowan.extensions`, any other Scope `rowan.extensions:<scopeToKey(scope)>`. */
+declare function extensionSourceId(scope?: ScopeRef): string;
+type ExtensionRunnerOptions = {
+    entryPhaseId?: string | null;
+    cwd?: string;
+    host?: ExtensionHost;
+};
+/**
+ * Manages extensions and provides hooks for the agent loop.
+ *
+ * Features:
+ * - Per-extension tracking (handlers, tools, phases)
+ * - Shared runtime with lifecycle protection (invalidate/assertActive)
+ * - Error listener pattern for structured error handling
+ * - Direct hook API and extension-loaded hook API
+ * - Tool registration for LLM-callable tools
+ * - EventBus for inter-extension communication
+ *
+ * @example
+ * ```ts
+ * const runner = createExtensionRunner();
+ *
+ * // Direct hook registration
+ * const unsub = runner.on("before_tool_call", (event) => {
+ *   return { allow: false, reason: "Blocked" };
+ * });
+ *
+ * // Error handling
+ * runner.onError((error) => {
+ *   console.error(`Extension error in ${error.extensionPath}:`, error.error);
+ * });
+ *
+ * // Load extensions
+ * await runner.loadExtensions(extensions);
+ * runner.bind();
+ * ```
+ */
+declare class ExtensionRunner {
+    readonly hooks: HooksManager;
+    readonly runtime: ExtensionRuntime;
+    readonly events: EventBus;
     readonly host: ExtensionHost;
-    loadAgents(input: LoadInput<AgentDefinition>): Promise<LoadResult>;
-    loadSkills(input: LoadInput<Skill>): Promise<LoadResult>;
-    loadPhases(input: LoadInput<Phase>): Promise<LoadResult>;
-    loadTools(input: Readonly<{
-        sourceId: string;
-        values: readonly Tool$1[];
-    }>): Promise<LoadResult>;
-    unload(input: Readonly<{
-        kind: ResourceKind;
-        sourceId: string;
-    }>): Promise<LoadResult>;
-    createAgent(config: AgentConfiguration, options?: {
-        idempotencyKey?: string;
-        metadata?: Metadata;
-        historySeed?: HistorySeed;
-    }): Promise<AgentId>;
-    updateAgentConfig(agentId: AgentId, config: AgentConfiguration, options: {
-        idempotencyKey: string;
-    }): Promise<void>;
-    deleteAgent(input: AgentDeletionRequest): Promise<void>;
-    revise(agentId: AgentId, input: {
-        messageId: MessageId;
-        expectedMessageRevision: number;
-        content: UserContent;
-        operationId: string;
-        effectDigestConfirmation?: string;
-    }): Promise<MessageRevisionResult>;
-    compact(input?: {
-        now?: string;
-        retentionMs?: number;
-    }): Promise<RetentionResult>;
-    start(agentId: AgentId, input: UserInput, options: {
-        idempotencyKey: string;
-        metadata?: Metadata;
-        scope?: ScopeRef;
-        cwd?: string;
-        phasePayload?: JsonValue;
-        entryPhases?: ReadonlyArray<EntryPhaseSpec>;
-    }): Promise<AgentRun>;
-    run(runId: RunId): AgentRun;
-    contextStatus(agentId: AgentId, options?: {
-        contextWindow?: number;
-    }): Promise<ContextStatus>;
-    compactContext(agentId: AgentId, options?: {
-        input?: UserInput;
-        instructions?: string;
-        idempotencyKey?: string;
-    }): Promise<AgentRun>;
-    runPhase(agentId: AgentId, options: {
-        phase: string;
-        payload?: JsonValue;
-        input?: UserInput;
-        yieldToInput?: boolean;
-        idempotencyKey?: string;
-    }): Promise<AgentRun>;
-    listInvocations(agentId: AgentId, options: {
-        source: InvocationSource;
-    }): Promise<readonly InvocationCatalogEntry[]>;
-    history(agentId: AgentId): Promise<readonly Message[]>;
-    listAgents(input?: {
-        after?: AgentListCursor;
-        limit?: number;
-    }): Promise<Page<AgentSummary, AgentListCursor>>;
-    listRuns(input?: {
-        agentId?: AgentId;
-        states?: readonly RunState[];
-        after?: RunListCursor;
-        limit?: number;
-    }): Promise<Page<RunSummary, RunListCursor>>;
-    consume(input: {
-        consumerId: string;
-        signal: AbortSignal;
-        onEvent(event: DurableRunEvent, context: Readonly<{
-            signal: AbortSignal;
-        }>): void | Promise<void>;
-    }): Promise<DurableConsumer>;
-    listCapabilities(): readonly ExtensionCapability[];
+    private readonly cwd;
+    private readonly abortController;
+    private _idle;
+    private readonly extensions;
+    private readonly runState;
+    private readonly configChangeListeners;
+    private readonly hostUnsubscribers;
+    private readonly phases;
+    private _phaseCache;
+    private readonly skills;
+    private readonly pendingProviders;
+    private bound;
+    private readonly errorListeners;
+    private readonly capabilityListeners;
+    private readonly resourceChangeListeners;
+    /** Current agent context — set by the agent before each phase */
+    currentContext?: AgentContext;
+    constructor(options?: ExtensionRunnerOptions);
+    /** Whether the agent is currently idle (not streaming). */
+    get isIdle(): boolean;
+    /** Set idle state — called by the agent loop. */
+    setIdle(idle: boolean): void;
+    /** Abort signal for the current runner instance. */
+    get signal(): AbortSignal;
+    /** Abort the current runner operation. */
+    abort(): void;
+    /**
+     * Register an error listener.
+     * Returns an unsubscribe function.
+     */
+    onError(listener: ExtensionErrorListener): () => void;
+    /**
+     * Emit a structured extension error to all listeners.
+     */
+    emitError(error: ExtensionError): void;
+    /**
+     * Mark all extension contexts as stale.
+     * After calling this, any captured ExtensionAPI or ExtensionContext will throw
+     * on use. Used during runtime replacement or reload.
+     */
+    invalidate(message?: string): void;
+    /**
+     * Subscribe to a specific hook event type.
+     * Returns an unsubscribe function.
+     *
+     * @example
+     * ```ts
+     * const unsub = runner.on("before_tool_call", (event) => {
+     *   return { allow: false, reason: "Blocked" };
+     * });
+     * unsub(); // Cancel subscription
+     * ```
+     */
+    on<K extends HookEventType>(type: K, handler: HookHandler<K>): () => void;
+    /**
+     * Load and initialize extensions.
+     * Creates Extension tracking objects and calls each factory with an ExtensionAPI.
+     */
+    loadExtensions(extensions: LoadedExtension[]): Promise<void>;
+    /** Dispose all active Extensions in reverse activation order. */
+    close(): Promise<void>;
+    get extensionHost(): ExtensionHost;
+    notifyConfigChanged(extensionId: string, scope: ScopeRef): Promise<void>;
+    getRunState(runId: string, extensionId: string, key: string): JsonValue | undefined;
+    setRunState(runId: string, extensionId: string, key: string, value: JsonValue): void;
+    deleteRunState(runId: string, extensionId: string, key: string): void;
+    dropRunState(runId: string): void;
+    /** Get all registered tools from all extensions. */
+    getAllRegisteredTools(): RegisteredTool[];
+    /**
+     * Get a tool definition by name. Returns undefined if not found.
+     */
+    getToolDefinition(toolName: string): RegisteredTool["definition"] | undefined;
+    /** Get all contributed capabilities across all extensions. */
+    getCapabilities(): readonly ExtensionCapability[];
+    /**
+     * Subscribe to capability changes (contributions added, removed, or extensions disposed).
+     * Returns an unsubscribe function.
+     */
     onCapabilitiesChanged(listener: (capabilities: readonly ExtensionCapability[]) => void): () => void;
+    /**
+     * Subscribe to resource changes (tools, phases, skills registered, unregistered, or disposed).
+     * Used by RuntimeBootstrapRegistry to re-commit implicit sources after activation.
+     */
+    onResourceChange(listener: (kind: "tool" | "phase" | "skill") => Promise<void> | void): () => void;
+    private notifyResourceChange;
     triggerUiAction(event: {
         contributionId: string;
         actionId: string;
         scope?: ScopeRef;
-    }): void;
-    close(): Promise<void>;
-}
-type ConsumerRegistration = Readonly<{
-    cursor?: EventCursor;
-    waterline: EventCursor;
-}>;
-
-interface ExtensionStateStore {
-    get(key: string): Promise<JsonValue | undefined>;
-    set(key: string, value: JsonValue): Promise<void>;
-    delete(key: string): Promise<void>;
-}
-interface ExtensionHost {
-    getConfig(extensionId: string, scope?: ScopeRef): Promise<JsonObject | null> | JsonObject | null;
-    onConfigChanged?(listener: (extensionId: string, scope: ScopeRef) => void): (() => void) | void;
-    getAgentState(extensionId: string, agentId: string, key: string): Promise<JsonValue | undefined> | JsonValue | undefined;
-    setAgentState(extensionId: string, agentId: string, key: string, value: JsonValue): Promise<void> | void;
-    deleteAgentState(extensionId: string, agentId: string, key: string): Promise<void> | void;
-    getGlobalState(extensionId: string, key: string): Promise<JsonValue | undefined> | JsonValue | undefined;
-    setGlobalState(extensionId: string, key: string, value: JsonValue): Promise<void> | void;
-    deleteGlobalState(extensionId: string, key: string): Promise<void> | void;
+    }): void;
+    getPhase(name: string): Phase | undefined;
+    getPhases(): Phase[];
+    getRegisteredPhases(): readonly RegisteredPhase[];
+    createPhaseRegistry(input?: {
+        entryPhaseId?: string | null;
+    }): PhaseRegistry;
+    /** Adapt an extension RegisteredPhase to the core Phase type. */
+    adaptToPhase(reg: RegisteredPhase): Phase;
+    getSkills(): Skill[];
+    getRegisteredSkills(): readonly RegisteredSkill[];
+    /**
+     * Bind the runner — flushes pending provider registrations and
+     * replaces runtime stubs with real implementations.
+     */
+    bind(): void;
+    /**
+     * Generic emit — fire-and-forget for any event type.
+     */
+    emit<K extends HookEventType>(eventType: K, event: Parameters<HookHandler<K>>[0]): Promise<void>;
+    /**
+     * Unified hook emission — returns the first non-undefined result.
+     */
+    private emitHook;
+    emitBeforePhase(phaseId: string, input: PhaseContext): Promise<{
+        abort?: any;
+        skip?: any;
+        input?: PhaseContext;
+    }>;
+    emitAfterPhase(phaseId: string, output: PhaseOutput): Promise<{
+        abort?: any;
+        retry?: PhaseContext;
+        output?: PhaseOutput;
+    }>;
+    emitBeforePrompt(phaseId: string, input: PhaseContext): Promise<PhaseContext>;
+    emitRunStart(event: {
+        runId: string;
+        agentId: string;
+        metadata: Readonly<Record<string, unknown>>;
+        turn: JsonObject;
+    }): Promise<void>;
+    emitRunEnd(event: {
+        runId: string;
+        agentId: string;
+        outcome: unknown;
+    }): Promise<void>;
+    emitBeforeToolCall(tool: Tool, args: unknown, context?: {
+        runId?: string;
+        agentId?: string;
+        toolCallId?: string;
+        metadata?: Readonly<Record<string, unknown>>;
+        agentMetadata?: Readonly<Record<string, unknown>>;
+        answer?: unknown;
+        scope?: ScopeRef;
+        turn?: JsonObject;
+        phase?: ToolCallPhase;
+    }): Promise<BeforeToolCallResult>;
+    emitAfterToolCall(tool: Tool, result: ToolResult, context?: {
+        runId?: string;
+        agentId?: string;
+        toolCallId?: string;
+        metadata?: Readonly<Record<string, unknown>>;
+        scope?: ScopeRef;
+        turn?: JsonObject;
+        phase?: ToolCallPhase;
+    }): Promise<ToolResult>;
     /**
-     * Called once per extension load. The returned namespaces are merged into that extension's `api`
-     * (a name already used by Rowan's own API is an error). `dispose` runs when the extension is
-     * unloaded, reloaded or fails activation, so the host can drop everything that extension registered.
+     * Create an ExtensionAPI for a specific extension.
+     * Registration methods write to the extension tracking object.
+     * Action methods delegate to the shared runtime.
      */
-    extendApi?(extensionId: string): HostApiExtension | undefined;
-}
-interface HostApiExtension {
-    readonly namespaces: Readonly<Record<string, unknown>>;
-    dispose?(): void;
-}
-type ExtensionToolContribution = {
-    kind: "tool";
-    name: string;
-    description: string;
-};
-type ExtensionCapabilityContribution = ExtensionToolContribution;
-type ExtensionCapability = {
-    extensionId: string;
-    kind: "tool";
-    name: string;
-    description: string;
-};
-interface SourceInfo {
-    source: string;
-    baseDir?: string;
-    displayName?: string;
-}
-/** A loaded directory Bundle used by an extension. */
-type PhaseDefinition = Phase;
-/** Register a Phase by directory path or Phase object; PHASE.md and direct child Skills are loaded atomically when a path is supplied. */
-type PhaseRegistration = string | Phase;
-type RegisteredPhase = {
-    definition: PhaseDefinition;
-    source: {
-        extensionPath: string;
-    };
-    sourceId: string;
-    scope?: ScopeRef;
-};
-/** Register a Skill directory (containing SKILL.md) or a Skill object. Registering an existing name replaces it. */
-type SkillRegistration = string | Skill;
-type RegisteredSkill = {
-    definition: Skill;
-    source: {
-        extensionPath: string;
-    };
-    sourceId: string;
-    scope?: ScopeRef;
-};
-/**
- * Tool definition for registering LLM-callable tools via `api.tools.register()`.
- *
- * @example
- * ```typescript
- * api.tools.register({
- *   name: "search_docs",
- *   description: "Search documentation",
- *   parameters: { type: "object", properties: { query: { type: "string" } } },
- *   execute: async (args, ctx) => {
- *     return { content: [{ type: "text", text: "result" }] };
- *   },
- * });
- * ```
- */
-interface ToolDefinition {
-    /** Tool name (used in LLM tool calls) */
-    name: string;
-    /** Description for LLM */
-    description: string;
-    /** Parameter schema (JSON Schema) */
-    parameters: Record<string, unknown>;
-    /** Optional: one-line snippet shown in the system prompt tool list */
-    promptSnippet?: string;
-    /** Optional: additional guidelines appended to system prompt */
-    promptGuidelines?: string[];
-    kind?: ToolKind;
-    annotations?: ToolAnnotations;
-    _meta?: JsonObject;
-    present?: (call: {
-        status: ToolCallStatus;
-        args: JsonValue;
-        progress?: ToolProgress;
-        result?: ToolExecutionResult;
-    }) => {
-        title?: string;
-        content?: ToolCallContent[];
-        locations?: ToolCallLocation[];
-        _meta?: JsonObject;
-    } | undefined | void | Promise<{
-        title?: string;
-        content?: ToolCallContent[];
-        locations?: ToolCallLocation[];
-        _meta?: JsonObject;
-    } | undefined | void>;
-    /** Execute the tool */
-    execute: (args: unknown, context: ToolInvocationContext, signal?: AbortSignal) => Promise<ToolExecutionResult>;
-    /** Optional: per-tool execution mode override */
-    executionMode?: "sequential" | "parallel";
+    private createExtensionAPI;
+    private registerTool;
+    private unregisterTool;
+    private contributeCapability;
+    private notifyCapabilitiesChanged;
+    private registerPhase;
+    private registerPhaseDefinition;
+    private unregisterPhase;
+    private loadRegisteredPhase;
+    private registerSkill;
+    private registerSkillDefinition;
+    private unregisterSkill;
+    private loadRegisteredSkill;
+    private registerProvider;
+    private unregisterProvider;
+    private flushPendingProviders;
+    private getRegisteredPhase;
+    private collectRegisteredPhases;
+    private rollbackExtension;
+    private disposeExtension;
 }
 
-/**
- * Registered tool with source metadata.
- */
-interface RegisteredTool {
-    definition: ToolDefinition;
-    sourceInfo: SourceInfo;
-    sourceId: string;
-    scope?: ScopeRef;
-}
-/**
- * Structured extension error with attribution.
- */
-interface ExtensionError {
-    /** Path of the extension that caused the error */
-    extensionPath: string;
-    /** Event or operation that caused the error */
-    event: string;
-    /** Error message */
-    error: string;
-    /** Optional stack trace */
-    stack?: string;
-}
-/** Error listener callback type. */
-type ExtensionErrorListener = (error: ExtensionError) => void;
-type ExecOptions = {
-    /** Working directory for the command. Defaults to cwd passed to runtime. */
-    cwd?: string;
-    /** Environment variables to add/override. */
-    env?: Record<string, string>;
-    /** Timeout in milliseconds. */
-    timeout?: number;
-    /** AbortSignal for cancellation. */
-    signal?: AbortSignal;
+type ToolCallPresentationInput = Readonly<{
+    status: ToolCallStatus;
+    args: JsonValue$1;
+    progress?: ToolProgress;
+    result?: ToolExecutionResult;
+}>;
+type ToolCallPresentationOutput = {
+    title?: string;
+    content?: ToolCallContent[];
+    locations?: ToolCallLocation[];
+    _meta?: JsonObject$1;
 };
-type ExecResult = {
-    exitCode: number;
-    stdout: string;
-    stderr: string;
+type ToolCallMergeTarget = {
+    title?: string;
+    kind?: ToolKind;
+    status?: ToolCallStatus;
+    locations?: ToolCallLocation[];
+    content?: ToolCallContent[];
+    rawInput?: JsonValue$1;
+    rawOutput?: JsonValue$1;
+    _meta?: JsonObject$1;
 };
-/**
- * Shared runtime state created by loader, used during registration and runtime.
- * All ExtensionAPI instances reference this shared state.
- *
- * It only owns the lifetime guard shared by captured Extension API objects.
- */
-interface ExtensionRuntime {
-    /** Throws when this extension instance is stale after runtime replacement. */
-    assertActive: () => void;
-    /** Marks this extension instance as stale after runtime replacement or reload. */
-    invalidate: (message?: string) => void;
-}
-/**
- * Result of loading extensions from filesystem.
- * The runner takes these and creates Extension tracking objects.
- */
-type LoadExtensionsResult = {
-    extensions: LoadedExtension[];
-    errors: Array<{
-        path: string;
-        error: string;
-    }>;
+type ToolCallMergePatch = {
+    title?: string;
+    kind?: ToolKind;
+    status?: ToolCallStatus;
+    locations?: ToolCallLocation[];
+    content?: ToolCallContent[];
+    rawInput?: JsonValue$1;
+    rawOutput?: JsonValue$1;
+    _meta?: JsonObject$1;
 };
-/**
- * Pre-initialization extension form — factory + metadata.
- * Runner.loadExtensions() calls the factory and creates the full Extension object.
- */
-interface LoadedExtension {
-    id?: string;
+declare function mergeToolCall<T extends ToolCallMergeTarget>(target: T, patch: ToolCallMergePatch): T;
+
+type ExtensionContribution = LoadedExtension;
+type ExtensionLoadInput = LoadInput<ExtensionContribution>;
+type ExtensionActivationError = Readonly<{
     path: string;
-    name: string;
-    factory: ExtensionFactory;
-    manifest?: ExtensionManifest;
+    error: string;
+}>;
+type ExtensionActivationResult = Readonly<{
+    active: readonly string[];
+    errors: readonly ExtensionActivationError[];
+    revision?: string;
+    registered?: readonly string[];
+    skipped?: readonly ResourceDiagnostic[];
+}>;
+type ExtensionLifetimeErrorCode = "extensions_frozen" | "extensions_closed";
+declare class ExtensionLifetimeError extends Error {
+    readonly code: ExtensionLifetimeErrorCode;
+    constructor(code: ExtensionLifetimeErrorCode, message: string);
 }
-/** Extension manifest from package.json `rowan` field. */
-interface ExtensionManifest {
-    id?: string;
-    entry?: string;
-    name?: string;
+/** Runtime-global Extension activation and lifetime boundary. */
+declare class RuntimeExtensionLifetime {
+    private readonly runner;
+    private frozen;
+    private closed;
+    constructor(options?: {
+        cwd?: string;
+        host?: ExtensionHost;
+    });
+    activate(extensions: readonly LoadedExtension[]): Promise<ExtensionActivationResult>;
+    tools(): readonly RegisteredTool[];
+    phases(): readonly Phase[];
+    registeredPhases(): readonly RegisteredPhase[];
+    skills(): readonly Skill[];
+    registeredSkills(): readonly RegisteredSkill[];
+    get extensionRunner(): ExtensionRunner;
+    get extensionHost(): ExtensionHost;
+    onResourceChange(listener: (kind: "tool" | "phase" | "skill") => Promise<void> | void): () => void;
+    dropRunState(runId: string): void;
+    close(): Promise<void>;
 }
-
-/**
- * Extension API object passed to extension factory function.
- *
- * @example
- * ```typescript
- * export default function(api: ExtensionAPI) {
- *   // api provides all extension APIs
- * }
- * ```
- */
-interface ExtensionAPI {
-    /** Hook events — subscribe or unsubscribe. */
-    hooks: {
-        /**
-         * Subscribe to a hook event.
-         *
-         * @param eventType - Hook type, e.g. "before_tool_call"
-         * @param handler - Hook handler, can return result to modify behavior
-         */
-        on<K extends HookEventType>(eventType: K, handler: HookHandler<K>): void;
-        /** Unsubscribe from a hook event. */
-        off<K extends HookEventType>(eventType: K, handler: HookHandler<K>): void;
-    };
-    /** Extension configuration — read own layered config or listen for changes. */
-    config: {
-        /** Get the extension's own effective configuration block. */
-        get(scope?: ScopeRef): Promise<JsonObject | null>;
-        /** Listen for configuration changes for a scope. */
-        changed(handler: (scope: ScopeRef) => void): void;
-    };
-    /** Extension state — scoped to run (in-memory) or agent (durable) or global (durable). */
-    state: {
-        /** Run-scoped in-memory state; dropped when the Run ends. */
-        run(runId: string): ExtensionStateStore;
-        /** Agent-scoped durable state; persisted with the Agent record. */
-        agent(agentId: string): ExtensionStateStore;
-        /** Extension-scoped durable state; survives process restarts. */
-        global(): ExtensionStateStore;
-    };
-    /** Tool capabilities — register and unregister custom tools. */
-    tools: {
-        /** Register a custom LLM-callable tool. */
-        register(tool: ToolDefinition, scope?: ScopeRef): Promise<void>;
-        /** Unregister a previously registered tool by name. */
-        unregister(toolName: string, scope?: ScopeRef): Promise<void>;
-    };
-    /** Capability contributions — advertise tools or features to the host. */
-    capabilities: {
-        /** Contribute a capability to the host. Returns a disposer to remove the contribution. */
-        contribute(contribution: ExtensionCapabilityContribution): () => void;
-    };
-    /** Model provider registration. */
-    providers: {
-        /** Register a model provider. Registering with an existing id replaces it. */
-        register(config: _rowan_agent_models.ProviderConfig): void;
-        /** Unregister a model provider by id. */
-        unregister(id: string): void;
-    };
-    /** Phase execution capabilities — provides Phase In/Out, phase identity, phase routing, and registration. */
-    phases: {
-        /** Register a Phase directory bundle or Phase object. */
-        register(phase: PhaseRegistration, scope?: ScopeRef): Promise<void>;
-        /** Unregister a previously registered phase by name. */
-        unregister(phaseName: string, scope?: ScopeRef): Promise<void> | void;
-        /** Phase In: get payload from previous phase */
-        getPayload(): unknown;
-        /** Phase Out: set payload for next phase */
-        setPayload(payload: unknown): void;
-        /** Phase Out: set outcome message */
-        setMessage(message: string): void;
-        /** Get current phase name */
-        getCurrentPhase(): string;
-        /** Set next phase (lower priority than PHASE.md target) */
-        setNextPhase(phaseName: string): void;
-        /** Get the next phase set by setNextPhase */
-        getNextPhase(): string | undefined;
-        /** Get the message set by setMessage */
-        getMessage(): string | undefined;
-    };
-    /** Skill capabilities — register and unregister standalone skills. */
-    skills: {
-        /** Register a Skill directory (containing SKILL.md) or a Skill object. Registering an existing name replaces it. */
-        register(skill: SkillRegistration, scope?: ScopeRef): Promise<void>;
-        /** Unregister a previously registered Skill by name. */
-        unregister(skillName: string, scope?: ScopeRef): Promise<void> | void;
-    };
-    /** Extension manifest from package.json `rowan` field. */
-    manifest?: ExtensionManifest;
-    /** Utility functions. */
-    utils: ExtensionUtils;
-    /** Runtime context — cwd, signal, exec, message access, etc. */
-    context: ExtensionContext;
-    /** Shared event bus for inter-extension communication. */
-    events: EventBus;
+/** Bootstrap-only Registry facade; its Extension method disappears after init. */
+declare class RuntimeBootstrapRegistry extends ResourceRegistry {
+    private readonly extensions;
+    private readonly knownSources;
+    private commitQueue;
+    constructor(extensions?: RuntimeExtensionLifetime);
+    private recommit;
+    get extensionHost(): ExtensionHost;
+    /** Install Rowan-owned implicit resources before any host source is read. */
+    ensureCoreResources(): Promise<void>;
+    loadExtensions(input: readonly LoadedExtension[] | ExtensionLoadInput): Promise<ExtensionActivationResult>;
+    get extensionRunner(): ExtensionRunner;
+    get extensionTools(): readonly RegisteredTool[];
+    get extensionPhases(): readonly Phase[];
+    closeExtensions(): Promise<void>;
 }
-/**
- * Extension factory function.
- * Receives ExtensionAPI for registering hooks, phases, and providers.
- */
-type ExtensionDisposer = () => void | Promise<void>;
-type ExtensionFactoryResult = void | ExtensionDisposer;
-type ExtensionFactory = (api: ExtensionAPI) => ExtensionFactoryResult | Promise<ExtensionFactoryResult>;
 
-type PhaseStatusState = "running" | "completed";
-/** Normalized status event exposed to Runtime consumers. */
-type PhaseStatus = Readonly<{
-    state: PhaseStatusState;
-    /** Stable consumer-facing status identifier, e.g. `compacting`. */
-    kind: string;
-    /** Optional human-readable detail for UI/status consumers. */
-    message?: string;
-    /** Structured status payload. */
-    payload?: unknown;
+type DefinitionLayer = Readonly<{
+    description?: string;
+    prompt?: string;
+    model?: ModelRef;
+    tools?: readonly string[];
+    skills?: readonly string[];
+    phases?: PhaseRegistrySelection;
+}>;
+type AgentConfiguration = Readonly<{
+    identity: string;
+    definition: Readonly<{
+        name: string;
+        layer?: DefinitionLayer;
+    }>;
+    resourceView: ResourceView;
+    contexts?: readonly ContextCandidate[];
+    /** Trusted Host-owned Contexts rendered as durable user messages. */
+    additionalContexts?: readonly ContextCandidate[];
+    cwd?: string;
+    maxAttempts?: number;
+    model: ModelConfig | ModelRef;
+    stream?: StreamFn;
+}>;
+type ConfigurationSnapshot = Readonly<{
+    identity: string;
+    definition: AgentDefinition;
+    resources: Readonly<{
+        tools: readonly Tool$1[];
+        skills: readonly Skill[];
+        phases?: PhaseRegistry;
+        revisions: Readonly<Record<ResourceKind, readonly string[]>>;
+        refs: Readonly<Record<ResourceKind, readonly ResourceRef[]>>;
+    }>;
+    contexts: readonly ContextCandidate[];
+    additionalContexts: readonly ContextCandidate[];
+    resourceView: ResourceView;
+    cwd?: string;
+    maxAttempts?: number;
+    model: ModelConfig | ModelRef;
+    stream?: StreamFn;
+}>;
+/** Resolve one Definition request into one immutable, source-qualified snapshot. */
+declare function resolveConfigurationSnapshot(registry: ResourceRegistry, input: AgentConfiguration): ConfigurationSnapshot;
+/** Whether one stored configuration is already a resolved snapshot. A snapshot
+ * is used as it stands; a request is resolved against the current sources. */
+declare function isConfigurationSnapshot(config: AgentConfiguration | ConfigurationSnapshot): config is ConfigurationSnapshot;
+
+type UserInput = string | Readonly<{
+    content: UserContent;
+    metadata?: Metadata;
+    thinkingLevel?: ThinkingLevel;
+    providerOptions?: JsonObject;
+}>;
+type HistorySeed = readonly Message[];
+type ContextStatus = Readonly<{
+    tokens: number;
+    contextWindow: number;
+    percent: number;
+    thresholdTokens: number;
+    estimated: boolean;
+    coveredThrough?: Readonly<{
+        messageId: MessageId;
+        sequence: number;
+    }>;
+}>;
+type ContextCompactionRecord = Readonly<{
+    id: string;
+    agentId: AgentId;
+    summary: string;
+    coveredThrough?: Readonly<{
+        messageId: MessageId;
+        sequence: number;
+    }>;
+    instructions?: string;
+    createdAt: string;
+}>;
+/** Who is calling which tool, without the ability to ask or suspend. Hosts that
+ * describe a call before it runs (for example to build a confirmation) only
+ * have this much. */
+/** The Phase whose execution issued a Tool call, with its PHASE.md metadata. */
+type ToolCallPhase = Readonly<{
+    name: string;
+    metadata?: Readonly<Record<string, JsonValue>>;
+}>;
+type ToolCallContext = Readonly<{
+    agentId: AgentId;
+    runId: RunId;
+    /** Opaque JSON metadata captured from the Agent and Run records. Rowan does
+     * not interpret host/domain fields. */
+    agentMetadata?: Metadata;
+    runMetadata?: Metadata;
+    toolCallId: ToolCallId;
+    /** The model's id for this call, matching `tool_call_delta` events; absent when a host runs the tool itself. */
+    providerToolCallId?: string;
+    scope?: ScopeRef;
+    turn?: JsonObject;
+    phase?: ToolCallPhase;
+    reportProgress(progress: ToolProgress): void;
+}>;
+type ToolInvocationContext = ToolCallContext & Readonly<{
+    interaction: RunInteractionDriver;
+}>;
+
+type Tool$1 = Readonly<{
+    name: string;
+    /** Rowan-owned Core Tool; Core Tools bypass Definition/Phase filtering. */
+    core?: boolean;
+    description: string;
+    parameters: Type.TSchema;
+    promptSnippet?: string;
+    promptGuidelines?: readonly string[];
+    kind?: ToolKind;
+    annotations?: ToolAnnotations;
+    _meta?: JsonObject;
+    present?(call: ToolCallPresentationInput): {
+        title?: string;
+        content?: ToolCallContent[];
+        locations?: ToolCallLocation[];
+        _meta?: JsonObject;
+    } | undefined | void | Promise<{
+        title?: string;
+        content?: ToolCallContent[];
+        locations?: ToolCallLocation[];
+        _meta?: JsonObject;
+    } | undefined | void>;
+    execute(args: JsonValue, context: ToolInvocationContext, signal: AbortSignal): Promise<ToolExecutionResult>;
 }>;
-/** Unified phase output — model-driven routing is optional; programmatic phases may normalize omission to stop. */
-type PhaseOutput = {
-    /** User-visible assistant message. */
-    message?: string;
-    /** Final status update for non-conversational consumers. */
-    status?: PhaseStatus;
-    /** Route to next phase, or "continue" to re-execute current phase, or "stop" to end. Undefined means no model route. */
-    route?: string;
-    /** Phase name that produced this output */
-    phase?: string;
-    /** Tool calls from the model invocation (used by framework for route extraction) */
-    toolCalls?: Array<{
-        id: string;
-        name: string;
-        args: unknown;
+type BeforeToolCallDecision = Readonly<{
+    allow: true;
+}> | Readonly<{
+    allow: false;
+    reason: string;
+}> | Readonly<{
+    interaction: RunInteractionRequest;
+}>;
+type BeforeToolCall = (input: Readonly<{
+    tool: Tool$1;
+    args: JsonValue;
+    context: ToolInvocationContext;
+    signal: AbortSignal;
+    answer?: JsonValue;
+}>) => BeforeToolCallDecision | Promise<BeforeToolCallDecision>;
+type AfterToolCall = (input: Readonly<{
+    tool: Tool$1;
+    result: ToolExecutionResult;
+    context: ToolInvocationContext;
+    signal: AbortSignal;
+}>) => ToolExecutionResult | Promise<ToolExecutionResult>;
+type InvocationSource = "auto" | "implicit" | "external";
+type InvocationCatalogEntry = Readonly<{
+    kind: "phase" | "skill";
+    name: string;
+    description: string;
+    input?: Phase["input"];
+    core?: boolean;
+    disableAutoInvocation: boolean;
+    disableImplicitInvocation: boolean;
+    filePath: string;
+}>;
+type AgentRecord = Readonly<{
+    id: AgentId;
+    metadata?: Metadata;
+    currentConfigToken?: ConfigToken;
+    currentConfigIdentity?: string;
+    createdAt: string;
+    activatedAt?: string;
+    updatedAt: string;
+}>;
+type AgentDeletionRequest = Readonly<{
+    agentId: AgentId;
+    expectedRunIds: readonly RunId[];
+    confirmation: "agent-delete-v1";
+}>;
+type ExecutionToken = Readonly<{
+    runId: RunId;
+    ownerEpoch: number;
+    executionId: ExecutionId;
+}>;
+type ExecutionCheckpoint = Readonly<{
+    codec: string;
+    version: number;
+    data: JsonValue;
+}>;
+type OwnerLease = Readonly<{
+    ownerId: string;
+    token: OwnerToken;
+    epoch: number;
+    expiresAt: string;
+}>;
+type RunClaim = Readonly<{
+    run: RunRecord;
+    execution: ExecutionToken;
+    history: readonly Message[];
+}>;
+type ToolCallReservation = Readonly<{
+    providerToolCallId: string;
+    name: string;
+    args: JsonValue;
+    toolCallId?: ToolCallId;
+    title?: string;
+    kind?: ToolKind;
+    locations?: ToolCallLocation[];
+    content?: ToolCallContent[];
+    _meta?: JsonObject;
+}>;
+type ToolCommit = Readonly<{
+    run: RunRecord;
+    toolCall: ToolCallSnapshot;
+}>;
+type ToolBatchCommit = Readonly<{
+    run: RunRecord;
+    toolCalls: readonly ToolCallSnapshot[];
+}>;
+type EntryPhaseSpec = Readonly<{
+    phase: string;
+    payload?: JsonValue;
+}>;
+type RunRecord = Readonly<{
+    id: RunId;
+    agentId: AgentId;
+    agentSequence: number;
+    readySequence: number;
+    revision: number;
+    state: RunState;
+    input: UserInput;
+    scope?: ScopeRef;
+    cwd?: string;
+    initialMessageId?: MessageId;
+    invalidatedBy?: Readonly<{
+        messageId: MessageId;
+        messageRevision: number;
     }>;
-    /** Route reason extracted from route tool call (for hooks to inspect) */
-    routeReason?: string;
-    /** Structured data from this phase, passed to the next phase */
-    payload?: unknown;
-};
-/** Phase machine state — tracks position and inter-phase data */
-interface PhaseState {
-    current: string;
-    available: string[];
-    iterations: number;
-    payload?: unknown;
-}
-type PhaseInvocation = {
-    mode: "serial";
-    instanceId: string;
-} | {
-    mode: "parallel";
-    instanceId: string;
-    groupId: string;
-    index: number;
-    count: number;
-    sourcePhaseId: string;
-};
-/** Durable identity of the Run execution currently invoking a Phase. */
-type PhaseExecutionIdentity = Readonly<{
-    agentId: string;
-    runId: string;
-    executionId: string;
-    /** Original durable Run input, before any Phase-local interpretation. */
-    input?: UserContent;
-    /** Opaque metadata captured at the durable boundary; Rowan does not decode it. */
-    agentMetadata?: Readonly<Record<string, unknown>>;
-    runMetadata?: Readonly<Record<string, unknown>>;
-    scope?: _rowan_agent_models.ScopeRef;
+    metadata?: Metadata;
+    phasePayload?: JsonValue;
+    entryPhases?: readonly EntryPhaseSpec[];
+    pinnedConfigToken?: ConfigToken;
+    checkpoint?: ExecutionCheckpoint;
+    currentPhaseId?: string;
+    openInteractions?: readonly RunInteraction[];
+    interactionAnswers?: Readonly<Record<string, JsonValue>>;
+    execution?: ExecutionToken;
+    outcome?: Outcome$1;
+    failure?: RunFailure;
+    cancellationReason?: string;
+    createdAt: string;
+    updatedAt: string;
+}>;
+type MessageRevisionResult = Readonly<{
+    message: UserMessage & Readonly<{
+        messageRevision: number;
+    }>;
+    replacementRun: RunRecord;
+    invalidatedRunIds: readonly RunId[];
+    affectedToolCallIds: readonly ToolCallId[];
+    effectDigest?: string;
+}>;
+type RetentionResult = Readonly<{
+    deletedRunIds: readonly RunId[];
+    deletedToolCallIds: readonly ToolCallId[];
+    deletedEventCount: number;
+    retentionFloor: EventCursor;
+    skipped?: "active_consumers" | "no_eligible_events";
+}>;
+type AgentSummary = Readonly<{
+    id: AgentId;
+    metadata?: Metadata;
+    currentConfigIdentity?: string;
+    createdAt: string;
+    activatedAt: string;
+    updatedAt: string;
+}>;
+type RunSummary = Readonly<{
+    id: RunId;
+    agentId: AgentId;
+    agentSequence: number;
+    state: RunState;
+    metadata?: Metadata;
+    createdAt: string;
+    updatedAt: string;
+}>;
+type Page<T, Cursor> = Readonly<{
+    items: readonly T[];
+    next?: Cursor;
+}>;
+type RunSnapshotBase = Readonly<{
+    runId: RunId;
+    agentId: AgentId;
+    agentSequence: number;
+    revision: number;
+    input: UserInput;
+    scope?: ScopeRef;
     cwd?: string;
+    metadata?: Metadata;
+    /** Effective entry Phase payload the Run started with (defaults filled). */
+    phasePayload?: JsonValue;
+    entryPhases?: readonly EntryPhaseSpec[];
+    messageCount: number;
+    toolCallCount: number;
+    currentPhaseId?: string;
+    createdAt: string;
+    updatedAt: string;
+    cursor: EventCursor;
 }>;
-/** Everything a phase needs to execute */
-interface PhaseContext {
-    systemPrompt: string;
-    messages: AgentMessage[];
-    /** Phase-filtered tools */
-    tools: Tool[];
-    /** Phase-filtered skills */
-    skills: Skill[];
-    /** Phase machine state */
-    state: PhaseState;
-    /** Identity and dispatch metadata for this phase execution */
-    readonly invocation: PhaseInvocation;
-    /** Durable Run identity for cross-store integrations and idempotent commands. */
-    readonly execution: PhaseExecutionIdentity;
-    /** Additional guideline bullets appended to the system prompt */
-    promptGuidelines?: string[];
-    /** Text to append after the system prompt */
-    appendSystemPrompt?: string;
-}
-/** JSON-safe structural defaults declared by a Phase's `input` mapping. */
-type PhaseInput = Readonly<Record<string, JsonValue>>;
-/** JSON-safe option metadata exposed to a host Settings surface. */
-interface SettingsOption {
-    value: string;
-    label: string;
-    description?: string;
-    disabled?: boolean;
-}
-interface SettingsBadge {
-    label: string;
-    tone?: "neutral" | "success" | "review" | "danger";
-}
-interface SettingsItem {
-    id: string;
-    title: string;
-    description?: string;
-    badges?: readonly SettingsBadge[];
-}
-type SettingsControl = {
-    type: "boolean";
-    path: string;
-    label: string;
-    description?: string;
-} | {
-    type: "number";
-    path: string;
-    label: string;
-    description?: string;
-    min?: number;
-    max?: number;
-    step?: number;
-    unit?: string;
-    scale?: number;
+type RunSnapshot = RunSnapshotBase & (Readonly<{
+    state: "queued" | "running";
+    currentPhaseId?: string;
+    interactions?: readonly RunInteraction[];
+}> | Readonly<{
+    state: "input_required";
+    interactions: readonly RunInteraction[];
+    answers: Readonly<Record<string, JsonValue>>;
+}> | Readonly<{
+    state: "completed";
+    outcome: Outcome$1;
+    output?: AssistantMessage;
+}> | Readonly<{
+    state: "failed";
+    failure: RunFailure;
+}> | Readonly<{
+    state: "cancelled";
+    reason?: string;
+}>);
+type RunBoundary = Readonly<{
+    type: "input_required";
+    interactions: readonly RunInteraction[];
+    answers: Readonly<Record<string, JsonValue>>;
+}> | Readonly<{
+    type: "completed";
+    outcome: Outcome$1;
+    output?: AssistantMessage;
+}> | Readonly<{
+    type: "failed";
+    failure: RunFailure;
+}> | Readonly<{
+    type: "cancelled";
+    reason?: string;
+}>;
+type ConfigResolution = Readonly<{
+    kind: "available";
+    config: AgentConfiguration | ConfigurationSnapshot;
 } | {
-    type: "select";
-    path: string;
-    label: string;
-    description?: string;
-    options: readonly SettingsOption[];
+    kind: "deferred";
+    retryAfterMs?: number;
 } | {
-    type: "text";
-    path: string;
-    label: string;
-    description?: string;
-    placeholder?: string;
-    format?: "string" | "string-array" | "key-value";
-    multiline?: boolean;
+    kind: "unavailable";
+    reason: string;
+}>;
+type ConfigPutResult = Readonly<{
+    kind: "stored";
+    token: string;
 } | {
-    type: "collection";
-    path: string;
-    label: string;
-    description?: string;
-    items: readonly SettingsItem[];
-    fields: readonly SettingsControl[];
-    add?: {
-        label: string;
-        idLabel?: string;
-        fields: readonly SettingsControl[];
-    };
-    removeLabel?: string;
-};
-interface SettingsSection {
-    id: string;
-    title: string;
-    description?: string;
-    controls: readonly SettingsControl[];
+    kind: "identity_conflict";
+}>;
+interface ConfigProvider {
+    put(input: {
+        agentId: AgentId;
+        agentMetadata?: Metadata;
+        config: AgentConfiguration | ConfigurationSnapshot;
+        operationId: string;
+        signal: AbortSignal;
+    }): Promise<ConfigPutResult>;
+    resolve(input: {
+        agentId: AgentId;
+        agentMetadata?: Metadata;
+        token: ConfigToken;
+        signal: AbortSignal;
+    }): Promise<ConfigResolution>;
+}
+interface OwnedStore {
+    readonly lease: OwnerLease;
+    reserveAgent(input: {
+        idempotencyKey: string;
+        metadata?: Metadata;
+        configIdentity?: string;
+        historySeed?: HistorySeed;
+    }): Promise<AgentRecord>;
+    activateAgent(agentId: AgentId, configToken?: ConfigToken, configIdentity?: string): Promise<AgentRecord>;
+    updateAgentConfigToken(input: {
+        agentId: AgentId;
+        token: ConfigToken;
+        configIdentity?: string;
+        idempotencyKey: string;
+    }): Promise<AgentRecord>;
+    deleteAgent(input: AgentDeletionRequest): Promise<void>;
+    reviseMessage(input: {
+        agentId: AgentId;
+        messageId: MessageId;
+        expectedMessageRevision: number;
+        content: UserContent;
+        operationId: string;
+        effectDigestConfirmation?: string;
+    }): Promise<MessageRevisionResult>;
+    compact(input?: {
+        now?: string;
+        retentionMs?: number;
+    }): Promise<RetentionResult>;
+    contextStatus(agentId: AgentId, contextWindow: number): Promise<ContextStatus>;
+    contextMessages(agentId: AgentId, recentTokenBudget?: number): Promise<readonly Message[]>;
+    commitContextCompaction(record: ContextCompactionRecord): Promise<ContextCompactionRecord>;
+    createRun(input: {
+        agentId: AgentId;
+        input: UserInput;
+        metadata?: Metadata;
+        scope?: ScopeRef;
+        cwd?: string;
+        phasePayload?: JsonValue;
+        entryPhases?: readonly EntryPhaseSpec[];
+        pinnedConfigToken?: ConfigToken;
+        idempotencyKey: string;
+    }): Promise<RunRecord>;
+    claimRun(input: {
+        runId: RunId;
+        expectedRevision: number;
+        executionId?: ExecutionId;
+        messageId?: MessageId;
+        configToken?: ConfigToken;
+        additionalContexts?: readonly ContextCandidate[];
+    }): Promise<RunClaim>;
+    failQueuedRun(input: {
+        runId: RunId;
+        expectedRevision: number;
+        failure: QueuedRunFailure;
+    }): Promise<RunRecord>;
+    commitPhaseEntered(input: {
+        runId: RunId;
+        execution: ExecutionToken;
+        expectedRevision: number;
+        phaseId: string;
+        visit: number;
+    }): Promise<RunRecord>;
+    commitPhaseOutput(input: {
+        runId: RunId;
+        execution: ExecutionToken;
+        expectedRevision: number;
+        message: AssistantMessage;
+    }): Promise<RunRecord>;
+    commitInputRequired(input: {
+        runId: RunId;
+        execution: ExecutionToken;
+        expectedRevision: number;
+        phase: string;
+        prompt?: AssistantMessage;
+        checkpoint: ExecutionCheckpoint;
+        interactions?: readonly RunInteraction[];
+        interactionAnswers?: Readonly<Record<string, JsonValue>>;
+        pendingToolCallIds?: readonly ToolCallId[];
+    }): Promise<RunRecord>;
+    answerInteraction(input: {
+        runId: RunId;
+        interactionId: string;
+        expectedRevision: number;
+        input?: JsonValue;
+        cancel?: boolean;
+    }): Promise<RunRecord>;
+    commitOutcome(input: {
+        runId: RunId;
+        execution: ExecutionToken;
+        expectedRevision: number;
+        outcome?: Outcome$1;
+        failure?: RunFailure;
+        output?: AssistantMessage;
+    }): Promise<RunRecord>;
+    reserveToolCall(input: {
+        runId: RunId;
+        execution: ExecutionToken;
+        expectedRevision: number;
+        requestMessageId: MessageId;
+        name: string;
+        args: JsonValue;
+        toolCallId?: ToolCallId;
+        providerToolCallId?: string;
+        title?: string;
+        kind?: ToolKind;
+        locations?: ToolCallLocation[];
+        content?: ToolCallContent[];
+        _meta?: JsonObject;
+        model?: ModelRef;
+        usage?: LlmTokenUsage;
+    }): Promise<ToolCommit>;
+    reserveToolCalls(input: {
+        runId: RunId;
+        execution: ExecutionToken;
+        expectedRevision: number;
+        requestMessageId: MessageId;
+        calls: readonly ToolCallReservation[];
+        /** The model response's blocks, so the request message keeps what preceded the Tool Calls. */
+        contentBlocks?: readonly ContentBlock[];
+        model?: ModelRef;
+        usage?: LlmTokenUsage;
+    }): Promise<ToolBatchCommit>;
+    startToolCall(input: {
+        runId: RunId;
+        execution: ExecutionToken;
+        expectedRevision: number;
+        toolCallId: ToolCallId;
+        title?: string;
+        kind?: ToolKind;
+        locations?: ToolCallLocation[];
+        content?: ToolCallContent[];
+        _meta?: JsonObject;
+    }): Promise<ToolCommit>;
+    suspendToolCall(input: {
+        runId: RunId;
+        execution: ExecutionToken;
+        expectedRevision: number;
+        toolCallId: ToolCallId;
+    }): Promise<ToolCommit>;
+    commitToolResult(input: {
+        runId: RunId;
+        execution: ExecutionToken;
+        expectedRevision: number;
+        toolCallId: ToolCallId;
+        result: ToolExecutionResult;
+        state: "completed" | "failed" | "indeterminate";
+        reason?: string;
+        title?: string;
+        kind?: ToolKind;
+        content?: ToolCallContent[];
+        locations?: ToolCallLocation[];
+        rawOutput?: JsonValue;
+        _meta?: JsonObject;
+    }): Promise<ToolCommit>;
+    cancelRun(input: {
+        runId: RunId;
+        expectedRevision?: number;
+        reason?: string;
+        output?: AssistantMessage;
+    }): Promise<RunRecord>;
+    recordToolCall(input: {
+        runId: RunId;
+        execution?: ExecutionToken;
+        update: ToolCall$1 | ToolCallUpdate;
+        external?: boolean;
+        contentIndex?: number;
+    }): Promise<DurableRunEvent>;
+    snapshotRun(runId: RunId): Promise<RunSnapshot>;
+    history(agentId: AgentId): Promise<readonly Message[]>;
+    listAgents(): Promise<readonly AgentRecord[]>;
+    listRuns(input?: {
+        agentId?: AgentId;
+        states?: readonly RunState[];
+    }): Promise<readonly RunRecord[]>;
+    listEvents(input?: {
+        after?: EventCursor;
+    }): Promise<readonly DurableRunEvent[]>;
+    openConsumer(consumerId: string): Promise<ConsumerRegistration>;
+    advanceConsumerCheckpoint(input: {
+        consumerId: string;
+        cursor: EventCursor;
+    }): Promise<void>;
+    renewOwner(leaseMs: number): Promise<OwnerLease>;
+    sealAndReleaseOwner(): Promise<void>;
 }
-/** Declarative, host-neutral Settings surface. */
-interface SettingsDefinition {
-    description?: string;
-    sections: readonly SettingsSection[];
+interface DurableStore {
+    openOwner(input: {
+        ownerId: string;
+        leaseMs: number;
+    }): Promise<OwnedStore>;
 }
-/**
- * Loaded Phase object
- */
-interface Phase {
-    /** Unique phase identity and display name. */
-    name: string;
-    /** Rowan-owned built-in Phase; built-ins are never filtered or disabled. */
-    core?: boolean;
-    /** Description */
-    description: string;
-    /** Restricted tools (undefined = all tools available) */
-    tools?: string[];
-    /** Skills bundled directly inside this phase directory. Inline phases may omit this (equivalent to []). */
-    skills?: Skill[];
-    /** Forced next phase */
-    target?: string;
-    /** Additional system-prompt guidance while this Phase is in the auto route catalog. */
-    promptGuidelines?: string[];
-    /** Structural JSON-safe input defaults */
-    input?: PhaseInput;
-    /** If true, phase gets a fresh context when executed in parallel */
-    isolated?: boolean;
-    /** Path to PHASE.md file */
-    filePath: string;
-    /** Phase directory path */
-    baseDir: string;
-    /** PHASE.md body content */
-    content: string;
-    /** Model override for this phase (resolved from frontmatter) */
-    model?: ModelRef;
-    /** Do not automatically inject this Phase into the model route catalog/context. */
-    disableAutoInvocation?: boolean;
-    /** Do not expose this Phase to direct user invocation. */
-    disableImplicitInvocation?: boolean;
-    /** ExtensionAPI factory function used for registration or programmatic execution. */
-    factory?: (api: ExtensionAPI) => Promise<void>;
-    /** Direct run function */
-    run?: (context: PhaseContext, execution: PhaseExecution) => Promise<PhaseOutput | void>;
+type AgentRuntimeOptions = Readonly<{
+    store: DurableStore;
+    configs?: ConfigProvider;
+    concurrency?: number;
+    bootstrap?: (registry: RuntimeBootstrapRegistry) => void | Promise<void>;
+    host?: ExtensionHost;
+    sessionFiles?: Readonly<{
+        dir: string;
+    }>;
+    /** @internal Private / testing parameter to override retry delay */
+    retryDelayMs?: number;
+}>;
+type DurableConsumer = Readonly<{
+    caughtUp: Promise<void>;
+    done: Promise<void>;
+    stop(): void;
+}>;
+interface AgentRun {
+    readonly id: RunId;
+    snapshot(): Promise<RunSnapshot>;
+    observe(options?: {
+        after?: EventCursor;
+        signal?: AbortSignal;
+    }): AsyncIterable<RunEvent>;
+    wait(options?: {
+        signal?: AbortSignal;
+    }): Promise<RunBoundary>;
+    respondInteraction(input: {
+        interactionId: string;
+        input?: JsonValue;
+        cancel?: boolean;
+    }): Promise<void>;
+    cancel(reason?: string): Promise<RunBoundary>;
 }
-/**
- * Phase registry containing all loaded phases
- */
-interface PhaseRegistry {
-    /** Map of phase name to Phase object */
-    phases: Map<string, Phase>;
-    /** Entry phase name (null until Agent applies its default phase) */
-    entryPhaseId: string | null;
+interface AgentRuntime$1 {
+    readonly host: ExtensionHost;
+    loadAgents(input: LoadInput<AgentDefinition>): Promise<LoadResult>;
+    loadSkills(input: LoadInput<Skill>): Promise<LoadResult>;
+    loadPhases(input: LoadInput<Phase>): Promise<LoadResult>;
+    loadTools(input: Readonly<{
+        sourceId: string;
+        values: readonly Tool$1[];
+    }>): Promise<LoadResult>;
+    unload(input: Readonly<{
+        kind: ResourceKind;
+        sourceId: string;
+    }>): Promise<LoadResult>;
+    createAgent(config: AgentConfiguration, options?: {
+        idempotencyKey?: string;
+        metadata?: Metadata;
+        historySeed?: HistorySeed;
+    }): Promise<AgentId>;
+    updateAgentConfig(agentId: AgentId, config: AgentConfiguration, options: {
+        idempotencyKey: string;
+    }): Promise<void>;
+    deleteAgent(input: AgentDeletionRequest): Promise<void>;
+    revise(agentId: AgentId, input: {
+        messageId: MessageId;
+        expectedMessageRevision: number;
+        content: UserContent;
+        operationId: string;
+        effectDigestConfirmation?: string;
+    }): Promise<MessageRevisionResult>;
+    compact(input?: {
+        now?: string;
+        retentionMs?: number;
+    }): Promise<RetentionResult>;
+    start(agentId: AgentId, input: UserInput, options: {
+        idempotencyKey: string;
+        metadata?: Metadata;
+        scope?: ScopeRef;
+        cwd?: string;
+        phasePayload?: JsonValue;
+        entryPhases?: ReadonlyArray<EntryPhaseSpec>;
+    }): Promise<AgentRun>;
+    run(runId: RunId): AgentRun;
+    contextStatus(agentId: AgentId, options?: {
+        contextWindow?: number;
+    }): Promise<ContextStatus>;
+    compactContext(agentId: AgentId, options?: {
+        input?: UserInput;
+        instructions?: string;
+        idempotencyKey?: string;
+    }): Promise<AgentRun>;
+    runPhase(agentId: AgentId, options: {
+        phase: string;
+        payload?: JsonValue;
+        input?: UserInput;
+        yieldToInput?: boolean;
+        idempotencyKey?: string;
+    }): Promise<AgentRun>;
+    listInvocations(agentId: AgentId, options: {
+        source: InvocationSource;
+    }): Promise<readonly InvocationCatalogEntry[]>;
+    history(agentId: AgentId): Promise<readonly Message[]>;
+    listAgents(input?: {
+        after?: AgentListCursor;
+        limit?: number;
+    }): Promise<Page<AgentSummary, AgentListCursor>>;
+    listRuns(input?: {
+        agentId?: AgentId;
+        states?: readonly RunState[];
+        after?: RunListCursor;
+        limit?: number;
+    }): Promise<Page<RunSummary, RunListCursor>>;
+    consume(input: {
+        consumerId: string;
+        signal: AbortSignal;
+        onEvent(event: DurableRunEvent, context: Readonly<{
+            signal: AbortSignal;
+        }>): void | Promise<void>;
+    }): Promise<DurableConsumer>;
+    listCapabilities(): readonly ExtensionCapability[];
+    onCapabilitiesChanged(listener: (capabilities: readonly ExtensionCapability[]) => void): () => void;
+    triggerUiAction(event: {
+        contributionId: string;
+        actionId: string;
+        scope?: ScopeRef;
+    }): void;
+    close(): Promise<void>;
 }
+type ConsumerRegistration = Readonly<{
+    cursor?: EventCursor;
+    waterline: EventCursor;
+}>;
 
 interface BeforePhaseEvent {
     type: "before_phase";
@@ -1847,6 +1833,7 @@ interface BeforeToolCallEvent {
     readonly answer?: unknown;
     readonly scope?: ScopeRef;
     readonly turn?: JsonObject;
+    readonly phase?: ToolCallPhase;
 }
 interface AfterToolCallEvent {
     type: "after_tool_call";
@@ -1858,6 +1845,7 @@ interface AfterToolCallEvent {
     readonly metadata?: Readonly<Record<string, unknown>>;
     readonly scope?: ScopeRef;
     readonly turn?: JsonObject;
+    readonly phase?: ToolCallPhase;
 }
 interface RunStartEvent {
     type: "run_start";
@@ -3408,4 +3396,4 @@ declare function parseFrontmatter<T = Record<string, unknown>>(raw: string): Fro
 
 declare function createCoreTools(input?: CoreToolContext): Tool$1[];
 
-export { type AfterToolCall, type AgentConfiguration, type AgentDefinition, type AgentId, type AgentListCursor, type AgentRecord, type AgentRun, AgentRuntime, type AgentRuntimeOptions, type AgentSummary, type AnyRuntimeError, type AssistantContent, type AssistantMessage, type BeforeToolCall, COMPACT_PHASE_ID, type ConfigProvider, type ConfigPutResult, type ConfigResolution, type ConfigToken, type ConfigurationSnapshot, type ContextCandidate, type ContextCompactionRecord, type ContextStatus, type CoreToolContext, DEFAULT_PHASE_ID, type DefinitionLayer, type DurableConsumer, type DurableRunEvent, type DurableStore, type DurableToolResult, type EntryPhaseSpec, type EventCursor, type EventId, type ExecutionCheckpoint, type ExecutionId, type ExecutionToken, type ExtensionAPI, type ExtensionActivationError, type ExtensionActivationResult, type ExtensionCapability, type ExtensionCapabilityContribution, type ExtensionContribution, type ExtensionDisposer, type ExtensionFactory, type ExtensionFactoryResult, type ExtensionHost, ExtensionLifetimeError, type ExtensionLifetimeErrorCode, type ExtensionLoadInput, type ExtensionStateStore, type ExtensionToolContribution, type FrontmatterResult, type HistorySeed, type HookEvent, type HookEventType, type HookHandler, type HostApiExtension, InMemoryConfigProvider, InMemoryExtensionHost, InMemoryStore, type InteractionRecord, type InternalModelLoopOptions, type InvocationCatalogEntry, type InvocationSource, type JsonObject, type JsonPrimitive, type JsonValue, type LiveInteractionEvent, type LoadExtensionsResult, type LoadInput, type LoadResult, type LoadedExtension, type Message, type MessageBase, type MessageCommitted, type MessageContent, type MessageDelta, type MessageId, type MessageRevised, type MessageRevisionResult, type Metadata, type ModelInvokeOutput, type ModelRetry, type OpaqueId, type Outcome$1 as Outcome, type OwnerLease, type OwnerToken, type Page, type Phase, type PhaseContext, type PhaseContribution, type PhaseExecution, type PhaseExecutionIdentity, type PhaseInput, type PhaseInvocation, type PhaseMessageManager, type PhaseOutput, type PhaseRegistry, type PhaseRegistrySelection, type PhaseState, type PhaseStatus, type PhaseStatusState, type ResolvedResourceView, type ResourceDiagnostic, type ResourceKind, type ResourceRef, ResourceRegistry, ResourceRegistryError, type ResourceRegistryErrorCode, type ResourceSourceId, type ResourceView, type RetentionResult, type RunBoundary, type RunClaim, type RunEndEvent, type RunEvent, type RunFailure, type RunId, type RunInteraction, RunInteractionBoundary, RunInteractionCancelledError, type RunInteractionDriver, type RunInteractionKind, type RunInteractionRequest, type RunInteractionState, type RunInteractionStatus, type RunListCursor, type RunRecord, type RunSnapshot, type RunStartEvent, type RunState, type RunStateChanged, type RunSummary, RuntimeBootstrapRegistry, RuntimeError, type RuntimeErrorCode, type RuntimeErrorDetails, RuntimeExtensionLifetime, STOP_PHASE_ID, type SettingsBadge, type SettingsControl, type SettingsDefinition, type SettingsItem, type SettingsOption, type SettingsSection, type Skill, type SkillRegistration, SqliteStore, type TextContent, type ThinkingContent, type ThinkingDelta, type Tool$1 as Tool, type ToolCallContext, type ToolCallDelta, type ToolCallId, type ToolCallPresentationInput, type ToolCallPresentationOutput, type ToolCallSnapshot, type ToolCallState, type ToolContribution, type ToolDefinition, type ToolExecutionResult, type ToolInvocationContext, type ToolMessage, type ToolMessageContent, type ToolResultContent, type ToolStateChanged, type ToolUseContent, type UserContent, type UserInput, type UserMessage, type WithdrawnUserInput, brandConfigToken, createCompactPhase, createCorePhases, createCoreTools, createDefaultPhase, createStopPhase, extensionSourceId, isConfigurationSnapshot, isRuntimeError, loadExtensionsFromPath as loadExtensions, loadPhase, loadPhases, loadSkill, loadSkills, mergeToolCall, parseAgentDefinition, parseFrontmatter, resolveConfigurationSnapshot };
+export { type AfterToolCall, type AgentConfiguration, type AgentDefinition, type AgentId, type AgentListCursor, type AgentRecord, type AgentRun, AgentRuntime, type AgentRuntimeOptions, type AgentSummary, type AnyRuntimeError, type AssistantContent, type AssistantMessage, type BeforeToolCall, COMPACT_PHASE_ID, type ConfigProvider, type ConfigPutResult, type ConfigResolution, type ConfigToken, type ConfigurationSnapshot, type ContextCandidate, type ContextCompactionRecord, type ContextStatus, type CoreToolContext, DEFAULT_PHASE_ID, type DefinitionLayer, type DurableConsumer, type DurableRunEvent, type DurableStore, type DurableToolResult, type EntryPhaseSpec, type EventCursor, type EventId, type ExecutionCheckpoint, type ExecutionId, type ExecutionToken, type ExtensionAPI, type ExtensionActivationError, type ExtensionActivationResult, type ExtensionCapability, type ExtensionCapabilityContribution, type ExtensionContribution, type ExtensionDisposer, type ExtensionFactory, type ExtensionFactoryResult, type ExtensionHost, ExtensionLifetimeError, type ExtensionLifetimeErrorCode, type ExtensionLoadInput, type ExtensionStateStore, type ExtensionToolContribution, type FrontmatterResult, type HistorySeed, type HookEvent, type HookEventType, type HookHandler, type HostApiExtension, InMemoryConfigProvider, InMemoryExtensionHost, InMemoryStore, type InteractionRecord, type InternalModelLoopOptions, type InvocationCatalogEntry, type InvocationSource, type JsonObject, type JsonPrimitive, type JsonValue, type LiveInteractionEvent, type LoadExtensionsResult, type LoadInput, type LoadResult, type LoadedExtension, type Message, type MessageBase, type MessageCommitted, type MessageContent, type MessageDelta, type MessageId, type MessageRevised, type MessageRevisionResult, type Metadata, type ModelInvokeOutput, type ModelRetry, type OpaqueId, type Outcome$1 as Outcome, type OwnerLease, type OwnerToken, type Page, type Phase, type PhaseContext, type PhaseContribution, type PhaseExecution, type PhaseExecutionIdentity, type PhaseInput, type PhaseInvocation, type PhaseMessageManager, type PhaseOutput, type PhaseRegistry, type PhaseRegistrySelection, type PhaseState, type PhaseStatus, type PhaseStatusState, type ResolvedResourceView, type ResourceDiagnostic, type ResourceKind, type ResourceRef, ResourceRegistry, ResourceRegistryError, type ResourceRegistryErrorCode, type ResourceSourceId, type ResourceView, type RetentionResult, type RunBoundary, type RunClaim, type RunEndEvent, type RunEvent, type RunFailure, type RunId, type RunInteraction, RunInteractionBoundary, RunInteractionCancelledError, type RunInteractionDriver, type RunInteractionKind, type RunInteractionRequest, type RunInteractionState, type RunInteractionStatus, type RunListCursor, type RunRecord, type RunSnapshot, type RunStartEvent, type RunState, type RunStateChanged, type RunSummary, RuntimeBootstrapRegistry, RuntimeError, type RuntimeErrorCode, type RuntimeErrorDetails, RuntimeExtensionLifetime, STOP_PHASE_ID, type SettingsBadge, type SettingsControl, type SettingsDefinition, type SettingsItem, type SettingsOption, type SettingsSection, type Skill, type SkillRegistration, SqliteStore, type TextContent, type ThinkingContent, type ThinkingDelta, type Tool$1 as Tool, type ToolCallContext, type ToolCallDelta, type ToolCallId, type ToolCallPhase, type ToolCallPresentationInput, type ToolCallPresentationOutput, type ToolCallSnapshot, type ToolCallState, type ToolContribution, type ToolDefinition, type ToolExecutionResult, type ToolInvocationContext, type ToolMessage, type ToolMessageContent, type ToolResultContent, type ToolStateChanged, type ToolUseContent, type UserContent, type UserInput, type UserMessage, type WithdrawnUserInput, brandConfigToken, createCompactPhase, createCorePhases, createCoreTools, createDefaultPhase, createStopPhase, extensionSourceId, isConfigurationSnapshot, isRuntimeError, loadExtensionsFromPath as loadExtensions, loadPhase, loadPhases, loadSkill, loadSkills, mergeToolCall, parseAgentDefinition, parseFrontmatter, resolveConfigurationSnapshot };