@tangle-network/agent-runtime 0.338.0 → 0.340.0

package/dist/mcp/index.d.ts

@@ -1,29 +1,82 @@
-import { $S as analystToolGroupNames, $_ as DelegationHistoryEntry, $b as CreateWorktreeOptions, $g as CoderDelegate, $m as ResolveSpawnResourcePathsResult, $x as DownMessageAuthorizationInput, AS as McpTransport, A_ as DelegationResumeDriver, Av as createPropagatingTraceEmitter, BS as ANALYST_DEFINITION_BOUNDS, B_ as DelegateCodeResult, Bv as buildDelegationTraceSpans, Bx as QuestionEscalationOutcome, C_ as detachedTurnEvents, Ct as GraphSubtasks, Cv as ResearchSource, Cx as LeadMessage, DS as JsonRpcResponse, D_ as DelegationArgs, Dx as WorkerWatchOptions, ES as JsonRpcMessage, E_ as runDetachedTurn, Et as SettledWorker, Ex as ToolOutcomeEvent, F_ as SubmitInput, Fv as DELEGATION_TRACE_MAX_BYTES, G_ as DelegateResearchResult, Gv as DelegationStateCorruptError, Gx as QuestionPolicy, HS as AnalystDefinitionIssue, H_ as DelegateFeedbackResult, Hv as composeLoopTraceEmitters, Hx as QuestionEscalationTarget, I_ as SubmitOutput, Iv as DELEGATION_TRACE_MAX_SPANS, Ix as ChildQuestionInbox, JS as AnalystToolGroupName, J_ as DelegateUiAuditResult, Jv as FileDelegationStoreOptions, Jx as questionEscalationTargets, KS as AnalystRegistry, K_ as DelegateUiAuditArgs, Kv as DelegationStore, Kx as QuestionRecord, L_ as hashIdempotencyInput, Lv as DelegationTraceCaps, Lx as EscalateQuestion, M_ as DelegationRunContext, Mt as WorkerSpawnContext, Mv as readTraceContextFromEnv, N_ as DelegationTaskQueue, Nv as traceContextToEnv, OS as McpToolAnnotations, O_ as DelegationRecord, P_ as DelegationTaskQueueOptions, Pv as CappedDelegationTrace, QS as DefinedAnalystRecord, Q_ as DelegationHistoryArgs, Qg as eventToSnapshot, R_ as DelegateCodeArgs, Rv as DelegationTraceCollector, Rx as Question, S_ as createDetachedTurnResumeDriver, St as GraphSubtaskPreparation, Sx as EventAcknowledgement, T_ as parseDetachedSessionRef, Tt as PeerAuditAccess, Tx as ManagerWake, US as AnalystFindingEvent, U_ as DelegateResearchArgs, Uv as createDelegationTraceCollector, Ux as QuestionLevel, VS as AnalystAssignmentRecord, V_ as DelegateFeedbackArgs, Vv as capDelegationTrace, Vx as QuestionEscalationRecord, WS as AnalystKind, W_ as DelegateResearchConfig, Wv as DelegationPersistenceError, Wx as QuestionOption, XS as AuthoredAnalystDefinition, X_ as DelegationError, Xg as FeedbackStore, Xv as CoderOutput, Xx as AuthorizedDownMessage, Y_ as DelegateUiAuditRoute, Yg as FeedbackEvent, Yv as InMemoryDelegationStore, Yx as AuthorizeDownMessage, ZS as AuthoredAnalystLimits, Z_ as DelegationFeedbackSnapshot, Zg as InMemoryFeedbackStore, Zx as ContinuationInstruction, __ as DetachedTurn, _h as DelegateHandlerOptions, _x as CodexTokenUsage, a_ as SettleDetachedCoderTurnOptions, ah as environmentReader, av as DelegationStatusArgs, ax as captureWorktreeDiff, b_ as DriveTurnTick, bh as validateDelegateArgs, bt as CoordinationTools, bx as AwaitWakeInput, c_ as detachedSessionDelegate, ch as McpServer, cv as FeedbackRefersTo, cx as LocalHarnessResult, d_ as FleetHandle, dh as createMcpServer, dv as UiAuditorDelegationOutput, dx as CodexExecutionEvidence, eS as DownMessageDeliveryAttempt, e_ as CoderReview, eh as ResolvedSpawnResourcePath, ev as DelegationHistoryResult, ex as DiffOptions, f_ as FleetWorkspaceExecutorOptions, fh as DELEGATE_DESCRIPTION, fv as delegationProfiles, fx as DEFAULT_LOCAL_HARNESS, g_ as DetachedSessionRefParts, gh as DelegateError, gx as localHarnessExecutable, h_ as createSiblingSandboxExecutor, hh as DelegateArgs, hx as harnessSupportsReasoningEffort, iS as downMessageRefusalReasons, i_ as DetachedWinnerSelection, ih as SpawnResourceReader, iv as DelegationStatus, ix as WorktreeHandle, jT as LoopSandboxPlacement, j_ as DelegationResumeTick, jv as mergeTraceEnv, kS as McpToolDescriptor, k_ as DelegationResumeContext, kv as TraceContext, l_ as settleDetachedCoderTurn, lh as McpServerOptions, lv as ResearchOutputShape, lx as RunLocalHarnessOptions, m_ as createFleetWorkspaceExecutor, mh as DELEGATE_TOOL_NAME, mx as LocalHarness, nC as parseAuthoredAnalystDefinition, nS as DownMessageEvent, n_ as DelegateRunCtx, nh as SpawnResourceBytes, nv as DelegationProgress, nx as GitRunner, o_ as UiAuditorDelegate, oh as hostDirectoryReader, ov as DelegationStatusResult, ox as createWorktree, p_ as SiblingSandboxExecutorOptions, ph as DELEGATE_INPUT_SCHEMA, px as LOCAL_HARNESSES, qS as AnalystRunContext, q_ as DelegateUiAuditConfig, qv as FileDelegationStore, qx as QuestionUrgency, r_ as DetachedSessionDelegateOptions, rh as SpawnResourceRead, rv as DelegationResultPayload, rx as RemoveWorktreeOptions, s_ as coderTaskFromArgs, sh as resolveSpawnResourcePaths, sv as FeedbackRating, sx as removeWorktree, tS as DownMessageDeliveryOutcome, t_ as CoderReviewer, th as SPAWN_RESOURCE_PATH_MAX_BYTES, tv as DelegationProfile, tx as DiffResult, u_ as DelegationExecutor, uh as createInProcessTransport, uv as UiAuditLensFilter, ux as runLocalHarness, v_ as DetachedTurnResumeDriverOptions, vh as DelegateResult, vv as UiLens, vx as parseCodexTokenUsage, w_ as formatDetachedSessionRef, wt as MakeWorkerAgent, wx as ManagerReentryState, x_ as RunDetachedTurnOptions, xt as CoordinationToolsOptions, xx as CoordinationEvent, y_ as DriveTurnCapableBox, yh as createDelegateHandler, yx as CodexExecutionPolicy, z_ as DelegateCodeConfig, zv as DelegationTraceSpan, zx as QuestionDecision } from "../types-CrNWif8-.js";
-import { a as KbGateResult, i as FactJudgeVerdict, n as FactCandidate, o as createKbGate, r as FactJudge, t as CreateKbGateOptions } from "../kb-gate-C8z2juK8.js";
-import { n as mcpToolsForRuntimeMcpSubset, t as mcpToolsForRuntimeMcp } from "../openai-tools-zh2I_uD7.js";
-import { l as PlatformConnection } from "../integrations-6xttbPi9.js";
-import { AgentProfileMcpServer, HarnessType } from "@tangle-network/agent-interface";
-//#region src/mcp/codex-diagnostics.d.ts
-/** Bounded, credential-redacted process context attached when reproducible Codex output fails
- * validation. The process still fails closed; this only preserves enough evidence to diagnose it. */
-interface CodexExecutionFailureDiagnostic {
-  exitCode: number | null;
-  killedBySignal: NodeJS.Signals | null;
-  timedOut: boolean;
-  aborted?: boolean;
-  durationMs: number;
-  stdout: string;
-  stderr: string;
-  stdoutTruncated: boolean;
-  stderrTruncated: boolean;
+import { $_ as CoordinationEvent, $m as DelegateRunCtx, Ah as DelegationError, Ay as runLocalHarness, Bh as ResearchOutputShape, Ch as DelegateCodeArgs, Cp as McpServer, Dh as DelegateUiAuditArgs, Dp as DelegateHandlerOptions, Eh as DelegateResearchConfig, Ep as DelegateError, Fh as DelegationResultPayload, Hh as UiAuditorDelegationOutput, Ih as DelegationStatus, Jm as FeedbackEvent, Lh as DelegationStatusResult, Mh as DelegationHistoryArgs, My as LocalHarness, Nh as DelegationHistoryEntry, Oh as DelegateUiAuditConfig, Op as DelegateResult, Ph as DelegationProgress, Q_ as AwaitWakeInput, Qm as CoderReviewer, Rh as FeedbackRating, Sh as SubmitOutput, Sp as resolveSpawnResourcePaths, St as SpawnRefusalCause, Sv as QuestionOption, Th as DelegateResearchArgs, Tp as createMcpServer, Tv as QuestionUrgency, Vh as UiAuditLensFilter, Xm as CoderDelegate, Ym as FeedbackStore, Z_ as GitRunner, Zm as CoderReview, _h as DelegationResumeTick, _p as ResolvedSpawnResourcePath, ag as DelegationPersistenceError, ah as FleetHandle, ay as McpToolAnnotations, bh as DelegationTaskQueueOptions, bp as SpawnResourceReader, cg as FileDelegationStoreOptions, ch as createFleetWorkspaceExecutor, dh as RunDetachedTurnOptions, dt as CoordinationStats, eg as TraceContext, eh as DetachedSessionDelegateOptions, fh as runDetachedTurn, ft as CoordinationTools, gh as DelegationResumeDriver, gp as ResolveSpawnResourcePathsResult, gt as MakeWorkerAgent, gv as Question, hh as DelegationResumeContext, ig as composeLoopTraceEmitters, ih as DelegationExecutor, iy as JsonRpcResponse, jh as DelegationFeedbackSnapshot, jy as LOCAL_HARNESSES, kh as DelegateUiAuditRoute, kp as createDelegateHandler, ky as RunLocalHarnessOptions, lg as CoderOutput, lh as createSiblingSandboxExecutor, mh as DelegationRecord, ng as readTraceContextFromEnv, nh as UiAuditorDelegate, np as CheckRead, og as DelegationStore, oh as FleetWorkspaceExecutorOptions, oy as McpToolDescriptor, ph as DelegationArgs, pt as CoordinationToolsOptions, rg as DelegationTraceSpan, rh as detachedSessionDelegate, rv as ManagerWake, ry as JsonRpcMessage, sg as FileDelegationStore, sh as SiblingSandboxExecutorOptions, sy as McpTransport, tg as createPropagatingTraceEmitter, th as DetachedWinnerSelection, ug as CoderTask, uh as DetachedTurn, vh as DelegationRunContext, vp as SpawnResourceBytes, wh as DelegateCodeConfig, wp as McpServerOptions, wt as WorkerSpawnContext, xh as SubmitInput, xp as environmentReader, xv as QuestionLevel, xy as AnalystRegistry, yh as DelegationTaskQueue, yp as SpawnResourceRead, zh as FeedbackRefersTo } from "../types-DZ6L0Bv3.js";
+import { HarnessType } from "@tangle-network/agent-interface";
+//#region src/mcp/kb-gate.d.ts
+/**
+ *
+ * `createKbGate` — the valid-only knowledge-base growth gate, distilled from
+ * physim's KB-research subsystem. A research-in-a-loop delegate (or any KB
+ * writer) runs candidate facts through this before persisting, so the KB grows
+ * with ONLY grounded facts — hallucinated, unsourced, or laundered claims are
+ * vetoed at the gate.
+ *
+ * Fail-closed by construction: every judge must `accept`; the FIRST veto wins
+ * and the fact is rejected. The non-negotiable floor (always on, can't be
+ * disabled) is the **passage-present guard** — a fact's `verbatimPassage` MUST
+ * literally appear in its `sourceText`. That single check kills the dominant
+ * failure mode (a confident claim decoupled from any real source).
+ *
+ * Pure + dependency-free: it operates on fact candidates, not on a store, so it
+ * composes with `@tangle-network/agent-knowledge` or any persistence layer
+ * without importing it. The remediation policy (correct-on-veto vs
+ * escalate-as-unverified) is the caller's — this returns the verdict; it never
+ * drops a fact silently.
+ *
+ * @experimental
+ */
+/** @experimental A fact proposed for the KB, with its grounding. */
+interface FactCandidate {
+  /** The atomic claim text. */
+  claim: string;
+  /** Optional extracted value (number or string) the claim asserts. */
+  value?: string | number;
+  /** Verbatim span lifted from the source that backs the claim. */
+  verbatimPassage: string;
+  /** The raw source text the passage must be grounded in. */
+  sourceText: string;
+  /** Where the fact claims to come from — checked for circular/self citations. */
+  citation?: string;
 }
-/** Thrown when reproducible Codex exits without one valid terminal usage event. */
-declare class CodexExecutionDiagnosticError extends Error {
-  readonly reason: string;
-  readonly diagnostic: CodexExecutionFailureDiagnostic;
-  readonly code = "CODEX_EXECUTION_DIAGNOSTIC";
-  constructor(reason: string, diagnostic: CodexExecutionFailureDiagnostic, cause?: unknown);
+/** @experimental */
+interface FactJudgeVerdict {
+  accept: boolean;
+  reason?: string;
+}
+/** @experimental A pluggable fact validator. Throw is NOT allowed — return a
+ *  verdict; a thrown judge is a programmer error, not a veto. */
+interface FactJudge {
+  name: string;
+  judge(candidate: FactCandidate): FactJudgeVerdict | Promise<FactJudgeVerdict>;
+}
+/** @experimental */
+interface KbGateResult {
+  accepted: boolean;
+  /** Name of the judge that vetoed; undefined when accepted. */
+  vetoedBy?: string;
+  reason?: string;
+}
+/** @experimental */
+interface CreateKbGateOptions {
+  /** Extra judges appended after the built-in floor (e.g. an LLM judge). */
+  judges?: FactJudge[];
+  /** Minimum verbatim-passage length. Default 12 — kills empty/stub passages. */
+  minPassageChars?: number;
+  /**
+   * Citation tokens that denote a SELF-generated artifact (e.g. `'spec'`,
+   * `'cad_params'`, `'requirements'`). A citation naming one is circular
+   * (laundering) — the fact cites a derived artifact, not a real source.
+   * Default `[]` (no circular check unless the consumer declares its kinds).
+   */
+  selfArtifactKinds?: string[];
 }
+/**
+ *
+ * Build a fail-closed KB gate. The returned function runs the built-in floor
+ * (passage-non-empty → passage-present → value-in-passage → no-circular-citation)
+ * then any consumer judges, returning on the first veto.
+ *
+ * @experimental
+ */
+declare function createKbGate(options?: CreateKbGateOptions): (candidate: FactCandidate) => Promise<KbGateResult>;
 //#endregion
 //#region src/mcp/harness-native-tools.d.ts
 /**
@@ -37,8 +90,6 @@ declare const harnessNativeTools: {
 };
 /** A harness with a sourced native tool list. */
 type SourcedHarness = keyof typeof harnessNativeTools;
-/** The harnesses this registry has a sourced list for. */
-declare const sourcedHarnesses: ReadonlyArray<SourcedHarness>;
 /**
  * The tool names `harness` publishes natively, or `undefined` when no list has been sourced for it.
  * The two are different facts and a caller must not read one as the other.
@@ -52,76 +103,6 @@ declare function harnessNativeToolNames(harness: HarnessType): ReadonlyArray<str
  */
 declare function collidesWithHarnessNativeTool(name: string): ReadonlyArray<SourcedHarness>;
 //#endregion
-//#region src/mcp/tool-server.d.ts
-/**
- * Protocol versions this server speaks, newest first. `initialize` answers with
- * the client's requested version when it is listed here, and otherwise with
- * `PROTOCOL_VERSION` (2024-11-05), which every client that speaks 2024-11-05 accepts.
- */
-declare const SUPPORTED_PROTOCOL_VERSIONS: readonly string[];
-/** @experimental */
-interface StdioToolServerOptions {
-  /** Server display name surfaced via `initialize`. */
-  serverName: string;
-  /** Server version surfaced via `initialize`. */
-  serverVersion: string;
-  /** The tools to serve. Duplicate names throw — a silent shadow would hide a tool. */
-  tools: readonly McpToolDescriptor[];
-}
-/** @experimental */
-interface StdioToolServer {
-  /** Tools currently registered, keyed by name. */
-  readonly tools: ReadonlyMap<string, McpToolDescriptor>;
-  /** Handle a single parsed JSON-RPC message. Returns the response object (or `null` for notifications). */
-  handle(message: JsonRpcMessage): Promise<JsonRpcResponse | null>;
-  /** Drive the server on a stdio-shaped transport until `stop()` is called. */
-  serve(transport?: McpTransport): Promise<void>;
-  /** Stop a `serve` call. Subsequent requests are rejected. */
-  stop(): void;
-}
-/** Build the generic stdio JSON-RPC tool server. */
-declare function createStdioToolServer(options: StdioToolServerOptions): StdioToolServer;
-//#endregion
-//#region src/mcp/hub-server.d.ts
-/** The substrate data providers whose Hub adapters become agent tools. */
-declare const HUB_DATA_PROVIDER_KINDS: readonly string[];
-/** The subset of `PlatformHubClient` this module needs — mocks plug in here. */
-interface HubIntegrationClient {
-  listConnections(): Promise<PlatformConnection[]>;
-  exec(input: {
-    path: string;
-    input?: unknown;
-    connectionId?: string;
-  }): Promise<unknown>;
-}
-interface HubIntegrationToolsOptions {
-  client: HubIntegrationClient;
-  /** Provider kinds to expose. Defaults to `HUB_DATA_PROVIDER_KINDS`. */
-  providers?: readonly string[];
-  /** Also serve connections whose last health probe failed. Default false. */
-  includeUnhealthy?: boolean;
-}
-/**
- * One router tool per active Hub connection to a data provider. The tool
- * handler never holds provider credentials — it execs through the Hub, which
- * enforces the per-user action policy and writes the audit record.
- */
-declare function hubIntegrationTools(options: HubIntegrationToolsOptions): Promise<McpToolDescriptor[]>;
-interface CreateHubIntegrationToolServerOptions extends HubIntegrationToolsOptions {
-  /** Server display name surfaced via `initialize`. Default 'agent-hub-integrations'. */
-  serverName?: string;
-  /** Server version surfaced via `initialize`. Default '0'. */
-  serverVersion?: string;
-}
-/**
- * Build the hub integration MCP server on the shared stdio JSON-RPC core —
- * the same wire protocol every in-repo MCP server speaks. Serves zero tools
- * when the caller has no active data-provider connections (a session without
- * connections simply gets no database tools, mirroring the memory server's
- * "no artifact, no server" discipline).
- */
-declare function createHubIntegrationToolServer(options: CreateHubIntegrationToolServerOptions): Promise<StdioToolServer>;
-//#endregion
 //#region src/mcp/in-process-executor.d.ts
 /** @experimental */
 interface InProcessExecutorOptions {
@@ -147,13 +128,6 @@ interface InProcessExecutorOptions {
     stderr: string;
   }>;
 }
-/** @experimental */
-interface InProcessExecutorDescribePlacement extends LoopSandboxPlacement {
-  /** Worktree path in the parent sandbox's filesystem (set so traces correlate to on-disk artifacts). */
-  worktreePath?: string;
-  /** Which harness handled this delegation. */
-  harness?: LocalHarness;
-}
 /**
  * Build an in-process executor. Returns a {@link DelegationExecutor} whose `client.create()`
  * returns a minimal virtual `SandboxInstance`; the kernel calls `streamPrompt(msg)` on it, which
@@ -168,326 +142,33 @@ interface InProcessExecutorDescribePlacement extends LoopSandboxPlacement {
  */
 declare function createInProcessExecutor(options: InProcessExecutorOptions): DelegationExecutor;
 //#endregion
-//#region src/mcp/memory-server.d.ts
-/** One row of agent memory: a crisp lesson/fact with provenance. */
-interface MemoryItem {
-  /** Stable id (content-hash by convention; see `memoryArtifactFromLessons`). */
-  id: string;
-  /** The lesson itself — one imperative or observation the agent should recall. */
-  text: string;
-  /** Optional retrieval tags, matched by `memory_search` alongside the text. */
-  tags?: string[];
-  /** Provenance: the finding / trace / curation pass this row came from. */
-  source?: string;
-}
-/**
- * The `memory` artifact payload — HOW a profile's memory is stored and served:
- *
- *   - `store: 'file'` — served by the in-repo memory bin
- *     (`agent-runtime-memory-mcp`, src/mcp/memory-bin.ts): rows load from
- *     `path` (a JSON array or JSONL file of `MemoryItem`) and/or the inline
- *     `items` seed (inline wins on id collision). At least one of
- *     `path`/`items` is required.
- *   - `store: 'mcp'`  — an EXTERNAL, already-runnable MCP server that exposes
- *     the memory tools itself; `server` is required and mounts verbatim.
- *
- * `logPath` makes the served memory append one JSONL row per `memory_search`
- * — the retrieval log a holdout estimator reads (see module doc).
- */
-interface AgentMemorySpec {
-  store: 'file' | 'mcp';
-  /** `store:'file'` — host path to the durable row store (JSON array or JSONL). */
-  path?: string;
-  /** Inline seed rows, served alongside (and winning over) `path` rows. */
-  items?: MemoryItem[];
-  /** `store:'mcp'` — the external server that already serves memory tools. */
-  server?: AgentProfileMcpServer;
-  /** JSONL retrieval log: one row per `memory_search` (ts, query, k, returned). */
-  logPath?: string;
-}
-/** Env var naming the durable row store file the memory bin loads (the
- *  `memoryMcpServer` ↔ memory-bin contract). */
-declare const MEMORY_FILE_ENV = "AGENT_MEMORY_FILE";
-/** Env var carrying inline JSON `MemoryItem` rows (win over file rows on id). */
-declare const MEMORY_ITEMS_ENV = "AGENT_MEMORY_ITEMS";
-/** Env var naming the JSONL retrieval log (one row per `memory_search`). */
-declare const MEMORY_LOG_ENV = "AGENT_MEMORY_LOG";
-/** Env var overriding the served display name (default 'agent-memory'). */
-declare const MEMORY_NAME_ENV = "AGENT_MEMORY_NAME";
-interface CreateMemoryToolServerOptions {
-  /** The rows to serve. MUST be non-empty (an empty memory is never served). */
-  items: readonly MemoryItem[];
-  /** Server display name surfaced via `initialize`. Default 'agent-memory'. */
-  serverName?: string;
-  /** Server version surfaced via `initialize`. Default '0'. */
-  serverVersion?: string;
-  /** Default result count for `memory_search`. Default 5. */
-  defaultK?: number;
-  /** Append one JSONL row per `memory_search` (the retrieval-holdout seam). */
-  logPath?: string;
+//#region src/mcp/tool-server.d.ts
+/** @experimental */
+interface StdioToolServerOptions {
+  /** Server display name surfaced via `initialize`. */
+  serverName: string;
+  /** Server version surfaced via `initialize`. */
+  serverVersion: string;
+  /** The tools to serve. Duplicate names throw — a silent shadow would hide a tool. */
+  tools: readonly McpToolDescriptor[];
 }
-/**
- * Build the memory MCP server: `memory_search` (lexical top-k over the rows)
- * and `memory_get` (one row by id) on the generic stdio JSON-RPC core.
- */
-declare function createMemoryToolServer(opts: CreateMemoryToolServerOptions): StdioToolServer;
-/** Coerce an untrusted JSON array into validated `MemoryItem` rows. */
-declare function parseMemoryItems(value: unknown, source: string): MemoryItem[];
-/** Read a memory store file: a JSON array, or JSONL (one `MemoryItem` per line). */
-declare function readMemoryItemsFile(path: string): MemoryItem[];
-/** What the memory bin resolved from its environment. */
-interface ResolvedMemoryEnv {
-  items: MemoryItem[];
-  serverName?: string;
-  logPath?: string;
+/** @experimental */
+interface StdioToolServer {
+  /** Tools currently registered, keyed by name. */
+  readonly tools: ReadonlyMap<string, McpToolDescriptor>;
+  /** Handle a single parsed JSON-RPC message. Returns the response object (or `null` for notifications). */
+  handle(message: JsonRpcMessage): Promise<JsonRpcResponse | null>;
+  /** Drive the server on a stdio-shaped transport until `stop()` is called. */
+  serve(transport?: McpTransport): Promise<void>;
+  /** Stop a `serve` call. Subsequent requests are rejected. */
+  stop(): void;
 }
-/**
- * Resolve the bin's memory from `AGENT_MEMORY_FILE` (durable store) and/or
- * `AGENT_MEMORY_ITEMS` (inline JSON rows; wins on id collision). Zero rows is
- * a boot FAILURE, matching the fail-closed materialization discipline.
- */
-declare function resolveMemoryFromEnv(env: Record<string, string | undefined>): ResolvedMemoryEnv;
+/** Build the generic stdio JSON-RPC tool server. */
+declare function createStdioToolServer(options: StdioToolServerOptions): StdioToolServer;
 //#endregion
 //#region src/mcp/tools/coordination-manager.d.ts
 /** Build the driver's MCP tools over a live scope. */
 declare function createCoordinationTools(opts: CoordinationToolsOptions): CoordinationTools;
 //#endregion
-//#region src/mcp/tools/delegate-feedback.d.ts
-/** MCP tool name for the `delegate_feedback` feedback-recording tool. @stable */
-declare const DELEGATE_FEEDBACK_TOOL_NAME = "delegate_feedback";
-/** Human-readable description of the `delegate_feedback` MCP tool, injected into the tool manifest. @stable */
-declare const DELEGATE_FEEDBACK_DESCRIPTION: string;
-/** JSON Schema for `delegate_feedback` tool arguments (`refersTo`, `rating`, `by`, optional fields). @stable */
-declare const DELEGATE_FEEDBACK_INPUT_SCHEMA: {
-  readonly type: "object";
-  readonly properties: {
-    readonly refersTo: {
-      readonly type: "object";
-      readonly properties: {
-        readonly kind: {
-          readonly type: "string";
-          readonly enum: readonly ["delegation", "artifact", "outcome"];
-        };
-        readonly ref: {
-          readonly type: "string";
-        };
-      };
-      readonly required: readonly ["kind", "ref"];
-      readonly additionalProperties: false;
-    };
-    readonly rating: {
-      readonly type: "object";
-      readonly properties: {
-        readonly score: {
-          readonly type: "number";
-          readonly minimum: 0;
-          readonly maximum: 1;
-        };
-        readonly label: {
-          readonly type: "string";
-          readonly enum: readonly ["good", "bad", "neutral", "mixed"];
-        };
-        readonly notes: {
-          readonly type: "string";
-        };
-      };
-      readonly required: readonly ["score", "notes"];
-      readonly additionalProperties: false;
-    };
-    readonly by: {
-      readonly type: "string";
-      readonly enum: readonly ["agent", "user", "downstream-judge"];
-    };
-    readonly capturedAt: {
-      readonly type: "string";
-    };
-    readonly namespace: {
-      readonly type: "string";
-    };
-  };
-  readonly required: readonly ["refersTo", "rating", "by"];
-  readonly additionalProperties: false;
-};
-/** Parse and validate raw MCP tool input into typed `DelegateFeedbackArgs`; throws `TypeError` on bad input. @stable */
-declare function validateDelegateFeedbackArgs(raw: unknown): DelegateFeedbackArgs;
-/** @stable */
-interface DelegateFeedbackHandlerOptions {
-  queue: DelegationTaskQueue;
-  store: FeedbackStore;
-  generateId?: () => string;
-  now?: () => string;
-}
-/** Build the MCP tool handler that persists feedback events and attaches them to delegation records. @stable */
-declare function createDelegateFeedbackHandler(options: DelegateFeedbackHandlerOptions): (raw: unknown) => Promise<DelegateFeedbackResult>;
-//#endregion
-//#region src/mcp/tools/delegate-ui-audit.d.ts
-/** MCP tool name for the `delegate_ui_audit` async kickoff tool. @experimental */
-declare const DELEGATE_UI_AUDIT_TOOL_NAME = "delegate_ui_audit";
-/** Human-readable description of the `delegate_ui_audit` MCP tool, injected into the tool manifest. @experimental */
-declare const DELEGATE_UI_AUDIT_DESCRIPTION: string;
-/** JSON Schema for `delegate_ui_audit` tool arguments (`workspaceDir`, `routes`, optional config). @experimental */
-declare const DELEGATE_UI_AUDIT_INPUT_SCHEMA: {
-  readonly type: "object";
-  readonly properties: {
-    readonly workspaceDir: {
-      readonly type: "string";
-      readonly description: "Absolute path for the audit workspace.";
-    };
-    readonly routes: {
-      readonly type: "array";
-      readonly items: {
-        readonly type: "object";
-        readonly properties: {
-          readonly name: {
-            readonly type: "string";
-            readonly description: "Stable route name (used in screenshot filenames).";
-          };
-          readonly url: {
-            readonly type: "string";
-            readonly description: "Fully-qualified URL.";
-          };
-          readonly viewports: {
-            readonly type: "array";
-            readonly items: {
-              readonly type: "object";
-              readonly properties: {
-                readonly width: {
-                  readonly type: "integer";
-                  readonly minimum: 1;
-                };
-                readonly height: {
-                  readonly type: "integer";
-                  readonly minimum: 1;
-                };
-              };
-              readonly required: readonly ["width", "height"];
-              readonly additionalProperties: false;
-            };
-            readonly description: "Viewports to capture at. Default [{1280, 800}].";
-          };
-          readonly fullPage: {
-            readonly type: "boolean";
-          };
-          readonly waitFor: {
-            readonly type: "string";
-            readonly description: "CSS selector to wait for before capturing.";
-          };
-        };
-        readonly required: readonly ["name", "url"];
-        readonly additionalProperties: false;
-      };
-      readonly minItems: 1;
-    };
-    readonly namespace: {
-      readonly type: "string";
-      readonly description: "Multi-tenant scope.";
-    };
-    readonly config: {
-      readonly type: "object";
-      readonly properties: {
-        readonly lenses: {
-          readonly type: "array";
-          readonly items: {
-            readonly type: "string";
-            readonly enum: readonly UiLens[];
-          };
-          readonly description: "Lenses to iterate. Default: every lens except \"other\".";
-        };
-        readonly maxIterations: {
-          readonly type: "integer";
-          readonly minimum: 1;
-        };
-        readonly maxConcurrency: {
-          readonly type: "integer";
-          readonly minimum: 1;
-        };
-        readonly productContext: {
-          readonly type: "string";
-        };
-      };
-      readonly additionalProperties: false;
-    };
-  };
-  readonly required: readonly ["workspaceDir", "routes"];
-  readonly additionalProperties: false;
-};
-/** Parse and validate raw MCP tool input into typed `DelegateUiAuditArgs`; throws `TypeError` on bad input. @experimental */
-declare function validateDelegateUiAuditArgs(raw: unknown): DelegateUiAuditArgs;
-/** @experimental */
-interface DelegateUiAuditHandlerOptions {
-  queue: DelegationTaskQueue;
-  delegate: UiAuditorDelegate;
-  estimateDurationMs?: (args: DelegateUiAuditArgs) => number;
-}
-/** Build the MCP tool handler that validates input, deduplicates via idempotency key, and enqueues a UI audit. @experimental */
-declare function createDelegateUiAuditHandler(options: DelegateUiAuditHandlerOptions): (raw: unknown) => Promise<DelegateUiAuditResult>;
-//#endregion
-//#region src/mcp/tools/delegation-history.d.ts
-/** MCP tool name for the `delegation_history` read-past-delegations tool. @stable */
-declare const DELEGATION_HISTORY_TOOL_NAME = "delegation_history";
-/** Human-readable description of the `delegation_history` MCP tool, injected into the tool manifest. @stable */
-declare const DELEGATION_HISTORY_DESCRIPTION: string;
-/** JSON Schema for `delegation_history` tool arguments (optional `namespace`, `profile`, `since`, `limit`). @stable */
-declare const DELEGATION_HISTORY_INPUT_SCHEMA: {
-  readonly type: "object";
-  readonly properties: {
-    readonly namespace: {
-      readonly type: "string";
-    };
-    readonly profile: {
-      readonly type: "string";
-      readonly enum: readonly ["coder", "researcher", "ui-auditor"];
-    };
-    readonly since: {
-      readonly type: "string";
-      readonly description: "ISO datetime — earliest startedAt to include.";
-    };
-    readonly limit: {
-      readonly type: "integer";
-      readonly minimum: 1;
-      readonly maximum: 500;
-    };
-  };
-  readonly additionalProperties: false;
-};
-/** Parse and validate raw MCP tool input into typed `DelegationHistoryArgs`; throws `TypeError` on bad input. @stable */
-declare function validateDelegationHistoryArgs(raw: unknown): DelegationHistoryArgs;
-/** @stable */
-interface DelegationHistoryHandlerOptions {
-  queue: DelegationTaskQueue;
-}
-/** Build the MCP tool handler that reads filtered past delegations from a `DelegationTaskQueue`. @stable */
-declare function createDelegationHistoryHandler(options: DelegationHistoryHandlerOptions): (raw: unknown) => Promise<DelegationHistoryResult>;
-//#endregion
-//#region src/mcp/tools/delegation-status.d.ts
-/** MCP tool name for the `delegation_status` synchronous-poll tool. @stable */
-declare const DELEGATION_STATUS_TOOL_NAME = "delegation_status";
-/** Human-readable description of the `delegation_status` MCP tool, injected into the tool manifest. @stable */
-declare const DELEGATION_STATUS_DESCRIPTION: string;
-/** JSON Schema for `delegation_status` tool arguments (`taskId` + optional `includeTrace`). @stable */
-declare const DELEGATION_STATUS_INPUT_SCHEMA: {
-  readonly type: "object";
-  readonly properties: {
-    readonly taskId: {
-      readonly type: "string";
-      readonly description: "Returned by delegate_ui_audit.";
-    };
-    readonly includeTrace: {
-      readonly type: "boolean";
-      readonly description: "Also return the journaled loop-trace span tree for this delegation. Default false.";
-    };
-  };
-  readonly required: readonly ["taskId"];
-  readonly additionalProperties: false;
-};
-/** Parse and validate raw MCP tool input into typed `DelegationStatusArgs`; throws `TypeError` on bad input. @stable */
-declare function validateDelegationStatusArgs(raw: unknown): DelegationStatusArgs;
-/** @stable */
-interface DelegationStatusHandlerOptions {
-  queue: DelegationTaskQueue;
-}
-/** Build the MCP tool handler that polls a `DelegationTaskQueue` for task status. @stable */
-declare function createDelegationStatusHandler(options: DelegationStatusHandlerOptions): (raw: unknown) => Promise<DelegationStatusResult>;
-//#endregion
-export { ANALYST_DEFINITION_BOUNDS, type AgentMemorySpec, type AnalystAssignmentRecord, type AnalystDefinitionIssue, type AnalystFindingEvent, type AnalystKind, type AnalystRegistry, type AnalystRunContext, type AnalystToolGroupName, type AuthoredAnalystDefinition, type AuthoredAnalystLimits, type AuthorizeDownMessage, type AuthorizedDownMessage, type AwaitWakeInput, type CappedDelegationTrace, type ChildQuestionInbox, type CoderDelegate, type CoderOutput, type CoderReview, type CoderReviewer, CodexExecutionDiagnosticError, type CodexExecutionEvidence, type CodexExecutionFailureDiagnostic, type CodexExecutionPolicy, type CodexTokenUsage, type ContinuationInstruction, type CoordinationEvent, type CoordinationTools, type CoordinationToolsOptions, type CreateHubIntegrationToolServerOptions, type CreateKbGateOptions, type CreateMemoryToolServerOptions, type CreateWorktreeOptions, DEFAULT_LOCAL_HARNESS, DELEGATE_DESCRIPTION, DELEGATE_FEEDBACK_DESCRIPTION, DELEGATE_FEEDBACK_INPUT_SCHEMA, DELEGATE_FEEDBACK_TOOL_NAME, DELEGATE_INPUT_SCHEMA, DELEGATE_TOOL_NAME, DELEGATE_UI_AUDIT_DESCRIPTION, DELEGATE_UI_AUDIT_INPUT_SCHEMA, DELEGATE_UI_AUDIT_TOOL_NAME, DELEGATION_HISTORY_DESCRIPTION, DELEGATION_HISTORY_INPUT_SCHEMA, DELEGATION_HISTORY_TOOL_NAME, DELEGATION_STATUS_DESCRIPTION, DELEGATION_STATUS_INPUT_SCHEMA, DELEGATION_STATUS_TOOL_NAME, DELEGATION_TRACE_MAX_BYTES, DELEGATION_TRACE_MAX_SPANS, type DefinedAnalystRecord, type DelegateArgs, type DelegateCodeArgs, type DelegateCodeConfig, type DelegateCodeResult, type DelegateError, type DelegateFeedbackArgs, type DelegateFeedbackHandlerOptions, type DelegateFeedbackResult, type DelegateHandlerOptions, type DelegateResearchArgs, type DelegateResearchConfig, type DelegateResearchResult, type DelegateResult, type DelegateRunCtx, type DelegateUiAuditArgs, type DelegateUiAuditConfig, type DelegateUiAuditHandlerOptions, type DelegateUiAuditResult, type DelegateUiAuditRoute, type DelegationArgs, type DelegationError, type DelegationExecutor, type DelegationFeedbackSnapshot, type DelegationHistoryArgs, type DelegationHistoryEntry, type DelegationHistoryHandlerOptions, type DelegationHistoryResult, DelegationPersistenceError, type DelegationProfile, type DelegationProgress, type DelegationRecord, type DelegationResultPayload, type DelegationResumeContext, type DelegationResumeDriver, type DelegationResumeTick, type DelegationRunContext, DelegationStateCorruptError, type DelegationStatus, type DelegationStatusArgs, type DelegationStatusHandlerOptions, type DelegationStatusResult, type DelegationStore, DelegationTaskQueue, type DelegationTaskQueueOptions, type DelegationTraceCaps, type DelegationTraceCollector, type DelegationTraceSpan, type DetachedSessionDelegateOptions, type DetachedSessionRefParts, type DetachedTurn, type DetachedTurnResumeDriverOptions, type DetachedWinnerSelection, type DiffOptions, type DiffResult, type DownMessageAuthorizationInput, type DownMessageDeliveryAttempt, type DownMessageDeliveryOutcome, type DownMessageEvent, type DriveTurnCapableBox, type DriveTurnTick, type EscalateQuestion, type EventAcknowledgement, type FactCandidate, type FactJudge, type FactJudgeVerdict, type FeedbackEvent, type FeedbackRating, type FeedbackRefersTo, type FeedbackStore, FileDelegationStore, type FileDelegationStoreOptions, type FleetHandle, type FleetWorkspaceExecutorOptions, type GitRunner, type GraphSubtaskPreparation, type GraphSubtasks, HUB_DATA_PROVIDER_KINDS, type HubIntegrationClient, type HubIntegrationToolsOptions, InMemoryDelegationStore, InMemoryFeedbackStore, type InProcessExecutorDescribePlacement, type InProcessExecutorOptions, type JsonRpcMessage, type JsonRpcResponse, type KbGateResult, LOCAL_HARNESSES, type LeadMessage, type LocalHarness, type LocalHarnessResult, MEMORY_FILE_ENV, MEMORY_ITEMS_ENV, MEMORY_LOG_ENV, MEMORY_NAME_ENV, type MakeWorkerAgent, type ManagerReentryState, type ManagerWake, type McpServer, type McpServerOptions, type McpToolAnnotations, type McpToolDescriptor, type McpTransport, type MemoryItem, type PeerAuditAccess, type Question, type QuestionDecision, type QuestionEscalationOutcome, type QuestionEscalationRecord, type QuestionEscalationTarget, type QuestionLevel, type QuestionOption, type QuestionPolicy, type QuestionRecord, type QuestionUrgency, type RemoveWorktreeOptions, type ResearchOutputShape, type ResearchSource, type ResolveSpawnResourcePathsResult, type ResolvedMemoryEnv, type ResolvedSpawnResourcePath, type RunDetachedTurnOptions, type RunLocalHarnessOptions, SPAWN_RESOURCE_PATH_MAX_BYTES, SUPPORTED_PROTOCOL_VERSIONS, type SettleDetachedCoderTurnOptions, type SettledWorker, type SiblingSandboxExecutorOptions, type SourcedHarness, type SpawnResourceBytes, type SpawnResourceRead, type SpawnResourceReader, type StdioToolServer, type StdioToolServerOptions, type SubmitInput, type SubmitOutput, type ToolOutcomeEvent, type TraceContext, type UiAuditLensFilter, type UiAuditorDelegate, type UiAuditorDelegationOutput, type WorkerSpawnContext, type WorkerWatchOptions, type WorktreeHandle, analystToolGroupNames, buildDelegationTraceSpans, capDelegationTrace, captureWorktreeDiff, coderTaskFromArgs, collidesWithHarnessNativeTool, composeLoopTraceEmitters, createCoordinationTools, createDelegateFeedbackHandler, createDelegateHandler, createDelegateUiAuditHandler, createDelegationHistoryHandler, createDelegationStatusHandler, createDelegationTraceCollector, createDetachedTurnResumeDriver, createFleetWorkspaceExecutor, createHubIntegrationToolServer, createInProcessExecutor, createInProcessTransport, createKbGate, createMcpServer, createMemoryToolServer, createPropagatingTraceEmitter, createSiblingSandboxExecutor, createStdioToolServer, createWorktree, delegationProfiles, detachedSessionDelegate, detachedTurnEvents, downMessageRefusalReasons, environmentReader, eventToSnapshot, formatDetachedSessionRef, harnessNativeToolNames, harnessNativeTools, harnessSupportsReasoningEffort, hashIdempotencyInput, hostDirectoryReader, hubIntegrationTools, localHarnessExecutable, mcpToolsForRuntimeMcp, mcpToolsForRuntimeMcpSubset, mergeTraceEnv, parseAuthoredAnalystDefinition, parseCodexTokenUsage, parseDetachedSessionRef, parseMemoryItems, questionEscalationTargets, readMemoryItemsFile, readTraceContextFromEnv, removeWorktree, resolveMemoryFromEnv, resolveSpawnResourcePaths, runDetachedTurn, settleDetachedCoderTurn, sourcedHarnesses, traceContextToEnv, validateDelegateArgs, validateDelegateFeedbackArgs, validateDelegateUiAuditArgs, validateDelegationHistoryArgs, validateDelegationStatusArgs };
+export { type AnalystRegistry, type AwaitWakeInput, type CheckRead, type CoderDelegate, type CoderOutput, type CoderReview, type CoderReviewer, type CoderTask, type CoordinationEvent, type CoordinationStats, type CoordinationTools, type CoordinationToolsOptions, type CreateKbGateOptions, type DelegateCodeArgs, type DelegateCodeConfig, type DelegateError, type DelegateHandlerOptions, type DelegateResearchArgs, type DelegateResearchConfig, type DelegateResult, type DelegateRunCtx, type DelegateUiAuditArgs, type DelegateUiAuditConfig, type DelegateUiAuditRoute, type DelegationArgs, type DelegationError, type DelegationExecutor, type DelegationFeedbackSnapshot, type DelegationHistoryArgs, type DelegationHistoryEntry, type DelegationPersistenceError, type DelegationProgress, type DelegationRecord, type DelegationResultPayload, type DelegationResumeContext, type DelegationResumeDriver, type DelegationResumeTick, type DelegationRunContext, type DelegationStatus, type DelegationStatusResult, type DelegationStore, DelegationTaskQueue, type DelegationTaskQueueOptions, type DelegationTraceSpan, type DetachedSessionDelegateOptions, type DetachedTurn, type DetachedWinnerSelection, type FactCandidate, type FactJudge, type FactJudgeVerdict, type FeedbackEvent, type FeedbackRating, type FeedbackRefersTo, type FeedbackStore, FileDelegationStore, type FileDelegationStoreOptions, type FleetHandle, type FleetWorkspaceExecutorOptions, type InProcessExecutorOptions, type JsonRpcMessage, type JsonRpcResponse, type KbGateResult, LOCAL_HARNESSES, type LocalHarness, type MakeWorkerAgent, type ManagerWake, type McpServer, type McpServerOptions, type McpToolAnnotations, type McpToolDescriptor, type McpTransport, type Question, type QuestionLevel, type QuestionOption, type QuestionUrgency, type ResearchOutputShape, type ResolveSpawnResourcePathsResult, type ResolvedSpawnResourcePath, type RunDetachedTurnOptions, type RunLocalHarnessOptions, type SiblingSandboxExecutorOptions, type SpawnRefusalCause, type SpawnResourceBytes, type SpawnResourceRead, type SpawnResourceReader, type StdioToolServer, type StdioToolServerOptions, type SubmitInput, type SubmitOutput, type TraceContext, type UiAuditLensFilter, type UiAuditorDelegate, type UiAuditorDelegationOutput, type WorkerSpawnContext, collidesWithHarnessNativeTool, composeLoopTraceEmitters, createCoordinationTools, createDelegateHandler, createFleetWorkspaceExecutor, createInProcessExecutor, createKbGate, createMcpServer, createPropagatingTraceEmitter, createSiblingSandboxExecutor, createStdioToolServer, detachedSessionDelegate, environmentReader, harnessNativeToolNames, readTraceContextFromEnv, resolveSpawnResourcePaths, runDetachedTurn };
 //# sourceMappingURL=index.d.ts.map