@theokit/sdk 4.37.2 → 4.38.0

package/dist/{run-CwEJtLPE.d.cts → run-vJHg2eGw.d.ts}

@@ -1,5 +1,174 @@
 import * as zod from 'zod';
 
+/**
+ * Type-leaf — base message types shared between `conversation.ts` and
+ * `updates.ts`. Extracted to break LOW type-only cycle #6 (audit
+ * `architecture-output/final_report.md`) per plan arch-review-fixes-2026-06-06
+ * § Phase 4 / T4.1 (D438).
+ *
+ * Public surface unchanged — `types/conversation.ts` re-exports `UserMessage`
+ * from this leaf so `import type { UserMessage } from "@theokit/sdk"` keeps
+ * resolving.
+ *
+ * @public
+ */
+/**
+ * User-authored message in a conversation history.
+ *
+ * @public
+ */
+interface UserMessage {
+    text: string;
+}
+
+/**
+ * Single tool call event. The internal `args` and `result` shapes are NOT stable.
+ *
+ * @public
+ */
+interface ToolCall {
+    callId: string;
+    name: string;
+    args?: unknown;
+    result?: unknown;
+}
+/**
+ * Incremental text token from the assistant.
+ *
+ * @public
+ */
+interface TextDeltaUpdate {
+    type: "text-delta";
+    text: string;
+}
+/**
+ * Incremental reasoning token.
+ *
+ * @public
+ */
+interface ThinkingDeltaUpdate {
+    type: "thinking-delta";
+    text: string;
+}
+/**
+ * Emitted when a reasoning block completes.
+ *
+ * @public
+ */
+interface ThinkingCompletedUpdate {
+    type: "thinking-completed";
+    thinkingDurationMs: number;
+}
+/**
+ * Tool call started — args committed.
+ *
+ * @public
+ */
+interface ToolCallStartedUpdate {
+    type: "tool-call-started";
+    callId: string;
+    toolCall: ToolCall;
+    modelCallId: string;
+}
+/**
+ * Tool call arguments streaming in incrementally.
+ *
+ * @public
+ */
+interface PartialToolCallUpdate {
+    type: "partial-tool-call";
+    callId: string;
+    toolCall: ToolCall;
+    modelCallId: string;
+}
+/**
+ * Tool call completed.
+ *
+ * @public
+ */
+interface ToolCallCompletedUpdate {
+    type: "tool-call-completed";
+    callId: string;
+    toolCall: ToolCall;
+    modelCallId: string;
+}
+/**
+ * Token count delta for usage tracking.
+ *
+ * @public
+ */
+interface TokenDeltaUpdate {
+    type: "token-delta";
+    tokens: number;
+}
+/**
+ * Conversation step started.
+ *
+ * @public
+ */
+interface StepStartedUpdate {
+    type: "step-started";
+    stepId: number;
+}
+/**
+ * Conversation step completed.
+ *
+ * @public
+ */
+interface StepCompletedUpdate {
+    type: "step-completed";
+    stepId: number;
+    stepDurationMs: number;
+}
+/**
+ * Turn ended with usage summary.
+ *
+ * @public
+ */
+interface TurnEndedUpdate {
+    type: "turn-ended";
+    usage?: {
+        inputTokens: number;
+        outputTokens: number;
+        cacheReadTokens: number;
+        cacheWriteTokens: number;
+    };
+}
+/**
+ * User message appended to the conversation.
+ *
+ * @public
+ */
+interface UserMessageAppendedUpdate {
+    type: "user-message-appended";
+    userMessage: UserMessage;
+}
+/** @public */
+interface SummaryUpdate {
+    type: "summary";
+    summary: string;
+}
+/** @public */
+interface SummaryStartedUpdate {
+    type: "summary-started";
+}
+/** @public */
+interface SummaryCompletedUpdate {
+    type: "summary-completed";
+}
+/** @public */
+interface ShellOutputDeltaUpdate {
+    type: "shell-output-delta";
+    event: Record<string, unknown>;
+}
+/**
+ * Lowest-level raw update from a run. Pass `onDelta` to `agent.send()` to
+ * consume these. Finer-grained than `SDKMessage` events.
+ *
+ * @public
+ */
+type InteractionUpdate = TextDeltaUpdate | ThinkingDeltaUpdate | ThinkingCompletedUpdate | ToolCallStartedUpdate | ToolCallCompletedUpdate | PartialToolCallUpdate | TokenDeltaUpdate | StepStartedUpdate | StepCompletedUpdate | TurnEndedUpdate | UserMessageAppendedUpdate | SummaryUpdate | SummaryStartedUpdate | SummaryCompletedUpdate | ShellOutputDeltaUpdate;
+
 /**
  * `PermissionEngine` — first-match permission rules for tool invocations.
  *
@@ -377,11 +546,11 @@ interface ModelSelection {
     id: string;
     params?: ModelParameterValue[];
     /**
-     * M94 — janela de contexto do modelo, em tokens. Vira o `override` do resolvedor de janela.
+     * M94 — the model's context window, in tokens. Becomes the window resolver's `override`.
      *
-     * Existe para modelos SEM entrada de catálogo: sem ela, um modelo de 400k era orçado contra o
-     * piso de 128k e compactava ~3× mais do que precisava. Um valor acima do que o catálogo conhece
-     * é clampeado — declarar 10M não estoura o provider.
+     * It exists for models with NO catalog entry: without it, a 400k model was budgeted against the
+     * 128k floor and compacted ~3x more than it needed to. A value above what the catalog knows is
+     * clamped — declaring 10M does not blow past the provider.
      */
     contextWindow?: number;
 }
@@ -448,175 +617,6 @@ interface CustomTool {
     }) => string | ToolResultContentBlock[] | Promise<string | ToolResultContentBlock[]>;
 }
 
-/**
- * Type-leaf — base message types shared between `conversation.ts` and
- * `updates.ts`. Extracted to break LOW type-only cycle #6 (audit
- * `architecture-output/final_report.md`) per plan arch-review-fixes-2026-06-06
- * § Phase 4 / T4.1 (D438).
- *
- * Public surface unchanged — `types/conversation.ts` re-exports `UserMessage`
- * from this leaf so `import type { UserMessage } from "@theokit/sdk"` keeps
- * resolving.
- *
- * @public
- */
-/**
- * User-authored message in a conversation history.
- *
- * @public
- */
-interface UserMessage {
-    text: string;
-}
-
-/**
- * Single tool call event. The internal `args` and `result` shapes are NOT stable.
- *
- * @public
- */
-interface ToolCall {
-    callId: string;
-    name: string;
-    args?: unknown;
-    result?: unknown;
-}
-/**
- * Incremental text token from the assistant.
- *
- * @public
- */
-interface TextDeltaUpdate {
-    type: "text-delta";
-    text: string;
-}
-/**
- * Incremental reasoning token.
- *
- * @public
- */
-interface ThinkingDeltaUpdate {
-    type: "thinking-delta";
-    text: string;
-}
-/**
- * Emitted when a reasoning block completes.
- *
- * @public
- */
-interface ThinkingCompletedUpdate {
-    type: "thinking-completed";
-    thinkingDurationMs: number;
-}
-/**
- * Tool call started — args committed.
- *
- * @public
- */
-interface ToolCallStartedUpdate {
-    type: "tool-call-started";
-    callId: string;
-    toolCall: ToolCall;
-    modelCallId: string;
-}
-/**
- * Tool call arguments streaming in incrementally.
- *
- * @public
- */
-interface PartialToolCallUpdate {
-    type: "partial-tool-call";
-    callId: string;
-    toolCall: ToolCall;
-    modelCallId: string;
-}
-/**
- * Tool call completed.
- *
- * @public
- */
-interface ToolCallCompletedUpdate {
-    type: "tool-call-completed";
-    callId: string;
-    toolCall: ToolCall;
-    modelCallId: string;
-}
-/**
- * Token count delta for usage tracking.
- *
- * @public
- */
-interface TokenDeltaUpdate {
-    type: "token-delta";
-    tokens: number;
-}
-/**
- * Conversation step started.
- *
- * @public
- */
-interface StepStartedUpdate {
-    type: "step-started";
-    stepId: number;
-}
-/**
- * Conversation step completed.
- *
- * @public
- */
-interface StepCompletedUpdate {
-    type: "step-completed";
-    stepId: number;
-    stepDurationMs: number;
-}
-/**
- * Turn ended with usage summary.
- *
- * @public
- */
-interface TurnEndedUpdate {
-    type: "turn-ended";
-    usage?: {
-        inputTokens: number;
-        outputTokens: number;
-        cacheReadTokens: number;
-        cacheWriteTokens: number;
-    };
-}
-/**
- * User message appended to the conversation.
- *
- * @public
- */
-interface UserMessageAppendedUpdate {
-    type: "user-message-appended";
-    userMessage: UserMessage;
-}
-/** @public */
-interface SummaryUpdate {
-    type: "summary";
-    summary: string;
-}
-/** @public */
-interface SummaryStartedUpdate {
-    type: "summary-started";
-}
-/** @public */
-interface SummaryCompletedUpdate {
-    type: "summary-completed";
-}
-/** @public */
-interface ShellOutputDeltaUpdate {
-    type: "shell-output-delta";
-    event: Record<string, unknown>;
-}
-/**
- * Lowest-level raw update from a run. Pass `onDelta` to `agent.send()` to
- * consume these. Finer-grained than `SDKMessage` events.
- *
- * @public
- */
-type InteractionUpdate = TextDeltaUpdate | ThinkingDeltaUpdate | ThinkingCompletedUpdate | ToolCallStartedUpdate | ToolCallCompletedUpdate | PartialToolCallUpdate | TokenDeltaUpdate | StepStartedUpdate | StepCompletedUpdate | TurnEndedUpdate | UserMessageAppendedUpdate | SummaryUpdate | SummaryStartedUpdate | SummaryCompletedUpdate | ShellOutputDeltaUpdate;
-
 /**
  * Plain assistant message in a conversation history.
  *
@@ -1546,6 +1546,21 @@ interface CompletionCheckResult {
  *
  * @public
  */
+/**
+ * theokit#140 - one element of {@link Run.events}: either a structural SDK message or a live delta.
+ *
+ * A discriminated union rather than a widened `SDKMessage`, because a token delta is not a message
+ * and pretending otherwise would force every consumer to guess which of the two it is holding.
+ *
+ * @public
+ */
+type RunTimelineEvent = {
+    kind: "message";
+    message: SDKMessage;
+} | {
+    kind: "delta";
+    update: InteractionUpdate;
+};
 interface Run {
     readonly id: string;
     readonly agentId: string;
@@ -1557,6 +1572,18 @@ interface Run {
     readonly createdAt?: number;
     /** AsyncGenerator of normalized stream events. Discriminate on `event.type`. */
     stream(): AsyncGenerator<SDKMessage, void>;
+    /**
+     * theokit#140 - every event of this run in TRUE order, from one source: structural messages and
+     * live token/tool deltas interleaved as they occurred.
+     *
+     * Use this instead of fusing `stream()` with `SendOptions.onDelta` by hand. Neither of those is
+     * complete alone - `onDelta` carries no `run_started`/`system`, `stream()` carries no token
+     * granularity - and reconciling them in the consumer is what produced the ordering and dedup
+     * bugs this replaces.
+     *
+     * `stream()` is unchanged and remains the SDKMessage-only view.
+     */
+    events(): AsyncGenerator<RunTimelineEvent, void>;
     /** Resolves to the terminal {@link RunResult}. */
     wait(): Promise<RunResult>;
     /** Move status to `"cancelled"`, abort the stream, stop in-flight tool calls. */
@@ -1613,4 +1640,4 @@ interface GenerateRunResult<O> {
     };
 }
 
-export { type RunToCompletionResult as $, type AgentConversationTurn as A, type ProcessorControls as B, type CustomTool as C, type DoomLoopThresholds as D, type ProcessorTripwire as E, type ProcessorViolation as F, type GenerateOptions as G, type RunCompactBoundaryEvent as H, type ImageBlock as I, type RunCompletionCheckEvent as J, type RunErrorDetail as K, type RunEvent as L, type ModelSelection as M, type RunGitInfo as N, type OutputProcessorContext as O, type Processor as P, type RunOperation as Q, type RunResult as R, type SDKMessage as S, type ToolResultContentBlock as T, type RunPermissionDeniedEvent as U, type RunRateLimitEvent as V, type RunStatus as W, type RunTaskCompletedEvent as X, type RunTaskStartedEvent as Y, type RunTaskUpdatedEvent as Z, type RunToCompletionOptions as _, type McpServerConfig as a, type RunToolProgressEvent as a0, type RunTripwireEvent as a1, type SDKAssistantMessage as a2, type SDKImage as a3, type SDKImageDimension as a4, type SDKObjectDelta as a5, type SDKRequestMessage as a6, type SDKStatusMessage as a7, type SDKSystemMessage as a8, type SDKTaskMessage as a9, type ToolResult as aA, type ToolResultGuardOptions as aB, type ToolUseBlock as aC, type TurnEndedUpdate as aD, type UserMessage as aE, type UserMessageAppendedUpdate as aF, applyMode as aG, emitRunEvent as aH, type SDKThinkingMessage as aa, type SDKToolUseMessage as ab, type SDKUserMessage as ac, type SDKUserMessageEvent as ad, type SendOptions as ae, type ShellCommand as af, type ShellConversationTurn as ag, type ShellOutput as ah, type ShellOutputDeltaUpdate as ai, type StepCompletedUpdate as aj, type StepStartedUpdate as ak, type StreamToCompletionResult as al, type SummaryCompletedUpdate as am, type SummaryStartedUpdate as an, type SummaryUpdate as ao, type TextBlock as ap, type TextDeltaUpdate as aq, type ThinkingCompletedUpdate as ar, type ThinkingDeltaUpdate as as, type ThinkingMessage as at, type TokenDeltaUpdate as au, type TokenUsage as av, type ToolCall as aw, type ToolCallCompletedUpdate as ax, type ToolCallStartedUpdate as ay, type ToolContextMessage as az, type Run as b, type PermissionMode as c, PermissionEngine as d, type RunEventSink as e, type AssistantMessage as f, type CompletionCheck as g, type CompletionCheckResult as h, type ConversationStep as i, type ConversationTurn as j, type CostBreakdown as k, type CostSource as l, type CostStatus as m, type GenerateRunResult as n, type InputProcessorContext as o, type InteractionUpdate as p, type McpAuthConfig as q, type McpHttpServerConfig as r, type McpOAuthConfig as s, type McpStdioServerConfig as t, type MessageOrigin as u, type ModelParameterValue as v, type PartialToolCallUpdate as w, type PermissionAction as x, type PermissionEngineOptions as y, type PermissionRule as z };
+export { type RunToCompletionOptions as $, type AgentConversationTurn as A, type ProcessorControls as B, type CustomTool as C, type DoomLoopThresholds as D, type ProcessorTripwire as E, type ProcessorViolation as F, type GenerateOptions as G, type RunCompactBoundaryEvent as H, type ImageBlock as I, type RunCompletionCheckEvent as J, type RunErrorDetail as K, type RunEvent as L, type ModelSelection as M, type RunGitInfo as N, type OutputProcessorContext as O, type Processor as P, type RunOperation as Q, type RunResult as R, type SDKMessage as S, type ToolResultContentBlock as T, type RunPermissionDeniedEvent as U, type RunRateLimitEvent as V, type RunStatus as W, type RunTaskCompletedEvent as X, type RunTaskStartedEvent as Y, type RunTaskUpdatedEvent as Z, type RunTimelineEvent as _, type McpServerConfig as a, type RunToCompletionResult as a0, type RunToolProgressEvent as a1, type RunTripwireEvent as a2, type SDKAssistantMessage as a3, type SDKImage as a4, type SDKImageDimension as a5, type SDKObjectDelta as a6, type SDKRequestMessage as a7, type SDKStatusMessage as a8, type SDKSystemMessage as a9, type ToolContextMessage as aA, type ToolResult as aB, type ToolResultGuardOptions as aC, type ToolUseBlock as aD, type TurnEndedUpdate as aE, type UserMessage as aF, type UserMessageAppendedUpdate as aG, applyMode as aH, emitRunEvent as aI, type SDKTaskMessage as aa, type SDKThinkingMessage as ab, type SDKToolUseMessage as ac, type SDKUserMessage as ad, type SDKUserMessageEvent as ae, type SendOptions as af, type ShellCommand as ag, type ShellConversationTurn as ah, type ShellOutput as ai, type ShellOutputDeltaUpdate as aj, type StepCompletedUpdate as ak, type StepStartedUpdate as al, type StreamToCompletionResult as am, type SummaryCompletedUpdate as an, type SummaryStartedUpdate as ao, type SummaryUpdate as ap, type TextBlock as aq, type TextDeltaUpdate as ar, type ThinkingCompletedUpdate as as, type ThinkingDeltaUpdate as at, type ThinkingMessage as au, type TokenDeltaUpdate as av, type TokenUsage as aw, type ToolCall as ax, type ToolCallCompletedUpdate as ay, type ToolCallStartedUpdate as az, type Run as b, type PermissionMode as c, PermissionEngine as d, type RunEventSink as e, type AssistantMessage as f, type CompletionCheck as g, type CompletionCheckResult as h, type ConversationStep as i, type ConversationTurn as j, type CostBreakdown as k, type CostSource as l, type CostStatus as m, type GenerateRunResult as n, type InputProcessorContext as o, type InteractionUpdate as p, type McpAuthConfig as q, type McpHttpServerConfig as r, type McpOAuthConfig as s, type McpStdioServerConfig as t, type MessageOrigin as u, type ModelParameterValue as v, type PartialToolCallUpdate as w, type PermissionAction as x, type PermissionEngineOptions as y, type PermissionRule as z };

package/dist/sandbox/bwrap.d.cts

@@ -4,18 +4,18 @@
  *
  * HONEST SCOPE: filesystem confinement + network isolation via bwrap, PLUS the second stage —
  * a cBPF seccomp syscall filter (`agents/sandbox/seccomp.ts`), wired in `agents/sandbox/backend.ts`
- * via `restrictedSeccompPath()`. Portado no M63; este bloco afirmava o contrário até o M67 e
- * SUBDECLARAVA a postura de segurança real. Limite honesto que permanece: o filtro é **x86_64**
- * (guarda de arquitetura recusa instalar em outra arch, com WARN, e o confinamento de FS/rede do
- * bwrap segue valendo) **e** só é instalado quando a rede está restrita (`backend.ts:87`, fiel a
- * `landlock.rs:96-117`): com rede ligada não há filtro de syscall, apenas o confinamento de FS do
- * bwrap. `danger-full-access` pula o bwrap por completo, espelhando `bwrap.rs:245-252`.
- * Deltas versus o Codex seguem documentados em docs/CODEX-PARITY.md.
+ * via `restrictedSeccompPath()`. Ported in M63; this block claimed the opposite until M67 and
+ * UNDER-DECLARED the real security posture. The honest limit that remains: the filter is **x86_64**
+ * (an architecture guard refuses to install it on any other arch, with a WARN, and bwrap's FS/network
+ * confinement still applies) **and** it is only installed when the network is restricted
+ * (`backend.ts:87`, faithful to `landlock.rs:96-117`): with the network on there is no syscall
+ * filter, only bwrap's FS confinement. `danger-full-access` skips bwrap entirely, mirroring
+ * `bwrap.rs:245-252`. Deltas versus Codex remain documented in docs/CODEX-PARITY.md.
  */
 /**
- * Os tres modos canonicos do Codex. Definidos AQUI porque sao vocabulario do sandbox, nao da
- * configuracao do consumidor: `danger-full-access` significa "nao embrulhe", e essa e uma decisao do
- * subsistema de confinamento.
+ * Codex's three canonical modes. Defined HERE because they are sandbox vocabulary, not consumer
+ * configuration: `danger-full-access` means "do not wrap", and that is a decision belonging to the
+ * confinement subsystem.
  */
 export type SandboxMode = "read-only" | "workspace-write" | "danger-full-access";
 export interface BwrapArgvOptions {
@@ -55,21 +55,21 @@ export type BwrapDetection = {
 };
 /** Honest detection — fail-closed on every probe; NEVER throws (callers WARN + fall back). */
 export declare function detectBwrap(probes?: BwrapProbes): BwrapDetection;
-/** Quantas sondagens reais rodaram. Seam de TESTE — o gate de performance conta isto. */
+/** How many real probes ran. TEST seam — the performance gate counts this. */
 export declare function realProbeCount(): number;
 /** Real probes used in production. */
 export declare const realProbes: BwrapProbes;
 /**
- * `detectBwrap` com memoização — o que a produção deve chamar.
+ * `detectBwrap` with memoization — what production should call.
  *
- * Note que `detectBwrap` em si **não** memoiza, de propósito: ele aceita probes injetados, e memoizar
- * ali faria um teste com probes falsos envenenar o cache do processo para todos os outros.
+ * Note that `detectBwrap` itself does **not** memoize, on purpose: it accepts injected probes, and
+ * memoizing there would let a test with fake probes poison the process cache for everyone else.
  *
- * A revalidação do positivo NÃO é uma re-sondagem: `detectBwrap` gasta três probes (subprocesso
- * `which` + `--help` + namespace de usuário). Aqui só se confirma que o binário validado continua no
- * lugar. Se sumiu, o memo é rebaixado a negativo com o motivo dito — nunca promovido a positivo, que
- * exigiria a sondagem cara de volta.
+ * Revalidating the positive is NOT a re-probe: `detectBwrap` spends three probes (a `which`
+ * subprocess + `--help` + a user namespace). Here we only confirm the validated binary is still in
+ * place. If it vanished, the memo is downgraded to a negative with the reason stated — never
+ * promoted to a positive, which would require the expensive probe back.
  */
-export declare function detectBwrapMemoizado(probes?: BwrapProbes): BwrapDetection;
-/** Seam de TESTE — limpa o memo. Produção nunca chama (ver m71-custo-por-turn#ADR-1). */
+export declare function detectBwrapMemoized(probes?: BwrapProbes): BwrapDetection;
+/** TEST seam — clears the memo. Production never calls it (see m71-custo-por-turn#ADR-1). */
 export declare function resetBwrapMemo(): void;

package/dist/sandbox/bwrap.d.ts

@@ -4,18 +4,18 @@
  *
  * HONEST SCOPE: filesystem confinement + network isolation via bwrap, PLUS the second stage —
  * a cBPF seccomp syscall filter (`agents/sandbox/seccomp.ts`), wired in `agents/sandbox/backend.ts`
- * via `restrictedSeccompPath()`. Portado no M63; este bloco afirmava o contrário até o M67 e
- * SUBDECLARAVA a postura de segurança real. Limite honesto que permanece: o filtro é **x86_64**
- * (guarda de arquitetura recusa instalar em outra arch, com WARN, e o confinamento de FS/rede do
- * bwrap segue valendo) **e** só é instalado quando a rede está restrita (`backend.ts:87`, fiel a
- * `landlock.rs:96-117`): com rede ligada não há filtro de syscall, apenas o confinamento de FS do
- * bwrap. `danger-full-access` pula o bwrap por completo, espelhando `bwrap.rs:245-252`.
- * Deltas versus o Codex seguem documentados em docs/CODEX-PARITY.md.
+ * via `restrictedSeccompPath()`. Ported in M63; this block claimed the opposite until M67 and
+ * UNDER-DECLARED the real security posture. The honest limit that remains: the filter is **x86_64**
+ * (an architecture guard refuses to install it on any other arch, with a WARN, and bwrap's FS/network
+ * confinement still applies) **and** it is only installed when the network is restricted
+ * (`backend.ts:87`, faithful to `landlock.rs:96-117`): with the network on there is no syscall
+ * filter, only bwrap's FS confinement. `danger-full-access` skips bwrap entirely, mirroring
+ * `bwrap.rs:245-252`. Deltas versus Codex remain documented in docs/CODEX-PARITY.md.
  */
 /**
- * Os tres modos canonicos do Codex. Definidos AQUI porque sao vocabulario do sandbox, nao da
- * configuracao do consumidor: `danger-full-access` significa "nao embrulhe", e essa e uma decisao do
- * subsistema de confinamento.
+ * Codex's three canonical modes. Defined HERE because they are sandbox vocabulary, not consumer
+ * configuration: `danger-full-access` means "do not wrap", and that is a decision belonging to the
+ * confinement subsystem.
  */
 export type SandboxMode = "read-only" | "workspace-write" | "danger-full-access";
 export interface BwrapArgvOptions {
@@ -55,21 +55,21 @@ export type BwrapDetection = {
 };
 /** Honest detection — fail-closed on every probe; NEVER throws (callers WARN + fall back). */
 export declare function detectBwrap(probes?: BwrapProbes): BwrapDetection;
-/** Quantas sondagens reais rodaram. Seam de TESTE — o gate de performance conta isto. */
+/** How many real probes ran. TEST seam — the performance gate counts this. */
 export declare function realProbeCount(): number;
 /** Real probes used in production. */
 export declare const realProbes: BwrapProbes;
 /**
- * `detectBwrap` com memoização — o que a produção deve chamar.
+ * `detectBwrap` with memoization — what production should call.
  *
- * Note que `detectBwrap` em si **não** memoiza, de propósito: ele aceita probes injetados, e memoizar
- * ali faria um teste com probes falsos envenenar o cache do processo para todos os outros.
+ * Note that `detectBwrap` itself does **not** memoize, on purpose: it accepts injected probes, and
+ * memoizing there would let a test with fake probes poison the process cache for everyone else.
  *
- * A revalidação do positivo NÃO é uma re-sondagem: `detectBwrap` gasta três probes (subprocesso
- * `which` + `--help` + namespace de usuário). Aqui só se confirma que o binário validado continua no
- * lugar. Se sumiu, o memo é rebaixado a negativo com o motivo dito — nunca promovido a positivo, que
- * exigiria a sondagem cara de volta.
+ * Revalidating the positive is NOT a re-probe: `detectBwrap` spends three probes (a `which`
+ * subprocess + `--help` + a user namespace). Here we only confirm the validated binary is still in
+ * place. If it vanished, the memo is downgraded to a negative with the reason stated — never
+ * promoted to a positive, which would require the expensive probe back.
  */
-export declare function detectBwrapMemoizado(probes?: BwrapProbes): BwrapDetection;
-/** Seam de TESTE — limpa o memo. Produção nunca chama (ver m71-custo-por-turn#ADR-1). */
+export declare function detectBwrapMemoized(probes?: BwrapProbes): BwrapDetection;
+/** TEST seam — clears the memo. Production never calls it (see m71-custo-por-turn#ADR-1). */
 export declare function resetBwrapMemo(): void;