@theoremjs/studio 0.3.1 → 0.3.3

package/page/assets/{_virtual_studio-type-sources-B0u0_Vhq.js → _virtual_studio-type-sources-BwZOives.js}

@@ -4717,7 +4717,7 @@ export { ADVISORY_LEVELS, abortLiveOutboundTurn, addGivenDestinations, addHistor
 export type { DnsOverHttpsOptions, GuardedFetchOptions, ResolveHost, } from './src/guardrails/network.js';
 export { assertSafeUrl, dnsOverHttpsResolver, fetchGuarded, isLocalhostName, isPrivateOrLocalAddress, } from './src/guardrails/network.js';
 export type { QuotaSlotStatus } from './src/guardrails/quota.js';
-export { clientIp, quotaExhausted, releaseSlot, resetSlots, skipQuota, takeSlot, } from './src/guardrails/quota.js';
+export { clientIp, quotaBusy, quotaExhausted, releaseSlot, resetSlots, skipQuota, takeSlot, } from './src/guardrails/quota.js';
 export type { SanitizedTurnRequest } from './src/guardrails/sanitize.js';
 export { sanitizeProjectId, sanitizeTurnRequest, sanitizeTurnRequestWithEvents, } from './src/guardrails/sanitize.js';
 export type { ProviderStateRebuilt } from './src/kernel/checkpoint.js';
@@ -4763,6 +4763,8 @@ export type { MediaTurnBehaviourSpec, ProfileTurnBehaviourSpec, ProfileTurnResum
 export { AUTO_CONTINUE_DELAY_MS, DEFAULT_ALLOW_CONTINUE, DEFAULT_AUTO_CONTINUE, GenerationStopError, isContinueStopKind, isGenerationStopError, isResumeableStop, isUserCancelledStop, profileAllowsInject, profileAllowsSteering, profileTurnResumption, shouldAutoContinue, turnStopFromClientStreamEnd, turnStopFromInteractionStatus, turnStopFromOpenAiFinishReason, } from './src/kernel/stop.js';
 export { authorizeToolReplay } from './src/kernel/tools/execute.js';
 export { GATE_DECISIONS, type GateDecision } from './src/kernel/tools/gate-answer.js';
+export type { MemoryToolExecutionOptions } from './src/kernel/tools/memory-execution.js';
+export { createMemoryToolExecution } from './src/kernel/tools/memory-execution.js';
 export type { CredentialQuery, McpProtocolVersion, McpRpcResponse, ToolRegistry, } from './src/kernel/tools/mod.js';
 export { askUserTool, buildHttpToolTarget, createToolRegistry, credentialPlacement, executeHttpTool, executeMcpTool, formatToolResult, isUnsupportedMcpProtocolError, MCP_PROTOCOL_VERSIONS, parseMcpRpcResponse, prepareTurnToolSnapshot, registerHarnessTools, resolveToolAuth, UncheckedOutput, uncheckedOutput, withCredentialQuery, } from './src/kernel/tools/mod.js';
 export type { BeginToolOperationResult, PageToolDispatch, PageToolExecution, SavedToolInvocation, TerminalToolEvent, ToolExecutionCoordinator, ToolOperationClaim, ToolOperationIdentity, ToolOperationOutcome, ToolOperationUncertainty, } from './src/kernel/tools/operation.js';
@@ -7022,6 +7024,12 @@ export type TurnEvent = {
     injected?: {
         id: string;
     }[];
+    /**
+     * An inject at this stage dropped a draft the user never got: of the reply text since the
+     * turn began or its last \`attempt\`, only the first \`released\` characters stay the reply.
+     * {@linkcode keptReply} drops the rest.
+     */
+    released?: number;
 }
 /**
  * A tool call the model is still writing: the next piece of its arguments' JSON text, in order,
@@ -7102,8 +7110,9 @@ export declare const TURN_EVENT_SCHEMAS: {
 };
 /**
  * \`events\` without the replies a retry threw away: each \`attempt\` drops the text, media and
- * structured output before it, back to the turn's start or its last \`done\`. Tool calls, thoughts
- * and everything else stay, since they happened.
+ * structured output before it, back to the turn's start or its last \`done\`. A \`stage\` event with
+ * \`released\` keeps only that much of the reply's text, and drops what followed it. Tool calls,
+ * thoughts and everything else stay, since they happened.
  */
 export declare function keptReply(events: readonly TurnEvent[]): TurnEvent[];
 `,"file:///node_modules/@theoremjs/agents/src/kernel/schema.d.ts":`import { BLOCKED_REPLY_ON_BLOCK, type BlockedReplyOnBlock } from '../guardrails/types.js';
@@ -7227,7 +7236,7 @@ export declare const AWAITING_USER_INPUT_KINDS: readonly ["confirm", "choice", "
 /** One of {@linkcode AWAITING_USER_INPUT_KINDS}. */
 export type AwaitingUserInputKind = (typeof AWAITING_USER_INPUT_KINDS)[number];
 /** Why a stage handler's result was partly or wholly ignored. */
-export declare const STAGE_APPLY_WARNING_CODES: readonly ["affordance_not_allowed", "inject_not_allowed", "inject_rejected_max_steps", "inject_invalid_messages", "inject_id_invalid", "deny_invalid", "confirm_invalid", "mutate_invalid", "label_failed_invalid", "abort_invalid", "wait_for_invalid", "unknown_field", "result_invalid"];
+export declare const STAGE_APPLY_WARNING_CODES: readonly ["affordance_not_allowed", "inject_not_allowed", "inject_rejected_max_steps", "inject_invalid_messages", "inject_id_invalid", "inject_released_invalid", "deny_invalid", "confirm_invalid", "mutate_invalid", "label_failed_invalid", "abort_invalid", "wait_for_invalid", "unknown_field", "result_invalid"];
 /** One of {@linkcode STAGE_APPLY_WARNING_CODES}. */
 export type StageApplyWarningCode = (typeof STAGE_APPLY_WARNING_CODES)[number];
 /** The \`status\` of a tool output that asks the user a question. */
@@ -7880,7 +7889,7 @@ export { applySpans, blobAt, mergeSpans, OMIT_CANARY, OMIT_INJECTION, OMIT_SENSI
 `,"file:///node_modules/@theoremjs/agents/src/guardrails/labels.d.ts":`/** Values that fill a label template's \`{param}\` placeholders. */
 export type LabelParams = Record<string, string | number>;
 /** Keys are stable API. */
-export declare const LABEL_KEYS: readonly ["provider.decision_failed", "provider.decision_unavailable", "provider.decision_model_missing", "provider.decision_ended", "provider.decision_images_off", "provider.decision_box_model", "provider.budget_exhausted", "provider.adapter_version", "provider.adapter_methods", "provider.adapter_schemas", "provider.fallback_slot", "provider.model_fallback_slot", "provider.host_model", "provider.turn_profile", "provider.model_binding_missing", "provider.session_closed", "provider.settled_call", "provider.session_unavailable", "provider.live_input", "provider.tool_cancel_missing", "provider.kernel_gate", "provider.event_invalid", "provider.response_identity", "provider.credential_resolution", "provider.credential_shape", "provider.stored_continuation", "provider.continuation_mismatch", "provider.continuation_contract", "provider.stateless_history", "provider.events_after_completion", "provider.duplicate_call", "provider.tool_cancel_live", "provider.complete_unavailable", "provider.parallel_tools", "provider.binding_identity", "provider.profile_type", "provider.event_type", "provider.feature", "provider.input_kind", "provider.output_kind", "provider.builtin", "provider.credential_missing", "provider.profile_configuration", "continue.instruction", "canary.bind_note", "user_data.note", "context.note", "taint.blocked", "taint.reason_steered", "taint.reason_tainted", "taint.destination_blocked", "taint.destination_confirm", "advisory.notice_elevated", "advisory.notice_high", "advisory.guidance", "attachments.too_many_files", "attachments.too_many_of_kind", "attachments.file_too_large", "attachments.turn_too_large", "attachments.not_accepted", "attachments.mime_not_allowed", "input.too_long", "attachments.limits_unconfigured", "quota.exhausted", "error.config", "error.request", "error.input", "error.action", "error.auth", "error.rate_limit", "error.unsupported", "error.unavailable", "error.bad_response", "error.network", "error.timeout", "error.safety", "error.blocked", "error.declined", "error.failed", "error.cancelled", "error.internal", "repair.default_guidance", "repair.items_guidance", "repair.prompt_header", "repair.prompt_intro", "repair.prompt_instructions", "repair.history_heading", "repair.section_previous_output", "repair.section_validator_rejection", "repair.section_repair_guidance", "repair.section_instructions", "compaction.request", "compaction.tool_call", "compaction.tool_result", "decision.box_image", "detect.blocked", "detect.call_blocked", "detect.output_blocked", "detect.shown_blocked", "detect.hint.ids", "detect.hint.financial", "detect.hint.network", "detect.hint.credentials", "detect.hint.injection", "detect.hint.tool_instructions", "detect.hint.canary_leak", "detect.hint.prompt_leak", "detect.hint.marker_leak", "detect.hint.ungiven_images", "detect.hint.ungiven_links", "detect.hint.tool_leak", "detect.hint.own", "egress.default_repair_guidance", "egress.refusal", "egress.refusal_cut", "egress.rejection", "egress.rejection_found", "egress.hint_unscannable", "egress.hint_provider_tool_leak", "thought.omitted_image", "thought.omitted_link", "thought.omitted_instructions", "session.abandon_gated", "session.tool_denied", "session.tool_aborted", "session.sign_in", "sign_in.link", "sign_in.pending", "sign_in.done", "sign_in.declined", "sign_in.expired", "sign_in.out_of_scope", "session.gate_expired", "session.provider_state_unowned", "session.conversation_unknown", "session.turn_ended", "session.gate_pending", "session.part_skipped", "live.session_ended", "voice.unsupported", "voice.permission", "voice.unavailable", "voice.failed", "voice.empty", "stop.cancelled", "stop.interrupted", "stop.length", "stop.filtered", "stop.provider_error", "stop.stream_incomplete", "stop.step_limit", "composer.model", "composer.effort", "tool.awaiting_user", "tool.completed_hidden", "tool.t2_loader_needs_snapshot", "tool.t2_loader_shape", "tool.t2_loader_output_invalid", "tool.execution_uncertain", "tool.input_invalid", "tool.input_invalid_after_mutate", "tool.output_invalid_after_mutate", "tool.handler_no_output", "tool.did_not_run", "tool.page_no_answer", "tool.page_timed_out", "tool.output_invalid", "tool.not_loaded_t2", "tool.wait_unknown", "tool.wait_cycle", "tool.not_visible", "tool.builtin_not_enabled", "tool.provider_native", "tool.not_registered", "tool.builtin_needs_snapshot", "tool.not_allowed", "tool.not_eligible", "tool.unsupported_type", "tool.agent_call_limit", "tool.agent_failed", "tool.activity_failed", "protocol.not_served", "protocol.profile_type", "protocol.options", "protocol.option_clash", "protocol.base_options", "protocol.id_clash", "protocol.ws_headers", "protocol.builtin_unwritten", "protocol.provider_missing", "protocol.connection", "protocol.part_schema", "protocol.part_invalid", "protocol.key_invalid", "protocol.no_key", "protocol.reply_shape", "protocol.endpoint_url", "protocol.endpoint_host", "protocol.http", "protocol.no_operation", "protocol.definition", "protocol.provider_id_clash", "protocol.history_needed"];
+export declare const LABEL_KEYS: readonly ["provider.decision_failed", "provider.decision_unavailable", "provider.decision_model_missing", "provider.decision_ended", "provider.decision_images_off", "provider.decision_box_model", "provider.budget_exhausted", "provider.adapter_version", "provider.adapter_methods", "provider.adapter_schemas", "provider.fallback_slot", "provider.model_fallback_slot", "provider.host_model", "provider.turn_profile", "provider.model_binding_missing", "provider.session_closed", "provider.settled_call", "provider.session_unavailable", "provider.live_input", "provider.tool_cancel_missing", "provider.kernel_gate", "provider.event_invalid", "provider.response_identity", "provider.credential_resolution", "provider.credential_shape", "provider.stored_continuation", "provider.continuation_mismatch", "provider.continuation_contract", "provider.stateless_history", "provider.events_after_completion", "provider.duplicate_call", "provider.tool_cancel_live", "provider.complete_unavailable", "provider.parallel_tools", "provider.binding_identity", "provider.profile_type", "provider.event_type", "provider.feature", "provider.input_kind", "provider.output_kind", "provider.builtin", "provider.credential_missing", "provider.profile_configuration", "continue.instruction", "canary.bind_note", "user_data.note", "context.note", "taint.blocked", "taint.reason_steered", "taint.reason_tainted", "taint.destination_blocked", "taint.destination_confirm", "advisory.notice_elevated", "advisory.notice_high", "advisory.guidance", "attachments.too_many_files", "attachments.too_many_of_kind", "attachments.file_too_large", "attachments.turn_too_large", "attachments.not_accepted", "attachments.mime_not_allowed", "input.too_long", "attachments.limits_unconfigured", "quota.exhausted", "quota.busy", "error.config", "error.request", "error.input", "error.action", "error.auth", "error.rate_limit", "error.busy", "error.unsupported", "error.unavailable", "error.bad_response", "error.network", "error.timeout", "error.safety", "error.blocked", "error.declined", "error.failed", "error.cancelled", "error.internal", "repair.default_guidance", "repair.items_guidance", "repair.prompt_header", "repair.prompt_intro", "repair.prompt_instructions", "repair.history_heading", "repair.section_previous_output", "repair.section_validator_rejection", "repair.section_repair_guidance", "repair.section_instructions", "compaction.request", "compaction.tool_call", "compaction.tool_result", "decision.box_image", "detect.blocked", "detect.call_blocked", "detect.output_blocked", "detect.shown_blocked", "detect.hint.ids", "detect.hint.financial", "detect.hint.network", "detect.hint.credentials", "detect.hint.injection", "detect.hint.tool_instructions", "detect.hint.canary_leak", "detect.hint.prompt_leak", "detect.hint.marker_leak", "detect.hint.ungiven_images", "detect.hint.ungiven_links", "detect.hint.tool_leak", "detect.hint.own", "egress.default_repair_guidance", "egress.refusal", "egress.refusal_cut", "egress.rejection", "egress.rejection_found", "egress.hint_unscannable", "egress.hint_provider_tool_leak", "thought.omitted_image", "thought.omitted_link", "thought.omitted_instructions", "session.abandon_gated", "session.tool_denied", "session.tool_aborted", "session.sign_in", "sign_in.link", "sign_in.pending", "sign_in.done", "sign_in.declined", "sign_in.expired", "sign_in.out_of_scope", "session.gate_expired", "session.provider_state_unowned", "session.conversation_unknown", "session.turn_ended", "session.gate_pending", "session.part_skipped", "live.session_ended", "voice.unsupported", "voice.permission", "voice.unavailable", "voice.failed", "voice.empty", "stop.cancelled", "stop.interrupted", "stop.length", "stop.filtered", "stop.provider_error", "stop.stream_incomplete", "stop.step_limit", "composer.model", "composer.effort", "tool.awaiting_user", "tool.completed_hidden", "tool.t2_loader_needs_snapshot", "tool.t2_loader_shape", "tool.t2_loader_output_invalid", "tool.execution_uncertain", "tool.input_invalid", "tool.input_invalid_after_mutate", "tool.output_invalid_after_mutate", "tool.handler_no_output", "tool.did_not_run", "tool.page_no_answer", "tool.page_timed_out", "tool.output_invalid", "tool.not_loaded_t2", "tool.wait_unknown", "tool.wait_cycle", "tool.not_visible", "tool.builtin_not_enabled", "tool.provider_native", "tool.not_registered", "tool.builtin_needs_snapshot", "tool.not_allowed", "tool.not_eligible", "tool.unsupported_type", "tool.agent_call_limit", "tool.agent_failed", "tool.activity_failed", "protocol.not_served", "protocol.profile_type", "protocol.options", "protocol.option_clash", "protocol.base_options", "protocol.id_clash", "protocol.ws_headers", "protocol.builtin_unwritten", "protocol.provider_missing", "protocol.connection", "protocol.part_schema", "protocol.part_invalid", "protocol.key_invalid", "protocol.no_key", "protocol.reply_shape", "protocol.endpoint_url", "protocol.endpoint_host", "protocol.http", "protocol.no_operation", "protocol.definition", "protocol.provider_id_clash", "protocol.history_needed"];
 /** One of {@linkcode LABEL_KEYS}. */
 export type LabelKey = (typeof LABEL_KEYS)[number];
 /**
@@ -7889,7 +7898,7 @@ export type LabelKey = (typeof LABEL_KEYS)[number];
  * puts into history. Only these overrides travel to the browser; the rest
  * (repair prompts, canary, taint, egress) stay on the host.
  */
-export declare const CLIENT_LABEL_KEYS: readonly ["attachments.too_many_files", "attachments.too_many_of_kind", "attachments.file_too_large", "attachments.turn_too_large", "attachments.not_accepted", "attachments.mime_not_allowed", "input.too_long", "attachments.limits_unconfigured", "detect.blocked", "error.config", "error.request", "error.input", "error.action", "error.auth", "error.rate_limit", "error.unsupported", "error.unavailable", "error.bad_response", "error.network", "error.timeout", "error.safety", "error.blocked", "error.declined", "error.failed", "error.cancelled", "error.internal", "session.abandon_gated", "session.tool_denied", "session.sign_in", "session.gate_expired", "session.turn_ended", "session.gate_pending", "session.part_skipped", "live.session_ended", "tool.awaiting_user", "tool.completed_hidden", "tool.execution_uncertain", "voice.unsupported", "voice.permission", "voice.unavailable", "voice.failed", "voice.empty", "stop.cancelled", "stop.interrupted", "stop.length", "stop.filtered", "stop.provider_error", "stop.stream_incomplete", "stop.step_limit", "composer.model", "composer.effort"];
+export declare const CLIENT_LABEL_KEYS: readonly ["attachments.too_many_files", "attachments.too_many_of_kind", "attachments.file_too_large", "attachments.turn_too_large", "attachments.not_accepted", "attachments.mime_not_allowed", "input.too_long", "attachments.limits_unconfigured", "detect.blocked", "error.config", "error.request", "error.input", "error.action", "error.auth", "error.rate_limit", "error.busy", "error.unsupported", "error.unavailable", "error.bad_response", "error.network", "error.timeout", "error.safety", "error.blocked", "error.declined", "error.failed", "error.cancelled", "error.internal", "session.abandon_gated", "session.tool_denied", "session.sign_in", "session.gate_expired", "session.turn_ended", "session.gate_pending", "session.part_skipped", "live.session_ended", "tool.awaiting_user", "tool.completed_hidden", "tool.execution_uncertain", "voice.unsupported", "voice.permission", "voice.unavailable", "voice.failed", "voice.empty", "stop.cancelled", "stop.interrupted", "stop.length", "stop.filtered", "stop.provider_error", "stop.stream_incomplete", "stop.step_limit", "composer.model", "composer.effort"];
 /** One of {@linkcode CLIENT_LABEL_KEYS}. */
 export type ClientLabelKey = (typeof CLIENT_LABEL_KEYS)[number];
 /** Host-supplied replacement templates, \`{param}\` placeholders included. */
@@ -8024,7 +8033,7 @@ export type { ErrorCopies, ErrorCopy };
  * the builder in code and traces (\`errorKind\`, \`error.type\`), the user through
  * the kind's wording (\`error.<kind>\` in the labels).
  */
-export declare const ERROR_KINDS: readonly ["config", "request", "input", "action", "auth", "rate_limit", "unsupported", "unavailable", "bad_response", "network", "timeout", "safety", "blocked", "declined", "failed", "cancelled", "internal"];
+export declare const ERROR_KINDS: readonly ["config", "request", "input", "action", "auth", "rate_limit", "busy", "unsupported", "unavailable", "bad_response", "network", "timeout", "safety", "blocked", "declined", "failed", "cancelled", "internal"];
 /** Why an operation failed; the user's wording and the HTTP status follow from it. */
 export type ErrorKind = (typeof ERROR_KINDS)[number];
 /** Options for a \`TheoremError\`: the cause and, optionally, wording for the user. */
@@ -9312,6 +9321,7 @@ export type Wait = (ms: number, signal?: AbortSignal | null) => Promise<void>;
 export declare const WAIT_BUDGET_MS = 5000;
 export declare const waitDefault: Wait;
 export declare function isTransientHttp(status: number): boolean;
+/** A rejected send that never got a response: a network failure, by \`networkError\`'s rule. An abort, a timeout, or any other kind is not. */
 export declare function isTransientThrown(err: unknown): boolean;
 export declare function backoffMs(attempt: number): number;
 /** \`retry-after-ms\`, else \`Retry-After\` in seconds or as a date; undefined when absent or unreadable. */
@@ -9380,6 +9390,13 @@ export interface StageResult {
      * non-string id refuses the inject whole.
      */
     injectId?: string;
+    /**
+     * With \`inject\`, at \`post_tool\` or \`before_end\`: how many characters of the attempt's reply text,
+     * as the turn gave it, the user already has. The rest is a draft they never got: it leaves the
+     * turn's history and its reply when the inject lands, so the model answers everything afresh
+     * after the part they have. Left out, they have all of it.
+     */
+    released?: number;
     abort?: boolean | {
         reason?: string;
     };
@@ -9430,6 +9447,8 @@ export interface StageApplyInput {
 export interface InjectUnit {
     id?: string;
     messages: TurnHistoryMessage[];
+    /** {@linkcode StageResult.released}: the reply text the user has when this inject lands. */
+    released?: number;
 }
 /** A stage handler's result after validation: the parts the turn will act on. */
 export interface StageApplyOutput {
@@ -9464,16 +9483,18 @@ export type StageEventExtra = {
     injected?: {
         id: string;
     }[];
+    released?: number;
 };
 /** Build a stream \`stage\` event. Unknown extra keys are not copied. */
 export declare function stageEventFields(stage: TurnStage, extra?: Partial<StageEventExtra>): TurnEventOf<'stage'>;
 export declare function injectMessages(units: readonly InjectUnit[]): TurnHistoryMessage[];
 /**
  * The \`stage\` event recording that \`units\` landed, naming the ones the host
- * named; \`undefined\` when none was named. Emit it where the messages land,
- * never before: an inject that never lands is never reported.
+ * named, and the reply text the user has when they dropped a draft (\`released\`);
+ * \`undefined\` when there is neither. Emit it where the messages land, never
+ * before: an inject that never lands is never reported.
  */
-export declare function injectedStageEvent(stage: TurnStage, units: readonly InjectUnit[], extra?: Pick<StageEventExtra, 'callId' | 'toolName'>): TurnEventOf<'stage'> | undefined;
+export declare function injectedStageEvent(stage: TurnStage, units: readonly InjectUnit[], extra?: Pick<StageEventExtra, 'callId' | 'toolName' | 'released'>): TurnEventOf<'stage'> | undefined;
 export declare function injectWouldExceedMaxSteps(stepCount: number, maxSteps: number | undefined): boolean;
 export interface RunStageArgs extends StageCallBag {
     stage: TurnStage;
@@ -9516,8 +9537,8 @@ export declare function uncheckedOutput(value: unknown): UncheckedOutput;
 `,"file:///node_modules/@theoremjs/agents/src/kernel/tools/operation.d.ts":`import { z } from 'zod';
 import { TheoremError } from '../../guardrails/error.js';
 import { type JsonObject, type JsonValue } from '../json.js';
+import type { InjectUnit } from '../stages.js';
 import type { GateReference, TurnEventOf } from '../turn-events.js';
-import type { TurnHistoryMessage } from '../types.js';
 import type { ModelToolResult, PageAnswer, ToolFailure } from './types.js';
 export type TerminalToolEvent = TurnEventOf<'tool'> & {
     tool: Extract<TurnEventOf<'tool'>['tool'], {
@@ -9558,10 +9579,7 @@ export interface ToolOperationOutcome {
         aborted?: boolean | {
             reason?: string;
         };
-        pendingInject?: {
-            id?: string;
-            messages: TurnHistoryMessage[];
-        }[];
+        pendingInject?: InjectUnit[];
     };
 }
 export type ToolOperationUncertainty = 'execution_interrupted' | 'settlement_write_failed' | 'worker_lost';
@@ -9601,7 +9619,7 @@ declare function isTimeoutError(err: unknown): boolean;
 declare function throwIfAborted(signal?: AbortSignal): void;
 /** Anything that is not a \`TheoremError\` or an abort escaped every boundary that names kinds: a THEOREM bug. */
 declare function errorKind(err: unknown): ErrorKind;
-/** The error kind for an HTTP status: 401, 402 and 403 are \`auth\`; 408, 504 and 524 \`timeout\`; 429 \`rate_limit\`; 500 and above \`unavailable\`; the rest \`unsupported\`. */
+/** The error kind for an HTTP status: 401, 402 and 403 are \`auth\`; 408, 504 and 524 \`timeout\`; 429 \`rate_limit\`; 503 and 529 (overloaded) \`busy\`; 500 and above \`unavailable\`; the rest \`unsupported\`. */
 declare function kindOfHttpStatus(status: number): ErrorKind;
 /** The named reasons an error carries, one line each, in the profile's wording. */
 declare function errorCopyText(copy: ErrorCopies, labels?: LabelOverrides): string;
@@ -11627,6 +11645,17 @@ declare function hitRules(hits: GuardrailHit[]): string[];
 declare function boundaryNote({ canary, labels, }: Pick<GuardrailContext, 'canary' | 'labels'>): string | undefined;
 export type { EventLeak, LeakScope };
 export { boundaryNote, eventLeak, eventPromptLeakHits, hitRules, isPromptLeakHit, promptEchoHits, promptLeakReason, WITHHELD_REASON, };
+`,"file:///node_modules/@theoremjs/agents/src/kernel/tools/memory-execution.d.ts":`import { type ToolExecutionCoordinator } from './operation.js';
+export interface MemoryToolExecutionOptions {
+    /** The most operations it holds. A full coordinator refuses dispatch and keeps what it has. */
+    maxOperations?: number;
+}
+/**
+ * A coordinator that keeps claims and outcomes in process memory.
+ * Use one per turn or per process when nothing needs to resume after a restart.
+ * A host that resumes across requests or workers supplies its own \`ToolExecutionCoordinator\`.
+ */
+export declare function createMemoryToolExecution(options?: MemoryToolExecutionOptions): ToolExecutionCoordinator;
 `,"file:///node_modules/@theoremjs/agents/src/kernel/scope.d.ts":`import type { TraceSink } from '../observability/trace-sink.js';
 import { type RunDecisionOptions } from './engine/decision.js';
 import { type RunEmbeddingOptions } from './engine/embedding.js';
@@ -12128,10 +12157,12 @@ declare function takeSlot(profile: Profile, ip: string, now: number): QuotaSlotS
 declare function releaseSlot(profile: Profile, ip: string): void;
 /** \`undefined\` when the profile has no quota configured. */
 declare function quotaExhausted(profile: Profile): TheoremError | undefined;
+/** A turn already holds this client's slot (\`takeSlot\` returned \`busy\`): worded by the labels' \`quota.busy\`. */
+declare function quotaBusy(profile: Profile): TheoremError;
 /** Clears all process-local quota counters; intended for tests or host resets. */
 declare function resetSlots(): void;
 export type { QuotaSlotStatus };
-export { clientIp, quotaExhausted, releaseSlot, resetSlots, skipQuota, takeSlot };
+export { clientIp, quotaBusy, quotaExhausted, releaseSlot, resetSlots, skipQuota, takeSlot };
 `,"file:///node_modules/@theoremjs/agents/src/guardrails/mod.d.ts":`/**
  * Inbound and outbound guardrail primitives: sanitization, injection, and sensitive detection,
  * canary egress gates, the detectors, and public error mapping. App-specific policy copy stays host-owned.
@@ -12169,7 +12200,7 @@ export type { ProgressiveYieldGate, ProgressiveYieldGateOptions, ProgressiveYiel
 export { createOutboundProgressiveGate, createProgressiveYieldGate } from './progressive-yield.js';
 export { PROMPT_ECHO_WORDS, scanTextForPromptEcho } from './prompt-echo.js';
 export type { QuotaSlotStatus } from './quota.js';
-export { clientIp, quotaExhausted, releaseSlot, resetSlots, skipQuota, takeSlot, } from './quota.js';
+export { clientIp, quotaBusy, quotaExhausted, releaseSlot, resetSlots, skipQuota, takeSlot, } from './quota.js';
 export type { GuardrailRule } from './rules.js';
 export { DETECT_RULES, detectRule, EGRESS_RULES, NETWORK_RULES, TOOL_RULES, } from './rules.js';
 export type { SanitizedTurnRequest } from './sanitize.js';