@workerdeck/core 0.15.0 → 0.17.0

package/README.md

@@ -165,10 +165,32 @@ selectExecutor: () => new DeferredExecutor({
 for you — a `SessionStore` plus `POST /executions/:id/result` — but the mechanism is here, and works
 with no server at all.
 
+`snapshot()` is the same value **without** the teardown: the runner stays live, attached and warm.
+That separation is what makes a provider session survive a process restart, since it has no
+engine-side store to resume from the way claude and codex do — the host writes the snapshot through
+after each turn and rebuilds from the last one. The gate differs from `park()`'s in one direction
+only: it refuses a turn in flight and pending *in-process* executions (whose results die with the
+process), and allows the idle case `park()` exists to refuse.
+
 ## Rules you cannot infer from the types
 
 Things the compiler will not tell you, each of which has cost someone real time:
 
+- **Truncation happens on the replay path, never at emit.** `subscribe(..., { truncateResults })`
+  hands out a copy; `#events` keeps the whole result, because the live path, the parking snapshot
+  and `Runner.eventAt` (which serves `GET /sessions/:id/events/:seq/result`) all read it. Refuse
+  the temptation to truncate into a snapshot: it would break the fetch for exactly the sessions
+  most likely to be read late.
+
+- **Image refs happen there too — and on the live path as well.** `subscribe(..., { imageRefs })`
+  replaces a `tool_result`'s base64 `image` parts with `image_ref` addresses, and unlike truncation
+  it applies to live events as well as the replay, because a client's one render path is
+  ref-then-fetch. The same "never at emit" rule holds for the same reason: `#events` keeps every
+  byte, which is what the fetch route serves back. `SubscriberSet` (`src/lib/subscribers.ts`) is
+  where that per-subscriber decision lives — a subscriber is a listener *plus what it asked for*,
+  so the three runners no longer each own a copy of the answer. Consumers that subscribe with no
+  options — parking, notifications, the queue — see everything, as they do for every rule here.
+
 - **A declared MCP server that never connected is refused, not degraded.** If a profile's
   `session.mcpServers` names a server and it isn't there, `createEngineSession` throws. The old
   behaviour — start anyway, minus those tools — produced a session that reported perfectly healthy

package/build/index.d.mts

@@ -1,10 +1,10 @@
-import { McpServerStatus, Options, Query, SDKMessage, SDKUserMessage, SessionMessage } from "@anthropic-ai/claude-agent-sdk";
+import { McpServerStatus, Options, Query, SDKMessage, SDKSessionInfo, SDKUserMessage, SessionMessage } from "@anthropic-ai/claude-agent-sdk";
 import { ApiMessage, CreateSessionRequest, EngineCapabilities, McpServerConfigWire, McpServerStatusInfo, MessageAttachment, ModelOption, PermissionMode, PermissionRequest, ProfileEngine, ProfileInfo, SdkSessionSummary, SessionEvent, SessionEventBody, SessionInfo, SessionStatus, ToolCallRequestFrame, ToolExecutionBackend, ToolExecutionOutput } from "@workerdeck/protocol";
 import { LanguageModel, LanguageModel as LanguageModel$1, ModelMessage, Tool, Tool as Tool$1, ToolSet, ToolSet as ToolSet$1 } from "ai";
 import { SandboxEngine, SandboxVfs } from "@workerdeck/sandbox";
 import { Readable, Writable } from "node:stream";
 
-//#region src/attachments.d.ts
+//#region src/lib/attachments.d.ts
 /**
  * An attachment plus its bytes — what the host hands a runner at send time.
  *
@@ -44,7 +44,7 @@ declare function attachmentContentBlocks(attachments: readonly AttachmentInput[]
 /** Strip the bytes: the log-safe half of an attachment. */
 declare function attachmentRef(attachment: AttachmentInput): MessageAttachment;
 //#endregion
-//#region src/tool-executor.d.ts
+//#region src/executors/tool-executor.d.ts
 /**
  * Result of one tool execution, whenever it arrives. `failed` is a normal
  * outcome the agent loop adapts to — not an exception.
@@ -175,8 +175,54 @@ interface Runner {
   /** Begin the session. Idempotent; returns the run promise (resolves when the run ends). */
   start(): Promise<void>;
   info(): SessionInfo;
-  /** Replay buffered events with seq > afterSeq, then deliver live events. Returns unsubscribe. */
-  subscribe(listener: SessionEventListener, afterSeq?: number): () => void;
+  /** Replay buffered events with seq > afterSeq, then deliver live events. Returns unsubscribe.
+   *
+   * `coalesceReplay` drops state readings superseded later in the same replay —
+   * the fifty stale context/rate-limit polls a long session accumulates, which
+   * a client otherwise applies one by one and *renders*, counting its usage
+   * meters up through the session's history on every attach. Opt-in, and the
+   * default must stay off: it is only sound for a consumer whose handling of
+   * those events is last-write-wins, and `parking.ts` — which subscribes from
+   * seq 0 — branches on `status_changed` instead. Live events are never
+   * affected; this touches the buffered replay alone.
+   *
+   * `truncateResults` delivers an oversized `tool_result` block as its head plus
+   * the markers that say so (protocol's {@link TOOL_RESULT_HEAD_CHARS}), leaving
+   * the whole thing one fetch away. Measured, that is 68% of a long session's
+   * attach in three frames. Opt-in for the same reason and with one extra
+   * condition: **the opt-in must be issued by the unit that renders**, because
+   * `client` and `react` are separate packages an embedder can skew, and a
+   * client that asked for heads without knowing how to fetch the rest would show
+   * one as though it were the whole result. Live events are untouched — a result
+   * arriving while you watch is already on screen — and so is the stored log,
+   * which parking snapshots and the fetch route both read.
+   *
+   * `imageRefs` replaces a `tool_result`'s base64 image parts with `image_ref`
+   * addresses (protocol's {@link ImageRefPart}), their bytes one REST fetch
+   * away. Opt-in under the same rule — issued by the unit that renders — but
+   * unlike the other two it applies to **live events as well as the replay**,
+   * because the client's one render path is ref-then-fetch and bytes on a live
+   * event would only be discarded or pinned. Measured, this is 91% of all
+   * tool-result payload and 0% of what any client draws. The stored log keeps
+   * every byte, which is what the fetch route serves back. */
+  subscribe(listener: SessionEventListener, afterSeq?: number, options?: {
+    coalesceReplay?: boolean;
+    truncateResults?: boolean;
+    imageRefs?: boolean;
+  }): () => void;
+  /** One buffered event by seq, or undefined — the read side of the log the
+   * replay already walks.
+   *
+   * Optional, like every member added after `Runner` became public API: an
+   * out-of-tree runner that declines it declines only the on-demand tool result
+   * with it (the route 404s), which is exactly the degradation a runner with no
+   * `truncateResults` support wants anyway.
+   *
+   * Deliberately **not** a "give me the whole log" accessor. The one caller
+   * needs a single event by a seq a client is holding, and a method that handed
+   * out the array would invite a second copy of the bytes this feature exists
+   * to stop shipping. */
+  eventAt?(seq: number): SessionEvent | undefined;
   /** Queue a user message for the session (starts the next turn when idle).
    * `attachments` carry their bytes to the engine and their reference to the
    * event log (see {@link AttachmentInput}). */
@@ -215,13 +261,40 @@ interface Runner {
    * doesn't: the CLI owns its own process state).
    */
   park?(): RunnerSnapshot | undefined;
+  /**
+   * The same snapshot, taken **without ending anything** — the runner stays live,
+   * attached and warm.
+   *
+   * Park and snapshot are two operations that happen to produce the same value,
+   * and separating them is what makes restart-survival possible for an engine
+   * that has no on-disk session of its own. A park is for a session with nothing
+   * to do for possibly days; this is for one whose user is mid-conversation and
+   * whose process might be redeployed out from under it. The host writes it
+   * through after each turn — never on a shutdown hook, because a `kill -9` runs
+   * no hook and that is precisely the case worth surviving — and rebuilds from
+   * the last write through the ordinary `restore` path.
+   *
+   * Returns undefined when a snapshot would capture a half-happened turn: one in
+   * flight, or pending in-process executions whose results die with the process.
+   * Optional for the same reason `park()` is — claude and codex run behind a
+   * binary that owns its process state, and have engine-side resume instead.
+   */
+  snapshot?(): RunnerSnapshot | undefined;
   /** Emit a session_error and terminate. For host-enforced policy (e.g. requireApiKey). */
   fail(message: string): void;
   /** Terminate the session and any underlying engine process. */
   close(reason?: 'client' | 'server' | 'error'): void;
 }
 //#endregion
-//#region src/runner.d.ts
+//#region src/lib/subscribers.d.ts
+/** What a subscriber asked for. Absent fields mean the untransformed stream. */
+type SubscribeOptions = {
+  coalesceReplay?: boolean;
+  truncateResults?: boolean;
+  imageRefs?: boolean;
+};
+//#endregion
+//#region src/engines/claude/runner.d.ts
 type QueryFn = (params: {
   prompt: AsyncIterable<SDKUserMessage>;
   options?: Options;
@@ -229,6 +302,9 @@ type QueryFn = (params: {
 type HistoryFn = (sdkSessionId: string, options: {
   dir?: string;
 }) => Promise<SessionMessage[]>;
+type SessionInfoFn = (sdkSessionId: string, options: {
+  dir?: string;
+}) => Promise<SDKSessionInfo | undefined>;
 type SessionRunnerConfig = CreateSessionRequest & {
   /** Injectable query implementation (tests, instrumentation). Defaults to the SDK's query(). */queryFn?: QueryFn; /** Environment for the spawned Claude Code process. Defaults to process.env. */
   env?: Record<string, string | undefined>;
@@ -239,6 +315,10 @@ type SessionRunnerConfig = CreateSessionRequest & {
    * starts, so late-attaching clients get a full transcript. Default true. */
   backfillHistory?: boolean; /** Injectable history reader (tests). Defaults to the SDK's getSessionMessages. */
   historyFn?: HistoryFn;
+  /** Injectable session-metadata reader (tests). Defaults to the SDK's
+   * getSessionInfo — the only place the CLI's own session title is readable
+   * from, since no message on the stream carries it. */
+  sessionInfoFn?: SessionInfoFn;
 };
 /**
  * One live Agent SDK session: owns the query() call, the streaming input queue, the
@@ -284,14 +364,82 @@ declare class SessionRunner implements Runner {
   fail(message: string): void;
   /** Terminate the session and the underlying CLI subprocess. */
   close(reason?: 'client' | 'server' | 'error'): void;
+  /** See `Runner.eventAt`. A linear scan: the one caller is a reader pressing
+   * "show everything" on one row, so a per-runner seq index would be a map
+   * maintained on every emit to save a walk nobody makes twice a minute. */
+  eventAt(seq: number): SessionEvent | undefined;
   /**
    * Replay buffered events with seq > afterSeq, then deliver live events.
    * Returns an unsubscribe function.
+   *
+   * Replay honours the reset watermark: transcript content below the latest
+   * `conversation_reset` is skipped (the reducer would clear it again anyway,
+   * and a pre-reset client that never learned the reducer's case would render
+   * a conversation the engine has discarded), while state-bearing events —
+   * which are emitted once and never again — always replay. The reset event
+   * itself replays (the skip is strictly-below), which is what clears a
+   * reconnecting client still holding pre-reset rows; superseded resets are
+   * content below the newer one and are skipped with what they cleared.
    */
-  subscribe(listener: SessionEventListener, afterSeq?: number): () => void;
+  subscribe(listener: SessionEventListener, afterSeq?: number, options?: SubscribeOptions): () => void;
 }
 //#endregion
-//#region src/ai-sdk-runner.d.ts
+//#region src/lib/replay.d.ts
+/**
+ * The one replay body, and what a socket receives from it.
+ *
+ * Every runner had a byte-identical copy of this loop — three spellings of four
+ * rules, one of which ("never drop the highest-seq event, whatever the rule
+ * says") is load-bearing and was three copies of a comment. Not a base class:
+ * the runners share nothing else, and a base class would have to own `#emit`,
+ * the most engine-specific method each of them has.
+ *
+ * The rules, in the order they are applied:
+ *
+ * 1. `afterSeq` — the caller already holds everything at or below it.
+ * 2. `resetSeq` — transcript *content* strictly below the latest
+ *    `conversation_reset` is skipped, so a re-attach cannot resurrect a cleared
+ *    conversation while state events still replay. Claude's alone; the other
+ *    engines pass 0.
+ * 3. `coalesceReplay` — last-write-wins state readings superseded later in the
+ *    same replay (`staleReplaySeqs`), plus everything `replayRetains` says the
+ *    reducer reads and discards. Opt-in, and only sound for a consumer whose
+ *    handling of those events is last-write-wins.
+ * 4. `imageRefs` — a base64 image part is delivered as an `image_ref` address
+ *    (protocol's {@link imagePartRef}), its bytes one REST fetch away. Applied
+ *    **before** rule 5, because it stamps indices from the stored part array
+ *    which rule 5 then reshapes. Unlike rule 5 this also applies to the live
+ *    path (see `SubscriberSet`), which is the one place these two rules differ.
+ * 5. `truncateResults` — a huge `tool_result` block is delivered as its head
+ *    plus the markers that say so. **Never mutates the stored event**: the live
+ *    path, the parking snapshot and the fetch route all need the whole thing,
+ *    so this builds a copy and the log stays the log.
+ *
+ * The highest-seq event is delivered whatever rules 2 and 3 say — a client's
+ * replay hold waits for `state.lastSeq` to reach the attach's and would
+ * otherwise hang forever — but it is still *truncated* when rule 4 applies. A
+ * session that ends on a `find /` puts its 641 KB frame exactly there.
+ */
+declare function replaySlice(events: readonly SessionEvent[], options: {
+  afterSeq: number;
+  resetSeq?: number;
+  coalesceReplay?: boolean;
+  truncateResults?: boolean;
+  imageRefs?: boolean;
+}): SessionEvent[];
+/**
+ * A copy of `event` whose oversized `tool_result` blocks carry their head and
+ * say so — or `event` itself, unchanged and un-copied, when nothing is over the
+ * budget. That identity matters: an attach is mostly small events, and a fresh
+ * object for every one of them would cost more than the feature saves.
+ *
+ * Blocks are measured and cut **individually**. A message answering three calls
+ * where one is a `find /` keeps the two small results whole, which is what makes
+ * the per-block marker (rather than a per-event one) honest.
+ */
+declare function truncateResultBlocks(event: SessionEvent): SessionEvent;
+//#endregion
+//#region src/engines/provider/runner.d.ts
 /** `cwd` is optional for this engine: the loop has no host-filesystem coupling
  * (tools get scoped VFS handles instead). Defaults to process.cwd() for display. */
 type AiSdkRunnerConfig = Omit<CreateSessionRequest, 'cwd'> & {
@@ -428,6 +576,34 @@ declare class AiSdkRunner implements Runner {
    * or an already-closed/parked runner.
    */
   park(): RunnerSnapshot | undefined;
+  /**
+   * The same snapshot, taken without ending anything.
+   *
+   * `park()` and this are two operations that happen to produce the same value,
+   * and the difference is the whole point: `park()` *ends* the live runner
+   * (inert, listeners dropped, `onClose` called), which is right for deferred
+   * execution — the session has nothing to do for possibly days — and wrong for
+   * restart-survival, where the session is active and someone is mid-
+   * conversation. This one changes nothing at all: no status emit, no listener
+   * clear, no disposer. The host writes the value through to durable storage
+   * after each turn and keeps the runner live and warm, so a restart rebuilds
+   * from the last write through the existing `restore` path and the next message
+   * costs no wake.
+   *
+   * The gate is `park()`'s minus the requirement that there be something parked:
+   *
+   * - `#abort` set is refused for the reason it always was — a `generate()` in
+   *   flight has produced messages that are not in the history yet, so the
+   *   snapshot would be of a turn that half-happened.
+   * - Pending calls that are **not** all deferred are refused, which is
+   *   `park()`'s rule wearing a different hat. An in-process execution's result
+   *   is coming back to *this* runner and dies with the process; a restore would
+   *   wait on it forever, and `state.dispatched` is what would stop the rebuilt
+   *   runner from simply calling it again.
+   * - Idle with nothing pending — the case `park()` exists to refuse — is
+   *   exactly the case this exists to allow.
+   */
+  snapshot(): RunnerSnapshot | undefined;
   sendMessage(text: string, attachments?: readonly AttachmentInput[]): void;
   /**
    * Deliver the result of an external (execute-less) tool call. Appends the
@@ -456,7 +632,11 @@ declare class AiSdkRunner implements Runner {
   setModel(model?: string): Promise<void>;
   fail(message: string): void;
   close(reason?: 'client' | 'server' | 'error'): void;
-  subscribe(listener: SessionEventListener, afterSeq?: number): () => void;
+  /** See `Runner.eventAt`. A linear scan: the one caller is a reader pressing
+   * "show everything" on one row, so a per-runner seq index would be a map
+   * maintained on every emit to save a walk nobody makes twice a minute. */
+  eventAt(seq: number): SessionEvent | undefined;
+  subscribe(listener: SessionEventListener, afterSeq?: number, options?: SubscribeOptions): () => void;
   /**
    * Deliver the result of an execution this runner dispatched. Used by the host
    * when a backend settled out-of-band (a browser bridge answering later, a
@@ -477,7 +657,7 @@ declare class AiSdkRunner implements Runner {
   setTitle(title: string | undefined): void;
 }
 //#endregion
-//#region src/claude-auth.d.ts
+//#region src/engines/claude/auth.d.ts
 /**
  * Credential presence for one Claude Code environment, as the CLI itself reports
  * it. 'unknown' means the check could not run at all (no binary, a CLI too old
@@ -515,7 +695,7 @@ declare function checkClaudeAuth(env: Record<string, string | undefined>, option
   timeoutMs?: number;
 }): Promise<ClaudeAuthStatus>;
 //#endregion
-//#region src/quickjs-executor.d.ts
+//#region src/executors/quickjs-executor.d.ts
 /** Resolve a URL to text for the guest. Runs host-side with host authority —
  * this is where a credential may be attached, never inside the sandbox. */
 type HostFetch = (url: string, signal: AbortSignal) => Promise<string>;
@@ -548,7 +728,7 @@ declare class QuickJsExecutor implements ToolExecutor {
  * (not the bare parent). Only http(s) — no file:, data:, or other schemes. */
 declare function isHostAllowed(url: string, allowedHosts: string[]): boolean;
 //#endregion
-//#region src/pending-registry.d.ts
+//#region src/lib/pending-registry.d.ts
 /**
  * One registry for every request that leaves the runner and must come back:
  * permission approvals, browser-bridged tool calls, and deferred executions.
@@ -610,7 +790,7 @@ declare class PendingRequestRegistry {
   cancelAll(reason: string, error: string, kind?: PendingKind): number;
 }
 //#endregion
-//#region src/browser-bridge-executor.d.ts
+//#region src/executors/browser-bridge-executor.d.ts
 /** Answer a bridged call, as delivered by the client over the wire. */
 type BridgeAnswer = {
   output: ToolExecutionOutput;
@@ -664,7 +844,7 @@ declare class BrowserBridgeExecutor implements ToolExecutor {
 /** Map a registry outcome onto the executor's result contract. */
 declare function toExecutionResult(outcome: PendingOutcome<BridgeAnswer>): ToolExecutionResult;
 //#endregion
-//#region src/deferred-executor.d.ts
+//#region src/executors/deferred-executor.d.ts
 /** A dispatched execution, as handed to the backend that will run it. */
 type DeferredDispatch = {
   /** Correlation id. The result is delivered under it — `POST
@@ -714,7 +894,7 @@ declare class DeferredExecutor implements ToolExecutor {
   dispatch(call: ToolExecutionCall): Promise<ToolExecutionDispatch>;
 }
 //#endregion
-//#region src/web-fetch.d.ts
+//#region src/engines/provider/web-fetch.d.ts
 /**
  * `web_fetch` backend, close to Claude Code's original WebFetch: fetch a URL,
  * convert HTML to markdown, and (optionally) digest it with a model against the
@@ -760,7 +940,7 @@ declare function isPrivateAddress(address: string): boolean;
  */
 declare function htmlToMarkdown(html: string): string;
 //#endregion
-//#region src/tools.d.ts
+//#region src/engines/provider/tools.d.ts
 /**
  * How much authority a tool carries, which decides where it may run.
  *
@@ -863,7 +1043,7 @@ declare function withHostTools(context: ToolContext, hostTools: Record<string, H
 
 kind?: string): ToolContext;
 //#endregion
-//#region src/engine.d.ts
+//#region src/engines/provider/session.d.ts
 type EngineSessionOptions = {
   /** Resolved session config (profile defaults already applied). */config: AiSdkRunnerConfig; /** The profile that selected this engine, when there was one. */
   profile?: ProfileInfo;
@@ -1014,7 +1194,7 @@ declare function connectMcpTools(servers: Record<string, McpServerConfigWire>, o
   required?: boolean;
 }): Promise<McpConnection>;
 //#endregion
-//#region src/input-queue.d.ts
+//#region src/lib/input-queue.d.ts
 /**
  * Push-based single-consumer AsyncIterable bridging imperative sendMessage() calls
  * into the streaming `prompt` the Agent SDK consumes.
@@ -1026,7 +1206,7 @@ declare class InputQueue implements AsyncIterable<SDKUserMessage> {
   [Symbol.asyncIterator](): AsyncIterator<SDKUserMessage>;
 }
 //#endregion
-//#region src/normalize.d.ts
+//#region src/lib/normalize.d.ts
 declare function toApiMessage(message: unknown): ApiMessage;
 /**
  * The CLI's MCP status, as `McpServerStatusInfo`.
@@ -1497,7 +1677,11 @@ declare class CodexRunner implements Runner {
   setModel(model?: string): Promise<void>;
   fail(message: string): void;
   close(reason?: 'client' | 'server' | 'error'): void;
-  subscribe(listener: SessionEventListener, afterSeq?: number): () => void;
+  /** See `Runner.eventAt`. A linear scan: the one caller is a reader pressing
+   * "show everything" on one row, so a per-runner seq index would be a map
+   * maintained on every emit to save a walk nobody makes twice a minute. */
+  eventAt(seq: number): SessionEvent | undefined;
+  subscribe(listener: SessionEventListener, afterSeq?: number, options?: SubscribeOptions): () => void;
   /**
    * The session's MCP servers, live from the binary.
    *
@@ -1592,5 +1776,5 @@ declare class JsonRpcStdioConnection {
  */
 declare const providerAdapter: EngineAdapter;
 //#endregion
-export { AiSdkRunner, type AiSdkRunnerConfig, type AiSdkSessionState, type AppServerConnectFn, type AppServerConnectOptions, type AppServerConnection, type AppServerHistoryTurn, type AppServerItem, type AppServerThreadListResponse, type AppServerThreadSummary, type AppServerTokenUsage, type AppServerTurn, type AppServerUserInput, type AttachmentInput, type AttachmentKind, type BridgeAnswer, BrowserBridgeExecutor, type BrowserBridgeExecutorOptions, CLAUDE_CATALOG, CODEX_CATALOG, type ClaudeAuthProbe, type ClaudeAuthStatus, CodexRunner, type CodexRunnerConfig, type DeferredDispatch, DeferredExecutor, type DeferredExecutorOptions, type EngineAdapter, type EngineAvailability, type EngineRunnerRequest, type EngineSessionOptions, type HistoryFn, type HostFetch, type HostToolDefinition, InputQueue, JsonRpcError, JsonRpcStdioConnection, type LanguageModel, type McpConnection, type ModelCatalog, type ParkedExecution, type PendingEntry, type PendingKind, type PendingOutcome, PendingRequestRegistry, type PendingToolCall, type PermissionDecision, type QueryFn, QuickJsExecutor, type QuickJsExecutorOptions, type RegisterOptions, type Runner, type RunnerSnapshot, SUPPORTED_ATTACHMENT_TYPES, type SessionEventListener, SessionRunner, type SessionRunnerConfig, type SettledBy, type Tool, type ToolCallOutput, type ToolContext, type ToolContextOptions, type ToolDefinition, type ToolExecutionCall, type ToolExecutionDispatch, type ToolExecutionResult, type ToolExecutor, type ToolSet, type ToolTrust, type WebFetchDigest, type WebFetchFn, type WebFetchOptions, type WebFetchResult, attachmentContentBlocks, attachmentKind, attachmentRef, checkClaudeAuth, claudeAdapter, codexAdapter, connectAppServer, connectMcpTools, createEngineSession, createToolContext, createWebFetch, getEngineAdapter, htmlToMarkdown, isHostAllowed, isPrivateAddress, listCodexSessions, mcpStatusInfo, modelOptionsFromSdk, normalizeMediaType, normalizeSdkMessage, providerAdapter, resolveBundledClaudeExecutable, resolveBundledCodexExecutable, toApiMessage, toExecutionResult, withHostTools, withMcpTools };
+export { AiSdkRunner, type AiSdkRunnerConfig, type AiSdkSessionState, type AppServerConnectFn, type AppServerConnectOptions, type AppServerConnection, type AppServerHistoryTurn, type AppServerItem, type AppServerThreadListResponse, type AppServerThreadSummary, type AppServerTokenUsage, type AppServerTurn, type AppServerUserInput, type AttachmentInput, type AttachmentKind, type BridgeAnswer, BrowserBridgeExecutor, type BrowserBridgeExecutorOptions, CLAUDE_CATALOG, CODEX_CATALOG, type ClaudeAuthProbe, type ClaudeAuthStatus, CodexRunner, type CodexRunnerConfig, type DeferredDispatch, DeferredExecutor, type DeferredExecutorOptions, type EngineAdapter, type EngineAvailability, type EngineRunnerRequest, type EngineSessionOptions, type HistoryFn, type HostFetch, type HostToolDefinition, InputQueue, JsonRpcError, JsonRpcStdioConnection, type LanguageModel, type McpConnection, type ModelCatalog, type ParkedExecution, type PendingEntry, type PendingKind, type PendingOutcome, PendingRequestRegistry, type PendingToolCall, type PermissionDecision, type QueryFn, QuickJsExecutor, type QuickJsExecutorOptions, type RegisterOptions, type Runner, type RunnerSnapshot, SUPPORTED_ATTACHMENT_TYPES, type SessionEventListener, SessionRunner, type SessionRunnerConfig, type SettledBy, type Tool, type ToolCallOutput, type ToolContext, type ToolContextOptions, type ToolDefinition, type ToolExecutionCall, type ToolExecutionDispatch, type ToolExecutionResult, type ToolExecutor, type ToolSet, type ToolTrust, type WebFetchDigest, type WebFetchFn, type WebFetchOptions, type WebFetchResult, attachmentContentBlocks, attachmentKind, attachmentRef, checkClaudeAuth, claudeAdapter, codexAdapter, connectAppServer, connectMcpTools, createEngineSession, createToolContext, createWebFetch, getEngineAdapter, htmlToMarkdown, isHostAllowed, isPrivateAddress, listCodexSessions, mcpStatusInfo, modelOptionsFromSdk, normalizeMediaType, normalizeSdkMessage, providerAdapter, replaySlice, resolveBundledClaudeExecutable, resolveBundledCodexExecutable, toApiMessage, toExecutionResult, truncateResultBlocks, withHostTools, withMcpTools };
 //# sourceMappingURL=index.d.mts.map