@workerdeck/core 2.15.0 → 3.1.0

package/build/index.d.mts

@@ -1,5 +1,5 @@
 import { McpServerStatus, Options, Query, SDKMessage, SDKSessionInfo, SDKUserMessage, SessionMessage } from "@anthropic-ai/claude-agent-sdk";
-import { ApiMessage, ByModel, CostBreakdown, CreateSessionRequest, EngineCapabilities, McpServerConfigWire, McpServerStatusInfo, MessageAttachment, MessageOrigin, ModelOption, PermissionMode, PermissionRequest, ProfileEngine, ProfileInfo, SdkSessionSummary, SessionEvent, SessionEventBody, SessionInfo, SessionStatus, ShellEndReason, ShellInfo, ShellOwner, ShellStatus, ToolCallRequestFrame, ToolExecutionBackend, ToolExecutionOutput } from "@workerdeck/protocol";
+import { ApiMessage, ByModel, ChecklistItem, ContextReading, CostBreakdown, CreateSessionRequest, EngineCapabilities, McpServerConfigWire, McpServerStatusInfo, MessageAttachment, MessageOrigin, ModelOption, PermissionDecisionSource, PermissionMode, PermissionRequest, PricingTable, ProfileEngine, ProfileInfo, SdkSessionSummary, SessionEvent, SessionEventBody, SessionInfo, SessionStatus, ShellEndReason, ShellInfo, ShellOwner, ShellStatus, ToolCallRequestFrame, ToolExecutionBackend, ToolExecutionOutput } from "@workerdeck/protocol";
 import { z } from "zod";
 import { LanguageModel, LanguageModel as LanguageModel$1, ModelMessage, Tool, Tool as Tool$1, ToolSet, ToolSet as ToolSet$1 } from "ai";
 import { SandboxEngine, SandboxVfs } from "@workerdeck/sandbox";
@@ -15,6 +15,39 @@ declare const SUPPORTED_ATTACHMENT_TYPES: string;
 declare function attachmentContentBlocks(attachments: readonly AttachmentInput[]): Array<Record<string, unknown>>;
 declare function attachmentRef(attachment: AttachmentInput): MessageAttachment;
 //#endregion
+//#region src/lib/cost-ledger.d.ts
+type CostFigures = {
+  byModel?: ByModel;
+  reportedCostUsd?: number;
+};
+type CostLedgerState = CostFigures & {
+  lifetime?: CostFigures;
+};
+declare class CostLedger {
+  #private;
+  constructor(pricing?: PricingTable);
+  carry(state: CostLedgerState | undefined): void;
+  carryUnlessRestored(state: CostLedgerState | undefined): void;
+  observeCumulative(byModel: ByModel | undefined, reportedCostUsd: number | undefined): void;
+  observeDelta(byModel: ByModel): void;
+  rollover(): void;
+  get byModel(): ByModel | undefined;
+  get breakdown(): CostBreakdown;
+  get costUsd(): number | undefined;
+  get reportedCostUsd(): number | undefined;
+  snapshot(): CostLedgerState;
+}
+//#endregion
+//#region src/lib/instructions.d.ts
+type InstructionsContext = {
+  sessionId: string;
+  cwd?: string;
+  profile?: string;
+};
+type SessionInstructions = string | ((context: InstructionsContext) => string);
+declare function resolveInstructions(instructions: SessionInstructions | undefined, context: InstructionsContext): string | undefined;
+declare function composeInstructions(...parts: Array<SessionInstructions | undefined>): SessionInstructions | undefined;
+//#endregion
 //#region src/lib/local-command.d.ts
 type LocalCommandResult = {
   command: string;
@@ -54,27 +87,16 @@ declare class LocalCommandQueue {
   clear(): void;
 }
 //#endregion
-//#region src/lib/cost-ledger.d.ts
-type CostFigures = {
-  byModel?: ByModel;
-  reportedCostUsd?: number;
+//#region src/lib/gateway-tools.d.ts
+type GatewayToolOutput = {
+  text: string;
+  isError: boolean;
 };
-type CostLedgerState = CostFigures & {
-  lifetime?: CostFigures;
+type GatewayToolSpec<N extends string = string> = {
+  name: N;
+  description: string;
+  inputSchema: Record<string, unknown>;
 };
-declare class CostLedger {
-  #private;
-  carry(state: CostLedgerState | undefined): void;
-  carryUnlessRestored(state: CostLedgerState | undefined): void;
-  observeCumulative(byModel: ByModel | undefined, reportedCostUsd: number | undefined): void;
-  observeDelta(byModel: ByModel): void;
-  rollover(): void;
-  get byModel(): ByModel | undefined;
-  get breakdown(): CostBreakdown;
-  get costUsd(): number | undefined;
-  get reportedCostUsd(): number | undefined;
-  snapshot(): CostLedgerState;
-}
 //#endregion
 //#region src/lib/peers.d.ts
 type PeerSessionSummary = {
@@ -147,16 +169,9 @@ declare const PEER_TOOL_SHAPES: {
   };
 };
 type PeerToolName = keyof typeof PEER_TOOL_SHAPES;
-declare const PEER_TOOL_NAMES: PeerToolName[];
-type PeerToolSpec = {
-  name: PeerToolName;
-  description: string;
-  inputSchema: Record<string, unknown>;
-};
-type PeerToolOutput = {
-  text: string;
-  isError: boolean;
-};
+type PeerToolSpec = GatewayToolSpec<PeerToolName>;
+type PeerToolOutput = GatewayToolOutput;
+declare const PEER_TOOL_NAMES: ("peers_list" | "peers_peek" | "peers_send")[];
 declare function peerToolSpecs(): PeerToolSpec[];
 declare function runPeerTool(peers: PeerDirectory, from: string, name: string, args: unknown): Promise<PeerToolOutput>;
 declare function peerMessageEnvelope(text: string, origin: MessageOrigin): string;
@@ -169,7 +184,164 @@ declare function peerSummary(info: SessionInfo): PeerSessionSummary;
 declare function recentLines(events: readonly SessionEvent[], limit: number): string[];
 declare function installPeerDirectory(directory: PeerDirectory | undefined): void;
 declare function installedPeerDirectory(): PeerDirectory | undefined;
-declare function peerDirectoryHandle(): PeerDirectory;
+declare function peerDirectoryHandle(own?: () => PeerDirectory | undefined): PeerDirectory;
+//#endregion
+//#region src/lib/shells.d.ts
+type ShellSummary = {
+  id: string;
+  ordinal: number;
+  command: string;
+  label: string;
+  cwd: string;
+  owner: ShellOwner;
+  status: ShellStatus;
+  startedAt: number;
+  endedAt?: number;
+  exitCode?: number;
+  endReason?: ShellEndReason;
+  bytes: number;
+  capped?: boolean;
+  interactive?: boolean;
+  agentWrite?: boolean;
+};
+type ShellView = 'lines' | 'screen';
+type ShellWait = {
+  outcome: 'matched' | 'timeout' | 'exited';
+  match?: string;
+  ms: number;
+};
+type ShellReadResult = {
+  shell: ShellSummary;
+  view: ShellView;
+  text: string;
+  lines: number;
+  totalLines: number;
+  truncated: boolean;
+  wait?: ShellWait;
+};
+type ShellReadOptions = {
+  tail?: number;
+  view?: ShellView;
+  waitFor?: string[];
+  timeoutMs?: number;
+};
+type ShellRunOptions = {
+  command: string;
+  waitFor?: string[];
+  timeoutMs?: number;
+};
+type ShellWriteOptions = {
+  data?: string;
+  keys?: string[];
+  waitFor?: string[];
+  timeoutMs?: number;
+};
+type ShellKillResult = {
+  shell: ShellSummary;
+  killed: boolean;
+};
+type ShellAgentWrite = 'gated' | 'allow';
+type ShellKeyOptions = {
+  applicationCursorKeys?: boolean;
+};
+interface ShellDirectory {
+  list(from: string): Promise<ShellSummary[]>;
+  read(from: string, shellId: string, options?: ShellReadOptions): Promise<ShellReadResult | undefined>;
+  run(from: string, options: ShellRunOptions): Promise<ShellReadResult>;
+  write(from: string, shellId: string, options: ShellWriteOptions): Promise<ShellReadResult | undefined>;
+  kill(from: string, shellId: string): Promise<ShellKillResult | undefined>;
+  grant(from: string, shellId: string): Promise<ShellSummary | undefined>;
+}
+declare const SHELL_REFUSAL = "shell commands are not available on this session";
+declare const SHELL_WRITE_REFUSAL = "the agent may not start, type into or kill shells on this session (shell.agentWrite is read-only)";
+declare const SHELL_KEYS_MAX = 64;
+declare const SHELL_KEY_NAMES: readonly string[];
+declare const SHELL_TOOL_SHAPES: {
+  readonly shell_list: {
+    readonly description: string;
+    readonly shape: {};
+  };
+  readonly shell_read: {
+    readonly description: string;
+    readonly shape: {
+      readonly shellId: z.ZodString;
+      readonly view: z.ZodOptional<z.ZodEnum<{
+        lines: "lines";
+        screen: "screen";
+      }>>;
+      readonly tail: z.ZodOptional<z.ZodNumber>;
+      readonly waitFor: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+      readonly timeoutMs: z.ZodOptional<z.ZodNumber>;
+    };
+  };
+  readonly shell_run: {
+    readonly description: string;
+    readonly shape: {
+      readonly command: z.ZodString;
+      readonly waitFor: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+      readonly timeoutMs: z.ZodOptional<z.ZodNumber>;
+    };
+  };
+  readonly shell_write: {
+    readonly description: string;
+    readonly shape: {
+      readonly shellId: z.ZodString;
+      readonly data: z.ZodOptional<z.ZodString>;
+      readonly keys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+      readonly waitFor: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+      readonly timeoutMs: z.ZodOptional<z.ZodNumber>;
+    };
+  };
+  readonly shell_kill: {
+    readonly description: string;
+    readonly shape: {
+      readonly shellId: z.ZodString;
+    };
+  };
+  readonly shell_request_write: {
+    readonly description: string;
+    readonly shape: {
+      readonly shellId: z.ZodString;
+      readonly reason: z.ZodString;
+    };
+  };
+};
+type ShellToolName = keyof typeof SHELL_TOOL_SHAPES;
+declare const SHELL_READ_TOOL_NAMES: readonly ShellToolName[];
+declare const SHELL_WRITE_TOOL_NAMES: readonly ShellToolName[];
+type ShellToolSpec = GatewayToolSpec<ShellToolName>;
+type ShellToolOutput = GatewayToolOutput;
+type ShellToolOptions = {
+  write?: boolean;
+};
+declare const SHELL_TOOL_NAMES: ("shell_list" | "shell_read" | "shell_run" | "shell_write" | "shell_kill" | "shell_request_write")[];
+declare function shellToolNames(write: boolean): ShellToolName[];
+declare function shellToolSpecs(write?: boolean): ShellToolSpec[];
+declare function isShellToolName(name: string): name is ShellToolName;
+declare function isShellWriteToolName(name: string): boolean;
+declare function shellWriteToolOf(toolName: string): ShellToolName | undefined;
+declare function shellToolOf(toolName: string): ShellToolName | undefined;
+declare function shellToolNeedsCard(toolName: string, agentWrite: ShellAgentWrite | undefined): boolean;
+declare function clampShellTail(tail: number | undefined): number;
+declare function agentMayWrite(shell: Pick<ShellInfo, 'sessionId' | 'owner' | 'agentWrite'>, from: string): boolean;
+declare function shellOwnershipRefusal(shellId: string): string;
+declare function shellWriteDeniedText(name: string, message: string | undefined): string;
+declare function encodeShellKey(key: string, options?: ShellKeyOptions): string | undefined;
+declare function encodeShellKeys(keys: readonly string[], options?: ShellKeyOptions): string;
+declare function shellSummary(info: ShellInfo): ShellSummary;
+declare function shellTail(text: string, tail: number): {
+  view: 'lines';
+  text: string;
+  lines: number;
+  totalLines: number;
+  truncated: boolean;
+};
+declare function runShellTool(shells: ShellDirectory, from: string, name: string, args: unknown, options?: ShellToolOptions): Promise<ShellToolOutput>;
+declare function shellReadText(result: ShellReadResult, verb?: 'started' | 'typed'): string;
+declare function shellKillText(result: ShellKillResult): string;
+declare function installShellDirectory(directory: ShellDirectory | undefined): void;
+declare function installedShellDirectory(): ShellDirectory | undefined;
+declare function shellDirectoryHandle(own?: () => ShellDirectory | undefined): ShellDirectory;
 //#endregion
 //#region src/executors/tool-executor.d.ts
 type ToolExecutionResult = {
@@ -214,6 +386,18 @@ interface ToolExecutor {
 //#endregion
 //#region src/runner-interface.d.ts
 type SessionEventListener = (event: SessionEvent) => void;
+type EngineRunnerConfig = CreateSessionRequest & {
+  epoch?: number;
+  pricing?: PricingTable;
+  env?: Record<string, string | undefined>;
+  instructions?: SessionInstructions;
+  defaultApprovalTimeoutMs?: number | null;
+  peers?: PeerDirectory;
+  shells?: ShellDirectory;
+  shellAgentWrite?: ShellAgentWrite;
+  createdByOperator?: boolean;
+  fallbackTitle?: string;
+};
 type ParkedExecution = {
   executionId: string;
   toolName: string;
@@ -262,6 +446,7 @@ interface Runner {
   setTitle(title: string | undefined): void;
   resolvePermission(requestId: string, decision: PermissionDecision): boolean;
   interrupt(): Promise<void>;
+  stopTask?(toolUseId: string): Promise<boolean>;
   clearContext?(): Promise<void>;
   setPermissionMode(mode: PermissionMode): Promise<void>;
   setModel(model?: string): Promise<void>;
@@ -274,6 +459,22 @@ interface Runner {
   close(reason?: 'client' | 'server' | 'error'): void;
 }
 //#endregion
+//#region src/lib/event-log.d.ts
+declare class EventLog {
+  #private;
+  get events(): readonly SessionEvent[];
+  get seq(): number;
+  get activityCount(): number;
+  get proseCount(): number;
+  get contextUsage(): ContextReading | undefined;
+  get checklist(): ChecklistItem[] | undefined;
+  get resetSeq(): number;
+  get lastActivityAt(): number | undefined;
+  append(body: SessionEventBody): SessionEvent;
+  at(seq: number): SessionEvent | undefined;
+  restore(events: readonly SessionEvent[], seq: number, lastActivityAt: number | undefined): void;
+}
+//#endregion
 //#region src/lib/subscribers.d.ts
 type SubscribeOptions = {
   coalesceReplay?: boolean;
@@ -281,86 +482,132 @@ type SubscribeOptions = {
   imageRefs?: boolean;
 };
 //#endregion
-//#region src/lib/instructions.d.ts
-type InstructionsContext = {
-  sessionId: string;
-  cwd?: string;
-  profile?: string;
-};
-type SessionInstructions = string | ((context: InstructionsContext) => string);
-declare function resolveInstructions(instructions: SessionInstructions | undefined, context: InstructionsContext): string | undefined;
-declare function composeInstructions(...parts: Array<SessionInstructions | undefined>): SessionInstructions | undefined;
-//#endregion
-//#region src/lib/shells.d.ts
-type ShellSummary = {
-  id: string;
-  ordinal: number;
-  command: string;
-  label: string;
-  cwd: string;
-  owner: ShellOwner;
-  status: ShellStatus;
-  startedAt: number;
-  endedAt?: number;
-  exitCode?: number;
-  endReason?: ShellEndReason;
-  bytes: number;
-  capped?: boolean;
+//#region src/lib/runner-core.d.ts
+type CloseReason = 'client' | 'server' | 'error';
+type RunnerCoreHooks = {
+  prepare?: (body: SessionEventBody) => SessionEventBody;
+  observe?: (body: SessionEventBody, event: SessionEvent) => void;
+  settled?: (body: SessionEventBody, event: SessionEvent) => void;
+  holdStatus?: (status: SessionStatus) => boolean;
+};
+type RunnerCoreOptions = {
+  pricing?: PricingTable;
+  cost?: 'additive' | 'reconcile';
+  hooks?: RunnerCoreHooks;
+};
+type ApprovalResolution = {
+  behavior: 'allow' | 'deny';
+  resolvedBy: PermissionDecisionSource;
+  message?: string;
 };
-type ShellReadResult = {
-  shell: ShellSummary;
-  text: string;
-  lines: number;
-  totalLines: number;
-  truncated: boolean;
+type ApprovalHandler = {
+  timeoutMs?: number;
+  wireId?: string | number;
+  respond: (decision: PermissionDecision, resolvedBy: PermissionDecisionSource) => ApprovalResolution;
+  after?: (resolution: ApprovalResolution, decision: PermissionDecision) => void;
 };
-type ShellReadOptions = {
-  tail?: number;
+type TurnResultBody = Extract<SessionEventBody, {
+  type: 'turn_result';
+}>;
+type TurnReport = {
+  startedAt: number;
+  numTurns: number;
+  result?: string;
+  errors?: string[];
+  usage?: TurnResultBody['usage'];
+  byModel?: ByModel;
+  costs: boolean;
+  totalCostUsd?: number;
 };
-interface ShellDirectory {
-  list(from: string): Promise<ShellSummary[]>;
-  read(from: string, shellId: string, options?: ShellReadOptions): Promise<ShellReadResult | undefined>;
+declare class RunnerCore {
+  #private;
+  readonly log: EventLog;
+  readonly cost: CostLedger;
+  constructor(options?: RunnerCoreOptions);
+  get status(): SessionStatus;
+  get closed(): boolean;
+  get terminal(): boolean;
+  get pendingApprovals(): PermissionRequest[];
+  get pendingCount(): number;
+  restoreStatus(status: SessionStatus): void;
+  emit(body: SessionEventBody): SessionEvent;
+  setStatus(status: SessionStatus, detail?: string): void;
+  subscribe(listener: SessionEventListener, afterSeq?: number, options?: SubscribeOptions): () => void;
+  clearSubscribers(): void;
+  eventAt(seq: number): SessionEvent | undefined;
+  carryCost(state: CostLedgerState): void;
+  costState(): CostLedgerState;
+  fail(message: string, close: (reason: CloseReason) => void): void;
+  close(reason: CloseReason, teardown?: () => void, options?: {
+    settleApprovals?: boolean;
+  }): boolean;
+  requestApproval(request: PermissionRequest, handler: ApprovalHandler): void;
+  resolveApproval(requestId: string, decision: PermissionDecision, resolvedBy?: PermissionDecisionSource): boolean;
+  settleAllApprovals(decision: PermissionDecision, resolvedBy: PermissionDecisionSource, followUp?: boolean): void;
+  findApproval(predicate: (request: PermissionRequest, wireId: string | number | undefined) => boolean): string | undefined;
+  resolveByPolicy(request: PermissionRequest, behavior: 'allow' | 'deny', message?: string): void;
+  resolveQuestionByPolicy(request: PermissionRequest, mode: 'auto' | 'deny'): boolean;
+  emitTurnResult(report: TurnReport): void;
 }
-declare const SHELL_REFUSAL = "shell commands are not available on this session";
-declare const SHELL_TOOL_SHAPES: {
-  readonly shell_list: {
-    readonly description: string;
-    readonly shape: {};
-  };
-  readonly shell_read: {
-    readonly description: string;
-    readonly shape: {
-      readonly shellId: z.ZodString;
-      readonly tail: z.ZodOptional<z.ZodNumber>;
-    };
-  };
-};
-type ShellToolName = keyof typeof SHELL_TOOL_SHAPES;
-declare const SHELL_TOOL_NAMES: ShellToolName[];
-type ShellToolSpec = {
-  name: ShellToolName;
-  description: string;
-  inputSchema: Record<string, unknown>;
-};
-type ShellToolOutput = {
-  text: string;
-  isError: boolean;
+//#endregion
+//#region src/lib/session-tools.d.ts
+type SessionToolSources = {
+  peers?: PeerDirectory;
+  shells?: ShellDirectory;
+  write: boolean;
 };
-declare function shellToolSpecs(): ShellToolSpec[];
-declare function isShellToolName(name: string): name is ShellToolName;
-declare function clampShellTail(tail: number | undefined): number;
-declare function shellSummary(info: ShellInfo): ShellSummary;
-declare function shellTail(text: string, tail: number): {
-  text: string;
-  lines: number;
-  totalLines: number;
-  truncated: boolean;
+//#endregion
+//#region src/lib/engine-runner.d.ts
+type EngineRunnerCoreOptions = Pick<RunnerCoreOptions, 'cost'>;
+type ApprovalDeadline = {
+  timeoutMs: number | undefined;
+  expiresAt: number | undefined;
 };
-declare function runShellTool(shells: ShellDirectory, from: string, name: string, args: unknown): Promise<ShellToolOutput>;
-declare function shellReadText(result: ShellReadResult): string;
-declare function installShellDirectory(directory: ShellDirectory | undefined): void;
-declare function installedShellDirectory(): ShellDirectory | undefined;
-declare function shellDirectoryHandle(): ShellDirectory;
+declare abstract class EngineRunner<C extends EngineRunnerConfig> {
+  readonly id: string;
+  readonly createdAt: number;
+  protected config: C;
+  protected readonly core: RunnerCore;
+  protected readonly localCommands: LocalCommandQueue;
+  protected constructor(config: C, id: string, createdAt: number, options?: EngineRunnerCoreOptions);
+  abstract close(reason?: CloseReason): void;
+  protected coreHooks(): RunnerCoreHooks;
+  get status(): SessionStatus;
+  get lastSeq(): number;
+  get pendingApprovals(): PermissionRequest[];
+  setTitle(title: string | undefined): void;
+  carryCost(state: CostLedgerState): void;
+  costState(): CostLedgerState;
+  resolvePermission(requestId: string, decision: PermissionDecision): boolean;
+  queueLocalCommand(input: LocalCommandResult | LocalShellSource): void;
+  eventAt(seq: number): SessionEvent | undefined;
+  subscribe(listener: SessionEventListener, afterSeq?: number, options?: SubscribeOptions): () => void;
+  fail(message: string): void;
+  protected assertAccepting(): void;
+  protected echoUser(text: string, attachments: readonly AttachmentInput[] | undefined, options: SendMessageOptions | undefined): void;
+  protected approvalDeadline(): ApprovalDeadline;
+  protected get toolSources(): SessionToolSources;
+  protected baseInfo(engineTitle?: string): {
+    id: string;
+    status: SessionStatus;
+    profile: string | undefined;
+    shellAgentWrite: ShellAgentWrite | undefined;
+    createdAt: number;
+    epoch: number | undefined;
+    lastSeq: number;
+    activityCount: number;
+    proseCount: number;
+    contextUsage: import("@workerdeck/protocol").ContextReading | undefined;
+    checklist: import("@workerdeck/protocol").ChecklistItem[] | undefined;
+    pendingPermissionCount: number;
+    meta: Record<string, unknown> | undefined;
+    scope: Record<string, string> | undefined;
+    title: string | undefined;
+    costUsd: number | undefined;
+    usageByModel: import("@workerdeck/protocol").ByModel | undefined;
+    lastActivityAt: number | undefined;
+  };
+}
 //#endregion
 //#region src/engines/claude/runner.d.ts
 type QueryFn = (params: {
@@ -373,49 +620,32 @@ type HistoryFn = (sdkSessionId: string, options: {
 type SessionInfoFn = (sdkSessionId: string, options: {
   dir?: string;
 }) => Promise<SDKSessionInfo | undefined>;
-type SessionRunnerConfig = CreateSessionRequest & {
-  epoch?: number;
+type SessionRunnerConfig = EngineRunnerConfig & {
   queryFn?: QueryFn;
-  env?: Record<string, string | undefined>;
   pathToClaudeCodeExecutable?: string;
   extraOptions?: Partial<Options>;
-  instructions?: SessionInstructions;
-  defaultApprovalTimeoutMs?: number | null;
   backfillHistory?: boolean;
   historyFn?: HistoryFn;
   sessionInfoFn?: SessionInfoFn;
-  peers?: PeerDirectory;
-  shells?: ShellDirectory;
 };
-declare class SessionRunner implements Runner {
+declare class SessionRunner extends EngineRunner<SessionRunnerConfig> implements Runner {
   #private;
-  readonly id: string;
-  readonly createdAt: number;
   constructor(config: SessionRunnerConfig, id?: string);
-  get status(): SessionStatus;
+  protected coreHooks(): RunnerCoreHooks;
   get sdkSessionId(): string | undefined;
-  get lastSeq(): number;
   get apiKeySource(): string | undefined;
-  get pendingApprovals(): PermissionRequest[];
   info(): SessionInfo;
-  setTitle(title: string | undefined): void;
-  carryCost(state: CostLedgerState): void;
-  costState(): CostLedgerState;
   start(): Promise<void>;
   sendMessage(text: string, attachments?: readonly AttachmentInput[], options?: SendMessageOptions): void;
-  queueLocalCommand(input: LocalCommandResult | LocalShellSource): void;
   mcpServers(): Promise<McpServerStatusInfo[] | undefined>;
   reconnectMcpServer(name: string): Promise<void>;
   setMcpServerEnabled(name: string, enabled: boolean): Promise<void>;
-  resolvePermission(requestId: string, decision: PermissionDecision): boolean;
   interrupt(): Promise<void>;
+  stopTask(toolUseId: string): Promise<boolean>;
   clearContext(): Promise<void>;
   setPermissionMode(mode: PermissionMode): Promise<void>;
   setModel(model?: string): Promise<void>;
-  fail(message: string): void;
-  close(reason?: 'client' | 'server' | 'error'): void;
-  eventAt(seq: number): SessionEvent | undefined;
-  subscribe(listener: SessionEventListener, afterSeq?: number, options?: SubscribeOptions): () => void;
+  close(reason?: CloseReason): void;
   refreshUsage(minIntervalMs?: number): Promise<void>;
 }
 //#endregion
@@ -429,13 +659,19 @@ declare function replaySlice(events: readonly SessionEvent[], options: {
 }): SessionEvent[];
 declare function truncateResultBlocks(event: SessionEvent): SessionEvent;
 //#endregion
+//#region src/engines/provider/turn.d.ts
+type TurnUsage = {
+  startedAt: number;
+  input: number;
+  output: number;
+  cacheWrite: number;
+  cacheRead: number;
+};
+//#endregion
 //#region src/engines/provider/runner.d.ts
-type AiSdkRunnerConfig = Omit<CreateSessionRequest, 'cwd'> & {
-  epoch?: number;
-  cwd?: string;
+type AiSdkRunnerConfig = EngineRunnerConfig & {
   languageModel: LanguageModel$1;
   tools?: ToolSet$1;
-  instructions?: SessionInstructions;
   maxSteps?: number;
   executor?: ToolExecutor;
   executableTools?: string[];
@@ -450,13 +686,10 @@ type AiSdkRunnerConfig = Omit<CreateSessionRequest, 'cwd'> & {
     toolName: string;
     input: unknown;
   }) => boolean;
-  defaultApprovalTimeoutMs?: number | null;
   resolveModel?: (modelId: string | undefined) => LanguageModel$1;
   reportMcpServers?: () => Promise<McpServerStatusInfo[] | undefined>;
   onClose?: () => void | Promise<void>;
   restore?: RunnerSnapshot;
-  peers?: PeerDirectory;
-  shells?: ShellDirectory;
 };
 type PendingToolCall = {
   toolCallId: string;
@@ -470,13 +703,7 @@ type AiSdkSessionState = {
   pendingToolCalls: PendingToolCall[];
   dispatched: string[];
   numTurns: number;
-  turnAccum?: {
-    startedAt: number;
-    input: number;
-    output: number;
-    cacheWrite: number;
-    cacheRead: number;
-  };
+  turnAccum?: TurnUsage;
   permissionMode: PermissionMode;
   model?: string;
   lastActivityAt?: number;
@@ -490,29 +717,21 @@ type ToolCallOutput = {
   type: 'json';
   value: unknown;
 };
-declare class AiSdkRunner implements Runner {
+declare class AiSdkRunner extends EngineRunner<AiSdkRunnerConfig> implements Runner {
   #private;
-  readonly id: string;
-  readonly createdAt: number;
   constructor(config: AiSdkRunnerConfig, id?: string);
-  get status(): SessionStatus;
-  get lastSeq(): number;
   get messages(): ModelMessage[];
   get pendingToolCalls(): PendingToolCall[];
-  get pendingApprovals(): PermissionRequest[];
   get vfs(): SandboxVfs | undefined;
   info(): SessionInfo;
-  carryCost(state: CostLedgerState): void;
-  costState(): CostLedgerState;
   start(): Promise<void>;
   park(): RunnerSnapshot | undefined;
   snapshot(): RunnerSnapshot | undefined;
   sendMessage(text: string, attachments?: readonly AttachmentInput[], options?: SendMessageOptions): void;
-  queueLocalCommand(input: LocalCommandResult | LocalShellSource): void;
+  protected assertAccepting(): void;
   resolveToolCall(toolCallId: string, output: ToolCallOutput, options?: {
     isError?: boolean;
   }): boolean;
-  resolvePermission(requestId: string, decision: PermissionDecision): boolean;
   emitFileDelivered(file: {
     path: string;
     bytes: number;
@@ -523,13 +742,9 @@ declare class AiSdkRunner implements Runner {
   interrupt(): Promise<void>;
   setPermissionMode(mode: PermissionMode): Promise<void>;
   setModel(model?: string): Promise<void>;
-  fail(message: string): void;
-  close(reason?: 'client' | 'server' | 'error'): void;
-  eventAt(seq: number): SessionEvent | undefined;
-  subscribe(listener: SessionEventListener, afterSeq?: number, options?: SubscribeOptions): () => void;
+  close(reason?: CloseReason): void;
   settleExecution(executionId: string, result: ToolExecutionResult): boolean;
   mcpServers(): Promise<McpServerStatusInfo[] | undefined>;
-  setTitle(title: string | undefined): void;
 }
 //#endregion
 //#region src/engines/claude/auth.d.ts
@@ -548,6 +763,7 @@ type QuickJsExecutorOptions = {
   allowedHosts?: string[];
   hostFetch?: HostFetch;
   fetchTimeoutMs?: number;
+  fetchMaxBytes?: number;
   defaultTimeoutMs?: number;
   defaultMemoryLimitBytes?: number;
 };
@@ -709,6 +925,7 @@ type ToolContextOptions = {
   onSettle?: (executionId: string, result: ToolExecutionResult) => void;
   peers?: PeerDirectory;
   shells?: ShellDirectory;
+  shellWrite?: boolean;
   selfId?: () => string;
 };
 type ToolContext = {
@@ -768,6 +985,10 @@ declare function connectMcpTools(servers: Record<string, McpServerConfigWire>, o
   required?: boolean;
 }): Promise<McpConnection>;
 //#endregion
+//#region src/lib/child-env.d.ts
+declare const GATEWAY_SECRET_ENV_KEYS: readonly string[];
+declare function withoutGatewaySecrets<T extends string | undefined>(env: Record<string, T>): Record<string, T>;
+//#endregion
 //#region src/lib/input-queue.d.ts
 declare class InputQueue implements AsyncIterable<SDKUserMessage> {
   #private;
@@ -790,7 +1011,9 @@ type HeadTail = {
   totalLines: number;
   totalBytes: number;
 };
+declare const TTY_REDRAW_CARRY = 16;
 declare function ttyText(raw: string): string;
+declare function ttyRedraws(raw: string): boolean;
 declare function splitLines(text: string): string[];
 declare function countLines(text: string): number;
 declare function headTail(text: string, opts: HeadTailOptions): HeadTail;
@@ -822,18 +1045,19 @@ type ModelCatalog = {
   models: ModelOption[];
   provenance: string;
 };
-type EngineRunnerRequest = {
-  config: SessionRunnerConfig;
+type EngineRunnerRequest<C extends EngineRunnerConfig = EngineRunnerConfig> = {
+  config: C;
   profile?: ProfileInfo;
   restore?: RunnerSnapshot;
   id?: string;
 };
-interface EngineAdapter {
+interface EngineAdapter<C extends EngineRunnerConfig = EngineRunnerConfig> {
   readonly engine: ProfileEngine;
   readonly capabilities: EngineCapabilities;
   readonly catalog: ModelCatalog;
   checkAvailability(profile: ProfileInfo, env: Record<string, string | undefined>): Promise<EngineAvailability>;
-  createRunner(request: EngineRunnerRequest): Runner | Promise<Runner>;
+  createRunner(request: EngineRunnerRequest<C>): Runner | Promise<Runner>;
+  sessionEnv?(profile: ProfileInfo, base: Record<string, string | undefined>): Record<string, string | undefined>;
   listSessions?(options: {
     profile?: ProfileInfo;
     env: Record<string, string | undefined>;
@@ -845,7 +1069,7 @@ interface EngineAdapter {
 declare function getEngineAdapter(engine: ProfileEngine | undefined): EngineAdapter;
 //#endregion
 //#region src/engines/claude/adapter.d.ts
-declare const claudeAdapter: EngineAdapter;
+declare const claudeAdapter: EngineAdapter<SessionRunnerConfig>;
 //#endregion
 //#region src/engines/claude/catalog.d.ts
 declare const CLAUDE_CATALOG: ModelCatalog;
@@ -1016,62 +1240,45 @@ type AppServerConnectOptions = {
 };
 type AppServerConnectFn = (options: AppServerConnectOptions) => AppServerConnection;
 //#endregion
-//#region src/engines/codex/adapter.d.ts
-declare function resolveBundledCodexExecutable(): string | undefined;
-declare function listCodexSessions(options: {
-  connectFn: AppServerConnectFn;
-  profile?: ProfileInfo;
-  env: Record<string, string | undefined>;
-  dir?: string;
-  limit?: number;
-  offset?: number;
-}): Promise<SdkSessionSummary[]>;
-declare const codexAdapter: EngineAdapter;
-//#endregion
-//#region src/engines/codex/catalog.d.ts
-declare const CODEX_CATALOG: ModelCatalog;
-//#endregion
 //#region src/engines/codex/runner.d.ts
-type CodexRunnerConfig = CreateSessionRequest & {
-  epoch?: number;
+type CodexRunnerConfig = EngineRunnerConfig & {
   connectFn: AppServerConnectFn;
-  env?: Record<string, string | undefined>;
   codexHome?: string;
   codexPathOverride?: string;
-  instructions?: SessionInstructions;
-  defaultApprovalTimeoutMs?: number | null;
   backfillHistory?: boolean;
-  peers?: PeerDirectory;
-  shells?: ShellDirectory;
 };
-declare class CodexRunner implements Runner {
+declare class CodexRunner extends EngineRunner<CodexRunnerConfig> implements Runner {
   #private;
-  readonly id: string;
-  readonly createdAt: number;
   constructor(config: CodexRunnerConfig, id?: string);
-  get status(): SessionStatus;
+  protected coreHooks(): RunnerCoreHooks;
   get sdkSessionId(): string | undefined;
-  get lastSeq(): number;
-  get pendingApprovals(): PermissionRequest[];
   info(): SessionInfo;
-  setTitle(title: string | undefined): void;
-  carryCost(state: CostLedgerState): void;
-  costState(): CostLedgerState;
   start(): Promise<void>;
   sendMessage(text: string, attachments?: readonly AttachmentInput[], options?: SendMessageOptions): void;
-  queueLocalCommand(input: LocalCommandResult | LocalShellSource): void;
-  resolvePermission(requestId: string, decision: PermissionDecision): boolean;
   interrupt(): Promise<void>;
   clearContext(): Promise<void>;
   setPermissionMode(mode: PermissionMode): Promise<void>;
   setModel(model?: string): Promise<void>;
-  fail(message: string): void;
-  close(reason?: 'client' | 'server' | 'error'): void;
-  eventAt(seq: number): SessionEvent | undefined;
-  subscribe(listener: SessionEventListener, afterSeq?: number, options?: SubscribeOptions): () => void;
+  close(reason?: CloseReason): void;
   mcpServers(): Promise<McpServerStatusInfo[] | undefined>;
 }
 //#endregion
+//#region src/engines/codex/adapter.d.ts
+declare function resolveBundledCodexExecutable(): string | undefined;
+declare function listCodexSessions(options: {
+  connectFn: AppServerConnectFn;
+  profile?: ProfileInfo;
+  env: Record<string, string | undefined>;
+  dir?: string;
+  limit?: number;
+  offset?: number;
+}): Promise<SdkSessionSummary[]>;
+type CodexAdapterConfig = Omit<CodexRunnerConfig, 'connectFn'>;
+declare const codexAdapter: EngineAdapter<CodexAdapterConfig>;
+//#endregion
+//#region src/engines/codex/catalog.d.ts
+declare const CODEX_CATALOG: ModelCatalog;
+//#endregion
 //#region src/engines/codex/process.d.ts
 declare function connectAppServer(options: {
   executable: string;
@@ -1099,5 +1306,5 @@ declare class JsonRpcStdioConnection {
 //#region src/engines/provider/adapter.d.ts
 declare const providerAdapter: EngineAdapter;
 //#endregion
-export { AiSdkRunner, type AiSdkRunnerConfig, type AiSdkSessionState, type AppServerConnectFn, type AppServerConnectOptions, type AppServerConnection, type AppServerHistoryTurn, type AppServerItem, type AppServerThreadListResponse, type AppServerThreadSummary, type AppServerTokenUsage, type AppServerTurn, type AppServerUserInput, type AttachmentInput, type AttachmentKind, type BridgeAnswer, BrowserBridgeExecutor, type BrowserBridgeExecutorOptions, CLAUDE_CATALOG, CODEX_CATALOG, type ClaudeAuthProbe, type ClaudeAuthStatus, CodexRunner, type CodexRunnerConfig, type CostFigures, CostLedger, type CostLedgerState, type DeferredDispatch, DeferredExecutor, type DeferredExecutorOptions, type EngineAdapter, type EngineAvailability, type EngineRunnerRequest, type EngineSessionOptions, type HeadTail, type HeadTailOptions, type HistoryFn, type HostFetch, type HostToolDefinition, InputQueue, type InstructionsContext, JsonRpcError, JsonRpcStdioConnection, type LanguageModel, type LocalCommandEmit, type LocalCommandEvent, LocalCommandQueue, type LocalCommandResult, type LocalShellSource, type McpConnection, type ModelCatalog, PEER_MCP_SERVER, PEER_MESSAGE_MAX_CHARS, PEER_RECENT_DEFAULT, PEER_RECENT_MAX, PEER_TOOL_NAMES, type ParkedExecution, type PeerDirectory, type PeerMention, type PeerPeek, type PeerSendOptions, type PeerSendResult, type PeerSessionSummary, type PeerToolName, type PeerToolSpec, type PendingEntry, type PendingKind, type PendingOutcome, PendingRequestRegistry, type PendingToolCall, type PermissionDecision, type QueryFn, QuickJsExecutor, type QuickJsExecutorOptions, type RegisterOptions, type Runner, type RunnerSnapshot, SHELL_REFUSAL, SHELL_TOOL_NAMES, SHELL_TOOL_SHAPES, SUPPORTED_ATTACHMENT_TYPES, type SendMessageOptions, type SessionEventListener, type SessionInstructions, SessionRunner, type SessionRunnerConfig, type SettledBy, type ShellContextOptions, type ShellDirectory, type ShellReadOptions, type ShellReadResult, type ShellSummary, type ShellToolName, type ShellToolOutput, type ShellToolSpec, type Tool, type ToolCallOutput, type ToolContext, type ToolContextOptions, type ToolDefinition, type ToolExecutionCall, type ToolExecutionDispatch, type ToolExecutionResult, type ToolExecutor, type ToolSet, type ToolTrust, type WebFetchDigest, type WebFetchFn, type WebFetchOptions, type WebFetchResult, attachmentContentBlocks, attachmentKind, attachmentRef, checkClaudeAuth, clampShellTail, claudeAdapter, codexAdapter, composeInstructions, connectAppServer, connectMcpTools, countLines, createEngineSession, createToolContext, createWebFetch, getEngineAdapter, headTail, htmlToMarkdown, installPeerDirectory, installShellDirectory, installedPeerDirectory, installedShellDirectory, isHostAllowed, isLocalShellSource, isPrivateAddress, isShellToolName, isSlashCommand, listCodexSessions, localCommandContext, localCommandEvent, localCommandTranscript, mcpStatusInfo, modelOptionsFromSdk, normalizeMediaType, normalizeSdkMessage, peerDirectoryHandle, peerMentionsEnvelope, peerMessageEnvelope, peerSummary, peerToolSpecs, providerAdapter, recentLines, replaySlice, resolveBundledClaudeExecutable, resolveBundledCodexExecutable, resolveInstructions, runPeerTool, runShellTool, shellContextText, shellDirectoryHandle, shellInlineText, shellReadText, shellSummary, shellTail, shellToolSpecs, splitLines, toApiMessage, toExecutionResult, truncateResultBlocks, ttyText, withHostTools, withMcpTools, withPeerContext };
+export { AiSdkRunner, type AiSdkRunnerConfig, type AiSdkSessionState, type AppServerConnectFn, type AppServerConnectOptions, type AppServerConnection, type AppServerHistoryTurn, type AppServerItem, type AppServerThreadListResponse, type AppServerThreadSummary, type AppServerTokenUsage, type AppServerTurn, type AppServerUserInput, type AttachmentInput, type AttachmentKind, type BridgeAnswer, BrowserBridgeExecutor, type BrowserBridgeExecutorOptions, CLAUDE_CATALOG, CODEX_CATALOG, type ClaudeAuthProbe, type ClaudeAuthStatus, type CodexAdapterConfig, CodexRunner, type CodexRunnerConfig, type CostFigures, CostLedger, type CostLedgerState, type DeferredDispatch, DeferredExecutor, type DeferredExecutorOptions, type EngineAdapter, type EngineAvailability, type EngineRunnerConfig, type EngineRunnerRequest, type EngineSessionOptions, GATEWAY_SECRET_ENV_KEYS, type HeadTail, type HeadTailOptions, type HistoryFn, type HostFetch, type HostToolDefinition, InputQueue, type InstructionsContext, JsonRpcError, JsonRpcStdioConnection, type LanguageModel, type LocalCommandEmit, type LocalCommandEvent, LocalCommandQueue, type LocalCommandResult, type LocalShellSource, type McpConnection, type ModelCatalog, PEER_MCP_SERVER, PEER_MESSAGE_MAX_CHARS, PEER_RECENT_DEFAULT, PEER_RECENT_MAX, PEER_TOOL_NAMES, type ParkedExecution, type PeerDirectory, type PeerMention, type PeerPeek, type PeerSendOptions, type PeerSendResult, type PeerSessionSummary, type PeerToolName, type PeerToolSpec, type PendingEntry, type PendingKind, type PendingOutcome, PendingRequestRegistry, type PendingToolCall, type PermissionDecision, type QueryFn, QuickJsExecutor, type QuickJsExecutorOptions, type RegisterOptions, type Runner, type RunnerSnapshot, SHELL_KEYS_MAX, SHELL_KEY_NAMES, SHELL_READ_TOOL_NAMES, SHELL_REFUSAL, SHELL_TOOL_NAMES, SHELL_TOOL_SHAPES, SHELL_WRITE_REFUSAL, SHELL_WRITE_TOOL_NAMES, SUPPORTED_ATTACHMENT_TYPES, type SendMessageOptions, type SessionEventListener, type SessionInstructions, SessionRunner, type SessionRunnerConfig, type SettledBy, type ShellAgentWrite, type ShellContextOptions, type ShellDirectory, type ShellKeyOptions, type ShellKillResult, type ShellReadOptions, type ShellReadResult, type ShellRunOptions, type ShellSummary, type ShellToolName, type ShellToolOptions, type ShellToolOutput, type ShellToolSpec, type ShellView, type ShellWait, type ShellWriteOptions, TTY_REDRAW_CARRY, type Tool, type ToolCallOutput, type ToolContext, type ToolContextOptions, type ToolDefinition, type ToolExecutionCall, type ToolExecutionDispatch, type ToolExecutionResult, type ToolExecutor, type ToolSet, type ToolTrust, type WebFetchDigest, type WebFetchFn, type WebFetchOptions, type WebFetchResult, agentMayWrite, attachmentContentBlocks, attachmentKind, attachmentRef, checkClaudeAuth, clampShellTail, claudeAdapter, codexAdapter, composeInstructions, connectAppServer, connectMcpTools, countLines, createEngineSession, createToolContext, createWebFetch, encodeShellKey, encodeShellKeys, getEngineAdapter, headTail, htmlToMarkdown, installPeerDirectory, installShellDirectory, installedPeerDirectory, installedShellDirectory, isHostAllowed, isLocalShellSource, isPrivateAddress, isShellToolName, isShellWriteToolName, isSlashCommand, listCodexSessions, localCommandContext, localCommandEvent, localCommandTranscript, mcpStatusInfo, modelOptionsFromSdk, normalizeMediaType, normalizeSdkMessage, peerDirectoryHandle, peerMentionsEnvelope, peerMessageEnvelope, peerSummary, peerToolSpecs, providerAdapter, recentLines, replaySlice, resolveBundledClaudeExecutable, resolveBundledCodexExecutable, resolveInstructions, runPeerTool, runShellTool, shellContextText, shellDirectoryHandle, shellInlineText, shellKillText, shellOwnershipRefusal, shellReadText, shellSummary, shellTail, shellToolNames, shellToolNeedsCard, shellToolOf, shellToolSpecs, shellWriteDeniedText, shellWriteToolOf, splitLines, toApiMessage, toExecutionResult, truncateResultBlocks, ttyRedraws, ttyText, withHostTools, withMcpTools, withPeerContext, withoutGatewaySecrets };
 //# sourceMappingURL=index.d.mts.map