@workerdeck/core 3.0.1 → 3.2.0

package/build/index.d.mts

@@ -1,5 +1,5 @@
 import { McpServerStatus, Options, Query, SDKMessage, SDKSessionInfo, SDKUserMessage, SessionMessage } from "@anthropic-ai/claude-agent-sdk";
-import { ApiMessage, ByModel, CostBreakdown, CreateSessionRequest, EngineCapabilities, McpServerConfigWire, McpServerStatusInfo, MessageAttachment, MessageOrigin, ModelOption, PermissionMode, PermissionRequest, ProfileEngine, ProfileInfo, SdkSessionSummary, SessionEvent, SessionEventBody, SessionInfo, SessionStatus, ShellEndReason, ShellInfo, ShellOwner, ShellStatus, ToolCallRequestFrame, ToolExecutionBackend, ToolExecutionOutput } from "@workerdeck/protocol";
+import { ApiMessage, ByModel, ChecklistItem, ContextReading, CostBreakdown, CreateSessionRequest, EngineCapabilities, McpServerConfigWire, McpServerStatusInfo, MessageAttachment, MessageOrigin, ModelOption, PermissionDecisionSource, PermissionMode, PermissionRequest, PricingTable, ProfileEngine, ProfileInfo, SdkSessionSummary, SessionEvent, SessionEventBody, SessionInfo, SessionStatus, ShellEndReason, ShellInfo, ShellOwner, ShellStatus, ToolCallRequestFrame, ToolExecutionBackend, ToolExecutionOutput } from "@workerdeck/protocol";
 import { z } from "zod";
 import { LanguageModel, LanguageModel as LanguageModel$1, ModelMessage, Tool, Tool as Tool$1, ToolSet, ToolSet as ToolSet$1 } from "ai";
 import { SandboxEngine, SandboxVfs } from "@workerdeck/sandbox";
@@ -15,6 +15,39 @@ declare const SUPPORTED_ATTACHMENT_TYPES: string;
 declare function attachmentContentBlocks(attachments: readonly AttachmentInput[]): Array<Record<string, unknown>>;
 declare function attachmentRef(attachment: AttachmentInput): MessageAttachment;
 //#endregion
+//#region src/lib/cost-ledger.d.ts
+type CostFigures = {
+  byModel?: ByModel;
+  reportedCostUsd?: number;
+};
+type CostLedgerState = CostFigures & {
+  lifetime?: CostFigures;
+};
+declare class CostLedger {
+  #private;
+  constructor(pricing?: PricingTable);
+  carry(state: CostLedgerState | undefined): void;
+  carryUnlessRestored(state: CostLedgerState | undefined): void;
+  observeCumulative(byModel: ByModel | undefined, reportedCostUsd: number | undefined): void;
+  observeDelta(byModel: ByModel): void;
+  rollover(): void;
+  get byModel(): ByModel | undefined;
+  get breakdown(): CostBreakdown;
+  get costUsd(): number | undefined;
+  get reportedCostUsd(): number | undefined;
+  snapshot(): CostLedgerState;
+}
+//#endregion
+//#region src/lib/instructions.d.ts
+type InstructionsContext = {
+  sessionId: string;
+  cwd?: string;
+  profile?: string;
+};
+type SessionInstructions = string | ((context: InstructionsContext) => string);
+declare function resolveInstructions(instructions: SessionInstructions | undefined, context: InstructionsContext): string | undefined;
+declare function composeInstructions(...parts: Array<SessionInstructions | undefined>): SessionInstructions | undefined;
+//#endregion
 //#region src/lib/local-command.d.ts
 type LocalCommandResult = {
   command: string;
@@ -54,27 +87,16 @@ declare class LocalCommandQueue {
   clear(): void;
 }
 //#endregion
-//#region src/lib/cost-ledger.d.ts
-type CostFigures = {
-  byModel?: ByModel;
-  reportedCostUsd?: number;
+//#region src/lib/gateway-tools.d.ts
+type GatewayToolOutput = {
+  text: string;
+  isError: boolean;
 };
-type CostLedgerState = CostFigures & {
-  lifetime?: CostFigures;
+type GatewayToolSpec<N extends string = string> = {
+  name: N;
+  description: string;
+  inputSchema: Record<string, unknown>;
 };
-declare class CostLedger {
-  #private;
-  carry(state: CostLedgerState | undefined): void;
-  carryUnlessRestored(state: CostLedgerState | undefined): void;
-  observeCumulative(byModel: ByModel | undefined, reportedCostUsd: number | undefined): void;
-  observeDelta(byModel: ByModel): void;
-  rollover(): void;
-  get byModel(): ByModel | undefined;
-  get breakdown(): CostBreakdown;
-  get costUsd(): number | undefined;
-  get reportedCostUsd(): number | undefined;
-  snapshot(): CostLedgerState;
-}
 //#endregion
 //#region src/lib/peers.d.ts
 type PeerSessionSummary = {
@@ -147,16 +169,9 @@ declare const PEER_TOOL_SHAPES: {
   };
 };
 type PeerToolName = keyof typeof PEER_TOOL_SHAPES;
-declare const PEER_TOOL_NAMES: PeerToolName[];
-type PeerToolSpec = {
-  name: PeerToolName;
-  description: string;
-  inputSchema: Record<string, unknown>;
-};
-type PeerToolOutput = {
-  text: string;
-  isError: boolean;
-};
+type PeerToolSpec = GatewayToolSpec<PeerToolName>;
+type PeerToolOutput = GatewayToolOutput;
+declare const PEER_TOOL_NAMES: ("peers_list" | "peers_peek" | "peers_send")[];
 declare function peerToolSpecs(): PeerToolSpec[];
 declare function runPeerTool(peers: PeerDirectory, from: string, name: string, args: unknown): Promise<PeerToolOutput>;
 declare function peerMessageEnvelope(text: string, origin: MessageOrigin): string;
@@ -169,127 +184,7 @@ declare function peerSummary(info: SessionInfo): PeerSessionSummary;
 declare function recentLines(events: readonly SessionEvent[], limit: number): string[];
 declare function installPeerDirectory(directory: PeerDirectory | undefined): void;
 declare function installedPeerDirectory(): PeerDirectory | undefined;
-declare function peerDirectoryHandle(): PeerDirectory;
-//#endregion
-//#region src/executors/tool-executor.d.ts
-type ToolExecutionResult = {
-  status: 'ok';
-  output: unknown;
-  logs?: string[];
-} | {
-  status: 'failed';
-  reason: string;
-  error: string;
-  logs?: string[];
-};
-type ToolExecutionCall = {
-  executionId: string;
-  sessionId: string;
-  tool: string;
-  input: unknown;
-  vfs?: SandboxVfs;
-  limits?: {
-    timeoutMs?: number;
-    memoryLimitBytes?: number;
-  };
-  signal?: AbortSignal;
-};
-type ToolExecutionDispatch = {
-  executionId: string;
-  status: 'settled';
-  result: ToolExecutionResult;
-} | {
-  executionId: string;
-  status: 'pending';
-};
-type ToolExecutionProfile = {
-  backend?: ToolExecutionBackend;
-  deferred?: boolean;
-  timeoutMs?: number;
-};
-interface ToolExecutor {
-  describe?(call: ToolExecutionCall): ToolExecutionProfile;
-  dispatch(call: ToolExecutionCall): Promise<ToolExecutionDispatch>;
-}
-//#endregion
-//#region src/runner-interface.d.ts
-type SessionEventListener = (event: SessionEvent) => void;
-type ParkedExecution = {
-  executionId: string;
-  toolName: string;
-  expiresAt?: number;
-};
-type RunnerSnapshot = {
-  engine: ProfileEngine;
-  id: string;
-  createdAt: number;
-  seq: number;
-  events: SessionEvent[];
-  vfs?: Record<string, string>;
-  parked: ParkedExecution[];
-  state: unknown;
-};
-type SendMessageOptions = {
-  origin?: MessageOrigin;
-  mentions?: readonly PeerMention[];
-};
-type PermissionDecision = {
-  behavior: 'allow';
-  updatedInput?: Record<string, unknown>;
-} | {
-  behavior: 'deny';
-  message?: string;
-  interrupt?: boolean;
-};
-interface Runner {
-  readonly id: string;
-  readonly pendingApprovals: PermissionRequest[];
-  readonly vfs?: SandboxVfs;
-  start(): Promise<void>;
-  info(): SessionInfo;
-  subscribe(listener: SessionEventListener, afterSeq?: number, options?: {
-    coalesceReplay?: boolean;
-    truncateResults?: boolean;
-    imageRefs?: boolean;
-  }): () => void;
-  eventAt?(seq: number): SessionEvent | undefined;
-  sendMessage(text: string, attachments?: readonly AttachmentInput[], options?: SendMessageOptions): void;
-  queueLocalCommand?(input: LocalCommandResult | LocalShellSource): void;
-  refreshUsage?(): Promise<void>;
-  mcpServers?(): Promise<McpServerStatusInfo[] | undefined>;
-  reconnectMcpServer?(name: string): Promise<void>;
-  setMcpServerEnabled?(name: string, enabled: boolean): Promise<void>;
-  setTitle(title: string | undefined): void;
-  resolvePermission(requestId: string, decision: PermissionDecision): boolean;
-  interrupt(): Promise<void>;
-  clearContext?(): Promise<void>;
-  setPermissionMode(mode: PermissionMode): Promise<void>;
-  setModel(model?: string): Promise<void>;
-  settleExecution?(executionId: string, result: ToolExecutionResult): boolean;
-  park?(): RunnerSnapshot | undefined;
-  snapshot?(): RunnerSnapshot | undefined;
-  carryCost?(state: CostLedgerState): void;
-  costState?(): CostLedgerState;
-  fail(message: string): void;
-  close(reason?: 'client' | 'server' | 'error'): void;
-}
-//#endregion
-//#region src/lib/subscribers.d.ts
-type SubscribeOptions = {
-  coalesceReplay?: boolean;
-  truncateResults?: boolean;
-  imageRefs?: boolean;
-};
-//#endregion
-//#region src/lib/instructions.d.ts
-type InstructionsContext = {
-  sessionId: string;
-  cwd?: string;
-  profile?: string;
-};
-type SessionInstructions = string | ((context: InstructionsContext) => string);
-declare function resolveInstructions(instructions: SessionInstructions | undefined, context: InstructionsContext): string | undefined;
-declare function composeInstructions(...parts: Array<SessionInstructions | undefined>): SessionInstructions | undefined;
+declare function peerDirectoryHandle(own?: () => PeerDirectory | undefined): PeerDirectory;
 //#endregion
 //#region src/lib/shells.d.ts
 type ShellSummary = {
@@ -412,21 +307,14 @@ declare const SHELL_TOOL_SHAPES: {
   };
 };
 type ShellToolName = keyof typeof SHELL_TOOL_SHAPES;
-declare const SHELL_TOOL_NAMES: ShellToolName[];
 declare const SHELL_READ_TOOL_NAMES: readonly ShellToolName[];
 declare const SHELL_WRITE_TOOL_NAMES: readonly ShellToolName[];
-type ShellToolSpec = {
-  name: ShellToolName;
-  description: string;
-  inputSchema: Record<string, unknown>;
-};
-type ShellToolOutput = {
-  text: string;
-  isError: boolean;
-};
+type ShellToolSpec = GatewayToolSpec<ShellToolName>;
+type ShellToolOutput = GatewayToolOutput;
 type ShellToolOptions = {
   write?: boolean;
 };
+declare const SHELL_TOOL_NAMES: ("shell_list" | "shell_read" | "shell_run" | "shell_write" | "shell_kill" | "shell_request_write")[];
 declare function shellToolNames(write: boolean): ShellToolName[];
 declare function shellToolSpecs(write?: boolean): ShellToolSpec[];
 declare function isShellToolName(name: string): name is ShellToolName;
@@ -453,7 +341,273 @@ declare function shellReadText(result: ShellReadResult, verb?: 'started' | 'type
 declare function shellKillText(result: ShellKillResult): string;
 declare function installShellDirectory(directory: ShellDirectory | undefined): void;
 declare function installedShellDirectory(): ShellDirectory | undefined;
-declare function shellDirectoryHandle(): ShellDirectory;
+declare function shellDirectoryHandle(own?: () => ShellDirectory | undefined): ShellDirectory;
+//#endregion
+//#region src/executors/tool-executor.d.ts
+type ToolExecutionResult = {
+  status: 'ok';
+  output: unknown;
+  logs?: string[];
+} | {
+  status: 'failed';
+  reason: string;
+  error: string;
+  logs?: string[];
+};
+type ToolExecutionCall = {
+  executionId: string;
+  sessionId: string;
+  tool: string;
+  input: unknown;
+  vfs?: SandboxVfs;
+  limits?: {
+    timeoutMs?: number;
+    memoryLimitBytes?: number;
+  };
+  signal?: AbortSignal;
+};
+type ToolExecutionDispatch = {
+  executionId: string;
+  status: 'settled';
+  result: ToolExecutionResult;
+} | {
+  executionId: string;
+  status: 'pending';
+};
+type ToolExecutionProfile = {
+  backend?: ToolExecutionBackend;
+  deferred?: boolean;
+  timeoutMs?: number;
+};
+interface ToolExecutor {
+  describe?(call: ToolExecutionCall): ToolExecutionProfile;
+  dispatch(call: ToolExecutionCall): Promise<ToolExecutionDispatch>;
+}
+//#endregion
+//#region src/runner-interface.d.ts
+type SessionEventListener = (event: SessionEvent) => void;
+type EngineRunnerConfig = CreateSessionRequest & {
+  epoch?: number;
+  pricing?: PricingTable;
+  env?: Record<string, string | undefined>;
+  instructions?: SessionInstructions;
+  defaultApprovalTimeoutMs?: number | null;
+  peers?: PeerDirectory;
+  shells?: ShellDirectory;
+  shellAgentWrite?: ShellAgentWrite;
+  createdByOperator?: boolean;
+  fallbackTitle?: string;
+};
+type ParkedExecution = {
+  executionId: string;
+  toolName: string;
+  expiresAt?: number;
+};
+type RunnerSnapshot = {
+  engine: ProfileEngine;
+  id: string;
+  createdAt: number;
+  seq: number;
+  events: SessionEvent[];
+  vfs?: Record<string, string>;
+  parked: ParkedExecution[];
+  state: unknown;
+};
+type SendMessageOptions = {
+  origin?: MessageOrigin;
+  mentions?: readonly PeerMention[];
+};
+type PermissionDecision = {
+  behavior: 'allow';
+  updatedInput?: Record<string, unknown>;
+} | {
+  behavior: 'deny';
+  message?: string;
+  interrupt?: boolean;
+};
+interface Runner {
+  readonly id: string;
+  readonly pendingApprovals: PermissionRequest[];
+  readonly vfs?: SandboxVfs;
+  start(): Promise<void>;
+  info(): SessionInfo;
+  subscribe(listener: SessionEventListener, afterSeq?: number, options?: {
+    coalesceReplay?: boolean;
+    truncateResults?: boolean;
+    imageRefs?: boolean;
+  }): () => void;
+  eventAt?(seq: number): SessionEvent | undefined;
+  sendMessage(text: string, attachments?: readonly AttachmentInput[], options?: SendMessageOptions): void;
+  queueLocalCommand?(input: LocalCommandResult | LocalShellSource): void;
+  refreshUsage?(): Promise<void>;
+  mcpServers?(): Promise<McpServerStatusInfo[] | undefined>;
+  reconnectMcpServer?(name: string): Promise<void>;
+  setMcpServerEnabled?(name: string, enabled: boolean): Promise<void>;
+  setTitle(title: string | undefined): void;
+  resolvePermission(requestId: string, decision: PermissionDecision): boolean;
+  interrupt(): Promise<void>;
+  stopTask?(toolUseId: string): Promise<boolean>;
+  clearContext?(): Promise<void>;
+  setPermissionMode(mode: PermissionMode): Promise<void>;
+  setModel(model?: string): Promise<void>;
+  settleExecution?(executionId: string, result: ToolExecutionResult): boolean;
+  park?(): RunnerSnapshot | undefined;
+  snapshot?(): RunnerSnapshot | undefined;
+  carryCost?(state: CostLedgerState): void;
+  costState?(): CostLedgerState;
+  fail(message: string): void;
+  close(reason?: 'client' | 'server' | 'error'): void;
+}
+//#endregion
+//#region src/lib/event-log.d.ts
+declare class EventLog {
+  #private;
+  get events(): readonly SessionEvent[];
+  get seq(): number;
+  get activityCount(): number;
+  get proseCount(): number;
+  get contextUsage(): ContextReading | undefined;
+  get checklist(): ChecklistItem[] | undefined;
+  get resetSeq(): number;
+  get lastActivityAt(): number | undefined;
+  append(body: SessionEventBody): SessionEvent;
+  at(seq: number): SessionEvent | undefined;
+  restore(events: readonly SessionEvent[], seq: number, lastActivityAt: number | undefined): void;
+}
+//#endregion
+//#region src/lib/subscribers.d.ts
+type SubscribeOptions = {
+  coalesceReplay?: boolean;
+  truncateResults?: boolean;
+  imageRefs?: boolean;
+};
+//#endregion
+//#region src/lib/runner-core.d.ts
+type CloseReason = 'client' | 'server' | 'error';
+type RunnerCoreHooks = {
+  prepare?: (body: SessionEventBody) => SessionEventBody;
+  observe?: (body: SessionEventBody, event: SessionEvent) => void;
+  settled?: (body: SessionEventBody, event: SessionEvent) => void;
+  holdStatus?: (status: SessionStatus) => boolean;
+};
+type RunnerCoreOptions = {
+  pricing?: PricingTable;
+  cost?: 'additive' | 'reconcile';
+  hooks?: RunnerCoreHooks;
+};
+type ApprovalResolution = {
+  behavior: 'allow' | 'deny';
+  resolvedBy: PermissionDecisionSource;
+  message?: string;
+};
+type ApprovalHandler = {
+  timeoutMs?: number;
+  wireId?: string | number;
+  respond: (decision: PermissionDecision, resolvedBy: PermissionDecisionSource) => ApprovalResolution;
+  after?: (resolution: ApprovalResolution, decision: PermissionDecision) => void;
+};
+type TurnResultBody = Extract<SessionEventBody, {
+  type: 'turn_result';
+}>;
+type TurnReport = {
+  startedAt: number;
+  numTurns: number;
+  result?: string;
+  errors?: string[];
+  usage?: TurnResultBody['usage'];
+  byModel?: ByModel;
+  costs: boolean;
+  totalCostUsd?: number;
+};
+declare class RunnerCore {
+  #private;
+  readonly log: EventLog;
+  readonly cost: CostLedger;
+  constructor(options?: RunnerCoreOptions);
+  get status(): SessionStatus;
+  get closed(): boolean;
+  get terminal(): boolean;
+  get pendingApprovals(): PermissionRequest[];
+  get pendingCount(): number;
+  restoreStatus(status: SessionStatus): void;
+  emit(body: SessionEventBody): SessionEvent;
+  setStatus(status: SessionStatus, detail?: string): void;
+  subscribe(listener: SessionEventListener, afterSeq?: number, options?: SubscribeOptions): () => void;
+  clearSubscribers(): void;
+  eventAt(seq: number): SessionEvent | undefined;
+  carryCost(state: CostLedgerState): void;
+  costState(): CostLedgerState;
+  fail(message: string, close: (reason: CloseReason) => void): void;
+  close(reason: CloseReason, teardown?: () => void, options?: {
+    settleApprovals?: boolean;
+  }): boolean;
+  requestApproval(request: PermissionRequest, handler: ApprovalHandler): void;
+  resolveApproval(requestId: string, decision: PermissionDecision, resolvedBy?: PermissionDecisionSource): boolean;
+  settleAllApprovals(decision: PermissionDecision, resolvedBy: PermissionDecisionSource, followUp?: boolean): void;
+  findApproval(predicate: (request: PermissionRequest, wireId: string | number | undefined) => boolean): string | undefined;
+  resolveByPolicy(request: PermissionRequest, behavior: 'allow' | 'deny', message?: string): void;
+  resolveQuestionByPolicy(request: PermissionRequest, mode: 'auto' | 'deny'): boolean;
+  emitTurnResult(report: TurnReport): void;
+}
+//#endregion
+//#region src/lib/session-tools.d.ts
+type SessionToolSources = {
+  peers?: PeerDirectory;
+  shells?: ShellDirectory;
+  write: boolean;
+};
+//#endregion
+//#region src/lib/engine-runner.d.ts
+type EngineRunnerCoreOptions = Pick<RunnerCoreOptions, 'cost'>;
+type ApprovalDeadline = {
+  timeoutMs: number | undefined;
+  expiresAt: number | undefined;
+};
+declare abstract class EngineRunner<C extends EngineRunnerConfig> {
+  readonly id: string;
+  readonly createdAt: number;
+  protected config: C;
+  protected readonly core: RunnerCore;
+  protected readonly localCommands: LocalCommandQueue;
+  protected constructor(config: C, id: string, createdAt: number, options?: EngineRunnerCoreOptions);
+  abstract close(reason?: CloseReason): void;
+  protected coreHooks(): RunnerCoreHooks;
+  get status(): SessionStatus;
+  get lastSeq(): number;
+  get pendingApprovals(): PermissionRequest[];
+  setTitle(title: string | undefined): void;
+  carryCost(state: CostLedgerState): void;
+  costState(): CostLedgerState;
+  resolvePermission(requestId: string, decision: PermissionDecision): boolean;
+  queueLocalCommand(input: LocalCommandResult | LocalShellSource): void;
+  eventAt(seq: number): SessionEvent | undefined;
+  subscribe(listener: SessionEventListener, afterSeq?: number, options?: SubscribeOptions): () => void;
+  fail(message: string): void;
+  protected assertAccepting(): void;
+  protected echoUser(text: string, attachments: readonly AttachmentInput[] | undefined, options: SendMessageOptions | undefined): void;
+  protected approvalDeadline(): ApprovalDeadline;
+  protected get toolSources(): SessionToolSources;
+  protected baseInfo(engineTitle?: string): {
+    id: string;
+    status: SessionStatus;
+    profile: string | undefined;
+    shellAgentWrite: ShellAgentWrite | undefined;
+    createdAt: number;
+    epoch: number | undefined;
+    lastSeq: number;
+    activityCount: number;
+    proseCount: number;
+    contextUsage: import("@workerdeck/protocol").ContextReading | undefined;
+    checklist: import("@workerdeck/protocol").ChecklistItem[] | undefined;
+    pendingPermissionCount: number;
+    meta: Record<string, unknown> | undefined;
+    scope: Record<string, string> | undefined;
+    title: string | undefined;
+    costUsd: number | undefined;
+    usageByModel: import("@workerdeck/protocol").ByModel | undefined;
+    lastActivityAt: number | undefined;
+  };
+}
 //#endregion
 //#region src/engines/claude/runner.d.ts
 type QueryFn = (params: {
@@ -466,51 +620,32 @@ type HistoryFn = (sdkSessionId: string, options: {
 type SessionInfoFn = (sdkSessionId: string, options: {
   dir?: string;
 }) => Promise<SDKSessionInfo | undefined>;
-type SessionRunnerConfig = CreateSessionRequest & {
-  epoch?: number;
+type SessionRunnerConfig = EngineRunnerConfig & {
   queryFn?: QueryFn;
-  env?: Record<string, string | undefined>;
   pathToClaudeCodeExecutable?: string;
   extraOptions?: Partial<Options>;
-  instructions?: SessionInstructions;
-  defaultApprovalTimeoutMs?: number | null;
   backfillHistory?: boolean;
   historyFn?: HistoryFn;
   sessionInfoFn?: SessionInfoFn;
-  peers?: PeerDirectory;
-  shells?: ShellDirectory;
-  shellAgentWrite?: ShellAgentWrite;
-  createdByOperator?: boolean;
 };
-declare class SessionRunner implements Runner {
+declare class SessionRunner extends EngineRunner<SessionRunnerConfig> implements Runner {
   #private;
-  readonly id: string;
-  readonly createdAt: number;
   constructor(config: SessionRunnerConfig, id?: string);
-  get status(): SessionStatus;
+  protected coreHooks(): RunnerCoreHooks;
   get sdkSessionId(): string | undefined;
-  get lastSeq(): number;
   get apiKeySource(): string | undefined;
-  get pendingApprovals(): PermissionRequest[];
   info(): SessionInfo;
-  setTitle(title: string | undefined): void;
-  carryCost(state: CostLedgerState): void;
-  costState(): CostLedgerState;
   start(): Promise<void>;
   sendMessage(text: string, attachments?: readonly AttachmentInput[], options?: SendMessageOptions): void;
-  queueLocalCommand(input: LocalCommandResult | LocalShellSource): void;
   mcpServers(): Promise<McpServerStatusInfo[] | undefined>;
   reconnectMcpServer(name: string): Promise<void>;
   setMcpServerEnabled(name: string, enabled: boolean): Promise<void>;
-  resolvePermission(requestId: string, decision: PermissionDecision): boolean;
   interrupt(): Promise<void>;
+  stopTask(toolUseId: string): Promise<boolean>;
   clearContext(): Promise<void>;
   setPermissionMode(mode: PermissionMode): Promise<void>;
   setModel(model?: string): Promise<void>;
-  fail(message: string): void;
-  close(reason?: 'client' | 'server' | 'error'): void;
-  eventAt(seq: number): SessionEvent | undefined;
-  subscribe(listener: SessionEventListener, afterSeq?: number, options?: SubscribeOptions): () => void;
+  close(reason?: CloseReason): void;
   refreshUsage(minIntervalMs?: number): Promise<void>;
 }
 //#endregion
@@ -524,13 +659,19 @@ declare function replaySlice(events: readonly SessionEvent[], options: {
 }): SessionEvent[];
 declare function truncateResultBlocks(event: SessionEvent): SessionEvent;
 //#endregion
+//#region src/engines/provider/turn.d.ts
+type TurnUsage = {
+  startedAt: number;
+  input: number;
+  output: number;
+  cacheWrite: number;
+  cacheRead: number;
+};
+//#endregion
 //#region src/engines/provider/runner.d.ts
-type AiSdkRunnerConfig = Omit<CreateSessionRequest, 'cwd'> & {
-  epoch?: number;
-  cwd?: string;
+type AiSdkRunnerConfig = EngineRunnerConfig & {
   languageModel: LanguageModel$1;
   tools?: ToolSet$1;
-  instructions?: SessionInstructions;
   maxSteps?: number;
   executor?: ToolExecutor;
   executableTools?: string[];
@@ -545,14 +686,10 @@ type AiSdkRunnerConfig = Omit<CreateSessionRequest, 'cwd'> & {
     toolName: string;
     input: unknown;
   }) => boolean;
-  defaultApprovalTimeoutMs?: number | null;
   resolveModel?: (modelId: string | undefined) => LanguageModel$1;
   reportMcpServers?: () => Promise<McpServerStatusInfo[] | undefined>;
   onClose?: () => void | Promise<void>;
   restore?: RunnerSnapshot;
-  peers?: PeerDirectory;
-  shells?: ShellDirectory;
-  shellAgentWrite?: ShellAgentWrite;
 };
 type PendingToolCall = {
   toolCallId: string;
@@ -566,13 +703,7 @@ type AiSdkSessionState = {
   pendingToolCalls: PendingToolCall[];
   dispatched: string[];
   numTurns: number;
-  turnAccum?: {
-    startedAt: number;
-    input: number;
-    output: number;
-    cacheWrite: number;
-    cacheRead: number;
-  };
+  turnAccum?: TurnUsage;
   permissionMode: PermissionMode;
   model?: string;
   lastActivityAt?: number;
@@ -586,29 +717,21 @@ type ToolCallOutput = {
   type: 'json';
   value: unknown;
 };
-declare class AiSdkRunner implements Runner {
+declare class AiSdkRunner extends EngineRunner<AiSdkRunnerConfig> implements Runner {
   #private;
-  readonly id: string;
-  readonly createdAt: number;
   constructor(config: AiSdkRunnerConfig, id?: string);
-  get status(): SessionStatus;
-  get lastSeq(): number;
   get messages(): ModelMessage[];
   get pendingToolCalls(): PendingToolCall[];
-  get pendingApprovals(): PermissionRequest[];
   get vfs(): SandboxVfs | undefined;
   info(): SessionInfo;
-  carryCost(state: CostLedgerState): void;
-  costState(): CostLedgerState;
   start(): Promise<void>;
   park(): RunnerSnapshot | undefined;
   snapshot(): RunnerSnapshot | undefined;
   sendMessage(text: string, attachments?: readonly AttachmentInput[], options?: SendMessageOptions): void;
-  queueLocalCommand(input: LocalCommandResult | LocalShellSource): void;
+  protected assertAccepting(): void;
   resolveToolCall(toolCallId: string, output: ToolCallOutput, options?: {
     isError?: boolean;
   }): boolean;
-  resolvePermission(requestId: string, decision: PermissionDecision): boolean;
   emitFileDelivered(file: {
     path: string;
     bytes: number;
@@ -619,13 +742,9 @@ declare class AiSdkRunner implements Runner {
   interrupt(): Promise<void>;
   setPermissionMode(mode: PermissionMode): Promise<void>;
   setModel(model?: string): Promise<void>;
-  fail(message: string): void;
-  close(reason?: 'client' | 'server' | 'error'): void;
-  eventAt(seq: number): SessionEvent | undefined;
-  subscribe(listener: SessionEventListener, afterSeq?: number, options?: SubscribeOptions): () => void;
+  close(reason?: CloseReason): void;
   settleExecution(executionId: string, result: ToolExecutionResult): boolean;
   mcpServers(): Promise<McpServerStatusInfo[] | undefined>;
-  setTitle(title: string | undefined): void;
 }
 //#endregion
 //#region src/engines/claude/auth.d.ts
@@ -644,6 +763,7 @@ type QuickJsExecutorOptions = {
   allowedHosts?: string[];
   hostFetch?: HostFetch;
   fetchTimeoutMs?: number;
+  fetchMaxBytes?: number;
   defaultTimeoutMs?: number;
   defaultMemoryLimitBytes?: number;
 };
@@ -865,6 +985,10 @@ declare function connectMcpTools(servers: Record<string, McpServerConfigWire>, o
   required?: boolean;
 }): Promise<McpConnection>;
 //#endregion
+//#region src/lib/child-env.d.ts
+declare const GATEWAY_SECRET_ENV_KEYS: readonly string[];
+declare function withoutGatewaySecrets<T extends string | undefined>(env: Record<string, T>): Record<string, T>;
+//#endregion
 //#region src/lib/input-queue.d.ts
 declare class InputQueue implements AsyncIterable<SDKUserMessage> {
   #private;
@@ -921,18 +1045,19 @@ type ModelCatalog = {
   models: ModelOption[];
   provenance: string;
 };
-type EngineRunnerRequest = {
-  config: SessionRunnerConfig;
+type EngineRunnerRequest<C extends EngineRunnerConfig = EngineRunnerConfig> = {
+  config: C;
   profile?: ProfileInfo;
   restore?: RunnerSnapshot;
   id?: string;
 };
-interface EngineAdapter {
+interface EngineAdapter<C extends EngineRunnerConfig = EngineRunnerConfig> {
   readonly engine: ProfileEngine;
   readonly capabilities: EngineCapabilities;
   readonly catalog: ModelCatalog;
   checkAvailability(profile: ProfileInfo, env: Record<string, string | undefined>): Promise<EngineAvailability>;
-  createRunner(request: EngineRunnerRequest): Runner | Promise<Runner>;
+  createRunner(request: EngineRunnerRequest<C>): Runner | Promise<Runner>;
+  sessionEnv?(profile: ProfileInfo, base: Record<string, string | undefined>): Record<string, string | undefined>;
   listSessions?(options: {
     profile?: ProfileInfo;
     env: Record<string, string | undefined>;
@@ -944,7 +1069,7 @@ interface EngineAdapter {
 declare function getEngineAdapter(engine: ProfileEngine | undefined): EngineAdapter;
 //#endregion
 //#region src/engines/claude/adapter.d.ts
-declare const claudeAdapter: EngineAdapter;
+declare const claudeAdapter: EngineAdapter<SessionRunnerConfig>;
 //#endregion
 //#region src/engines/claude/catalog.d.ts
 declare const CLAUDE_CATALOG: ModelCatalog;
@@ -1115,63 +1240,45 @@ type AppServerConnectOptions = {
 };
 type AppServerConnectFn = (options: AppServerConnectOptions) => AppServerConnection;
 //#endregion
-//#region src/engines/codex/adapter.d.ts
-declare function resolveBundledCodexExecutable(): string | undefined;
-declare function listCodexSessions(options: {
-  connectFn: AppServerConnectFn;
-  profile?: ProfileInfo;
-  env: Record<string, string | undefined>;
-  dir?: string;
-  limit?: number;
-  offset?: number;
-}): Promise<SdkSessionSummary[]>;
-declare const codexAdapter: EngineAdapter;
-//#endregion
-//#region src/engines/codex/catalog.d.ts
-declare const CODEX_CATALOG: ModelCatalog;
-//#endregion
 //#region src/engines/codex/runner.d.ts
-type CodexRunnerConfig = CreateSessionRequest & {
-  epoch?: number;
+type CodexRunnerConfig = EngineRunnerConfig & {
   connectFn: AppServerConnectFn;
-  env?: Record<string, string | undefined>;
   codexHome?: string;
   codexPathOverride?: string;
-  instructions?: SessionInstructions;
-  defaultApprovalTimeoutMs?: number | null;
   backfillHistory?: boolean;
-  peers?: PeerDirectory;
-  shells?: ShellDirectory;
-  shellAgentWrite?: ShellAgentWrite;
 };
-declare class CodexRunner implements Runner {
+declare class CodexRunner extends EngineRunner<CodexRunnerConfig> implements Runner {
   #private;
-  readonly id: string;
-  readonly createdAt: number;
   constructor(config: CodexRunnerConfig, id?: string);
-  get status(): SessionStatus;
+  protected coreHooks(): RunnerCoreHooks;
   get sdkSessionId(): string | undefined;
-  get lastSeq(): number;
-  get pendingApprovals(): PermissionRequest[];
   info(): SessionInfo;
-  setTitle(title: string | undefined): void;
-  carryCost(state: CostLedgerState): void;
-  costState(): CostLedgerState;
   start(): Promise<void>;
   sendMessage(text: string, attachments?: readonly AttachmentInput[], options?: SendMessageOptions): void;
-  queueLocalCommand(input: LocalCommandResult | LocalShellSource): void;
-  resolvePermission(requestId: string, decision: PermissionDecision): boolean;
   interrupt(): Promise<void>;
   clearContext(): Promise<void>;
   setPermissionMode(mode: PermissionMode): Promise<void>;
   setModel(model?: string): Promise<void>;
-  fail(message: string): void;
-  close(reason?: 'client' | 'server' | 'error'): void;
-  eventAt(seq: number): SessionEvent | undefined;
-  subscribe(listener: SessionEventListener, afterSeq?: number, options?: SubscribeOptions): () => void;
+  close(reason?: CloseReason): void;
   mcpServers(): Promise<McpServerStatusInfo[] | undefined>;
 }
 //#endregion
+//#region src/engines/codex/adapter.d.ts
+declare function resolveBundledCodexExecutable(): string | undefined;
+declare function listCodexSessions(options: {
+  connectFn: AppServerConnectFn;
+  profile?: ProfileInfo;
+  env: Record<string, string | undefined>;
+  dir?: string;
+  limit?: number;
+  offset?: number;
+}): Promise<SdkSessionSummary[]>;
+type CodexAdapterConfig = Omit<CodexRunnerConfig, 'connectFn'>;
+declare const codexAdapter: EngineAdapter<CodexAdapterConfig>;
+//#endregion
+//#region src/engines/codex/catalog.d.ts
+declare const CODEX_CATALOG: ModelCatalog;
+//#endregion
 //#region src/engines/codex/process.d.ts
 declare function connectAppServer(options: {
   executable: string;
@@ -1199,5 +1306,5 @@ declare class JsonRpcStdioConnection {
 //#region src/engines/provider/adapter.d.ts
 declare const providerAdapter: EngineAdapter;
 //#endregion
-export { AiSdkRunner, type AiSdkRunnerConfig, type AiSdkSessionState, type AppServerConnectFn, type AppServerConnectOptions, type AppServerConnection, type AppServerHistoryTurn, type AppServerItem, type AppServerThreadListResponse, type AppServerThreadSummary, type AppServerTokenUsage, type AppServerTurn, type AppServerUserInput, type AttachmentInput, type AttachmentKind, type BridgeAnswer, BrowserBridgeExecutor, type BrowserBridgeExecutorOptions, CLAUDE_CATALOG, CODEX_CATALOG, type ClaudeAuthProbe, type ClaudeAuthStatus, CodexRunner, type CodexRunnerConfig, type CostFigures, CostLedger, type CostLedgerState, type DeferredDispatch, DeferredExecutor, type DeferredExecutorOptions, type EngineAdapter, type EngineAvailability, type EngineRunnerRequest, type EngineSessionOptions, type HeadTail, type HeadTailOptions, type HistoryFn, type HostFetch, type HostToolDefinition, InputQueue, type InstructionsContext, JsonRpcError, JsonRpcStdioConnection, type LanguageModel, type LocalCommandEmit, type LocalCommandEvent, LocalCommandQueue, type LocalCommandResult, type LocalShellSource, type McpConnection, type ModelCatalog, PEER_MCP_SERVER, PEER_MESSAGE_MAX_CHARS, PEER_RECENT_DEFAULT, PEER_RECENT_MAX, PEER_TOOL_NAMES, type ParkedExecution, type PeerDirectory, type PeerMention, type PeerPeek, type PeerSendOptions, type PeerSendResult, type PeerSessionSummary, type PeerToolName, type PeerToolSpec, type PendingEntry, type PendingKind, type PendingOutcome, PendingRequestRegistry, type PendingToolCall, type PermissionDecision, type QueryFn, QuickJsExecutor, type QuickJsExecutorOptions, type RegisterOptions, type Runner, type RunnerSnapshot, SHELL_KEYS_MAX, SHELL_KEY_NAMES, SHELL_READ_TOOL_NAMES, SHELL_REFUSAL, SHELL_TOOL_NAMES, SHELL_TOOL_SHAPES, SHELL_WRITE_REFUSAL, SHELL_WRITE_TOOL_NAMES, SUPPORTED_ATTACHMENT_TYPES, type SendMessageOptions, type SessionEventListener, type SessionInstructions, SessionRunner, type SessionRunnerConfig, type SettledBy, type ShellAgentWrite, type ShellContextOptions, type ShellDirectory, type ShellKeyOptions, type ShellKillResult, type ShellReadOptions, type ShellReadResult, type ShellRunOptions, type ShellSummary, type ShellToolName, type ShellToolOptions, type ShellToolOutput, type ShellToolSpec, type ShellView, type ShellWait, type ShellWriteOptions, TTY_REDRAW_CARRY, type Tool, type ToolCallOutput, type ToolContext, type ToolContextOptions, type ToolDefinition, type ToolExecutionCall, type ToolExecutionDispatch, type ToolExecutionResult, type ToolExecutor, type ToolSet, type ToolTrust, type WebFetchDigest, type WebFetchFn, type WebFetchOptions, type WebFetchResult, agentMayWrite, attachmentContentBlocks, attachmentKind, attachmentRef, checkClaudeAuth, clampShellTail, claudeAdapter, codexAdapter, composeInstructions, connectAppServer, connectMcpTools, countLines, createEngineSession, createToolContext, createWebFetch, encodeShellKey, encodeShellKeys, getEngineAdapter, headTail, htmlToMarkdown, installPeerDirectory, installShellDirectory, installedPeerDirectory, installedShellDirectory, isHostAllowed, isLocalShellSource, isPrivateAddress, isShellToolName, isShellWriteToolName, isSlashCommand, listCodexSessions, localCommandContext, localCommandEvent, localCommandTranscript, mcpStatusInfo, modelOptionsFromSdk, normalizeMediaType, normalizeSdkMessage, peerDirectoryHandle, peerMentionsEnvelope, peerMessageEnvelope, peerSummary, peerToolSpecs, providerAdapter, recentLines, replaySlice, resolveBundledClaudeExecutable, resolveBundledCodexExecutable, resolveInstructions, runPeerTool, runShellTool, shellContextText, shellDirectoryHandle, shellInlineText, shellKillText, shellOwnershipRefusal, shellReadText, shellSummary, shellTail, shellToolNames, shellToolNeedsCard, shellToolOf, shellToolSpecs, shellWriteDeniedText, shellWriteToolOf, splitLines, toApiMessage, toExecutionResult, truncateResultBlocks, ttyRedraws, ttyText, withHostTools, withMcpTools, withPeerContext };
+export { AiSdkRunner, type AiSdkRunnerConfig, type AiSdkSessionState, type AppServerConnectFn, type AppServerConnectOptions, type AppServerConnection, type AppServerHistoryTurn, type AppServerItem, type AppServerThreadListResponse, type AppServerThreadSummary, type AppServerTokenUsage, type AppServerTurn, type AppServerUserInput, type AttachmentInput, type AttachmentKind, type BridgeAnswer, BrowserBridgeExecutor, type BrowserBridgeExecutorOptions, CLAUDE_CATALOG, CODEX_CATALOG, type ClaudeAuthProbe, type ClaudeAuthStatus, type CodexAdapterConfig, CodexRunner, type CodexRunnerConfig, type CostFigures, CostLedger, type CostLedgerState, type DeferredDispatch, DeferredExecutor, type DeferredExecutorOptions, type EngineAdapter, type EngineAvailability, type EngineRunnerConfig, type EngineRunnerRequest, type EngineSessionOptions, GATEWAY_SECRET_ENV_KEYS, type HeadTail, type HeadTailOptions, type HistoryFn, type HostFetch, type HostToolDefinition, InputQueue, type InstructionsContext, JsonRpcError, JsonRpcStdioConnection, type LanguageModel, type LocalCommandEmit, type LocalCommandEvent, LocalCommandQueue, type LocalCommandResult, type LocalShellSource, type McpConnection, type ModelCatalog, PEER_MCP_SERVER, PEER_MESSAGE_MAX_CHARS, PEER_RECENT_DEFAULT, PEER_RECENT_MAX, PEER_TOOL_NAMES, type ParkedExecution, type PeerDirectory, type PeerMention, type PeerPeek, type PeerSendOptions, type PeerSendResult, type PeerSessionSummary, type PeerToolName, type PeerToolSpec, type PendingEntry, type PendingKind, type PendingOutcome, PendingRequestRegistry, type PendingToolCall, type PermissionDecision, type QueryFn, QuickJsExecutor, type QuickJsExecutorOptions, type RegisterOptions, type Runner, type RunnerSnapshot, SHELL_KEYS_MAX, SHELL_KEY_NAMES, SHELL_READ_TOOL_NAMES, SHELL_REFUSAL, SHELL_TOOL_NAMES, SHELL_TOOL_SHAPES, SHELL_WRITE_REFUSAL, SHELL_WRITE_TOOL_NAMES, SUPPORTED_ATTACHMENT_TYPES, type SendMessageOptions, type SessionEventListener, type SessionInstructions, SessionRunner, type SessionRunnerConfig, type SettledBy, type ShellAgentWrite, type ShellContextOptions, type ShellDirectory, type ShellKeyOptions, type ShellKillResult, type ShellReadOptions, type ShellReadResult, type ShellRunOptions, type ShellSummary, type ShellToolName, type ShellToolOptions, type ShellToolOutput, type ShellToolSpec, type ShellView, type ShellWait, type ShellWriteOptions, TTY_REDRAW_CARRY, type Tool, type ToolCallOutput, type ToolContext, type ToolContextOptions, type ToolDefinition, type ToolExecutionCall, type ToolExecutionDispatch, type ToolExecutionResult, type ToolExecutor, type ToolSet, type ToolTrust, type WebFetchDigest, type WebFetchFn, type WebFetchOptions, type WebFetchResult, agentMayWrite, attachmentContentBlocks, attachmentKind, attachmentRef, checkClaudeAuth, clampShellTail, claudeAdapter, codexAdapter, composeInstructions, connectAppServer, connectMcpTools, countLines, createEngineSession, createToolContext, createWebFetch, encodeShellKey, encodeShellKeys, getEngineAdapter, headTail, htmlToMarkdown, installPeerDirectory, installShellDirectory, installedPeerDirectory, installedShellDirectory, isHostAllowed, isLocalShellSource, isPrivateAddress, isShellToolName, isShellWriteToolName, isSlashCommand, listCodexSessions, localCommandContext, localCommandEvent, localCommandTranscript, mcpStatusInfo, modelOptionsFromSdk, normalizeMediaType, normalizeSdkMessage, peerDirectoryHandle, peerMentionsEnvelope, peerMessageEnvelope, peerSummary, peerToolSpecs, providerAdapter, recentLines, replaySlice, resolveBundledClaudeExecutable, resolveBundledCodexExecutable, resolveInstructions, runPeerTool, runShellTool, shellContextText, shellDirectoryHandle, shellInlineText, shellKillText, shellOwnershipRefusal, shellReadText, shellSummary, shellTail, shellToolNames, shellToolNeedsCard, shellToolOf, shellToolSpecs, shellWriteDeniedText, shellWriteToolOf, splitLines, toApiMessage, toExecutionResult, truncateResultBlocks, ttyRedraws, ttyText, withHostTools, withMcpTools, withPeerContext, withoutGatewaySecrets };
 //# sourceMappingURL=index.d.mts.map