@yanlinglabs/winter-agent-runtime 0.0.35 → 0.0.38

package/dist/context/attachments.d.ts

@@ -53,6 +53,24 @@ export interface PlanModeAttachment extends AttachmentPayload {
     plansDirectoryFallback?: string;
     hostPlanBody?: string;
 }
+/**
+ * claude's `deferred_tools_delta`: the DEFERRED tools (loaded through `ToolSearch` on first use) the
+ * history has not yet announced, and the ones it announced that are gone. Without it a model cannot know
+ * a deferred tool exists -- its schema is not in `tools` (or rides `defer_loading`, which the model does
+ * not see) -- so it could only find one by guessing a keyword. Persisted like every attachment, so the
+ * announcement is a stable, cacheable part of the history and a pool change costs one appended entry,
+ * never a moved prefix (claude's reason for the delta form over its older per-request
+ * `<available-deferred-tools>` prepend).
+ */
+export interface DeferredToolsDeltaAttachment extends AttachmentPayload {
+    type: "deferred_tools_delta";
+    addedNames: string[];
+    addedLines: string[];
+    removedNames: string[];
+}
+/** claude's own two headers for `deferred_tools_delta` (`utils/messages.ts`), verbatim. */
+export declare const DEFERRED_TOOLS_ADDED_HEADER = "The following deferred tools are now available via ToolSearch:";
+export declare const DEFERRED_TOOLS_REMOVED_HEADER = "The following deferred tools are no longer available (their MCP server disconnected). Do not search for them \u2014 ToolSearch will return no match:";
 export declare const AGENT_LISTING_INITIAL_HEADER = "Available agent types for the Agent tool:";
 export declare const AGENT_LISTING_ADDED_HEADER = "New agent types are now available for the Agent tool:";
 export declare const AGENT_LISTING_REMOVED_HEADER = "The following agent types are no longer available:";
@@ -103,6 +121,20 @@ export interface AttachmentRendererOptions {
 export declare function registerAttachmentRenderer(type: string, renderer: AttachmentRenderer, options?: AttachmentRendererOptions): void;
 /** WS-23: whether this attachment's renderer opted into the mid-conversation `system` role. */
 export declare function isSystemRoleAttachment(attachment: AttachmentPayload): boolean;
+/**
+ * claude's fold for `deferred_tools_delta`: the deferred tool names the history has announced and not
+ * since withdrawn. A delta's `addedNames` count only when it carries `addedLines` (as the agent fold).
+ */
+export declare function announcedDeferredTools(messages: readonly ProviderMessage[]): Set<string>;
+/**
+ * The `deferred_tools_delta` this history needs now, or `undefined` when nothing changed. `deferred` = the
+ * session's deferred tool names, as the model would call them; `offered` = EVERY name it is offered now,
+ * eager ones included. An announced name is withdrawn only when it is not offered AT ALL: a tool that went
+ * from deferred to eager (a switch to a provider that cannot search, which injects everything) is still
+ * there, and telling the model "do not search for it" would be false. It stays announced, so it is not
+ * re-announced if it defers again.
+ */
+export declare function computeDeferredToolsDelta(deferred: readonly string[], offered: readonly string[], history: readonly ProviderMessage[]): DeferredToolsDeltaAttachment | undefined;
 /** The wrapped model-facing text for an attachment, or `undefined` when there is none (an unknown type included). */
 export declare function renderAttachment(attachment: AttachmentPayload): string | undefined;
 /** The history message for an attachment, or `undefined` when it renders to nothing (it is then not appended at all). */

package/dist/embedded-worker.js

@@ -1,4 +1,4 @@
-import"./index-q5jpx2mz.js";
+import"./index-5xe59vkt.js";
 import {
   liveProcessGroups,
   onProcessGroupChange
@@ -6,10 +6,10 @@ import {
 import"./index-mwew595z.js";
 import"./index-2wgfv0pa.js";
 import"./index-bef62z3r.js";
-import"./index-838n35xx.js";
+import"./index-z3970wsj.js";
 import {
   runEmbeddedSession2
-} from "./index-91rvsndj.js";
+} from "./index-8x4yjdg7.js";
 import {
   Queue
 } from "./index-97t2rmtf.js";

package/dist/embedded.js

@@ -1,8 +1,8 @@
 import {
   runEmbeddedSession2
-} from "./index-91rvsndj.js";
-import"./index-838n35xx.js";
-import"./index-q5jpx2mz.js";
+} from "./index-8x4yjdg7.js";
+import"./index-z3970wsj.js";
+import"./index-5xe59vkt.js";
 import"./index-2wgfv0pa.js";
 import"./index-bef62z3r.js";
 import"./index-1hef2gff.js";

package/dist/engine.d.ts

@@ -25,6 +25,7 @@ import { type HookAuditRecord } from "./hooks/runner.js";
 import { type DurableApprovalStore } from "./permissions/approvals.js";
 import "./tools/descriptors/index.ts";
 import "./tools/impl/index.ts";
+import { type ToolResultBlock, type ToolResultSiteIcon } from "./tools/registry.js";
 import { type ResolvedReviewer } from "./tools/impl/advisor.js";
 import type { AuxiliaryModelResolution } from "./provider/session-provider.js";
 import type { ToolSecretResolver } from "./provider/tool-secret.js";
@@ -416,6 +417,12 @@ export declare class ProviderTurnError extends Error {
      * the engine answers it with one reactive compaction and one retry. `undefined` for any other failure.
      */
     readonly contextOverflow: true | undefined;
+    /**
+     * Code-mode images: the provider refused the request for its IMAGES (too many, or past a many-image
+     * size limit). The engine answers it with ONE retry that sends every image but the newest as a note
+     * (`imagesOnlyNewest`), sticky for the rest of the run. `undefined` for any other failure.
+     */
+    readonly imageOverflow: true | undefined;
     constructor(message: string, opts?: {
         status?: number;
         providerCode?: string;
@@ -423,6 +430,7 @@ export declare class ProviderTurnError extends Error {
         retryable?: boolean;
         committed?: boolean;
         contextOverflow?: true;
+        imageOverflow?: true;
         cause?: unknown;
     });
 }
@@ -528,6 +536,26 @@ export declare function inStreamOrder(turn: ProviderTurn): ContentBlock[] | unde
  * so a host that renders "thinking…" or "[redacted]" keeps working.
  */
 export declare function contentForHost(content: ContentBlock[]): ContentBlock[];
+/**
+ * Code-mode images: a tool round's results as the HOST sees them on the `user` frame -- every image block
+ * (top level or inside a `tool_result`) keeps its shape and `media_type` and loses its bytes: `data`
+ * becomes `""`. The bytes exist for one reader, the provider on the next request, and they reach it from
+ * the engine's history and the session transcript. The frame is one NDJSON line on the child's stdout, and
+ * the host SDK bounds an unterminated line at `maxBufferSize` (1 MiB by default, `sdk/src/query.ts`): an
+ * image Read's base64 (up to ~5.2 MB) would end the session with a `ProtocolDecodeError`. A host that
+ * renders "[image]" keeps working, and the transcript (which the host can read) holds the real bytes.
+ * Everything else is returned by identity.
+ */
+export declare function toolResultsForHost(content: ContentBlock[]): ContentBlock[];
+/**
+ * The host's copy of a tool round's results, each `tool_result` whose call reported site icons
+ * (`ToolResultPayload.siteIcons` -- WebFetch's page icon, WebSearch's Exa favicons) carrying them as
+ * `winter_site_icons: [{url, icon_url}]`. Host-only by construction: it is applied to the frame copy at
+ * the one tool-round write, and copies every block it touches -- `toolResultsForHost` can hand back the
+ * very block objects `resultBlocks` holds, which also feed the history, the transcript and every
+ * provider request, so mutating one would put the field in front of the model.
+ */
+export declare function withHostSiteIcons(content: ContentBlock[], icons: ReadonlyMap<string, readonly ToolResultSiteIcon[]>): ContentBlock[];
 /**
  * Phase 6 (R6-9), widened by the fix wave: the session's RESOLVED provider identity as the engine
  * carries it -- the `MessageOrigin` half every `origin` record and `providerAnnotations` read, plus
@@ -663,7 +691,9 @@ export interface ToolExecutor {
         explicitApproval?: "prompt" | "rule";
     }): Promise<{
         output: string;
+        blocks?: ToolResultBlock[];
         isError?: boolean;
+        siteIcons?: ToolResultSiteIcon[];
     }>;
 }
 /**