@yanlinglabs/winter-agent-runtime 0.0.36 → 0.0.38

package/dist/context/attachments.d.ts

@@ -53,6 +53,24 @@ export interface PlanModeAttachment extends AttachmentPayload {
     plansDirectoryFallback?: string;
     hostPlanBody?: string;
 }
+/**
+ * claude's `deferred_tools_delta`: the DEFERRED tools (loaded through `ToolSearch` on first use) the
+ * history has not yet announced, and the ones it announced that are gone. Without it a model cannot know
+ * a deferred tool exists -- its schema is not in `tools` (or rides `defer_loading`, which the model does
+ * not see) -- so it could only find one by guessing a keyword. Persisted like every attachment, so the
+ * announcement is a stable, cacheable part of the history and a pool change costs one appended entry,
+ * never a moved prefix (claude's reason for the delta form over its older per-request
+ * `<available-deferred-tools>` prepend).
+ */
+export interface DeferredToolsDeltaAttachment extends AttachmentPayload {
+    type: "deferred_tools_delta";
+    addedNames: string[];
+    addedLines: string[];
+    removedNames: string[];
+}
+/** claude's own two headers for `deferred_tools_delta` (`utils/messages.ts`), verbatim. */
+export declare const DEFERRED_TOOLS_ADDED_HEADER = "The following deferred tools are now available via ToolSearch:";
+export declare const DEFERRED_TOOLS_REMOVED_HEADER = "The following deferred tools are no longer available (their MCP server disconnected). Do not search for them \u2014 ToolSearch will return no match:";
 export declare const AGENT_LISTING_INITIAL_HEADER = "Available agent types for the Agent tool:";
 export declare const AGENT_LISTING_ADDED_HEADER = "New agent types are now available for the Agent tool:";
 export declare const AGENT_LISTING_REMOVED_HEADER = "The following agent types are no longer available:";
@@ -103,6 +121,20 @@ export interface AttachmentRendererOptions {
 export declare function registerAttachmentRenderer(type: string, renderer: AttachmentRenderer, options?: AttachmentRendererOptions): void;
 /** WS-23: whether this attachment's renderer opted into the mid-conversation `system` role. */
 export declare function isSystemRoleAttachment(attachment: AttachmentPayload): boolean;
+/**
+ * claude's fold for `deferred_tools_delta`: the deferred tool names the history has announced and not
+ * since withdrawn. A delta's `addedNames` count only when it carries `addedLines` (as the agent fold).
+ */
+export declare function announcedDeferredTools(messages: readonly ProviderMessage[]): Set<string>;
+/**
+ * The `deferred_tools_delta` this history needs now, or `undefined` when nothing changed. `deferred` = the
+ * session's deferred tool names, as the model would call them; `offered` = EVERY name it is offered now,
+ * eager ones included. An announced name is withdrawn only when it is not offered AT ALL: a tool that went
+ * from deferred to eager (a switch to a provider that cannot search, which injects everything) is still
+ * there, and telling the model "do not search for it" would be false. It stays announced, so it is not
+ * re-announced if it defers again.
+ */
+export declare function computeDeferredToolsDelta(deferred: readonly string[], offered: readonly string[], history: readonly ProviderMessage[]): DeferredToolsDeltaAttachment | undefined;
 /** The wrapped model-facing text for an attachment, or `undefined` when there is none (an unknown type included). */
 export declare function renderAttachment(attachment: AttachmentPayload): string | undefined;
 /** The history message for an attachment, or `undefined` when it renders to nothing (it is then not appended at all). */

package/dist/embedded-worker.js

@@ -1,4 +1,4 @@
-import"./index-c8j57y8v.js";
+import"./index-5xe59vkt.js";
 import {
   liveProcessGroups,
   onProcessGroupChange
@@ -6,10 +6,10 @@ import {
 import"./index-mwew595z.js";
 import"./index-2wgfv0pa.js";
 import"./index-bef62z3r.js";
-import"./index-83p1g9ap.js";
+import"./index-z3970wsj.js";
 import {
   runEmbeddedSession2
-} from "./index-1nhzy5e2.js";
+} from "./index-8x4yjdg7.js";
 import {
   Queue
 } from "./index-97t2rmtf.js";

package/dist/embedded.js

@@ -1,8 +1,8 @@
 import {
   runEmbeddedSession2
-} from "./index-1nhzy5e2.js";
-import"./index-83p1g9ap.js";
-import"./index-c8j57y8v.js";
+} from "./index-8x4yjdg7.js";
+import"./index-z3970wsj.js";
+import"./index-5xe59vkt.js";
 import"./index-2wgfv0pa.js";
 import"./index-bef62z3r.js";
 import"./index-1hef2gff.js";

package/dist/engine.d.ts

@@ -25,7 +25,7 @@ import { type HookAuditRecord } from "./hooks/runner.js";
 import { type DurableApprovalStore } from "./permissions/approvals.js";
 import "./tools/descriptors/index.ts";
 import "./tools/impl/index.ts";
-import { type ToolResultBlock } from "./tools/registry.js";
+import { type ToolResultBlock, type ToolResultSiteIcon } from "./tools/registry.js";
 import { type ResolvedReviewer } from "./tools/impl/advisor.js";
 import type { AuxiliaryModelResolution } from "./provider/session-provider.js";
 import type { ToolSecretResolver } from "./provider/tool-secret.js";
@@ -547,6 +547,15 @@ export declare function contentForHost(content: ContentBlock[]): ContentBlock[];
  * Everything else is returned by identity.
  */
 export declare function toolResultsForHost(content: ContentBlock[]): ContentBlock[];
+/**
+ * The host's copy of a tool round's results, each `tool_result` whose call reported site icons
+ * (`ToolResultPayload.siteIcons` -- WebFetch's page icon, WebSearch's Exa favicons) carrying them as
+ * `winter_site_icons: [{url, icon_url}]`. Host-only by construction: it is applied to the frame copy at
+ * the one tool-round write, and copies every block it touches -- `toolResultsForHost` can hand back the
+ * very block objects `resultBlocks` holds, which also feed the history, the transcript and every
+ * provider request, so mutating one would put the field in front of the model.
+ */
+export declare function withHostSiteIcons(content: ContentBlock[], icons: ReadonlyMap<string, readonly ToolResultSiteIcon[]>): ContentBlock[];
 /**
  * Phase 6 (R6-9), widened by the fix wave: the session's RESOLVED provider identity as the engine
  * carries it -- the `MessageOrigin` half every `origin` record and `providerAnnotations` read, plus
@@ -684,6 +693,7 @@ export interface ToolExecutor {
         output: string;
         blocks?: ToolResultBlock[];
         isError?: boolean;
+        siteIcons?: ToolResultSiteIcon[];
     }>;
 }
 /**