cascade-ai 0.77.0 → 0.78.0

package/dist/index.d.ts

@@ -873,6 +873,13 @@ interface ToolsConfig {
     shellBlocklist: string[];
     requireApprovalFor: string[];
     browserEnabled: boolean;
+    /**
+     * Let a run act on the desktop's built-in browser, not just read it. Separate
+     * from `browserEnabled` (headless Playwright) because it drives the user's
+     * signed-in session. See `src/config/schema.ts` and
+     * `src/tools/browser-control.ts`.
+     */
+    agentBrowserControl?: boolean;
     mcpServers?: McpServerConfig$1[];
     /**
      * Names of MCP servers (matching McpServerConfig.name) that the user has
@@ -3178,6 +3185,143 @@ declare class CurrentPageTool extends BaseTool {
     execute(_input: Record<string, unknown>, _options: ToolExecuteOptions): Promise<string>;
 }
 
+/** One thing to do to the open page. */
+interface BrowserAction {
+    kind: 'navigate' | 'click' | 'fill' | 'press' | 'wait_for' | 'extract_text';
+    /** navigate */
+    url?: string;
+    /** click, fill, wait_for, extract_text (optional — defaults to the body) */
+    selector?: string;
+    /** fill */
+    value?: string;
+    /** press — a single key name, e.g. "Enter" or "Tab" */
+    key?: string;
+    /** wait_for */
+    timeoutMs?: number;
+}
+interface BrowserActionOutcome {
+    ok: boolean;
+    /** Human- and model-readable account of what happened. */
+    detail: string;
+    /** Where the page ended up, when the host can tell. */
+    url?: string;
+    title?: string;
+}
+/**
+ * Who is asking, and how to stop them.
+ *
+ * Both fields exist because the browser is a SINGLETON the host owns while runs
+ * come and go. Without run identity the host cannot tell a Stop in one run from
+ * a Stop in every future run, and cannot tell two concurrent runs apart when
+ * they both reach for the same page.
+ */
+interface BrowserActionContext {
+    /**
+     * The run this action belongs to. Revocation and the host's single-owner
+     * lease both key on it, so a Stop scopes to the run the user was watching
+     * rather than to the process.
+     */
+    sessionId: string;
+    /**
+     * The individual worker asking — `tierId`, a per-instance id.
+     *
+     * Distinct from `sessionId` and both are needed. Every T3 worker in a run
+     * passes the same `taskId` as the session, so the session says which RUN to
+     * stop but cannot tell two sibling workers apart. The host leases the browser
+     * to one actor for a whole sequence, and a lease keyed by session would hand
+     * the same lease to every sibling at once — which is the state that lets one
+     * worker navigate away in the middle of another's fill-then-click.
+     */
+    actorId: string;
+    /**
+     * Cancels an action already in flight. `wait_for` can sit for 30s and
+     * `navigate` waits on the network, so without this a cancelled run keeps
+     * touching the user's authenticated page after it was stopped.
+     */
+    signal?: AbortSignal;
+}
+/**
+ * Performs one action against the browser view the host owns.
+ *
+ * Returning `ok: false` with a reason is expected and normal — a selector that
+ * matches nothing is a thing the model should be told about and can recover
+ * from, not an exception.
+ */
+type BrowserController = (action: BrowserAction, context: BrowserActionContext) => Promise<BrowserActionOutcome>;
+/**
+ * Told that one worker is finished with the browser for good.
+ *
+ * Separate from the controller because it is not an action: it carries no
+ * outcome and cannot fail. The host uses it to end that actor's sequence lease
+ * — the only signal that reliably means "will not ask again", as opposed to a
+ * worker that is merely waiting on its next model response.
+ */
+type BrowserActorRelease = (actorId: string) => void;
+declare class BrowserControlTool extends BaseTool {
+    readonly name = "browser_control";
+    readonly description: string;
+    readonly inputSchema: {
+        type: string;
+        properties: {
+            action: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            url: {
+                type: string;
+                description: string;
+            };
+            selector: {
+                type: string;
+                description: string;
+            };
+            value: {
+                type: string;
+                description: string;
+            };
+            key: {
+                type: string;
+                description: string;
+            };
+            timeoutMs: {
+                type: string;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+    private controller;
+    private release;
+    /** One-way. See `revoke`. */
+    private revoked;
+    constructor(controller: BrowserController, release?: BrowserActorRelease);
+    /**
+     * A worker has finished. Ends its hold on the browser.
+     *
+     * Called from the tier's terminal path rather than by the model, because a
+     * model cannot be relied on to announce that it is done — which is why the
+     * host cannot use idle time as the boundary instead.
+     */
+    releaseActor(actorId: string): void;
+    /**
+     * Permanently disable this tool, whatever the registry still holds.
+     *
+     * Registration-time gates cannot express "this run turned out to be
+     * unattended": a host that wires the controller and only then declares the
+     * run unattended has already registered the tool, and a check that ran at
+     * registration has no second chance. Enforcing at EXECUTION time makes the
+     * guarantee independent of call order, which is the whole point of stating
+     * the invariant rather than relying on the scheduler's current sequence.
+     *
+     * One-way on purpose. A safety gate that can be re-opened by a later call is
+     * a gate that a refactor re-opens by accident.
+     */
+    revoke(): void;
+    isDangerous(): boolean;
+    execute(input: Record<string, unknown>, options: ToolExecuteOptions): Promise<string>;
+}
+
 /** One entry in the per-run orchestration decision trail (see /why). */
 interface DecisionLogEntry {
     at: string;
@@ -3358,6 +3502,39 @@ declare class Cascade extends EventEmitter {
      * nothing. `disabledTools` still removes it.
      */
     setCurrentPageProvider(provider: CurrentPageProvider): void;
+    /**
+     * True when nobody is watching this run — a scheduled/cron task, which
+     * auto-approves every tool because there is no one to ask.
+     *
+     * That auto-approval is fine for ordinary tools and disqualifying for this
+     * one: `browser_control` drives the signed-in browser, and "every run asks
+     * first" is the promise the Settings copy makes. The property used to hold
+     * only because `runScheduledTask` happens not to call `setBrowserController`
+     * — a guarantee resting on an ABSENT call, which is exactly what a later
+     * refactor adds without noticing. Stated and enforced instead.
+     */
+    private unattended;
+    /**
+     * Declare that no human is watching this run, so capabilities that depend on
+     * a person being able to see and stop them are refused outright.
+     */
+    setUnattended(on: boolean): void;
+    /**
+     * Wire the host's browser so a run can ACT on the open page, not just read it.
+     *
+     * Two gates before this registers anything, and both matter:
+     *
+     *   - `tools.agentBrowserControl` must be on. Unlike read_current_page, which
+     *     reaches nothing the user has not already opened themselves, this drives
+     *     the session they are signed into. That is opt-in, not a default.
+     *   - `disabledTools` still removes it, the same as every other tool.
+     *   - The run must not be UNATTENDED. See `setUnattended`.
+     *
+     * Host-supplied like the page provider: the tool exists only where there is a
+     * real browser to drive, so it never has to be refused in the CLI or a hosted
+     * run — it is simply not there.
+     */
+    setBrowserController(controller: BrowserController, release?: BrowserActorRelease): void;
     private registerMediaTools;
     /**
      * Register `generate_document` where there is a real workspace to write into.
@@ -3800,6 +3977,15 @@ declare class T3Worker extends BaseTier {
     constructor(router: CascadeRouter, toolRegistry: ToolRegistry, parentId: string);
     setStore(store: MemoryStore, sessionId: string): void;
     execute(assignment: T2ToT3Assignment, taskId: string, signal?: AbortSignal): Promise<T3Result>;
+    /**
+     * End this worker's hold on the shared browser.
+     *
+     * Duck-typed rather than imported: `browser_control` is registered only by a
+     * host that HAS a browser (the desktop), so in the CLI and hosted runs there
+     * is no such tool and this is a no-op. Importing the class to instanceof-check
+     * it would couple the worker to a tool that usually is not there.
+     */
+    private releaseBrowserControl;
     sendToPeer(toId: string, content: unknown): void;
     requestFromPeer(peerId: string, subtaskId: string): Promise<string>;
     syncWithPeers(barrierName: string): Promise<void>;
@@ -4477,6 +4663,20 @@ declare const CascadeConfigSchema: z.ZodObject<{
         shellBlocklist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
         requireApprovalFor: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
         browserEnabled: z.ZodDefault<z.ZodBoolean>;
+        /**
+         * Let a run ACT on the page open in the desktop's built-in browser — click,
+         * type, submit — not just read it.
+         *
+         * Distinct from `browserEnabled`, which turns on the headless Playwright
+         * tool. That one drives a throwaway browser with an empty cookie jar; this
+         * one drives the session the user is signed into, which is a different order
+         * of consequence and so gets its own switch rather than riding on that one.
+         *
+         * Off by default. Turning it on does not hand anything over silently: the
+         * tool still goes through the approval chain, and the browser panel carries a
+         * stop control for the run that is acting.
+         */
+        agentBrowserControl: z.ZodDefault<z.ZodBoolean>;
         mcpServers: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodObject<{
             name: z.ZodString;
             command: z.ZodOptional<z.ZodString>;
@@ -4579,6 +4779,7 @@ declare const CascadeConfigSchema: z.ZodObject<{
         shellBlocklist: string[];
         requireApprovalFor: string[];
         browserEnabled: boolean;
+        agentBrowserControl: boolean;
         dynamicToolSandbox: "auto" | "isolate" | "worker";
         mcpServers?: {
             name: string;
@@ -4613,6 +4814,7 @@ declare const CascadeConfigSchema: z.ZodObject<{
         shellBlocklist?: string[] | undefined;
         requireApprovalFor?: string[] | undefined;
         browserEnabled?: boolean | undefined;
+        agentBrowserControl?: boolean | undefined;
         mcpTrusted?: string[] | undefined;
         webSearch?: {
             searxngUrl?: string | undefined;
@@ -5196,6 +5398,7 @@ declare const CascadeConfigSchema: z.ZodObject<{
         shellBlocklist: string[];
         requireApprovalFor: string[];
         browserEnabled: boolean;
+        agentBrowserControl: boolean;
         dynamicToolSandbox: "auto" | "isolate" | "worker";
         mcpServers?: {
             name: string;
@@ -5384,6 +5587,7 @@ declare const CascadeConfigSchema: z.ZodObject<{
         shellBlocklist?: string[] | undefined;
         requireApprovalFor?: string[] | undefined;
         browserEnabled?: boolean | undefined;
+        agentBrowserControl?: boolean | undefined;
         mcpTrusted?: string[] | undefined;
         webSearch?: {
             searxngUrl?: string | undefined;
@@ -6012,6 +6216,14 @@ declare class DashboardServer {
      * always failing.
      */
     private currentPageProvider?;
+    /**
+     * Supplied by the desktop shell so a run can ACT on that page — click, type,
+     * submit — not just read it. Same reasoning as the provider above: absent in
+     * the CLI, so the tool is not registered rather than present and failing.
+     * Cascade applies the `tools.agentBrowserControl` gate on top of this.
+     */
+    private browserController?;
+    private browserActorRelease?;
     private activeControllers;
     /**
      * Run taskIds per chat session — file snapshots are keyed by the run's
@@ -6051,6 +6263,45 @@ declare class DashboardServer {
     constructor(config: CascadeConfig, store: MemoryStore, workspacePath?: string);
     /** Wire the host's browser view in (desktop only). */
     setCurrentPageProvider(provider: CurrentPageProvider): void;
+    /** Let runs act on that view, not just read it (desktop only). */
+    setBrowserController(controller: BrowserController, release?: BrowserActorRelease): void;
+    /**
+     * Told whenever settings are committed through THIS server.
+     *
+     * Settings reach the live config by two routes — the desktop's Electron IPC
+     * handler and this server's `config:update` socket — and both run the same
+     * `commitSettings`. The desktop mirrors `tools.agentBrowserControl` into its
+     * browser module after its own route, but had no way to learn about the
+     * other, so a socket write left the module's copy stale: an enable the module
+     * still refused, or worse a disable the module still honoured for a run
+     * already holding the tool. This is the same sibling-writer drift
+     * `settings-payload.ts` exists to prevent, one layer up.
+     */
+    private settingsChangeHook?;
+    onSettingsChanged(hook: (config: CascadeConfig) => void): void;
+    /**
+     * Told when a run ends, so a host holding run-scoped state can release it.
+     *
+     * The desktop uses this to retire a run's browser Stop control: that has to
+     * outlive each individual action (the gap between two actions is when the
+     * user most wants it) but must not outlive the run.
+     */
+    /**
+     * Fired when a run ends, carrying BOTH identifiers explicitly.
+     *
+     * They are different things and conflating them was a live bug: a chat
+     * `sessionId` can contain many runs (hence `sessionTaskIds`), while
+     * `Cascade.run()` mints a fresh random `taskId` per run — and it is the
+     * taskId that tools see as `ToolExecuteOptions.sessionId`. Passing only the
+     * chat id meant browser cleanup keyed on the task id matched nothing, so a
+     * finished run kept its Stop banner armed and held its browser lease until
+     * the deadlock ceiling.
+     */
+    private runEndedHook?;
+    onRunEnded(hook: (ids: {
+        sessionId: string;
+        taskId?: string;
+    }) => void): void;
     start(): Promise<void>;
     stop(): Promise<void>;
     getSocket(): DashboardSocket;
@@ -7579,4 +7830,4 @@ declare function gatherSyncBundle(config: CascadeConfig): SyncBundle;
 /** Merge a pulled bundle into a config, returning the updated config to persist. */
 declare function applySyncBundle(bundle: SyncBundle, config: CascadeConfig, cleanup?: RetiredProviderCleanup): CascadeConfig;
 
-export { AZURE_BASE_MODELS, AZURE_BASE_URL_TEMPLATE, type AcceptanceOptions, type AcceptanceProbe, type AcceptanceResult, type AcceptanceVerdict, type ApprovalRequest, type ApprovalResponse, type AuditEntry, AuditLogger, type AzureDeploymentInput, type BenchmarksConfig, type Block, type BudgetConfig, CASCADE_AUDIT_FILE, CASCADE_CONFIG_DIR, CASCADE_CONFIG_FILE, CASCADE_DASHBOARD_SECRET_FILE, CASCADE_DB_FILE, CASCADE_IGNORE_FILE, CASCADE_KEYSTORE_FILE, CASCADE_MD_FILE, CASCADE_VERSION, CHARS_PER_TOKEN, COMPLEXITY_T2_COUNT, Cascade, CascadeCancelledError, type CascadeConfig, CascadeConfigSchema, type CascadeEvent, type CascadeEventType, CascadeIgnore, type CascadeMessage, CascadeRouter, type CascadeRunOptions, type CascadeRunResult, type CascadeThemeName, CascadeToolError, type ChartSeries, type ChartSpec, type Chunk, type ChunkOptions, CloudClient, type CloudConversation, type CloudMessage, type CloudSession, type CloudSessionStore, type CloudTurnInput, type CloudUser, type CodeChunkOptions, type CodeChunker, CodeSearchTool, type CompileTaskGraphOptions, type CompiledTaskGraph, type CompleteFn, type CompletedNode, ConfigManager, type ConversationMessage, type CredentialDisposition, type CredentialEndpoint, type CredentialWriteOutcome, type CurrentPageProvider, type CurrentPageSnapshot, CurrentPageTool, DEFAULT_API_PORT, DEFAULT_APPROVAL_REQUIRED, DEFAULT_AUTO_SUMMARIZE_AT, DEFAULT_CLOUD_URL, DEFAULT_CONTEXT_LIMIT, DEFAULT_DASHBOARD_PORT, DEFAULT_MAX_SESSION_MESSAGES, DEFAULT_RETENTION_DAYS, DEFAULT_THEME, DOCUMENT_MIME, type DashboardConfig, DashboardServer, DependencyScheduler, type DeviceStart, type DiscoveredMcpTool, type DistilledFact, type ChartKind as DocumentChartKind, type DocumentFormat, type Embedder, type EncryptedBlob, type EscalationDecision, type EscalationPayload, type ExtendedContextConfig, type FileManifest, FileMcpOAuthStore, GLOBAL_CONFIG_DIR, GLOBAL_CREDENTIALS_FILE, GLOBAL_DB_FILE, GLOBAL_KEYSTORE_FILE, GLOBAL_RUNTIME_DB_FILE, GenerateDocumentTool, type GenerateOptions, type GenerateResult, type GraphFactSource, GraphRetriever, type GraphSearchOptions, GraphSearchTool, type HookDefinition, type HooksConfig, HooksRunner, type Identity, type ImageAttachment, type ImageByteLoader, type ImageInfo, type ImageRef, type InlineRun, Keystore, LLMReranker, LM_STUDIO_BASE_URL, type LegacyThemeName, type LoadedImage, MAX_PAGE_TEXT_CHARS, MCP_TOOL_PREFIX, MODELS, type ManifestDiff, McpClient, type McpDiscoveryResult, McpOAuthProvider, type McpOAuthState, type McpOAuthStore, type McpServerConfig$1 as McpServerConfig, type McpServerRename, type MemoryConfig, MemoryStore, type Message, type MessageContent, type MessagePayload, type MessageStatus, type MessageType, type ModelInfo, type ModelOverrides, type NativeProvider, OLLAMA_BASE_URL, OpenAICompatibleEmbedder, type OpenAIEmbedderOptions, PROVIDER_DISPLAY_NAMES, type PeerMessage, type PeerMessageEvent, type PeerSyncPayload, type PeerSyncType, type PermissionDecision, type PermissionDecisionPayload, type PermissionRequest, type PermissionTrailEntry, type PlanReviewConfig, type ProviderConfig, type ProviderType, RESUME_SCHEMA_VERSION, type RankedFact, type RefreshResult, type RenderOptions, type Reranker, type ResumeCheckpoint, type ResumeReason, ResumeStore, type ResumeStoreOptions, type RetrievalContext, type RetrievalMode, type RetrievalPlan, Retriever, type RetrieverSearchOptions, type RuntimeNode, type RuntimeNodeLog, type RuntimeRefreshPayload, type RuntimeScope, type RuntimeSession, type RuntimeSnapshotPayload, type ScheduledTask, type SchedulerExecutionMode, type SchedulerHooks, type SchedulerOptions, type SchedulerResult, type ScoredChunk, type SearchOptions, type Session, type SessionCheckpoint, type SessionMetadata, type SessionSubscriptionPayload, type SettingsCommitResult, type SettingsCredentialResult, type SettingsPayload, type SettingsSnapshot, type Slide, SqliteVectorStore, type StatusUpdate, type StoredMessage, type StreamChunk, type SyncBundle, T1Administrator, type T1ToT2Assignment, T1_MODEL_PRIORITY, T2Manager, type T2Result, type T2ToT3Assignment, T2_MODEL_PRIORITY, type T3Result, type T3ResultPayload, type T3SubtaskSpec, T3Worker, T3_MODEL_PRIORITY, THEME_NAMES, TOOL_NAMES, type TaskComplexity, type TaskGraph, type TaskGraphInputNode, type TaskGraphIssue, type TaskGraphIssueCode, type TaskGraphNode, type TaskGraphNodeKind, TaskGraphValidationError, type TaskGraphValidationMode, TaskScheduler, type TaskType, Telemetry, type TelemetryConfig, type Theme, type ThemeColors, type ThemeName, type TierConfig, type TierLimits, type TierRole, type TierStatus, type TokenUsage, type ToolCall, type ToolDefinition, type ToolExecuteOptions, ToolRegistry, type ToolResult, type ToolsConfig, VISION_MODEL_PRIORITY, type VectorStore, type WebSearchConfig, type WebhookConfig, type WorkspaceConfig, type WorkspaceFileReader, WorkspaceIndex, type WorkspaceIndexOptions, applyEndpointEdit, applyProviderApiKey, applyProviderCredential, applySettingsCredentials, applySettingsPayload, applySyncBundle, azureModelForDeployment, beginMcpOAuth, buildDocumentTools, buildManifest, buildSessionTranscript, bytesToBase64, cagCharBudget, chartKind, chartToTableRows, chatCompleterFromProviders, chunkCode, chunkText, commitSettings, compileSectionGraph, compileSubtaskGraph, compileTaskGraph, completeMcpOAuth, connectMcpWithLoopbackOAuth, createCascade, credentialDispositionForEdit, credentialEndpointIdentity, decryptJSON as decryptSyncBlob, diffManifest, disambiguateMcpServerNames, discoverMcpAuthServer, discoverMcpTools, distillSessionFacts, embedderFromProviders, encryptJSON as encryptSyncBlob, endpointFromSettingsPayload, evaluateAcceptance, explainRefusal, extractCharts, failures, fileExt, fileOAuthProvider, gatherSyncBundle, hasDefaultEndpoint, hasProviderCredential, hasUsableProvider, hashContent, heuristicCodeChunker, inferAzureBaseModel, inlineRuns, isDocumentFormat, isMcpToolName, matchImageLine, mcpServerPrefix, mcpToolName, nodeHttpFetch, normalizeEndpoint, parseBlocks, parseChartSpec, parseDelimited, parseRankOrder, parseSlide, planRetrieval, preferIpv4Host, priorAzureRow, reciprocalRankFusion, refreshMcpToken, removeMcpServerDenials, renderDocument, renderDocx, renderPptx, renderXlsx, runCascade, sameAzureEndpoint, sameCredentialEndpoint, sameEndpoint, sessionWorthRemembering, settingsSnapshot, sniffImage, splitSlides, streamCascade, stripInline, summarizeCompleted, undecided, uniqueMcpServerName };
+export { AZURE_BASE_MODELS, AZURE_BASE_URL_TEMPLATE, type AcceptanceOptions, type AcceptanceProbe, type AcceptanceResult, type AcceptanceVerdict, type ApprovalRequest, type ApprovalResponse, type AuditEntry, AuditLogger, type AzureDeploymentInput, type BenchmarksConfig, type Block, type BrowserAction, type BrowserActionOutcome, BrowserControlTool, type BrowserController, type BudgetConfig, CASCADE_AUDIT_FILE, CASCADE_CONFIG_DIR, CASCADE_CONFIG_FILE, CASCADE_DASHBOARD_SECRET_FILE, CASCADE_DB_FILE, CASCADE_IGNORE_FILE, CASCADE_KEYSTORE_FILE, CASCADE_MD_FILE, CASCADE_VERSION, CHARS_PER_TOKEN, COMPLEXITY_T2_COUNT, Cascade, CascadeCancelledError, type CascadeConfig, CascadeConfigSchema, type CascadeEvent, type CascadeEventType, CascadeIgnore, type CascadeMessage, CascadeRouter, type CascadeRunOptions, type CascadeRunResult, type CascadeThemeName, CascadeToolError, type ChartSeries, type ChartSpec, type Chunk, type ChunkOptions, CloudClient, type CloudConversation, type CloudMessage, type CloudSession, type CloudSessionStore, type CloudTurnInput, type CloudUser, type CodeChunkOptions, type CodeChunker, CodeSearchTool, type CompileTaskGraphOptions, type CompiledTaskGraph, type CompleteFn, type CompletedNode, ConfigManager, type ConversationMessage, type CredentialDisposition, type CredentialEndpoint, type CredentialWriteOutcome, type CurrentPageProvider, type CurrentPageSnapshot, CurrentPageTool, DEFAULT_API_PORT, DEFAULT_APPROVAL_REQUIRED, DEFAULT_AUTO_SUMMARIZE_AT, DEFAULT_CLOUD_URL, DEFAULT_CONTEXT_LIMIT, DEFAULT_DASHBOARD_PORT, DEFAULT_MAX_SESSION_MESSAGES, DEFAULT_RETENTION_DAYS, DEFAULT_THEME, DOCUMENT_MIME, type DashboardConfig, DashboardServer, DependencyScheduler, type DeviceStart, type DiscoveredMcpTool, type DistilledFact, type ChartKind as DocumentChartKind, type DocumentFormat, type Embedder, type EncryptedBlob, type EscalationDecision, type EscalationPayload, type ExtendedContextConfig, type FileManifest, FileMcpOAuthStore, GLOBAL_CONFIG_DIR, GLOBAL_CREDENTIALS_FILE, GLOBAL_DB_FILE, GLOBAL_KEYSTORE_FILE, GLOBAL_RUNTIME_DB_FILE, GenerateDocumentTool, type GenerateOptions, type GenerateResult, type GraphFactSource, GraphRetriever, type GraphSearchOptions, GraphSearchTool, type HookDefinition, type HooksConfig, HooksRunner, type Identity, type ImageAttachment, type ImageByteLoader, type ImageInfo, type ImageRef, type InlineRun, Keystore, LLMReranker, LM_STUDIO_BASE_URL, type LegacyThemeName, type LoadedImage, MAX_PAGE_TEXT_CHARS, MCP_TOOL_PREFIX, MODELS, type ManifestDiff, McpClient, type McpDiscoveryResult, McpOAuthProvider, type McpOAuthState, type McpOAuthStore, type McpServerConfig$1 as McpServerConfig, type McpServerRename, type MemoryConfig, MemoryStore, type Message, type MessageContent, type MessagePayload, type MessageStatus, type MessageType, type ModelInfo, type ModelOverrides, type NativeProvider, OLLAMA_BASE_URL, OpenAICompatibleEmbedder, type OpenAIEmbedderOptions, PROVIDER_DISPLAY_NAMES, type PeerMessage, type PeerMessageEvent, type PeerSyncPayload, type PeerSyncType, type PermissionDecision, type PermissionDecisionPayload, type PermissionRequest, type PermissionTrailEntry, type PlanReviewConfig, type ProviderConfig, type ProviderType, RESUME_SCHEMA_VERSION, type RankedFact, type RefreshResult, type RenderOptions, type Reranker, type ResumeCheckpoint, type ResumeReason, ResumeStore, type ResumeStoreOptions, type RetrievalContext, type RetrievalMode, type RetrievalPlan, Retriever, type RetrieverSearchOptions, type RuntimeNode, type RuntimeNodeLog, type RuntimeRefreshPayload, type RuntimeScope, type RuntimeSession, type RuntimeSnapshotPayload, type ScheduledTask, type SchedulerExecutionMode, type SchedulerHooks, type SchedulerOptions, type SchedulerResult, type ScoredChunk, type SearchOptions, type Session, type SessionCheckpoint, type SessionMetadata, type SessionSubscriptionPayload, type SettingsCommitResult, type SettingsCredentialResult, type SettingsPayload, type SettingsSnapshot, type Slide, SqliteVectorStore, type StatusUpdate, type StoredMessage, type StreamChunk, type SyncBundle, T1Administrator, type T1ToT2Assignment, T1_MODEL_PRIORITY, T2Manager, type T2Result, type T2ToT3Assignment, T2_MODEL_PRIORITY, type T3Result, type T3ResultPayload, type T3SubtaskSpec, T3Worker, T3_MODEL_PRIORITY, THEME_NAMES, TOOL_NAMES, type TaskComplexity, type TaskGraph, type TaskGraphInputNode, type TaskGraphIssue, type TaskGraphIssueCode, type TaskGraphNode, type TaskGraphNodeKind, TaskGraphValidationError, type TaskGraphValidationMode, TaskScheduler, type TaskType, Telemetry, type TelemetryConfig, type Theme, type ThemeColors, type ThemeName, type TierConfig, type TierLimits, type TierRole, type TierStatus, type TokenUsage, type ToolCall, type ToolDefinition, type ToolExecuteOptions, ToolRegistry, type ToolResult, type ToolsConfig, VISION_MODEL_PRIORITY, type VectorStore, type WebSearchConfig, type WebhookConfig, type WorkspaceConfig, type WorkspaceFileReader, WorkspaceIndex, type WorkspaceIndexOptions, applyEndpointEdit, applyProviderApiKey, applyProviderCredential, applySettingsCredentials, applySettingsPayload, applySyncBundle, azureModelForDeployment, beginMcpOAuth, buildDocumentTools, buildManifest, buildSessionTranscript, bytesToBase64, cagCharBudget, chartKind, chartToTableRows, chatCompleterFromProviders, chunkCode, chunkText, commitSettings, compileSectionGraph, compileSubtaskGraph, compileTaskGraph, completeMcpOAuth, connectMcpWithLoopbackOAuth, createCascade, credentialDispositionForEdit, credentialEndpointIdentity, decryptJSON as decryptSyncBlob, diffManifest, disambiguateMcpServerNames, discoverMcpAuthServer, discoverMcpTools, distillSessionFacts, embedderFromProviders, encryptJSON as encryptSyncBlob, endpointFromSettingsPayload, evaluateAcceptance, explainRefusal, extractCharts, failures, fileExt, fileOAuthProvider, gatherSyncBundle, hasDefaultEndpoint, hasProviderCredential, hasUsableProvider, hashContent, heuristicCodeChunker, inferAzureBaseModel, inlineRuns, isDocumentFormat, isMcpToolName, matchImageLine, mcpServerPrefix, mcpToolName, nodeHttpFetch, normalizeEndpoint, parseBlocks, parseChartSpec, parseDelimited, parseRankOrder, parseSlide, planRetrieval, preferIpv4Host, priorAzureRow, reciprocalRankFusion, refreshMcpToken, removeMcpServerDenials, renderDocument, renderDocx, renderPptx, renderXlsx, runCascade, sameAzureEndpoint, sameCredentialEndpoint, sameEndpoint, sessionWorthRemembering, settingsSnapshot, sniffImage, splitSlides, streamCascade, stripInline, summarizeCompleted, undecided, uniqueMcpServerName };