cascade-ai 0.80.0 → 0.81.0

package/dist/index.d.cts

@@ -1020,7 +1020,7 @@ interface ThemeColors {
     t2Color: string;
     t3Color: string;
 }
-type CascadeEventType = 'task:start' | 'task:complete' | 'task:error' | 'tier:status' | 'tier:result' | 'tier:root' | 'stream:token' | 'stream:done' | 'tool:approval-request' | 'tool:approval-response' | 'tool:execute' | 'tool:result' | 'tool:call' | 'cost:update' | 'session:save' | 'escalation' | 'peer:sync' | 'peer:message' | 'plan' | 'log' | 'run:cancelled' | 'budget:warning' | 'budget:exceeded' | 'permission:user-required' | 'mcp:approval-required' | 'plan:approval-required' | 'context:approval-required' | 'context:compacted';
+type CascadeEventType = 'task:start' | 'task:complete' | 'task:error' | 'tier:status' | 'tier:result' | 'tier:root' | 'stream:token' | 'stream:done' | 'tool:approval-request' | 'tool:approval-response' | 'tool:execute' | 'tool:result' | 'tool:call' | 'cost:update' | 'session:save' | 'escalation' | 'peer:sync' | 'peer:message' | 'plan' | 'log' | 'run:cancelled' | 'budget:warning' | 'budget:exceeded' | 'permission:user-required' | 'mcp:approval-required' | 'plan:approval-required' | 'context:approval-required' | 'context:approval-closed' | 'context:compacted';
 interface CascadeEvent<T = unknown> {
     type: CascadeEventType;
     taskId?: string;
@@ -3333,6 +3333,78 @@ declare class BrowserControlTool extends BaseTool {
     execute(input: Record<string, unknown>, options: ToolExecuteOptions): Promise<string>;
 }
 
+/** One thing the model needs to know before it can act. */
+interface ClarificationQuestion {
+    /** Assigned here, never by the model: two questions with one id lose an answer. */
+    id: string;
+    prompt: string;
+    /** `choice` picks one, `multi` picks any, `text` is free-form. */
+    kind: 'choice' | 'multi' | 'text';
+    /** Required for `choice` and `multi`; meaningless for `text`. */
+    options?: string[];
+}
+interface ClarificationAnswer {
+    id: string;
+    /** One option, several, or typed text — matching the question's `kind`. */
+    value: string | string[];
+}
+/**
+ * Why a questionnaire came back empty.
+ *
+ * Distinguished because they mean different things to a reader of the
+ * transcript: nobody was there to ask, the person was asked and did not
+ * answer, or the run ended underneath the question.
+ */
+type ClarificationOutcome = 'answered' | 'no-listener' | 'timeout' | 'aborted';
+interface ClarificationResult {
+    outcome: ClarificationOutcome;
+    answers: ClarificationAnswer[];
+}
+/** What the host does with a questionnaire. Supplied by `Cascade`. */
+type ClarificationAsker = (questions: ClarificationQuestion[], signal: AbortSignal | undefined) => Promise<ClarificationResult>;
+declare class AskUserTool extends BaseTool {
+    readonly name = "ask_user";
+    readonly description: string;
+    readonly inputSchema: {
+        type: string;
+        properties: {
+            questions: {
+                type: string;
+                minItems: number;
+                maxItems: number;
+                description: string;
+                items: {
+                    type: string;
+                    properties: {
+                        prompt: {
+                            type: string;
+                            description: string;
+                        };
+                        kind: {
+                            type: string;
+                            enum: string[];
+                            description: string;
+                        };
+                        options: {
+                            type: string;
+                            items: {
+                                type: string;
+                            };
+                            description: string;
+                        };
+                    };
+                    required: string[];
+                };
+            };
+        };
+        required: string[];
+    };
+    private ask;
+    constructor(ask: ClarificationAsker);
+    isDangerous(): boolean;
+    execute(input: Record<string, unknown>, options: ToolExecuteOptions): Promise<string>;
+}
+
 /** One entry in the per-run orchestration decision trail (see /why). */
 interface DecisionLogEntry {
     at: string;
@@ -3427,6 +3499,77 @@ declare class Cascade extends EventEmitter {
     private pendingPlanApproval?;
     private requestPlanApproval;
     private pendingEscalations;
+    /**
+     * Questionnaires waiting on a person, keyed by request id.
+     *
+     * Exactly the shape `pendingEscalations` uses, and for the same reason: the
+     * answer, the timeout and the abort all race, and one settle path guarded by
+     * the map delete is what makes the first of them win.
+     */
+    private pendingClarifications;
+    /**
+     * Put a gate's opening question to its listeners, and NOTICE when one fails.
+     *
+     * `emit` cannot do this job. It calls listeners synchronously and discards
+     * what they return, so an `async` listener — the ordinary shape for anything
+     * that has to reach a socket or a UI — does not fail in a way `emit` reports:
+     * it returns a REJECTED PROMISE that nobody is holding. The `try` around the
+     * emit sees nothing, the gate is never told delivery failed, and it parks for
+     * its full timeout while Node raises an unhandled rejection that can take the
+     * process down.
+     *
+     * `onFailed` is called for either shape, and it is safe to call more than
+     * once: both gates route it to `settle`, which is guarded by a map delete, so
+     * the first failure wins and the rest are no-ops.
+     *
+     * PER LISTENER, not around the loop. `emit` stops dispatching at the first
+     * throw, so one broken host used to cost a working one its notification —
+     * the same reason `announceLiveView` delivers its two listeners separately.
+     * A synchronous failure settles the gate once the whole snapshot has been
+     * delivered; an asynchronous one settles it when the rejection arrives, which
+     * is still far better than the window-long park it replaces.
+     *
+     * SETTLED AFTER THE LOOP, not inside it, and that is not tidiness. `onFailed`
+     * settles the gate, and settling emits the gate's CLOSURE — so failing
+     * mid-dispatch announced "this request is over" and then went on handing the
+     * OPENING event to the listeners after it. A host later in the list would
+     * draw a form whose only closure notification had already gone past, and it
+     * would stand there forever. Deliver to everyone, then decide.
+     *
+     * `rawListeners`, NOT `listeners`. Bypassing `emit` means taking on what
+     * `emit` was doing, and `once` is the part that bites: `listeners()` hands
+     * back the UNWRAPPED callback, so calling it never runs the wrapper that
+     * deregisters it. A host that asked to be told once would be told every
+     * time — and told through a transport it had set up for one gate only.
+     * `rawListeners()` returns the wrapper, which removes the registration and
+     * passes the underlying listener's return value straight through, so the
+     * promise below is still the one being observed. Verified against Node.
+     *
+     * `.call(this, …)`, which is the third thing `emit` was doing. EventEmitter
+     * invokes listeners with the emitter as the receiver, so
+     * `function () { this.resolveClarification(...) }` is a legitimate host — and
+     * calling it bare gave it `this === undefined`, which throws, which this
+     * would then have read as the host failing to receive the question and
+     * settled the gate unanswered. A working listener turned into a delivery
+     * failure by the thing delivering it.
+     */
+    private deliverGate;
+    /**
+     * Tell listeners something that is over, and let none of them make it worse.
+     *
+     * The closing half of the gate family — `clarification:closed`,
+     * `clarification:timeout`, `escalation:closed`, `escalation:timeout`. Each
+     * was already wrapped in a `try` for the synchronous case, and each had the
+     * same hole `deliverGate` had before last round: `emit` discards what a
+     * listener returns, so an `async` host fails by returning a rejected promise
+     * nobody is holding and Node raises an unhandled rejection.
+     *
+     * There is nothing to settle here — the gate is already closed, which is the
+     * whole message — so unlike `deliverGate` this reports to no one. It exists
+     * so that the four informational emits cannot take the process down, and so
+     * the rule is written once rather than four times.
+     */
+    private announceGateClosed;
     private requestEscalationDecision;
     /**
      * Resolve a pending escalation from a REPL / dashboard / cloud listener.
@@ -3452,6 +3595,27 @@ declare class Cascade extends EventEmitter {
      * reviewing and accepting that section's output.
      */
     private releasePendingEscalations;
+    /**
+     * Put a questionnaire to whoever is watching, if anybody is.
+     *
+     * Returns `no-listener` rather than waiting when there is nothing attached to
+     * answer — a scheduled run, an API caller with no socket, an autonomous run
+     * that has already said it wants no prompts. That check is the whole reason
+     * this can be offered to the model at all: a tool that might hang a headless
+     * run forever is a tool that cannot be registered.
+     */
+    askUser(questions: ClarificationQuestion[], signal?: AbortSignal): Promise<ClarificationResult>;
+    /**
+     * Answer a questionnaire from a REPL / dashboard / cloud listener.
+     *
+     * `requestId` comes back on the `clarification:required` event and is what
+     * makes an answer land on the question that asked. Optional for a host with
+     * only one in flight, matching `resolveEscalation`: without it the oldest
+     * outstanding request is answered, which is correct whenever there is one.
+     */
+    resolveClarification(answers: ClarificationAnswer[], requestId?: string): void;
+    /** Release every parked questionnaire — run teardown, so none outlive the run. */
+    private releasePendingClarifications;
     /**
      * Resolve a pending boardroom plan approval from a REPL / dashboard listener.
      * An optional `note` re-plans and re-asks; an optional `editedPlan` is applied
@@ -3572,6 +3736,29 @@ declare class Cascade extends EventEmitter {
      * and not the other is silent on the surface that missed it.
      */
     private registerBrowserControl;
+    /**
+     * Declare that this host can put a questionnaire to a person and answer it.
+     *
+     * Explicit, and NOT done at construction, because registering a tool is a
+     * promise the host has to keep. A host that registers `ask_user` without
+     * listening for `clarification:required` gives the model a tool that always
+     * answers "there is nobody watching this run" — while a person sits at the
+     * terminal looking at it. That is worse than not offering the tool at all:
+     * it costs a round trip and then tells the model something false.
+     *
+     * Only `cloud/server` bridges the protocol today. The CLI REPL and the
+     * dashboard do not, so they do not call this, and their models are not shown
+     * a capability nobody can serve. Wiring either of them is a matter of
+     * listening for the event and calling `resolveClarification`, then calling
+     * this.
+     *
+     * Still gated on the same conditions as the call itself, and `askUser`
+     * re-checks them: `setUnattended` can land after this, so the tool can be
+     * registered for a run that later turns out to have nobody on it. Then it
+     * answers `no-listener` and the model proceeds on its own reading, which is
+     * the same defence-in-depth `BrowserControlTool.revoke` provides.
+     */
+    enableClarification(): void;
     private registerMediaTools;
     /**
      * Register `generate_document` where there is a real workspace to write into.
@@ -6835,6 +7022,21 @@ interface RemoteBrowserSession {
      * than the one that owns the run.
      */
     liveViewUrl?: string;
+    /**
+     * How long the provider will keep this session before reaping it, in ms.
+     *
+     * Reported by the provider, never chosen by us: Steel's create API accepts
+     * no timeout field (verified against the API source — see steel.ts), so this
+     * ceiling is the provider's and the only thing we can do about it is know
+     * what it is. Absent where a provider says nothing, which includes a bare
+     * CDP endpoint: that browser is somebody else's and has no session at all.
+     *
+     * Worth surfacing because a session that outlives its usefulness dies at
+     * exactly this number, and a leak is otherwise indistinguishable from a
+     * deliberate shutdown — two field sessions ended at precisely 0:05:00 with
+     * nothing anywhere recording that five minutes was the limit.
+     */
+    expiresInMs?: number;
 }
 /**
  * Somewhere to get a browser from.
@@ -6978,8 +7180,32 @@ interface RemoteBrowserControllerOptions {
      * a wave of workers each opening their own is a cost nobody chose.
      */
     maxSessions?: number;
-    /** Told when a run's live view becomes available, so the owner can watch. */
-    onLiveView?: (runId: string, liveViewUrl: string | undefined) => void;
+    /**
+     * Told when a run's live view becomes available, so the owner can watch.
+     *
+     * `void | Promise<void>`, like `onReleaseFailed` below and for the same
+     * reason: an async sink is the ordinary shape, TypeScript accepts one
+     * wherever a `void` return is declared, and a signature promising `void`
+     * tells an embedder their rejection is somebody's problem when it is
+     * nobody's. `announceLiveView` observes it.
+     */
+    onLiveView?: (runId: string, liveViewUrl: string | undefined) => void | Promise<void>;
+    /**
+     * Told when a provider session could not be handed back.
+     *
+     * Release is best-effort by design — a run that has finished must not be
+     * reported as failed because the provider was briefly unreachable — but
+     * best-effort is not the same as unobservable. A release that silently did
+     * not happen leaves a billed browser running until the provider's own
+     * timeout collects it, and without this there is no way to tell that from a
+     * clean handback.
+     */
+    /**
+     * `void | Promise<void>`: an async sink is the ordinary shape for telemetry,
+     * and a signature promising `void` tells an embedder their rejection is
+     * somebody's problem when it is nobody's. `reportReleaseFailure` observes it.
+     */
+    onReleaseFailed?: (runId: string, sessionId: string, err: unknown, expiresInMs?: number) => void | Promise<void>;
     /**
      * Something that must finish before this controller may open anything.
      *
@@ -7025,6 +7251,34 @@ declare class RemoteBrowserController {
     private controlAnnounced;
     /** An embedder that wants every run's live view, told which run each is. */
     private onLiveViewAll;
+    /** Told when a provider session could not be handed back. See `disposeRun`. */
+    private onReleaseFailed;
+    /**
+     * Tell the observer a session leaked, without letting it become the leak.
+     *
+     * Guarded, because this runs inside a `.catch` on the release: an observer
+     * that throws — a logging or telemetry sink that is momentarily unavailable
+     * is the ordinary case — would turn its own failure into a fresh rejection
+     * from `disposeRun`, so `endRun` would reject before `forgetRun` and the
+     * fire-and-forget `stopRun` path would raise an unhandled rejection.
+     *
+     * That is precisely the guarantee this whole change claims to preserve: a
+     * release that fails must never fail the run. Reporting it cannot be the
+     * thing that breaks it.
+     *
+     * TWO WAYS TO FAIL, not one. The `try` catches a synchronous throw; an
+     * `async` sink — which is what a telemetry or logging callback usually is —
+     * fails by returning a REJECTED PROMISE, which no `try` around a call that is
+     * never awaited can see. Node then raises an unhandled rejection and can take
+     * the process down: the observer would not merely have failed to report the
+     * leak, it would have killed the run, which is the one outcome this function
+     * exists to prevent, reached through the door the guard did not cover.
+     *
+     * Not awaited, though. The caller is a `.catch` on the release and is not
+     * going to wait for a telemetry round trip; attaching a handler is what makes
+     * the rejection observed, which is the whole requirement.
+     */
+    private reportReleaseFailure;
     private runs;
     /**
      * Runs that have a pool slot but no browser yet.
@@ -7106,9 +7360,9 @@ declare class RemoteBrowserController {
     /** The controller to hand to `Cascade.setBrowserController`. */
     get controller(): (action: BrowserAction, context: BrowserActionContext) => Promise<BrowserActionOutcome>;
     /** Watch one run's browser. The URL never goes to any other run's listener. */
-    onLiveViewFor(runKey: string, listener: (info: BrowserViewInfo) => void): void;
+    onLiveViewFor(runKey: string, listener: (info: BrowserViewInfo) => void | Promise<void>): void;
     offLiveViewFor(runKey: string): void;
-    onControlFor(runKey: string, listener: (state: BrowserControlState) => void): void;
+    onControlFor(runKey: string, listener: (state: BrowserControlState) => void | Promise<void>): void;
     offControlFor(runKey: string): void;
     /**
      * Say who has the browser, but only when the answer has changed.
@@ -7164,7 +7418,7 @@ declare class RemoteBrowserController {
      * it is already being watched. Callers use that to avoid promising a viewer
      * a stream that will never arrive.
      */
-    startWatching(runId: string, onFrame: (frame: BrowserFrame) => void): Promise<boolean>;
+    startWatching(runId: string, onFrame: (frame: BrowserFrame) => void | Promise<void>): Promise<boolean>;
     /**
      * Run one watch or unwatch after every one already asked for.
      *
@@ -7410,6 +7664,73 @@ declare class GenericCdpProvider implements RemoteBrowserProvider {
  */
 declare function isCdpEndpoint(url: string): boolean;
 
+/**
+ * Whether this configuration will end up talking to Steel's hosted API.
+ *
+ * Lives HERE, next to the default it has to agree with, rather than in the
+ * caller that needs the answer. The hosted endpoint requires a credential and a
+ * self-hosted one usually does not, so something has to decide which a given
+ * config is — and a server-side copy of that decision is a second definition of
+ * "hosted" free to drift from the one that actually picks the URL.
+ *
+ * Several configs reach the hosted API and they do not look alike: no url at
+ * all, an empty one (`opts.url || DEFAULT_BASE` takes the default for both),
+ * the hosted host typed out in full, and the fully-qualified spelling with a
+ * terminal dot. Asking about the RESOLVED destination answers all of them at
+ * once, which asking about the presence of `url` cannot.
+ *
+ * Compared by host key, so a trailing slash, a port, a path, a different scheme,
+ * a different case or a root dot cannot disguise it. A URL this cannot parse is
+ * not the hosted API — and is refused earlier anyway, for being unparseable.
+ */
+declare function isHostedSteel(url?: string): boolean;
+/**
+ * Whether this can serve as the API base — asked of the URL ACTUALLY BUILT.
+ *
+ * Six rounds of review found six ways a base could look fine and not work:
+ * a wrong host, a terminal dot, a query string, userinfo, a path prefix on the
+ * hosted service, doubled trailing slashes. Each was answered by inspecting one
+ * more component, and a seventh arrived that no component exposes — a bare `?`
+ * or `#` leaves `search` and `hash` EMPTY while `href` keeps the delimiter, so
+ * `${base}/v1/sessions` becomes `...?/v1/sessions` and the POST lands on `/`.
+ *
+ * So this stopped adding conditions and started asking the only question that
+ * was ever the real one: build the request `call()` will build, and see whether
+ * it addresses the endpoint. A spelling nobody has thought of yet fails this by
+ * construction rather than by being enumerated.
+ */
+declare function isUsableSteelBase(url: string): boolean;
+/**
+ * Whether this credential can actually be SENT.
+ *
+ * The env schema trims, which removes surrounding whitespace and nothing else,
+ * so a key pasted out of a wrapped terminal or a here-doc can carry an embedded
+ * newline. It is truthy, so the hosted gate reads the deployment as
+ * authenticated and `/api/config` advertises Browser mode — and then `fetch`
+ * refuses the header before a byte is sent, leaving a control that cannot make
+ * one call. The third member of the category `fetch` refuses before sending,
+ * after userinfo and blocked ports.
+ *
+ * CONSTRUCTING A HEADER IS NOT SENDING ONE, and the first version of this asked
+ * the wrong one of those two questions. It built a `Headers` and trusted the
+ * result — but `Headers` (and `Request`) accept DEL and every C0 control except
+ * CR, LF and NUL, while the SEND path refuses them, so a key containing `\x7f`
+ * was advertised as usable and then died as `invalid steel-api-key header`
+ * before DNS. The comment here stated that as verified fact; it had verified
+ * the constructor, which is a different thing.
+ *
+ * So this asks the send path's own rule — RFC 9110's field value: horizontal
+ * tab, printable ASCII, or a high byte — because no constructor asks it.
+ * Confirmed by probing every byte from 0x00 to 0xff through `fetch` itself:
+ * refused are 0x00-0x08, 0x0a-0x1f and 0x7f, and this predicate agrees with it
+ * on all 256. The test pins that set rather than describing it.
+ *
+ * A scan rather than a regex: the equivalent character class is linear, but
+ * this file already carries two loops written to avoid CodeQL's backtracking
+ * finding, and one idiom is easier to keep true than two. Code points above
+ * 0xff fail here and at `fetch`, which refuses them as un-ByteString-able.
+ */
+declare function isUsableSteelKey(apiKey: string): boolean;
 declare class SteelProvider implements RemoteBrowserProvider {
     readonly name = "Steel";
     readonly isolatesSessions = true;
@@ -8813,4 +9134,4 @@ declare function gatherSyncBundle(config: CascadeConfig): SyncBundle;
 /** Merge a pulled bundle into a config, returning the updated config to persist. */
 declare function applySyncBundle(bundle: SyncBundle, config: CascadeConfig, cleanup?: RetiredProviderCleanup): CascadeConfig;
 
-export { AZURE_BASE_MODELS, AZURE_BASE_URL_TEMPLATE, type AcceptanceOptions, type AcceptanceProbe, type AcceptanceResult, type AcceptanceVerdict, type ApprovalRequest, type ApprovalResponse, type AuditEntry, AuditLogger, type AzureDeploymentInput, type BenchmarksConfig, type Block, type BrowserAction, type BrowserActionOutcome, type BrowserControlState, BrowserControlTool, type BrowserController, type BrowserFrame, type BrowserInput, BrowserLease, type BudgetConfig, CASCADE_AUDIT_FILE, CASCADE_CONFIG_DIR, CASCADE_CONFIG_FILE, CASCADE_DASHBOARD_SECRET_FILE, CASCADE_DB_FILE, CASCADE_IGNORE_FILE, CASCADE_KEYSTORE_FILE, CASCADE_MD_FILE, CASCADE_VERSION, CHARS_PER_TOKEN, COMPLEXITY_T2_COUNT, Cascade, CascadeCancelledError, type CascadeConfig, CascadeConfigSchema, type CascadeEvent, type CascadeEventType, CascadeIgnore, type CascadeMessage, CascadeRouter, type CascadeRunOptions, type CascadeRunResult, type CascadeThemeName, CascadeToolError, type ChartSeries, type ChartSpec, type Chunk, type ChunkOptions, CloudClient, type CloudConversation, type CloudMessage, type CloudSession, type CloudSessionStore, type CloudTurnInput, type CloudUser, type CodeChunkOptions, type CodeChunker, CodeSearchTool, type CompileTaskGraphOptions, type CompiledTaskGraph, type CompleteFn, type CompletedNode, ConfigManager, type ConversationMessage, type CredentialDisposition, type CredentialEndpoint, type CredentialWriteOutcome, type CurrentPageProvider, type CurrentPageSnapshot, CurrentPageTool, DEFAULT_API_PORT, DEFAULT_APPROVAL_REQUIRED, DEFAULT_AUTO_SUMMARIZE_AT, DEFAULT_CLOUD_URL, DEFAULT_CONTEXT_LIMIT, DEFAULT_DASHBOARD_PORT, DEFAULT_MAX_SESSION_MESSAGES, DEFAULT_RETENTION_DAYS, DEFAULT_THEME, DOCUMENT_MIME, type DashboardConfig, DashboardServer, DependencyScheduler, type DeviceStart, type DiscoveredMcpTool, type DistilledFact, type ChartKind as DocumentChartKind, type DocumentFormat, type Embedder, type EncryptedBlob, type EscalationDecision, type EscalationPayload, type ExtendedContextConfig, type FileManifest, FileMcpOAuthStore, GLOBAL_CONFIG_DIR, GLOBAL_CREDENTIALS_FILE, GLOBAL_DB_FILE, GLOBAL_KEYSTORE_FILE, GLOBAL_RUNTIME_DB_FILE, GenerateDocumentTool, type GenerateOptions, type GenerateResult, GenericCdpProvider, type GraphFactSource, GraphRetriever, type GraphSearchOptions, GraphSearchTool, type HookDefinition, type HooksConfig, HooksRunner, type Identity, type ImageAttachment, type ImageByteLoader, type ImageInfo, type ImageRef, type InlineRun, Keystore, LLMReranker, LM_STUDIO_BASE_URL, type LegacyThemeName, type LoadedImage, MAX_PAGE_TEXT_CHARS, MCP_TOOL_PREFIX, MODELS, type ManifestDiff, McpClient, type McpDiscoveryResult, McpOAuthProvider, type McpOAuthState, type McpOAuthStore, type McpServerConfig$1 as McpServerConfig, type McpServerRename, type MemoryConfig, MemoryStore, type Message, type MessageContent, type MessagePayload, type MessageStatus, type MessageType, type ModelInfo, type ModelOverrides, type NativeProvider, OLLAMA_BASE_URL, OpenAICompatibleEmbedder, type OpenAIEmbedderOptions, PROVIDER_DISPLAY_NAMES, type PeerMessage, type PeerMessageEvent, type PeerSyncPayload, type PeerSyncType, type PermissionDecision, type PermissionDecisionPayload, type PermissionRequest, type PermissionTrailEntry, type PlanReviewConfig, type ProviderConfig, type ProviderType, RESUME_SCHEMA_VERSION, type RankedFact, type RefreshResult, type RemoteBrowserConfig, RemoteBrowserController, type RemoteBrowserProvider, type RemoteBrowserSession, type RenderOptions, type Reranker, type ResumeCheckpoint, type ResumeReason, ResumeStore, type ResumeStoreOptions, type RetrievalContext, type RetrievalMode, type RetrievalPlan, Retriever, type RetrieverSearchOptions, type RuntimeNode, type RuntimeNodeLog, type RuntimeRefreshPayload, type RuntimeScope, type RuntimeSession, type RuntimeSnapshotPayload, type ScheduledTask, type SchedulerExecutionMode, type SchedulerHooks, type SchedulerOptions, type SchedulerResult, type ScoredChunk, type SearchOptions, type Session, type SessionCheckpoint, type SessionMetadata, type SessionSubscriptionPayload, type SettingsCommitResult, type SettingsCredentialResult, type SettingsPayload, type SettingsSnapshot, type Slide, SqliteVectorStore, type StatusUpdate, SteelProvider, type StoredMessage, type StreamChunk, type SyncBundle, T1Administrator, type T1ToT2Assignment, T1_MODEL_PRIORITY, T2Manager, type T2Result, type T2ToT3Assignment, T2_MODEL_PRIORITY, type T3Result, type T3ResultPayload, type T3SubtaskSpec, T3Worker, T3_MODEL_PRIORITY, THEME_NAMES, TOOL_NAMES, type TaskComplexity, type TaskGraph, type TaskGraphInputNode, type TaskGraphIssue, type TaskGraphIssueCode, type TaskGraphNode, type TaskGraphNodeKind, TaskGraphValidationError, type TaskGraphValidationMode, TaskScheduler, type TaskType, Telemetry, type TelemetryConfig, type Theme, type ThemeColors, type ThemeName, type TierConfig, type TierLimits, type TierRole, type TierStatus, type TokenUsage, type ToolCall, type ToolDefinition, type ToolExecuteOptions, ToolRegistry, type ToolResult, type ToolsConfig, VISION_MODEL_PRIORITY, type VectorStore, type WebSearchConfig, type WebhookConfig, type WorkspaceConfig, type WorkspaceFileReader, WorkspaceIndex, type WorkspaceIndexOptions, applyEndpointEdit, applyProviderApiKey, applyProviderCredential, applySettingsCredentials, applySettingsPayload, applySyncBundle, azureModelForDeployment, beginMcpOAuth, buildDocumentTools, buildManifest, buildSessionTranscript, bytesToBase64, cagCharBudget, chartKind, chartToTableRows, chatCompleterFromProviders, chunkCode, chunkText, commitSettings, compileSectionGraph, compileSubtaskGraph, compileTaskGraph, completeMcpOAuth, connectMcpWithLoopbackOAuth, createCascade, credentialDispositionForEdit, credentialEndpointIdentity, decryptJSON as decryptSyncBlob, diffManifest, disambiguateMcpServerNames, discoverMcpAuthServer, discoverMcpTools, distillSessionFacts, embedderFromProviders, encryptJSON as encryptSyncBlob, endpointFromSettingsPayload, evaluateAcceptance, explainRefusal, extractCharts, failures, fileExt, fileOAuthProvider, gatherSyncBundle, hasDefaultEndpoint, hasProviderCredential, hasUsableProvider, hashContent, heuristicCodeChunker, inferAzureBaseModel, inlineRuns, isCdpEndpoint, isDocumentFormat, isMcpToolName, matchImageLine, mcpServerPrefix, mcpToolName, nodeHttpFetch, normalizeEndpoint, parseBlocks, parseChartSpec, parseDelimited, parseRankOrder, parseSlide, planRetrieval, preferIpv4Host, priorAzureRow, reciprocalRankFusion, refreshMcpToken, removeMcpServerDenials, renderDocument, renderDocx, renderPptx, renderXlsx, runCascade, sameAzureEndpoint, sameCredentialEndpoint, sameEndpoint, sessionWorthRemembering, settingsSnapshot, sniffImage, splitSlides, streamCascade, stripInline, summarizeCompleted, undecided, uniqueMcpServerName };
+export { AZURE_BASE_MODELS, AZURE_BASE_URL_TEMPLATE, type AcceptanceOptions, type AcceptanceProbe, type AcceptanceResult, type AcceptanceVerdict, type ApprovalRequest, type ApprovalResponse, AskUserTool, type AuditEntry, AuditLogger, type AzureDeploymentInput, type BenchmarksConfig, type Block, type BrowserAction, type BrowserActionOutcome, type BrowserControlState, BrowserControlTool, type BrowserController, type BrowserFrame, type BrowserInput, BrowserLease, type BudgetConfig, CASCADE_AUDIT_FILE, CASCADE_CONFIG_DIR, CASCADE_CONFIG_FILE, CASCADE_DASHBOARD_SECRET_FILE, CASCADE_DB_FILE, CASCADE_IGNORE_FILE, CASCADE_KEYSTORE_FILE, CASCADE_MD_FILE, CASCADE_VERSION, CHARS_PER_TOKEN, COMPLEXITY_T2_COUNT, Cascade, CascadeCancelledError, type CascadeConfig, CascadeConfigSchema, type CascadeEvent, type CascadeEventType, CascadeIgnore, type CascadeMessage, CascadeRouter, type CascadeRunOptions, type CascadeRunResult, type CascadeThemeName, CascadeToolError, type ChartSeries, type ChartSpec, type Chunk, type ChunkOptions, type ClarificationAnswer, type ClarificationOutcome, type ClarificationQuestion, type ClarificationResult, CloudClient, type CloudConversation, type CloudMessage, type CloudSession, type CloudSessionStore, type CloudTurnInput, type CloudUser, type CodeChunkOptions, type CodeChunker, CodeSearchTool, type CompileTaskGraphOptions, type CompiledTaskGraph, type CompleteFn, type CompletedNode, ConfigManager, type ConversationMessage, type CredentialDisposition, type CredentialEndpoint, type CredentialWriteOutcome, type CurrentPageProvider, type CurrentPageSnapshot, CurrentPageTool, DEFAULT_API_PORT, DEFAULT_APPROVAL_REQUIRED, DEFAULT_AUTO_SUMMARIZE_AT, DEFAULT_CLOUD_URL, DEFAULT_CONTEXT_LIMIT, DEFAULT_DASHBOARD_PORT, DEFAULT_MAX_SESSION_MESSAGES, DEFAULT_RETENTION_DAYS, DEFAULT_THEME, DOCUMENT_MIME, type DashboardConfig, DashboardServer, DependencyScheduler, type DeviceStart, type DiscoveredMcpTool, type DistilledFact, type ChartKind as DocumentChartKind, type DocumentFormat, type Embedder, type EncryptedBlob, type EscalationDecision, type EscalationPayload, type ExtendedContextConfig, type FileManifest, FileMcpOAuthStore, GLOBAL_CONFIG_DIR, GLOBAL_CREDENTIALS_FILE, GLOBAL_DB_FILE, GLOBAL_KEYSTORE_FILE, GLOBAL_RUNTIME_DB_FILE, GenerateDocumentTool, type GenerateOptions, type GenerateResult, GenericCdpProvider, type GraphFactSource, GraphRetriever, type GraphSearchOptions, GraphSearchTool, type HookDefinition, type HooksConfig, HooksRunner, type Identity, type ImageAttachment, type ImageByteLoader, type ImageInfo, type ImageRef, type InlineRun, Keystore, LLMReranker, LM_STUDIO_BASE_URL, type LegacyThemeName, type LoadedImage, MAX_PAGE_TEXT_CHARS, MCP_TOOL_PREFIX, MODELS, type ManifestDiff, McpClient, type McpDiscoveryResult, McpOAuthProvider, type McpOAuthState, type McpOAuthStore, type McpServerConfig$1 as McpServerConfig, type McpServerRename, type MemoryConfig, MemoryStore, type Message, type MessageContent, type MessagePayload, type MessageStatus, type MessageType, type ModelInfo, type ModelOverrides, type NativeProvider, OLLAMA_BASE_URL, OpenAICompatibleEmbedder, type OpenAIEmbedderOptions, PROVIDER_DISPLAY_NAMES, type PeerMessage, type PeerMessageEvent, type PeerSyncPayload, type PeerSyncType, type PermissionDecision, type PermissionDecisionPayload, type PermissionRequest, type PermissionTrailEntry, type PlanReviewConfig, type ProviderConfig, type ProviderType, RESUME_SCHEMA_VERSION, type RankedFact, type RefreshResult, type RemoteBrowserConfig, RemoteBrowserController, type RemoteBrowserProvider, type RemoteBrowserSession, type RenderOptions, type Reranker, type ResumeCheckpoint, type ResumeReason, ResumeStore, type ResumeStoreOptions, type RetrievalContext, type RetrievalMode, type RetrievalPlan, Retriever, type RetrieverSearchOptions, type RuntimeNode, type RuntimeNodeLog, type RuntimeRefreshPayload, type RuntimeScope, type RuntimeSession, type RuntimeSnapshotPayload, type ScheduledTask, type SchedulerExecutionMode, type SchedulerHooks, type SchedulerOptions, type SchedulerResult, type ScoredChunk, type SearchOptions, type Session, type SessionCheckpoint, type SessionMetadata, type SessionSubscriptionPayload, type SettingsCommitResult, type SettingsCredentialResult, type SettingsPayload, type SettingsSnapshot, type Slide, SqliteVectorStore, type StatusUpdate, SteelProvider, type StoredMessage, type StreamChunk, type SyncBundle, T1Administrator, type T1ToT2Assignment, T1_MODEL_PRIORITY, T2Manager, type T2Result, type T2ToT3Assignment, T2_MODEL_PRIORITY, type T3Result, type T3ResultPayload, type T3SubtaskSpec, T3Worker, T3_MODEL_PRIORITY, THEME_NAMES, TOOL_NAMES, type TaskComplexity, type TaskGraph, type TaskGraphInputNode, type TaskGraphIssue, type TaskGraphIssueCode, type TaskGraphNode, type TaskGraphNodeKind, TaskGraphValidationError, type TaskGraphValidationMode, TaskScheduler, type TaskType, Telemetry, type TelemetryConfig, type Theme, type ThemeColors, type ThemeName, type TierConfig, type TierLimits, type TierRole, type TierStatus, type TokenUsage, type ToolCall, type ToolDefinition, type ToolExecuteOptions, ToolRegistry, type ToolResult, type ToolsConfig, VISION_MODEL_PRIORITY, type VectorStore, type WebSearchConfig, type WebhookConfig, type WorkspaceConfig, type WorkspaceFileReader, WorkspaceIndex, type WorkspaceIndexOptions, applyEndpointEdit, applyProviderApiKey, applyProviderCredential, applySettingsCredentials, applySettingsPayload, applySyncBundle, azureModelForDeployment, beginMcpOAuth, buildDocumentTools, buildManifest, buildSessionTranscript, bytesToBase64, cagCharBudget, chartKind, chartToTableRows, chatCompleterFromProviders, chunkCode, chunkText, commitSettings, compileSectionGraph, compileSubtaskGraph, compileTaskGraph, completeMcpOAuth, connectMcpWithLoopbackOAuth, createCascade, credentialDispositionForEdit, credentialEndpointIdentity, decryptJSON as decryptSyncBlob, diffManifest, disambiguateMcpServerNames, discoverMcpAuthServer, discoverMcpTools, distillSessionFacts, embedderFromProviders, encryptJSON as encryptSyncBlob, endpointFromSettingsPayload, evaluateAcceptance, explainRefusal, extractCharts, failures, fileExt, fileOAuthProvider, gatherSyncBundle, hasDefaultEndpoint, hasProviderCredential, hasUsableProvider, hashContent, heuristicCodeChunker, inferAzureBaseModel, inlineRuns, isCdpEndpoint, isDocumentFormat, isHostedSteel, isMcpToolName, isUsableSteelBase, isUsableSteelKey, matchImageLine, mcpServerPrefix, mcpToolName, nodeHttpFetch, normalizeEndpoint, parseBlocks, parseChartSpec, parseDelimited, parseRankOrder, parseSlide, planRetrieval, preferIpv4Host, priorAzureRow, reciprocalRankFusion, refreshMcpToken, removeMcpServerDenials, renderDocument, renderDocx, renderPptx, renderXlsx, runCascade, sameAzureEndpoint, sameCredentialEndpoint, sameEndpoint, sessionWorthRemembering, settingsSnapshot, sniffImage, splitSlides, streamCascade, stripInline, summarizeCompleted, undecided, uniqueMcpServerName };