stitchkit 0.88.0 → 0.90.0

package/dist/agent-runtime/coding-tool-utf8.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Character-boundary arithmetic for byte-bounded windows.
+ *
+ * A window cut at `offset + maxBytes` lands wherever the bytes fall, and the
+ * cut regularly lands inside a multi-byte character — Russian text makes that
+ * the common case, not the exception. A fatal `TextDecoder` refuses such a
+ * slice, so a bounded read of a perfectly valid file answered
+ * `INTERNAL_SERVER_ERROR` for some offsets and succeeded for others. The window
+ * is aligned here, before any decoder sees it.
+ *
+ * The alignment never returns an empty window for a non-empty read: when the
+ * requested end falls inside a sequence, it extends to that sequence's last
+ * byte, provided the caller supplied those bytes. Without the extension a
+ * window smaller than one character would make no progress and the reader would
+ * loop on the same offset — a silent hang where the old code at least refused.
+ */
+/**
+ * The largest `end' <= start + limit` that ends on a character boundary.
+ *
+ * When the byte before the cut begins a sequence that runs past it, `end` moves
+ * back to that sequence's lead — or forward to its final byte when the buffer
+ * holds it. A sequence truncated at the end of the buffer is left for the fatal
+ * decoder to refuse, so a genuinely broken file still names its cause.
+ */
+export declare function utf8AlignedEnd(data: Uint8Array, start: number, limit: number): number;
+/** The smallest `start' >= start` that begins on a character boundary. */
+export declare function utf8AlignedStart(data: Uint8Array, start: number, end: number): number;
+//# sourceMappingURL=coding-tool-utf8.d.ts.map

package/dist/agent-runtime/coding-tool-utf8.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coding-tool-utf8.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-tool-utf8.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAWH;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAYrF;AAED,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAIrF"}

package/dist/agent-runtime/contained-files.d.ts

@@ -13,7 +13,20 @@ export interface ContainedFileScan {
     truncated: boolean;
     skippedDirectories: number;
     skippedSymlinks: number;
+    /**
+     * Entries the host's `authorizePath` rejected while walking. A denied path
+     * used to disappear from every listing exactly like an absent one; naming
+     * them is what lets a caller tell "the host refused this" from "there is
+     * nothing here". Only the name and kind are carried — never content.
+     */
+    denied: readonly {
+        relative: string;
+        kind: ContainedEntryKind;
+    }[];
+    /** The `denied` list hit its cap; there are more refusals than named. */
+    deniedTruncated: boolean;
 }
+export type ContainedEntryKind = 'file' | 'directory' | 'symlink' | 'other';
 export interface ContainedFileHandle {
     readonly fd: number;
     close(): Promise<void>;
@@ -38,6 +51,12 @@ export declare function listContainedDirectory(root: string, relative: string, m
         bytes?: number;
     }[];
     truncated: boolean;
+    /** Direct children the host's policy refused, capped at `maxEntries`. */
+    denied: {
+        name: string;
+        kind: ContainedEntryKind;
+    }[];
+    deniedTruncated: boolean;
 }>;
 export interface ContainedParent {
     handle: ContainedFileHandle;
@@ -93,6 +112,7 @@ export declare function scanContainedFiles(input: {
     readMaxBytes?: number;
     skipUnreadable?: boolean;
     excludeDirectory?: (relative: string) => boolean;
+    includeFile?: (relative: string) => boolean;
     authorizePath?: (relative: string, kind: 'file' | 'directory' | 'symlink' | 'other') => boolean | Promise<boolean>;
 }): Promise<ContainedFileScan>;
 export {};

package/dist/agent-runtime/contained-files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contained-files.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/contained-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,KAAK,EAEX,MAAM,SAAS,CAAC;AAejB,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CACF,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;CACxB;AAwKD,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,IAAI,OAAO,CAAC;IACvB,MAAM,IAAI,OAAO,CAAC;IAClB,cAAc,IAAI,OAAO,CAAC;CAC3B;AA8CD,wEAAwE;AACxE,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAC/D,OAAO,CAAC;IACT,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;QACjD,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,EAAE,CAAC;IACJ,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC,CAuDD;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAoBD;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,EAAE,CAAC,CAgCnB;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,eAAe,CAAC,CA0B1B;AAED,+FAA+F;AAC/F,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,CAAC,CAa9B;AAED,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CASf;AAsDD,0FAA0F;AAC1F,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,IAAI,CAAC,CAsChB;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAExC;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,mBAAmB,CAAC,CAO9B;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBxD;AAED,yFAAyF;AACzF,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAOxD;AAED,+FAA+F;AAC/F,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAIpC;AAED,4FAA4F;AAC5F,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,KAC7C,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAuF7B"}
+{"version":3,"file":"contained-files.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/contained-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,KAAK,EAEX,MAAM,SAAS,CAAC;AAejB,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,MAAM,EAAE,SAAS;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,kBAAkB,CAAA;KAAE,EAAE,CAAC;IAClE,yEAAyE;IACzE,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;AAgB5E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CACF,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;CACxB;AAwKD,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,IAAI,OAAO,CAAC;IACvB,MAAM,IAAI,OAAO,CAAC;IAClB,cAAc,IAAI,OAAO,CAAC;CAC3B;AA8CD,wEAAwE;AACxE,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAC/D,OAAO,CAAC;IACT,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;QACjD,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,EAAE,CAAC;IACJ,SAAS,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,kBAAkB,CAAA;KAAE,EAAE,CAAC;IACrD,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC,CA2DD;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAoBD;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,EAAE,CAAC,CAgCnB;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,eAAe,CAAC,CA0B1B;AAED,+FAA+F;AAC/F,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,CAAC,CAa9B;AAED,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CASf;AAsDD,0FAA0F;AAC1F,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,IAAI,CAAC,CAsChB;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAExC;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,mBAAmB,CAAC,CAO9B;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBxD;AAED,yFAAyF;AACzF,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAOxD;AAED,+FAA+F;AAC/F,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAIpC;AAED,4FAA4F;AAC5F,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,KAC7C,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA8F7B"}

package/dist/agent-runtime/durability-contract.d.ts

@@ -0,0 +1,176 @@
+import { z } from 'zod';
+import type { AgentStoreEventEnvelope, AgentStoreEventPage, AppendAgentStoreEvent, ReadAgentStoreEvents } from './store-events.js';
+/**
+ * The durable ledger a local step implementation needs.
+ *
+ * Narrower than `AgentRuntimeStore` on purpose: durability owns no records of
+ * its own, it reads and appends the conversation's canonical event log, so a
+ * store that already satisfies this slice can back it without the rest of the
+ * runtime.
+ *
+ * A park (`sleep`/`waitFor`) is recorded the same way a step result is: as an
+ * ordinary event in this ledger. The local scheduler waits in-process, and a
+ * reconstruction resumes from the records that survived a restart.
+ */
+export interface StepDurabilityLedger {
+    appendEvent(input: AppendAgentStoreEvent): Promise<AgentStoreEventEnvelope>;
+    readEvents(input: ReadAgentStoreEvents): Promise<AgentStoreEventPage>;
+}
+/** Event kind carrying one recorded step result in the canonical ledger. */
+export declare const DURABILITY_STEP_EVENT_KIND = "durability/step";
+/** Event kind recording that a run parked on time or on an external event. */
+export declare const DURABILITY_PARK_EVENT_KIND = "durability/park";
+/** Event kind recording an external event delivered to a parked wait. */
+export declare const DURABILITY_EVENT_EVENT_KIND = "durability/event";
+export declare const StepEventPayloadSchema: z.ZodObject<{
+    runId: z.ZodString;
+    stepName: z.ZodString;
+    encoded: z.ZodString;
+}, z.core.$strip>;
+export declare const ParkEventPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    runId: z.ZodString;
+    kind: z.ZodLiteral<"sleep">;
+    name: z.ZodString;
+    deadline: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    runId: z.ZodString;
+    kind: z.ZodLiteral<"wait">;
+    event: z.ZodString;
+    id: z.ZodString;
+}, z.core.$strip>], "kind">;
+export declare const DeliveredEventPayloadSchema: z.ZodObject<{
+    runId: z.ZodString;
+    event: z.ZodString;
+    id: z.ZodString;
+    encoded: z.ZodString;
+}, z.core.$strip>;
+export type ParkEventPayload = z.infer<typeof ParkEventPayloadSchema>;
+export type StepEventPayload = z.infer<typeof StepEventPayloadSchema>;
+/**
+ * The time source a park uses.
+ *
+ * `now` is the wall clock the durable sleep deadline is stamped from and
+ * re-evaluated against, so a reconstructed park resumes from the recorded
+ * value. A test replaces the pair with a manual clock to advance time without
+ * waiting in real time.
+ */
+export interface DurabilityClock {
+    now(): number;
+    schedule(callback: () => void, delayMs: number): {
+        cancel(): void;
+    };
+}
+export interface LocalStepDurabilityOptions {
+    store: StepDurabilityLedger;
+    conversationId: string;
+    runId: string;
+    signal?: AbortSignal;
+    /** Host-owned notification for ledger writes made by another process. */
+    subscribe?(wake: () => void): () => void;
+    /**
+     * Injectable time source for `sleep`. Defaults to the wall clock and
+     * `setTimeout`; a test passes a manual clock so advancing time
+     * deterministically resumes a park without waiting in real time.
+     */
+    clock?: {
+        now(): number;
+        schedule(callback: () => void, delayMs: number): {
+            cancel(): void;
+        };
+    };
+}
+export interface StepRunOptions {
+    /** Aborting refuses to *start* a body and releases a park; it never removes a record already written. */
+    signal?: AbortSignal;
+}
+export interface LocalStepDurability {
+    /**
+     * Run `name` once and durably record its JSON result.
+     *
+     * The first execution runs `body` and appends the result to the ledger. A
+     * replay — a fresh process, or a second durability object built over the same
+     * store — decodes the record and returns it without calling `body` again.
+     */
+    step<T extends z.infer<ReturnType<typeof z.json>>>(name: string, body: () => T | Promise<T>, options?: StepRunOptions): Promise<T>;
+    /** The decoded result of an already-recorded step, or `undefined` if none. */
+    readRecordedStep(name: string): Promise<unknown | undefined>;
+    /** Whether `name` has a recorded result. */
+    hasRecordedStep(name: string): Promise<boolean>;
+    /**
+     * Wait on a lightweight local timer for `seconds`, retaining a durable deadline.
+     *
+     * The first call records a park with an absolute deadline; a replay whose
+     * deadline has passed returns immediately, one before it waits out the
+     * remainder. `name` is the park's identity within the run and must be stable
+     * across replays. It defaults to the duration, so a caller that parks twice
+     * for the same length must pass distinct names.
+     */
+    sleep(input: {
+        seconds: number;
+        name?: string;
+    }, options?: StepRunOptions): Promise<void>;
+    /**
+     * Park the run until an external event `{ event, id }` is delivered.
+     *
+     * Resolves with the delivered payload. A waiter that starts after delivery
+     * returns immediately, as does a reconstruction that finds the delivery in
+     * the ledger.
+     */
+    waitFor<T = unknown>(input: {
+        event: string;
+        id: string;
+    }, options?: StepRunOptions): Promise<T>;
+    /**
+     * Durably record an external event and wake any waiter for it.
+     *
+     * The record is append-only and survives a restart: reconstruction finds it
+     * and a `waitFor` for the same key resolves without a second delivery.
+     */
+    deliver(input: {
+        event: string;
+        id: string;
+        payload?: unknown;
+    }): Promise<void>;
+}
+/**
+ * The record for `name` cannot be trusted.
+ *
+ * Thrown instead of re-running `body`: a body is arbitrary and often effectful,
+ * and a record that cannot be decoded is evidence the ledger is not what this
+ * run wrote, never evidence the step never ran.
+ */
+export declare class StepResultDecodeError extends Error {
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+/** A step body returned a value that cannot be represented as JSON. */
+export declare class StepResultNotSerializableError extends Error {
+    constructor(stepName: string, cause: unknown);
+}
+/** The caller aborted before the step body was started. No record was written. */
+export declare class StepAbortedError extends Error {
+    constructor(stepName: string);
+}
+/**
+ * A park or delivered-event record cannot be trusted.
+ *
+ * Thrown instead of parking on a record whose shape is not ours: an
+ * undecodable park is evidence the ledger is not what this run wrote, never
+ * evidence the park never happened.
+ */
+export declare class ParkRecordDecodeError extends Error {
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+/**
+ * A sleeping or waiting park was aborted before it was satisfied.
+ *
+ * No record is removed: the park stays in the ledger, so a later replay
+ * resumes from the same durable state instead of starting a new park.
+ */
+export declare class ParkAbortedError extends Error {
+    constructor(park: string);
+}
+//# sourceMappingURL=durability-contract.d.ts.map

package/dist/agent-runtime/durability-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"durability-contract.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/durability-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,gBAAgB,CAAC;AAExB;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC5E,UAAU,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACvE;AAED,4EAA4E;AAC5E,eAAO,MAAM,0BAA0B,oBAAoB,CAAC;AAE5D,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,oBAAoB,CAAC;AAE5D,yEAAyE;AACzE,eAAO,MAAM,2BAA2B,qBAAqB,CAAC;AAE9D,eAAO,MAAM,sBAAsB;;;;iBAKjC,CAAC;AAiBH,eAAO,MAAM,sBAAsB;;;;;;;;;;2BAGjC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;iBAMtC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,IAAI,MAAM,CAAC;IACd,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG;QAAE,MAAM,IAAI,IAAI,CAAA;KAAE,CAAC;CACrE;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,yEAAyE;IACzE,SAAS,CAAC,CAAC,IAAI,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;IACzC;;;;OAIG;IACH,KAAK,CAAC,EAAE;QACN,GAAG,IAAI,MAAM,CAAC;QACd,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG;YAAE,MAAM,IAAI,IAAI,CAAA;SAAE,CAAC;KACrE,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,yGAAyG;IACzG,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,EAC/C,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,CAAC,CAAC,CAAC;IACd,8EAA8E;IAC9E,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7D,4CAA4C;IAC5C,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD;;;;;;;;OAQG;IACH,KAAK,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1F;;;;;;OAMG;IACH,OAAO,CAAC,CAAC,GAAG,OAAO,EACjB,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EACpC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,CAAC,CAAC,CAAC;IACd;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjF;AAED;;;;;;GAMG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAGzD;CACF;AAED,uEAAuE;AACvE,qBAAa,8BAA+B,SAAQ,KAAK;IACvD,YAAY,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAK3C;CACF;AAED,kFAAkF;AAClF,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,YAAY,QAAQ,EAAE,MAAM,EAG3B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAGzD;CACF;AAED;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,YAAY,IAAI,EAAE,MAAM,EAGvB;CACF"}

package/dist/agent-runtime/durability-json.d.ts

@@ -0,0 +1,3 @@
+import { z } from 'zod';
+export declare const DurableJsonSchema: z.ZodCustom<z.JSONType, z.JSONType>;
+//# sourceMappingURL=durability-json.d.ts.map

package/dist/agent-runtime/durability-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"durability-json.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/durability-json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoCxB,eAAO,MAAM,iBAAiB,qCAG7B,CAAC"}

package/dist/agent-runtime/durability-ledger.d.ts

@@ -0,0 +1,16 @@
+import { type ParkEventPayload, type StepDurabilityLedger } from './durability-contract.js';
+export declare function stepKey(conversationId: string, runId: string, stepName: string): string;
+export declare function sleepParkKey(conversationId: string, runId: string, name: string): string;
+export declare function waitParkKey(conversationId: string, runId: string, event: string, id: string): string;
+export declare function parkEventKey(conversationId: string, payload: ParkEventPayload): string;
+export declare function encodeStepResult(stepName: string, value: unknown): string;
+export declare function encodeDeliveredPayload(event: string, id: string, payload: unknown): string;
+export interface DurabilityLedgerView {
+    readonly steps: Map<string, unknown>;
+    readonly parks: Map<string, ParkEventPayload>;
+    readonly deliveries: Map<string, unknown>;
+    nextSeq: number;
+}
+/** Read every `durability/*` record in the conversation, keyed by durable key. */
+export declare function readDurabilityLedger(store: StepDurabilityLedger, conversationId: string, view: DurabilityLedgerView): Promise<DurabilityLedgerView>;
+//# sourceMappingURL=durability-ledger.d.ts.map

package/dist/agent-runtime/durability-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"durability-ledger.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/durability-ledger.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,gBAAgB,EAGrB,KAAK,oBAAoB,EAK1B,MAAM,uBAAuB,CAAC;AAG/B,wBAAgB,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvF;AAED,wBAAgB,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAExF;AAED,wBAAgB,WAAW,CACzB,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,GACT,MAAM,CAER;AAED,wBAAgB,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAItF;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAWzE;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAa1F;AAmED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,kFAAkF;AAClF,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,oBAAoB,EAC3B,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,oBAAoB,CAAC,CAsC/B"}

package/dist/agent-runtime/durability-scheduler.d.ts

@@ -0,0 +1,29 @@
+import { type DurabilityClock, type StepDurabilityLedger } from './durability-contract.js';
+export declare const systemClock: DurabilityClock;
+/**
+ * In-flight steps of one process, keyed by the full durable key and removed as
+ * soon as they settle.
+ *
+ * It is module-level rather than per-object so two durability objects built over
+ * the same store in one process cannot both start an effectful body. It cannot
+ * span processes: a second process is fenced by the run lease the runtime
+ * already holds, not by this map, and that is the boundary this local slice
+ * draws.
+ */
+export interface InFlightDurability {
+    steps: Map<string, Promise<unknown>>;
+    parks: Map<string, Promise<unknown>>;
+    waiters: Map<string, Set<() => void>>;
+}
+export declare const stores: WeakMap<StepDurabilityLedger, InFlightDurability>;
+export declare function notifyWaiters(parkWaiters: InFlightDurability['waiters'], key: string): void;
+export declare function waitForDeadline(clock: DurabilityClock, deadline: number, park: string, signal?: AbortSignal): Promise<void>;
+interface ParkWaiter {
+    /** `'woke'` when a delivery notifies this park, `'aborted'` when the signal fires. */
+    readonly outcome: Promise<'woke' | 'aborted'>;
+    /** Remove this waiter from the registry; idempotent. */
+    cancel(): void;
+}
+export declare function createParkWaiter(parkWaiters: InFlightDurability['waiters'], key: string, signal?: AbortSignal): ParkWaiter;
+export {};
+//# sourceMappingURL=durability-scheduler.d.ts.map

package/dist/agent-runtime/durability-scheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"durability-scheduler.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/durability-scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,eAAe,EAEpB,KAAK,oBAAoB,EAC1B,MAAM,uBAAuB,CAAC;AAC/B,eAAO,MAAM,WAAW,EAAE,eAOzB,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;CACvC;AACD,eAAO,MAAM,MAAM,mDAA0D,CAAC;AAE9E,wBAAgB,aAAa,CAAC,WAAW,EAAE,kBAAkB,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAI3F;AA2BD,wBAAsB,eAAe,CACnC,KAAK,EAAE,eAAe,EACtB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,UAAU,UAAU;IAClB,sFAAsF;IACtF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C,wDAAwD;IACxD,MAAM,IAAI,IAAI,CAAC;CAChB;AAED,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,kBAAkB,CAAC,SAAS,CAAC,EAC1C,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,WAAW,GACnB,UAAU,CA2BZ"}

package/dist/agent-runtime/durability.d.ts

@@ -0,0 +1,14 @@
+import { type LocalStepDurability, type LocalStepDurabilityOptions } from './durability-contract.js';
+export type { LocalStepDurability, LocalStepDurabilityOptions, StepDurabilityLedger, StepRunOptions, } from './durability-contract.js';
+export { DURABILITY_STEP_EVENT_KIND, ParkAbortedError, ParkRecordDecodeError, StepAbortedError, StepResultDecodeError, StepResultNotSerializableError, } from './durability-contract.js';
+/**
+ * A local step-durability port over an `AgentRuntimeStore`.
+ *
+ * Replaying is reading the ledger: nothing is kept between instances, so a
+ * fresh object over the same store resumes from the records that survived a
+ * process restart. Completed records are append-only — there is no deletion
+ * path — so cancellation cannot remove one, and a park that completed is never
+ * created a second time.
+ */
+export declare function createLocalStepDurability(options: LocalStepDurabilityOptions): LocalStepDurability;
+//# sourceMappingURL=durability.d.ts.map

package/dist/agent-runtime/durability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"durability.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/durability.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAKhC,MAAM,uBAAuB,CAAC;AAkB/B,YAAY,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,oBAAoB,EACpB,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,8BAA8B,GAC/B,MAAM,uBAAuB,CAAC;AAmB/B;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,0BAA0B,GAClC,mBAAmB,CAqNrB"}

package/dist/agent-runtime/event-search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-search.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/event-search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,cAAc,EAAe,MAAM,oBAAoB,CAAC;AAEtE,eAAO,MAAM,4BAA4B;;;;;kBAO9B,CAAC;AAEZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAalF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,EAAE,cAAc,CAAC;IACzB,qBAAqB,CAAC,CAAC,OAAO,EAAE;QAC9B,wBAAwB,EAAE,MAAM,CAAC;QACjC,oBAAoB,EAAE,MAAM,CAAC;KAC9B,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChC,aACwB;IACrB,wBAAwB,EAAE,MAAM,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,KAAG,OAAO,CAAC,SAAS,sBAAsB,EAAE,CAAC,CAkE/C"}
+{"version":3,"file":"event-search.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/event-search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,cAAc,EAAe,MAAM,oBAAoB,CAAC;AAEtE,eAAO,MAAM,4BAA4B;;;;;kBAO9B,CAAC;AAEZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AA0BlF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,EAAE,cAAc,CAAC;IACzB,qBAAqB,CAAC,CAAC,OAAO,EAAE;QAC9B,wBAAwB,EAAE,MAAM,CAAC;QACjC,oBAAoB,EAAE,MAAM,CAAC;KAC9B,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChC,aACwB;IACrB,wBAAwB,EAAE,MAAM,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,KAAG,OAAO,CAAC,SAAS,sBAAsB,EAAE,CAAC,CAkE/C"}

package/dist/agent-runtime/harness-contract.d.ts

@@ -124,12 +124,21 @@ export interface HeadlessAgentHarnessConfig<CONTEXT, TOOLS extends ToolSet> exte
         contextWindow: number;
     }): AgentPromptBudget | Promise<AgentPromptBudget>;
     estimateResourceTokens?(text: string): AgentTokenCount | Promise<AgentTokenCount>;
+    /** Parent-owned children expose requests through pendingApprovals only, not presentation events/snapshots. */
+    blockingPresentation?: 'local' | 'parent';
     limits?: Partial<AgentHarnessLimits>;
     onProfile?(event: AgentHarnessProfileEvent): void | Promise<void>;
     onProfileError?(input: {
         event: AgentHarnessProfileEvent;
         error: unknown;
     }): void | Promise<void>;
+    /**
+     * Response-time authorization. It runs before a decision is written and may
+     * reject a responder without dropping the pending request, so a later valid
+     * responder can still answer. Absent means the signed request alone
+     * authorizes the response, exactly as before. → ADR 0177
+     */
+    authorizeApprovalResponse?(input: AgentHarnessApprovalAuthorization): AgentHarnessApprovalAuthorizationResult | Promise<AgentHarnessApprovalAuthorizationResult>;
 }
 export interface HeadlessAgentHarness<CONTEXT> extends AgentRuntime<CONTEXT> {
     snapshot(conversationId: string): Promise<AgentSnapshot>;
@@ -155,6 +164,34 @@ export interface AgentHarnessApprovalDecision<_CONTEXT = unknown> {
     context: unknown;
     metadata?: unknown;
 }
+/** One pending request as the response-time policy sees it. */
+export interface AgentHarnessApprovalRequest {
+    approvalId: string;
+    callId: string;
+    toolName: string;
+    input: unknown;
+}
+export interface AgentHarnessApprovalAuthorization {
+    /**
+     * The identity the caller supplies for this decision. The harness does not
+     * authenticate it — the application wires its verified session principal
+     * here — but it is what the policy judges, never a field from the request body.
+     */
+    responder: unknown;
+    conversationId: string;
+    request: AgentHarnessApprovalRequest;
+    approved: boolean;
+}
+/**
+ * A response-time decision. `rejected` judges the responder, not the approval:
+ * the request stays pending and another responder may still answer it.
+ */
+export type AgentHarnessApprovalAuthorizationResult = {
+    status: 'allowed';
+} | {
+    status: 'rejected';
+    reason: string;
+};
 export interface HarnessPromptProfile {
     conversationId: string;
     model: AgentResolvedModel;

package/dist/agent-runtime/harness-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"harness-contract.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/harness-contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAA8B,KAAK,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAC1F,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAEzD,eAAO,MAAM,8BAA8B;;;;EAA+C,CAAC;AAE3F,eAAO,MAAM,0BAA0B;;;;;;;;;kBAO5B,CAAC;AAEZ,eAAO,MAAM,oCAAoC;;;;;;;kBAMtC,CAAC;AAEZ,eAAO,MAAM,wBAAwB;;;;kBAM1B,CAAC;AAEZ,eAAO,MAAM,iCAAiC;;;;;;;;kBAE5C,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAWhC,CAAC;AAEZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAClD,OAAO,oCAAoC,CAC5C,CAAC;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC3C,WAAW,EAAE,SAAS,8BAA8B,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,0BAA0B,CAAC,OAAO;IACjD,SAAS,CAAC,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtF,OAAO,CAAC,KAAK,EAAE;QACb,OAAO,EAAE,OAAO,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,GAAG,EAAE,QAAQ,CAAC;QACd,QAAQ,EAAE,aAAa,CAAC;KACzB,GAAG,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,0BAA0B,CAAC,OAAO,EAAE,KAAK,SAAS,OAAO,CACxE,SAAQ,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC/E,MAAM,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC5C,SAAS,EAAE;QACT,IAAI,CAAC,KAAK,EAAE;YACV,OAAO,EAAE,OAAO,CAAC;YACjB,MAAM,EAAE,WAAW,CAAC;YACpB,KAAK,EAAE,kBAAkB,CAAC;YAC1B,QAAQ,EAAE,aAAa,CAAC;SACzB,GAAG,0BAA0B,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACrE,aAAa,CAAC,CAAC,KAAK,EAAE;YACpB,OAAO,EAAE,OAAO,CAAC;YACjB,WAAW,EAAE,SAAS,8BAA8B,EAAE,CAAC;SACxD,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC1B,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,sBAAsB,CAAC,OAAO,CAAC,GAAG,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACtE,YAAY,CAAC,KAAK,EAAE;QAClB,OAAO,EAAE,OAAO,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACnD,sBAAsB,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAClF,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrC,SAAS,CAAC,CAAC,KAAK,EAAE,wBAAwB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,cAAc,CAAC,CAAC,KAAK,EAAE;QACrB,KAAK,EAAE,wBAAwB,CAAC;QAChC,KAAK,EAAE,OAAO,CAAC;KAChB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB,CAAC,OAAO,CAAE,SAAQ,YAAY,CAAC,OAAO,CAAC;IAC1E,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACzD,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC;IACpF,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,2BAA2B,EAAE,CAAC,CAAC;IAC1F,iBAAiB,CACf,KAAK,EAAE,4BAA4B,CAAC,OAAO,CAAC,GAC3C,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,2BAA2B;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,4BAA4B,CAAC,QAAQ,GAAG,OAAO;IAC9D,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,SAAS,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC3C,WAAW,EAAE,SAAS,8BAA8B,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B"}
+{"version":3,"file":"harness-contract.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/harness-contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAA8B,KAAK,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAC1F,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAEzD,eAAO,MAAM,8BAA8B;;;;EAA+C,CAAC;AAE3F,eAAO,MAAM,0BAA0B;;;;;;;;;kBAO5B,CAAC;AAEZ,eAAO,MAAM,oCAAoC;;;;;;;kBAMtC,CAAC;AAEZ,eAAO,MAAM,wBAAwB;;;;kBAM1B,CAAC;AAEZ,eAAO,MAAM,iCAAiC;;;;;;;;kBAE5C,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAWhC,CAAC;AAEZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAClD,OAAO,oCAAoC,CAC5C,CAAC;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC3C,WAAW,EAAE,SAAS,8BAA8B,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,0BAA0B,CAAC,OAAO;IACjD,SAAS,CAAC,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtF,OAAO,CAAC,KAAK,EAAE;QACb,OAAO,EAAE,OAAO,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,GAAG,EAAE,QAAQ,CAAC;QACd,QAAQ,EAAE,aAAa,CAAC;KACzB,GAAG,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,0BAA0B,CAAC,OAAO,EAAE,KAAK,SAAS,OAAO,CACxE,SAAQ,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC/E,MAAM,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC5C,SAAS,EAAE;QACT,IAAI,CAAC,KAAK,EAAE;YACV,OAAO,EAAE,OAAO,CAAC;YACjB,MAAM,EAAE,WAAW,CAAC;YACpB,KAAK,EAAE,kBAAkB,CAAC;YAC1B,QAAQ,EAAE,aAAa,CAAC;SACzB,GAAG,0BAA0B,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACrE,aAAa,CAAC,CAAC,KAAK,EAAE;YACpB,OAAO,EAAE,OAAO,CAAC;YACjB,WAAW,EAAE,SAAS,8BAA8B,EAAE,CAAC;SACxD,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC1B,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,sBAAsB,CAAC,OAAO,CAAC,GAAG,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACtE,YAAY,CAAC,KAAK,EAAE;QAClB,OAAO,EAAE,OAAO,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACnD,sBAAsB,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAClF,8GAA8G;IAC9G,oBAAoB,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC1C,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrC,SAAS,CAAC,CAAC,KAAK,EAAE,wBAAwB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,cAAc,CAAC,CAAC,KAAK,EAAE;QACrB,KAAK,EAAE,wBAAwB,CAAC;QAChC,KAAK,EAAE,OAAO,CAAC;KAChB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB;;;;;OAKG;IACH,yBAAyB,CAAC,CACxB,KAAK,EAAE,iCAAiC,GAEtC,uCAAuC,GACvC,OAAO,CAAC,uCAAuC,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,oBAAoB,CAAC,OAAO,CAAE,SAAQ,YAAY,CAAC,OAAO,CAAC;IAC1E,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACzD,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC;IACpF,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,2BAA2B,EAAE,CAAC,CAAC;IAC1F,iBAAiB,CACf,KAAK,EAAE,4BAA4B,CAAC,OAAO,CAAC,GAC3C,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,2BAA2B;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,4BAA4B,CAAC,QAAQ,GAAG,OAAO;IAC9D,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,+DAA+D;AAC/D,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,iCAAiC;IAChD;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,2BAA2B,CAAC;IACrC,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,MAAM,uCAAuC,GAC/C;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,SAAS,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC3C,WAAW,EAAE,SAAS,8BAA8B,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B"}

package/dist/agent-runtime/harness.d.ts

@@ -2,6 +2,14 @@ import type { ToolSet } from 'ai';
 import { type HeadlessAgentHarness, type HeadlessAgentHarnessConfig } from './harness-contract.js';
 export * from './harness-contract.js';
 export * from './harness-file-resources.js';
+/**
+ * The response-time policy refused this responder. The pending request is left
+ * in place, so a different responder may still answer it. → ADR 0177
+ */
+export declare class AgentHarnessApprovalRejectedError extends Error {
+    readonly reason: string;
+    constructor(reason: string);
+}
 /**
  * Compose the public AgentRuntime into a resource-aware process-local harness.
  * The caller still owns supervision, model/provider policy, permissions and

package/dist/agent-runtime/harness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/harness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAElC,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAChC,MAAM,oBAAoB,CAAC;AAU5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AAczC;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,KAAK,SAAS,OAAO,EACvE,MAAM,EAAE,0BAA0B,CAAC,OAAO,EAAE,KAAK,CAAC,GACjD,oBAAoB,CAAC,OAAO,CAAC,CAyM/B;AAED,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/harness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAElC,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAChC,MAAM,oBAAoB,CAAC;AAU5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AAEzC;;;GAGG;AACH,qBAAa,iCAAkC,SAAQ,KAAK;IAC1D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,YAAY,MAAM,EAAE,MAAM,EAIzB;CACF;AAcD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,KAAK,SAAS,OAAO,EACvE,MAAM,EAAE,0BAA0B,CAAC,OAAO,EAAE,KAAK,CAAC,GACjD,oBAAoB,CAAC,OAAO,CAAC,CA4P/B;AAED,cAAc,mBAAmB,CAAC"}

package/dist/agent-runtime/prompt.d.ts

@@ -24,10 +24,19 @@ export type AgentTokenCount = z.infer<typeof AgentTokenCountSchema>;
 export interface AgentPromptSectionContext<CONTEXT> {
     context: CONTEXT;
     signal: AbortSignal;
+    event: 'session.started' | 'turn.started';
 }
 export interface AgentPromptSection<CONTEXT> {
     name: string;
     stability: 'stable' | 'dynamic';
+    /**
+     * Authority of this section. `system` (default) is framework policy: it stays
+     * outside history and is rebuilt on every call. `user` is context an
+     * application, a provider or a memory produced — it reaches the model as
+     * ordinary user history, ahead of the durable conversation, never as system
+     * authority. → ADR 0178
+     */
+    role?: 'system' | 'user';
     render(input: AgentPromptSectionContext<CONTEXT>): string | Promise<string>;
     estimateTokens?(text: string): AgentTokenCount | Promise<AgentTokenCount>;
 }
@@ -43,9 +52,22 @@ export interface ComposedAgentPrompt {
     sections: readonly {
         name: string;
         stability: 'stable' | 'dynamic';
+        role: 'system' | 'user';
+        text: string;
+    }[];
+    /**
+     * User-role sections, in declaration order. They are carried to the model as
+     * user history before the durable conversation, so `instructions` never
+     * contains them. Blank sections materialize nothing.
+     */
+    userInstructions?: readonly {
+        name: string;
         text: string;
     }[];
     instructionTokens: AgentTokenCount;
+    userInstructionTokens?: AgentTokenCount;
+    /** Reconcile the reservation after the runtime atomically seeds durable history. */
+    finalizeSeed?(inserted: boolean): Pick<ComposedAgentPrompt, 'contextDecision' | 'availableHistoryTokens'>;
     availableHistoryTokens?: number;
     contextDecision: 'fits' | 'requires-compaction' | 'oversized' | 'unavailable';
 }
@@ -75,6 +97,7 @@ export declare function selectAgentHistory(options: SelectAgentHistoryOptions):
 export interface ComposeAgentPromptOptions<CONTEXT> {
     context: CONTEXT;
     signal: AbortSignal;
+    event?: 'session.started' | 'turn.started';
     budget?: AgentPromptBudget;
     historyTokens?: AgentTokenCount;
     oversizePolicy?: 'reject' | 'compact';

package/dist/agent-runtime/prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,YAAY,EAAyB,MAAM,WAAW,CAAC;AACrE,OAAO,EACL,KAAK,0BAA0B,EAGhC,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;iBAQhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,MAAM,WAAW,yBAAyB,CAAC,OAAO;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB,CAAC,OAAO;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,QAAQ,GAAG,SAAS,CAAC;IAChC,MAAM,CAAC,KAAK,EAAE,yBAAyB,CAAC,OAAO,CAAC,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5E,cAAc,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,eAAe,CAAC;IAC7B,WAAW,EAAE,eAAe,CAAC;IAC7B,gBAAgB,EAAE,eAAe,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,YAAY,CAAC;IAC3B,QAAQ,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,QAAQ,GAAG,SAAS,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACrF,iBAAiB,EAAE,eAAe,CAAC;IACnC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,qBAAqB,GAAG,WAAW,GAAG,aAAa,CAAC;CAC/E;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,EACF,eAAe,GACf,kBAAkB,GAClB,uBAAuB,GACvB,2BAA2B,GAC3B,sBAAsB,GACtB,yBAAyB;IAC3B,0EAA0E;OACxE,aAAa,CAAC;IAClB,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAClC,SAAS,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACjD,WAAW,EAAE,eAAe,CAAC;IAC7B,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,WAAW,GAAG,aAAa,CAAC;CAC7D;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,0BAA0B,CAAC;IAC5C,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CACpF;AAoCD,sFAAsF;AACtF,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC,CAkHnC;AAED,MAAM,WAAW,yBAAyB,CAAC,OAAO;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,cAAc,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IACtC,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAChF,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC5E;AAMD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,kBAAkB,CAAC,OAAO,CAAC,EAAE,aACnE,yBAAyB,CAAC,OAAO,CAAC,KAAG,OAAO,CAAC,mBAAmB,CAAC,CAqFzF"}
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,YAAY,EAAyB,MAAM,WAAW,CAAC;AACrE,OAAO,EACL,KAAK,0BAA0B,EAGhC,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;iBAQhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,MAAM,WAAW,yBAAyB,CAAC,OAAO;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,iBAAiB,GAAG,cAAc,CAAC;CAC3C;AAED,MAAM,WAAW,kBAAkB,CAAC,OAAO;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,QAAQ,GAAG,SAAS,CAAC;IAChC;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IACzB,MAAM,CAAC,KAAK,EAAE,yBAAyB,CAAC,OAAO,CAAC,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5E,cAAc,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,eAAe,CAAC;IAC7B,WAAW,EAAE,eAAe,CAAC;IAC7B,gBAAgB,EAAE,eAAe,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,YAAY,CAAC;IAC3B,QAAQ,EAAE,SAAS;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,QAAQ,GAAG,SAAS,CAAC;QAChC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;KACd,EAAE,CAAC;IACJ;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7D,iBAAiB,EAAE,eAAe,CAAC;IACnC,qBAAqB,CAAC,EAAE,eAAe,CAAC;IACxC,oFAAoF;IACpF,YAAY,CAAC,CACX,QAAQ,EAAE,OAAO,GAChB,IAAI,CAAC,mBAAmB,EAAE,iBAAiB,GAAG,wBAAwB,CAAC,CAAC;IAC3E,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,qBAAqB,GAAG,WAAW,GAAG,aAAa,CAAC;CAC/E;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,EACF,eAAe,GACf,kBAAkB,GAClB,uBAAuB,GACvB,2BAA2B,GAC3B,sBAAsB,GACtB,yBAAyB;IAC3B,0EAA0E;OACxE,aAAa,CAAC;IAClB,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAClC,SAAS,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACjD,WAAW,EAAE,eAAe,CAAC;IAC7B,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,WAAW,GAAG,aAAa,CAAC;CAC7D;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,0BAA0B,CAAC;IAC5C,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CACpF;AAoCD,sFAAsF;AACtF,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC,CAkHnC;AAED,MAAM,WAAW,yBAAyB,CAAC,OAAO;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,iBAAiB,GAAG,cAAc,CAAC;IAC3C,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,cAAc,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IACtC,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAChF,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC5E;AAMD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,kBAAkB,CAAC,OAAO,CAAC,EAAE,aACnE,yBAAyB,CAAC,OAAO,CAAC,KAAG,OAAO,CAAC,mBAAmB,CAAC,CAwIzF"}

package/dist/agent-runtime/run-execution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-execution.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/run-execution.ts"],"names":[],"mappings":"AAEA,OAAO,EAQL,KAAK,OAAO,EACb,MAAM,IAAI,CAAC;AAMZ,OAAO,EAAE,KAAK,iBAAiB,EAAuB,MAAM,UAAU,CAAC;AAEvE,OAAO,KAAK,EAAwB,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAShF,OAAO,KAAK,EAAqB,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAcvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAKL,KAAK,QAAQ,EAOd,MAAM,WAAW,CAAC;AAyCnB,8DAA8D;AAC9D,MAAM,WAAW,uBAAuB,CAAC,OAAO,EAAE,KAAK,SAAS,OAAO;IACrE,MAAM,EAAE,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3C,OAAO,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,IAAI,MAAM,CAAC;IACrB,GAAG,IAAI,IAAI,CAAC;IACZ,qBAAqB,EAAE,MAAM,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACpC;AA0DD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,KAAK,SAAS,OAAO,EAC9D,YAAY,EAAE,uBAAuB,CAAC,OAAO,EAAE,KAAK,CAAC,WAcb;IACtC,WAAW,EAAE,QAAQ,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;IACpB,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;IACZ,gFAAgF;IAChF,UAAU,CAAC,IAAI,IAAI,CAAC;CACrB,KAAG,OAAO,CAAC,kBAAkB,CAAC,CAk4ChC"}
+{"version":3,"file":"run-execution.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/run-execution.ts"],"names":[],"mappings":"AAEA,OAAO,EAQL,KAAK,OAAO,EACb,MAAM,IAAI,CAAC;AAQZ,OAAO,EAAE,KAAK,iBAAiB,EAAuB,MAAM,UAAU,CAAC;AAEvE,OAAO,KAAK,EAAwB,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAShF,OAAO,KAAK,EAAqB,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAcvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAKL,KAAK,QAAQ,EAOd,MAAM,WAAW,CAAC;AA+EnB,8DAA8D;AAC9D,MAAM,WAAW,uBAAuB,CAAC,OAAO,EAAE,KAAK,SAAS,OAAO;IACrE,MAAM,EAAE,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3C,OAAO,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,IAAI,MAAM,CAAC;IACrB,GAAG,IAAI,IAAI,CAAC;IACZ,qBAAqB,EAAE,MAAM,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACpC;AA0DD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,KAAK,SAAS,OAAO,EAC9D,YAAY,EAAE,uBAAuB,CAAC,OAAO,EAAE,KAAK,CAAC,WAcb;IACtC,WAAW,EAAE,QAAQ,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;IACpB,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;IACZ,gFAAgF;IAChF,UAAU,CAAC,IAAI,IAAI,CAAC;CACrB,KAAG,OAAO,CAAC,kBAAkB,CAAC,CAw8ChC"}

package/dist/agent-runtime/runtime-internals.d.ts

@@ -79,6 +79,10 @@ export declare function normalizeSdkUsage(value: LanguageModelUsage): AgentUsage
 export declare function createIdleDeadline(parent: AbortSignal, timeoutMs: number | undefined): {
     signal: AbortSignal;
     touch: () => void;
+    start: () => void;
+    stop: () => void;
+    suspend: () => void;
+    resume: () => void;
     dispose: () => void;
 };
 //# sourceMappingURL=runtime-internals.d.ts.map

package/dist/agent-runtime/runtime-internals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-internals.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/runtime-internals.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,IAAI,CAAC;AAC7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,gBAAgB,EAGrB,KAAK,QAAQ,EACb,KAAK,mBAAmB,EACxB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAGnB;;;;;GAKG;AAEH,wBAAgB,OAAO,CAAC,IAAI,EAAE,SAAS,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,CAI1E;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAG5E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO;;;;cAI9C;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS;;;EAKhF;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAQxE;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,GAAG,mBAAmB,CAK5E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,CAuDpF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,UAAU,EACpB,WAAW,EAAE,UAAU,GAAG,SAAS,GAClC,UAAU,CAiBZ;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,CAYrE;AAED,8EAA8E;AAC9E,wBAAgB,YAAY,IAAI,UAAU,CAUzC;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,GAAG,UAAU,CAmBvE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS;;iBAEhE,IAAI;;EAiBxB"}
+{"version":3,"file":"runtime-internals.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/runtime-internals.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,IAAI,CAAC;AAC7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,gBAAgB,EAGrB,KAAK,QAAQ,EACb,KAAK,mBAAmB,EACxB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAGnB;;;;;GAKG;AAEH,wBAAgB,OAAO,CAAC,IAAI,EAAE,SAAS,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,CAI1E;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAG5E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO;;;;cAI9C;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS;;;EAKhF;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAQxE;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,GAAG,mBAAmB,CAK5E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,CAuDpF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,UAAU,EACpB,WAAW,EAAE,UAAU,GAAG,SAAS,GAClC,UAAU,CAiBZ;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,CAYrE;AAED,8EAA8E;AAC9E,wBAAgB,YAAY,IAAI,UAAU,CAUzC;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,GAAG,UAAU,CAmBvE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS;;iBAEhE,IAAI;;;;;;EAgDxB"}

package/dist/agent-runtime/runtime.d.ts

@@ -4,6 +4,7 @@ import type { ToolLifecycle } from '../tools/execute.js';
 import type { AgentChildManager } from './children.js';
 import type { AgentCompactionResult } from './compaction.js';
 import { type AgentInputPolicy, type AgentSessionCloseOptions, type AgentSessionCloseResult, type AgentStopReason } from './coordinator.js';
+import type { LocalStepDurability } from './durability.js';
 import { type AgentRuntimeEvent, type AgentRuntimePublisher } from './events.js';
 import type { AgentHistoryProjectionOptions } from './history.js';
 import type { AgentResolvedModel } from './models.js';
@@ -134,6 +135,15 @@ export type AgentRuntimePrepareStep<CONTEXT, TOOLS extends ToolSet = ToolSet> =
 export interface AgentRuntimeConfig<CONTEXT, TOOLS extends ToolSet = ToolSet> {
     protocol: AgentRuntimeProtocolInput<CONTEXT>;
     store: AgentRuntimeStore;
+    /** Tool-call durability; the host retains process placement and cross-process run leases. */
+    durability?: true | ((input: {
+        store: AgentRuntimeStore;
+        conversationId: string;
+        runId: string;
+        toolName: string;
+        toolCallId: string;
+        signal?: AbortSignal;
+    }) => LocalStepDurability);
     models: {
         preflight?(input: {
             context: CONTEXT;
@@ -149,6 +159,7 @@ export interface AgentRuntimeConfig<CONTEXT, TOOLS extends ToolSet = ToolSet> {
     prompt(input: {
         context: CONTEXT;
         signal: AbortSignal;
+        event: 'session.started' | 'turn.started';
         model: AgentResolvedModel;
         snapshot: AgentSnapshot;
     }): ComposedAgentPrompt | Promise<ComposedAgentPrompt>;
@@ -164,6 +175,8 @@ export interface AgentRuntimeConfig<CONTEXT, TOOLS extends ToolSet = ToolSet> {
         /**
          * How long the provider stream may produce nothing before the run is ended
          * as `timeout`. Default 60 000; `null` disables it.
+         * Starts at the provider-call boundary and pauses during local tool execution.
+         * Preparation and approval waiting are outside this clock; tool deadlines are host-owned.
          *
          * There used to be no default, so a hung provider held the conversation's
          * lane forever — the guide states the consequence itself ("a hung