/**
 * `@adjudicate/adapter-core` — provider-neutral orchestration for
 * adjudicate-backed LLM agents.
 *
 * The loop, bridge, decision translator, persistence shims, and error
 * taxonomy live here. Provider adapters (`@adjudicate/anthropic`,
 * `@adjudicate/openai`, …) implement a `ProviderBridge<H>` against
 * their SDK and re-export a thin `createAdjudicatedAgent` that wires
 * it into this loop.
 *
 * Invariants the loop preserves:
 *   - Every intent envelope crosses `adjudicateAndAudit()`. No bypass,
 *     no taint elevation, no guard-ordering short-circuit.
 *   - First non-continue Decision wins per assistant turn.
 *   - History `H` is opaque to the loop; the bridge owns its shape.
 *   - REWRITE executes the rewritten envelope, never the original.
 *   - DEFER persists full envelope fields so resume can re-derive the
 *     intentHash and detect tampering.
 *
 * Provider adapters MUST NOT bypass this loop. The kernel-side audit
 * + ledger guarantees only hold when every adjudication flows here.
 */

export { createAdjudicatedAgent } from "./loop.js";
export { createQuickAgent } from "./quick-agent.js";
export type { QuickAgentOptions } from "./quick-agent.js";
// 084 — fail-closed CANARY-stage config-seal posture builder (require_signature
// + engageKillSwitchOnMismatch + every_turn). Runtime helper.
export { canaryStageConfigSeal } from "./types.js";
export type {
  AdjudicatedAgent,
  AdjudicatedAgentOptions,
  AdopterExecutor,
  AgentEvent,
  // 084 — the named config-seal options shape the canary-stage helper returns.
  AgentConfigSealOptions,
  AgentLogger,
  AgentOutcome,
  AgentTurnResult,
  AssistantTurn,
  // 025 — capabilities-as-budgets loop configuration (store + grant resolver).
  BudgetConfig,
  // 024 — cap-gated executor contract (kernel-shell-minted, single-use,
  // resource-bound capability gate honored at the executor seam).
  CapabilityGate,
  ConfirmArgs,
  ProviderBridge,
  ProviderRequest,
  ResumeArgs,
  SendInput,
  TokenUsage,
  ToolResultBlock,
  ToolUseRequest,
} from "./types.js";

export {
  buildEnvelopeFromToolUse,
  classifyIncomingToolUse,
  intentKindToApiName,
} from "./bridge.js";
export type {
  BuildEnvelopeFromToolUseArgs,
  ToolUseClassification,
} from "./bridge.js";

export {
  makeOutOfPlanToolResult,
  runBudgetBurnDown,
  translateDecision,
} from "./decisions.js";
export type {
  DecisionTranslation,
  DecisionTranslationContext,
  LoopAction,
} from "./decisions.js";

export {
  createBudgetStore,
  createInMemoryBurnStore,
  createInMemoryConfirmationStore,
  createInMemoryDeferStore,
  createInMemoryMemoryStore,
  createInMemorySessionContaminationStore,
} from "./persistence.js";
export type {
  BudgetStore,
  BurnStore,
  ConfirmationStore,
  CreateInMemoryMemoryStoreOptions,
  CreateInMemorySessionContaminationStoreOptions,
  DeferRedis,
  MemoryStore,
  ParkRedis,
  PendingConfirmation,
  SessionContaminationStore,
  VersionedMemory,
} from "./persistence.js";
export {
  createRedisMemoryStore,
  type CreateRedisMemoryStoreOptions,
} from "./persistence-redis.js";
export {
  createRedisConfirmationStore,
  type ConfirmationRedisClient,
  type CreateRedisConfirmationStoreOptions,
} from "./persistence-redis.js";
// 022 — single-use capability burn store + nonce reconciliation seam.
// The Redis `burn` is an ATOMIC Lua EVAL get-and-delete (BURN_CLAIM_AND_BURN_LUA)
// — no non-atomic GET+DEL double-spend race. `reconcileBurnedCapability`
// re-derives the nonce-bound intentHash (untouched recipe) and compares it
// constant-time before a redemption is honored (fail-closed, §D #6).
export {
  BURN_CLAIM_AND_BURN_LUA,
  createRedisBurnStore,
  reconcileBurnedCapability,
  type BurnRedisClient,
  type CreateRedisBurnStoreOptions,
} from "./persistence-redis.js";
// 022 — re-export the canonical hashing source of truth + nonce-reconciliation
// primitive so the burn-store seam pins ONE hash path (@adjudicate/canonical via
// core's hash.ts re-export, NOT the conformance fork). `reconcileNonceHash`
// re-derives via the kernel's `intentHashInput` recipe (untouched) and compares
// constant-time via `timingSafeHexEqual`.
export {
  reconcileNonceHash,
  sha256Canonical,
  timingSafeHexEqual,
} from "@adjudicate/core";
// 023 — resource-binding verifier surfaced at the executor-seam package so the
// binding gate (`runExecute`) and adopters pin ONE recipe: `verifyResourceBinding`
// re-derives the envelope's `intentHash` via the untouched `intentHashInput`
// recipe (`deriveIntentHash`) and compares constant-time via `timingSafeHexEqual`.
// The executor honors ONLY the kernel-bound payload (anti-IDOR / anti-resource-swap).
export {
  DEFAULT_RESOURCE_BINDING_POLICY,
  deriveIntentHash,
  verifyResourceBinding,
} from "@adjudicate/core";
export type {
  ResourceBindingPolicy,
  ResourceBindingResult,
} from "@adjudicate/core";
export {
  createPostgresMemoryStore,
  type CreatePostgresMemoryStoreOptions,
  type MemorySqlExecutor,
} from "./persistence-postgres.js";

export {
  composeFolds,
  composeMetadataProviders,
  type Fold,
  type MetadataProvider,
} from "./fold-hooks.js";

export {
  createInMemoryTokenUsageStore,
  type CreateInMemoryTokenUsageStoreOptions,
  type ExhaustionEventsFilter,
  type SessionConsumption,
  type SessionsFilter,
  type TenantConsumption,
  type TenantsFilter,
  type TokenBudgetConfig,
  type TokenExhaustionEvent,
  type TokenUsageSample,
  type TokenUsageStore,
} from "./token-usage-store.js";

export {
  createRedisTokenUsageStore,
  type CreateRedisTokenUsageStoreOptions,
  type RedisTokenUsageStore,
  type TokenUsageRedisClient,
} from "./token-usage-store-redis.js";

export {
  applyCostTable,
  type CostBreakdown,
  type PriceTable,
} from "./cost.js";

export {
  createInMemoryCatchUsageStore,
  type CatchCounts,
  type CatchSample,
  type CatchUsageStore,
  type CreateInMemoryCatchUsageStoreOptions,
} from "./catch-usage-store.js";

export {
  noopTraceSink,
  createInMemoryTraceSink,
  type AdapterPauseReason,
  type AdapterTraceEvent,
  type AdapterTracePhase,
  type TraceSink,
} from "./trace.js";

export { AdapterError, AdapterErrorCode } from "./errors.js";

/**
 * In-memory Execution Ledger — re-export from `@adjudicate/audit` for
 * zero-import-friction in tests, quickstarts, and local development.
 *
 * NOT for distributed or persistent production deployments. Production
 * adopters wire `createRedisLedger` (or any backing store with SET-NX,
 * EX, INCR, DECR) from `@adjudicate/audit`.
 */
export { createMemoryLedger } from "@adjudicate/audit";