import { AgentBudgetExceededError, AgentBudgetUnpricedError, AgentResolutionError, AgentRuntimeError, AgentRuntimeErrorCode, EvaluatorOptimizerConfigError, InvalidAgentConfigError, InvalidPreferredModelError, MergeBlockedError, MultipleHandoffsInStepError, ProgressWriteError, ProtocolInjectionRejectError, ProviderMiddlewareOrderError, RunStateMalformedError, RunStateVersionUnsupportedError, SubAgentResumeTargetNotFoundError, ToolNotFoundError } from "./errors/index.js";
import { EvaluatorCallable, EvaluatorOptimizerOptions, EvaluatorOptimizerOutcome, EvaluatorOutcome, GeneratorCallable, Rubric, evaluatorOptimizer } from "./evaluator-optimizer/index.js";
import { AgentFallbackEligibility, AgentFallbackPolicy, AgentFallbackReason, isAgentFallbackEligible } from "./fallback/index.js";
import { ChildTrustInput, ContentOriginKind, MergeBiasDecision, MergeGuardConfig, TrustClass, computeSourceTrust, evaluateMerge } from "./lateral-leak/merge-guard.js";
import { ChildResult, FanOutOptions, FanOutResult, MergeStrategy, PerChildBudget, runFanOut } from "./fanout/index.js";
import { CausalityMonitor, CausalityMonitorCheck, CausalityMonitorConfig, CausalityMonitorStrictness, DEFAULT_DENIAL_PATTERNS, DEFAULT_MAX_CHAIN_DEPTH } from "./lateral-leak/causality-monitor.js";
import { ProgressIO, ProgressIOConfig, ProgressReadOptions, ProgressWriteOptions, createProgressIO } from "./progress/index.js";
import { AbortOptions, Agent, AgentCallOptions, AgentCapability, AgentConfig, AgentFanOutOptions, AgentInput, AgentProgressIO, AgentToToolOptions, ApprovalDecision, CompactOptions, CompactionApiResult, HandoffEntry, InboundTaintSeed, OutputSpec, PermissionHook, PermissionHookInput, PermissionHookResult, PostCompactionHook, PrepareStepHook, PrepareStepOverrides, ResponseVerifier, ResumeDirective, RunBudget, SkillsRegistryLike, SubagentForwardPolicy, VerifierResult } from "./types.js";
import { createAgent } from "./factory.js";
import { DescribedFilter, FILTER_KIND_CUSTOM, bySensitivity, compose, custom, defaultHandoffFilter, filters, full, lastN, lastUser, stripReasoning, stripSensitiveOutputs, stripToolCalls, summary } from "./filters/index.js";
import { GuardOutcome, ProtocolBoundary, ProtocolEscapePolicy, ProtocolGuardConfig, guardOutboundContent, resolvePolicy } from "./lateral-leak/protocol-guard.js";
import "./lateral-leak/index.js";
import { PreferredModelResolution, ResolvePreferredModelInput, pickTopTierAcrossTools, resolvePreferredModel } from "./preferred-model/index.js";
import { RUN_STATE_SCHEMA_MAJOR_SUPPORTED, RUN_STATE_SCHEMA_VERSION, SerializeRunStateOptions, SerializedPendingSubRun, SerializedRunState, addModelUsage, aggregateUsageFromByModel, completedToolCallsFromState, createInitialRunState, deserializeRunState, runStateFromJSON, runStateToJSON, serializeRunState } from "./run-state/index.js";
import { SUBAGENT_TOOL, SubAgentFoldTaint, SubAgentToolRefs, getSubAgentToolRefs } from "./runtime/agent-to-tool.js";
import { foldChildRunUsage } from "./runtime/messages.js";
import { ReplayProviderOptions, createReplayProvider } from "./testing/replay-provider.js";
import { GuardrailContext, GuardrailDefinition, GuardrailResult, InputGuardrail, OutputGuardrail } from "@graphorin/security/guardrails";

//#region src/index.d.ts

/**
 * `@graphorin/agent` - agent runtime for the Graphorin framework.
 *
 * The package owns:
 *
 * - The `createAgent({...})` factory that wires the typed
 *   `model -> tool calls -> model` loop, the streaming event
 *   surface, the steering / followUp queues, durable HITL
 *   approvals, multi-agent handoffs (`Agent.toTool`, the filter
 *   library, secrets isolation), the agent-level model fallback
 *   chain, the per-step compaction lifecycle, the per-tool
 *   preferred-model resolution, the structured progress-artifact
 *   APIs, and the lateral-leak defense layer.
 * - `runStateToJSON / runStateFromJSON` helpers for caller-managed
 *   durable HITL.
 * - The handoff filter library.
 * - The agent-step-level fan-out helpers (`runFanOut`,
 *   `evaluatorOptimizer`, the progress IO surface).
 * - Pure decision functions consulted by the loop
 *   (`isAgentFallbackEligible`, `resolvePreferredModel`).
 * - Lateral-leak primitives (`CausalityMonitor`,
 *   `MergeAgentSidewaysInjectionGuard` decision helpers,
 *   protocol-injection guard).
 *
 * The full documentation lives in the package `README.md`.
 *
 * @packageDocumentation
 */
declare const VERSION: string;
//#endregion
export { type AbortOptions, type Agent, AgentBudgetExceededError, AgentBudgetUnpricedError, type AgentCallOptions, type AgentCapability, type AgentConfig, type AgentFallbackEligibility, type AgentFallbackPolicy, type AgentFallbackReason, type AgentFanOutOptions, type AgentInput, type AgentProgressIO, AgentResolutionError, AgentRuntimeError, type AgentRuntimeErrorCode, type AgentToToolOptions, type ApprovalDecision, CausalityMonitor, type CausalityMonitorCheck, type CausalityMonitorConfig, type CausalityMonitorStrictness, type ChildResult, type ChildTrustInput, type CompactOptions, type CompactionApiResult, type ContentOriginKind, DEFAULT_DENIAL_PATTERNS, DEFAULT_MAX_CHAIN_DEPTH, type DescribedFilter, type EvaluatorCallable, EvaluatorOptimizerConfigError, type EvaluatorOptimizerOptions, type EvaluatorOptimizerOutcome, type EvaluatorOutcome, FILTER_KIND_CUSTOM, type FanOutOptions, type FanOutResult, type GeneratorCallable, type GuardOutcome, type GuardrailContext, type GuardrailDefinition, type GuardrailResult, type HandoffEntry, type InboundTaintSeed, type InputGuardrail, InvalidAgentConfigError, InvalidPreferredModelError, type MergeBiasDecision, MergeBlockedError, type MergeGuardConfig, type MergeStrategy, MultipleHandoffsInStepError, type OutputGuardrail, type OutputSpec, type PerChildBudget, type PermissionHook, type PermissionHookInput, type PermissionHookResult, type PostCompactionHook, type PreferredModelResolution, type PrepareStepHook, type PrepareStepOverrides, type ProgressIO, type ProgressIOConfig, type ProgressReadOptions, ProgressWriteError, type ProgressWriteOptions, type ProtocolBoundary, type ProtocolEscapePolicy, type ProtocolGuardConfig, ProtocolInjectionRejectError, ProviderMiddlewareOrderError, RUN_STATE_SCHEMA_MAJOR_SUPPORTED, RUN_STATE_SCHEMA_VERSION, type ReplayProviderOptions, type ResolvePreferredModelInput, type ResponseVerifier, type ResumeDirective, type Rubric, type RunBudget, RunStateMalformedError, RunStateVersionUnsupportedError, SUBAGENT_TOOL, type SerializeRunStateOptions, type SerializedPendingSubRun, type SerializedRunState, type SkillsRegistryLike, type SubAgentFoldTaint, SubAgentResumeTargetNotFoundError, type SubAgentToolRefs, type SubagentForwardPolicy, ToolNotFoundError, type TrustClass, VERSION, type VerifierResult, addModelUsage, aggregateUsageFromByModel, bySensitivity, completedToolCallsFromState, compose, computeSourceTrust, createAgent, createInitialRunState, createProgressIO, createReplayProvider, custom, defaultHandoffFilter, deserializeRunState, evaluateMerge, evaluatorOptimizer, filters, foldChildRunUsage, full, getSubAgentToolRefs, guardOutboundContent, isAgentFallbackEligible, lastN, lastUser, pickTopTierAcrossTools, resolvePolicy, resolvePreferredModel, runFanOut, runStateFromJSON, runStateToJSON, serializeRunState, stripReasoning, stripSensitiveOutputs, stripToolCalls, summary };
//# sourceMappingURL=index.d.ts.map