import { i as OpenClawConfig } from "./types.openclaw-fYj4Ft14.js"; import { M as MemoryCitationsMode } from "./types.tools-DZk2axJU.js"; import { l as ImageContent } from "./types-CZAevFX5.js"; import { o as ModelCompatConfig } from "./types.models-DPSUKHec.js"; import { _ as PromptImageOrderEntry, a as SourceReplyDeliveryMode } from "./types-I4tsJNmk.js"; import { Ar as AgentToolUpdateCallback, Er as AgentTool, kr as AgentToolResult, wr as AgentMessage } from "./index-fUjx6b6L.js"; import { Ac as ProviderRuntimeModel, Ai as CodexAppServerToolResultEvent, Ba as PreemptiveCompactionRoute, Di as CodexAppServerExtensionContext, Do as TranscriptRewriteResult, Gi as AgentToolResultMiddlewareContext, Ja as ToolOutcomeObserver, Ki as AgentToolResultMiddlewareEvent, Oi as CodexAppServerExtensionFactory, Qa as requestDeferredPluginToolApproval, Ra as EmbeddedRunAttemptParams, Ua as AgentRuntimePlan, Va as NormalizedUsage, Wa as BuildAgentRuntimePlanParams, Wi as AgentToolResultMiddleware, Zi as OpenClawAgentToolResult, ac as EmbeddedRunTrigger, bo as ContextEngineRuntimeContext, do as CompactResult, fo as ContextEngine, hc as ExecToolDefaults, jc as ProviderRuntimePluginHandle, lo as AssembleResult, ni as ProcessToolDefaults, yo as ContextEnginePromptCacheInfo, za as EmbeddedRunAttemptResult } from "./types-C_nat0ED.js"; import { d as InboundEventKind } from "./templating-DqpRyvA4.js"; import { r as SkillSnapshot } from "./types-DMkIhnzE.js"; import { s as SandboxFsBridge } from "./backend-handle.types-CSIpH53U.js"; import { t as DiagnosticTraceContext } from "./diagnostic-trace-context-c5mRZYEt.js"; import { n as FailoverReason } from "./types-CMKgUJ7Q.js"; import { r as AnyAgentTool } from "./common-trYgkCB1.js"; import { s as AuthProfileStore } from "./types-BY13dddy.js"; import { Dr as ToolDefinition } from "./index-CKmWkXqM.js"; import { t as SubsystemLogger } from "./subsystem-CfQVin8T.js"; import { t as ModelAuthMode } from "./model-auth-D_xlqZ-D.js"; import { P as PluginHookContextWindowSource, X as PluginHookLlmInputEvent, Z as PluginHookLlmOutputEvent, d as PluginHookAgentEndEvent, f as PluginHookBeforeAgentFinalizeEvent, u as PluginHookAgentContext } from "./hook-types-vtRHl7ZH.js"; import { t as OperatorScope } from "./operator-scopes-Phea7r7e.js"; import { t as getGlobalHookRunner } from "./hook-runner-global-BzvJoLz9.js"; import { l as EmbeddedAgentQueueMessageOptions } from "./runs-DNgzt7ZR.js"; import { M as SandboxContext } from "./sandbox-m0Kb7H3D.js"; import { t as BundleMcpDiagnostic } from "./bundle-mcp-DABlFCpS.js"; import { t as PluginToolMcpMeta } from "./tools-DnSS93hy.js"; import { t as SessionWriteLockAcquireTimeoutConfig } from "./session-write-lock-20UNZM3a.js"; import { TSchema } from "typebox"; //#region src/agents/codex-mcp-config.types.d.ts /** Codex app-server `mcp_servers` config map. */ type CodexMcpServersConfig = Record>; /** Loaded Codex thread-config patch plus diagnostics and cache metadata. */ type CodexBundleMcpThreadConfig = { configPatch?: { mcp_servers: CodexMcpServersConfig; }; diagnostics: BundleMcpDiagnostic[]; evaluated: boolean; fingerprint?: string; }; /** Inputs used to load a Codex bundle-MCP thread config patch. */ type LoadCodexBundleMcpThreadConfigParams = { workspaceDir: string; cfg?: OpenClawConfig; toolsEnabled?: boolean; disableTools?: boolean; toolsAllow?: string[]; }; //#endregion //#region src/agents/harness/native-hook-relay.d.ts type JsonValue = null | boolean | number | string | JsonValue[] | { [key: string]: JsonValue; }; declare const NATIVE_HOOK_RELAY_EVENTS: readonly ["pre_tool_use", "post_tool_use", "permission_request", "before_agent_finalize"]; declare const NATIVE_HOOK_RELAY_PROVIDERS: readonly ["codex"]; type NativeHookRelayEvent = (typeof NATIVE_HOOK_RELAY_EVENTS)[number]; type NativeHookRelayProvider = (typeof NATIVE_HOOK_RELAY_PROVIDERS)[number]; type NativeHookRelayInvocation = { provider: NativeHookRelayProvider; relayId: string; event: NativeHookRelayEvent; nativeEventName?: string; agentId?: string; sessionId: string; sessionKey?: string; runId: string; cwd?: string; model?: string; turnId?: string; transcriptPath?: string; permissionMode?: string; stopHookActive?: boolean; lastAssistantMessage?: string; toolName?: string; toolUseId?: string; rawPayload: JsonValue; receivedAt: string; }; type NativeHookRelayProcessResponse = { stdout: string; stderr: string; exitCode: number; }; type NativeHookRelayRegistration = { relayId: string; provider: NativeHookRelayProvider; generationMismatchGraceExpiresAtMs?: number; generationMismatchGraceAcceptedGeneration?: string; agentId?: string; sessionId: string; sessionKey?: string; config?: OpenClawConfig; runId: string; channelId?: string; allowedEvents: readonly NativeHookRelayEvent[]; expiresAtMs: number; signal?: AbortSignal; }; type NativeHookRelayRegistrationHandle = NativeHookRelayRegistration & { generation?: string; shouldRelayEvent: (event: NativeHookRelayEvent) => boolean; commandForEvent: (event: NativeHookRelayEvent) => string; renew: (ttlMs?: number) => void; unregister: () => void; }; type RegisterNativeHookRelayParams = { provider: NativeHookRelayProvider; relayId?: string; generation?: string; generationMismatchGraceMs?: number; agentId?: string; sessionId: string; sessionKey?: string; config?: OpenClawConfig; runId: string; channelId?: string; allowedEvents?: readonly NativeHookRelayEvent[]; ttlMs?: number; command?: NativeHookRelayCommandOptions; signal?: AbortSignal; }; type NativeHookRelayCommandOptions = { executable?: string; nice?: number | false; nodeExecutable?: string; timeoutMs?: number; }; type InvokeNativeHookRelayParams = { provider: unknown; relayId: unknown; generation?: unknown; event: unknown; rawPayload: unknown; requireGeneration?: boolean; }; type NativeHookRelayPermissionDecision = "allow" | "deny"; type NativeHookRelayPermissionApprovalResult = NativeHookRelayPermissionDecision | "allow-always" | "defer"; type ActiveNativeHookRelayRegistrationHandle = NativeHookRelayRegistrationHandle & { generation: string; }; type NativeHookRelayPermissionApprovalRequest = { provider: NativeHookRelayProvider; agentId?: string; sessionId: string; sessionKey?: string; runId: string; toolName: string; toolCallId?: string; cwd?: string; model?: string; toolInput: Record; signal?: AbortSignal; }; type NativeHookRelayPermissionApprovalRequester = (request: NativeHookRelayPermissionApprovalRequest) => Promise; type NativeHookRelayDeferredToolApprovalRequester = typeof requestDeferredPluginToolApproval; type NativeHookRelayDeferredApprovalOutcome = { handled: true; outcome: "approved-once"; } | { handled: true; outcome: "denied"; reason: string; }; declare function registerNativeHookRelay(params: RegisterNativeHookRelayParams): ActiveNativeHookRelayRegistrationHandle; declare function buildNativeHookRelayCommand(params: { provider: NativeHookRelayProvider; relayId: string; generation?: string; event: NativeHookRelayEvent; preToolUseUnavailable?: "noop"; timeoutMs?: number; executable?: string; nice?: number | false; nodeExecutable?: string; }): string; declare function invokeNativeHookRelay(params: InvokeNativeHookRelayParams): Promise; declare function hasNativeHookRelayInvocation(params: { relayId: string; event: NativeHookRelayEvent; toolUseId?: string; }): boolean; declare function resolveNativeHookRelayDeferredToolApproval(params: { relayId: string; toolUseId?: string; signal?: AbortSignal; }): Promise; declare const testing: { readonly clearNativeHookRelaysForTests: () => void; readonly getNativeHookRelayInvocationsForTests: () => NativeHookRelayInvocation[]; readonly getNativeHookRelayRegistrationForTests: (relayId: string) => NativeHookRelayRegistration | undefined; readonly getNativeHookRelayBridgeDirForTests: () => string; readonly getNativeHookRelayBridgeRegistryPathForTests: (relayId: string) => string; readonly getNativeHookRelayBridgeRecordForTests: (relayId: string) => Record | undefined; readonly isNativeHookRelayBridgeLookupRetryableForTests: (error: unknown, elapsedMs?: number) => boolean; readonly formatPermissionApprovalDescriptionForTests: (request: NativeHookRelayPermissionApprovalRequest) => string; readonly permissionRequestContentFingerprintForTests: (request: NativeHookRelayPermissionApprovalRequest) => string; readonly permissionRequestToolInputKeyFingerprintForTests: (toolInput: Record) => string; readonly setNativeHookRelayPermissionApprovalRequesterForTests: (requester: NativeHookRelayPermissionApprovalRequester) => void; readonly setNativeHookRelayDeferredToolApprovalRequesterForTests: (requester: NativeHookRelayDeferredToolApprovalRequester) => void; }; //#endregion //#region src/plugins/hook-agent-context.d.ts /** Builds channel/provider fields for plugin agent hook context. */ declare function buildAgentHookContextChannelFields(params: { sessionKey?: string | null; messageChannel?: string | null; messageProvider?: string | null; currentChannelId?: string | null; messageTo?: string | null; }): Pick; //#endregion //#region src/agents/run-cleanup-timeout.d.ts type AgentCleanupLogger = { warn: (message: string) => void; }; /** Resolve the timeout for one agent cleanup step. */ /** Run one cleanup step with timeout logging and late-rejection handling. */ declare function runAgentCleanupStep(params: { runId: string; sessionId: string; step: string; cleanup: () => Promise; getTimeoutDetails?: () => string | undefined; log: AgentCleanupLogger; env?: NodeJS.ProcessEnv; timeoutMs?: number; }): Promise; //#endregion //#region src/agents/embedded-agent-runner/logger.d.ts /** * Shared logger for embedded-agent runner internals. */ declare const log: SubsystemLogger; //#endregion //#region src/agents/runtime-plan/build.d.ts /** Build the complete runtime plan for an embedded agent attempt. */ declare function buildAgentRuntimePlan(params: BuildAgentRuntimePlanParams): AgentRuntimePlan; //#endregion //#region src/agents/model-fallback.d.ts type ModelFallbackResultClassification = { message: string; reason?: FailoverReason; status?: number; code?: string; rawError?: string; } | { error: unknown; } | null | undefined; //#endregion //#region src/agents/embedded-agent-runner/result-fallback-classifier.d.ts /** Returns a fallback classification when an embedded run failed without user-visible output. */ declare function classifyEmbeddedAgentRunResultForModelFallback(params: { provider: string; model: string; result: unknown; hasDirectlySentBlockReply?: boolean; hasBlockReplyPipelineOutput?: boolean; }): ModelFallbackResultClassification; //#endregion //#region src/agents/tools/gateway.d.ts /** Optional gateway connection overrides accepted by agent tools. */ type GatewayCallOptions = { gatewayUrl?: string; gatewayToken?: string; timeoutMs?: number; }; /** * Calls a gateway method as the agent-tool backend client with least-privilege scopes. */ declare function callGatewayTool>(method: string, opts: GatewayCallOptions, params?: unknown, extra?: { expectFinal?: boolean; scopes?: OperatorScope[]; }): Promise; //#endregion //#region src/shared/node-list-types.d.ts /** Node record returned by gateway node-list endpoints. */ type NodeListNode = { nodeId: string; displayName?: string; platform?: string; version?: string; coreVersion?: string; uiVersion?: string; clientId?: string; clientMode?: string; remoteIp?: string; deviceFamily?: string; modelIdentifier?: string; pathEnv?: string; caps?: string[]; commands?: string[]; permissions?: Record; paired?: boolean; connected?: boolean; connectedAtMs?: number; lastSeenAtMs?: number; lastSeenReason?: string; approvedAtMs?: number; }; //#endregion //#region src/agents/tools/nodes-utils.d.ts type DefaultNodeFallback = "none" | "first"; type DefaultNodeSelectionOptions = { capability?: string; fallback?: DefaultNodeFallback; preferLocalMac?: boolean; }; /** Selects the implicit node target when a tool call omits an explicit node query. */ declare function selectDefaultNodeFromList(nodes: NodeListNode[], options?: DefaultNodeSelectionOptions): NodeListNode | null; /** Lists Gateway nodes, falling back to paired-node records for older Gateway versions. */ declare function listNodes(opts: GatewayCallOptions): Promise; /** Resolves a node id from an already-loaded node list using shared node matching rules. */ declare function resolveNodeIdFromList(nodes: NodeListNode[], query?: string, allowDefault?: boolean): string; //#endregion //#region src/auto-reply/tool-meta.d.ts type ToolAggregateOptions = { markdown?: boolean; }; /** Shortens a filesystem path for display. */ /** Formats one grouped tool-progress label from a tool name and metadata entries. */ declare function formatToolAggregate(toolName?: string, metas?: string[], options?: ToolAggregateOptions): string; //#endregion //#region src/agents/embedded-agent-messaging.d.ts /** Return true for core or channel-plugin messaging tool names. */ declare function isMessagingTool(toolName: string): boolean; /** Return true when the specific tool invocation is an outbound send. */ declare function isMessagingToolSendAction(toolName: string, args: Record): boolean; //#endregion //#region src/agents/embedded-agent-subscribe.tools.d.ts declare function filterToolResultMediaUrls(toolName: string | undefined, mediaUrls: string[], result?: unknown, trustedLocalMediaToolNames?: ReadonlySet): string[]; /** * Extract media file paths from a tool result. * * Strategy (first match wins): * 1. Read structured `details.media` attachments from tool details. * 2. Fall back to `details.path` when image content exists (legacy imageResult). * * Returns an empty array when no media is found (e.g. embedded `read` tool * returns base64 image data but no file path; those need a different delivery * path like saving to a temp file). */ type ToolResultMediaArtifact = { mediaUrls: string[]; audioAsVoice?: boolean; trustedLocalMedia?: boolean; }; declare function extractToolResultMediaArtifact(result: unknown): ToolResultMediaArtifact | undefined; //#endregion //#region src/agents/model-tool-support.d.ts /** * Model capability helper for tool-use support. * * Provider catalogs can opt a model out via `compat.supportsTools === false`; * absent metadata remains permissive for older catalog entries. */ /** Returns whether a catalog model should be offered tool calls. */ declare function supportsModelTools(model: { compat?: unknown; }): boolean; //#endregion //#region src/agents/skill-workshop-prompt.d.ts /** * System-prompt contribution for routing durable skill edits through the * Skill Workshop tool instead of direct filesystem writes. */ declare const SKILL_WORKSHOP_TOOL_NAME = "skill_workshop"; /** Build the system-prompt section for Skill Workshop routing rules. */ declare function buildSkillWorkshopPromptSection(): string[]; //#endregion //#region src/agents/embedded-agent-runner/run/attempt.prompt-helpers.d.ts declare function resolveAttemptFsWorkspaceOnly(params: { config?: OpenClawConfig; sessionAgentId: string; }): boolean; type AfterTurnRuntimeContextAttempt = Pick & { sessionId?: EmbeddedRunAttemptParams["sessionId"]; }; /** Build runtime context passed into context-engine afterTurn hooks. */ declare function buildAfterTurnRuntimeContext(params: { attempt: AfterTurnRuntimeContextAttempt; workspaceDir: string; cwd?: string; agentDir: string; activeAgentId?: string; contextEnginePluginId?: string; tokenBudget?: number; currentTokenCount?: number; promptCache?: ContextEnginePromptCacheInfo; }): ContextEngineRuntimeContext; declare function buildAfterTurnRuntimeContextFromUsage(params: Omit[0], "currentTokenCount"> & { lastCallUsage?: NormalizedUsage; }): ContextEngineRuntimeContext; //#endregion //#region src/agents/embedded-agent-runner/run/attempt.thread-helpers.d.ts /** * Returns the workspace path that must be mounted for sandboxed spawn attempts. * Read-only sandbox modes need the resolved workspace explicitly; full rw * access uses the normal workspace wiring. */ declare function resolveAttemptSpawnWorkspaceDir(params: { sandbox?: { enabled?: boolean; workspaceAccess?: string; } | null; resolvedWorkspace: string; }): string | undefined; //#endregion //#region src/agents/embedded-agent-runner/run/attempt.tool-run-context.d.ts /** * Builds the stable tool-run context forwarded into an embedded-attempt execution. */ declare function buildEmbeddedAttemptToolRunContext(params: { trigger?: EmbeddedRunTrigger; jobId?: string; memoryFlushWritePath?: string; toolsAllow?: string[]; trace?: DiagnosticTraceContext; }): { trigger?: EmbeddedRunTrigger; jobId?: string; memoryFlushWritePath?: string; runtimeToolAllowlist?: string[]; trace?: DiagnosticTraceContext; }; //#endregion //#region src/agents/tool-search.d.ts type CatalogSource = "openclaw" | "mcp" | "client"; type CatalogTool = AnyAgentTool | ToolDefinition; type ToolSearchCatalogToolExecutor = (params: { tool: CatalogTool; toolName: string; toolCallId: string; parentToolCallId?: string; input: unknown; signal?: AbortSignal; onUpdate?: AgentToolUpdateCallback; }) => Promise>; /** Catalog entry retained behind compacted Tool Search control tools. */ type ToolSearchCatalogEntry = { id: string; source: CatalogSource; sourceName?: string; mcp?: PluginToolMcpMeta; name: string; label?: string; description: string; parameters?: unknown; tool: CatalogTool; }; type ToolSearchCatalogSession = { entries: ToolSearchCatalogEntry[]; searchCount: number; describeCount: number; callCount: number; }; type ToolSearchCatalogRef = { current?: ToolSearchCatalogSession; }; //#endregion //#region src/agents/agent-tools.d.ts type OpenClawCodingToolConstructionPlan = { includeBaseCodingTools: boolean; includeShellTools: boolean; includeChannelTools: boolean; includeOpenClawTools: boolean; includePluginTools: boolean; }; /** Build the runtime tool list for one agent run. */ declare function createOpenClawCodingTools(options?: { agentId?: string; exec?: ExecToolDefaults & ProcessToolDefaults; messageProvider?: string; agentAccountId?: string; messageTo?: string; messageThreadId?: string | number; sandbox?: SandboxContext | null; sessionKey?: string; /** * The actual live run session key. When the tool set is constructed with a * sandbox/policy session key, this allows `session_status({sessionKey:"current"})` * to resolve to the live run session instead of the stale sandbox key. */ runSessionKey?: string; /** Ephemeral session UUID — regenerated on /new and /reset. */ sessionId?: string; /** Stable run identifier for this agent invocation. */ runId?: string; /** Diagnostic trace context for hook/log correlation during this run. */ trace?: DiagnosticTraceContext; /** What initiated this run (for trigger-specific tool restrictions). */ trigger?: string; /** Stable cron job identifier populated for cron-triggered runs. */ jobId?: string; /** Relative workspace path that memory-triggered writes may append to. */ memoryFlushWritePath?: string; agentDir?: string; /** Task working directory for coding tools. Defaults to workspaceDir. */ cwd?: string; workspaceDir?: string; /** * Workspace directory that spawned subagents should inherit. * When sandboxing uses a copied workspace (`ro` or `none`), workspaceDir is the * sandbox copy but subagents should inherit the real agent workspace instead. * Defaults to workspaceDir when not set. */ spawnWorkspaceDir?: string; config?: OpenClawConfig; abortSignal?: AbortSignal; /** Disable hook-owned diagnostics when an outer runtime owns tool diagnostics. */ emitBeforeToolCallDiagnostics?: boolean; /** * Provider of the currently selected model (used for provider-specific tool quirks). * Example: "anthropic", "openai", "google", "openai". */ modelProvider?: string; /** Model id for the current provider (used for model-specific tool gating). */ modelId?: string; /** Model API for the current provider (used for provider-native tool arbitration). */ modelApi?: string; /** Model context window in tokens (used to scale read-tool output budget). */ modelContextWindowTokens?: number; /** Resolved runtime model compatibility hints. */ modelCompat?: ModelCompatConfig; /** If false, keep OpenClaw web_search even when a provider-native search tool is active. */ suppressManagedWebSearch?: boolean; /** * Auth mode for the current provider. We only need this for Anthropic OAuth * tool-name blocking quirks. */ modelAuthMode?: ModelAuthMode; /** Current channel ID for auto-threading (Slack). */ currentChannelId?: string; /** Normalized conversation id exposed to tool hooks. Defaults to currentChannelId. */ hookChannelId?: string; /** Current thread timestamp for auto-threading (Slack). */ currentThreadTs?: string; /** Current inbound message id for action fallbacks (e.g. Telegram react). */ currentMessageId?: string | number; /** True when the current inbound turn carried audio media. */ currentInboundAudio?: boolean; /** Group id for channel-level tool policy resolution. */ groupId?: string | null; /** Group channel label (e.g. #general) for channel-level tool policy resolution. */ groupChannel?: string | null; /** Group space label (e.g. guild/team id) for channel-level tool policy resolution. */ groupSpace?: string | null; /** Trusted provider role ids for the requester in this group turn. */ memberRoleIds?: string[]; /** Parent session key for subagent group policy inheritance. */ spawnedBy?: string | null; senderId?: string | null; senderName?: string | null; senderUsername?: string | null; senderE164?: string | null; /** Reply-to mode for Slack auto-threading. */ replyToMode?: "off" | "first" | "all" | "batched"; /** Mutable ref to track if a reply was sent (for "first" mode). */ hasRepliedRef?: { value: boolean; }; /** Allow plugin tools for this run to late-bind the gateway subagent. */ allowGatewaySubagentBinding?: boolean; /** Runtime-scoped explicit allowlist used to materialize matching plugin tools. */ runtimeToolAllowlist?: string[]; /** If true, the model has native vision capability */ modelHasVision?: boolean; /** Require explicit message targets (no implicit last-route sends). */ requireExplicitMessageTarget?: boolean; /** Visible source replies must be sent through the message tool when set to message_tool_only. */ sourceReplyDeliveryMode?: SourceReplyDeliveryMode; inboundEventKind?: InboundEventKind; /** If true, omit the message tool from the tool list. */ disableMessageTool?: boolean; /** Keep the message tool available even when the selected profile omits it. */ forceMessageTool?: boolean; /** Include the heartbeat response tool for structured heartbeat outcomes. */ enableHeartbeatTool?: boolean; /** Keep the heartbeat response tool available even when the selected profile omits it. */ forceHeartbeatTool?: boolean; /** If false, build plugin tools only while preserving the shared policy pipeline. */ includeCoreTools?: boolean; /** Include Tool Search control tools when enabled for this run. */ includeToolSearchControls?: boolean; /** Executes cataloged tools through the active agent run lifecycle. */ toolSearchCatalogExecutor?: ToolSearchCatalogToolExecutor; /** Runtime-local Tool Search catalog ref shared with attempt compaction. */ toolSearchCatalogRef?: ToolSearchCatalogRef; /** Limits which tool families are materialized before the shared policy pipeline runs. */ toolConstructionPlan?: OpenClawCodingToolConstructionPlan; /** Trusted sender identity bit for command/channel-action auth; does not filter model tools. */ senderIsOwner?: boolean; /** Auth profiles already loaded for this run; used for prompt-time tool availability. */ authProfileStore?: AuthProfileStore; /** Callback invoked when sessions_yield tool is called. */ onYield?: (message: string) => Promise | void; /** Optional instrumentation callback for tool preparation stage timing. */ recordToolPrepStage?: (name: string) => void; /** Lower routine policy-removal audits for diagnostic-only tool probes. */ toolPolicyAuditLogLevel?: "info" | "debug"; /** Live observer called after wrapped tool outcomes are recorded. */ onToolOutcome?: ToolOutcomeObserver; /** Runtime-only resolved skill paths that the read tool may load under workspaceOnly. */ skillsSnapshot?: SkillSnapshot; }): AnyAgentTool[]; //#endregion //#region src/agents/embedded-agent-runner/run/attempt-tool-construction-plan.d.ts /** * Applies a runtime allowlist to a concrete tool list after expanding tool and * plugin groups. Undefined allowlists keep all tools; an explicit empty list * intentionally disables all runtime tools. */ declare function applyEmbeddedAttemptToolsAllow(tools: T[], toolsAllow?: string[], options?: { toolMeta?: (tool: T) => { pluginId: string; } | undefined; }): T[]; /** * Decides which tool families need to be constructed for an embedded attempt. * This keeps allowlisted plugin/channel tools available without forcing every * local core tool factory to run for narrow plugin-only configurations. */ declare function resolveEmbeddedAttemptToolConstructionPlan(params: { disableTools?: boolean; isRawModelRun?: boolean; toolsAllow?: string[]; forceMessageTool?: boolean; }): { constructTools: boolean; includeCoreTools: boolean; runtimeToolAllowlist?: string[]; codingToolConstructionPlan: OpenClawCodingToolConstructionPlan; }; //#endregion //#region src/agents/harness/registry.d.ts /** Calls each registered harness dispose hook during registry shutdown or reload. */ declare function disposeRegisteredAgentHarnesses(): Promise; //#endregion //#region src/agents/tool-schema-projection.d.ts /** JSON-safe schema value used when projecting runtime tool parameters. */ type RuntimeToolInputSchemaJson = null | boolean | number | string | RuntimeToolInputSchemaJson[] | { [key: string]: RuntimeToolInputSchemaJson; }; /** Projected runtime tool schema plus validation violations. */ type RuntimeToolInputSchemaProjection = { readonly schema: RuntimeToolInputSchemaJson; readonly violations: readonly string[]; }; /** Diagnostic for one incompatible runtime tool schema. */ type RuntimeToolSchemaDiagnostic = { readonly toolName: string; readonly toolIndex: number; readonly violations: readonly string[]; }; /** Runtime tool list split into compatible tools and schema diagnostics. */ type RuntimeToolSchemaInspection> = { readonly tools: readonly TTool[]; readonly diagnostics: readonly RuntimeToolSchemaDiagnostic[]; }; /** Projects one runtime tool input schema to JSON and reports runtime incompatibilities. */ declare function projectRuntimeToolInputSchema(schema: unknown, path?: string): RuntimeToolInputSchemaProjection; /** Inspects runtime tool schemas and returns diagnostics without filtering tools. */ declare function inspectRuntimeToolInputSchemas(tools: readonly Pick[]): RuntimeToolSchemaDiagnostic[]; /** Filters tools to those that providers can normalize before dispatch. */ declare function filterProviderNormalizableTools>(tools: readonly TTool[]): RuntimeToolSchemaInspection; //#endregion //#region src/agents/runtime-plan/tools.d.ts type AgentRuntimeToolPolicyParams = { runtimePlan?: AgentRuntimePlan; tools: AgentTool[]; provider: string; config?: OpenClawConfig; workspaceDir?: string; env?: NodeJS.ProcessEnv; modelId?: string; modelApi?: string | null; model?: ProviderRuntimeModel; runtimeHandle?: ProviderRuntimePluginHandle; allowProviderRuntimePluginLoad?: boolean; onPreNormalizationSchemaDiagnostics?: (diagnostics: readonly RuntimeToolSchemaDiagnostic[], tools: readonly AgentTool[]) => void; }; /** Normalizes tool schemas through a runtime plan or provider fallback policy. */ declare function normalizeAgentRuntimeTools(params: AgentRuntimeToolPolicyParams): AgentTool[]; /** Emits runtime-plan or provider fallback diagnostics for normalized tools. */ declare function logAgentRuntimeToolDiagnostics(params: AgentRuntimeToolPolicyParams): void; //#endregion //#region src/agents/embedded-agent-runner/tool-schema-runtime.d.ts type ProviderToolSchemaParams = { tools: AgentTool[]; provider: string; config?: OpenClawConfig; workspaceDir?: string; env?: NodeJS.ProcessEnv; modelId?: string; modelApi?: string | null; model?: ProviderRuntimeModel; runtimeHandle?: ProviderRuntimePluginHandle; allowRuntimePluginLoad?: boolean; }; /** * Runs provider-owned tool-schema normalization without encoding provider * families in the embedded runner. */ declare function normalizeProviderToolSchemas(params: ProviderToolSchemaParams): AgentTool[]; //#endregion //#region src/agents/sandbox/fs-paths.d.ts declare function resolveWritableSandboxBindHostRoots(binds: readonly string[] | undefined): string[]; declare function hasSandboxBindContainerPathAliases(binds: readonly string[] | undefined): boolean; declare function hasSandboxBindReadonlyHostShadows(binds: readonly string[] | undefined): boolean; //#endregion //#region src/agents/harness/hook-context.d.ts /** * Input facts used to build the agent portion of plugin hook events. * * Only stable run/session/model facts are forwarded to plugin hooks; config remains a local * construction input so hooks do not accidentally depend on mutable raw configuration. */ type AgentHarnessHookContext = { runId: string; trace?: DiagnosticTraceContext; jobId?: string; agentId?: string; sessionKey?: string; sessionId?: string; workspaceDir?: string; modelProviderId?: string; modelId?: string; messageProvider?: string; trigger?: string; channelId?: string; contextTokenBudget?: number; contextWindowSource?: PluginHookContextWindowSource; contextWindowReferenceTokens?: number; config?: OpenClawConfig; }; //#endregion //#region src/agents/harness/prompt-compaction-hook-helpers.d.ts /** Prompt/developer-instruction pair after harness prompt-build hooks run. */ type AgentHarnessPromptBuildResult = { prompt: string; developerInstructions: string; }; /** Runs before-prompt hooks and returns the adjusted prompt fields. */ declare function resolveAgentHarnessBeforePromptBuildResult(params: { prompt: string; developerInstructions: string; messages: unknown[]; ctx: AgentHarnessHookContext; }): Promise; /** Runs best-effort before-compaction hooks for a harness session. */ declare function runAgentHarnessBeforeCompactionHook(params: { sessionFile: string; messages: AgentMessage[]; ctx: AgentHarnessHookContext; }): Promise; /** Runs best-effort after-compaction hooks for a harness session. */ declare function runAgentHarnessAfterCompactionHook(params: { sessionFile: string; messages: AgentMessage[]; ctx: AgentHarnessHookContext; compactedCount: number; }): Promise; //#endregion //#region src/agents/harness/codex-app-server-extensions.d.ts /** Creates a runner that applies registered Codex app-server tool-result extensions. */ declare function createCodexAppServerToolResultExtensionRunner(ctx: CodexAppServerExtensionContext, factories?: CodexAppServerExtensionFactory[]): { applyToolResultExtensions(event: CodexAppServerToolResultEvent): Promise>; }; //#endregion //#region src/agents/harness/tool-result-middleware.d.ts declare function createAgentToolResultMiddlewareRunner(ctx: AgentToolResultMiddlewareContext, handlers?: AgentToolResultMiddleware[]): { applyToolResultMiddleware(event: AgentToolResultMiddlewareEvent): Promise; }; //#endregion //#region src/agents/harness/context-engine-lifecycle.d.ts type HarnessContextEngine = ContextEngine; /** * Run optional bootstrap + bootstrap maintenance for a harness-owned context engine. */ declare function bootstrapHarnessContextEngine(params: { hadSessionFile: boolean; contextEngine?: HarnessContextEngine; sessionId: string; sessionKey?: string; sessionFile: string; sessionManager?: unknown; runtimeContext?: ContextEngineRuntimeContext; runMaintenance?: typeof runHarnessContextEngineMaintenance; config?: SessionWriteLockAcquireTimeoutConfig; warn: (message: string) => void; }): Promise; /** * Assemble model context through the active harness-owned context engine. */ declare function assembleHarnessContextEngine(params: { contextEngine?: HarnessContextEngine; sessionId: string; sessionKey?: string; messages: AgentMessage[]; tokenBudget?: number; availableTools?: Set; citationsMode?: MemoryCitationsMode; modelId: string; prompt?: string; }): Promise; /** * Finalize a completed harness turn via afterTurn or ingest fallbacks. */ declare function finalizeHarnessContextEngineTurn(params: { contextEngine?: HarnessContextEngine; promptError: boolean; aborted: boolean; yieldAborted: boolean; sessionIdUsed: string; sessionKey?: string; sessionFile: string; messagesSnapshot: AgentMessage[]; prePromptMessageCount: number; tokenBudget?: number; runtimeContext?: ContextEngineRuntimeContext; runMaintenance?: typeof runHarnessContextEngineMaintenance; sessionManager?: unknown; config?: SessionWriteLockAcquireTimeoutConfig; warn: (message: string) => void; /** True when this turn belongs to a heartbeat run. */ isHeartbeat?: boolean; }): Promise<{ postTurnFinalizationSucceeded: boolean; }>; /** * Build runtime context passed into harness context-engine hooks. */ declare function buildHarnessContextEngineRuntimeContext(params: Parameters[0]): ContextEngineRuntimeContext; /** * Build runtime context passed into harness context-engine hooks from usage data. */ declare function buildHarnessContextEngineRuntimeContextFromUsage(params: Parameters[0]): ContextEngineRuntimeContext; /** * Run optional transcript maintenance for a harness-owned context engine. */ declare function runHarnessContextEngineMaintenance(params: { contextEngine?: HarnessContextEngine; sessionId: string; sessionKey?: string; sessionFile: string; reason: "bootstrap" | "compaction" | "turn"; sessionManager?: unknown; runtimeContext?: ContextEngineRuntimeContext; executionMode?: "foreground" | "background"; onDeferredMaintenance?: (promise: Promise) => void; config?: SessionWriteLockAcquireTimeoutConfig; }): Promise; /** * Return true when a non-legacy context engine should affect plugin harness behavior. */ declare function isActiveHarnessContextEngine(contextEngine: ContextEngine | undefined): contextEngine is ContextEngine; //#endregion //#region src/agents/embedded-agent-runner/compaction-safety-timeout.d.ts declare function resolveCompactionTimeoutMs(cfg?: OpenClawConfig): number; declare function compactWithSafetyTimeout(compact: (abortSignal?: AbortSignal) => Promise, timeoutMs?: number, opts?: { abortSignal?: AbortSignal; onCancel?: () => void; }): Promise; /** Parameters for a single {@link ContextEngine.compact} invocation. */ type ContextEngineCompactParams = Parameters[0]; /** * Invoke a plugin-owned {@link ContextEngine.compact} bounded by the same * finite safety timeout that protects native runtime compaction. * * Plugin context engines that advertise `ownsCompaction` previously had their * `compact()` awaited with no timeout, no watchdog, and no abort signal — a * slow or hung plugin compaction would hang the agent turn indefinitely. This * wrapper closes that gap: * - the call is bounded by `timeoutMs` (host-resolved, default * {@link EMBEDDED_COMPACTION_TIMEOUT_MS}); on timeout it rejects with a * "Compaction timed out" error so the caller's existing failure handling * runs instead of hanging; * - the timeout signal and caller `abortSignal` are both raced against the * call (so a non-cooperating engine is still bounded) and threaded into the * `compact()` params (so cooperating engines can cancel their own in-flight * work). * * Callers keep their existing try/catch — a timeout or abort surfaces as a * thrown error, never a silent hang. */ declare function compactContextEngineWithSafetyTimeout(contextEngine: Pick, params: ContextEngineCompactParams, timeoutMs?: number, abortSignal?: AbortSignal): Promise; //#endregion //#region src/agents/embedded-agent-runner/run/preemptive-compaction.d.ts declare const PREEMPTIVE_OVERFLOW_ERROR_TEXT = "Context overflow: prompt too large for the model (precheck)."; /** Pre-prompt routing decision plus the budget facts used to explain it in logs and session state. */ type PreemptiveCompactionDecision = { route: PreemptiveCompactionRoute; shouldCompact: boolean; estimatedPromptTokens: number; pressureSource?: string; promptBudgetBeforeReserve: number; overflowTokens: number; toolResultReducibleChars: number; effectiveReserveTokens: number; }; /** Token pressure reported by the rendered provider-boundary prompt when available. */ type LlmBoundaryTokenPressure = { estimatedPromptTokens: number; source: string; renderedChars?: number; }; /** Estimates only the rendered prompt/system portion when history has already been accounted for. */ declare function estimateRenderedLlmBoundaryTokenPressure(params: { systemPrompt?: string; prompt: string; }): number; /** * Decides whether a run should compact before submitting the prompt, and * whether reducible tool results can avoid or follow compaction. Rendered LLM * boundary pressure wins over local transcript estimates when supplied. */ declare function shouldPreemptivelyCompactBeforePrompt(params: { messages: AgentMessage[]; unwindowedMessages?: AgentMessage[]; systemPrompt?: string; prompt: string; contextTokenBudget: number; reserveTokens: number; toolResultMaxChars?: number; llmBoundaryTokenPressure?: LlmBoundaryTokenPressure; }): PreemptiveCompactionDecision; /** Formats the compact operator log line for one pre-prompt budget check. */ declare function formatPrePromptPrecheckLog(params: { result: PreemptiveCompactionDecision; sessionKey?: string; sessionId?: string; provider: string; modelId: string; messageCount: number; unwindowedMessageCount?: number; contextTokenBudget: number; reserveTokens: number; sessionFile?: string; }): string; //#endregion //#region src/agents/harness/hook-helpers.d.ts /** Runs best-effort after-tool-call hooks for a completed tool invocation. */ declare function runAgentHarnessAfterToolCallHook(params: { toolName: string; toolCallId: string; runId?: string; agentId?: string; sessionId?: string; sessionKey?: string; channelId?: string; startArgs: Record; result?: unknown; error?: string; startedAt?: number; }): Promise; /** Runs before-message-write hooks and returns the possibly rewritten message. */ declare function runAgentHarnessBeforeMessageWriteHook(params: { message: AgentMessage; agentId?: string; sessionKey?: string; }): AgentMessage | null; //#endregion //#region src/agents/harness/lifecycle-hook-helpers.d.ts type AgentHarnessHookRunner = ReturnType; /** Returns the current global hook runner for harness lifecycle hooks. */ declare function getAgentHarnessHookRunner(): AgentHarnessHookRunner; /** Dispatches best-effort LLM input hooks for a harness attempt. */ declare function runAgentHarnessLlmInputHook(params: { event: PluginHookLlmInputEvent; ctx: AgentHarnessHookContext; hookRunner?: AgentHarnessHookRunner; }): void; /** Dispatches best-effort LLM output hooks for a harness attempt. */ declare function runAgentHarnessLlmOutputHook(params: { event: PluginHookLlmOutputEvent; ctx: AgentHarnessHookContext; hookRunner?: AgentHarnessHookRunner; }): void; /** Starts agent_end hooks with unref timeout behavior. */ declare function runAgentHarnessAgentEndHook(params: { event: PluginHookAgentEndEvent; ctx: AgentHarnessHookContext; hookRunner?: AgentHarnessHookRunner; }): void; /** Runs agent_end hooks and waits for completion. */ declare function awaitAgentHarnessAgentEndHook(params: { event: PluginHookAgentEndEvent; ctx: AgentHarnessHookContext; hookRunner?: AgentHarnessHookRunner; }): Promise; /** Normalized before-finalize hook decision consumed by harness loops. */ type AgentHarnessBeforeAgentFinalizeOutcome = { action: "continue"; } | { action: "revise"; reason: string; } | { action: "finalize"; reason?: string; }; /** Runs before-finalize hooks and normalizes finalize/revise/continue decisions. */ declare function runAgentHarnessBeforeAgentFinalizeHook(params: { event: PluginHookBeforeAgentFinalizeEvent; ctx: AgentHarnessHookContext; hookRunner?: AgentHarnessHookRunner; }): Promise; //#endregion //#region src/plugin-sdk/agent-harness-runtime.d.ts /** Default truncation limit for user-facing tool progress output. */ declare const TOOL_PROGRESS_OUTPUT_MAX_CHARS = 8000; /** * @deprecated Active-run queueing is an internal runtime concern. This legacy * boolean API only reports immediate queue eligibility and cannot observe async * runtime rejection; runtime-owned delivery paths should use acceptance-aware * steering instead of public SDK queueing. */ declare function queueAgentHarnessMessage(sessionId: string, text: string, options?: EmbeddedAgentQueueMessageOptions): boolean; /** Detect prompt image references and load them through the same limits used by embedded runs. */ declare function detectAndLoadAgentHarnessPromptImages(params: { prompt: string; workspaceDir: string; model: { input?: string[]; }; existingImages?: ImageContent[]; imageOrder?: PromptImageOrderEntry[]; config?: OpenClawConfig; workspaceOnly?: boolean; localRoots?: readonly string[]; sandbox?: { root: string; bridge: SandboxFsBridge; }; }): Promise<{ images: ImageContent[]; detectedRefs: Array<{ raw: string; resolved: string; type: "path" | "media-uri"; }>; loadedCount: number; skippedCount: number; }>; /** Load Codex bundle MCP thread config without forcing the heavy config module into SDK imports. */ declare function loadCodexBundleMcpThreadConfig(params: LoadCodexBundleMcpThreadConfigParams): Promise; /** * Derive the same compact user-facing tool detail that embedded OpenClaw uses for progress logs. */ type ToolProgressDetailMode = "explain" | "raw"; /** Infer compact display metadata for one tool invocation from its name and arguments. */ declare function inferToolMetaFromArgs(toolName: string, args: unknown, options?: { detailMode?: ToolProgressDetailMode; }): string | undefined; /** * Prepare verbose tool output for user-facing progress messages. */ declare function formatToolProgressOutput(output: string, options?: { maxChars?: number; }): string | undefined; /** Inputs used to classify a finished harness turn with little or no visible assistant output. */ type AgentHarnessTerminalOutcomeInput = { assistantTexts: readonly string[]; reasoningText?: string | null; planText?: string | null; promptError?: unknown; turnCompleted: boolean; }; /** Terminal fallback classification emitted by agent harness adapters. */ type AgentHarnessTerminalOutcomeClassification = NonNullable; /** * Classify terminal harness turns that completed without assistant output that * should advance fallback. Deliberate silent replies such as NO_REPLY count as * intentional output, while whitespace-only text remains fallback-eligible. * This is intentionally SDK-level so plugin harness adapters such as Codex * preserve the same OpenClaw-owned fallback signals as the built-in OpenClaw path * without re-implementing terminal-result policy. */ declare function classifyAgentHarnessTerminalOutcome(params: AgentHarnessTerminalOutcomeInput): AgentHarnessTerminalOutcomeClassification | undefined; //#endregion export { applyEmbeddedAttemptToolsAllow as $, buildHarnessContextEngineRuntimeContext as A, registerNativeHookRelay as At, hasSandboxBindContainerPathAliases as B, formatPrePromptPrecheckLog as C, NativeHookRelayEvent as Ct, resolveCompactionTimeoutMs as D, buildNativeHookRelayCommand as Dt, compactWithSafetyTimeout as E, NativeHookRelayRegistrationHandle as Et, createAgentToolResultMiddlewareRunner as F, normalizeAgentRuntimeTools as G, resolveWritableSandboxBindHostRoots as H, createCodexAppServerToolResultExtensionRunner as I, RuntimeToolSchemaDiagnostic as J, RuntimeToolInputSchemaJson as K, resolveAgentHarnessBeforePromptBuildResult as L, finalizeHarnessContextEngineTurn as M, testing as Mt, isActiveHarnessContextEngine as N, CodexBundleMcpThreadConfig as Nt, assembleHarnessContextEngine as O, hasNativeHookRelayInvocation as Ot, runHarnessContextEngineMaintenance as P, LoadCodexBundleMcpThreadConfigParams as Pt, disposeRegisteredAgentHarnesses as Q, runAgentHarnessAfterCompactionHook as R, estimateRenderedLlmBoundaryTokenPressure as S, buildAgentHookContextChannelFields as St, compactContextEngineWithSafetyTimeout as T, NativeHookRelayProvider as Tt, normalizeProviderToolSchemas as U, hasSandboxBindReadonlyHostShadows as V, logAgentRuntimeToolDiagnostics as W, inspectRuntimeToolInputSchemas as X, filterProviderNormalizableTools as Y, projectRuntimeToolInputSchema as Z, runAgentHarnessAfterToolCallHook as _, callGatewayTool as _t, classifyAgentHarnessTerminalOutcome as a, SKILL_WORKSHOP_TOOL_NAME as at, PREEMPTIVE_OVERFLOW_ERROR_TEXT as b, log as bt, inferToolMetaFromArgs as c, extractToolResultMediaArtifact as ct, awaitAgentHarnessAgentEndHook as d, isMessagingToolSendAction as dt, resolveEmbeddedAttemptToolConstructionPlan as et, getAgentHarnessHookRunner as f, formatToolAggregate as ft, runAgentHarnessLlmOutputHook as g, NodeListNode as gt, runAgentHarnessLlmInputHook as h, selectDefaultNodeFromList as ht, ToolProgressDetailMode as i, resolveAttemptFsWorkspaceOnly as it, buildHarnessContextEngineRuntimeContextFromUsage as j, resolveNativeHookRelayDeferredToolApproval as jt, bootstrapHarnessContextEngine as k, invokeNativeHookRelay as kt, loadCodexBundleMcpThreadConfig as l, filterToolResultMediaUrls as lt, runAgentHarnessBeforeAgentFinalizeHook as m, resolveNodeIdFromList as mt, AgentHarnessTerminalOutcomeInput as n, buildEmbeddedAttemptToolRunContext as nt, detectAndLoadAgentHarnessPromptImages as o, buildSkillWorkshopPromptSection as ot, runAgentHarnessAgentEndHook as p, listNodes as pt, RuntimeToolInputSchemaProjection as q, TOOL_PROGRESS_OUTPUT_MAX_CHARS as r, resolveAttemptSpawnWorkspaceDir as rt, formatToolProgressOutput as s, supportsModelTools as st, AgentHarnessTerminalOutcomeClassification as t, createOpenClawCodingTools as tt, queueAgentHarnessMessage as u, isMessagingTool as ut, runAgentHarnessBeforeMessageWriteHook as v, classifyEmbeddedAgentRunResultForModelFallback as vt, shouldPreemptivelyCompactBeforePrompt as w, NativeHookRelayProcessResponse as wt, PreemptiveCompactionDecision as x, runAgentCleanupStep as xt, LlmBoundaryTokenPressure as y, buildAgentRuntimePlan as yt, runAgentHarnessBeforeCompactionHook as z };