import { A as ExecApprovalChannelRuntime, D as ExecApprovalChannelRuntimeTerminalStartError, E as deliverApprovalRequestViaChannelNativePlan, F as PreparedChannelNativeApprovalTarget, I as ChannelApprovalNativeDeliveryPlan, L as ChannelApprovalNativePlannedTarget, M as ExecApprovalChannelRuntimeEventKind, O as createExecApprovalChannelRuntime, R as resolveChannelNativeApprovalDeliveryPlan, T as createChannelNativeApprovalRuntime, j as ExecApprovalChannelRuntimeAdapter, k as isExecApprovalChannelRuntimeTerminalStartError } from "./approval-handler-runtime-types-DgzkXDnR.js";
import { $ as resolveExecModeFromPolicy, A as loadExecApprovals, At as windowsEscapeArg, B as persistAllowAlwaysPatterns, Bt as resolveCommandResolutionFromArgv, C as SystemRunApprovalPlan, Ct as buildEnforcedShellCommand, D as ensureExecApprovals, Dt as resolvePlannedSegmentArgv, E as commandRequiresSecurityAuditSuppressionApproval, Et as isWindowsPlatform, F as normalizeExecAsk, Ft as parseExecArgvToken, G as requireValidExecTarget, Gt as resolvePolicyAllowlistCandidatePath, H as recordAllowlistMatchesUse, Ht as resolveExecutionTargetCandidatePath, I as normalizeExecHost, It as resolveAllowlistCandidatePath, J as resolveExecApprovalRequestAllowedDecisions, Jt as resolvePolicyTargetTrustPath, K as requiresExecApproval, Kt as resolvePolicyTargetCandidatePath, L as normalizeExecMode, Lt as resolveApprovalAuditCandidatePath, M as mergeExecApprovalsSocketDefaults, Mt as ExecArgvToken, N as minSecurity, Nt as ExecutableResolution, O as hasDurableExecApproval, Ot as splitCommandChain, P as normalizeExecApprovals, Pt as matchAllowlist, Q as resolveExecApprovalsSocketPath, R as normalizeExecSecurity, Rt as resolveApprovalAuditTrustPath, S as SystemRunApprovalFileOperand, St as analyzeShellCommand, T as addDurableCommandApproval, Tt as buildSafeShellCommand, U as recordAllowlistUse, Ut as resolveExecutionTargetResolution, V as readExecApprovalsSnapshot, Vt as resolveExecutableTrustPath, W as requestExecApprovalViaSocket, Wt as resolveExecutionTargetTrustPath, X as resolveExecApprovalsFromFile, Y as resolveExecApprovals, Yt as ExecAllowlistEntry, Z as resolveExecApprovalsPath, _ as ExecHost, _t as ExecCommandAnalysis, a as ExecApprovalCommandSpan, at as ExecAllowlistAnalysis, b as ExecTarget, bt as ShellChainPart, c as ExecApprovalRequestPayload, ct as SkillBinTrustEntry, d as ExecApprovalsDefaultOverrides, dt as isSafeBinUsage, et as resolveExecModePolicy, f as ExecApprovalsDefaults, ft as normalizeSafeBins, g as ExecAsk, h as ExecApprovalsSnapshot, ht as resolveSafeBins, i as EXEC_TARGET_VALUES, it as AllowAlwaysPattern, j as maxAsk, jt as CommandResolution, k as isExecApprovalDecisionAllowed, kt as splitCommandChainWithOperators, l as ExecApprovalResolved, lt as evaluateExecAllowlist, m as ExecApprovalsResolved, mt as resolveAllowAlwaysPatterns, n as DEFAULT_EXEC_APPROVAL_DECISIONS, nt as restoreExecApprovalsSnapshot, o as ExecApprovalDecision, ot as ExecAllowlistEvaluation, p as ExecApprovalsFile, pt as resolveAllowAlwaysPatternEntries, q as resolveExecApprovalAllowedDecisions, qt as resolvePolicyTargetResolution, r as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS, rt as saveExecApprovals, s as ExecApprovalRequest, st as ExecSegmentSatisfiedBy, t as DEFAULT_EXEC_APPROVAL_ASK_FALLBACK, tt as resolveExecPolicyForMode, u as ExecApprovalsAgent, ut as evaluateShellAllowlist, v as ExecMode, vt as ExecCommandSegment, w as addAllowlistEntry, wt as buildSafeBinsShellCommand, x as SystemRunApprovalBinding, xt as analyzeArgvCommand, y as ExecSecurity, yt as ShellChainOperator, z as normalizeExecTarget, zt as resolveCommandResolution } from "./exec-approvals-CPpcfY0H.js";
import { a as PLUGIN_APPROVAL_TITLE_MAX_LENGTH, c as PluginApprovalRequestPayload, d as buildPluginApprovalExpiredMessage, f as buildPluginApprovalRequestMessage, i as PLUGIN_APPROVAL_DESCRIPTION_MAX_LENGTH, l as PluginApprovalResolved, m as resolvePluginApprovalRequestAllowedDecisions, n as DEFAULT_PLUGIN_APPROVAL_TIMEOUT_MS, o as PluginApprovalActionView, p as buildPluginApprovalResolvedMessage, r as MAX_PLUGIN_APPROVAL_TIMEOUT_MS, s as PluginApprovalRequest, t as DEFAULT_PLUGIN_APPROVAL_DECISIONS, u as approvalDecisionLabel } from "./plugin-approvals-BT7-U8LU.js";
import { i as resolveOutboundSendDep, n as ResolveOutboundSendDepOptions, r as resolveLegacyOutboundSendDepKeys, t as OutboundSendDeps } from "./send-deps-BaEC80iY.js";
import { u as OutboundIdentity } from "./outbound.types-BFO6BpM-.js";
import { C as resolveSsrFPolicyForUrl, E as ssrfPolicyFromHttpBaseUrlFakeIpHostnameAllowlist, S as resolvePinnedHostnameWithPolicy, T as ssrfPolicyFromHttpBaseUrlAllowedOrigin, _ as isSameSsrFPolicy, a as SsrFBlockedError, b as normalizeHostnameAllowlist, c as assertPublicHostname, d as createPinnedLookup, f as isBlockedHostname, g as isPrivateNetworkAllowedByPolicy, h as isPrivateIpAddress, i as PinnedHostnameOverride, l as closeDispatcher, m as isHostnameAllowedByPattern, n as PinnedDispatcherPolicy, o as SsrFPolicy, p as isBlockedHostnameOrIp, r as PinnedHostname, s as assertHostnameAllowedWithPolicy, t as LookupFn, u as createPinnedDispatcher, v as matchesHostnameAllowlist, w as ssrfPolicyFromHttpBaseUrlAllowedHostname, x as resolvePinnedHostname, y as mergeSsrFPolicies } from "./ssrf-skjEI_i5.js";
import { a as drainSystemEvents, c as isSystemEventContextChanged, d as resetSystemEventsForTest, f as resolveSystemEventDeliveryContext, i as drainSystemEventEntries, l as peekSystemEventEntries, n as consumeSelectedSystemEventEntries, o as enqueueSystemEvent, r as consumeSystemEventEntries, s as hasSystemEvents, t as SystemEvent, u as peekSystemEvents } from "./system-events-aSa8pIiL.js";
import { i as resolveHeartbeatSummaryForAgent, n as isHeartbeatEnabledForAgent, r as resolveHeartbeatIntervalMs, t as HeartbeatSummary } from "./heartbeat-summary-ChjfC7Zc.js";
import { $ as DiagnosticSessionStuckEvent, A as DiagnosticMessageQueuedEvent, At as resetDiagnosticEventsForTest, B as DiagnosticRunAttemptEvent, C as DiagnosticMessageDeliveryCompletedEvent, Ct as formatDiagnosticTraceparentForPropagation, D as DiagnosticMessageDispatchCompletedEvent, Dt as onDiagnosticEvent, E as DiagnosticMessageDeliveryStartedEvent, Et as isInternalDiagnosticEventMetadata, F as DiagnosticModelCallStartedEvent, G as DiagnosticSessionAttentionClassification, H as DiagnosticRunProgressEvent, I as DiagnosticPayloadLargeEvent, J as DiagnosticSessionRecoveryRequestedEvent, K as DiagnosticSessionLongRunningEvent, L as DiagnosticPhaseCompletedEvent, M as DiagnosticModelCallCompletedEvent, Mt as waitForDiagnosticEventsDrained, N as DiagnosticModelCallContent, O as DiagnosticMessageDispatchStartedEvent, Ot as onInternalDiagnosticEvent, P as DiagnosticModelCallErrorEvent, Q as DiagnosticSessionStateEvent, R as DiagnosticPhaseDetails, S as DiagnosticMemoryUsage, St as emitTrustedDiagnosticEventWithPrivateData, T as DiagnosticMessageDeliveryKind, Tt as isDiagnosticsEnabled, U as DiagnosticRunStartedEvent, V as DiagnosticRunCompletedEvent, W as DiagnosticSessionActiveWorkKind, X as DiagnosticSessionStalledEvent, Y as DiagnosticSessionRecoveryStatus, Z as DiagnosticSessionState, _ as DiagnosticLivenessWarningEvent, _t as areDiagnosticsEnabledForProcess, a as DiagnosticEventPayload, at as DiagnosticTelemetryExporterEvent, b as DiagnosticMemoryPressureEvent, bt as emitInternalDiagnosticEvent, c as DiagnosticFailoverEvent, ct as DiagnosticToolExecutionErrorEvent, d as DiagnosticHarnessRunOutcome, dt as DiagnosticToolParamsSummary, et as DiagnosticSessionTurnCreatedEvent, f as DiagnosticHarnessRunPhase, ft as DiagnosticToolSource, g as DiagnosticLaneEnqueueEvent, gt as DiagnosticWebhookReceivedEvent, h as DiagnosticLaneDequeueEvent, ht as DiagnosticWebhookProcessedEvent, i as DiagnosticEventMetadata, it as DiagnosticTalkEvent, j as DiagnosticMessageReceivedEvent, jt as setDiagnosticsEnabledForProcess, k as DiagnosticMessageProcessedEvent, kt as onTrustedInternalDiagnosticEvent, l as DiagnosticHarnessRunCompletedEvent, lt as DiagnosticToolExecutionStartedEvent, m as DiagnosticHeartbeatEvent, mt as DiagnosticWebhookErrorEvent, n as DiagnosticContextAssembledEvent, nt as DiagnosticSkillTelemetrySource, o as DiagnosticEventPrivateData, ot as DiagnosticToolExecutionBlockedEvent, p as DiagnosticHarnessRunStartedEvent, pt as DiagnosticUsageEvent, q as DiagnosticSessionRecoveryCompletedEvent, r as DiagnosticEventInput, rt as DiagnosticSkillUsedEvent, s as DiagnosticExecProcessCompletedEvent, st as DiagnosticToolExecutionCompletedEvent, t as DiagnosticAsyncQueueDroppedEvent, tt as DiagnosticSkillActivation, u as DiagnosticHarnessRunErrorEvent, ut as DiagnosticToolLoopEvent, v as DiagnosticLivenessWarningReason, vt as emitDiagnosticEvent, w as DiagnosticMessageDeliveryErrorEvent, wt as hasPendingInternalDiagnosticEvent, x as DiagnosticMemorySampleEvent, xt as emitTrustedDiagnosticEvent, y as DiagnosticLogRecordEvent, yt as emitFailoverEvent, z as DiagnosticPhaseSnapshot } from "./diagnostic-events-DnueqaqF.js";
import { a as retryAsync, i as resolveRetryConfig, n as RetryInfo, r as RetryOptions, t as RetryConfig } from "./retry-CrxGEpqH.js";
import { i as resetChannelActivityForTest, n as getChannelActivity, r as recordChannelActivity, t as ChannelDirection } from "./channel-activity-BQcki2mv.js";
import { l as normalizeOutboundIdentity, u as resolveAgentOutboundIdentity } from "./delivery-queue-Dan25QaI.js";
import { a as formatErrorMessage, c as isErrno, i as extractErrorCode, l as readErrorName, n as collectErrorGraphCandidates, o as formatUncaughtError, r as detectErrorKind, s as hasErrnoCode, t as ErrorKind, u as stringifyNonErrorCause } from "./errors-D0VpUbWO.js";
import { t as formatApprovalDisplayPath } from "./approval-display-paths-BZUolZl-.js";
import { n as fetchWithRuntimeDispatcher } from "./runtime-fetch-CbKc4XQF.js";
import { a as fetchWithSsrFGuard, c as withTrustedEnvProxyGuardedFetchMode, i as GuardedFetchResult, l as withTrustedExplicitProxyGuardedFetchMode, n as GuardedFetchMode, o as retainSafeHeadersForCrossOriginRedirectHeaders, r as GuardedFetchOptions, s as withStrictGuardedFetchMode, t as GUARDED_FETCH_MODE } from "./fetch-guard-BKvfwdRa.js";
import { _ as formatExecApprovalExpiresIn, a as ExecApprovalUnavailableReason, b as parseExecApprovalCommandText, c as buildApprovalInteractiveReplyFromActionDescriptors, d as buildExecApprovalActionDescriptors, f as buildExecApprovalCommandText, g as buildExecApprovalUnavailableReplyPayload, h as buildExecApprovalPresentation, i as ExecApprovalReplyMetadata, l as buildApprovalPresentation, m as buildExecApprovalPendingReplyPayload, n as ExecApprovalPendingReplyParams, o as ExecApprovalUnavailableReplyParams, p as buildExecApprovalInteractiveReply, r as ExecApprovalReplyDecision, s as buildApprovalInteractiveReply, t as ExecApprovalActionDescriptor, u as buildApprovalPresentationFromActionDescriptors, v as getExecApprovalApproverDmNoticeText, y as getExecApprovalReplyMetadata } from "./exec-approval-reply-2w-wZb5b.js";
import { a as resolveApprovalRequestSessionTarget, i as resolveApprovalRequestSessionConversation, n as ExecApprovalSessionTarget, o as resolveExecApprovalSessionTarget, r as resolveApprovalRequestOriginTarget, t as ApprovalRequestSessionConversation } from "./exec-approval-session-target-DTT6_Haf.js";
import { a as sanitizeExecApprovalWarningText, i as sanitizeExecApprovalDisplayTextWithStatus, n as resolveExecApprovalCommandDisplay, r as sanitizeExecApprovalDisplayText, t as SanitizedExecApprovalDisplayText } from "./exec-approval-command-display-CguhbLOU.js";
import { _ as writeJsonSync, a as readJson, c as readJsonIfExists, d as readRootJsonSync, f as readRootStructuredFileSync, g as writeJsonAtomic, h as writeJson, i as readDurableJsonFile, l as readJsonSync, m as tryReadJsonSync, n as WriteTextAtomicOptions, o as readJsonFile, p as tryReadJson, r as createAsyncLock, s as readJsonFileStrict, t as JsonFileReadError, u as readRootJsonObjectSync, v as writeTextAtomic } from "./json-files-DnNngAYa.js";
import { a as emitHeartbeatEvent, c as resetHeartbeatEventsForTest, i as HeartbeatIndicatorType, l as resolveIndicatorType, n as resolveHeartbeatVisibility, o as getLastHeartbeatEvent, r as HeartbeatEventPayload, s as onHeartbeatEvent, t as ResolvedHeartbeatVisibility } from "./heartbeat-visibility-DpkJ8RqM.js";
import { n as WaitForTransportReadyParams, r as waitForTransportReady, t as TransportReadyResult } from "./transport-ready-CRskTZ8O.js";
import { a as resolveNonNegativeIntegerOption, i as resolveGlobalDedupeCache, n as DedupeCacheOptions, r as createDedupeCache, t as DedupeCache } from "./dedupe-DTDO6GA8.js";
import { a as generateSecureUuid, i as generateSecureToken, n as generateSecureHex, r as generateSecureInt, t as generateSecureFraction } from "./secure-random-C6rj1jbz.js";
import { a as loadSecretFileSync, c as writePrivateSecretFileAtomic, i as SecretFileReadResult, n as PRIVATE_SECRET_DIR_MODE, o as readSecretFileSync, r as PRIVATE_SECRET_FILE_MODE, s as tryReadSecretFileSync, t as DEFAULT_SECRET_FILE_MAX_BYTES } from "./secret-file-BUxCibaV.js";
import { C as resolveExpiresAtMsFromDurationOrEpoch, T as resolveExpiresAtMsFromEpochSeconds, _ as parseStrictInteger, b as positiveSecondsToSafeMilliseconds, d as clampTimerTimeoutMs, f as finiteSecondsToTimerSafeMilliseconds, g as parseStrictFiniteNumber, h as parseFiniteNumber, m as nonNegativeSecondsToSafeMilliseconds, n as MAX_TIMER_TIMEOUT_MS, r as MAX_TIMER_TIMEOUT_SECONDS, v as parseStrictNonNegativeInteger, w as resolveExpiresAtMsFromDurationSeconds, y as parseStrictPositiveInteger } from "./number-coercion-Cl6rhWj6.js";
import { n as createRuntimeOutboundDelegates } from "./runtime-forwarders-BnVLtOiK.js";
import { n as stripInternalRuntimeScaffolding, t as sanitizeForPlainText } from "./sanitize-text-D9_tNR2w.js";
import { t as pruneMapToMaxSize } from "./map-size-mXHFA592.js";
import { n as ResolvePreferredNodmixTmpDirOptions, r as resolvePreferredNodmixTmpDir, t as POSIX_NODMIX_TMP_DIR } from "./tmp-nodmix-dir-BPGEieXK.js";
import { n as runTasksWithConcurrency, t as ConcurrencyErrorMode } from "./run-with-concurrency-DupL57_Z.js";
import { drainPendingDeliveries } from "./delivery-queue-runtime.js";
import { n as matchesDiagnosticFlag, r as resolveDiagnosticFlags, t as isDiagnosticFlagEnabled } from "./diagnostic-flags-DNcEPOjK.js";
import { n as buildTimeoutAbortSignal, r as fetchWithTimeout, t as bindAbortRelay } from "./fetch-timeout-CVas0A1r.js";
import { a as resolveFetch, i as resolveProxyFetchFromEnv, n as getProxyUrlFromFetch, o as wrapFetchWithAbortSignal, r as makeProxyFetch, t as PROXY_FETCH_PROXY_URL } from "./proxy-fetch-9Z9a0YvK.js";
import { a as hasProxyEnvConfigured, c as resolveEnvHttpProxyUrl, i as hasEnvHttpProxyConfigured, l as shouldUseEnvHttpProxyForUrl, n as PROXY_ENV_KEYS, o as matchesNoProxy, r as hasEnvHttpProxyAgentConfigured, s as resolveEnvHttpProxyAgentOptions, t as EnvHttpProxyAgentProxyOptions } from "./proxy-env-C3y9mYGC.js";
import { a as ExternalFileWriteResult$1, i as ExternalFileWriteOptions$1, o as FsSafeErrorCode$1 } from "./fs-safe-D8QsyJ_h.js";
import { a as safeFileURLToPath, i as isWindowsNetworkPath, n as basenameFromMediaSource, o as trySafeFileURLToPath, r as hasEncodedFileUrlSeparator, t as assertNoWindowsNetworkPath } from "./local-file-access-DNZmuVDj.js";
import { c as drainFileLockStateForTest, i as FileLockOptions, l as resetFileLockStateForTest, n as FILE_LOCK_TIMEOUT_ERROR_CODE, o as FileLockTimeoutError, r as FileLockHandle, s as acquireFileLock, u as withFileLock } from "./file-lock-D5leBOrT.js";
import { t as normalizeHostname } from "./hostname-Zu_LBkSa.js";
import { i as normalizeScpRemotePath, n as isSafeScpRemotePath, r as normalizeScpRemoteHost, t as isSafeScpRemoteHost } from "./scp-host-DCnjWa06.js";
import { C as normalizeZaiEnv, E as sleepWithAbort, S as normalizeEnv, T as computeBackoff, _ as formatDurationPrecise, a as resetWSLStateForTests, b as isVitestRuntimeEnv, c as ensureGlobalUndiciEnvProxyDispatcher, d as globalUndiciStreamTimeoutMs, f as resetGlobalUndiciStreamTimeoutsForTests, g as formatDurationHuman, h as formatDurationCompact, i as isWSLSync, l as ensureGlobalUndiciStreamTimeouts, m as FormatDurationSecondsOptions, n as isWSL2Sync, o as DEFAULT_UNDICI_STREAM_TIMEOUT_MS, p as FormatDurationCompactOptions, r as isWSLEnv, s as ensureGlobalUndiciDispatcherStreamTimeouts, t as isWSL, u as forceResetGlobalDispatcher, v as formatDurationSeconds, w as BackoffPolicy, x as logAcceptedEnvOption, y as isTruthyEnvValue } from "./wsl-BPh7-SUE.js";
import { a as resolveOsHomeRelativePath, c as resolveUserPath, i as resolveOsHomeDir, n as resolveEffectiveHomeDir, o as resolveRequiredHomeDir, r as resolveHomeRelativePath, s as resolveRequiredOsHomeDir, t as expandHomePrefix } from "./home-dir-BVRAYC3w.js";
import { a as ReadRequestBodyOptions, c as RequestBodyLimitGuard, d as isRequestBodyLimitError, f as readJsonBodyWithLimit, h as testApi, i as ReadJsonBodyResult, l as RequestBodyLimitGuardOptions, m as requestBodyErrorToText, n as DEFAULT_WEBHOOK_MAX_BODY_BYTES, o as RequestBodyLimitError, p as readRequestBodyWithLimit, r as ReadJsonBodyOptions, s as RequestBodyLimitErrorCode, t as DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, u as installRequestBodyLimitGuard } from "./http-body-CbF0Hltn.js";
import { i as createRateLimitRetryRunner, n as RetryRunner, r as createChannelApiRetryRunner, t as CHANNEL_API_RETRY_DEFAULTS } from "./retry-policy-B0dUm89x.js";
import { n as hasSystemMark, r as prefixSystemMessage, t as SYSTEM_MARK } from "./system-message-Df9mQWCo.js";
import { PrivateNetworkOptInInput, assertHttpUrlTargetsPrivateNetwork, buildHostnameAllowlistPolicyFromSuffixAllowlist, createLegacyPrivateNetworkDoctorContract, hasLegacyFlatAllowPrivateNetworkAlias, isHttpsUrlAllowedByHostnameSuffixAllowlist, isPrivateNetworkOptInEnabled, migrateLegacyFlatAllowPrivateNetworkAlias, normalizeHostnameSuffixAllowlist, ssrfPolicyFromAllowPrivateNetwork, ssrfPolicyFromDangerouslyAllowPrivateNetwork, ssrfPolicyFromPrivateNetworkOptIn } from "./ssrf-policy.js";

//#region src/plugin-sdk/infra-runtime.d.ts
declare function appendRegularFile(...args: any[]): any;
declare function appendRegularFileSync(...args: any[]): any;
declare const FsSafeError: any;
type FsSafeErrorCode = FsSafeErrorCode$1;
declare function openLocalFileSafely(...args: any[]): any;
declare function pathExists(...args: any[]): any;
declare function pathExistsSync(...args: any[]): any;
declare function readRegularFile(...args: any[]): any;
declare function resolveLocalPathFromRootsSync(...args: any[]): any;
declare function readRegularFileSync(...args: any[]): any;
declare function resolveRegularFileAppendFlags(...args: any[]): any;
declare function root(...args: any[]): any;
declare function statRegularFile(...args: any[]): any;
declare function statRegularFileSync(...args: any[]): any;
declare function writeExternalFileWithinRoot(...args: any[]): Promise<any>;
declare function withTimeout<T = any>(promise: Promise<T> | (() => Promise<T>), ms: number): any;
type ExternalFileWriteOptions = ExternalFileWriteOptions$1;
type ExternalFileWriteResult = ExternalFileWriteResult$1;
//#endregion
export { AllowAlwaysPattern, ApprovalRequestSessionConversation, BackoffPolicy, CHANNEL_API_RETRY_DEFAULTS, ChannelApprovalNativeDeliveryPlan, ChannelApprovalNativePlannedTarget, ChannelDirection, type CommandResolution, ConcurrencyErrorMode, DEFAULT_EXEC_APPROVAL_ASK_FALLBACK, DEFAULT_EXEC_APPROVAL_DECISIONS, DEFAULT_EXEC_APPROVAL_TIMEOUT_MS, DEFAULT_PLUGIN_APPROVAL_DECISIONS, DEFAULT_PLUGIN_APPROVAL_TIMEOUT_MS, DEFAULT_SECRET_FILE_MAX_BYTES, DEFAULT_UNDICI_STREAM_TIMEOUT_MS, DEFAULT_WEBHOOK_BODY_TIMEOUT_MS, DEFAULT_WEBHOOK_MAX_BODY_BYTES, DedupeCache, DedupeCacheOptions, type DiagnosticAsyncQueueDroppedEvent, type DiagnosticContextAssembledEvent, type DiagnosticEventInput, type DiagnosticEventMetadata, type DiagnosticEventPayload, type DiagnosticEventPrivateData, type DiagnosticExecProcessCompletedEvent, type DiagnosticFailoverEvent, type DiagnosticHarnessRunCompletedEvent, type DiagnosticHarnessRunErrorEvent, type DiagnosticHarnessRunOutcome, type DiagnosticHarnessRunPhase, type DiagnosticHarnessRunStartedEvent, type DiagnosticHeartbeatEvent, type DiagnosticLaneDequeueEvent, type DiagnosticLaneEnqueueEvent, type DiagnosticLivenessWarningEvent, type DiagnosticLivenessWarningReason, type DiagnosticLogRecordEvent, type DiagnosticMemoryPressureEvent, type DiagnosticMemorySampleEvent, type DiagnosticMemoryUsage, type DiagnosticMessageDeliveryCompletedEvent, type DiagnosticMessageDeliveryErrorEvent, type DiagnosticMessageDeliveryKind, type DiagnosticMessageDeliveryStartedEvent, type DiagnosticMessageDispatchCompletedEvent, type DiagnosticMessageDispatchStartedEvent, type DiagnosticMessageProcessedEvent, type DiagnosticMessageQueuedEvent, type DiagnosticMessageReceivedEvent, type DiagnosticModelCallCompletedEvent, type DiagnosticModelCallContent, type DiagnosticModelCallErrorEvent, type DiagnosticModelCallStartedEvent, type DiagnosticPayloadLargeEvent, type DiagnosticPhaseCompletedEvent, type DiagnosticPhaseDetails, type DiagnosticPhaseSnapshot, type DiagnosticRunAttemptEvent, type DiagnosticRunCompletedEvent, type DiagnosticRunProgressEvent, type DiagnosticRunStartedEvent, type DiagnosticSessionActiveWorkKind, type DiagnosticSessionAttentionClassification, type DiagnosticSessionLongRunningEvent, type DiagnosticSessionRecoveryCompletedEvent, type DiagnosticSessionRecoveryRequestedEvent, type DiagnosticSessionRecoveryStatus, type DiagnosticSessionStalledEvent, type DiagnosticSessionState, type DiagnosticSessionStateEvent, type DiagnosticSessionStuckEvent, type DiagnosticSessionTurnCreatedEvent, type DiagnosticSkillActivation, type DiagnosticSkillTelemetrySource, type DiagnosticSkillUsedEvent, type DiagnosticTalkEvent, type DiagnosticTelemetryExporterEvent, type DiagnosticToolExecutionBlockedEvent, type DiagnosticToolExecutionCompletedEvent, type DiagnosticToolExecutionErrorEvent, type DiagnosticToolExecutionStartedEvent, type DiagnosticToolLoopEvent, type DiagnosticToolParamsSummary, type DiagnosticToolSource, type DiagnosticUsageEvent, type DiagnosticWebhookErrorEvent, type DiagnosticWebhookProcessedEvent, type DiagnosticWebhookReceivedEvent, EXEC_TARGET_VALUES, EnvHttpProxyAgentProxyOptions, ErrorKind, ExecAllowlistAnalysis, type ExecAllowlistEntry, ExecAllowlistEvaluation, ExecApprovalActionDescriptor, type ExecApprovalChannelRuntime, type ExecApprovalChannelRuntimeAdapter, type ExecApprovalChannelRuntimeEventKind, ExecApprovalChannelRuntimeTerminalStartError, ExecApprovalCommandSpan, ExecApprovalDecision, ExecApprovalPendingReplyParams, ExecApprovalReplyDecision, ExecApprovalReplyMetadata, ExecApprovalRequest, ExecApprovalRequestPayload, ExecApprovalResolved, ExecApprovalSessionTarget, ExecApprovalUnavailableReason, ExecApprovalUnavailableReplyParams, ExecApprovalsAgent, ExecApprovalsDefaultOverrides, ExecApprovalsDefaults, ExecApprovalsFile, ExecApprovalsResolved, ExecApprovalsSnapshot, type ExecArgvToken, ExecAsk, ExecCommandAnalysis, ExecCommandSegment, ExecHost, ExecMode, ExecSecurity, ExecSegmentSatisfiedBy, ExecTarget, type ExecutableResolution, ExternalFileWriteOptions, ExternalFileWriteResult, FILE_LOCK_TIMEOUT_ERROR_CODE, type FileLockHandle, type FileLockOptions, type FileLockTimeoutError, FormatDurationCompactOptions, FormatDurationSecondsOptions, FsSafeError, FsSafeErrorCode, GUARDED_FETCH_MODE, type GuardedFetchMode, type GuardedFetchOptions, type GuardedFetchResult, HeartbeatEventPayload, HeartbeatIndicatorType, HeartbeatSummary, JsonFileReadError, LookupFn, MAX_PLUGIN_APPROVAL_TIMEOUT_MS, MAX_TIMER_TIMEOUT_MS, MAX_TIMER_TIMEOUT_SECONDS, type OutboundIdentity, OutboundSendDeps, PLUGIN_APPROVAL_DESCRIPTION_MAX_LENGTH, PLUGIN_APPROVAL_TITLE_MAX_LENGTH, POSIX_NODMIX_TMP_DIR, PRIVATE_SECRET_DIR_MODE, PRIVATE_SECRET_FILE_MODE, PROXY_ENV_KEYS, PROXY_FETCH_PROXY_URL, PinnedDispatcherPolicy, PinnedHostname, PinnedHostnameOverride, PluginApprovalActionView, PluginApprovalRequest, PluginApprovalRequestPayload, PluginApprovalResolved, type PreparedChannelNativeApprovalTarget, PrivateNetworkOptInInput, ReadJsonBodyOptions, ReadJsonBodyResult, ReadRequestBodyOptions, RequestBodyLimitError, RequestBodyLimitErrorCode, RequestBodyLimitGuard, RequestBodyLimitGuardOptions, ResolveOutboundSendDepOptions, ResolvePreferredNodmixTmpDirOptions, ResolvedHeartbeatVisibility, RetryConfig, RetryInfo, RetryOptions, RetryRunner, SYSTEM_MARK, SanitizedExecApprovalDisplayText, SecretFileReadResult, ShellChainOperator, ShellChainPart, SkillBinTrustEntry, SsrFBlockedError, SsrFPolicy, SystemEvent, SystemRunApprovalBinding, SystemRunApprovalFileOperand, SystemRunApprovalPlan, TransportReadyResult, WaitForTransportReadyParams, WriteTextAtomicOptions, testApi as __test__, testApi, acquireFileLock, addAllowlistEntry, addDurableCommandApproval, analyzeArgvCommand, analyzeShellCommand, appendRegularFile, appendRegularFileSync, approvalDecisionLabel, areDiagnosticsEnabledForProcess, assertHostnameAllowedWithPolicy, assertHttpUrlTargetsPrivateNetwork, assertNoWindowsNetworkPath, assertPublicHostname, basenameFromMediaSource, bindAbortRelay, buildApprovalInteractiveReply, buildApprovalInteractiveReplyFromActionDescriptors, buildApprovalPresentation, buildApprovalPresentationFromActionDescriptors, buildEnforcedShellCommand, buildExecApprovalActionDescriptors, buildExecApprovalCommandText, buildExecApprovalInteractiveReply, buildExecApprovalPendingReplyPayload, buildExecApprovalPresentation, buildExecApprovalUnavailableReplyPayload, buildHostnameAllowlistPolicyFromSuffixAllowlist, buildPluginApprovalExpiredMessage, buildPluginApprovalRequestMessage, buildPluginApprovalResolvedMessage, buildSafeBinsShellCommand, buildSafeShellCommand, buildTimeoutAbortSignal, clampTimerTimeoutMs, closeDispatcher, collectErrorGraphCandidates, commandRequiresSecurityAuditSuppressionApproval, computeBackoff, consumeSelectedSystemEventEntries, consumeSystemEventEntries, createAsyncLock, createChannelApiRetryRunner, createChannelNativeApprovalRuntime, createDedupeCache, createExecApprovalChannelRuntime, createLegacyPrivateNetworkDoctorContract, createPinnedDispatcher, createPinnedLookup, createRateLimitRetryRunner, createRuntimeOutboundDelegates, deliverApprovalRequestViaChannelNativePlan, detectErrorKind, drainFileLockStateForTest, drainPendingDeliveries, drainSystemEventEntries, drainSystemEvents, emitDiagnosticEvent, type emitFailoverEvent, emitHeartbeatEvent, type emitInternalDiagnosticEvent, type emitTrustedDiagnosticEvent, type emitTrustedDiagnosticEventWithPrivateData, enqueueSystemEvent, ensureExecApprovals, ensureGlobalUndiciDispatcherStreamTimeouts, ensureGlobalUndiciEnvProxyDispatcher, ensureGlobalUndiciStreamTimeouts, evaluateExecAllowlist, evaluateShellAllowlist, expandHomePrefix, extractErrorCode, fetchWithRuntimeDispatcher, fetchWithSsrFGuard, fetchWithTimeout, finiteSecondsToTimerSafeMilliseconds, forceResetGlobalDispatcher, formatApprovalDisplayPath, type formatDiagnosticTraceparentForPropagation, formatDurationCompact, formatDurationHuman, formatDurationPrecise, formatDurationSeconds, formatErrorMessage, formatExecApprovalExpiresIn, formatUncaughtError, generateSecureFraction, generateSecureHex, generateSecureInt, generateSecureToken, generateSecureUuid, getChannelActivity, getExecApprovalApproverDmNoticeText, getExecApprovalReplyMetadata, getLastHeartbeatEvent, getProxyUrlFromFetch, globalUndiciStreamTimeoutMs, hasDurableExecApproval, hasEncodedFileUrlSeparator, hasEnvHttpProxyAgentConfigured, hasEnvHttpProxyConfigured, hasErrnoCode, hasLegacyFlatAllowPrivateNetworkAlias, type hasPendingInternalDiagnosticEvent, hasProxyEnvConfigured, hasSystemEvents, hasSystemMark, installRequestBodyLimitGuard, isBlockedHostname, isBlockedHostnameOrIp, isDiagnosticFlagEnabled, isDiagnosticsEnabled, isErrno, isExecApprovalChannelRuntimeTerminalStartError, isExecApprovalDecisionAllowed, isHeartbeatEnabledForAgent, isHostnameAllowedByPattern, isHttpsUrlAllowedByHostnameSuffixAllowlist, type isInternalDiagnosticEventMetadata, isPrivateIpAddress, isPrivateNetworkAllowedByPolicy, isPrivateNetworkOptInEnabled, isRequestBodyLimitError, isSafeBinUsage, isSafeScpRemoteHost, isSafeScpRemotePath, isSameSsrFPolicy, isSystemEventContextChanged, isTruthyEnvValue, isVitestRuntimeEnv, isWSL, isWSL2Sync, isWSLEnv, isWSLSync, isWindowsNetworkPath, isWindowsPlatform, loadExecApprovals, loadSecretFileSync, logAcceptedEnvOption, makeProxyFetch, matchAllowlist, matchesDiagnosticFlag, matchesHostnameAllowlist, matchesNoProxy, maxAsk, mergeExecApprovalsSocketDefaults, mergeSsrFPolicies, migrateLegacyFlatAllowPrivateNetworkAlias, minSecurity, nonNegativeSecondsToSafeMilliseconds, normalizeEnv, normalizeExecApprovals, normalizeExecAsk, normalizeExecHost, normalizeExecMode, normalizeExecSecurity, normalizeExecTarget, normalizeHostname, normalizeHostnameAllowlist, normalizeHostnameSuffixAllowlist, normalizeOutboundIdentity, normalizeSafeBins, normalizeScpRemoteHost, normalizeScpRemotePath, normalizeZaiEnv, onDiagnosticEvent, onHeartbeatEvent, type onInternalDiagnosticEvent, type onTrustedInternalDiagnosticEvent, openLocalFileSafely, parseExecApprovalCommandText, parseExecArgvToken, parseFiniteNumber, parseStrictFiniteNumber, parseStrictInteger, parseStrictNonNegativeInteger, parseStrictPositiveInteger, pathExists, pathExistsSync, peekSystemEventEntries, peekSystemEvents, persistAllowAlwaysPatterns, positiveSecondsToSafeMilliseconds, prefixSystemMessage, pruneMapToMaxSize, readDurableJsonFile, readErrorName, readExecApprovalsSnapshot, readJson, readJsonBodyWithLimit, readJsonFile, readJsonFileStrict, readJsonIfExists, readJsonSync, readRegularFile, readRegularFileSync, readRequestBodyWithLimit, readRootJsonObjectSync, readRootJsonSync, readRootStructuredFileSync, readSecretFileSync, recordAllowlistMatchesUse, recordAllowlistUse, recordChannelActivity, requestBodyErrorToText, requestExecApprovalViaSocket, requireValidExecTarget, requiresExecApproval, resetChannelActivityForTest, type resetDiagnosticEventsForTest, resetFileLockStateForTest, resetGlobalUndiciStreamTimeoutsForTests, resetHeartbeatEventsForTest, resetSystemEventsForTest, resetWSLStateForTests, resolveAgentOutboundIdentity, resolveAllowAlwaysPatternEntries, resolveAllowAlwaysPatterns, resolveAllowlistCandidatePath, resolveApprovalAuditCandidatePath, resolveApprovalAuditTrustPath, resolveApprovalRequestOriginTarget, resolveApprovalRequestSessionConversation, resolveApprovalRequestSessionTarget, resolveChannelNativeApprovalDeliveryPlan, resolveCommandResolution, resolveCommandResolutionFromArgv, resolveNonNegativeIntegerOption as resolveDedupeNonNegativeInteger, resolveDiagnosticFlags, resolveEffectiveHomeDir, resolveEnvHttpProxyAgentOptions, resolveEnvHttpProxyUrl, resolveExecApprovalAllowedDecisions, resolveExecApprovalCommandDisplay, resolveExecApprovalRequestAllowedDecisions, resolveExecApprovalSessionTarget, resolveExecApprovals, resolveExecApprovalsFromFile, resolveExecApprovalsPath, resolveExecApprovalsSocketPath, resolveExecModeFromPolicy, resolveExecModePolicy, resolveExecPolicyForMode, resolveExecutableTrustPath, resolveExecutionTargetCandidatePath, resolveExecutionTargetResolution, resolveExecutionTargetTrustPath, resolveExpiresAtMsFromDurationOrEpoch, resolveExpiresAtMsFromDurationSeconds, resolveExpiresAtMsFromEpochSeconds, resolveFetch, resolveGlobalDedupeCache, resolveHeartbeatIntervalMs, resolveHeartbeatSummaryForAgent, resolveHeartbeatVisibility, resolveHomeRelativePath, resolveIndicatorType, resolveLegacyOutboundSendDepKeys, resolveLocalPathFromRootsSync, resolveOsHomeDir, resolveOsHomeRelativePath, resolveOutboundSendDep, resolvePinnedHostname, resolvePinnedHostnameWithPolicy, resolvePlannedSegmentArgv, resolvePluginApprovalRequestAllowedDecisions, resolvePolicyAllowlistCandidatePath, resolvePolicyTargetCandidatePath, resolvePolicyTargetResolution, resolvePolicyTargetTrustPath, resolvePreferredNodmixTmpDir, resolveProxyFetchFromEnv, resolveRegularFileAppendFlags, resolveRequiredHomeDir, resolveRequiredOsHomeDir, resolveRetryConfig, resolveSafeBins, resolveSsrFPolicyForUrl, resolveSystemEventDeliveryContext, resolveUserPath, restoreExecApprovalsSnapshot, retainSafeHeadersForCrossOriginRedirectHeaders, retryAsync, root, runTasksWithConcurrency, safeFileURLToPath, sanitizeExecApprovalDisplayText, sanitizeExecApprovalDisplayTextWithStatus, sanitizeExecApprovalWarningText, sanitizeForPlainText, saveExecApprovals, type setDiagnosticsEnabledForProcess, shouldUseEnvHttpProxyForUrl, sleepWithAbort, splitCommandChain, splitCommandChainWithOperators, ssrfPolicyFromAllowPrivateNetwork, ssrfPolicyFromDangerouslyAllowPrivateNetwork, ssrfPolicyFromHttpBaseUrlAllowedHostname, ssrfPolicyFromHttpBaseUrlAllowedOrigin, ssrfPolicyFromHttpBaseUrlFakeIpHostnameAllowlist, ssrfPolicyFromPrivateNetworkOptIn, statRegularFile, statRegularFileSync, stringifyNonErrorCause, stripInternalRuntimeScaffolding, tryReadJson, tryReadJsonSync, tryReadSecretFileSync, trySafeFileURLToPath, type waitForDiagnosticEventsDrained, waitForTransportReady, windowsEscapeArg, withFileLock, withStrictGuardedFetchMode, withTimeout, withTrustedEnvProxyGuardedFetchMode, withTrustedExplicitProxyGuardedFetchMode, wrapFetchWithAbortSignal, writeExternalFileWithinRoot, writeJson, writeJsonAtomic, writeJsonSync, writePrivateSecretFileAtomic, writeTextAtomic };