One message in a model conversation.

Deterministic, offline ``ModelProvider`` for tests and CI.

The real result of one model turn. ``thinking`` holds the reasoning/CoT when the backend exposes it (captured for the observability view); ``

A ``ToolDispatcher`` with an allow-list and mutating/egress policy.

A ``DurableState`` backed by a git repo at ``workdir``.

A tool invocation the model requested (executed by the dispatcher, not the model).

A single deterministic check: an argv run in the work directory.

One mission work-unit; flips to ``done`` only after deterministic verification.

A single memory item.

The ordered set of mission items.

Opens host-local sessions.

Describes a tool to the model (JSON-Schema parameters) and to the dispatcher (policy).

Real token accounting as reported by the provider.

Live, non-serializable context handed to a tool at execution time.

Implements the ``Verifier`` protocol by shelling out to real check commands.

Runs one role as a bounded, read-or-scoped loop returning a condensed artifact.

Append-only ledger of spend for one mission.

A deterministic, offline embedder (lexical hashing). For dev/CI/offline only.

A parsed model action: either a tool call or a done signal.

Runs one verified cycle of work using a model + tools + sandbox + verifier + anchor.

Refuses the next step *before* it runs if it would breach the spend/iteration ceiling.

One entry in the append-only episodic event log.

The real result of running a command in a sandbox session.

A simple, exact-cosine semantic index backed by Python lists.

Turns a mission into a checklist using the model (with a safe fallback).

A retrieved record with its similarity score.

A request for a human decision.

The outcome of a gate.

A ``ModelProvider`` backed by any OpenAI-compatible chat-completions endpoint.

Scores a candidate against a rubric using an independent model.

The inputs to one atomic checkpoint commit.

A ``ModelProvider`` backed by Anthropic's Messages API.

A durable, never-compacted record of an implicit design decision (anti-drift). Compaction drops implicit action-level decisions — the dangerous o

Maps file paths to their single permitted writer.

Stores blobs as files under ``root``, named by sha256 (immutable, dedup-friendly).

Flags oscillation: the same (state, action) signature recurring too often.

Starts a mission; the anchor + checklist must already be initialized at ``workdir``.

A handle to a persisted sandbox state (filesystem ± memory, depending on backend).

The typed work order for a sub-agent.

A unit of delegated work with a durable lifecycle.

Resolves gates by policy alone (no human).

A minimal in-memory BM25 keyword index.

Asks an async resolver; falls back to the request's default if it returns ``None``.

Offloads large payloads to an object store, journaling only a pointer.

The result of one agent cycle.

The small, journaled result of one cycle (no raw transcripts — pointers/summary only).

Allow-list of permitted egress hosts (default-deny: empty = nothing allowed).

Try providers in order; return the first success, raise only if all fail.

A git command exited non-zero.

Whether the next step may proceed, and why.

Terminal mission summary.

Terminal summary of a locally-run mission.

Runs a mission with the full org (research fan-out + Lead + review + reflection).

Accumulates compensations and runs them LIFO on ``compensate``.

Runtime configuration for an LRA deployment. The defaults are chosen so the system runs at ``$0`` out of the box: the ``stub`` model backend

A learned, reusable capability.

Collects ``TraceEvent``s and mirrors them to structlog.

Aggregate verdict over a set of checks.

The real outcome of running a ``Check``.

One recorded model turn.

Maps placeholder tokens to real secrets, injected only at egress.

One agent-cycle invocation.

A JSONL file of ``DecisionRecord``s. Append-only; never rewritten.

Combines a dense ``SemanticIndex`` and a ``BM25Index`` via RRF.

Stores verified skills and retrieves them by description similarity.

A host-local working directory.

State carried across Continue-As-New (pointers only — never history).

Pass-through reranker (keeps fusion order). The $0 default.

A write to a path the writer does not own.

Round counter + stall detection.

Proposes an improved prompt for a role from its failure traces (offline).

Adversarial, fresh-context diff review.

Raised when a session would hold all three dangerous capabilities.

Reconstructed situational awareness: what a fresh agent needs to resume coherently.