Module control 

Governed model-tool boundary for the trusted thread host. This module owns argument/identity checks and read-only waits, not model execution. A host implementation is mandatory; there is no fake or no-op execution fallback.

Structs

AgentControlScope

Immutable identity/policy supplied to the host by the governed tool boundary. No deserializer or mutation methods are exposed.

AgentInterruptReceipt

Cancellation acknowledgment is distinct from a terminal thread result.

AgentMessageReceipt

Typed delivery acknowledgment without echoing message content into history.

AgentSummary

Safe model-facing listing. Prompts, history, credentials, and result bodies are omitted; wait results carry only the separately requested terminal result.

AgentToolContext

One live parent turn’s tool authority. Construct a fresh registry for each context; never reuse equivalent descriptors with another parent’s handlers.

AgentTurnOutcome

The run ID identifies which observed turn produced this result. Watches are latest-state subscriptions, not queries for earlier resumed turns.

RootDelegationGrant

A user grant minted by the verified root host, never decoded from tool args or inferred from a child’s text. Revocation denies subsequent spawn calls.

SendAgentMessageRequest

Body-only model intent. Sender identity and sequence are assigned by the host.

WaitAgentsRequest

Wait for any observed terminal turn. Zero performs a non-blocking snapshot.

WaitAgentsResult

Timeout leaves unfinished children running. It never invents completion.

Enums

AgentControlError

Model-facing failures omit raw arguments, child prompts, and backend details.

Constants

AGENT_TOOL_NAMES

Names reserved for parent-turn-bound agent controls.

Traits

AgentThreadHost

Mandatory trusted-host operations shared by the native tools and adapters. Implementations must recheck live authority at the mutation boundary, persist before publishing, intersect child policy, enforce tree/root budgets, retain exact host bindings, and route all approvals to the root. Mutation lifetimes must not become untracked merely because a tool caller drops its future.