@alfe.ai/claude-code-host 0.1.5 → 0.1.7

package/dist/index.d.cts

@@ -5,40 +5,117 @@ import { spawn } from "node:child_process";
 
 //# sourceMappingURL=tool-error-capture.d.ts.map
 //#endregion
-//#region src/index.d.ts
+//#region src/transport.d.ts
+/**
+ * Shared HTTP transport for the Agent API client — request core, retry
+ * policy, error formatting, and the `ApiBase` class the domain method
+ * groups under `./domains/` build on.
+ */
 interface AgentApiClientConfig {
   apiKey: string;
   apiUrl: string;
 }
 /**
- * The broad-news providers behind the metered `services/news` Lambda. The
- * server validates this with a zod enum; a value outside the union is an
- * unpriceable product, so keep the literal union in lockstep with the service.
+ * Encode each path segment but keep the `/` separators — `encodeURIComponent`
+ * would escape the slashes too, breaking greedy proxy routes.
  */
-type NewsProvider = "apitube" | "newsdata";
-/** One normalized article. `sentiment` is provider-shaped (APITube supplies it). */
-interface NewsArticle {
-  title: string;
-  url: string;
-  source: string;
-  publishedAt: string;
-  snippet: string;
-  sentiment?: unknown;
+
+declare class AgentApiTransport {
+  private readonly apiKey;
+  private readonly apiUrl;
+  constructor(config: AgentApiClientConfig);
+  /**
+   * Binary sibling of `request<T>()`. `request()` forces
+   * `Content-Type: application/json` and parses a `{ data: T }` envelope,
+   * neither of which fits a raw-audio flow (voice TTS/STT), so those go
+   * through this instead. Auth (Bearer), the request budget, and the single
+   * retry policy on transient 5xx / network errors is kept in sync with
+   * `request()`. Safe read methods retry once by default; mutation methods do
+   * not, because a response can be lost after a handler or provider call has
+   * already succeeded.
+   */
+  rawRequest(path: string, init: {
+    method: string;
+    headers: Headers;
+    body?: BodyInit | Uint8Array;
+  }, extra?: {
+    retry?: boolean;
+  }): Promise<Response>;
+  /**
+   * @param extra.timeoutMs Per-request abort timeout (default REQUEST_TIMEOUT_MS).
+   *   Long endpoints (image generation) pass a larger value so the gateway's
+   *   own timeout wins with a readable status instead of a client-side abort.
+   * @param extra.retry Whether to retry once on transient failures. Safe reads
+   *   (GET/HEAD/OPTIONS) default to true; mutations default to false. Set true
+   *   only when the endpoint's server-side contract is explicitly idempotent.
+   * @param extra.signal Optional caller cancellation combined with the client's
+   *   own timeout budget. Aborting either signal cancels the request.
+   */
+  request<T>(path: string, options?: RequestInit, extra?: {
+    timeoutMs?: number;
+    retry?: boolean;
+    signal?: AbortSignal;
+  }): Promise<T>;
 }
-/** Provider-agnostic result — the server normalizes every adapter to this. */
-interface NewsResult {
-  articles: NewsArticle[];
-  provider: string;
+/**
+ * Base class for the domain method groups. Holds the shared transport;
+ * `AgentApiClient` assembles the groups onto one class via `applyMixins`
+ * (prototype copy), so methods keep their original `this`-on-the-client
+ * call shape.
+ */
+declare class ApiBase {
+  protected readonly transport: AgentApiTransport;
+  constructor(transport: AgentApiTransport);
 }
-interface RemoteSessionInfo {
-  sessionId: string;
-  agentId: string;
-  surface: "browser" | "terminal";
-  status: "agent_driving" | "awaiting_human" | "human_in_control" | "resuming" | "completed" | "expired" | "failed";
-  url?: string;
-  instructions?: string;
-  requestedAt?: string;
+//# sourceMappingURL=transport.d.ts.map
+//#endregion
+//#region src/domains/workspace.d.ts
+/** Response of GET /agent/workspace (services/agents). */
+interface AgentWorkspaceInfo {
+  templateKey?: string;
+  defaultModel?: string;
+  installedFrom?: {
+    templateKey: string;
+    authorTenantId: string;
+    version: number;
+  };
+  runtime?: string;
+  teams?: {
+    teamId: string;
+    name: string;
+    description?: string;
+    parentTeamId?: string;
+  }[];
+  projects?: {
+    projectId: string;
+    name: string;
+    description?: string;
+    status: string;
+    parentProjectId?: string;
+  }[];
+  teamIds?: string[];
+  projectIds?: string[];
+}
+declare class WorkspaceApi extends ApiBase {
+  /**
+   * GET /agent/workspace — workspace config for the authenticated agent
+   * (template assignment, default model, org roster).
+   */
+  getWorkspace(): Promise<AgentWorkspaceInfo>;
+  /**
+   * GET /templates/{key}/files — persona/workspace file contents for a
+   * template the agent has access to. Pass `version` to pin to the version
+   * the agent was installed from (omit → the endpoint resolves `latest`).
+   */
+  getTemplateFiles(templateKey: string, opts?: {
+    version?: number;
+  }): Promise<{
+    files: Record<string, string>;
+  }>;
 }
+//# sourceMappingURL=workspace.d.ts.map
+//#endregion
+//#region src/domains/sync.d.ts
 interface SyncAgentInfo {
   agentId: string;
   tenantId: string;
@@ -123,6 +200,65 @@ interface SharedFileEntry {
   size: number;
   contentType?: string;
 }
+declare class SyncApi extends ApiBase {
+  syncRegister(args?: {
+    displayName?: string;
+  }): Promise<{
+    agent: SyncAgentInfo;
+  }>;
+  syncGetManifest(): Promise<SyncManifest>;
+  syncPresign(args: {
+    files: {
+      path: string;
+      operation: "put" | "get";
+      contentType?: string;
+    }[];
+  }): Promise<{
+    urls: SyncPresignedUrl[];
+  }>;
+  syncConfirmUpload(args: {
+    filePath: string;
+    hash: string;
+    size: number;
+    storageClass?: "STANDARD" | "GLACIER_IR";
+  }): Promise<SyncConfirmedUpload>;
+  syncReconstruct(args: {
+    mode: "full" | "active" | "memory";
+  }): Promise<SyncReconstructBundle>;
+  syncGetStats(): Promise<SyncAgentStats>;
+  syncListFiles(args?: {
+    prefix?: string;
+  }): Promise<{
+    files: SyncFileEntry[];
+  }>;
+  syncListSessions(): Promise<{
+    sessions: SyncSessionEntry[];
+  }>;
+  syncGetSession(sessionId: string): Promise<SyncSessionContent>;
+  syncDeleteFile(filePath: string): Promise<{
+    removed: boolean;
+  }>;
+  sharedListFiles(args: {
+    scope: "org" | "team" | "project";
+    scopeId: string;
+    limit?: number;
+    cursor?: string;
+  }): Promise<{
+    files: SharedFileEntry[];
+    nextCursor: string | null;
+  }>;
+  sharedDownloadUrl(args: {
+    scope: "org" | "team" | "project";
+    scopeId: string;
+    filePath: string;
+  }): Promise<{
+    downloadUrl: string;
+    expiresIn: number;
+  }>;
+}
+//# sourceMappingURL=sync.d.ts.map
+//#endregion
+//#region src/domains/knowledge.d.ts
 type KnowledgeScopeType = "org" | "team" | "project";
 interface KnowledgeScope {
   scopeType: KnowledgeScopeType;
@@ -165,15 +301,6 @@ interface KnowledgeProfile {
   updatedAt: string | null;
   updatedBy: string | null;
 }
-interface KnowledgeDoc {
-  filePath: string;
-  fileName: string;
-  contentType?: string;
-  size: number;
-  uploadedBy?: string;
-  createdAt: string;
-  updatedAt: string;
-}
 type ChangeRequestResourceType = "doc" | "profile";
 type ChangeRequestOperation = "create" | "update" | "delete";
 type ChangeRequestStatus = "open" | "approved" | "rejected" | "withdrawn" | "superseded";
@@ -215,6 +342,200 @@ interface ProposeScopeChangeInput {
   /** profile: the proposed value ({ about, description, links }). */
   proposedValue?: unknown;
 }
+interface KnowledgeDoc {
+  filePath: string;
+  fileName: string;
+  contentType?: string;
+  size: number;
+  uploadedBy?: string;
+  createdAt: string;
+  updatedAt: string;
+}
+declare class KnowledgeApi extends ApiBase {
+  /**
+   * Semantic search across the agent's member scopes. Fan-out is gated
+   * server-side by `listScopes` set-inclusion (fail-closed). Pass
+   * `scopeType` + `scopeId` to narrow to one scope; a non-member scope
+   * yields empty results (never a cross-scope leak).
+   */
+  knowledgeSearch(query: string, opts?: {
+    limit?: number;
+    scopeType?: KnowledgeScopeType;
+    scopeId?: string;
+  }): Promise<KnowledgeSearchResult>;
+  /** Enumerate the scopes (org + teams + projects) this agent belongs to. */
+  listScopes(): Promise<{
+    scopes: KnowledgeScope[];
+  }>;
+  /** Read a scope's structured knowledge profile (after membership check). */
+  getScopeProfile(scopeType: KnowledgeScopeType, scopeId: string): Promise<KnowledgeProfile>;
+  /**
+   * Open a change request against a scope's knowledge resource. For a doc
+   * create/update, `services/org` returns a presigned staging PUT; this method
+   * uploads the proposed `content` to it (echoing the same Content-Type that
+   * was signed), mirroring `writeScopeDoc`. The staged body is applied to the
+   * canonical doc — attributed to this agent — only when a reviewer approves.
+   */
+  proposeScopeChange(scopeType: KnowledgeScopeType, scopeId: string, input: ProposeScopeChangeInput): Promise<KnowledgeChangeRequest>;
+  /**
+   * List the agent's OWN change requests in a scope (filtered server-side to
+   * this agent as proposer). Pass `status` to narrow to open / approved / etc.
+   */
+  listScopeChangeRequests(scopeType: KnowledgeScopeType, scopeId: string, opts?: {
+    status?: ChangeRequestStatus;
+    limit?: number;
+    cursor?: string;
+  }): Promise<{
+    changeRequests: KnowledgeChangeRequest[];
+    nextCursor: string | null;
+  }>;
+  /** List a scope's docs (the org-files corpus; mirrored to shared/<scope>/). */
+  listScopeDocs(scopeType: KnowledgeScopeType, scopeId: string, opts?: {
+    limit?: number;
+    cursor?: string;
+  }): Promise<{
+    files: KnowledgeDoc[];
+    nextCursor: string | null;
+  }>;
+  /**
+   * Read the full text of a scope doc. Resolves a presigned download URL
+   * from `services/org`, then fetches the bytes directly from S3 (the one
+   * legitimate raw fetch in a plugin — same pattern as sync).
+   */
+  readScopeDoc(scopeType: KnowledgeScopeType, scopeId: string, filePath: string, opts?: {
+    maxBytes?: number;
+  }): Promise<{
+    filePath: string;
+    text: string;
+  }>;
+  /**
+   * Write (create or overwrite) a scope doc. Two-step presigned upload:
+   * `services/org` returns a signed URL plus `requiredHeaders` (author /
+   * authorKind / message as `x-amz-meta-*`) that MUST be sent verbatim on
+   * the PUT, alongside the same `Content-Type` that was signed. Author and
+   * authorKind are server-set from the agent token — never trusted here.
+   */
+  writeScopeDoc(scopeType: KnowledgeScopeType, scopeId: string, filePath: string, content: string, opts?: {
+    contentType?: string;
+    message?: string;
+  }): Promise<{
+    filePath: string;
+  }>;
+}
+//# sourceMappingURL=knowledge.d.ts.map
+//#endregion
+//#region src/domains/mobile.d.ts
+/** Response of GET /mobile/numbers for an agent (services/mobile). */
+interface MobileNumberInfo {
+  phoneNumber: string;
+  countryCode: string;
+  monthlyPrice?: number;
+  status: string;
+  errorMessage?: string;
+}
+/** One purchasable number from GET /mobile/numbers/search. */
+interface MobileAvailableNumber {
+  number: string;
+  friendlyName: string;
+  locality: string;
+  region: string;
+  country: string;
+}
+/** Approved WhatsApp content template from GET /mobile/whatsapp/templates. */
+interface WhatsAppTemplate {
+  contentSid: string;
+  name: string;
+  language: string;
+  body: string;
+  variables: Record<string, string>;
+  category?: string;
+}
+declare class MobileApi extends ApiBase {
+  getMobileNumber(): Promise<MobileNumberInfo>;
+  searchMobileNumbers(args?: {
+    country?: string;
+    query?: string;
+  }): Promise<{
+    numbers: MobileAvailableNumber[];
+    monthlyPrice: number;
+  }>;
+  assignMobileNumber(args: {
+    phoneNumber: string;
+    countryCode: string;
+  }): Promise<{
+    phoneNumber: string;
+    countryCode: string;
+    status: "pending";
+  }>;
+  releaseMobileNumber(): Promise<{
+    released: true;
+  }>;
+  sendSms(args: {
+    to: string;
+    body: string;
+  }): Promise<{
+    sent: true;
+    sid: string;
+  }>;
+  startOutboundCall(args: {
+    to: string;
+  }): Promise<{
+    callSid: string;
+    status: string;
+  }>;
+  getWhatsAppSession(to: string): Promise<{
+    active: boolean;
+    expiresAt?: string;
+  }>;
+  sendWhatsAppMessage(args: {
+    to: string;
+    body: string;
+  }): Promise<{
+    sent: true;
+    sid: string;
+  }>;
+  sendWhatsAppTemplate(args: {
+    to: string;
+    contentSid: string;
+    contentVariables: Record<string, string>;
+    bodyPreview?: string;
+  }): Promise<{
+    sent: true;
+    sid: string;
+  }>;
+  listWhatsAppTemplates(): Promise<{
+    templates: WhatsAppTemplate[];
+  }>;
+}
+//# sourceMappingURL=mobile.d.ts.map
+//#endregion
+//#region src/domains/remote.d.ts
+interface RemoteSessionInfo {
+  sessionId: string;
+  agentId: string;
+  surface: "browser" | "terminal";
+  status: "agent_driving" | "awaiting_human" | "human_in_control" | "resuming" | "completed" | "expired" | "failed";
+  url?: string;
+  instructions?: string;
+  requestedAt?: string;
+}
+declare class RemoteApi extends ApiBase {
+  requestBrowserTakeover(args: {
+    instructions: string;
+    url?: string;
+    conversationId?: string;
+  }): Promise<{
+    sessionId: string;
+    status: string;
+  }>;
+  getRemoteSession(sessionId: string): Promise<RemoteSessionInfo>;
+  completeRemoteSession(sessionId: string): Promise<{
+    ok: boolean;
+  }>;
+}
+//# sourceMappingURL=remote.d.ts.map
+//#endregion
+//#region src/domains/self.d.ts
 /** Voice settings — core agent config. Mirrors `VoiceConfig` in `@alfe/types`. */
 interface AgentVoiceConfig {
   /** ElevenLabs voice ID; platform default when unset. */
@@ -256,11 +577,50 @@ interface AgentVoice {
   labels: Record<string, string>;
   category: string;
 }
-/** The ElevenLabs models with a pricing row — the TTS endpoint rejects any other value. */
-type VoiceTtsModel = "eleven_turbo_v2_5" | "eleven_multilingual_v2";
-interface VoiceTtsArgs {
-  /** Text to synthesize (1–5000 chars — the endpoint enforces this). */
-  text: string;
+declare class SelfApi extends ApiBase {
+  /** Update the agent's own name and/or voice config. Returns the updated agent. */
+  updateSelf(update: {
+    name?: string;
+    voiceConfig?: AgentVoiceConfig;
+  }): Promise<AgentSelf>;
+  /**
+   * Generate the agent's own avatar from a text prompt. The image is generated,
+   * stored, and set on the agent server-side; returns the updated agent.
+   *
+   * ASYNC (same reason as `generateImage`): avatar gen runs `gpt-image-1`
+   * (30–60s) which exceeds the API Gateway 30s ceiling, so this enqueues a job
+   * (`POST /agent/avatar/generate` → `jobId`) then polls (`GET /agent/avatar/{jobId}`)
+   * until the avatar is set. Signature unchanged — the plugin is unaffected.
+   */
+  generateAvatar(args: {
+    prompt: string;
+  }): Promise<AgentSelf>;
+  /**
+   * Get a presigned PUT URL to upload a new avatar image. Upload the bytes to
+   * `uploadUrl`, then call `finalizeAvatar(s3Key)` to set it on the agent.
+   */
+  presignAvatar(args: {
+    mimeType: string;
+    size: number;
+  }): Promise<AgentAvatarPresign>;
+  /**
+   * Finalize an avatar upload — validates ownership + size, then sets the
+   * agent's `avatarUrl` server-side. Returns the updated agent.
+   */
+  finalizeAvatar(s3Key: string): Promise<AgentSelf>;
+  /** List the platform voice catalogue (ElevenLabs) so the agent can pick its own voice. */
+  listVoices(): Promise<{
+    voices: AgentVoice[];
+  }>;
+}
+//# sourceMappingURL=self.d.ts.map
+//#endregion
+//#region src/domains/voice.d.ts
+/** The ElevenLabs models with a pricing row — the TTS endpoint rejects any other value. */
+type VoiceTtsModel = "eleven_turbo_v2_5" | "eleven_multilingual_v2";
+interface VoiceTtsArgs {
+  /** Text to synthesize (1–5000 chars — the endpoint enforces this). */
+  text: string;
   /** ElevenLabs voice id; platform default when unset. */
   voiceId?: string;
   /** TTS model; `eleven_turbo_v2_5` (lower latency) when unset. */
@@ -288,84 +648,161 @@ interface VoiceSttResult {
   /** Deepgram confidence in (0,1]. */
   confidence: number;
 }
-declare class AgentApiClient {
-  private readonly apiKey;
-  private readonly apiUrl;
-  constructor(config: AgentApiClientConfig);
-  private request;
-  syncRegister(args?: {
-    displayName?: string;
-  }): Promise<{
-    agent: SyncAgentInfo;
-  }>;
-  syncGetManifest(): Promise<SyncManifest>;
-  syncPresign(args: {
-    files: {
-      path: string;
-      operation: "put" | "get";
-      contentType?: string;
-    }[];
-  }): Promise<{
-    urls: SyncPresignedUrl[];
-  }>;
-  syncConfirmUpload(args: {
-    filePath: string;
-    hash: string;
+declare class VoiceApi extends ApiBase {
+  /**
+   * Text-to-speech. Returns raw PCM audio bytes plus their framing — the
+   * voice service defaults to 24 kHz / mono / 16-bit. Wrap in a WAV container
+   * to produce a playable file. Metered per character against the tenant
+   * credit pool server-side; TTS completes regardless of metering outcome.
+   */
+  tts(args: VoiceTtsArgs): Promise<VoiceTtsResult>;
+  /**
+   * Speech-to-text. Accepts raw linear16 (16-bit LE) mono PCM — NOT a WAV or
+   * other container (the endpoint transcribes with a fixed linear16 encoding,
+   * so a container header would be transcribed as noise). Strip any WAV header
+   * and pass `sampleRate` from it before calling. Metered by transcribed
+   * duration against the tenant credit pool server-side.
+   */
+  stt(args: VoiceSttArgs): Promise<VoiceSttResult>;
+}
+//# sourceMappingURL=voice.d.ts.map
+//#endregion
+//#region src/domains/search.d.ts
+/**
+ * The broad-news providers behind the metered `services/news` Lambda. The
+ * server validates this with a zod enum; a value outside the union is an
+ * unpriceable product, so keep the literal union in lockstep with the service.
+ */
+type NewsProvider = "apitube" | "newsdata";
+/** One normalized article. `sentiment` is provider-shaped (APITube supplies it). */
+interface NewsArticle {
+  title: string;
+  url: string;
+  source: string;
+  publishedAt: string;
+  snippet: string;
+  sentiment?: unknown;
+}
+/** Provider-agnostic result — the server normalizes every adapter to this. */
+interface NewsResult {
+  articles: NewsArticle[];
+  provider: string;
+}
+declare class SearchApi extends ApiBase {
+  searchWeb(params: {
+    query: string;
+    count?: number;
+    offset?: number;
+    country?: string;
+    freshness?: string;
+  }, options?: {
+    signal?: AbortSignal;
+  }): Promise<unknown>;
+  searchImages(params: {
+    query: string;
+    count?: number;
+  }, options?: {
+    signal?: AbortSignal;
+  }): Promise<unknown>;
+  searchNews(params: {
+    query: string;
+    count?: number;
+    offset?: number;
+    freshness?: string;
+  }, options?: {
+    signal?: AbortSignal;
+  }): Promise<unknown>;
+  /** Search news across the selected provider's corpus. → POST /agent/news/search */
+  newsSearch(params: {
+    query: string;
+    provider?: NewsProvider;
+    source?: string;
+    from?: string;
+    to?: string;
+    language?: string;
+    category?: string;
+    limit?: number;
+  }): Promise<NewsResult>;
+  /** Top headlines for the selected provider. → POST /agent/news/headlines */
+  newsHeadlines(params?: {
+    provider?: NewsProvider;
+    category?: string;
+    source?: string;
+    language?: string;
+    limit?: number;
+  }): Promise<NewsResult>;
+}
+//# sourceMappingURL=search.d.ts.map
+//#endregion
+//#region src/domains/webhooks.d.ts
+interface AgentWebhook {
+  webhookId: string;
+  tenantId: string;
+  agentId: string;
+  name: string;
+  provider: string;
+  active: boolean;
+  createdBy: string;
+  createdAt: string;
+  updatedAt: string;
+}
+interface CreatedAgentWebhook extends AgentWebhook {
+  url: string;
+  signingSecret: string;
+}
+interface AgentWebhookDelivery {
+  deliveryId: string;
+  webhookId: string;
+  status: string;
+  attempts: number;
+  createdAt: string;
+  deliveredAt?: string;
+}
+declare class WebhooksApi extends ApiBase {
+  createWebhook(args: {
+    name: string;
+    provider?: "generic" | "github" | "stripe" | "slack";
+  }): Promise<CreatedAgentWebhook>;
+  listWebhooks(): Promise<AgentWebhook[]>;
+  deleteWebhook(webhookId: string): Promise<{
+    webhookId: string;
+    active: false;
+  }>;
+  rotateWebhookSecret(webhookId: string): Promise<{
+    webhookId: string;
+    signingSecret: string;
+  }>;
+  listWebhookDeliveries(webhookId: string): Promise<AgentWebhookDelivery[]>;
+}
+//# sourceMappingURL=webhooks.d.ts.map
+//#endregion
+//#region src/domains/chat.d.ts
+declare class ChatApi extends ApiBase {
+  presignAttachments(files: {
+    filename: string;
+    mimeType: string;
     size: number;
-    storageClass?: "STANDARD" | "GLACIER_IR";
-  }): Promise<SyncConfirmedUpload>;
-  syncReconstruct(args: {
-    mode: "full" | "active" | "memory";
-  }): Promise<SyncReconstructBundle>;
-  syncGetStats(): Promise<SyncAgentStats>;
-  syncListFiles(args?: {
-    prefix?: string;
-  }): Promise<{
-    files: SyncFileEntry[];
-  }>;
-  syncListSessions(): Promise<{
-    sessions: SyncSessionEntry[];
-  }>;
-  syncGetSession(sessionId: string): Promise<SyncSessionContent>;
-  syncDeleteFile(filePath: string): Promise<{
-    removed: boolean;
-  }>;
-  sharedListFiles(args: {
-    scope: "org" | "team" | "project";
-    scopeId: string;
-  }): Promise<{
-    files: SharedFileEntry[];
-    nextCursor: string | null;
+  }[]): Promise<{
+    attachments: {
+      id: string;
+      uploadUrl: string;
+      downloadUrl: string;
+      s3Key: string;
+      expiresAt: string;
+    }[];
   }>;
-  sharedDownloadUrl(args: {
-    scope: "org" | "team" | "project";
-    scopeId: string;
-    filePath: string;
+  recordActivity(data: {
+    userId?: string;
+    channel: string;
+    role: "user" | "assistant";
   }): Promise<{
-    downloadUrl: string;
-    expiresIn: number;
-  }>;
-  listIntegrations(): Promise<IntegrationInstall[]>;
-  getIntegrationConfig(integrationId: string): Promise<IntegrationConfigResult>;
-  updateIntegrationConfig(integrationId: string, config: Record<string, unknown>): Promise<void>;
-  installIntegration(integrationId: string, options?: {
-    version?: string;
-    config?: Record<string, unknown>;
-  }): Promise<IntegrationInstall>;
-  removeIntegration(integrationId: string): Promise<IntegrationInstall>;
-  getOAuthUrl(provider: string, scopes?: string[]): Promise<{
-    url: string;
-    provider: string;
-    expiresIn: number;
-  }>;
-  getOAuthStatus(provider: string): Promise<{
-    provider: string;
-    connected: boolean;
-    config?: Record<string, string>;
-  }>;
-  getRegistry(): Promise<{
-    integrations: RegistryEntry[];
+    recorded: boolean;
   }>;
+}
+//# sourceMappingURL=chat.d.ts.map
+//#endregion
+//#region src/domains/connect-credentials.d.ts
+declare class ConnectCredentialsApi extends ApiBase {
   /**
    * Returns every connected Google account for the agent. Multi-account by
    * design — the openclaw-google plugin requires the LLM to pass `email`
@@ -422,82 +859,19 @@ declare class AgentApiClient {
     [key: string]: unknown;
   }>;
   /**
-   * Resolve the primary cTrader Connection's credentials for the calling
-   * agent. Unlike most providers, the cTrader Open API needs app-level auth
-   * (`clientId` + `clientSecret`) AND account auth (`accessToken` +
-   * `accountId`) on the socket, so `@alfe.ai/ctrader-mcp` self-fetches the
-   * full set here at startup (the atlassian/google pattern). `clientId` /
-   * `clientSecret` are the SST-sourced global app credentials the connect
-   * endpoint injects — they are never persisted on the connection. `host` is
-   * the resolved TLS endpoint (`live.ctraderapi.com` / `demo.ctraderapi.com`)
-   * derived from the selected account's live/demo flag.
+   * @deprecated Returns a single primary credential blob (legacy "pick-the-
+   * default-connection" shape). Use `getGithubAccounts()` for the multi-
+   * account shape required by Pattern A — explicit selector args on every
+   * tool. Retained because the `@alfe.ai/github-mcp` proxy is the
+   * only consumer that knows about Pattern A; legacy env-interpolation
+   * callers will keep hitting `/credentials` until they move to the proxy.
    */
-  getCTraderCredentials(): Promise<{
+  getGithubCredentials(): Promise<{
+    login: string;
     accessToken: string;
-    refreshToken: string;
-    accountId: string;
-    host: string;
-    clientId: string;
-    clientSecret: string;
   }>;
   /**
-   * Pattern A: multi-account credential fetch for cTrader.
-   *
-   * Unlike atlassian/salesforce (one Connection row per account/site), a
-   * cTrader is MULTI-grant per agent: an agent may connect several distinct
-   * cTrader logins, each its own Connection row keyed on `accountIdentifier =
-   * ctid:<userId>` (Phase 1). This aggregates the *trading accounts* across
-   * ALL of those Connection rows — each row contributes its `availableAccounts`
-   * flattened, and every account carries ITS OWN grant's `accessToken` (the
-   * token that authenticates that account against the cTrader Open API). One
-   * OAuth grant still covers all accounts under that single login on one shared
-   * token; only the `ctidTraderAccountId` and the protobuf socket `host` (live
-   * vs demo) differ within a grant. Across grants the tokens differ, so the
-   * token is now PER-ACCOUNT rather than hoisted to the top level.
-   *
-   * `host` per account is derived from the account's `isLive` flag
-   * (`live.ctraderapi.com` / `demo.ctraderapi.com`) — the same mapping the
-   * connect provider applies server-side when an account is auto-selected.
-   *
-   * `clientId` / `clientSecret` are the SST-sourced GLOBAL app credentials the
-   * connect endpoint injects — identical across every Connection row (one
-   * cTrader app), never persisted on a connection. We take them from the first
-   * row that carries them.
-   *
-   * Accounts are deduped on `ctidTraderAccountId` first-wins: Spotware ids are
-   * globally unique across logins, so a duplicate can only appear if the same
-   * account somehow surfaced under two grants — first-wins keeps it
-   * deterministic.
-   *
-   * `accounts` may be empty (no cTrader Connection at all), in which case we
-   * return empty creds rather than throwing.
-   */
-  getCTraderAccounts(): Promise<{
-    accounts: {
-      ctidTraderAccountId: string;
-      host: string;
-      isLive: boolean;
-      brokerName?: string;
-      accountNumber?: string;
-      accessToken: string;
-    }[];
-    clientId: string;
-    clientSecret: string;
-  }>;
-  /**
-   * @deprecated Returns a single primary credential blob (legacy "pick-the-
-   * default-connection" shape). Use `getGithubAccounts()` for the multi-
-   * account shape required by Pattern A — explicit selector args on every
-   * tool. Retained because the `@alfe.ai/github-mcp` proxy is the
-   * only consumer that knows about Pattern A; legacy env-interpolation
-   * callers will keep hitting `/credentials` until they move to the proxy.
-   */
-  getGithubCredentials(): Promise<{
-    login: string;
-    accessToken: string;
-  }>;
-  /**
-   * Pattern A: multi-account credential fetch for GitHub.
+   * Pattern A: multi-account credential fetch for GitHub.
    *
    * Returns every agent-scoped GitHub connection. The caller is expected
    * to require a `login` selector on every credential-touching tool and
@@ -521,67 +895,6 @@ declare class AgentApiClient {
       scopes: string;
     }[];
   }>;
-  /**
-   * Pattern A: provider-parameterized multi-account credential fetch for the
-   * social connectors (Bluesky, and the approval-gated backlog: X, Meta,
-   * Threads, LinkedIn, Pinterest, TikTok, Reddit, YouTube).
-   *
-   * Unlike the bespoke `getGithubAccounts()` / `getXeroAccounts()` shapes,
-   * this returns a UNIFORM normalized account shape so `@alfe.ai/social-mcp`'s
-   * shared driver can require a single `account` selector on every
-   * credential-touching tool regardless of platform. The backend
-   * `api-agents/{provider}/accounts` route is already provider-generic; this
-   * is the client-side normalization the plan (`do-we-need-any-moonlit-toucan`
-   * Phase 0, step 5) calls for.
-   *
-   * `accountIdentifier` is the stable per-account selector the LLM should
-   * pass back (for Bluesky: the account DID). `accessToken` carries whatever
-   * the provider's `buildCredentialsResponse` bundles (for Bluesky: the JSON
-   * session bundle — the driver parses the `accessJwt` out of it, or reads the
-   * top-level `accessJwt` from `providerMetadata`-adjacent fields). Everything
-   * else the driver needs for routing (handle, pdsHost, did, …) is on
-   * `providerMetadata`.
-   *
-   * Token refresh is delegated to connect (never done in-plugin) via the
-   * per-account route `POST /agent/connect/{provider}/accounts/{accountIdentifier}/refresh`
-   * — call `refreshSocialAccount(provider, accountIdentifier)`. (The non-account
-   * `POST /agent/connect/{provider}/refresh` route refreshes the provider's
-   * PRIMARY connection, which is wrong under multi-account Pattern A.)
-   */
-  getSocialAccounts(provider: string): Promise<{
-    provider: string;
-    accounts: {
-      connectionId: string;
-      accountIdentifier: string;
-      displayName: string | null;
-      accessToken: string;
-      providerMetadata: Record<string, unknown>;
-      connectedAt: string;
-    }[];
-  }>;
-  /**
-   * Pattern A: refresh a specific social Connection by its stable
-   * `accountIdentifier` (for Bluesky: the account DID) via the
-   * provider-generic per-account refresh route. The counterpart to
-   * `getSocialAccounts(provider)`; `@alfe.ai/social-mcp` calls this on a
-   * 401/ExpiredToken from the platform PDS/API, then re-fetches accounts to
-   * pick up the rotated bundle.
-   *
-   * Refresh itself is ALWAYS delegated to connect — the plugin never calls
-   * the platform's own refresh XRPC (e.g. `com.atproto.server.refreshSession`)
-   * because connect owns the encrypted refresh token + rotation persistence
-   * (Bluesky rotates the refreshJwt; a missed rotation kills the connection
-   * after one refresh). The returned `accessToken` is whatever the provider's
-   * `refreshToken` hook re-bundled (for Bluesky: the JSON session bundle with
-   * the fresh `accessJwt`) — callers typically ignore it and re-fetch via
-   * `getSocialAccounts` for a consistent shape.
-   */
-  refreshSocialAccount(provider: string, accountIdentifier: string): Promise<{
-    accountIdentifier: string;
-    accessToken: string;
-    accessTokenExpiresAt: string;
-    expiresAt: string;
-  }>;
   /**
    * @deprecated Returns a single primary credential blob (legacy "pick-the-
    * default-connection" shape). Use `getXeroAccounts()` for the multi-
@@ -599,8 +912,9 @@ declare class AgentApiClient {
    * selector arg (e.g. `xeroTenantId`) on every credential-touching tool
    * and look up the matching account by that selector at dispatch time.
    *
-   * Returned `accounts[i].accountIdentifier` is the Xero tenantId — the
-   * stable cross-session identifier the LLM should pass.
+   * `xeroTenantId` is the model-facing organisation selector. The separate
+   * `accountIdentifier` is the Connect persistence key used for refresh and
+   * may be an email; never substitute one for the other.
    */
   getXeroAccounts(): Promise<{
     accounts: {
@@ -618,12 +932,12 @@ declare class AgentApiClient {
     expiresAt: string;
   }>;
   /**
-   * Pattern A: refresh a specific Xero connection by its `accountIdentifier`
-   * (the Xero `tenantId`). The legacy `refreshXeroToken()` only refreshes
-   * the *primary* connection, which is wrong for multi-tenant Xero where
-   * each tenant has its own non-interchangeable access token.
+   * Refresh a specific Xero Connection by its exact `accountIdentifier` from
+   * `getXeroAccounts()`. Do not substitute `xeroTenantId`: current Xero OAuth
+   * rows may use the account email as their persistence key even when a sole
+   * organisation tenant ID is available in provider metadata.
    */
-  refreshXeroAccountToken(xeroTenantId: string): Promise<{
+  refreshXeroAccountToken(accountIdentifier: string): Promise<{
     accessToken: string;
     accessTokenExpiresAt: string;
     expiresAt: string;
@@ -778,6 +1092,21 @@ declare class AgentApiClient {
     accessToken: string;
     expiresAt: string;
   }>;
+  /**
+   * Pattern A: refresh one MYOB Connection by its stable
+   * `accountIdentifier` (the MYOB business id returned by
+   * `getMYOBAccounts()`).
+   *
+   * MYOB refresh tokens belong to individual Connection rows. A
+   * multi-business client must use this method instead of refreshing the
+   * primary Connection and copying that access token into every cached
+   * business client.
+   */
+  refreshMYOBAccountToken(accountIdentifier: string): Promise<{
+    accessToken: string;
+    accessTokenExpiresAt: string;
+    expiresAt: string;
+  }>;
   /**
    * @deprecated Returns a single primary credential blob. Use
    * `getSalesforceAccounts()` for the multi-account shape required by
@@ -817,67 +1146,6 @@ declare class AgentApiClient {
     accessTokenExpiresAt: string;
     expiresAt: string;
   }>;
-  /**
-   * @deprecated Returns a single primary credential blob. Use
-   * `getShopifyAccounts()` for the multi-account shape required by Pattern A
-   * (`@alfe.ai/shopify-mcp` keys per-shop on the myshopify domain).
-   */
-  getShopifyCredentials(): Promise<{
-    accessToken: string;
-    shopDomain: string;
-    shopGid: string;
-    shopName: string;
-    apiVersion: string;
-  }>;
-  /**
-   * Pattern A: multi-account credential fetch for Shopify. Returns every
-   * agent-scoped Shopify Connection. One OAuth grant maps to one store, so the
-   * stable per-call selector is the store's myshopify domain (`shopDomain`),
-   * NOT `accountIdentifier` — the connect provider keys `accountIdentifier` on
-   * the immutable shop GID (falling back to the domain), so `shopDomain` is the
-   * value the LLM passes and the plugin routes on.
-   *
-   * Each entry is shaped by the connect provider's `buildCredentialsResponse`:
-   * `{ accessToken, shopDomain, shopGid, shopName, apiVersion }` — offline
-   * Shopify tokens never expire, so there is NO token / expiry field and no
-   * refresh method (unlike Salesforce). The GraphQL Admin API authenticates
-   * purely on `X-Shopify-Access-Token`; no client credentials are on the wire.
-   */
-  getShopifyAccounts(): Promise<{
-    accounts: {
-      connectionId: string;
-      accountIdentifier: string;
-      displayName: string | null;
-      connectedAt: string;
-      accessToken: string;
-      shopDomain: string;
-      shopGid: string;
-      shopName: string;
-      apiVersion: string;
-    }[];
-  }>;
-  /**
-   * Disconnects one connected Microsoft 365 account for the agent, by its
-   * `accountIdentifier`. Hits the generic per-account disconnect route
-   * (`DELETE /agent/connect/microsoft/accounts/{accountIdentifier}`), which
-   * resolves across the agent's full effective scope chain and deletes the
-   * matching Connection row. Returns the remaining accounts.
-   *
-   * IMPORTANT: pass the `accountIdentifier` from `getMicrosoftAccounts()`, NOT
-   * a synthesised email. For Microsoft, `accountIdentifier` is the user's email
-   * only when the Graph profile fetch succeeded at connect time; it falls back
-   * to the Azure tenant id (`tid` claim) otherwise. The backend matches on
-   * `accountIdentifier` exactly, so passing an email would 404 on those
-   * fallback-identifier accounts. (This is why the param is not named `email`,
-   * unlike `disconnectGoogleAccount` where the identifier is always the email.)
-   */
-  disconnectMicrosoftAccount(accountIdentifier: string): Promise<{
-    accounts: {
-      accountIdentifier: string;
-      displayName?: string;
-      connectedAt?: string;
-    }[];
-  }>;
   /**
    * Pattern A: multi-account credential fetch for Microsoft 365.
    *
@@ -901,9 +1169,6 @@ declare class AgentApiClient {
       connectedAt: string;
       accessToken: string;
       accessTokenExpiresAt: string;
-      refreshToken: string;
-      clientId: string;
-      clientSecret: string;
       email: string;
       microsoftTenantId: string;
       workspaceDomain: string;
@@ -928,242 +1193,213 @@ declare class AgentApiClient {
     accessTokenExpiresAt: string;
     expiresAt: string;
   }>;
-  getTeamsCredentials(): Promise<{
-    agentId: string;
-    tenantId: string;
-    azureAppId: string;
-    azureBotId: string;
-    azureClientSecret: string;
-    botDisplayName?: string;
-    teamsTenantId?: string;
-    serviceUrl?: string;
-  }>;
-  sendTeamsMessage(data: {
-    conversationId: string;
-    text?: string;
-    adaptiveCard?: Record<string, unknown>;
-  }): Promise<{
-    ok: boolean;
-    activityId: string;
-  }>;
-  listTeamsChannels(): Promise<{
-    channels: {
-      id: string;
-      name: string;
-      description?: string;
-    }[];
-  }>;
-  presignAttachments(files: {
-    filename: string;
-    mimeType: string;
-    size: number;
-  }[]): Promise<{
-    attachments: {
-      id: string;
-      uploadUrl: string;
-      downloadUrl: string;
-      s3Key: string;
-      expiresAt: string;
-    }[];
-  }>;
   /**
-   * Generate an image from a text prompt and get back a STABLE, public URL
-   * (served from the agent-assets CDN — it does not expire). Embed the returned
-   * `imageUrl` in a reply as markdown to show it to the user.
+   * Disconnects one connected Microsoft 365 account for the agent, by its
+   * `accountIdentifier`. Hits the generic per-account disconnect route
+   * (`DELETE /agent/connect/microsoft/accounts/{accountIdentifier}`), which
+   * resolves across the agent's full effective scope chain and deletes the
+   * matching Connection row. Returns the remaining accounts.
    *
-   * ASYNC: `gpt-image-1` routinely runs 30–60s, which exceeds the API Gateway
-   * 30s ceiling, so this enqueues a job (`POST /agent/images/generate` →
-   * `jobId`) then polls (`GET /agent/images/{jobId}`) until it completes. The
-   * worker's real failure message (e.g. an unsupported `size`) surfaces via the
-   * job's `error` field.
+   * IMPORTANT: pass the `accountIdentifier` from `getMicrosoftAccounts()`, NOT
+   * a synthesised email. For Microsoft, `accountIdentifier` is the user's email
+   * only when the Graph profile fetch succeeded at connect time; it falls back
+   * to the Azure tenant id (`tid` claim) otherwise. The backend matches on
+   * `accountIdentifier` exactly, so passing an email would 404 on those
+   * fallback-identifier accounts. (This is why the param is not named `email`,
+   * unlike `disconnectGoogleAccount` where the identifier is always the email.)
    */
-  generateImage(args: {
-    prompt: string;
-    model?: string;
-    size?: string;
-    quality?: string;
-  }): Promise<{
-    imageUrl: string;
-    model: string;
-  }>;
-  recordActivity(data: {
-    userId?: string;
-    channel: string;
-    role: "user" | "assistant";
-  }): Promise<{
-    recorded: boolean;
+  disconnectMicrosoftAccount(accountIdentifier: string): Promise<{
+    accounts: {
+      accountIdentifier: string;
+      displayName?: string;
+      connectedAt?: string;
+    }[];
   }>;
-  /** Update the agent's own name and/or voice config. Returns the updated agent. */
-  updateSelf(update: {
-    name?: string;
-    voiceConfig?: AgentVoiceConfig;
-  }): Promise<AgentSelf>;
-  /**
-   * Generate the agent's own avatar from a text prompt. The image is generated,
-   * stored, and set on the agent server-side; returns the updated agent.
-   *
-   * ASYNC (same reason as `generateImage`): avatar gen runs `gpt-image-1`
-   * (30–60s) which exceeds the API Gateway 30s ceiling, so this enqueues a job
-   * (`POST /agent/avatar/generate` → `jobId`) then polls (`GET /agent/avatar/{jobId}`)
-   * until the avatar is set. Signature unchanged — the plugin is unaffected.
-   */
-  generateAvatar(args: {
-    prompt: string;
-  }): Promise<AgentSelf>;
   /**
-   * Get a presigned PUT URL to upload a new avatar image. Upload the bytes to
-   * `uploadUrl`, then call `finalizeAvatar(s3Key)` to set it on the agent.
-   */
-  presignAvatar(args: {
-    mimeType: string;
-    size: number;
-  }): Promise<AgentAvatarPresign>;
-  /**
-   * Finalize an avatar upload — validates ownership + size, then sets the
-   * agent's `avatarUrl` server-side. Returns the updated agent.
+   * Resolve the primary cTrader Connection's credentials for the calling
+   * agent. Unlike most providers, the cTrader Open API needs app-level auth
+   * (`clientId` + `clientSecret`) AND account auth (`accessToken` +
+   * `accountId`) on the socket, so `@alfe.ai/ctrader-mcp` self-fetches the
+   * full set here at startup (the atlassian/google pattern). `clientId` /
+   * `clientSecret` are the SST-sourced global app credentials the connect
+   * endpoint injects — they are never persisted on the connection. `host` is
+   * the resolved TLS endpoint (`live.ctraderapi.com` / `demo.ctraderapi.com`)
+   * derived from the selected account's live/demo flag.
    */
-  finalizeAvatar(s3Key: string): Promise<AgentSelf>;
-  /** List the platform voice catalogue (ElevenLabs) so the agent can pick its own voice. */
-  listVoices(): Promise<{
-    voices: AgentVoice[];
+  getCTraderCredentials(): Promise<{
+    accessToken: string;
+    refreshToken: string;
+    accountId: string;
+    host: string;
+    clientId: string;
+    clientSecret: string;
   }>;
   /**
-   * Mint a fresh AES-256 data key for a specific (secret, field) pair. The
-   * encryption context is rebuilt server-side from `auth.tenantId` + the body
-   * fields including `fieldKey`; the agent cannot forge context for a scope
-   * or field it doesn't own. Legacy single-envelope secrets are migrated to
-   * `field#value` rows by the data migration, so call with `fieldKey: "value"`
-   * to reach them.
+   * Pattern A: multi-account credential fetch for cTrader.
+   *
+   * Unlike atlassian/salesforce (one Connection row per account/site), a
+   * cTrader is MULTI-grant per agent: an agent may connect several distinct
+   * cTrader logins, each its own Connection row keyed on `accountIdentifier =
+   * ctid:<userId>` (Phase 1). This aggregates the *trading accounts* across
+   * ALL of those Connection rows — each row contributes its `availableAccounts`
+   * flattened, and every account carries ITS OWN grant's `accessToken` (the
+   * token that authenticates that account against the cTrader Open API). One
+   * OAuth grant still covers all accounts under that single login on one shared
+   * token; only the `ctidTraderAccountId` and the protobuf socket `host` (live
+   * vs demo) differ within a grant. Across grants the tokens differ, so the
+   * token is now PER-ACCOUNT rather than hoisted to the top level.
+   *
+   * `host` per account is derived from the account's `isLive` flag
+   * (`live.ctraderapi.com` / `demo.ctraderapi.com`) — the same mapping the
+   * connect provider applies server-side when an account is auto-selected.
+   *
+   * `clientId` / `clientSecret` are the SST-sourced GLOBAL app credentials the
+   * connect endpoint injects — identical across every Connection row (one
+   * cTrader app), never persisted on a connection. We take them from the first
+   * row that carries them.
+   *
+   * Accounts are deduped on `ctidTraderAccountId` first-wins: Spotware ids are
+   * globally unique across logins, so a duplicate can only appear if the same
+   * account somehow surfaced under two grants — first-wins keeps it
+   * deterministic.
+   *
+   * `accounts` may be empty (no cTrader Connection at all), in which case we
+   * return empty creds rather than throwing.
    */
-  generateSecretDataKey(args: {
-    scope: SecretScope;
-    scopeId: string;
-    secretId: string;
-    fieldKey: string;
-  }): Promise<GeneratedDataKey>;
+  getCTraderAccounts(): Promise<{
+    accounts: {
+      ctidTraderAccountId: string;
+      host: string;
+      isLive: boolean;
+      brokerName?: string;
+      accountNumber?: string;
+      accessToken: string;
+    }[];
+    clientId: string;
+    clientSecret: string;
+  }>;
   /**
-   * Unwrap a wrapped data key so the agent can decrypt the envelope locally.
-   * `fieldKey` MUST match the value supplied when the data key was generated
-   * (it's bound into KMS encryption context); mismatch fails with
-   * `InvalidCiphertextException`.
+   * @deprecated Returns a single primary credential blob. Use
+   * `getShopifyAccounts()` for the multi-account shape required by Pattern A
+   * (`@alfe.ai/shopify-mcp` keys per-shop on the myshopify domain).
    */
-  decryptSecretDataKey(args: {
-    scope: SecretScope;
-    scopeId: string;
-    secretId: string;
-    fieldKey: string;
-    dataKeyCiphertext: string;
-  }): Promise<{
-    plaintextKey: string;
+  getShopifyCredentials(): Promise<{
+    accessToken: string;
+    shopDomain: string;
+    shopGid: string;
+    shopName: string;
+    apiVersion: string;
   }>;
   /**
-   * Create a new secret with one or more fields. Encrypted fields must arrive
-   * pre-sealed (the agent has already obtained per-field data keys via
-   * `generateSecretDataKey({ ..., fieldKey })` and AES-encrypted locally).
-   * Plaintext fields ship the value inline.
+   * Pattern A: multi-account credential fetch for Shopify. Returns every
+   * agent-scoped Shopify Connection. One OAuth grant maps to one store, so the
+   * stable per-call selector is the store's myshopify domain (`shopDomain`),
+   * NOT `accountIdentifier` — the connect provider keys `accountIdentifier` on
+   * the immutable shop GID (falling back to the domain), so `shopDomain` is the
+   * value the LLM passes and the plugin routes on.
+   *
+   * Each entry is shaped by the connect provider's `buildCredentialsResponse`:
+   * `{ accessToken, shopDomain, shopGid, shopName, apiVersion }` — offline
+   * Shopify tokens never expire, so there is NO token / expiry field and no
+   * refresh method (unlike Salesforce). The GraphQL Admin API authenticates
+   * purely on `X-Shopify-Access-Token`; no client credentials are on the wire.
    */
-  createSecret(args: {
-    scope: SecretScope;
-    scopeId: string;
-    secretId: string;
-    secretName: string;
-    category?: SecretCategory;
-    description?: string;
-    tags?: string[];
-    fields: {
-      key: string;
-      format?: FieldFormat;
-      sensitivity: FieldSensitivity;
-      value?: string;
-      envelope?: EncryptedEnvelopeV1;
+  getShopifyAccounts(): Promise<{
+    accounts: {
+      connectionId: string;
+      accountIdentifier: string;
+      displayName: string | null;
+      connectedAt: string;
+      accessToken: string;
+      shopDomain: string;
+      shopGid: string;
+      shopName: string;
+      apiVersion: string;
     }[];
-    reason?: string;
-  }): Promise<SecretAggregate>;
-  /** Fetch the secret aggregate plus per-field encrypted envelopes. */
-  getSecret(args: {
-    scope: SecretScope;
-    scopeId: string;
-    secretId: string;
-  }): Promise<{
-    aggregate: SecretAggregate;
-    envelopes: FieldEnvelope[];
-  }>;
-  /** Fetch one field. Plaintext: value inline. Encrypted: envelope. */
-  getSecretField(args: {
-    scope: SecretScope;
-    scopeId: string;
-    secretId: string;
-    fieldKey: string;
-  }): Promise<{
-    key: string;
-    sensitivity: FieldSensitivity;
-    format?: FieldFormat;
-    value?: string;
-    envelope?: EncryptedEnvelopeV1;
-    rotatedAt?: string;
-    createdAt: string;
-    updatedAt: string;
   }>;
-  /** Add OR rotate one field. */
-  setSecretField(args: {
-    scope: SecretScope;
-    scopeId: string;
-    secretId: string;
-    fieldKey: string;
-    sensitivity: FieldSensitivity;
-    format?: FieldFormat;
-    value?: string;
-    envelope?: EncryptedEnvelopeV1;
-    reason?: string;
-  }): Promise<{
-    fieldKey: string;
-    rotated: boolean;
+  /**
+   * Pattern A: provider-parameterized multi-account credential fetch for the
+   * social connectors (Bluesky, and the approval-gated backlog: X, Meta,
+   * Threads, LinkedIn, Pinterest, TikTok, Reddit, YouTube).
+   *
+   * Unlike the bespoke `getGithubAccounts()` / `getXeroAccounts()` shapes,
+   * this returns a UNIFORM normalized account shape so `@alfe.ai/social-mcp`'s
+   * shared driver can require a single `account` selector on every
+   * credential-touching tool regardless of platform. The backend
+   * `api-agents/{provider}/accounts` route is already provider-generic; this
+   * is the client-side normalization the plan (`do-we-need-any-moonlit-toucan`
+   * Phase 0, step 5) calls for.
+   *
+   * `accountIdentifier` is the stable per-account selector the LLM should
+   * pass back (for Bluesky: the account DID). `accessToken` carries whatever
+   * the provider's `buildCredentialsResponse` bundles (for Bluesky: the JSON
+   * session bundle — the driver parses the `accessJwt` out of it, or reads the
+   * top-level `accessJwt` from `providerMetadata`-adjacent fields). Everything
+   * else the driver needs for routing (handle, pdsHost, did, …) is on
+   * `providerMetadata`.
+   *
+   * Token refresh is delegated to connect (never done in-plugin) via the
+   * per-account route `POST /agent/connect/{provider}/accounts/{accountIdentifier}/refresh`
+   * — call `refreshSocialAccount(provider, accountIdentifier)`. (The non-account
+   * `POST /agent/connect/{provider}/refresh` route refreshes the provider's
+   * PRIMARY connection, which is wrong under multi-account Pattern A.)
+   */
+  getSocialAccounts(provider: string): Promise<{
+    provider: string;
+    accounts: {
+      connectionId: string;
+      accountIdentifier: string;
+      displayName: string | null;
+      accessToken: string;
+      providerMetadata: Record<string, unknown>;
+      connectedAt: string;
+    }[];
   }>;
-  /** Remove one field. */
-  removeSecretField(args: {
-    scope: SecretScope;
-    scopeId: string;
-    secretId: string;
-    fieldKey: string;
-  }): Promise<void>;
-  /** Update secret-level metadata (name/description/tags/category). */
-  updateSecretMetadata(args: {
-    scope: SecretScope;
-    scopeId: string;
-    secretId: string;
-    secretName?: string;
-    description?: string;
-    tags?: string[];
-    category?: SecretCategory;
-    reason?: string;
-  }): Promise<SecretAggregate>;
-  /** List metadata for secrets in a scope. Optional filters route through the byFacet GSI. */
-  listSecrets(args: {
-    scope: SecretScope;
-    scopeId: string;
-    category?: SecretCategory;
-    tag?: string;
-    fieldKey?: string;
-  }): Promise<SecretMetadata[]>;
-  /** Bounded changelog read — metadata-only audit entries. */
-  getSecretHistory(args: {
-    scope: SecretScope;
-    scopeId: string;
-    secretId: string;
-    limit?: number;
-    cursor?: string;
-  }): Promise<{
-    entries: ChangelogEntry[];
-    nextCursor?: string;
+  /**
+   * Pattern A: refresh a specific social Connection by its stable
+   * `accountIdentifier` (for Bluesky: the account DID) via the
+   * provider-generic per-account refresh route. The counterpart to
+   * `getSocialAccounts(provider)`; `@alfe.ai/social-mcp` calls this on a
+   * 401/ExpiredToken from the platform PDS/API, then re-fetches accounts to
+   * pick up the rotated bundle.
+   *
+   * Refresh itself is ALWAYS delegated to connect — the plugin never calls
+   * the platform's own refresh XRPC (e.g. `com.atproto.server.refreshSession`)
+   * because connect owns the encrypted refresh token + rotation persistence
+   * (Bluesky rotates the refreshJwt; a missed rotation kills the connection
+   * after one refresh). The returned `accessToken` is whatever the provider's
+   * `refreshToken` hook re-bundled (for Bluesky: the JSON session bundle with
+   * the fresh `accessJwt`) — callers typically ignore it and re-fetch via
+   * `getSocialAccounts` for a consistent shape.
+   */
+  refreshSocialAccount(provider: string, accountIdentifier: string): Promise<{
+    accountIdentifier: string;
+    accessToken: string;
+    accessTokenExpiresAt: string;
+    expiresAt: string;
   }>;
-  /** Delete a secret (and all its field rows + tag rows + changelog rows). */
-  deleteSecret(args: {
-    scope: SecretScope;
-    scopeId: string;
-    secretId: string;
+}
+//# sourceMappingURL=connect-credentials.d.ts.map
+//#endregion
+//#region src/domains/database.d.ts
+declare class DatabaseApi extends ApiBase {
+  registerDatabaseCredentials(): Promise<{
+    connectionString: string;
+    username: string;
+    password: string;
+    databases: string[];
+  }>;
+  reportDatabaseAudit(entry: {
+    database: string;
+    collection: string;
+    operation: string;
+    summary?: string;
   }): Promise<void>;
-  /** Enumerate scopes (org/team/project/agent) this agent can access. */
-  listSecretScopes(): Promise<ScopeInfo[]>;
+}
+//# sourceMappingURL=database.d.ts.map
+//#endregion
+//#region src/domains/identity.d.ts
+declare class IdentityApi extends ApiBase {
   /**
    * Returns the calling agent's own identity context — `{ agentId, tenantId }`
    * decoded server-side from the agent API token. Used by the
@@ -1206,59 +1442,35 @@ declare class AgentApiClient {
   }>;
   mergeIdentities(survivorId: string, args: {
     mergedId: string;
-    changedBy: {
-      type: string;
-      id: string;
-      name?: string;
-    };
   }): Promise<{
     ok: boolean;
     error?: string;
   }>;
-  unmergeIdentity(identityId: string, args: {
-    changedBy: {
-      type: string;
-      id: string;
-      name?: string;
-    };
-  }): Promise<{
+  unmergeIdentity(identityId: string): Promise<{
     ok: boolean;
     error?: string;
   }>;
   addIdentityNote(identityId: string, args: {
     content: string;
     category?: string;
-    changedBy: {
-      type: string;
-      id: string;
-      name?: string;
-    };
   }): Promise<{
     noteId: string | null;
   }>;
   tagIdentity(identityId: string, args: {
     tag: string;
     action: "add" | "remove";
-    changedBy: {
-      type: string;
-      id: string;
-      name?: string;
-    };
   }): Promise<{
     ok: boolean;
   }>;
   getIdentityChangelog(identityId: string, args?: {
     limit?: number;
+    cursor?: string;
   }): Promise<{
     entries: unknown[];
+    cursor: string | null;
   }>;
   rollbackIdentity(identityId: string, args: {
     targetVersion: number;
-    changedBy: {
-      type: string;
-      id: string;
-      name?: string;
-    };
   }): Promise<{
     ok: boolean;
     entry?: unknown;
@@ -1297,7 +1509,7 @@ declare class AgentApiClient {
     verified: boolean;
     identityId?: string;
     /** Phase 2: how the confirm resolved — Scenario A vs B. */
-    action?: "merged" | "contact_verified";
+    action?: "merged" | "contact_verified" | "already_confirmed";
     error?: string;
   }>;
   /**
@@ -1326,6 +1538,62 @@ declare class AgentApiClient {
     identityId: string | null;
     status: string;
   }>;
+}
+//# sourceMappingURL=identity.d.ts.map
+//#endregion
+//#region src/domains/images.d.ts
+declare class ImagesApi extends ApiBase {
+  /**
+   * Generate an image from a text prompt and get back a STABLE, public URL
+   * (served from the agent-assets CDN — it does not expire). Embed the returned
+   * `imageUrl` in a reply as markdown to show it to the user.
+   *
+   * ASYNC: `gpt-image-1` routinely runs 30–60s, which exceeds the API Gateway
+   * 30s ceiling, so this enqueues a job (`POST /agent/images/generate` →
+   * `jobId`) then polls (`GET /agent/images/{jobId}`) until it completes. The
+   * worker's real failure message (e.g. an unsupported `size`) surfaces via the
+   * job's `error` field.
+   */
+  generateImage(args: {
+    prompt: string;
+    model?: string;
+    size?: string;
+    quality?: string;
+  }): Promise<{
+    imageUrl: string;
+    model: string;
+  }>;
+}
+//# sourceMappingURL=images.d.ts.map
+//#endregion
+//#region src/domains/integrations.d.ts
+declare class IntegrationsApi extends ApiBase {
+  listIntegrations(): Promise<IntegrationInstall[]>;
+  getIntegrationConfig(integrationId: string): Promise<IntegrationConfigResult>;
+  updateIntegrationConfig(integrationId: string, config: Record<string, unknown>): Promise<void>;
+  installIntegration(integrationId: string, options?: {
+    version?: string;
+    config?: Record<string, unknown>;
+  }): Promise<IntegrationInstall>;
+  removeIntegration(integrationId: string): Promise<IntegrationInstall>;
+  getOAuthUrl(provider: string, scopes?: string[]): Promise<{
+    url: string;
+    provider: string;
+    expiresIn: number;
+  }>;
+  getOAuthStatus(provider: string): Promise<{
+    provider: string;
+    connected: boolean;
+    config?: Record<string, string>;
+  }>;
+  getRegistry(): Promise<{
+    integrations: RegistryEntry[];
+  }>;
+}
+//# sourceMappingURL=integrations.d.ts.map
+//#endregion
+//#region src/domains/memory.d.ts
+declare class MemoryApi extends ApiBase {
   memorySearch(query: string, opts?: {
     limit?: number;
     topic?: string;
@@ -1373,8 +1641,21 @@ declare class AgentApiClient {
     messageCount: number;
   }>;
   memoryLoadContext(tier?: number, topicHint?: string): Promise<{
+    tier: number;
+    facts: {
+      subject: string;
+      predicate: string;
+      object: string;
+      since: string;
+    }[];
+    memories: {
+      text: string;
+      topic: string;
+      subtopic: string;
+      score: number;
+    }[];
+    tokenEstimate: number;
     formatted: string;
-    [key: string]: unknown;
   }>;
   memoryLookupEntity(subject: string): Promise<{
     subject: string;
@@ -1400,198 +1681,218 @@ declare class AgentApiClient {
   }>;
   memoryStats(): Promise<{
     vectorCount: number;
-    tripleCount: number;
-    storageEstimateBytes: number;
-    lastIngestionAt?: string;
-  }>;
-  memoryLearn(args: {
-    text: string;
-    source?: string;
-    sourceType?: "file" | "url" | "inline";
-    metadata?: {
-      sessionId?: string;
-      channelId?: string;
-      userName?: string;
-    };
-  }): Promise<{
-    memoriesStored: number;
-    triplesStored: number;
-    chunks: number;
-    source?: string;
-  }>;
-  memoryBootstrapStatus(): Promise<{
-    synced: boolean;
-    syncedAt?: string;
-    sessionsBackfillSynced?: boolean;
-    sessionsBackfillSyncedAt?: string;
-  }>;
-  memoryBootstrapStatusMark(scope?: "files" | "sessions"): Promise<{
-    synced: true;
-    syncedAt: string;
-  }>;
-  sendSms(args: {
-    to: string;
-    body: string;
-  }): Promise<{
-    sent: boolean;
-    sid: string;
-  }>;
-  searchWeb(params: {
-    query: string;
-    count?: number;
-    offset?: number;
-    country?: string;
-    freshness?: string;
-  }): Promise<unknown>;
-  searchImages(params: {
-    query: string;
-    count?: number;
-  }): Promise<unknown>;
-  searchNews(params: {
-    query: string;
-    count?: number;
-    freshness?: string;
-  }): Promise<unknown>;
-  /** Search news across the selected provider's corpus. → POST /agent/news/search */
-  newsSearch(params: {
-    query: string;
-    provider?: NewsProvider;
-    source?: string;
-    from?: string;
-    to?: string;
-    language?: string;
-    category?: string;
-    limit?: number;
-  }): Promise<NewsResult>;
-  /** Top headlines for the selected provider. → POST /agent/news/headlines */
-  newsHeadlines(params?: {
-    provider?: NewsProvider;
-    category?: string;
-    source?: string;
-    language?: string;
-    limit?: number;
-  }): Promise<NewsResult>;
-  /**
-   * Semantic search across the agent's member scopes. Fan-out is gated
-   * server-side by `listScopes` set-inclusion (fail-closed). Pass
-   * `scopeType` + `scopeId` to narrow to one scope; a non-member scope
-   * yields empty results (never a cross-scope leak).
-   */
-  knowledgeSearch(query: string, opts?: {
-    limit?: number;
-    scopeType?: KnowledgeScopeType;
-    scopeId?: string;
-  }): Promise<KnowledgeSearchResult>;
-  /** Enumerate the scopes (org + teams + projects) this agent belongs to. */
-  listScopes(): Promise<{
-    scopes: KnowledgeScope[];
-  }>;
-  /** Read a scope's structured knowledge profile (after membership check). */
-  getScopeProfile(scopeType: KnowledgeScopeType, scopeId: string): Promise<KnowledgeProfile>;
-  /** List a scope's docs (the org-files corpus; mirrored to shared/<scope>/). */
-  listScopeDocs(scopeType: KnowledgeScopeType, scopeId: string, opts?: {
-    limit?: number;
-    cursor?: string;
+    tripleCount: number;
+    storageEstimateBytes: number;
+    lastIngestionAt?: string;
+  }>;
+  memoryLearn(args: {
+    text: string;
+    source?: string;
+    sourceType?: "file" | "url" | "inline";
+    metadata?: {
+      sessionId?: string;
+      channelId?: string;
+      userName?: string;
+    };
   }): Promise<{
-    files: KnowledgeDoc[];
-    nextCursor: string | null;
+    memoriesStored: number;
+    triplesStored: number;
+    chunks: number;
+    source?: string;
+  }>;
+  memoryBootstrapStatus(): Promise<{
+    synced: boolean;
+    syncedAt?: string;
+    sessionsBackfillSynced?: boolean;
+    sessionsBackfillSyncedAt?: string;
+  }>;
+  memoryBootstrapStatusMark(scope?: "files" | "sessions"): Promise<{
+    synced: true;
+    syncedAt: string;
   }>;
+}
+//# sourceMappingURL=memory.d.ts.map
+//#endregion
+//#region src/domains/secrets.d.ts
+declare class SecretsApi extends ApiBase {
   /**
-   * Read the full text of a scope doc. Resolves a presigned download URL
-   * from `services/org`, then fetches the bytes directly from S3 (the one
-   * legitimate raw fetch in a plugin — same pattern as sync).
+   * Mint a fresh AES-256 data key for a specific (secret, field) pair. The
+   * encryption context is rebuilt server-side from `auth.tenantId` + the body
+   * fields including `fieldKey`; the agent cannot forge context for a scope
+   * or field it doesn't own. Legacy single-envelope secrets are migrated to
+   * `field#value` rows by the data migration, so call with `fieldKey: "value"`
+   * to reach them.
    */
-  readScopeDoc(scopeType: KnowledgeScopeType, scopeId: string, filePath: string): Promise<{
-    filePath: string;
-    text: string;
-  }>;
+  generateSecretDataKey(args: {
+    scope: SecretScope;
+    scopeId: string;
+    secretId: string;
+    fieldKey: string;
+  }): Promise<GeneratedDataKey>;
   /**
-   * Write (create or overwrite) a scope doc. Two-step presigned upload:
-   * `services/org` returns a signed URL plus `requiredHeaders` (author /
-   * authorKind / message as `x-amz-meta-*`) that MUST be sent verbatim on
-   * the PUT, alongside the same `Content-Type` that was signed. Author and
-   * authorKind are server-set from the agent token — never trusted here.
+   * Unwrap a wrapped data key so the agent can decrypt the envelope locally.
+   * `fieldKey` MUST match the value supplied when the data key was generated
+   * (it's bound into KMS encryption context); mismatch fails with
+   * `InvalidCiphertextException`.
    */
-  writeScopeDoc(scopeType: KnowledgeScopeType, scopeId: string, filePath: string, content: string, opts?: {
-    contentType?: string;
-    message?: string;
+  decryptSecretDataKey(args: {
+    scope: SecretScope;
+    scopeId: string;
+    secretId: string;
+    fieldKey: string;
+    dataKeyCiphertext: string;
   }): Promise<{
-    filePath: string;
+    plaintextKey: string;
   }>;
   /**
-   * Open a change request against a scope's knowledge resource. For a doc
-   * create/update, `services/org` returns a presigned staging PUT; this method
-   * uploads the proposed `content` to it (echoing the same Content-Type that
-   * was signed), mirroring `writeScopeDoc`. The staged body is applied to the
-   * canonical doc — attributed to this agent — only when a reviewer approves.
-   */
-  proposeScopeChange(scopeType: KnowledgeScopeType, scopeId: string, input: ProposeScopeChangeInput): Promise<KnowledgeChangeRequest>;
-  /**
-   * List the agent's OWN change requests in a scope (filtered server-side to
-   * this agent as proposer). Pass `status` to narrow to open / approved / etc.
+   * Create a new secret with one or more fields. Encrypted fields must arrive
+   * pre-sealed (the agent has already obtained per-field data keys via
+   * `generateSecretDataKey({ ..., fieldKey })` and AES-encrypted locally).
+   * Plaintext fields ship the value inline.
    */
-  listScopeChangeRequests(scopeType: KnowledgeScopeType, scopeId: string, opts?: {
-    status?: ChangeRequestStatus;
-    limit?: number;
-    cursor?: string;
+  createSecret(args: {
+    scope: SecretScope;
+    scopeId: string;
+    secretId: string;
+    secretName: string;
+    category?: SecretCategory;
+    description?: string;
+    tags?: string[];
+    fields: {
+      key: string;
+      format?: FieldFormat;
+      sensitivity: FieldSensitivity;
+      value?: string;
+      envelope?: EncryptedEnvelopeV1;
+    }[];
+    reason?: string;
+  }): Promise<SecretAggregate>;
+  /** Fetch the secret aggregate plus per-field encrypted envelopes. */
+  getSecret(args: {
+    scope: SecretScope;
+    scopeId: string;
+    secretId: string;
   }): Promise<{
-    changeRequests: KnowledgeChangeRequest[];
-    nextCursor: string | null;
+    aggregate: SecretAggregate;
+    envelopes: FieldEnvelope[];
   }>;
-  registerDatabaseCredentials(): Promise<{
-    connectionString: string;
-    username: string;
-    password: string;
-    databases: string[];
+  /** Fetch one field. Plaintext: value inline. Encrypted: envelope. */
+  getSecretField(args: {
+    scope: SecretScope;
+    scopeId: string;
+    secretId: string;
+    fieldKey: string;
+  }): Promise<{
+    key: string;
+    sensitivity: FieldSensitivity;
+    format?: FieldFormat;
+    value?: string;
+    envelope?: EncryptedEnvelopeV1;
+    rotatedAt?: string;
+    createdAt: string;
+    updatedAt: string;
   }>;
-  reportDatabaseAudit(entry: {
-    database: string;
-    collection: string;
-    operation: string;
-    summary?: string;
+  /** Add OR rotate one field. */
+  setSecretField(args: {
+    scope: SecretScope;
+    scopeId: string;
+    secretId: string;
+    fieldKey: string;
+    sensitivity: FieldSensitivity;
+    format?: FieldFormat;
+    value?: string;
+    envelope?: EncryptedEnvelopeV1;
+    reason?: string;
+  }): Promise<{
+    fieldKey: string;
+    rotated: boolean;
+  }>;
+  /** Remove one field. */
+  removeSecretField(args: {
+    scope: SecretScope;
+    scopeId: string;
+    secretId: string;
+    fieldKey: string;
   }): Promise<void>;
-  requestBrowserTakeover(args: {
-    instructions: string;
-    url?: string;
-    conversationId?: string;
+  /** Update secret-level metadata (name/description/tags/category). */
+  updateSecretMetadata(args: {
+    scope: SecretScope;
+    scopeId: string;
+    secretId: string;
+    secretName?: string;
+    description?: string;
+    tags?: string[];
+    category?: SecretCategory;
+    reason?: string;
+  }): Promise<SecretAggregate>;
+  /** List metadata for secrets in a scope. Optional filters route through the byFacet GSI. */
+  listSecrets(args: {
+    scope: SecretScope;
+    scopeId: string;
+    category?: SecretCategory;
+    tag?: string;
+    fieldKey?: string;
+  }): Promise<SecretMetadata[]>;
+  /** Bounded changelog read — metadata-only audit entries. */
+  getSecretHistory(args: {
+    scope: SecretScope;
+    scopeId: string;
+    secretId: string;
+    limit?: number;
+    cursor?: string;
   }): Promise<{
-    sessionId: string;
-    status: string;
+    entries: ChangelogEntry[];
+    nextCursor?: string;
   }>;
-  getRemoteSession(sessionId: string): Promise<RemoteSessionInfo>;
-  completeRemoteSession(sessionId: string): Promise<{
+  /** Delete a secret (and all its field rows + tag rows + changelog rows). */
+  deleteSecret(args: {
+    scope: SecretScope;
+    scopeId: string;
+    secretId: string;
+  }): Promise<void>;
+  /** Enumerate scopes (org/team/project/agent) this agent can access. */
+  listSecretScopes(): Promise<ScopeInfo[]>;
+}
+//# sourceMappingURL=secrets.d.ts.map
+//#endregion
+//#region src/domains/teams.d.ts
+declare class TeamsApi extends ApiBase {
+  getTeamsCredentials(): Promise<{
+    agentId: string;
+    tenantId: string;
+    azureAppId: string;
+    azureBotId: string;
+    azureClientSecret: string;
+    botDisplayName?: string;
+    teamsTenantId?: string;
+    serviceUrl?: string;
+  }>;
+  sendTeamsMessage(data: {
+    conversationId: string;
+    text?: string;
+    adaptiveCard?: Record<string, unknown>;
+  }): Promise<{
     ok: boolean;
+    activityId: string;
   }>;
-  /**
-   * Issue a request that returns the raw `Response` (no JSON parsing, no
-   * forced Content-Type). The caller sets `Content-Type`/`Accept` on `headers`
-   * and reads the body itself (`arrayBuffer()` / `json()`).
-   *
-   * A single retry fires only on the same transient statuses `request()`
-   * retries (authorizer-timeout 500 + LB 502/503/504) and transient network
-   * errors — before the route handler runs — so re-issuing a POST does not
-   * risk a duplicate side effect. Voice TTS/STT are effectively idempotent
-   * (re-synthesize / re-transcribe) and meter server-side keyed on the
-   * gateway requestId, so a retried transcription doesn't double-bill.
-   */
-  private rawFetch;
-  /**
-   * Text-to-speech. Returns raw PCM audio bytes plus their framing — the
-   * voice service defaults to 24 kHz / mono / 16-bit. Wrap in a WAV container
-   * to produce a playable file. Metered per character against the tenant
-   * credit pool server-side; TTS completes regardless of metering outcome.
-   */
-  tts(args: VoiceTtsArgs): Promise<VoiceTtsResult>;
-  /**
-   * Speech-to-text. Accepts raw linear16 (16-bit LE) mono PCM — NOT a WAV or
-   * other container (the endpoint transcribes with a fixed linear16 encoding,
-   * so a container header would be transcribed as noise). Strip any WAV header
-   * and pass `sampleRate` from it before calling. Metered by transcribed
-   * duration against the tenant credit pool server-side.
-   */
-  stt(args: VoiceSttArgs): Promise<VoiceSttResult>;
+  listTeamsChannels(): Promise<{
+    channels: {
+      id: string;
+      name: string;
+      description?: string;
+    }[];
+  }>;
+}
+//# sourceMappingURL=teams.d.ts.map
+
+//#endregion
+//#region src/index.d.ts
+interface AgentApiClient extends SyncApi, IntegrationsApi, WorkspaceApi, ConnectCredentialsApi, TeamsApi, ChatApi, SecretsApi, IdentityApi, MemoryApi, SearchApi, KnowledgeApi, DatabaseApi, MobileApi, RemoteApi, SelfApi, VoiceApi, ImagesApi, WebhooksApi {}
+declare class AgentApiClient extends ApiBase {
+  constructor(config: AgentApiClientConfig);
 }
 //# sourceMappingURL=index.d.ts.map
+
 //#endregion
 //#endregion
 //#region ../chat/dist/index.d.ts
@@ -1606,7 +1907,7 @@ interface ChatServiceClientOptions {
   /** Agent API key for Bearer auth */
   apiKey: string;
   /** Called when the chat service sends an RPC request */
-  onRequest: (request: RpcRequest) => void;
+  onRequest: (request: RpcRequest) => void | Promise<void>;
   /** Called when connection state changes */
   onConnectionChange?: (connected: boolean) => void;
   /** Optional logger (defaults to console) */
@@ -1628,12 +1929,12 @@ interface Logger {
 }
 //#endregion
 //#region src/client.d.ts
-
 declare class ChatServiceClient {
   private readonly options;
   private ws;
   private stopped;
   private connected;
+  private connectionGeneration;
   private retryCount;
   private retryTimer;
   private heartbeatTimer;
@@ -1642,7 +1943,7 @@ declare class ChatServiceClient {
   private pendingRequests;
   private requestCounter;
   private messageQueue;
-  private readonly MAX_QUEUE_SIZE;
+  private queuedBytes;
   constructor(options: ChatServiceClientOptions);
   get isConnected(): boolean;
   /** Start connecting to the chat service. */
@@ -1663,8 +1964,13 @@ declare class ChatServiceClient {
    */
   sendRequest(method: string, params: Record<string, unknown>, timeoutMs?: number): Promise<Record<string, unknown>>;
   private flushMessageQueue;
+  private enqueueMessage;
   private flushPendingRequests;
+  private rejectPendingRequest;
   private doConnect;
+  private isCurrentSocket;
+  private setConnected;
+  private notifyConnectionChange;
   private handleMessage;
   private scheduleReconnect;
   /**
@@ -1836,14 +2142,20 @@ declare const WARM_STREAMING_SUPPORTED = false;
  * posture). An inbound chat message could try to induce a destructive shell
  * command, and these turns run unattended on the user's machine. We therefore
  * pass an explicit allow-list of read/analysis/edit tools and DENY Bash by
- * default, and use `--permission-mode default` (NEVER `bypassPermissions` /
+ * default, and use `--permission-mode dontAsk` (NEVER `bypassPermissions` /
  * `--dangerously-skip-permissions`). See DEVELOPING.md → "Tool-permission
  * posture". Bash is intentionally absent — a bridged turn cannot run arbitrary
  * shell. Callers that want a wider set pass `allowedTools` explicitly.
  */
 declare const DEFAULT_ALLOWED_TOOLS: readonly ["Read", "Grep", "Glob", "LS", "Edit", "Write", "WebFetch", "WebSearch", "Task", "TodoWrite"];
-/** Sane default permission posture. NEVER `bypassPermissions`. */
-declare const DEFAULT_PERMISSION_MODE = "default";
+declare const CLAUDE_PERMISSION_MODES: readonly ["acceptEdits", "auto", "manual", "dontAsk", "plan"];
+type ClaudePermissionMode = (typeof CLAUDE_PERMISSION_MODES)[number];
+/**
+ * Headless-safe permission posture supported by current Claude CLI releases.
+ * Allow-listed tools run; any permission prompt the bridge cannot answer is
+ * denied. `bypassPermissions` is deliberately not representable.
+ */
+declare const DEFAULT_PERMISSION_MODE: ClaudePermissionMode;
 /** How a turn ended, surfaced to the host so it can settle / persist. */
 interface DriverTurnResult {
   /** The claude session id observed on the `system:init` event (for --resume). */
@@ -1875,7 +2187,7 @@ interface RunTurnParams {
   /** Tool allow-list (defaults to DEFAULT_ALLOWED_TOOLS). */
   allowedTools?: readonly string[];
   /** Permission mode (defaults to DEFAULT_PERMISSION_MODE — never bypass). */
-  permissionMode?: string;
+  permissionMode?: ClaudePermissionMode;
   /** Per-emission callback so the host can stream deltas/activity live. */
   onEmission: (emission: MapperEmission) => void;
   /** Wall-clock override for the mapper (tests). Defaults to Date.now. */
@@ -1890,6 +2202,8 @@ interface RunTurnParams {
  * cap, but the late settle is harmlessly no-op'd by the chat service.
  */
 declare const TURN_TIMEOUT_MS = 300000;
+/** Grace after SIGINT before SIGKILL + local settlement. Keeps E2 under 305s. */
+declare const TERMINATION_GRACE_MS = 2000;
 /**
  * Spawns and drives `claude` subprocesses. Tracks a SINGLE in-flight child, so
  * the host creates ONE driver PER TURN (`ClaudeCodeHost.makeDriver`) — a driver
@@ -1898,6 +2212,7 @@ declare const TURN_TIMEOUT_MS = 300000;
  */
 declare class SessionDriver {
   private child;
+  private abortCurrent;
   private readonly bin;
   private readonly baseEnv;
   private readonly log;
@@ -1971,6 +2286,9 @@ declare class ClaudeCodeHost {
   private readonly seenIdempotencyKeys;
   /** RPC sessionKey → resolved SessionDriver so chat.abort can SIGINT the child. */
   private activeDriverBySession;
+  private claudeSessionSave;
+  private stopping;
+  private stopPromise;
   constructor(cfg: ClaudeCodeHostConfig, deps?: {
     /** Per-turn driver factory (test seam). Called once per turn. */
     makeDriver?: () => SessionDriver;
@@ -1979,8 +2297,8 @@ declare class ClaudeCodeHost {
   });
   /** Start the chat WS. Non-blocking — the client reconnects internally. */
   start(): Promise<void>;
-  /** Stop the chat WS (SIGTERM path). */
-  stop(): void;
+  /** Stop admission, abort owned children, and give active turns time to settle. */
+  stop(): Promise<void>;
   /**
    * Inbound RPC dispatch. Invoked by the chat client's `onRequest` in
    * production; also the test seam (drive `agent`/`chat.abort`/… directly).
@@ -2002,6 +2320,7 @@ declare class ClaudeCodeHost {
   private ensureSession;
   private loadClaudeSessionIds;
   private saveClaudeSessionIds;
+  private rememberClaudeSessionId;
   private pruneIdempotency;
 }
 /** Strip the `agent:{agentId}:` prefix from a full server session key. */
@@ -2160,4 +2479,4 @@ declare function listSessions(filters?: {
  */
 declare function resolveHostConfig(): ClaudeCodeHostConfig;
 //#endregion
-export { type ActivityEmission, BRIDGE_ENV_VAR, type ChatActivityRecord, type ChatMessage, ClaudeCodeHost, type ClaudeCodeHostConfig, DEFAULT_ALLOWED_TOOLS, DEFAULT_PERMISSION_MODE, type DriverTurnResult, type EndEmission, type MapperEmission, type MapperState, type RunTurnParams, SCRUBBED_ANTHROPIC_ENV_VARS, type SessionData, SessionDriver, type SessionSummary, TURN_TIMEOUT_MS, type TextEmission, type ThinkingActivity, type ToolActivity, WARM_STREAMING_SUPPORTED, addMessage, appendActivity, buildChildEnv, collectTurnActivityRecords, createMapperState, createSession, getSession, listSessions, mapStreamEvent, mapStreamEvents, resolveHostConfig, saveSession, stripAgentPrefix };
+export { type ActivityEmission, BRIDGE_ENV_VAR, CLAUDE_PERMISSION_MODES, type ChatActivityRecord, type ChatMessage, ClaudeCodeHost, type ClaudeCodeHostConfig, type ClaudePermissionMode, DEFAULT_ALLOWED_TOOLS, DEFAULT_PERMISSION_MODE, type DriverTurnResult, type EndEmission, type MapperEmission, type MapperState, type RunTurnParams, SCRUBBED_ANTHROPIC_ENV_VARS, type SessionData, SessionDriver, type SessionSummary, TERMINATION_GRACE_MS, TURN_TIMEOUT_MS, type TextEmission, type ThinkingActivity, type ToolActivity, WARM_STREAMING_SUPPORTED, addMessage, appendActivity, buildChildEnv, collectTurnActivityRecords, createMapperState, createSession, getSession, listSessions, mapStreamEvent, mapStreamEvents, resolveHostConfig, saveSession, stripAgentPrefix };