npm - @alfe.ai/openclaw-knowledge - Versions diffs - 0.0.20 → 0.0.21 - Mend

@alfe.ai/openclaw-knowledge 0.0.20 → 0.0.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/plugin.d.cts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"plugin.d.cts","names":["ChangelogAction","ChangelogActor","ChangelogEntry","ChangelogEntry$1","EncryptedEnvelopeV1","EncryptedEnvelopeV1$1","Field","FieldEnvelope","FieldEnvelope$1","FieldFormat","FieldFormat$1","FieldSensitivity","FieldSensitivity$1","FieldView","GeneratedDataKey","GeneratedDataKey$1","IntegrationConfigResult","IntegrationConfigResult$1","IntegrationConfigSchemaField","IntegrationInstall","IntegrationInstall$1","RegistryEntry","RegistryEntry$1","ScopeInfo","ScopeInfo$1","SecretAggregate","SecretAggregate$1","SecretCategory","SecretCategory$1","SecretMetadata","SecretMetadata$1","SecretScope","SecretScope$1","ToolCaptureApi","InstallToolErrorCaptureOptions","installToolErrorCapture","AgentApiClientConfig","AgentApiTransport","Headers","BodyInit","Uint8Array","Response","Promise","RequestInit","AbortSignal","T","ApiBase","AgentWorkspaceInfo","WorkspaceApi","Record","SyncAgentInfo","SyncManifestEntry","SyncManifest","SyncPresignedUrl","SyncConfirmedUpload","SyncReconstructFile","SyncReconstructBundle","SyncAgentStats","SyncFileEntry","SyncSessionEntry","SyncSessionContent","SharedFileEntry","SyncApi","KnowledgeScopeType","KnowledgeScope","KnowledgeSearchHit","KnowledgeSearchResult","KnowledgeProfileLink","KnowledgeProfile","ChangeRequestResourceType","ChangeRequestOperation","ChangeRequestStatus","ChangeRequestActorKind","KnowledgeChangeRequest","ProposeScopeChangeInput","KnowledgeDoc","KnowledgeApi","MobileNumberInfo","MobileAvailableNumber","WhatsAppTemplate","MobileApi","RemoteSessionInfo","RemoteApi","AgentVoiceConfig","AgentSelf","AgentAvatarPresign","AgentVoice","SelfApi","VoiceTtsModel","VoiceTtsArgs","VoiceTtsResult","Buffer","VoiceSttArgs","VoiceSttResult","VoiceApi","NewsProvider","NewsArticle","NewsResult","SearchApi","AgentWebhook","CreatedAgentWebhook","AgentWebhookDelivery","WebhooksApi","ChatApi","ConnectCredentialsApi","DatabaseApi","IdentityApi","ImagesApi","IntegrationsApi","MemoryApi","SecretsApi","TeamsApi","AgentApiClient","KitLogger","ToolResult","ToolDef","TParameters","Record","Promise","PublicToolError","Error","publicToolError","ok","errResult","defineTool","IpcResponse","IpcClient","IpcModule","ConnectToDaemonOptions","ConnectToDaemonDependencies","connectToDaemon","ResolveOpenClawSdkOptions","ResolveOpenClawSdkDependencies","resolveOpenClawSdk","T","getActivationKey","isActivated","resetActivation","guardedStart"],"sources":["../../agent-api-client/dist/index.d.ts","../../openclaw-plugin-kit/dist/index.d.ts","../src/types.ts","../src/runtime.ts","../src/plugin.ts"],"sourcesContent":["import { ChangelogAction, ChangelogActor, ChangelogEntry, ChangelogEntry as ChangelogEntry$1, EncryptedEnvelopeV1, EncryptedEnvelopeV1 as EncryptedEnvelopeV1$1, Field, FieldEnvelope, FieldEnvelope as FieldEnvelope$1, FieldFormat, FieldFormat as FieldFormat$1, FieldSensitivity, FieldSensitivity as FieldSensitivity$1, FieldView, GeneratedDataKey, GeneratedDataKey as GeneratedDataKey$1, IntegrationConfigResult, IntegrationConfigResult as IntegrationConfigResult$1, IntegrationConfigSchemaField, IntegrationInstall, IntegrationInstall as IntegrationInstall$1, RegistryEntry, RegistryEntry as RegistryEntry$1, ScopeInfo, ScopeInfo as ScopeInfo$1, SecretAggregate, SecretAggregate as SecretAggregate$1, SecretCategory, SecretCategory as SecretCategory$1, SecretMetadata, SecretMetadata as SecretMetadata$1, SecretScope, SecretScope as SecretScope$1 } from \"@alfe/types\";\n\n//#region src/tool-error-capture.d.ts\n\n/*\n Tool-error capture for Alfe OpenClaw plugins.\n \n OpenClaw converts a thrown tool handler into a model-facing `tool_result`\n * WITHOUT logging, and most Alfe plugins catch-and-return an error result the\n * same silent way — so tool failures never appear in the runtime's output and\n * therefore never reach Sentry (the gateway daemon supervises the OpenClaw\n * process and reports error-looking output lines to the `agent-runtime`\n * project — see packages/gateway/src/runtime-output-monitor.ts).\n \n `installToolErrorCapture(api, { plugin })` closes that gap at the ONE choke\n * point every plugin already has: it wraps `api.registerTool` so every tool's\n * `execute` emits a deterministic, detector-matched line on failure:\n \n [ERROR] alfe-tool plugin=<plugin> tool=<name> <thrown\|result-error>: <msg> (at <first-frame>)\n \n The `[ERROR]` prefix at line start is exactly what the daemon's\n * `ErrorLineDetector` classifies as an error-log block, so the failure lands\n * in Sentry fingerprinted by its normalized message — no Sentry SDK inside\n * the plugin process, no new dependency. Behavior toward OpenClaw and the\n * model is UNCHANGED: throws are rethrown, results returned as-is.\n /\n/\n Minimal shape of the OpenClaw plugin api this helper relies on. Method\n * syntax on purpose — TS checks method signatures bivariantly, so each\n * plugin's own concretely-typed `registerTool(tool: ToolDef): void` is\n * accepted without casts.\n /\ninterface ToolCaptureApi {\n registerTool(...args: never[]): unknown;\n}\ninterface InstallToolErrorCaptureOptions {\n /* Plugin package short-name for attribution (e.g. \"openclaw-secrets\"). /\n plugin: string;\n /\n Line sink — defaults to writing `process.stderr` directly (the plugin\n * runs in-process in OpenClaw, so this lands on the runtime's stderr, which\n * the daemon supervises — and a console patch can't reformat it away).\n * Injectable for tests.\n /\n emit?: (line: string) => void;\n}\n/\n Wrap `api.registerTool` so every tool registered AFTER this call gets\n * failure capture. Handles both OpenClaw registration signatures:\n * `registerTool(toolDef)` and `registerTool((ctx) => toolDef, opts)`.\n * Call once, first thing in the plugin's `activate`/`register` entry.\n * Never throws.\n /\ndeclare function installToolErrorCapture(api: ToolCaptureApi, options: InstallToolErrorCaptureOptions): void;\n//# sourceMappingURL=tool-error-capture.d.ts.map\n//#endregion\n//#region src/transport.d.ts\n/\n Shared HTTP transport for the Agent API client — request core, retry\n * policy, error formatting, and the `ApiBase` class the domain method\n * groups under `./domains/` build on.\n /\ninterface AgentApiClientConfig {\n apiKey: string;\n apiUrl: string;\n}\n/\n Encode each path segment but keep the `/` separators — `encodeURIComponent`\n * would escape the slashes too, breaking greedy proxy routes.\n /\n\ndeclare class AgentApiTransport {\n private readonly apiKey;\n private readonly apiUrl;\n constructor(config: AgentApiClientConfig);\n /\n Binary sibling of `request<T>()`. `request()` forces\n * `Content-Type: application/json` and parses a `{ data: T }` envelope,\n * neither of which fits a raw-audio flow (voice TTS/STT), so those go\n * through this instead. Auth (Bearer), the request budget, and the single\n * retry policy on transient 5xx / network errors is kept in sync with\n * `request()`. Safe read methods retry once by default; mutation methods do\n * not, because a response can be lost after a handler or provider call has\n * already succeeded.\n /\n rawRequest(path: string, init: {\n method: string;\n headers: Headers;\n body?: BodyInit \| Uint8Array;\n }, extra?: {\n retry?: boolean;\n }): Promise<Response>;\n /\n @param extra.timeoutMs Per-request abort timeout (default REQUEST_TIMEOUT_MS).\n * Long endpoints (image generation) pass a larger value so the gateway's\n * own timeout wins with a readable status instead of a client-side abort.\n * @param extra.retry Whether to retry once on transient failures. Safe reads\n * (GET/HEAD/OPTIONS) default to true; mutations default to false. Set true\n * only when the endpoint's server-side contract is explicitly idempotent.\n * @param extra.signal Optional caller cancellation combined with the client's\n * own timeout budget. Aborting either signal cancels the request.\n /\n request<T>(path: string, options?: RequestInit, extra?: {\n timeoutMs?: number;\n retry?: boolean;\n signal?: AbortSignal;\n }): Promise<T>;\n}\n/\n Base class for the domain method groups. Holds the shared transport;\n * `AgentApiClient` assembles the groups onto one class via `applyMixins`\n * (prototype copy), so methods keep their original `this`-on-the-client\n * call shape.\n /\ndeclare class ApiBase {\n protected readonly transport: AgentApiTransport;\n constructor(transport: AgentApiTransport);\n}\n//# sourceMappingURL=transport.d.ts.map\n//#endregion\n//#region src/domains/workspace.d.ts\n/* Response of GET /agent/workspace (services/agents). /\ninterface AgentWorkspaceInfo {\n templateKey?: string;\n defaultModel?: string;\n installedFrom?: {\n templateKey: string;\n authorTenantId: string;\n version: number;\n };\n runtime?: string;\n teams?: {\n teamId: string;\n name: string;\n description?: string;\n parentTeamId?: string;\n }[];\n projects?: {\n projectId: string;\n name: string;\n description?: string;\n status: string;\n parentProjectId?: string;\n }[];\n teamIds?: string[];\n projectIds?: string[];\n}\ndeclare class WorkspaceApi extends ApiBase {\n /\n GET /agent/workspace — workspace config for the authenticated agent\n * (template assignment, default model, org roster).\n /\n getWorkspace(): Promise<AgentWorkspaceInfo>;\n /\n GET /templates/{key}/files — persona/workspace file contents for a\n * template the agent has access to. Pass `version` to pin to the version\n * the agent was installed from (omit → the endpoint resolves `latest`).\n /\n getTemplateFiles(templateKey: string, opts?: {\n version?: number;\n }): Promise<{\n files: Record<string, string>;\n }>;\n}\n//# sourceMappingURL=workspace.d.ts.map\n//#endregion\n//#region src/domains/sync.d.ts\ninterface SyncAgentInfo {\n agentId: string;\n tenantId: string;\n displayName: string;\n s3Prefix: string;\n status: \"stale\" \| \"syncing\" \| \"synced\";\n fileCount?: number;\n totalSize?: number;\n lastSync?: string;\n}\ninterface SyncManifestEntry {\n hash: string;\n size: number;\n modified: string;\n etag?: string;\n storageClass?: string;\n compressed?: boolean;\n}\ninterface SyncManifest {\n version: 1;\n agentId: string;\n lastSync: string;\n files: Record<string, SyncManifestEntry>;\n}\ninterface SyncPresignedUrl {\n path: string;\n url: string;\n expiresAt: string;\n}\ninterface SyncConfirmedUpload {\n filePath: string;\n hash: string;\n size: number;\n storageClass: \"STANDARD\" \| \"GLACIER_IR\";\n syncedAt: string;\n}\ninterface SyncReconstructFile {\n path: string;\n size: number;\n url: string;\n storageClass?: string;\n compressed?: boolean;\n}\ninterface SyncReconstructBundle {\n agentId: string;\n mode: \"full\" \| \"active\" \| \"memory\";\n fileCount: number;\n totalSize: number;\n files: SyncReconstructFile[];\n expiresAt: string;\n}\ninterface SyncAgentStats {\n agentId: string;\n standardBytes: number;\n glacierBytes: number;\n fileCount: number;\n lastSyncAt: string \| null;\n}\ninterface SyncFileEntry {\n filePath: string;\n size: number;\n modified: string;\n contentHash: string;\n storageClass?: string;\n compressed?: boolean;\n}\ninterface SyncSessionEntry {\n sessionId: string;\n size: number;\n lastModified: string;\n storageClass?: string;\n isArchived: boolean;\n}\ninterface SyncSessionContent {\n sessionId: string;\n content: string;\n compressed: boolean;\n}\ninterface SharedFileEntry {\n filePath: string;\n fileName: string;\n size: number;\n contentType?: string;\n}\ndeclare class SyncApi extends ApiBase {\n syncRegister(args?: {\n displayName?: string;\n }): Promise<{\n agent: SyncAgentInfo;\n }>;\n syncGetManifest(): Promise<SyncManifest>;\n syncPresign(args: {\n files: {\n path: string;\n operation: \"put\" \| \"get\";\n contentType?: string;\n }[];\n }): Promise<{\n urls: SyncPresignedUrl[];\n }>;\n syncConfirmUpload(args: {\n filePath: string;\n hash: string;\n size: number;\n storageClass?: \"STANDARD\" \| \"GLACIER_IR\";\n }): Promise<SyncConfirmedUpload>;\n syncReconstruct(args: {\n mode: \"full\" \| \"active\" \| \"memory\";\n }): Promise<SyncReconstructBundle>;\n syncGetStats(): Promise<SyncAgentStats>;\n syncListFiles(args?: {\n prefix?: string;\n }): Promise<{\n files: SyncFileEntry[];\n }>;\n syncListSessions(): Promise<{\n sessions: SyncSessionEntry[];\n }>;\n syncGetSession(sessionId: string): Promise<SyncSessionContent>;\n syncDeleteFile(filePath: string): Promise<{\n removed: boolean;\n }>;\n sharedListFiles(args: {\n scope: \"org\" \| \"team\" \| \"project\";\n scopeId: string;\n limit?: number;\n cursor?: string;\n }): Promise<{\n files: SharedFileEntry[];\n nextCursor: string \| null;\n }>;\n sharedDownloadUrl(args: {\n scope: \"org\" \| \"team\" \| \"project\";\n scopeId: string;\n filePath: string;\n }): Promise<{\n downloadUrl: string;\n expiresIn: number;\n }>;\n}\n//# sourceMappingURL=sync.d.ts.map\n//#endregion\n//#region src/domains/knowledge.d.ts\ntype KnowledgeScopeType = \"org\" \| \"team\" \| \"project\";\ninterface KnowledgeScope {\n scopeType: KnowledgeScopeType;\n scopeId: string;\n name: string;\n}\ninterface KnowledgeSearchHit {\n id: string;\n text: string;\n /* Normalized relevance in (0,1]; higher = closer. /\n score: number;\n scopeType: KnowledgeScopeType;\n scopeId: string;\n /\n Provenance of the hit. All live results are `\"doc\"`; `\"fact\"` only ever\n * appears for legacy vectors indexed before the facts primitive was removed\n * (the search index stays tolerant of them). Treat every hit as a doc.\n /\n source: \"doc\" \| \"fact\";\n /* The canonical file under shared/<scope>/ (present on doc hits). /\n filePath?: string;\n /* Legacy-only: the id of a pre-removal fact vector. /\n factId?: string;\n}\ninterface KnowledgeSearchResult {\n results: KnowledgeSearchHit[];\n /* True when fan-out breadth was capped (more member scopes than the cap). /\n truncatedScopes: boolean;\n}\ninterface KnowledgeProfileLink {\n label: string;\n url: string;\n}\ninterface KnowledgeProfile {\n scopeType: KnowledgeScopeType;\n scopeId: string;\n about: string \| null;\n description: string \| null;\n links: KnowledgeProfileLink[];\n updatedAt: string \| null;\n updatedBy: string \| null;\n}\ntype ChangeRequestResourceType = \"doc\" \| \"profile\";\ntype ChangeRequestOperation = \"create\" \| \"update\" \| \"delete\";\ntype ChangeRequestStatus = \"open\" \| \"approved\" \| \"rejected\" \| \"withdrawn\" \| \"superseded\";\ntype ChangeRequestActorKind = \"human\" \| \"agent\";\n/* Public projection of a change request (mirrors `PublicChangeRequest` in services/org). /\ninterface KnowledgeChangeRequest {\n changeRequestId: string;\n scopeType: KnowledgeScopeType;\n scopeId: string;\n resourceType: ChangeRequestResourceType;\n operation: ChangeRequestOperation;\n targetPath: string \| null;\n baseVersionId: string \| null;\n proposedContentType: string \| null;\n status: ChangeRequestStatus;\n proposerId: string;\n proposerKind: ChangeRequestActorKind;\n rationale: string;\n reviewerId: string \| null;\n reviewerKind: ChangeRequestActorKind \| null;\n reviewedAt: string \| null;\n reviewNote: string \| null;\n appliedRef: string \| null;\n createdAt: string;\n updatedAt: string;\n}\n/* Per-type proposal payload for `proposeScopeChange`. /\ninterface ProposeScopeChangeInput {\n resourceType: ChangeRequestResourceType;\n operation: ChangeRequestOperation;\n /* Why the change is proposed — shown to the reviewer. /\n rationale: string;\n /* doc: the path the proposal applies to (e.g. designs/data-center.md). /\n targetPath?: string;\n /* doc create/update: the staged body to upload (markdown or other text). /\n content?: string;\n /* doc create/update: content type of the staged body (default text/markdown). /\n contentType?: string;\n /* profile: the proposed value ({ about, description, links }). /\n proposedValue?: unknown;\n}\ninterface KnowledgeDoc {\n filePath: string;\n fileName: string;\n contentType?: string;\n size: number;\n uploadedBy?: string;\n createdAt: string;\n updatedAt: string;\n}\ndeclare class KnowledgeApi extends ApiBase {\n /\n Semantic search across the agent's member scopes. Fan-out is gated\n * server-side by `listScopes` set-inclusion (fail-closed). Pass\n * `scopeType` + `scopeId` to narrow to one scope; a non-member scope\n * yields empty results (never a cross-scope leak).\n /\n knowledgeSearch(query: string, opts?: {\n limit?: number;\n scopeType?: KnowledgeScopeType;\n scopeId?: string;\n }): Promise<KnowledgeSearchResult>;\n /* Enumerate the scopes (org + teams + projects) this agent belongs to. /\n listScopes(): Promise<{\n scopes: KnowledgeScope[];\n }>;\n /* Read a scope's structured knowledge profile (after membership check). /\n getScopeProfile(scopeType: KnowledgeScopeType, scopeId: string): Promise<KnowledgeProfile>;\n /\n Open a change request against a scope's knowledge resource. For a doc\n * create/update, `services/org` returns a presigned staging PUT; this method\n * uploads the proposed `content` to it (echoing the same Content-Type that\n * was signed), mirroring `writeScopeDoc`. The staged body is applied to the\n * canonical doc — attributed to this agent — only when a reviewer approves.\n /\n proposeScopeChange(scopeType: KnowledgeScopeType, scopeId: string, input: ProposeScopeChangeInput): Promise<KnowledgeChangeRequest>;\n /\n List the agent's OWN change requests in a scope (filtered server-side to\n * this agent as proposer). Pass `status` to narrow to open / approved / etc.\n /\n listScopeChangeRequests(scopeType: KnowledgeScopeType, scopeId: string, opts?: {\n status?: ChangeRequestStatus;\n limit?: number;\n cursor?: string;\n }): Promise<{\n changeRequests: KnowledgeChangeRequest[];\n nextCursor: string \| null;\n }>;\n /* List a scope's docs (the org-files corpus; mirrored to shared/<scope>/). /\n listScopeDocs(scopeType: KnowledgeScopeType, scopeId: string, opts?: {\n limit?: number;\n cursor?: string;\n }): Promise<{\n files: KnowledgeDoc[];\n nextCursor: string \| null;\n }>;\n /\n Read the full text of a scope doc. Resolves a presigned download URL\n * from `services/org`, then fetches the bytes directly from S3 (the one\n * legitimate raw fetch in a plugin — same pattern as sync).\n /\n readScopeDoc(scopeType: KnowledgeScopeType, scopeId: string, filePath: string, opts?: {\n maxBytes?: number;\n }): Promise<{\n filePath: string;\n text: string;\n }>;\n /\n Write (create or overwrite) a scope doc. Two-step presigned upload:\n * `services/org` returns a signed URL plus `requiredHeaders` (author /\n * authorKind / message as `x-amz-meta-`) that MUST be sent verbatim on\n the PUT, alongside the same `Content-Type` that was signed. Author and\n * authorKind are server-set from the agent token — never trusted here.\n /\n writeScopeDoc(scopeType: KnowledgeScopeType, scopeId: string, filePath: string, content: string, opts?: {\n contentType?: string;\n message?: string;\n }): Promise<{\n filePath: string;\n }>;\n}\n//# sourceMappingURL=knowledge.d.ts.map\n//#endregion\n//#region src/domains/mobile.d.ts\n/* Response of GET /mobile/numbers for an agent (services/mobile). /\ninterface MobileNumberInfo {\n phoneNumber: string;\n countryCode: string;\n monthlyPrice?: number;\n status: string;\n errorMessage?: string;\n}\n/* One purchasable number from GET /mobile/numbers/search. /\ninterface MobileAvailableNumber {\n number: string;\n friendlyName: string;\n locality: string;\n region: string;\n country: string;\n}\n/* Approved WhatsApp content template from GET /mobile/whatsapp/templates. /\ninterface WhatsAppTemplate {\n contentSid: string;\n name: string;\n language: string;\n body: string;\n variables: Record<string, string>;\n category?: string;\n}\ndeclare class MobileApi extends ApiBase {\n getMobileNumber(): Promise<MobileNumberInfo>;\n searchMobileNumbers(args?: {\n country?: string;\n query?: string;\n }): Promise<{\n numbers: MobileAvailableNumber[];\n monthlyPrice: number;\n }>;\n assignMobileNumber(args: {\n phoneNumber: string;\n countryCode: string;\n }): Promise<{\n phoneNumber: string;\n countryCode: string;\n status: \"pending\";\n }>;\n releaseMobileNumber(): Promise<{\n released: true;\n }>;\n sendSms(args: {\n to: string;\n body: string;\n }): Promise<{\n sent: true;\n sid: string;\n }>;\n startOutboundCall(args: {\n to: string;\n }): Promise<{\n callSid: string;\n status: string;\n }>;\n getWhatsAppSession(to: string): Promise<{\n active: boolean;\n expiresAt?: string;\n }>;\n sendWhatsAppMessage(args: {\n to: string;\n body: string;\n }): Promise<{\n sent: true;\n sid: string;\n }>;\n sendWhatsAppTemplate(args: {\n to: string;\n contentSid: string;\n contentVariables: Record<string, string>;\n bodyPreview?: string;\n }): Promise<{\n sent: true;\n sid: string;\n }>;\n listWhatsAppTemplates(): Promise<{\n templates: WhatsAppTemplate[];\n }>;\n}\n//# sourceMappingURL=mobile.d.ts.map\n//#endregion\n//#region src/domains/remote.d.ts\ninterface RemoteSessionInfo {\n sessionId: string;\n agentId: string;\n surface: \"browser\" \| \"terminal\";\n status: \"agent_driving\" \| \"awaiting_human\" \| \"human_in_control\" \| \"resuming\" \| \"completed\" \| \"expired\" \| \"failed\";\n url?: string;\n instructions?: string;\n requestedAt?: string;\n}\ndeclare class RemoteApi extends ApiBase {\n requestBrowserTakeover(args: {\n instructions: string;\n url?: string;\n conversationId?: string;\n }): Promise<{\n sessionId: string;\n status: string;\n }>;\n getRemoteSession(sessionId: string): Promise<RemoteSessionInfo>;\n completeRemoteSession(sessionId: string): Promise<{\n ok: boolean;\n }>;\n}\n//# sourceMappingURL=remote.d.ts.map\n//#endregion\n//#region src/domains/self.d.ts\n/* Voice settings — core agent config. Mirrors `VoiceConfig` in `@alfe/types`. /\ninterface AgentVoiceConfig {\n /* ElevenLabs voice ID; platform default when unset. /\n voiceId?: string;\n ttsModel?: string;\n enabled?: boolean;\n}\n/\n The agent's own public identity, as returned by `updateSelf`, `generateAvatar`,\n * `presignAvatar`'s finalize (`finalizeAvatar`). This is the public agent\n * projection; only the identity-relevant fields are typed here — the response\n * carries the full public agent record.\n /\ninterface AgentSelf {\n agentId: string;\n tenantId: string;\n name: string;\n avatarUrl?: string;\n voiceConfig?: AgentVoiceConfig;\n status: string;\n}\n/* Result of `presignAvatar` — the agent PUTs bytes to `uploadUrl`, then finalizes with `s3Key`. /\ninterface AgentAvatarPresign {\n /* Presigned PUT URL to upload the image bytes to. /\n uploadUrl: string;\n /* Object key — echoed back to `finalizeAvatar`. /\n s3Key: string;\n /* Stable public URL the avatar will be served from once finalized. /\n publicUrl: string;\n /* ISO expiry of the presigned PUT URL. /\n expiresAt: string;\n}\n/* A voice in the platform catalogue (ElevenLabs), from `listVoices`. /\ninterface AgentVoice {\n id: string;\n name: string;\n previewUrl: string;\n description: string;\n labels: Record<string, string>;\n category: string;\n}\ndeclare class SelfApi extends ApiBase {\n /* Update the agent's own name and/or voice config. Returns the updated agent. /\n updateSelf(update: {\n name?: string;\n voiceConfig?: AgentVoiceConfig;\n }): Promise<AgentSelf>;\n /\n Generate the agent's own avatar from a text prompt. The image is generated,\n * stored, and set on the agent server-side; returns the updated agent.\n \n ASYNC (same reason as `generateImage`): avatar gen runs `gpt-image-1`\n * (30–60s) which exceeds the API Gateway 30s ceiling, so this enqueues a job\n * (`POST /agent/avatar/generate` → `jobId`) then polls (`GET /agent/avatar/{jobId}`)\n * until the avatar is set. Signature unchanged — the plugin is unaffected.\n /\n generateAvatar(args: {\n prompt: string;\n }): Promise<AgentSelf>;\n /\n Get a presigned PUT URL to upload a new avatar image. Upload the bytes to\n * `uploadUrl`, then call `finalizeAvatar(s3Key)` to set it on the agent.\n /\n presignAvatar(args: {\n mimeType: string;\n size: number;\n }): Promise<AgentAvatarPresign>;\n /\n Finalize an avatar upload — validates ownership + size, then sets the\n * agent's `avatarUrl` server-side. Returns the updated agent.\n /\n finalizeAvatar(s3Key: string): Promise<AgentSelf>;\n /* List the platform voice catalogue (ElevenLabs) so the agent can pick its own voice. /\n listVoices(): Promise<{\n voices: AgentVoice[];\n }>;\n}\n//# sourceMappingURL=self.d.ts.map\n//#endregion\n//#region src/domains/voice.d.ts\n/* The ElevenLabs models with a pricing row — the TTS endpoint rejects any other value. /\ntype VoiceTtsModel = \"eleven_turbo_v2_5\" \| \"eleven_multilingual_v2\";\ninterface VoiceTtsArgs {\n /* Text to synthesize (1–5000 chars — the endpoint enforces this). /\n text: string;\n /* ElevenLabs voice id; platform default when unset. /\n voiceId?: string;\n /* TTS model; `eleven_turbo_v2_5` (lower latency) when unset. /\n model?: VoiceTtsModel;\n}\n/* Raw synthesized audio plus its PCM framing (from the response headers). /\ninterface VoiceTtsResult {\n /* Raw little-endian PCM samples — no container. Wrap in WAV to make a playable file. /\n audio: Buffer;\n /* Samples per second (e.g. 24000). /\n sampleRate: number;\n /* Channel count (mono = 1). /\n channels: number;\n /* Bits per sample (e.g. 16). /\n bitDepth: number;\n}\ninterface VoiceSttArgs {\n /* Raw linear16 (16-bit little-endian) mono PCM samples — no WAV/container header. /\n audio: Uint8Array;\n /* Sample rate of `audio` in Hz (8000–48000). /\n sampleRate: number;\n}\ninterface VoiceSttResult {\n text: string;\n /* Deepgram confidence in (0,1]. /\n confidence: number;\n}\ndeclare class VoiceApi extends ApiBase {\n /\n Text-to-speech. Returns raw PCM audio bytes plus their framing — the\n * voice service defaults to 24 kHz / mono / 16-bit. Wrap in a WAV container\n * to produce a playable file. Metered per character against the tenant\n * credit pool server-side; TTS completes regardless of metering outcome.\n /\n tts(args: VoiceTtsArgs): Promise<VoiceTtsResult>;\n /\n Speech-to-text. Accepts raw linear16 (16-bit LE) mono PCM — NOT a WAV or\n * other container (the endpoint transcribes with a fixed linear16 encoding,\n * so a container header would be transcribed as noise). Strip any WAV header\n * and pass `sampleRate` from it before calling. Metered by transcribed\n * duration against the tenant credit pool server-side.\n /\n stt(args: VoiceSttArgs): Promise<VoiceSttResult>;\n}\n//# sourceMappingURL=voice.d.ts.map\n//#endregion\n//#region src/domains/search.d.ts\n/\n The broad-news providers behind the metered `services/news` Lambda. The\n * server validates this with a zod enum; a value outside the union is an\n * unpriceable product, so keep the literal union in lockstep with the service.\n /\ntype NewsProvider = \"apitube\" \| \"newsdata\";\n/* One normalized article. `sentiment` is provider-shaped (APITube supplies it). /\ninterface NewsArticle {\n title: string;\n url: string;\n source: string;\n publishedAt: string;\n snippet: string;\n sentiment?: unknown;\n}\n/* Provider-agnostic result — the server normalizes every adapter to this. /\ninterface NewsResult {\n articles: NewsArticle[];\n provider: string;\n}\ndeclare class SearchApi extends ApiBase {\n searchWeb(params: {\n query: string;\n count?: number;\n offset?: number;\n country?: string;\n freshness?: string;\n }, options?: {\n signal?: AbortSignal;\n }): Promise<unknown>;\n searchImages(params: {\n query: string;\n count?: number;\n }, options?: {\n signal?: AbortSignal;\n }): Promise<unknown>;\n searchNews(params: {\n query: string;\n count?: number;\n offset?: number;\n freshness?: string;\n }, options?: {\n signal?: AbortSignal;\n }): Promise<unknown>;\n /* Search news across the selected provider's corpus. → POST /agent/news/search /\n newsSearch(params: {\n query: string;\n provider?: NewsProvider;\n source?: string;\n from?: string;\n to?: string;\n language?: string;\n category?: string;\n limit?: number;\n }): Promise<NewsResult>;\n /* Top headlines for the selected provider. → POST /agent/news/headlines /\n newsHeadlines(params?: {\n provider?: NewsProvider;\n category?: string;\n source?: string;\n language?: string;\n limit?: number;\n }): Promise<NewsResult>;\n}\n//# sourceMappingURL=search.d.ts.map\n//#endregion\n//#region src/domains/webhooks.d.ts\ninterface AgentWebhook {\n webhookId: string;\n tenantId: string;\n agentId: string;\n name: string;\n provider: string;\n active: boolean;\n createdBy: string;\n createdAt: string;\n updatedAt: string;\n}\ninterface CreatedAgentWebhook extends AgentWebhook {\n url: string;\n signingSecret: string;\n}\ninterface AgentWebhookDelivery {\n deliveryId: string;\n webhookId: string;\n status: string;\n attempts: number;\n createdAt: string;\n deliveredAt?: string;\n}\ndeclare class WebhooksApi extends ApiBase {\n createWebhook(args: {\n name: string;\n provider?: \"generic\" \| \"github\" \| \"stripe\" \| \"slack\";\n }): Promise<CreatedAgentWebhook>;\n listWebhooks(): Promise<AgentWebhook[]>;\n deleteWebhook(webhookId: string): Promise<{\n webhookId: string;\n active: false;\n }>;\n rotateWebhookSecret(webhookId: string): Promise<{\n webhookId: string;\n signingSecret: string;\n }>;\n listWebhookDeliveries(webhookId: string): Promise<AgentWebhookDelivery[]>;\n}\n//# sourceMappingURL=webhooks.d.ts.map\n//#endregion\n//#region src/domains/chat.d.ts\ndeclare class ChatApi extends ApiBase {\n presignAttachments(files: {\n filename: string;\n mimeType: string;\n size: number;\n }[]): Promise<{\n attachments: {\n id: string;\n uploadUrl: string;\n downloadUrl: string;\n s3Key: string;\n expiresAt: string;\n }[];\n }>;\n recordActivity(data: {\n userId?: string;\n channel: string;\n role: \"user\" \| \"assistant\";\n }): Promise<{\n recorded: boolean;\n }>;\n}\n//# sourceMappingURL=chat.d.ts.map\n//#endregion\n//#region src/domains/connect-credentials.d.ts\ndeclare class ConnectCredentialsApi extends ApiBase {\n /\n Returns every connected Google account for the agent. Multi-account by\n * design — the openclaw-google plugin requires the LLM to pass `email`\n * explicitly to `google_run_command` so an account is always selected\n * deliberately.\n \n 2026-05-14 (connections-redesign PR 1): the legacy flat shape (`email`,\n * `refreshToken`, `accessToken`, etc., populated from the default account)\n * is gone. Iterate over `accounts`.\n /\n getGoogleCredentials(): Promise<{\n accounts: {\n email: string;\n refreshToken: string;\n clientId: string;\n clientSecret: string;\n displayName?: string;\n connectedAt?: string;\n }[];\n }>;\n disconnectGoogleAccount(email: string): Promise<{\n accounts: {\n email: string;\n displayName?: string;\n connectedAt?: string;\n }[];\n }>;\n getGoogleChatCredentials(): Promise<{\n email: string;\n refreshToken: string;\n clientId: string;\n clientSecret: string;\n displayName?: string;\n }>;\n /\n Fetch decrypted credentials for ONE specific connection by its\n * stable connectionId (connection-scoped, vs the provider-scoped\n * `get<Provider>Credentials` helpers). Used by the daemon to resolve\n * a Custom Connection-driven integration's credentials from the\n * exact connection it was installed from — every custom connection\n * shares the `custom` provider id, so provider-scoping is ambiguous.\n \n For custom connections `accessToken` is the JSON-encoded secret\n * bundle (the daemon un-bundles it); non-secret fields are on\n * `providerMetadata`. The endpoint enforces that the connection is in\n * the calling agent's effective scope (403 otherwise).\n /\n getConnectionCredentials(connectionId: string): Promise<{\n provider: string;\n connectionId: string;\n accountIdentifier?: string;\n accessToken?: string;\n providerMetadata?: Record<string, unknown>;\n [key: string]: unknown;\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getGithubAccounts()` for the multi-\n * account shape required by Pattern A — explicit selector args on every\n * tool. Retained because the `@alfe.ai/github-mcp` proxy is the\n * only consumer that knows about Pattern A; legacy env-interpolation\n * callers will keep hitting `/credentials` until they move to the proxy.\n /\n getGithubCredentials(): Promise<{\n login: string;\n accessToken: string;\n }>;\n /\n Pattern A: multi-account credential fetch for GitHub.\n \n Returns every agent-scoped GitHub connection. The caller is expected\n * to require a `login` selector on every credential-touching tool and\n * look up the matching account at dispatch time.\n \n GitHub OAuth tokens have no expiry (`tokenLifecycle: \"no_expiry\"`),\n * so there is intentionally no `refreshGithubAccountToken` method — if\n * a token is revoked the user must re-run the OAuth flow.\n \n Returned `accounts[i].login` is the GitHub username — the stable\n * cross-session identifier the LLM should pass.\n /\n getGithubAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n login: string;\n scopes: string;\n }[];\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getXeroAccounts()` for the multi-\n * account shape required by Pattern A — explicit selector args on every\n * tool. This method will be removed once all consumers migrate.\n /\n getXeroCredentials(): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n xeroTenantId: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Xero. Returns every\n * agent-scoped Xero connection. The caller is expected to require a\n * selector arg (e.g. `xeroTenantId`) on every credential-touching tool\n * and look up the matching account by that selector at dispatch time.\n \n `xeroTenantId` is the model-facing organisation selector. The separate\n * `accountIdentifier` is the Connect persistence key used for refresh and\n * may be an email; never substitute one for the other.\n /\n getXeroAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n xeroTenantId: string;\n }[];\n }>;\n refreshXeroToken(): Promise<{\n accessToken: string;\n expiresAt: string;\n }>;\n /\n Refresh a specific Xero Connection by its exact `accountIdentifier` from\n * `getXeroAccounts()`. Do not substitute `xeroTenantId`: current Xero OAuth\n * rows may use the account email as their persistence key even when a sole\n * organisation tenant ID is available in provider metadata.\n /\n refreshXeroAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getNotionAccounts()` for the multi-\n * account shape required by Pattern A.\n /\n getNotionCredentials(): Promise<{\n accessToken: string;\n workspaceId: string;\n workspaceName: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Notion. Returns every\n * agent-scoped Notion connection. The caller is expected to require a\n * selector arg (e.g. `workspaceId`) on every credential-touching tool.\n \n Returned `accounts[i].accountIdentifier` is the Notion workspaceId.\n /\n getNotionAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n workspaceId: string;\n workspaceName: string;\n }[];\n }>;\n /\n @deprecated Returns a single primary Atlassian Connection's credentials\n * (one OAuth user, one cloudId) — the legacy \"pick-the-default-connection\"\n * shape. Atlassian is multi-site by nature (each OAuth user may have\n * access to multiple Cloud sites), so Pattern A plugins MUST use\n * `getAtlassianAccounts()` to discover the full set and dispatch via\n * the `cloudId` selector arg.\n /\n getAtlassianCredentials(): Promise<{\n accessToken: string;\n refreshToken: string;\n accessTokenExpiresAt: string;\n cloudId: string;\n siteName: string;\n siteUrl: string;\n email: string;\n enabledProducts: string[];\n clientId: string;\n clientSecret: string;\n }>;\n refreshAtlassianToken(): Promise<{\n accessToken: string;\n expiresAt: string;\n }>;\n /\n Pattern A: multi-account / multi-site credential fetch for Atlassian.\n \n Returns every agent-scoped Atlassian Connection. Each Connection is\n * one OAuth user with a single access token and N accessible Cloud\n * sites (`availableSites`). The caller is expected to:\n \n 1. Flatten (connection × cloudId) into one MCP child per site.\n * 2. Require a `cloudId` selector on every credential-touching tool.\n * 3. Use the access token bound to the Connection that owns the\n * requested `cloudId` (Atlassian shares one access token across\n * all sites accessible to the OAuth user).\n \n Per-account token refresh uses `refreshAtlassianAccountToken(email)`\n * — refreshing one Connection rotates its single access token, which\n * then applies to every cloudId for that Connection.\n \n Returned `accounts[i].accountIdentifier` is the OAuth user's email\n * — the stable cross-session identifier for refresh purposes. The LLM\n * never sees this directly: it picks a site via the `cloudId` arg\n * instead.\n /\n getAtlassianAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n clientId: string;\n clientSecret: string;\n cloudId: string;\n siteName: string;\n siteUrl: string;\n availableSites: {\n id: string;\n url: string;\n name: string;\n scopes?: string[];\n avatarUrl?: string;\n }[];\n }[];\n }>;\n /\n Pattern A: refresh a specific Atlassian Connection by `accountIdentifier`\n * (the OAuth user's email).\n \n Atlassian rotates refresh tokens (`rotatesRefreshToken: true`); the\n * server-side per-account refresh endpoint handles rotation and\n * persistence. Refreshing one Connection updates its single access\n * token, which applies to every accessible Cloud site (cloudId) for\n * that OAuth user.\n \n Returns the new access token + expiry. The proxy is responsible for\n * fanning the new token out to every child server it spawned for\n * cloudIds owned by this Connection.\n /\n refreshAtlassianAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getMYOBAccounts()` for the multi-\n * account shape required by Pattern A.\n /\n getMYOBCredentials(): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n myobBusinessId: string;\n clientId: string;\n }>;\n /\n Pattern A: multi-account credential fetch for MYOB. Returns every\n * agent-scoped MYOB connection. The caller is expected to require a\n * selector arg (e.g. `myobBusinessId` / `accountIdentifier`) on every\n * credential-touching tool.\n \n Returned `accounts[i].accountIdentifier` is the MYOB businessId.\n /\n getMYOBAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n myobBusinessId: string;\n clientId: string;\n }[];\n }>;\n refreshMYOBToken(): Promise<{\n accessToken: string;\n expiresAt: string;\n }>;\n /\n Pattern A: refresh one MYOB Connection by its stable\n * `accountIdentifier` (the MYOB business id returned by\n * `getMYOBAccounts()`).\n \n MYOB refresh tokens belong to individual Connection rows. A\n * multi-business client must use this method instead of refreshing the\n * primary Connection and copying that access token into every cached\n * business client.\n /\n refreshMYOBAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n @deprecated Returns a single primary credential blob. Use\n * `getSalesforceAccounts()` for the multi-account shape required by\n * Pattern A.\n /\n getSalesforceCredentials(): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n instanceUrl: string;\n orgId: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Salesforce. Returns every\n * agent-scoped Salesforce connection. One OAuth grant maps to one org, so\n * `accounts[i].accountIdentifier` (and `orgId`) is the Salesforce org id —\n * the selector every credential-touching tool requires.\n /\n getSalesforceAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n instanceUrl: string;\n orgId: string;\n }[];\n }>;\n /\n Refresh the access token for a specific Salesforce org. Salesforce\n * tokens aren't interchangeable across orgs, so the connection is targeted\n * by `accountIdentifier` (the org id) — mirrors `refreshXeroAccountToken`.\n /\n refreshSalesforceAccountToken(orgId: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Microsoft 365.\n \n Returns every agent-scoped Microsoft connection. The caller is expected\n * to require an `email` selector on every credential-touching tool and\n * look up the matching account at dispatch time.\n \n Returned `accounts[i].accountIdentifier` is the user's primary email\n * (or the tid claim as fallback) — the stable cross-session identifier\n * the LLM should pass.\n \n Per-account token refresh is exposed via `refreshMicrosoftAccountToken`,\n * NOT `refreshXeroAccountToken` — Microsoft refresh tokens are not\n * interchangeable across (tenant, user) pairs.\n /\n getMicrosoftAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n email: string;\n microsoftTenantId: string;\n workspaceDomain: string;\n }[];\n }>;\n /\n Pattern A: refresh a specific Microsoft 365 connection by its\n * `accountIdentifier`. For Microsoft, `accountIdentifier` is the user's\n * email when the Graph profile fetch succeeded at connect time, and the\n * Azure tenant id (`tid` claim) as fallback. Callers should pass the\n * value returned by `getMicrosoftAccounts()` rather than synthesising\n * an email locally.\n \n Microsoft refresh tokens are bound to a specific (tenant, user) pair —\n * they are NOT interchangeable across accounts, so per-account refresh\n * is mandatory. The generic /accounts/{accountIdentifier}/refresh\n * endpoint walks the agent's full visible scope chain to find a matching\n * connection (works for inherited team/project Microsoft connections).\n /\n refreshMicrosoftAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n Disconnects one connected Microsoft 365 account for the agent, by its\n * `accountIdentifier`. Hits the generic per-account disconnect route\n * (`DELETE /agent/connect/microsoft/accounts/{accountIdentifier}`), which\n * resolves across the agent's full effective scope chain and deletes the\n * matching Connection row. Returns the remaining accounts.\n \n IMPORTANT: pass the `accountIdentifier` from `getMicrosoftAccounts()`, NOT\n * a synthesised email. For Microsoft, `accountIdentifier` is the user's email\n * only when the Graph profile fetch succeeded at connect time; it falls back\n * to the Azure tenant id (`tid` claim) otherwise. The backend matches on\n * `accountIdentifier` exactly, so passing an email would 404 on those\n * fallback-identifier accounts. (This is why the param is not named `email`,\n * unlike `disconnectGoogleAccount` where the identifier is always the email.)\n /\n disconnectMicrosoftAccount(accountIdentifier: string): Promise<{\n accounts: {\n accountIdentifier: string;\n displayName?: string;\n connectedAt?: string;\n }[];\n }>;\n /\n Resolve the primary cTrader Connection's credentials for the calling\n * agent. Unlike most providers, the cTrader Open API needs app-level auth\n * (`clientId` + `clientSecret`) AND account auth (`accessToken` +\n * `accountId`) on the socket, so `@alfe.ai/ctrader-mcp` self-fetches the\n * full set here at startup (the atlassian/google pattern). `clientId` /\n * `clientSecret` are the SST-sourced global app credentials the connect\n * endpoint injects — they are never persisted on the connection. `host` is\n * the resolved TLS endpoint (`live.ctraderapi.com` / `demo.ctraderapi.com`)\n * derived from the selected account's live/demo flag.\n /\n getCTraderCredentials(): Promise<{\n accessToken: string;\n refreshToken: string;\n accountId: string;\n host: string;\n clientId: string;\n clientSecret: string;\n }>;\n /\n Pattern A: multi-account credential fetch for cTrader.\n \n Unlike atlassian/salesforce (one Connection row per account/site), a\n * cTrader is MULTI-grant per agent: an agent may connect several distinct\n * cTrader logins, each its own Connection row keyed on `accountIdentifier =\n * ctid:<userId>` (Phase 1). This aggregates the trading accounts across\n * ALL of those Connection rows — each row contributes its `availableAccounts`\n * flattened, and every account carries ITS OWN grant's `accessToken` (the\n * token that authenticates that account against the cTrader Open API). One\n * OAuth grant still covers all accounts under that single login on one shared\n * token; only the `ctidTraderAccountId` and the protobuf socket `host` (live\n * vs demo) differ within a grant. Across grants the tokens differ, so the\n * token is now PER-ACCOUNT rather than hoisted to the top level.\n \n `host` per account is derived from the account's `isLive` flag\n * (`live.ctraderapi.com` / `demo.ctraderapi.com`) — the same mapping the\n * connect provider applies server-side when an account is auto-selected.\n \n `clientId` / `clientSecret` are the SST-sourced GLOBAL app credentials the\n * connect endpoint injects — identical across every Connection row (one\n * cTrader app), never persisted on a connection. We take them from the first\n * row that carries them.\n \n Accounts are deduped on `ctidTraderAccountId` first-wins: Spotware ids are\n * globally unique across logins, so a duplicate can only appear if the same\n * account somehow surfaced under two grants — first-wins keeps it\n * deterministic.\n \n `accounts` may be empty (no cTrader Connection at all), in which case we\n * return empty creds rather than throwing.\n /\n getCTraderAccounts(): Promise<{\n accounts: {\n ctidTraderAccountId: string;\n host: string;\n isLive: boolean;\n brokerName?: string;\n accountNumber?: string;\n accessToken: string;\n }[];\n clientId: string;\n clientSecret: string;\n }>;\n /\n @deprecated Returns a single primary credential blob. Use\n * `getShopifyAccounts()` for the multi-account shape required by Pattern A\n * (`@alfe.ai/shopify-mcp` keys per-shop on the myshopify domain).\n /\n getShopifyCredentials(): Promise<{\n accessToken: string;\n shopDomain: string;\n shopGid: string;\n shopName: string;\n apiVersion: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Shopify. Returns every\n * agent-scoped Shopify Connection. One OAuth grant maps to one store, so the\n * stable per-call selector is the store's myshopify domain (`shopDomain`),\n * NOT `accountIdentifier` — the connect provider keys `accountIdentifier` on\n * the immutable shop GID (falling back to the domain), so `shopDomain` is the\n * value the LLM passes and the plugin routes on.\n \n Each entry is shaped by the connect provider's `buildCredentialsResponse`:\n * `{ accessToken, shopDomain, shopGid, shopName, apiVersion }` — offline\n * Shopify tokens never expire, so there is NO token / expiry field and no\n * refresh method (unlike Salesforce). The GraphQL Admin API authenticates\n * purely on `X-Shopify-Access-Token`; no client credentials are on the wire.\n /\n getShopifyAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n shopDomain: string;\n shopGid: string;\n shopName: string;\n apiVersion: string;\n }[];\n }>;\n /\n Pattern A: provider-parameterized multi-account credential fetch for the\n * social connectors (Bluesky, and the approval-gated backlog: X, Meta,\n * Threads, LinkedIn, Pinterest, TikTok, Reddit, YouTube).\n \n Unlike the bespoke `getGithubAccounts()` / `getXeroAccounts()` shapes,\n * this returns a UNIFORM normalized account shape so `@alfe.ai/social-mcp`'s\n * shared driver can require a single `account` selector on every\n * credential-touching tool regardless of platform. The backend\n * `api-agents/{provider}/accounts` route is already provider-generic; this\n * is the client-side normalization the plan (`do-we-need-any-moonlit-toucan`\n * Phase 0, step 5) calls for.\n \n `accountIdentifier` is the stable per-account selector the LLM should\n * pass back (for Bluesky: the account DID). `accessToken` carries whatever\n * the provider's `buildCredentialsResponse` bundles (for Bluesky: the JSON\n * session bundle — the driver parses the `accessJwt` out of it, or reads the\n * top-level `accessJwt` from `providerMetadata`-adjacent fields). Everything\n * else the driver needs for routing (handle, pdsHost, did, …) is on\n * `providerMetadata`.\n \n Token refresh is delegated to connect (never done in-plugin) via the\n * per-account route `POST /agent/connect/{provider}/accounts/{accountIdentifier}/refresh`\n * — call `refreshSocialAccount(provider, accountIdentifier)`. (The non-account\n * `POST /agent/connect/{provider}/refresh` route refreshes the provider's\n * PRIMARY connection, which is wrong under multi-account Pattern A.)\n /\n getSocialAccounts(provider: string): Promise<{\n provider: string;\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n accessToken: string;\n providerMetadata: Record<string, unknown>;\n connectedAt: string;\n }[];\n }>;\n /\n Pattern A: refresh a specific social Connection by its stable\n * `accountIdentifier` (for Bluesky: the account DID) via the\n * provider-generic per-account refresh route. The counterpart to\n * `getSocialAccounts(provider)`; `@alfe.ai/social-mcp` calls this on a\n * 401/ExpiredToken from the platform PDS/API, then re-fetches accounts to\n * pick up the rotated bundle.\n \n Refresh itself is ALWAYS delegated to connect — the plugin never calls\n * the platform's own refresh XRPC (e.g. `com.atproto.server.refreshSession`)\n * because connect owns the encrypted refresh token + rotation persistence\n * (Bluesky rotates the refreshJwt; a missed rotation kills the connection\n * after one refresh). The returned `accessToken` is whatever the provider's\n * `refreshToken` hook re-bundled (for Bluesky: the JSON session bundle with\n * the fresh `accessJwt`) — callers typically ignore it and re-fetch via\n * `getSocialAccounts` for a consistent shape.\n /\n refreshSocialAccount(provider: string, accountIdentifier: string): Promise<{\n accountIdentifier: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n}\n//# sourceMappingURL=connect-credentials.d.ts.map\n//#endregion\n//#region src/domains/database.d.ts\ndeclare class DatabaseApi extends ApiBase {\n registerDatabaseCredentials(): Promise<{\n connectionString: string;\n username: string;\n password: string;\n databases: string[];\n }>;\n reportDatabaseAudit(entry: {\n database: string;\n collection: string;\n operation: string;\n summary?: string;\n }): Promise<void>;\n}\n//# sourceMappingURL=database.d.ts.map\n//#endregion\n//#region src/domains/identity.d.ts\ndeclare class IdentityApi extends ApiBase {\n /\n Returns the calling agent's own identity context — `{ agentId, tenantId }`\n * decoded server-side from the agent API token. Used by the\n * `@alfe.ai/openclaw-identity` plugin to bootstrap context when the\n * OpenClaw daemon doesn't plumb `ctx.agentId` through to plugin hooks.\n * Plugins should cache this for the daemon's lifetime (single-agent-per-\n * process invariant). One HTTP round-trip per process activate; not for\n * per-call use.\n /\n whoami(): Promise<{\n agentId: string;\n tenantId: string;\n }>;\n resolveIdentity(args: {\n provider: string;\n platformId: string;\n kind?: \"user\" \| \"agent\" \| \"service\" \| \"bot\" \| \"workspace\";\n displayName?: string;\n }): Promise<{\n identityId: string \| null;\n status: string;\n created?: boolean;\n reason?: string;\n /\n Flattened auriclabs permission strings for the resolved identity\n * (scope-prefixed where applicable). Empty array on miss / org service\n * outage — the runtime gate fails closed in that case.\n /\n permissions: string[];\n }>;\n searchIdentities(args?: {\n q?: string;\n status?: string;\n limit?: number;\n }): Promise<{\n identities: unknown[];\n }>;\n getIdentityContext(identityId: string): Promise<{\n context: unknown;\n }>;\n mergeIdentities(survivorId: string, args: {\n mergedId: string;\n }): Promise<{\n ok: boolean;\n error?: string;\n }>;\n unmergeIdentity(identityId: string): Promise<{\n ok: boolean;\n error?: string;\n }>;\n addIdentityNote(identityId: string, args: {\n content: string;\n category?: string;\n }): Promise<{\n noteId: string \| null;\n }>;\n tagIdentity(identityId: string, args: {\n tag: string;\n action: \"add\" \| \"remove\";\n }): Promise<{\n ok: boolean;\n }>;\n getIdentityChangelog(identityId: string, args?: {\n limit?: number;\n cursor?: string;\n }): Promise<{\n entries: unknown[];\n cursor: string \| null;\n }>;\n rollbackIdentity(identityId: string, args: {\n targetVersion: number;\n }): Promise<{\n ok: boolean;\n entry?: unknown;\n }>;\n requestIdentityVerification(args: {\n claimedIdentityId: string;\n requestingIdentityId: string;\n requestingProvider: string;\n requestingPlatformId: string;\n preferredChannel?: \"mobile\" \| \"email\";\n /\n Phase 2: agent-supplied contact endpoint. When provided, the top-level\n * `preferredChannel` is ignored — the contact's channel wins.\n /\n contact?: {\n channel: \"email\" \| \"mobile\";\n value: string;\n };\n }): Promise<{\n verificationId: string;\n channel: string;\n deliveredTo: string;\n expiresAt: string;\n availableChannels: {\n channel: string;\n deliveredTo: string;\n }[];\n } \| {\n error: string;\n }>;\n confirmIdentityVerification(args: {\n claimedIdentityId: string;\n verificationId: string;\n phrase: string;\n }): Promise<{\n verified: boolean;\n identityId?: string;\n /* Phase 2: how the confirm resolved — Scenario A vs B. /\n action?: \"merged\" \| \"contact_verified\" \| \"already_confirmed\";\n error?: string;\n }>;\n /\n Update display-shape fields on an Identity. Body excludes `email` /\n * `phone` / `title` / `company` / `metadata` per Section D4 — contacts go\n * via the verify flow, title/company live on OrgMembership, metadata is\n * not agent-writable.\n /\n updateIdentity(identityId: string, args: {\n name?: string;\n avatarUrl?: string;\n timezone?: string;\n locale?: string;\n }): Promise<{\n ok: boolean;\n }>;\n /\n Phase 2 (Section H): server-side verification of a Google Chat sender via\n * the agent's existing Google OAuth credentials. Returns the resolved\n * identity (created or matched via Scenario-B email enrichment).\n /\n resolveGoogleChatSender(args: {\n senderUserId: string;\n spaceId?: string;\n }): Promise<{\n identityId: string \| null;\n status: string;\n }>;\n}\n//# sourceMappingURL=identity.d.ts.map\n//#endregion\n//#region src/domains/images.d.ts\ndeclare class ImagesApi extends ApiBase {\n /\n Generate an image from a text prompt and get back a STABLE, public URL\n * (served from the agent-assets CDN — it does not expire). Embed the returned\n * `imageUrl` in a reply as markdown to show it to the user.\n \n ASYNC: `gpt-image-1` routinely runs 30–60s, which exceeds the API Gateway\n * 30s ceiling, so this enqueues a job (`POST /agent/images/generate` →\n * `jobId`) then polls (`GET /agent/images/{jobId}`) until it completes. The\n * worker's real failure message (e.g. an unsupported `size`) surfaces via the\n * job's `error` field.\n /\n generateImage(args: {\n prompt: string;\n model?: string;\n size?: string;\n quality?: string;\n }): Promise<{\n imageUrl: string;\n model: string;\n }>;\n}\n//# sourceMappingURL=images.d.ts.map\n//#endregion\n//#region src/domains/integrations.d.ts\ndeclare class IntegrationsApi extends ApiBase {\n listIntegrations(): Promise<IntegrationInstall$1[]>;\n getIntegrationConfig(integrationId: string): Promise<IntegrationConfigResult$1>;\n updateIntegrationConfig(integrationId: string, config: Record<string, unknown>): Promise<void>;\n installIntegration(integrationId: string, options?: {\n version?: string;\n config?: Record<string, unknown>;\n }): Promise<IntegrationInstall$1>;\n removeIntegration(integrationId: string): Promise<IntegrationInstall$1>;\n getOAuthUrl(provider: string, scopes?: string[]): Promise<{\n url: string;\n provider: string;\n expiresIn: number;\n }>;\n getOAuthStatus(provider: string): Promise<{\n provider: string;\n connected: boolean;\n config?: Record<string, string>;\n }>;\n getRegistry(): Promise<{\n integrations: RegistryEntry$1[];\n }>;\n}\n//# sourceMappingURL=integrations.d.ts.map\n//#endregion\n//#region src/domains/memory.d.ts\ndeclare class MemoryApi extends ApiBase {\n memorySearch(query: string, opts?: {\n limit?: number;\n topic?: string;\n subtopic?: string;\n tag?: string;\n includeKnowledge?: boolean;\n }): Promise<{\n facts: {\n subject: string;\n predicate: string;\n object: string;\n since: string;\n confidence: number;\n }[];\n memories: {\n id: string;\n text: string;\n topic: string;\n subtopic: string;\n tag: string;\n importance: number;\n timestamp: number;\n score: number;\n }[];\n }>;\n memoryStore(text: string, opts?: {\n topic?: string;\n subtopic?: string;\n tag?: string;\n importance?: number;\n }): Promise<{\n memoryId: string;\n }>;\n memoryIngest(sessionKey: string, messages: {\n role: string;\n content: string;\n index: number;\n timestamp?: string;\n }[], metadata?: {\n channelId?: string;\n userId?: string;\n userName?: string;\n }, ingestEpoch?: number): Promise<{\n queued: boolean;\n messageCount: number;\n }>;\n memoryLoadContext(tier?: number, topicHint?: string): Promise<{\n tier: number;\n facts: {\n subject: string;\n predicate: string;\n object: string;\n since: string;\n }[];\n memories: {\n text: string;\n topic: string;\n subtopic: string;\n score: number;\n }[];\n tokenEstimate: number;\n formatted: string;\n }>;\n memoryLookupEntity(subject: string): Promise<{\n subject: string;\n triples: {\n tripleId: string;\n predicate: string;\n object: string;\n validFrom: string;\n validTo?: string;\n confidence: number;\n }[];\n }>;\n memoryNavigate(): Promise<{\n topics: {\n name: string;\n tripleCount: number;\n subtopics: string[];\n }[];\n cursor: string \| null;\n }>;\n memoryDelete(memoryId: string): Promise<{\n deleted: boolean;\n }>;\n memoryStats(): Promise<{\n vectorCount: number;\n tripleCount: number;\n storageEstimateBytes: number;\n lastIngestionAt?: string;\n }>;\n memoryLearn(args: {\n text: string;\n source?: string;\n sourceType?: \"file\" \| \"url\" \| \"inline\";\n metadata?: {\n sessionId?: string;\n channelId?: string;\n userName?: string;\n };\n }): Promise<{\n memoriesStored: number;\n triplesStored: number;\n chunks: number;\n source?: string;\n }>;\n memoryBootstrapStatus(): Promise<{\n synced: boolean;\n syncedAt?: string;\n sessionsBackfillSynced?: boolean;\n sessionsBackfillSyncedAt?: string;\n }>;\n memoryBootstrapStatusMark(scope?: \"files\" \| \"sessions\"): Promise<{\n synced: true;\n syncedAt: string;\n }>;\n}\n//# sourceMappingURL=memory.d.ts.map\n//#endregion\n//#region src/domains/secrets.d.ts\ndeclare class SecretsApi extends ApiBase {\n /\n Mint a fresh AES-256 data key for a specific (secret, field) pair. The\n * encryption context is rebuilt server-side from `auth.tenantId` + the body\n * fields including `fieldKey`; the agent cannot forge context for a scope\n * or field it doesn't own. Legacy single-envelope secrets are migrated to\n * `field#value` rows by the data migration, so call with `fieldKey: \"value\"`\n * to reach them.\n /\n generateSecretDataKey(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n }): Promise<GeneratedDataKey$1>;\n /\n Unwrap a wrapped data key so the agent can decrypt the envelope locally.\n * `fieldKey` MUST match the value supplied when the data key was generated\n * (it's bound into KMS encryption context); mismatch fails with\n * `InvalidCiphertextException`.\n /\n decryptSecretDataKey(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n dataKeyCiphertext: string;\n }): Promise<{\n plaintextKey: string;\n }>;\n /\n Create a new secret with one or more fields. Encrypted fields must arrive\n * pre-sealed (the agent has already obtained per-field data keys via\n * `generateSecretDataKey({ ..., fieldKey })` and AES-encrypted locally).\n * Plaintext fields ship the value inline.\n /\n createSecret(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n secretName: string;\n category?: SecretCategory$1;\n description?: string;\n tags?: string[];\n fields: {\n key: string;\n format?: FieldFormat$1;\n sensitivity: FieldSensitivity$1;\n value?: string;\n envelope?: EncryptedEnvelopeV1$1;\n }[];\n reason?: string;\n }): Promise<SecretAggregate$1>;\n /* Fetch the secret aggregate plus per-field encrypted envelopes. /\n getSecret(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n }): Promise<{\n aggregate: SecretAggregate$1;\n envelopes: FieldEnvelope$1[];\n }>;\n /* Fetch one field. Plaintext: value inline. Encrypted: envelope. /\n getSecretField(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n }): Promise<{\n key: string;\n sensitivity: FieldSensitivity$1;\n format?: FieldFormat$1;\n value?: string;\n envelope?: EncryptedEnvelopeV1$1;\n rotatedAt?: string;\n createdAt: string;\n updatedAt: string;\n }>;\n /* Add OR rotate one field. /\n setSecretField(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n sensitivity: FieldSensitivity$1;\n format?: FieldFormat$1;\n value?: string;\n envelope?: EncryptedEnvelopeV1$1;\n reason?: string;\n }): Promise<{\n fieldKey: string;\n rotated: boolean;\n }>;\n /* Remove one field. /\n removeSecretField(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n }): Promise<void>;\n /* Update secret-level metadata (name/description/tags/category). /\n updateSecretMetadata(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n secretName?: string;\n description?: string;\n tags?: string[];\n category?: SecretCategory$1;\n reason?: string;\n }): Promise<SecretAggregate$1>;\n /* List metadata for secrets in a scope. Optional filters route through the byFacet GSI. /\n listSecrets(args: {\n scope: SecretScope$1;\n scopeId: string;\n category?: SecretCategory$1;\n tag?: string;\n fieldKey?: string;\n }): Promise<SecretMetadata$1[]>;\n /* Bounded changelog read — metadata-only audit entries. /\n getSecretHistory(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n limit?: number;\n cursor?: string;\n }): Promise<{\n entries: ChangelogEntry$1[];\n nextCursor?: string;\n }>;\n /* Delete a secret (and all its field rows + tag rows + changelog rows). /\n deleteSecret(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n }): Promise<void>;\n /* Enumerate scopes (org/team/project/agent) this agent can access. /\n listSecretScopes(): Promise<ScopeInfo$1[]>;\n}\n//# sourceMappingURL=secrets.d.ts.map\n//#endregion\n//#region src/domains/teams.d.ts\ndeclare class TeamsApi extends ApiBase {\n getTeamsCredentials(): Promise<{\n agentId: string;\n tenantId: string;\n azureAppId: string;\n azureBotId: string;\n azureClientSecret: string;\n botDisplayName?: string;\n teamsTenantId?: string;\n serviceUrl?: string;\n }>;\n sendTeamsMessage(data: {\n conversationId: string;\n text?: string;\n adaptiveCard?: Record<string, unknown>;\n }): Promise<{\n ok: boolean;\n activityId: string;\n }>;\n listTeamsChannels(): Promise<{\n channels: {\n id: string;\n name: string;\n description?: string;\n }[];\n }>;\n}\n//# sourceMappingURL=teams.d.ts.map\n\n//#endregion\n//#region src/index.d.ts\ninterface AgentApiClient extends SyncApi, IntegrationsApi, WorkspaceApi, ConnectCredentialsApi, TeamsApi, ChatApi, SecretsApi, IdentityApi, MemoryApi, SearchApi, KnowledgeApi, DatabaseApi, MobileApi, RemoteApi, SelfApi, VoiceApi, ImagesApi, WebhooksApi {}\ndeclare class AgentApiClient extends ApiBase {\n constructor(config: AgentApiClientConfig);\n}\n//# sourceMappingURL=index.d.ts.map\n\n//#endregion\nexport { AgentApiClient, type AgentApiClientConfig, type AgentAvatarPresign, type AgentSelf, type AgentVoice, type AgentVoiceConfig, type AgentWebhook, type AgentWebhookDelivery, type AgentWorkspaceInfo, type ChangeRequestActorKind, type ChangeRequestOperation, type ChangeRequestResourceType, type ChangeRequestStatus, type ChangelogAction, type ChangelogActor, type ChangelogEntry, type CreatedAgentWebhook, type EncryptedEnvelopeV1, type Field, type FieldEnvelope, type FieldFormat, type FieldSensitivity, type FieldView, type GeneratedDataKey, type InstallToolErrorCaptureOptions, type IntegrationConfigResult, type IntegrationConfigSchemaField, type IntegrationInstall, type KnowledgeChangeRequest, type KnowledgeDoc, type KnowledgeProfile, type KnowledgeProfileLink, type KnowledgeScope, type KnowledgeScopeType, type KnowledgeSearchHit, type KnowledgeSearchResult, type MobileAvailableNumber, type MobileNumberInfo, type NewsArticle, type NewsProvider, type NewsResult, type ProposeScopeChangeInput, type RegistryEntry, type RemoteSessionInfo, type ScopeInfo, type SecretAggregate, type SecretCategory, type SecretMetadata, type SecretScope, type SharedFileEntry, type SyncAgentInfo, type SyncAgentStats, type SyncConfirmedUpload, type SyncFileEntry, type SyncManifest, type SyncManifestEntry, type SyncPresignedUrl, type SyncReconstructBundle, type SyncReconstructFile, type SyncSessionContent, type SyncSessionEntry, type ToolCaptureApi, type VoiceSttArgs, type VoiceSttResult, type VoiceTtsArgs, type VoiceTtsModel, type VoiceTtsResult, type WhatsAppTemplate, installToolErrorCapture };\n//# sourceMappingURL=index.d.ts.map","//#region src/types.d.ts\n/\n Minimal logger contract shared by every helper in the kit.\n \n Deliberately the narrowest shape in the fleet: some plugins declare\n * variadic loggers (`info(msg: string, ...args: unknown[])`), others\n * single-arg (`info(msg: string)`). Both are assignable to this. The kit\n * only ever calls with a single string.\n /\ninterface KitLogger {\n info(msg: string): void;\n warn(msg: string): void;\n error(msg: string): void;\n debug(msg: string): void;\n}\n//# sourceMappingURL=types.d.ts.map\n//#endregion\n//#region src/tools.d.ts\n/* Shape returned to OpenClaw from a tool `execute`. /\ninterface ToolResult {\n content: {\n type: \"text\";\n text: string;\n }[];\n details: unknown;\n isError?: boolean;\n}\ninterface ToolDef<TParameters = unknown> {\n name: string;\n description: string;\n label: string;\n parameters: TParameters;\n execute: (toolCallId: string, params: Record<string, unknown>) => Promise<ToolResult>;\n}\n/* Deliberately model-safe validation/usage failure. Other exceptions stay private. /\ndeclare class PublicToolError extends Error {\n readonly name = \"PublicToolError\";\n}\ndeclare function publicToolError(message: string): PublicToolError;\n/* Wrap bounded JSON in the OpenClaw tool-result envelope. /\ndeclare function ok(data: unknown): ToolResult;\n/* Wrap an explicitly public error in a captured OpenClaw error envelope. /\ndeclare function errResult(message: string): ToolResult;\n/\n Define a tool whose unexpected exceptions never expose provider, filesystem,\n * credential, or transport diagnostics to the model. Throw `PublicToolError`\n * only for a message deliberately safe for model display.\n /\ndeclare function defineTool<TParameters>(def: {\n name: string;\n description: string;\n parameters: TParameters;\n handler: (params: Record<string, unknown>) => Promise<unknown>;\n}): ToolDef<TParameters>;\n//# sourceMappingURL=tools.d.ts.map\n//#endregion\n//#region src/daemon.d.ts\ninterface IpcResponse {\n ok: boolean;\n error?: {\n message?: string;\n };\n [key: string]: unknown;\n}\ninterface IpcClient {\n on(event: string, handler: (...args: unknown[]) => void): void;\n request(method: string, params: Record<string, unknown>): Promise<IpcResponse>;\n start(): void;\n stop(): void;\n}\ninterface IpcModule {\n IPCClient: new (socketPath: string, log: KitLogger) => IpcClient;\n}\ninterface ConnectToDaemonOptions {\n pluginId: string;\n capabilities?: readonly string[];\n onMessage?: (msg: Record<string, unknown>) => void;\n standaloneNote?: string;\n}\ninterface ConnectToDaemonDependencies {\n loadIpcModule?: () => Promise<IpcModule>;\n}\ndeclare function connectToDaemon(socketPath: string, log: KitLogger, options: ConnectToDaemonOptions, dependencies?: ConnectToDaemonDependencies): Promise<IpcClient \| null>;\n//#endregion\n//#region src/sdk.d.ts\ninterface ResolveOpenClawSdkOptions {\n specifier?: string;\n exportName?: string;\n unresolvableNote?: string;\n}\ninterface ResolveOpenClawSdkDependencies {\n anchors?: readonly string[];\n globalPackageJsonPath?: string;\n requireFrom?: (anchor: string) => (specifier: string) => unknown;\n}\ndeclare function resolveOpenClawSdk<T = unknown>(log: KitLogger, options?: ResolveOpenClawSdkOptions, dependencies?: ResolveOpenClawSdkDependencies): T \| null;\n//# sourceMappingURL=sdk.d.ts.map\n\n//#endregion\n//#region src/activation.d.ts\n/\n Canonical activation-flag key for a plugin: `__alfe<Name>PluginActivated`.\n \n Accepts a short name (`\"google\"`, `\"google-chat\"`) or a full package name\n * (`\"@alfe.ai/openclaw-teams\"`); scope + `openclaw-` prefix are stripped\n * and the remainder PascalCased:\n \n getActivationKey(\"google\") → \"__alfeGooglePluginActivated\"\n * getActivationKey(\"google-chat\") → \"__alfeGoogleChatPluginActivated\"\n * getActivationKey(\"@alfe.ai/openclaw-teams\") → \"__alfeTeamsPluginActivated\"\n /\ndeclare function getActivationKey(name: string): string;\n/* True when the activation flag for `key` is currently set. /\ndeclare function isActivated(key: string): boolean;\n/\n Clear the activation flag so a later start can run again.\n \n Call this LAST in stop/deactivate paths — after side effects are stopped\n * (see the ordering rule in the module doc). Also exported for soft-failure\n * paths inside a `guardedStart` fn that want to log at a custom level and\n * return normally instead of throwing.\n /\ndeclare function resetActivation(key: string): void;\n/\n Run a service start exactly once per activation cycle.\n \n - If the flag is already set, logs at debug and returns `false` (skipped).\n * - Otherwise sets the flag and runs `fn`.\n * - If `fn` throws synchronously OR returns a promise that rejects, the\n * flag is RESET (so a later activate can retry) and the error is logged.\n * Errors are not rethrown — matching fleet behavior where a failed start\n * must never crash the host's plugin loader.\n \n Returns `true` when the start was initiated (even if an async portion\n * later fails), `false` when skipped or when `fn` threw synchronously.\n \n Note: cleaning up partial side effects on failure is `fn`'s job (throw\n * only after tearing down what was started); the kit only guarantees the\n * flag reset happens after `fn` has failed — i.e. after `fn`'s own cleanup.\n */\ndeclare function guardedStart(key: string, log: KitLogger, fn: () => void \| Promise<void>): boolean;\n//# sourceMappingURL=activation.d.ts.map\n\n//#endregion\nexport { type ConnectToDaemonDependencies, type ConnectToDaemonOptions, type IpcClient, type IpcResponse, type KitLogger, PublicToolError, type ResolveOpenClawSdkDependencies, type ResolveOpenClawSdkOptions, type ToolDef, type ToolResult, connectToDaemon, defineTool, errResult, getActivationKey, guardedStart, isActivated, ok, publicToolError, resetActivation, resolveOpenClawSdk };\n//# sourceMappingURL=index.d.ts.map"],"mappings":";;;;;;;KAsTK+D,kBAAAA;UACKC,cAAAA;aACGD;;;;UAIHE,kBAAAA;;;;;aAKGF;;;;;;;;;;;;;UAaHG,qBAAAA;WACCD;;;;UAIDE,oBAAAA;;;;UAIAC,gBAAAA;aACGL;;;;SAIJI;;;;KAIJE,yBAAAA;KACAC,sBAAAA;KACAC,mBAAAA;KACAC,sBAAAA;;UAEKC,sBAAAA;;aAEGV;;gBAEGM;aACHC;;;;UAIHC;;gBAEMC;;;gBAGAA;;;;;;;;UAQNE,uBAAAA;gBACML;aACHC;;;;;;;;;;;;UAYHK,YAAAA;;;;;;;;;;;AAxCiB;AACH;AACG;;UChVjBuC,UAAAA,CDoVGnD;SAEGM,EAAAA;QACHC,EAAAA,MAAAA;QAIHC,EAAAA,MAAAA;;SAKMC,EAAAA,OAAAA;EAAsB,OAAA,CAAA,EAAA,OAAA;AAAA;UCxV5B2C,ODgWuB,CAAA,cAAA,OAAA,CAAA,CAAA;QACjB9C,MAAAA;aACHC,EAAAA,MAAAA;EAAsB,KAAA,EAAA,MAAA;EAAA,UAYzBK,EC1WIyC,WD0WQ;wCCzWkBC,4BAA4BC,QAAQJ;;;;;UCV3D,eAAA;EFgSZnD;EACKC,aAAAA,EAAAA,OAAc;EAKdC;EAkBAC,SAAAA,EAAAA,MAAAA;AACmB;AAIC;;;;;AASD;AAKxBI,UE9TY,YAAA,CF8TU;EACtBC,eAAAA,CAAAA,KAAAA,EAAmB,MAAA,EAAA,KAAA,EAAA;IACnBC,KAAAA,CAAAA,EAAAA,MAAAA;IAEKC,SAAAA,CAAAA,EE/T+B,kBF+TT;IAAA,OAAA,CAAA,EAAA,MAAA;ME9T3B,OFgUQV,CEhUA,qBFgUAA,CAAAA;YAEGM,EAAAA,EEhUA,OFgUAA,CAAAA;IACHC,MAAAA,EEjUqB,cFiUrBA,EAAAA;;iBAMGE,CAAAA,SAAAA,EErUa,kBFqUbA,EAAAA,OAAAA,EAAAA,MAAAA,CAAAA,EErUmD,OFqUnDA,CErU2D,gBFqU3DA,CAAAA;eAGAA,CAAAA,SAAAA,EErUD,kBFqUCA,EAAAA,OAAAA,EAAAA,MAAAA,EAAAA,IAQiB,CARjBA,EAAAA;IAAsB,KAAA,CAAA,EAAA,MAAA;IAQ5BE,MAAAA,CAAAA,EAAAA,MAAAA;EAAuB,CAAA,CAAA,EE1U5B,OF0U4B,CAAA;IACjBL,KAAAA,EE3UM,YF2UNA,EAAAA;IACHC,UAAAA,EAAAA,MAAAA,GAAAA,IAAAA;EAAsB,CAAA,CAAA;EAYzBK,YAAAA,CAAAA,SAAY,EErVP,kBFqVO,EAAA,OAAA,EAAA,MAAA,EAAA,QAAA,EAAA,MAAA,EAAA,KAAA,EAAA;;MEjVjB;;IDrCKuC,IAAAA,EAAAA,MAAU;EAQVC,CAAAA,CAAAA;EAAO,aAAA,CAAA,SAAA,ECgCF,kBDhCE,EAAA,OAAA,EAAA,MAAA,EAAA,QAAA,EAAA,MAAA,EAAA,OAAA,EAAA,MAAA,EAAA,KAAA,EAAA;IAIHC,WAAAA,CAAAA,EAAAA,MAAAA;IAC0BC,OAAAA,CAAAA,EAAAA,MAAAA;MCgCnC,ODhCuEH,CAAAA;IAARI,QAAAA,EAAAA,MAAAA;EAAO,CAAA,CAAA;gCCmC5D,4CAEJ,0BACN,QAAQ;qCAGE,yCAtCc;aAwCP;IArDL,KAAA,CAAA,EAAA,MAAe;IAaf,MAAA,CAAA,EAAA,MAAY;EAAA,CAAA,CAAA,EAyCxB,OAzCwB,CAAA;IAGY,cAAA,EAsCV,sBAtCU,EAAA;IAC5B,UAAA,EAAA,MAAA,GAAA,IAAA;;;;;;AFuSHpD,UG1RO,YAAA,CH0Rc;EAKrBC,IAAAA,CAAAA,OAAAA,EAAAA,MAAAA,EAAAA,GAAoB,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,IAAA;EAIpBC,IAAAA,CAAAA,OAAAA,EAAAA,MAAgB,EAAA,GAAA,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,IAAA;EAAA,KAAA,CAAA,OAAA,EAAA,MAAA,EAAA,GAAA,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,IAAA;OACbL,CAAAA,OAAAA,EAAAA,MAAAA,EAAAA,GAAAA,IAAAA,EAAAA,OAAAA,EAAAA,CAAAA,EAAAA,IAAAA;;AAIgB,UGjSZ,SAAA,CHiSY;EAIxBM,YAAAA,CAAAA,EAAAA,OAAAA;EACAC,MAAAA,EGpSK,YHoSLA;EACAC,YAAAA,CAAAA,IAAAA,EGpSgB,OHoSG,CGpSK,OHoSL,CAAA,EAAA,OAGdE,CAHc,EAAA;IACnBD,KAAAA,CAAAA,EAAAA,MAAAA,EAAAA;EAEKC,CAAAA,CAAAA,EAAAA,IAAAA;EAAsB,EAAA,CAAA,QAAA,EAAA,MAAA,EAAA,OAAA,EAAA,CAAA,GAAA,IAAA,EAAA,OAAA,EAAA,EAAA,GAAA,OAAA,EAAA,QAAA,EAAA;IAEnBV,QAAAA,CAAAA,EAAAA,MAAAA;MAEGM,IAAAA;;UGxRC,eAAA;EF9DP6C,EAAAA,EAAAA,MAAAA;EAQAC,IAAAA,EAAAA,MAAO;EAAA,WAAA,EAAA,MAAA;SAIHC,EAAAA,MAAAA;UAC0BC,CAAAA,GAAAA,EEsDxB,SFtDwBA,CAAAA,EAAAA,IAAAA;YAAoCH,CAAAA,GAAAA,EEuD1D,SFvD0DA,CAAAA,EAAAA,IAAAA;;;;cG5BtE,QAAQ"}
1	+ {"version":3,"file":"plugin.d.cts","names":["ChangelogAction","ChangelogActor","ChangelogEntry","ChangelogEntry$1","EncryptedEnvelopeV1","EncryptedEnvelopeV1$1","Field","FieldEnvelope","FieldEnvelope$1","FieldFormat","FieldFormat$1","FieldSensitivity","FieldSensitivity$1","FieldView","GeneratedDataKey","GeneratedDataKey$1","IntegrationConfigResult","IntegrationConfigResult$1","IntegrationConfigSchemaField","IntegrationInstall","IntegrationInstall$1","RegistryEntry","RegistryEntry$1","ScopeInfo","ScopeInfo$1","SecretAggregate","SecretAggregate$1","SecretCategory","SecretCategory$1","SecretMetadata","SecretMetadata$1","SecretScope","SecretScope$1","ToolCaptureApi","InstallToolErrorCaptureOptions","installToolErrorCapture","AgentApiClientConfig","AgentApiTransport","Headers","BodyInit","Uint8Array","Response","Promise","RequestInit","AbortSignal","T","ApiBase","AgentWorkspaceInfo","WorkspaceApi","Record","SyncAgentInfo","SyncManifestEntry","SyncManifest","SyncPresignedUrl","SyncConfirmedUpload","SyncReconstructFile","SyncReconstructBundle","SyncAgentStats","SyncFileEntry","SyncSessionEntry","SyncSessionContent","SharedFileEntry","SyncApi","KnowledgeScopeType","KnowledgeScope","KnowledgeSearchHit","KnowledgeSearchResult","KnowledgeProfileLink","KnowledgeProfile","ChangeRequestResourceType","ChangeRequestOperation","ChangeRequestStatus","ChangeRequestActorKind","KnowledgeChangeRequest","ProposeScopeChangeInput","KnowledgeDoc","KnowledgeApi","MobileNumberInfo","MobileAvailableNumber","WhatsAppTemplate","MobileApi","RemoteSessionInfo","RemoteApi","AgentVoiceConfig","AgentSelf","AgentAvatarPresign","AgentVoice","SelfApi","VoiceTtsModel","VoiceTtsArgs","VoiceTtsResult","Buffer","VoiceSttArgs","VoiceSttResult","VoiceApi","NewsProvider","NewsArticle","NewsResult","SearchApi","AgentWebhook","CreatedAgentWebhook","AgentWebhookDelivery","WebhooksApi","ChatApi","ConnectCredentialsApi","DatabaseApi","IdentityApi","ImagesApi","IntegrationsApi","MemoryApi","SecretsApi","TeamsApi","AgentApiClient","KitLogger","ToolResult","ToolDef","TParameters","Record","Promise","PublicToolError","Error","publicToolError","ok","errResult","defineTool","IpcResponse","IpcClient","IpcModule","ConnectToDaemonOptions","ConnectToDaemonDependencies","connectToDaemon","ResolveOpenClawSdkOptions","ResolveOpenClawSdkDependencies","resolveOpenClawSdk","T","getActivationKey","isActivated","resetActivation","guardedStart"],"sources":["../../agent-api-client/dist/index.d.ts","../../openclaw-plugin-kit/dist/index.d.ts","../src/types.ts","../src/runtime.ts","../src/plugin.ts"],"sourcesContent":["import { ChangelogAction, ChangelogActor, ChangelogEntry, ChangelogEntry as ChangelogEntry$1, EncryptedEnvelopeV1, EncryptedEnvelopeV1 as EncryptedEnvelopeV1$1, Field, FieldEnvelope, FieldEnvelope as FieldEnvelope$1, FieldFormat, FieldFormat as FieldFormat$1, FieldSensitivity, FieldSensitivity as FieldSensitivity$1, FieldView, GeneratedDataKey, GeneratedDataKey as GeneratedDataKey$1, IntegrationConfigResult, IntegrationConfigResult as IntegrationConfigResult$1, IntegrationConfigSchemaField, IntegrationInstall, IntegrationInstall as IntegrationInstall$1, RegistryEntry, RegistryEntry as RegistryEntry$1, ScopeInfo, ScopeInfo as ScopeInfo$1, SecretAggregate, SecretAggregate as SecretAggregate$1, SecretCategory, SecretCategory as SecretCategory$1, SecretMetadata, SecretMetadata as SecretMetadata$1, SecretScope, SecretScope as SecretScope$1 } from \"@alfe/types\";\n\n//#region src/tool-error-capture.d.ts\n\n/*\n Tool-error capture for Alfe OpenClaw plugins.\n \n OpenClaw converts a thrown tool handler into a model-facing `tool_result`\n * WITHOUT logging, and most Alfe plugins catch-and-return an error result the\n * same silent way — so tool failures never appear in the runtime's output and\n * therefore never reach Sentry (the gateway daemon supervises the OpenClaw\n * process and reports error-looking output lines to the `agent-runtime`\n * project — see packages/gateway/src/runtime-output-monitor.ts).\n \n `installToolErrorCapture(api, { plugin })` closes that gap at the ONE choke\n * point every plugin already has: it wraps `api.registerTool` so every tool's\n * `execute` emits a deterministic, detector-matched line on failure:\n \n [ERROR] alfe-tool plugin=<plugin> tool=<name> <thrown\|result-error>: <msg> (at <first-frame>)\n \n The `[ERROR]` prefix at line start is exactly what the daemon's\n * `ErrorLineDetector` classifies as an error-log block, so the failure lands\n * in Sentry fingerprinted by its normalized message — no Sentry SDK inside\n * the plugin process, no new dependency. Behavior toward OpenClaw and the\n * model is UNCHANGED: throws are rethrown, results returned as-is.\n /\n/\n Minimal shape of the OpenClaw plugin api this helper relies on. Method\n * syntax on purpose — TS checks method signatures bivariantly, so each\n * plugin's own concretely-typed `registerTool(tool: ToolDef): void` is\n * accepted without casts.\n /\ninterface ToolCaptureApi {\n registerTool(...args: never[]): unknown;\n}\ninterface InstallToolErrorCaptureOptions {\n /* Plugin package short-name for attribution (e.g. \"openclaw-secrets\"). /\n plugin: string;\n /\n Line sink — defaults to writing `process.stderr` directly (the plugin\n * runs in-process in OpenClaw, so this lands on the runtime's stderr, which\n * the daemon supervises — and a console patch can't reformat it away).\n * Injectable for tests.\n /\n emit?: (line: string) => void;\n}\n/\n Wrap `api.registerTool` so every tool registered AFTER this call gets\n * failure capture. Handles both OpenClaw registration signatures:\n * `registerTool(toolDef)` and `registerTool((ctx) => toolDef, opts)`.\n * Call once, first thing in the plugin's `activate`/`register` entry.\n * Never throws.\n /\ndeclare function installToolErrorCapture(api: ToolCaptureApi, options: InstallToolErrorCaptureOptions): void;\n//# sourceMappingURL=tool-error-capture.d.ts.map\n//#endregion\n//#region src/transport.d.ts\n/\n Shared HTTP transport for the Agent API client — request core, retry\n * policy, error formatting, and the `ApiBase` class the domain method\n * groups under `./domains/` build on.\n /\ninterface AgentApiClientConfig {\n apiKey: string;\n apiUrl: string;\n}\n/\n Encode each path segment but keep the `/` separators — `encodeURIComponent`\n * would escape the slashes too, breaking greedy proxy routes.\n /\n\ndeclare class AgentApiTransport {\n private readonly apiKey;\n private readonly apiUrl;\n constructor(config: AgentApiClientConfig);\n /\n Binary sibling of `request<T>()`. `request()` forces\n * `Content-Type: application/json` and parses a `{ data: T }` envelope,\n * neither of which fits a raw-audio flow (voice TTS/STT), so those go\n * through this instead. Auth (Bearer), the request budget, and the single\n * retry policy on transient 5xx / network errors is kept in sync with\n * `request()`. Safe read methods retry once by default; mutation methods do\n * not, because a response can be lost after a handler or provider call has\n * already succeeded.\n /\n rawRequest(path: string, init: {\n method: string;\n headers: Headers;\n body?: BodyInit \| Uint8Array;\n }, extra?: {\n retry?: boolean;\n }): Promise<Response>;\n /\n @param extra.timeoutMs Per-request abort timeout (default REQUEST_TIMEOUT_MS).\n * Long endpoints (image generation) pass a larger value so the gateway's\n * own timeout wins with a readable status instead of a client-side abort.\n * @param extra.retry Whether to retry once on transient failures. Safe reads\n * (GET/HEAD/OPTIONS) default to true; mutations default to false. Set true\n * only when the endpoint's server-side contract is explicitly idempotent.\n * @param extra.signal Optional caller cancellation combined with the client's\n * own timeout budget. Aborting either signal cancels the request.\n /\n request<T>(path: string, options?: RequestInit, extra?: {\n timeoutMs?: number;\n retry?: boolean;\n signal?: AbortSignal;\n }): Promise<T>;\n}\n/\n Base class for the domain method groups. Holds the shared transport;\n * `AgentApiClient` assembles the groups onto one class via `applyMixins`\n * (prototype copy), so methods keep their original `this`-on-the-client\n * call shape.\n /\ndeclare class ApiBase {\n protected readonly transport: AgentApiTransport;\n constructor(transport: AgentApiTransport);\n}\n//# sourceMappingURL=transport.d.ts.map\n//#endregion\n//#region src/domains/workspace.d.ts\n/* Response of GET /agent/workspace (services/agents). /\ninterface AgentWorkspaceInfo {\n templateKey?: string;\n defaultModel?: string;\n installedFrom?: {\n templateKey: string;\n authorTenantId: string;\n version: number;\n };\n runtime?: string;\n teams?: {\n teamId: string;\n name: string;\n description?: string;\n parentTeamId?: string;\n }[];\n projects?: {\n projectId: string;\n name: string;\n description?: string;\n status: string;\n parentProjectId?: string;\n }[];\n teamIds?: string[];\n projectIds?: string[];\n}\ndeclare class WorkspaceApi extends ApiBase {\n /\n GET /agent/workspace — workspace config for the authenticated agent\n * (template assignment, default model, org roster).\n /\n getWorkspace(): Promise<AgentWorkspaceInfo>;\n /\n GET /templates/{key}/files — persona/workspace file contents for a\n * template the agent has access to. Pass `version` to pin to the version\n * the agent was installed from (omit → the endpoint resolves `latest`).\n /\n getTemplateFiles(templateKey: string, opts?: {\n version?: number;\n }): Promise<{\n files: Record<string, string>;\n }>;\n}\n//# sourceMappingURL=workspace.d.ts.map\n//#endregion\n//#region src/domains/sync.d.ts\ninterface SyncAgentInfo {\n agentId: string;\n tenantId: string;\n displayName: string;\n s3Prefix: string;\n status: \"stale\" \| \"syncing\" \| \"synced\";\n fileCount?: number;\n totalSize?: number;\n lastSync?: string;\n}\ninterface SyncManifestEntry {\n hash: string;\n size: number;\n modified: string;\n etag?: string;\n storageClass?: string;\n compressed?: boolean;\n}\ninterface SyncManifest {\n version: 1;\n agentId: string;\n lastSync: string;\n files: Record<string, SyncManifestEntry>;\n}\ninterface SyncPresignedUrl {\n path: string;\n url: string;\n expiresAt: string;\n}\ninterface SyncConfirmedUpload {\n filePath: string;\n hash: string;\n size: number;\n storageClass: \"STANDARD\" \| \"GLACIER_IR\";\n syncedAt: string;\n}\ninterface SyncReconstructFile {\n path: string;\n size: number;\n url: string;\n storageClass?: string;\n compressed?: boolean;\n}\ninterface SyncReconstructBundle {\n agentId: string;\n mode: \"full\" \| \"active\" \| \"memory\";\n fileCount: number;\n totalSize: number;\n files: SyncReconstructFile[];\n expiresAt: string;\n}\ninterface SyncAgentStats {\n agentId: string;\n standardBytes: number;\n glacierBytes: number;\n fileCount: number;\n lastSyncAt: string \| null;\n}\ninterface SyncFileEntry {\n filePath: string;\n size: number;\n modified: string;\n contentHash: string;\n storageClass?: string;\n compressed?: boolean;\n}\ninterface SyncSessionEntry {\n sessionId: string;\n size: number;\n lastModified: string;\n storageClass?: string;\n isArchived: boolean;\n}\ninterface SyncSessionContent {\n sessionId: string;\n content: string;\n compressed: boolean;\n}\ninterface SharedFileEntry {\n filePath: string;\n fileName: string;\n size: number;\n contentType?: string;\n}\ndeclare class SyncApi extends ApiBase {\n syncRegister(args?: {\n displayName?: string;\n }): Promise<{\n agent: SyncAgentInfo;\n }>;\n syncGetManifest(): Promise<SyncManifest>;\n syncPresign(args: {\n files: {\n path: string;\n operation: \"put\" \| \"get\";\n contentType?: string;\n }[];\n }): Promise<{\n urls: SyncPresignedUrl[];\n }>;\n syncConfirmUpload(args: {\n filePath: string;\n hash: string;\n size: number;\n storageClass?: \"STANDARD\" \| \"GLACIER_IR\";\n }): Promise<SyncConfirmedUpload>;\n syncReconstruct(args: {\n mode: \"full\" \| \"active\" \| \"memory\";\n }): Promise<SyncReconstructBundle>;\n syncGetStats(): Promise<SyncAgentStats>;\n syncListFiles(args?: {\n prefix?: string;\n }): Promise<{\n files: SyncFileEntry[];\n }>;\n syncListSessions(): Promise<{\n sessions: SyncSessionEntry[];\n }>;\n syncGetSession(sessionId: string): Promise<SyncSessionContent>;\n syncDeleteFile(filePath: string): Promise<{\n removed: boolean;\n }>;\n sharedListFiles(args: {\n scope: \"org\" \| \"team\" \| \"project\";\n scopeId: string;\n limit?: number;\n cursor?: string;\n }): Promise<{\n files: SharedFileEntry[];\n nextCursor: string \| null;\n }>;\n sharedDownloadUrl(args: {\n scope: \"org\" \| \"team\" \| \"project\";\n scopeId: string;\n filePath: string;\n }): Promise<{\n downloadUrl: string;\n expiresIn: number;\n }>;\n}\n//# sourceMappingURL=sync.d.ts.map\n//#endregion\n//#region src/domains/knowledge.d.ts\ntype KnowledgeScopeType = \"org\" \| \"team\" \| \"project\";\ninterface KnowledgeScope {\n scopeType: KnowledgeScopeType;\n scopeId: string;\n name: string;\n}\ninterface KnowledgeSearchHit {\n id: string;\n text: string;\n /* Normalized relevance in (0,1]; higher = closer. /\n score: number;\n scopeType: KnowledgeScopeType;\n scopeId: string;\n /\n Provenance of the hit. All live results are `\"doc\"`; `\"fact\"` only ever\n * appears for legacy vectors indexed before the facts primitive was removed\n * (the search index stays tolerant of them). Treat every hit as a doc.\n /\n source: \"doc\" \| \"fact\";\n /* The canonical file under shared/<scope>/ (present on doc hits). /\n filePath?: string;\n /* Legacy-only: the id of a pre-removal fact vector. /\n factId?: string;\n}\ninterface KnowledgeSearchResult {\n results: KnowledgeSearchHit[];\n /* True when fan-out breadth was capped (more member scopes than the cap). /\n truncatedScopes: boolean;\n}\ninterface KnowledgeProfileLink {\n label: string;\n url: string;\n}\ninterface KnowledgeProfile {\n scopeType: KnowledgeScopeType;\n scopeId: string;\n about: string \| null;\n description: string \| null;\n links: KnowledgeProfileLink[];\n updatedAt: string \| null;\n updatedBy: string \| null;\n}\ntype ChangeRequestResourceType = \"doc\" \| \"profile\";\ntype ChangeRequestOperation = \"create\" \| \"update\" \| \"delete\";\ntype ChangeRequestStatus = \"open\" \| \"approved\" \| \"rejected\" \| \"withdrawn\" \| \"superseded\";\ntype ChangeRequestActorKind = \"human\" \| \"agent\";\n/* Public projection of a change request (mirrors `PublicChangeRequest` in services/org). /\ninterface KnowledgeChangeRequest {\n changeRequestId: string;\n scopeType: KnowledgeScopeType;\n scopeId: string;\n resourceType: ChangeRequestResourceType;\n operation: ChangeRequestOperation;\n targetPath: string \| null;\n baseVersionId: string \| null;\n proposedContentType: string \| null;\n status: ChangeRequestStatus;\n proposerId: string;\n proposerKind: ChangeRequestActorKind;\n rationale: string;\n reviewerId: string \| null;\n reviewerKind: ChangeRequestActorKind \| null;\n reviewedAt: string \| null;\n reviewNote: string \| null;\n appliedRef: string \| null;\n createdAt: string;\n updatedAt: string;\n}\n/* Per-type proposal payload for `proposeScopeChange`. /\ninterface ProposeScopeChangeInput {\n resourceType: ChangeRequestResourceType;\n operation: ChangeRequestOperation;\n /* Why the change is proposed — shown to the reviewer. /\n rationale: string;\n /* doc: the path the proposal applies to (e.g. designs/data-center.md). /\n targetPath?: string;\n /* doc create/update: the staged body to upload (markdown or other text). /\n content?: string;\n /* doc create/update: content type of the staged body (default text/markdown). /\n contentType?: string;\n /* profile: the proposed value ({ about, description, links }). /\n proposedValue?: unknown;\n}\ninterface KnowledgeDoc {\n filePath: string;\n fileName: string;\n contentType?: string;\n size: number;\n uploadedBy?: string;\n createdAt: string;\n updatedAt: string;\n}\ndeclare class KnowledgeApi extends ApiBase {\n /\n Semantic search across the agent's member scopes. Fan-out is gated\n * server-side by `listScopes` set-inclusion (fail-closed). Pass\n * `scopeType` + `scopeId` to narrow to one scope; a non-member scope\n * yields empty results (never a cross-scope leak).\n /\n knowledgeSearch(query: string, opts?: {\n limit?: number;\n scopeType?: KnowledgeScopeType;\n scopeId?: string;\n }): Promise<KnowledgeSearchResult>;\n /* Enumerate the scopes (org + teams + projects) this agent belongs to. /\n listScopes(): Promise<{\n scopes: KnowledgeScope[];\n }>;\n /* Read a scope's structured knowledge profile (after membership check). /\n getScopeProfile(scopeType: KnowledgeScopeType, scopeId: string): Promise<KnowledgeProfile>;\n /\n Open a change request against a scope's knowledge resource. For a doc\n * create/update, `services/org` returns a presigned staging PUT; this method\n * uploads the proposed `content` to it (echoing the same Content-Type that\n * was signed), mirroring `writeScopeDoc`. The staged body is applied to the\n * canonical doc — attributed to this agent — only when a reviewer approves.\n /\n proposeScopeChange(scopeType: KnowledgeScopeType, scopeId: string, input: ProposeScopeChangeInput): Promise<KnowledgeChangeRequest>;\n /\n List the agent's OWN change requests in a scope (filtered server-side to\n * this agent as proposer). Pass `status` to narrow to open / approved / etc.\n /\n listScopeChangeRequests(scopeType: KnowledgeScopeType, scopeId: string, opts?: {\n status?: ChangeRequestStatus;\n limit?: number;\n cursor?: string;\n }): Promise<{\n changeRequests: KnowledgeChangeRequest[];\n nextCursor: string \| null;\n }>;\n /* List a scope's docs (the org-files corpus; mirrored to shared/<scope>/). /\n listScopeDocs(scopeType: KnowledgeScopeType, scopeId: string, opts?: {\n limit?: number;\n cursor?: string;\n }): Promise<{\n files: KnowledgeDoc[];\n nextCursor: string \| null;\n }>;\n /\n Read the full text of a scope doc. Resolves a presigned download URL\n * from `services/org`, then fetches the bytes directly from S3 (the one\n * legitimate raw fetch in a plugin — same pattern as sync).\n /\n readScopeDoc(scopeType: KnowledgeScopeType, scopeId: string, filePath: string, opts?: {\n maxBytes?: number;\n }): Promise<{\n filePath: string;\n text: string;\n }>;\n /\n Write (create or overwrite) a scope doc. Two-step presigned upload:\n * `services/org` returns a signed URL plus `requiredHeaders` (author /\n * authorKind / message as `x-amz-meta-`) that MUST be sent verbatim on\n the PUT, alongside the same `Content-Type` that was signed. Author and\n * authorKind are server-set from the agent token — never trusted here.\n /\n writeScopeDoc(scopeType: KnowledgeScopeType, scopeId: string, filePath: string, content: string, opts?: {\n contentType?: string;\n message?: string;\n }): Promise<{\n filePath: string;\n }>;\n}\n//# sourceMappingURL=knowledge.d.ts.map\n//#endregion\n//#region src/domains/mobile.d.ts\n/* Response of GET /mobile/numbers for an agent (services/mobile). /\ninterface MobileNumberInfo {\n phoneNumber: string;\n countryCode: string;\n monthlyPrice?: number;\n status: string;\n errorMessage?: string;\n}\n/* One purchasable number from GET /mobile/numbers/search. /\ninterface MobileAvailableNumber {\n number: string;\n friendlyName: string;\n locality: string;\n region: string;\n country: string;\n}\n/* Approved WhatsApp content template from GET /mobile/whatsapp/templates. /\ninterface WhatsAppTemplate {\n contentSid: string;\n name: string;\n language: string;\n body: string;\n variables: Record<string, string>;\n category?: string;\n}\ndeclare class MobileApi extends ApiBase {\n getMobileNumber(): Promise<MobileNumberInfo>;\n searchMobileNumbers(args?: {\n country?: string;\n query?: string;\n }): Promise<{\n numbers: MobileAvailableNumber[];\n monthlyPrice: number;\n }>;\n assignMobileNumber(args: {\n phoneNumber: string;\n countryCode: string;\n }): Promise<{\n phoneNumber: string;\n countryCode: string;\n status: \"pending\";\n }>;\n releaseMobileNumber(): Promise<{\n released: true;\n }>;\n sendSms(args: {\n to: string;\n body: string;\n }): Promise<{\n sent: true;\n sid: string;\n }>;\n startOutboundCall(args: {\n to: string;\n }): Promise<{\n callSid: string;\n status: string;\n }>;\n getWhatsAppSession(to: string): Promise<{\n active: boolean;\n expiresAt?: string;\n }>;\n sendWhatsAppMessage(args: {\n to: string;\n body: string;\n }): Promise<{\n sent: true;\n sid: string;\n }>;\n sendWhatsAppTemplate(args: {\n to: string;\n contentSid: string;\n contentVariables: Record<string, string>;\n bodyPreview?: string;\n }): Promise<{\n sent: true;\n sid: string;\n }>;\n listWhatsAppTemplates(): Promise<{\n templates: WhatsAppTemplate[];\n }>;\n}\n//# sourceMappingURL=mobile.d.ts.map\n//#endregion\n//#region src/domains/remote.d.ts\ninterface RemoteSessionInfo {\n sessionId: string;\n agentId: string;\n surface: \"browser\" \| \"terminal\";\n status: \"agent_driving\" \| \"awaiting_human\" \| \"human_in_control\" \| \"resuming\" \| \"completed\" \| \"expired\" \| \"failed\";\n url?: string;\n instructions?: string;\n requestedAt?: string;\n}\ndeclare class RemoteApi extends ApiBase {\n requestBrowserTakeover(args: {\n instructions: string;\n url?: string;\n conversationId?: string;\n }): Promise<{\n sessionId: string;\n status: string;\n }>;\n getRemoteSession(sessionId: string): Promise<RemoteSessionInfo>;\n completeRemoteSession(sessionId: string): Promise<{\n ok: boolean;\n }>;\n}\n//# sourceMappingURL=remote.d.ts.map\n//#endregion\n//#region src/domains/self.d.ts\n/* Voice settings — core agent config. Mirrors `VoiceConfig` in `@alfe/types`. /\ninterface AgentVoiceConfig {\n /* ElevenLabs voice ID; platform default when unset. /\n voiceId?: string;\n ttsModel?: string;\n enabled?: boolean;\n}\n/\n The agent's own public identity, as returned by `updateSelf`, `generateAvatar`,\n * `presignAvatar`'s finalize (`finalizeAvatar`). This is the public agent\n * projection; only the identity-relevant fields are typed here — the response\n * carries the full public agent record.\n /\ninterface AgentSelf {\n agentId: string;\n tenantId: string;\n name: string;\n avatarUrl?: string;\n voiceConfig?: AgentVoiceConfig;\n status: string;\n}\n/* Result of `presignAvatar` — the agent PUTs bytes to `uploadUrl`, then finalizes with `s3Key`. /\ninterface AgentAvatarPresign {\n /* Presigned PUT URL to upload the image bytes to. /\n uploadUrl: string;\n /* Object key — echoed back to `finalizeAvatar`. /\n s3Key: string;\n /* Stable public URL the avatar will be served from once finalized. /\n publicUrl: string;\n /* ISO expiry of the presigned PUT URL. /\n expiresAt: string;\n}\n/* A voice in the platform catalogue (ElevenLabs), from `listVoices`. /\ninterface AgentVoice {\n id: string;\n name: string;\n previewUrl: string;\n description: string;\n labels: Record<string, string>;\n category: string;\n}\ndeclare class SelfApi extends ApiBase {\n /* Update the agent's own name and/or voice config. Returns the updated agent. /\n updateSelf(update: {\n name?: string;\n voiceConfig?: AgentVoiceConfig;\n }): Promise<AgentSelf>;\n /\n Generate the agent's own avatar from a text prompt. The image is generated,\n * stored, and set on the agent server-side; returns the updated agent.\n \n ASYNC (same reason as `generateImage`): avatar gen runs `gpt-image-1`\n * (30–60s) which exceeds the API Gateway 30s ceiling, so this enqueues a job\n * (`POST /agent/avatar/generate` → `jobId`) then polls (`GET /agent/avatar/{jobId}`)\n * until the avatar is set. Signature unchanged — the plugin is unaffected.\n /\n generateAvatar(args: {\n prompt: string;\n }): Promise<AgentSelf>;\n /\n Get a presigned PUT URL to upload a new avatar image. Upload the bytes to\n * `uploadUrl`, then call `finalizeAvatar(s3Key)` to set it on the agent.\n /\n presignAvatar(args: {\n mimeType: string;\n size: number;\n }): Promise<AgentAvatarPresign>;\n /\n Finalize an avatar upload — validates ownership + size, then sets the\n * agent's `avatarUrl` server-side. Returns the updated agent.\n /\n finalizeAvatar(s3Key: string): Promise<AgentSelf>;\n /* List the platform voice catalogue (ElevenLabs) so the agent can pick its own voice. /\n listVoices(): Promise<{\n voices: AgentVoice[];\n }>;\n}\n//# sourceMappingURL=self.d.ts.map\n//#endregion\n//#region src/domains/voice.d.ts\n/* The ElevenLabs models with a pricing row — the TTS endpoint rejects any other value. /\ntype VoiceTtsModel = \"eleven_turbo_v2_5\" \| \"eleven_multilingual_v2\";\ninterface VoiceTtsArgs {\n /* Text to synthesize (1–5000 chars — the endpoint enforces this). /\n text: string;\n /* ElevenLabs voice id; platform default when unset. /\n voiceId?: string;\n /* TTS model; `eleven_turbo_v2_5` (lower latency) when unset. /\n model?: VoiceTtsModel;\n}\n/* Raw synthesized audio plus its PCM framing (from the response headers). /\ninterface VoiceTtsResult {\n /* Raw little-endian PCM samples — no container. Wrap in WAV to make a playable file. /\n audio: Buffer;\n /* Samples per second (e.g. 24000). /\n sampleRate: number;\n /* Channel count (mono = 1). /\n channels: number;\n /* Bits per sample (e.g. 16). /\n bitDepth: number;\n}\ninterface VoiceSttArgs {\n /* Raw linear16 (16-bit little-endian) mono PCM samples — no WAV/container header. /\n audio: Uint8Array;\n /* Sample rate of `audio` in Hz (8000–48000). /\n sampleRate: number;\n}\ninterface VoiceSttResult {\n text: string;\n /* Deepgram confidence in (0,1]. /\n confidence: number;\n}\ndeclare class VoiceApi extends ApiBase {\n /\n Text-to-speech. Returns raw PCM audio bytes plus their framing — the\n * voice service defaults to 24 kHz / mono / 16-bit. Wrap in a WAV container\n * to produce a playable file. Metered per character against the tenant\n * credit pool server-side; TTS completes regardless of metering outcome.\n /\n tts(args: VoiceTtsArgs): Promise<VoiceTtsResult>;\n /\n Speech-to-text. Accepts raw linear16 (16-bit LE) mono PCM — NOT a WAV or\n * other container (the endpoint transcribes with a fixed linear16 encoding,\n * so a container header would be transcribed as noise). Strip any WAV header\n * and pass `sampleRate` from it before calling. Metered by transcribed\n * duration against the tenant credit pool server-side.\n /\n stt(args: VoiceSttArgs): Promise<VoiceSttResult>;\n}\n//# sourceMappingURL=voice.d.ts.map\n//#endregion\n//#region src/domains/search.d.ts\n/\n The broad-news providers behind the metered `services/news` Lambda. The\n * server validates this with a zod enum; a value outside the union is an\n * unpriceable product, so keep the literal union in lockstep with the service.\n /\ntype NewsProvider = \"apitube\" \| \"newsdata\";\n/* One normalized article. `sentiment` is provider-shaped (APITube supplies it). /\ninterface NewsArticle {\n title: string;\n url: string;\n source: string;\n publishedAt: string;\n snippet: string;\n sentiment?: unknown;\n}\n/* Provider-agnostic result — the server normalizes every adapter to this. /\ninterface NewsResult {\n articles: NewsArticle[];\n provider: string;\n}\ndeclare class SearchApi extends ApiBase {\n searchWeb(params: {\n query: string;\n count?: number;\n offset?: number;\n country?: string;\n freshness?: string;\n }, options?: {\n signal?: AbortSignal;\n }): Promise<unknown>;\n searchImages(params: {\n query: string;\n count?: number;\n }, options?: {\n signal?: AbortSignal;\n }): Promise<unknown>;\n searchNews(params: {\n query: string;\n count?: number;\n offset?: number;\n freshness?: string;\n }, options?: {\n signal?: AbortSignal;\n }): Promise<unknown>;\n /* Search news across the selected provider's corpus. → POST /agent/news/search /\n newsSearch(params: {\n query: string;\n provider?: NewsProvider;\n source?: string;\n from?: string;\n to?: string;\n language?: string;\n category?: string;\n limit?: number;\n }): Promise<NewsResult>;\n /* Top headlines for the selected provider. → POST /agent/news/headlines /\n newsHeadlines(params?: {\n provider?: NewsProvider;\n category?: string;\n source?: string;\n language?: string;\n limit?: number;\n }): Promise<NewsResult>;\n}\n//# sourceMappingURL=search.d.ts.map\n//#endregion\n//#region src/domains/webhooks.d.ts\ninterface AgentWebhook {\n webhookId: string;\n tenantId: string;\n agentId: string;\n name: string;\n provider: string;\n active: boolean;\n createdBy: string;\n createdAt: string;\n updatedAt: string;\n}\ninterface CreatedAgentWebhook extends AgentWebhook {\n url: string;\n signingSecret: string;\n}\ninterface AgentWebhookDelivery {\n deliveryId: string;\n webhookId: string;\n status: string;\n attempts: number;\n createdAt: string;\n deliveredAt?: string;\n}\ndeclare class WebhooksApi extends ApiBase {\n createWebhook(args: {\n name: string;\n provider?: \"generic\" \| \"github\" \| \"stripe\" \| \"slack\";\n }): Promise<CreatedAgentWebhook>;\n listWebhooks(): Promise<AgentWebhook[]>;\n deleteWebhook(webhookId: string): Promise<{\n webhookId: string;\n active: false;\n }>;\n rotateWebhookSecret(webhookId: string): Promise<{\n webhookId: string;\n signingSecret: string;\n }>;\n listWebhookDeliveries(webhookId: string): Promise<AgentWebhookDelivery[]>;\n}\n//# sourceMappingURL=webhooks.d.ts.map\n//#endregion\n//#region src/domains/chat.d.ts\ndeclare class ChatApi extends ApiBase {\n presignAttachments(files: {\n filename: string;\n mimeType: string;\n size: number;\n }[]): Promise<{\n attachments: {\n id: string;\n uploadUrl: string;\n downloadUrl: string;\n s3Key: string;\n expiresAt: string;\n }[];\n }>;\n recordActivity(data: {\n userId?: string;\n channel: string;\n role: \"user\" \| \"assistant\";\n }): Promise<{\n recorded: boolean;\n }>;\n}\n//# sourceMappingURL=chat.d.ts.map\n//#endregion\n//#region src/domains/connect-credentials.d.ts\ndeclare class ConnectCredentialsApi extends ApiBase {\n /\n Returns every connected Google account for the agent. Multi-account by\n * design — the openclaw-google plugin requires the LLM to pass `email`\n * explicitly to `google_run_command` so an account is always selected\n * deliberately.\n \n 2026-05-14 (connections-redesign PR 1): the legacy flat shape (`email`,\n * `refreshToken`, `accessToken`, etc., populated from the default account)\n * is gone. Iterate over `accounts`.\n /\n getGoogleCredentials(): Promise<{\n accounts: {\n email: string;\n refreshToken: string;\n clientId: string;\n clientSecret: string;\n displayName?: string;\n connectedAt?: string;\n }[];\n }>;\n disconnectGoogleAccount(email: string): Promise<{\n accounts: {\n email: string;\n displayName?: string;\n connectedAt?: string;\n }[];\n }>;\n getGoogleChatCredentials(): Promise<{\n email: string;\n refreshToken: string;\n clientId: string;\n clientSecret: string;\n displayName?: string;\n }>;\n /\n Fetch decrypted credentials for ONE specific connection by its\n * stable connectionId (connection-scoped, vs the provider-scoped\n * `get<Provider>Credentials` helpers). Used by the daemon to resolve\n * a Custom Connection-driven integration's credentials from the\n * exact connection it was installed from — every custom connection\n * shares the `custom` provider id, so provider-scoping is ambiguous.\n \n For custom connections `accessToken` is the JSON-encoded secret\n * bundle (the daemon un-bundles it); non-secret fields are on\n * `providerMetadata`. The endpoint enforces that the connection is in\n * the calling agent's effective scope (403 otherwise).\n /\n getConnectionCredentials(connectionId: string): Promise<{\n provider: string;\n connectionId: string;\n accountIdentifier?: string;\n accessToken?: string;\n providerMetadata?: Record<string, unknown>;\n [key: string]: unknown;\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getGithubAccounts()` for the multi-\n * account shape required by Pattern A — explicit selector args on every\n * tool. Retained because the `@alfe.ai/github-mcp` proxy is the\n * only consumer that knows about Pattern A; legacy env-interpolation\n * callers will keep hitting `/credentials` until they move to the proxy.\n /\n getGithubCredentials(): Promise<{\n login: string;\n accessToken: string;\n }>;\n /\n Pattern A: multi-account credential fetch for GitHub.\n \n Returns every agent-scoped GitHub connection. The caller is expected\n * to require a `login` selector on every credential-touching tool and\n * look up the matching account at dispatch time.\n \n GitHub OAuth tokens have no expiry (`tokenLifecycle: \"no_expiry\"`),\n * so there is intentionally no `refreshGithubAccountToken` method — if\n * a token is revoked the user must re-run the OAuth flow.\n \n Returned `accounts[i].login` is the GitHub username — the stable\n * cross-session identifier the LLM should pass.\n /\n getGithubAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n login: string;\n scopes: string;\n }[];\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getXeroAccounts()` for the multi-\n * account shape required by Pattern A — explicit selector args on every\n * tool. This method will be removed once all consumers migrate.\n /\n getXeroCredentials(): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n xeroTenantId: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Xero. Returns every\n * agent-scoped Xero connection. The caller is expected to require a\n * selector arg (e.g. `xeroTenantId`) on every credential-touching tool\n * and look up the matching account by that selector at dispatch time.\n \n `xeroTenantId` is the model-facing organisation selector. The separate\n * `accountIdentifier` is the Connect persistence key used for refresh and\n * may be an email; never substitute one for the other.\n /\n getXeroAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n xeroTenantId: string;\n }[];\n }>;\n refreshXeroToken(): Promise<{\n accessToken: string;\n expiresAt: string;\n }>;\n /\n Refresh a specific Xero Connection by its exact `accountIdentifier` from\n * `getXeroAccounts()`. Do not substitute `xeroTenantId`: current Xero OAuth\n * rows may use the account email as their persistence key even when a sole\n * organisation tenant ID is available in provider metadata.\n /\n refreshXeroAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getNotionAccounts()` for the multi-\n * account shape required by Pattern A.\n /\n getNotionCredentials(): Promise<{\n accessToken: string;\n workspaceId: string;\n workspaceName: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Notion. Returns every\n * agent-scoped Notion connection. The caller is expected to require a\n * selector arg (e.g. `workspaceId`) on every credential-touching tool.\n \n Returned `accounts[i].accountIdentifier` is the Notion workspaceId.\n /\n getNotionAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n workspaceId: string;\n workspaceName: string;\n }[];\n }>;\n /\n @deprecated Returns a single primary Atlassian Connection's credentials\n * (one OAuth user, one cloudId) — the legacy \"pick-the-default-connection\"\n * shape. Atlassian is multi-site by nature (each OAuth user may have\n * access to multiple Cloud sites), so Pattern A plugins MUST use\n * `getAtlassianAccounts()` to discover the full set and dispatch via\n * the `cloudId` selector arg.\n /\n getAtlassianCredentials(): Promise<{\n accessToken: string;\n refreshToken: string;\n accessTokenExpiresAt: string;\n cloudId: string;\n siteName: string;\n siteUrl: string;\n email: string;\n enabledProducts: string[];\n clientId: string;\n clientSecret: string;\n }>;\n refreshAtlassianToken(): Promise<{\n accessToken: string;\n expiresAt: string;\n }>;\n /\n Pattern A: multi-account / multi-site credential fetch for Atlassian.\n \n Returns every agent-scoped Atlassian Connection. Each Connection is\n * one OAuth user with a single access token and N accessible Cloud\n * sites (`availableSites`). The caller is expected to:\n \n 1. Flatten (connection × cloudId) into one MCP child per site.\n * 2. Require a `cloudId` selector on every credential-touching tool.\n * 3. Use the access token bound to the Connection that owns the\n * requested `cloudId` (Atlassian shares one access token across\n * all sites accessible to the OAuth user).\n \n Per-account token refresh uses `refreshAtlassianAccountToken(email)`\n * — refreshing one Connection rotates its single access token, which\n * then applies to every cloudId for that Connection.\n \n Returned `accounts[i].accountIdentifier` is the OAuth user's email\n * — the stable cross-session identifier for refresh purposes. The LLM\n * never sees this directly: it picks a site via the `cloudId` arg\n * instead.\n /\n getAtlassianAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n clientId: string;\n clientSecret: string;\n cloudId: string;\n siteName: string;\n siteUrl: string;\n availableSites: {\n id: string;\n url: string;\n name: string;\n scopes?: string[];\n avatarUrl?: string;\n }[];\n }[];\n }>;\n /\n Pattern A: refresh a specific Atlassian Connection by `accountIdentifier`\n * (the OAuth user's email).\n \n Atlassian rotates refresh tokens (`rotatesRefreshToken: true`); the\n * server-side per-account refresh endpoint handles rotation and\n * persistence. Refreshing one Connection updates its single access\n * token, which applies to every accessible Cloud site (cloudId) for\n * that OAuth user.\n \n Returns the new access token + expiry. The proxy is responsible for\n * fanning the new token out to every child server it spawned for\n * cloudIds owned by this Connection.\n /\n refreshAtlassianAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getMYOBAccounts()` for the multi-\n * account shape required by Pattern A.\n /\n getMYOBCredentials(): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n myobBusinessId: string;\n clientId: string;\n }>;\n /\n Pattern A: multi-account credential fetch for MYOB. Returns every\n * agent-scoped MYOB connection. The caller is expected to require a\n * selector arg (e.g. `myobBusinessId` / `accountIdentifier`) on every\n * credential-touching tool.\n \n Returned `accounts[i].accountIdentifier` is the MYOB businessId.\n /\n getMYOBAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n myobBusinessId: string;\n clientId: string;\n }[];\n }>;\n refreshMYOBToken(): Promise<{\n accessToken: string;\n expiresAt: string;\n }>;\n /\n Pattern A: refresh one MYOB Connection by its stable\n * `accountIdentifier` (the MYOB business id returned by\n * `getMYOBAccounts()`).\n \n MYOB refresh tokens belong to individual Connection rows. A\n * multi-business client must use this method instead of refreshing the\n * primary Connection and copying that access token into every cached\n * business client.\n /\n refreshMYOBAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n @deprecated Returns a single primary credential blob. Use\n * `getSalesforceAccounts()` for the multi-account shape required by\n * Pattern A.\n /\n getSalesforceCredentials(): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n instanceUrl: string;\n orgId: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Salesforce. Returns every\n * agent-scoped Salesforce connection. One OAuth grant maps to one org, so\n * `accounts[i].accountIdentifier` (and `orgId`) is the Salesforce org id —\n * the selector every credential-touching tool requires.\n /\n getSalesforceAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n instanceUrl: string;\n orgId: string;\n }[];\n }>;\n /\n Refresh the access token for a specific Salesforce org. Salesforce\n * tokens aren't interchangeable across orgs, so the connection is targeted\n * by `accountIdentifier` (the org id) — mirrors `refreshXeroAccountToken`.\n /\n refreshSalesforceAccountToken(orgId: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Microsoft 365.\n \n Returns every agent-scoped Microsoft connection. The caller is expected\n * to require an `email` selector on every credential-touching tool and\n * look up the matching account at dispatch time.\n \n Returned `accounts[i].accountIdentifier` is the user's primary email\n * (or the tid claim as fallback) — the stable cross-session identifier\n * the LLM should pass.\n \n Per-account token refresh is exposed via `refreshMicrosoftAccountToken`,\n * NOT `refreshXeroAccountToken` — Microsoft refresh tokens are not\n * interchangeable across (tenant, user) pairs.\n /\n getMicrosoftAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n email: string;\n microsoftTenantId: string;\n workspaceDomain: string;\n }[];\n }>;\n /\n Pattern A: refresh a specific Microsoft 365 connection by its\n * `accountIdentifier`. For Microsoft, `accountIdentifier` is the user's\n * email when the Graph profile fetch succeeded at connect time, and the\n * Azure tenant id (`tid` claim) as fallback. Callers should pass the\n * value returned by `getMicrosoftAccounts()` rather than synthesising\n * an email locally.\n \n Microsoft refresh tokens are bound to a specific (tenant, user) pair —\n * they are NOT interchangeable across accounts, so per-account refresh\n * is mandatory. The generic /accounts/{accountIdentifier}/refresh\n * endpoint walks the agent's full visible scope chain to find a matching\n * connection (works for inherited team/project Microsoft connections).\n /\n refreshMicrosoftAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n Disconnects one connected Microsoft 365 account for the agent, by its\n * `accountIdentifier`. Hits the generic per-account disconnect route\n * (`DELETE /agent/connect/microsoft/accounts/{accountIdentifier}`), which\n * resolves across the agent's full effective scope chain and deletes the\n * matching Connection row. Returns the remaining accounts.\n \n IMPORTANT: pass the `accountIdentifier` from `getMicrosoftAccounts()`, NOT\n * a synthesised email. For Microsoft, `accountIdentifier` is the user's email\n * only when the Graph profile fetch succeeded at connect time; it falls back\n * to the Azure tenant id (`tid` claim) otherwise. The backend matches on\n * `accountIdentifier` exactly, so passing an email would 404 on those\n * fallback-identifier accounts. (This is why the param is not named `email`,\n * unlike `disconnectGoogleAccount` where the identifier is always the email.)\n /\n disconnectMicrosoftAccount(accountIdentifier: string): Promise<{\n accounts: {\n accountIdentifier: string;\n displayName?: string;\n connectedAt?: string;\n }[];\n }>;\n /\n Resolve the primary cTrader Connection's credentials for the calling\n * agent. Unlike most providers, the cTrader Open API needs app-level auth\n * (`clientId` + `clientSecret`) AND account auth (`accessToken` +\n * `accountId`) on the socket, so `@alfe.ai/ctrader-mcp` self-fetches the\n * full set here at startup (the atlassian/google pattern). `clientId` /\n * `clientSecret` are the SST-sourced global app credentials the connect\n * endpoint injects — they are never persisted on the connection. `host` is\n * the resolved TLS endpoint (`live.ctraderapi.com` / `demo.ctraderapi.com`)\n * derived from the selected account's live/demo flag.\n /\n getCTraderCredentials(): Promise<{\n accessToken: string;\n refreshToken: string;\n accountId: string;\n host: string;\n clientId: string;\n clientSecret: string;\n }>;\n /\n Pattern A: multi-account credential fetch for cTrader.\n \n Unlike atlassian/salesforce (one Connection row per account/site), a\n * cTrader is MULTI-grant per agent: an agent may connect several distinct\n * cTrader logins, each its own Connection row keyed on `accountIdentifier =\n * ctid:<userId>` (Phase 1). This aggregates the trading accounts across\n * ALL of those Connection rows — each row contributes its `availableAccounts`\n * flattened, and every account carries ITS OWN grant's `accessToken` (the\n * token that authenticates that account against the cTrader Open API). One\n * OAuth grant still covers all accounts under that single login on one shared\n * token; only the `ctidTraderAccountId` and the protobuf socket `host` (live\n * vs demo) differ within a grant. Across grants the tokens differ, so the\n * token is now PER-ACCOUNT rather than hoisted to the top level.\n \n `host` per account is derived from the account's `isLive` flag\n * (`live.ctraderapi.com` / `demo.ctraderapi.com`) — the same mapping the\n * connect provider applies server-side when an account is auto-selected.\n \n `clientId` / `clientSecret` are the SST-sourced GLOBAL app credentials the\n * connect endpoint injects — identical across every Connection row (one\n * cTrader app), never persisted on a connection. We take them from the first\n * row that carries them.\n \n Accounts are deduped on `ctidTraderAccountId` first-wins: Spotware ids are\n * globally unique across logins, so a duplicate can only appear if the same\n * account somehow surfaced under two grants — first-wins keeps it\n * deterministic.\n \n `accounts` may be empty (no cTrader Connection at all), in which case we\n * return empty creds rather than throwing.\n /\n getCTraderAccounts(): Promise<{\n accounts: {\n ctidTraderAccountId: string;\n host: string;\n isLive: boolean;\n brokerName?: string;\n accountNumber?: string;\n accessToken: string;\n /\n The stable per-grant Connection key (`ctid:<userId>`) this account\n * belongs to. Every trading account under one cTrader login shares one\n * grant (one OAuth token), so this is the identifier the MCP server\n * passes to `refreshCTraderAccount()` to rotate the token for the whole\n * grant on a `CH_ACCESS_TOKEN_INVALID` expiry. Empty string when the\n * server did not supply one (legacy rows) — such an account can still\n * trade with its current token but cannot self-refresh.\n /\n accountIdentifier: string;\n }[];\n clientId: string;\n clientSecret: string;\n }>;\n /\n Pattern A: refresh a specific cTrader grant by its stable\n * `accountIdentifier` (`ctid:<userId>` from `getCTraderAccounts()`).\n \n cTrader access tokens live ~30 days; the `getCTraderAccounts()` /\n * credentials reads serve the STORED token without refreshing, so refresh is\n * the consumer's job. `@alfe.ai/ctrader-mcp` calls this when the cTrader Open\n * API rejects an account-auth with `CH_ACCESS_TOKEN_INVALID`, then re-runs\n * the socket handshake with the returned `accessToken`.\n \n Refreshing one grant rotates the single OAuth token that covers EVERY\n * trading account under that login. cTrader's refresh token itself does not\n * expire but may rotate on refresh (`rotatesRefreshToken: true`); connect\n * persists the rotated refresh token server-side, so the caller only needs\n * the new `accessToken`. Mirrors `refreshXeroAccountToken`.\n /\n refreshCTraderAccount(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n @deprecated Returns a single primary credential blob. Use\n * `getShopifyAccounts()` for the multi-account shape required by Pattern A\n * (`@alfe.ai/shopify-mcp` keys per-shop on the myshopify domain).\n /\n getShopifyCredentials(): Promise<{\n accessToken: string;\n shopDomain: string;\n shopGid: string;\n shopName: string;\n apiVersion: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Shopify. Returns every\n * agent-scoped Shopify Connection. One OAuth grant maps to one store, so the\n * stable per-call selector is the store's myshopify domain (`shopDomain`),\n * NOT `accountIdentifier` — the connect provider keys `accountIdentifier` on\n * the immutable shop GID (falling back to the domain), so `shopDomain` is the\n * value the LLM passes and the plugin routes on.\n \n Each entry is shaped by the connect provider's `buildCredentialsResponse`:\n * `{ accessToken, shopDomain, shopGid, shopName, apiVersion }` — offline\n * Shopify tokens never expire, so there is NO token / expiry field and no\n * refresh method (unlike Salesforce). The GraphQL Admin API authenticates\n * purely on `X-Shopify-Access-Token`; no client credentials are on the wire.\n /\n getShopifyAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n shopDomain: string;\n shopGid: string;\n shopName: string;\n apiVersion: string;\n }[];\n }>;\n /\n Pattern A: provider-parameterized multi-account credential fetch for the\n * social connectors (Bluesky, and the approval-gated backlog: X, Meta,\n * Threads, LinkedIn, Pinterest, TikTok, Reddit, YouTube).\n \n Unlike the bespoke `getGithubAccounts()` / `getXeroAccounts()` shapes,\n * this returns a UNIFORM normalized account shape so `@alfe.ai/social-mcp`'s\n * shared driver can require a single `account` selector on every\n * credential-touching tool regardless of platform. The backend\n * `api-agents/{provider}/accounts` route is already provider-generic; this\n * is the client-side normalization the plan (`do-we-need-any-moonlit-toucan`\n * Phase 0, step 5) calls for.\n \n `accountIdentifier` is the stable per-account selector the LLM should\n * pass back (for Bluesky: the account DID). `accessToken` carries whatever\n * the provider's `buildCredentialsResponse` bundles (for Bluesky: the JSON\n * session bundle — the driver parses the `accessJwt` out of it, or reads the\n * top-level `accessJwt` from `providerMetadata`-adjacent fields). Everything\n * else the driver needs for routing (handle, pdsHost, did, …) is on\n * `providerMetadata`.\n \n Token refresh is delegated to connect (never done in-plugin) via the\n * per-account route `POST /agent/connect/{provider}/accounts/{accountIdentifier}/refresh`\n * — call `refreshSocialAccount(provider, accountIdentifier)`. (The non-account\n * `POST /agent/connect/{provider}/refresh` route refreshes the provider's\n * PRIMARY connection, which is wrong under multi-account Pattern A.)\n /\n getSocialAccounts(provider: string): Promise<{\n provider: string;\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n accessToken: string;\n providerMetadata: Record<string, unknown>;\n connectedAt: string;\n }[];\n }>;\n /\n Pattern A: refresh a specific social Connection by its stable\n * `accountIdentifier` (for Bluesky: the account DID) via the\n * provider-generic per-account refresh route. The counterpart to\n * `getSocialAccounts(provider)`; `@alfe.ai/social-mcp` calls this on a\n * 401/ExpiredToken from the platform PDS/API, then re-fetches accounts to\n * pick up the rotated bundle.\n \n Refresh itself is ALWAYS delegated to connect — the plugin never calls\n * the platform's own refresh XRPC (e.g. `com.atproto.server.refreshSession`)\n * because connect owns the encrypted refresh token + rotation persistence\n * (Bluesky rotates the refreshJwt; a missed rotation kills the connection\n * after one refresh). The returned `accessToken` is whatever the provider's\n * `refreshToken` hook re-bundled (for Bluesky: the JSON session bundle with\n * the fresh `accessJwt`) — callers typically ignore it and re-fetch via\n * `getSocialAccounts` for a consistent shape.\n /\n refreshSocialAccount(provider: string, accountIdentifier: string): Promise<{\n accountIdentifier: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n}\n//# sourceMappingURL=connect-credentials.d.ts.map\n//#endregion\n//#region src/domains/database.d.ts\ndeclare class DatabaseApi extends ApiBase {\n registerDatabaseCredentials(): Promise<{\n connectionString: string;\n username: string;\n password: string;\n databases: string[];\n }>;\n reportDatabaseAudit(entry: {\n database: string;\n collection: string;\n operation: string;\n summary?: string;\n }): Promise<void>;\n}\n//# sourceMappingURL=database.d.ts.map\n//#endregion\n//#region src/domains/identity.d.ts\ndeclare class IdentityApi extends ApiBase {\n /\n Returns the calling agent's own identity context — `{ agentId, tenantId }`\n * decoded server-side from the agent API token. Used by the\n * `@alfe.ai/openclaw-identity` plugin to bootstrap context when the\n * OpenClaw daemon doesn't plumb `ctx.agentId` through to plugin hooks.\n * Plugins should cache this for the daemon's lifetime (single-agent-per-\n * process invariant). One HTTP round-trip per process activate; not for\n * per-call use.\n /\n whoami(): Promise<{\n agentId: string;\n tenantId: string;\n }>;\n resolveIdentity(args: {\n provider: string;\n platformId: string;\n kind?: \"user\" \| \"agent\" \| \"service\" \| \"bot\" \| \"workspace\";\n displayName?: string;\n }): Promise<{\n identityId: string \| null;\n status: string;\n created?: boolean;\n reason?: string;\n /\n Flattened auriclabs permission strings for the resolved identity\n * (scope-prefixed where applicable). Empty array on miss / org service\n * outage — the runtime gate fails closed in that case.\n /\n permissions: string[];\n }>;\n searchIdentities(args?: {\n q?: string;\n status?: string;\n limit?: number;\n }): Promise<{\n identities: unknown[];\n }>;\n getIdentityContext(identityId: string): Promise<{\n context: unknown;\n }>;\n mergeIdentities(survivorId: string, args: {\n mergedId: string;\n }): Promise<{\n ok: boolean;\n error?: string;\n }>;\n unmergeIdentity(identityId: string): Promise<{\n ok: boolean;\n error?: string;\n }>;\n addIdentityNote(identityId: string, args: {\n content: string;\n category?: string;\n }): Promise<{\n noteId: string \| null;\n }>;\n tagIdentity(identityId: string, args: {\n tag: string;\n action: \"add\" \| \"remove\";\n }): Promise<{\n ok: boolean;\n }>;\n getIdentityChangelog(identityId: string, args?: {\n limit?: number;\n cursor?: string;\n }): Promise<{\n entries: unknown[];\n cursor: string \| null;\n }>;\n rollbackIdentity(identityId: string, args: {\n targetVersion: number;\n }): Promise<{\n ok: boolean;\n entry?: unknown;\n }>;\n requestIdentityVerification(args: {\n claimedIdentityId: string;\n requestingIdentityId: string;\n requestingProvider: string;\n requestingPlatformId: string;\n preferredChannel?: \"mobile\" \| \"email\";\n /\n Phase 2: agent-supplied contact endpoint. When provided, the top-level\n * `preferredChannel` is ignored — the contact's channel wins.\n /\n contact?: {\n channel: \"email\" \| \"mobile\";\n value: string;\n };\n }): Promise<{\n verificationId: string;\n channel: string;\n deliveredTo: string;\n expiresAt: string;\n availableChannels: {\n channel: string;\n deliveredTo: string;\n }[];\n } \| {\n error: string;\n }>;\n confirmIdentityVerification(args: {\n claimedIdentityId: string;\n verificationId: string;\n phrase: string;\n }): Promise<{\n verified: boolean;\n identityId?: string;\n /* Phase 2: how the confirm resolved — Scenario A vs B. /\n action?: \"merged\" \| \"contact_verified\" \| \"already_confirmed\";\n error?: string;\n }>;\n /\n Update display-shape fields on an Identity. Body excludes `email` /\n * `phone` / `title` / `company` / `metadata` per Section D4 — contacts go\n * via the verify flow, title/company live on OrgMembership, metadata is\n * not agent-writable.\n /\n updateIdentity(identityId: string, args: {\n name?: string;\n avatarUrl?: string;\n timezone?: string;\n locale?: string;\n }): Promise<{\n ok: boolean;\n }>;\n /\n Phase 2 (Section H): server-side verification of a Google Chat sender via\n * the agent's existing Google OAuth credentials. Returns the resolved\n * identity (created or matched via Scenario-B email enrichment).\n /\n resolveGoogleChatSender(args: {\n senderUserId: string;\n spaceId?: string;\n }): Promise<{\n identityId: string \| null;\n status: string;\n }>;\n}\n//# sourceMappingURL=identity.d.ts.map\n//#endregion\n//#region src/domains/images.d.ts\ndeclare class ImagesApi extends ApiBase {\n /\n Generate an image from a text prompt and get back a STABLE, public URL\n * (served from the agent-assets CDN — it does not expire). Embed the returned\n * `imageUrl` in a reply as markdown to show it to the user.\n \n ASYNC: `gpt-image-1` routinely runs 30–60s, which exceeds the API Gateway\n * 30s ceiling, so this enqueues a job (`POST /agent/images/generate` →\n * `jobId`) then polls (`GET /agent/images/{jobId}`) until it completes. The\n * worker's real failure message (e.g. an unsupported `size`) surfaces via the\n * job's `error` field.\n /\n generateImage(args: {\n prompt: string;\n model?: string;\n size?: string;\n quality?: string;\n }): Promise<{\n imageUrl: string;\n model: string;\n }>;\n}\n//# sourceMappingURL=images.d.ts.map\n//#endregion\n//#region src/domains/integrations.d.ts\ndeclare class IntegrationsApi extends ApiBase {\n listIntegrations(): Promise<IntegrationInstall$1[]>;\n getIntegrationConfig(integrationId: string): Promise<IntegrationConfigResult$1>;\n updateIntegrationConfig(integrationId: string, config: Record<string, unknown>): Promise<void>;\n installIntegration(integrationId: string, options?: {\n version?: string;\n config?: Record<string, unknown>;\n }): Promise<IntegrationInstall$1>;\n removeIntegration(integrationId: string): Promise<IntegrationInstall$1>;\n getOAuthUrl(provider: string, scopes?: string[]): Promise<{\n url: string;\n provider: string;\n expiresIn: number;\n }>;\n getOAuthStatus(provider: string): Promise<{\n provider: string;\n connected: boolean;\n config?: Record<string, string>;\n }>;\n getRegistry(): Promise<{\n integrations: RegistryEntry$1[];\n }>;\n}\n//# sourceMappingURL=integrations.d.ts.map\n//#endregion\n//#region src/domains/memory.d.ts\ndeclare class MemoryApi extends ApiBase {\n memorySearch(query: string, opts?: {\n limit?: number;\n topic?: string;\n subtopic?: string;\n tag?: string;\n includeKnowledge?: boolean;\n }): Promise<{\n facts: {\n subject: string;\n predicate: string;\n object: string;\n since: string;\n confidence: number;\n }[];\n memories: {\n id: string;\n text: string;\n topic: string;\n subtopic: string;\n tag: string;\n importance: number;\n timestamp: number;\n score: number;\n }[];\n }>;\n memoryStore(text: string, opts?: {\n topic?: string;\n subtopic?: string;\n tag?: string;\n importance?: number;\n }): Promise<{\n memoryId: string;\n }>;\n memoryIngest(sessionKey: string, messages: {\n role: string;\n content: string;\n index: number;\n timestamp?: string;\n }[], metadata?: {\n channelId?: string;\n userId?: string;\n userName?: string;\n }, ingestEpoch?: number): Promise<{\n queued: boolean;\n messageCount: number;\n }>;\n memoryLoadContext(tier?: number, topicHint?: string): Promise<{\n tier: number;\n facts: {\n subject: string;\n predicate: string;\n object: string;\n since: string;\n }[];\n memories: {\n text: string;\n topic: string;\n subtopic: string;\n score: number;\n }[];\n tokenEstimate: number;\n formatted: string;\n }>;\n memoryLookupEntity(subject: string): Promise<{\n subject: string;\n triples: {\n tripleId: string;\n predicate: string;\n object: string;\n validFrom: string;\n validTo?: string;\n confidence: number;\n }[];\n }>;\n memoryNavigate(): Promise<{\n topics: {\n name: string;\n tripleCount: number;\n subtopics: string[];\n }[];\n cursor: string \| null;\n }>;\n memoryDelete(memoryId: string): Promise<{\n deleted: boolean;\n }>;\n memoryStats(): Promise<{\n vectorCount: number;\n tripleCount: number;\n storageEstimateBytes: number;\n lastIngestionAt?: string;\n }>;\n memoryLearn(args: {\n text: string;\n source?: string;\n sourceType?: \"file\" \| \"url\" \| \"inline\";\n metadata?: {\n sessionId?: string;\n channelId?: string;\n userName?: string;\n };\n }): Promise<{\n memoriesStored: number;\n triplesStored: number;\n chunks: number;\n source?: string;\n }>;\n memoryBootstrapStatus(): Promise<{\n synced: boolean;\n syncedAt?: string;\n sessionsBackfillSynced?: boolean;\n sessionsBackfillSyncedAt?: string;\n }>;\n memoryBootstrapStatusMark(scope?: \"files\" \| \"sessions\"): Promise<{\n synced: true;\n syncedAt: string;\n }>;\n}\n//# sourceMappingURL=memory.d.ts.map\n//#endregion\n//#region src/domains/secrets.d.ts\ndeclare class SecretsApi extends ApiBase {\n /\n Mint a fresh AES-256 data key for a specific (secret, field) pair. The\n * encryption context is rebuilt server-side from `auth.tenantId` + the body\n * fields including `fieldKey`; the agent cannot forge context for a scope\n * or field it doesn't own. Legacy single-envelope secrets are migrated to\n * `field#value` rows by the data migration, so call with `fieldKey: \"value\"`\n * to reach them.\n /\n generateSecretDataKey(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n }): Promise<GeneratedDataKey$1>;\n /\n Unwrap a wrapped data key so the agent can decrypt the envelope locally.\n * `fieldKey` MUST match the value supplied when the data key was generated\n * (it's bound into KMS encryption context); mismatch fails with\n * `InvalidCiphertextException`.\n /\n decryptSecretDataKey(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n dataKeyCiphertext: string;\n }): Promise<{\n plaintextKey: string;\n }>;\n /\n Create a new secret with one or more fields. Encrypted fields must arrive\n * pre-sealed (the agent has already obtained per-field data keys via\n * `generateSecretDataKey({ ..., fieldKey })` and AES-encrypted locally).\n * Plaintext fields ship the value inline.\n /\n createSecret(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n secretName: string;\n category?: SecretCategory$1;\n description?: string;\n tags?: string[];\n fields: {\n key: string;\n format?: FieldFormat$1;\n sensitivity: FieldSensitivity$1;\n value?: string;\n envelope?: EncryptedEnvelopeV1$1;\n }[];\n reason?: string;\n }): Promise<SecretAggregate$1>;\n /* Fetch the secret aggregate plus per-field encrypted envelopes. /\n getSecret(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n }): Promise<{\n aggregate: SecretAggregate$1;\n envelopes: FieldEnvelope$1[];\n }>;\n /* Fetch one field. Plaintext: value inline. Encrypted: envelope. /\n getSecretField(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n }): Promise<{\n key: string;\n sensitivity: FieldSensitivity$1;\n format?: FieldFormat$1;\n value?: string;\n envelope?: EncryptedEnvelopeV1$1;\n rotatedAt?: string;\n createdAt: string;\n updatedAt: string;\n }>;\n /* Add OR rotate one field. /\n setSecretField(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n sensitivity: FieldSensitivity$1;\n format?: FieldFormat$1;\n value?: string;\n envelope?: EncryptedEnvelopeV1$1;\n reason?: string;\n }): Promise<{\n fieldKey: string;\n rotated: boolean;\n }>;\n /* Remove one field. /\n removeSecretField(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n }): Promise<void>;\n /* Update secret-level metadata (name/description/tags/category). /\n updateSecretMetadata(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n secretName?: string;\n description?: string;\n tags?: string[];\n category?: SecretCategory$1;\n reason?: string;\n }): Promise<SecretAggregate$1>;\n /* List metadata for secrets in a scope. Optional filters route through the byFacet GSI. /\n listSecrets(args: {\n scope: SecretScope$1;\n scopeId: string;\n category?: SecretCategory$1;\n tag?: string;\n fieldKey?: string;\n }): Promise<SecretMetadata$1[]>;\n /* Bounded changelog read — metadata-only audit entries. /\n getSecretHistory(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n limit?: number;\n cursor?: string;\n }): Promise<{\n entries: ChangelogEntry$1[];\n nextCursor?: string;\n }>;\n /* Delete a secret (and all its field rows + tag rows + changelog rows). /\n deleteSecret(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n }): Promise<void>;\n /* Enumerate scopes (org/team/project/agent) this agent can access. /\n listSecretScopes(): Promise<ScopeInfo$1[]>;\n}\n//# sourceMappingURL=secrets.d.ts.map\n//#endregion\n//#region src/domains/teams.d.ts\ndeclare class TeamsApi extends ApiBase {\n getTeamsCredentials(): Promise<{\n agentId: string;\n tenantId: string;\n azureAppId: string;\n azureBotId: string;\n azureClientSecret: string;\n botDisplayName?: string;\n teamsTenantId?: string;\n serviceUrl?: string;\n }>;\n sendTeamsMessage(data: {\n conversationId: string;\n text?: string;\n adaptiveCard?: Record<string, unknown>;\n }): Promise<{\n ok: boolean;\n activityId: string;\n }>;\n listTeamsChannels(): Promise<{\n channels: {\n id: string;\n name: string;\n description?: string;\n }[];\n }>;\n}\n//# sourceMappingURL=teams.d.ts.map\n\n//#endregion\n//#region src/index.d.ts\ninterface AgentApiClient extends SyncApi, IntegrationsApi, WorkspaceApi, ConnectCredentialsApi, TeamsApi, ChatApi, SecretsApi, IdentityApi, MemoryApi, SearchApi, KnowledgeApi, DatabaseApi, MobileApi, RemoteApi, SelfApi, VoiceApi, ImagesApi, WebhooksApi {}\ndeclare class AgentApiClient extends ApiBase {\n constructor(config: AgentApiClientConfig);\n}\n//# sourceMappingURL=index.d.ts.map\n\n//#endregion\nexport { AgentApiClient, type AgentApiClientConfig, type AgentAvatarPresign, type AgentSelf, type AgentVoice, type AgentVoiceConfig, type AgentWebhook, type AgentWebhookDelivery, type AgentWorkspaceInfo, type ChangeRequestActorKind, type ChangeRequestOperation, type ChangeRequestResourceType, type ChangeRequestStatus, type ChangelogAction, type ChangelogActor, type ChangelogEntry, type CreatedAgentWebhook, type EncryptedEnvelopeV1, type Field, type FieldEnvelope, type FieldFormat, type FieldSensitivity, type FieldView, type GeneratedDataKey, type InstallToolErrorCaptureOptions, type IntegrationConfigResult, type IntegrationConfigSchemaField, type IntegrationInstall, type KnowledgeChangeRequest, type KnowledgeDoc, type KnowledgeProfile, type KnowledgeProfileLink, type KnowledgeScope, type KnowledgeScopeType, type KnowledgeSearchHit, type KnowledgeSearchResult, type MobileAvailableNumber, type MobileNumberInfo, type NewsArticle, type NewsProvider, type NewsResult, type ProposeScopeChangeInput, type RegistryEntry, type RemoteSessionInfo, type ScopeInfo, type SecretAggregate, type SecretCategory, type SecretMetadata, type SecretScope, type SharedFileEntry, type SyncAgentInfo, type SyncAgentStats, type SyncConfirmedUpload, type SyncFileEntry, type SyncManifest, type SyncManifestEntry, type SyncPresignedUrl, type SyncReconstructBundle, type SyncReconstructFile, type SyncSessionContent, type SyncSessionEntry, type ToolCaptureApi, type VoiceSttArgs, type VoiceSttResult, type VoiceTtsArgs, type VoiceTtsModel, type VoiceTtsResult, type WhatsAppTemplate, installToolErrorCapture };\n//# sourceMappingURL=index.d.ts.map","//#region src/types.d.ts\n/\n Minimal logger contract shared by every helper in the kit.\n \n Deliberately the narrowest shape in the fleet: some plugins declare\n * variadic loggers (`info(msg: string, ...args: unknown[])`), others\n * single-arg (`info(msg: string)`). Both are assignable to this. The kit\n * only ever calls with a single string.\n /\ninterface KitLogger {\n info(msg: string): void;\n warn(msg: string): void;\n error(msg: string): void;\n debug(msg: string): void;\n}\n//# sourceMappingURL=types.d.ts.map\n//#endregion\n//#region src/tools.d.ts\n/* Shape returned to OpenClaw from a tool `execute`. /\ninterface ToolResult {\n content: {\n type: \"text\";\n text: string;\n }[];\n details: unknown;\n isError?: boolean;\n}\ninterface ToolDef<TParameters = unknown> {\n name: string;\n description: string;\n label: string;\n parameters: TParameters;\n execute: (toolCallId: string, params: Record<string, unknown>) => Promise<ToolResult>;\n}\n/* Deliberately model-safe validation/usage failure. Other exceptions stay private. /\ndeclare class PublicToolError extends Error {\n readonly name = \"PublicToolError\";\n}\ndeclare function publicToolError(message: string): PublicToolError;\n/* Wrap bounded JSON in the OpenClaw tool-result envelope. /\ndeclare function ok(data: unknown): ToolResult;\n/* Wrap an explicitly public error in a captured OpenClaw error envelope. /\ndeclare function errResult(message: string): ToolResult;\n/\n Define a tool whose unexpected exceptions never expose provider, filesystem,\n * credential, or transport diagnostics to the model. Throw `PublicToolError`\n * only for a message deliberately safe for model display.\n /\ndeclare function defineTool<TParameters>(def: {\n name: string;\n description: string;\n parameters: TParameters;\n handler: (params: Record<string, unknown>) => Promise<unknown>;\n}): ToolDef<TParameters>;\n//# sourceMappingURL=tools.d.ts.map\n//#endregion\n//#region src/daemon.d.ts\ninterface IpcResponse {\n ok: boolean;\n error?: {\n message?: string;\n };\n [key: string]: unknown;\n}\ninterface IpcClient {\n on(event: string, handler: (...args: unknown[]) => void): void;\n request(method: string, params: Record<string, unknown>): Promise<IpcResponse>;\n start(): void;\n stop(): void;\n}\ninterface IpcModule {\n IPCClient: new (socketPath: string, log: KitLogger) => IpcClient;\n}\ninterface ConnectToDaemonOptions {\n pluginId: string;\n capabilities?: readonly string[];\n onMessage?: (msg: Record<string, unknown>) => void;\n standaloneNote?: string;\n}\ninterface ConnectToDaemonDependencies {\n loadIpcModule?: () => Promise<IpcModule>;\n}\ndeclare function connectToDaemon(socketPath: string, log: KitLogger, options: ConnectToDaemonOptions, dependencies?: ConnectToDaemonDependencies): Promise<IpcClient \| null>;\n//#endregion\n//#region src/sdk.d.ts\ninterface ResolveOpenClawSdkOptions {\n specifier?: string;\n exportName?: string;\n unresolvableNote?: string;\n}\ninterface ResolveOpenClawSdkDependencies {\n anchors?: readonly string[];\n globalPackageJsonPath?: string;\n requireFrom?: (anchor: string) => (specifier: string) => unknown;\n}\ndeclare function resolveOpenClawSdk<T = unknown>(log: KitLogger, options?: ResolveOpenClawSdkOptions, dependencies?: ResolveOpenClawSdkDependencies): T \| null;\n//# sourceMappingURL=sdk.d.ts.map\n\n//#endregion\n//#region src/activation.d.ts\n/\n Canonical activation-flag key for a plugin: `__alfe<Name>PluginActivated`.\n \n Accepts a short name (`\"google\"`, `\"google-chat\"`) or a full package name\n * (`\"@alfe.ai/openclaw-teams\"`); scope + `openclaw-` prefix are stripped\n * and the remainder PascalCased:\n \n getActivationKey(\"google\") → \"__alfeGooglePluginActivated\"\n * getActivationKey(\"google-chat\") → \"__alfeGoogleChatPluginActivated\"\n * getActivationKey(\"@alfe.ai/openclaw-teams\") → \"__alfeTeamsPluginActivated\"\n /\ndeclare function getActivationKey(name: string): string;\n/* True when the activation flag for `key` is currently set. /\ndeclare function isActivated(key: string): boolean;\n/\n Clear the activation flag so a later start can run again.\n \n Call this LAST in stop/deactivate paths — after side effects are stopped\n * (see the ordering rule in the module doc). Also exported for soft-failure\n * paths inside a `guardedStart` fn that want to log at a custom level and\n * return normally instead of throwing.\n /\ndeclare function resetActivation(key: string): void;\n/\n Run a service start exactly once per activation cycle.\n \n - If the flag is already set, logs at debug and returns `false` (skipped).\n * - Otherwise sets the flag and runs `fn`.\n * - If `fn` throws synchronously OR returns a promise that rejects, the\n * flag is RESET (so a later activate can retry) and the error is logged.\n * Errors are not rethrown — matching fleet behavior where a failed start\n * must never crash the host's plugin loader.\n \n Returns `true` when the start was initiated (even if an async portion\n * later fails), `false` when skipped or when `fn` threw synchronously.\n \n Note: cleaning up partial side effects on failure is `fn`'s job (throw\n * only after tearing down what was started); the kit only guarantees the\n * flag reset happens after `fn` has failed — i.e. after `fn`'s own cleanup.\n */\ndeclare function guardedStart(key: string, log: KitLogger, fn: () => void \| Promise<void>): boolean;\n//# sourceMappingURL=activation.d.ts.map\n\n//#endregion\nexport { type ConnectToDaemonDependencies, type ConnectToDaemonOptions, type IpcClient, type IpcResponse, type KitLogger, PublicToolError, type ResolveOpenClawSdkDependencies, type ResolveOpenClawSdkOptions, type ToolDef, type ToolResult, connectToDaemon, defineTool, errResult, getActivationKey, guardedStart, isActivated, ok, publicToolError, resetActivation, resolveOpenClawSdk };\n//# sourceMappingURL=index.d.ts.map"],"mappings":";;;;;;;KAsTK+D,kBAAAA;UACKC,cAAAA;aACGD;;;;UAIHE,kBAAAA;;;;;aAKGF;;;;;;;;;;;;;UAaHG,qBAAAA;WACCD;;;;UAIDE,oBAAAA;;;;UAIAC,gBAAAA;aACGL;;;;SAIJI;;;;KAIJE,yBAAAA;KACAC,sBAAAA;KACAC,mBAAAA;KACAC,sBAAAA;;UAEKC,sBAAAA;;aAEGV;;gBAEGM;aACHC;;;;UAIHC;;gBAEMC;;;gBAGAA;;;;;;;;UAQNE,uBAAAA;gBACML;aACHC;;;;;;;;;;;;UAYHK,YAAAA;;;;;;;;;;;AAxCiB;AACH;AACG;;UChVjBuC,UAAAA,CDoVGnD;SAEGM,EAAAA;QACHC,EAAAA,MAAAA;QAIHC,EAAAA,MAAAA;;SAKMC,EAAAA,OAAAA;EAAsB,OAAA,CAAA,EAAA,OAAA;AAAA;UCxV5B2C,ODgWuB,CAAA,cAAA,OAAA,CAAA,CAAA;QACjB9C,MAAAA;aACHC,EAAAA,MAAAA;EAAsB,KAAA,EAAA,MAAA;EAAA,UAYzBK,EC1WIyC,WD0WQ;wCCzWkBC,4BAA4BC,QAAQJ;;;;;UCV3D,eAAA;EFgSZnD;EACKC,aAAAA,EAAAA,OAAc;EAKdC;EAkBAC,SAAAA,EAAAA,MAAAA;AACmB;AAIC;;;;;AASD;AAKxBI,UE9TY,YAAA,CF8TU;EACtBC,eAAAA,CAAAA,KAAAA,EAAmB,MAAA,EAAA,KAAA,EAAA;IACnBC,KAAAA,CAAAA,EAAAA,MAAAA;IAEKC,SAAAA,CAAAA,EE/T+B,kBF+TT;IAAA,OAAA,CAAA,EAAA,MAAA;ME9T3B,OFgUQV,CEhUA,qBFgUAA,CAAAA;YAEGM,EAAAA,EEhUA,OFgUAA,CAAAA;IACHC,MAAAA,EEjUqB,cFiUrBA,EAAAA;;iBAMGE,CAAAA,SAAAA,EErUa,kBFqUbA,EAAAA,OAAAA,EAAAA,MAAAA,CAAAA,EErUmD,OFqUnDA,CErU2D,gBFqU3DA,CAAAA;eAGAA,CAAAA,SAAAA,EErUD,kBFqUCA,EAAAA,OAAAA,EAAAA,MAAAA,EAAAA,IAQiB,CARjBA,EAAAA;IAAsB,KAAA,CAAA,EAAA,MAAA;IAQ5BE,MAAAA,CAAAA,EAAAA,MAAAA;EAAuB,CAAA,CAAA,EE1U5B,OF0U4B,CAAA;IACjBL,KAAAA,EE3UM,YF2UNA,EAAAA;IACHC,UAAAA,EAAAA,MAAAA,GAAAA,IAAAA;EAAsB,CAAA,CAAA;EAYzBK,YAAAA,CAAAA,SAAY,EErVP,kBFqVO,EAAA,OAAA,EAAA,MAAA,EAAA,QAAA,EAAA,MAAA,EAAA,KAAA,EAAA;;MEjVjB;;IDrCKuC,IAAAA,EAAAA,MAAU;EAQVC,CAAAA,CAAAA;EAAO,aAAA,CAAA,SAAA,ECgCF,kBDhCE,EAAA,OAAA,EAAA,MAAA,EAAA,QAAA,EAAA,MAAA,EAAA,OAAA,EAAA,MAAA,EAAA,KAAA,EAAA;IAIHC,WAAAA,CAAAA,EAAAA,MAAAA;IAC0BC,OAAAA,CAAAA,EAAAA,MAAAA;MCgCnC,ODhCuEH,CAAAA;IAARI,QAAAA,EAAAA,MAAAA;EAAO,CAAA,CAAA;gCCmC5D,4CAEJ,0BACN,QAAQ;qCAGE,yCAtCc;aAwCP;IArDL,KAAA,CAAA,EAAA,MAAe;IAaf,MAAA,CAAA,EAAA,MAAY;EAAA,CAAA,CAAA,EAyCxB,OAzCwB,CAAA;IAGY,cAAA,EAsCV,sBAtCU,EAAA;IAC5B,UAAA,EAAA,MAAA,GAAA,IAAA;;;;;;AFuSHpD,UG1RO,YAAA,CH0Rc;EAKrBC,IAAAA,CAAAA,OAAAA,EAAAA,MAAAA,EAAAA,GAAoB,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,IAAA;EAIpBC,IAAAA,CAAAA,OAAAA,EAAAA,MAAgB,EAAA,GAAA,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,IAAA;EAAA,KAAA,CAAA,OAAA,EAAA,MAAA,EAAA,GAAA,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,IAAA;OACbL,CAAAA,OAAAA,EAAAA,MAAAA,EAAAA,GAAAA,IAAAA,EAAAA,OAAAA,EAAAA,CAAAA,EAAAA,IAAAA;;AAIgB,UGjSZ,SAAA,CHiSY;EAIxBM,YAAAA,CAAAA,EAAAA,OAAAA;EACAC,MAAAA,EGpSK,YHoSLA;EACAC,YAAAA,CAAAA,IAAAA,EGpSgB,OHoSG,CGpSK,OHoSL,CAAA,EAAA,OAGdE,CAHc,EAAA;IACnBD,KAAAA,CAAAA,EAAAA,MAAAA,EAAAA;EAEKC,CAAAA,CAAAA,EAAAA,IAAAA;EAAsB,EAAA,CAAA,QAAA,EAAA,MAAA,EAAA,OAAA,EAAA,CAAA,GAAA,IAAA,EAAA,OAAA,EAAA,EAAA,GAAA,OAAA,EAAA,QAAA,EAAA;IAEnBV,QAAAA,CAAAA,EAAAA,MAAAA;MAEGM,IAAAA;;UGxRC,eAAA;EF9DP6C,EAAAA,EAAAA,MAAAA;EAQAC,IAAAA,EAAAA,MAAO;EAAA,WAAA,EAAA,MAAA;SAIHC,EAAAA,MAAAA;UAC0BC,CAAAA,GAAAA,EEsDxB,SFtDwBA,CAAAA,EAAAA,IAAAA;YAAoCH,CAAAA,GAAAA,EEuD1D,SFvD0DA,CAAAA,EAAAA,IAAAA;;;;cG5BtE,QAAQ"}

package/dist/plugin.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"plugin.d.ts","names":["ChangelogAction","ChangelogActor","ChangelogEntry","ChangelogEntry$1","EncryptedEnvelopeV1","EncryptedEnvelopeV1$1","Field","FieldEnvelope","FieldEnvelope$1","FieldFormat","FieldFormat$1","FieldSensitivity","FieldSensitivity$1","FieldView","GeneratedDataKey","GeneratedDataKey$1","IntegrationConfigResult","IntegrationConfigResult$1","IntegrationConfigSchemaField","IntegrationInstall","IntegrationInstall$1","RegistryEntry","RegistryEntry$1","ScopeInfo","ScopeInfo$1","SecretAggregate","SecretAggregate$1","SecretCategory","SecretCategory$1","SecretMetadata","SecretMetadata$1","SecretScope","SecretScope$1","ToolCaptureApi","InstallToolErrorCaptureOptions","installToolErrorCapture","AgentApiClientConfig","AgentApiTransport","Headers","BodyInit","Uint8Array","Response","Promise","RequestInit","AbortSignal","T","ApiBase","AgentWorkspaceInfo","WorkspaceApi","Record","SyncAgentInfo","SyncManifestEntry","SyncManifest","SyncPresignedUrl","SyncConfirmedUpload","SyncReconstructFile","SyncReconstructBundle","SyncAgentStats","SyncFileEntry","SyncSessionEntry","SyncSessionContent","SharedFileEntry","SyncApi","KnowledgeScopeType","KnowledgeScope","KnowledgeSearchHit","KnowledgeSearchResult","KnowledgeProfileLink","KnowledgeProfile","ChangeRequestResourceType","ChangeRequestOperation","ChangeRequestStatus","ChangeRequestActorKind","KnowledgeChangeRequest","ProposeScopeChangeInput","KnowledgeDoc","KnowledgeApi","MobileNumberInfo","MobileAvailableNumber","WhatsAppTemplate","MobileApi","RemoteSessionInfo","RemoteApi","AgentVoiceConfig","AgentSelf","AgentAvatarPresign","AgentVoice","SelfApi","VoiceTtsModel","VoiceTtsArgs","VoiceTtsResult","Buffer","VoiceSttArgs","VoiceSttResult","VoiceApi","NewsProvider","NewsArticle","NewsResult","SearchApi","AgentWebhook","CreatedAgentWebhook","AgentWebhookDelivery","WebhooksApi","ChatApi","ConnectCredentialsApi","DatabaseApi","IdentityApi","ImagesApi","IntegrationsApi","MemoryApi","SecretsApi","TeamsApi","AgentApiClient","KitLogger","ToolResult","ToolDef","TParameters","Record","Promise","PublicToolError","Error","publicToolError","ok","errResult","defineTool","IpcResponse","IpcClient","IpcModule","ConnectToDaemonOptions","ConnectToDaemonDependencies","connectToDaemon","ResolveOpenClawSdkOptions","ResolveOpenClawSdkDependencies","resolveOpenClawSdk","T","getActivationKey","isActivated","resetActivation","guardedStart"],"sources":["../../agent-api-client/dist/index.d.ts","../../openclaw-plugin-kit/dist/index.d.ts","../src/types.ts","../src/runtime.ts","../src/plugin.ts"],"sourcesContent":["import { ChangelogAction, ChangelogActor, ChangelogEntry, ChangelogEntry as ChangelogEntry$1, EncryptedEnvelopeV1, EncryptedEnvelopeV1 as EncryptedEnvelopeV1$1, Field, FieldEnvelope, FieldEnvelope as FieldEnvelope$1, FieldFormat, FieldFormat as FieldFormat$1, FieldSensitivity, FieldSensitivity as FieldSensitivity$1, FieldView, GeneratedDataKey, GeneratedDataKey as GeneratedDataKey$1, IntegrationConfigResult, IntegrationConfigResult as IntegrationConfigResult$1, IntegrationConfigSchemaField, IntegrationInstall, IntegrationInstall as IntegrationInstall$1, RegistryEntry, RegistryEntry as RegistryEntry$1, ScopeInfo, ScopeInfo as ScopeInfo$1, SecretAggregate, SecretAggregate as SecretAggregate$1, SecretCategory, SecretCategory as SecretCategory$1, SecretMetadata, SecretMetadata as SecretMetadata$1, SecretScope, SecretScope as SecretScope$1 } from \"@alfe/types\";\n\n//#region src/tool-error-capture.d.ts\n\n/*\n Tool-error capture for Alfe OpenClaw plugins.\n \n OpenClaw converts a thrown tool handler into a model-facing `tool_result`\n * WITHOUT logging, and most Alfe plugins catch-and-return an error result the\n * same silent way — so tool failures never appear in the runtime's output and\n * therefore never reach Sentry (the gateway daemon supervises the OpenClaw\n * process and reports error-looking output lines to the `agent-runtime`\n * project — see packages/gateway/src/runtime-output-monitor.ts).\n \n `installToolErrorCapture(api, { plugin })` closes that gap at the ONE choke\n * point every plugin already has: it wraps `api.registerTool` so every tool's\n * `execute` emits a deterministic, detector-matched line on failure:\n \n [ERROR] alfe-tool plugin=<plugin> tool=<name> <thrown\|result-error>: <msg> (at <first-frame>)\n \n The `[ERROR]` prefix at line start is exactly what the daemon's\n * `ErrorLineDetector` classifies as an error-log block, so the failure lands\n * in Sentry fingerprinted by its normalized message — no Sentry SDK inside\n * the plugin process, no new dependency. Behavior toward OpenClaw and the\n * model is UNCHANGED: throws are rethrown, results returned as-is.\n /\n/\n Minimal shape of the OpenClaw plugin api this helper relies on. Method\n * syntax on purpose — TS checks method signatures bivariantly, so each\n * plugin's own concretely-typed `registerTool(tool: ToolDef): void` is\n * accepted without casts.\n /\ninterface ToolCaptureApi {\n registerTool(...args: never[]): unknown;\n}\ninterface InstallToolErrorCaptureOptions {\n /* Plugin package short-name for attribution (e.g. \"openclaw-secrets\"). /\n plugin: string;\n /\n Line sink — defaults to writing `process.stderr` directly (the plugin\n * runs in-process in OpenClaw, so this lands on the runtime's stderr, which\n * the daemon supervises — and a console patch can't reformat it away).\n * Injectable for tests.\n /\n emit?: (line: string) => void;\n}\n/\n Wrap `api.registerTool` so every tool registered AFTER this call gets\n * failure capture. Handles both OpenClaw registration signatures:\n * `registerTool(toolDef)` and `registerTool((ctx) => toolDef, opts)`.\n * Call once, first thing in the plugin's `activate`/`register` entry.\n * Never throws.\n /\ndeclare function installToolErrorCapture(api: ToolCaptureApi, options: InstallToolErrorCaptureOptions): void;\n//# sourceMappingURL=tool-error-capture.d.ts.map\n//#endregion\n//#region src/transport.d.ts\n/\n Shared HTTP transport for the Agent API client — request core, retry\n * policy, error formatting, and the `ApiBase` class the domain method\n * groups under `./domains/` build on.\n /\ninterface AgentApiClientConfig {\n apiKey: string;\n apiUrl: string;\n}\n/\n Encode each path segment but keep the `/` separators — `encodeURIComponent`\n * would escape the slashes too, breaking greedy proxy routes.\n /\n\ndeclare class AgentApiTransport {\n private readonly apiKey;\n private readonly apiUrl;\n constructor(config: AgentApiClientConfig);\n /\n Binary sibling of `request<T>()`. `request()` forces\n * `Content-Type: application/json` and parses a `{ data: T }` envelope,\n * neither of which fits a raw-audio flow (voice TTS/STT), so those go\n * through this instead. Auth (Bearer), the request budget, and the single\n * retry policy on transient 5xx / network errors is kept in sync with\n * `request()`. Safe read methods retry once by default; mutation methods do\n * not, because a response can be lost after a handler or provider call has\n * already succeeded.\n /\n rawRequest(path: string, init: {\n method: string;\n headers: Headers;\n body?: BodyInit \| Uint8Array;\n }, extra?: {\n retry?: boolean;\n }): Promise<Response>;\n /\n @param extra.timeoutMs Per-request abort timeout (default REQUEST_TIMEOUT_MS).\n * Long endpoints (image generation) pass a larger value so the gateway's\n * own timeout wins with a readable status instead of a client-side abort.\n * @param extra.retry Whether to retry once on transient failures. Safe reads\n * (GET/HEAD/OPTIONS) default to true; mutations default to false. Set true\n * only when the endpoint's server-side contract is explicitly idempotent.\n * @param extra.signal Optional caller cancellation combined with the client's\n * own timeout budget. Aborting either signal cancels the request.\n /\n request<T>(path: string, options?: RequestInit, extra?: {\n timeoutMs?: number;\n retry?: boolean;\n signal?: AbortSignal;\n }): Promise<T>;\n}\n/\n Base class for the domain method groups. Holds the shared transport;\n * `AgentApiClient` assembles the groups onto one class via `applyMixins`\n * (prototype copy), so methods keep their original `this`-on-the-client\n * call shape.\n /\ndeclare class ApiBase {\n protected readonly transport: AgentApiTransport;\n constructor(transport: AgentApiTransport);\n}\n//# sourceMappingURL=transport.d.ts.map\n//#endregion\n//#region src/domains/workspace.d.ts\n/* Response of GET /agent/workspace (services/agents). /\ninterface AgentWorkspaceInfo {\n templateKey?: string;\n defaultModel?: string;\n installedFrom?: {\n templateKey: string;\n authorTenantId: string;\n version: number;\n };\n runtime?: string;\n teams?: {\n teamId: string;\n name: string;\n description?: string;\n parentTeamId?: string;\n }[];\n projects?: {\n projectId: string;\n name: string;\n description?: string;\n status: string;\n parentProjectId?: string;\n }[];\n teamIds?: string[];\n projectIds?: string[];\n}\ndeclare class WorkspaceApi extends ApiBase {\n /\n GET /agent/workspace — workspace config for the authenticated agent\n * (template assignment, default model, org roster).\n /\n getWorkspace(): Promise<AgentWorkspaceInfo>;\n /\n GET /templates/{key}/files — persona/workspace file contents for a\n * template the agent has access to. Pass `version` to pin to the version\n * the agent was installed from (omit → the endpoint resolves `latest`).\n /\n getTemplateFiles(templateKey: string, opts?: {\n version?: number;\n }): Promise<{\n files: Record<string, string>;\n }>;\n}\n//# sourceMappingURL=workspace.d.ts.map\n//#endregion\n//#region src/domains/sync.d.ts\ninterface SyncAgentInfo {\n agentId: string;\n tenantId: string;\n displayName: string;\n s3Prefix: string;\n status: \"stale\" \| \"syncing\" \| \"synced\";\n fileCount?: number;\n totalSize?: number;\n lastSync?: string;\n}\ninterface SyncManifestEntry {\n hash: string;\n size: number;\n modified: string;\n etag?: string;\n storageClass?: string;\n compressed?: boolean;\n}\ninterface SyncManifest {\n version: 1;\n agentId: string;\n lastSync: string;\n files: Record<string, SyncManifestEntry>;\n}\ninterface SyncPresignedUrl {\n path: string;\n url: string;\n expiresAt: string;\n}\ninterface SyncConfirmedUpload {\n filePath: string;\n hash: string;\n size: number;\n storageClass: \"STANDARD\" \| \"GLACIER_IR\";\n syncedAt: string;\n}\ninterface SyncReconstructFile {\n path: string;\n size: number;\n url: string;\n storageClass?: string;\n compressed?: boolean;\n}\ninterface SyncReconstructBundle {\n agentId: string;\n mode: \"full\" \| \"active\" \| \"memory\";\n fileCount: number;\n totalSize: number;\n files: SyncReconstructFile[];\n expiresAt: string;\n}\ninterface SyncAgentStats {\n agentId: string;\n standardBytes: number;\n glacierBytes: number;\n fileCount: number;\n lastSyncAt: string \| null;\n}\ninterface SyncFileEntry {\n filePath: string;\n size: number;\n modified: string;\n contentHash: string;\n storageClass?: string;\n compressed?: boolean;\n}\ninterface SyncSessionEntry {\n sessionId: string;\n size: number;\n lastModified: string;\n storageClass?: string;\n isArchived: boolean;\n}\ninterface SyncSessionContent {\n sessionId: string;\n content: string;\n compressed: boolean;\n}\ninterface SharedFileEntry {\n filePath: string;\n fileName: string;\n size: number;\n contentType?: string;\n}\ndeclare class SyncApi extends ApiBase {\n syncRegister(args?: {\n displayName?: string;\n }): Promise<{\n agent: SyncAgentInfo;\n }>;\n syncGetManifest(): Promise<SyncManifest>;\n syncPresign(args: {\n files: {\n path: string;\n operation: \"put\" \| \"get\";\n contentType?: string;\n }[];\n }): Promise<{\n urls: SyncPresignedUrl[];\n }>;\n syncConfirmUpload(args: {\n filePath: string;\n hash: string;\n size: number;\n storageClass?: \"STANDARD\" \| \"GLACIER_IR\";\n }): Promise<SyncConfirmedUpload>;\n syncReconstruct(args: {\n mode: \"full\" \| \"active\" \| \"memory\";\n }): Promise<SyncReconstructBundle>;\n syncGetStats(): Promise<SyncAgentStats>;\n syncListFiles(args?: {\n prefix?: string;\n }): Promise<{\n files: SyncFileEntry[];\n }>;\n syncListSessions(): Promise<{\n sessions: SyncSessionEntry[];\n }>;\n syncGetSession(sessionId: string): Promise<SyncSessionContent>;\n syncDeleteFile(filePath: string): Promise<{\n removed: boolean;\n }>;\n sharedListFiles(args: {\n scope: \"org\" \| \"team\" \| \"project\";\n scopeId: string;\n limit?: number;\n cursor?: string;\n }): Promise<{\n files: SharedFileEntry[];\n nextCursor: string \| null;\n }>;\n sharedDownloadUrl(args: {\n scope: \"org\" \| \"team\" \| \"project\";\n scopeId: string;\n filePath: string;\n }): Promise<{\n downloadUrl: string;\n expiresIn: number;\n }>;\n}\n//# sourceMappingURL=sync.d.ts.map\n//#endregion\n//#region src/domains/knowledge.d.ts\ntype KnowledgeScopeType = \"org\" \| \"team\" \| \"project\";\ninterface KnowledgeScope {\n scopeType: KnowledgeScopeType;\n scopeId: string;\n name: string;\n}\ninterface KnowledgeSearchHit {\n id: string;\n text: string;\n /* Normalized relevance in (0,1]; higher = closer. /\n score: number;\n scopeType: KnowledgeScopeType;\n scopeId: string;\n /\n Provenance of the hit. All live results are `\"doc\"`; `\"fact\"` only ever\n * appears for legacy vectors indexed before the facts primitive was removed\n * (the search index stays tolerant of them). Treat every hit as a doc.\n /\n source: \"doc\" \| \"fact\";\n /* The canonical file under shared/<scope>/ (present on doc hits). /\n filePath?: string;\n /* Legacy-only: the id of a pre-removal fact vector. /\n factId?: string;\n}\ninterface KnowledgeSearchResult {\n results: KnowledgeSearchHit[];\n /* True when fan-out breadth was capped (more member scopes than the cap). /\n truncatedScopes: boolean;\n}\ninterface KnowledgeProfileLink {\n label: string;\n url: string;\n}\ninterface KnowledgeProfile {\n scopeType: KnowledgeScopeType;\n scopeId: string;\n about: string \| null;\n description: string \| null;\n links: KnowledgeProfileLink[];\n updatedAt: string \| null;\n updatedBy: string \| null;\n}\ntype ChangeRequestResourceType = \"doc\" \| \"profile\";\ntype ChangeRequestOperation = \"create\" \| \"update\" \| \"delete\";\ntype ChangeRequestStatus = \"open\" \| \"approved\" \| \"rejected\" \| \"withdrawn\" \| \"superseded\";\ntype ChangeRequestActorKind = \"human\" \| \"agent\";\n/* Public projection of a change request (mirrors `PublicChangeRequest` in services/org). /\ninterface KnowledgeChangeRequest {\n changeRequestId: string;\n scopeType: KnowledgeScopeType;\n scopeId: string;\n resourceType: ChangeRequestResourceType;\n operation: ChangeRequestOperation;\n targetPath: string \| null;\n baseVersionId: string \| null;\n proposedContentType: string \| null;\n status: ChangeRequestStatus;\n proposerId: string;\n proposerKind: ChangeRequestActorKind;\n rationale: string;\n reviewerId: string \| null;\n reviewerKind: ChangeRequestActorKind \| null;\n reviewedAt: string \| null;\n reviewNote: string \| null;\n appliedRef: string \| null;\n createdAt: string;\n updatedAt: string;\n}\n/* Per-type proposal payload for `proposeScopeChange`. /\ninterface ProposeScopeChangeInput {\n resourceType: ChangeRequestResourceType;\n operation: ChangeRequestOperation;\n /* Why the change is proposed — shown to the reviewer. /\n rationale: string;\n /* doc: the path the proposal applies to (e.g. designs/data-center.md). /\n targetPath?: string;\n /* doc create/update: the staged body to upload (markdown or other text). /\n content?: string;\n /* doc create/update: content type of the staged body (default text/markdown). /\n contentType?: string;\n /* profile: the proposed value ({ about, description, links }). /\n proposedValue?: unknown;\n}\ninterface KnowledgeDoc {\n filePath: string;\n fileName: string;\n contentType?: string;\n size: number;\n uploadedBy?: string;\n createdAt: string;\n updatedAt: string;\n}\ndeclare class KnowledgeApi extends ApiBase {\n /\n Semantic search across the agent's member scopes. Fan-out is gated\n * server-side by `listScopes` set-inclusion (fail-closed). Pass\n * `scopeType` + `scopeId` to narrow to one scope; a non-member scope\n * yields empty results (never a cross-scope leak).\n /\n knowledgeSearch(query: string, opts?: {\n limit?: number;\n scopeType?: KnowledgeScopeType;\n scopeId?: string;\n }): Promise<KnowledgeSearchResult>;\n /* Enumerate the scopes (org + teams + projects) this agent belongs to. /\n listScopes(): Promise<{\n scopes: KnowledgeScope[];\n }>;\n /* Read a scope's structured knowledge profile (after membership check). /\n getScopeProfile(scopeType: KnowledgeScopeType, scopeId: string): Promise<KnowledgeProfile>;\n /\n Open a change request against a scope's knowledge resource. For a doc\n * create/update, `services/org` returns a presigned staging PUT; this method\n * uploads the proposed `content` to it (echoing the same Content-Type that\n * was signed), mirroring `writeScopeDoc`. The staged body is applied to the\n * canonical doc — attributed to this agent — only when a reviewer approves.\n /\n proposeScopeChange(scopeType: KnowledgeScopeType, scopeId: string, input: ProposeScopeChangeInput): Promise<KnowledgeChangeRequest>;\n /\n List the agent's OWN change requests in a scope (filtered server-side to\n * this agent as proposer). Pass `status` to narrow to open / approved / etc.\n /\n listScopeChangeRequests(scopeType: KnowledgeScopeType, scopeId: string, opts?: {\n status?: ChangeRequestStatus;\n limit?: number;\n cursor?: string;\n }): Promise<{\n changeRequests: KnowledgeChangeRequest[];\n nextCursor: string \| null;\n }>;\n /* List a scope's docs (the org-files corpus; mirrored to shared/<scope>/). /\n listScopeDocs(scopeType: KnowledgeScopeType, scopeId: string, opts?: {\n limit?: number;\n cursor?: string;\n }): Promise<{\n files: KnowledgeDoc[];\n nextCursor: string \| null;\n }>;\n /\n Read the full text of a scope doc. Resolves a presigned download URL\n * from `services/org`, then fetches the bytes directly from S3 (the one\n * legitimate raw fetch in a plugin — same pattern as sync).\n /\n readScopeDoc(scopeType: KnowledgeScopeType, scopeId: string, filePath: string, opts?: {\n maxBytes?: number;\n }): Promise<{\n filePath: string;\n text: string;\n }>;\n /\n Write (create or overwrite) a scope doc. Two-step presigned upload:\n * `services/org` returns a signed URL plus `requiredHeaders` (author /\n * authorKind / message as `x-amz-meta-`) that MUST be sent verbatim on\n the PUT, alongside the same `Content-Type` that was signed. Author and\n * authorKind are server-set from the agent token — never trusted here.\n /\n writeScopeDoc(scopeType: KnowledgeScopeType, scopeId: string, filePath: string, content: string, opts?: {\n contentType?: string;\n message?: string;\n }): Promise<{\n filePath: string;\n }>;\n}\n//# sourceMappingURL=knowledge.d.ts.map\n//#endregion\n//#region src/domains/mobile.d.ts\n/* Response of GET /mobile/numbers for an agent (services/mobile). /\ninterface MobileNumberInfo {\n phoneNumber: string;\n countryCode: string;\n monthlyPrice?: number;\n status: string;\n errorMessage?: string;\n}\n/* One purchasable number from GET /mobile/numbers/search. /\ninterface MobileAvailableNumber {\n number: string;\n friendlyName: string;\n locality: string;\n region: string;\n country: string;\n}\n/* Approved WhatsApp content template from GET /mobile/whatsapp/templates. /\ninterface WhatsAppTemplate {\n contentSid: string;\n name: string;\n language: string;\n body: string;\n variables: Record<string, string>;\n category?: string;\n}\ndeclare class MobileApi extends ApiBase {\n getMobileNumber(): Promise<MobileNumberInfo>;\n searchMobileNumbers(args?: {\n country?: string;\n query?: string;\n }): Promise<{\n numbers: MobileAvailableNumber[];\n monthlyPrice: number;\n }>;\n assignMobileNumber(args: {\n phoneNumber: string;\n countryCode: string;\n }): Promise<{\n phoneNumber: string;\n countryCode: string;\n status: \"pending\";\n }>;\n releaseMobileNumber(): Promise<{\n released: true;\n }>;\n sendSms(args: {\n to: string;\n body: string;\n }): Promise<{\n sent: true;\n sid: string;\n }>;\n startOutboundCall(args: {\n to: string;\n }): Promise<{\n callSid: string;\n status: string;\n }>;\n getWhatsAppSession(to: string): Promise<{\n active: boolean;\n expiresAt?: string;\n }>;\n sendWhatsAppMessage(args: {\n to: string;\n body: string;\n }): Promise<{\n sent: true;\n sid: string;\n }>;\n sendWhatsAppTemplate(args: {\n to: string;\n contentSid: string;\n contentVariables: Record<string, string>;\n bodyPreview?: string;\n }): Promise<{\n sent: true;\n sid: string;\n }>;\n listWhatsAppTemplates(): Promise<{\n templates: WhatsAppTemplate[];\n }>;\n}\n//# sourceMappingURL=mobile.d.ts.map\n//#endregion\n//#region src/domains/remote.d.ts\ninterface RemoteSessionInfo {\n sessionId: string;\n agentId: string;\n surface: \"browser\" \| \"terminal\";\n status: \"agent_driving\" \| \"awaiting_human\" \| \"human_in_control\" \| \"resuming\" \| \"completed\" \| \"expired\" \| \"failed\";\n url?: string;\n instructions?: string;\n requestedAt?: string;\n}\ndeclare class RemoteApi extends ApiBase {\n requestBrowserTakeover(args: {\n instructions: string;\n url?: string;\n conversationId?: string;\n }): Promise<{\n sessionId: string;\n status: string;\n }>;\n getRemoteSession(sessionId: string): Promise<RemoteSessionInfo>;\n completeRemoteSession(sessionId: string): Promise<{\n ok: boolean;\n }>;\n}\n//# sourceMappingURL=remote.d.ts.map\n//#endregion\n//#region src/domains/self.d.ts\n/* Voice settings — core agent config. Mirrors `VoiceConfig` in `@alfe/types`. /\ninterface AgentVoiceConfig {\n /* ElevenLabs voice ID; platform default when unset. /\n voiceId?: string;\n ttsModel?: string;\n enabled?: boolean;\n}\n/\n The agent's own public identity, as returned by `updateSelf`, `generateAvatar`,\n * `presignAvatar`'s finalize (`finalizeAvatar`). This is the public agent\n * projection; only the identity-relevant fields are typed here — the response\n * carries the full public agent record.\n /\ninterface AgentSelf {\n agentId: string;\n tenantId: string;\n name: string;\n avatarUrl?: string;\n voiceConfig?: AgentVoiceConfig;\n status: string;\n}\n/* Result of `presignAvatar` — the agent PUTs bytes to `uploadUrl`, then finalizes with `s3Key`. /\ninterface AgentAvatarPresign {\n /* Presigned PUT URL to upload the image bytes to. /\n uploadUrl: string;\n /* Object key — echoed back to `finalizeAvatar`. /\n s3Key: string;\n /* Stable public URL the avatar will be served from once finalized. /\n publicUrl: string;\n /* ISO expiry of the presigned PUT URL. /\n expiresAt: string;\n}\n/* A voice in the platform catalogue (ElevenLabs), from `listVoices`. /\ninterface AgentVoice {\n id: string;\n name: string;\n previewUrl: string;\n description: string;\n labels: Record<string, string>;\n category: string;\n}\ndeclare class SelfApi extends ApiBase {\n /* Update the agent's own name and/or voice config. Returns the updated agent. /\n updateSelf(update: {\n name?: string;\n voiceConfig?: AgentVoiceConfig;\n }): Promise<AgentSelf>;\n /\n Generate the agent's own avatar from a text prompt. The image is generated,\n * stored, and set on the agent server-side; returns the updated agent.\n \n ASYNC (same reason as `generateImage`): avatar gen runs `gpt-image-1`\n * (30–60s) which exceeds the API Gateway 30s ceiling, so this enqueues a job\n * (`POST /agent/avatar/generate` → `jobId`) then polls (`GET /agent/avatar/{jobId}`)\n * until the avatar is set. Signature unchanged — the plugin is unaffected.\n /\n generateAvatar(args: {\n prompt: string;\n }): Promise<AgentSelf>;\n /\n Get a presigned PUT URL to upload a new avatar image. Upload the bytes to\n * `uploadUrl`, then call `finalizeAvatar(s3Key)` to set it on the agent.\n /\n presignAvatar(args: {\n mimeType: string;\n size: number;\n }): Promise<AgentAvatarPresign>;\n /\n Finalize an avatar upload — validates ownership + size, then sets the\n * agent's `avatarUrl` server-side. Returns the updated agent.\n /\n finalizeAvatar(s3Key: string): Promise<AgentSelf>;\n /* List the platform voice catalogue (ElevenLabs) so the agent can pick its own voice. /\n listVoices(): Promise<{\n voices: AgentVoice[];\n }>;\n}\n//# sourceMappingURL=self.d.ts.map\n//#endregion\n//#region src/domains/voice.d.ts\n/* The ElevenLabs models with a pricing row — the TTS endpoint rejects any other value. /\ntype VoiceTtsModel = \"eleven_turbo_v2_5\" \| \"eleven_multilingual_v2\";\ninterface VoiceTtsArgs {\n /* Text to synthesize (1–5000 chars — the endpoint enforces this). /\n text: string;\n /* ElevenLabs voice id; platform default when unset. /\n voiceId?: string;\n /* TTS model; `eleven_turbo_v2_5` (lower latency) when unset. /\n model?: VoiceTtsModel;\n}\n/* Raw synthesized audio plus its PCM framing (from the response headers). /\ninterface VoiceTtsResult {\n /* Raw little-endian PCM samples — no container. Wrap in WAV to make a playable file. /\n audio: Buffer;\n /* Samples per second (e.g. 24000). /\n sampleRate: number;\n /* Channel count (mono = 1). /\n channels: number;\n /* Bits per sample (e.g. 16). /\n bitDepth: number;\n}\ninterface VoiceSttArgs {\n /* Raw linear16 (16-bit little-endian) mono PCM samples — no WAV/container header. /\n audio: Uint8Array;\n /* Sample rate of `audio` in Hz (8000–48000). /\n sampleRate: number;\n}\ninterface VoiceSttResult {\n text: string;\n /* Deepgram confidence in (0,1]. /\n confidence: number;\n}\ndeclare class VoiceApi extends ApiBase {\n /\n Text-to-speech. Returns raw PCM audio bytes plus their framing — the\n * voice service defaults to 24 kHz / mono / 16-bit. Wrap in a WAV container\n * to produce a playable file. Metered per character against the tenant\n * credit pool server-side; TTS completes regardless of metering outcome.\n /\n tts(args: VoiceTtsArgs): Promise<VoiceTtsResult>;\n /\n Speech-to-text. Accepts raw linear16 (16-bit LE) mono PCM — NOT a WAV or\n * other container (the endpoint transcribes with a fixed linear16 encoding,\n * so a container header would be transcribed as noise). Strip any WAV header\n * and pass `sampleRate` from it before calling. Metered by transcribed\n * duration against the tenant credit pool server-side.\n /\n stt(args: VoiceSttArgs): Promise<VoiceSttResult>;\n}\n//# sourceMappingURL=voice.d.ts.map\n//#endregion\n//#region src/domains/search.d.ts\n/\n The broad-news providers behind the metered `services/news` Lambda. The\n * server validates this with a zod enum; a value outside the union is an\n * unpriceable product, so keep the literal union in lockstep with the service.\n /\ntype NewsProvider = \"apitube\" \| \"newsdata\";\n/* One normalized article. `sentiment` is provider-shaped (APITube supplies it). /\ninterface NewsArticle {\n title: string;\n url: string;\n source: string;\n publishedAt: string;\n snippet: string;\n sentiment?: unknown;\n}\n/* Provider-agnostic result — the server normalizes every adapter to this. /\ninterface NewsResult {\n articles: NewsArticle[];\n provider: string;\n}\ndeclare class SearchApi extends ApiBase {\n searchWeb(params: {\n query: string;\n count?: number;\n offset?: number;\n country?: string;\n freshness?: string;\n }, options?: {\n signal?: AbortSignal;\n }): Promise<unknown>;\n searchImages(params: {\n query: string;\n count?: number;\n }, options?: {\n signal?: AbortSignal;\n }): Promise<unknown>;\n searchNews(params: {\n query: string;\n count?: number;\n offset?: number;\n freshness?: string;\n }, options?: {\n signal?: AbortSignal;\n }): Promise<unknown>;\n /* Search news across the selected provider's corpus. → POST /agent/news/search /\n newsSearch(params: {\n query: string;\n provider?: NewsProvider;\n source?: string;\n from?: string;\n to?: string;\n language?: string;\n category?: string;\n limit?: number;\n }): Promise<NewsResult>;\n /* Top headlines for the selected provider. → POST /agent/news/headlines /\n newsHeadlines(params?: {\n provider?: NewsProvider;\n category?: string;\n source?: string;\n language?: string;\n limit?: number;\n }): Promise<NewsResult>;\n}\n//# sourceMappingURL=search.d.ts.map\n//#endregion\n//#region src/domains/webhooks.d.ts\ninterface AgentWebhook {\n webhookId: string;\n tenantId: string;\n agentId: string;\n name: string;\n provider: string;\n active: boolean;\n createdBy: string;\n createdAt: string;\n updatedAt: string;\n}\ninterface CreatedAgentWebhook extends AgentWebhook {\n url: string;\n signingSecret: string;\n}\ninterface AgentWebhookDelivery {\n deliveryId: string;\n webhookId: string;\n status: string;\n attempts: number;\n createdAt: string;\n deliveredAt?: string;\n}\ndeclare class WebhooksApi extends ApiBase {\n createWebhook(args: {\n name: string;\n provider?: \"generic\" \| \"github\" \| \"stripe\" \| \"slack\";\n }): Promise<CreatedAgentWebhook>;\n listWebhooks(): Promise<AgentWebhook[]>;\n deleteWebhook(webhookId: string): Promise<{\n webhookId: string;\n active: false;\n }>;\n rotateWebhookSecret(webhookId: string): Promise<{\n webhookId: string;\n signingSecret: string;\n }>;\n listWebhookDeliveries(webhookId: string): Promise<AgentWebhookDelivery[]>;\n}\n//# sourceMappingURL=webhooks.d.ts.map\n//#endregion\n//#region src/domains/chat.d.ts\ndeclare class ChatApi extends ApiBase {\n presignAttachments(files: {\n filename: string;\n mimeType: string;\n size: number;\n }[]): Promise<{\n attachments: {\n id: string;\n uploadUrl: string;\n downloadUrl: string;\n s3Key: string;\n expiresAt: string;\n }[];\n }>;\n recordActivity(data: {\n userId?: string;\n channel: string;\n role: \"user\" \| \"assistant\";\n }): Promise<{\n recorded: boolean;\n }>;\n}\n//# sourceMappingURL=chat.d.ts.map\n//#endregion\n//#region src/domains/connect-credentials.d.ts\ndeclare class ConnectCredentialsApi extends ApiBase {\n /\n Returns every connected Google account for the agent. Multi-account by\n * design — the openclaw-google plugin requires the LLM to pass `email`\n * explicitly to `google_run_command` so an account is always selected\n * deliberately.\n \n 2026-05-14 (connections-redesign PR 1): the legacy flat shape (`email`,\n * `refreshToken`, `accessToken`, etc., populated from the default account)\n * is gone. Iterate over `accounts`.\n /\n getGoogleCredentials(): Promise<{\n accounts: {\n email: string;\n refreshToken: string;\n clientId: string;\n clientSecret: string;\n displayName?: string;\n connectedAt?: string;\n }[];\n }>;\n disconnectGoogleAccount(email: string): Promise<{\n accounts: {\n email: string;\n displayName?: string;\n connectedAt?: string;\n }[];\n }>;\n getGoogleChatCredentials(): Promise<{\n email: string;\n refreshToken: string;\n clientId: string;\n clientSecret: string;\n displayName?: string;\n }>;\n /\n Fetch decrypted credentials for ONE specific connection by its\n * stable connectionId (connection-scoped, vs the provider-scoped\n * `get<Provider>Credentials` helpers). Used by the daemon to resolve\n * a Custom Connection-driven integration's credentials from the\n * exact connection it was installed from — every custom connection\n * shares the `custom` provider id, so provider-scoping is ambiguous.\n \n For custom connections `accessToken` is the JSON-encoded secret\n * bundle (the daemon un-bundles it); non-secret fields are on\n * `providerMetadata`. The endpoint enforces that the connection is in\n * the calling agent's effective scope (403 otherwise).\n /\n getConnectionCredentials(connectionId: string): Promise<{\n provider: string;\n connectionId: string;\n accountIdentifier?: string;\n accessToken?: string;\n providerMetadata?: Record<string, unknown>;\n [key: string]: unknown;\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getGithubAccounts()` for the multi-\n * account shape required by Pattern A — explicit selector args on every\n * tool. Retained because the `@alfe.ai/github-mcp` proxy is the\n * only consumer that knows about Pattern A; legacy env-interpolation\n * callers will keep hitting `/credentials` until they move to the proxy.\n /\n getGithubCredentials(): Promise<{\n login: string;\n accessToken: string;\n }>;\n /\n Pattern A: multi-account credential fetch for GitHub.\n \n Returns every agent-scoped GitHub connection. The caller is expected\n * to require a `login` selector on every credential-touching tool and\n * look up the matching account at dispatch time.\n \n GitHub OAuth tokens have no expiry (`tokenLifecycle: \"no_expiry\"`),\n * so there is intentionally no `refreshGithubAccountToken` method — if\n * a token is revoked the user must re-run the OAuth flow.\n \n Returned `accounts[i].login` is the GitHub username — the stable\n * cross-session identifier the LLM should pass.\n /\n getGithubAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n login: string;\n scopes: string;\n }[];\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getXeroAccounts()` for the multi-\n * account shape required by Pattern A — explicit selector args on every\n * tool. This method will be removed once all consumers migrate.\n /\n getXeroCredentials(): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n xeroTenantId: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Xero. Returns every\n * agent-scoped Xero connection. The caller is expected to require a\n * selector arg (e.g. `xeroTenantId`) on every credential-touching tool\n * and look up the matching account by that selector at dispatch time.\n \n `xeroTenantId` is the model-facing organisation selector. The separate\n * `accountIdentifier` is the Connect persistence key used for refresh and\n * may be an email; never substitute one for the other.\n /\n getXeroAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n xeroTenantId: string;\n }[];\n }>;\n refreshXeroToken(): Promise<{\n accessToken: string;\n expiresAt: string;\n }>;\n /\n Refresh a specific Xero Connection by its exact `accountIdentifier` from\n * `getXeroAccounts()`. Do not substitute `xeroTenantId`: current Xero OAuth\n * rows may use the account email as their persistence key even when a sole\n * organisation tenant ID is available in provider metadata.\n /\n refreshXeroAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getNotionAccounts()` for the multi-\n * account shape required by Pattern A.\n /\n getNotionCredentials(): Promise<{\n accessToken: string;\n workspaceId: string;\n workspaceName: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Notion. Returns every\n * agent-scoped Notion connection. The caller is expected to require a\n * selector arg (e.g. `workspaceId`) on every credential-touching tool.\n \n Returned `accounts[i].accountIdentifier` is the Notion workspaceId.\n /\n getNotionAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n workspaceId: string;\n workspaceName: string;\n }[];\n }>;\n /\n @deprecated Returns a single primary Atlassian Connection's credentials\n * (one OAuth user, one cloudId) — the legacy \"pick-the-default-connection\"\n * shape. Atlassian is multi-site by nature (each OAuth user may have\n * access to multiple Cloud sites), so Pattern A plugins MUST use\n * `getAtlassianAccounts()` to discover the full set and dispatch via\n * the `cloudId` selector arg.\n /\n getAtlassianCredentials(): Promise<{\n accessToken: string;\n refreshToken: string;\n accessTokenExpiresAt: string;\n cloudId: string;\n siteName: string;\n siteUrl: string;\n email: string;\n enabledProducts: string[];\n clientId: string;\n clientSecret: string;\n }>;\n refreshAtlassianToken(): Promise<{\n accessToken: string;\n expiresAt: string;\n }>;\n /\n Pattern A: multi-account / multi-site credential fetch for Atlassian.\n \n Returns every agent-scoped Atlassian Connection. Each Connection is\n * one OAuth user with a single access token and N accessible Cloud\n * sites (`availableSites`). The caller is expected to:\n \n 1. Flatten (connection × cloudId) into one MCP child per site.\n * 2. Require a `cloudId` selector on every credential-touching tool.\n * 3. Use the access token bound to the Connection that owns the\n * requested `cloudId` (Atlassian shares one access token across\n * all sites accessible to the OAuth user).\n \n Per-account token refresh uses `refreshAtlassianAccountToken(email)`\n * — refreshing one Connection rotates its single access token, which\n * then applies to every cloudId for that Connection.\n \n Returned `accounts[i].accountIdentifier` is the OAuth user's email\n * — the stable cross-session identifier for refresh purposes. The LLM\n * never sees this directly: it picks a site via the `cloudId` arg\n * instead.\n /\n getAtlassianAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n clientId: string;\n clientSecret: string;\n cloudId: string;\n siteName: string;\n siteUrl: string;\n availableSites: {\n id: string;\n url: string;\n name: string;\n scopes?: string[];\n avatarUrl?: string;\n }[];\n }[];\n }>;\n /\n Pattern A: refresh a specific Atlassian Connection by `accountIdentifier`\n * (the OAuth user's email).\n \n Atlassian rotates refresh tokens (`rotatesRefreshToken: true`); the\n * server-side per-account refresh endpoint handles rotation and\n * persistence. Refreshing one Connection updates its single access\n * token, which applies to every accessible Cloud site (cloudId) for\n * that OAuth user.\n \n Returns the new access token + expiry. The proxy is responsible for\n * fanning the new token out to every child server it spawned for\n * cloudIds owned by this Connection.\n /\n refreshAtlassianAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getMYOBAccounts()` for the multi-\n * account shape required by Pattern A.\n /\n getMYOBCredentials(): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n myobBusinessId: string;\n clientId: string;\n }>;\n /\n Pattern A: multi-account credential fetch for MYOB. Returns every\n * agent-scoped MYOB connection. The caller is expected to require a\n * selector arg (e.g. `myobBusinessId` / `accountIdentifier`) on every\n * credential-touching tool.\n \n Returned `accounts[i].accountIdentifier` is the MYOB businessId.\n /\n getMYOBAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n myobBusinessId: string;\n clientId: string;\n }[];\n }>;\n refreshMYOBToken(): Promise<{\n accessToken: string;\n expiresAt: string;\n }>;\n /\n Pattern A: refresh one MYOB Connection by its stable\n * `accountIdentifier` (the MYOB business id returned by\n * `getMYOBAccounts()`).\n \n MYOB refresh tokens belong to individual Connection rows. A\n * multi-business client must use this method instead of refreshing the\n * primary Connection and copying that access token into every cached\n * business client.\n /\n refreshMYOBAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n @deprecated Returns a single primary credential blob. Use\n * `getSalesforceAccounts()` for the multi-account shape required by\n * Pattern A.\n /\n getSalesforceCredentials(): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n instanceUrl: string;\n orgId: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Salesforce. Returns every\n * agent-scoped Salesforce connection. One OAuth grant maps to one org, so\n * `accounts[i].accountIdentifier` (and `orgId`) is the Salesforce org id —\n * the selector every credential-touching tool requires.\n /\n getSalesforceAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n instanceUrl: string;\n orgId: string;\n }[];\n }>;\n /\n Refresh the access token for a specific Salesforce org. Salesforce\n * tokens aren't interchangeable across orgs, so the connection is targeted\n * by `accountIdentifier` (the org id) — mirrors `refreshXeroAccountToken`.\n /\n refreshSalesforceAccountToken(orgId: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Microsoft 365.\n \n Returns every agent-scoped Microsoft connection. The caller is expected\n * to require an `email` selector on every credential-touching tool and\n * look up the matching account at dispatch time.\n \n Returned `accounts[i].accountIdentifier` is the user's primary email\n * (or the tid claim as fallback) — the stable cross-session identifier\n * the LLM should pass.\n \n Per-account token refresh is exposed via `refreshMicrosoftAccountToken`,\n * NOT `refreshXeroAccountToken` — Microsoft refresh tokens are not\n * interchangeable across (tenant, user) pairs.\n /\n getMicrosoftAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n email: string;\n microsoftTenantId: string;\n workspaceDomain: string;\n }[];\n }>;\n /\n Pattern A: refresh a specific Microsoft 365 connection by its\n * `accountIdentifier`. For Microsoft, `accountIdentifier` is the user's\n * email when the Graph profile fetch succeeded at connect time, and the\n * Azure tenant id (`tid` claim) as fallback. Callers should pass the\n * value returned by `getMicrosoftAccounts()` rather than synthesising\n * an email locally.\n \n Microsoft refresh tokens are bound to a specific (tenant, user) pair —\n * they are NOT interchangeable across accounts, so per-account refresh\n * is mandatory. The generic /accounts/{accountIdentifier}/refresh\n * endpoint walks the agent's full visible scope chain to find a matching\n * connection (works for inherited team/project Microsoft connections).\n /\n refreshMicrosoftAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n Disconnects one connected Microsoft 365 account for the agent, by its\n * `accountIdentifier`. Hits the generic per-account disconnect route\n * (`DELETE /agent/connect/microsoft/accounts/{accountIdentifier}`), which\n * resolves across the agent's full effective scope chain and deletes the\n * matching Connection row. Returns the remaining accounts.\n \n IMPORTANT: pass the `accountIdentifier` from `getMicrosoftAccounts()`, NOT\n * a synthesised email. For Microsoft, `accountIdentifier` is the user's email\n * only when the Graph profile fetch succeeded at connect time; it falls back\n * to the Azure tenant id (`tid` claim) otherwise. The backend matches on\n * `accountIdentifier` exactly, so passing an email would 404 on those\n * fallback-identifier accounts. (This is why the param is not named `email`,\n * unlike `disconnectGoogleAccount` where the identifier is always the email.)\n /\n disconnectMicrosoftAccount(accountIdentifier: string): Promise<{\n accounts: {\n accountIdentifier: string;\n displayName?: string;\n connectedAt?: string;\n }[];\n }>;\n /\n Resolve the primary cTrader Connection's credentials for the calling\n * agent. Unlike most providers, the cTrader Open API needs app-level auth\n * (`clientId` + `clientSecret`) AND account auth (`accessToken` +\n * `accountId`) on the socket, so `@alfe.ai/ctrader-mcp` self-fetches the\n * full set here at startup (the atlassian/google pattern). `clientId` /\n * `clientSecret` are the SST-sourced global app credentials the connect\n * endpoint injects — they are never persisted on the connection. `host` is\n * the resolved TLS endpoint (`live.ctraderapi.com` / `demo.ctraderapi.com`)\n * derived from the selected account's live/demo flag.\n /\n getCTraderCredentials(): Promise<{\n accessToken: string;\n refreshToken: string;\n accountId: string;\n host: string;\n clientId: string;\n clientSecret: string;\n }>;\n /\n Pattern A: multi-account credential fetch for cTrader.\n \n Unlike atlassian/salesforce (one Connection row per account/site), a\n * cTrader is MULTI-grant per agent: an agent may connect several distinct\n * cTrader logins, each its own Connection row keyed on `accountIdentifier =\n * ctid:<userId>` (Phase 1). This aggregates the trading accounts across\n * ALL of those Connection rows — each row contributes its `availableAccounts`\n * flattened, and every account carries ITS OWN grant's `accessToken` (the\n * token that authenticates that account against the cTrader Open API). One\n * OAuth grant still covers all accounts under that single login on one shared\n * token; only the `ctidTraderAccountId` and the protobuf socket `host` (live\n * vs demo) differ within a grant. Across grants the tokens differ, so the\n * token is now PER-ACCOUNT rather than hoisted to the top level.\n \n `host` per account is derived from the account's `isLive` flag\n * (`live.ctraderapi.com` / `demo.ctraderapi.com`) — the same mapping the\n * connect provider applies server-side when an account is auto-selected.\n \n `clientId` / `clientSecret` are the SST-sourced GLOBAL app credentials the\n * connect endpoint injects — identical across every Connection row (one\n * cTrader app), never persisted on a connection. We take them from the first\n * row that carries them.\n \n Accounts are deduped on `ctidTraderAccountId` first-wins: Spotware ids are\n * globally unique across logins, so a duplicate can only appear if the same\n * account somehow surfaced under two grants — first-wins keeps it\n * deterministic.\n \n `accounts` may be empty (no cTrader Connection at all), in which case we\n * return empty creds rather than throwing.\n /\n getCTraderAccounts(): Promise<{\n accounts: {\n ctidTraderAccountId: string;\n host: string;\n isLive: boolean;\n brokerName?: string;\n accountNumber?: string;\n accessToken: string;\n }[];\n clientId: string;\n clientSecret: string;\n }>;\n /\n @deprecated Returns a single primary credential blob. Use\n * `getShopifyAccounts()` for the multi-account shape required by Pattern A\n * (`@alfe.ai/shopify-mcp` keys per-shop on the myshopify domain).\n /\n getShopifyCredentials(): Promise<{\n accessToken: string;\n shopDomain: string;\n shopGid: string;\n shopName: string;\n apiVersion: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Shopify. Returns every\n * agent-scoped Shopify Connection. One OAuth grant maps to one store, so the\n * stable per-call selector is the store's myshopify domain (`shopDomain`),\n * NOT `accountIdentifier` — the connect provider keys `accountIdentifier` on\n * the immutable shop GID (falling back to the domain), so `shopDomain` is the\n * value the LLM passes and the plugin routes on.\n \n Each entry is shaped by the connect provider's `buildCredentialsResponse`:\n * `{ accessToken, shopDomain, shopGid, shopName, apiVersion }` — offline\n * Shopify tokens never expire, so there is NO token / expiry field and no\n * refresh method (unlike Salesforce). The GraphQL Admin API authenticates\n * purely on `X-Shopify-Access-Token`; no client credentials are on the wire.\n /\n getShopifyAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n shopDomain: string;\n shopGid: string;\n shopName: string;\n apiVersion: string;\n }[];\n }>;\n /\n Pattern A: provider-parameterized multi-account credential fetch for the\n * social connectors (Bluesky, and the approval-gated backlog: X, Meta,\n * Threads, LinkedIn, Pinterest, TikTok, Reddit, YouTube).\n \n Unlike the bespoke `getGithubAccounts()` / `getXeroAccounts()` shapes,\n * this returns a UNIFORM normalized account shape so `@alfe.ai/social-mcp`'s\n * shared driver can require a single `account` selector on every\n * credential-touching tool regardless of platform. The backend\n * `api-agents/{provider}/accounts` route is already provider-generic; this\n * is the client-side normalization the plan (`do-we-need-any-moonlit-toucan`\n * Phase 0, step 5) calls for.\n \n `accountIdentifier` is the stable per-account selector the LLM should\n * pass back (for Bluesky: the account DID). `accessToken` carries whatever\n * the provider's `buildCredentialsResponse` bundles (for Bluesky: the JSON\n * session bundle — the driver parses the `accessJwt` out of it, or reads the\n * top-level `accessJwt` from `providerMetadata`-adjacent fields). Everything\n * else the driver needs for routing (handle, pdsHost, did, …) is on\n * `providerMetadata`.\n \n Token refresh is delegated to connect (never done in-plugin) via the\n * per-account route `POST /agent/connect/{provider}/accounts/{accountIdentifier}/refresh`\n * — call `refreshSocialAccount(provider, accountIdentifier)`. (The non-account\n * `POST /agent/connect/{provider}/refresh` route refreshes the provider's\n * PRIMARY connection, which is wrong under multi-account Pattern A.)\n /\n getSocialAccounts(provider: string): Promise<{\n provider: string;\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n accessToken: string;\n providerMetadata: Record<string, unknown>;\n connectedAt: string;\n }[];\n }>;\n /\n Pattern A: refresh a specific social Connection by its stable\n * `accountIdentifier` (for Bluesky: the account DID) via the\n * provider-generic per-account refresh route. The counterpart to\n * `getSocialAccounts(provider)`; `@alfe.ai/social-mcp` calls this on a\n * 401/ExpiredToken from the platform PDS/API, then re-fetches accounts to\n * pick up the rotated bundle.\n \n Refresh itself is ALWAYS delegated to connect — the plugin never calls\n * the platform's own refresh XRPC (e.g. `com.atproto.server.refreshSession`)\n * because connect owns the encrypted refresh token + rotation persistence\n * (Bluesky rotates the refreshJwt; a missed rotation kills the connection\n * after one refresh). The returned `accessToken` is whatever the provider's\n * `refreshToken` hook re-bundled (for Bluesky: the JSON session bundle with\n * the fresh `accessJwt`) — callers typically ignore it and re-fetch via\n * `getSocialAccounts` for a consistent shape.\n /\n refreshSocialAccount(provider: string, accountIdentifier: string): Promise<{\n accountIdentifier: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n}\n//# sourceMappingURL=connect-credentials.d.ts.map\n//#endregion\n//#region src/domains/database.d.ts\ndeclare class DatabaseApi extends ApiBase {\n registerDatabaseCredentials(): Promise<{\n connectionString: string;\n username: string;\n password: string;\n databases: string[];\n }>;\n reportDatabaseAudit(entry: {\n database: string;\n collection: string;\n operation: string;\n summary?: string;\n }): Promise<void>;\n}\n//# sourceMappingURL=database.d.ts.map\n//#endregion\n//#region src/domains/identity.d.ts\ndeclare class IdentityApi extends ApiBase {\n /\n Returns the calling agent's own identity context — `{ agentId, tenantId }`\n * decoded server-side from the agent API token. Used by the\n * `@alfe.ai/openclaw-identity` plugin to bootstrap context when the\n * OpenClaw daemon doesn't plumb `ctx.agentId` through to plugin hooks.\n * Plugins should cache this for the daemon's lifetime (single-agent-per-\n * process invariant). One HTTP round-trip per process activate; not for\n * per-call use.\n /\n whoami(): Promise<{\n agentId: string;\n tenantId: string;\n }>;\n resolveIdentity(args: {\n provider: string;\n platformId: string;\n kind?: \"user\" \| \"agent\" \| \"service\" \| \"bot\" \| \"workspace\";\n displayName?: string;\n }): Promise<{\n identityId: string \| null;\n status: string;\n created?: boolean;\n reason?: string;\n /\n Flattened auriclabs permission strings for the resolved identity\n * (scope-prefixed where applicable). Empty array on miss / org service\n * outage — the runtime gate fails closed in that case.\n /\n permissions: string[];\n }>;\n searchIdentities(args?: {\n q?: string;\n status?: string;\n limit?: number;\n }): Promise<{\n identities: unknown[];\n }>;\n getIdentityContext(identityId: string): Promise<{\n context: unknown;\n }>;\n mergeIdentities(survivorId: string, args: {\n mergedId: string;\n }): Promise<{\n ok: boolean;\n error?: string;\n }>;\n unmergeIdentity(identityId: string): Promise<{\n ok: boolean;\n error?: string;\n }>;\n addIdentityNote(identityId: string, args: {\n content: string;\n category?: string;\n }): Promise<{\n noteId: string \| null;\n }>;\n tagIdentity(identityId: string, args: {\n tag: string;\n action: \"add\" \| \"remove\";\n }): Promise<{\n ok: boolean;\n }>;\n getIdentityChangelog(identityId: string, args?: {\n limit?: number;\n cursor?: string;\n }): Promise<{\n entries: unknown[];\n cursor: string \| null;\n }>;\n rollbackIdentity(identityId: string, args: {\n targetVersion: number;\n }): Promise<{\n ok: boolean;\n entry?: unknown;\n }>;\n requestIdentityVerification(args: {\n claimedIdentityId: string;\n requestingIdentityId: string;\n requestingProvider: string;\n requestingPlatformId: string;\n preferredChannel?: \"mobile\" \| \"email\";\n /\n Phase 2: agent-supplied contact endpoint. When provided, the top-level\n * `preferredChannel` is ignored — the contact's channel wins.\n /\n contact?: {\n channel: \"email\" \| \"mobile\";\n value: string;\n };\n }): Promise<{\n verificationId: string;\n channel: string;\n deliveredTo: string;\n expiresAt: string;\n availableChannels: {\n channel: string;\n deliveredTo: string;\n }[];\n } \| {\n error: string;\n }>;\n confirmIdentityVerification(args: {\n claimedIdentityId: string;\n verificationId: string;\n phrase: string;\n }): Promise<{\n verified: boolean;\n identityId?: string;\n /* Phase 2: how the confirm resolved — Scenario A vs B. /\n action?: \"merged\" \| \"contact_verified\" \| \"already_confirmed\";\n error?: string;\n }>;\n /\n Update display-shape fields on an Identity. Body excludes `email` /\n * `phone` / `title` / `company` / `metadata` per Section D4 — contacts go\n * via the verify flow, title/company live on OrgMembership, metadata is\n * not agent-writable.\n /\n updateIdentity(identityId: string, args: {\n name?: string;\n avatarUrl?: string;\n timezone?: string;\n locale?: string;\n }): Promise<{\n ok: boolean;\n }>;\n /\n Phase 2 (Section H): server-side verification of a Google Chat sender via\n * the agent's existing Google OAuth credentials. Returns the resolved\n * identity (created or matched via Scenario-B email enrichment).\n /\n resolveGoogleChatSender(args: {\n senderUserId: string;\n spaceId?: string;\n }): Promise<{\n identityId: string \| null;\n status: string;\n }>;\n}\n//# sourceMappingURL=identity.d.ts.map\n//#endregion\n//#region src/domains/images.d.ts\ndeclare class ImagesApi extends ApiBase {\n /\n Generate an image from a text prompt and get back a STABLE, public URL\n * (served from the agent-assets CDN — it does not expire). Embed the returned\n * `imageUrl` in a reply as markdown to show it to the user.\n \n ASYNC: `gpt-image-1` routinely runs 30–60s, which exceeds the API Gateway\n * 30s ceiling, so this enqueues a job (`POST /agent/images/generate` →\n * `jobId`) then polls (`GET /agent/images/{jobId}`) until it completes. The\n * worker's real failure message (e.g. an unsupported `size`) surfaces via the\n * job's `error` field.\n /\n generateImage(args: {\n prompt: string;\n model?: string;\n size?: string;\n quality?: string;\n }): Promise<{\n imageUrl: string;\n model: string;\n }>;\n}\n//# sourceMappingURL=images.d.ts.map\n//#endregion\n//#region src/domains/integrations.d.ts\ndeclare class IntegrationsApi extends ApiBase {\n listIntegrations(): Promise<IntegrationInstall$1[]>;\n getIntegrationConfig(integrationId: string): Promise<IntegrationConfigResult$1>;\n updateIntegrationConfig(integrationId: string, config: Record<string, unknown>): Promise<void>;\n installIntegration(integrationId: string, options?: {\n version?: string;\n config?: Record<string, unknown>;\n }): Promise<IntegrationInstall$1>;\n removeIntegration(integrationId: string): Promise<IntegrationInstall$1>;\n getOAuthUrl(provider: string, scopes?: string[]): Promise<{\n url: string;\n provider: string;\n expiresIn: number;\n }>;\n getOAuthStatus(provider: string): Promise<{\n provider: string;\n connected: boolean;\n config?: Record<string, string>;\n }>;\n getRegistry(): Promise<{\n integrations: RegistryEntry$1[];\n }>;\n}\n//# sourceMappingURL=integrations.d.ts.map\n//#endregion\n//#region src/domains/memory.d.ts\ndeclare class MemoryApi extends ApiBase {\n memorySearch(query: string, opts?: {\n limit?: number;\n topic?: string;\n subtopic?: string;\n tag?: string;\n includeKnowledge?: boolean;\n }): Promise<{\n facts: {\n subject: string;\n predicate: string;\n object: string;\n since: string;\n confidence: number;\n }[];\n memories: {\n id: string;\n text: string;\n topic: string;\n subtopic: string;\n tag: string;\n importance: number;\n timestamp: number;\n score: number;\n }[];\n }>;\n memoryStore(text: string, opts?: {\n topic?: string;\n subtopic?: string;\n tag?: string;\n importance?: number;\n }): Promise<{\n memoryId: string;\n }>;\n memoryIngest(sessionKey: string, messages: {\n role: string;\n content: string;\n index: number;\n timestamp?: string;\n }[], metadata?: {\n channelId?: string;\n userId?: string;\n userName?: string;\n }, ingestEpoch?: number): Promise<{\n queued: boolean;\n messageCount: number;\n }>;\n memoryLoadContext(tier?: number, topicHint?: string): Promise<{\n tier: number;\n facts: {\n subject: string;\n predicate: string;\n object: string;\n since: string;\n }[];\n memories: {\n text: string;\n topic: string;\n subtopic: string;\n score: number;\n }[];\n tokenEstimate: number;\n formatted: string;\n }>;\n memoryLookupEntity(subject: string): Promise<{\n subject: string;\n triples: {\n tripleId: string;\n predicate: string;\n object: string;\n validFrom: string;\n validTo?: string;\n confidence: number;\n }[];\n }>;\n memoryNavigate(): Promise<{\n topics: {\n name: string;\n tripleCount: number;\n subtopics: string[];\n }[];\n cursor: string \| null;\n }>;\n memoryDelete(memoryId: string): Promise<{\n deleted: boolean;\n }>;\n memoryStats(): Promise<{\n vectorCount: number;\n tripleCount: number;\n storageEstimateBytes: number;\n lastIngestionAt?: string;\n }>;\n memoryLearn(args: {\n text: string;\n source?: string;\n sourceType?: \"file\" \| \"url\" \| \"inline\";\n metadata?: {\n sessionId?: string;\n channelId?: string;\n userName?: string;\n };\n }): Promise<{\n memoriesStored: number;\n triplesStored: number;\n chunks: number;\n source?: string;\n }>;\n memoryBootstrapStatus(): Promise<{\n synced: boolean;\n syncedAt?: string;\n sessionsBackfillSynced?: boolean;\n sessionsBackfillSyncedAt?: string;\n }>;\n memoryBootstrapStatusMark(scope?: \"files\" \| \"sessions\"): Promise<{\n synced: true;\n syncedAt: string;\n }>;\n}\n//# sourceMappingURL=memory.d.ts.map\n//#endregion\n//#region src/domains/secrets.d.ts\ndeclare class SecretsApi extends ApiBase {\n /\n Mint a fresh AES-256 data key for a specific (secret, field) pair. The\n * encryption context is rebuilt server-side from `auth.tenantId` + the body\n * fields including `fieldKey`; the agent cannot forge context for a scope\n * or field it doesn't own. Legacy single-envelope secrets are migrated to\n * `field#value` rows by the data migration, so call with `fieldKey: \"value\"`\n * to reach them.\n /\n generateSecretDataKey(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n }): Promise<GeneratedDataKey$1>;\n /\n Unwrap a wrapped data key so the agent can decrypt the envelope locally.\n * `fieldKey` MUST match the value supplied when the data key was generated\n * (it's bound into KMS encryption context); mismatch fails with\n * `InvalidCiphertextException`.\n /\n decryptSecretDataKey(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n dataKeyCiphertext: string;\n }): Promise<{\n plaintextKey: string;\n }>;\n /\n Create a new secret with one or more fields. Encrypted fields must arrive\n * pre-sealed (the agent has already obtained per-field data keys via\n * `generateSecretDataKey({ ..., fieldKey })` and AES-encrypted locally).\n * Plaintext fields ship the value inline.\n /\n createSecret(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n secretName: string;\n category?: SecretCategory$1;\n description?: string;\n tags?: string[];\n fields: {\n key: string;\n format?: FieldFormat$1;\n sensitivity: FieldSensitivity$1;\n value?: string;\n envelope?: EncryptedEnvelopeV1$1;\n }[];\n reason?: string;\n }): Promise<SecretAggregate$1>;\n /* Fetch the secret aggregate plus per-field encrypted envelopes. /\n getSecret(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n }): Promise<{\n aggregate: SecretAggregate$1;\n envelopes: FieldEnvelope$1[];\n }>;\n /* Fetch one field. Plaintext: value inline. Encrypted: envelope. /\n getSecretField(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n }): Promise<{\n key: string;\n sensitivity: FieldSensitivity$1;\n format?: FieldFormat$1;\n value?: string;\n envelope?: EncryptedEnvelopeV1$1;\n rotatedAt?: string;\n createdAt: string;\n updatedAt: string;\n }>;\n /* Add OR rotate one field. /\n setSecretField(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n sensitivity: FieldSensitivity$1;\n format?: FieldFormat$1;\n value?: string;\n envelope?: EncryptedEnvelopeV1$1;\n reason?: string;\n }): Promise<{\n fieldKey: string;\n rotated: boolean;\n }>;\n /* Remove one field. /\n removeSecretField(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n }): Promise<void>;\n /* Update secret-level metadata (name/description/tags/category). /\n updateSecretMetadata(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n secretName?: string;\n description?: string;\n tags?: string[];\n category?: SecretCategory$1;\n reason?: string;\n }): Promise<SecretAggregate$1>;\n /* List metadata for secrets in a scope. Optional filters route through the byFacet GSI. /\n listSecrets(args: {\n scope: SecretScope$1;\n scopeId: string;\n category?: SecretCategory$1;\n tag?: string;\n fieldKey?: string;\n }): Promise<SecretMetadata$1[]>;\n /* Bounded changelog read — metadata-only audit entries. /\n getSecretHistory(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n limit?: number;\n cursor?: string;\n }): Promise<{\n entries: ChangelogEntry$1[];\n nextCursor?: string;\n }>;\n /* Delete a secret (and all its field rows + tag rows + changelog rows). /\n deleteSecret(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n }): Promise<void>;\n /* Enumerate scopes (org/team/project/agent) this agent can access. /\n listSecretScopes(): Promise<ScopeInfo$1[]>;\n}\n//# sourceMappingURL=secrets.d.ts.map\n//#endregion\n//#region src/domains/teams.d.ts\ndeclare class TeamsApi extends ApiBase {\n getTeamsCredentials(): Promise<{\n agentId: string;\n tenantId: string;\n azureAppId: string;\n azureBotId: string;\n azureClientSecret: string;\n botDisplayName?: string;\n teamsTenantId?: string;\n serviceUrl?: string;\n }>;\n sendTeamsMessage(data: {\n conversationId: string;\n text?: string;\n adaptiveCard?: Record<string, unknown>;\n }): Promise<{\n ok: boolean;\n activityId: string;\n }>;\n listTeamsChannels(): Promise<{\n channels: {\n id: string;\n name: string;\n description?: string;\n }[];\n }>;\n}\n//# sourceMappingURL=teams.d.ts.map\n\n//#endregion\n//#region src/index.d.ts\ninterface AgentApiClient extends SyncApi, IntegrationsApi, WorkspaceApi, ConnectCredentialsApi, TeamsApi, ChatApi, SecretsApi, IdentityApi, MemoryApi, SearchApi, KnowledgeApi, DatabaseApi, MobileApi, RemoteApi, SelfApi, VoiceApi, ImagesApi, WebhooksApi {}\ndeclare class AgentApiClient extends ApiBase {\n constructor(config: AgentApiClientConfig);\n}\n//# sourceMappingURL=index.d.ts.map\n\n//#endregion\nexport { AgentApiClient, type AgentApiClientConfig, type AgentAvatarPresign, type AgentSelf, type AgentVoice, type AgentVoiceConfig, type AgentWebhook, type AgentWebhookDelivery, type AgentWorkspaceInfo, type ChangeRequestActorKind, type ChangeRequestOperation, type ChangeRequestResourceType, type ChangeRequestStatus, type ChangelogAction, type ChangelogActor, type ChangelogEntry, type CreatedAgentWebhook, type EncryptedEnvelopeV1, type Field, type FieldEnvelope, type FieldFormat, type FieldSensitivity, type FieldView, type GeneratedDataKey, type InstallToolErrorCaptureOptions, type IntegrationConfigResult, type IntegrationConfigSchemaField, type IntegrationInstall, type KnowledgeChangeRequest, type KnowledgeDoc, type KnowledgeProfile, type KnowledgeProfileLink, type KnowledgeScope, type KnowledgeScopeType, type KnowledgeSearchHit, type KnowledgeSearchResult, type MobileAvailableNumber, type MobileNumberInfo, type NewsArticle, type NewsProvider, type NewsResult, type ProposeScopeChangeInput, type RegistryEntry, type RemoteSessionInfo, type ScopeInfo, type SecretAggregate, type SecretCategory, type SecretMetadata, type SecretScope, type SharedFileEntry, type SyncAgentInfo, type SyncAgentStats, type SyncConfirmedUpload, type SyncFileEntry, type SyncManifest, type SyncManifestEntry, type SyncPresignedUrl, type SyncReconstructBundle, type SyncReconstructFile, type SyncSessionContent, type SyncSessionEntry, type ToolCaptureApi, type VoiceSttArgs, type VoiceSttResult, type VoiceTtsArgs, type VoiceTtsModel, type VoiceTtsResult, type WhatsAppTemplate, installToolErrorCapture };\n//# sourceMappingURL=index.d.ts.map","//#region src/types.d.ts\n/\n Minimal logger contract shared by every helper in the kit.\n \n Deliberately the narrowest shape in the fleet: some plugins declare\n * variadic loggers (`info(msg: string, ...args: unknown[])`), others\n * single-arg (`info(msg: string)`). Both are assignable to this. The kit\n * only ever calls with a single string.\n /\ninterface KitLogger {\n info(msg: string): void;\n warn(msg: string): void;\n error(msg: string): void;\n debug(msg: string): void;\n}\n//# sourceMappingURL=types.d.ts.map\n//#endregion\n//#region src/tools.d.ts\n/* Shape returned to OpenClaw from a tool `execute`. /\ninterface ToolResult {\n content: {\n type: \"text\";\n text: string;\n }[];\n details: unknown;\n isError?: boolean;\n}\ninterface ToolDef<TParameters = unknown> {\n name: string;\n description: string;\n label: string;\n parameters: TParameters;\n execute: (toolCallId: string, params: Record<string, unknown>) => Promise<ToolResult>;\n}\n/* Deliberately model-safe validation/usage failure. Other exceptions stay private. /\ndeclare class PublicToolError extends Error {\n readonly name = \"PublicToolError\";\n}\ndeclare function publicToolError(message: string): PublicToolError;\n/* Wrap bounded JSON in the OpenClaw tool-result envelope. /\ndeclare function ok(data: unknown): ToolResult;\n/* Wrap an explicitly public error in a captured OpenClaw error envelope. /\ndeclare function errResult(message: string): ToolResult;\n/\n Define a tool whose unexpected exceptions never expose provider, filesystem,\n * credential, or transport diagnostics to the model. Throw `PublicToolError`\n * only for a message deliberately safe for model display.\n /\ndeclare function defineTool<TParameters>(def: {\n name: string;\n description: string;\n parameters: TParameters;\n handler: (params: Record<string, unknown>) => Promise<unknown>;\n}): ToolDef<TParameters>;\n//# sourceMappingURL=tools.d.ts.map\n//#endregion\n//#region src/daemon.d.ts\ninterface IpcResponse {\n ok: boolean;\n error?: {\n message?: string;\n };\n [key: string]: unknown;\n}\ninterface IpcClient {\n on(event: string, handler: (...args: unknown[]) => void): void;\n request(method: string, params: Record<string, unknown>): Promise<IpcResponse>;\n start(): void;\n stop(): void;\n}\ninterface IpcModule {\n IPCClient: new (socketPath: string, log: KitLogger) => IpcClient;\n}\ninterface ConnectToDaemonOptions {\n pluginId: string;\n capabilities?: readonly string[];\n onMessage?: (msg: Record<string, unknown>) => void;\n standaloneNote?: string;\n}\ninterface ConnectToDaemonDependencies {\n loadIpcModule?: () => Promise<IpcModule>;\n}\ndeclare function connectToDaemon(socketPath: string, log: KitLogger, options: ConnectToDaemonOptions, dependencies?: ConnectToDaemonDependencies): Promise<IpcClient \| null>;\n//#endregion\n//#region src/sdk.d.ts\ninterface ResolveOpenClawSdkOptions {\n specifier?: string;\n exportName?: string;\n unresolvableNote?: string;\n}\ninterface ResolveOpenClawSdkDependencies {\n anchors?: readonly string[];\n globalPackageJsonPath?: string;\n requireFrom?: (anchor: string) => (specifier: string) => unknown;\n}\ndeclare function resolveOpenClawSdk<T = unknown>(log: KitLogger, options?: ResolveOpenClawSdkOptions, dependencies?: ResolveOpenClawSdkDependencies): T \| null;\n//# sourceMappingURL=sdk.d.ts.map\n\n//#endregion\n//#region src/activation.d.ts\n/\n Canonical activation-flag key for a plugin: `__alfe<Name>PluginActivated`.\n \n Accepts a short name (`\"google\"`, `\"google-chat\"`) or a full package name\n * (`\"@alfe.ai/openclaw-teams\"`); scope + `openclaw-` prefix are stripped\n * and the remainder PascalCased:\n \n getActivationKey(\"google\") → \"__alfeGooglePluginActivated\"\n * getActivationKey(\"google-chat\") → \"__alfeGoogleChatPluginActivated\"\n * getActivationKey(\"@alfe.ai/openclaw-teams\") → \"__alfeTeamsPluginActivated\"\n /\ndeclare function getActivationKey(name: string): string;\n/* True when the activation flag for `key` is currently set. /\ndeclare function isActivated(key: string): boolean;\n/\n Clear the activation flag so a later start can run again.\n \n Call this LAST in stop/deactivate paths — after side effects are stopped\n * (see the ordering rule in the module doc). Also exported for soft-failure\n * paths inside a `guardedStart` fn that want to log at a custom level and\n * return normally instead of throwing.\n /\ndeclare function resetActivation(key: string): void;\n/\n Run a service start exactly once per activation cycle.\n \n - If the flag is already set, logs at debug and returns `false` (skipped).\n * - Otherwise sets the flag and runs `fn`.\n * - If `fn` throws synchronously OR returns a promise that rejects, the\n * flag is RESET (so a later activate can retry) and the error is logged.\n * Errors are not rethrown — matching fleet behavior where a failed start\n * must never crash the host's plugin loader.\n \n Returns `true` when the start was initiated (even if an async portion\n * later fails), `false` when skipped or when `fn` threw synchronously.\n \n Note: cleaning up partial side effects on failure is `fn`'s job (throw\n * only after tearing down what was started); the kit only guarantees the\n * flag reset happens after `fn` has failed — i.e. after `fn`'s own cleanup.\n */\ndeclare function guardedStart(key: string, log: KitLogger, fn: () => void \| Promise<void>): boolean;\n//# sourceMappingURL=activation.d.ts.map\n\n//#endregion\nexport { type ConnectToDaemonDependencies, type ConnectToDaemonOptions, type IpcClient, type IpcResponse, type KitLogger, PublicToolError, type ResolveOpenClawSdkDependencies, type ResolveOpenClawSdkOptions, type ToolDef, type ToolResult, connectToDaemon, defineTool, errResult, getActivationKey, guardedStart, isActivated, ok, publicToolError, resetActivation, resolveOpenClawSdk };\n//# sourceMappingURL=index.d.ts.map"],"mappings":";;;;;;;KAsTK+D,kBAAAA;UACKC,cAAAA;aACGD;;;;UAIHE,kBAAAA;;;;;aAKGF;;;;;;;;;;;;;UAaHG,qBAAAA;WACCD;;;;UAIDE,oBAAAA;;;;UAIAC,gBAAAA;aACGL;;;;SAIJI;;;;KAIJE,yBAAAA;KACAC,sBAAAA;KACAC,mBAAAA;KACAC,sBAAAA;;UAEKC,sBAAAA;;aAEGV;;gBAEGM;aACHC;;;;UAIHC;;gBAEMC;;;gBAGAA;;;;;;;;UAQNE,uBAAAA;gBACML;aACHC;;;;;;;;;;;;UAYHK,YAAAA;;;;;;;;;;;AAxCiB;AACH;AACG;;UChVjBuC,UAAAA,CDoVGnD;SAEGM,EAAAA;QACHC,EAAAA,MAAAA;QAIHC,EAAAA,MAAAA;;SAKMC,EAAAA,OAAAA;EAAsB,OAAA,CAAA,EAAA,OAAA;AAAA;UCxV5B2C,ODgWuB,CAAA,cAAA,OAAA,CAAA,CAAA;QACjB9C,MAAAA;aACHC,EAAAA,MAAAA;EAAsB,KAAA,EAAA,MAAA;EAAA,UAYzBK,EC1WIyC,WD0WQ;wCCzWkBC,4BAA4BC,QAAQJ;;;;;UCV3D,eAAA;EFgSZnD;EACKC,aAAAA,EAAAA,OAAc;EAKdC;EAkBAC,SAAAA,EAAAA,MAAAA;AACmB;AAIC;;;;;AASD;AAKxBI,UE9TY,YAAA,CF8TU;EACtBC,eAAAA,CAAAA,KAAAA,EAAmB,MAAA,EAAA,KAAA,EAAA;IACnBC,KAAAA,CAAAA,EAAAA,MAAAA;IAEKC,SAAAA,CAAAA,EE/T+B,kBF+TT;IAAA,OAAA,CAAA,EAAA,MAAA;ME9T3B,OFgUQV,CEhUA,qBFgUAA,CAAAA;YAEGM,EAAAA,EEhUA,OFgUAA,CAAAA;IACHC,MAAAA,EEjUqB,cFiUrBA,EAAAA;;iBAMGE,CAAAA,SAAAA,EErUa,kBFqUbA,EAAAA,OAAAA,EAAAA,MAAAA,CAAAA,EErUmD,OFqUnDA,CErU2D,gBFqU3DA,CAAAA;eAGAA,CAAAA,SAAAA,EErUD,kBFqUCA,EAAAA,OAAAA,EAAAA,MAAAA,EAAAA,IAQiB,CARjBA,EAAAA;IAAsB,KAAA,CAAA,EAAA,MAAA;IAQ5BE,MAAAA,CAAAA,EAAAA,MAAAA;EAAuB,CAAA,CAAA,EE1U5B,OF0U4B,CAAA;IACjBL,KAAAA,EE3UM,YF2UNA,EAAAA;IACHC,UAAAA,EAAAA,MAAAA,GAAAA,IAAAA;EAAsB,CAAA,CAAA;EAYzBK,YAAAA,CAAAA,SAAY,EErVP,kBFqVO,EAAA,OAAA,EAAA,MAAA,EAAA,QAAA,EAAA,MAAA,EAAA,KAAA,EAAA;;MEjVjB;;IDrCKuC,IAAAA,EAAAA,MAAU;EAQVC,CAAAA,CAAAA;EAAO,aAAA,CAAA,SAAA,ECgCF,kBDhCE,EAAA,OAAA,EAAA,MAAA,EAAA,QAAA,EAAA,MAAA,EAAA,OAAA,EAAA,MAAA,EAAA,KAAA,EAAA;IAIHC,WAAAA,CAAAA,EAAAA,MAAAA;IAC0BC,OAAAA,CAAAA,EAAAA,MAAAA;MCgCnC,ODhCuEH,CAAAA;IAARI,QAAAA,EAAAA,MAAAA;EAAO,CAAA,CAAA;gCCmC5D,4CAEJ,0BACN,QAAQ;qCAGE,yCAtCc;aAwCP;IArDL,KAAA,CAAA,EAAA,MAAe;IAaf,MAAA,CAAA,EAAA,MAAY;EAAA,CAAA,CAAA,EAyCxB,OAzCwB,CAAA;IAGY,cAAA,EAsCV,sBAtCU,EAAA;IAC5B,UAAA,EAAA,MAAA,GAAA,IAAA;;;;;;AFuSHpD,UG1RO,YAAA,CH0Rc;EAKrBC,IAAAA,CAAAA,OAAAA,EAAAA,MAAAA,EAAAA,GAAoB,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,IAAA;EAIpBC,IAAAA,CAAAA,OAAAA,EAAAA,MAAgB,EAAA,GAAA,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,IAAA;EAAA,KAAA,CAAA,OAAA,EAAA,MAAA,EAAA,GAAA,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,IAAA;OACbL,CAAAA,OAAAA,EAAAA,MAAAA,EAAAA,GAAAA,IAAAA,EAAAA,OAAAA,EAAAA,CAAAA,EAAAA,IAAAA;;AAIgB,UGjSZ,SAAA,CHiSY;EAIxBM,YAAAA,CAAAA,EAAAA,OAAAA;EACAC,MAAAA,EGpSK,YHoSLA;EACAC,YAAAA,CAAAA,IAAAA,EGpSgB,OHoSG,CGpSK,OHoSL,CAAA,EAAA,OAGdE,CAHc,EAAA;IACnBD,KAAAA,CAAAA,EAAAA,MAAAA,EAAAA;EAEKC,CAAAA,CAAAA,EAAAA,IAAAA;EAAsB,EAAA,CAAA,QAAA,EAAA,MAAA,EAAA,OAAA,EAAA,CAAA,GAAA,IAAA,EAAA,OAAA,EAAA,EAAA,GAAA,OAAA,EAAA,QAAA,EAAA;IAEnBV,QAAAA,CAAAA,EAAAA,MAAAA;MAEGM,IAAAA;;UGxRC,eAAA;EF9DP6C,EAAAA,EAAAA,MAAAA;EAQAC,IAAAA,EAAAA,MAAO;EAAA,WAAA,EAAA,MAAA;SAIHC,EAAAA,MAAAA;UAC0BC,CAAAA,GAAAA,EEsDxB,SFtDwBA,CAAAA,EAAAA,IAAAA;YAAoCH,CAAAA,GAAAA,EEuD1D,SFvD0DA,CAAAA,EAAAA,IAAAA;;;;cG5BtE,QAAQ"}
1	+ {"version":3,"file":"plugin.d.ts","names":["ChangelogAction","ChangelogActor","ChangelogEntry","ChangelogEntry$1","EncryptedEnvelopeV1","EncryptedEnvelopeV1$1","Field","FieldEnvelope","FieldEnvelope$1","FieldFormat","FieldFormat$1","FieldSensitivity","FieldSensitivity$1","FieldView","GeneratedDataKey","GeneratedDataKey$1","IntegrationConfigResult","IntegrationConfigResult$1","IntegrationConfigSchemaField","IntegrationInstall","IntegrationInstall$1","RegistryEntry","RegistryEntry$1","ScopeInfo","ScopeInfo$1","SecretAggregate","SecretAggregate$1","SecretCategory","SecretCategory$1","SecretMetadata","SecretMetadata$1","SecretScope","SecretScope$1","ToolCaptureApi","InstallToolErrorCaptureOptions","installToolErrorCapture","AgentApiClientConfig","AgentApiTransport","Headers","BodyInit","Uint8Array","Response","Promise","RequestInit","AbortSignal","T","ApiBase","AgentWorkspaceInfo","WorkspaceApi","Record","SyncAgentInfo","SyncManifestEntry","SyncManifest","SyncPresignedUrl","SyncConfirmedUpload","SyncReconstructFile","SyncReconstructBundle","SyncAgentStats","SyncFileEntry","SyncSessionEntry","SyncSessionContent","SharedFileEntry","SyncApi","KnowledgeScopeType","KnowledgeScope","KnowledgeSearchHit","KnowledgeSearchResult","KnowledgeProfileLink","KnowledgeProfile","ChangeRequestResourceType","ChangeRequestOperation","ChangeRequestStatus","ChangeRequestActorKind","KnowledgeChangeRequest","ProposeScopeChangeInput","KnowledgeDoc","KnowledgeApi","MobileNumberInfo","MobileAvailableNumber","WhatsAppTemplate","MobileApi","RemoteSessionInfo","RemoteApi","AgentVoiceConfig","AgentSelf","AgentAvatarPresign","AgentVoice","SelfApi","VoiceTtsModel","VoiceTtsArgs","VoiceTtsResult","Buffer","VoiceSttArgs","VoiceSttResult","VoiceApi","NewsProvider","NewsArticle","NewsResult","SearchApi","AgentWebhook","CreatedAgentWebhook","AgentWebhookDelivery","WebhooksApi","ChatApi","ConnectCredentialsApi","DatabaseApi","IdentityApi","ImagesApi","IntegrationsApi","MemoryApi","SecretsApi","TeamsApi","AgentApiClient","KitLogger","ToolResult","ToolDef","TParameters","Record","Promise","PublicToolError","Error","publicToolError","ok","errResult","defineTool","IpcResponse","IpcClient","IpcModule","ConnectToDaemonOptions","ConnectToDaemonDependencies","connectToDaemon","ResolveOpenClawSdkOptions","ResolveOpenClawSdkDependencies","resolveOpenClawSdk","T","getActivationKey","isActivated","resetActivation","guardedStart"],"sources":["../../agent-api-client/dist/index.d.ts","../../openclaw-plugin-kit/dist/index.d.ts","../src/types.ts","../src/runtime.ts","../src/plugin.ts"],"sourcesContent":["import { ChangelogAction, ChangelogActor, ChangelogEntry, ChangelogEntry as ChangelogEntry$1, EncryptedEnvelopeV1, EncryptedEnvelopeV1 as EncryptedEnvelopeV1$1, Field, FieldEnvelope, FieldEnvelope as FieldEnvelope$1, FieldFormat, FieldFormat as FieldFormat$1, FieldSensitivity, FieldSensitivity as FieldSensitivity$1, FieldView, GeneratedDataKey, GeneratedDataKey as GeneratedDataKey$1, IntegrationConfigResult, IntegrationConfigResult as IntegrationConfigResult$1, IntegrationConfigSchemaField, IntegrationInstall, IntegrationInstall as IntegrationInstall$1, RegistryEntry, RegistryEntry as RegistryEntry$1, ScopeInfo, ScopeInfo as ScopeInfo$1, SecretAggregate, SecretAggregate as SecretAggregate$1, SecretCategory, SecretCategory as SecretCategory$1, SecretMetadata, SecretMetadata as SecretMetadata$1, SecretScope, SecretScope as SecretScope$1 } from \"@alfe/types\";\n\n//#region src/tool-error-capture.d.ts\n\n/*\n Tool-error capture for Alfe OpenClaw plugins.\n \n OpenClaw converts a thrown tool handler into a model-facing `tool_result`\n * WITHOUT logging, and most Alfe plugins catch-and-return an error result the\n * same silent way — so tool failures never appear in the runtime's output and\n * therefore never reach Sentry (the gateway daemon supervises the OpenClaw\n * process and reports error-looking output lines to the `agent-runtime`\n * project — see packages/gateway/src/runtime-output-monitor.ts).\n \n `installToolErrorCapture(api, { plugin })` closes that gap at the ONE choke\n * point every plugin already has: it wraps `api.registerTool` so every tool's\n * `execute` emits a deterministic, detector-matched line on failure:\n \n [ERROR] alfe-tool plugin=<plugin> tool=<name> <thrown\|result-error>: <msg> (at <first-frame>)\n \n The `[ERROR]` prefix at line start is exactly what the daemon's\n * `ErrorLineDetector` classifies as an error-log block, so the failure lands\n * in Sentry fingerprinted by its normalized message — no Sentry SDK inside\n * the plugin process, no new dependency. Behavior toward OpenClaw and the\n * model is UNCHANGED: throws are rethrown, results returned as-is.\n /\n/\n Minimal shape of the OpenClaw plugin api this helper relies on. Method\n * syntax on purpose — TS checks method signatures bivariantly, so each\n * plugin's own concretely-typed `registerTool(tool: ToolDef): void` is\n * accepted without casts.\n /\ninterface ToolCaptureApi {\n registerTool(...args: never[]): unknown;\n}\ninterface InstallToolErrorCaptureOptions {\n /* Plugin package short-name for attribution (e.g. \"openclaw-secrets\"). /\n plugin: string;\n /\n Line sink — defaults to writing `process.stderr` directly (the plugin\n * runs in-process in OpenClaw, so this lands on the runtime's stderr, which\n * the daemon supervises — and a console patch can't reformat it away).\n * Injectable for tests.\n /\n emit?: (line: string) => void;\n}\n/\n Wrap `api.registerTool` so every tool registered AFTER this call gets\n * failure capture. Handles both OpenClaw registration signatures:\n * `registerTool(toolDef)` and `registerTool((ctx) => toolDef, opts)`.\n * Call once, first thing in the plugin's `activate`/`register` entry.\n * Never throws.\n /\ndeclare function installToolErrorCapture(api: ToolCaptureApi, options: InstallToolErrorCaptureOptions): void;\n//# sourceMappingURL=tool-error-capture.d.ts.map\n//#endregion\n//#region src/transport.d.ts\n/\n Shared HTTP transport for the Agent API client — request core, retry\n * policy, error formatting, and the `ApiBase` class the domain method\n * groups under `./domains/` build on.\n /\ninterface AgentApiClientConfig {\n apiKey: string;\n apiUrl: string;\n}\n/\n Encode each path segment but keep the `/` separators — `encodeURIComponent`\n * would escape the slashes too, breaking greedy proxy routes.\n /\n\ndeclare class AgentApiTransport {\n private readonly apiKey;\n private readonly apiUrl;\n constructor(config: AgentApiClientConfig);\n /\n Binary sibling of `request<T>()`. `request()` forces\n * `Content-Type: application/json` and parses a `{ data: T }` envelope,\n * neither of which fits a raw-audio flow (voice TTS/STT), so those go\n * through this instead. Auth (Bearer), the request budget, and the single\n * retry policy on transient 5xx / network errors is kept in sync with\n * `request()`. Safe read methods retry once by default; mutation methods do\n * not, because a response can be lost after a handler or provider call has\n * already succeeded.\n /\n rawRequest(path: string, init: {\n method: string;\n headers: Headers;\n body?: BodyInit \| Uint8Array;\n }, extra?: {\n retry?: boolean;\n }): Promise<Response>;\n /\n @param extra.timeoutMs Per-request abort timeout (default REQUEST_TIMEOUT_MS).\n * Long endpoints (image generation) pass a larger value so the gateway's\n * own timeout wins with a readable status instead of a client-side abort.\n * @param extra.retry Whether to retry once on transient failures. Safe reads\n * (GET/HEAD/OPTIONS) default to true; mutations default to false. Set true\n * only when the endpoint's server-side contract is explicitly idempotent.\n * @param extra.signal Optional caller cancellation combined with the client's\n * own timeout budget. Aborting either signal cancels the request.\n /\n request<T>(path: string, options?: RequestInit, extra?: {\n timeoutMs?: number;\n retry?: boolean;\n signal?: AbortSignal;\n }): Promise<T>;\n}\n/\n Base class for the domain method groups. Holds the shared transport;\n * `AgentApiClient` assembles the groups onto one class via `applyMixins`\n * (prototype copy), so methods keep their original `this`-on-the-client\n * call shape.\n /\ndeclare class ApiBase {\n protected readonly transport: AgentApiTransport;\n constructor(transport: AgentApiTransport);\n}\n//# sourceMappingURL=transport.d.ts.map\n//#endregion\n//#region src/domains/workspace.d.ts\n/* Response of GET /agent/workspace (services/agents). /\ninterface AgentWorkspaceInfo {\n templateKey?: string;\n defaultModel?: string;\n installedFrom?: {\n templateKey: string;\n authorTenantId: string;\n version: number;\n };\n runtime?: string;\n teams?: {\n teamId: string;\n name: string;\n description?: string;\n parentTeamId?: string;\n }[];\n projects?: {\n projectId: string;\n name: string;\n description?: string;\n status: string;\n parentProjectId?: string;\n }[];\n teamIds?: string[];\n projectIds?: string[];\n}\ndeclare class WorkspaceApi extends ApiBase {\n /\n GET /agent/workspace — workspace config for the authenticated agent\n * (template assignment, default model, org roster).\n /\n getWorkspace(): Promise<AgentWorkspaceInfo>;\n /\n GET /templates/{key}/files — persona/workspace file contents for a\n * template the agent has access to. Pass `version` to pin to the version\n * the agent was installed from (omit → the endpoint resolves `latest`).\n /\n getTemplateFiles(templateKey: string, opts?: {\n version?: number;\n }): Promise<{\n files: Record<string, string>;\n }>;\n}\n//# sourceMappingURL=workspace.d.ts.map\n//#endregion\n//#region src/domains/sync.d.ts\ninterface SyncAgentInfo {\n agentId: string;\n tenantId: string;\n displayName: string;\n s3Prefix: string;\n status: \"stale\" \| \"syncing\" \| \"synced\";\n fileCount?: number;\n totalSize?: number;\n lastSync?: string;\n}\ninterface SyncManifestEntry {\n hash: string;\n size: number;\n modified: string;\n etag?: string;\n storageClass?: string;\n compressed?: boolean;\n}\ninterface SyncManifest {\n version: 1;\n agentId: string;\n lastSync: string;\n files: Record<string, SyncManifestEntry>;\n}\ninterface SyncPresignedUrl {\n path: string;\n url: string;\n expiresAt: string;\n}\ninterface SyncConfirmedUpload {\n filePath: string;\n hash: string;\n size: number;\n storageClass: \"STANDARD\" \| \"GLACIER_IR\";\n syncedAt: string;\n}\ninterface SyncReconstructFile {\n path: string;\n size: number;\n url: string;\n storageClass?: string;\n compressed?: boolean;\n}\ninterface SyncReconstructBundle {\n agentId: string;\n mode: \"full\" \| \"active\" \| \"memory\";\n fileCount: number;\n totalSize: number;\n files: SyncReconstructFile[];\n expiresAt: string;\n}\ninterface SyncAgentStats {\n agentId: string;\n standardBytes: number;\n glacierBytes: number;\n fileCount: number;\n lastSyncAt: string \| null;\n}\ninterface SyncFileEntry {\n filePath: string;\n size: number;\n modified: string;\n contentHash: string;\n storageClass?: string;\n compressed?: boolean;\n}\ninterface SyncSessionEntry {\n sessionId: string;\n size: number;\n lastModified: string;\n storageClass?: string;\n isArchived: boolean;\n}\ninterface SyncSessionContent {\n sessionId: string;\n content: string;\n compressed: boolean;\n}\ninterface SharedFileEntry {\n filePath: string;\n fileName: string;\n size: number;\n contentType?: string;\n}\ndeclare class SyncApi extends ApiBase {\n syncRegister(args?: {\n displayName?: string;\n }): Promise<{\n agent: SyncAgentInfo;\n }>;\n syncGetManifest(): Promise<SyncManifest>;\n syncPresign(args: {\n files: {\n path: string;\n operation: \"put\" \| \"get\";\n contentType?: string;\n }[];\n }): Promise<{\n urls: SyncPresignedUrl[];\n }>;\n syncConfirmUpload(args: {\n filePath: string;\n hash: string;\n size: number;\n storageClass?: \"STANDARD\" \| \"GLACIER_IR\";\n }): Promise<SyncConfirmedUpload>;\n syncReconstruct(args: {\n mode: \"full\" \| \"active\" \| \"memory\";\n }): Promise<SyncReconstructBundle>;\n syncGetStats(): Promise<SyncAgentStats>;\n syncListFiles(args?: {\n prefix?: string;\n }): Promise<{\n files: SyncFileEntry[];\n }>;\n syncListSessions(): Promise<{\n sessions: SyncSessionEntry[];\n }>;\n syncGetSession(sessionId: string): Promise<SyncSessionContent>;\n syncDeleteFile(filePath: string): Promise<{\n removed: boolean;\n }>;\n sharedListFiles(args: {\n scope: \"org\" \| \"team\" \| \"project\";\n scopeId: string;\n limit?: number;\n cursor?: string;\n }): Promise<{\n files: SharedFileEntry[];\n nextCursor: string \| null;\n }>;\n sharedDownloadUrl(args: {\n scope: \"org\" \| \"team\" \| \"project\";\n scopeId: string;\n filePath: string;\n }): Promise<{\n downloadUrl: string;\n expiresIn: number;\n }>;\n}\n//# sourceMappingURL=sync.d.ts.map\n//#endregion\n//#region src/domains/knowledge.d.ts\ntype KnowledgeScopeType = \"org\" \| \"team\" \| \"project\";\ninterface KnowledgeScope {\n scopeType: KnowledgeScopeType;\n scopeId: string;\n name: string;\n}\ninterface KnowledgeSearchHit {\n id: string;\n text: string;\n /* Normalized relevance in (0,1]; higher = closer. /\n score: number;\n scopeType: KnowledgeScopeType;\n scopeId: string;\n /\n Provenance of the hit. All live results are `\"doc\"`; `\"fact\"` only ever\n * appears for legacy vectors indexed before the facts primitive was removed\n * (the search index stays tolerant of them). Treat every hit as a doc.\n /\n source: \"doc\" \| \"fact\";\n /* The canonical file under shared/<scope>/ (present on doc hits). /\n filePath?: string;\n /* Legacy-only: the id of a pre-removal fact vector. /\n factId?: string;\n}\ninterface KnowledgeSearchResult {\n results: KnowledgeSearchHit[];\n /* True when fan-out breadth was capped (more member scopes than the cap). /\n truncatedScopes: boolean;\n}\ninterface KnowledgeProfileLink {\n label: string;\n url: string;\n}\ninterface KnowledgeProfile {\n scopeType: KnowledgeScopeType;\n scopeId: string;\n about: string \| null;\n description: string \| null;\n links: KnowledgeProfileLink[];\n updatedAt: string \| null;\n updatedBy: string \| null;\n}\ntype ChangeRequestResourceType = \"doc\" \| \"profile\";\ntype ChangeRequestOperation = \"create\" \| \"update\" \| \"delete\";\ntype ChangeRequestStatus = \"open\" \| \"approved\" \| \"rejected\" \| \"withdrawn\" \| \"superseded\";\ntype ChangeRequestActorKind = \"human\" \| \"agent\";\n/* Public projection of a change request (mirrors `PublicChangeRequest` in services/org). /\ninterface KnowledgeChangeRequest {\n changeRequestId: string;\n scopeType: KnowledgeScopeType;\n scopeId: string;\n resourceType: ChangeRequestResourceType;\n operation: ChangeRequestOperation;\n targetPath: string \| null;\n baseVersionId: string \| null;\n proposedContentType: string \| null;\n status: ChangeRequestStatus;\n proposerId: string;\n proposerKind: ChangeRequestActorKind;\n rationale: string;\n reviewerId: string \| null;\n reviewerKind: ChangeRequestActorKind \| null;\n reviewedAt: string \| null;\n reviewNote: string \| null;\n appliedRef: string \| null;\n createdAt: string;\n updatedAt: string;\n}\n/* Per-type proposal payload for `proposeScopeChange`. /\ninterface ProposeScopeChangeInput {\n resourceType: ChangeRequestResourceType;\n operation: ChangeRequestOperation;\n /* Why the change is proposed — shown to the reviewer. /\n rationale: string;\n /* doc: the path the proposal applies to (e.g. designs/data-center.md). /\n targetPath?: string;\n /* doc create/update: the staged body to upload (markdown or other text). /\n content?: string;\n /* doc create/update: content type of the staged body (default text/markdown). /\n contentType?: string;\n /* profile: the proposed value ({ about, description, links }). /\n proposedValue?: unknown;\n}\ninterface KnowledgeDoc {\n filePath: string;\n fileName: string;\n contentType?: string;\n size: number;\n uploadedBy?: string;\n createdAt: string;\n updatedAt: string;\n}\ndeclare class KnowledgeApi extends ApiBase {\n /\n Semantic search across the agent's member scopes. Fan-out is gated\n * server-side by `listScopes` set-inclusion (fail-closed). Pass\n * `scopeType` + `scopeId` to narrow to one scope; a non-member scope\n * yields empty results (never a cross-scope leak).\n /\n knowledgeSearch(query: string, opts?: {\n limit?: number;\n scopeType?: KnowledgeScopeType;\n scopeId?: string;\n }): Promise<KnowledgeSearchResult>;\n /* Enumerate the scopes (org + teams + projects) this agent belongs to. /\n listScopes(): Promise<{\n scopes: KnowledgeScope[];\n }>;\n /* Read a scope's structured knowledge profile (after membership check). /\n getScopeProfile(scopeType: KnowledgeScopeType, scopeId: string): Promise<KnowledgeProfile>;\n /\n Open a change request against a scope's knowledge resource. For a doc\n * create/update, `services/org` returns a presigned staging PUT; this method\n * uploads the proposed `content` to it (echoing the same Content-Type that\n * was signed), mirroring `writeScopeDoc`. The staged body is applied to the\n * canonical doc — attributed to this agent — only when a reviewer approves.\n /\n proposeScopeChange(scopeType: KnowledgeScopeType, scopeId: string, input: ProposeScopeChangeInput): Promise<KnowledgeChangeRequest>;\n /\n List the agent's OWN change requests in a scope (filtered server-side to\n * this agent as proposer). Pass `status` to narrow to open / approved / etc.\n /\n listScopeChangeRequests(scopeType: KnowledgeScopeType, scopeId: string, opts?: {\n status?: ChangeRequestStatus;\n limit?: number;\n cursor?: string;\n }): Promise<{\n changeRequests: KnowledgeChangeRequest[];\n nextCursor: string \| null;\n }>;\n /* List a scope's docs (the org-files corpus; mirrored to shared/<scope>/). /\n listScopeDocs(scopeType: KnowledgeScopeType, scopeId: string, opts?: {\n limit?: number;\n cursor?: string;\n }): Promise<{\n files: KnowledgeDoc[];\n nextCursor: string \| null;\n }>;\n /\n Read the full text of a scope doc. Resolves a presigned download URL\n * from `services/org`, then fetches the bytes directly from S3 (the one\n * legitimate raw fetch in a plugin — same pattern as sync).\n /\n readScopeDoc(scopeType: KnowledgeScopeType, scopeId: string, filePath: string, opts?: {\n maxBytes?: number;\n }): Promise<{\n filePath: string;\n text: string;\n }>;\n /\n Write (create or overwrite) a scope doc. Two-step presigned upload:\n * `services/org` returns a signed URL plus `requiredHeaders` (author /\n * authorKind / message as `x-amz-meta-`) that MUST be sent verbatim on\n the PUT, alongside the same `Content-Type` that was signed. Author and\n * authorKind are server-set from the agent token — never trusted here.\n /\n writeScopeDoc(scopeType: KnowledgeScopeType, scopeId: string, filePath: string, content: string, opts?: {\n contentType?: string;\n message?: string;\n }): Promise<{\n filePath: string;\n }>;\n}\n//# sourceMappingURL=knowledge.d.ts.map\n//#endregion\n//#region src/domains/mobile.d.ts\n/* Response of GET /mobile/numbers for an agent (services/mobile). /\ninterface MobileNumberInfo {\n phoneNumber: string;\n countryCode: string;\n monthlyPrice?: number;\n status: string;\n errorMessage?: string;\n}\n/* One purchasable number from GET /mobile/numbers/search. /\ninterface MobileAvailableNumber {\n number: string;\n friendlyName: string;\n locality: string;\n region: string;\n country: string;\n}\n/* Approved WhatsApp content template from GET /mobile/whatsapp/templates. /\ninterface WhatsAppTemplate {\n contentSid: string;\n name: string;\n language: string;\n body: string;\n variables: Record<string, string>;\n category?: string;\n}\ndeclare class MobileApi extends ApiBase {\n getMobileNumber(): Promise<MobileNumberInfo>;\n searchMobileNumbers(args?: {\n country?: string;\n query?: string;\n }): Promise<{\n numbers: MobileAvailableNumber[];\n monthlyPrice: number;\n }>;\n assignMobileNumber(args: {\n phoneNumber: string;\n countryCode: string;\n }): Promise<{\n phoneNumber: string;\n countryCode: string;\n status: \"pending\";\n }>;\n releaseMobileNumber(): Promise<{\n released: true;\n }>;\n sendSms(args: {\n to: string;\n body: string;\n }): Promise<{\n sent: true;\n sid: string;\n }>;\n startOutboundCall(args: {\n to: string;\n }): Promise<{\n callSid: string;\n status: string;\n }>;\n getWhatsAppSession(to: string): Promise<{\n active: boolean;\n expiresAt?: string;\n }>;\n sendWhatsAppMessage(args: {\n to: string;\n body: string;\n }): Promise<{\n sent: true;\n sid: string;\n }>;\n sendWhatsAppTemplate(args: {\n to: string;\n contentSid: string;\n contentVariables: Record<string, string>;\n bodyPreview?: string;\n }): Promise<{\n sent: true;\n sid: string;\n }>;\n listWhatsAppTemplates(): Promise<{\n templates: WhatsAppTemplate[];\n }>;\n}\n//# sourceMappingURL=mobile.d.ts.map\n//#endregion\n//#region src/domains/remote.d.ts\ninterface RemoteSessionInfo {\n sessionId: string;\n agentId: string;\n surface: \"browser\" \| \"terminal\";\n status: \"agent_driving\" \| \"awaiting_human\" \| \"human_in_control\" \| \"resuming\" \| \"completed\" \| \"expired\" \| \"failed\";\n url?: string;\n instructions?: string;\n requestedAt?: string;\n}\ndeclare class RemoteApi extends ApiBase {\n requestBrowserTakeover(args: {\n instructions: string;\n url?: string;\n conversationId?: string;\n }): Promise<{\n sessionId: string;\n status: string;\n }>;\n getRemoteSession(sessionId: string): Promise<RemoteSessionInfo>;\n completeRemoteSession(sessionId: string): Promise<{\n ok: boolean;\n }>;\n}\n//# sourceMappingURL=remote.d.ts.map\n//#endregion\n//#region src/domains/self.d.ts\n/* Voice settings — core agent config. Mirrors `VoiceConfig` in `@alfe/types`. /\ninterface AgentVoiceConfig {\n /* ElevenLabs voice ID; platform default when unset. /\n voiceId?: string;\n ttsModel?: string;\n enabled?: boolean;\n}\n/\n The agent's own public identity, as returned by `updateSelf`, `generateAvatar`,\n * `presignAvatar`'s finalize (`finalizeAvatar`). This is the public agent\n * projection; only the identity-relevant fields are typed here — the response\n * carries the full public agent record.\n /\ninterface AgentSelf {\n agentId: string;\n tenantId: string;\n name: string;\n avatarUrl?: string;\n voiceConfig?: AgentVoiceConfig;\n status: string;\n}\n/* Result of `presignAvatar` — the agent PUTs bytes to `uploadUrl`, then finalizes with `s3Key`. /\ninterface AgentAvatarPresign {\n /* Presigned PUT URL to upload the image bytes to. /\n uploadUrl: string;\n /* Object key — echoed back to `finalizeAvatar`. /\n s3Key: string;\n /* Stable public URL the avatar will be served from once finalized. /\n publicUrl: string;\n /* ISO expiry of the presigned PUT URL. /\n expiresAt: string;\n}\n/* A voice in the platform catalogue (ElevenLabs), from `listVoices`. /\ninterface AgentVoice {\n id: string;\n name: string;\n previewUrl: string;\n description: string;\n labels: Record<string, string>;\n category: string;\n}\ndeclare class SelfApi extends ApiBase {\n /* Update the agent's own name and/or voice config. Returns the updated agent. /\n updateSelf(update: {\n name?: string;\n voiceConfig?: AgentVoiceConfig;\n }): Promise<AgentSelf>;\n /\n Generate the agent's own avatar from a text prompt. The image is generated,\n * stored, and set on the agent server-side; returns the updated agent.\n \n ASYNC (same reason as `generateImage`): avatar gen runs `gpt-image-1`\n * (30–60s) which exceeds the API Gateway 30s ceiling, so this enqueues a job\n * (`POST /agent/avatar/generate` → `jobId`) then polls (`GET /agent/avatar/{jobId}`)\n * until the avatar is set. Signature unchanged — the plugin is unaffected.\n /\n generateAvatar(args: {\n prompt: string;\n }): Promise<AgentSelf>;\n /\n Get a presigned PUT URL to upload a new avatar image. Upload the bytes to\n * `uploadUrl`, then call `finalizeAvatar(s3Key)` to set it on the agent.\n /\n presignAvatar(args: {\n mimeType: string;\n size: number;\n }): Promise<AgentAvatarPresign>;\n /\n Finalize an avatar upload — validates ownership + size, then sets the\n * agent's `avatarUrl` server-side. Returns the updated agent.\n /\n finalizeAvatar(s3Key: string): Promise<AgentSelf>;\n /* List the platform voice catalogue (ElevenLabs) so the agent can pick its own voice. /\n listVoices(): Promise<{\n voices: AgentVoice[];\n }>;\n}\n//# sourceMappingURL=self.d.ts.map\n//#endregion\n//#region src/domains/voice.d.ts\n/* The ElevenLabs models with a pricing row — the TTS endpoint rejects any other value. /\ntype VoiceTtsModel = \"eleven_turbo_v2_5\" \| \"eleven_multilingual_v2\";\ninterface VoiceTtsArgs {\n /* Text to synthesize (1–5000 chars — the endpoint enforces this). /\n text: string;\n /* ElevenLabs voice id; platform default when unset. /\n voiceId?: string;\n /* TTS model; `eleven_turbo_v2_5` (lower latency) when unset. /\n model?: VoiceTtsModel;\n}\n/* Raw synthesized audio plus its PCM framing (from the response headers). /\ninterface VoiceTtsResult {\n /* Raw little-endian PCM samples — no container. Wrap in WAV to make a playable file. /\n audio: Buffer;\n /* Samples per second (e.g. 24000). /\n sampleRate: number;\n /* Channel count (mono = 1). /\n channels: number;\n /* Bits per sample (e.g. 16). /\n bitDepth: number;\n}\ninterface VoiceSttArgs {\n /* Raw linear16 (16-bit little-endian) mono PCM samples — no WAV/container header. /\n audio: Uint8Array;\n /* Sample rate of `audio` in Hz (8000–48000). /\n sampleRate: number;\n}\ninterface VoiceSttResult {\n text: string;\n /* Deepgram confidence in (0,1]. /\n confidence: number;\n}\ndeclare class VoiceApi extends ApiBase {\n /\n Text-to-speech. Returns raw PCM audio bytes plus their framing — the\n * voice service defaults to 24 kHz / mono / 16-bit. Wrap in a WAV container\n * to produce a playable file. Metered per character against the tenant\n * credit pool server-side; TTS completes regardless of metering outcome.\n /\n tts(args: VoiceTtsArgs): Promise<VoiceTtsResult>;\n /\n Speech-to-text. Accepts raw linear16 (16-bit LE) mono PCM — NOT a WAV or\n * other container (the endpoint transcribes with a fixed linear16 encoding,\n * so a container header would be transcribed as noise). Strip any WAV header\n * and pass `sampleRate` from it before calling. Metered by transcribed\n * duration against the tenant credit pool server-side.\n /\n stt(args: VoiceSttArgs): Promise<VoiceSttResult>;\n}\n//# sourceMappingURL=voice.d.ts.map\n//#endregion\n//#region src/domains/search.d.ts\n/\n The broad-news providers behind the metered `services/news` Lambda. The\n * server validates this with a zod enum; a value outside the union is an\n * unpriceable product, so keep the literal union in lockstep with the service.\n /\ntype NewsProvider = \"apitube\" \| \"newsdata\";\n/* One normalized article. `sentiment` is provider-shaped (APITube supplies it). /\ninterface NewsArticle {\n title: string;\n url: string;\n source: string;\n publishedAt: string;\n snippet: string;\n sentiment?: unknown;\n}\n/* Provider-agnostic result — the server normalizes every adapter to this. /\ninterface NewsResult {\n articles: NewsArticle[];\n provider: string;\n}\ndeclare class SearchApi extends ApiBase {\n searchWeb(params: {\n query: string;\n count?: number;\n offset?: number;\n country?: string;\n freshness?: string;\n }, options?: {\n signal?: AbortSignal;\n }): Promise<unknown>;\n searchImages(params: {\n query: string;\n count?: number;\n }, options?: {\n signal?: AbortSignal;\n }): Promise<unknown>;\n searchNews(params: {\n query: string;\n count?: number;\n offset?: number;\n freshness?: string;\n }, options?: {\n signal?: AbortSignal;\n }): Promise<unknown>;\n /* Search news across the selected provider's corpus. → POST /agent/news/search /\n newsSearch(params: {\n query: string;\n provider?: NewsProvider;\n source?: string;\n from?: string;\n to?: string;\n language?: string;\n category?: string;\n limit?: number;\n }): Promise<NewsResult>;\n /* Top headlines for the selected provider. → POST /agent/news/headlines /\n newsHeadlines(params?: {\n provider?: NewsProvider;\n category?: string;\n source?: string;\n language?: string;\n limit?: number;\n }): Promise<NewsResult>;\n}\n//# sourceMappingURL=search.d.ts.map\n//#endregion\n//#region src/domains/webhooks.d.ts\ninterface AgentWebhook {\n webhookId: string;\n tenantId: string;\n agentId: string;\n name: string;\n provider: string;\n active: boolean;\n createdBy: string;\n createdAt: string;\n updatedAt: string;\n}\ninterface CreatedAgentWebhook extends AgentWebhook {\n url: string;\n signingSecret: string;\n}\ninterface AgentWebhookDelivery {\n deliveryId: string;\n webhookId: string;\n status: string;\n attempts: number;\n createdAt: string;\n deliveredAt?: string;\n}\ndeclare class WebhooksApi extends ApiBase {\n createWebhook(args: {\n name: string;\n provider?: \"generic\" \| \"github\" \| \"stripe\" \| \"slack\";\n }): Promise<CreatedAgentWebhook>;\n listWebhooks(): Promise<AgentWebhook[]>;\n deleteWebhook(webhookId: string): Promise<{\n webhookId: string;\n active: false;\n }>;\n rotateWebhookSecret(webhookId: string): Promise<{\n webhookId: string;\n signingSecret: string;\n }>;\n listWebhookDeliveries(webhookId: string): Promise<AgentWebhookDelivery[]>;\n}\n//# sourceMappingURL=webhooks.d.ts.map\n//#endregion\n//#region src/domains/chat.d.ts\ndeclare class ChatApi extends ApiBase {\n presignAttachments(files: {\n filename: string;\n mimeType: string;\n size: number;\n }[]): Promise<{\n attachments: {\n id: string;\n uploadUrl: string;\n downloadUrl: string;\n s3Key: string;\n expiresAt: string;\n }[];\n }>;\n recordActivity(data: {\n userId?: string;\n channel: string;\n role: \"user\" \| \"assistant\";\n }): Promise<{\n recorded: boolean;\n }>;\n}\n//# sourceMappingURL=chat.d.ts.map\n//#endregion\n//#region src/domains/connect-credentials.d.ts\ndeclare class ConnectCredentialsApi extends ApiBase {\n /\n Returns every connected Google account for the agent. Multi-account by\n * design — the openclaw-google plugin requires the LLM to pass `email`\n * explicitly to `google_run_command` so an account is always selected\n * deliberately.\n \n 2026-05-14 (connections-redesign PR 1): the legacy flat shape (`email`,\n * `refreshToken`, `accessToken`, etc., populated from the default account)\n * is gone. Iterate over `accounts`.\n /\n getGoogleCredentials(): Promise<{\n accounts: {\n email: string;\n refreshToken: string;\n clientId: string;\n clientSecret: string;\n displayName?: string;\n connectedAt?: string;\n }[];\n }>;\n disconnectGoogleAccount(email: string): Promise<{\n accounts: {\n email: string;\n displayName?: string;\n connectedAt?: string;\n }[];\n }>;\n getGoogleChatCredentials(): Promise<{\n email: string;\n refreshToken: string;\n clientId: string;\n clientSecret: string;\n displayName?: string;\n }>;\n /\n Fetch decrypted credentials for ONE specific connection by its\n * stable connectionId (connection-scoped, vs the provider-scoped\n * `get<Provider>Credentials` helpers). Used by the daemon to resolve\n * a Custom Connection-driven integration's credentials from the\n * exact connection it was installed from — every custom connection\n * shares the `custom` provider id, so provider-scoping is ambiguous.\n \n For custom connections `accessToken` is the JSON-encoded secret\n * bundle (the daemon un-bundles it); non-secret fields are on\n * `providerMetadata`. The endpoint enforces that the connection is in\n * the calling agent's effective scope (403 otherwise).\n /\n getConnectionCredentials(connectionId: string): Promise<{\n provider: string;\n connectionId: string;\n accountIdentifier?: string;\n accessToken?: string;\n providerMetadata?: Record<string, unknown>;\n [key: string]: unknown;\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getGithubAccounts()` for the multi-\n * account shape required by Pattern A — explicit selector args on every\n * tool. Retained because the `@alfe.ai/github-mcp` proxy is the\n * only consumer that knows about Pattern A; legacy env-interpolation\n * callers will keep hitting `/credentials` until they move to the proxy.\n /\n getGithubCredentials(): Promise<{\n login: string;\n accessToken: string;\n }>;\n /\n Pattern A: multi-account credential fetch for GitHub.\n \n Returns every agent-scoped GitHub connection. The caller is expected\n * to require a `login` selector on every credential-touching tool and\n * look up the matching account at dispatch time.\n \n GitHub OAuth tokens have no expiry (`tokenLifecycle: \"no_expiry\"`),\n * so there is intentionally no `refreshGithubAccountToken` method — if\n * a token is revoked the user must re-run the OAuth flow.\n \n Returned `accounts[i].login` is the GitHub username — the stable\n * cross-session identifier the LLM should pass.\n /\n getGithubAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n login: string;\n scopes: string;\n }[];\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getXeroAccounts()` for the multi-\n * account shape required by Pattern A — explicit selector args on every\n * tool. This method will be removed once all consumers migrate.\n /\n getXeroCredentials(): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n xeroTenantId: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Xero. Returns every\n * agent-scoped Xero connection. The caller is expected to require a\n * selector arg (e.g. `xeroTenantId`) on every credential-touching tool\n * and look up the matching account by that selector at dispatch time.\n \n `xeroTenantId` is the model-facing organisation selector. The separate\n * `accountIdentifier` is the Connect persistence key used for refresh and\n * may be an email; never substitute one for the other.\n /\n getXeroAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n xeroTenantId: string;\n }[];\n }>;\n refreshXeroToken(): Promise<{\n accessToken: string;\n expiresAt: string;\n }>;\n /\n Refresh a specific Xero Connection by its exact `accountIdentifier` from\n * `getXeroAccounts()`. Do not substitute `xeroTenantId`: current Xero OAuth\n * rows may use the account email as their persistence key even when a sole\n * organisation tenant ID is available in provider metadata.\n /\n refreshXeroAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getNotionAccounts()` for the multi-\n * account shape required by Pattern A.\n /\n getNotionCredentials(): Promise<{\n accessToken: string;\n workspaceId: string;\n workspaceName: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Notion. Returns every\n * agent-scoped Notion connection. The caller is expected to require a\n * selector arg (e.g. `workspaceId`) on every credential-touching tool.\n \n Returned `accounts[i].accountIdentifier` is the Notion workspaceId.\n /\n getNotionAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n workspaceId: string;\n workspaceName: string;\n }[];\n }>;\n /\n @deprecated Returns a single primary Atlassian Connection's credentials\n * (one OAuth user, one cloudId) — the legacy \"pick-the-default-connection\"\n * shape. Atlassian is multi-site by nature (each OAuth user may have\n * access to multiple Cloud sites), so Pattern A plugins MUST use\n * `getAtlassianAccounts()` to discover the full set and dispatch via\n * the `cloudId` selector arg.\n /\n getAtlassianCredentials(): Promise<{\n accessToken: string;\n refreshToken: string;\n accessTokenExpiresAt: string;\n cloudId: string;\n siteName: string;\n siteUrl: string;\n email: string;\n enabledProducts: string[];\n clientId: string;\n clientSecret: string;\n }>;\n refreshAtlassianToken(): Promise<{\n accessToken: string;\n expiresAt: string;\n }>;\n /\n Pattern A: multi-account / multi-site credential fetch for Atlassian.\n \n Returns every agent-scoped Atlassian Connection. Each Connection is\n * one OAuth user with a single access token and N accessible Cloud\n * sites (`availableSites`). The caller is expected to:\n \n 1. Flatten (connection × cloudId) into one MCP child per site.\n * 2. Require a `cloudId` selector on every credential-touching tool.\n * 3. Use the access token bound to the Connection that owns the\n * requested `cloudId` (Atlassian shares one access token across\n * all sites accessible to the OAuth user).\n \n Per-account token refresh uses `refreshAtlassianAccountToken(email)`\n * — refreshing one Connection rotates its single access token, which\n * then applies to every cloudId for that Connection.\n \n Returned `accounts[i].accountIdentifier` is the OAuth user's email\n * — the stable cross-session identifier for refresh purposes. The LLM\n * never sees this directly: it picks a site via the `cloudId` arg\n * instead.\n /\n getAtlassianAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n clientId: string;\n clientSecret: string;\n cloudId: string;\n siteName: string;\n siteUrl: string;\n availableSites: {\n id: string;\n url: string;\n name: string;\n scopes?: string[];\n avatarUrl?: string;\n }[];\n }[];\n }>;\n /\n Pattern A: refresh a specific Atlassian Connection by `accountIdentifier`\n * (the OAuth user's email).\n \n Atlassian rotates refresh tokens (`rotatesRefreshToken: true`); the\n * server-side per-account refresh endpoint handles rotation and\n * persistence. Refreshing one Connection updates its single access\n * token, which applies to every accessible Cloud site (cloudId) for\n * that OAuth user.\n \n Returns the new access token + expiry. The proxy is responsible for\n * fanning the new token out to every child server it spawned for\n * cloudIds owned by this Connection.\n /\n refreshAtlassianAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n @deprecated Returns a single primary credential blob (legacy \"pick-the-\n * default-connection\" shape). Use `getMYOBAccounts()` for the multi-\n * account shape required by Pattern A.\n /\n getMYOBCredentials(): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n myobBusinessId: string;\n clientId: string;\n }>;\n /\n Pattern A: multi-account credential fetch for MYOB. Returns every\n * agent-scoped MYOB connection. The caller is expected to require a\n * selector arg (e.g. `myobBusinessId` / `accountIdentifier`) on every\n * credential-touching tool.\n \n Returned `accounts[i].accountIdentifier` is the MYOB businessId.\n /\n getMYOBAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n myobBusinessId: string;\n clientId: string;\n }[];\n }>;\n refreshMYOBToken(): Promise<{\n accessToken: string;\n expiresAt: string;\n }>;\n /\n Pattern A: refresh one MYOB Connection by its stable\n * `accountIdentifier` (the MYOB business id returned by\n * `getMYOBAccounts()`).\n \n MYOB refresh tokens belong to individual Connection rows. A\n * multi-business client must use this method instead of refreshing the\n * primary Connection and copying that access token into every cached\n * business client.\n /\n refreshMYOBAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n @deprecated Returns a single primary credential blob. Use\n * `getSalesforceAccounts()` for the multi-account shape required by\n * Pattern A.\n /\n getSalesforceCredentials(): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n instanceUrl: string;\n orgId: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Salesforce. Returns every\n * agent-scoped Salesforce connection. One OAuth grant maps to one org, so\n * `accounts[i].accountIdentifier` (and `orgId`) is the Salesforce org id —\n * the selector every credential-touching tool requires.\n /\n getSalesforceAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n instanceUrl: string;\n orgId: string;\n }[];\n }>;\n /\n Refresh the access token for a specific Salesforce org. Salesforce\n * tokens aren't interchangeable across orgs, so the connection is targeted\n * by `accountIdentifier` (the org id) — mirrors `refreshXeroAccountToken`.\n /\n refreshSalesforceAccountToken(orgId: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Microsoft 365.\n \n Returns every agent-scoped Microsoft connection. The caller is expected\n * to require an `email` selector on every credential-touching tool and\n * look up the matching account at dispatch time.\n \n Returned `accounts[i].accountIdentifier` is the user's primary email\n * (or the tid claim as fallback) — the stable cross-session identifier\n * the LLM should pass.\n \n Per-account token refresh is exposed via `refreshMicrosoftAccountToken`,\n * NOT `refreshXeroAccountToken` — Microsoft refresh tokens are not\n * interchangeable across (tenant, user) pairs.\n /\n getMicrosoftAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n email: string;\n microsoftTenantId: string;\n workspaceDomain: string;\n }[];\n }>;\n /\n Pattern A: refresh a specific Microsoft 365 connection by its\n * `accountIdentifier`. For Microsoft, `accountIdentifier` is the user's\n * email when the Graph profile fetch succeeded at connect time, and the\n * Azure tenant id (`tid` claim) as fallback. Callers should pass the\n * value returned by `getMicrosoftAccounts()` rather than synthesising\n * an email locally.\n \n Microsoft refresh tokens are bound to a specific (tenant, user) pair —\n * they are NOT interchangeable across accounts, so per-account refresh\n * is mandatory. The generic /accounts/{accountIdentifier}/refresh\n * endpoint walks the agent's full visible scope chain to find a matching\n * connection (works for inherited team/project Microsoft connections).\n /\n refreshMicrosoftAccountToken(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n Disconnects one connected Microsoft 365 account for the agent, by its\n * `accountIdentifier`. Hits the generic per-account disconnect route\n * (`DELETE /agent/connect/microsoft/accounts/{accountIdentifier}`), which\n * resolves across the agent's full effective scope chain and deletes the\n * matching Connection row. Returns the remaining accounts.\n \n IMPORTANT: pass the `accountIdentifier` from `getMicrosoftAccounts()`, NOT\n * a synthesised email. For Microsoft, `accountIdentifier` is the user's email\n * only when the Graph profile fetch succeeded at connect time; it falls back\n * to the Azure tenant id (`tid` claim) otherwise. The backend matches on\n * `accountIdentifier` exactly, so passing an email would 404 on those\n * fallback-identifier accounts. (This is why the param is not named `email`,\n * unlike `disconnectGoogleAccount` where the identifier is always the email.)\n /\n disconnectMicrosoftAccount(accountIdentifier: string): Promise<{\n accounts: {\n accountIdentifier: string;\n displayName?: string;\n connectedAt?: string;\n }[];\n }>;\n /\n Resolve the primary cTrader Connection's credentials for the calling\n * agent. Unlike most providers, the cTrader Open API needs app-level auth\n * (`clientId` + `clientSecret`) AND account auth (`accessToken` +\n * `accountId`) on the socket, so `@alfe.ai/ctrader-mcp` self-fetches the\n * full set here at startup (the atlassian/google pattern). `clientId` /\n * `clientSecret` are the SST-sourced global app credentials the connect\n * endpoint injects — they are never persisted on the connection. `host` is\n * the resolved TLS endpoint (`live.ctraderapi.com` / `demo.ctraderapi.com`)\n * derived from the selected account's live/demo flag.\n /\n getCTraderCredentials(): Promise<{\n accessToken: string;\n refreshToken: string;\n accountId: string;\n host: string;\n clientId: string;\n clientSecret: string;\n }>;\n /\n Pattern A: multi-account credential fetch for cTrader.\n \n Unlike atlassian/salesforce (one Connection row per account/site), a\n * cTrader is MULTI-grant per agent: an agent may connect several distinct\n * cTrader logins, each its own Connection row keyed on `accountIdentifier =\n * ctid:<userId>` (Phase 1). This aggregates the trading accounts across\n * ALL of those Connection rows — each row contributes its `availableAccounts`\n * flattened, and every account carries ITS OWN grant's `accessToken` (the\n * token that authenticates that account against the cTrader Open API). One\n * OAuth grant still covers all accounts under that single login on one shared\n * token; only the `ctidTraderAccountId` and the protobuf socket `host` (live\n * vs demo) differ within a grant. Across grants the tokens differ, so the\n * token is now PER-ACCOUNT rather than hoisted to the top level.\n \n `host` per account is derived from the account's `isLive` flag\n * (`live.ctraderapi.com` / `demo.ctraderapi.com`) — the same mapping the\n * connect provider applies server-side when an account is auto-selected.\n \n `clientId` / `clientSecret` are the SST-sourced GLOBAL app credentials the\n * connect endpoint injects — identical across every Connection row (one\n * cTrader app), never persisted on a connection. We take them from the first\n * row that carries them.\n \n Accounts are deduped on `ctidTraderAccountId` first-wins: Spotware ids are\n * globally unique across logins, so a duplicate can only appear if the same\n * account somehow surfaced under two grants — first-wins keeps it\n * deterministic.\n \n `accounts` may be empty (no cTrader Connection at all), in which case we\n * return empty creds rather than throwing.\n /\n getCTraderAccounts(): Promise<{\n accounts: {\n ctidTraderAccountId: string;\n host: string;\n isLive: boolean;\n brokerName?: string;\n accountNumber?: string;\n accessToken: string;\n /\n The stable per-grant Connection key (`ctid:<userId>`) this account\n * belongs to. Every trading account under one cTrader login shares one\n * grant (one OAuth token), so this is the identifier the MCP server\n * passes to `refreshCTraderAccount()` to rotate the token for the whole\n * grant on a `CH_ACCESS_TOKEN_INVALID` expiry. Empty string when the\n * server did not supply one (legacy rows) — such an account can still\n * trade with its current token but cannot self-refresh.\n /\n accountIdentifier: string;\n }[];\n clientId: string;\n clientSecret: string;\n }>;\n /\n Pattern A: refresh a specific cTrader grant by its stable\n * `accountIdentifier` (`ctid:<userId>` from `getCTraderAccounts()`).\n \n cTrader access tokens live ~30 days; the `getCTraderAccounts()` /\n * credentials reads serve the STORED token without refreshing, so refresh is\n * the consumer's job. `@alfe.ai/ctrader-mcp` calls this when the cTrader Open\n * API rejects an account-auth with `CH_ACCESS_TOKEN_INVALID`, then re-runs\n * the socket handshake with the returned `accessToken`.\n \n Refreshing one grant rotates the single OAuth token that covers EVERY\n * trading account under that login. cTrader's refresh token itself does not\n * expire but may rotate on refresh (`rotatesRefreshToken: true`); connect\n * persists the rotated refresh token server-side, so the caller only needs\n * the new `accessToken`. Mirrors `refreshXeroAccountToken`.\n /\n refreshCTraderAccount(accountIdentifier: string): Promise<{\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n /\n @deprecated Returns a single primary credential blob. Use\n * `getShopifyAccounts()` for the multi-account shape required by Pattern A\n * (`@alfe.ai/shopify-mcp` keys per-shop on the myshopify domain).\n /\n getShopifyCredentials(): Promise<{\n accessToken: string;\n shopDomain: string;\n shopGid: string;\n shopName: string;\n apiVersion: string;\n }>;\n /\n Pattern A: multi-account credential fetch for Shopify. Returns every\n * agent-scoped Shopify Connection. One OAuth grant maps to one store, so the\n * stable per-call selector is the store's myshopify domain (`shopDomain`),\n * NOT `accountIdentifier` — the connect provider keys `accountIdentifier` on\n * the immutable shop GID (falling back to the domain), so `shopDomain` is the\n * value the LLM passes and the plugin routes on.\n \n Each entry is shaped by the connect provider's `buildCredentialsResponse`:\n * `{ accessToken, shopDomain, shopGid, shopName, apiVersion }` — offline\n * Shopify tokens never expire, so there is NO token / expiry field and no\n * refresh method (unlike Salesforce). The GraphQL Admin API authenticates\n * purely on `X-Shopify-Access-Token`; no client credentials are on the wire.\n /\n getShopifyAccounts(): Promise<{\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n connectedAt: string;\n accessToken: string;\n shopDomain: string;\n shopGid: string;\n shopName: string;\n apiVersion: string;\n }[];\n }>;\n /\n Pattern A: provider-parameterized multi-account credential fetch for the\n * social connectors (Bluesky, and the approval-gated backlog: X, Meta,\n * Threads, LinkedIn, Pinterest, TikTok, Reddit, YouTube).\n \n Unlike the bespoke `getGithubAccounts()` / `getXeroAccounts()` shapes,\n * this returns a UNIFORM normalized account shape so `@alfe.ai/social-mcp`'s\n * shared driver can require a single `account` selector on every\n * credential-touching tool regardless of platform. The backend\n * `api-agents/{provider}/accounts` route is already provider-generic; this\n * is the client-side normalization the plan (`do-we-need-any-moonlit-toucan`\n * Phase 0, step 5) calls for.\n \n `accountIdentifier` is the stable per-account selector the LLM should\n * pass back (for Bluesky: the account DID). `accessToken` carries whatever\n * the provider's `buildCredentialsResponse` bundles (for Bluesky: the JSON\n * session bundle — the driver parses the `accessJwt` out of it, or reads the\n * top-level `accessJwt` from `providerMetadata`-adjacent fields). Everything\n * else the driver needs for routing (handle, pdsHost, did, …) is on\n * `providerMetadata`.\n \n Token refresh is delegated to connect (never done in-plugin) via the\n * per-account route `POST /agent/connect/{provider}/accounts/{accountIdentifier}/refresh`\n * — call `refreshSocialAccount(provider, accountIdentifier)`. (The non-account\n * `POST /agent/connect/{provider}/refresh` route refreshes the provider's\n * PRIMARY connection, which is wrong under multi-account Pattern A.)\n /\n getSocialAccounts(provider: string): Promise<{\n provider: string;\n accounts: {\n connectionId: string;\n accountIdentifier: string;\n displayName: string \| null;\n accessToken: string;\n providerMetadata: Record<string, unknown>;\n connectedAt: string;\n }[];\n }>;\n /\n Pattern A: refresh a specific social Connection by its stable\n * `accountIdentifier` (for Bluesky: the account DID) via the\n * provider-generic per-account refresh route. The counterpart to\n * `getSocialAccounts(provider)`; `@alfe.ai/social-mcp` calls this on a\n * 401/ExpiredToken from the platform PDS/API, then re-fetches accounts to\n * pick up the rotated bundle.\n \n Refresh itself is ALWAYS delegated to connect — the plugin never calls\n * the platform's own refresh XRPC (e.g. `com.atproto.server.refreshSession`)\n * because connect owns the encrypted refresh token + rotation persistence\n * (Bluesky rotates the refreshJwt; a missed rotation kills the connection\n * after one refresh). The returned `accessToken` is whatever the provider's\n * `refreshToken` hook re-bundled (for Bluesky: the JSON session bundle with\n * the fresh `accessJwt`) — callers typically ignore it and re-fetch via\n * `getSocialAccounts` for a consistent shape.\n /\n refreshSocialAccount(provider: string, accountIdentifier: string): Promise<{\n accountIdentifier: string;\n accessToken: string;\n accessTokenExpiresAt: string;\n expiresAt: string;\n }>;\n}\n//# sourceMappingURL=connect-credentials.d.ts.map\n//#endregion\n//#region src/domains/database.d.ts\ndeclare class DatabaseApi extends ApiBase {\n registerDatabaseCredentials(): Promise<{\n connectionString: string;\n username: string;\n password: string;\n databases: string[];\n }>;\n reportDatabaseAudit(entry: {\n database: string;\n collection: string;\n operation: string;\n summary?: string;\n }): Promise<void>;\n}\n//# sourceMappingURL=database.d.ts.map\n//#endregion\n//#region src/domains/identity.d.ts\ndeclare class IdentityApi extends ApiBase {\n /\n Returns the calling agent's own identity context — `{ agentId, tenantId }`\n * decoded server-side from the agent API token. Used by the\n * `@alfe.ai/openclaw-identity` plugin to bootstrap context when the\n * OpenClaw daemon doesn't plumb `ctx.agentId` through to plugin hooks.\n * Plugins should cache this for the daemon's lifetime (single-agent-per-\n * process invariant). One HTTP round-trip per process activate; not for\n * per-call use.\n /\n whoami(): Promise<{\n agentId: string;\n tenantId: string;\n }>;\n resolveIdentity(args: {\n provider: string;\n platformId: string;\n kind?: \"user\" \| \"agent\" \| \"service\" \| \"bot\" \| \"workspace\";\n displayName?: string;\n }): Promise<{\n identityId: string \| null;\n status: string;\n created?: boolean;\n reason?: string;\n /\n Flattened auriclabs permission strings for the resolved identity\n * (scope-prefixed where applicable). Empty array on miss / org service\n * outage — the runtime gate fails closed in that case.\n /\n permissions: string[];\n }>;\n searchIdentities(args?: {\n q?: string;\n status?: string;\n limit?: number;\n }): Promise<{\n identities: unknown[];\n }>;\n getIdentityContext(identityId: string): Promise<{\n context: unknown;\n }>;\n mergeIdentities(survivorId: string, args: {\n mergedId: string;\n }): Promise<{\n ok: boolean;\n error?: string;\n }>;\n unmergeIdentity(identityId: string): Promise<{\n ok: boolean;\n error?: string;\n }>;\n addIdentityNote(identityId: string, args: {\n content: string;\n category?: string;\n }): Promise<{\n noteId: string \| null;\n }>;\n tagIdentity(identityId: string, args: {\n tag: string;\n action: \"add\" \| \"remove\";\n }): Promise<{\n ok: boolean;\n }>;\n getIdentityChangelog(identityId: string, args?: {\n limit?: number;\n cursor?: string;\n }): Promise<{\n entries: unknown[];\n cursor: string \| null;\n }>;\n rollbackIdentity(identityId: string, args: {\n targetVersion: number;\n }): Promise<{\n ok: boolean;\n entry?: unknown;\n }>;\n requestIdentityVerification(args: {\n claimedIdentityId: string;\n requestingIdentityId: string;\n requestingProvider: string;\n requestingPlatformId: string;\n preferredChannel?: \"mobile\" \| \"email\";\n /\n Phase 2: agent-supplied contact endpoint. When provided, the top-level\n * `preferredChannel` is ignored — the contact's channel wins.\n /\n contact?: {\n channel: \"email\" \| \"mobile\";\n value: string;\n };\n }): Promise<{\n verificationId: string;\n channel: string;\n deliveredTo: string;\n expiresAt: string;\n availableChannels: {\n channel: string;\n deliveredTo: string;\n }[];\n } \| {\n error: string;\n }>;\n confirmIdentityVerification(args: {\n claimedIdentityId: string;\n verificationId: string;\n phrase: string;\n }): Promise<{\n verified: boolean;\n identityId?: string;\n /* Phase 2: how the confirm resolved — Scenario A vs B. /\n action?: \"merged\" \| \"contact_verified\" \| \"already_confirmed\";\n error?: string;\n }>;\n /\n Update display-shape fields on an Identity. Body excludes `email` /\n * `phone` / `title` / `company` / `metadata` per Section D4 — contacts go\n * via the verify flow, title/company live on OrgMembership, metadata is\n * not agent-writable.\n /\n updateIdentity(identityId: string, args: {\n name?: string;\n avatarUrl?: string;\n timezone?: string;\n locale?: string;\n }): Promise<{\n ok: boolean;\n }>;\n /\n Phase 2 (Section H): server-side verification of a Google Chat sender via\n * the agent's existing Google OAuth credentials. Returns the resolved\n * identity (created or matched via Scenario-B email enrichment).\n /\n resolveGoogleChatSender(args: {\n senderUserId: string;\n spaceId?: string;\n }): Promise<{\n identityId: string \| null;\n status: string;\n }>;\n}\n//# sourceMappingURL=identity.d.ts.map\n//#endregion\n//#region src/domains/images.d.ts\ndeclare class ImagesApi extends ApiBase {\n /\n Generate an image from a text prompt and get back a STABLE, public URL\n * (served from the agent-assets CDN — it does not expire). Embed the returned\n * `imageUrl` in a reply as markdown to show it to the user.\n \n ASYNC: `gpt-image-1` routinely runs 30–60s, which exceeds the API Gateway\n * 30s ceiling, so this enqueues a job (`POST /agent/images/generate` →\n * `jobId`) then polls (`GET /agent/images/{jobId}`) until it completes. The\n * worker's real failure message (e.g. an unsupported `size`) surfaces via the\n * job's `error` field.\n /\n generateImage(args: {\n prompt: string;\n model?: string;\n size?: string;\n quality?: string;\n }): Promise<{\n imageUrl: string;\n model: string;\n }>;\n}\n//# sourceMappingURL=images.d.ts.map\n//#endregion\n//#region src/domains/integrations.d.ts\ndeclare class IntegrationsApi extends ApiBase {\n listIntegrations(): Promise<IntegrationInstall$1[]>;\n getIntegrationConfig(integrationId: string): Promise<IntegrationConfigResult$1>;\n updateIntegrationConfig(integrationId: string, config: Record<string, unknown>): Promise<void>;\n installIntegration(integrationId: string, options?: {\n version?: string;\n config?: Record<string, unknown>;\n }): Promise<IntegrationInstall$1>;\n removeIntegration(integrationId: string): Promise<IntegrationInstall$1>;\n getOAuthUrl(provider: string, scopes?: string[]): Promise<{\n url: string;\n provider: string;\n expiresIn: number;\n }>;\n getOAuthStatus(provider: string): Promise<{\n provider: string;\n connected: boolean;\n config?: Record<string, string>;\n }>;\n getRegistry(): Promise<{\n integrations: RegistryEntry$1[];\n }>;\n}\n//# sourceMappingURL=integrations.d.ts.map\n//#endregion\n//#region src/domains/memory.d.ts\ndeclare class MemoryApi extends ApiBase {\n memorySearch(query: string, opts?: {\n limit?: number;\n topic?: string;\n subtopic?: string;\n tag?: string;\n includeKnowledge?: boolean;\n }): Promise<{\n facts: {\n subject: string;\n predicate: string;\n object: string;\n since: string;\n confidence: number;\n }[];\n memories: {\n id: string;\n text: string;\n topic: string;\n subtopic: string;\n tag: string;\n importance: number;\n timestamp: number;\n score: number;\n }[];\n }>;\n memoryStore(text: string, opts?: {\n topic?: string;\n subtopic?: string;\n tag?: string;\n importance?: number;\n }): Promise<{\n memoryId: string;\n }>;\n memoryIngest(sessionKey: string, messages: {\n role: string;\n content: string;\n index: number;\n timestamp?: string;\n }[], metadata?: {\n channelId?: string;\n userId?: string;\n userName?: string;\n }, ingestEpoch?: number): Promise<{\n queued: boolean;\n messageCount: number;\n }>;\n memoryLoadContext(tier?: number, topicHint?: string): Promise<{\n tier: number;\n facts: {\n subject: string;\n predicate: string;\n object: string;\n since: string;\n }[];\n memories: {\n text: string;\n topic: string;\n subtopic: string;\n score: number;\n }[];\n tokenEstimate: number;\n formatted: string;\n }>;\n memoryLookupEntity(subject: string): Promise<{\n subject: string;\n triples: {\n tripleId: string;\n predicate: string;\n object: string;\n validFrom: string;\n validTo?: string;\n confidence: number;\n }[];\n }>;\n memoryNavigate(): Promise<{\n topics: {\n name: string;\n tripleCount: number;\n subtopics: string[];\n }[];\n cursor: string \| null;\n }>;\n memoryDelete(memoryId: string): Promise<{\n deleted: boolean;\n }>;\n memoryStats(): Promise<{\n vectorCount: number;\n tripleCount: number;\n storageEstimateBytes: number;\n lastIngestionAt?: string;\n }>;\n memoryLearn(args: {\n text: string;\n source?: string;\n sourceType?: \"file\" \| \"url\" \| \"inline\";\n metadata?: {\n sessionId?: string;\n channelId?: string;\n userName?: string;\n };\n }): Promise<{\n memoriesStored: number;\n triplesStored: number;\n chunks: number;\n source?: string;\n }>;\n memoryBootstrapStatus(): Promise<{\n synced: boolean;\n syncedAt?: string;\n sessionsBackfillSynced?: boolean;\n sessionsBackfillSyncedAt?: string;\n }>;\n memoryBootstrapStatusMark(scope?: \"files\" \| \"sessions\"): Promise<{\n synced: true;\n syncedAt: string;\n }>;\n}\n//# sourceMappingURL=memory.d.ts.map\n//#endregion\n//#region src/domains/secrets.d.ts\ndeclare class SecretsApi extends ApiBase {\n /\n Mint a fresh AES-256 data key for a specific (secret, field) pair. The\n * encryption context is rebuilt server-side from `auth.tenantId` + the body\n * fields including `fieldKey`; the agent cannot forge context for a scope\n * or field it doesn't own. Legacy single-envelope secrets are migrated to\n * `field#value` rows by the data migration, so call with `fieldKey: \"value\"`\n * to reach them.\n /\n generateSecretDataKey(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n }): Promise<GeneratedDataKey$1>;\n /\n Unwrap a wrapped data key so the agent can decrypt the envelope locally.\n * `fieldKey` MUST match the value supplied when the data key was generated\n * (it's bound into KMS encryption context); mismatch fails with\n * `InvalidCiphertextException`.\n /\n decryptSecretDataKey(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n dataKeyCiphertext: string;\n }): Promise<{\n plaintextKey: string;\n }>;\n /\n Create a new secret with one or more fields. Encrypted fields must arrive\n * pre-sealed (the agent has already obtained per-field data keys via\n * `generateSecretDataKey({ ..., fieldKey })` and AES-encrypted locally).\n * Plaintext fields ship the value inline.\n /\n createSecret(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n secretName: string;\n category?: SecretCategory$1;\n description?: string;\n tags?: string[];\n fields: {\n key: string;\n format?: FieldFormat$1;\n sensitivity: FieldSensitivity$1;\n value?: string;\n envelope?: EncryptedEnvelopeV1$1;\n }[];\n reason?: string;\n }): Promise<SecretAggregate$1>;\n /* Fetch the secret aggregate plus per-field encrypted envelopes. /\n getSecret(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n }): Promise<{\n aggregate: SecretAggregate$1;\n envelopes: FieldEnvelope$1[];\n }>;\n /* Fetch one field. Plaintext: value inline. Encrypted: envelope. /\n getSecretField(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n }): Promise<{\n key: string;\n sensitivity: FieldSensitivity$1;\n format?: FieldFormat$1;\n value?: string;\n envelope?: EncryptedEnvelopeV1$1;\n rotatedAt?: string;\n createdAt: string;\n updatedAt: string;\n }>;\n /* Add OR rotate one field. /\n setSecretField(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n sensitivity: FieldSensitivity$1;\n format?: FieldFormat$1;\n value?: string;\n envelope?: EncryptedEnvelopeV1$1;\n reason?: string;\n }): Promise<{\n fieldKey: string;\n rotated: boolean;\n }>;\n /* Remove one field. /\n removeSecretField(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n fieldKey: string;\n }): Promise<void>;\n /* Update secret-level metadata (name/description/tags/category). /\n updateSecretMetadata(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n secretName?: string;\n description?: string;\n tags?: string[];\n category?: SecretCategory$1;\n reason?: string;\n }): Promise<SecretAggregate$1>;\n /* List metadata for secrets in a scope. Optional filters route through the byFacet GSI. /\n listSecrets(args: {\n scope: SecretScope$1;\n scopeId: string;\n category?: SecretCategory$1;\n tag?: string;\n fieldKey?: string;\n }): Promise<SecretMetadata$1[]>;\n /* Bounded changelog read — metadata-only audit entries. /\n getSecretHistory(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n limit?: number;\n cursor?: string;\n }): Promise<{\n entries: ChangelogEntry$1[];\n nextCursor?: string;\n }>;\n /* Delete a secret (and all its field rows + tag rows + changelog rows). /\n deleteSecret(args: {\n scope: SecretScope$1;\n scopeId: string;\n secretId: string;\n }): Promise<void>;\n /* Enumerate scopes (org/team/project/agent) this agent can access. /\n listSecretScopes(): Promise<ScopeInfo$1[]>;\n}\n//# sourceMappingURL=secrets.d.ts.map\n//#endregion\n//#region src/domains/teams.d.ts\ndeclare class TeamsApi extends ApiBase {\n getTeamsCredentials(): Promise<{\n agentId: string;\n tenantId: string;\n azureAppId: string;\n azureBotId: string;\n azureClientSecret: string;\n botDisplayName?: string;\n teamsTenantId?: string;\n serviceUrl?: string;\n }>;\n sendTeamsMessage(data: {\n conversationId: string;\n text?: string;\n adaptiveCard?: Record<string, unknown>;\n }): Promise<{\n ok: boolean;\n activityId: string;\n }>;\n listTeamsChannels(): Promise<{\n channels: {\n id: string;\n name: string;\n description?: string;\n }[];\n }>;\n}\n//# sourceMappingURL=teams.d.ts.map\n\n//#endregion\n//#region src/index.d.ts\ninterface AgentApiClient extends SyncApi, IntegrationsApi, WorkspaceApi, ConnectCredentialsApi, TeamsApi, ChatApi, SecretsApi, IdentityApi, MemoryApi, SearchApi, KnowledgeApi, DatabaseApi, MobileApi, RemoteApi, SelfApi, VoiceApi, ImagesApi, WebhooksApi {}\ndeclare class AgentApiClient extends ApiBase {\n constructor(config: AgentApiClientConfig);\n}\n//# sourceMappingURL=index.d.ts.map\n\n//#endregion\nexport { AgentApiClient, type AgentApiClientConfig, type AgentAvatarPresign, type AgentSelf, type AgentVoice, type AgentVoiceConfig, type AgentWebhook, type AgentWebhookDelivery, type AgentWorkspaceInfo, type ChangeRequestActorKind, type ChangeRequestOperation, type ChangeRequestResourceType, type ChangeRequestStatus, type ChangelogAction, type ChangelogActor, type ChangelogEntry, type CreatedAgentWebhook, type EncryptedEnvelopeV1, type Field, type FieldEnvelope, type FieldFormat, type FieldSensitivity, type FieldView, type GeneratedDataKey, type InstallToolErrorCaptureOptions, type IntegrationConfigResult, type IntegrationConfigSchemaField, type IntegrationInstall, type KnowledgeChangeRequest, type KnowledgeDoc, type KnowledgeProfile, type KnowledgeProfileLink, type KnowledgeScope, type KnowledgeScopeType, type KnowledgeSearchHit, type KnowledgeSearchResult, type MobileAvailableNumber, type MobileNumberInfo, type NewsArticle, type NewsProvider, type NewsResult, type ProposeScopeChangeInput, type RegistryEntry, type RemoteSessionInfo, type ScopeInfo, type SecretAggregate, type SecretCategory, type SecretMetadata, type SecretScope, type SharedFileEntry, type SyncAgentInfo, type SyncAgentStats, type SyncConfirmedUpload, type SyncFileEntry, type SyncManifest, type SyncManifestEntry, type SyncPresignedUrl, type SyncReconstructBundle, type SyncReconstructFile, type SyncSessionContent, type SyncSessionEntry, type ToolCaptureApi, type VoiceSttArgs, type VoiceSttResult, type VoiceTtsArgs, type VoiceTtsModel, type VoiceTtsResult, type WhatsAppTemplate, installToolErrorCapture };\n//# sourceMappingURL=index.d.ts.map","//#region src/types.d.ts\n/\n Minimal logger contract shared by every helper in the kit.\n \n Deliberately the narrowest shape in the fleet: some plugins declare\n * variadic loggers (`info(msg: string, ...args: unknown[])`), others\n * single-arg (`info(msg: string)`). Both are assignable to this. The kit\n * only ever calls with a single string.\n /\ninterface KitLogger {\n info(msg: string): void;\n warn(msg: string): void;\n error(msg: string): void;\n debug(msg: string): void;\n}\n//# sourceMappingURL=types.d.ts.map\n//#endregion\n//#region src/tools.d.ts\n/* Shape returned to OpenClaw from a tool `execute`. /\ninterface ToolResult {\n content: {\n type: \"text\";\n text: string;\n }[];\n details: unknown;\n isError?: boolean;\n}\ninterface ToolDef<TParameters = unknown> {\n name: string;\n description: string;\n label: string;\n parameters: TParameters;\n execute: (toolCallId: string, params: Record<string, unknown>) => Promise<ToolResult>;\n}\n/* Deliberately model-safe validation/usage failure. Other exceptions stay private. /\ndeclare class PublicToolError extends Error {\n readonly name = \"PublicToolError\";\n}\ndeclare function publicToolError(message: string): PublicToolError;\n/* Wrap bounded JSON in the OpenClaw tool-result envelope. /\ndeclare function ok(data: unknown): ToolResult;\n/* Wrap an explicitly public error in a captured OpenClaw error envelope. /\ndeclare function errResult(message: string): ToolResult;\n/\n Define a tool whose unexpected exceptions never expose provider, filesystem,\n * credential, or transport diagnostics to the model. Throw `PublicToolError`\n * only for a message deliberately safe for model display.\n /\ndeclare function defineTool<TParameters>(def: {\n name: string;\n description: string;\n parameters: TParameters;\n handler: (params: Record<string, unknown>) => Promise<unknown>;\n}): ToolDef<TParameters>;\n//# sourceMappingURL=tools.d.ts.map\n//#endregion\n//#region src/daemon.d.ts\ninterface IpcResponse {\n ok: boolean;\n error?: {\n message?: string;\n };\n [key: string]: unknown;\n}\ninterface IpcClient {\n on(event: string, handler: (...args: unknown[]) => void): void;\n request(method: string, params: Record<string, unknown>): Promise<IpcResponse>;\n start(): void;\n stop(): void;\n}\ninterface IpcModule {\n IPCClient: new (socketPath: string, log: KitLogger) => IpcClient;\n}\ninterface ConnectToDaemonOptions {\n pluginId: string;\n capabilities?: readonly string[];\n onMessage?: (msg: Record<string, unknown>) => void;\n standaloneNote?: string;\n}\ninterface ConnectToDaemonDependencies {\n loadIpcModule?: () => Promise<IpcModule>;\n}\ndeclare function connectToDaemon(socketPath: string, log: KitLogger, options: ConnectToDaemonOptions, dependencies?: ConnectToDaemonDependencies): Promise<IpcClient \| null>;\n//#endregion\n//#region src/sdk.d.ts\ninterface ResolveOpenClawSdkOptions {\n specifier?: string;\n exportName?: string;\n unresolvableNote?: string;\n}\ninterface ResolveOpenClawSdkDependencies {\n anchors?: readonly string[];\n globalPackageJsonPath?: string;\n requireFrom?: (anchor: string) => (specifier: string) => unknown;\n}\ndeclare function resolveOpenClawSdk<T = unknown>(log: KitLogger, options?: ResolveOpenClawSdkOptions, dependencies?: ResolveOpenClawSdkDependencies): T \| null;\n//# sourceMappingURL=sdk.d.ts.map\n\n//#endregion\n//#region src/activation.d.ts\n/\n Canonical activation-flag key for a plugin: `__alfe<Name>PluginActivated`.\n \n Accepts a short name (`\"google\"`, `\"google-chat\"`) or a full package name\n * (`\"@alfe.ai/openclaw-teams\"`); scope + `openclaw-` prefix are stripped\n * and the remainder PascalCased:\n \n getActivationKey(\"google\") → \"__alfeGooglePluginActivated\"\n * getActivationKey(\"google-chat\") → \"__alfeGoogleChatPluginActivated\"\n * getActivationKey(\"@alfe.ai/openclaw-teams\") → \"__alfeTeamsPluginActivated\"\n /\ndeclare function getActivationKey(name: string): string;\n/* True when the activation flag for `key` is currently set. /\ndeclare function isActivated(key: string): boolean;\n/\n Clear the activation flag so a later start can run again.\n \n Call this LAST in stop/deactivate paths — after side effects are stopped\n * (see the ordering rule in the module doc). Also exported for soft-failure\n * paths inside a `guardedStart` fn that want to log at a custom level and\n * return normally instead of throwing.\n /\ndeclare function resetActivation(key: string): void;\n/\n Run a service start exactly once per activation cycle.\n \n - If the flag is already set, logs at debug and returns `false` (skipped).\n * - Otherwise sets the flag and runs `fn`.\n * - If `fn` throws synchronously OR returns a promise that rejects, the\n * flag is RESET (so a later activate can retry) and the error is logged.\n * Errors are not rethrown — matching fleet behavior where a failed start\n * must never crash the host's plugin loader.\n \n Returns `true` when the start was initiated (even if an async portion\n * later fails), `false` when skipped or when `fn` threw synchronously.\n \n Note: cleaning up partial side effects on failure is `fn`'s job (throw\n * only after tearing down what was started); the kit only guarantees the\n * flag reset happens after `fn` has failed — i.e. after `fn`'s own cleanup.\n */\ndeclare function guardedStart(key: string, log: KitLogger, fn: () => void \| Promise<void>): boolean;\n//# sourceMappingURL=activation.d.ts.map\n\n//#endregion\nexport { type ConnectToDaemonDependencies, type ConnectToDaemonOptions, type IpcClient, type IpcResponse, type KitLogger, PublicToolError, type ResolveOpenClawSdkDependencies, type ResolveOpenClawSdkOptions, type ToolDef, type ToolResult, connectToDaemon, defineTool, errResult, getActivationKey, guardedStart, isActivated, ok, publicToolError, resetActivation, resolveOpenClawSdk };\n//# sourceMappingURL=index.d.ts.map"],"mappings":";;;;;;;KAsTK+D,kBAAAA;UACKC,cAAAA;aACGD;;;;UAIHE,kBAAAA;;;;;aAKGF;;;;;;;;;;;;;UAaHG,qBAAAA;WACCD;;;;UAIDE,oBAAAA;;;;UAIAC,gBAAAA;aACGL;;;;SAIJI;;;;KAIJE,yBAAAA;KACAC,sBAAAA;KACAC,mBAAAA;KACAC,sBAAAA;;UAEKC,sBAAAA;;aAEGV;;gBAEGM;aACHC;;;;UAIHC;;gBAEMC;;;gBAGAA;;;;;;;;UAQNE,uBAAAA;gBACML;aACHC;;;;;;;;;;;;UAYHK,YAAAA;;;;;;;;;;;AAxCiB;AACH;AACG;;UChVjBuC,UAAAA,CDoVGnD;SAEGM,EAAAA;QACHC,EAAAA,MAAAA;QAIHC,EAAAA,MAAAA;;SAKMC,EAAAA,OAAAA;EAAsB,OAAA,CAAA,EAAA,OAAA;AAAA;UCxV5B2C,ODgWuB,CAAA,cAAA,OAAA,CAAA,CAAA;QACjB9C,MAAAA;aACHC,EAAAA,MAAAA;EAAsB,KAAA,EAAA,MAAA;EAAA,UAYzBK,EC1WIyC,WD0WQ;wCCzWkBC,4BAA4BC,QAAQJ;;;;;UCV3D,eAAA;EFgSZnD;EACKC,aAAAA,EAAAA,OAAc;EAKdC;EAkBAC,SAAAA,EAAAA,MAAAA;AACmB;AAIC;;;;;AASD;AAKxBI,UE9TY,YAAA,CF8TU;EACtBC,eAAAA,CAAAA,KAAAA,EAAmB,MAAA,EAAA,KAAA,EAAA;IACnBC,KAAAA,CAAAA,EAAAA,MAAAA;IAEKC,SAAAA,CAAAA,EE/T+B,kBF+TT;IAAA,OAAA,CAAA,EAAA,MAAA;ME9T3B,OFgUQV,CEhUA,qBFgUAA,CAAAA;YAEGM,EAAAA,EEhUA,OFgUAA,CAAAA;IACHC,MAAAA,EEjUqB,cFiUrBA,EAAAA;;iBAMGE,CAAAA,SAAAA,EErUa,kBFqUbA,EAAAA,OAAAA,EAAAA,MAAAA,CAAAA,EErUmD,OFqUnDA,CErU2D,gBFqU3DA,CAAAA;eAGAA,CAAAA,SAAAA,EErUD,kBFqUCA,EAAAA,OAAAA,EAAAA,MAAAA,EAAAA,IAQiB,CARjBA,EAAAA;IAAsB,KAAA,CAAA,EAAA,MAAA;IAQ5BE,MAAAA,CAAAA,EAAAA,MAAAA;EAAuB,CAAA,CAAA,EE1U5B,OF0U4B,CAAA;IACjBL,KAAAA,EE3UM,YF2UNA,EAAAA;IACHC,UAAAA,EAAAA,MAAAA,GAAAA,IAAAA;EAAsB,CAAA,CAAA;EAYzBK,YAAAA,CAAAA,SAAY,EErVP,kBFqVO,EAAA,OAAA,EAAA,MAAA,EAAA,QAAA,EAAA,MAAA,EAAA,KAAA,EAAA;;MEjVjB;;IDrCKuC,IAAAA,EAAAA,MAAU;EAQVC,CAAAA,CAAAA;EAAO,aAAA,CAAA,SAAA,ECgCF,kBDhCE,EAAA,OAAA,EAAA,MAAA,EAAA,QAAA,EAAA,MAAA,EAAA,OAAA,EAAA,MAAA,EAAA,KAAA,EAAA;IAIHC,WAAAA,CAAAA,EAAAA,MAAAA;IAC0BC,OAAAA,CAAAA,EAAAA,MAAAA;MCgCnC,ODhCuEH,CAAAA;IAARI,QAAAA,EAAAA,MAAAA;EAAO,CAAA,CAAA;gCCmC5D,4CAEJ,0BACN,QAAQ;qCAGE,yCAtCc;aAwCP;IArDL,KAAA,CAAA,EAAA,MAAe;IAaf,MAAA,CAAA,EAAA,MAAY;EAAA,CAAA,CAAA,EAyCxB,OAzCwB,CAAA;IAGY,cAAA,EAsCV,sBAtCU,EAAA;IAC5B,UAAA,EAAA,MAAA,GAAA,IAAA;;;;;;AFuSHpD,UG1RO,YAAA,CH0Rc;EAKrBC,IAAAA,CAAAA,OAAAA,EAAAA,MAAAA,EAAAA,GAAoB,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,IAAA;EAIpBC,IAAAA,CAAAA,OAAAA,EAAAA,MAAgB,EAAA,GAAA,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,IAAA;EAAA,KAAA,CAAA,OAAA,EAAA,MAAA,EAAA,GAAA,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,IAAA;OACbL,CAAAA,OAAAA,EAAAA,MAAAA,EAAAA,GAAAA,IAAAA,EAAAA,OAAAA,EAAAA,CAAAA,EAAAA,IAAAA;;AAIgB,UGjSZ,SAAA,CHiSY;EAIxBM,YAAAA,CAAAA,EAAAA,OAAAA;EACAC,MAAAA,EGpSK,YHoSLA;EACAC,YAAAA,CAAAA,IAAAA,EGpSgB,OHoSG,CGpSK,OHoSL,CAAA,EAAA,OAGdE,CAHc,EAAA;IACnBD,KAAAA,CAAAA,EAAAA,MAAAA,EAAAA;EAEKC,CAAAA,CAAAA,EAAAA,IAAAA;EAAsB,EAAA,CAAA,QAAA,EAAA,MAAA,EAAA,OAAA,EAAA,CAAA,GAAA,IAAA,EAAA,OAAA,EAAA,EAAA,GAAA,OAAA,EAAA,QAAA,EAAA;IAEnBV,QAAAA,CAAAA,EAAAA,MAAAA;MAEGM,IAAAA;;UGxRC,eAAA;EF9DP6C,EAAAA,EAAAA,MAAAA;EAQAC,IAAAA,EAAAA,MAAO;EAAA,WAAA,EAAA,MAAA;SAIHC,EAAAA,MAAAA;UAC0BC,CAAAA,GAAAA,EEsDxB,SFtDwBA,CAAAA,EAAAA,IAAAA;YAAoCH,CAAAA,GAAAA,EEuD1D,SFvD0DA,CAAAA,EAAAA,IAAAA;;;;cG5BtE,QAAQ"}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/openclaw-knowledge",
-  "version": "0.0.20",
+  "version": "0.0.21",
   "description": "OpenClaw knowledge-resources plugin — bounded shared org/team/project documents and profiles",
   "type": "module",
   "main": "./dist/index.js",
@@ -28,7 +28,7 @@
   ],
   "dependencies": {
     "@sinclair/typebox": "^0.34.48",
-    "@alfe.ai/agent-api-client": "0.15.0",
+    "@alfe.ai/agent-api-client": "0.16.0",
     "@alfe.ai/config": "0.4.1",
     "@alfe.ai/openclaw-plugin-kit": "0.2.0"
   },