@axiom-lattice/core 4.2.0 → 4.2.1

package/dist/index.d.mts

@@ -8,7 +8,7 @@ import { BaseLanguageModelInput, LanguageModelLike } from '@langchain/core/langu
 import { CallbackManagerForLLMRun } from '@langchain/core/callbacks/manager';
 import { ChatResult } from '@langchain/core/outputs';
 import * as _axiom_lattice_protocols from '@axiom-lattice/protocols';
-import { LLMConfig, SemanticMetricsServerConfig, MetricMeta, MetricQueryResult, DataSource, SemanticMetricsQueryRequest, SemanticMetricsQueryResponse, TableQueryRequest, TableQueryResponse, ExecuteSqlQueryRequest, ExecuteSqlQueryResponse, MetricsServerType, MetricsServerConfig, ToolConfig, ToolExecutor, AgentConfig, MiddlewareType, GraphBuildOptions, MessageChunk, MessageChunkType, QueueLatticeProtocol, QueueConfig, QueueClient, QueueResult, ScheduleLatticeProtocol, ScheduleConfig, ScheduleClient, ScheduleStorage, TaskHandler, ScheduleOnceOptions, ScheduleCronOptions, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, ThreadStore, AssistantStore, SkillStore, CollectionStore, WorkspaceStore, ProjectStore, DatabaseConfigStore, MetricsServerConfigStore, McpServerConfigStore, UserStore, TenantStore, UserTenantLinkStore, WorkflowTrackingStore, EvalStore, ChannelInstallationStore, BindingRegistry, MenuRegistry, A2AApiKeyStore, TaskStore, SharedResourceStore, ConnectionStore, TaskWorkItemStore, AgentWebAppStore, VectorStoreProvider, Thread, CreateThreadRequest, Assistant, CreateAssistantRequest, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, Skill, CreateSkillRequest, SkillStoreContext, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, User, CreateUserRequest, UpdateUserRequest, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationRequest, UpdateChannelInstallationRequest, Binding, CreateBindingInput, A2AApiKeyRecord, CreateA2AApiKeyInput, A2AApiKeyEntry, CreateTaskRequest, TaskItem, TaskListFilter, UpdateTaskRequest, Collection, CreateCollectionRequest, UpdateCollectionRequest, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, STTModelLatticeProtocol, STTConfig, STTClient, TranscriptionResult, LoggerLatticeProtocol, LoggerConfig, LoggerClient, LoggerContext, SkillConfig, SkillClient, McpTool, ResourceResolver, ResourceAddress, ShareVisibility, CreateShareRequest, ChannelAdapter, InterruptPolicy, TaskBeliefState, PluginMeta, Plugin, PluginMetaOutput, InternalStateField, InternalInput, InternalNode, InternalAgentNode, InternalMapNode, InternalDSL, ConnectionEntry } from '@axiom-lattice/protocols';
+import { LLMConfig, SemanticMetricsServerConfig, MetricMeta, MetricQueryResult, DataSource, SemanticMetricsQueryRequest, SemanticMetricsQueryResponse, TableQueryRequest, TableQueryResponse, ExecuteSqlQueryRequest, ExecuteSqlQueryResponse, MetricsServerType, MetricsServerConfig, ToolConfig, ToolExecutor, AgentConfig, MiddlewareType, GraphBuildOptions, MessageChunk, MessageChunkType, QueueLatticeProtocol, QueueConfig, QueueClient, QueueResult, ScheduleLatticeProtocol, ScheduleConfig, ScheduleClient, ScheduleStorage, TaskHandler, ScheduleOnceOptions, ScheduleCronOptions, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, ThreadStore, AssistantStore, SkillStore, CollectionStore, WorkspaceStore, ProjectStore, DatabaseConfigStore, MetricsServerConfigStore, McpServerConfigStore, UserStore, TenantStore, UserTenantLinkStore, WorkflowTrackingStore, EvalStore, ChannelInstallationStore, BindingRegistry, MenuRegistry, A2AApiKeyStore, TaskStore, SharedResourceStore, ConnectionStore, TaskWorkItemStore, AgentWebAppStore, CapabilityBundleStore, VectorStoreProvider, Thread, CreateThreadRequest, Assistant, CreateAssistantRequest, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, Skill, CreateSkillRequest, SkillStoreContext, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, User, CreateUserRequest, UpdateUserRequest, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationRequest, UpdateChannelInstallationRequest, Binding, CreateBindingInput, A2AApiKeyRecord, CreateA2AApiKeyInput, A2AApiKeyEntry, CreateTaskRequest, TaskItem, TaskListFilter, UpdateTaskRequest, Collection, CreateCollectionRequest, UpdateCollectionRequest, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, STTModelLatticeProtocol, STTConfig, STTClient, TranscriptionResult, LoggerLatticeProtocol, LoggerConfig, LoggerClient, LoggerContext, SkillConfig, SkillClient, PluginSkillDefinition, McpTool, ResourceResolver, ResourceAddress, ShareVisibility, CreateShareRequest, ChannelAdapter, InterruptPolicy, TaskBeliefState, PluginMeta, Plugin, PluginMetaOutput, CapabilityPreview, CreateCapabilityBundleInput, UpdateCapabilityBundleInput, InternalStateField, InternalInput, InternalNode, InternalAgentNode, InternalMapNode, InternalDSL, ConnectionEntry } from '@axiom-lattice/protocols';
 export { _axiom_lattice_protocols as Protocols };
 export { AgentConfig, AgentType, GraphBuildOptions, MemoryType } from '@axiom-lattice/protocols';
 import * as langchain from 'langchain';
@@ -1588,6 +1588,22 @@ interface SandboxInstance {
     getStatus(): Promise<"running" | "stopped" | "unknown">;
     readonly file: SandboxFileService;
     readonly shell: SandboxShellService;
+    /**
+     * Pack a directory into a provider-generated temporary ZIP file.
+     *
+     * Implementations may omit this capability. Local sandboxes accept only
+     * paths rooted at `/project`; the returned path can be downloaded and then
+     * deleted through the existing file service. Remote POSIX sandboxes run the
+     * same safe shell-zip strategy through their shell service and therefore also
+     * pack volume-backed folders visible inside the sandbox filesystem. The
+     * returned `path` is always a sandbox-visible sibling (e.g.
+     * `/project/data/reports.zip`).
+     */
+    packDirectory?(sourcePath: string): Promise<{
+        path: string;
+        filename: string;
+        size?: number;
+    }>;
 }
 
 type SandboxIsolationLevel = "global" | "agent" | "project";
@@ -2670,8 +2686,8 @@ interface AddMessageParams {
     threadId: string;
     tenantId: string;
     assistantId: string;
-    workspaceId?: string;
-    projectId?: string;
+    workspaceId?: string | null;
+    projectId?: string | null;
     content: PendingMessageContent;
     type?: "human" | "system";
     priority?: number;
@@ -2683,24 +2699,26 @@ interface ThreadInfo {
     tenantId: string;
     assistantId: string;
     threadId: string;
-    workspaceId?: string;
-    projectId?: string;
+    workspaceId?: string | null;
+    projectId?: string | null;
 }
+type QueueScope = Pick<ThreadInfo, "tenantId" | "assistantId" | "workspaceId" | "projectId">;
 /**
  * Interface for message queue storage
  * Implemented by pg-stores or other storage backends
  */
 interface IMessageQueueStore {
     addMessage(params: AddMessageParams): Promise<PendingMessage>;
+    addMessageIfCapacity(params: AddMessageParams, maxSize: number): Promise<boolean>;
     addMessageAtHead(params: AddMessageParams): Promise<PendingMessage>;
-    getPendingMessages(threadId: string): Promise<PendingMessage[]>;
-    getProcessingMessages(threadId: string): Promise<PendingMessage[]>;
-    getQueueSize(threadId: string): Promise<number>;
+    getPendingMessages(threadId: string, scope?: QueueScope): Promise<PendingMessage[]>;
+    getProcessingMessages(threadId: string, scope?: QueueScope): Promise<PendingMessage[]>;
+    getQueueSize(threadId: string, scope?: QueueScope): Promise<number>;
     getThreadsWithPendingMessages(): Promise<ThreadInfo[]>;
-    removeMessage(messageId: string): Promise<boolean>;
-    clearMessages(threadId: string): Promise<void>;
-    markProcessing(messageId: string): Promise<void>;
-    resetProcessingToPending(threadId: string): Promise<number>;
+    removeMessage(messageId: string, scope?: QueueScope): Promise<boolean>;
+    clearMessages(threadId: string, scope?: QueueScope): Promise<void>;
+    markProcessing(messageId: string, customRunConfig?: unknown, scope?: QueueScope): Promise<void>;
+    resetProcessingToPending(threadId: string, scope?: QueueScope): Promise<number>;
 }
 /**
  * Agent executor function type
@@ -2718,13 +2736,28 @@ type LangGraphStateChecker = (tenantId: string, assistantId: string, threadId: s
  * Returns an async iterable for streaming responses
  */
 type AgentStreamExecutor = (tenantId: string, assistantId: string, threadId: string, input: any) => AsyncIterable<any>;
+/** A JSON-safe value accepted within a structured message content part. */
+type MessageContentValue = null | boolean | number | string | {
+    [key: string]: MessageContentValue;
+} | MessageContentValue[];
+/** A provider-compatible structured message content part. */
+type MessageContentPart = {
+    [key: string]: MessageContentValue;
+};
+/**
+ * Queue-safe message content accepted by Agent inputs.
+ *
+ * Structured content remains JSON-serializable while supporting provider
+ * content parts such as `{ type: "text", text: "hello" }`.
+ */
+type MessageContent = string | [MessageContentPart, ...MessageContentPart[]];
 /**
  * Message-like structure for normalized message input
  * Supports both simple string content and structured message objects
  */
 interface MessageLike {
     role: "human" | "system" | "assistant" | "tool";
-    content: string;
+    content: MessageContent;
     id?: string;
     metadata?: Record<string, unknown>;
 }
@@ -2764,6 +2797,7 @@ type StoreTypeMap = {
     connection: ConnectionStore;
     taskWorkItem: TaskWorkItemStore;
     agentWebApp: AgentWebAppStore;
+    capabilityBundle: CapabilityBundleStore;
 };
 /**
  * Store type keys
@@ -3011,6 +3045,86 @@ declare class InMemoryAgentWebAppStore implements AgentWebAppStore {
     delete(tenantId: string, webAppId: string): Promise<boolean>;
 }
 
+/** Coordinates capability Bundle existence checks with Project updates in memory. */
+declare class InMemoryCapabilityBundleCoordinator {
+    private readonly bundleKeys;
+    private readonly revisions;
+    private readonly tenantUpdates;
+    /** Serializes Project and Bundle reference changes for one tenant. */
+    runProjectUpdate<T>(tenantId: string, projectId: string, update: () => Promise<T> | T): Promise<T>;
+    /** Records a tenant Bundle as present. */
+    add(tenantId: string, bundleId: string, revision?: string): void;
+    /** Removes a tenant Bundle. */
+    remove(tenantId: string, bundleId: string): void;
+    /** Checks all requested Bundle IDs without yielding to another operation. */
+    hasAll(tenantId: string, bundleIds: string[]): boolean;
+    hasAllAtRevisions(tenantId: string, bundleIds: string[], expected: Record<string, string>): boolean;
+    setRevision(tenantId: string, bundleId: string, revision: string): void;
+    private key;
+}
+
+/**
+ * InMemoryProjectStore
+ *
+ * In-memory implementation of ProjectStore
+ * Provides CRUD operations for project data stored in memory
+ */
+
+declare class InMemoryProjectStore implements ProjectStore {
+    readonly capabilityBundles: InMemoryCapabilityBundleCoordinator;
+    private projects;
+    constructor(capabilityBundles?: InMemoryCapabilityBundleCoordinator);
+    private initDefaultData;
+    private getKey;
+    getProjectsByWorkspace(tenantId: string, workspaceId: string): Promise<Project[]>;
+    getProjectById(tenantId: string, id: string): Promise<Project | null>;
+    createProject(tenantId: string, workspaceId: string, id: string, data: CreateProjectRequest): Promise<Project>;
+    /**
+     * Update an existing project
+     *
+     * @remarks
+     * - The `config` field uses **replace** semantics: if provided, it completely
+     *   overwrites the existing config. To preserve the current config, omit this field.
+     */
+    updateProject(tenantId: string, id: string, updates: UpdateProjectRequest): Promise<Project | null>;
+    deleteProject(tenantId: string, id: string): Promise<boolean>;
+    updateCapabilityBundleIds(tenantId: string, projectId: string, bundleIds: string[], expectedRevisions?: Record<string, string>): Promise<UpdateProjectCapabilityBundlesResult>;
+    isCapabilityBundleReferenced(tenantId: string, bundleId: string): Promise<boolean>;
+    /** Checks bundle references synchronously for in-process atomic coordination. */
+    isCapabilityBundleReferencedSync(tenantId: string, bundleId: string): boolean;
+    clear(): void;
+}
+
+/**
+ * Stores tenant-isolated capability bundles in process memory.
+ *
+ * Values are cloned on write and read so callers cannot mutate persisted
+ * middleware configuration through retained nested references.
+ *
+ * @example
+ * ```ts
+ * const store = new InMemoryCapabilityBundleStore(projectStore);
+ * const bundle = await store.create("tenant-1", input);
+ * ```
+ */
+declare class InMemoryCapabilityBundleStore implements CapabilityBundleStore {
+    private readonly projectStore;
+    private readonly coordinator;
+    private readonly bundles;
+    /** Creates an in-memory bundle store coordinated with its Project store. */
+    constructor(projectStore: InMemoryProjectStore, coordinator?: InMemoryCapabilityBundleCoordinator);
+    private key;
+    private hasKey;
+    listByTenant(tenantId: string): Promise<CapabilityBundle[]>;
+    getById(tenantId: string, id: string): Promise<CapabilityBundle | null>;
+    getManyByIds(tenantId: string, ids: string[]): Promise<CapabilityBundle[]>;
+    create(tenantId: string, input: InternalCreateCapabilityBundleInput): Promise<CapabilityBundle>;
+    update(tenantId: string, id: string, input: InternalUpdateCapabilityBundleInput): Promise<CapabilityBundle | {
+        status: "conflict";
+    } | null>;
+    deleteIfUnreferenced(tenantId: string, id: string): Promise<CapabilityBundleDeleteResult>;
+}
+
 /**
  * FileSystemSkillStore
  *
@@ -3593,18 +3707,21 @@ declare class InMemoryA2AApiKeyStore implements A2AApiKeyStore {
 declare class InMemoryThreadMessageQueueStore implements IMessageQueueStore {
     private messages;
     private messageIdCounter;
+    private capacityTail;
     private generateId;
     private getMessagesForThread;
+    private inScope;
     addMessage(params: AddMessageParams): Promise<PendingMessage>;
+    addMessageIfCapacity(params: AddMessageParams, maxSize: number): Promise<boolean>;
     addMessageAtHead(params: AddMessageParams): Promise<PendingMessage>;
-    getPendingMessages(threadId: string): Promise<PendingMessage[]>;
-    getProcessingMessages(threadId: string): Promise<PendingMessage[]>;
-    getQueueSize(threadId: string): Promise<number>;
+    getPendingMessages(threadId: string, scope?: QueueScope): Promise<PendingMessage[]>;
+    getProcessingMessages(threadId: string, scope?: QueueScope): Promise<PendingMessage[]>;
+    getQueueSize(threadId: string, scope?: QueueScope): Promise<number>;
     getThreadsWithPendingMessages(): Promise<ThreadInfo[]>;
-    removeMessage(messageId: string): Promise<boolean>;
-    clearMessages(threadId: string): Promise<void>;
-    markProcessing(messageId: string): Promise<void>;
-    resetProcessingToPending(threadId: string): Promise<number>;
+    removeMessage(messageId: string, scope?: QueueScope): Promise<boolean>;
+    clearMessages(threadId: string, scope?: QueueScope): Promise<void>;
+    markProcessing(messageId: string, customRunConfig?: unknown, scope?: QueueScope): Promise<void>;
+    resetProcessingToPending(threadId: string, scope?: QueueScope): Promise<number>;
 }
 
 /**
@@ -4440,14 +4557,56 @@ declare function getBuiltInSkillNames(): string[];
  * Check if a skill name refers to a built-in skill.
  */
 declare function isBuiltInSkill(name: string): boolean;
+
+declare const SAFE_PATH_COMPONENT: RegExp;
 /**
- * Register a skill as a built-in skill at runtime.
- * Used by PluginRegistry to expose plugin procedural skills
- * through the same unified API as static built-in skills.
+ * Ensure a versioned plugin skill bundle is available in a runtime sandbox.
+ *
+ * @param sandbox - Runtime sandbox receiving the bundle files.
+ * @param pluginType - Plugin that owns the skill.
+ * @param skillName - Skill name used for its sandbox directory.
+ * @param definition - Versioned markdown and text-resource bundle.
+ * @param lockKey - Stable skills-volume identity, normally the tenant ID. Calls
+ *   sharing a skills volume must use the same value; different tenants must use
+ *   different values.
+ * @returns A promise that resolves after the bundle and manifest are written.
  *
- * Duplicate registrations are ignored (first wins).
+ * @example
+ * ```ts
+ * await ensurePluginSkillInSandbox(
+ *   sandbox,
+ *   "acme",
+ *   "acme-guide",
+ *   {
+ *     version: "1.2.0",
+ *     content: "---\nname: acme-guide\ndescription: Acme usage\n---\n",
+ *     resources: {
+ *       "templates/request.json": { content: '{"method":"POST"}' },
+ *     },
+ *   },
+ *   "agent-runtime"
+ * );
+ * ```
  */
-declare function registerBuiltinSkill(name: string, content: string): void;
+declare function ensurePluginSkillInSandbox(sandbox: SandboxInstance, pluginType: string, skillName: string, definition: PluginSkillDefinition, lockKey: string): Promise<void>;
+/**
+ * Check whether a sandbox skill directory is owned by the plugin synchronizer.
+ *
+ * @param sandbox - Runtime sandbox containing the skill manifest.
+ * @param skillName - Skill directory name to inspect.
+ * @returns True when the manifest identifies the skill as plugin-managed.
+ */
+declare function isPluginSkillManagedInSandbox(sandbox: SandboxInstance, skillName: string): Promise<boolean>;
+/** Check whether a manifest-owned skill has the expected live plugin owner. */
+declare function isPluginSkillAuthorizedInSandbox(sandbox: SandboxInstance, skillName: string, pluginType: string): Promise<boolean>;
+/** Return the synchronized manifest version for a skill, if plugin-managed. */
+declare function getPluginSkillManifestVersion(sandbox: SandboxInstance, skillName: string): Promise<string | undefined>;
+/**
+ * Keep every path component safe for the shell-interpolated Daytona mkdir
+ * command: ASCII letters, digits, dot, underscore, and hyphen only; no empty,
+ * dot, or parent components, separators, whitespace, or shell metacharacters.
+ */
+declare function validateRelativePath(value: string, kind: string): void;
 
 /**
  * CollectionLatticeManager
@@ -4488,7 +4647,7 @@ declare function buildTableName(tenantId: string, name: string): string;
 /**
  * Get or create a tenant-isolated VectorStore for a collection.
  */
-declare function getOrCreateCollectionVectorStore(name: string, embeddingKey: string, tenantId: string, providerKey?: string): Promise<any>;
+declare function getOrCreateCollectionVectorStore(name: string, embeddingKey: string, tenantId: string, providerKey?: string): Promise<VectorStore>;
 /**
  * Get entry count for a collection.
  * Tries vector store's native method first, falls back to provider.
@@ -5058,6 +5217,24 @@ declare class MicrosandboxRemoteInstance implements SandboxInstance {
     stop(): Promise<void>;
     kill(): Promise<void>;
     getStatus(): Promise<"running" | "stopped" | "unknown">;
+    /**
+     * Pack a sandbox folder into a sibling ZIP through the microsandbox shell.
+     *
+     * The command runs inside the POSIX container, so mounted volume-backed
+     * folders are packed from their on-disk location just like any other sandbox
+     * folder.  Paths use the external virtual convention (`/project/...`) and the
+     * command is cwd-independent because the microsandbox shell service does not
+     * honor `exec_dir`.  The returned archive path can be downloaded and deleted
+     * through the existing file service.
+     *
+     * @param sourcePath - Sandbox-visible absolute source folder path rooted at `/project`
+     * @returns The sibling archive path, download filename, and exact byte size
+     */
+    packDirectory(sourcePath: string): Promise<{
+        path: string;
+        filename: string;
+        size?: number;
+    }>;
     readonly file: SandboxFileService;
     readonly shell: SandboxShellService;
 }
@@ -5074,10 +5251,129 @@ declare class RemoteSandboxInstance implements SandboxInstance {
     stop(): Promise<void>;
     kill(): Promise<void>;
     getStatus(): Promise<"running" | "stopped" | "unknown">;
+    /**
+     * Pack a sandbox folder into a sibling ZIP through the remote shell service.
+     *
+     * The command runs inside the remote POSIX sandbox, so mounted volume-backed
+     * folders are packed from their on-disk location just like any other sandbox
+     * folder.  The returned archive path is the sandbox-visible sibling (e.g.
+     * `/project/data/reports.zip`) and can be downloaded and deleted through the
+     * existing file service.
+     *
+     * @param sourcePath - Sandbox-visible absolute source folder path rooted at `/project`
+     * @returns The sibling archive path, download filename, and exact byte size
+     */
+    packDirectory(sourcePath: string): Promise<{
+        path: string;
+        filename: string;
+        size?: number;
+    }>;
     readonly file: SandboxFileService;
     readonly shell: SandboxShellService;
 }
 
+/**
+ * Shared packing policy for `SandboxInstance.packDirectory`.
+ *
+ * Local and remote sandbox instances agree on the same source-path contract
+ * (must be rooted at `/project`, no traversal, no backslashes) and the same
+ * entry/size limits.  Remote instances additionally run the whole safe shell
+ * strategy (in-shell preflight, exclusive sibling lock, randomized temporary
+ * directory, trap cleanup, atomic no-clobber finalize) through their existing
+ * shell service, because Node cannot open a sandbox file handle remotely.
+ */
+declare const MAX_PACK_ENTRIES = 10000;
+declare const MAX_PACK_FILE_BYTES: number;
+declare const MAX_PACK_TOTAL_BYTES: number;
+/** Maximum wall-clock time for one remote/local folder pack shell invocation. */
+declare const PACK_DIRECTORY_TIMEOUT_SECONDS: number;
+/** Result of validating a pack source path. */
+interface PackSourceInfo {
+    /** Basename of the source folder, e.g. `reports`. */
+    rootName: string;
+    /** Download archive name, e.g. `reports.zip`. */
+    filename: string;
+    /** Sandbox-visible sibling archive path, e.g. `/project/data/reports.zip`. */
+    archivePath: string;
+}
+/**
+ * Validate a sandbox folder path that may be packed.
+ *
+ * Accepts only absolute paths rooted at `/project` (the project root) with no
+ * empty/`.`/`..` components and no backslashes.  Rejects anything else with a
+ * descriptive error before any shell command is sent.
+ *
+ * @param sourcePath - Sandbox-visible absolute source folder path
+ * @returns Derived source basename, archive filename, and sibling archive path
+ * @example
+ * ```ts
+ * const { rootName, filename, archivePath } = validatePackSourcePath("/project/data/reports");
+ * // rootName: "reports", filename: "reports.zip", archivePath: "/project/data/reports.zip"
+ * ```
+ */
+declare function validatePackSourcePath(sourcePath: string): PackSourceInfo;
+/**
+ * Build the complete `/bin/sh` command that packs one sandbox folder.
+ *
+ * The command is cwd-independent: it `cd`s to `parentDir` and packs
+ * `./<sourceName>` into a randomized sibling temporary directory, so it works
+ * both through `shell.execCommand({ exec_dir })` and through shells that ignore
+ * `exec_dir` entirely.  It performs a metadata-only preflight (no file content
+ * reads) that rejects symlinks, FIFO/socket/device entries, entry-count
+ * overflow, and per-file/total size overflow before invoking `zip`.  The final
+ * archive is committed with an atomic hard-link `ln` so an existing sibling
+ * (file, directory, or symlink) is never overwritten, and an exclusive `mkdir`
+ * lock plus an `EXIT` trap remove only artifacts owned by this invocation.  The
+ * last stdout line reports the exact archive size as `PACK_SIZE=<bytes>`.
+ *
+ * The command targets `/bin/sh` with the common Linux find extensions used by
+ * GNU and busybox (`-print0`, the `c` byte suffix for `-size`); it is not
+ * guaranteed to run on other POSIX-only `sh` implementations.  The sandbox
+ * image must provide `zip` (Info-ZIP) on `PATH`.
+ *
+ * @param parentDir - Absolute physical path of the source folder's parent
+ * @param sourceName - Source folder basename
+ * @param archiveName - Archive filename (`<sourceName>.zip`)
+ * @returns A `/bin/sh`-compatible command string
+ * @example
+ * ```ts
+ * buildRemotePackDirectoryCommand("/workspace/project/data", "reports", "reports.zip");
+ * ```
+ */
+declare function buildRemotePackDirectoryCommand(parentDir: string, sourceName: string, archiveName: string): string;
+/**
+ * Extract the exact packed archive byte size from a remote pack command output.
+ *
+ * @param output - Combined shell stdout/stderr
+ * @returns The archive size in bytes, or `undefined` when the command did not
+ * report one (for example when preflight or `zip` failed)
+ */
+declare function parsePackSize(output: string): number | undefined;
+/**
+ * Run a remote `packDirectory` through a shell service.
+ *
+ * Validates the source path, executes the shared safe shell-zip command from
+ * `physicalParentDir`, and returns the sandbox-visible sibling archive path,
+ * download filename, and exact byte size parsed from the shell output.  Errors
+ * (invalid source, preflight failure, `zip` failure, missing size) throw with a
+ * descriptive message.
+ *
+ * @param shell - Sandbox shell service that executes the command remotely
+ * @param sourcePath - Sandbox-visible absolute source folder path
+ * @param physicalParentDir - Physical absolute parent directory of the source on
+ * the remote host (already resolved for the instance's path convention)
+ * @returns The packed archive location and metadata
+ * @example
+ * ```ts
+ * const packed = await runRemotePackDirectory(instance.shell, "/project/data/reports", "/workspace/project/data");
+ * ```
+ */
+declare function runRemotePackDirectory(shell: SandboxShellService, sourcePath: string, physicalParentDir: string): Promise<{
+    path: string;
+    filename: string;
+    size: number;
+}>;
+
 declare class E2BInstance implements SandboxInstance {
     private native;
     readonly name: string;
@@ -5123,6 +5419,11 @@ declare class LocalSandboxInstance implements SandboxInstance {
     stop(): Promise<void>;
     kill(): Promise<void>;
     getStatus(): Promise<"running" | "stopped" | "unknown">;
+    packDirectory(sourcePath: string): Promise<{
+        path: string;
+        filename: string;
+        size?: number;
+    }>;
     readonly file: SandboxFileService;
     readonly shell: SandboxShellService;
     private walkDir;
@@ -7031,6 +7332,13 @@ declare enum ThreadStatus {
     INTERRUPTED = "interrupted",
     ERROR = "error"
 }
+/** Result of attempting to recover a persisted checkpoint. */
+interface ResumeTaskResult {
+    /** Graph status observed after the recovery attempt. */
+    status: ThreadStatus;
+    /** Whether processing rows are settled and pending queue work may continue. */
+    settled: boolean;
+}
 /**
  * Snapshot of a thread's current state including queue and status.
  *
@@ -7177,8 +7485,8 @@ interface AgentThreadInterface {
     assistant_id: string;
     thread_id: string;
     tenant_id: string;
-    workspace_id?: string;
-    project_id?: string;
+    workspace_id?: string | null;
+    project_id?: string | null;
     custom_run_config?: any;
 }
 /**
@@ -7233,11 +7541,15 @@ declare class Agent {
     private stateChecker;
     private chunkBuffer;
     private abortController;
+    private queueProcessorPromise?;
+    private checkpointRecoveryBlocked;
     assistant_id: string;
     thread_id: string;
     tenant_id: string;
     workspace_id: string;
     project_id: string;
+    private queue_workspace_id;
+    private queue_project_id;
     custom_run_config: any;
     queueMode: ThreadQueueConfig;
     private isWaitingForQueueEnd;
@@ -7252,6 +7564,7 @@ declare class Agent {
      */
     constructor({ assistant_id, thread_id, tenant_id, workspace_id, project_id, custom_run_config, }: AgentThreadInterface);
     private getHumanPendingContent;
+    private queuedInputMessages;
     /**
      * Initialize with message queue store
      */
@@ -7276,13 +7589,16 @@ declare class Agent {
     chunkStream(message_id: string, stopTypes?: MessageChunkType[]): {
         [Symbol.asyncIterator]: () => AsyncGenerator<MessageChunk, void, unknown>;
     };
-    getLatticeClientAndRuntimeConfig(custom_run_config?: any): Promise<{
+    private buildExecutionRunConfig;
+    getLatticeClientAndRuntimeConfig(custom_run_config?: Record<string, unknown>, expectedRevision?: string): Promise<{
         runnable_agent: AgentClient;
-        runConfig: any;
+        runConfig: Record<string, unknown>;
     }>;
+    private getLatticeClient;
     invoke(queueMessage: QueueMessage, signal?: AbortSignal): Promise<{
         messages: any;
     }>;
+    private validateMessageInput;
     /**
      * Like {@link invoke} but returns the full LangGraph state (all annotations)
      * instead of only messages. Messages are serialized to dicts; other state
@@ -7305,7 +7621,9 @@ declare class Agent {
         }[];
     }>;
     private agentExecutor;
+    private interruptedCommandCapabilityRevision;
     getPendingMessages(): Promise<PendingMessage[]>;
+    private queueScope;
     private agentStreamExecutor;
     private consumeAgentStream;
     /**
@@ -7380,6 +7698,7 @@ declare class Agent {
      * loop with a fresh {@link AbortController}.
      */
     startQueueProcessorIfNeeded(): Promise<void>;
+    private runQueueProcessor;
     /**
      * Remove pending message
      */
@@ -7433,7 +7752,7 @@ declare class Agent {
      * Called during gateway startup to recover threads that were mid-execution
      * when the server went down.
      */
-    resumeTask(): Promise<void>;
+    resumeTask(): Promise<ResumeTaskResult>;
     /**
      * Fully abort all activity on this thread.
      *
@@ -7561,8 +7880,8 @@ declare const agentInstanceManager: AgentInstanceManager;
  * A single structured belief report attached to a task completion.
  *
  * Mirrors the `manage_task.beliefImpact` tool field: the reporting task claims
- * that, after execution, the named Belief Key is true with `after` percent
- * probability, supported by `basis` evidence.
+ * that, after execution, the named Belief Key has `after` percent evidence
+ * support, accompanied by a qualitative status and evidence in `basis`.
  */
 interface BeliefImpactInput {
     key: string;
@@ -7582,6 +7901,7 @@ interface LifecycleWarning {
 type LifecycleResult = {
     success: true;
     task: TaskItem;
+    mutated: boolean;
     evidenceId?: string;
     eventKey?: string;
     warnings?: LifecycleWarning[];
@@ -7980,6 +8300,27 @@ declare class CustomMiddlewareRegistry {
     static list(): string[];
 }
 
+/**
+ * Catalog metadata for a single registered plugin skill.
+ * Used to expose plugin skills through the read-only system skill catalog.
+ */
+interface PluginSkillCatalogItem {
+    /** Skill id (plugin skill key). */
+    id: string;
+    /** Skill name parsed from SKILL.md frontmatter. */
+    name: string;
+    /** Skill description parsed from SKILL.md frontmatter. */
+    description: string;
+    /** Plugin skill bundle version. */
+    version: string;
+    /** Owning plugin type. */
+    pluginType: string;
+    /** Safe relative paths of bundled resources with their MIME types. */
+    resourcePaths: Array<{
+        path: string;
+        mimeType?: string;
+    }>;
+}
 /**
  * Plugin registry.
  *
@@ -7994,12 +8335,37 @@ declare class PluginRegistry {
     static unregister(key: string): boolean;
     /** Get plugin instance */
     static get(key: string): Plugin | undefined;
+    /** Get a plugin skill definition and its owning plugin type. */
+    static getSkill(name: string): {
+        pluginType: string;
+        definition: PluginSkillDefinition;
+    } | undefined;
+    /** Find the registered owner of the exact enabled skill definition. */
+    static getSkillOwner(name: string, definition: PluginSkillDefinition): {
+        pluginType: string;
+        definition: PluginSkillDefinition;
+    } | undefined;
+    /** Find a skill using the explicitly enabled plugin owner. */
+    static getSkillForPlugin(pluginType: string, name: string): {
+        pluginType: string;
+        definition: PluginSkillDefinition;
+    } | undefined;
     /** Check if registered */
     static has(key: string): boolean;
     /** List all registered plugin keys */
     static list(): string[];
     /** Serialize all registered plugins to API-ready meta list */
     static listMeta(): PluginMetaOutput[];
+    /**
+     * Catalog metadata for all registered plugin skills, regardless of whether
+     * the owning plugin is enabled for a given agent.
+     *
+     * Pure/synchronous — no sandbox, no tenant context. Name/description are
+     * parsed from each SKILL.md definition's frontmatter.
+     *
+     * @returns Catalog entries keyed by plugin skill id.
+     */
+    static listSkills(): PluginSkillCatalogItem[];
 }
 
 /**
@@ -8014,10 +8380,76 @@ declare function serializePluginMeta(plugin: Plugin): PluginMetaOutput;
 
 declare const BUILTIN_PLUGINS: Plugin[];
 
+/** Stable failure codes emitted when capability bundles cannot be composed. */
+type CapabilityBundleMergeErrorCode = "CAPABILITY_BUNDLE_DUPLICATE_ID" | "CAPABILITY_BUNDLE_EMPTY_ALLOWED_TOOLS" | "CAPABILITY_BUNDLE_INVALID_CONFIG" | "CAPABILITY_BUNDLE_NULL_VALUE" | "CAPABILITY_BUNDLE_UNSAFE_KEY";
+/** Describes invalid capability bundle input rejected by the pure merger. */
+declare class CapabilityBundleMergeError extends Error {
+    /** Stable machine-readable reason for the failure. */
+    readonly code: CapabilityBundleMergeErrorCode;
+    /** Bundle containing the invalid value, when known. */
+    readonly bundleId?: string;
+    /** Capability containing the invalid value, when known. */
+    readonly capabilityType?: string;
+    /** JSON Pointer path to the invalid capability field, when known. */
+    readonly fieldPath?: string;
+    /**
+     * Creates a capability bundle composition error.
+     *
+     * @param code - Stable machine-readable failure code.
+     * @param message - Human-readable failure description.
+     * @param context - Structured location of the invalid input.
+     */
+    constructor(code: CapabilityBundleMergeErrorCode, message: string, context?: {
+        bundleId?: string;
+        capabilityType?: string;
+        fieldPath?: string;
+    });
+}
+/**
+ * Composes ordered capability bundles into a detached runtime preview.
+ *
+ * Capability identity and display fields come from the first occurrence of a
+ * type. Runtime fields are merged in bundle order with provenance and distinct
+ * ordinary replacements recorded in the preview.
+ *
+ * @param bundles - Capability bundles in composition precedence order.
+ * @returns A deterministic, detached capability preview.
+ * @throws {CapabilityBundleMergeError} When bundle IDs repeat or consumed input contains null, empty tool selections, or unsafe keys.
+ * @example
+ * ```ts
+ * const preview = mergeCapabilityBundles([baseBundle, projectBundle]);
+ * ```
+ * @remarks
+ * Bundle order defines precedence: later explicit ordinary values replace earlier values.
+ * Capability output order follows each type's first appearance.
+ */
+declare function mergeCapabilityBundles(bundles: readonly CapabilityBundle[]): CapabilityPreview;
+/**
+ * Stateless facade for composing capability bundles in dependency-injected services.
+ *
+ * @example
+ * ```ts
+ * const merger = new CapabilityBundleMerger();
+ * const preview = merger.merge([baseBundle, projectBundle]);
+ * ```
+ * @remarks
+ * Pass bundles in ascending precedence order. The facade retains no state between calls.
+ */
+declare class CapabilityBundleMerger {
+    /**
+     * Composes ordered capability bundles.
+     *
+       * @param bundles - Capability bundles in composition precedence order.
+       * @returns A deterministic, detached capability preview.
+       * @remarks Later bundles take precedence while capability type order remains first-seen.
+       */
+    merge(bundles: readonly CapabilityBundle[]): CapabilityPreview;
+}
+
 /**
  * Capability Learning Plugin
  *
- * Provides a document-learner agent and learn-capability procedural skill.
+ * Provides a document-learner agent and source-to-capability learning workflow.
  * The agent guides users through turning source material (documents, API
  * specs, conversations, spreadsheets) into structured skill systems with
  * evaluations — following a supervised learning paradigm.
@@ -8034,8 +8466,41 @@ declare const documentLearningPlugin: Plugin;
  * when connectAll is enabled.
  */
 
+/** Built-in Document Parser plugin definition. */
 declare const documentParserPlugin: Plugin;
 
+/** Stable reasons for rejecting capability bundle input. */
+type CapabilityBundleValidationErrorCode = "CAPABILITY_BUNDLE_EMPTY_FIELD" | "CAPABILITY_BUNDLE_INELIGIBLE_CAPABILITY" | "CAPABILITY_BUNDLE_INVALID_CAPABILITY" | "CAPABILITY_BUNDLE_DUPLICATE_CAPABILITY" | "CAPABILITY_BUNDLE_EMPTY_ALLOWED_TOOLS" | "CAPABILITY_BUNDLE_UNKNOWN_TOOL" | "CAPABILITY_BUNDLE_TOOLS_UNAVAILABLE" | "CAPABILITY_BUNDLE_NULL_VALUE" | "CAPABILITY_BUNDLE_UNSAFE_KEY" | "CAPABILITY_BUNDLE_NESTED_REFERENCE" | "CAPABILITY_BUNDLE_INVALID_CONFIG" | "CAPABILITY_BUNDLE_CYCLIC_CONFIG" | "CAPABILITY_BUNDLE_CONFIG_TOO_DEEP" | "CAPABILITY_BUNDLE_CONFIG_TOO_LARGE" | "CAPABILITY_BUNDLE_NON_JSON_VALUE" | "CAPABILITY_BUNDLE_CREDENTIALS_FORBIDDEN";
+/** Describes invalid capability bundle input with a stable code and location. */
+declare class CapabilityBundleValidationError extends Error {
+    /** Stable machine-readable reason. */
+    readonly code: CapabilityBundleValidationErrorCode;
+    /** Capability type containing the invalid value, when known. */
+    readonly capabilityType?: string;
+    /** JSON Pointer to the invalid value. */
+    readonly fieldPath?: string;
+    /** Creates a structured capability bundle validation error. */
+    constructor(code: CapabilityBundleValidationErrorCode, message: string, context?: {
+        capabilityType?: string;
+        fieldPath?: string;
+    });
+}
+/**
+ * Validates create or partial-update capability bundle input without mutating it.
+ *
+ * @param input - Bundle fields supplied by a create or update request.
+ * @param options - Set `partial` for update semantics; omitted fields are allowed.
+ * @returns Nothing when valid; throws {@link CapabilityBundleValidationError} otherwise.
+ * @example
+ * ```ts
+ * validateCapabilityBundleInput({ name: "Data", capabilities: [] });
+ * validateCapabilityBundleInput({ name: "Renamed" }, { partial: true });
+ * ```
+ */
+declare function validateCapabilityBundleInput(input: unknown, options?: {
+    partial?: boolean;
+}): asserts input is CreateCapabilityBundleInput | UpdateCapabilityBundleInput;
+
 /**
  * Create middleware that provides widget rendering capabilities.
  *
@@ -8125,6 +8590,145 @@ interface UnknownToolHandlerConfig {
  */
 declare function createUnknownToolHandlerMiddleware(config?: UnknownToolHandlerConfig): AgentMiddleware;
 
+/** Describes how a tool argument selects a capability-scoped resource. */
+interface CapabilityResourceSelector {
+    /** Tool argument containing the selected resource key. */
+    argumentField: string;
+    /** Capability runtime config field containing allowed resource keys. */
+    configField: string;
+    /** Capability runtime config flag that grants access to all resources. */
+    allowAllField?: "connectAll" | "readAll";
+    /** Whether allow-all mode permits omission for a discovery-style tool. */
+    allowMissingWhenAll?: boolean;
+}
+/** Metadata linking one emitted tool to its capability policy. */
+interface CapabilityToolMetadata {
+    /** Middleware type used as the capability runtime policy key. */
+    capabilityType: string;
+    /** Optional resource selector enforced when the tool call supplies it. */
+    resourceSelector?: CapabilityResourceSelector;
+}
+/** Stable failure code for ambiguous emitted tool-to-capability mappings. */
+declare const CAPABILITY_TOOL_NAME_CONFLICT: "CAPABILITY_TOOL_NAME_CONFLICT";
+/** Error raised when one emitted tool name is mapped to incompatible policies. */
+declare class CapabilityToolNameConflictError extends Error {
+    readonly toolName: string;
+    readonly existingCapabilityType: string;
+    readonly conflictingCapabilityType: string;
+    /** Stable machine-readable error code. */
+    readonly code: "CAPABILITY_TOOL_NAME_CONFLICT";
+    /** Creates an emitted tool-name conflict error. */
+    constructor(toolName: string, existingCapabilityType: string, conflictingCapabilityType: string);
+}
+/**
+ * Registers tool-to-capability metadata for one middleware construction.
+ *
+ * @remarks Create one registry per middleware chain. Stored and returned metadata
+ * is frozen so callers cannot mutate policy mappings across requests.
+ *
+ * @example Standard plugins do not need a resource selector mapping; the
+ * generic guard uses `connectionKey` with `meta.type` as the connection type.
+ * Legacy built-ins retain explicit selectors through the compatibility map.
+ * ```ts
+ * const registry = new CapabilityToolRegistry();
+ * registry.registerMiddleware("crm", crmMiddleware);
+ * ```
+ */
+declare class CapabilityToolRegistry {
+    private readonly metadataByTool;
+    private readonly standardConnectionTools;
+    /**
+     * Registers one tool mapping.
+     *
+     * @param name - Actual emitted tool name.
+     * @param metadata - Capability and optional resource-selector metadata.
+     * @returns Nothing.
+     */
+    private registerInternal;
+    /**
+     * Registers one tool mapping.
+     *
+     * @param name - Actual emitted tool name.
+     * @param metadata - Capability and optional legacy resource-selector metadata.
+     * @param tool - Optional emitted tool whose schema may declare `connectionKey`.
+     * @returns Nothing.
+     * @remarks Standard connection authorization is captured only for tools whose
+     * schema declares `connectionKey`; legacy selectors remain explicit metadata.
+     */
+    register(name: string, metadata: CapabilityToolMetadata, tool?: unknown): void;
+    /**
+     * Registers all tools actually exposed by a middleware instance.
+     *
+     * @param capabilityType - Runtime middleware policy key.
+     * @param middleware - Constructed middleware after tool filtering.
+     * @param resourceSelectors - Optional resource mappings keyed by emitted tool name.
+     * @returns Nothing.
+     */
+    registerMiddleware(capabilityType: string, middleware: AgentMiddleware, resourceSelectors?: Readonly<Record<string, CapabilityResourceSelector>>): void;
+    /**
+     * Gets immutable metadata for a registered tool.
+     *
+     * @param name - Tool name requested by the model.
+     * @returns Frozen metadata, or `undefined` when the tool is not mapped.
+     */
+    get(name: string): CapabilityToolMetadata | undefined;
+    /**
+     * Reports whether standard connection authorization was captured at registration time.
+     *
+     * @param name - Tool name.
+     * @returns Whether the tool belongs to an eligible standard connection plugin.
+     */
+    isStandardConnectionTool(name: string): boolean;
+}
+
+/**
+ * Returns one capability's runtime configuration for the current invocation.
+ *
+ * @param executionConfig - LangChain execution configuration or another unknown input.
+ * @param capabilityType - Middleware type used as the runtime capability key.
+ * @returns The capability config record, or `undefined` when the runtime shape is absent or invalid.
+ */
+declare function getRuntimeCapabilityConfig(executionConfig: unknown, capabilityType: string): Record<string, unknown> | undefined;
+/**
+ * Reports whether a capability policy exists in the current runtime snapshot.
+ *
+ * @param executionConfig - LangChain execution configuration or another unknown input.
+ * @param capabilityType - Middleware type used as the runtime capability key.
+ * @returns Whether the runtime contains a policy record for the capability.
+ */
+declare function hasRuntimeCapabilityPolicy(executionConfig: unknown, capabilityType: string): boolean;
+/** Runtime skill selector extracted from a capability snapshot. */
+interface RuntimeSkillSelection {
+    /** Whether the invocation contains an explicit skill capability policy. */
+    hasPolicy: boolean;
+    /** Whether the resolved skill capability is enabled. */
+    enabled: boolean;
+    /** Explicitly selected skill names, including an empty deny-all list. */
+    skills?: string[];
+    /** Whether the runtime policy requests all skills within the static ceiling. */
+    readAll: boolean;
+}
+/**
+ * Returns the runtime skill selection for one invocation.
+ *
+ * @param executionConfig - LangChain execution configuration or another unknown input.
+ * @returns A detached selector that preserves absent policy versus explicit empty selection.
+ */
+declare function getRuntimeSkillSelection(executionConfig: unknown): RuntimeSkillSelection;
+
+/** Stable machine-readable capability guard denial codes. */
+type CapabilityGuardDenialCode = "CAPABILITY_DISABLED" | "CAPABILITY_DENIED" | "RESOURCE_NOT_ALLOWED";
+/**
+ * Creates a tool-call guard backed by server-derived capability runtime policy.
+ *
+ * @param registry - Per-middleware-chain mappings for actual emitted tools.
+ * @returns A middleware with only a `wrapToolCall` hook.
+ * @remarks Unmapped tools and missing policies pass through. This middleware does
+ * not replace unknown-tool handling and deliberately does not implement
+ * `wrapModelCall`.
+ */
+declare function createCapabilityGuardMiddleware(registry: CapabilityToolRegistry): AgentMiddleware;
+
 interface SchedulerMiddlewareOptions {
     defaultMaxRetries?: number;
 }
@@ -8627,4 +9231,4 @@ declare class IdRemapper {
     remapSkillIds(graphDefinition: Record<string, unknown>, skillRemap: Record<string, string>): Record<string, unknown>;
 }
 
-export { AGENT_TASK_EVENT, type AddMessageParams, Agent, type AgentClient, type AgentExecutor, AgentInstanceManager, type AgentLattice, AgentLatticeManager, type AgentLifecycleEventName, AgentManager, type AgentStreamExecutor, type AgentTaskCompletionInput, type AgentThreadInterface, type ApproveInterruptedTaskInput, BUILTIN_PLUGINS, BUILTIN_SKILLS, type BackendFactory, type BackendProtocol, type BufferStats, type CacheEntry, type CalibrationProbe, type CaseRunResult, type Chunk, ChunkBuffer, ChunkBufferLatticeManager, CollectionLatticeManager, type ColumnInfo, CompositeBackend, type ConflictItem, type ConnectAllChannelsOptions, ConnectionRegistry, ConsoleLoggerClient, type CreateSandboxProviderConfig, type CronFields, CustomMetricsClient, type CustomMiddlewareFactory, CustomMiddlewareRegistry, DEFAULT_CALIBRATION_PROBES, type DatabaseConfig, type DatabaseType, DaytonaInstance, DaytonaProvider, type DaytonaProviderConfig, DefaultScheduleClient, type DeleteResult, DependencyResolver, E2BInstance, E2BProvider, type E2BProviderConfig, EMPTY_CONTENT_WARNING, type EditResult, type EmbeddingsInfo, type EmbeddingsLatticeInterface, EmbeddingsLatticeManager, type EnsureMicrosandboxInput, type EvalRunService, type ExportBundle, type ExportContext, type ExportJob, type ExportableEntity, type ExportableEntityDefinition, ExportableEntityRegistry, type ExportableFile, type ExportableTypeInfo, type FileData, type FileInfo, FileSystemSkillStore, type FileSystemSkillStoreOptions, FilesystemBackend, type FsEntry, type GrepMatch, type IMessageQueueStore, type IMetricsServerClient, type ISqlDatabase, IdRemapper, type ImportApplyResolution, type ImportApplyResult, type ImportEntityResult, type ImportEntityStatus, type ImportPreviewResult, InMemoryA2AApiKeyStore, InMemoryAgentWebAppStore, InMemoryAssistantStore, InMemoryBindingStore, InMemoryChannelInstallationStore, InMemoryChunkBuffer, InMemoryCollectionStore, InMemoryDatabaseConfigStore, InMemoryMailboxStore, InMemoryMenuStore, InMemoryTaskListStore, InMemoryTaskStore, InMemoryTenantStore, InMemoryThreadMessageQueueStore, InMemoryThreadStore, InMemoryUserStore, InMemoryUserTenantLinkStore, type InsertionItem, type JudgeVerdict, LINE_NUMBER_WIDTH, type LangGraphStateChecker, type LatticeAgentStepConfig, LatticeEval, type LatticeEvalBatchReport, type LatticeEvalCase, type LatticeEvalCaseType, type LatticeEvalCaseWithTemplate, type LatticeEvalConfig, type LatticeEvalLogEvent, type LatticeEvalLogLevel, LatticeEvalProject, type LatticeEvalProjectType, type LatticeEvalResult, type LatticeEvalRubric, LatticeEvalSuite, type LatticeEvalSuiteType, type LatticeEvalTemplate, type LifecycleResult, type LifecycleWarning, LocalSandboxInstance, LocalSandboxProvider, type LocalSandboxProviderConfig, type LoggerLattice, LoggerLatticeManager, MAX_LINE_LENGTH, type MailboxMessage, type MailboxStore, type McpLatticeInterface, McpLatticeManager, type McpServerInfo, MemoryBackend, MemoryLatticeManager, MemoryQueueClient, MemoryScheduleStorage, type MessageCompletedEvent, type MessageFailedEvent, type MessageStartedEvent, MessageType, MetricsServerManager, MicrosandboxRemoteInstance, MicrosandboxRemoteProvider, type MicrosandboxRemoteProviderClient, type MicrosandboxRemoteProviderConfig, MicrosandboxServiceClient, type MicrosandboxServiceClientConfig, type MicrosandboxShellExecInput, type ModelConfig, type ModelLatticeInterface, ModelLatticeManager, MysqlDatabase, type OutputType, type PendingMessage, PersonalAssistantConfig, PinoLoggerClient, PluginRegistry, PostgresDatabase, type PreviewError, PrometheusClient, type QueryResult, type QueueLattice, QueueLatticeManager, QueueMode, type QueuePendingEvent, type ReconcileTaskDescriptionInput, type RejectInterruptedTaskInput, RemoteSandboxInstance, RemoteSandboxProvider, type RemoteSandboxProviderConfig, type Resolution, type ResolutionAction, type ResolveAgentFn, type ResolvedConfig, type RunSandboxConfig, type RuntimeModelConfig, type STTModelInfo, STTModelLattice, type STTModelLatticeInterface, STTModelLatticeManager, type SandboxFileInfo, type SandboxFileService, SandboxFilesystem, type SandboxInstance, type SandboxIsolationLevel, SandboxLatticeManager, type SandboxManagerProtocol, type SandboxProvider, type SandboxProviderFactory, type SandboxProviderType, type SandboxShellService, SandboxSkillStore, type SandboxSkillStoreOptions, type SandboxVolumeDefinition, type ScheduleLattice, ScheduleLatticeManager, type SchedulerMiddlewareOptions, SemanticMetricsClient, type SharePayload, SimpleMemoryVectorStore, type SkillLattice, SkillLatticeManager, type SkillMeta, type SkillResource, SqlDatabaseManager, type StateAndStore, StateBackend, StoreBackend, type StoreLattice, StoreLatticeManager, type StoreType, type StoreTypeMap, type SubmitTaskReviewInput, TOOL_RESULT_TOKEN_LIMIT, TRUNCATION_GUIDANCE, type TableInfo, type TableSchema, type TaskEvent, TaskLifecycleService, type TaskLifecycleServiceDeps, type TaskListStore, type TaskSpec, TaskStatus, type TaskUpdatable, TeamAgentGraphBuilder, type TeamConfig, type TeamMiddlewareOptions, type TeamTask, type TeammateSpec, type TeammateToolsOptions, type ThreadBuffer, type ThreadBufferConfig, type ThreadBusyEvent, type ThreadIdleEvent, type ThreadInfo, type ThreadQueueConfig, type ThreadState, ThreadStatus, type ThreadStatusChangedEvent, TokenCache, type ToolDefinition, type ToolLattice, ToolLatticeManager, type UnknownToolHandlerConfig, type VectorStoreLatticeInterface, VectorStoreLatticeManager, type VectorStoreProviderLattice, VectorStoreProviderManager, VolumeFilesystem, type VolumeFsClient, type WorkflowValidationError, type WriteResult, abortWorkflowRun, agentInstanceManager, agentLatticeManager, buildGrepResultsDict, buildInput, buildNamedVolumeName, buildSandboxMetadataEnv, buildSkillFile, buildStateAnnotation, buildTableName, checkEmptyContent, clearEncryptionKeyCache, clearEvalRunService, collectionLatticeManager, compileInternal, compileWorkflow, computeSandboxName, configureStores, connectAllChannels, createAgentNode, createAgentTeam, createExecuteSqlQueryTool, createFileData, createInfoSqlTool, createListMetricsDataSourcesTool, createListMetricsServersTool, createListTablesSqlTool, createMapNode, createModelSelectorMiddleware, createNodeHandler, createQueryCheckerSqlTool, createQueryMetricDefinitionTool, createQueryMetricsListTool, createQuerySemanticMetricDataTool, createQuerySqlTool, createQueryTableDefinitionTool, createQueryTablesListTool, createResourceAddress, createSandboxProvider, createSchedulerMiddleware, createSharePayload, createTaskLifecycleService, createTaskMiddleware, createTeamMiddleware, createTeammateTools, createUnknownToolHandlerMiddleware, createWidgetMiddleware, decrypt, describeCronExpression, documentLearningPlugin, documentParserPlugin, embeddingsLatticeManager, encrypt, ensureBuiltinAgentsForTenant, evaluateLatticeCaseWithLogs, eventBus, eventBus as eventBusDefault, extractFetcherError, extractOutput, fileDataToString, formatContentWithLineNumbers, formatGrepMatches, formatGrepResults, formatReadResponse, generateToken, getAgentClient, getAgentConfig, getAllAgentConfigs, getAllBuiltInSkillMetas, getAllToolDefinitions, getBindingRegistry, getBuiltInSkillContent, getBuiltInSkillMeta, getBuiltInSkillNames, getCheckpointSaver, getChunkBuffer, getCollectionEntryCount, getEmbeddingsClient, getEmbeddingsLattice, getEncryptionKey, getEvalRunService, getLoggerLattice, getMenuRegistry, getModelLattice, getNextCronTime, getOrCreateCollectionVectorStore, getQueueLattice, getSTTClient, getSTTClientWithTenant, getSTTModelLattice, getSandBoxManager, getScheduleLattice, getStoreLattice, getToolClient, getToolDefinition, getToolLattice, getVectorStoreClient, getVectorStoreLattice, getVectorStoreProvider, getWorkflowSignal, globSearchFiles, grepMatchesFromFiles, grepSearchFiles, hasChunkBuffer, invokeWithRetry, isBuiltInSkill, isUsingDefaultKey, isValidCronExpression, isValidSandboxName, isValidSkillName, listCollectionEntries, listSandboxProviderTypes, loggerLatticeManager, mcpManager, metricsServerManager, modelLatticeManager, normalizeSandboxName, parallelLimit, parseCronExpression, parseJudgeVerdict, parseSkillFrontmatter, parseYaml, performStringReplacement, queueLatticeManager, registerAgentLattice, registerAgentLatticeWithTenant, registerAgentLattices, registerBuiltinSkill, registerCheckpointSaver, registerChunkBuffer, registerEmbeddingsLattice, registerExistingTool, registerLoggerLattice, registerModelLattice, registerQueueLattice, registerSTTModelLattice, registerSandboxProviderType, registerScheduleLattice, registerStoreLattice, registerTeammateAgent, registerToolLattice, registerVectorStoreLattice, registerVectorStoreProvider, registerWorkflowRun, removeCollectionVectorStore, renderTemplate, resolveJudgeModelKey, resolvePath, sandboxLatticeManager, sanitizeToolCallId, scheduleLatticeManager, serializePluginMeta, setBindingRegistry, setEvalRunService, setMenuRegistry, skillLatticeManager, sqlDatabaseManager, storeLatticeManager, sttModelLatticeManager, toJsonSchema, toSafeStateExpr, toolLatticeManager, truncateIfTooLong, unregisterTeammateAgent, unregisterWorkflowRun, updateFileData, validateAgentInput, validateDSL, validateEncryptionKey, validatePath, validateSkillName, validateToolInput, vectorStoreLatticeManager, vectorStoreProviderManager };
+export { AGENT_TASK_EVENT, type AddMessageParams, Agent, type AgentClient, type AgentExecutor, AgentInstanceManager, type AgentLattice, AgentLatticeManager, type AgentLifecycleEventName, AgentManager, type AgentStreamExecutor, type AgentTaskCompletionInput, type AgentThreadInterface, type ApproveInterruptedTaskInput, BUILTIN_PLUGINS, BUILTIN_SKILLS, type BackendFactory, type BackendProtocol, type BufferStats, CAPABILITY_TOOL_NAME_CONFLICT, type CacheEntry, type CalibrationProbe, CapabilityBundleMergeError, type CapabilityBundleMergeErrorCode, CapabilityBundleMerger, CapabilityBundleValidationError, type CapabilityBundleValidationErrorCode, type CapabilityGuardDenialCode, type CapabilityResourceSelector, type CapabilityToolMetadata, CapabilityToolNameConflictError, CapabilityToolRegistry, type CaseRunResult, type Chunk, ChunkBuffer, ChunkBufferLatticeManager, CollectionLatticeManager, type ColumnInfo, CompositeBackend, type ConflictItem, type ConnectAllChannelsOptions, ConnectionRegistry, ConsoleLoggerClient, type CreateSandboxProviderConfig, type CronFields, CustomMetricsClient, type CustomMiddlewareFactory, CustomMiddlewareRegistry, DEFAULT_CALIBRATION_PROBES, type DatabaseConfig, type DatabaseType, DaytonaInstance, DaytonaProvider, type DaytonaProviderConfig, DefaultScheduleClient, type DeleteResult, DependencyResolver, E2BInstance, E2BProvider, type E2BProviderConfig, EMPTY_CONTENT_WARNING, type EditResult, type EmbeddingsInfo, type EmbeddingsLatticeInterface, EmbeddingsLatticeManager, type EnsureMicrosandboxInput, type EvalRunService, type ExportBundle, type ExportContext, type ExportJob, type ExportableEntity, type ExportableEntityDefinition, ExportableEntityRegistry, type ExportableFile, type ExportableTypeInfo, type FileData, type FileInfo, FileSystemSkillStore, type FileSystemSkillStoreOptions, FilesystemBackend, type FsEntry, type GrepMatch, type IMessageQueueStore, type IMetricsServerClient, type ISqlDatabase, IdRemapper, type ImportApplyResolution, type ImportApplyResult, type ImportEntityResult, type ImportEntityStatus, type ImportPreviewResult, InMemoryA2AApiKeyStore, InMemoryAgentWebAppStore, InMemoryAssistantStore, InMemoryBindingStore, InMemoryCapabilityBundleStore, InMemoryChannelInstallationStore, InMemoryChunkBuffer, InMemoryCollectionStore, InMemoryDatabaseConfigStore, InMemoryMailboxStore, InMemoryMenuStore, InMemoryTaskListStore, InMemoryTaskStore, InMemoryTenantStore, InMemoryThreadMessageQueueStore, InMemoryThreadStore, InMemoryUserStore, InMemoryUserTenantLinkStore, type InsertionItem, type JudgeVerdict, LINE_NUMBER_WIDTH, type LangGraphStateChecker, type LatticeAgentStepConfig, LatticeEval, type LatticeEvalBatchReport, type LatticeEvalCase, type LatticeEvalCaseType, type LatticeEvalCaseWithTemplate, type LatticeEvalConfig, type LatticeEvalLogEvent, type LatticeEvalLogLevel, LatticeEvalProject, type LatticeEvalProjectType, type LatticeEvalResult, type LatticeEvalRubric, LatticeEvalSuite, type LatticeEvalSuiteType, type LatticeEvalTemplate, type LifecycleResult, type LifecycleWarning, LocalSandboxInstance, LocalSandboxProvider, type LocalSandboxProviderConfig, type LoggerLattice, LoggerLatticeManager, MAX_LINE_LENGTH, MAX_PACK_ENTRIES, MAX_PACK_FILE_BYTES, MAX_PACK_TOTAL_BYTES, type MailboxMessage, type MailboxStore, type McpLatticeInterface, McpLatticeManager, type McpServerInfo, MemoryBackend, MemoryLatticeManager, MemoryQueueClient, MemoryScheduleStorage, type MessageCompletedEvent, type MessageContent, type MessageContentPart, type MessageContentValue, type MessageFailedEvent, type MessageLike, type MessageStartedEvent, MessageType, MetricsServerManager, MicrosandboxRemoteInstance, MicrosandboxRemoteProvider, type MicrosandboxRemoteProviderClient, type MicrosandboxRemoteProviderConfig, MicrosandboxServiceClient, type MicrosandboxServiceClientConfig, type MicrosandboxShellExecInput, type ModelConfig, type ModelLatticeInterface, ModelLatticeManager, MysqlDatabase, type OutputType, PACK_DIRECTORY_TIMEOUT_SECONDS, type PackSourceInfo, type PendingMessage, PersonalAssistantConfig, PinoLoggerClient, PluginRegistry, PostgresDatabase, type PreviewError, PrometheusClient, type QueryResult, type QueueLattice, QueueLatticeManager, type QueueMessage, QueueMode, type QueuePendingEvent, type QueueScope, type ReconcileTaskDescriptionInput, type RejectInterruptedTaskInput, RemoteSandboxInstance, RemoteSandboxProvider, type RemoteSandboxProviderConfig, type Resolution, type ResolutionAction, type ResolveAgentFn, type ResolvedConfig, type ResumeTaskResult, type RunSandboxConfig, type RuntimeModelConfig, type RuntimeSkillSelection, SAFE_PATH_COMPONENT, type STTModelInfo, STTModelLattice, type STTModelLatticeInterface, STTModelLatticeManager, type SandboxFileInfo, type SandboxFileService, SandboxFilesystem, type SandboxInstance, type SandboxIsolationLevel, SandboxLatticeManager, type SandboxManagerProtocol, type SandboxProvider, type SandboxProviderFactory, type SandboxProviderType, type SandboxShellService, SandboxSkillStore, type SandboxSkillStoreOptions, type SandboxVolumeDefinition, type ScheduleLattice, ScheduleLatticeManager, type SchedulerMiddlewareOptions, SemanticMetricsClient, type SharePayload, SimpleMemoryVectorStore, type SkillLattice, SkillLatticeManager, type SkillMeta, type SkillResource, SqlDatabaseManager, type StateAndStore, StateBackend, StoreBackend, type StoreLattice, StoreLatticeManager, type StoreType, type StoreTypeMap, type SubmitTaskReviewInput, TOOL_RESULT_TOKEN_LIMIT, TRUNCATION_GUIDANCE, type TableInfo, type TableSchema, type TaskEvent, TaskLifecycleService, type TaskLifecycleServiceDeps, type TaskListStore, type TaskSpec, TaskStatus, type TaskUpdatable, TeamAgentGraphBuilder, type TeamConfig, type TeamMiddlewareOptions, type TeamTask, type TeammateSpec, type TeammateToolsOptions, type ThreadBuffer, type ThreadBufferConfig, type ThreadBusyEvent, type ThreadIdleEvent, type ThreadInfo, type ThreadQueueConfig, type ThreadState, ThreadStatus, type ThreadStatusChangedEvent, TokenCache, type ToolDefinition, type ToolLattice, ToolLatticeManager, type UnknownToolHandlerConfig, type VectorStoreLatticeInterface, VectorStoreLatticeManager, type VectorStoreProviderLattice, VectorStoreProviderManager, VolumeFilesystem, type VolumeFsClient, type WorkflowValidationError, type WriteResult, abortWorkflowRun, agentInstanceManager, agentLatticeManager, buildGrepResultsDict, buildInput, buildNamedVolumeName, buildRemotePackDirectoryCommand, buildSandboxMetadataEnv, buildSkillFile, buildStateAnnotation, buildTableName, checkEmptyContent, clearEncryptionKeyCache, clearEvalRunService, collectionLatticeManager, compileInternal, compileWorkflow, computeSandboxName, configureStores, connectAllChannels, createAgentNode, createAgentTeam, createCapabilityGuardMiddleware, createExecuteSqlQueryTool, createFileData, createInfoSqlTool, createListMetricsDataSourcesTool, createListMetricsServersTool, createListTablesSqlTool, createMapNode, createModelSelectorMiddleware, createNodeHandler, createQueryCheckerSqlTool, createQueryMetricDefinitionTool, createQueryMetricsListTool, createQuerySemanticMetricDataTool, createQuerySqlTool, createQueryTableDefinitionTool, createQueryTablesListTool, createResourceAddress, createSandboxProvider, createSchedulerMiddleware, createSharePayload, createTaskLifecycleService, createTaskMiddleware, createTeamMiddleware, createTeammateTools, createUnknownToolHandlerMiddleware, createWidgetMiddleware, decrypt, describeCronExpression, documentLearningPlugin, documentParserPlugin, embeddingsLatticeManager, encrypt, ensureBuiltinAgentsForTenant, ensurePluginSkillInSandbox, evaluateLatticeCaseWithLogs, eventBus, eventBus as eventBusDefault, extractFetcherError, extractOutput, fileDataToString, formatContentWithLineNumbers, formatGrepMatches, formatGrepResults, formatReadResponse, generateToken, getAgentClient, getAgentConfig, getAllAgentConfigs, getAllBuiltInSkillMetas, getAllToolDefinitions, getBindingRegistry, getBuiltInSkillContent, getBuiltInSkillMeta, getBuiltInSkillNames, getCheckpointSaver, getChunkBuffer, getCollectionEntryCount, getEmbeddingsClient, getEmbeddingsLattice, getEncryptionKey, getEvalRunService, getLoggerLattice, getMenuRegistry, getModelLattice, getNextCronTime, getOrCreateCollectionVectorStore, getPluginSkillManifestVersion, getQueueLattice, getRuntimeCapabilityConfig, getRuntimeSkillSelection, getSTTClient, getSTTClientWithTenant, getSTTModelLattice, getSandBoxManager, getScheduleLattice, getStoreLattice, getToolClient, getToolDefinition, getToolLattice, getVectorStoreClient, getVectorStoreLattice, getVectorStoreProvider, getWorkflowSignal, globSearchFiles, grepMatchesFromFiles, grepSearchFiles, hasChunkBuffer, hasRuntimeCapabilityPolicy, invokeWithRetry, isBuiltInSkill, isPluginSkillAuthorizedInSandbox, isPluginSkillManagedInSandbox, isUsingDefaultKey, isValidCronExpression, isValidSandboxName, isValidSkillName, listCollectionEntries, listSandboxProviderTypes, loggerLatticeManager, mcpManager, mergeCapabilityBundles, metricsServerManager, modelLatticeManager, normalizeSandboxName, parallelLimit, parseCronExpression, parseJudgeVerdict, parsePackSize, parseSkillFrontmatter, parseYaml, performStringReplacement, queueLatticeManager, registerAgentLattice, registerAgentLatticeWithTenant, registerAgentLattices, registerCheckpointSaver, registerChunkBuffer, registerEmbeddingsLattice, registerExistingTool, registerLoggerLattice, registerModelLattice, registerQueueLattice, registerSTTModelLattice, registerSandboxProviderType, registerScheduleLattice, registerStoreLattice, registerTeammateAgent, registerToolLattice, registerVectorStoreLattice, registerVectorStoreProvider, registerWorkflowRun, removeCollectionVectorStore, renderTemplate, resolveJudgeModelKey, resolvePath, runRemotePackDirectory, sandboxLatticeManager, sanitizeToolCallId, scheduleLatticeManager, serializePluginMeta, setBindingRegistry, setEvalRunService, setMenuRegistry, skillLatticeManager, sqlDatabaseManager, storeLatticeManager, sttModelLatticeManager, toJsonSchema, toSafeStateExpr, toolLatticeManager, truncateIfTooLong, unregisterTeammateAgent, unregisterWorkflowRun, updateFileData, validateAgentInput, validateCapabilityBundleInput, validateDSL, validateEncryptionKey, validatePackSourcePath, validatePath, validateRelativePath, validateSkillName, validateToolInput, vectorStoreLatticeManager, vectorStoreProviderManager };