@axiom-lattice/core 4.2.8 → 4.2.9

package/dist/index.d.mts

@@ -8,12 +8,12 @@ import { BaseLanguageModelInput, LanguageModelLike } from '@langchain/core/langu
 import { CallbackManagerForLLMRun } from '@langchain/core/callbacks/manager';
 import { ChatResult } from '@langchain/core/outputs';
 import * as _axiom_lattice_protocols from '@axiom-lattice/protocols';
-import { LLMConfig, SemanticMetricsServerConfig, MetricMeta, MetricQueryResult, DataSource, SemanticMetricsQueryRequest, SemanticMetricsQueryResponse, TableQueryRequest, TableQueryResponse, ExecuteSqlQueryRequest, ExecuteSqlQueryResponse, MetricsServerType, MetricsServerConfig, ToolConfig, ToolExecutor, AgentConfig, MiddlewareType, GraphBuildOptions, MessageChunk, MessageChunkType, QueueLatticeProtocol, QueueConfig, QueueClient, QueueResult, ScheduleLatticeProtocol, ScheduleConfig, ScheduleClient, ScheduleStorage, TaskHandler, ScheduleOnceOptions, ScheduleCronOptions, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TrustedRunContext, QueuedExecutionMode, ThreadStore, AssistantStore, SkillStore, CollectionStore, WorkspaceStore, ProjectStore, DatabaseConfigStore, MetricsServerConfigStore, McpServerConfigStore, UserStore, TenantStore, UserTenantLinkStore, WorkflowTrackingStore, EvalStore, ChannelInstallationStore, BindingRegistry, MenuRegistry, A2AApiKeyStore, TaskStore, SharedResourceStore, ConnectionStore, TaskWorkItemStore, AgentWebAppStore, CapabilityBundleStore, ProjectRoomStore, ProjectMembershipStore, ProjectBotMembershipStore, ProjectRoomMessageStore, ProjectRoomReadStateStore, VectorStoreProvider, Thread, CreateThreadRequest, Assistant, CreateAssistantRequest, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, Skill, CreateSkillRequest, SkillStoreContext, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, User, CreateUserRequest, UpdateUserRequest, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, A2AApiKeyRecord, CreateA2AApiKeyInput, A2AApiKeyEntry, TaskMutationSnapshot, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, Collection, CreateCollectionRequest, UpdateCollectionRequest, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, ProjectRoom, ProjectMembership, ProjectBotMembership, ProjectRoomMessage, ProjectHumanRole, ProjectMembershipMutationResult, ProjectRoomReadState, STTModelLatticeProtocol, STTConfig, STTClient, TranscriptionResult, LoggerLatticeProtocol, LoggerConfig, LoggerClient, LoggerContext, SkillConfig, SkillClient, PluginSkillDefinition, McpTool, ResourceResolver, ResourceAddress, ShareVisibility, CreateShareRequest, ChannelAdapter, InterruptPolicy, ProjectTaskLifecycleAction, TaskBeliefState, PluginMeta, Plugin, PluginMetaOutput, CapabilityPreview, CreateCapabilityBundleInput, UpdateCapabilityBundleInput, InternalStateField, InternalInput, InternalNode, InternalAgentNode, InternalMapNode, InternalDSL, ConnectionEntry } from '@axiom-lattice/protocols';
+import { LLMConfig, SemanticMetricsServerConfig, MetricMeta, MetricQueryResult, DataSource, SemanticMetricsQueryRequest, SemanticMetricsQueryResponse, TableQueryRequest, TableQueryResponse, ExecuteSqlQueryRequest, ExecuteSqlQueryResponse, MetricsServerType, MetricsServerConfig, ToolConfig, ToolExecutor, AgentConfig, MiddlewareType, GraphBuildOptions, MessageChunk, MessageChunkType, QueueLatticeProtocol, QueueConfig, QueueClient, QueueResult, ScheduleLatticeProtocol, ScheduleConfig, ScheduleClient, ScheduleStorage, TaskHandler, ScheduleOnceOptions, ScheduleCronOptions, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TrustedRunContext, QueuedExecutionMode, ThreadStore, AssistantStore, SkillStore, CollectionStore, WorkspaceStore, ProjectStore, DatabaseConfigStore, MetricsServerConfigStore, McpServerConfigStore, UserStore, TenantStore, UserTenantLinkStore, WorkflowTrackingStore, EvalStore, ChannelInstallationStore, BindingRegistry, MenuRegistry, A2AApiKeyStore, OpenAuditStore, TaskStore, SharedResourceStore, ConnectionStore, TaskWorkItemStore, AgentWebAppStore, CapabilityBundleStore, ProjectRoomStore, ProjectMembershipStore, ProjectBotMembershipStore, ProjectRoomMessageStore, ProjectRoomReadStateStore, VectorStoreProvider, Thread, CreateThreadRequest, Assistant, CreateAssistantRequest, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, Skill, CreateSkillRequest, SkillStoreContext, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, User, CreateUserRequest, UpdateUserRequest, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, A2AApiKeyRecord, CreateA2AApiKeyInput, UpdateA2AApiKeyInput, A2AApiKeyEntry, OpenAuditAppendInput, OpenAuditQuery, OpenAuditRecord, TaskMutationSnapshot, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, Collection, CreateCollectionRequest, UpdateCollectionRequest, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, ProjectRoom, ProjectMembership, ProjectBotMembership, ProjectRoomMessage, ProjectHumanRole, ProjectMembershipMutationResult, ProjectRoomReadState, STTModelLatticeProtocol, STTConfig, STTClient, TranscriptionResult, LoggerLatticeProtocol, LoggerConfig, LoggerClient, LoggerContext, SkillConfig, SkillClient, PluginSkillDefinition, McpTool, ResourceResolver, ResourceAddress, ShareVisibility, OpenGrant, CreateShareRequest, ChannelAdapter, InterruptPolicy, ProjectTaskLifecycleAction, TaskBeliefState, PluginMeta, Plugin, PluginMetaOutput, SandboxPluginManifest, SandboxPluginToolDef, SandboxPluginDiagnostic, CapabilityPreview, CreateCapabilityBundleInput, UpdateCapabilityBundleInput, InternalStateField, InternalInput, InternalNode, InternalAgentNode, InternalMapNode, InternalDSL, ConnectionEntry } from '@axiom-lattice/protocols';
 export { _axiom_lattice_protocols as Protocols };
 export { AgentConfig, AgentType, GraphBuildOptions, MemoryType, ProjectRoomTrustedRunContext, QueuedExecutionMode, TrustedRunContext, parseQueuedExecutionMode, parseTrustedRunContext } from '@axiom-lattice/protocols';
 import * as langchain from 'langchain';
 import { ReactAgent, AgentMiddleware } from 'langchain';
-import z, { z as z$1 } from 'zod';
+import z, { z as z$1, ZodTypeAny } from 'zod';
 import { BaseStore, BaseCheckpointSaver } from '@langchain/langgraph-checkpoint';
 import * as _langchain_core_tools from '@langchain/core/tools';
 import { StructuredTool, DynamicStructuredTool } from '@langchain/core/tools';
@@ -2870,6 +2870,7 @@ type StoreTypeMap = {
     channelBinding: BindingRegistry;
     menu: MenuRegistry;
     a2aApiKey: A2AApiKeyStore;
+    openAudit: OpenAuditStore;
     task: TaskStore;
     sharedResource: SharedResourceStore;
     connection: ConnectionStore;
@@ -3774,6 +3775,7 @@ declare class InMemoryA2AApiKeyStore implements A2AApiKeyStore {
         offset?: number;
     }): Promise<A2AApiKeyRecord[]>;
     create(input: CreateA2AApiKeyInput): Promise<A2AApiKeyRecord>;
+    update(id: string, input: UpdateA2AApiKeyInput): Promise<A2AApiKeyRecord>;
     disable(id: string): Promise<A2AApiKeyRecord>;
     enable(id: string): Promise<A2AApiKeyRecord>;
     rotate(id: string): Promise<A2AApiKeyRecord>;
@@ -3781,6 +3783,18 @@ declare class InMemoryA2AApiKeyStore implements A2AApiKeyStore {
     loadIntoMap(): Promise<Map<string, A2AApiKeyEntry>>;
 }
 
+/**
+ * In-memory Open audit store (default when no persistent store is configured).
+ */
+
+declare class InMemoryOpenAuditStore implements OpenAuditStore {
+    private records;
+    append(record: OpenAuditAppendInput): Promise<void>;
+    query(params: OpenAuditQuery): Promise<OpenAuditRecord[]>;
+    /** Test/inspection helper. */
+    all(): OpenAuditRecord[];
+}
+
 /**
  * In-Memory Thread Message Queue Store
  *
@@ -6090,6 +6104,7 @@ interface SharePayload {
     createdBy: string;
     expiresAt: Date | null;
     maxAccess: number | null;
+    openGrants?: OpenGrant[];
     revoked: boolean;
 }
 /**
@@ -9481,6 +9496,540 @@ declare function serializePluginMeta(plugin: Plugin): PluginMetaOutput;
 
 declare const BUILTIN_PLUGINS: Plugin[];
 
+/**
+ * Convert a restricted JSON Schema subset into a zod schema.
+ *
+ * Supported: object (properties/required/description), array (items),
+ * string (enum), number, integer, boolean, description.
+ *
+ * @param schema - A restricted JSON Schema object. Nested `properties` and
+ *   `items` are converted recursively.
+ * @returns A zod schema equivalent to the supported JSON Schema subset.
+ * @throws Error when the input is not an object or an unsupported type is encountered.
+ *
+ * @example
+ * ```ts
+ * const zod = jsonSchemaToZod({
+ *   type: "object",
+ *   properties: { city: { type: "string" } },
+ *   required: ["city"],
+ * });
+ * zod.parse({ city: "SH" }); // { city: "SH" }
+ * ```
+ */
+declare function jsonSchemaToZod(schema: unknown): ZodTypeAny;
+
+/**
+ * Inputs required to validate one sandbox plugin manifest.
+ *
+ * @property raw - Parsed JSON manifest content, untyped until validated.
+ * @property dirName - Name of the plugin directory; must equal `raw.type`.
+ * @property reservedTypes - Global plugin types that tenant plugins may not shadow.
+ * @property knownTypes - Plugin types already defined for the tenant.
+ * @property handlerExists - Probe returning whether a relative handler path exists.
+ * @property rawSizeBytes - Optional manifest byte size for the size limit check.
+ */
+interface ValidateManifestArgs {
+    raw: unknown;
+    dirName: string;
+    reservedTypes: Set<string>;
+    knownTypes: Set<string>;
+    handlerExists: (relativePath: string) => boolean;
+    rawSizeBytes?: number;
+}
+/**
+ * Outcome of validating a sandbox plugin manifest.
+ *
+ * @property manifest - Normalized manifest, absent when a fatal error occurred.
+ * @property tools - Accepted tools after per-tool validation and normalization.
+ * @property diagnostics - Structured errors/warnings collected during validation.
+ */
+interface ManifestValidationResult {
+    manifest?: SandboxPluginManifest;
+    tools: SandboxPluginToolDef[];
+    diagnostics: SandboxPluginDiagnostic[];
+}
+/**
+ * Validate and normalize a sandbox plugin manifest.
+ *
+ * Fatal errors (bad schemaVersion/type/version/size) return no `manifest`.
+ * Per-tool problems are dropped from `tools` with a diagnostic so the rest of
+ * the plugin can still load.
+ *
+ * @param args - Raw manifest plus load context: the containing directory name,
+ *   the reserved global plugin types, the types already known for the tenant,
+ *   a handler-existence probe, and an optional raw byte size.
+ * @returns A result containing the normalized `manifest` (absent on fatal
+ *   errors), the accepted `tools`, and all structured `diagnostics`.
+ * @example
+ * ```ts
+ * const result = validateSandboxPluginManifest({
+ *   raw: JSON.parse(source),
+ *   dirName: "weather",
+ *   reservedTypes: new Set(["metrics"]),
+ *   knownTypes: new Set(),
+ *   handlerExists: (p) => files.includes(p),
+ * });
+ * if (result.manifest) install(result.manifest, result.tools);
+ * ```
+ */
+declare function validateSandboxPluginManifest(args: ValidateManifestArgs): ManifestValidationResult;
+
+/** Run-scoped identity used to resolve a sandbox. */
+interface SandboxRunConfig {
+    /** Tenant that owns the run. */
+    tenantId?: string;
+    /** Assistant executing the run. */
+    assistantId?: string;
+    /** Conversation thread for the run. */
+    threadId?: string;
+    /** Workspace that scopes the run. */
+    workspaceId?: string;
+    /** Project that scopes the run. */
+    projectId?: string;
+}
+/**
+ * Resolves a `SandboxInstance` for the given run identity.
+ *
+ * @param config - Run-scoped identity used to select the sandbox
+ * @returns The resolved sandbox instance
+ */
+type SandboxResolver = (config: SandboxRunConfig) => Promise<SandboxInstance>;
+/**
+ * Minimal `getSandboxFromConfig` shape used to build a resolver.
+ *
+ * @param config - Full sandbox run configuration
+ * @returns The resolved sandbox instance
+ */
+type GetSandboxFromConfig = (config: RunSandboxConfig) => Promise<SandboxInstance>;
+/**
+ * Build a {@link SandboxResolver} from a `getSandboxFromConfig`-style function.
+ * Forces project isolation, matching `SandboxSkillStore`.
+ *
+ * @param getSandboxFromConfig - Provider function that maps a full run config to a sandbox
+ * @returns A resolver that maps a {@link SandboxRunConfig} onto `getSandboxFromConfig`
+ */
+declare function createSandboxResolver(getSandboxFromConfig: GetSandboxFromConfig): SandboxResolver;
+
+/** Dependencies required to resolve a tenant sandbox for plugin execution. */
+interface SandboxPluginExecutorDeps {
+    /** Resolves the sandbox instance that hosts the tenant plugin. */
+    resolveSandbox: SandboxResolver;
+    /** Optional structured logger seam (pino-compatible). */
+    logger?: {
+        info: (fields: Record<string, unknown>, message?: string) => void;
+    };
+}
+/** Arguments for a single sandbox plugin handler invocation. */
+interface SandboxPluginInvokeArgs {
+    /** Authoritative plugin manifest identifying the plugin root directory. */
+    manifest: SandboxPluginManifest;
+    /** Handler file path, relative to the plugin directory. */
+    handler: string;
+    /** Tool input payload passed to the handler. */
+    input: unknown;
+    /** Single connection payload, written as the envelope's `connection` field. */
+    connection?: Record<string, unknown>;
+    /**
+     * Multiple connection payloads, written as the envelope's `connections`
+     * field; the first entry's config is also written as `connection`.
+     */
+    connections?: Array<{
+        key: string;
+        config: Record<string, unknown>;
+    }>;
+    /** String context forwarded to the handler as `PLUGIN_CONTEXT`. */
+    context: Record<string, string>;
+    /** Optional run identity override used to resolve the sandbox. */
+    runConfig?: SandboxRunConfig;
+    /** Execution timeout in milliseconds. */
+    timeoutMs?: number;
+    /** Maximum serialized result size before truncation, in bytes. */
+    maxResultBytes?: number;
+}
+/** Normalized outcome of a sandbox plugin handler invocation. */
+interface SandboxPluginResult {
+    /** Whether the handler reported success. */
+    ok: boolean;
+    /** Parsed or plain-text handler result when `ok` is true. */
+    result?: unknown;
+    /** Error message when `ok` is false. */
+    error?: string;
+    /** Process exit code returned by the sandbox shell. */
+    exitCode: number;
+    /** Wall-clock duration of the invocation in milliseconds. */
+    durationMs: number;
+    /** Raw stdout captured from the handler. */
+    stdout: string;
+    /** Raw stderr captured from the handler (currently always empty). */
+    stderr: string;
+}
+/**
+ * Executes tenant sandbox plugin handlers via the tenant sandbox shell.
+ *
+ * Contract: input/context travel as base64 JSON env vars when input is small;
+ * large input is written to `input.json` and connection credentials are always
+ * written to `connection.json` under a per-call temp dir as an
+ * `{ connection?, connections? }` envelope. The handler writes its result to
+ * stdout as `{ ok, result }` or plain text. Node never evaluates handler code.
+ */
+declare class SandboxPluginExecutor {
+    private readonly deps;
+    /**
+     * @param deps - Sandbox resolver and optional logger
+     */
+    constructor(deps: SandboxPluginExecutorDeps);
+    /**
+     * Invoke a plugin handler inside the tenant sandbox shell.
+     *
+     * Resolves the sandbox, injects small input as a base64 env var (or writes a
+     * temp `input.json` for large input), writes connection credentials to a temp
+     * `connection.json` as an `{ connection?, connections? }` envelope, runs the
+     * handler with `node`, and normalizes stdout into a
+     * {@link SandboxPluginResult}. Per-call temp dirs are cleaned up best-effort
+     * in all cases, including setup failures.
+     *
+     * @param args - Invocation arguments including manifest, handler, and input
+     * @returns The normalized handler result, exit code, timing, and raw stdout
+     * @throws When `args.handler` is not a safe relative path
+     */
+    invoke(args: SandboxPluginInvokeArgs): Promise<SandboxPluginResult>;
+}
+
+/** Arguments accepted by {@link compileSandboxPlugin}. */
+interface CompileSandboxPluginArgs {
+    /** Validated manifest describing the tenant plugin and its tools. */
+    manifest: SandboxPluginManifest;
+    /** Executor that proxies handler invocations into the tenant sandbox. */
+    executor: SandboxPluginExecutor;
+    /** Tenant that owns the plugin; used for the source tag and fallback identity. */
+    tenantId: string;
+}
+/**
+ * Compile a validated manifest into a normal `Plugin` whose tools proxy into
+ * the tenant sandbox through {@link SandboxPluginExecutor}.
+ *
+ * @param args - Manifest, executor, and owning tenant
+ * @returns A `Plugin` with sandbox-proxied tools, source tag, and connection hooks
+ *
+ * @example
+ * ```ts
+ * const plugin = compileSandboxPlugin({ manifest, executor, tenantId: "t1" });
+ * // plugin.meta.source === "sandbox:t1/weather"
+ * // plugin.middleware({}).tools -> one proxy per manifest.tools entry
+ * ```
+ *
+ * @remarks
+ * - Tool calls resolve connection credentials through
+ *   `resolveSandboxPluginConnections` at execution time via
+ *   `exeConfig.configurable.runConfig`.
+ * - The returned middleware is a LangChain middleware whose `tools` are one
+ *   proxy per manifest tool; handler code is never evaluated in Node.
+ */
+declare function compileSandboxPlugin(args: CompileSandboxPluginArgs): Plugin;
+
+/**
+ * Tenant plugin catalog snapshot produced by {@link TenantPluginCatalog.ensureLoaded}.
+ *
+ * @property tenantId - Tenant that owns the catalog snapshot.
+ * @property hash - Content hash of the validated manifests and their relative file paths; empty when the sandbox was unavailable.
+ * @property plugins - Compiled plugins ready to register for the tenant.
+ * @property diagnostics - Structured load/validation diagnostics for the snapshot.
+ */
+interface TenantPlugins {
+    tenantId: string;
+    hash: string;
+    plugins: Plugin[];
+    diagnostics: SandboxPluginDiagnostic[];
+}
+/**
+ * Dependencies for {@link TenantPluginCatalog}.
+ *
+ * @property resolveSandbox - Resolves the sandbox volume holding tenant plugin files.
+ * @property executor - Executor shared with compiled proxy tools.
+ * @property reservedTypes - Returns global plugin types tenant plugins may not shadow.
+ * @property hashTtlMs - Cache time-to-live in milliseconds before re-hashing; defaults to 30s.
+ * @property now - Injectable clock for tests; defaults to `Date.now`.
+ * @property logger - Optional structured logger for reload diagnostics.
+ */
+interface TenantPluginCatalogDeps {
+    resolveSandbox: SandboxResolver;
+    executor: SandboxPluginExecutor;
+    reservedTypes: () => Set<string>;
+    hashTtlMs?: number;
+    now?: () => number;
+    logger?: CatalogLogger;
+}
+/**
+ * Minimal structured logger seam (pino-compatible).
+ *
+ * @property info - Log at info level with optional structured fields and message.
+ */
+interface CatalogLogger {
+    info: (fields: Record<string, unknown>, message?: string) => void;
+}
+/**
+ * Lazily load, validate, and compile tenant plugins from the sandbox volume.
+ *
+ * The catalog reads a single recursive listing of `<PLUGINS_ROOT>`, finds each
+ * top-level plugin directory, validates its `plugin.json`, and compiles the
+ * accepted manifests into normal `Plugin` objects whose tools proxy back into
+ * the tenant sandbox. Results are cached per tenant and keyed by a content hash
+ * of the manifests plus their relative file paths; a failed sandbox resolution
+ * or listing yields an empty result with a diagnostic rather than throwing, so
+ * callers can degrade gracefully.
+ *
+ * @example
+ * ```ts
+ * const catalog = new TenantPluginCatalog({ resolveSandbox, executor, reservedTypes });
+ * const { plugins, diagnostics } = await catalog.ensureLoaded(tenantId);
+ * ```
+ *
+ * @remarks
+ * - `ensureLoaded` is single-flight per tenant: concurrent calls share one load.
+ * - Remote providers do not populate file size/mtime, so the cache key is a hash
+ *   of the raw manifest content and each plugin's sorted relative file paths.
+ *   Editing a handler's *content* without changing its path or bumping the
+ *   manifest `version` will not change the hash. Any code change must bump
+ *   `version` or call {@link TenantPluginCatalog.reload}.
+ */
+declare class TenantPluginCatalog {
+    private readonly deps;
+    private cache;
+    private inflight;
+    /**
+     * @param deps - Sandbox resolver, executor, reserved types, and cache/logger seams
+     */
+    constructor(deps: TenantPluginCatalogDeps);
+    /**
+     * Return the last loaded snapshot for a tenant without touching the sandbox.
+     *
+     * @param tenantId - Tenant whose cached snapshot to return
+     * @returns The cached snapshot, or `undefined` when the tenant has not loaded
+     */
+    getCached(tenantId: string): TenantPlugins | undefined;
+    /**
+     * Drop the cached snapshot for a tenant.
+     *
+     * @param tenantId - Tenant whose cache entry to remove
+     * @returns Nothing
+     */
+    invalidate(tenantId: string): void;
+    /**
+     * Invalidate and immediately reload a tenant's plugin catalog.
+     *
+     * Waits for any in-flight load for the tenant to settle before invalidating,
+     * so a stale load cannot overwrite the fresh result produced here.
+     *
+     * @param tenantId - Tenant to reload
+     * @returns The freshly loaded catalog snapshot
+     */
+    reload(tenantId: string): Promise<TenantPlugins>;
+    /**
+     * Load the tenant catalog, reusing the TTL cache or an in-flight load.
+     *
+     * @param tenantId - Tenant to load plugins for
+     * @returns The cached or freshly loaded catalog snapshot
+     *
+     * @remarks
+     * Once the TTL expires the catalog re-lists the volume and recomputes the
+     * hash. When the hash is unchanged the previously compiled plugins are reused
+     * without recompiling. Because handler *content* is not part of the hash, any
+     * code change must bump the manifest `version` or call
+     * {@link TenantPluginCatalog.reload}.
+     */
+    ensureLoaded(tenantId: string): Promise<TenantPlugins>;
+    /**
+     * The executor shared with compiled proxy tools (test/invoke seam).
+     *
+     * @returns The executor supplied to the catalog dependencies
+     */
+    getExecutor(): SandboxPluginExecutor;
+    /**
+     * Read a file inside a tenant plugin directory (e.g. `plugin.json`).
+     *
+     * @param tenantId - Tenant that owns the plugin
+     * @param type - Plugin type (directory name); must match the kebab-case type pattern
+     * @param relPath - Safe path relative to the plugin directory
+     * @returns The file contents as a string
+     * @throws Error when `type` is not a valid plugin type or `relPath` is unsafe
+     */
+    readPluginFile(tenantId: string, type: string, relPath: string): Promise<string>;
+    /**
+     * Write a plugin manifest and handler files into the tenant volume.
+     *
+     * All types and handler paths are validated before any sandbox write, so an
+     * unsafe path rejects without mutating the volume. Only the parent directory
+     * of each handler is created.
+     *
+     * @param tenantId - Tenant that owns the plugin
+     * @param type - Plugin type (directory name); must match the kebab-case type pattern
+     * @param manifest - Manifest object serialized as pretty-printed JSON
+     * @param handlers - Map of safe handler paths (relative to the plugin dir) to file contents
+     * @returns Nothing once all files are written
+     * @throws Error when `type` or any handler path is unsafe
+     */
+    writePlugin(tenantId: string, type: string, manifest: unknown, handlers: Record<string, string>): Promise<void>;
+    /**
+     * Delete an entire tenant plugin directory.
+     *
+     * @param tenantId - Tenant that owns the plugin
+     * @param type - Plugin type (directory name) to delete; must match the kebab-case type pattern
+     * @returns Nothing once the directory is removed
+     * @throws Error when `type` is not a valid plugin type
+     */
+    deletePlugin(tenantId: string, type: string): Promise<void>;
+    /**
+     * Current timestamp from the injected clock.
+     *
+     * @returns Milliseconds since epoch
+     */
+    private now;
+    /**
+     * Build an empty catalog carrying a single diagnostic.
+     *
+     * @param tenantId - Tenant that owns the snapshot
+     * @param code - Diagnostic code (e.g. `SANDBOX_UNAVAILABLE`)
+     * @param err - Failure that produced the empty snapshot
+     * @returns An empty catalog snapshot with the given diagnostic
+     */
+    private emptyCatalog;
+    /**
+     * Reject plugin types that could escape or alias the plugin root.
+     *
+     * @param type - Plugin type to validate
+     * @throws Error when `type` does not match the kebab-case type pattern
+     */
+    private assertSafeType;
+    /**
+     * Reject relative paths that could escape the plugin directory.
+     *
+     * @param value - Relative path to validate
+     * @param kind - Human-readable label used in the error message
+     * @throws Error when `value` is unsafe
+     */
+    private assertSafeRelativePath;
+    /**
+     * Perform the sandbox read, validation, compilation, and caching for a tenant.
+     *
+     * Sandbox resolution failure only is reported as `SANDBOX_UNAVAILABLE`; a
+     * failed recursive listing yields `PLUGINS_LIST_FAILED`, a missing manifest
+     * yields `MANIFEST_READ`, and a per-plugin compile throw yields
+     * `PLUGIN_COMPILE_FAILED` without discarding the rest of the catalog.
+     *
+     * @param tenantId - Tenant to load plugins for
+     * @returns The loaded snapshot
+     */
+    private load;
+}
+
+/**
+ * Union global and tenant plugins; tenant entries win on `meta.type` collision.
+ *
+ * @param global - Plugins registered process-wide
+ * @param tenant - Plugins compiled from the tenant sandbox volume
+ * @returns A deduplicated plugin list keyed by `meta.type`
+ */
+declare function mergePluginSources(global: Plugin[], tenant: Plugin[]): Plugin[];
+/**
+ * Skills collected from the enabled plugin set.
+ *
+ * @property pluginSkills - Skill definitions keyed by skill name.
+ * @property pluginSkillOwners - Owning plugin type keyed by skill name.
+ */
+interface MergedPluginSkills {
+    pluginSkills: Record<string, PluginSkillDefinition>;
+    pluginSkillOwners: Record<string, string>;
+}
+/**
+ * Collect skills from enabled plugins (global ∪ tenant), tenant wins on name collision.
+ *
+ * @param enabledTypes - Plugin types enabled for the agent
+ * @param global - Plugins registered process-wide
+ * @param tenant - Plugins compiled from the tenant sandbox volume
+ * @returns The merged skill definitions and their owning plugin types
+ */
+declare function mergePluginSkills(enabledTypes: Set<string>, global: Plugin[], tenant: Plugin[]): MergedPluginSkills;
+/**
+ * Resolve connections selected by a sandbox plugin config at execution time.
+ * Uses the tenant-scoped ConnectionRegistry; never reads credentials from
+ * process state.
+ *
+ * @param type - Plugin type owning the connections
+ * @param config - Plugin configuration from the agent middleware config
+ * @param runConfig - Run-scoped identity used to resolve connections
+ * @returns The first resolved connection and the full resolved connection list
+ */
+declare function resolveSandboxPluginConnections(type: string, config: Record<string, unknown>, runConfig: SandboxRunConfig): Promise<{
+    connection?: Record<string, unknown>;
+    connections?: Array<{
+        key: string;
+        config: Record<string, unknown>;
+    }>;
+}>;
+
+/**
+ * Process-wide tenant plugin catalog.
+ *
+ * Lazily constructed. Falls back to an empty catalog when no sandbox manager is
+ * configured (e.g. unit tests), so agent builds degrade instead of throwing.
+ *
+ * @returns The shared {@link TenantPluginCatalog} instance
+ * @remarks
+ * The empty fallback is deliberately not cached: only a catalog built against a
+ * real manager is stored. This lets a sandbox manager configured later still be
+ * picked up on a subsequent call.
+ */
+declare function getSandboxPluginCatalog(): TenantPluginCatalog;
+/**
+ * Test seam: inject a catalog instance.
+ *
+ * @param instance - Catalog to install process-wide, or `null` to reset
+ * @returns Nothing
+ */
+declare function setSandboxPluginCatalog(instance: TenantPluginCatalog | null): void;
+
+/**
+ * Plugin skill definition resolved together with its owning plugin type.
+ *
+ * @property pluginType - Plugin that owns the skill (matches `PluginMeta.type`).
+ * @property definition - Versioned skill content and resources.
+ */
+interface ResolvedPluginSkill {
+    pluginType: string;
+    definition: PluginSkillDefinition;
+}
+/**
+ * Resolve an enabled plugin skill through the tenant sandbox catalog.
+ *
+ * Looks up the tenant's compiled plugins, finds the plugin whose
+ * `meta.type === owner`, and returns its `skills[skillName]` definition.
+ * Never throws: a missing catalog, sandbox, or tenant yields `undefined` so
+ * callers can fall back to their existing "not found" behavior.
+ *
+ * @param tenantId - Tenant that owns the sandbox plugin volume
+ * @param owner - Plugin type expected to own the skill
+ * @param skillName - Skill key within the plugin
+ * @returns The tenant plugin skill definition, or `undefined` when unresolved
+ */
+declare function resolveTenantPluginSkill(tenantId: string, owner: string, skillName: string): Promise<PluginSkillDefinition | undefined>;
+/**
+ * Resolve an enabled plugin skill, global registry first and tenant catalog second.
+ *
+ * The global `PluginRegistry` entry wins when its recorded owner matches and its
+ * definition is the exact enabled bundle, preserving the existing global
+ * behavior. Only when that global lookup misses does this consult the tenant
+ * sandbox catalog, letting sandbox-authored tenant plugins be loaded through the
+ * same skill tooling.
+ *
+ * @param owner - Owning plugin type from the enabled plugin skill map
+ * @param skillName - Skill key to resolve
+ * @param enabledDefinition - Enabled bundle that must match for the global path
+ * @param tenantId - Run-scoped tenant used to load the tenant plugin catalog
+ * @returns The resolved owner and definition, or `undefined` when unavailable
+ */
+declare function resolveEnabledPluginSkill(owner: string | undefined, skillName: string, enabledDefinition: PluginSkillDefinition | undefined, tenantId: string | undefined): Promise<ResolvedPluginSkill | undefined>;
+
 /** Stable failure codes emitted when capability bundles cannot be composed. */
 type CapabilityBundleMergeErrorCode = "CAPABILITY_BUNDLE_DUPLICATE_ID" | "CAPABILITY_BUNDLE_EMPTY_ALLOWED_TOOLS" | "CAPABILITY_BUNDLE_INVALID_CONFIG" | "CAPABILITY_BUNDLE_NULL_VALUE" | "CAPABILITY_BUNDLE_UNSAFE_KEY";
 /** Describes invalid capability bundle input rejected by the pure merger. */
@@ -10540,4 +11089,4 @@ declare function parseDirectRoomType(projectId: string): "human" | "bot" | null;
  */
 declare function isDirectRoom(projectId: string): boolean;
 
-export { AGENT_TASK_EVENT, type AddMessageParams, type AddMessageResult, Agent, type AgentClient, type AgentExecutor, AgentInstanceManager, type AgentLattice, AgentLatticeManager, type AgentLifecycleEventName, AgentManager, type AgentStreamExecutor, type AgentTaskCompletionInput, type AgentThreadInterface, type ApproveInterruptedTaskInput, BUILTIN_PLUGINS, BUILTIN_SKILLS, type BackendFactory, type BackendProtocol, type BufferStats, CAPABILITY_TOOL_NAME_CONFLICT, type CacheEntry, type CalibrationProbe, CapabilityBundleMergeError, type CapabilityBundleMergeErrorCode, CapabilityBundleMerger, CapabilityBundleValidationError, type CapabilityBundleValidationErrorCode, type CapabilityGuardDenialCode, type CapabilityResourceSelector, type CapabilityToolMetadata, CapabilityToolNameConflictError, CapabilityToolRegistry, type CaseRunResult, type Chunk, ChunkBuffer, ChunkBufferLatticeManager, CollectionLatticeManager, type ColumnInfo, CompositeBackend, type ConflictItem, type ConnectAllChannelsOptions, ConnectionRegistry, ConsoleLoggerClient, type CreateSandboxProviderConfig, type CronFields, CustomMetricsClient, type CustomMiddlewareFactory, CustomMiddlewareRegistry, DEFAULT_CALIBRATION_PROBES, type DatabaseConfig, type DatabaseType, DaytonaInstance, DaytonaProvider, type DaytonaProviderConfig, DefaultScheduleClient, DelegatedScopeNotQueueableError, type DeleteResult, DependencyResolver, DuplicateProjectRoomMessageIdempotencyKeyError, E2BInstance, E2BProvider, type E2BProviderConfig, EMPTY_CONTENT_WARNING, type EditResult, type EmbeddingsInfo, type EmbeddingsLatticeInterface, EmbeddingsLatticeManager, type EnsureMicrosandboxInput, type EvalRunService, type ExportBundle, type ExportContext, type ExportJob, type ExportableEntity, type ExportableEntityDefinition, ExportableEntityRegistry, type ExportableFile, type ExportableTypeInfo, type ExternalDependencyInterruption, type FileData, type FileInfo, FileSystemSkillStore, type FileSystemSkillStoreOptions, FilesystemBackend, type FsEntry, type GrepMatch, type IMessageQueueStore, type IMetricsServerClient, type ISqlDatabase, IdRemapper, type ImportApplyResolution, type ImportApplyResult, type ImportEntityResult, type ImportEntityStatus, type ImportPreviewResult, InMemoryA2AApiKeyStore, InMemoryAgentWebAppStore, InMemoryAssistantStore, InMemoryBindingStore, InMemoryCapabilityBundleStore, InMemoryChannelInstallationStore, InMemoryChunkBuffer, InMemoryCollectionStore, InMemoryDatabaseConfigStore, InMemoryMailboxStore, InMemoryMenuStore, InMemoryProjectBotMembershipStore, InMemoryProjectMembershipStore, InMemoryProjectRoomCoordinator, InMemoryProjectRoomMessageStore, InMemoryProjectRoomReadStateStore, InMemoryProjectRoomStore, InMemoryTaskListStore, InMemoryTaskStore, InMemoryTenantStore, InMemoryThreadMessageQueueStore, InMemoryThreadStore, InMemoryUserStore, InMemoryUserTenantLinkStore, type InsertionItem, type JudgeVerdict, LINE_NUMBER_WIDTH, type LangGraphStateChecker, type LatticeAgentStepConfig, LatticeEval, type LatticeEvalBatchReport, type LatticeEvalCase, type LatticeEvalCaseType, type LatticeEvalCaseWithTemplate, type LatticeEvalConfig, type LatticeEvalLogEvent, type LatticeEvalLogLevel, LatticeEvalProject, type LatticeEvalProjectType, type LatticeEvalResult, type LatticeEvalRubric, LatticeEvalSuite, type LatticeEvalSuiteType, type LatticeEvalTemplate, type LifecycleResult, type LifecycleWarning, LocalSandboxInstance, LocalSandboxProvider, type LocalSandboxProviderConfig, type LoggerLattice, LoggerLatticeManager, MAX_LINE_LENGTH, MAX_PACK_ENTRIES, MAX_PACK_FILE_BYTES, MAX_PACK_TOTAL_BYTES, type MailboxMessage, type MailboxStore, type McpLatticeInterface, McpLatticeManager, type McpServerInfo, MemoryBackend, MemoryLatticeManager, MemoryQueueClient, MemoryScheduleStorage, type MessageCompletedEvent, type MessageContent, type MessageContentPart, type MessageContentValue, type MessageFailedEvent, type MessageInterruptedEvent, type MessageLike, type MessageStartedEvent, MessageType, MetricsServerManager, MicrosandboxRemoteInstance, MicrosandboxRemoteProvider, type MicrosandboxRemoteProviderClient, type MicrosandboxRemoteProviderConfig, MicrosandboxServiceClient, type MicrosandboxServiceClientConfig, type MicrosandboxShellExecInput, type ModelConfig, type ModelLatticeInterface, ModelLatticeManager, MysqlDatabase, type OutputType, PACK_DIRECTORY_TIMEOUT_SECONDS, type PackSourceInfo, type PendingMessage, PersonalAssistantConfig, PinoLoggerClient, PluginRegistry, type PostProcessTaskMutationResponseInput, PostgresDatabase, type PreviewError, ProjectBotMembershipIdConflictError, ProjectMutationMutex, type ProjectMutationScope, ProjectRoomMessageIdConflictError, type ProjectTaskAdmissionListener, type ProjectTaskAdmissionNotification, ProjectTaskAdmissionNotifier, type ProjectTaskAdmissionNotifierOptions, type ProjectTaskAssignmentScope, ProjectTaskOwnerPolicy, type ProjectTaskOwnerPolicyCode, ProjectTaskOwnerPolicyError, type ProjectTaskReassignmentAuthorization, type ProjectTaskReassignmentAuthorizationInput, type ProjectTaskReassignmentAuthorizer, type ProjectTaskReassignmentThreadValidationInput, type ProjectTaskReassignmentThreadValidator, type ProjectTaskRosterScope, PrometheusClient, type QueryResult, type QueueLattice, QueueLatticeManager, type QueueMessage, QueueMode, type QueuePendingEvent, type QueueScope, type ReassignProjectTaskInput, type ReconcileTaskDescriptionInput, type RejectInterruptedTaskInput, RemoteSandboxInstance, RemoteSandboxProvider, type RemoteSandboxProviderConfig, type ReplyReadyEvent, type Resolution, type ResolutionAction, type ResolveAgentFn, type ResolvedConfig, type ResumeTaskResult, type RoomAgentMessageCallbackFailure, type RoomAgentMessageCommitted, type RoomAgentMessageInput, RoomAgentMessageService, type RoomAgentReplyInput, type RunSandboxConfig, type RuntimeModelConfig, type RuntimeSkillSelection, SAFE_PATH_COMPONENT, type STTModelInfo, STTModelLattice, type STTModelLatticeInterface, STTModelLatticeManager, type SandboxFileInfo, type SandboxFileService, SandboxFilesystem, type SandboxGrepMatch, type SandboxInstance, type SandboxIsolationLevel, SandboxLatticeManager, type SandboxManagerProtocol, type SandboxProvider, type SandboxProviderFactory, type SandboxProviderType, type SandboxShellService, SandboxSkillStore, type SandboxSkillStoreOptions, type SandboxVolumeDefinition, type ScheduleLattice, ScheduleLatticeManager, type SchedulerMiddlewareOptions, SemanticMetricsClient, type SharePayload, SimpleMemoryVectorStore, type SkillLattice, SkillLatticeManager, type SkillMeta, type SkillResource, SqlDatabaseManager, type StartLifecycleResult, type StartTaskExecutionInput, type StateAndStore, StateBackend, StoreBackend, type StoreLattice, StoreLatticeManager, type StoreType, type StoreTypeMap, type SubmitTaskReviewInput, TASK_RESPONSE_FINAL_WARNING_LIMIT, TASK_RESPONSE_PRIOR_WARNING_LIMIT, TASK_RESPONSE_SCALAR_MAX_BYTES, TOOL_RESULT_TOKEN_LIMIT, TRUNCATION_GUIDANCE, type TableInfo, type TableSchema, type TaskAgentInvocation, type TaskEvent, type TaskExecutionFailure, type TaskExecutionResult, type TaskExecutionServiceDeps, type TaskExecutionSuccess, type TaskLifecycleListener, type TaskLifecycleNotification, TaskLifecycleNotifier, TaskLifecycleService, type TaskLifecycleServiceDeps, type TaskListStore, type TaskResponseParseResult, type TaskSpec, TaskStatus, type TaskUpdatable, TeamAgentGraphBuilder, type TeamConfig, type TeamMiddlewareOptions, type TeamTask, type TeammateSpec, type TeammateToolsOptions, type ThreadBuffer, type ThreadBufferConfig, type ThreadBusyEvent, type ThreadIdleEvent, type ThreadInfo, type ThreadQueueConfig, type ThreadState, ThreadStatus, type ThreadStatusChangedEvent, TokenCache, type ToolDefinition, type ToolLattice, ToolLatticeManager, type TrustedAgentMessageDispatcher, type TrustedMessageOptions, type UnknownToolHandlerConfig, type VectorStoreLatticeInterface, VectorStoreLatticeManager, type VectorStoreProviderLattice, VectorStoreProviderManager, VolumeFilesystem, type VolumeFsClient, type WorkflowValidationError, type WriteResult, abortWorkflowRun, agentInstanceManager, agentLatticeManager, appendReconciliationWarning, buildGrepResultsDict, buildInput, buildNamedVolumeName, buildRemotePackDirectoryCommand, buildSandboxMetadataEnv, buildSkillFile, buildStateAnnotation, buildTableName, buildTaskMutationFallback, buildTaskNormalizationFallback, checkEmptyContent, clearEncryptionKeyCache, clearEvalRunService, collectionLatticeManager, compileInternal, compileWorkflow, computeSandboxName, configureStores, connectAllChannels, createAgentNode, createAgentTeam, createCapabilityGuardMiddleware, createExecuteSqlQueryTool, createFileData, createInfoSqlTool, createListMetricsDataSourcesTool, createListMetricsServersTool, createListTablesSqlTool, createMapNode, createModelSelectorMiddleware, createNodeHandler, createProjectRoomMiddleware, createProjectTaskOwnerPolicy, createProjectTaskReassignmentAuthorizer, createQueryCheckerSqlTool, createQueryMetricDefinitionTool, createQueryMetricsListTool, createQuerySemanticMetricDataTool, createQuerySqlTool, createQueryTableDefinitionTool, createQueryTablesListTool, createResourceAddress, createSandboxProvider, createSchedulerMiddleware, createSemanticMetricsMiddleware, createSharePayload, createTaskExecutionService, createTaskLifecycleService, createTaskMiddleware, createTeamMiddleware, createTeammateTools, createTrustedAgentMessageDispatcher, createUnknownToolHandlerMiddleware, createWidgetMiddleware, decrypt, describeCronExpression, documentLearningPlugin, documentParserPlugin, embeddingsLatticeManager, encrypt, ensureBuiltinAgentsForTenant, ensurePluginSkillInSandbox, evaluateLatticeCaseWithLogs, eventBus, eventBus as eventBusDefault, extractFetcherError, extractOutput, fileDataToString, formatContentWithLineNumbers, formatGrepMatches, formatGrepResults, formatReadResponse, generateDirectBotProjectId, generateDirectHumanProjectId, generateToken, getAgentClient, getAgentConfig, getAllAgentConfigs, getAllBuiltInSkillMetas, getAllToolDefinitions, getBindingRegistry, getBuiltInSkillContent, getBuiltInSkillMeta, getBuiltInSkillNames, getCheckpointSaver, getChunkBuffer, getCollectionEntryCount, getEmbeddingsClient, getEmbeddingsLattice, getEncryptionKey, getEvalRunService, getLoggerLattice, getMenuRegistry, getModelLattice, getNextCronTime, getOrCreateCollectionVectorStore, getPluginSkillManifestVersion, getQueueLattice, getRuntimeCapabilityConfig, getRuntimeSkillSelection, getSTTClient, getSTTClientWithTenant, getSTTModelLattice, getSandBoxManager, getScheduleLattice, getStoreLattice, getToolClient, getToolDefinition, getToolLattice, getVectorStoreClient, getVectorStoreLattice, getVectorStoreProvider, getWorkflowSignal, globSearchFiles, grepMatchesFromFiles, grepSearchFiles, hasChunkBuffer, hasDelegatedWorkerToken, hasRuntimeCapabilityPolicy, invokeWithRetry, isBuiltInSkill, isDirectRoom, isPluginSkillAuthorizedInSandbox, isPluginSkillManagedInSandbox, isProjectLifecycleTask, isUsingDefaultKey, isValidCronExpression, isValidSandboxName, isValidSkillName, listCollectionEntries, listSandboxProviderTypes, loggerLatticeManager, mcpManager, mergeCapabilityBundles, metricsServerManager, modelLatticeManager, normalizeSandboxName, ownTaskResponseField, parallelLimit, parseCronExpression, parseDirectRoomType, parseExternalDependency, parseJudgeVerdict, parsePackSize, parseSkillFrontmatter, parseTaskResponse, parseYaml, performStringReplacement, postProcessTaskMutationResponse, projectMutationMutex, projectRoomPlugin, projectTaskAdmissionNotifier, queueLatticeManager, registerAgentLattice, registerAgentLatticeWithTenant, registerAgentLattices, registerCheckpointSaver, registerChunkBuffer, registerEmbeddingsLattice, registerExistingTool, registerLoggerLattice, registerModelLattice, registerQueueLattice, registerSTTModelLattice, registerSandboxProviderType, registerScheduleLattice, registerStoreLattice, registerTeammateAgent, registerToolLattice, registerVectorStoreLattice, registerVectorStoreProvider, registerWorkflowRun, removeCollectionVectorStore, renderTemplate, resolveJudgeModelKey, resolvePath, runRemotePackDirectory, safeTaskResponseId, sandboxLatticeManager, sanitizeToolCallId, scheduleLatticeManager, semanticMetricsPlugin, serializePluginMeta, serializeTaskMutationSuccess, serializeTaskNormalizationFallback, serializeTaskReadResponse, setBindingRegistry, setEvalRunService, setMenuRegistry, skillLatticeManager, sqlDatabaseManager, storeLatticeManager, sttModelLatticeManager, taskLifecycleNotifier, toJsonSchema, toSafeStateExpr, toolLatticeManager, truncateIfTooLong, unregisterTeammateAgent, unregisterWorkflowRun, updateFileData, validateAgentInput, validateCapabilityBundleInput, validateDSL, validateEncryptionKey, validatePackSourcePath, validatePath, validateRelativePath, validateSkillName, validateToolInput, vectorStoreLatticeManager, vectorStoreProviderManager };
+export { AGENT_TASK_EVENT, type AddMessageParams, type AddMessageResult, Agent, type AgentClient, type AgentExecutor, AgentInstanceManager, type AgentLattice, AgentLatticeManager, type AgentLifecycleEventName, AgentManager, type AgentStreamExecutor, type AgentTaskCompletionInput, type AgentThreadInterface, type ApproveInterruptedTaskInput, BUILTIN_PLUGINS, BUILTIN_SKILLS, type BackendFactory, type BackendProtocol, type BufferStats, CAPABILITY_TOOL_NAME_CONFLICT, type CacheEntry, type CalibrationProbe, CapabilityBundleMergeError, type CapabilityBundleMergeErrorCode, CapabilityBundleMerger, CapabilityBundleValidationError, type CapabilityBundleValidationErrorCode, type CapabilityGuardDenialCode, type CapabilityResourceSelector, type CapabilityToolMetadata, CapabilityToolNameConflictError, CapabilityToolRegistry, type CaseRunResult, type Chunk, ChunkBuffer, ChunkBufferLatticeManager, CollectionLatticeManager, type ColumnInfo, type CompileSandboxPluginArgs, CompositeBackend, type ConflictItem, type ConnectAllChannelsOptions, ConnectionRegistry, ConsoleLoggerClient, type CreateSandboxProviderConfig, type CronFields, CustomMetricsClient, type CustomMiddlewareFactory, CustomMiddlewareRegistry, DEFAULT_CALIBRATION_PROBES, type DatabaseConfig, type DatabaseType, DaytonaInstance, DaytonaProvider, type DaytonaProviderConfig, DefaultScheduleClient, DelegatedScopeNotQueueableError, type DeleteResult, DependencyResolver, DuplicateProjectRoomMessageIdempotencyKeyError, E2BInstance, E2BProvider, type E2BProviderConfig, EMPTY_CONTENT_WARNING, type EditResult, type EmbeddingsInfo, type EmbeddingsLatticeInterface, EmbeddingsLatticeManager, type EnsureMicrosandboxInput, type EvalRunService, type ExportBundle, type ExportContext, type ExportJob, type ExportableEntity, type ExportableEntityDefinition, ExportableEntityRegistry, type ExportableFile, type ExportableTypeInfo, type ExternalDependencyInterruption, type FileData, type FileInfo, FileSystemSkillStore, type FileSystemSkillStoreOptions, FilesystemBackend, type FsEntry, type GrepMatch, type IMessageQueueStore, type IMetricsServerClient, type ISqlDatabase, IdRemapper, type ImportApplyResolution, type ImportApplyResult, type ImportEntityResult, type ImportEntityStatus, type ImportPreviewResult, InMemoryA2AApiKeyStore, InMemoryAgentWebAppStore, InMemoryAssistantStore, InMemoryBindingStore, InMemoryCapabilityBundleStore, InMemoryChannelInstallationStore, InMemoryChunkBuffer, InMemoryCollectionStore, InMemoryDatabaseConfigStore, InMemoryMailboxStore, InMemoryMenuStore, InMemoryOpenAuditStore, InMemoryProjectBotMembershipStore, InMemoryProjectMembershipStore, InMemoryProjectRoomCoordinator, InMemoryProjectRoomMessageStore, InMemoryProjectRoomReadStateStore, InMemoryProjectRoomStore, InMemoryTaskListStore, InMemoryTaskStore, InMemoryTenantStore, InMemoryThreadMessageQueueStore, InMemoryThreadStore, InMemoryUserStore, InMemoryUserTenantLinkStore, type InsertionItem, type JudgeVerdict, LINE_NUMBER_WIDTH, type LangGraphStateChecker, type LatticeAgentStepConfig, LatticeEval, type LatticeEvalBatchReport, type LatticeEvalCase, type LatticeEvalCaseType, type LatticeEvalCaseWithTemplate, type LatticeEvalConfig, type LatticeEvalLogEvent, type LatticeEvalLogLevel, LatticeEvalProject, type LatticeEvalProjectType, type LatticeEvalResult, type LatticeEvalRubric, LatticeEvalSuite, type LatticeEvalSuiteType, type LatticeEvalTemplate, type LifecycleResult, type LifecycleWarning, LocalSandboxInstance, LocalSandboxProvider, type LocalSandboxProviderConfig, type LoggerLattice, LoggerLatticeManager, MAX_LINE_LENGTH, MAX_PACK_ENTRIES, MAX_PACK_FILE_BYTES, MAX_PACK_TOTAL_BYTES, type MailboxMessage, type MailboxStore, type ManifestValidationResult, type McpLatticeInterface, McpLatticeManager, type McpServerInfo, MemoryBackend, MemoryLatticeManager, MemoryQueueClient, MemoryScheduleStorage, type MergedPluginSkills, type MessageCompletedEvent, type MessageContent, type MessageContentPart, type MessageContentValue, type MessageFailedEvent, type MessageInterruptedEvent, type MessageLike, type MessageStartedEvent, MessageType, MetricsServerManager, MicrosandboxRemoteInstance, MicrosandboxRemoteProvider, type MicrosandboxRemoteProviderClient, type MicrosandboxRemoteProviderConfig, MicrosandboxServiceClient, type MicrosandboxServiceClientConfig, type MicrosandboxShellExecInput, type ModelConfig, type ModelLatticeInterface, ModelLatticeManager, MysqlDatabase, type OutputType, PACK_DIRECTORY_TIMEOUT_SECONDS, type PackSourceInfo, type PendingMessage, PersonalAssistantConfig, PinoLoggerClient, PluginRegistry, type PostProcessTaskMutationResponseInput, PostgresDatabase, type PreviewError, ProjectBotMembershipIdConflictError, ProjectMutationMutex, type ProjectMutationScope, ProjectRoomMessageIdConflictError, type ProjectTaskAdmissionListener, type ProjectTaskAdmissionNotification, ProjectTaskAdmissionNotifier, type ProjectTaskAdmissionNotifierOptions, type ProjectTaskAssignmentScope, ProjectTaskOwnerPolicy, type ProjectTaskOwnerPolicyCode, ProjectTaskOwnerPolicyError, type ProjectTaskReassignmentAuthorization, type ProjectTaskReassignmentAuthorizationInput, type ProjectTaskReassignmentAuthorizer, type ProjectTaskReassignmentThreadValidationInput, type ProjectTaskReassignmentThreadValidator, type ProjectTaskRosterScope, PrometheusClient, type QueryResult, type QueueLattice, QueueLatticeManager, type QueueMessage, QueueMode, type QueuePendingEvent, type QueueScope, type ReassignProjectTaskInput, type ReconcileTaskDescriptionInput, type RejectInterruptedTaskInput, RemoteSandboxInstance, RemoteSandboxProvider, type RemoteSandboxProviderConfig, type ReplyReadyEvent, type Resolution, type ResolutionAction, type ResolveAgentFn, type ResolvedConfig, type ResolvedPluginSkill, type ResumeTaskResult, type RoomAgentMessageCallbackFailure, type RoomAgentMessageCommitted, type RoomAgentMessageInput, RoomAgentMessageService, type RoomAgentReplyInput, type RunSandboxConfig, type RuntimeModelConfig, type RuntimeSkillSelection, SAFE_PATH_COMPONENT, type STTModelInfo, STTModelLattice, type STTModelLatticeInterface, STTModelLatticeManager, type SandboxFileInfo, type SandboxFileService, SandboxFilesystem, type SandboxGrepMatch, type SandboxInstance, type SandboxIsolationLevel, SandboxLatticeManager, type SandboxManagerProtocol, SandboxPluginExecutor, type SandboxPluginExecutorDeps, type SandboxPluginInvokeArgs, type SandboxPluginResult, type SandboxProvider, type SandboxProviderFactory, type SandboxProviderType, type SandboxResolver, type SandboxRunConfig, type SandboxShellService, SandboxSkillStore, type SandboxSkillStoreOptions, type SandboxVolumeDefinition, type ScheduleLattice, ScheduleLatticeManager, type SchedulerMiddlewareOptions, SemanticMetricsClient, type SharePayload, SimpleMemoryVectorStore, type SkillLattice, SkillLatticeManager, type SkillMeta, type SkillResource, SqlDatabaseManager, type StartLifecycleResult, type StartTaskExecutionInput, type StateAndStore, StateBackend, StoreBackend, type StoreLattice, StoreLatticeManager, type StoreType, type StoreTypeMap, type SubmitTaskReviewInput, TASK_RESPONSE_FINAL_WARNING_LIMIT, TASK_RESPONSE_PRIOR_WARNING_LIMIT, TASK_RESPONSE_SCALAR_MAX_BYTES, TOOL_RESULT_TOKEN_LIMIT, TRUNCATION_GUIDANCE, type TableInfo, type TableSchema, type TaskAgentInvocation, type TaskEvent, type TaskExecutionFailure, type TaskExecutionResult, type TaskExecutionServiceDeps, type TaskExecutionSuccess, type TaskLifecycleListener, type TaskLifecycleNotification, TaskLifecycleNotifier, TaskLifecycleService, type TaskLifecycleServiceDeps, type TaskListStore, type TaskResponseParseResult, type TaskSpec, TaskStatus, type TaskUpdatable, TeamAgentGraphBuilder, type TeamConfig, type TeamMiddlewareOptions, type TeamTask, type TeammateSpec, type TeammateToolsOptions, TenantPluginCatalog, type TenantPluginCatalogDeps, type TenantPlugins, type ThreadBuffer, type ThreadBufferConfig, type ThreadBusyEvent, type ThreadIdleEvent, type ThreadInfo, type ThreadQueueConfig, type ThreadState, ThreadStatus, type ThreadStatusChangedEvent, TokenCache, type ToolDefinition, type ToolLattice, ToolLatticeManager, type TrustedAgentMessageDispatcher, type TrustedMessageOptions, type UnknownToolHandlerConfig, type ValidateManifestArgs, type VectorStoreLatticeInterface, VectorStoreLatticeManager, type VectorStoreProviderLattice, VectorStoreProviderManager, VolumeFilesystem, type VolumeFsClient, type WorkflowValidationError, type WriteResult, abortWorkflowRun, agentInstanceManager, agentLatticeManager, appendReconciliationWarning, buildGrepResultsDict, buildInput, buildNamedVolumeName, buildRemotePackDirectoryCommand, buildSandboxMetadataEnv, buildSkillFile, buildStateAnnotation, buildTableName, buildTaskMutationFallback, buildTaskNormalizationFallback, checkEmptyContent, clearEncryptionKeyCache, clearEvalRunService, collectionLatticeManager, compileInternal, compileSandboxPlugin, compileWorkflow, computeSandboxName, configureStores, connectAllChannels, createAgentNode, createAgentTeam, createCapabilityGuardMiddleware, createExecuteSqlQueryTool, createFileData, createInfoSqlTool, createListMetricsDataSourcesTool, createListMetricsServersTool, createListTablesSqlTool, createMapNode, createModelSelectorMiddleware, createNodeHandler, createProjectRoomMiddleware, createProjectTaskOwnerPolicy, createProjectTaskReassignmentAuthorizer, createQueryCheckerSqlTool, createQueryMetricDefinitionTool, createQueryMetricsListTool, createQuerySemanticMetricDataTool, createQuerySqlTool, createQueryTableDefinitionTool, createQueryTablesListTool, createResourceAddress, createSandboxProvider, createSandboxResolver, createSchedulerMiddleware, createSemanticMetricsMiddleware, createSharePayload, createTaskExecutionService, createTaskLifecycleService, createTaskMiddleware, createTeamMiddleware, createTeammateTools, createTrustedAgentMessageDispatcher, createUnknownToolHandlerMiddleware, createWidgetMiddleware, decrypt, describeCronExpression, documentLearningPlugin, documentParserPlugin, embeddingsLatticeManager, encrypt, ensureBuiltinAgentsForTenant, ensurePluginSkillInSandbox, evaluateLatticeCaseWithLogs, eventBus, eventBus as eventBusDefault, extractFetcherError, extractOutput, fileDataToString, formatContentWithLineNumbers, formatGrepMatches, formatGrepResults, formatReadResponse, generateDirectBotProjectId, generateDirectHumanProjectId, generateToken, getAgentClient, getAgentConfig, getAllAgentConfigs, getAllBuiltInSkillMetas, getAllToolDefinitions, getBindingRegistry, getBuiltInSkillContent, getBuiltInSkillMeta, getBuiltInSkillNames, getCheckpointSaver, getChunkBuffer, getCollectionEntryCount, getEmbeddingsClient, getEmbeddingsLattice, getEncryptionKey, getEvalRunService, getLoggerLattice, getMenuRegistry, getModelLattice, getNextCronTime, getOrCreateCollectionVectorStore, getPluginSkillManifestVersion, getQueueLattice, getRuntimeCapabilityConfig, getRuntimeSkillSelection, getSTTClient, getSTTClientWithTenant, getSTTModelLattice, getSandBoxManager, getSandboxPluginCatalog, getScheduleLattice, getStoreLattice, getToolClient, getToolDefinition, getToolLattice, getVectorStoreClient, getVectorStoreLattice, getVectorStoreProvider, getWorkflowSignal, globSearchFiles, grepMatchesFromFiles, grepSearchFiles, hasChunkBuffer, hasDelegatedWorkerToken, hasRuntimeCapabilityPolicy, invokeWithRetry, isBuiltInSkill, isDirectRoom, isPluginSkillAuthorizedInSandbox, isPluginSkillManagedInSandbox, isProjectLifecycleTask, isUsingDefaultKey, isValidCronExpression, isValidSandboxName, isValidSkillName, jsonSchemaToZod, listCollectionEntries, listSandboxProviderTypes, loggerLatticeManager, mcpManager, mergeCapabilityBundles, mergePluginSkills, mergePluginSources, metricsServerManager, modelLatticeManager, normalizeSandboxName, ownTaskResponseField, parallelLimit, parseCronExpression, parseDirectRoomType, parseExternalDependency, parseJudgeVerdict, parsePackSize, parseSkillFrontmatter, parseTaskResponse, parseYaml, performStringReplacement, postProcessTaskMutationResponse, projectMutationMutex, projectRoomPlugin, projectTaskAdmissionNotifier, queueLatticeManager, registerAgentLattice, registerAgentLatticeWithTenant, registerAgentLattices, registerCheckpointSaver, registerChunkBuffer, registerEmbeddingsLattice, registerExistingTool, registerLoggerLattice, registerModelLattice, registerQueueLattice, registerSTTModelLattice, registerSandboxProviderType, registerScheduleLattice, registerStoreLattice, registerTeammateAgent, registerToolLattice, registerVectorStoreLattice, registerVectorStoreProvider, registerWorkflowRun, removeCollectionVectorStore, renderTemplate, resolveEnabledPluginSkill, resolveJudgeModelKey, resolvePath, resolveSandboxPluginConnections, resolveTenantPluginSkill, runRemotePackDirectory, safeTaskResponseId, sandboxLatticeManager, sanitizeToolCallId, scheduleLatticeManager, semanticMetricsPlugin, serializePluginMeta, serializeTaskMutationSuccess, serializeTaskNormalizationFallback, serializeTaskReadResponse, setBindingRegistry, setEvalRunService, setMenuRegistry, setSandboxPluginCatalog, skillLatticeManager, sqlDatabaseManager, storeLatticeManager, sttModelLatticeManager, taskLifecycleNotifier, toJsonSchema, toSafeStateExpr, toolLatticeManager, truncateIfTooLong, unregisterTeammateAgent, unregisterWorkflowRun, updateFileData, validateAgentInput, validateCapabilityBundleInput, validateDSL, validateEncryptionKey, validatePackSourcePath, validatePath, validateRelativePath, validateSandboxPluginManifest, validateSkillName, validateToolInput, vectorStoreLatticeManager, vectorStoreProviderManager };