@axiom-lattice/core 6.3.3 → 6.4.1

package/dist/index.d.mts

@@ -8,7 +8,7 @@ import { BaseLanguageModelInput, LanguageModelLike } from '@langchain/core/langu
 import { CallbackManagerForLLMRun } from '@langchain/core/callbacks/manager';
 import { ChatResult } from '@langchain/core/outputs';
 import * as _axiom_lattice_protocols from '@axiom-lattice/protocols';
-import { LLMConfig, SemanticMetricsServerConfig, MetricMeta, MetricQueryResult, DataSource, SemanticMetricsQueryRequest, SemanticMetricsQueryResponse, TableQueryRequest, TableQueryResponse, ExecuteSqlQueryRequest, ExecuteSqlQueryResponse, MetricsServerType, MetricsServerConfig, ToolConfig, ToolExecutor, AgentConfig, MiddlewareType, GraphBuildOptions, DeepAgentConfig, MessageChunk, MessageChunkType, QueueLatticeProtocol, QueueConfig, QueueClient, QueueResult, ScheduleLatticeProtocol, ScheduleConfig, ScheduleClient, ScheduleStorage, TaskHandler, ScheduleOnceOptions, ScheduleCronOptions, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TrustedRunContext, QueuedExecutionMode, ThreadStore, AssistantStore, SkillStore, CollectionStore, WorkspaceStore, ProjectStore, DatabaseConfigStore, MetricsServerConfigStore, McpServerConfigStore, ModelProviderStore, UserStore, TenantStore, UserTenantLinkStore, WorkflowTrackingStore, EvalStore, ChannelInstallationStore, BindingRegistry, MenuRegistry, A2AApiKeyStore, OpenAuditStore, TaskStore, SharedResourceStore, ConnectionStore, TaskWorkItemStore, AgentWebAppStore, CapabilityBundleStore, ProjectRoomStore, ProjectMembershipStore, ProjectBotMembershipStore, ProjectRoomMessageStore, ProjectRoomReadStateStore, UserPushSubscriptionStore, LeaseStore, OutboxStore, VectorStoreProvider, Thread, CreateThreadRequest, Assistant, CreateAssistantRequest, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, Skill, CreateSkillRequest, SkillStoreContext, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ModelProviderEntry, CreateModelProviderRequest, UpdateModelProviderRequest, ModelProviderStatus, ModelProviderModelEntry, ProviderModelInput, User, CreateUserRequest, UpdateUserRequest, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, A2AApiKeyRecord, CreateA2AApiKeyInput, UpdateA2AApiKeyInput, A2AApiKeyEntry, OpenAuditAppendInput, OpenAuditQuery, OpenAuditRecord, TaskMutationSnapshot, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, Collection, CreateCollectionRequest, UpdateCollectionRequest, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, ProjectRoom, ProjectMembership, ProjectBotMembership, ProjectRoomMessage, ProjectHumanRole, ProjectMembershipMutationResult, ProjectRoomReadState, UserPushSubscription, LeaseRecord, OutboxEvent, STTModelLatticeProtocol, STTConfig, STTClient, TranscriptionResult, LoggerLatticeProtocol, LoggerConfig, LoggerClient, LoggerContext, SkillConfig, SkillClient, PluginSkillDefinition, McpTool, McpUiResourcePayload, McpServerConfig, McpUiRef, ResourceResolver, ResourceAddress, ShareVisibility, OpenGrant, CreateShareRequest, ChannelAdapter, InterruptPolicy, ProjectTaskLifecycleAction, TaskBeliefState, PluginMeta, Plugin, PluginMetaOutput, SandboxPluginManifest, SandboxPluginToolDef, SandboxPluginDiagnostic, CapabilityPreview, CreateCapabilityBundleInput, UpdateCapabilityBundleInput, InternalStateField, InternalInput, InternalNode, InternalAgentNode, InternalMapNode, InternalDSL, ConnectionEntry } from '@axiom-lattice/protocols';
+import { LLMConfig, SemanticMetricsServerConfig, MetricMeta, MetricQueryResult, DataSource, SemanticMetricsQueryRequest, SemanticMetricsQueryResponse, TableQueryRequest, TableQueryResponse, ExecuteSqlQueryRequest, ExecuteSqlQueryResponse, MetricsServerType, MetricsServerConfig, ToolConfig, ToolExecutor, AgentConfig, MiddlewareType, GraphBuildOptions, DeepAgentConfig, MessageChunk, MessageChunkType, QueueLatticeProtocol, QueueConfig, QueueClient, QueueResult, ScheduleLatticeProtocol, ScheduleConfig, ScheduleClient, ScheduleStorage, TaskHandler, ScheduleOnceOptions, ScheduleCronOptions, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TrustedRunContext, QueuedExecutionMode, ThreadStore, AssistantStore, SkillStore, CollectionStore, WorkspaceStore, ProjectStore, DatabaseConfigStore, MetricsServerConfigStore, McpServerConfigStore, ModelProviderStore, UserStore, TenantStore, UserTenantLinkStore, WorkflowTrackingStore, EvalStore, ChannelInstallationStore, BindingRegistry, MenuRegistry, A2AApiKeyStore, OpenAuditStore, TaskStore, SharedResourceStore, ConnectionStore, TaskWorkItemStore, AgentWebAppStore, CapabilityBundleStore, ProjectRoomStore, ProjectMembershipStore, ProjectBotMembershipStore, ProjectRoomMessageStore, ProjectRoomReadStateStore, UserPushSubscriptionStore, LeaseStore, OutboxStore, PluginDeploymentStore, VectorStoreProvider, Thread, CreateThreadRequest, Assistant, CreateAssistantRequest, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, Skill, CreateSkillRequest, SkillStoreContext, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ModelProviderEntry, CreateModelProviderRequest, UpdateModelProviderRequest, ModelProviderStatus, ModelProviderModelEntry, ProviderModelInput, User, CreateUserRequest, UpdateUserRequest, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, A2AApiKeyRecord, CreateA2AApiKeyInput, UpdateA2AApiKeyInput, A2AApiKeyEntry, OpenAuditAppendInput, OpenAuditQuery, OpenAuditRecord, TaskMutationSnapshot, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, Collection, CreateCollectionRequest, UpdateCollectionRequest, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, ProjectRoom, ProjectMembership, ProjectBotMembership, ProjectRoomMessage, ProjectHumanRole, ProjectMembershipMutationResult, ProjectRoomReadState, UserPushSubscription, LeaseRecord, OutboxEvent, STTModelLatticeProtocol, STTConfig, STTClient, TranscriptionResult, LoggerLatticeProtocol, LoggerConfig, LoggerClient, LoggerContext, SkillConfig, SkillClient, PluginSkillDefinition, McpTool, McpUiResourcePayload, McpServerConfig, McpUiRef, ResourceResolver, ResourceAddress, ShareVisibility, OpenGrant, CreateShareRequest, ChannelAdapter, InterruptPolicy, ProjectTaskLifecycleAction, TaskBeliefState, PluginMeta, Plugin, PluginMetaOutput, SandboxPluginManifest, SandboxPluginToolDef, SandboxPluginDiagnostic, CapabilityPreview, CreateCapabilityBundleInput, UpdateCapabilityBundleInput, InternalStateField, InternalInput, InternalNode, InternalAgentNode, InternalMapNode, InternalDSL, ConnectionEntry } from '@axiom-lattice/protocols';
 export { _axiom_lattice_protocols as Protocols };
 export { AgentConfig, AgentType, GraphBuildOptions, MemoryType, ProjectRoomTrustedRunContext, QueuedExecutionMode, TrustedRunContext, parseQueuedExecutionMode, parseTrustedRunContext } from '@axiom-lattice/protocols';
 import * as langchain from 'langchain';
@@ -1665,6 +1665,24 @@ interface SandboxInstance {
     stop(): Promise<void>;
     kill(): Promise<void>;
     getStatus(): Promise<"running" | "stopped" | "unknown">;
+    /**
+     * Resolve a routable endpoint for a guest port published at create time.
+     *
+     * Implementations may omit this capability; callers treat a missing
+     * implementation as "this backend does not support resident services".
+     *
+     * The returned `endpoint` is a scheme-less route the caller composes with
+     * its configured sandbox-service base URL. Backends with a proxy return a
+     * relative proxy path (e.g. `/api/sandboxes/<name>/proxy/<port>`); others
+     * may return a scheme-less `host:port`. See spec §9.4.
+     *
+     * @param port - Guest port that was published via `RunSandboxConfig.exposePorts`
+     * @returns The endpoint route and any headers required to reach it
+     */
+    getEndpoint?(port: number): Promise<{
+        endpoint: string;
+        headers?: Record<string, string>;
+    }>;
     readonly file: SandboxFileService;
     readonly shell: SandboxShellService;
     /**
@@ -1706,6 +1724,14 @@ interface RunSandboxConfig {
     projectId?: string;
     vmIsolation?: SandboxIsolationLevel;
     volumes?: Record<string, SandboxVolumeDefinition>;
+    /** Main process command replacing the runtime default; used for resident services. */
+    entrypoint?: string[];
+    /** Absolute sandbox lifetime in seconds; `null` means no expiry. */
+    timeoutSeconds?: number | null;
+    /** Guest ports to publish so they can be resolved via `SandboxInstance.getEndpoint`. */
+    exposePorts?: number[];
+    /** Optional per-sandbox image override (defaults to the provider config). */
+    image?: string;
 }
 interface SandboxManagerProtocol {
     resolvePolicy(config: RunSandboxConfig): {
@@ -3066,6 +3092,7 @@ type StoreTypeMap = {
     userPushSubscription: UserPushSubscriptionStore;
     lease: LeaseStore;
     outbox: OutboxStore;
+    pluginDeployment: PluginDeploymentStore;
 };
 /**
  * Store type keys
@@ -6201,6 +6228,12 @@ interface EnsureMicrosandboxInput {
     memoryMib?: number;
     env?: Record<string, string>;
     volumes?: Record<string, SandboxVolumeDefinition>;
+    /** Main process command; replaces the runtime default. */
+    entrypoint?: string[];
+    /** Absolute lifetime in seconds; `null` means no expiry. */
+    timeoutSeconds?: number | null;
+    /** Guest ports to publish. */
+    exposePorts?: number[];
 }
 interface MicrosandboxShellExecInput {
     sandboxName: string;
@@ -6222,6 +6255,17 @@ declare class MicrosandboxServiceClient {
     killSandbox(name: string): Promise<SandboxLifecycleResponse>;
     deleteSandbox(name: string): Promise<SandboxLifecycleResponse>;
     getStatus(name: string): Promise<SandboxLifecycleResponse>;
+    /**
+     * Resolve the endpoint for a published guest port of a sandbox.
+     *
+     * @param name - Sandbox name
+     * @param port - Guest port published via `ensureSandbox({ exposePorts })`
+     * @returns The scheme-less endpoint string and optional headers
+     */
+    getEndpoint(name: string, port: number): Promise<{
+        endpoint: string;
+        headers?: Record<string, string>;
+    }>;
     readFile(sandboxName: string, path: string): Promise<ReadFileResponse>;
     writeFile(sandboxName: string, path: string, content: string): Promise<WriteFileResponse>;
     deleteFile(sandboxName: string, path: string): Promise<WriteFileResponse>;
@@ -6258,7 +6302,7 @@ declare function createResourceAddress(config: {
     resourcePath: string;
 }): ResourceAddress;
 
-type MicrosandboxRemoteProviderClient = Pick<MicrosandboxServiceClient, "ensureSandbox" | "startSandbox" | "stopSandbox" | "killSandbox" | "deleteSandbox" | "getStatus" | "readFile" | "writeFile" | "deleteFile" | "listPath" | "findFiles" | "searchInFile" | "replaceInFile" | "uploadFile" | "downloadFile" | "execCommand" | "volumeFsRead" | "volumeFsWrite" | "volumeFsDelete" | "volumeFsList" | "volumeFsDownload" | "volumeFsUpload" | "volumeFsCreateDirectory">;
+type MicrosandboxRemoteProviderClient = Pick<MicrosandboxServiceClient, "ensureSandbox" | "startSandbox" | "stopSandbox" | "killSandbox" | "deleteSandbox" | "getStatus" | "getEndpoint" | "readFile" | "writeFile" | "deleteFile" | "listPath" | "findFiles" | "searchInFile" | "replaceInFile" | "uploadFile" | "downloadFile" | "execCommand" | "volumeFsRead" | "volumeFsWrite" | "volumeFsDelete" | "volumeFsList" | "volumeFsDownload" | "volumeFsUpload" | "volumeFsCreateDirectory">;
 interface MicrosandboxRemoteProviderConfig extends MicrosandboxServiceClientConfig {
     client?: MicrosandboxRemoteProviderClient;
     image?: string;
@@ -6536,6 +6580,10 @@ declare class MicrosandboxRemoteInstance implements SandboxInstance {
     stop(): Promise<void>;
     kill(): Promise<void>;
     getStatus(): Promise<"running" | "stopped" | "unknown">;
+    getEndpoint(port: number): Promise<{
+        endpoint: string;
+        headers?: Record<string, string>;
+    }>;
     /**
      * Pack a sandbox folder into a sibling ZIP through the microsandbox shell.
      *
@@ -7021,6 +7069,98 @@ interface ConnectAllChannelsOptions {
     deps?: unknown;
 }
 declare function connectAllChannels(getAdapter: (channel: string) => ChannelAdapter | undefined, options?: ConnectAllChannelsOptions): Promise<void>;
+/**
+ * Disconnect every enabled channel installation for all tenants.
+ *
+ * Symmetric with {@link connectAllChannels}: used by the single-owner channel
+ * leader when it loses the connection lease.
+ *
+ * Teardown is best-effort: a failure from one adapter is logged and does not
+ * prevent the remaining installations from being disconnected.
+ *
+ * @param getAdapter Resolves the adapter for a channel name.
+ * @returns Resolves once every enabled installation has been attempted.
+ */
+declare function disconnectAllChannels(getAdapter: (channel: string) => ChannelAdapter | undefined): Promise<void>;
+
+/** Dependencies for {@link ChannelConnectionLeader}. */
+interface ChannelConnectionLeaderDeps {
+    /** Shared lease store (PostgreSQL in multi-replica deployments). */
+    leaseStore: LeaseStore;
+    /** Stable this-replica id (e.g. `getReplicaId()`). */
+    owner: string;
+    /** Establish all enabled channel connections. */
+    connect: () => Promise<void>;
+    /** Tear down all channel connections. */
+    disconnect: () => Promise<void>;
+    /** Lease TTL in ms (default 60_000). */
+    ttlMs?: number;
+    /** Retry/health interval in ms (default max(5_000, floor(ttlMs / 3))). */
+    retryMs?: number;
+    /** Optional structured logger for recoverable failures. */
+    log?: {
+        warn(message: string, context: Record<string, unknown>): void;
+    };
+}
+/**
+ * Long-lived single-owner gate for persistent channel connections.
+ *
+ * @remarks
+ * - Holds `leader:channel-connections` for as long as the process can renew it;
+ *   only the holder calls `connect()`.
+ * - If the holder crashes, its lease lapses after `ttlMs` and another replica's
+ *   next tick acquires it and connects (bounded failover window).
+ * - A holder that loses the lease disconnects on its next tick.
+ * - With an in-memory lease store the single process wins (single-process
+ *   behavior is unchanged).
+ *
+ * @example
+ * ```ts
+ * const leader = new ChannelConnectionLeader({ leaseStore, owner, connect, disconnect });
+ * leader.start();
+ * app.addHook("onClose", () => leader.stop());
+ * ```
+ */
+declare class ChannelConnectionLeader {
+    private readonly deps;
+    private readonly ttlMs;
+    private readonly retryMs;
+    private holder;
+    private connected;
+    private attempted;
+    private inFlight;
+    private timer;
+    private running;
+    private stopped;
+    constructor(deps: ChannelConnectionLeaderDeps);
+    /** Starts the ownership loop (immediate tick, then every `retryMs`). */
+    start(): void;
+    /**
+     * Releases ownership (if held) and disconnects.
+     *
+     * @returns A promise that settles after teardown completes.
+     * @remarks Terminal: a stopped leader does not restart.
+     */
+    stop(): Promise<void>;
+    /**
+     * Runs one ownership/health step. Public for deterministic tests.
+     *
+     * @returns A promise that settles when this step completes.
+     */
+    tickOnce(): Promise<void>;
+    /**
+     * Performs one acquire/renew/step decision.
+     *
+     * @remarks A transient lease-store error while renewing keeps the current
+     * holder and connections intact (retry next tick); only a confirmed
+     * `renewed === false` triggers teardown.
+     */
+    private runTick;
+    private tryAcquire;
+    private loseLeadership;
+    private connectChannels;
+    private disconnectChannels;
+}
 
 /**
  * Sets the global {@link BindingRegistry} instance used by the channel message router.
@@ -9069,6 +9209,8 @@ interface ProjectMutationScope {
 declare class ProjectMutationMutex {
     private readonly queues;
     private readonly active;
+    /** Project keys already held by the current async context (reentrancy). */
+    private readonly held;
     /** Runs one mutation after all earlier mutations for the same Tenant and Project. */
     runExclusive<T>(scope: ProjectMutationScope, operation: () => Promise<T>, signal?: AbortSignal): Promise<T>;
     /** Returns the number of operations queued behind the current holder. */
@@ -9777,6 +9919,13 @@ interface RoomAgentInterruptInput {
     sourceRoomMessageId: string;
     inputMessageId: string;
 }
+/** Source-less HITL interrupt input whose scope is derived from the validated durable membership. */
+interface RoomAgentCorrelatedInterruptInput {
+    tenantId: string;
+    membershipId: string;
+    correlationKey: string;
+    text: string;
+}
 /**
  * Observes a canonical Agent-authored room message after durable persistence.
  *
@@ -9841,6 +9990,16 @@ declare class RoomAgentMessageService {
      * @returns A deep clone of the canonical idempotent room message.
      */
     postInterrupt(input: RoomAgentInterruptInput): Promise<ProjectRoomMessage>;
+    /**
+     * Persists a correlated HITL interrupt that has no human source message.
+     *
+     * @param input Explicit tenant, active membership, caller-supplied correlation key, and text.
+     * @returns A deep clone of the canonical idempotent room message.
+     * @remarks Business-agnostic: the caller owns the correlation key. Scope is
+     * validated against the durable membership; no source message is required.
+     */
+    postCorrelatedInterrupt(input: RoomAgentCorrelatedInterruptInput): Promise<ProjectRoomMessage>;
+    private persistScoped;
     private persistDerived;
     private persist;
     private notifyCommitted;
@@ -11828,6 +11987,80 @@ type GetSandboxFromConfig = (config: RunSandboxConfig) => Promise<SandboxInstanc
  */
 declare function createSandboxResolver(getSandboxFromConfig: GetSandboxFromConfig): SandboxResolver;
 
+/**
+ * A deployment record consulted for resident routing.
+ *
+ * Structurally satisfied by `PluginDeployment` from `@axiom-lattice/protocols`;
+ * kept minimal so the executor does not depend on the full store contract.
+ */
+interface ResidentDeployment {
+    /**
+     * Lifecycle status. `"running"` routes directly; a non-running `onDemand`
+     * deployment is resumed once before routing (spec §7.1).
+     */
+    status: string;
+    /** Relative proxy path composed with {@link ResidentRoutingDeps.baseUrl}. */
+    endpoint?: string;
+    /**
+     * Lifecycle strategy. `"onDemand"` enables resume-on-call for a non-running
+     * deployment (and a resume plus a single retry after a failed running call);
+     * `"alwaysOn"` never wakes on call.
+     */
+    mode: string;
+}
+/**
+ * Optional dependencies enabling resident-service routing for published plugins.
+ *
+ * When configured, {@link SandboxPluginExecutor.invoke} looks up a deployment
+ * for the invocation's `(tenantId, pluginType)`. A `running` deployment with an
+ * endpoint is invoked over HTTP; a paused/stopped `onDemand` deployment is
+ * resumed via {@link ResidentRoutingDeps.ensureRunning} then invoked (spec
+ * §7.1). Any resident failure degrades to the short-process path by default, so
+ * routing never introduces a new failure mode.
+ *
+ * @remarks
+ * - No host token is used. The optional `serviceKey` is sent to the
+ *   sandbox-service proxy as `Authorization: Bearer <serviceKey>`.
+ * - The resident payload forwards `input`, `context`, `connection`,
+ *   `connections`, and `timeoutMs`. `timeoutMs` is carried to the host in the
+ *   `/invoke` body **and** used as the client-side `AbortController` timeout, so
+ *   the host handler timeout and the client abort stay in parity; the
+ *   `maxResultBytes` cap is still applied client-side.
+ * - The short-process-only sandbox open-credential env is not injected on the
+ *   resident path: the resident host process owns that environment, not the
+ *   per-call executor.
+ */
+interface ResidentRoutingDeps {
+    /**
+     * Resolve the deployment record for a plugin.
+     *
+     * @param tenantId - Tenant owning the plugin.
+     * @param pluginType - Plugin type addressed by the invocation.
+     * @returns The deployment, or undefined when the plugin is not published.
+     */
+    getDeployment(tenantId: string, pluginType: string): Promise<ResidentDeployment | undefined>;
+    /**
+     * Optional single-flight resume/cold-start hook, attempted once after an
+     * `onDemand` resident invocation fails.
+     *
+     * @param tenantId - Tenant owning the plugin.
+     * @param pluginType - Plugin type addressed by the invocation.
+     */
+    ensureRunning?(tenantId: string, pluginType: string): Promise<void>;
+    /** Sandbox-service base URL (`MICROSANDBOX_SERVICE_BASE_URL`). */
+    baseUrl: string;
+    /** Sandbox-service API key, sent as `Authorization: Bearer` when present. */
+    serviceKey?: string;
+    /** Injectable fetch implementation (defaults to the global `fetch`). */
+    fetchImpl?: typeof fetch;
+    /**
+     * Fall back to the short-process path when the resident call fails.
+     *
+     * Defaults to `true`. When `false`, a resident failure is returned as a
+     * non-ok {@link SandboxPluginResult} instead.
+     */
+    degradeToShortProcess?: boolean;
+}
 /** Dependencies required to resolve a tenant sandbox for plugin execution. */
 interface SandboxPluginExecutorDeps {
     /** Resolves the sandbox instance that hosts the tenant plugin. */
@@ -11836,6 +12069,11 @@ interface SandboxPluginExecutorDeps {
     logger?: {
         info: (fields: Record<string, unknown>, message?: string) => void;
     };
+    /**
+     * Optional resident-service routing. When absent, every invocation uses the
+     * short-process `node <handler>` path (unchanged legacy behavior).
+     */
+    resident?: ResidentRoutingDeps;
 }
 /** Arguments for a single sandbox plugin handler invocation. */
 interface SandboxPluginInvokeArgs {
@@ -11872,8 +12110,18 @@ interface SandboxPluginResult {
     result?: unknown;
     /** Error message when `ok` is false. */
     error?: string;
-    /** Process exit code returned by the sandbox shell. */
+    /**
+     * Normalized process-like exit code: `0` on success, `1` on failure.
+     *
+     * On the resident path this is normalized from the handler outcome rather
+     * than carrying the upstream HTTP status (see {@link httpStatus}).
+     */
     exitCode: number;
+    /**
+     * Upstream HTTP status from the resident host, present only when the resident
+     * path produced a response. The short-process path leaves this undefined.
+     */
+    httpStatus?: number;
     /** Wall-clock duration of the invocation in milliseconds. */
     durationMs: number;
     /** Raw stdout captured from the handler. */
@@ -11881,6 +12129,22 @@ interface SandboxPluginResult {
     /** Raw stderr captured from the handler (currently always empty). */
     stderr: string;
 }
+/**
+ * Normalize a successful handler outcome into the text surfaced as the tool
+ * result (and the MCP App `ui/notifications/tool-result` payload).
+ *
+ * Handlers must emit `{ ok: true, result: <payload> }`. When a handler reports
+ * success but omits `result` (a contract violation), fall back to the raw
+ * stdout so the data stays visible instead of collapsing to the string
+ * `"null"` (which hides the mistake behind a valid-looking result).
+ *
+ * @param result - Normalized handler outcome.
+ * @returns The text to surface to the caller / MCP App View.
+ */
+declare function handlerResultText(result: {
+    result?: unknown;
+    stdout?: string;
+}): string;
 /**
  * Executes tenant sandbox plugin handlers via the tenant sandbox shell.
  *
@@ -11889,15 +12153,105 @@ interface SandboxPluginResult {
  * written to `connection.json` under a per-call temp dir as an
  * `{ connection?, connections? }` envelope. The handler writes its result to
  * stdout as `{ ok, result }` or plain text. Node never evaluates handler code.
+ *
+ * When {@link SandboxPluginExecutorDeps.resident} is configured, a `running`
+ * deployment with an endpoint for the invocation's `(tenantId, pluginType)`
+ * runs the handler inside the plugin's resident service over HTTP; a paused or
+ * stopped `onDemand` deployment is resumed first (spec §7.1).
  */
 declare class SandboxPluginExecutor {
     private readonly deps;
     /**
-     * @param deps - Sandbox resolver and optional logger
+     * @param deps - Sandbox resolver, optional logger, and optional resident routing
      */
     constructor(deps: SandboxPluginExecutorDeps);
     /**
-     * Invoke a plugin handler inside the tenant sandbox shell.
+     * Invoke a plugin handler.
+     *
+     * Routes to the published plugin's resident service when {@link
+     * SandboxPluginExecutorDeps.resident} is configured and a deployment is
+     * routable (`running` with an endpoint, or a resumed `onDemand` deployment).
+     * Otherwise, or when the resident call fails and degradation is enabled, runs
+     * the handler as a short `node <handler>` process inside the tenant sandbox.
+     *
+     * @param args - Invocation arguments including manifest, handler, and input
+     * @returns The normalized handler result, exit code, timing, and raw stdout
+     * @throws When `args.handler` is not a safe relative path
+     */
+    invoke(args: SandboxPluginInvokeArgs): Promise<SandboxPluginResult>;
+    /**
+     * Attempt to route an invocation to a published plugin's resident service.
+     *
+     * @param args - Invocation arguments
+     * @param resident - Resident routing dependencies
+     * @param started - Invocation start timestamp used for `durationMs`
+     * @returns A terminal result (success, or failure with degradation disabled),
+     *   or `undefined` when the caller should fall back to the short-process path
+     */
+    private tryResident;
+    /**
+     * Normalize a resident invocation outcome into the caller-facing result.
+     *
+     * @param outcome - Normalized resident transport result
+     * @param args - Invocation arguments (for the result-size cap)
+     * @param resident - Resident routing dependencies (degradation policy)
+     * @param pluginType - Plugin type, for diagnostics
+     * @param tenantId - Tenant owning the plugin, for diagnostics
+     * @param started - Invocation start timestamp used for `durationMs`
+     * @returns The normalized result, or `undefined` when the caller should fall
+     *   back to the short-process path
+     */
+    private finalizeResident;
+    /**
+     * Look up a deployment, degrading to `undefined` when the lookup throws.
+     *
+     * @param resident - Resident routing dependencies
+     * @param tenantId - Tenant owning the plugin
+     * @param pluginType - Plugin type addressed by the invocation
+     * @returns The deployment, or `undefined` when absent or lookup failed
+     */
+    private lookupDeployment;
+    /**
+     * Resume a non-running `onDemand` deployment once, then invoke it.
+     *
+     * Re-reads the deployment after the resume so a cold-started endpoint is
+     * picked up. Never throws: a failed resume or a deployment that is still not
+     * `running` with an endpoint resolves to `undefined`, letting the caller use
+     * the short-process path.
+     *
+     * @param resident - Resident routing dependencies
+     * @param tenantId - Tenant owning the plugin
+     * @param pluginType - Plugin type addressed by the invocation
+     * @param payload - Invocation payload
+     * @param timeoutMs - Clamped per-call timeout
+     * @returns The resident outcome when routed, or `undefined` to short-process
+     */
+    private wakeOnDemand;
+    /**
+     * Resume an `onDemand` deployment once and retry the resident call once.
+     *
+     * @param resident - Resident routing dependencies
+     * @param tenantId - Tenant owning the plugin
+     * @param pluginType - Plugin type addressed by the invocation
+     * @param endpoint - Endpoint used by the first attempt
+     * @param payload - Invocation payload
+     * @param timeoutMs - Clamped per-call timeout
+     * @param firstOutcome - Failed first attempt, returned when resume fails
+     * @returns The retry outcome, or `firstOutcome` when resume itself failed
+     */
+    private ensureRunningAndRetry;
+    /**
+     * Invoke the resident host over the sandbox-service proxy path.
+     *
+     * @param resident - Resident routing dependencies
+     * @param endpointPath - Relative proxy path
+     * @param payload - Invocation payload matching the host contract
+     * @param timeoutMs - Clamped per-call timeout
+     * @returns The normalized resident invocation result
+     */
+    private callResident;
+    /**
+     * Invoke a plugin handler as a short `node <handler>` process.
      *
      * Resolves the sandbox, injects small input as a base64 env var (or writes a
      * temp `input.json` for large input), writes connection credentials to a temp
@@ -11907,10 +12261,10 @@ declare class SandboxPluginExecutor {
      * in all cases, including setup failures.
      *
      * @param args - Invocation arguments including manifest, handler, and input
+     * @param started - Invocation start timestamp used for `durationMs`
      * @returns The normalized handler result, exit code, timing, and raw stdout
-     * @throws When `args.handler` is not a safe relative path
      */
-    invoke(args: SandboxPluginInvokeArgs): Promise<SandboxPluginResult>;
+    private invokeShortProcess;
 }
 
 /** Arguments accepted by {@link compileSandboxPlugin}. */
@@ -12223,6 +12577,168 @@ declare function getSandboxPluginCatalog(): TenantPluginCatalog;
  */
 declare function setSandboxPluginCatalog(instance: TenantPluginCatalog | null): void;
 
+/**
+ * Process-wide accessor for the host-injected plugin deployment service.
+ *
+ * The resident-service orchestration (`PluginDeploymentService`) lives in the
+ * gateway, but the `manage_plugin` middleware runs in core. To keep core free
+ * of any gateway import, the gateway registers its service here at startup and
+ * core reaches it through this structural seam — mirroring how
+ * {@link getSandboxPluginCatalog} is a process-wide accessor.
+ *
+ * The interface stays minimal: the three lifecycle operations the
+ * `manage_plugin` tool needs (`deploy`/`undeploy`/`status`) plus the two
+ * read/resume primitives the catalog executor needs to route a tool call to a
+ * resident service (`getDeployment`/`ensureRunning`). Core never depends on the
+ * concrete service.
+ *
+ * @remarks
+ * When no service is registered the accessor returns `null`; the `manage_plugin`
+ * actions degrade to a diagnostic instead of throwing (ADR-097 invariant), and
+ * the catalog executor takes the short-process path unchanged.
+ */
+/** Lifecycle strategy for a resident plugin deployment. */
+type PluginDeploymentServiceMode = "onDemand" | "alwaysOn";
+/** Options accepted when deploying a resident plugin service. */
+interface PluginDeploymentServiceDeployOptions {
+    /** Lifecycle strategy; defaults to the deployment service's own default. */
+    mode?: PluginDeploymentServiceMode;
+    /** On-demand idle timeout override, in milliseconds. */
+    idleTimeoutMs?: number;
+}
+/** Minimal deploy outcome surfaced through `manage_plugin deploy`. */
+interface PluginDeploymentServiceDeployResult {
+    /** Durable deployment status (e.g. `"running"`). */
+    status: string;
+    /** Resolved endpoint route, when known. */
+    endpoint?: string;
+    /** Lifecycle strategy, when known. */
+    mode?: string;
+}
+/** Minimal undeploy outcome surfaced through `manage_plugin undeploy`. */
+interface PluginDeploymentServiceUndeployResult {
+    /** Whether a deployment record was removed. */
+    undeployed: boolean;
+}
+/** One row in the tenant-wide deployment list surfaced through `manage_plugin deployments`. */
+interface PluginDeploymentServiceListEntry {
+    /** Plugin type (directory key). */
+    pluginType: string;
+    /** Durable deployment status. */
+    status: string;
+    /** Lifecycle strategy. */
+    mode: string;
+    /** Resolved endpoint route, when known. */
+    endpoint?: string;
+    /** ISO timestamp of the last health observation. */
+    lastHealthAt?: string;
+    /** Most recent health error, when unhealthy. */
+    lastError?: string;
+}
+/** Minimal status view surfaced through `manage_plugin status`. */
+interface PluginDeploymentServiceStatus {
+    /** Durable status, or `"absent"` when no deployment exists. */
+    status: string;
+    /** Resolved endpoint route, when known. */
+    endpoint?: string;
+    /** Lifecycle strategy, when known. */
+    mode?: string;
+    /** ISO timestamp of the last health observation. */
+    lastHealthAt?: string;
+    /** Most recent health error, when unhealthy. */
+    lastError?: string;
+}
+/**
+ * Structural contract the gateway's `PluginDeploymentService` satisfies.
+ *
+ * Core depends only on this shape, so the concrete gateway class can be
+ * installed without a cross-package import.
+ */
+interface PluginDeploymentServiceLike {
+    /**
+     * Provision (or idempotently reuse) a resident service for a plugin.
+     *
+     * @param tenantId - Tenant that owns the plugin.
+     * @param pluginType - Plugin type (directory key).
+     * @param options - Lifecycle mode and overrides.
+     */
+    deploy(tenantId: string, pluginType: string, options?: PluginDeploymentServiceDeployOptions): Promise<PluginDeploymentServiceDeployResult>;
+    /**
+     * Tear down a resident service and its deployment record.
+     *
+     * @param tenantId - Tenant that owns the plugin.
+     * @param pluginType - Plugin type.
+     */
+    undeploy(tenantId: string, pluginType: string): Promise<PluginDeploymentServiceUndeployResult>;
+    /**
+     * Read a deployment's durable status, refreshing it with a live health probe.
+     *
+     * @param tenantId - Tenant that owns the plugin.
+     * @param pluginType - Plugin type.
+     */
+    status(tenantId: string, pluginType: string): Promise<PluginDeploymentServiceStatus>;
+    /**
+     * List every resident deployment for a tenant.
+     *
+     * Backs the read-only `manage_plugin deployments` view. Reads the durable
+     * store directly and never probes the resident host.
+     *
+     * @param tenantId - Tenant whose deployments are listed.
+     * @returns One entry per deployment, newest semantics defined by the store.
+     */
+    list(tenantId: string): Promise<PluginDeploymentServiceListEntry[]>;
+    /**
+     * Read a deployment's stored record without probing the resident host.
+     *
+     * The catalog executor uses this to decide whether a tool call should be
+     * routed to the resident service. Unlike {@link status} this never issues a
+     * `/health` probe and resolves `undefined` when no record exists.
+     *
+     * @param tenantId - Tenant that owns the plugin.
+     * @param pluginType - Plugin type.
+     * @returns The minimal `{ status, endpoint, mode }` view, or `undefined`.
+     */
+    getDeployment(tenantId: string, pluginType: string): Promise<{
+        status: string;
+        endpoint?: string;
+        mode: string;
+    } | undefined>;
+    /**
+     * Ensure an existing on-demand deployment is running and healthy.
+     *
+     * The catalog executor calls this to resume a paused/stopped `onDemand`
+     * deployment before a resident invocation. It resolves once the deployment is
+     * running; it is a no-op when the deployment is already running.
+     *
+     * @param tenantId - Tenant that owns the plugin.
+     * @param pluginType - Plugin type.
+     */
+    ensureRunning(tenantId: string, pluginType: string): Promise<void>;
+}
+/**
+ * Install (or clear) the process-wide plugin deployment service.
+ *
+ * The gateway calls this at startup with its real service; tests inject a fake.
+ *
+ * @param instance - Service to install, or `undefined`/`null` to reset.
+ * @returns Nothing
+ *
+ * @example
+ * ```ts
+ * setPluginDeploymentService(new PluginDeploymentService({ ...deps }));
+ * // later, at shutdown or in tests:
+ * setPluginDeploymentService(undefined);
+ * ```
+ */
+declare function setPluginDeploymentService(instance: PluginDeploymentServiceLike | null | undefined): void;
+/**
+ * Read the installed plugin deployment service.
+ *
+ * @returns The registered service, or `null` when none is installed (the
+ *   `manage_plugin` deploy/undeploy/status actions then return a diagnostic).
+ */
+declare function getPluginDeploymentService(): PluginDeploymentServiceLike | null;
+
 /**
  * Plugin skill definition resolved together with its owning plugin type.
  *
@@ -12348,6 +12864,362 @@ declare function provisionSandboxOpenClient(sandbox: {
  */
 declare function buildBundleFromDist(distDir: string, version: string): SandboxOpenClientBundle;
 
+/**
+ * Process-local runtime cache for published plugin deployments.
+ *
+ * The authoritative deployment state lives in the `PluginDeployment` store
+ * (Plan 3). This registry only caches the resolved proxy endpoint and the last
+ * observed health for the lifetime of a single Gateway process, and coalesces
+ * concurrent {@link PluginDeploymentRuntimeRegistry.ensureRunning} calls so a
+ * cold start (or resume) is performed at most once per key at a time.
+ *
+ * Keys are `${tenantId}:${pluginType}`. Every method receives that composed
+ * key as its `id` argument.
+ */
+/** Last observed health for one cached deployment. */
+interface PluginDeploymentRuntimeHealth {
+    /** Epoch milliseconds of the most recent health observation. */
+    lastHealthAt?: number;
+    /** Most recent health error, cleared by a subsequent healthy mark. */
+    lastError?: string;
+}
+/** Constructor options for {@link PluginDeploymentRuntimeRegistry}. */
+interface PluginDeploymentRuntimeRegistryOptions {
+    /** Injectable clock (defaults to `Date.now`) used for health timestamps. */
+    now?: () => number;
+}
+/**
+ * In-process cache of plugin deployment endpoints and health, with single-flight
+ * cold start.
+ *
+ * @remarks
+ * - Not shared across processes. Multi-Gateway correctness relies on the store
+ *   being the authority and on callers re-resolving the endpoint when needed.
+ * - `ensureRunning` is single-flight per `id`: concurrent callers share one
+ *   factory execution, and the in-flight entry is cleared once it settles
+ *   (success or failure) so a later call may retry.
+ *
+ * @example
+ * ```ts
+ * const registry = new PluginDeploymentRuntimeRegistry();
+ * registry.setEndpoint("t1:weather", "/api/sandboxes/plugin-abc/proxy/8080");
+ * await registry.ensureRunning("t1:weather", () => service.startSandbox());
+ * ```
+ */
+declare class PluginDeploymentRuntimeRegistry {
+    private readonly entries;
+    private readonly inFlight;
+    private readonly now;
+    /**
+     * @param options - Optional injectable clock for deterministic health timestamps.
+     */
+    constructor(options?: PluginDeploymentRuntimeRegistryOptions);
+    /**
+     * Cache the resolved proxy endpoint for a deployment.
+     *
+     * @param id - Composed key `${tenantId}:${pluginType}`.
+     * @param endpoint - Relative proxy path, e.g. `/api/sandboxes/plugin-abc/proxy/8080`.
+     */
+    setEndpoint(id: string, endpoint: string): void;
+    /**
+     * Read the cached endpoint for a deployment.
+     *
+     * @param id - Composed key `${tenantId}:${pluginType}`.
+     * @returns The cached endpoint, or `undefined` when none is known.
+     */
+    getEndpoint(id: string): string | undefined;
+    /**
+     * Record a successful health observation and clear any prior error.
+     *
+     * @param id - Composed key `${tenantId}:${pluginType}`.
+     */
+    markHealthy(id: string): void;
+    /**
+     * Record a failed health observation.
+     *
+     * @param id - Composed key `${tenantId}:${pluginType}`.
+     * @param error - Human-readable failure description.
+     */
+    markUnhealthy(id: string, error: string): void;
+    /**
+     * Read the last observed health for a deployment.
+     *
+     * @param id - Composed key `${tenantId}:${pluginType}`.
+     * @returns The cached health, or `undefined` when the id is unknown.
+     */
+    getHealth(id: string): PluginDeploymentRuntimeHealth | undefined;
+    /**
+     * Run a cold start/resume factory at most once per id at a time.
+     *
+     * Concurrent calls for the same id return the same in-flight promise and run
+     * `factory` exactly once. The in-flight entry is cleared when the factory
+     * settles, so a later call runs it again (retry after failure is allowed).
+     *
+     * @param id - Composed key `${tenantId}:${pluginType}`.
+     * @param factory - Idempotent start/resume operation for the resident service.
+     * @returns A promise that settles with the factory outcome.
+     */
+    ensureRunning(id: string, factory: () => Promise<void>): Promise<void>;
+    /**
+     * Drop cached endpoint and health for one deployment.
+     *
+     * @param id - Composed key `${tenantId}:${pluginType}`.
+     */
+    clear(id: string): void;
+    /** Drop all cached endpoints, health, and in-flight coordination entries. */
+    reset(): void;
+    private entry;
+}
+
+/**
+ * HTTP transport for invoking a published plugin's resident service.
+ *
+ * The resident host server (installed into the plugin sandbox) exposes
+ * `POST /invoke` on a published guest port. In production the request travels
+ * through `microsandbox-service`, whose scoped `/api/sandboxes/:name/proxy/:port/*`
+ * proxy is gated by the service API key (`Authorization: Bearer <serviceKey>`)
+ * and strips that key before forwarding. The host itself requires no auth: the
+ * authenticated proxy route plus the loopback-bound published port are the
+ * security boundary.
+ */
+/** Default per-invocation timeout for a resident plugin call. */
+declare const DEFAULT_RESIDENT_INVOKE_TIMEOUT_MS = 60000;
+/** Normalized result of a resident plugin invocation. */
+interface ResidentInvokeResult {
+    /** Whether the host reported success. */
+    ok: boolean;
+    /** Handler result payload when `ok` is true. */
+    result?: unknown;
+    /** Human-readable error when `ok` is false. */
+    error?: string;
+    /** Upstream HTTP status when a response was received. */
+    status?: number;
+}
+/** One named connection config passed to a resident plugin handler. */
+interface ResidentConnectionConfig {
+    /** Connection key the plugin references. */
+    key: string;
+    /** Decrypted connection config. */
+    config: Record<string, unknown>;
+}
+/** Request body accepted by the resident host server's `/invoke` endpoint. */
+interface ResidentInvokePayload {
+    /** Plugin-directory-relative handler path from the manifest. */
+    handler: string;
+    /** Tool input. */
+    input: unknown;
+    /** Single resolved connection config (when the caller resolved one). */
+    connection?: Record<string, unknown>;
+    /** Full multi-connection list keyed by connection key. */
+    connections?: ResidentConnectionConfig[];
+    /** Trusted execution context strings (tenant, plugin type, ...). */
+    context: Record<string, string>;
+    /**
+     * Per-call handler timeout, forwarded to the host as its child-process
+     * timeout so the resident path honors the caller's value (not just the
+     * client-side abort). Falls back to {@link ResidentInvokeArgs.timeoutMs}.
+     */
+    timeoutMs?: number;
+}
+/** Arguments for {@link invokeResident}. */
+interface ResidentInvokeArgs {
+    /** Configured sandbox-service base URL, e.g. `http://service:4002`. */
+    baseUrl: string;
+    /** Relative proxy path, e.g. `/api/sandboxes/plugin-abc/proxy/8080`. */
+    endpointPath: string;
+    /** Sandbox-service API key (sent as `Authorization: Bearer` when present). */
+    serviceKey?: string;
+    /** Invocation payload matching the host `/invoke` contract. */
+    payload: ResidentInvokePayload;
+    /** Override the per-invocation timeout. */
+    timeoutMs?: number;
+    /** Injectable fetch implementation (defaults to the global `fetch`). */
+    fetchImpl?: typeof fetch;
+}
+/**
+ * Invoke a resident plugin handler over the sandbox-service proxy path.
+ *
+ * Builds `POST ${baseUrl}${endpointPath}/invoke`, sends the sandbox-service
+ * key in `Authorization: Bearer <serviceKey>` (when supplied), and normalizes
+ * the host envelope. It never throws: non-2xx responses, malformed bodies,
+ * network failures, and timeouts all resolve to `{ ok: false, error }`.
+ *
+ * @param args - Invocation arguments (see {@link ResidentInvokeArgs}).
+ * @returns The normalized invocation result.
+ *
+ * @example
+ * ```ts
+ * const result = await invokeResident({
+ *   baseUrl: process.env.MICROSANDBOX_SERVICE_BASE_URL ?? "",
+ *   endpointPath: deployment.endpoint,
+ *   serviceKey: process.env.MICROSANDBOX_API_KEY,
+ *   payload: { handler: "handlers/weather.js", input: { city: "SF" }, context: { tenantId } },
+ * });
+ * ```
+ */
+declare function invokeResident(args: ResidentInvokeArgs): Promise<ResidentInvokeResult>;
+
+/**
+ * Pure protocol helpers shared by the in-sandbox plugin host server.
+ *
+ * These functions are intentionally dependency-free (no imports from other core
+ * modules) so they can be embedded verbatim inside the self-contained
+ * `PLUGIN_HOST_SERVER_SOURCE` script that runs in the bare sandbox image. Keep
+ * any change to this file mirrored in `pluginHostSource.ts`.
+ */
+/** Maximum serialized input size that travels inline as a base64 env var. */
+declare const INLINE_INPUT_LIMIT_BYTES: number;
+/** Default child-process handler timeout for `/invoke` (60s). */
+declare const DEFAULT_HANDLER_TIMEOUT_MS = 60000;
+/** Lower bound for a caller-supplied `/invoke` handler timeout (1s). */
+declare const MIN_HANDLER_TIMEOUT_MS = 1000;
+/** Upper bound for a caller-supplied `/invoke` handler timeout (5min). */
+declare const MAX_HANDLER_TIMEOUT_MS = 300000;
+/** Parsed `--type`/`--port` arguments for the host server process. */
+interface HostArgs {
+    /** Plugin type the host server is serving (e.g. `"weather"`). */
+    type: string;
+    /** TCP port the HTTP server binds. */
+    port: number;
+}
+/** Normalized `{ ok, result?, error? }` envelope returned to the caller. */
+interface HandlerEnvelope {
+    /** Whether the handler reported success. */
+    ok: boolean;
+    /** Handler result payload when `ok` is true. */
+    result?: unknown;
+    /** Human-readable error when `ok` is false. */
+    error?: string;
+}
+/** Connection selection passed to {@link buildConnectionPayload}. */
+interface ConnectionPayloadInput {
+    /** Single connection config (used when no `connections` list is given). */
+    connection?: Record<string, unknown>;
+    /** Multiple connection configs keyed by connection key. */
+    connections?: Array<{
+        key: string;
+        config: Record<string, unknown>;
+    }>;
+}
+/**
+ * Parse the host server's `--type` and `--port` argv values.
+ *
+ * Accepts both the spaced (`--type weather`) and joined (`--type=weather`)
+ * forms. Scans all tokens, so the leading `node`/`server.js` entries are safe.
+ *
+ * @param argv - Process argv array (typically `process.argv`)
+ * @returns The parsed plugin type and port
+ * @throws When `--type` is missing/empty or `--port` is not an integer in 1..65535
+ */
+declare function parseHostArgs(argv: readonly string[]): HostArgs;
+/**
+ * Resolve the child-process handler timeout for a `/invoke` request.
+ *
+ * Keeps the resident host's handler timeout at parity with the caller's
+ * `SandboxPluginExecutor` timeout: the caller forwards its clamped timeout in
+ * the request body so a custom value (e.g. 5s) is honored end-to-end instead of
+ * the client aborting while the host keeps running the handler.
+ *
+ * @param value - Raw `body.timeoutMs`; absent/non-finite falls back to the default
+ * @returns The timeout in milliseconds, clamped to 1s..5min
+ */
+declare function resolveHandlerTimeoutMs(value: unknown): number;
+/**
+ * Extract a normalized envelope from handler output that may contain stderr
+ * noise (Node warnings, logs) merged into stdout.
+ *
+ * Whole-output JSON is tried first, then lines are scanned bottom-up for the
+ * last object with a boolean `ok`. Empty output yields an explicit failure;
+ * any other non-envelope output is treated as plain-text success. Mirrors
+ * `SandboxPluginExecutor`'s envelope semantics.
+ *
+ * @param stdout - Combined handler output
+ * @returns The normalized envelope
+ */
+declare function parseHandlerEnvelope(stdout: string): HandlerEnvelope;
+/**
+ * Build the shell command that runs a plugin handler with `node`.
+ *
+ * The handler path is single-quote escaped as a literal POSIX shell argument.
+ *
+ * @param handlerPath - Absolute handler path
+ * @returns A `node '<handlerPath>'` command string
+ */
+declare function buildHandlerCommand(handlerPath: string): string;
+/**
+ * Base64-encode a value as UTF-8 JSON for transport through a shell env var.
+ *
+ * @param input - Value to serialize; `null`/`undefined` become JSON `null`
+ * @returns Base64-encoded JSON string
+ */
+declare function encodeInput(input: unknown): string;
+/**
+ * Build the `connection.json` envelope from an invocation's connection fields.
+ *
+ * The envelope is always an object so a handler can read a single connection
+ * (`connection`) and/or the full multi-connection list (`connections`)
+ * regardless of how many connections the caller selected. Mirrors
+ * `SandboxPluginExecutor.buildConnectionPayload`.
+ *
+ * @param args - Connection selection
+ * @returns The envelope, or `null` when no connection payload was supplied
+ */
+declare function buildConnectionPayload(args: ConnectionPayloadInput): Record<string, unknown> | null;
+
+/** Content version of the in-sandbox host server. Bump on any behavior change. */
+declare const PLUGIN_HOST_VERSION = "1.1.0";
+/**
+ * Self-contained Node HTTP server installed at `/root/.agents/.plugin-host/server.js`.
+ *
+ * Serves `GET /health`, `GET /meta`, and `POST /invoke` (no in-host auth; the
+ * service-key-authenticated proxy + loopback binding are the boundary). On
+ * invoke it writes input/connection temp files, runs `node <handler>` as a
+ * short child process (mirroring the existing `SandboxPluginExecutor` env/file
+ * contract), and returns the parsed stdout envelope. It reads `--type`/`--port`
+ * from argv.
+ *
+ * @remarks
+ * This string carries **no monorepo imports** — it executes in the bare sandbox
+ * image with only Node available. The pure helpers in `pluginHostProtocol.ts`
+ * are inlined here because the script cannot import them; keep the two in sync.
+ */
+declare const PLUGIN_HOST_SERVER_SOURCE: string;
+/**
+ * Content hash of the host server source (cache/versioning key).
+ *
+ * @returns A stable 16-character hex digest of `version:source`
+ */
+declare function pluginHostContentHash(): string;
+
+/** Reserved directory for the tenant plugin host runtime. */
+declare const PLUGIN_HOST_DIR = "/root/.agents/.plugin-host";
+/** Result of installing the in-sandbox plugin host server. */
+interface InstallPluginHostResult {
+    /** Sandbox-visible path of the installed host server script. */
+    path: string;
+    /** Content version of the installed host server. */
+    version: string;
+    /** Content hash of the installed host server. */
+    hash: string;
+    /** Whether files were written (`false` when already current). */
+    changed: boolean;
+}
+/**
+ * Ensure the in-sandbox plugin host server is present and current.
+ *
+ * Reads `version.json` and skips all writes when its hash already matches
+ * {@link pluginHostContentHash}; otherwise creates the reserved directory and
+ * writes both `server.js` and `version.json`.
+ *
+ * @param sandbox - Resolved tenant sandbox (caller resolves via SandboxLatticeManager)
+ * @returns Install result with the written path, version, hash, and whether it changed
+ * @example
+ * ```ts
+ * const { changed } = await installPluginHost(sandbox);
+ * ```
+ */
+declare function installPluginHost(sandbox: SandboxInstance): Promise<InstallPluginHostResult>;
+
 /** Stable failure codes emitted when capability bundles cannot be composed. */
 type CapabilityBundleMergeErrorCode = "CAPABILITY_BUNDLE_DUPLICATE_ID" | "CAPABILITY_BUNDLE_EMPTY_ALLOWED_TOOLS" | "CAPABILITY_BUNDLE_INVALID_CONFIG" | "CAPABILITY_BUNDLE_NULL_VALUE" | "CAPABILITY_BUNDLE_UNSAFE_KEY";
 /** Describes invalid capability bundle input rejected by the pure merger. */
@@ -13506,4 +14378,4 @@ declare function parseDirectRoomType(projectId: string): "human" | "bot" | null;
  */
 declare function isDirectRoom(projectId: string): boolean;
 
-export { AGENT_TASK_EVENT, type AddMessageParams, type AddMessageResult, Agent, type AgentClient, type AgentExecutor, AgentInstanceManager, type AgentLattice, AgentLatticeManager, type AgentLifecycleEventName, AgentManager, type AgentStreamExecutor, type AgentTaskCompletionInput, type AgentThreadInterface, type ApproveInterruptedTaskInput, type AssignTaskOwnerInput, BUILTIN_PLUGINS, BUILTIN_SKILLS, type BackendFactory, type BackendProtocol, type BeginRunFailure, type BeginRunInput, type BeginRunResult, type BeginRunSuccess, type BufferStats, CAPABILITY_TOOL_NAME_CONFLICT, type CacheEntry, type CalibrationProbe, CapabilityBundleMergeError, type CapabilityBundleMergeErrorCode, CapabilityBundleMerger, CapabilityBundleValidationError, type CapabilityBundleValidationErrorCode, type CapabilityGuardDenialCode, type CapabilityResourceSelector, type CapabilityToolMetadata, CapabilityToolNameConflictError, CapabilityToolRegistry, type CaseRunResult, type Chunk, ChunkBuffer, ChunkBufferLatticeManager, type ClaimMessagesOptions, CollectionLatticeManager, type ColumnInfo, type CompileSandboxPluginArgs, CompositeBackend, type ConflictItem, type ConnectAllChannelsOptions, ConnectionRegistry, ConsoleLoggerClient, type CreateSandboxProviderConfig, type CronFields, CustomMetricsClient, type CustomMiddlewareFactory, CustomMiddlewareRegistry, DEFAULT_CALIBRATION_PROBES, DEFAULT_CONNECT_TIMEOUT_MS, DEFAULT_DELAY_MS, DEFAULT_MAX_ATTEMPTS, type DatabaseConfig, type DatabaseType, DaytonaInstance, DaytonaProvider, type DaytonaProviderConfig, DefaultScheduleClient, DelegatedScopeNotQueueableError, type DeleteResult, DependencyResolver, type DispatchPreparation, DuplicateProjectRoomMessageIdempotencyKeyError, E2BInstance, E2BProvider, type E2BProviderConfig, EMPTY_CONTENT_WARNING, type EditResult, type EmbeddingsInfo, type EmbeddingsLatticeInterface, EmbeddingsLatticeManager, type EnsureMicrosandboxInput, type EvalRunService, type ExecutionAuthority, ExecutionAuthorityRegistry, type ExportBundle, type ExportContext, type ExportJob, type ExportableEntity, type ExportableEntityDefinition, ExportableEntityRegistry, type ExportableFile, type ExportableTypeInfo, type FileData, type FileInfo, FileSystemSkillStore, type FileSystemSkillStoreOptions, FilesystemBackend, type FsEntry, type GetThreadRunOwnerInput, type GrepMatch, HEALTH_CHECK_INTERVAL_MS, HEALTH_CHECK_TIMEOUT_MS, type IMessageQueueStore, type IMetricsServerClient, type ISqlDatabase, IdRemapper, type ImmediateDispatchPlan, type ImportApplyResolution, type ImportApplyResult, type ImportEntityResult, type ImportEntityStatus, type ImportPreviewResult, InMemoryA2AApiKeyStore, InMemoryAgentWebAppStore, InMemoryAssistantStore, InMemoryBindingStore, InMemoryCapabilityBundleStore, InMemoryChannelInstallationStore, InMemoryChunkBuffer, InMemoryCollectionStore, InMemoryDatabaseConfigStore, InMemoryLeaseStore, InMemoryMailboxStore, InMemoryMenuStore, InMemoryModelProviderStore, InMemoryOpenAuditStore, InMemoryOutboxStore, InMemoryProjectBotMembershipStore, InMemoryProjectMembershipStore, InMemoryProjectRoomCoordinator, InMemoryProjectRoomMessageStore, InMemoryProjectRoomReadStateStore, InMemoryProjectRoomStore, InMemoryTaskListStore, InMemoryTaskStore, InMemoryTaskWorkItemStore, InMemoryTenantStore, InMemoryThreadMessageQueueStore, InMemoryThreadStore, InMemoryUserPushSubscriptionStore, InMemoryUserStore, InMemoryUserTenantLinkStore, type InsertionItem, type JudgeVerdict, LINE_NUMBER_WIDTH, type LangGraphStateChecker, type LatticeAgentStepConfig, LatticeEval, type LatticeEvalBatchReport, type LatticeEvalCase, type LatticeEvalCaseType, type LatticeEvalCaseWithTemplate, type LatticeEvalConfig, type LatticeEvalLogEvent, type LatticeEvalLogLevel, LatticeEvalProject, type LatticeEvalProjectType, type LatticeEvalResult, type LatticeEvalRubric, LatticeEvalSuite, type LatticeEvalSuiteType, type LatticeEvalTemplate, LeaseAcquisitionTimeoutError, type LifecycleResult, type LifecycleWarning, LocalSandboxInstance, LocalSandboxProvider, type LocalSandboxProviderConfig, type LoggerLattice, LoggerLatticeManager, type LoopBreakerConfig, MAX_BACKOFF_MS, MAX_LINE_LENGTH, MAX_PACK_ENTRIES, MAX_PACK_FILE_BYTES, MAX_PACK_TOTAL_BYTES, type MailboxMessage, type MailboxStore, ManagedTaskStartError, type ManagedTaskStartOptions, type ManifestValidationResult, type McpClientFactory, type McpClientLike, type McpClientSession, type McpConnectionOptions, McpLatticeManager, type McpRegisterOptions, type McpServerId, type McpServerRuntime, type McpServerState, MemoryBackend, MemoryLatticeManager, MemoryQueueClient, MemoryScheduleStorage, type MergedPluginSkills, type MessageCompletedEvent, type MessageContent, type MessageContentPart, type MessageContentValue, type MessageFailedEvent, type MessageInterruptedEvent, type MessageLike, type MessageStartedEvent, MessageType, MetricsServerManager, MicrosandboxRemoteInstance, MicrosandboxRemoteProvider, type MicrosandboxRemoteProviderClient, type MicrosandboxRemoteProviderConfig, MicrosandboxServiceClient, type MicrosandboxServiceClientConfig, type MicrosandboxShellExecInput, type ModelConfig, type ModelLatticeInterface, ModelLatticeManager, MysqlDatabase, OutboxPoller, type OutboxPollerDeps, type OutputType, PACK_DIRECTORY_TIMEOUT_SECONDS, PLATFORM_SECRET_ENV_VARS, PLUGIN_CATALOG_CHANGED_TOPIC, type PackSourceInfo, type PendingMessage, PersonalAssistantConfig, PinoLoggerClient, type PluginConnectionScope, PluginRegistry, type PluginSources, type PostProcessTaskMutationResponseInput, PostgresDatabase, type PreviewError, ProjectBotMembershipIdConflictError, ProjectMutationMutex, type ProjectMutationScope, ProjectRoomMessageIdConflictError, type ProjectTaskAdmissionListener, type ProjectTaskAdmissionNotification, ProjectTaskAdmissionNotifier, type ProjectTaskAdmissionNotifierOptions, type ProjectTaskAssignmentScope, ProjectTaskOwnerPolicy, type ProjectTaskOwnerPolicyCode, ProjectTaskOwnerPolicyError, type ProjectTaskReassignmentAuthorization, type ProjectTaskReassignmentAuthorizationInput, type ProjectTaskReassignmentAuthorizer, type ProjectTaskReassignmentThreadValidationInput, type ProjectTaskReassignmentThreadValidator, type ProjectTaskRosterScope, PrometheusClient, type ProvisionFileSink, type QueryResult, type QueueLattice, QueueLatticeManager, type QueueMessage, QueueMode, type QueuePendingEvent, type QueueScope, ROOM_COORDINATOR_KEY, type ReassignProjectTaskInput, type ReconcileAllTenantTaskRunsInput, type ReconcileStaleTaskRunsInput, type ReconcileStaleTaskRunsResult, type ReconcileTaskDescriptionInput, type ReconcileTenantTaskRunsInput, type RejectInterruptedTaskInput, RemoteSandboxInstance, RemoteSandboxProvider, type RemoteSandboxProviderConfig, type RepeatedToolCallBreakerOptions, RepeatedToolCallError, type ReplyReadyEvent, type Resolution, type ResolutionAction, type ResolveAgentFn, type ResolvedConfig, type ResolvedPluginConnection, type ResolvedPluginSkill, type ResumeTaskResult, type RoomAgentMessageCallbackFailure, type RoomAgentMessageCommitted, type RoomAgentMessageInput, RoomAgentMessageService, type RoomAgentReplyInput, type RunAsLeaderOptions, type RunAsLeaderResult, type RunSandboxConfig, type RuntimeModelConfig, type RuntimeSkillSelection, SAFE_PATH_COMPONENT, SANDBOX_OPEN_GATEWAY_URL_ENV, SANDBOX_OPEN_TOKEN_ENV, type STTModelInfo, STTModelLattice, type STTModelLatticeInterface, STTModelLatticeManager, type SandboxFileInfo, type SandboxFileService, SandboxFilesystem, type SandboxGrepMatch, type SandboxInstance, type SandboxIsolationLevel, SandboxLatticeManager, type SandboxManagerProtocol, type SandboxOpenClientBundle, type SandboxOpenCredential, type SandboxOpenCredentialContext, type SandboxOpenCredentialProvider, type SandboxOpenCredentialProviderOptions, SandboxPluginExecutor, type SandboxPluginExecutorDeps, type SandboxPluginInvokeArgs, type SandboxPluginResult, type SandboxProvider, type SandboxProviderFactory, type SandboxProviderType, type SandboxResolver, type SandboxRunConfig, type SandboxShellService, SandboxSkillStore, type SandboxSkillStoreOptions, type SandboxVolumeDefinition, type ScheduleLattice, ScheduleLatticeManager, type SchedulerMiddlewareOptions, SemanticMetricsClient, type SettleRunInput, type SettleRunOutcome, type SharePayload, SimpleMemoryVectorStore, type SkillLattice, SkillLatticeManager, type SkillMeta, type SkillResource, SqlDatabaseManager, type StartLifecycleResult, type StartTaskExecutionInput, type StateAndStore, StateBackend, StoreBackend, type StoreLattice, StoreLatticeManager, type StoreType, type StoreTypeMap, type SubmitTaskReviewInput, TASK_RESPONSE_FINAL_WARNING_LIMIT, TASK_RESPONSE_PRIOR_WARNING_LIMIT, TASK_RESPONSE_SCALAR_MAX_BYTES, TOOL_RESULT_TOKEN_LIMIT, TRUNCATION_GUIDANCE, type TableInfo, type TableSchema, type TaskAgentInvocation, type TaskEvent, type TaskExecutionFailure, type TaskExecutionManaged, type TaskExecutionResult, type TaskExecutionServiceDeps, type TaskExecutionSuccess, type TaskLifecycleListener, type TaskLifecycleNotification, TaskLifecycleNotifier, TaskLifecycleService, type TaskLifecycleServiceDeps, type TaskListStore, type TaskResponseParseResult, type TaskRunBridge, type TaskRunBridgeDeps, TaskRunBridgeStoresRequiredError, type TaskRunLeaseHandle, TaskRunRegistry, type TaskSpec, TaskStatus, type TaskUpdatable, TeamAgentGraphBuilder, type TeamConfig, type TeamMiddlewareOptions, type TeamTask, type TeammateSpec, type TeammateToolsOptions, TenantPluginCatalog, type TenantPluginCatalogDeps, type TenantPlugins, type ThreadBuffer, type ThreadBufferConfig, type ThreadBusyEvent, type ThreadEndCode, ThreadEndError, type ThreadIdleEvent, type ThreadInfo, type ThreadQueueConfig, type ThreadRunLeaseHandle, type ThreadState, ThreadStatus, type ThreadStatusChangedEvent, TokenCache, type ToolDefinition, type ToolLattice, ToolLatticeManager, type TransferOwnerInput, type TransferOwnerResult, type TrustedAgentMessageDispatcher, type TrustedMessageOptions, type TryAcquireTaskRunInput, type TryAcquireThreadRunInput, type UnknownToolHandlerConfig, UnsafeUpstreamUrlError, type UnsafeUrlReason, type ValidateManifestArgs, type VectorStoreLatticeInterface, VectorStoreLatticeManager, type VectorStoreProviderLattice, VectorStoreProviderManager, VolumeFilesystem, type VolumeFsClient, type WithLeaseOptions, type WorkflowValidationError, type WriteResult, abortWorkflowRun, agentInstanceManager, agentLatticeManager, appendReconciliationWarning, appendUiFence, assertSafeUpstreamUrl, buildBundleFromDist, buildGrepResultsDict, buildInput, buildNamedVolumeName, buildRemotePackDirectoryCommand, buildSandboxMetadataEnv, buildSandboxOpenEnv, buildSkillFile, buildStateAnnotation, buildTableName, buildTaskMutationFallback, buildTaskNormalizationFallback, checkEmptyContent, clearEncryptionKeyCache, clearEvalRunService, clearSandboxOpenCredentialProviderForTests, collectPluginSources, collectionLatticeManager, compileInternal, compileSandboxPlugin, compileWorkflow, computeSandboxName, configureCoordinationLeaseStore, configurePluginCatalogSync, configureStores, connectAllChannels, connectionSecretFields, convertToConnection, createAgentNode, createAgentTeam, createCapabilityGuardMiddleware, createExecuteSqlQueryTool, createFileData, createInfoSqlTool, createListMetricsDataSourcesTool, createListMetricsServersTool, createListTablesSqlTool, createMapNode, createModelSelectorMiddleware, createNodeHandler, createProjectRoomMiddleware, createProjectTaskOwnerPolicy, createProjectTaskReassignmentAuthorizer, createQueryCheckerSqlTool, createQueryMetricDefinitionTool, createQueryMetricsListTool, createQuerySemanticMetricDataTool, createQuerySqlTool, createQueryTableDefinitionTool, createQueryTablesListTool, createRepeatedToolCallBreakerMiddleware, createResourceAddress, createSandboxProvider, createSandboxResolver, createSchedulerMiddleware, createSharePayload, createShellExecTool, createTaskExecutionService, createTaskLifecycleService, createTaskMiddleware, createTaskRunBridge, createTeamMiddleware, createTeammateTools, createTrustedAgentMessageDispatcher, createUnknownToolHandlerMiddleware, createWidgetMiddleware, decrypt, decryptConfigFields, describeCronExpression, documentLearningPlugin, documentParserPlugin, embeddingsLatticeManager, encrypt, encryptConfigFields, ensureBuiltinAgentsForTenant, ensurePluginSkillInSandbox, evaluateLatticeCaseWithLogs, eventBus, eventBus as eventBusDefault, executionAuthorityRegistry, extractAppsRef, extractFetcherError, extractLegacyRefs, extractOutput, fileDataToString, formatContentWithLineNumbers, formatGrepMatches, formatGrepResults, formatReadResponse, generateDirectBotProjectId, generateDirectHumanProjectId, generateToken, getAgentClient, getAgentClientAsync, getAgentConfig, getAllAgentConfigs, getAllBuiltInSkillMetas, getAllToolDefinitions, getBindingRegistry, getBuiltInSkillContent, getBuiltInSkillMeta, getBuiltInSkillNames, getCheckpointSaver, getChunkBuffer, getCollectionEntryCount, getCoordinationLeaseStore, getEmbeddingsClient, getEmbeddingsLattice, getEncryptionKey, getEvalRunService, getLoggerLattice, getMenuRegistry, getModelLattice, getNextCronTime, getOrCreateCollectionVectorStore, getPluginSkillManifestVersion, getQueueLattice, getReplicaId, getRuntimeCapabilityConfig, getRuntimeSkillSelection, getSTTClient, getSTTClientWithTenant, getSTTModelLattice, getSandBoxManager, getSandboxOpenCredential, getSandboxPluginCatalog, getScheduleLattice, getStoreLattice, getThreadRunOwner, getToolClient, getToolClientWithTenant, getToolDefinition, getToolLattice, getVectorStoreClient, getVectorStoreLattice, getVectorStoreProvider, getWorkflowSignal, globSearchFiles, grepMatchesFromFiles, grepSearchFiles, hasChunkBuffer, hasDelegatedWorkerToken, hasRuntimeCapabilityPolicy, invokeWithRetry, isBuiltInSkill, isDirectRoom, isMcpConnectionError, isPluginSkillAuthorizedInSandbox, isPluginSkillManagedInSandbox, isUsingDefaultKey, isValidCronExpression, isValidSandboxName, isValidSkillName, jsonSchemaToZod, listCollectionEntries, listSandboxProviderTypes, listTenantPlugins, loggerLatticeManager, mcpManager, mergeCapabilityBundles, mergePluginSkills, mergePluginSources, metricsServerManager, modelLatticeManager, nextBackoffDelay, normalizeSandboxName, ownTaskResponseField, parallelLimit, parseCronExpression, parseDirectRoomType, parseJudgeVerdict, parsePackSize, parseSkillFrontmatter, parseTaskResponse, parseYaml, performStringReplacement, postProcessTaskMutationResponse, prepareTaskDispatch, projectMutationMutex, projectRoomPlugin, projectTaskAdmissionNotifier, provisionSandboxOpenClient, publishPluginCatalogChanged, queueLatticeManager, readLoopBreakerConfig, reconcileAllTenantTaskRuns, reconcileStaleTaskRuns, reconcileTenantTaskRuns, registerAgentLattice, registerAgentLatticeWithTenant, registerAgentLattices, registerCheckpointSaver, registerChunkBuffer, registerEmbeddingsLattice, registerExistingTool, registerExistingToolWithTenant, registerLoggerLattice, registerModelLattice, registerModelLatticeForTenant, registerQueueLattice, registerSTTModelLattice, registerSandboxOpenCredentialProvider, registerSandboxProviderType, registerScheduleLattice, registerStoreLattice, registerTeammateAgent, registerToolLattice, registerVectorStoreLattice, registerVectorStoreProvider, registerWorkflowRun, removeCollectionVectorStore, renderTemplate, resetReplicaIdForTests, resolveEnabledPluginSkill, resolveJudgeModelKey, resolvePath, resolvePluginConnections, resolveSandboxPluginConnections, resolveTenantPluginSkill, roomCoordinatorConfig, runAsLeader, runRemotePackDirectory, safeTaskResponseId, sandboxLatticeManager, sanitizeToolCallId, scheduleLatticeManager, serializePluginMeta, serializeTaskMutationSuccess, serializeTaskNormalizationFallback, serializeTaskReadResponse, setBindingRegistry, setEvalRunService, setMenuRegistry, setSandboxPluginCatalog, skillLatticeManager, sqlDatabaseManager, storeLatticeManager, sttModelLatticeManager, taskLifecycleNotifier, taskRunLeaseKey, taskRunRegistry, threadRunLeaseKey, toJsonSchema, toSafeStateExpr, toolLatticeManager, truncateIfTooLong, tryAcquireTaskRun, tryAcquireThreadRun, unregisterTeammateAgent, unregisterWorkflowRun, updateFileData, validateAgentInput, validateCapabilityBundleInput, validateDSL, validateEncryptionKey, validatePackSourcePath, validatePath, validateRelativePath, validateSandboxPluginManifest, validateSkillName, validateToolInput, vectorStoreLatticeManager, vectorStoreProviderManager, withLease, withTimeout, wrapMcpToolWithUi };
+export { AGENT_TASK_EVENT, type AddMessageParams, type AddMessageResult, Agent, type AgentClient, type AgentExecutor, AgentInstanceManager, type AgentLattice, AgentLatticeManager, type AgentLifecycleEventName, AgentManager, type AgentStreamExecutor, type AgentTaskCompletionInput, type AgentThreadInterface, type ApproveInterruptedTaskInput, type AssignTaskOwnerInput, BUILTIN_PLUGINS, BUILTIN_SKILLS, type BackendFactory, type BackendProtocol, type BeginRunFailure, type BeginRunInput, type BeginRunResult, type BeginRunSuccess, type BufferStats, CAPABILITY_TOOL_NAME_CONFLICT, type CacheEntry, type CalibrationProbe, CapabilityBundleMergeError, type CapabilityBundleMergeErrorCode, CapabilityBundleMerger, CapabilityBundleValidationError, type CapabilityBundleValidationErrorCode, type CapabilityGuardDenialCode, type CapabilityResourceSelector, type CapabilityToolMetadata, CapabilityToolNameConflictError, CapabilityToolRegistry, type CaseRunResult, ChannelConnectionLeader, type ChannelConnectionLeaderDeps, type Chunk, ChunkBuffer, ChunkBufferLatticeManager, type ClaimMessagesOptions, CollectionLatticeManager, type ColumnInfo, type CompileSandboxPluginArgs, CompositeBackend, type ConflictItem, type ConnectAllChannelsOptions, type ConnectionPayloadInput, ConnectionRegistry, ConsoleLoggerClient, type CreateSandboxProviderConfig, type CronFields, CustomMetricsClient, type CustomMiddlewareFactory, CustomMiddlewareRegistry, DEFAULT_CALIBRATION_PROBES, DEFAULT_CONNECT_TIMEOUT_MS, DEFAULT_DELAY_MS, DEFAULT_HANDLER_TIMEOUT_MS, DEFAULT_MAX_ATTEMPTS, DEFAULT_RESIDENT_INVOKE_TIMEOUT_MS, type DatabaseConfig, type DatabaseType, DaytonaInstance, DaytonaProvider, type DaytonaProviderConfig, DefaultScheduleClient, DelegatedScopeNotQueueableError, type DeleteResult, DependencyResolver, type DispatchPreparation, DuplicateProjectRoomMessageIdempotencyKeyError, E2BInstance, E2BProvider, type E2BProviderConfig, EMPTY_CONTENT_WARNING, type EditResult, type EmbeddingsInfo, type EmbeddingsLatticeInterface, EmbeddingsLatticeManager, type EnsureMicrosandboxInput, type EvalRunService, type ExecutionAuthority, ExecutionAuthorityRegistry, type ExportBundle, type ExportContext, type ExportJob, type ExportableEntity, type ExportableEntityDefinition, ExportableEntityRegistry, type ExportableFile, type ExportableTypeInfo, type FileData, type FileInfo, FileSystemSkillStore, type FileSystemSkillStoreOptions, FilesystemBackend, type FsEntry, type GetThreadRunOwnerInput, type GrepMatch, HEALTH_CHECK_INTERVAL_MS, HEALTH_CHECK_TIMEOUT_MS, type HandlerEnvelope, type HostArgs, type IMessageQueueStore, type IMetricsServerClient, INLINE_INPUT_LIMIT_BYTES, type ISqlDatabase, IdRemapper, type ImmediateDispatchPlan, type ImportApplyResolution, type ImportApplyResult, type ImportEntityResult, type ImportEntityStatus, type ImportPreviewResult, InMemoryA2AApiKeyStore, InMemoryAgentWebAppStore, InMemoryAssistantStore, InMemoryBindingStore, InMemoryCapabilityBundleStore, InMemoryChannelInstallationStore, InMemoryChunkBuffer, InMemoryCollectionStore, InMemoryDatabaseConfigStore, InMemoryLeaseStore, InMemoryMailboxStore, InMemoryMenuStore, InMemoryModelProviderStore, InMemoryOpenAuditStore, InMemoryOutboxStore, InMemoryProjectBotMembershipStore, InMemoryProjectMembershipStore, InMemoryProjectRoomCoordinator, InMemoryProjectRoomMessageStore, InMemoryProjectRoomReadStateStore, InMemoryProjectRoomStore, InMemoryTaskListStore, InMemoryTaskStore, InMemoryTaskWorkItemStore, InMemoryTenantStore, InMemoryThreadMessageQueueStore, InMemoryThreadStore, InMemoryUserPushSubscriptionStore, InMemoryUserStore, InMemoryUserTenantLinkStore, type InsertionItem, type InstallPluginHostResult, type JudgeVerdict, LINE_NUMBER_WIDTH, type LangGraphStateChecker, type LatticeAgentStepConfig, LatticeEval, type LatticeEvalBatchReport, type LatticeEvalCase, type LatticeEvalCaseType, type LatticeEvalCaseWithTemplate, type LatticeEvalConfig, type LatticeEvalLogEvent, type LatticeEvalLogLevel, LatticeEvalProject, type LatticeEvalProjectType, type LatticeEvalResult, type LatticeEvalRubric, LatticeEvalSuite, type LatticeEvalSuiteType, type LatticeEvalTemplate, LeaseAcquisitionTimeoutError, type LifecycleResult, type LifecycleWarning, LocalSandboxInstance, LocalSandboxProvider, type LocalSandboxProviderConfig, type LoggerLattice, LoggerLatticeManager, type LoopBreakerConfig, MAX_BACKOFF_MS, MAX_HANDLER_TIMEOUT_MS, MAX_LINE_LENGTH, MAX_PACK_ENTRIES, MAX_PACK_FILE_BYTES, MAX_PACK_TOTAL_BYTES, MIN_HANDLER_TIMEOUT_MS, type MailboxMessage, type MailboxStore, ManagedTaskStartError, type ManagedTaskStartOptions, type ManifestValidationResult, type McpClientFactory, type McpClientLike, type McpClientSession, type McpConnectionOptions, McpLatticeManager, type McpRegisterOptions, type McpServerId, type McpServerRuntime, type McpServerState, MemoryBackend, MemoryLatticeManager, MemoryQueueClient, MemoryScheduleStorage, type MergedPluginSkills, type MessageCompletedEvent, type MessageContent, type MessageContentPart, type MessageContentValue, type MessageFailedEvent, type MessageInterruptedEvent, type MessageLike, type MessageStartedEvent, MessageType, MetricsServerManager, MicrosandboxRemoteInstance, MicrosandboxRemoteProvider, type MicrosandboxRemoteProviderClient, type MicrosandboxRemoteProviderConfig, MicrosandboxServiceClient, type MicrosandboxServiceClientConfig, type MicrosandboxShellExecInput, type ModelConfig, type ModelLatticeInterface, ModelLatticeManager, MysqlDatabase, OutboxPoller, type OutboxPollerDeps, type OutputType, PACK_DIRECTORY_TIMEOUT_SECONDS, PLATFORM_SECRET_ENV_VARS, PLUGIN_CATALOG_CHANGED_TOPIC, PLUGIN_HOST_DIR, PLUGIN_HOST_SERVER_SOURCE, PLUGIN_HOST_VERSION, type PackSourceInfo, type PendingMessage, PersonalAssistantConfig, PinoLoggerClient, type PluginConnectionScope, type PluginDeploymentRuntimeHealth, PluginDeploymentRuntimeRegistry, type PluginDeploymentRuntimeRegistryOptions, type PluginDeploymentServiceDeployOptions, type PluginDeploymentServiceDeployResult, type PluginDeploymentServiceLike, type PluginDeploymentServiceListEntry, type PluginDeploymentServiceMode, type PluginDeploymentServiceStatus, type PluginDeploymentServiceUndeployResult, PluginRegistry, type PluginSources, type PostProcessTaskMutationResponseInput, PostgresDatabase, type PreviewError, ProjectBotMembershipIdConflictError, ProjectMutationMutex, type ProjectMutationScope, ProjectRoomMessageIdConflictError, type ProjectTaskAdmissionListener, type ProjectTaskAdmissionNotification, ProjectTaskAdmissionNotifier, type ProjectTaskAdmissionNotifierOptions, type ProjectTaskAssignmentScope, ProjectTaskOwnerPolicy, type ProjectTaskOwnerPolicyCode, ProjectTaskOwnerPolicyError, type ProjectTaskReassignmentAuthorization, type ProjectTaskReassignmentAuthorizationInput, type ProjectTaskReassignmentAuthorizer, type ProjectTaskReassignmentThreadValidationInput, type ProjectTaskReassignmentThreadValidator, type ProjectTaskRosterScope, PrometheusClient, type ProvisionFileSink, type QueryResult, type QueueLattice, QueueLatticeManager, type QueueMessage, QueueMode, type QueuePendingEvent, type QueueScope, ROOM_COORDINATOR_KEY, type ReassignProjectTaskInput, type ReconcileAllTenantTaskRunsInput, type ReconcileStaleTaskRunsInput, type ReconcileStaleTaskRunsResult, type ReconcileTaskDescriptionInput, type ReconcileTenantTaskRunsInput, type RejectInterruptedTaskInput, RemoteSandboxInstance, RemoteSandboxProvider, type RemoteSandboxProviderConfig, type RepeatedToolCallBreakerOptions, RepeatedToolCallError, type ReplyReadyEvent, type ResidentConnectionConfig, type ResidentDeployment, type ResidentInvokeArgs, type ResidentInvokePayload, type ResidentInvokeResult, type ResidentRoutingDeps, type Resolution, type ResolutionAction, type ResolveAgentFn, type ResolvedConfig, type ResolvedPluginConnection, type ResolvedPluginSkill, type ResumeTaskResult, type RoomAgentCorrelatedInterruptInput, type RoomAgentMessageCallbackFailure, type RoomAgentMessageCommitted, type RoomAgentMessageInput, RoomAgentMessageService, type RoomAgentReplyInput, type RunAsLeaderOptions, type RunAsLeaderResult, type RunSandboxConfig, type RuntimeModelConfig, type RuntimeSkillSelection, SAFE_PATH_COMPONENT, SANDBOX_OPEN_GATEWAY_URL_ENV, SANDBOX_OPEN_TOKEN_ENV, type STTModelInfo, STTModelLattice, type STTModelLatticeInterface, STTModelLatticeManager, type SandboxFileInfo, type SandboxFileService, SandboxFilesystem, type SandboxGrepMatch, type SandboxInstance, type SandboxIsolationLevel, SandboxLatticeManager, type SandboxManagerProtocol, type SandboxOpenClientBundle, type SandboxOpenCredential, type SandboxOpenCredentialContext, type SandboxOpenCredentialProvider, type SandboxOpenCredentialProviderOptions, SandboxPluginExecutor, type SandboxPluginExecutorDeps, type SandboxPluginInvokeArgs, type SandboxPluginResult, type SandboxProvider, type SandboxProviderFactory, type SandboxProviderType, type SandboxResolver, type SandboxRunConfig, type SandboxShellService, SandboxSkillStore, type SandboxSkillStoreOptions, type SandboxVolumeDefinition, type ScheduleLattice, ScheduleLatticeManager, type SchedulerMiddlewareOptions, SemanticMetricsClient, type SettleRunInput, type SettleRunOutcome, type SharePayload, SimpleMemoryVectorStore, type SkillLattice, SkillLatticeManager, type SkillMeta, type SkillResource, SqlDatabaseManager, type StartLifecycleResult, type StartTaskExecutionInput, type StateAndStore, StateBackend, StoreBackend, type StoreLattice, StoreLatticeManager, type StoreType, type StoreTypeMap, type SubmitTaskReviewInput, TASK_RESPONSE_FINAL_WARNING_LIMIT, TASK_RESPONSE_PRIOR_WARNING_LIMIT, TASK_RESPONSE_SCALAR_MAX_BYTES, TOOL_RESULT_TOKEN_LIMIT, TRUNCATION_GUIDANCE, type TableInfo, type TableSchema, type TaskAgentInvocation, type TaskEvent, type TaskExecutionFailure, type TaskExecutionManaged, type TaskExecutionResult, type TaskExecutionServiceDeps, type TaskExecutionSuccess, type TaskLifecycleListener, type TaskLifecycleNotification, TaskLifecycleNotifier, TaskLifecycleService, type TaskLifecycleServiceDeps, type TaskListStore, type TaskResponseParseResult, type TaskRunBridge, type TaskRunBridgeDeps, TaskRunBridgeStoresRequiredError, type TaskRunLeaseHandle, TaskRunRegistry, type TaskSpec, TaskStatus, type TaskUpdatable, TeamAgentGraphBuilder, type TeamConfig, type TeamMiddlewareOptions, type TeamTask, type TeammateSpec, type TeammateToolsOptions, TenantPluginCatalog, type TenantPluginCatalogDeps, type TenantPlugins, type ThreadBuffer, type ThreadBufferConfig, type ThreadBusyEvent, type ThreadEndCode, ThreadEndError, type ThreadIdleEvent, type ThreadInfo, type ThreadQueueConfig, type ThreadRunLeaseHandle, type ThreadState, ThreadStatus, type ThreadStatusChangedEvent, TokenCache, type ToolDefinition, type ToolLattice, ToolLatticeManager, type TransferOwnerInput, type TransferOwnerResult, type TrustedAgentMessageDispatcher, type TrustedMessageOptions, type TryAcquireTaskRunInput, type TryAcquireThreadRunInput, type UnknownToolHandlerConfig, UnsafeUpstreamUrlError, type UnsafeUrlReason, type ValidateManifestArgs, type VectorStoreLatticeInterface, VectorStoreLatticeManager, type VectorStoreProviderLattice, VectorStoreProviderManager, VolumeFilesystem, type VolumeFsClient, type WithLeaseOptions, type WorkflowValidationError, type WriteResult, abortWorkflowRun, agentInstanceManager, agentLatticeManager, appendReconciliationWarning, appendUiFence, assertSafeUpstreamUrl, buildBundleFromDist, buildConnectionPayload, buildGrepResultsDict, buildHandlerCommand, buildInput, buildNamedVolumeName, buildRemotePackDirectoryCommand, buildSandboxMetadataEnv, buildSandboxOpenEnv, buildSkillFile, buildStateAnnotation, buildTableName, buildTaskMutationFallback, buildTaskNormalizationFallback, checkEmptyContent, clearEncryptionKeyCache, clearEvalRunService, clearSandboxOpenCredentialProviderForTests, collectPluginSources, collectionLatticeManager, compileInternal, compileSandboxPlugin, compileWorkflow, computeSandboxName, configureCoordinationLeaseStore, configurePluginCatalogSync, configureStores, connectAllChannels, connectionSecretFields, convertToConnection, createAgentNode, createAgentTeam, createCapabilityGuardMiddleware, createExecuteSqlQueryTool, createFileData, createInfoSqlTool, createListMetricsDataSourcesTool, createListMetricsServersTool, createListTablesSqlTool, createMapNode, createModelSelectorMiddleware, createNodeHandler, createProjectRoomMiddleware, createProjectTaskOwnerPolicy, createProjectTaskReassignmentAuthorizer, createQueryCheckerSqlTool, createQueryMetricDefinitionTool, createQueryMetricsListTool, createQuerySemanticMetricDataTool, createQuerySqlTool, createQueryTableDefinitionTool, createQueryTablesListTool, createRepeatedToolCallBreakerMiddleware, createResourceAddress, createSandboxProvider, createSandboxResolver, createSchedulerMiddleware, createSharePayload, createShellExecTool, createTaskExecutionService, createTaskLifecycleService, createTaskMiddleware, createTaskRunBridge, createTeamMiddleware, createTeammateTools, createTrustedAgentMessageDispatcher, createUnknownToolHandlerMiddleware, createWidgetMiddleware, decrypt, decryptConfigFields, describeCronExpression, disconnectAllChannels, documentLearningPlugin, documentParserPlugin, embeddingsLatticeManager, encodeInput, encrypt, encryptConfigFields, ensureBuiltinAgentsForTenant, ensurePluginSkillInSandbox, evaluateLatticeCaseWithLogs, eventBus, eventBus as eventBusDefault, executionAuthorityRegistry, extractAppsRef, extractFetcherError, extractLegacyRefs, extractOutput, fileDataToString, formatContentWithLineNumbers, formatGrepMatches, formatGrepResults, formatReadResponse, generateDirectBotProjectId, generateDirectHumanProjectId, generateToken, getAgentClient, getAgentClientAsync, getAgentConfig, getAllAgentConfigs, getAllBuiltInSkillMetas, getAllToolDefinitions, getBindingRegistry, getBuiltInSkillContent, getBuiltInSkillMeta, getBuiltInSkillNames, getCheckpointSaver, getChunkBuffer, getCollectionEntryCount, getCoordinationLeaseStore, getEmbeddingsClient, getEmbeddingsLattice, getEncryptionKey, getEvalRunService, getLoggerLattice, getMenuRegistry, getModelLattice, getNextCronTime, getOrCreateCollectionVectorStore, getPluginDeploymentService, getPluginSkillManifestVersion, getQueueLattice, getReplicaId, getRuntimeCapabilityConfig, getRuntimeSkillSelection, getSTTClient, getSTTClientWithTenant, getSTTModelLattice, getSandBoxManager, getSandboxOpenCredential, getSandboxPluginCatalog, getScheduleLattice, getStoreLattice, getThreadRunOwner, getToolClient, getToolClientWithTenant, getToolDefinition, getToolLattice, getVectorStoreClient, getVectorStoreLattice, getVectorStoreProvider, getWorkflowSignal, globSearchFiles, grepMatchesFromFiles, grepSearchFiles, handlerResultText, hasChunkBuffer, hasDelegatedWorkerToken, hasRuntimeCapabilityPolicy, installPluginHost, invokeResident, invokeWithRetry, isBuiltInSkill, isDirectRoom, isMcpConnectionError, isPluginSkillAuthorizedInSandbox, isPluginSkillManagedInSandbox, isUsingDefaultKey, isValidCronExpression, isValidSandboxName, isValidSkillName, jsonSchemaToZod, listCollectionEntries, listSandboxProviderTypes, listTenantPlugins, loggerLatticeManager, mcpManager, mergeCapabilityBundles, mergePluginSkills, mergePluginSources, metricsServerManager, modelLatticeManager, nextBackoffDelay, normalizeSandboxName, ownTaskResponseField, parallelLimit, parseCronExpression, parseDirectRoomType, parseHandlerEnvelope, parseHostArgs, parseJudgeVerdict, parsePackSize, parseSkillFrontmatter, parseTaskResponse, parseYaml, performStringReplacement, pluginHostContentHash, postProcessTaskMutationResponse, prepareTaskDispatch, projectMutationMutex, projectRoomPlugin, projectTaskAdmissionNotifier, provisionSandboxOpenClient, publishPluginCatalogChanged, queueLatticeManager, readLoopBreakerConfig, reconcileAllTenantTaskRuns, reconcileStaleTaskRuns, reconcileTenantTaskRuns, registerAgentLattice, registerAgentLatticeWithTenant, registerAgentLattices, registerCheckpointSaver, registerChunkBuffer, registerEmbeddingsLattice, registerExistingTool, registerExistingToolWithTenant, registerLoggerLattice, registerModelLattice, registerModelLatticeForTenant, registerQueueLattice, registerSTTModelLattice, registerSandboxOpenCredentialProvider, registerSandboxProviderType, registerScheduleLattice, registerStoreLattice, registerTeammateAgent, registerToolLattice, registerVectorStoreLattice, registerVectorStoreProvider, registerWorkflowRun, removeCollectionVectorStore, renderTemplate, resetReplicaIdForTests, resolveEnabledPluginSkill, resolveHandlerTimeoutMs, resolveJudgeModelKey, resolvePath, resolvePluginConnections, resolveSandboxPluginConnections, resolveTenantPluginSkill, roomCoordinatorConfig, runAsLeader, runRemotePackDirectory, safeTaskResponseId, sandboxLatticeManager, sanitizeToolCallId, scheduleLatticeManager, serializePluginMeta, serializeTaskMutationSuccess, serializeTaskNormalizationFallback, serializeTaskReadResponse, setBindingRegistry, setEvalRunService, setMenuRegistry, setPluginDeploymentService, setSandboxPluginCatalog, skillLatticeManager, sqlDatabaseManager, storeLatticeManager, sttModelLatticeManager, taskLifecycleNotifier, taskRunLeaseKey, taskRunRegistry, threadRunLeaseKey, toJsonSchema, toSafeStateExpr, toolLatticeManager, truncateIfTooLong, tryAcquireTaskRun, tryAcquireThreadRun, unregisterTeammateAgent, unregisterWorkflowRun, updateFileData, validateAgentInput, validateCapabilityBundleInput, validateDSL, validateEncryptionKey, validatePackSourcePath, validatePath, validateRelativePath, validateSandboxPluginManifest, validateSkillName, validateToolInput, vectorStoreLatticeManager, vectorStoreProviderManager, withLease, withTimeout, wrapMcpToolWithUi };