@axiom-lattice/core 6.4.0 → 7.0.0

package/dist/index.d.mts

@@ -8,7 +8,7 @@ import { BaseLanguageModelInput, LanguageModelLike } from '@langchain/core/langu
 import { CallbackManagerForLLMRun } from '@langchain/core/callbacks/manager';
 import { ChatResult } from '@langchain/core/outputs';
 import * as _axiom_lattice_protocols from '@axiom-lattice/protocols';
-import { LLMConfig, SemanticMetricsServerConfig, MetricMeta, MetricQueryResult, DataSource, SemanticMetricsQueryRequest, SemanticMetricsQueryResponse, TableQueryRequest, TableQueryResponse, ExecuteSqlQueryRequest, ExecuteSqlQueryResponse, MetricsServerType, MetricsServerConfig, ToolConfig, ToolExecutor, AgentConfig, MiddlewareType, GraphBuildOptions, DeepAgentConfig, MessageChunk, MessageChunkType, QueueLatticeProtocol, QueueConfig, QueueClient, QueueResult, ScheduleLatticeProtocol, ScheduleConfig, ScheduleClient, ScheduleStorage, TaskHandler, ScheduleOnceOptions, ScheduleCronOptions, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TrustedRunContext, QueuedExecutionMode, ThreadStore, AssistantStore, SkillStore, CollectionStore, WorkspaceStore, ProjectStore, DatabaseConfigStore, MetricsServerConfigStore, McpServerConfigStore, ModelProviderStore, UserStore, TenantStore, UserTenantLinkStore, WorkflowTrackingStore, EvalStore, ChannelInstallationStore, BindingRegistry, MenuRegistry, A2AApiKeyStore, OpenAuditStore, TaskStore, SharedResourceStore, ConnectionStore, TaskWorkItemStore, AgentWebAppStore, CapabilityBundleStore, ProjectRoomStore, ProjectMembershipStore, ProjectBotMembershipStore, ProjectRoomMessageStore, ProjectRoomReadStateStore, UserPushSubscriptionStore, LeaseStore, OutboxStore, PluginDeploymentStore, VectorStoreProvider, Thread, CreateThreadRequest, Assistant, CreateAssistantRequest, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, Skill, CreateSkillRequest, SkillStoreContext, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ModelProviderEntry, CreateModelProviderRequest, UpdateModelProviderRequest, ModelProviderStatus, ModelProviderModelEntry, ProviderModelInput, User, CreateUserRequest, UpdateUserRequest, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, A2AApiKeyRecord, CreateA2AApiKeyInput, UpdateA2AApiKeyInput, A2AApiKeyEntry, OpenAuditAppendInput, OpenAuditQuery, OpenAuditRecord, TaskMutationSnapshot, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, Collection, CreateCollectionRequest, UpdateCollectionRequest, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, ProjectRoom, ProjectMembership, ProjectBotMembership, ProjectRoomMessage, ProjectHumanRole, ProjectMembershipMutationResult, ProjectRoomReadState, UserPushSubscription, LeaseRecord, OutboxEvent, STTModelLatticeProtocol, STTConfig, STTClient, TranscriptionResult, LoggerLatticeProtocol, LoggerConfig, LoggerClient, LoggerContext, SkillConfig, SkillClient, PluginSkillDefinition, McpTool, McpUiResourcePayload, McpServerConfig, McpUiRef, ResourceResolver, ResourceAddress, ShareVisibility, OpenGrant, CreateShareRequest, ChannelAdapter, InterruptPolicy, ProjectTaskLifecycleAction, TaskBeliefState, PluginMeta, Plugin, PluginMetaOutput, SandboxPluginManifest, SandboxPluginToolDef, SandboxPluginDiagnostic, CapabilityPreview, CreateCapabilityBundleInput, UpdateCapabilityBundleInput, InternalStateField, InternalInput, InternalNode, InternalAgentNode, InternalMapNode, InternalDSL, ConnectionEntry } from '@axiom-lattice/protocols';
+import { LLMConfig, ModelProviderEntry, ModelProviderModelEntry, SemanticMetricsServerConfig, MetricMeta, MetricQueryResult, DataSource, SemanticMetricsQueryRequest, SemanticMetricsQueryResponse, TableQueryRequest, TableQueryResponse, ExecuteSqlQueryRequest, ExecuteSqlQueryResponse, MetricsServerType, MetricsServerConfig, ToolConfig, ToolExecutor, AgentConfig, MiddlewareType, GraphBuildOptions, DeepAgentConfig, MessageChunk, MessageChunkType, QueueLatticeProtocol, QueueConfig, QueueClient, QueueResult, ScheduleLatticeProtocol, ScheduleConfig, ScheduleClient, ScheduleStorage, TaskHandler, ScheduleOnceOptions, ScheduleCronOptions, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TrustedRunContext, QueuedExecutionMode, ThreadStore, AssistantStore, SkillStore, CollectionStore, WorkspaceStore, ProjectStore, DatabaseConfigStore, MetricsServerConfigStore, McpServerConfigStore, ModelProviderStore, UserStore, TenantStore, UserTenantLinkStore, WorkflowTrackingStore, EvalStore, ChannelInstallationStore, BindingRegistry, MenuRegistry, A2AApiKeyStore, OpenAuditStore, TaskStore, SharedResourceStore, ConnectionStore, TaskWorkItemStore, AgentWebAppStore, CapabilityBundleStore, ProjectRoomStore, ProjectMembershipStore, ProjectBotMembershipStore, ProjectRoomMessageStore, ProjectRoomReadStateStore, UserPushSubscriptionStore, LeaseStore, OutboxStore, PluginDeploymentStore, VectorStoreProvider, Thread, CreateThreadRequest, Assistant, CreateAssistantRequest, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, Skill, CreateSkillRequest, SkillStoreContext, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, CreateModelProviderRequest, UpdateModelProviderRequest, ModelProviderStatus, ProviderModelInput, User, CreateUserRequest, UpdateUserRequest, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, A2AApiKeyRecord, CreateA2AApiKeyInput, UpdateA2AApiKeyInput, A2AApiKeyEntry, OpenAuditAppendInput, OpenAuditQuery, OpenAuditRecord, TaskMutationSnapshot, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, Collection, CreateCollectionRequest, UpdateCollectionRequest, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, ProjectRoom, ProjectMembership, ProjectBotMembership, ProjectRoomMessage, ProjectHumanRole, ProjectMembershipMutationResult, ProjectRoomReadState, UserPushSubscription, LeaseRecord, OutboxEvent, STTModelLatticeProtocol, STTConfig, STTClient, TranscriptionResult, LoggerLatticeProtocol, LoggerConfig, LoggerClient, LoggerContext, SkillConfig, SkillClient, PluginSkillDefinition, McpTool, McpUiResourcePayload, McpServerConfig, McpUiRef, ResourceResolver, ResourceAddress, ShareVisibility, OpenGrant, CreateShareRequest, ChannelAdapter, InterruptPolicy, ProjectTaskLifecycleAction, TaskBeliefState, PluginMeta, Plugin, PluginMetaOutput, SandboxPluginManifest, SandboxPluginToolDef, SandboxPluginDiagnostic, CapabilityPreview, CreateCapabilityBundleInput, UpdateCapabilityBundleInput, InternalStateField, InternalInput, InternalNode, InternalAgentNode, InternalMapNode, InternalDSL, ConnectionEntry } from '@axiom-lattice/protocols';
 export { _axiom_lattice_protocols as Protocols };
 export { AgentConfig, AgentType, GraphBuildOptions, MemoryType, ProjectRoomTrustedRunContext, QueuedExecutionMode, TrustedRunContext, parseQueuedExecutionMode, parseTrustedRunContext } from '@axiom-lattice/protocols';
 import * as langchain from 'langchain';
@@ -232,6 +232,20 @@ declare class ModelLattice extends BaseChatModel {
         raw: BaseMessage;
         parsed: RunOutput;
     }>;
+    /**
+     * 解析出传给 chat model 构造器的 API Key。
+     *
+     * `noAuth` 表示上游不需要凭据（自建的 Ollama / vLLM / LM Studio 都是如此）。
+     * 此时返回空串而不是 `undefined` —— 两者都「没有 key」，但 SDK 的处理完全不同：
+     * `undefined` 会让 OpenAI SDK 抛错、也会让 `??` 回退到环境变量；空串则被视为
+     * 一个明确的「无凭据」，构造照常、请求照发，且不会把网关自己的部署凭据
+     * （`OPENAI_API_KEY` 等）发给租户配置的主机。
+     *
+     * @param config LLM 配置
+     * @param envName 该 provider 的默认环境变量名
+     * @returns API Key；无凭据时为空串
+     */
+    private resolveApiKey;
     /**
      * 创建LLM实例
      * @param config LLM配置
@@ -252,6 +266,13 @@ interface ModelLatticeInterface {
  */
 declare class ModelLatticeManager extends BaseLatticeManager<ModelLatticeInterface> {
     private static _instance;
+    /**
+     * When a tenant was last found to have no default model, keyed by tenant.
+     *
+     * Only the absence is recorded — a tenant that has one gets it registered by
+     * the base class. See {@link TENANT_DEFAULT_MISS_TTL_MS}.
+     */
+    private readonly tenantDefaultMissAt;
     /**
      * 获取ModelLatticeManager单例实例
      */
@@ -319,6 +340,67 @@ declare class ModelLatticeManager extends BaseLatticeManager<ModelLatticeInterfa
      * @param key Lattice键名
      */
     hasLatticeWithTenant(tenantId: string, key: string): boolean;
+    /**
+     * 获取指定租户的模型Lattice（异步，未命中时从 store 回退加载）
+     *
+     * 内存未命中且该 key 是租户自有模型（`${providerId}/${modelId}`）时，
+     * 从 `modelProvider` store 读一行并注册进内存。
+     *
+     * @param tenantId 租户ID
+     * @param key Lattice键名
+     */
+    getModelLatticeOrLoad(tenantId: string, key: string): Promise<ModelLatticeInterface | undefined>;
+    /**
+     * 检查指定租户的模型Lattice是否存在（异步，未命中时从 store 回退加载）
+     *
+     * @param tenantId 租户ID
+     * @param key Lattice键名
+     */
+    hasModelLatticeOrLoad(tenantId: string, key: string): Promise<boolean>;
+    /**
+     * 从 store 物化一个本进程从未注册过的模型。
+     *
+     * `BaseLatticeManager` 在内存未命中时调用这里（`getOrLoadWithTenant` /
+     * `hasOrLoadWithTenant`），注册由基类完成。
+     *
+     * **只有租户自有的模型会从 store 加载。** key 必须是 `${providerId}/${modelId}`
+     * 形状；解析不出来的裸 key（部署在 `default` 命名空间下注册的
+     * `"default"`、`"qwen3.8-flash"` 等）一律返回 undefined —— 它们不归任何租户，
+     * 由调用方回退到 `default` 命名空间（见 `resolveModelLatticeForTenant`）。
+     *
+     * 这是多副本下「正确性不依赖副本之间同步」的落点：一个从未跑过 discovery
+     * 的副本，第一次用到某个模型时会读**共享的** PostgreSQL，之后留在本地缓存里。
+     *
+     * 任何失败（store 未注册、行不存在、provider 或 model 被禁用）都返回
+     * undefined，不抛错 —— 解析不到模型应由调用方判断，而不是让基类的加载路径炸掉。
+     *
+     * @param tenantId 租户ID
+     * @param key Lattice键名（`${providerId}/${modelId}`）
+     */
+    protected loadItemFromStore(tenantId: string, key: string): Promise<ModelLatticeInterface | undefined>;
+    /**
+     * Forget that a tenant had no default model.
+     *
+     * The absence is cached for a short window (see
+     * {@link TENANT_DEFAULT_MISS_TTL_MS}), which is a trade: without it every
+     * legacy tenant would read the store on every fallback resolution, with it a
+     * newly named default is ignored until the window lapses. A caller that has
+     * just changed the tenant's models knows better than the window does, so it
+     * says so.
+     *
+     * @param tenantId 租户ID
+     */
+    forgetTenantDefaultMiss(tenantId: string): void;
+    /**
+     * Resolve a tenant's own default model, if they named one.
+     *
+     * `undefined` means they have not, and the caller falls through to the
+     * deployment's model registered under the same key.
+     *
+     * @param store The tenant's model provider store
+     * @param tenantId 租户ID
+     */
+    private loadTenantDefault;
     /**
      * 获取指定租户的所有模型Lattice
      * @param tenantId 租户ID
@@ -353,6 +435,115 @@ declare const registerModelLattice: (key: string, config: ModelConfig) => void;
 declare const registerModelLatticeForTenant: (tenantId: string, key: string, config: ModelConfig) => void;
 declare const getModelLattice: (key: string) => ModelLatticeInterface;
 
+/**
+ * Build the runtime `LLMConfig` for one model of a tenant provider.
+ *
+ * One implementation with two callers: the gateway's provider service (when a
+ * model is registered after discovery or selection) and the model registry's
+ * own lazy loader (when a replica meets a model it has never registered — see
+ * `ModelLatticeManager.loadItemFromStore`).
+ *
+ * It lives in core, not the gateway, because the loader runs inside the
+ * registry. Keeping one copy is the point: two implementations of "how a
+ * provider row becomes a runtime config" would drift, and the security rules
+ * below are exactly the kind that must not drift.
+ */
+
+/**
+ * Thrown when a provider names an LLM provider this build cannot run.
+ *
+ * Defined here rather than borrowed from the gateway so core can enforce the
+ * rule without depending on gateway error types; the gateway wraps it back
+ * into its own `ModelProviderServiceError` at the API boundary.
+ */
+declare class UnsupportedModelProviderError extends Error {
+    readonly llmProvider: string;
+    readonly code = "UNSUPPORTED_PROTOCOL";
+    constructor(llmProvider: string);
+}
+/**
+ * Turn a provider row and one of its model rows into a runtime config.
+ *
+ * The model's own `extra` is merged first and the provider's settings are
+ * applied on top, so a per-model config can tune behaviour but cannot decide
+ * *where* the request goes: `provider`, `apiKey`, `baseURL` and `model` are
+ * always the provider's. `apiKeyEnvName` is stripped — it names a process
+ * environment variable to read a credential from, which is what makes a
+ * keyless provider able to borrow the gateway's own deployment key.
+ *
+ * @param provider - The owning provider
+ * @param model - The model row
+ * @returns A config ready for `new ModelLattice(config)`
+ * @throws {UnsupportedModelProviderError} When the provider is not runnable here
+ */
+declare function buildModelLlmConfig(provider: ModelProviderEntry, model: ModelProviderModelEntry): LLMConfig;
+
+/**
+ * Tenant-scoped model resolution.
+ *
+ * One entry point for every consumer that needs "the model this run should
+ * use", so the policy lives in one place instead of being re-derived — and
+ * drifting — at ten call sites.
+ *
+ * @module @axiom-lattice/core/model_lattice/resolveModelLattice
+ */
+
+/**
+ * Resolve a model for a tenant, falling back to the deployment namespace.
+ *
+ * Order:
+ *
+ * 1. **The tenant's own models.** A miss is loaded from the `modelProvider`
+ *    store by `ModelLatticeManager.loadItemFromStore`, then cached in this
+ *    process. That is what lets a replica which never ran discovery — or a
+ *    gateway that just restarted — still execute a tenant's model, without any
+ *    replica-to-replica synchronisation.
+ * 2. **The `default` namespace**, where the deployment registers models at
+ *    boot via `registerModelLattice`. Those are not tenant-owned, and a bare
+ *    key such as `"default"` or `"qwen3.8-flash"` resolves only here.
+ *
+ * Step 2 mirrors what tools already do in `AgentParamsBuilder`
+ * (`getToolLatticeWithTenant(tenantId, key) ?? getToolLatticeWithTenant("default", key)`),
+ * and is what keeps legacy agent configs — which name bare keys — working
+ * unchanged for every tenant.
+ *
+ * The key `"default"` is special: step 1 resolves it to the model the *tenant*
+ * marked as their default, so callers that fall back to it get the tenant's
+ * choice without knowing any of this. A tenant that marked none resolves to
+ * nothing there and lands on the deployment's model in step 2, exactly as
+ * before.
+ *
+ * @param tenantId - The tenant the run belongs to
+ * @param modelKey - A tenant model key (`${providerId}/${modelId}`), the
+ *   `"default"` fallback key, or a bare legacy key
+ * @returns The lattice, or undefined when neither namespace has it
+ */
+declare function resolveModelLatticeForTenant(tenantId: string, modelKey: string): Promise<ModelLatticeInterface | undefined>;
+/**
+ * Whether a tenant can resolve a model key.
+ *
+ * The existence-check counterpart of {@link resolveModelLatticeForTenant}:
+ * same two namespaces, same lazy loading.
+ *
+ * @param tenantId - The tenant the run belongs to
+ * @param modelKey - A tenant model key or a bare legacy key
+ */
+declare function hasModelLatticeForTenant(tenantId: string, modelKey: string): Promise<boolean>;
+/**
+ * The models a tenant may choose from: their own, plus the deployment's.
+ *
+ * The list counterpart of the two resolvers above. Unlike them it cannot be
+ * lazy — enumerating a tenant's models does not name any key to load — so it
+ * returns what this process currently holds. A model appears here once
+ * something has resolved it, or after the tenant's registry is hydrated.
+ *
+ * Tenant entries win on key collision, matching the tool lookup in
+ * `AgentParamsBuilder`.
+ *
+ * @param tenantId - The tenant whose models to list
+ */
+declare function listModelLatticesForTenant(tenantId: string): ModelLatticeInterface[];
+
 /**
  * SQL Tool Types
  * Type definitions for SQL database tools
@@ -1650,10 +1841,18 @@ interface SandboxFileService {
     createDirectory(path: string): Promise<void>;
 }
 interface SandboxShellService {
+    /**
+     * Execute a command in the sandbox shell.
+     *
+     * @param params.command - Shell command to run.
+     * @param params.exec_dir - Working directory (optional).
+     * @param params.timeoutMs - Maximum execution time in **milliseconds** (optional).
+     */
     execCommand(params: {
         command: string;
         exec_dir?: string;
-        timeout?: number;
+        /** Maximum execution time in milliseconds. */
+        timeoutMs?: number;
     }): Promise<{
         output: string;
         exit_code: number;
@@ -6239,7 +6438,8 @@ interface MicrosandboxShellExecInput {
     sandboxName: string;
     command: string;
     exec_dir?: string;
-    timeout?: number;
+    /** Maximum execution time in milliseconds. */
+    timeoutMs?: number;
 }
 interface MicrosandboxServiceClientConfig {
     baseURL: string;
@@ -6652,8 +6852,8 @@ declare class RemoteSandboxInstance implements SandboxInstance {
 declare const MAX_PACK_ENTRIES = 10000;
 declare const MAX_PACK_FILE_BYTES: number;
 declare const MAX_PACK_TOTAL_BYTES: number;
-/** Maximum wall-clock time for one remote/local folder pack shell invocation. */
-declare const PACK_DIRECTORY_TIMEOUT_SECONDS: number;
+/** Maximum wall-clock time for one remote/local folder pack shell invocation, in milliseconds. */
+declare const PACK_DIRECTORY_TIMEOUT_MS: number;
 /** Result of validating a pack source path. */
 interface PackSourceInfo {
     /** Basename of the source folder, e.g. `reports`. */
@@ -7623,20 +7823,17 @@ declare const DEFAULT_CALIBRATION_PROBES: CalibrationProbe[];
 /**
  * Resolve the judge model for an eval project: an explicit judgeModelKey wins;
  * otherwise the model registered under the "default" key (the convention apps
- * use — see examples/deep_research), then the first registered model as a last
- * resort. Throws only when no model is registered at all.
+ * use — see examples/deep_research), then the first available model as a last
+ * resort. Throws only when no model is available at all.
  *
- * Phase 1 resolves against the `default` tenant, like every other consumer of
- * the model registry: models are only ever registered there (see
- * `ModelProviderService.PHASE1_REGISTRY_TENANT`), and a single consumer that
- * resolves by tenant while the rest do not is how this drifted out of sync
- * with `eval-runner`. Phase 2 moves the whole set together.
+ * `available` arrives already scoped to the project's tenant. The caller holds
+ * both the tenant and the async context needed to load a model this replica
+ * has not seen — resolving here would hide both, which is exactly how this
+ * drifted out of sync with `eval-runner` before.
  */
-declare function resolveJudgeModelKey(explicitKey: string | undefined, manager: {
-    getAllLattices: () => Array<{
-        key: string;
-    }>;
-}): string;
+declare function resolveJudgeModelKey(explicitKey: string | undefined, available: ReadonlyArray<{
+    key: string;
+}>): string;
 /**
  * Manages a project with multiple evaluation suites.
  * Registers a per-project judge agent (keyed by project name and tenant)
@@ -9209,6 +9406,8 @@ interface ProjectMutationScope {
 declare class ProjectMutationMutex {
     private readonly queues;
     private readonly active;
+    /** Project keys already held by the current async context (reentrancy). */
+    private readonly held;
     /** Runs one mutation after all earlier mutations for the same Tenant and Project. */
     runExclusive<T>(scope: ProjectMutationScope, operation: () => Promise<T>, signal?: AbortSignal): Promise<T>;
     /** Returns the number of operations queued behind the current holder. */
@@ -9917,6 +10116,13 @@ interface RoomAgentInterruptInput {
     sourceRoomMessageId: string;
     inputMessageId: string;
 }
+/** Source-less HITL interrupt input whose scope is derived from the validated durable membership. */
+interface RoomAgentCorrelatedInterruptInput {
+    tenantId: string;
+    membershipId: string;
+    correlationKey: string;
+    text: string;
+}
 /**
  * Observes a canonical Agent-authored room message after durable persistence.
  *
@@ -9981,6 +10187,16 @@ declare class RoomAgentMessageService {
      * @returns A deep clone of the canonical idempotent room message.
      */
     postInterrupt(input: RoomAgentInterruptInput): Promise<ProjectRoomMessage>;
+    /**
+     * Persists a correlated HITL interrupt that has no human source message.
+     *
+     * @param input Explicit tenant, active membership, caller-supplied correlation key, and text.
+     * @returns A deep clone of the canonical idempotent room message.
+     * @remarks Business-agnostic: the caller owns the correlation key. Scope is
+     * validated against the durable membership; no source message is required.
+     */
+    postCorrelatedInterrupt(input: RoomAgentCorrelatedInterruptInput): Promise<ProjectRoomMessage>;
+    private persistScoped;
     private persistDerived;
     private persist;
     private notifyCommitted;
@@ -11585,17 +11801,51 @@ declare function clearEncryptionKeyCache(): void;
  * @returns A shallow copy with the named string fields encrypted.
  */
 declare function encryptConfigFields(config: Record<string, unknown>, fields?: string[]): Record<string, unknown>;
+/**
+ * Decrypt a value without ever throwing.
+ *
+ * Returns the plaintext when the value decrypts with the current key. Any
+ * failure (wrong key, corrupt data, or a legacy plaintext value whose field was
+ * only later marked secret) is logged as a warning and degrades to an empty
+ * string. This keeps batch reads — e.g. listing every configured connection —
+ * from failing wholesale because a single record cannot be decrypted, while
+ * never returning stored ciphertext as if it were plaintext.
+ *
+ * @param value - Stored value (ciphertext or, for legacy rows, plaintext).
+ * @param context - Optional label describing the value, included in the warning.
+ * @returns The decrypted plaintext, or `""` when it cannot be decrypted.
+ */
+declare function safeDecrypt(value: string, context?: string): string;
+/**
+ * Heuristic: does this stored string look like our AES-GCM ciphertext?
+ *
+ * Our {@link encrypt} output is the canonical base64 encoding of
+ * `salt(32) + iv(16) + ciphertext + authTag(16)`, so it always decodes to at
+ * least 64 bytes and re-encodes byte-for-byte. Plaintext secrets (API keys,
+ * UUIDs, JWTs, connection keys) fail one or both checks. Used by one-time
+ * remediation to decide which legacy values still need encrypting; a value that
+ * merely *looks* encrypted is left untouched so real ciphertext is never
+ * destroyed.
+ *
+ * @param value - Stored value to inspect.
+ * @returns `true` when the value is plausibly our ciphertext.
+ */
+declare function isEncryptedValue(value: string): boolean;
 /**
  * Decrypt the named fields of a stored config record.
  *
  * Inverse of {@link encryptConfigFields}. Only non-empty string values are
- * touched; a decryption failure throws so corrupt/mis-keyed data never leaks
- * as ciphertext to callers.
+ * touched. A field that cannot be decrypted (wrong key, corrupt data, or a
+ * plaintext value whose key was later marked secret) is **not** fatal: it is
+ * replaced with an empty string and a warning is logged, so reading a whole
+ * collection (e.g. `list_connections`) still returns every configured entry
+ * instead of failing as a batch. The stored ciphertext is never returned as
+ * plaintext.
  *
  * @param config Stored config record (may contain ciphertext).
  * @param fields Field names to decrypt. Empty/undefined returns `config`.
- * @returns A shallow copy with the named string fields decrypted.
- * @throws {Error} If a declared field cannot be decrypted.
+ * @returns A shallow copy with the named string fields decrypted (or emptied
+ *   when a field cannot be decrypted).
  */
 declare function decryptConfigFields(config: Record<string, unknown>, fields?: string[]): Record<string, unknown>;
 
@@ -12028,7 +12278,7 @@ interface ResidentRoutingDeps {
      * @param pluginType - Plugin type addressed by the invocation.
      */
     ensureRunning?(tenantId: string, pluginType: string): Promise<void>;
-    /** Sandbox-service base URL (`MICROSANDBOX_SERVICE_URL`). */
+    /** Sandbox-service base URL (`MICROSANDBOX_SERVICE_BASE_URL`). */
     baseUrl: string;
     /** Sandbox-service API key, sent as `Authorization: Bearer` when present. */
     serviceKey?: string;
@@ -12110,6 +12360,22 @@ interface SandboxPluginResult {
     /** Raw stderr captured from the handler (currently always empty). */
     stderr: string;
 }
+/**
+ * Normalize a successful handler outcome into the text surfaced as the tool
+ * result (and the MCP App `ui/notifications/tool-result` payload).
+ *
+ * Handlers must emit `{ ok: true, result: <payload> }`. When a handler reports
+ * success but omits `result` (a contract violation), fall back to the raw
+ * stdout so the data stays visible instead of collapsing to the string
+ * `"null"` (which hides the mistake behind a valid-looking result).
+ *
+ * @param result - Normalized handler outcome.
+ * @returns The text to surface to the caller / MCP App View.
+ */
+declare function handlerResultText(result: {
+    result?: unknown;
+    stdout?: string;
+}): string;
 /**
  * Executes tenant sandbox plugin handlers via the tenant sandbox shell.
  *
@@ -13015,7 +13281,7 @@ interface ResidentInvokeArgs {
  * @example
  * ```ts
  * const result = await invokeResident({
- *   baseUrl: process.env.MICROSANDBOX_SERVICE_URL ?? "",
+ *   baseUrl: process.env.MICROSANDBOX_SERVICE_BASE_URL ?? "",
  *   endpointPath: deployment.endpoint,
  *   serviceKey: process.env.MICROSANDBOX_API_KEY,
  *   payload: { handler: "handlers/weather.js", input: { city: "SF" }, context: { tenantId } },
@@ -14343,4 +14609,4 @@ declare function parseDirectRoomType(projectId: string): "human" | "bot" | null;
  */
 declare function isDirectRoom(projectId: string): boolean;
 
-export { AGENT_TASK_EVENT, type AddMessageParams, type AddMessageResult, Agent, type AgentClient, type AgentExecutor, AgentInstanceManager, type AgentLattice, AgentLatticeManager, type AgentLifecycleEventName, AgentManager, type AgentStreamExecutor, type AgentTaskCompletionInput, type AgentThreadInterface, type ApproveInterruptedTaskInput, type AssignTaskOwnerInput, BUILTIN_PLUGINS, BUILTIN_SKILLS, type BackendFactory, type BackendProtocol, type BeginRunFailure, type BeginRunInput, type BeginRunResult, type BeginRunSuccess, type BufferStats, CAPABILITY_TOOL_NAME_CONFLICT, type CacheEntry, type CalibrationProbe, CapabilityBundleMergeError, type CapabilityBundleMergeErrorCode, CapabilityBundleMerger, CapabilityBundleValidationError, type CapabilityBundleValidationErrorCode, type CapabilityGuardDenialCode, type CapabilityResourceSelector, type CapabilityToolMetadata, CapabilityToolNameConflictError, CapabilityToolRegistry, type CaseRunResult, ChannelConnectionLeader, type ChannelConnectionLeaderDeps, type Chunk, ChunkBuffer, ChunkBufferLatticeManager, type ClaimMessagesOptions, CollectionLatticeManager, type ColumnInfo, type CompileSandboxPluginArgs, CompositeBackend, type ConflictItem, type ConnectAllChannelsOptions, type ConnectionPayloadInput, ConnectionRegistry, ConsoleLoggerClient, type CreateSandboxProviderConfig, type CronFields, CustomMetricsClient, type CustomMiddlewareFactory, CustomMiddlewareRegistry, DEFAULT_CALIBRATION_PROBES, DEFAULT_CONNECT_TIMEOUT_MS, DEFAULT_DELAY_MS, DEFAULT_HANDLER_TIMEOUT_MS, DEFAULT_MAX_ATTEMPTS, DEFAULT_RESIDENT_INVOKE_TIMEOUT_MS, type DatabaseConfig, type DatabaseType, DaytonaInstance, DaytonaProvider, type DaytonaProviderConfig, DefaultScheduleClient, DelegatedScopeNotQueueableError, type DeleteResult, DependencyResolver, type DispatchPreparation, DuplicateProjectRoomMessageIdempotencyKeyError, E2BInstance, E2BProvider, type E2BProviderConfig, EMPTY_CONTENT_WARNING, type EditResult, type EmbeddingsInfo, type EmbeddingsLatticeInterface, EmbeddingsLatticeManager, type EnsureMicrosandboxInput, type EvalRunService, type ExecutionAuthority, ExecutionAuthorityRegistry, type ExportBundle, type ExportContext, type ExportJob, type ExportableEntity, type ExportableEntityDefinition, ExportableEntityRegistry, type ExportableFile, type ExportableTypeInfo, type FileData, type FileInfo, FileSystemSkillStore, type FileSystemSkillStoreOptions, FilesystemBackend, type FsEntry, type GetThreadRunOwnerInput, type GrepMatch, HEALTH_CHECK_INTERVAL_MS, HEALTH_CHECK_TIMEOUT_MS, type HandlerEnvelope, type HostArgs, type IMessageQueueStore, type IMetricsServerClient, INLINE_INPUT_LIMIT_BYTES, type ISqlDatabase, IdRemapper, type ImmediateDispatchPlan, type ImportApplyResolution, type ImportApplyResult, type ImportEntityResult, type ImportEntityStatus, type ImportPreviewResult, InMemoryA2AApiKeyStore, InMemoryAgentWebAppStore, InMemoryAssistantStore, InMemoryBindingStore, InMemoryCapabilityBundleStore, InMemoryChannelInstallationStore, InMemoryChunkBuffer, InMemoryCollectionStore, InMemoryDatabaseConfigStore, InMemoryLeaseStore, InMemoryMailboxStore, InMemoryMenuStore, InMemoryModelProviderStore, InMemoryOpenAuditStore, InMemoryOutboxStore, InMemoryProjectBotMembershipStore, InMemoryProjectMembershipStore, InMemoryProjectRoomCoordinator, InMemoryProjectRoomMessageStore, InMemoryProjectRoomReadStateStore, InMemoryProjectRoomStore, InMemoryTaskListStore, InMemoryTaskStore, InMemoryTaskWorkItemStore, InMemoryTenantStore, InMemoryThreadMessageQueueStore, InMemoryThreadStore, InMemoryUserPushSubscriptionStore, InMemoryUserStore, InMemoryUserTenantLinkStore, type InsertionItem, type InstallPluginHostResult, type JudgeVerdict, LINE_NUMBER_WIDTH, type LangGraphStateChecker, type LatticeAgentStepConfig, LatticeEval, type LatticeEvalBatchReport, type LatticeEvalCase, type LatticeEvalCaseType, type LatticeEvalCaseWithTemplate, type LatticeEvalConfig, type LatticeEvalLogEvent, type LatticeEvalLogLevel, LatticeEvalProject, type LatticeEvalProjectType, type LatticeEvalResult, type LatticeEvalRubric, LatticeEvalSuite, type LatticeEvalSuiteType, type LatticeEvalTemplate, LeaseAcquisitionTimeoutError, type LifecycleResult, type LifecycleWarning, LocalSandboxInstance, LocalSandboxProvider, type LocalSandboxProviderConfig, type LoggerLattice, LoggerLatticeManager, type LoopBreakerConfig, MAX_BACKOFF_MS, MAX_HANDLER_TIMEOUT_MS, MAX_LINE_LENGTH, MAX_PACK_ENTRIES, MAX_PACK_FILE_BYTES, MAX_PACK_TOTAL_BYTES, MIN_HANDLER_TIMEOUT_MS, type MailboxMessage, type MailboxStore, ManagedTaskStartError, type ManagedTaskStartOptions, type ManifestValidationResult, type McpClientFactory, type McpClientLike, type McpClientSession, type McpConnectionOptions, McpLatticeManager, type McpRegisterOptions, type McpServerId, type McpServerRuntime, type McpServerState, MemoryBackend, MemoryLatticeManager, MemoryQueueClient, MemoryScheduleStorage, type MergedPluginSkills, type MessageCompletedEvent, type MessageContent, type MessageContentPart, type MessageContentValue, type MessageFailedEvent, type MessageInterruptedEvent, type MessageLike, type MessageStartedEvent, MessageType, MetricsServerManager, MicrosandboxRemoteInstance, MicrosandboxRemoteProvider, type MicrosandboxRemoteProviderClient, type MicrosandboxRemoteProviderConfig, MicrosandboxServiceClient, type MicrosandboxServiceClientConfig, type MicrosandboxShellExecInput, type ModelConfig, type ModelLatticeInterface, ModelLatticeManager, MysqlDatabase, OutboxPoller, type OutboxPollerDeps, type OutputType, PACK_DIRECTORY_TIMEOUT_SECONDS, PLATFORM_SECRET_ENV_VARS, PLUGIN_CATALOG_CHANGED_TOPIC, PLUGIN_HOST_DIR, PLUGIN_HOST_SERVER_SOURCE, PLUGIN_HOST_VERSION, type PackSourceInfo, type PendingMessage, PersonalAssistantConfig, PinoLoggerClient, type PluginConnectionScope, type PluginDeploymentRuntimeHealth, PluginDeploymentRuntimeRegistry, type PluginDeploymentRuntimeRegistryOptions, type PluginDeploymentServiceDeployOptions, type PluginDeploymentServiceDeployResult, type PluginDeploymentServiceLike, type PluginDeploymentServiceListEntry, type PluginDeploymentServiceMode, type PluginDeploymentServiceStatus, type PluginDeploymentServiceUndeployResult, PluginRegistry, type PluginSources, type PostProcessTaskMutationResponseInput, PostgresDatabase, type PreviewError, ProjectBotMembershipIdConflictError, ProjectMutationMutex, type ProjectMutationScope, ProjectRoomMessageIdConflictError, type ProjectTaskAdmissionListener, type ProjectTaskAdmissionNotification, ProjectTaskAdmissionNotifier, type ProjectTaskAdmissionNotifierOptions, type ProjectTaskAssignmentScope, ProjectTaskOwnerPolicy, type ProjectTaskOwnerPolicyCode, ProjectTaskOwnerPolicyError, type ProjectTaskReassignmentAuthorization, type ProjectTaskReassignmentAuthorizationInput, type ProjectTaskReassignmentAuthorizer, type ProjectTaskReassignmentThreadValidationInput, type ProjectTaskReassignmentThreadValidator, type ProjectTaskRosterScope, PrometheusClient, type ProvisionFileSink, type QueryResult, type QueueLattice, QueueLatticeManager, type QueueMessage, QueueMode, type QueuePendingEvent, type QueueScope, ROOM_COORDINATOR_KEY, type ReassignProjectTaskInput, type ReconcileAllTenantTaskRunsInput, type ReconcileStaleTaskRunsInput, type ReconcileStaleTaskRunsResult, type ReconcileTaskDescriptionInput, type ReconcileTenantTaskRunsInput, type RejectInterruptedTaskInput, RemoteSandboxInstance, RemoteSandboxProvider, type RemoteSandboxProviderConfig, type RepeatedToolCallBreakerOptions, RepeatedToolCallError, type ReplyReadyEvent, type ResidentConnectionConfig, type ResidentDeployment, type ResidentInvokeArgs, type ResidentInvokePayload, type ResidentInvokeResult, type ResidentRoutingDeps, type Resolution, type ResolutionAction, type ResolveAgentFn, type ResolvedConfig, type ResolvedPluginConnection, type ResolvedPluginSkill, type ResumeTaskResult, type RoomAgentMessageCallbackFailure, type RoomAgentMessageCommitted, type RoomAgentMessageInput, RoomAgentMessageService, type RoomAgentReplyInput, type RunAsLeaderOptions, type RunAsLeaderResult, type RunSandboxConfig, type RuntimeModelConfig, type RuntimeSkillSelection, SAFE_PATH_COMPONENT, SANDBOX_OPEN_GATEWAY_URL_ENV, SANDBOX_OPEN_TOKEN_ENV, type STTModelInfo, STTModelLattice, type STTModelLatticeInterface, STTModelLatticeManager, type SandboxFileInfo, type SandboxFileService, SandboxFilesystem, type SandboxGrepMatch, type SandboxInstance, type SandboxIsolationLevel, SandboxLatticeManager, type SandboxManagerProtocol, type SandboxOpenClientBundle, type SandboxOpenCredential, type SandboxOpenCredentialContext, type SandboxOpenCredentialProvider, type SandboxOpenCredentialProviderOptions, SandboxPluginExecutor, type SandboxPluginExecutorDeps, type SandboxPluginInvokeArgs, type SandboxPluginResult, type SandboxProvider, type SandboxProviderFactory, type SandboxProviderType, type SandboxResolver, type SandboxRunConfig, type SandboxShellService, SandboxSkillStore, type SandboxSkillStoreOptions, type SandboxVolumeDefinition, type ScheduleLattice, ScheduleLatticeManager, type SchedulerMiddlewareOptions, SemanticMetricsClient, type SettleRunInput, type SettleRunOutcome, type SharePayload, SimpleMemoryVectorStore, type SkillLattice, SkillLatticeManager, type SkillMeta, type SkillResource, SqlDatabaseManager, type StartLifecycleResult, type StartTaskExecutionInput, type StateAndStore, StateBackend, StoreBackend, type StoreLattice, StoreLatticeManager, type StoreType, type StoreTypeMap, type SubmitTaskReviewInput, TASK_RESPONSE_FINAL_WARNING_LIMIT, TASK_RESPONSE_PRIOR_WARNING_LIMIT, TASK_RESPONSE_SCALAR_MAX_BYTES, TOOL_RESULT_TOKEN_LIMIT, TRUNCATION_GUIDANCE, type TableInfo, type TableSchema, type TaskAgentInvocation, type TaskEvent, type TaskExecutionFailure, type TaskExecutionManaged, type TaskExecutionResult, type TaskExecutionServiceDeps, type TaskExecutionSuccess, type TaskLifecycleListener, type TaskLifecycleNotification, TaskLifecycleNotifier, TaskLifecycleService, type TaskLifecycleServiceDeps, type TaskListStore, type TaskResponseParseResult, type TaskRunBridge, type TaskRunBridgeDeps, TaskRunBridgeStoresRequiredError, type TaskRunLeaseHandle, TaskRunRegistry, type TaskSpec, TaskStatus, type TaskUpdatable, TeamAgentGraphBuilder, type TeamConfig, type TeamMiddlewareOptions, type TeamTask, type TeammateSpec, type TeammateToolsOptions, TenantPluginCatalog, type TenantPluginCatalogDeps, type TenantPlugins, type ThreadBuffer, type ThreadBufferConfig, type ThreadBusyEvent, type ThreadEndCode, ThreadEndError, type ThreadIdleEvent, type ThreadInfo, type ThreadQueueConfig, type ThreadRunLeaseHandle, type ThreadState, ThreadStatus, type ThreadStatusChangedEvent, TokenCache, type ToolDefinition, type ToolLattice, ToolLatticeManager, type TransferOwnerInput, type TransferOwnerResult, type TrustedAgentMessageDispatcher, type TrustedMessageOptions, type TryAcquireTaskRunInput, type TryAcquireThreadRunInput, type UnknownToolHandlerConfig, UnsafeUpstreamUrlError, type UnsafeUrlReason, type ValidateManifestArgs, type VectorStoreLatticeInterface, VectorStoreLatticeManager, type VectorStoreProviderLattice, VectorStoreProviderManager, VolumeFilesystem, type VolumeFsClient, type WithLeaseOptions, type WorkflowValidationError, type WriteResult, abortWorkflowRun, agentInstanceManager, agentLatticeManager, appendReconciliationWarning, appendUiFence, assertSafeUpstreamUrl, buildBundleFromDist, buildConnectionPayload, buildGrepResultsDict, buildHandlerCommand, buildInput, buildNamedVolumeName, buildRemotePackDirectoryCommand, buildSandboxMetadataEnv, buildSandboxOpenEnv, buildSkillFile, buildStateAnnotation, buildTableName, buildTaskMutationFallback, buildTaskNormalizationFallback, checkEmptyContent, clearEncryptionKeyCache, clearEvalRunService, clearSandboxOpenCredentialProviderForTests, collectPluginSources, collectionLatticeManager, compileInternal, compileSandboxPlugin, compileWorkflow, computeSandboxName, configureCoordinationLeaseStore, configurePluginCatalogSync, configureStores, connectAllChannels, connectionSecretFields, convertToConnection, createAgentNode, createAgentTeam, createCapabilityGuardMiddleware, createExecuteSqlQueryTool, createFileData, createInfoSqlTool, createListMetricsDataSourcesTool, createListMetricsServersTool, createListTablesSqlTool, createMapNode, createModelSelectorMiddleware, createNodeHandler, createProjectRoomMiddleware, createProjectTaskOwnerPolicy, createProjectTaskReassignmentAuthorizer, createQueryCheckerSqlTool, createQueryMetricDefinitionTool, createQueryMetricsListTool, createQuerySemanticMetricDataTool, createQuerySqlTool, createQueryTableDefinitionTool, createQueryTablesListTool, createRepeatedToolCallBreakerMiddleware, createResourceAddress, createSandboxProvider, createSandboxResolver, createSchedulerMiddleware, createSharePayload, createShellExecTool, createTaskExecutionService, createTaskLifecycleService, createTaskMiddleware, createTaskRunBridge, createTeamMiddleware, createTeammateTools, createTrustedAgentMessageDispatcher, createUnknownToolHandlerMiddleware, createWidgetMiddleware, decrypt, decryptConfigFields, describeCronExpression, disconnectAllChannels, documentLearningPlugin, documentParserPlugin, embeddingsLatticeManager, encodeInput, encrypt, encryptConfigFields, ensureBuiltinAgentsForTenant, ensurePluginSkillInSandbox, evaluateLatticeCaseWithLogs, eventBus, eventBus as eventBusDefault, executionAuthorityRegistry, extractAppsRef, extractFetcherError, extractLegacyRefs, extractOutput, fileDataToString, formatContentWithLineNumbers, formatGrepMatches, formatGrepResults, formatReadResponse, generateDirectBotProjectId, generateDirectHumanProjectId, generateToken, getAgentClient, getAgentClientAsync, getAgentConfig, getAllAgentConfigs, getAllBuiltInSkillMetas, getAllToolDefinitions, getBindingRegistry, getBuiltInSkillContent, getBuiltInSkillMeta, getBuiltInSkillNames, getCheckpointSaver, getChunkBuffer, getCollectionEntryCount, getCoordinationLeaseStore, getEmbeddingsClient, getEmbeddingsLattice, getEncryptionKey, getEvalRunService, getLoggerLattice, getMenuRegistry, getModelLattice, getNextCronTime, getOrCreateCollectionVectorStore, getPluginDeploymentService, getPluginSkillManifestVersion, getQueueLattice, getReplicaId, getRuntimeCapabilityConfig, getRuntimeSkillSelection, getSTTClient, getSTTClientWithTenant, getSTTModelLattice, getSandBoxManager, getSandboxOpenCredential, getSandboxPluginCatalog, getScheduleLattice, getStoreLattice, getThreadRunOwner, getToolClient, getToolClientWithTenant, getToolDefinition, getToolLattice, getVectorStoreClient, getVectorStoreLattice, getVectorStoreProvider, getWorkflowSignal, globSearchFiles, grepMatchesFromFiles, grepSearchFiles, hasChunkBuffer, hasDelegatedWorkerToken, hasRuntimeCapabilityPolicy, installPluginHost, invokeResident, invokeWithRetry, isBuiltInSkill, isDirectRoom, isMcpConnectionError, isPluginSkillAuthorizedInSandbox, isPluginSkillManagedInSandbox, isUsingDefaultKey, isValidCronExpression, isValidSandboxName, isValidSkillName, jsonSchemaToZod, listCollectionEntries, listSandboxProviderTypes, listTenantPlugins, loggerLatticeManager, mcpManager, mergeCapabilityBundles, mergePluginSkills, mergePluginSources, metricsServerManager, modelLatticeManager, nextBackoffDelay, normalizeSandboxName, ownTaskResponseField, parallelLimit, parseCronExpression, parseDirectRoomType, parseHandlerEnvelope, parseHostArgs, parseJudgeVerdict, parsePackSize, parseSkillFrontmatter, parseTaskResponse, parseYaml, performStringReplacement, pluginHostContentHash, postProcessTaskMutationResponse, prepareTaskDispatch, projectMutationMutex, projectRoomPlugin, projectTaskAdmissionNotifier, provisionSandboxOpenClient, publishPluginCatalogChanged, queueLatticeManager, readLoopBreakerConfig, reconcileAllTenantTaskRuns, reconcileStaleTaskRuns, reconcileTenantTaskRuns, registerAgentLattice, registerAgentLatticeWithTenant, registerAgentLattices, registerCheckpointSaver, registerChunkBuffer, registerEmbeddingsLattice, registerExistingTool, registerExistingToolWithTenant, registerLoggerLattice, registerModelLattice, registerModelLatticeForTenant, registerQueueLattice, registerSTTModelLattice, registerSandboxOpenCredentialProvider, registerSandboxProviderType, registerScheduleLattice, registerStoreLattice, registerTeammateAgent, registerToolLattice, registerVectorStoreLattice, registerVectorStoreProvider, registerWorkflowRun, removeCollectionVectorStore, renderTemplate, resetReplicaIdForTests, resolveEnabledPluginSkill, resolveHandlerTimeoutMs, resolveJudgeModelKey, resolvePath, resolvePluginConnections, resolveSandboxPluginConnections, resolveTenantPluginSkill, roomCoordinatorConfig, runAsLeader, runRemotePackDirectory, safeTaskResponseId, sandboxLatticeManager, sanitizeToolCallId, scheduleLatticeManager, serializePluginMeta, serializeTaskMutationSuccess, serializeTaskNormalizationFallback, serializeTaskReadResponse, setBindingRegistry, setEvalRunService, setMenuRegistry, setPluginDeploymentService, setSandboxPluginCatalog, skillLatticeManager, sqlDatabaseManager, storeLatticeManager, sttModelLatticeManager, taskLifecycleNotifier, taskRunLeaseKey, taskRunRegistry, threadRunLeaseKey, toJsonSchema, toSafeStateExpr, toolLatticeManager, truncateIfTooLong, tryAcquireTaskRun, tryAcquireThreadRun, unregisterTeammateAgent, unregisterWorkflowRun, updateFileData, validateAgentInput, validateCapabilityBundleInput, validateDSL, validateEncryptionKey, validatePackSourcePath, validatePath, validateRelativePath, validateSandboxPluginManifest, validateSkillName, validateToolInput, vectorStoreLatticeManager, vectorStoreProviderManager, withLease, withTimeout, wrapMcpToolWithUi };
+export { AGENT_TASK_EVENT, type AddMessageParams, type AddMessageResult, Agent, type AgentClient, type AgentExecutor, AgentInstanceManager, type AgentLattice, AgentLatticeManager, type AgentLifecycleEventName, AgentManager, type AgentStreamExecutor, type AgentTaskCompletionInput, type AgentThreadInterface, type ApproveInterruptedTaskInput, type AssignTaskOwnerInput, BUILTIN_PLUGINS, BUILTIN_SKILLS, type BackendFactory, type BackendProtocol, type BeginRunFailure, type BeginRunInput, type BeginRunResult, type BeginRunSuccess, type BufferStats, CAPABILITY_TOOL_NAME_CONFLICT, type CacheEntry, type CalibrationProbe, CapabilityBundleMergeError, type CapabilityBundleMergeErrorCode, CapabilityBundleMerger, CapabilityBundleValidationError, type CapabilityBundleValidationErrorCode, type CapabilityGuardDenialCode, type CapabilityResourceSelector, type CapabilityToolMetadata, CapabilityToolNameConflictError, CapabilityToolRegistry, type CaseRunResult, ChannelConnectionLeader, type ChannelConnectionLeaderDeps, type Chunk, ChunkBuffer, ChunkBufferLatticeManager, type ClaimMessagesOptions, CollectionLatticeManager, type ColumnInfo, type CompileSandboxPluginArgs, CompositeBackend, type ConflictItem, type ConnectAllChannelsOptions, type ConnectionPayloadInput, ConnectionRegistry, ConsoleLoggerClient, type CreateSandboxProviderConfig, type CronFields, CustomMetricsClient, type CustomMiddlewareFactory, CustomMiddlewareRegistry, DEFAULT_CALIBRATION_PROBES, DEFAULT_CONNECT_TIMEOUT_MS, DEFAULT_DELAY_MS, DEFAULT_HANDLER_TIMEOUT_MS, DEFAULT_MAX_ATTEMPTS, DEFAULT_RESIDENT_INVOKE_TIMEOUT_MS, type DatabaseConfig, type DatabaseType, DaytonaInstance, DaytonaProvider, type DaytonaProviderConfig, DefaultScheduleClient, DelegatedScopeNotQueueableError, type DeleteResult, DependencyResolver, type DispatchPreparation, DuplicateProjectRoomMessageIdempotencyKeyError, E2BInstance, E2BProvider, type E2BProviderConfig, EMPTY_CONTENT_WARNING, type EditResult, type EmbeddingsInfo, type EmbeddingsLatticeInterface, EmbeddingsLatticeManager, type EnsureMicrosandboxInput, type EvalRunService, type ExecutionAuthority, ExecutionAuthorityRegistry, type ExportBundle, type ExportContext, type ExportJob, type ExportableEntity, type ExportableEntityDefinition, ExportableEntityRegistry, type ExportableFile, type ExportableTypeInfo, type FileData, type FileInfo, FileSystemSkillStore, type FileSystemSkillStoreOptions, FilesystemBackend, type FsEntry, type GetThreadRunOwnerInput, type GrepMatch, HEALTH_CHECK_INTERVAL_MS, HEALTH_CHECK_TIMEOUT_MS, type HandlerEnvelope, type HostArgs, type IMessageQueueStore, type IMetricsServerClient, INLINE_INPUT_LIMIT_BYTES, type ISqlDatabase, IdRemapper, type ImmediateDispatchPlan, type ImportApplyResolution, type ImportApplyResult, type ImportEntityResult, type ImportEntityStatus, type ImportPreviewResult, InMemoryA2AApiKeyStore, InMemoryAgentWebAppStore, InMemoryAssistantStore, InMemoryBindingStore, InMemoryCapabilityBundleStore, InMemoryChannelInstallationStore, InMemoryChunkBuffer, InMemoryCollectionStore, InMemoryDatabaseConfigStore, InMemoryLeaseStore, InMemoryMailboxStore, InMemoryMenuStore, InMemoryModelProviderStore, InMemoryOpenAuditStore, InMemoryOutboxStore, InMemoryProjectBotMembershipStore, InMemoryProjectMembershipStore, InMemoryProjectRoomCoordinator, InMemoryProjectRoomMessageStore, InMemoryProjectRoomReadStateStore, InMemoryProjectRoomStore, InMemoryTaskListStore, InMemoryTaskStore, InMemoryTaskWorkItemStore, InMemoryTenantStore, InMemoryThreadMessageQueueStore, InMemoryThreadStore, InMemoryUserPushSubscriptionStore, InMemoryUserStore, InMemoryUserTenantLinkStore, type InsertionItem, type InstallPluginHostResult, type JudgeVerdict, LINE_NUMBER_WIDTH, type LangGraphStateChecker, type LatticeAgentStepConfig, LatticeEval, type LatticeEvalBatchReport, type LatticeEvalCase, type LatticeEvalCaseType, type LatticeEvalCaseWithTemplate, type LatticeEvalConfig, type LatticeEvalLogEvent, type LatticeEvalLogLevel, LatticeEvalProject, type LatticeEvalProjectType, type LatticeEvalResult, type LatticeEvalRubric, LatticeEvalSuite, type LatticeEvalSuiteType, type LatticeEvalTemplate, LeaseAcquisitionTimeoutError, type LifecycleResult, type LifecycleWarning, LocalSandboxInstance, LocalSandboxProvider, type LocalSandboxProviderConfig, type LoggerLattice, LoggerLatticeManager, type LoopBreakerConfig, MAX_BACKOFF_MS, MAX_HANDLER_TIMEOUT_MS, MAX_LINE_LENGTH, MAX_PACK_ENTRIES, MAX_PACK_FILE_BYTES, MAX_PACK_TOTAL_BYTES, MIN_HANDLER_TIMEOUT_MS, type MailboxMessage, type MailboxStore, ManagedTaskStartError, type ManagedTaskStartOptions, type ManifestValidationResult, type McpClientFactory, type McpClientLike, type McpClientSession, type McpConnectionOptions, McpLatticeManager, type McpRegisterOptions, type McpServerId, type McpServerRuntime, type McpServerState, MemoryBackend, MemoryLatticeManager, MemoryQueueClient, MemoryScheduleStorage, type MergedPluginSkills, type MessageCompletedEvent, type MessageContent, type MessageContentPart, type MessageContentValue, type MessageFailedEvent, type MessageInterruptedEvent, type MessageLike, type MessageStartedEvent, MessageType, MetricsServerManager, MicrosandboxRemoteInstance, MicrosandboxRemoteProvider, type MicrosandboxRemoteProviderClient, type MicrosandboxRemoteProviderConfig, MicrosandboxServiceClient, type MicrosandboxServiceClientConfig, type MicrosandboxShellExecInput, type ModelConfig, type ModelLatticeInterface, ModelLatticeManager, MysqlDatabase, OutboxPoller, type OutboxPollerDeps, type OutputType, PACK_DIRECTORY_TIMEOUT_MS, PLATFORM_SECRET_ENV_VARS, PLUGIN_CATALOG_CHANGED_TOPIC, PLUGIN_HOST_DIR, PLUGIN_HOST_SERVER_SOURCE, PLUGIN_HOST_VERSION, type PackSourceInfo, type PendingMessage, PersonalAssistantConfig, PinoLoggerClient, type PluginConnectionScope, type PluginDeploymentRuntimeHealth, PluginDeploymentRuntimeRegistry, type PluginDeploymentRuntimeRegistryOptions, type PluginDeploymentServiceDeployOptions, type PluginDeploymentServiceDeployResult, type PluginDeploymentServiceLike, type PluginDeploymentServiceListEntry, type PluginDeploymentServiceMode, type PluginDeploymentServiceStatus, type PluginDeploymentServiceUndeployResult, PluginRegistry, type PluginSources, type PostProcessTaskMutationResponseInput, PostgresDatabase, type PreviewError, ProjectBotMembershipIdConflictError, ProjectMutationMutex, type ProjectMutationScope, ProjectRoomMessageIdConflictError, type ProjectTaskAdmissionListener, type ProjectTaskAdmissionNotification, ProjectTaskAdmissionNotifier, type ProjectTaskAdmissionNotifierOptions, type ProjectTaskAssignmentScope, ProjectTaskOwnerPolicy, type ProjectTaskOwnerPolicyCode, ProjectTaskOwnerPolicyError, type ProjectTaskReassignmentAuthorization, type ProjectTaskReassignmentAuthorizationInput, type ProjectTaskReassignmentAuthorizer, type ProjectTaskReassignmentThreadValidationInput, type ProjectTaskReassignmentThreadValidator, type ProjectTaskRosterScope, PrometheusClient, type ProvisionFileSink, type QueryResult, type QueueLattice, QueueLatticeManager, type QueueMessage, QueueMode, type QueuePendingEvent, type QueueScope, ROOM_COORDINATOR_KEY, type ReassignProjectTaskInput, type ReconcileAllTenantTaskRunsInput, type ReconcileStaleTaskRunsInput, type ReconcileStaleTaskRunsResult, type ReconcileTaskDescriptionInput, type ReconcileTenantTaskRunsInput, type RejectInterruptedTaskInput, RemoteSandboxInstance, RemoteSandboxProvider, type RemoteSandboxProviderConfig, type RepeatedToolCallBreakerOptions, RepeatedToolCallError, type ReplyReadyEvent, type ResidentConnectionConfig, type ResidentDeployment, type ResidentInvokeArgs, type ResidentInvokePayload, type ResidentInvokeResult, type ResidentRoutingDeps, type Resolution, type ResolutionAction, type ResolveAgentFn, type ResolvedConfig, type ResolvedPluginConnection, type ResolvedPluginSkill, type ResumeTaskResult, type RoomAgentCorrelatedInterruptInput, type RoomAgentMessageCallbackFailure, type RoomAgentMessageCommitted, type RoomAgentMessageInput, RoomAgentMessageService, type RoomAgentReplyInput, type RunAsLeaderOptions, type RunAsLeaderResult, type RunSandboxConfig, type RuntimeModelConfig, type RuntimeSkillSelection, SAFE_PATH_COMPONENT, SANDBOX_OPEN_GATEWAY_URL_ENV, SANDBOX_OPEN_TOKEN_ENV, type STTModelInfo, STTModelLattice, type STTModelLatticeInterface, STTModelLatticeManager, type SandboxFileInfo, type SandboxFileService, SandboxFilesystem, type SandboxGrepMatch, type SandboxInstance, type SandboxIsolationLevel, SandboxLatticeManager, type SandboxManagerProtocol, type SandboxOpenClientBundle, type SandboxOpenCredential, type SandboxOpenCredentialContext, type SandboxOpenCredentialProvider, type SandboxOpenCredentialProviderOptions, SandboxPluginExecutor, type SandboxPluginExecutorDeps, type SandboxPluginInvokeArgs, type SandboxPluginResult, type SandboxProvider, type SandboxProviderFactory, type SandboxProviderType, type SandboxResolver, type SandboxRunConfig, type SandboxShellService, SandboxSkillStore, type SandboxSkillStoreOptions, type SandboxVolumeDefinition, type ScheduleLattice, ScheduleLatticeManager, type SchedulerMiddlewareOptions, SemanticMetricsClient, type SettleRunInput, type SettleRunOutcome, type SharePayload, SimpleMemoryVectorStore, type SkillLattice, SkillLatticeManager, type SkillMeta, type SkillResource, SqlDatabaseManager, type StartLifecycleResult, type StartTaskExecutionInput, type StateAndStore, StateBackend, StoreBackend, type StoreLattice, StoreLatticeManager, type StoreType, type StoreTypeMap, type SubmitTaskReviewInput, TASK_RESPONSE_FINAL_WARNING_LIMIT, TASK_RESPONSE_PRIOR_WARNING_LIMIT, TASK_RESPONSE_SCALAR_MAX_BYTES, TOOL_RESULT_TOKEN_LIMIT, TRUNCATION_GUIDANCE, type TableInfo, type TableSchema, type TaskAgentInvocation, type TaskEvent, type TaskExecutionFailure, type TaskExecutionManaged, type TaskExecutionResult, type TaskExecutionServiceDeps, type TaskExecutionSuccess, type TaskLifecycleListener, type TaskLifecycleNotification, TaskLifecycleNotifier, TaskLifecycleService, type TaskLifecycleServiceDeps, type TaskListStore, type TaskResponseParseResult, type TaskRunBridge, type TaskRunBridgeDeps, TaskRunBridgeStoresRequiredError, type TaskRunLeaseHandle, TaskRunRegistry, type TaskSpec, TaskStatus, type TaskUpdatable, TeamAgentGraphBuilder, type TeamConfig, type TeamMiddlewareOptions, type TeamTask, type TeammateSpec, type TeammateToolsOptions, TenantPluginCatalog, type TenantPluginCatalogDeps, type TenantPlugins, type ThreadBuffer, type ThreadBufferConfig, type ThreadBusyEvent, type ThreadEndCode, ThreadEndError, type ThreadIdleEvent, type ThreadInfo, type ThreadQueueConfig, type ThreadRunLeaseHandle, type ThreadState, ThreadStatus, type ThreadStatusChangedEvent, TokenCache, type ToolDefinition, type ToolLattice, ToolLatticeManager, type TransferOwnerInput, type TransferOwnerResult, type TrustedAgentMessageDispatcher, type TrustedMessageOptions, type TryAcquireTaskRunInput, type TryAcquireThreadRunInput, type UnknownToolHandlerConfig, UnsafeUpstreamUrlError, type UnsafeUrlReason, UnsupportedModelProviderError, type ValidateManifestArgs, type VectorStoreLatticeInterface, VectorStoreLatticeManager, type VectorStoreProviderLattice, VectorStoreProviderManager, VolumeFilesystem, type VolumeFsClient, type WithLeaseOptions, type WorkflowValidationError, type WriteResult, abortWorkflowRun, agentInstanceManager, agentLatticeManager, appendReconciliationWarning, appendUiFence, assertSafeUpstreamUrl, buildBundleFromDist, buildConnectionPayload, buildGrepResultsDict, buildHandlerCommand, buildInput, buildModelLlmConfig, buildNamedVolumeName, buildRemotePackDirectoryCommand, buildSandboxMetadataEnv, buildSandboxOpenEnv, buildSkillFile, buildStateAnnotation, buildTableName, buildTaskMutationFallback, buildTaskNormalizationFallback, checkEmptyContent, clearEncryptionKeyCache, clearEvalRunService, clearSandboxOpenCredentialProviderForTests, collectPluginSources, collectionLatticeManager, compileInternal, compileSandboxPlugin, compileWorkflow, computeSandboxName, configureCoordinationLeaseStore, configurePluginCatalogSync, configureStores, connectAllChannels, connectionSecretFields, convertToConnection, createAgentNode, createAgentTeam, createCapabilityGuardMiddleware, createExecuteSqlQueryTool, createFileData, createInfoSqlTool, createListMetricsDataSourcesTool, createListMetricsServersTool, createListTablesSqlTool, createMapNode, createModelSelectorMiddleware, createNodeHandler, createProjectRoomMiddleware, createProjectTaskOwnerPolicy, createProjectTaskReassignmentAuthorizer, createQueryCheckerSqlTool, createQueryMetricDefinitionTool, createQueryMetricsListTool, createQuerySemanticMetricDataTool, createQuerySqlTool, createQueryTableDefinitionTool, createQueryTablesListTool, createRepeatedToolCallBreakerMiddleware, createResourceAddress, createSandboxProvider, createSandboxResolver, createSchedulerMiddleware, createSharePayload, createShellExecTool, createTaskExecutionService, createTaskLifecycleService, createTaskMiddleware, createTaskRunBridge, createTeamMiddleware, createTeammateTools, createTrustedAgentMessageDispatcher, createUnknownToolHandlerMiddleware, createWidgetMiddleware, decrypt, decryptConfigFields, describeCronExpression, disconnectAllChannels, documentLearningPlugin, documentParserPlugin, embeddingsLatticeManager, encodeInput, encrypt, encryptConfigFields, ensureBuiltinAgentsForTenant, ensurePluginSkillInSandbox, evaluateLatticeCaseWithLogs, eventBus, eventBus as eventBusDefault, executionAuthorityRegistry, extractAppsRef, extractFetcherError, extractLegacyRefs, extractOutput, fileDataToString, formatContentWithLineNumbers, formatGrepMatches, formatGrepResults, formatReadResponse, generateDirectBotProjectId, generateDirectHumanProjectId, generateToken, getAgentClient, getAgentClientAsync, getAgentConfig, getAllAgentConfigs, getAllBuiltInSkillMetas, getAllToolDefinitions, getBindingRegistry, getBuiltInSkillContent, getBuiltInSkillMeta, getBuiltInSkillNames, getCheckpointSaver, getChunkBuffer, getCollectionEntryCount, getCoordinationLeaseStore, getEmbeddingsClient, getEmbeddingsLattice, getEncryptionKey, getEvalRunService, getLoggerLattice, getMenuRegistry, getModelLattice, getNextCronTime, getOrCreateCollectionVectorStore, getPluginDeploymentService, getPluginSkillManifestVersion, getQueueLattice, getReplicaId, getRuntimeCapabilityConfig, getRuntimeSkillSelection, getSTTClient, getSTTClientWithTenant, getSTTModelLattice, getSandBoxManager, getSandboxOpenCredential, getSandboxPluginCatalog, getScheduleLattice, getStoreLattice, getThreadRunOwner, getToolClient, getToolClientWithTenant, getToolDefinition, getToolLattice, getVectorStoreClient, getVectorStoreLattice, getVectorStoreProvider, getWorkflowSignal, globSearchFiles, grepMatchesFromFiles, grepSearchFiles, handlerResultText, hasChunkBuffer, hasDelegatedWorkerToken, hasModelLatticeForTenant, hasRuntimeCapabilityPolicy, installPluginHost, invokeResident, invokeWithRetry, isBuiltInSkill, isDirectRoom, isEncryptedValue, isMcpConnectionError, isPluginSkillAuthorizedInSandbox, isPluginSkillManagedInSandbox, isUsingDefaultKey, isValidCronExpression, isValidSandboxName, isValidSkillName, jsonSchemaToZod, listCollectionEntries, listModelLatticesForTenant, listSandboxProviderTypes, listTenantPlugins, loggerLatticeManager, mcpManager, mergeCapabilityBundles, mergePluginSkills, mergePluginSources, metricsServerManager, modelLatticeManager, nextBackoffDelay, normalizeSandboxName, ownTaskResponseField, parallelLimit, parseCronExpression, parseDirectRoomType, parseHandlerEnvelope, parseHostArgs, parseJudgeVerdict, parsePackSize, parseSkillFrontmatter, parseTaskResponse, parseYaml, performStringReplacement, pluginHostContentHash, postProcessTaskMutationResponse, prepareTaskDispatch, projectMutationMutex, projectRoomPlugin, projectTaskAdmissionNotifier, provisionSandboxOpenClient, publishPluginCatalogChanged, queueLatticeManager, readLoopBreakerConfig, reconcileAllTenantTaskRuns, reconcileStaleTaskRuns, reconcileTenantTaskRuns, registerAgentLattice, registerAgentLatticeWithTenant, registerAgentLattices, registerCheckpointSaver, registerChunkBuffer, registerEmbeddingsLattice, registerExistingTool, registerExistingToolWithTenant, registerLoggerLattice, registerModelLattice, registerModelLatticeForTenant, registerQueueLattice, registerSTTModelLattice, registerSandboxOpenCredentialProvider, registerSandboxProviderType, registerScheduleLattice, registerStoreLattice, registerTeammateAgent, registerToolLattice, registerVectorStoreLattice, registerVectorStoreProvider, registerWorkflowRun, removeCollectionVectorStore, renderTemplate, resetReplicaIdForTests, resolveEnabledPluginSkill, resolveHandlerTimeoutMs, resolveJudgeModelKey, resolveModelLatticeForTenant, resolvePath, resolvePluginConnections, resolveSandboxPluginConnections, resolveTenantPluginSkill, roomCoordinatorConfig, runAsLeader, runRemotePackDirectory, safeDecrypt, safeTaskResponseId, sandboxLatticeManager, sanitizeToolCallId, scheduleLatticeManager, serializePluginMeta, serializeTaskMutationSuccess, serializeTaskNormalizationFallback, serializeTaskReadResponse, setBindingRegistry, setEvalRunService, setMenuRegistry, setPluginDeploymentService, setSandboxPluginCatalog, skillLatticeManager, sqlDatabaseManager, storeLatticeManager, sttModelLatticeManager, taskLifecycleNotifier, taskRunLeaseKey, taskRunRegistry, threadRunLeaseKey, toJsonSchema, toSafeStateExpr, toolLatticeManager, truncateIfTooLong, tryAcquireTaskRun, tryAcquireThreadRun, unregisterTeammateAgent, unregisterWorkflowRun, updateFileData, validateAgentInput, validateCapabilityBundleInput, validateDSL, validateEncryptionKey, validatePackSourcePath, validatePath, validateRelativePath, validateSandboxPluginManifest, validateSkillName, validateToolInput, vectorStoreLatticeManager, vectorStoreProviderManager, withLease, withTimeout, wrapMcpToolWithUi };