@axiom-lattice/protocols 4.1.0 → 4.1.2

package/dist/index.d.ts

@@ -1478,6 +1478,34 @@ interface Skill {
      * Creates a hierarchical tree structure for organizing skills
      */
     subSkills?: string[];
+    /**
+     * Source of the skill (optional)
+     * e.g. "builtin-plugin" for read-only plugin-provided skills
+     */
+    source?: string;
+    /**
+     * Owning plugin type (optional)
+     * Set for skills contributed by a registered plugin
+     */
+    pluginType?: string;
+    /**
+     * Plugin skill bundle version (optional)
+     * Set for skills contributed by a registered plugin
+     */
+    version?: string;
+    /**
+     * Resource catalog (optional)
+     * Safe relative paths of a plugin skill's bundled resources with their MIME types
+     */
+    resourcePaths?: Array<{
+        path: string;
+        mimeType?: string;
+    }>;
+    /**
+     * Read-only flag (optional)
+     * True for immutable sources (e.g. plugin-provided skills) that cannot be created/updated/deleted
+     */
+    readOnly?: boolean;
     /**
      * Skill creation timestamp
      */
@@ -2028,12 +2056,34 @@ interface UpdateProjectRequest {
     /** Project classification */
     kind?: ProjectKind;
 }
+/** Error raised when generic project writes attempt to change capability Bundle references. */
+declare class InvalidProjectCapabilityBundleConfigError extends Error {
+    /** Stable machine-readable error code. */
+    readonly code: "INVALID_BUNDLE_CONFIG";
+    /** Creates the reserved-config error returned by generic Project writes. */
+    constructor();
+}
+/** Rejects capability Bundle references supplied through generic Project config writes. */
+declare function assertGenericProjectConfig(config: Record<string, unknown> | undefined): void;
 /**
  * Filter options for listing projects within a workspace
  */
 interface ProjectFilter {
     kind?: ProjectKind;
 }
+/** Atomic result of replacing a Project's capability Bundle IDs. */
+type UpdateProjectCapabilityBundlesResult = {
+    status: "updated";
+    project: Project;
+} | {
+    status: "project_not_found";
+} | {
+    status: "bundle_not_found";
+} | {
+    status: "bundle_conflict";
+};
+/** Revision preconditions for the bundles reviewed before project assignment. */
+type ExpectedCapabilityBundleRevisions = Record<string, string>;
 /**
  * ProjectStore interface
  * Provides CRUD operations for project data
@@ -2043,7 +2093,11 @@ interface ProjectStore {
     getProjectById(tenantId: string, id: string): Promise<Project | null>;
     createProject(tenantId: string, workspaceId: string, id: string, data: CreateProjectRequest): Promise<Project>;
     updateProject(tenantId: string, id: string, updates: UpdateProjectRequest): Promise<Project | null>;
+    /** Omitted expectedRevisions is reserved for internal maintenance callers. */
+    updateCapabilityBundleIds(tenantId: string, projectId: string, bundleIds: string[], expectedRevisions?: ExpectedCapabilityBundleRevisions): Promise<UpdateProjectCapabilityBundlesResult>;
     deleteProject(tenantId: string, id: string): Promise<boolean>;
+    /** Returns whether a tenant project references the given capability bundle. */
+    isCapabilityBundleReferenced(tenantId: string, bundleId: string): Promise<boolean>;
 }
 
 /**
@@ -2288,7 +2342,11 @@ interface ConnectionStore {
     delete(tenantId: string, type: string, key: string): Promise<boolean>;
 }
 
-type ChannelInstallationType = "lark" | "email" | "slack" | "wechat";
+/** Channel types persisted by the installation store, including internal-only channels. */
+type ChannelInstallationType = "lark" | "email" | "slack" | "wechat" | "room";
+/** Channel types exposed by the public installation management API. */
+type PublicChannelInstallationType = Exclude<ChannelInstallationType, "room">;
+/** Credentials and routing configuration for a Lark installation. */
 interface LarkChannelInstallationConfig {
     appId: string;
     appSecret: string;
@@ -2296,10 +2354,12 @@ interface LarkChannelInstallationConfig {
     encryptKey?: string;
     assistantId?: string;
 }
+/** Credentials and identity configuration for a WeChat installation. */
 interface WechatChannelInstallationConfig {
     botToken: string;
     uin?: string;
 }
+/** A persisted tenant-scoped channel installation. */
 interface ChannelInstallation<TConfig = unknown> {
     id: string;
     tenantId: string;
@@ -2312,14 +2372,28 @@ interface ChannelInstallation<TConfig = unknown> {
     createdAt: Date;
     updatedAt: Date;
 }
-interface CreateChannelInstallationRequest {
+/** Internal input accepted by installation stores. */
+interface CreateChannelInstallationInput {
     channel: ChannelInstallationType;
     name?: string;
-    config: LarkChannelInstallationConfig;
+    config: Record<string, unknown>;
     enabled?: boolean;
     fallbackAgentId?: string;
     rejectWhenNoBinding?: boolean;
 }
+type PublicInstallationBase = Omit<CreateChannelInstallationInput, "channel" | "config">;
+/** Public create request with channel-specific configuration and no internal room variant. */
+type CreateChannelInstallationRequest = PublicInstallationBase & ({
+    channel: "lark";
+    config: LarkChannelInstallationConfig;
+} | {
+    channel: "wechat";
+    config: WechatChannelInstallationConfig;
+} | {
+    channel: "email" | "slack";
+    config: Record<string, unknown>;
+});
+/** Fields accepted when updating an existing public installation. */
 interface UpdateChannelInstallationRequest {
     name?: string;
     config?: Record<string, unknown>;
@@ -2327,6 +2401,7 @@ interface UpdateChannelInstallationRequest {
     fallbackAgentId?: string;
     rejectWhenNoBinding?: boolean;
 }
+/** Persistence boundary for tenant-scoped channel installations. */
 interface ChannelInstallationStore {
     getInstallationById(installationId: string): Promise<ChannelInstallation | null>;
     getInstallationsByTenant(tenantId: string, channel?: ChannelInstallationType): Promise<ChannelInstallation[]>;
@@ -2335,7 +2410,7 @@ interface ChannelInstallationStore {
      * 用于 connectAllChannels 等不需要按租户过滤的场景。
      */
     getAllInstallations(channel?: ChannelInstallationType): Promise<ChannelInstallation[]>;
-    createInstallation(tenantId: string, installationId: string, data: CreateChannelInstallationRequest): Promise<ChannelInstallation>;
+    createInstallation(tenantId: string, installationId: string, data: CreateChannelInstallationInput): Promise<ChannelInstallation>;
     updateInstallation(tenantId: string, installationId: string, updates: UpdateChannelInstallationRequest): Promise<ChannelInstallation | null>;
     deleteInstallation(tenantId: string, installationId: string): Promise<boolean>;
 }
@@ -3199,13 +3274,81 @@ interface CreateBindingInput {
     tenantId: string;
     senderId: string;
     agentId: string;
+    threadId?: string;
     threadMode?: "fixed" | "per_conversation";
     senderDisplayName?: string;
     senderMetadata?: Record<string, unknown>;
     workspaceId?: string;
     projectId?: string;
+    /** Whether the binding is eligible for inbound resolution immediately after creation. */
+    enabled?: boolean;
+}
+/** Filters binding records before pagination is applied. */
+interface BindingListParams {
+    tenantId: string;
+    channel?: string;
+    agentId?: string;
+    channelInstallationId?: string;
+    /** Installation ID prefixes excluded before pagination, for internal namespaces. */
+    excludeInstallationIdPrefixes?: string[];
+    excludeChannels?: string[];
+    limit?: number;
+    offset?: number;
+}
+/**
+ * Fields that may change after a binding is created.
+ *
+ * Binding identity (`id`, tenant, channel, installation, sender, and timestamps) is intentionally
+ * absent so every persistence backend can enforce tenant-scoped mutation without identity drift.
+ */
+interface BindingMutablePatch {
+    /** Agent that receives messages for this subject. */
+    agentId?: string;
+    /** Fixed thread used when `threadMode` is `fixed`. */
+    threadId?: string;
+    /** Optional workspace execution scope. */
+    workspaceId?: string;
+    /** Optional project execution scope. */
+    projectId?: string;
+    /** Whether messages share one thread or create one per conversation. */
+    threadMode?: "fixed" | "per_conversation";
+    /** Human-readable sender label. */
+    senderDisplayName?: string;
+    /** Mutable sender metadata supplied by trusted internal callers. */
+    senderMetadata?: Record<string, unknown>;
+    /** Whether inbound resolution may use this binding. */
+    enabled?: boolean;
+}
+/** Raised when a channel installation already has a binding for the same tenant and sender. */
+declare class DuplicateChannelBindingSubjectError extends Error {
+    constructor();
+}
+/** A duplicate subject found while upgrading a local channel-binding database. */
+interface ChannelBindingMigrationConflict {
+    tenantId: string;
+    channel: string;
+    channelInstallationId: string;
+    senderId: string;
+    count: number;
+}
+/**
+ * Raised when a local binding uniqueness migration requires operator reconciliation.
+ *
+ * The conflict list contains only subject identifiers and row counts; binding metadata and other
+ * potentially sensitive payloads are never included.
+ */
+declare class ChannelBindingMigrationConflictError extends Error {
+    readonly conflicts: ChannelBindingMigrationConflict[];
+    constructor(conflicts: ChannelBindingMigrationConflict[]);
 }
 interface BindingRegistry {
+    findById(tenantId: string, id: string): Promise<Binding | null>;
+    findBySubject(params: {
+        tenantId: string;
+        channel: string;
+        channelInstallationId: string;
+        senderId: string;
+    }): Promise<Binding | null>;
     resolve(params: {
         channel: string;
         senderId: string;
@@ -3213,17 +3356,10 @@ interface BindingRegistry {
         tenantId: string;
     }): Promise<Binding | null>;
     create(binding: CreateBindingInput): Promise<Binding>;
-    update(id: string, patch: Partial<Binding>): Promise<Binding>;
-    delete(id: string): Promise<void>;
-    list(params: {
-        channel?: string;
-        agentId?: string;
-        tenantId: string;
-        channelInstallationId?: string;
-        limit?: number;
-        offset?: number;
-    }): Promise<Binding[]>;
-    import(bindings: CreateBindingInput[]): Promise<Binding[]>;
+    update(tenantId: string, id: string, patch: BindingMutablePatch): Promise<Binding>;
+    delete(tenantId: string, id: string): Promise<void>;
+    list(params: BindingListParams): Promise<Binding[]>;
+    import(tenantId: string, bindings: CreateBindingInput[]): Promise<Binding[]>;
     export(params: {
         tenantId: string;
     }): Promise<Binding[]>;
@@ -3978,9 +4114,10 @@ interface TaskListFilter {
      */
     workspaceId?: string;
     /**
-     * Filter by project ID
+     * Filter by project ID. `null` matches only absent, empty, or `default` projects;
+     * `undefined` applies no project predicate.
      */
-    projectId?: string;
+    projectId?: string | null;
     /**
      * Filter by parent task ID
      */
@@ -4002,6 +4139,40 @@ interface TaskListFilter {
      */
     offset?: number;
 }
+/**
+ * Exact scope and pagination for tasks that depend on another project task.
+ */
+interface TaskDependentListQuery {
+    /** Tenant identifier. */
+    tenantId: string;
+    /** Workspace identifier. */
+    workspaceId: string;
+    /** Project identifier. */
+    projectId: string;
+    /** Identifier that must occur as a string in the dependency array. */
+    dependencyTaskId: string;
+    /** Nonempty statuses eligible for recovery. */
+    statuses: TaskItem["status"][];
+    /** Maximum rows to return, from 1 through 100. */
+    limit: number;
+    /** Number of matching rows to skip. */
+    offset: number;
+}
+/** Exact mutable identity captured before a trusted task mutation. */
+interface TaskMutationSnapshot {
+    /** Status observed during authorization. */
+    status: TaskItem["status"];
+    /** Update timestamp observed during authorization. */
+    updatedAt: Date | string;
+    /** Owner kind observed during authorization. */
+    ownerType: TaskItem["ownerType"];
+    /** Owner identifier observed during authorization. */
+    ownerId: string;
+    /** Exact workspace scope observed during authorization. */
+    workspaceId: string | null;
+    /** Exact Project scope observed during authorization. */
+    projectId: string | null;
+}
 /**
  * TaskStore interface
  * Provides CRUD operations for task data
@@ -4030,6 +4201,13 @@ interface TaskStore {
      * @returns Array of matching tasks
      */
     list(filter: TaskListFilter): Promise<TaskItem[]>;
+    /**
+     * Lists exact project tasks that depend on another task.
+     *
+     * @param query Exact scope, statuses, and bounded offset page.
+     * @returns Matching tasks ordered by creation time and ID descending.
+     */
+    listDependents(query: TaskDependentListQuery): Promise<TaskItem[]>;
     /**
      * Update an existing task
      * @param tenantId Tenant identifier
@@ -4066,6 +4244,16 @@ interface TaskStore {
      * @returns The updated task, or `null` when the task is missing or either snapshot predicate differs.
      */
     updateIfStatusAndUpdatedAt(tenantId: string, id: string, updates: UpdateTaskRequest, expectedStatuses: TaskItem["status"][], expectedUpdatedAt: Date | string): Promise<TaskItem | null>;
+    /**
+     * Atomically updates a task only while its full trusted mutation snapshot matches.
+     *
+     * @param tenantId Tenant identifier.
+     * @param id Task identifier.
+     * @param updates Partial task data to update.
+     * @param snapshot Exact status, timestamp, owner, and Project scope snapshot.
+     * @returns Updated task, or `null` when any snapshot field differs.
+     */
+    updateIfSnapshot(tenantId: string, id: string, updates: UpdateTaskRequest, snapshot: TaskMutationSnapshot): Promise<TaskItem | null>;
     /**
      * Atomically updates a child only when both child and parent snapshots match.
      *
@@ -4079,6 +4267,8 @@ interface TaskStore {
      * @returns The updated child, or `null` when either task is missing or either snapshot differs.
      */
     updateIfStatusUpdatedAtAndParentUpdatedAt(tenantId: string, id: string, updates: UpdateTaskRequest, expectedStatuses: TaskItem["status"][], expectedUpdatedAt: Date | string, parentId: string, expectedParentUpdatedAt: Date | string): Promise<TaskItem | null>;
+    /** Atomically deletes a task only while its full trusted mutation snapshot matches. */
+    deleteIfSnapshot(tenantId: string, id: string, snapshot: TaskMutationSnapshot): Promise<boolean>;
     /**
      * Atomically update a task unless its current status is blocked.
      *
@@ -4155,9 +4345,86 @@ interface TaskWorkItemListFilter {
     limit?: number;
     offset?: number;
 }
+/** Canonical prefix for public task execution-result event identities. */
+declare const EXECUTION_RESULT_EVENT_KEY_PREFIX = "execution-result:";
+/**
+ * Portable regular-expression source for canonical execution-result event keys.
+ *
+ * The entire key is the literal `execution-result:` prefix followed by a nonempty
+ * suffix containing only ASCII letters, digits, period, underscore, colon, or hyphen.
+ * Colon is intentionally allowed so callers can compose structured suffixes.
+ */
+declare const EXECUTION_RESULT_EVENT_KEY_PATTERN_SOURCE = "^execution-result:[A-Za-z0-9._:-]+$";
+/** Compiled runtime expression for canonical execution-result event keys. */
+declare const EXECUTION_RESULT_EVENT_KEY_PATTERN: RegExp;
+/** Maximum pending execution-result rows accepted by one store query. */
+declare const MAX_PENDING_EXECUTION_RESULTS_LIMIT = 1000;
+/**
+ * Determines whether a runtime value is a canonical execution-result event key.
+ *
+ * @param value Runtime value to validate.
+ * @returns True only for the portable canonical ASCII grammar.
+ */
+declare function isExecutionResultEventKey(value: unknown): value is string;
+/** Canonical lifecycle actions projected into Project Rooms. */
+declare const PROJECT_TASK_LIFECYCLE_ACTIONS: readonly ["in_progress", "interrupted", "failed", "completed", "cancelled", "reassigned"];
+/** Lifecycle action eligible for Project Room projection. */
+type ProjectTaskLifecycleAction = typeof PROJECT_TASK_LIFECYCLE_ACTIONS[number];
+/** Exclusive cursor for deterministic project lifecycle pagination. */
+interface ProjectLifecycleEventCursor {
+    /** Creation timestamp of the last returned event. */
+    createdAt: Date;
+    /** Identifier of the last returned event. */
+    id: string;
+}
+/** Exact project scope and bounded page for canonical lifecycle events. */
+interface ProjectLifecycleEventQuery {
+    /** Tenant identifier. */
+    tenantId: string;
+    /** Workspace identifier. */
+    workspaceId: string;
+    /** Project identifier. */
+    projectId: string;
+    /** Nonempty lifecycle actions to include. */
+    actions: ProjectTaskLifecycleAction[];
+    /** Optional exclusive descending cursor. */
+    before?: ProjectLifecycleEventCursor;
+    /** Maximum rows to return, from 1 through 100. */
+    limit: number;
+}
 interface TaskWorkItemStore {
     create(params: CreateWorkItemRequest): Promise<TaskWorkItem>;
+    /** Atomically creates a work item only while the owning task snapshot matches. */
+    createIfTaskSnapshot?(params: CreateWorkItemRequest, snapshot: TaskMutationSnapshot): Promise<TaskWorkItem | null>;
     list(filter: TaskWorkItemListFilter): Promise<TaskWorkItem[]>;
+    /**
+     * List the newest bounded set of execution results awaiting reconciliation.
+     *
+     * Only `execution_result` items with a canonical ASCII
+     * `execution-result:[A-Za-z0-9._:-]+` event key are returned. An item is excluded when
+     * a task-scoped `execution_reconciled` item has a
+     * `detail.executionResultId` equal to that event key. Results are ordered by
+     * `createdAt` descending and then `id` descending for deterministic ties.
+     *
+     * @param params Tenant/task scope and required maximum number of rows.
+     * @returns At most `limit` pending execution-result work items, newest first.
+     * @throws RangeError with code `INVALID_LIMIT` unless limit is a safe integer from zero through
+     * {@link MAX_PENDING_EXECUTION_RESULTS_LIMIT}.
+     * @remarks Optional optimization. Stores that omit it remain compatible; callers may use a
+     * bounded, non-authoritative fallback through the pre-existing list and event-key methods.
+     */
+    listPendingExecutionResults?(params: {
+        tenantId: string;
+        taskId: string;
+        limit: number;
+    }): Promise<TaskWorkItem[]>;
+    /**
+     * Lists canonical lifecycle events in an exact project scope.
+     *
+     * @param query Exact scope, actions, exclusive cursor, and page bound.
+     * @returns Events ordered by creation time and ID descending.
+     */
+    listProjectLifecycleEvents?(query: ProjectLifecycleEventQuery): Promise<TaskWorkItem[]>;
     /**
      * Find an event by deterministic identity without list pagination.
      *
@@ -4176,8 +4443,26 @@ interface TaskWorkItemStore {
      */
     createIfAbsentByEventKey(params: CreateWorkItemIfAbsentRequest): Promise<TaskWorkItem>;
 }
+/** Work-item capabilities required by trusted Project Task consumers. */
+interface ProjectTaskWorkItemStore extends TaskWorkItemStore {
+    createIfTaskSnapshot(params: CreateWorkItemRequest, snapshot: TaskMutationSnapshot): Promise<TaskWorkItem | null>;
+    listProjectLifecycleEvents(query: ProjectLifecycleEventQuery): Promise<TaskWorkItem[]>;
+}
+/** Stable capability failure raised before any trusted Project Task mutation. */
+declare class ProjectTaskStoreUnsupportedError extends Error {
+    readonly missingMethods: readonly string[];
+    readonly code: "PROJECT_TASK_STORE_UNSUPPORTED";
+    constructor(missingMethods: readonly string[]);
+}
+/** Refines a Main-compatible WorkItem store for trusted Project Task consumers. */
+declare function requireProjectTaskWorkItemStore(store: TaskWorkItemStore): ProjectTaskWorkItemStore;
 
-/** A single canonical belief recorded in a task description. */
+/**
+ * A single canonical belief recorded in a task description.
+ *
+ * `probability` is retained as the persisted field name, but task guidance uses
+ * it as an evidence-support percentage rather than a calibrated probability.
+ */
 interface TaskBeliefEntry {
     key: string;
     probability: number;
@@ -4653,6 +4938,617 @@ type AgentWebAppStreamEvent = {
 /** Validate and copy one strict public GenUI block at a trust boundary. */
 declare function parseAgentWebAppGenUIBlock(value: unknown): AgentWebAppGenUIBlock | undefined;
 
+/**
+ * Capability bundle persistence protocol.
+ *
+ * A capability bundle is a tenant-scoped, flat collection of middleware
+ * configurations that can be selected by a project.
+ */
+
+/** A tenant-scoped collection of middleware configurations. */
+interface CapabilityBundle {
+    /** Stable bundle identifier. */
+    readonly id: string;
+    /** Tenant that owns the bundle. */
+    tenantId: string;
+    /** Tenant-local unique key. */
+    key: string;
+    /** Human-readable bundle name. */
+    name: string;
+    /** Optional bundle description. */
+    description?: string;
+    /** Middleware configurations contained in the bundle. */
+    capabilities: AgentMiddlewareConfig[];
+    /** Creation timestamp in ISO string format. */
+    createdAt: string;
+    /** Last update timestamp in ISO string format. */
+    updatedAt: string;
+}
+/** Public input used to create a capability bundle; the tenant-local key is generated internally. */
+interface CreateCapabilityBundleInput {
+    /** Human-readable bundle name. */
+    name: string;
+    /** Optional bundle description. */
+    description?: string;
+    /** Middleware configurations contained in the bundle. */
+    capabilities: AgentMiddlewareConfig[];
+}
+/** Input with a generated key used by persistence implementations. */
+interface InternalCreateCapabilityBundleInput extends Omit<CreateCapabilityBundleInput, "key"> {
+    key: string;
+}
+/** Public partial bundle update; the stable key is immutable and the revision is mandatory for gateway updates. */
+interface UpdateCapabilityBundleInput extends Partial<CreateCapabilityBundleInput> {
+    expectedUpdatedAt: string;
+}
+/** Store input retained for internal maintenance callers that may omit CAS. */
+interface InternalUpdateCapabilityBundleInput extends Partial<CreateCapabilityBundleInput> {
+    expectedUpdatedAt?: string;
+}
+/** Result returned when an update's expected revision no longer matches. */
+interface CapabilityBundleUpdateConflict {
+    status: "conflict";
+}
+/** Result of deleting a bundle only when no tenant project references it. */
+type CapabilityBundleDeleteResult = "deleted" | "not_found" | "in_use";
+/** Persistence operations for tenant-scoped capability bundles. */
+interface CapabilityBundleStore {
+    /** Lists all bundles owned by a tenant. */
+    listByTenant(tenantId: string): Promise<CapabilityBundle[]>;
+    /** Gets one bundle by tenant and identifier. */
+    getById(tenantId: string, id: string): Promise<CapabilityBundle | null>;
+    /** Gets bundles by tenant and identifiers. */
+    getManyByIds(tenantId: string, ids: string[]): Promise<CapabilityBundle[]>;
+    /** Creates a bundle for a tenant. */
+    create(tenantId: string, input: InternalCreateCapabilityBundleInput): Promise<CapabilityBundle>;
+    /** Updates a bundle, or returns null when it does not exist. */
+    /** Omitted expectedUpdatedAt is reserved for internal maintenance callers. */
+    update(tenantId: string, id: string, input: InternalUpdateCapabilityBundleInput): Promise<CapabilityBundle | CapabilityBundleUpdateConflict | null>;
+    /** Atomically deletes a bundle unless a tenant project references it. */
+    deleteIfUnreferenced(tenantId: string, id: string): Promise<CapabilityBundleDeleteResult>;
+}
+
+/**
+ * Capability runtime and preview protocol definitions.
+ *
+ * These contracts describe the resolved middleware runtime and the
+ * provenance data exposed while composing project bundles.
+ */
+
+/** Project configuration selecting ordered capability bundles. */
+interface ProjectCapabilityConfig {
+    /** Bundle identifiers in composition order. */
+    capabilityBundleIds: string[];
+}
+/** Resolved middleware available to an agent execution. */
+interface CapabilityRuntime {
+    /** Revision identifying the resolved capability set. */
+    revision: string;
+    /** Middleware indexed by middleware identifier. */
+    middleware: Record<string, AgentMiddlewareConfig>;
+}
+/** Provenance for a resolved capability field. */
+interface CapabilityFieldSource {
+    /** Middleware type owning the field. */
+    capabilityType: string;
+    /** RFC 6901 escaped JSON Pointer path of the field within the middleware configuration. */
+    fieldPath: string;
+    /** Bundle that supplied the field value. */
+    sourceBundleId: string;
+    /** Supplied field value. */
+    value: unknown;
+}
+/** A later bundle value replacing an earlier field value. */
+interface CapabilityOverride {
+    /** Middleware type owning the field. */
+    capabilityType: string;
+    /** RFC 6901 escaped JSON Pointer path of the overridden field. */
+    fieldPath: string;
+    /** Value supplied by the earlier bundle. */
+    previousValue: unknown;
+    /** Value supplied by the later bundle. */
+    nextValue: unknown;
+    /** Bundle that supplied the later value. */
+    sourceBundleId: string;
+}
+/** A warning or error produced while previewing bundle composition. */
+interface CapabilityPreviewIssue {
+    /** Stable issue code. */
+    code: string;
+    /** Human-readable issue description. */
+    message: string;
+    /** Related bundle, when applicable. */
+    bundleId?: string;
+    /** Related middleware type, when applicable. */
+    capabilityType?: string;
+    /** Related middleware field path, when applicable. */
+    fieldPath?: string;
+}
+/** Result of composing capability bundles for a project. */
+interface CapabilityPreview {
+    /** Bundle identifiers in composition order. */
+    bundleIds: string[];
+    /** Composed middleware configurations. */
+    capabilities: AgentMiddlewareConfig[];
+    /** Field replacements detected during composition. */
+    overrides: CapabilityOverride[];
+    /** Field-level provenance for composed values. */
+    sources: CapabilityFieldSource[];
+    /** Non-blocking composition issues. */
+    warnings: CapabilityPreviewIssue[];
+    /** Blocking composition issues. */
+    errors: CapabilityPreviewIssue[];
+    /** Revision identifying this preview. */
+    revision: string;
+    /** Bundle content revisions captured by this preview. */
+    bundleRevisions?: Record<string, string>;
+}
+
+/** Human access roles available within a project. */
+type ProjectHumanRole = "owner" | "admin" | "member" | "viewer";
+/** Lifecycle states for a human project membership. */
+type ProjectMembershipStatus = "active" | "removed";
+/** Roles a bot can hold within a project room. */
+type ProjectBotRole = "coordinator" | "specialist";
+/** Lifecycle states for a bot room membership. */
+type ProjectBotMembershipStatus = "active" | "paused" | "removed";
+/** Origins supported by project room messages. */
+type ProjectRoomMessageSource = "user" | "agent" | "task" | "routine" | "system";
+/** The main room associated with a project. */
+interface ProjectRoom {
+    id: string;
+    tenantId: string;
+    workspaceId: string;
+    projectId: string;
+    type: "main";
+    name: string;
+    createdAt: Date;
+    updatedAt: Date;
+}
+/** A user's membership and access role within a project. */
+interface ProjectMembership {
+    id: string;
+    tenantId: string;
+    projectId: string;
+    userId: string;
+    role: ProjectHumanRole;
+    status: ProjectMembershipStatus;
+    joinedAt: Date;
+    updatedAt: Date;
+}
+/** A bot's role, presentation, and execution thread within a project room. */
+interface ProjectBotMembership {
+    id: string;
+    tenantId: string;
+    workspaceId: string;
+    projectId: string;
+    roomId: string;
+    assistantId: string;
+    role: ProjectBotRole;
+    title: string;
+    responsibility?: string;
+    mentionName: string;
+    status: ProjectBotMembershipStatus;
+    roomThreadId: string;
+    joinedAt: Date;
+    updatedAt: Date;
+}
+/** Identifies a human author of a project room message. */
+interface ProjectRoomMessageHumanAuthor {
+    type: "human";
+    userId: string;
+}
+/** Identifies a bot membership as the author of a project room message. */
+interface ProjectRoomMessageBotAuthor {
+    type: "bot";
+    membershipId: string;
+    assistantId: string;
+}
+/** Identifies the system as the author of a project room message. */
+interface ProjectRoomMessageSystemAuthor {
+    type: "system";
+}
+/** The discriminated author variants supported by project room messages. */
+type ProjectRoomMessageAuthor = ProjectRoomMessageHumanAuthor | ProjectRoomMessageBotAuthor | ProjectRoomMessageSystemAuthor;
+/** A bot or the whole team targeted by a room message. */
+type ProjectRoomMention = {
+    type: "bot";
+    membershipId: string;
+} | {
+    type: "team";
+};
+/** Text payload carried by a project room message. */
+interface ProjectRoomTextContent {
+    type: "text";
+    text: string;
+}
+/** A message posted to a project room. */
+interface ProjectRoomMessage {
+    id: string;
+    tenantId: string;
+    workspaceId: string;
+    projectId: string;
+    roomId: string;
+    author: ProjectRoomMessageAuthor;
+    content: ProjectRoomTextContent;
+    mentions: ProjectRoomMention[];
+    replyToMessageId?: string;
+    source: ProjectRoomMessageSource;
+    sourceId?: string;
+    idempotencyKey?: string;
+    createdAt: Date;
+}
+/** Stable position used to page through project room messages. */
+interface ProjectRoomMessageCursor {
+    createdAt: Date;
+    id: string;
+}
+/** Metadata linking a room-presence thread to its project room bot membership. */
+interface ProjectRoomThreadMetadata {
+    source: "project_room";
+    kind: "room_presence";
+    workspaceId: string;
+    projectId: string;
+    roomId: string;
+    membershipId: string;
+    assistantId: string;
+}
+/** Metadata linking a task-execution thread to its owning project task and bot membership. */
+interface ProjectTaskThreadMetadata {
+    source: "project_task";
+    kind: "task_execution";
+    workspaceId: string;
+    projectId: string;
+    roomId: string;
+    membershipId: string;
+    assistantId: string;
+    taskId: string;
+    parentTaskId?: string;
+}
+
+/** Persistence operations for a project's canonical main room. */
+interface ProjectRoomStore {
+    /** Creates the main room if needed and returns the canonical record. */
+    ensureMainRoom(input: {
+        id: string;
+        tenantId: string;
+        workspaceId: string;
+        projectId: string;
+        name: string;
+    }): Promise<ProjectRoom>;
+    /** Finds the main room for a project, if one exists. */
+    getMainRoom(tenantId: string, projectId: string): Promise<ProjectRoom | null>;
+}
+
+/** Result of an atomic human membership mutation, including its committed row. */
+type ProjectMembershipMutationResult = {
+    kind: "updated" | "removed";
+    membership: ProjectMembership;
+} | {
+    kind: "not_found" | "conflict" | "last_owner";
+};
+/** Persistence operations for human membership in a project. */
+interface ProjectMembershipStore {
+    /** Lists memberships belonging to a project. */
+    list(tenantId: string, projectId: string): Promise<ProjectMembership[]>;
+    /** Finds a user's membership in a project, if one exists. */
+    findByUser(tenantId: string, projectId: string, userId: string): Promise<ProjectMembership | null>;
+    /** Creates a project membership. */
+    create(input: Omit<ProjectMembership, "joinedAt" | "updatedAt">): Promise<ProjectMembership>;
+    /**
+     * Atomically initializes an empty Project with its first owner.
+     * `created` means this call initialized the Project; `existing` means the
+     * requested user already owns the initialized Project and this was an
+     * idempotent retry; `already_initialized` means membership rows exist but
+     * this call did not produce either initial-owner outcome.
+     */
+    createInitialOwner(input: Omit<ProjectMembership, "role" | "status" | "joinedAt" | "updatedAt">): Promise<{
+        kind: "created" | "existing";
+        membership: ProjectMembership;
+    } | {
+        kind: "already_initialized";
+    }>;
+    /**
+     * Updates a role within the tenant using optimistic concurrency and owner
+     * safeguards. `not_found` means the membership is not in the tenant;
+     * `conflict` means `updatedAt` differs from `expectedUpdatedAt`.
+     */
+    updateRole(input: {
+        tenantId: string;
+        id: string;
+        role: ProjectHumanRole;
+        expectedUpdatedAt: Date;
+    }): Promise<ProjectMembershipMutationResult>;
+    /**
+     * Removes a membership within the tenant using optimistic concurrency and
+     * owner safeguards. `not_found` means the membership is not in the tenant;
+     * `conflict` means `updatedAt` differs from `expectedUpdatedAt`.
+     */
+    remove(input: {
+        tenantId: string;
+        id: string;
+        expectedUpdatedAt: Date;
+    }): Promise<ProjectMembershipMutationResult>;
+}
+
+/** Persistence operations for bot membership in a project room. */
+interface ProjectBotMembershipStore {
+    /** Lists bot memberships belonging to a project. */
+    list(tenantId: string, projectId: string): Promise<ProjectBotMembership[]>;
+    /** Finds a bot membership by identifier within a tenant. */
+    findById(tenantId: string, id: string): Promise<ProjectBotMembership | null>;
+    /** Finds a bot membership by assistant within a project. */
+    findByAssistant(tenantId: string, projectId: string, assistantId: string): Promise<ProjectBotMembership | null>;
+    /**
+     * Saves a bot membership. A new row returns `created`, an existing active or
+     * paused row returns `updated`, and a removed row returns `reactivated`.
+     * `coordinator_conflict` means a non-removed
+     * coordinator already exists for the Tenant+Project; `mention_conflict`
+     * means the mention name is already used by an active or paused membership
+     * in the Tenant+room.
+     */
+    save(input: Omit<ProjectBotMembership, "joinedAt" | "updatedAt">): Promise<{
+        kind: "created" | "updated" | "reactivated";
+        membership: ProjectBotMembership;
+    } | {
+        kind: "coordinator_conflict" | "mention_conflict";
+    }>;
+    /**
+     * Updates a bot membership using optimistic concurrency and uniqueness
+     * safeguards. `not_found` means the membership is not in the tenant;
+     * `conflict` means `updatedAt` differs from `expectedUpdatedAt`.
+     * `coordinator_conflict` applies to the one non-removed Coordinator per
+     * Tenant+Project rule; `mention_conflict` applies to mention uniqueness
+     * among active and paused memberships in the Tenant+room.
+     */
+    update(input: {
+        tenantId: string;
+        id: string;
+        patch: Partial<Pick<ProjectBotMembership, "role" | "title" | "responsibility" | "mentionName" | "status">>;
+        expectedUpdatedAt: Date;
+    }): Promise<{
+        kind: "updated";
+        membership: ProjectBotMembership;
+    } | {
+        kind: "not_found" | "conflict" | "coordinator_conflict" | "mention_conflict";
+    }>;
+}
+
+/** Persistence operations for messages in a project room. */
+interface ProjectRoomMessageStore {
+    /** Creates a room message. */
+    create(input: Omit<ProjectRoomMessage, "createdAt">): Promise<ProjectRoomMessage>;
+    /** Creates or returns the existing room message for an idempotency key. */
+    createIdempotent(input: Omit<ProjectRoomMessage, "createdAt"> & {
+        idempotencyKey: string;
+    }): Promise<ProjectRoomMessage>;
+    /** Lists messages strictly before an optional cursor, up to the requested limit. */
+    list(input: {
+        tenantId: string;
+        roomId: string;
+        before?: ProjectRoomMessageCursor;
+        limit: number;
+    }): Promise<ProjectRoomMessage[]>;
+    /** Finds a room message by identifier within a tenant. */
+    findById(tenantId: string, id: string): Promise<ProjectRoomMessage | null>;
+}
+
+/** A safely extracted value from an own enumerable data-property descriptor. */
+interface DescriptorDataValue {
+    ok: true;
+    value: unknown;
+}
+/**
+ * Reads an own enumerable data-property descriptor without consulting its prototype.
+ *
+ * @param descriptor Property descriptor to inspect.
+ * @returns The descriptor value when it is an own enumerable data descriptor, otherwise `undefined`.
+ */
+declare function descriptorDataValue(descriptor: unknown): DescriptorDataValue | undefined;
+/**
+ * Copies an object-like value into a local plain record using only exact own enumerable data descriptors.
+ *
+ * Prototypes are deliberately ignored so records from other JavaScript realms remain valid and inherited
+ * behavior can never participate in validation.
+ *
+ * @param value Untrusted value to snapshot.
+ * @param required Own string keys that must be present.
+ * @param optional Own string keys that may be present.
+ * @returns A canonical local record, or `undefined` for malformed descriptors, keys, arrays, or proxies.
+ */
+declare function snapshotExactRecord(value: unknown, required: readonly string[], optional?: readonly string[]): Record<string, unknown> | undefined;
+/**
+ * Copies a dense cross-realm array using only own element data descriptors and the intrinsic length descriptor.
+ *
+ * @param value Untrusted value to snapshot.
+ * @returns A canonical local dense array, or `undefined` for holes, extras, accessors, or malformed proxies.
+ */
+declare function snapshotExactArray(value: unknown): unknown[] | undefined;
+
+/** A message shape safe to expose to Project Room clients. */
+interface ProjectRoomPublicMessage {
+    id: string;
+    roomId: string;
+    author: {
+        type: "human";
+        userId: string;
+    } | {
+        type: "bot";
+        membershipId: string;
+    } | {
+        type: "system";
+    };
+    content: {
+        type: "text";
+        text: string;
+    };
+    mentions: ProjectRoomMention[];
+    replyToMessageId?: string;
+    source: ProjectRoomMessageSource;
+    createdAt: string;
+}
+/** A human membership shape safe to expose to Project Room clients. */
+interface ProjectRoomPublicMembership {
+    id: string;
+    userId: string;
+    role: ProjectHumanRole;
+    status: ProjectMembershipStatus;
+    joinedAt: string;
+    updatedAt: string;
+}
+/** A bot membership shape safe to expose to Project Room clients. */
+interface ProjectRoomPublicBotMembership {
+    id: string;
+    role: ProjectBotRole;
+    title: string;
+    responsibility?: string;
+    mentionName: string;
+    status: ProjectBotMembershipStatus;
+    joinedAt: string;
+    updatedAt: string;
+}
+/** A fully identified business event carried by the realtime stream. */
+interface ProjectRoomEventOf<TType extends string, TData> {
+    id: string;
+    type: TType;
+    occurredAt: string;
+    data: TData;
+}
+/** A newly committed message event. */
+type ProjectRoomMessageCreatedEvent = ProjectRoomEventOf<"message.created", {
+    message: ProjectRoomPublicMessage;
+}>;
+/** A changed bot roster event. */
+type ProjectRoomRosterChangedEvent = ProjectRoomEventOf<"roster.changed", {
+    change: "added" | "updated" | "paused" | "resumed" | "removed";
+    membership: ProjectRoomPublicBotMembership;
+}>;
+/** A changed human membership event. */
+type ProjectRoomMembershipChangedEvent = ProjectRoomEventOf<"membership.changed", {
+    change: "added" | "role_changed" | "removed";
+    membership: ProjectRoomPublicMembership;
+}>;
+/** A changed Project Task fact event. */
+type ProjectRoomTaskChangedEvent = ProjectRoomEventOf<"task.changed", {
+    taskId: string;
+    status: TaskItem["status"];
+    ownerMembershipId: string;
+    updatedAt: string;
+}>;
+/** All identified business events retained by the realtime broker. */
+type ProjectRoomBusinessEvent = ProjectRoomMessageCreatedEvent | ProjectRoomRosterChangedEvent | ProjectRoomMembershipChangedEvent | ProjectRoomTaskChangedEvent;
+/** A business event before the broker assigns its process-local ID. */
+type ProjectRoomBusinessEventDraft = Omit<ProjectRoomMessageCreatedEvent, "id"> | Omit<ProjectRoomRosterChangedEvent, "id"> | Omit<ProjectRoomMembershipChangedEvent, "id"> | Omit<ProjectRoomTaskChangedEvent, "id">;
+/** A connection control event; control events are never replayed. */
+type ProjectRoomControlEvent = {
+    type: "ready";
+    data: {
+        epoch: string;
+        headEventId: string | null;
+    };
+} | {
+    type: "resync";
+    data: {
+        reason: "SERVER_RESTART" | "CURSOR_EXPIRED" | "SLOW_CONSUMER";
+    };
+} | {
+    type: "access.revoked";
+    data: {
+        reason: "PROJECT_ACCESS_REVOKED" | "TOKEN_EXPIRED";
+    };
+};
+/** The authenticated identity used by Project Room realtime access checks. */
+interface ProjectRoomRealtimeActor {
+    tenantId: string;
+    userId: string;
+    projectId: string;
+    tokenExpiresAt: number;
+}
+/** Writable HTTP socket surface required by the bounded SSE transport. */
+interface ProjectRoomSseWritable {
+    write(chunk: string): boolean;
+    end(): void;
+    destroy(): void;
+    on(event: "close" | "error" | "drain", listener: () => void): this;
+    off(event: "close" | "error" | "drain", listener: () => void): this;
+}
+/** The scope used to isolate events between tenant rooms. */
+interface ProjectRoomEventScope {
+    tenantId: string;
+    roomId: string;
+    projectId: string;
+}
+/** An internal broker event carrying scope that is removed before public serialization. */
+type ProjectRoomScopedBusinessEvent = ProjectRoomBusinessEvent & {
+    scope: ProjectRoomEventScope;
+};
+/** A broker subscription containing replay and its room head. */
+interface ProjectRoomEventSubscription {
+    replay: ProjectRoomBusinessEvent[];
+    headEventId: string | null;
+    unsubscribe(): void;
+}
+/** The narrow broker contract consumed by realtime publishers and services. */
+interface ProjectRoomEventBrokerProtocol {
+    readonly epoch: string;
+    publish(scope: ProjectRoomEventScope, draft: ProjectRoomBusinessEventDraft): ProjectRoomScopedBusinessEvent;
+    subscribe(scope: ProjectRoomEventScope, afterEventId: string | undefined, listener: (event: ProjectRoomBusinessEvent) => void): ProjectRoomEventSubscription;
+    close(): void;
+}
+/** A typed cursor failure requiring client REST resynchronization. */
+declare class ProjectRoomCursorError extends Error {
+    readonly code: "SERVER_RESTART" | "CURSOR_EXPIRED";
+    readonly name = "ProjectRoomCursorError";
+    constructor(code: "SERVER_RESTART" | "CURSOR_EXPIRED");
+}
+/** A typed failure raised when the process-local event sequence is exhausted. */
+declare class ProjectRoomBrokerCapacityError extends Error {
+    readonly name = "ProjectRoomBrokerCapacityError";
+    readonly code: "PROJECT_ROOM_EVENT_SEQUENCE_EXHAUSTED";
+    constructor();
+}
+/** The parsed components of a canonical Project Room event ID. */
+interface ProjectRoomEventId {
+    epoch: string;
+    sequence: number;
+}
+/** Parses a canonical event ID, returning undefined for malformed or unsafe IDs. */
+declare function parseProjectRoomEventId(value: unknown): ProjectRoomEventId | undefined;
+/** Checks an event ID without relying on realm-specific object identity. */
+declare function isProjectRoomEventId(value: unknown): value is string;
+/** Maps a canonical internal message to the strict public message DTO. */
+declare function toProjectRoomPublicMessage(value: unknown): ProjectRoomPublicMessage | undefined;
+/** A descriptor-safe message projection together with its canonical realtime scope. */
+declare function snapshotProjectRoomMessageRealtime(value: unknown): {
+    scope: {
+        tenantId: string;
+        roomId: string;
+        projectId: string;
+    };
+    publicMessage: ProjectRoomPublicMessage;
+} | undefined;
+/** Maps a canonical internal human membership to the strict public DTO. */
+declare function toProjectRoomPublicMembership(value: unknown): ProjectRoomPublicMembership | undefined;
+/** A descriptor-safe human membership projection with canonical tenant/project scope. */
+declare function snapshotProjectRoomMembershipRealtime(value: unknown): {
+    scope: {
+        tenantId: string;
+        projectId: string;
+    };
+    publicMembership: ProjectRoomPublicMembership;
+} | undefined;
+/** Maps a canonical internal bot membership to the strict public DTO. */
+declare function toProjectRoomPublicBotMembership(value: unknown): ProjectRoomPublicBotMembership | undefined;
+/** A descriptor-safe bot membership projection with canonical realtime scope. */
+declare function snapshotProjectRoomBotMembershipRealtime(value: unknown): {
+    scope: {
+        tenantId: string;
+        roomId: string;
+        projectId: string;
+    };
+    publicMembership: ProjectRoomPublicBotMembership;
+} | undefined;
+
 /**
  * YAML Workflow DSL — linear model with parallel blocks
  *
@@ -4927,18 +5823,59 @@ interface PluginConnection {
 }
 /**
  * 工具元信息（用于前端 allowedTools 筛选）
+ *
+ * New connection-backed plugin tools that select one connection must accept
+ * the selected key as `args.connectionKey`. Existing legacy tools retain their
+ * established resource argument names.
  */
 interface PluginToolMeta {
     name: string;
     description: string;
 }
+/**
+ * A text file included in a plugin skill bundle.
+ *
+ * @property content - Text content written to the skill resource file.
+ * @property mimeType - Optional MIME type for consumers that need it.
+ */
+interface PluginSkillResource {
+    content: string;
+    mimeType?: string;
+}
+/**
+ * Versioned definition of a plugin-provided skill.
+ *
+ * @property version - Bundle version used to detect resource updates.
+ * @property content - Complete SKILL.md markdown content.
+ * @property resources - Optional text resources keyed by safe relative paths.
+ */
+interface PluginSkillDefinition {
+    version: string;
+    content: string;
+    resources?: Record<string, PluginSkillResource>;
+}
+/**
+ * Standard configuration for a new connection-backed plugin.
+ *
+ * `PluginMeta.type` is also the Connection Store type. `connections` selects
+ * connection keys of that type; `connectAll` opts into using all available
+ * connections of that type. Do not add a separate connection or resource type
+ * or selector field to this configuration.
+ */
+type PluginStandardConnectionConfig = {
+    connections: string[];
+    connectAll?: boolean;
+};
 /**
  * 插件元数据（开发者声明）
  *
  * connectionSchema 不在此类型中——由 serializePluginMeta 自动推导后注入 PluginMetaOutput。
  */
 interface PluginMeta {
-    /** 插件唯一标识，如 "erp" */
+    /**
+     * 插件唯一标识，如 "erp"; for connection-backed plugins this is also the
+     * Connection Store type.
+     */
     type: string;
     /** 显示名称 */
     name: string;
@@ -4952,9 +5889,13 @@ interface PluginMeta {
     icon?: string;
     /** 工具清单（可选，middleware 能自动提取时不需要写） */
     tools?: PluginToolMeta[];
-    /** 中间件配置 schema（用于 agent 配置面板） */
+    /**
+     * 中间件配置 schema（用于 agent 配置面板）。新的 connection-backed
+     * plugins use `connections: string[]` and optional `connectAll?: boolean`.
+     * Do not introduce connectionType, resourceType, or resourceSelector fields.
+     */
     configSchema?: Record<string, unknown>;
-    /** 默认配置 */
+    /** 默认配置；connection-backed plugins use PluginStandardConnectionConfig. */
     defaultConfig?: Record<string, unknown>;
     /** 推荐配置的 companion 插件 */
     recommends?: string[];
@@ -4964,6 +5905,8 @@ interface PluginMeta {
      * 第三方插件可自定义分类名，前端会原样显示；未提供时归入 "Other"。
      */
     category?: string;
+    /** Whether this plugin's middleware may be included in capability bundles. */
+    capabilityBundleEligible?: boolean;
 }
 /**
  * 插件元数据输出（API 返回格式）
@@ -4992,7 +5935,7 @@ interface PluginMetaOutput extends PluginMeta {
  * const myPlugin: Plugin = {
  *   meta: { ... },
  *   middleware: (config, context) => {
- *     const skills = context?.pluginSkillContents ?? {};
+ *     const skills = context?.pluginSkills ?? {};
  *     return createMyMiddleware({ ...config, pluginSkills: skills });
  *   },
  * };
@@ -5000,12 +5943,14 @@ interface PluginMetaOutput extends PluginMeta {
  */
 interface PluginContext {
     /**
-     * Cross-plugin aggregated skill contents (SKILL.md, keyed by skill name).
+     * Cross-plugin aggregated skill bundles, keyed by skill name.
      * Collected from all enabled plugins before the main middleware loop.
      * Most plugins should ignore this; only cross-plugin coordination
      * middleware (e.g. skillMiddleware) consumes it.
      */
-    pluginSkillContents?: Record<string, string>;
+    pluginSkills?: Record<string, PluginSkillDefinition>;
+    /** Owning plugin type for each enabled plugin skill bundle. */
+    pluginSkillOwners?: Record<string, string>;
 }
 /**
  * Factory function that creates middleware from plugin config.
@@ -5051,7 +5996,7 @@ interface Plugin {
      * 名称必须以 "{pluginType}-" 为前缀，注册时校验。
      * Builder 在构建中间件之前从所有启用的插件中收集。
      */
-    skills?: Record<string, string>;
+    skills?: Record<string, PluginSkillDefinition>;
     /**
      * 插件贡献的 Agent 定义（以 agent key 为键）。
      * 在租户首次访问时通过 ensurePluginAgentsForTenant 按租户注册到
@@ -5129,4 +6074,54 @@ type Timestamp = number;
  */
 type Callback<T = any, R = void> = (data: T) => R | Promise<R>;
 
-export { type A2AApiKeyEntry, type A2AApiKeyRecord, type A2AApiKeyStore, type A2AAuthContext, type A2AExposure, type A2ARemoteAgentConfig, type AgentClient, type AgentConfig, type AgentConfigWithTools, type AgentLatticeProtocol, type AgentMenuConfig, type AgentMiddlewareConfig, type AgentRunConfig, AgentType, type AgentWebApp, type AgentWebAppAppearance, type AgentWebAppBootstrap, type AgentWebAppCalloutWidget, type AgentWebAppError, type AgentWebAppErrorCode, type AgentWebAppFeatures, type AgentWebAppGenUIBlock, type AgentWebAppInterrupt, type AgentWebAppRuntimeMessage, type AgentWebAppRuntimeThread, type AgentWebAppScope, type AgentWebAppStatus, type AgentWebAppStore, type AgentWebAppStorePatch, type AgentWebAppStreamEvent, type AgentWebAppTableWidget, type AgentWebAppThreadMetadata, type AgentWebAppUpdateOptions, type Assistant, type AssistantMessage, type AssistantStore, type Attachment, type AvailableModule, type BaseLatticeProtocol, type BaseMessage, type Binding, type BindingRegistry, type BootstrapFilesConfig, type BrowserMiddlewareConfig, type Callback, type ChannelAdapter, type ChannelInstallation, type ChannelInstallationStore, type ChannelInstallationType, type ClawMiddlewareConfig, type CodeEvalMiddlewareConfig, type Collection, type CollectionField, type CollectionFieldType, type CollectionMiddlewareConfig, type CollectionSchema, type CollectionStore, type ConnectionEntry, type ConnectionStore, type ConversationRecord, type CreateA2AApiKeyInput, type CreateAgentWebAppInput, type CreateAssistantRequest, type CreateBindingInput, type CreateChannelInstallationRequest, type CreateCollectionRequest, type CreateConversationInput, type CreateDatabaseConfigRequest, type CreateEvalCaseRequest, type CreateEvalProjectRequest, type CreateEvalRunRequest, type CreateEvalSuiteRequest, type CreateMcpServerConfigRequest, type CreateMenuItemInput, type CreateMetricsServerConfigRequest, type CreateProjectRequest, type CreateRunStepRequest, type CreateShareRequest, type CreateSkillRequest, type CreateTaskRequest, type CreateTenantRequest, type CreateThreadRequest, type CreateUserRequest, type CreateUserTenantLinkRequest, type CreateWorkItemIfAbsentRequest, type CreateWorkItemRequest, type CreateWorkflowRunRequest, type CreateWorkspaceRequest, type CustomMenuConfig, type DataSource, type DatabaseConfig, type DatabaseConfigEntry, type DatabaseConfigStore, type DatabaseType, type DeepAgentConfig, type DeveloperMessage, type DispatchResult, type EmbeddingsConfig, type EmbeddingsLatticeProtocol, type EvalCase, type EvalProject, type EvalProjectReport, type EvalRun, type EvalRunResult, type EvalStore, type EvalSuite, type ExecuteSqlQueryRequest, type ExecuteSqlQueryResponse, type FilterCondition, type GraphBuildOptions, type HtmlMenuConfig, type IConversationStore, type ID, type InboundMessage, type InternalAgentNode, type InternalBaseNode, type InternalDSL, type InternalEdge, type InternalInput, type InternalInputNode, type InternalMapNode, type InternalNode, type InternalNodeConfig, type InternalOutput, type InternalState, type InternalStateField, type InternalTerminalNode, type InterruptMessage, type InterruptPolicy, type LLMConfig, type LarkChannelInstallationConfig, type LatticeError, type LatticeEventBus, type LatticeMessage, type LocalA2AProviderId, type LocalA2AProviderState, type LocalA2AProviderStatus, type LocalA2ATemplateDefinition, type LocalRuntimeConfig, type LoggerClient, type LoggerConfig, type LoggerContext, type LoggerLatticeProtocol, LoggerType, type McpClient, type McpClientOptions, type McpConnectionStatus, type McpLatticeMessage, type McpLatticeProtocol, McpMessageType, type McpServerConfig, type McpServerConfigEntry, type McpServerConfigStore, type McpStats, type McpTool, type McpToolResult, type McpTransportType, type MemoryClient, type MemoryConfig, type MemoryLatticeProtocol, MemoryType, type MenuContentConfig, type MenuContentType, type MenuItem, type MenuRegistry, type MenuTarget, type Message, type MessageChunk, type MessageChunkType, MessageChunkTypes, type MessageContext, type MessageMiddleware, type MetricColumn, type MetricDataPoint, type MetricMeta, type MetricQueryResult, type MetricsMiddlewareConfig, type MetricsServerConfig, type MetricsServerConfigEntry, type MetricsServerConfigStore, type MetricsServerType, type MiddlewareType, type ModelLatticeProtocol, type OutboundMessage, type PaginatedResult, type PaginationParams, type PinoFileOptions, type Plugin, type PluginConnection, type PluginConnectionFieldSchema, type PluginConnectionTestResult, type PluginContext, type PluginDiscoveredResource, type PluginMeta, type PluginMetaOutput, type PluginMiddlewareFactory, type PluginToolMeta, type ProcessingAgentConfig, type Project, type ProjectFilter, type ProjectKind, type ProjectStore, type QueryParams, type QueryResultFormat, type QueryWorkflowRunsOptions, type QueryWorkflowRunsResult, type QueueClient, type QueueConfig, type QueueLatticeProtocol, type QueueResult, QueueType, type ReactAgentConfig, type ReplyTarget, type ResourceAddress, type ResourceResolver, type Result, type RunStep, type STTClient, type STTConfig, type STTModelLatticeProtocol, type SandboxMiddlewareConfig, type ScheduleClient, type ScheduleConfig, type ScheduleCronOptions, ScheduleExecutionType, type ScheduleLatticeProtocol, type ScheduleOnceOptions, type ScheduleStorage, ScheduleType, type ScheduledTaskDefinition, ScheduledTaskStatus, type SchedulerMiddlewareConfig, type SemanticMetricsFilter, type SemanticMetricsQueryRequest, type SemanticMetricsQueryResponse, type SemanticMetricsServerConfig, type ShareRecord, type ShareResult, type ShareVisibility, type SharedResourceStore, type Skill, type SkillClient, type SkillClientType, type SkillConfig, type SkillLatticeProtocol, type SkillStore, type SkillStoreContext, type SqlMiddlewareConfig, type StepStatus, type StepType, type StorageType, type SystemMessage, type TableQueryRequest, type TableQueryResponse, type TaskBeliefDiagnosticCode, type TaskBeliefEntry, type TaskBeliefParseFailure, type TaskBeliefParseResult, type TaskBeliefParseSuccess, type TaskBeliefState, type TaskFileRef, type TaskHandler, type TaskItem, type TaskListFilter, type TaskStore, type TaskWorkItem, type TaskWorkItemListFilter, type TaskWorkItemStore, type TeamAgentConfig, type TeamTeammateConfig, type Tenant, type TenantStatus, type TenantStore, type TestMcpServerToolsResponse, type Thread, type ThreadStore, type Timestamp, type ToolCall, type ToolConfig, type ToolExecutor, type ToolLatticeProtocol, type ToolMessage, type TopologyEdge, type TranscriptionResult, type UIComponent, UIComponentType, type UIConfig, type UILatticeProtocol, type UpdateAgentWebAppInput, type UpdateChannelInstallationRequest, type UpdateCollectionRequest, type UpdateDatabaseConfigRequest, type UpdateMcpServerConfigRequest, type UpdateMenuItemInput, type UpdateMetricsServerConfigRequest, type UpdateProjectRequest, type UpdateRunStepRequest, type UpdateTaskRequest, type UpdateTenantRequest, type UpdateUserRequest, type UpdateUserTenantLinkRequest, type UpdateWorkflowRunRequest, type UpdateWorkspaceRequest, type User, type UserMessage, type UserStatus, type UserStore, type UserTenantLink, type UserTenantLinkStore, type UserTenantRole, type VectorStoreConfig, type VectorStoreCreateParams, type VectorStoreLatticeProtocol, type VectorStoreProvider, type WechatChannelInstallationConfig, type WorkflowAgentConfig, type WorkflowRun, type WorkflowRunStatus, type WorkflowTrackingStore, type Workspace, type WorkspaceStore, type YamlAgentStep, type YamlMapStep, type YamlParallelBlock, type YamlTopLevelStep, type YamlWorkflow, getSubAgentsFromConfig, getToolsFromConfig, hasTools, isA2ARemoteAgentConfig, isDeepAgentConfig, isProcessingAgentConfig, isTeamAgentConfig, isWorkflowAgentConfig, parseAgentWebAppGenUIBlock, parseTaskBeliefState, replaceTaskBeliefState, taskBeliefStatesEqual };
+/** Queue execution behavior available to privileged host dispatchers. */
+type QueuedExecutionMode = "followup";
+/** Trusted Project Room identity persisted with a privileged queue message. */
+interface ProjectRoomTrustedRunContext {
+    tenantId: string;
+    workspaceId: string;
+    projectId: string;
+    roomId: string;
+    sourceRoomMessageId: string;
+    membershipId: string;
+    assistantId: string;
+    inputMessageId: string;
+    role: "coordinator" | "specialist";
+    title: string;
+    responsibility?: string;
+}
+/** Trusted Project Task identity persisted with a privileged queue message. */
+interface ProjectTaskTrustedRunContext {
+    tenantId: string;
+    workspaceId: string;
+    projectId: string;
+    roomId: string;
+    membershipId: string;
+    assistantId: string;
+    taskId: string;
+    threadId: string;
+    inputMessageId: string;
+}
+/** Host-authenticated metadata that cannot be supplied through public Agent APIs. */
+interface TrustedRunContext {
+    projectRoom?: ProjectRoomTrustedRunContext;
+    projectTask?: ProjectTaskTrustedRunContext;
+}
+/**
+ * Strictly validates and clones host-authenticated queue context read from durable storage.
+ *
+ * @param value - Untrusted decoded database value.
+ * @returns A validated defensive clone of the trusted run context.
+ * @throws Error when the stored value does not exactly match the trusted context contract.
+ */
+declare function parseTrustedRunContext(value: unknown): TrustedRunContext;
+/**
+ * Strictly validates a queued execution mode read from durable storage.
+ *
+ * @param value - Untrusted database value.
+ * @returns The validated execution mode.
+ * @throws Error when the stored value is not supported.
+ */
+declare function parseQueuedExecutionMode(value: unknown): QueuedExecutionMode;
+
+export { type A2AApiKeyEntry, type A2AApiKeyRecord, type A2AApiKeyStore, type A2AAuthContext, type A2AExposure, type A2ARemoteAgentConfig, type AgentClient, type AgentConfig, type AgentConfigWithTools, type AgentLatticeProtocol, type AgentMenuConfig, type AgentMiddlewareConfig, type AgentRunConfig, AgentType, type AgentWebApp, type AgentWebAppAppearance, type AgentWebAppBootstrap, type AgentWebAppCalloutWidget, type AgentWebAppError, type AgentWebAppErrorCode, type AgentWebAppFeatures, type AgentWebAppGenUIBlock, type AgentWebAppInterrupt, type AgentWebAppRuntimeMessage, type AgentWebAppRuntimeThread, type AgentWebAppScope, type AgentWebAppStatus, type AgentWebAppStore, type AgentWebAppStorePatch, type AgentWebAppStreamEvent, type AgentWebAppTableWidget, type AgentWebAppThreadMetadata, type AgentWebAppUpdateOptions, type Assistant, type AssistantMessage, type AssistantStore, type Attachment, type AvailableModule, type BaseLatticeProtocol, type BaseMessage, type Binding, type BindingListParams, type BindingMutablePatch, type BindingRegistry, type BootstrapFilesConfig, type BrowserMiddlewareConfig, type Callback, type CapabilityBundle, type CapabilityBundleDeleteResult, type CapabilityBundleStore, type CapabilityBundleUpdateConflict, type CapabilityFieldSource, type CapabilityOverride, type CapabilityPreview, type CapabilityPreviewIssue, type CapabilityRuntime, type ChannelAdapter, type ChannelBindingMigrationConflict, ChannelBindingMigrationConflictError, type ChannelInstallation, type ChannelInstallationStore, type ChannelInstallationType, type ClawMiddlewareConfig, type CodeEvalMiddlewareConfig, type Collection, type CollectionField, type CollectionFieldType, type CollectionMiddlewareConfig, type CollectionSchema, type CollectionStore, type ConnectionEntry, type ConnectionStore, type ConversationRecord, type CreateA2AApiKeyInput, type CreateAgentWebAppInput, type CreateAssistantRequest, type CreateBindingInput, type CreateCapabilityBundleInput, type CreateChannelInstallationInput, type CreateChannelInstallationRequest, type CreateCollectionRequest, type CreateConversationInput, type CreateDatabaseConfigRequest, type CreateEvalCaseRequest, type CreateEvalProjectRequest, type CreateEvalRunRequest, type CreateEvalSuiteRequest, type CreateMcpServerConfigRequest, type CreateMenuItemInput, type CreateMetricsServerConfigRequest, type CreateProjectRequest, type CreateRunStepRequest, type CreateShareRequest, type CreateSkillRequest, type CreateTaskRequest, type CreateTenantRequest, type CreateThreadRequest, type CreateUserRequest, type CreateUserTenantLinkRequest, type CreateWorkItemIfAbsentRequest, type CreateWorkItemRequest, type CreateWorkflowRunRequest, type CreateWorkspaceRequest, type CustomMenuConfig, type DataSource, type DatabaseConfig, type DatabaseConfigEntry, type DatabaseConfigStore, type DatabaseType, type DeepAgentConfig, type DescriptorDataValue, type DeveloperMessage, type DispatchResult, DuplicateChannelBindingSubjectError, EXECUTION_RESULT_EVENT_KEY_PATTERN, EXECUTION_RESULT_EVENT_KEY_PATTERN_SOURCE, EXECUTION_RESULT_EVENT_KEY_PREFIX, type EmbeddingsConfig, type EmbeddingsLatticeProtocol, type EvalCase, type EvalProject, type EvalProjectReport, type EvalRun, type EvalRunResult, type EvalStore, type EvalSuite, type ExecuteSqlQueryRequest, type ExecuteSqlQueryResponse, type ExpectedCapabilityBundleRevisions, type FilterCondition, type GraphBuildOptions, type HtmlMenuConfig, type IConversationStore, type ID, type InboundMessage, type InternalAgentNode, type InternalBaseNode, type InternalCreateCapabilityBundleInput, type InternalDSL, type InternalEdge, type InternalInput, type InternalInputNode, type InternalMapNode, type InternalNode, type InternalNodeConfig, type InternalOutput, type InternalState, type InternalStateField, type InternalTerminalNode, type InternalUpdateCapabilityBundleInput, type InterruptMessage, type InterruptPolicy, InvalidProjectCapabilityBundleConfigError, type LLMConfig, type LarkChannelInstallationConfig, type LatticeError, type LatticeEventBus, type LatticeMessage, type LocalA2AProviderId, type LocalA2AProviderState, type LocalA2AProviderStatus, type LocalA2ATemplateDefinition, type LocalRuntimeConfig, type LoggerClient, type LoggerConfig, type LoggerContext, type LoggerLatticeProtocol, LoggerType, MAX_PENDING_EXECUTION_RESULTS_LIMIT, type McpClient, type McpClientOptions, type McpConnectionStatus, type McpLatticeMessage, type McpLatticeProtocol, McpMessageType, type McpServerConfig, type McpServerConfigEntry, type McpServerConfigStore, type McpStats, type McpTool, type McpToolResult, type McpTransportType, type MemoryClient, type MemoryConfig, type MemoryLatticeProtocol, MemoryType, type MenuContentConfig, type MenuContentType, type MenuItem, type MenuRegistry, type MenuTarget, type Message, type MessageChunk, type MessageChunkType, MessageChunkTypes, type MessageContext, type MessageMiddleware, type MetricColumn, type MetricDataPoint, type MetricMeta, type MetricQueryResult, type MetricsMiddlewareConfig, type MetricsServerConfig, type MetricsServerConfigEntry, type MetricsServerConfigStore, type MetricsServerType, type MiddlewareType, type ModelLatticeProtocol, type OutboundMessage, PROJECT_TASK_LIFECYCLE_ACTIONS, type PaginatedResult, type PaginationParams, type PinoFileOptions, type Plugin, type PluginConnection, type PluginConnectionFieldSchema, type PluginConnectionTestResult, type PluginContext, type PluginDiscoveredResource, type PluginMeta, type PluginMetaOutput, type PluginMiddlewareFactory, type PluginSkillDefinition, type PluginSkillResource, type PluginStandardConnectionConfig, type PluginToolMeta, type ProcessingAgentConfig, type Project, type ProjectBotMembership, type ProjectBotMembershipStatus, type ProjectBotMembershipStore, type ProjectBotRole, type ProjectCapabilityConfig, type ProjectFilter, type ProjectHumanRole, type ProjectKind, type ProjectLifecycleEventCursor, type ProjectLifecycleEventQuery, type ProjectMembership, type ProjectMembershipMutationResult, type ProjectMembershipStatus, type ProjectMembershipStore, type ProjectRoom, ProjectRoomBrokerCapacityError, type ProjectRoomBusinessEvent, type ProjectRoomBusinessEventDraft, type ProjectRoomControlEvent, ProjectRoomCursorError, type ProjectRoomEventBrokerProtocol, type ProjectRoomEventId, type ProjectRoomEventOf, type ProjectRoomEventScope, type ProjectRoomEventSubscription, type ProjectRoomMembershipChangedEvent, type ProjectRoomMention, type ProjectRoomMessage, type ProjectRoomMessageAuthor, type ProjectRoomMessageCreatedEvent, type ProjectRoomMessageCursor, type ProjectRoomMessageSource, type ProjectRoomMessageStore, type ProjectRoomPublicBotMembership, type ProjectRoomPublicMembership, type ProjectRoomPublicMessage, type ProjectRoomRealtimeActor, type ProjectRoomRosterChangedEvent, type ProjectRoomScopedBusinessEvent, type ProjectRoomSseWritable, type ProjectRoomStore, type ProjectRoomTaskChangedEvent, type ProjectRoomThreadMetadata, type ProjectRoomTrustedRunContext, type ProjectStore, type ProjectTaskLifecycleAction, ProjectTaskStoreUnsupportedError, type ProjectTaskThreadMetadata, type ProjectTaskTrustedRunContext, type ProjectTaskWorkItemStore, type PublicChannelInstallationType, type QueryParams, type QueryResultFormat, type QueryWorkflowRunsOptions, type QueryWorkflowRunsResult, type QueueClient, type QueueConfig, type QueueLatticeProtocol, type QueueResult, QueueType, type QueuedExecutionMode, type ReactAgentConfig, type ReplyTarget, type ResourceAddress, type ResourceResolver, type Result, type RunStep, type STTClient, type STTConfig, type STTModelLatticeProtocol, type SandboxMiddlewareConfig, type ScheduleClient, type ScheduleConfig, type ScheduleCronOptions, ScheduleExecutionType, type ScheduleLatticeProtocol, type ScheduleOnceOptions, type ScheduleStorage, ScheduleType, type ScheduledTaskDefinition, ScheduledTaskStatus, type SchedulerMiddlewareConfig, type SemanticMetricsFilter, type SemanticMetricsQueryRequest, type SemanticMetricsQueryResponse, type SemanticMetricsServerConfig, type ShareRecord, type ShareResult, type ShareVisibility, type SharedResourceStore, type Skill, type SkillClient, type SkillClientType, type SkillConfig, type SkillLatticeProtocol, type SkillStore, type SkillStoreContext, type SqlMiddlewareConfig, type StepStatus, type StepType, type StorageType, type SystemMessage, type TableQueryRequest, type TableQueryResponse, type TaskBeliefDiagnosticCode, type TaskBeliefEntry, type TaskBeliefParseFailure, type TaskBeliefParseResult, type TaskBeliefParseSuccess, type TaskBeliefState, type TaskDependentListQuery, type TaskFileRef, type TaskHandler, type TaskItem, type TaskListFilter, type TaskMutationSnapshot, type TaskStore, type TaskWorkItem, type TaskWorkItemListFilter, type TaskWorkItemStore, type TeamAgentConfig, type TeamTeammateConfig, type Tenant, type TenantStatus, type TenantStore, type TestMcpServerToolsResponse, type Thread, type ThreadStore, type Timestamp, type ToolCall, type ToolConfig, type ToolExecutor, type ToolLatticeProtocol, type ToolMessage, type TopologyEdge, type TranscriptionResult, type TrustedRunContext, type UIComponent, UIComponentType, type UIConfig, type UILatticeProtocol, type UpdateAgentWebAppInput, type UpdateCapabilityBundleInput, type UpdateChannelInstallationRequest, type UpdateCollectionRequest, type UpdateDatabaseConfigRequest, type UpdateMcpServerConfigRequest, type UpdateMenuItemInput, type UpdateMetricsServerConfigRequest, type UpdateProjectCapabilityBundlesResult, type UpdateProjectRequest, type UpdateRunStepRequest, type UpdateTaskRequest, type UpdateTenantRequest, type UpdateUserRequest, type UpdateUserTenantLinkRequest, type UpdateWorkflowRunRequest, type UpdateWorkspaceRequest, type User, type UserMessage, type UserStatus, type UserStore, type UserTenantLink, type UserTenantLinkStore, type UserTenantRole, type VectorStoreConfig, type VectorStoreCreateParams, type VectorStoreLatticeProtocol, type VectorStoreProvider, type WechatChannelInstallationConfig, type WorkflowAgentConfig, type WorkflowRun, type WorkflowRunStatus, type WorkflowTrackingStore, type Workspace, type WorkspaceStore, type YamlAgentStep, type YamlMapStep, type YamlParallelBlock, type YamlTopLevelStep, type YamlWorkflow, assertGenericProjectConfig, descriptorDataValue, getSubAgentsFromConfig, getToolsFromConfig, hasTools, isA2ARemoteAgentConfig, isDeepAgentConfig, isExecutionResultEventKey, isProcessingAgentConfig, isProjectRoomEventId, isTeamAgentConfig, isWorkflowAgentConfig, parseAgentWebAppGenUIBlock, parseProjectRoomEventId, parseQueuedExecutionMode, parseTaskBeliefState, parseTrustedRunContext, replaceTaskBeliefState, requireProjectTaskWorkItemStore, snapshotExactArray, snapshotExactRecord, snapshotProjectRoomBotMembershipRealtime, snapshotProjectRoomMembershipRealtime, snapshotProjectRoomMessageRealtime, taskBeliefStatesEqual, toProjectRoomPublicBotMembership, toProjectRoomPublicMembership, toProjectRoomPublicMessage };