@axiom-lattice/protocols 4.7.1 → 4.9.0

package/dist/index.d.ts

@@ -102,6 +102,17 @@ interface LLMConfig {
     streaming?: boolean;
     apiKeyEnvName?: string;
     apiKey?: string;
+    /**
+     * The upstream requires no credentials.
+     *
+     * A locally hosted model server — Ollama, vLLM, LM Studio — usually accepts
+     * unauthenticated requests. Without this flag a config carrying no key falls
+     * back to `process.env[apiKeyEnvName ?? "<PROVIDER>_API_KEY"]`, which would
+     * send the *gateway's own* deployment credential to whatever host the tenant
+     * configured. Setting it makes "no credential" an explicit statement rather
+     * than a missing value, so the fallback never runs.
+     */
+    noAuth?: boolean;
     baseURL?: string;
     modelKwargs?: Record<string, any>;
     extra?: Record<string, any>;
@@ -164,6 +175,12 @@ interface BaseAgentConfig {
     name: string;
     description: string;
     prompt: string;
+    /**
+     * Owner user id when this config represents a user's personal assistant.
+     * `undefined` means a tenant/workspace-shared agent, which is the only kind
+     * discoverable in shared contexts (e.g. a public room's executor list).
+     */
+    ownerUserId?: string;
     /**
      * Key of the parent agent to inherit configuration from.
      * When set, unspecified fields are inherited from the parent agent's config.
@@ -2458,7 +2475,7 @@ interface ConnectionStore {
 }
 
 /** Channel types persisted by the installation store, including internal-only channels. */
-type ChannelInstallationType = "lark" | "email" | "slack" | "wechat" | "room";
+type ChannelInstallationType = "lark" | "email" | "slack" | "wechat" | "wecom" | "room";
 /** Channel types exposed by the public installation management API. */
 type PublicChannelInstallationType = Exclude<ChannelInstallationType, "room">;
 /** Credentials and routing configuration for a Lark installation. */
@@ -2474,6 +2491,18 @@ interface WechatChannelInstallationConfig {
     botToken: string;
     uin?: string;
 }
+/**
+ * Credentials for a WeCom (企业微信) 智能机器人 installation using the
+ * long-connection (API 模式) transport. Only `botId` + `secret` are needed —
+ * no CorpID / AgentID / Token / EncodingAESKey, and no callback URL.
+ */
+interface WecomChannelInstallationConfig {
+    /** 机器人 BotID. */
+    botId: string;
+    /** 长连接专用 Secret. */
+    secret: string;
+    assistantId?: string;
+}
 /** A persisted tenant-scoped channel installation. */
 interface ChannelInstallation<TConfig = unknown> {
     id: string;
@@ -2504,6 +2533,9 @@ type CreateChannelInstallationRequest = PublicInstallationBase & ({
 } | {
     channel: "wechat";
     config: WechatChannelInstallationConfig;
+} | {
+    channel: "wecom";
+    config: WecomChannelInstallationConfig;
 } | {
     channel: "email" | "slack";
     config: Record<string, unknown>;
@@ -3313,14 +3345,16 @@ interface CreateModelProviderRequest {
      */
     baseURL: string;
     /**
-     * Upstream API key. Required: a provider must always carry a credential.
+     * Upstream API key. Optional: omitted means the upstream needs no
+     * authentication, which is the normal case for a locally hosted model server
+     * (Ollama, vLLM, LM Studio).
      *
-     * A keyless provider is not merely useless — it is unsafe. `initChatModel`
-     * falls back to `process.env[apiKeyEnvName ?? "OPENAI_API_KEY"]` when the
-     * config carries no key, so a keyless provider pointed at a tenant-chosen
-     * host would send the gateway's own deployment credential to it.
+     * A keyless provider must never fall back to the gateway's own environment
+     * credentials. `initChatModel` would otherwise reach for `OPENAI_API_KEY` and
+     * send the deployment's credential to the tenant's host. The runtime config
+     * carries an explicit no-auth marker instead — see `LLMConfig.noAuth`.
      */
-    apiKey: string;
+    apiKey?: string;
     /**
      * Whether this provider participates in discovery and registration
      */
@@ -3411,6 +3445,21 @@ interface ProviderModelInput extends DiscoveredModel {
      * Distinct from `enabled: false`, which means the tenant switched it off.
      */
     stale?: boolean;
+    /**
+     * Per-model LLM config, merged over the provider's own settings when the
+     * runtime client is built.
+     *
+     * This is what lets one model on a provider run at a different temperature,
+     * or carry `modelKwargs` the server needs, without duplicating the provider.
+     */
+    extra?: Record<string, unknown>;
+    /**
+     * Whether this is the tenant's default model.
+     *
+     * Omitted means "leave the stored flag alone": a discovery pass carries no
+     * opinion about which model is the default, and must not clear it.
+     */
+    isDefault?: boolean;
 }
 /**
  * One model in an explicit provider model selection.
@@ -3425,6 +3474,22 @@ interface ModelSelection {
     enabled: boolean;
     /** The upstream no longer offers this model; the row is kept, flagged. */
     stale?: boolean;
+    /**
+     * Per-model LLM config, merged over the provider's own settings.
+     *
+     * Omitted means "leave whatever is stored alone" — the selection carries only
+     * what the caller is changing, and a model edited through the picker must not
+     * lose the config it already had.
+     */
+    extra?: Record<string, unknown>;
+    /**
+     * Whether this is the tenant's default model.
+     *
+     * At most one model per tenant may carry it. Omitted means "leave the stored
+     * flag alone"; a default can only be replaced, never dropped by omission —
+     * see `ModelProviderStore.getDefaultModel`.
+     */
+    isDefault?: boolean;
 }
 /**
  * A model recorded in a provider's snapshot
@@ -3468,6 +3533,20 @@ interface ModelProviderModelEntry {
      * distinguishable from "switched off here".
      */
     stale?: boolean;
+    /**
+     * Per-model LLM config, merged over the provider's own settings when the
+     * runtime client is built. Absent when the model runs on the provider's
+     * settings alone.
+     */
+    extra?: Record<string, unknown>;
+    /**
+     * Whether this is the tenant's default model.
+     *
+     * At most one row per tenant carries it, enforced by a partial unique index.
+     * It is what a bare `"default"` model key resolves to for that tenant, and it
+     * cannot be deleted — replacing it means marking another model first.
+     */
+    isDefault?: boolean;
     /**
      * Timestamp of the discovery that produced this row
      */
@@ -3587,6 +3666,17 @@ interface TenantModelPublicEntry {
      * The upstream no longer offers this model (see `ModelProviderModelEntry.stale`)
      */
     stale: boolean;
+    /**
+     * Per-model LLM config, merged over the provider's own settings. Absent when
+     * the model runs on the provider's settings alone.
+     */
+    extra?: Record<string, unknown>;
+    /**
+     * Whether this is the tenant's default model — the one a bare `"default"`
+     * key resolves to, and the one a tenant without its own would otherwise take
+     * from the deployment.
+     */
+    isDefault?: boolean;
     /**
      * Whether this model can actually be executed by an agent.
      * Phase 1: true only for the `default` tenant.
@@ -5450,7 +5540,15 @@ interface ChannelAdapter<TConfig = unknown> {
      *
      * 与 `sendReply` 不同，这不是对某条入站消息的最终回复，而是运行中途
      * 产生的一条独立 bot 消息（例如 Project Room 的 clarify 卡片）。
-     * `message.metadata.inputMessageId` 关联触发该运行的入站队列消息。
+     *
+     * 支持两种（互斥的）关联方式，均由 `message.metadata` 承载：
+     * - `message.metadata.inputMessageId`：legacy presence 关联，指向触发该
+     *   运行的入站队列消息；需配合 `replyTarget.rawTarget` 中的
+     *   `sourceRoomMessageId` / `inputMessageId`。
+     * - `message.metadata.correlationKey`（可选）：**source-less/correlated**
+     *   中断，没有入站输入消息；由调用方提供关联键，幂等性以「每次中断」为单位
+     *   （idempotency key 派生自该 correlationKey），`replyTarget.rawTarget`
+     *   只需 `targetMembershipId`。
      */
     sendInterrupt?(replyTarget: ReplyTarget, message: OutboundMessage, installation: ChannelInstallation): Promise<void>;
     /**
@@ -5471,6 +5569,10 @@ interface ChannelAdapter<TConfig = unknown> {
      * 可选：断开持久连接并停止接收事件。
      * 当 channel installation 被禁用或删除时调用。
      * `installationId` 用于标识要断开的具体安装实例。
+     *
+     * 实现必须是**幂等**且对未连接的 installation 安全（no-op）：多副本下
+     * `ChannelConnectionLeader` 在失去租约时会对共享 store 中的全部启用安装
+     * 调用 `disconnect`，其中可能包含本副本从未 `connect` 的实例。
      */
     disconnect?(installationId: string): Promise<void>;
 }
@@ -6172,6 +6274,12 @@ interface ProjectBotMembership {
     roomThreadId: string;
     joinedAt: Date;
     updatedAt: Date;
+    /**
+     * True for a not-yet-materialized "virtual" public-project entry (dynamic
+     * roster projection). Virtual entries have no persisted row; their id
+     * materializes just-in-time on first interaction. Absent on real members.
+     */
+    provisional?: boolean;
 }
 /** Identifies a human author of a project room message. */
 interface ProjectRoomMessageHumanAuthor {
@@ -6448,6 +6556,49 @@ interface UserPushSubscriptionStore {
     delete(tenantId: string, userId: string, endpoint: string): Promise<boolean>;
 }
 
+/** Lifecycle states of a published plugin's resident service. */
+type PluginDeploymentStatus = "requested" | "provisioning" | "running" | "paused" | "stopping" | "stopped" | "failed";
+/** Lifecycle strategy: lazily paused vs. permanently resident. */
+type PluginDeploymentMode = "onDemand" | "alwaysOn";
+/** Durable tenant-scoped record of one published plugin's resident service. */
+interface PluginDeployment {
+    id: string;
+    tenantId: string;
+    pluginType: string;
+    pluginVersion: string;
+    mode: PluginDeploymentMode;
+    status: PluginDeploymentStatus;
+    /** Backend provider key, e.g. "microsandbox-remote" | "opensandbox". */
+    provider: string;
+    /** Deterministic sandbox identity (`plugin-<hash(tenantId, pluginType)>`). */
+    sandboxName: string;
+    /** Guest port published by the host server. */
+    port: number;
+    /** Resolved endpoint (scheme-less route or host:port); may change over time. */
+    endpoint?: string;
+    /** Image used to create the sandbox, when pinned. */
+    imageRef?: string;
+    /** Idle timeout before an onDemand deployment is paused. */
+    idleTimeoutMs: number;
+    lastHealthAt?: string;
+    lastError?: string;
+    createdAt: string;
+    updatedAt: string;
+}
+/** Persistence operations for plugin deployments. */
+interface PluginDeploymentStore {
+    /** Lists every deployment for a tenant. */
+    listByTenant(tenantId: string): Promise<PluginDeployment[]>;
+    /** Returns the deployment for a plugin type, or undefined. */
+    get(tenantId: string, pluginType: string): Promise<PluginDeployment | undefined>;
+    /** Inserts or replaces a deployment keyed by tenant + plugin type. */
+    upsert(deployment: PluginDeployment): Promise<PluginDeployment>;
+    /** Applies a partial update (status/endpoint/health); returns the updated record. */
+    updateStatus(tenantId: string, pluginType: string, patch: Partial<Omit<PluginDeployment, "id" | "tenantId" | "pluginType">>): Promise<PluginDeployment | undefined>;
+    /** Deletes a deployment. Returns whether a row was removed. */
+    delete(tenantId: string, pluginType: string): Promise<boolean>;
+}
+
 /** One held distributed lease. */
 interface LeaseRecord {
     /** Lease key (e.g. `task-run:<taskId>`); unique across replicas. */
@@ -7047,10 +7198,13 @@ interface PluginConnection {
     resourceLabel?: string;
 }
 /**
- * UI declaration for a plugin tool: an HTML file rendered as an MCP App when
- * the tool runs.
+ * UI declaration for a plugin tool: an HTML resource rendered as an MCP App
+ * when the tool runs.
  *
- * @property resource - Safe relative path (within the plugin directory) to an `.html` file.
+ * @property resource - For GLOBAL plugins, a `ui://` key into the plugin's
+ *   `meta.uiResources` map (inline HTML served without a sandbox read). For
+ *   tenant sandbox plugins, a safe relative path (within the plugin directory)
+ *   to an `.html` file on the tenant volume.
  * @property displayMode - Preferred display mode; defaults to `inline` (resolved by the compiler).
  * @property csp - Origins the UI needs (see `McpUiCsp`).
  * @property permissions - Sandbox permissions requested (see `McpUiPermissions`).
@@ -7434,6 +7588,15 @@ interface ProjectRoomTrustedRunContext {
      * naming any specific value (ADR-118).
      */
     source?: string;
+    /**
+     * Host-provided signal that this project has no authored roster.
+     *
+     * Optional; `true` when present, `undefined`/`false` is treated as absent. Core uses it to skip
+     * Project roster authorization for the run's caller and owner (any tenant agent may own a task) and
+     * to list the tenant's agents — not the persisted roster — as available executors. The host stamps
+     * it only for the workspace general project. Mirrors {@link ProjectTaskTrustedRunContext.rosterExempt}.
+     */
+    rosterExempt?: boolean;
 }
 /** Trusted Project Task identity persisted with a privileged queue message. */
 interface ProjectTaskTrustedRunContext {
@@ -7539,4 +7702,4 @@ declare function threadAffinityHeaders(threadId: string | undefined): Record<str
  */
 declare function buildAffinityMissChunk(owner: string, threadId: string): MessageChunk;
 
-export { type A2AApiKeyEntry, type A2AApiKeyRecord, type A2AApiKeyStore, type A2AAuthContext, type A2ARemoteAgentConfig, AFFINITY_ECHO_HEADER, AFFINITY_MISS_CODE, AGENT_AFFINITY_HEADER, type AgentClient, type AgentConfig, type AgentConfigWithTools, type AgentLatticeProtocol, type AgentMenuConfig, type AgentMiddlewareConfig, type AgentRunConfig, AgentType, type AgentWebApp, type AgentWebAppAppearance, type AgentWebAppBootstrap, type AgentWebAppCalloutWidget, type AgentWebAppError, type AgentWebAppErrorCode, type AgentWebAppFeatures, type AgentWebAppGenUIBlock, type AgentWebAppIdentityAssurance, type AgentWebAppIdentityConfig, type AgentWebAppIdentityPolicy, type AgentWebAppInterrupt, type AgentWebAppIssuerConfig, type AgentWebAppQuickPrompt, type AgentWebAppRuntimeMessage, type AgentWebAppRuntimeThread, type AgentWebAppScope, type AgentWebAppStatus, type AgentWebAppStore, type AgentWebAppStorePatch, type AgentWebAppStreamEvent, type AgentWebAppStreamProjectionContext, type AgentWebAppTableWidget, type AgentWebAppThreadMetadata, type AgentWebAppUpdateOptions, type Assistant, type AssistantMessage, type AssistantStore, type Attachment, type AvailableModule, type BaseLatticeProtocol, type BaseMessage, type Binding, type BindingListParams, type BindingMutablePatch, type BindingRegistry, type BootstrapFilesConfig, type BrowserMiddlewareConfig, type Callback, type CapabilityBundle, type CapabilityBundleDeleteResult, type CapabilityBundleStore, type CapabilityBundleUpdateConflict, type CapabilityFieldSource, type CapabilityOverride, type CapabilityPreview, type CapabilityPreviewIssue, type CapabilityRuntime, type ChannelAdapter, type ChannelBindingMigrationConflict, ChannelBindingMigrationConflictError, type ChannelInstallation, type ChannelInstallationStore, type ChannelInstallationType, type ClawMiddlewareConfig, type CodeEvalMiddlewareConfig, type Collection, type CollectionField, type CollectionFieldType, type CollectionMiddlewareConfig, type CollectionSchema, type CollectionStore, type ConnectionEntry, type ConnectionStore, type ConversationRecord, type CreateA2AApiKeyInput, type CreateAgentWebAppInput, type CreateAssistantRequest, type CreateBindingInput, type CreateCapabilityBundleInput, type CreateChannelInstallationInput, type CreateChannelInstallationRequest, type CreateCollectionRequest, type CreateConversationInput, type CreateDatabaseConfigRequest, type CreateEvalCaseRequest, type CreateEvalProjectRequest, type CreateEvalRunRequest, type CreateEvalSuiteRequest, type CreateMcpServerConfigRequest, type CreateMenuItemInput, type CreateMetricsServerConfigRequest, type CreateModelProviderRequest, type CreateProjectRequest, type CreateRunStepRequest, type CreateShareRequest, type CreateSkillRequest, type CreateTaskRequest, type CreateTenantRequest, type CreateThreadRequest, type CreateUserRequest, type CreateUserTenantLinkRequest, type CreateWorkItemIfAbsentRequest, type CreateWorkItemRequest, type CreateWorkflowRunRequest, type CreateWorkspaceRequest, type CustomMenuConfig, type DataSource, type DatabaseConfig, type DatabaseConfigEntry, type DatabaseConfigStore, type DatabaseType, type DeepAgentConfig, type DescriptorDataValue, type DeveloperMessage, type DiscoveredModel, type DispatchResult, DuplicateChannelBindingSubjectError, EXECUTION_RESULT_EVENT_KEY_PATTERN, EXECUTION_RESULT_EVENT_KEY_PATTERN_SOURCE, EXECUTION_RESULT_EVENT_KEY_PREFIX, type EmbeddingsConfig, type EmbeddingsLatticeProtocol, type EvalCase, type EvalProject, type EvalProjectReport, type EvalRun, type EvalRunResult, type EvalStore, type EvalSuite, type ExecuteSqlQueryRequest, type ExecuteSqlQueryResponse, type ExpectedCapabilityBundleRevisions, type FileMenuConfig, type FilterCondition, type GraphBuildOptions, type HtmlMenuConfig, type IConversationStore, type ID, type InboundMessage, type InternalAgentNode, type InternalBaseNode, type InternalCreateCapabilityBundleInput, type InternalDSL, type InternalEdge, type InternalInput, type InternalInputNode, type InternalMapNode, type InternalNode, type InternalNodeConfig, type InternalOutput, type InternalState, type InternalStateField, type InternalTerminalNode, type InternalUpdateCapabilityBundleInput, type InterruptMessage, type InterruptPolicy, InvalidProjectCapabilityBundleConfigError, type LLMConfig, type LarkChannelInstallationConfig, type LatticeError, type LatticeEventBus, type LatticeMessage, type LeaseRecord, type LeaseStore, type LocalA2AProviderId, type LocalA2AProviderState, type LocalA2AProviderStatus, type LocalA2ATemplateDefinition, type LocalRuntimeConfig, type LoggerClient, type LoggerConfig, type LoggerContext, type LoggerLatticeProtocol, LoggerType, MAX_PENDING_EXECUTION_RESULTS_LIMIT, type McpAppMenuConfig, type McpClient, type McpClientOptions, type McpConnectionStatus, type McpLatticeMessage, type McpLatticeProtocol, McpMessageType, type McpServerConfig, type McpServerConfigEntry, type McpServerConfigStore, type McpStats, type McpTool, type McpToolResult, type McpTransportType, type McpUiCsp, type McpUiDisplayMode, type McpUiPermissions, type McpUiRef, type McpUiResourcePayload, type MemoryClient, type MemoryConfig, type MemoryLatticeProtocol, MemoryType, type MenuContentConfig, type MenuContentType, type MenuItem, type MenuRegistry, type MenuTarget, type Message, type MessageChunk, type MessageChunkType, MessageChunkTypes, type MessageContext, type MessageMiddleware, type MetricColumn, type MetricDataPoint, type MetricMeta, type MetricQueryResult, type MetricsMiddlewareConfig, type MetricsServerConfig, type MetricsServerConfigEntry, type MetricsServerConfigStore, type MetricsServerType, type MiddlewareType, type ModelDiscoveryResult, type ModelLatticeProtocol, type ModelProviderApiStyle, type ModelProviderEntry, type ModelProviderErrorCode, type ModelProviderLlmProvider, type ModelProviderModelEntry, type ModelProviderProbeRequest, type ModelProviderProbeResult, type ModelProviderPublicEntry, type ModelProviderStatus, type ModelProviderStore, type ModelProviderUpstreamErrorCode, type ModelProviderWireProtocol, type ModelSelection, type OpenAuditAppendInput, type OpenAuditQuery, type OpenAuditRecord, type OpenAuditStore, type OpenCapabilitySource, type OpenCatalog, type OpenCatalogDomain, type OpenCatalogItem, type OpenCredentialKind, type OpenExecutionContext, type OpenExecutionResult, type OpenGrant, type OutboundMessage, type OutboxEvent, type OutboxStore, PROJECT_ROOM_TASK_DELEGATED_LABEL, PROJECT_ROOM_TASK_DELEGATED_SEPARATOR, PROJECT_ROOM_USER_CHANNEL_PROJECT, PROJECT_TASK_LIFECYCLE_ACTIONS, type PaginatedResult, type PaginationParams, type PinoFileOptions, type Plugin, type PluginConnection, type PluginConnectionFieldSchema, type PluginConnectionTestResult, type PluginContext, type PluginDiscoveredResource, type PluginMeta, type PluginMetaOutput, type PluginMiddlewareFactory, type PluginSkillDefinition, type PluginSkillResource, type PluginStandardConnectionConfig, type PluginToolMeta, type PluginToolUi, type PluginUiResource, type ProcessingAgentConfig, type Project, type ProjectBotMembership, type ProjectBotMembershipStatus, type ProjectBotMembershipStore, type ProjectBotRole, type ProjectCapabilityConfig, type ProjectFilter, type ProjectHumanRole, type ProjectKind, type ProjectLifecycleEventCursor, type ProjectLifecycleEventQuery, type ProjectMembership, type ProjectMembershipMutationResult, type ProjectMembershipStatus, type ProjectMembershipStore, type ProjectRoom, ProjectRoomBrokerCapacityError, type ProjectRoomBusinessEvent, type ProjectRoomBusinessEventDraft, type ProjectRoomControlEvent, ProjectRoomCursorError, type ProjectRoomEventBrokerProtocol, type ProjectRoomEventId, type ProjectRoomEventOf, type ProjectRoomEventScope, type ProjectRoomEventSubscription, type ProjectRoomMembershipAffectedEvent, type ProjectRoomMembershipChangedEvent, type ProjectRoomMention, type ProjectRoomMessage, type ProjectRoomMessageAuthor, type ProjectRoomMessageCreatedEvent, type ProjectRoomMessageCursor, type ProjectRoomMessageSource, type ProjectRoomMessageStore, type ProjectRoomPublicBotMembership, type ProjectRoomPublicMembership, type ProjectRoomPublicMessage, type ProjectRoomReadChangedEvent, type ProjectRoomReadState, type ProjectRoomReadStateStore, type ProjectRoomRealtimeActor, type ProjectRoomRosterChangedEvent, type ProjectRoomScopedBusinessEvent, type ProjectRoomSseWritable, type ProjectRoomStore, type ProjectRoomTaskChangedEvent, type ProjectRoomThreadMetadata, type ProjectRoomTrustedRunContext, type ProjectStore, type ProjectTaskLifecycleAction, ProjectTaskStoreUnsupportedError, type ProjectTaskThreadMetadata, type ProjectTaskTrustedRunContext, type ProjectTaskWorkItemStore, type ProviderModelInput, type PublicChannelInstallationType, type QueryParams, type QueryResultFormat, type QueryWorkflowRunsOptions, type QueryWorkflowRunsResult, type QueueClient, type QueueConfig, type QueueLatticeProtocol, type QueueResult, QueueType, type QueuedExecutionMode, REPLICA_HEADER, type ReactAgentConfig, type ReplyTarget, type ResourceAddress, type ResourceResolver, type Result, type RunScope, type RunStep, type STTClient, type STTConfig, type STTModelLatticeProtocol, type SandboxMiddlewareConfig, type SandboxPluginConnectionDef, type SandboxPluginDiagnostic, type SandboxPluginManifest, type SandboxPluginToolDef, type ScheduleClient, type ScheduleConfig, type ScheduleCronOptions, ScheduleExecutionType, type ScheduleLatticeProtocol, type ScheduleOnceOptions, type ScheduleStorage, ScheduleType, type ScheduledTaskDefinition, ScheduledTaskStatus, type SchedulerMiddlewareConfig, type SemanticMetricsFilter, type SemanticMetricsQueryRequest, type SemanticMetricsQueryResponse, type SemanticMetricsServerConfig, type ShareRecord, type ShareResult, type ShareVisibility, type SharedResourceStore, type Skill, type SkillClient, type SkillClientType, type SkillConfig, type SkillLatticeProtocol, type SkillStore, type SkillStoreContext, type SqlMiddlewareConfig, type StepStatus, type StepType, type StorageType, type SystemMessage, type TableQueryRequest, type TableQueryResponse, type TaskBeliefDiagnosticCode, type TaskBeliefEntry, type TaskBeliefParseFailure, type TaskBeliefParseResult, type TaskBeliefParseSuccess, type TaskBeliefState, type TaskDependentListQuery, type TaskFileRef, type TaskHandler, type TaskItem, type TaskListFilter, type TaskMutationSnapshot, type TaskStore, type TaskWorkItem, type TaskWorkItemListFilter, type TaskWorkItemStore, type TeamAgentConfig, type TeamTeammateConfig, type Tenant, type TenantModelCatalog, type TenantModelPublicEntry, type TenantStatus, type TenantStore, type TestMcpServerToolsResponse, type Thread, type ThreadStore, type Timestamp, type ToolCall, type ToolCallUi, type ToolConfig, type ToolExecutor, type ToolLatticeProtocol, type ToolMessage, type TopologyEdge, type TranscriptionResult, type TrustedRunContext, type UIComponent, UIComponentType, type UIConfig, type UILatticeProtocol, type UpdateA2AApiKeyInput, type UpdateAgentWebAppInput, type UpdateCapabilityBundleInput, type UpdateChannelInstallationRequest, type UpdateCollectionRequest, type UpdateDatabaseConfigRequest, type UpdateMcpServerConfigRequest, type UpdateMenuItemInput, type UpdateMetricsServerConfigRequest, type UpdateModelProviderRequest, type UpdateProjectCapabilityBundlesResult, type UpdateProjectRequest, type UpdateRunStepRequest, type UpdateTaskRequest, type UpdateTenantRequest, type UpdateUserRequest, type UpdateUserTenantLinkRequest, type UpdateWorkflowRunRequest, type UpdateWorkspaceRequest, type User, type UserMessage, type UserPushSubscription, type UserPushSubscriptionStore, type UserStatus, type UserStore, type UserTenantLink, type UserTenantLinkStore, type UserTenantRole, type VectorStoreConfig, type VectorStoreCreateParams, type VectorStoreLatticeProtocol, type VectorStoreProvider, WORKSPACE_PUBLIC_ROOM_PROJECT_PREFIX, type WechatChannelInstallationConfig, type WorkflowAgentConfig, type WorkflowRun, type WorkflowRunStatus, type WorkflowTrackingStore, type Workspace, type WorkspaceStore, type YamlAgentStep, type YamlMapStep, type YamlParallelBlock, type YamlTopLevelStep, type YamlWorkflow, affinityEchoHeaders, assertGenericProjectConfig, buildAffinityMissChunk, createAgentWebAppStreamProjectionContext, descriptorDataValue, effectiveGrants, firstNonEmptyString, getSubAgentsFromConfig, getToolsFromConfig, hasTools, isA2ARemoteAgentConfig, isDeepAgentConfig, isExecutionResultEventKey, isMcpUiRef, isProcessingAgentConfig, isProjectRoomEventId, isTeamAgentConfig, isWorkflowAgentConfig, isWorkspacePublicRoomProjectId, normalizeTaskMetadataScalar, parseAgentWebAppGenUIBlock, parseMcpUiRef, parseModelKey, parseProjectRoomEventId, parseQueuedExecutionMode, parseTaskBeliefState, parseTrustedRunContext, projectAgentWebAppChunk, projectRoomUserEventScope, replaceTaskBeliefState, requireProjectTaskWorkItemStore, resolveRunScope, snapshotExactArray, snapshotExactRecord, snapshotProjectRoomBotMembershipRealtime, snapshotProjectRoomMembershipRealtime, snapshotProjectRoomMessageRealtime, taskBeliefStatesEqual, threadAffinityHeaders, toModelKey, toProjectRoomPublicBotMembership, toProjectRoomPublicMembership, toProjectRoomPublicMessage };
+export { type A2AApiKeyEntry, type A2AApiKeyRecord, type A2AApiKeyStore, type A2AAuthContext, type A2ARemoteAgentConfig, AFFINITY_ECHO_HEADER, AFFINITY_MISS_CODE, AGENT_AFFINITY_HEADER, type AgentClient, type AgentConfig, type AgentConfigWithTools, type AgentLatticeProtocol, type AgentMenuConfig, type AgentMiddlewareConfig, type AgentRunConfig, AgentType, type AgentWebApp, type AgentWebAppAppearance, type AgentWebAppBootstrap, type AgentWebAppCalloutWidget, type AgentWebAppError, type AgentWebAppErrorCode, type AgentWebAppFeatures, type AgentWebAppGenUIBlock, type AgentWebAppIdentityAssurance, type AgentWebAppIdentityConfig, type AgentWebAppIdentityPolicy, type AgentWebAppInterrupt, type AgentWebAppIssuerConfig, type AgentWebAppQuickPrompt, type AgentWebAppRuntimeMessage, type AgentWebAppRuntimeThread, type AgentWebAppScope, type AgentWebAppStatus, type AgentWebAppStore, type AgentWebAppStorePatch, type AgentWebAppStreamEvent, type AgentWebAppStreamProjectionContext, type AgentWebAppTableWidget, type AgentWebAppThreadMetadata, type AgentWebAppUpdateOptions, type Assistant, type AssistantMessage, type AssistantStore, type Attachment, type AvailableModule, type BaseLatticeProtocol, type BaseMessage, type Binding, type BindingListParams, type BindingMutablePatch, type BindingRegistry, type BootstrapFilesConfig, type BrowserMiddlewareConfig, type Callback, type CapabilityBundle, type CapabilityBundleDeleteResult, type CapabilityBundleStore, type CapabilityBundleUpdateConflict, type CapabilityFieldSource, type CapabilityOverride, type CapabilityPreview, type CapabilityPreviewIssue, type CapabilityRuntime, type ChannelAdapter, type ChannelBindingMigrationConflict, ChannelBindingMigrationConflictError, type ChannelInstallation, type ChannelInstallationStore, type ChannelInstallationType, type ClawMiddlewareConfig, type CodeEvalMiddlewareConfig, type Collection, type CollectionField, type CollectionFieldType, type CollectionMiddlewareConfig, type CollectionSchema, type CollectionStore, type ConnectionEntry, type ConnectionStore, type ConversationRecord, type CreateA2AApiKeyInput, type CreateAgentWebAppInput, type CreateAssistantRequest, type CreateBindingInput, type CreateCapabilityBundleInput, type CreateChannelInstallationInput, type CreateChannelInstallationRequest, type CreateCollectionRequest, type CreateConversationInput, type CreateDatabaseConfigRequest, type CreateEvalCaseRequest, type CreateEvalProjectRequest, type CreateEvalRunRequest, type CreateEvalSuiteRequest, type CreateMcpServerConfigRequest, type CreateMenuItemInput, type CreateMetricsServerConfigRequest, type CreateModelProviderRequest, type CreateProjectRequest, type CreateRunStepRequest, type CreateShareRequest, type CreateSkillRequest, type CreateTaskRequest, type CreateTenantRequest, type CreateThreadRequest, type CreateUserRequest, type CreateUserTenantLinkRequest, type CreateWorkItemIfAbsentRequest, type CreateWorkItemRequest, type CreateWorkflowRunRequest, type CreateWorkspaceRequest, type CustomMenuConfig, type DataSource, type DatabaseConfig, type DatabaseConfigEntry, type DatabaseConfigStore, type DatabaseType, type DeepAgentConfig, type DescriptorDataValue, type DeveloperMessage, type DiscoveredModel, type DispatchResult, DuplicateChannelBindingSubjectError, EXECUTION_RESULT_EVENT_KEY_PATTERN, EXECUTION_RESULT_EVENT_KEY_PATTERN_SOURCE, EXECUTION_RESULT_EVENT_KEY_PREFIX, type EmbeddingsConfig, type EmbeddingsLatticeProtocol, type EvalCase, type EvalProject, type EvalProjectReport, type EvalRun, type EvalRunResult, type EvalStore, type EvalSuite, type ExecuteSqlQueryRequest, type ExecuteSqlQueryResponse, type ExpectedCapabilityBundleRevisions, type FileMenuConfig, type FilterCondition, type GraphBuildOptions, type HtmlMenuConfig, type IConversationStore, type ID, type InboundMessage, type InternalAgentNode, type InternalBaseNode, type InternalCreateCapabilityBundleInput, type InternalDSL, type InternalEdge, type InternalInput, type InternalInputNode, type InternalMapNode, type InternalNode, type InternalNodeConfig, type InternalOutput, type InternalState, type InternalStateField, type InternalTerminalNode, type InternalUpdateCapabilityBundleInput, type InterruptMessage, type InterruptPolicy, InvalidProjectCapabilityBundleConfigError, type LLMConfig, type LarkChannelInstallationConfig, type LatticeError, type LatticeEventBus, type LatticeMessage, type LeaseRecord, type LeaseStore, type LocalA2AProviderId, type LocalA2AProviderState, type LocalA2AProviderStatus, type LocalA2ATemplateDefinition, type LocalRuntimeConfig, type LoggerClient, type LoggerConfig, type LoggerContext, type LoggerLatticeProtocol, LoggerType, MAX_PENDING_EXECUTION_RESULTS_LIMIT, type McpAppMenuConfig, type McpClient, type McpClientOptions, type McpConnectionStatus, type McpLatticeMessage, type McpLatticeProtocol, McpMessageType, type McpServerConfig, type McpServerConfigEntry, type McpServerConfigStore, type McpStats, type McpTool, type McpToolResult, type McpTransportType, type McpUiCsp, type McpUiDisplayMode, type McpUiPermissions, type McpUiRef, type McpUiResourcePayload, type MemoryClient, type MemoryConfig, type MemoryLatticeProtocol, MemoryType, type MenuContentConfig, type MenuContentType, type MenuItem, type MenuRegistry, type MenuTarget, type Message, type MessageChunk, type MessageChunkType, MessageChunkTypes, type MessageContext, type MessageMiddleware, type MetricColumn, type MetricDataPoint, type MetricMeta, type MetricQueryResult, type MetricsMiddlewareConfig, type MetricsServerConfig, type MetricsServerConfigEntry, type MetricsServerConfigStore, type MetricsServerType, type MiddlewareType, type ModelDiscoveryResult, type ModelLatticeProtocol, type ModelProviderApiStyle, type ModelProviderEntry, type ModelProviderErrorCode, type ModelProviderLlmProvider, type ModelProviderModelEntry, type ModelProviderProbeRequest, type ModelProviderProbeResult, type ModelProviderPublicEntry, type ModelProviderStatus, type ModelProviderStore, type ModelProviderUpstreamErrorCode, type ModelProviderWireProtocol, type ModelSelection, type OpenAuditAppendInput, type OpenAuditQuery, type OpenAuditRecord, type OpenAuditStore, type OpenCapabilitySource, type OpenCatalog, type OpenCatalogDomain, type OpenCatalogItem, type OpenCredentialKind, type OpenExecutionContext, type OpenExecutionResult, type OpenGrant, type OutboundMessage, type OutboxEvent, type OutboxStore, PROJECT_ROOM_TASK_DELEGATED_LABEL, PROJECT_ROOM_TASK_DELEGATED_SEPARATOR, PROJECT_ROOM_USER_CHANNEL_PROJECT, PROJECT_TASK_LIFECYCLE_ACTIONS, type PaginatedResult, type PaginationParams, type PinoFileOptions, type Plugin, type PluginConnection, type PluginConnectionFieldSchema, type PluginConnectionTestResult, type PluginContext, type PluginDeployment, type PluginDeploymentMode, type PluginDeploymentStatus, type PluginDeploymentStore, type PluginDiscoveredResource, type PluginMeta, type PluginMetaOutput, type PluginMiddlewareFactory, type PluginSkillDefinition, type PluginSkillResource, type PluginStandardConnectionConfig, type PluginToolMeta, type PluginToolUi, type PluginUiResource, type ProcessingAgentConfig, type Project, type ProjectBotMembership, type ProjectBotMembershipStatus, type ProjectBotMembershipStore, type ProjectBotRole, type ProjectCapabilityConfig, type ProjectFilter, type ProjectHumanRole, type ProjectKind, type ProjectLifecycleEventCursor, type ProjectLifecycleEventQuery, type ProjectMembership, type ProjectMembershipMutationResult, type ProjectMembershipStatus, type ProjectMembershipStore, type ProjectRoom, ProjectRoomBrokerCapacityError, type ProjectRoomBusinessEvent, type ProjectRoomBusinessEventDraft, type ProjectRoomControlEvent, ProjectRoomCursorError, type ProjectRoomEventBrokerProtocol, type ProjectRoomEventId, type ProjectRoomEventOf, type ProjectRoomEventScope, type ProjectRoomEventSubscription, type ProjectRoomMembershipAffectedEvent, type ProjectRoomMembershipChangedEvent, type ProjectRoomMention, type ProjectRoomMessage, type ProjectRoomMessageAuthor, type ProjectRoomMessageCreatedEvent, type ProjectRoomMessageCursor, type ProjectRoomMessageSource, type ProjectRoomMessageStore, type ProjectRoomPublicBotMembership, type ProjectRoomPublicMembership, type ProjectRoomPublicMessage, type ProjectRoomReadChangedEvent, type ProjectRoomReadState, type ProjectRoomReadStateStore, type ProjectRoomRealtimeActor, type ProjectRoomRosterChangedEvent, type ProjectRoomScopedBusinessEvent, type ProjectRoomSseWritable, type ProjectRoomStore, type ProjectRoomTaskChangedEvent, type ProjectRoomThreadMetadata, type ProjectRoomTrustedRunContext, type ProjectStore, type ProjectTaskLifecycleAction, ProjectTaskStoreUnsupportedError, type ProjectTaskThreadMetadata, type ProjectTaskTrustedRunContext, type ProjectTaskWorkItemStore, type ProviderModelInput, type PublicChannelInstallationType, type QueryParams, type QueryResultFormat, type QueryWorkflowRunsOptions, type QueryWorkflowRunsResult, type QueueClient, type QueueConfig, type QueueLatticeProtocol, type QueueResult, QueueType, type QueuedExecutionMode, REPLICA_HEADER, type ReactAgentConfig, type ReplyTarget, type ResourceAddress, type ResourceResolver, type Result, type RunScope, type RunStep, type STTClient, type STTConfig, type STTModelLatticeProtocol, type SandboxMiddlewareConfig, type SandboxPluginConnectionDef, type SandboxPluginDiagnostic, type SandboxPluginManifest, type SandboxPluginToolDef, type ScheduleClient, type ScheduleConfig, type ScheduleCronOptions, ScheduleExecutionType, type ScheduleLatticeProtocol, type ScheduleOnceOptions, type ScheduleStorage, ScheduleType, type ScheduledTaskDefinition, ScheduledTaskStatus, type SchedulerMiddlewareConfig, type SemanticMetricsFilter, type SemanticMetricsQueryRequest, type SemanticMetricsQueryResponse, type SemanticMetricsServerConfig, type ShareRecord, type ShareResult, type ShareVisibility, type SharedResourceStore, type Skill, type SkillClient, type SkillClientType, type SkillConfig, type SkillLatticeProtocol, type SkillStore, type SkillStoreContext, type SqlMiddlewareConfig, type StepStatus, type StepType, type StorageType, type SystemMessage, type TableQueryRequest, type TableQueryResponse, type TaskBeliefDiagnosticCode, type TaskBeliefEntry, type TaskBeliefParseFailure, type TaskBeliefParseResult, type TaskBeliefParseSuccess, type TaskBeliefState, type TaskDependentListQuery, type TaskFileRef, type TaskHandler, type TaskItem, type TaskListFilter, type TaskMutationSnapshot, type TaskStore, type TaskWorkItem, type TaskWorkItemListFilter, type TaskWorkItemStore, type TeamAgentConfig, type TeamTeammateConfig, type Tenant, type TenantModelCatalog, type TenantModelPublicEntry, type TenantStatus, type TenantStore, type TestMcpServerToolsResponse, type Thread, type ThreadStore, type Timestamp, type ToolCall, type ToolCallUi, type ToolConfig, type ToolExecutor, type ToolLatticeProtocol, type ToolMessage, type TopologyEdge, type TranscriptionResult, type TrustedRunContext, type UIComponent, UIComponentType, type UIConfig, type UILatticeProtocol, type UpdateA2AApiKeyInput, type UpdateAgentWebAppInput, type UpdateCapabilityBundleInput, type UpdateChannelInstallationRequest, type UpdateCollectionRequest, type UpdateDatabaseConfigRequest, type UpdateMcpServerConfigRequest, type UpdateMenuItemInput, type UpdateMetricsServerConfigRequest, type UpdateModelProviderRequest, type UpdateProjectCapabilityBundlesResult, type UpdateProjectRequest, type UpdateRunStepRequest, type UpdateTaskRequest, type UpdateTenantRequest, type UpdateUserRequest, type UpdateUserTenantLinkRequest, type UpdateWorkflowRunRequest, type UpdateWorkspaceRequest, type User, type UserMessage, type UserPushSubscription, type UserPushSubscriptionStore, type UserStatus, type UserStore, type UserTenantLink, type UserTenantLinkStore, type UserTenantRole, type VectorStoreConfig, type VectorStoreCreateParams, type VectorStoreLatticeProtocol, type VectorStoreProvider, WORKSPACE_PUBLIC_ROOM_PROJECT_PREFIX, type WechatChannelInstallationConfig, type WecomChannelInstallationConfig, type WorkflowAgentConfig, type WorkflowRun, type WorkflowRunStatus, type WorkflowTrackingStore, type Workspace, type WorkspaceStore, type YamlAgentStep, type YamlMapStep, type YamlParallelBlock, type YamlTopLevelStep, type YamlWorkflow, affinityEchoHeaders, assertGenericProjectConfig, buildAffinityMissChunk, createAgentWebAppStreamProjectionContext, descriptorDataValue, effectiveGrants, firstNonEmptyString, getSubAgentsFromConfig, getToolsFromConfig, hasTools, isA2ARemoteAgentConfig, isDeepAgentConfig, isExecutionResultEventKey, isMcpUiRef, isProcessingAgentConfig, isProjectRoomEventId, isTeamAgentConfig, isWorkflowAgentConfig, isWorkspacePublicRoomProjectId, normalizeTaskMetadataScalar, parseAgentWebAppGenUIBlock, parseMcpUiRef, parseModelKey, parseProjectRoomEventId, parseQueuedExecutionMode, parseTaskBeliefState, parseTrustedRunContext, projectAgentWebAppChunk, projectRoomUserEventScope, replaceTaskBeliefState, requireProjectTaskWorkItemStore, resolveRunScope, snapshotExactArray, snapshotExactRecord, snapshotProjectRoomBotMembershipRealtime, snapshotProjectRoomMembershipRealtime, snapshotProjectRoomMessageRealtime, taskBeliefStatesEqual, threadAffinityHeaders, toModelKey, toProjectRoomPublicBotMembership, toProjectRoomPublicMembership, toProjectRoomPublicMessage };

package/dist/index.js

@@ -988,10 +988,11 @@ function parseTrustedRunContext(value) {
     "role",
     "title"
   ];
-  const projectRoomValues = snapshotExactRecord(projectRoomValue, requiredKeys, ["responsibility", "source"]);
+  const projectRoomValues = snapshotExactRecord(projectRoomValue, requiredKeys, ["responsibility", "source", "rosterExempt"]);
   const hasResponsibility = projectRoomValues !== void 0 && Object.prototype.hasOwnProperty.call(projectRoomValues, "responsibility");
   const hasSource = projectRoomValues !== void 0 && Object.prototype.hasOwnProperty.call(projectRoomValues, "source");
-  if (!projectRoomValues || requiredKeys.some((key) => typeof projectRoomValues[key] !== "string" || projectRoomValues[key].length === 0) || hasResponsibility && projectRoomValues.responsibility !== void 0 && (typeof projectRoomValues.responsibility !== "string" || projectRoomValues.responsibility.length === 0) || hasSource && projectRoomValues.source !== void 0 && (typeof projectRoomValues.source !== "string" || projectRoomValues.source.length === 0) || projectRoomValues.role !== "coordinator" && projectRoomValues.role !== "specialist") {
+  const hasRosterExempt = projectRoomValues !== void 0 && Object.prototype.hasOwnProperty.call(projectRoomValues, "rosterExempt");
+  if (!projectRoomValues || requiredKeys.some((key) => typeof projectRoomValues[key] !== "string" || projectRoomValues[key].length === 0) || hasResponsibility && projectRoomValues.responsibility !== void 0 && (typeof projectRoomValues.responsibility !== "string" || projectRoomValues.responsibility.length === 0) || hasSource && projectRoomValues.source !== void 0 && (typeof projectRoomValues.source !== "string" || projectRoomValues.source.length === 0) || hasRosterExempt && projectRoomValues.rosterExempt !== void 0 && typeof projectRoomValues.rosterExempt !== "boolean" || projectRoomValues.role !== "coordinator" && projectRoomValues.role !== "specialist") {
     throw new Error("Invalid trusted agent run context");
   }
   const parsedProjectRoom = {
@@ -1012,6 +1013,9 @@ function parseTrustedRunContext(value) {
   if (hasSource && typeof projectRoomValues.source === "string") {
     parsedProjectRoom.source = projectRoomValues.source;
   }
+  if (hasRosterExempt && projectRoomValues.rosterExempt === true) {
+    parsedProjectRoom.rosterExempt = true;
+  }
   return { projectRoom: parsedProjectRoom };
 }
 function parseQueuedExecutionMode(value) {