@getfamiliar/shared 0.1.10 → 0.1.11

package/build/AgentRun.d.ts

@@ -73,8 +73,8 @@ export interface AgentRunRow {
     /** Optional prompt seed supplied by the queueing caller. */
     readonly prompt: string | null;
     /**
-     * Resolved system prompt the agent ran under (SOUL.md +
-     * CONTEXT.md + handler body + tool list). Populated by
+     * Resolved prompt the agent ran under: the rendered prompt
+     * template (system prompt, then the user-message head). Populated by
      * AgentRunner only when `core.logSystemPrompt` is enabled;
      * otherwise `null`. Read by the report layer's
      * `renderAgentrunStart` when `withDetails` is on.

package/build/HandlerCatalog.d.ts

@@ -56,9 +56,9 @@ export declare class HandlerCatalog {
     constructor(workspaceDir: string, writablePathGlobs?: readonly string[]);
     /**
      * Walk `workspace/` and return one {@link HandlerPath} per
-     * candidate handler file. Excludes the global-context files at
-     * the workspace root (`SOUL.md`, `CONTEXT.md`)
-     * and the `skills/` subtree. Every other `.md` file under a topic
+     * candidate handler file. Excludes every file at the workspace root
+     * (`PROMPT.md`, `SOUL.md`, … — root files have no topic, so they are
+     * never handlers) and the `skills/` subtree. Every other `.md` file under a topic
      * directory is included, even if it's a knowledge file (e.g.
      * `people/anna.md`) — `HandlerCatalog` does not police what is or
      * isn't a "proper" handler; that's a handler-loading concern.

package/build/HandlerCatalog.js

@@ -1,13 +1,6 @@
 import { promises as fs } from "node:fs";
 import path from "node:path";
 import { matchesAnyGlob } from "./PathGlob.js";
-/**
- * Workspace files at the very top level that are not handlers and
- * must be filtered out of {@link HandlerCatalog.list}. These are the
- * documents read by `buildSystemPrompt` rather than executed as
- * handlers (see `CLAUDE.md` — markdown layers / global context).
- */
-const RESERVED_ROOT_FILES = new Set(["SOUL.md", "CONTEXT.md"]);
 /**
  * Top-level workspace folder holding shared recipes
  * (`skills/<name>/SKILL.md`). Skills are pure context loaded via
@@ -58,9 +51,9 @@ export class HandlerCatalog {
     }
     /**
      * Walk `workspace/` and return one {@link HandlerPath} per
-     * candidate handler file. Excludes the global-context files at
-     * the workspace root (`SOUL.md`, `CONTEXT.md`)
-     * and the `skills/` subtree. Every other `.md` file under a topic
+     * candidate handler file. Excludes every file at the workspace root
+     * (`PROMPT.md`, `SOUL.md`, … — root files have no topic, so they are
+     * never handlers) and the `skills/` subtree. Every other `.md` file under a topic
      * directory is included, even if it's a knowledge file (e.g.
      * `people/anna.md`) — `HandlerCatalog` does not police what is or
      * isn't a "proper" handler; that's a handler-loading concern.
@@ -119,8 +112,8 @@ export class HandlerCatalog {
 /**
  * Recursively walk `dir`, accumulating one {@link HandlerPath} per
  * `.md` file. `segments` tracks the topic path from the workspace
- * root; an empty array means we're at the root, where reserved files
- * are skipped.
+ * root; an empty array means we're at the root, whose files are
+ * skipped (no topic, never a handler).
  */
 async function walkMarkdown(dir, segments, out, workspaceDir, writablePathGlobs) {
     let entries;
@@ -141,13 +134,10 @@ async function walkMarkdown(dir, segments, out, workspaceDir, writablePathGlobs)
         if (!entry.isFile() || !entry.name.endsWith(".md")) {
             continue;
         }
-        if (segments.length === 0 && RESERVED_ROOT_FILES.has(entry.name)) {
-            continue;
-        }
         if (segments.length === 0) {
-            // Stray `.md` at the workspace root with no topic folder —
-            // not a handler. Skip silently rather than reporting an
-            // empty topic.
+            // `.md` at the workspace root (PROMPT.md, SOUL.md, …) has no
+            // topic folder — never a handler. Skip silently rather than
+            // reporting an empty topic.
             continue;
         }
         const handlerBase = entry.name.slice(0, -".md".length);

package/build/Plugin.d.ts

@@ -44,25 +44,44 @@ export type AnyCommandDef = CommandDef<any>;
  */
 /**
  * Async function a plugin registers via
- * `ctx.events.registerContextProvider(fn)` to contribute per-event
- * situational knowledge to the handler that is about to run. Receives
- * the agentrun about to execute and its parent event; returns the
- * markdown body injected into the current-run user message, right after
- * the `# Runtime` block (see `buildRuntimeContextBlock`). The system
- * prompt itself stays static so it remains a cacheable prefix.
- * Returning `null`, `undefined`, or an empty/whitespace string
+ * `ctx.prompt.registerPromptAppender(fn)` to append per-event
+ * situational knowledge to the prompt of the handler that is about to
+ * run. Receives the agentrun about to execute and its parent event;
+ * the returned markdown is appended to the current-run user message,
+ * after the part of the prompt template that follows `{CACHE_MARKER}`.
+ * The system prompt itself stays static so it remains a cacheable
+ * prefix. Returning `null`, `undefined`, or an empty/whitespace string
  * contributes nothing — useful for "only speak up when relevant"
- * providers.
+ * appenders.
  *
- * The function is called once per `buildRuntimeContextBlock` (i.e. once
- * per agentrun start). It runs in the host process — providers may close
- * over plugin-local services (DB handles, caches) without going through
- * the bastion. The PromptBuilder reaches the registry through the
- * bastion's `/event-context/` gateway, which fans out to every
- * registered provider in parallel; one bad provider must not poison
- * the prompt, so the gateway isolates rejections and per-call timeouts.
+ * Called once per agentrun start. It runs in the host process —
+ * appenders may close over plugin-local services (DB handles, caches)
+ * without going through the bastion. The PromptBuilder reaches the
+ * registry through the bastion's `/prompt-appenders/` gateway, which
+ * fans out to every registered appender in parallel; one bad appender
+ * must not poison the prompt, so the gateway isolates rejections and
+ * per-call timeouts.
  */
-export type EventContextProvider = (agentrun: AgentRunRow, event: EventRow) => Promise<string | null | undefined>;
+export type PromptAppender = (agentrun: AgentRunRow, event: EventRow) => Promise<string | null | undefined>;
+/**
+ * A plugin-provided prompt placeholder, registered via
+ * `ctx.prompt.registerPlaceholder`. Its value replaces `{name}` wherever
+ * a prompt template uses it. Plugin placeholders are always per-run
+ * (`dynamic`): they receive the agentrun and event, so templates should
+ * place them after `{CACHE_MARKER}`.
+ */
+export interface PromptPlaceholderRegistration {
+    /** Upper-case name, e.g. `OPEN_TICKETS` (used as `{OPEN_TICKETS}`). */
+    readonly name: string;
+    /** One-line description shown by `familiar prompt placeholders`. */
+    readonly description: string;
+    /**
+     * Produce the value for one agentrun. `null` / `undefined` renders as
+     * an empty string. Values are inserted verbatim — placeholders inside
+     * them are never expanded.
+     */
+    readonly provide: (agentrun: AgentRunRow, event: EventRow) => Promise<string | null | undefined>;
+}
 /**
  * Optional callbacks passed alongside `ctx.events.emit`. Bundled into
  * an options object so additional per-emit hooks (e.g. cancellation,
@@ -148,29 +167,37 @@ export interface HostContext {
      */
     readonly events: {
         emit(event: NewEvent, options?: EmitOptions): Promise<EmitHandle>;
+    };
+    /**
+     * Prompt-assembly hooks.
+     */
+    readonly prompt: {
         /**
          * Register an async function called once per agentrun start with
          * the agentrun row and its parent event. Its returned string is
-         * injected below the `# Available tools` section in the system
-         * prompt the handler runs against. Use this to teach the agent
-         * situational facts a plugin knows — e.g. "the sender of this
-         * mail is currently in a meeting", "this chat thread has 14
-         * unread mails attached to it".
-         *
-         * Providers must be cheap to run: the PromptBuilder fans out to
-         * every registered provider in parallel via the bastion's
-         * `/event-context/` gateway and waits on them before assembling
-         * the prompt. Slow providers delay the start of every agentrun.
+         * appended to the current-run user message (see
+         * {@link PromptAppender}). Use this to teach the agent situational
+         * facts a plugin knows — e.g. "the sender of this mail is
+         * currently in a meeting".
          *
-         * A provider that returns `null`, `undefined`, or whitespace
-         * contributes nothing — typical for "only speak up when
-         * relevant" cases. Exceptions thrown inside the provider are
-         * isolated by the gateway and logged with the plugin id; the
-         * prompt still assembles with the remaining providers' output.
+         * Appenders must be cheap to run: the PromptBuilder fans out to
+         * every registered appender in parallel via the bastion's
+         * `/prompt-appenders/` gateway and waits on them before assembling
+         * the prompt. Slow appenders delay the start of every agentrun.
          *
          * Plugins typically call this from their `start(ctx)` hook.
          */
-        registerContextProvider(fn: EventContextProvider): void;
+        registerPromptAppender(fn: PromptAppender): void;
+        /**
+         * Register a named placeholder that prompt templates can use as
+         * `{NAME}`. Call it from **`prepare()`** so the `familiar prompt`
+         * CLI lists it without the daemon.
+         *
+         * @throws {PromptPlaceholderConflictError} When the name is not
+         *   `[A-Z][A-Z0-9_]*` or is already taken by the core or another
+         *   plugin.
+         */
+        registerPlaceholder(registration: PromptPlaceholderRegistration): void;
     };
     /**
      * Chat capabilities.

package/build/PromptPlaceholders.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Prompt placeholders — the `{NAME}` tokens a workspace prompt template
+ * (`PROMPT.md`, or a handler's `systemPrompt: <path.md>`) may contain.
+ *
+ * The container renders templates; the host owns plugin-registered
+ * placeholders and the `familiar prompt placeholders` CLI. Both sides
+ * need the core definitions (the container to know which names it
+ * resolves itself, the host to reject plugin registrations that collide
+ * with them and to list them), which is why they live here.
+ */
+/** Workspace-root template used by handlers with `systemPrompt: default` (or none declared). */
+export declare const PROMPT_TEMPLATE_FILE = "PROMPT.md";
+/**
+ * Valid placeholder name: upper-case letter, then upper-case letters,
+ * digits or underscores. Workspace includes (`{path.md}`) are a
+ * separate token form and are not names.
+ */
+export declare const PROMPT_PLACEHOLDER_NAME_PATTERN: RegExp;
+/**
+ * Whether a placeholder's value is the same for every run of a handler
+ * (`static`, safe in the cacheable system-prompt prefix) or changes per
+ * run (`dynamic`, belongs after `{CACHE_MARKER}`).
+ */
+export type PromptPlaceholderKind = "static" | "dynamic";
+/** Name, purpose and cache behaviour of one placeholder. */
+export interface PromptPlaceholderDefinition {
+    readonly name: string;
+    readonly description: string;
+    readonly kind: PromptPlaceholderKind;
+}
+/** Name of the marker splitting the template into system prompt and user-message head. */
+export declare const CACHE_MARKER_PLACEHOLDER = "CACHE_MARKER";
+/**
+ * Placeholders resolved by the container core. Rendered order in
+ * `familiar prompt placeholders` follows this list.
+ */
+export declare const CORE_PROMPT_PLACEHOLDERS: readonly PromptPlaceholderDefinition[];
+/**
+ * Thrown when a plugin registers a placeholder whose name is invalid or
+ * already taken by the core or another plugin.
+ */
+export declare class PromptPlaceholderConflictError extends Error {
+    readonly placeholderName: string;
+    /**
+     * @param placeholderName The offending name.
+     * @param message Human-readable reason.
+     */
+    constructor(placeholderName: string, message: string);
+}
+/**
+ * Whether `name` is resolved by the container core.
+ *
+ * @param name Placeholder name without braces.
+ * @returns `true` for names in {@link CORE_PROMPT_PLACEHOLDERS}.
+ */
+export declare function isCorePromptPlaceholder(name: string): boolean;

package/build/PromptPlaceholders.js

@@ -0,0 +1,121 @@
+/**
+ * Prompt placeholders — the `{NAME}` tokens a workspace prompt template
+ * (`PROMPT.md`, or a handler's `systemPrompt: <path.md>`) may contain.
+ *
+ * The container renders templates; the host owns plugin-registered
+ * placeholders and the `familiar prompt placeholders` CLI. Both sides
+ * need the core definitions (the container to know which names it
+ * resolves itself, the host to reject plugin registrations that collide
+ * with them and to list them), which is why they live here.
+ */
+/** Workspace-root template used by handlers with `systemPrompt: default` (or none declared). */
+export const PROMPT_TEMPLATE_FILE = "PROMPT.md";
+/**
+ * Valid placeholder name: upper-case letter, then upper-case letters,
+ * digits or underscores. Workspace includes (`{path.md}`) are a
+ * separate token form and are not names.
+ */
+export const PROMPT_PLACEHOLDER_NAME_PATTERN = /^[A-Z][A-Z0-9_]*$/;
+/** Name of the marker splitting the template into system prompt and user-message head. */
+export const CACHE_MARKER_PLACEHOLDER = "CACHE_MARKER";
+/**
+ * Placeholders resolved by the container core. Rendered order in
+ * `familiar prompt placeholders` follows this list.
+ */
+export const CORE_PROMPT_PLACEHOLDERS = [
+    {
+        name: CACHE_MARKER_PLACEHOLDER,
+        description: "Splits the template: everything before it is the (cacheable) system prompt, everything after it leads the current user message.",
+        kind: "static",
+    },
+    {
+        name: "HANDLER_CONTENT",
+        description: "Body of the resolved handler file (merged with its parents). Placeholders inside it are expanded too.",
+        kind: "static",
+    },
+    {
+        name: "PRELOADED_SKILLS",
+        description: "Full content of the skills the handler lists in its `skills` frontmatter, one `# Skill` section each, or empty. Placeholders inside are expanded too.",
+        kind: "static",
+    },
+    {
+        name: "HANDLER_PATH",
+        description: "Workspace-relative path of the handler file, e.g. `chat/telegram/index.md`.",
+        kind: "static",
+    },
+    {
+        name: "HANDLER_INHERITS",
+        description: "Parent handler files this handler is merged with, as `a ← b`, or `(none)`.",
+        kind: "static",
+    },
+    {
+        name: "SKILL_LIST",
+        description: "Bullet list of the skills in `skills/` (id and description).",
+        kind: "static",
+    },
+    {
+        name: "TOOL_LIST",
+        description: "Bullet list of the tools preloaded for this run.",
+        kind: "static",
+    },
+    {
+        name: "PYTHON_PACKAGE_LIST",
+        description: "Comma-separated python packages installed in the agent container.",
+        kind: "static",
+    },
+    {
+        name: "WRITABLE_PATH_LIST",
+        description: "Comma-separated `core.writablePaths` globs a non-privileged run may write to.",
+        kind: "static",
+    },
+    {
+        name: "RUNTIME_LIST",
+        description: "Bullet list of run facts: current time, event topic, handler file, inheritance, outputChat, privileged.",
+        kind: "dynamic",
+    },
+    {
+        name: "CURRENT_TIME",
+        description: "Current wall-clock time with weekday and timezone.",
+        kind: "dynamic",
+    },
+    {
+        name: "EVENT_TOPIC",
+        description: "Topic of the event this run processes, e.g. `chat:telegram`.",
+        kind: "dynamic",
+    },
+    {
+        name: "PRIVILEGED",
+        description: "`yes` when the run stems from the system owner, otherwise `no`.",
+        kind: "dynamic",
+    },
+    {
+        name: "STAGED_FILE_LIST",
+        description: "Bullet list of files staged in this event's `/scratch/<event-id>/` folder.",
+        kind: "dynamic",
+    },
+];
+/**
+ * Thrown when a plugin registers a placeholder whose name is invalid or
+ * already taken by the core or another plugin.
+ */
+export class PromptPlaceholderConflictError extends Error {
+    placeholderName;
+    /**
+     * @param placeholderName The offending name.
+     * @param message Human-readable reason.
+     */
+    constructor(placeholderName, message) {
+        super(message);
+        this.name = "PromptPlaceholderConflictError";
+        this.placeholderName = placeholderName;
+    }
+}
+/**
+ * Whether `name` is resolved by the container core.
+ *
+ * @param name Placeholder name without braces.
+ * @returns `true` for names in {@link CORE_PROMPT_PLACEHOLDERS}.
+ */
+export function isCorePromptPlaceholder(name) {
+    return CORE_PROMPT_PLACEHOLDERS.some((definition) => definition.name === name);
+}

package/build/Schema.d.ts

@@ -60,7 +60,7 @@ export declare const SCHEDULED_SUBAGENTS_CHANNEL = "scheduled_subagents_changed"
  * deepest-first and merging every existing layer (see HandlerFile.load).
  */
 export declare const TOPIC_PATTERN = "^\\w+(:\\w+)*$";
-export declare const SCHEMA_SQL = "\n-- Drop legacy single-table artifacts from before the events/agentruns\n-- split. Safe no-ops on fresh databases. The current schema reuses the\n-- name events_notify_new() for its own NOTIFY function, so we do NOT\n-- drop it here (CREATE OR REPLACE FUNCTION below handles the update);\n-- dropping would fail anyway once the current events_new_trg exists.\nDROP TRIGGER IF EXISTS events_notify_changed_trg ON events;\nDROP TRIGGER IF EXISTS events_notify_new_trg ON events;\nDROP FUNCTION IF EXISTS events_notify_changed();\nDROP INDEX IF EXISTS events_pending_priority_idx;\nDROP INDEX IF EXISTS events_state_priority_idx;\n\nCREATE TABLE IF NOT EXISTS events (\n  id              bigserial PRIMARY KEY,\n  topic           text NOT NULL,\n  priority        smallint NOT NULL DEFAULT 50,\n  state           text NOT NULL DEFAULT 'pending',\n  payload         jsonb NOT NULL DEFAULT '{}'::jsonb,\n  idempotency_key text UNIQUE,\n  privileged      boolean NOT NULL DEFAULT false,\n  created_at      timestamptz NOT NULL DEFAULT now(),\n  updated_at      timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT events_topic_format CHECK (topic ~ '^\\w+(:\\w+)*$')\n);\n\n-- Drop legacy columns from earlier schema generations. Single-instance\n-- project; column drops are fine.\nALTER TABLE events DROP COLUMN IF EXISTS supervisor_prompt;\nALTER TABLE events DROP COLUMN IF EXISTS causation_chain;\n\n-- Chat-aware event metadata. `is_chat` opts into automatic user-message\n-- persistence in EventBus.add; `preferred_chat_channel_id` names the\n-- channel an assistant reply should reach the user on. The container is\n-- channel-blind \u2014 both fields are read host-side (for routing) or via\n-- JOIN inside the chatmessages NOTIFY trigger.\nALTER TABLE events ADD COLUMN IF NOT EXISTS is_chat boolean NOT NULL DEFAULT false;\nALTER TABLE events ADD COLUMN IF NOT EXISTS preferred_chat_channel_id text;\n-- Required for non-chat events (validated at `EventBus.add` time and at\n-- the type level via `NewEvent`'s discriminated union); always null for\n-- chat events because the user's text in `chatmessages` already serves\n-- as the agent-visible \"what happened\" message. The EventWatcher copies\n-- this verbatim into the root `agentruns.prompt` so the agent sees the\n-- emitter's framing without the EventWatcher having to reach into the\n-- payload schema.\nALTER TABLE events ADD COLUMN IF NOT EXISTS prompt text;\n-- Optional override for the root agentrun's handler. When NULL the\n-- input-event watcher falls back to 'index' \u2014 same behaviour as\n-- before this column existed. Set by the emitter on NewEvent.\nALTER TABLE events ADD COLUMN IF NOT EXISTS start_handler text;\n-- Privileged events originate from a trusted user-input source (operator\n-- at the local terminal via cli-chat, operator on Telegram). The flag\n-- propagates verbatim to the root agentrun and to every child agentrun\n-- spawned via schedule_subagent / start_subagent, so future system tools can\n-- gate risky reads / writes (editing SOUL.md etc.) on whether the run\n-- descends from a trusted input. Default false: any plugin that doesn't\n-- explicitly opt in produces non-privileged events.\nALTER TABLE events ADD COLUMN IF NOT EXISTS privileged boolean NOT NULL DEFAULT false;\n-- When true and the event ends in 'failed', `HostContextImpl.emitAndAwait`\n-- writes a role='assistant' chatmessage with the failure text before\n-- rejecting handle.settled. Default false: only chat plugins (cli-chat,\n-- telegram) opt in. See [[outputChatOnFailure]] on NewEvent for the\n-- rationale.\nALTER TABLE events ADD COLUMN IF NOT EXISTS output_chat_on_failure boolean NOT NULL DEFAULT false;\n\nCREATE INDEX IF NOT EXISTS events_state_priority_idx\n  ON events (state, priority DESC, id ASC);\nCREATE INDEX IF NOT EXISTS events_topic_idx ON events (topic);\n\nCREATE TABLE IF NOT EXISTS agentruns (\n  id                 bigserial PRIMARY KEY,\n  event_id           bigint NOT NULL REFERENCES events(id) ON DELETE CASCADE,\n  parent_agentrun_id bigint REFERENCES agentruns(id) ON DELETE CASCADE,\n  topic              text NOT NULL,\n  handler            text NOT NULL,\n  priority           smallint NOT NULL DEFAULT 50,\n  state              text NOT NULL DEFAULT 'pending',\n  prompt             text,\n  payload            jsonb NOT NULL DEFAULT '{}'::jsonb,\n  result             jsonb,\n  result_text        text,\n  error              text,\n  privileged         boolean NOT NULL DEFAULT false,\n  created_at         timestamptz NOT NULL DEFAULT now(),\n  updated_at         timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT agentruns_topic_format CHECK (topic ~ '^\\w+(:\\w+)*$')\n);\n\n-- Forward-compat ALTER for databases created before result_text landed.\n-- Safe no-op on fresh databases where the column already exists.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS result_text text;\n-- Inherited from the originating event (root agentrun) or parent\n-- agentrun (children spawned via schedule_subagent / start_subagent). See\n-- the matching ALTER on the events table for the trust-model rationale.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS privileged boolean NOT NULL DEFAULT false;\n-- Number of retry attempts already made on this agentrun. Bumped each\n-- time AgentRunner postpones the row due to a retryable inference\n-- error (APICallError.isRetryable). Capped per-handler via maxRetries\n-- (frontmatter override) or globally via inference.maxRetries.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS retry_count int NOT NULL DEFAULT 0;\n-- Earliest moment the agentrun watcher is allowed to re-claim this\n-- row. NULL = claim immediately (default for fresh rows). A future\n-- timestamp = leave the row alone until then; the watcher's claim\n-- query gates on this so a parked row doesn't waste the slot while\n-- other agentruns (potentially using different models) can still run.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS not_before timestamptz;\n-- Resolved model id for this agentrun, of the form\n-- `<provider>/<modelId>` (e.g. `featherless/zai-org/GLM-5.1`).\n-- Populated by AgentRunner once it builds the model client; stays\n-- NULL for any agentrun that never reached generate() (failed at\n-- handler-load time, etc.).\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS model text;\n-- Resolved system prompt (SOUL.md + CONTEXT.md + handler body +\n-- tool list) used for this agentrun. Populated by AgentRunner\n-- only when core.logSystemPrompt is true; otherwise NULL. Surfaced\n-- by the report layer's Agentrun Start section when the consumer\n-- opts into withDetails.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS system_prompt text;\n-- Verbatim model-message array assembled for the first agent.generate()\n-- call (prior history + the run's leading user turn). Populated by\n-- AgentRunner only when inference.captureInitialMessageHistory is true;\n-- otherwise NULL. Surfaced by the report layer's -vv view so an operator\n-- can see exactly what was sent into the model loop.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS initial_messages jsonb;\n\n-- Distinguishes how a child agentrun was spawned.\n--   NULL        \u2014 root agentrun (created by the input-event watcher, no parent).\n--   'scheduled' \u2014 fire-and-forget child spawned by `schedule_subagent` without\n--                 a future `when` (immediate dispatch under the same event).\n--   'started'   \u2014 synchronous child spawned via the `start_subagent` tool; the\n--                 parent is parked in state='waiting' until this row settles.\n-- The Scheduler reads this column to decide whether settling a row should\n-- wake a waiting parent.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS calltype text;\nALTER TABLE agentruns DROP CONSTRAINT IF EXISTS agentruns_calltype_format;\nALTER TABLE agentruns ADD CONSTRAINT agentruns_calltype_format\n  CHECK (calltype IS NULL OR calltype IN ('scheduled','started'));\n\n-- Partial index for the \"are all started children of $parent settled?\"\n-- check the Scheduler runs after every 'started' child settles. Indexes\n-- only the rows that actually participate in the question.\nCREATE INDEX IF NOT EXISTS agentruns_parent_calltype_state_idx\n  ON agentruns (parent_agentrun_id, state)\n  WHERE calltype = 'started';\n\n-- Forward-compat: relax the topic CHECK constraint to allow arbitrarily\n-- deep `a:b:c:\u2026` topics. CREATE TABLE IF NOT EXISTS above doesn't\n-- update existing constraints, so we drop+re-add unconditionally. The\n-- DROP IF EXISTS / ADD pair is idempotent.\nALTER TABLE events DROP CONSTRAINT IF EXISTS events_topic_format;\nALTER TABLE events ADD CONSTRAINT events_topic_format CHECK (topic ~ '^\\w+(:\\w+)*$');\nALTER TABLE agentruns DROP CONSTRAINT IF EXISTS agentruns_topic_format;\nALTER TABLE agentruns ADD CONSTRAINT agentruns_topic_format CHECK (topic ~ '^\\w+(:\\w+)*$');\n\nCREATE INDEX IF NOT EXISTS agentruns_state_priority_idx\n  ON agentruns (state, priority DESC, id ASC);\nCREATE INDEX IF NOT EXISTS agentruns_event_id_idx ON agentruns (event_id);\nCREATE INDEX IF NOT EXISTS agentruns_parent_idx ON agentruns (parent_agentrun_id);\n\nCREATE TABLE IF NOT EXISTS stepresults (\n  id              bigserial PRIMARY KEY,\n  agent_run_id    bigint NOT NULL REFERENCES agentruns(id) ON DELETE CASCADE,\n  event_id        bigint NOT NULL REFERENCES events(id) ON DELETE CASCADE,\n  step_number     int    NOT NULL,\n  finish_reason   text   NOT NULL,\n  result_text     text,\n  reasoning_text  text,\n  input_tokens    int,\n  output_tokens   int,\n  total_tokens    int,\n  tool_call_count int    NOT NULL DEFAULT 0,\n  tool_calls      jsonb  NOT NULL DEFAULT '[]'::jsonb,\n  tool_results    jsonb  NOT NULL DEFAULT '[]'::jsonb,\n  created_at      timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT stepresults_step_number_unique UNIQUE (agent_run_id, step_number)\n);\n\nCREATE INDEX IF NOT EXISTS stepresults_agent_run_id_idx ON stepresults (agent_run_id);\nCREATE INDEX IF NOT EXISTS stepresults_event_id_idx     ON stepresults (event_id);\n\n-- AI SDK per-step usage breakdown\n-- (LanguageModelUsage.inputTokenDetails / outputTokenDetails). Each\n-- column is NULL when the provider doesn't report that detail.\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS input_tokens_no_cache    int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS input_tokens_cache_read  int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS input_tokens_cache_write int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS output_tokens_text       int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS output_tokens_reasoning  int;\n-- Full step object snapshot, populated only when the operator opts\n-- in via inference.captureRawStepResultToDatabase: true. Used to\n-- inspect provider-specific fields (Anthropic cache control,\n-- OpenAI logprobs, ...) that don't fit dedicated columns.\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS raw_result jsonb;\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 chatmessages \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Persistent chat history across all channels. Each row links to the\n-- event whose lifecycle the message belongs to:\n--   * For role='user': the event the host plugin emitted with isChat=true.\n--   * For role='assistant': the event whose agentrun called send_chat.\n-- The channel is reachable via JOIN to events.preferred_chat_channel_id;\n-- there is intentionally no channel_id column here \u2014 channel routing is\n-- a host-side concern, the container never names a channel.\n--\n-- delivered_at is set when ANY listener returns true from its async\n-- handler. New subscribers replay all undelivered matching rows on\n-- registration so a message produced when nobody was listening is still\n-- delivered later.\nCREATE TABLE IF NOT EXISTS chatmessages (\n  id           bigserial PRIMARY KEY,\n  event_id     bigint NOT NULL REFERENCES events(id) ON DELETE CASCADE,\n  role         text NOT NULL CHECK (role IN ('user','assistant')),\n  text_content text NOT NULL,\n  created_at   timestamptz NOT NULL DEFAULT now(),\n  delivered_at timestamptz\n);\n\nCREATE INDEX IF NOT EXISTS chatmessages_event_idx\n  ON chatmessages (event_id);\nCREATE INDEX IF NOT EXISTS chatmessages_undelivered_idx\n  ON chatmessages (created_at) WHERE delivered_at IS NULL;\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 NOTIFY triggers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nCREATE OR REPLACE FUNCTION events_notify_new() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify('events_new', NEW.id::text);\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS events_new_trg ON events;\nCREATE TRIGGER events_new_trg\n  AFTER INSERT ON events\n  FOR EACH ROW EXECUTE FUNCTION events_notify_new();\n\nCREATE OR REPLACE FUNCTION events_notify_state() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify('events_state', NEW.id::text || ':' || NEW.state);\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS events_state_trg ON events;\nCREATE TRIGGER events_state_trg\n  AFTER UPDATE OF state ON events\n  FOR EACH ROW EXECUTE FUNCTION events_notify_state();\n\nCREATE OR REPLACE FUNCTION agentruns_notify_changed() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify(\n    'agentruns_changed',\n    NEW.event_id::text || ':' || NEW.id::text\n  );\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS agentruns_notify_changed_trg ON agentruns;\nCREATE TRIGGER agentruns_notify_changed_trg\n  AFTER INSERT OR UPDATE OF state ON agentruns\n  FOR EACH ROW EXECUTE FUNCTION agentruns_notify_changed();\n\nCREATE OR REPLACE FUNCTION stepresults_notify_new() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify(\n    'stepresults_new',\n    NEW.event_id::text || ':' || NEW.agent_run_id::text || ':' || NEW.id::text\n  );\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS stepresults_new_trg ON stepresults;\nCREATE TRIGGER stepresults_new_trg\n  AFTER INSERT ON stepresults\n  FOR EACH ROW EXECUTE FUNCTION stepresults_notify_new();\n\n-- chatmessages NOTIFY: payload is \"<channel_id>:<role>:<id>\". Channel\n-- comes from the parent event's preferred_chat_channel_id, JOINed at\n-- trigger time. Empty channel becomes empty prefix \u2014 listeners will\n-- filter it out unless they explicitly subscribe to channelId=\"\".\nCREATE OR REPLACE FUNCTION chatmessages_notify_new() RETURNS trigger AS $$\nDECLARE\n  channel text;\nBEGIN\n  SELECT preferred_chat_channel_id INTO channel FROM events WHERE id = NEW.event_id;\n  PERFORM pg_notify(\n    'chatmessages_new',\n    COALESCE(channel, '') || ':' || NEW.role || ':' || NEW.id::text\n  );\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS chatmessages_new_trg ON chatmessages;\nCREATE TRIGGER chatmessages_new_trg\n  AFTER INSERT ON chatmessages\n  FOR EACH ROW EXECUTE FUNCTION chatmessages_notify_new();\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 calendars + calendar_events \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Plugin-agnostic calendar data layer. `calendars` lists every\n-- subscription (own or shared) any provider plugin (ms365, future\n-- google/caldav) has surfaced; `calendar_events` stores every\n-- instance. Providers persist every occurrence of a recurring\n-- series independently (no master-expansion in core).\n--\n-- Identity:\n--   * `calendars.unique_key` is the provider's stable id. Uniqueness\n--     within `(plugin_id, unique_key)` lets multiple providers\n--     coexist.\n--   * `calendar_events.id` is provider-prefixed (e.g. `ms365:<graph-id>`)\n--     so collisions across providers are impossible by construction.\n--\n-- Refresh reconciliation uses a scan-generation tag: a refresh walk\n-- bumps `calendars.scan_generation`, upserts every event in window\n-- with the new value, then DELETEs events whose generation is older\n-- than the calendar's current value.\n\nCREATE TABLE IF NOT EXISTS calendars (\n  id              bigserial PRIMARY KEY,\n  plugin_id       text NOT NULL,\n  unique_key      text NOT NULL,\n  name            text NOT NULL,\n  type            text NOT NULL CHECK (type IN ('own','shared')),\n  owner_name      text,\n  scan_generation int  NOT NULL DEFAULT 0,\n  created_at      timestamptz NOT NULL DEFAULT now(),\n  UNIQUE (plugin_id, unique_key)\n);\n\n-- The provider's own \"default calendar\" flag (Graph's\n-- `isDefaultCalendar`). Used by `CalendarService.resolveDefaultCalendar`\n-- as the fallback when `core.defaultCalendar` is unset \u2014 we pick the\n-- first registered calendar (lowest id) flagged here. Added via\n-- ALTER so existing databases don't need a schema reset.\nALTER TABLE calendars ADD COLUMN IF NOT EXISTS is_default smallint NOT NULL DEFAULT 0;\n\nCREATE INDEX IF NOT EXISTS calendars_plugin_id_idx ON calendars (plugin_id);\n\nCREATE TABLE IF NOT EXISTS calendar_events (\n  id                  text PRIMARY KEY,\n  calendar_id         bigint NOT NULL REFERENCES calendars(id) ON DELETE CASCADE,\n  series_master_id    text,\n  type                text NOT NULL CHECK (type IN ('singleInstance','occurrence','exception','seriesMaster')),\n  subject             text,\n  start_dt            text NOT NULL,\n  end_dt              text NOT NULL,\n  event_tz            text,\n  is_all_day          smallint NOT NULL DEFAULT 0,\n  is_cancelled        smallint NOT NULL DEFAULT 0,\n  show_as             text,\n  sensitivity         text,\n  importance          text,\n  location            text,\n  is_online_meeting   smallint NOT NULL DEFAULT 0,\n  online_meeting_url  text,\n  organizer_name      text,\n  organizer_email     text,\n  response_status     text,\n  attendees_json      jsonb,\n  body                text,\n  attachments         jsonb,\n  scan_generation     int  NOT NULL,\n  created_at          timestamptz NOT NULL DEFAULT now(),\n  updated_at          timestamptz NOT NULL DEFAULT now()\n);\n\nCREATE INDEX IF NOT EXISTS calendar_events_window_idx\n  ON calendar_events (calendar_id, start_dt);\nCREATE INDEX IF NOT EXISTS calendar_events_series_idx\n  ON calendar_events (series_master_id);\nCREATE INDEX IF NOT EXISTS calendar_events_generation_idx\n  ON calendar_events (calendar_id, scan_generation);\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 scheduled_subagents \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- One-off agent-scheduled wake-ups. Each row is upserted by the\n-- container's `schedule_subagent` tool and read by the host-side\n-- `ScheduledSubagentScheduler`, which installs a Croner job per row\n-- and atomically deletes the row when it fires. `key` is the\n-- agent-supplied unique id used for replace-on-conflict semantics\n-- (\"rescheduling a key overwrites the previous timing\"). `fire_at`\n-- is the UTC firing time; the agent passes wall-clock-in-`core.timezone`\n-- and the container projects to UTC before insert. On daemon startup,\n-- past-due rows are deleted with a warn log; future rows are\n-- reinstalled. See [[feedback_agent_facing_format]] \u2014 UTC storage,\n-- local-tz projection at every agent-facing edge.\nCREATE TABLE IF NOT EXISTS scheduled_subagents (\n  key         text PRIMARY KEY,\n  fire_at     timestamptz NOT NULL,\n  topic       text NOT NULL,\n  handler     text NOT NULL,\n  prompt      text,\n  payload     jsonb NOT NULL DEFAULT '{}'::jsonb,\n  priority    smallint NOT NULL DEFAULT 50,\n  privileged  boolean NOT NULL DEFAULT false,\n  created_at  timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT scheduled_subagents_topic_format CHECK (topic ~ '^\\w+(:\\w+)*$')\n);\n\nCREATE INDEX IF NOT EXISTS scheduled_subagents_fire_at_idx\n  ON scheduled_subagents (fire_at);\n\nCREATE OR REPLACE FUNCTION scheduled_subagents_notify_changed() RETURNS trigger AS $$\nDECLARE\n  payload_key text;\n  op text;\nBEGIN\n  IF TG_OP = 'DELETE' THEN\n    payload_key := OLD.key;\n    op := 'd';\n  ELSE\n    payload_key := NEW.key;\n    op := 'u';\n  END IF;\n  PERFORM pg_notify('scheduled_subagents_changed', payload_key || ':' || op);\n  RETURN COALESCE(NEW, OLD);\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS scheduled_subagents_notify_changed_trg ON scheduled_subagents;\nCREATE TRIGGER scheduled_subagents_notify_changed_trg\n  AFTER INSERT OR UPDATE OR DELETE ON scheduled_subagents\n  FOR EACH ROW EXECUTE FUNCTION scheduled_subagents_notify_changed();\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 inference_events \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Append-only audit trail of every upstream model HTTP call attempt.\n-- Written by AgentRunner on each generate() outcome (success / retryable /\n-- fatal). Read by the host-side `inference_status` reflection tool to\n-- answer \"is this model misbehaving right now?\". One row per attempt;\n-- retries write multiple rows. NULL agent_run_id is kept for runs whose\n-- row was later deleted (parent event cascade) so the historical signal\n-- survives.\nCREATE TABLE IF NOT EXISTS inference_events (\n  id            bigserial PRIMARY KEY,\n  provider      text NOT NULL,\n  model         text NOT NULL,\n  agent_run_id  bigint REFERENCES agentruns(id) ON DELETE SET NULL,\n  outcome       text NOT NULL CHECK (outcome IN ('success','retryable','fatal')),\n  status_code   int,\n  error_excerpt text,\n  occurred_at   timestamptz NOT NULL DEFAULT now()\n);\n\nCREATE INDEX IF NOT EXISTS inference_events_model_time_idx\n  ON inference_events (model, occurred_at DESC);\nCREATE INDEX IF NOT EXISTS inference_events_occurred_at_idx\n  ON inference_events (occurred_at DESC);\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 tool_calls \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Append-only record of every tool invocation an agentrun attempted,\n-- tagged with the resolved handler markdown path and whether the call\n-- threw. Written by the tool wrapper in the container's ToolsFactory on\n-- each execute() outcome. Read by the heuristic tool-preloader\n-- (ToolCallBus.topToolsForHandler): the tools a handler successfully\n-- used across its recent non-error runs get loaded up front on the next\n-- run, so warm handlers rarely need a tool_list / tool_call round-trip.\n-- NULL agent_run_id survives a parent-event cascade so the historical\n-- usage signal outlives the run row.\nCREATE TABLE IF NOT EXISTS tool_calls (\n  id           bigserial PRIMARY KEY,\n  agent_run_id bigint REFERENCES agentruns(id) ON DELETE SET NULL,\n  handler_path text NOT NULL,\n  tool_name    text NOT NULL,\n  successful   boolean NOT NULL,\n  created_at   timestamptz NOT NULL DEFAULT now()\n);\n\nCREATE INDEX IF NOT EXISTS tool_calls_handler_run_idx\n  ON tool_calls (handler_path, agent_run_id DESC);\nCREATE INDEX IF NOT EXISTS tool_calls_created_at_idx\n  ON tool_calls (created_at DESC);\n";
+export declare const SCHEMA_SQL = "\n-- Drop legacy single-table artifacts from before the events/agentruns\n-- split. Safe no-ops on fresh databases. The current schema reuses the\n-- name events_notify_new() for its own NOTIFY function, so we do NOT\n-- drop it here (CREATE OR REPLACE FUNCTION below handles the update);\n-- dropping would fail anyway once the current events_new_trg exists.\nDROP TRIGGER IF EXISTS events_notify_changed_trg ON events;\nDROP TRIGGER IF EXISTS events_notify_new_trg ON events;\nDROP FUNCTION IF EXISTS events_notify_changed();\nDROP INDEX IF EXISTS events_pending_priority_idx;\nDROP INDEX IF EXISTS events_state_priority_idx;\n\nCREATE TABLE IF NOT EXISTS events (\n  id              bigserial PRIMARY KEY,\n  topic           text NOT NULL,\n  priority        smallint NOT NULL DEFAULT 50,\n  state           text NOT NULL DEFAULT 'pending',\n  payload         jsonb NOT NULL DEFAULT '{}'::jsonb,\n  idempotency_key text UNIQUE,\n  privileged      boolean NOT NULL DEFAULT false,\n  created_at      timestamptz NOT NULL DEFAULT now(),\n  updated_at      timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT events_topic_format CHECK (topic ~ '^\\w+(:\\w+)*$')\n);\n\n-- Drop legacy columns from earlier schema generations. Single-instance\n-- project; column drops are fine.\nALTER TABLE events DROP COLUMN IF EXISTS supervisor_prompt;\nALTER TABLE events DROP COLUMN IF EXISTS causation_chain;\n\n-- Chat-aware event metadata. `is_chat` opts into automatic user-message\n-- persistence in EventBus.add; `preferred_chat_channel_id` names the\n-- channel an assistant reply should reach the user on. The container is\n-- channel-blind \u2014 both fields are read host-side (for routing) or via\n-- JOIN inside the chatmessages NOTIFY trigger.\nALTER TABLE events ADD COLUMN IF NOT EXISTS is_chat boolean NOT NULL DEFAULT false;\nALTER TABLE events ADD COLUMN IF NOT EXISTS preferred_chat_channel_id text;\n-- Required for non-chat events (validated at `EventBus.add` time and at\n-- the type level via `NewEvent`'s discriminated union); always null for\n-- chat events because the user's text in `chatmessages` already serves\n-- as the agent-visible \"what happened\" message. The EventWatcher copies\n-- this verbatim into the root `agentruns.prompt` so the agent sees the\n-- emitter's framing without the EventWatcher having to reach into the\n-- payload schema.\nALTER TABLE events ADD COLUMN IF NOT EXISTS prompt text;\n-- Optional override for the root agentrun's handler. When NULL the\n-- input-event watcher falls back to 'index' \u2014 same behaviour as\n-- before this column existed. Set by the emitter on NewEvent.\nALTER TABLE events ADD COLUMN IF NOT EXISTS start_handler text;\n-- Privileged events originate from a trusted user-input source (operator\n-- at the local terminal via cli-chat, operator on Telegram). The flag\n-- propagates verbatim to the root agentrun and to every child agentrun\n-- spawned via schedule_subagent / start_subagent, so future system tools can\n-- gate risky reads / writes (editing SOUL.md etc.) on whether the run\n-- descends from a trusted input. Default false: any plugin that doesn't\n-- explicitly opt in produces non-privileged events.\nALTER TABLE events ADD COLUMN IF NOT EXISTS privileged boolean NOT NULL DEFAULT false;\n-- When true and the event ends in 'failed', `HostContextImpl.emitAndAwait`\n-- writes a role='assistant' chatmessage with the failure text before\n-- rejecting handle.settled. Default false: only chat plugins (cli-chat,\n-- telegram) opt in. See [[outputChatOnFailure]] on NewEvent for the\n-- rationale.\nALTER TABLE events ADD COLUMN IF NOT EXISTS output_chat_on_failure boolean NOT NULL DEFAULT false;\n\nCREATE INDEX IF NOT EXISTS events_state_priority_idx\n  ON events (state, priority DESC, id ASC);\nCREATE INDEX IF NOT EXISTS events_topic_idx ON events (topic);\n\nCREATE TABLE IF NOT EXISTS agentruns (\n  id                 bigserial PRIMARY KEY,\n  event_id           bigint NOT NULL REFERENCES events(id) ON DELETE CASCADE,\n  parent_agentrun_id bigint REFERENCES agentruns(id) ON DELETE CASCADE,\n  topic              text NOT NULL,\n  handler            text NOT NULL,\n  priority           smallint NOT NULL DEFAULT 50,\n  state              text NOT NULL DEFAULT 'pending',\n  prompt             text,\n  payload            jsonb NOT NULL DEFAULT '{}'::jsonb,\n  result             jsonb,\n  result_text        text,\n  error              text,\n  privileged         boolean NOT NULL DEFAULT false,\n  created_at         timestamptz NOT NULL DEFAULT now(),\n  updated_at         timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT agentruns_topic_format CHECK (topic ~ '^\\w+(:\\w+)*$')\n);\n\n-- Forward-compat ALTER for databases created before result_text landed.\n-- Safe no-op on fresh databases where the column already exists.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS result_text text;\n-- Inherited from the originating event (root agentrun) or parent\n-- agentrun (children spawned via schedule_subagent / start_subagent). See\n-- the matching ALTER on the events table for the trust-model rationale.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS privileged boolean NOT NULL DEFAULT false;\n-- Number of retry attempts already made on this agentrun. Bumped each\n-- time AgentRunner postpones the row due to a retryable inference\n-- error (APICallError.isRetryable). Capped per-handler via maxRetries\n-- (frontmatter override) or globally via inference.maxRetries.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS retry_count int NOT NULL DEFAULT 0;\n-- Earliest moment the agentrun watcher is allowed to re-claim this\n-- row. NULL = claim immediately (default for fresh rows). A future\n-- timestamp = leave the row alone until then; the watcher's claim\n-- query gates on this so a parked row doesn't waste the slot while\n-- other agentruns (potentially using different models) can still run.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS not_before timestamptz;\n-- Resolved model id for this agentrun, of the form\n-- `<provider>/<modelId>` (e.g. `featherless/zai-org/GLM-5.1`).\n-- Populated by AgentRunner once it builds the model client; stays\n-- NULL for any agentrun that never reached generate() (failed at\n-- handler-load time, etc.).\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS model text;\n-- Resolved prompt (rendered prompt template: system prompt, then\n-- user-message head) used for this agentrun. Populated by AgentRunner\n-- only when core.logSystemPrompt is true; otherwise NULL. Surfaced\n-- by the report layer's Agentrun Start section when the consumer\n-- opts into withDetails.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS system_prompt text;\n-- Verbatim model-message array assembled for the first agent.generate()\n-- call (prior history + the run's leading user turn). Populated by\n-- AgentRunner only when inference.captureInitialMessageHistory is true;\n-- otherwise NULL. Surfaced by the report layer's -vv view so an operator\n-- can see exactly what was sent into the model loop.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS initial_messages jsonb;\n\n-- Distinguishes how a child agentrun was spawned.\n--   NULL        \u2014 root agentrun (created by the input-event watcher, no parent).\n--   'scheduled' \u2014 fire-and-forget child spawned by `schedule_subagent` without\n--                 a future `when` (immediate dispatch under the same event).\n--   'started'   \u2014 synchronous child spawned via the `start_subagent` tool; the\n--                 parent is parked in state='waiting' until this row settles.\n-- The Scheduler reads this column to decide whether settling a row should\n-- wake a waiting parent.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS calltype text;\nALTER TABLE agentruns DROP CONSTRAINT IF EXISTS agentruns_calltype_format;\nALTER TABLE agentruns ADD CONSTRAINT agentruns_calltype_format\n  CHECK (calltype IS NULL OR calltype IN ('scheduled','started'));\n\n-- Partial index for the \"are all started children of $parent settled?\"\n-- check the Scheduler runs after every 'started' child settles. Indexes\n-- only the rows that actually participate in the question.\nCREATE INDEX IF NOT EXISTS agentruns_parent_calltype_state_idx\n  ON agentruns (parent_agentrun_id, state)\n  WHERE calltype = 'started';\n\n-- Forward-compat: relax the topic CHECK constraint to allow arbitrarily\n-- deep `a:b:c:\u2026` topics. CREATE TABLE IF NOT EXISTS above doesn't\n-- update existing constraints, so we drop+re-add unconditionally. The\n-- DROP IF EXISTS / ADD pair is idempotent.\nALTER TABLE events DROP CONSTRAINT IF EXISTS events_topic_format;\nALTER TABLE events ADD CONSTRAINT events_topic_format CHECK (topic ~ '^\\w+(:\\w+)*$');\nALTER TABLE agentruns DROP CONSTRAINT IF EXISTS agentruns_topic_format;\nALTER TABLE agentruns ADD CONSTRAINT agentruns_topic_format CHECK (topic ~ '^\\w+(:\\w+)*$');\n\nCREATE INDEX IF NOT EXISTS agentruns_state_priority_idx\n  ON agentruns (state, priority DESC, id ASC);\nCREATE INDEX IF NOT EXISTS agentruns_event_id_idx ON agentruns (event_id);\nCREATE INDEX IF NOT EXISTS agentruns_parent_idx ON agentruns (parent_agentrun_id);\n\nCREATE TABLE IF NOT EXISTS stepresults (\n  id              bigserial PRIMARY KEY,\n  agent_run_id    bigint NOT NULL REFERENCES agentruns(id) ON DELETE CASCADE,\n  event_id        bigint NOT NULL REFERENCES events(id) ON DELETE CASCADE,\n  step_number     int    NOT NULL,\n  finish_reason   text   NOT NULL,\n  result_text     text,\n  reasoning_text  text,\n  input_tokens    int,\n  output_tokens   int,\n  total_tokens    int,\n  tool_call_count int    NOT NULL DEFAULT 0,\n  tool_calls      jsonb  NOT NULL DEFAULT '[]'::jsonb,\n  tool_results    jsonb  NOT NULL DEFAULT '[]'::jsonb,\n  created_at      timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT stepresults_step_number_unique UNIQUE (agent_run_id, step_number)\n);\n\nCREATE INDEX IF NOT EXISTS stepresults_agent_run_id_idx ON stepresults (agent_run_id);\nCREATE INDEX IF NOT EXISTS stepresults_event_id_idx     ON stepresults (event_id);\n\n-- AI SDK per-step usage breakdown\n-- (LanguageModelUsage.inputTokenDetails / outputTokenDetails). Each\n-- column is NULL when the provider doesn't report that detail.\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS input_tokens_no_cache    int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS input_tokens_cache_read  int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS input_tokens_cache_write int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS output_tokens_text       int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS output_tokens_reasoning  int;\n-- Full step object snapshot, populated only when the operator opts\n-- in via inference.captureRawStepResultToDatabase: true. Used to\n-- inspect provider-specific fields (Anthropic cache control,\n-- OpenAI logprobs, ...) that don't fit dedicated columns.\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS raw_result jsonb;\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 chatmessages \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Persistent chat history across all channels. Each row links to the\n-- event whose lifecycle the message belongs to:\n--   * For role='user': the event the host plugin emitted with isChat=true.\n--   * For role='assistant': the event whose agentrun called send_chat.\n-- The channel is reachable via JOIN to events.preferred_chat_channel_id;\n-- there is intentionally no channel_id column here \u2014 channel routing is\n-- a host-side concern, the container never names a channel.\n--\n-- delivered_at is set when ANY listener returns true from its async\n-- handler. New subscribers replay all undelivered matching rows on\n-- registration so a message produced when nobody was listening is still\n-- delivered later.\nCREATE TABLE IF NOT EXISTS chatmessages (\n  id           bigserial PRIMARY KEY,\n  event_id     bigint NOT NULL REFERENCES events(id) ON DELETE CASCADE,\n  role         text NOT NULL CHECK (role IN ('user','assistant')),\n  text_content text NOT NULL,\n  created_at   timestamptz NOT NULL DEFAULT now(),\n  delivered_at timestamptz\n);\n\nCREATE INDEX IF NOT EXISTS chatmessages_event_idx\n  ON chatmessages (event_id);\nCREATE INDEX IF NOT EXISTS chatmessages_undelivered_idx\n  ON chatmessages (created_at) WHERE delivered_at IS NULL;\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 NOTIFY triggers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nCREATE OR REPLACE FUNCTION events_notify_new() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify('events_new', NEW.id::text);\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS events_new_trg ON events;\nCREATE TRIGGER events_new_trg\n  AFTER INSERT ON events\n  FOR EACH ROW EXECUTE FUNCTION events_notify_new();\n\nCREATE OR REPLACE FUNCTION events_notify_state() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify('events_state', NEW.id::text || ':' || NEW.state);\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS events_state_trg ON events;\nCREATE TRIGGER events_state_trg\n  AFTER UPDATE OF state ON events\n  FOR EACH ROW EXECUTE FUNCTION events_notify_state();\n\nCREATE OR REPLACE FUNCTION agentruns_notify_changed() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify(\n    'agentruns_changed',\n    NEW.event_id::text || ':' || NEW.id::text\n  );\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS agentruns_notify_changed_trg ON agentruns;\nCREATE TRIGGER agentruns_notify_changed_trg\n  AFTER INSERT OR UPDATE OF state ON agentruns\n  FOR EACH ROW EXECUTE FUNCTION agentruns_notify_changed();\n\nCREATE OR REPLACE FUNCTION stepresults_notify_new() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify(\n    'stepresults_new',\n    NEW.event_id::text || ':' || NEW.agent_run_id::text || ':' || NEW.id::text\n  );\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS stepresults_new_trg ON stepresults;\nCREATE TRIGGER stepresults_new_trg\n  AFTER INSERT ON stepresults\n  FOR EACH ROW EXECUTE FUNCTION stepresults_notify_new();\n\n-- chatmessages NOTIFY: payload is \"<channel_id>:<role>:<id>\". Channel\n-- comes from the parent event's preferred_chat_channel_id, JOINed at\n-- trigger time. Empty channel becomes empty prefix \u2014 listeners will\n-- filter it out unless they explicitly subscribe to channelId=\"\".\nCREATE OR REPLACE FUNCTION chatmessages_notify_new() RETURNS trigger AS $$\nDECLARE\n  channel text;\nBEGIN\n  SELECT preferred_chat_channel_id INTO channel FROM events WHERE id = NEW.event_id;\n  PERFORM pg_notify(\n    'chatmessages_new',\n    COALESCE(channel, '') || ':' || NEW.role || ':' || NEW.id::text\n  );\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS chatmessages_new_trg ON chatmessages;\nCREATE TRIGGER chatmessages_new_trg\n  AFTER INSERT ON chatmessages\n  FOR EACH ROW EXECUTE FUNCTION chatmessages_notify_new();\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 calendars + calendar_events \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Plugin-agnostic calendar data layer. `calendars` lists every\n-- subscription (own or shared) any provider plugin (ms365, future\n-- google/caldav) has surfaced; `calendar_events` stores every\n-- instance. Providers persist every occurrence of a recurring\n-- series independently (no master-expansion in core).\n--\n-- Identity:\n--   * `calendars.unique_key` is the provider's stable id. Uniqueness\n--     within `(plugin_id, unique_key)` lets multiple providers\n--     coexist.\n--   * `calendar_events.id` is provider-prefixed (e.g. `ms365:<graph-id>`)\n--     so collisions across providers are impossible by construction.\n--\n-- Refresh reconciliation uses a scan-generation tag: a refresh walk\n-- bumps `calendars.scan_generation`, upserts every event in window\n-- with the new value, then DELETEs events whose generation is older\n-- than the calendar's current value.\n\nCREATE TABLE IF NOT EXISTS calendars (\n  id              bigserial PRIMARY KEY,\n  plugin_id       text NOT NULL,\n  unique_key      text NOT NULL,\n  name            text NOT NULL,\n  type            text NOT NULL CHECK (type IN ('own','shared')),\n  owner_name      text,\n  scan_generation int  NOT NULL DEFAULT 0,\n  created_at      timestamptz NOT NULL DEFAULT now(),\n  UNIQUE (plugin_id, unique_key)\n);\n\n-- The provider's own \"default calendar\" flag (Graph's\n-- `isDefaultCalendar`). Used by `CalendarService.resolveDefaultCalendar`\n-- as the fallback when `core.defaultCalendar` is unset \u2014 we pick the\n-- first registered calendar (lowest id) flagged here. Added via\n-- ALTER so existing databases don't need a schema reset.\nALTER TABLE calendars ADD COLUMN IF NOT EXISTS is_default smallint NOT NULL DEFAULT 0;\n\nCREATE INDEX IF NOT EXISTS calendars_plugin_id_idx ON calendars (plugin_id);\n\nCREATE TABLE IF NOT EXISTS calendar_events (\n  id                  text PRIMARY KEY,\n  calendar_id         bigint NOT NULL REFERENCES calendars(id) ON DELETE CASCADE,\n  series_master_id    text,\n  type                text NOT NULL CHECK (type IN ('singleInstance','occurrence','exception','seriesMaster')),\n  subject             text,\n  start_dt            text NOT NULL,\n  end_dt              text NOT NULL,\n  event_tz            text,\n  is_all_day          smallint NOT NULL DEFAULT 0,\n  is_cancelled        smallint NOT NULL DEFAULT 0,\n  show_as             text,\n  sensitivity         text,\n  importance          text,\n  location            text,\n  is_online_meeting   smallint NOT NULL DEFAULT 0,\n  online_meeting_url  text,\n  organizer_name      text,\n  organizer_email     text,\n  response_status     text,\n  attendees_json      jsonb,\n  body                text,\n  attachments         jsonb,\n  scan_generation     int  NOT NULL,\n  created_at          timestamptz NOT NULL DEFAULT now(),\n  updated_at          timestamptz NOT NULL DEFAULT now()\n);\n\nCREATE INDEX IF NOT EXISTS calendar_events_window_idx\n  ON calendar_events (calendar_id, start_dt);\nCREATE INDEX IF NOT EXISTS calendar_events_series_idx\n  ON calendar_events (series_master_id);\nCREATE INDEX IF NOT EXISTS calendar_events_generation_idx\n  ON calendar_events (calendar_id, scan_generation);\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 scheduled_subagents \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- One-off agent-scheduled wake-ups. Each row is upserted by the\n-- container's `schedule_subagent` tool and read by the host-side\n-- `ScheduledSubagentScheduler`, which installs a Croner job per row\n-- and atomically deletes the row when it fires. `key` is the\n-- agent-supplied unique id used for replace-on-conflict semantics\n-- (\"rescheduling a key overwrites the previous timing\"). `fire_at`\n-- is the UTC firing time; the agent passes wall-clock-in-`core.timezone`\n-- and the container projects to UTC before insert. On daemon startup,\n-- past-due rows are deleted with a warn log; future rows are\n-- reinstalled. See [[feedback_agent_facing_format]] \u2014 UTC storage,\n-- local-tz projection at every agent-facing edge.\nCREATE TABLE IF NOT EXISTS scheduled_subagents (\n  key         text PRIMARY KEY,\n  fire_at     timestamptz NOT NULL,\n  topic       text NOT NULL,\n  handler     text NOT NULL,\n  prompt      text,\n  payload     jsonb NOT NULL DEFAULT '{}'::jsonb,\n  priority    smallint NOT NULL DEFAULT 50,\n  privileged  boolean NOT NULL DEFAULT false,\n  created_at  timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT scheduled_subagents_topic_format CHECK (topic ~ '^\\w+(:\\w+)*$')\n);\n\nCREATE INDEX IF NOT EXISTS scheduled_subagents_fire_at_idx\n  ON scheduled_subagents (fire_at);\n\nCREATE OR REPLACE FUNCTION scheduled_subagents_notify_changed() RETURNS trigger AS $$\nDECLARE\n  payload_key text;\n  op text;\nBEGIN\n  IF TG_OP = 'DELETE' THEN\n    payload_key := OLD.key;\n    op := 'd';\n  ELSE\n    payload_key := NEW.key;\n    op := 'u';\n  END IF;\n  PERFORM pg_notify('scheduled_subagents_changed', payload_key || ':' || op);\n  RETURN COALESCE(NEW, OLD);\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS scheduled_subagents_notify_changed_trg ON scheduled_subagents;\nCREATE TRIGGER scheduled_subagents_notify_changed_trg\n  AFTER INSERT OR UPDATE OR DELETE ON scheduled_subagents\n  FOR EACH ROW EXECUTE FUNCTION scheduled_subagents_notify_changed();\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 inference_events \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Append-only audit trail of every upstream model HTTP call attempt.\n-- Written by AgentRunner on each generate() outcome (success / retryable /\n-- fatal). Read by the host-side `inference_status` reflection tool to\n-- answer \"is this model misbehaving right now?\". One row per attempt;\n-- retries write multiple rows. NULL agent_run_id is kept for runs whose\n-- row was later deleted (parent event cascade) so the historical signal\n-- survives.\nCREATE TABLE IF NOT EXISTS inference_events (\n  id            bigserial PRIMARY KEY,\n  provider      text NOT NULL,\n  model         text NOT NULL,\n  agent_run_id  bigint REFERENCES agentruns(id) ON DELETE SET NULL,\n  outcome       text NOT NULL CHECK (outcome IN ('success','retryable','fatal')),\n  status_code   int,\n  error_excerpt text,\n  occurred_at   timestamptz NOT NULL DEFAULT now()\n);\n\nCREATE INDEX IF NOT EXISTS inference_events_model_time_idx\n  ON inference_events (model, occurred_at DESC);\nCREATE INDEX IF NOT EXISTS inference_events_occurred_at_idx\n  ON inference_events (occurred_at DESC);\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 tool_calls \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Append-only record of every tool invocation an agentrun attempted,\n-- tagged with the resolved handler markdown path and whether the call\n-- threw. Written by the tool wrapper in the container's ToolsFactory on\n-- each execute() outcome. Read by the heuristic tool-preloader\n-- (ToolCallBus.topToolsForHandler): the tools a handler successfully\n-- used across its recent non-error runs get loaded up front on the next\n-- run, so warm handlers rarely need a tool_list / tool_call round-trip.\n-- NULL agent_run_id survives a parent-event cascade so the historical\n-- usage signal outlives the run row.\nCREATE TABLE IF NOT EXISTS tool_calls (\n  id           bigserial PRIMARY KEY,\n  agent_run_id bigint REFERENCES agentruns(id) ON DELETE SET NULL,\n  handler_path text NOT NULL,\n  tool_name    text NOT NULL,\n  successful   boolean NOT NULL,\n  created_at   timestamptz NOT NULL DEFAULT now()\n);\n\nCREATE INDEX IF NOT EXISTS tool_calls_handler_run_idx\n  ON tool_calls (handler_path, agent_run_id DESC);\nCREATE INDEX IF NOT EXISTS tool_calls_created_at_idx\n  ON tool_calls (created_at DESC);\n";
 /**
  * SQL fragment that flips the parent event's terminal state when the
  * **root** agentrun settles. Run inside the same transaction as the

package/build/Schema.js

@@ -171,8 +171,8 @@ ALTER TABLE agentruns ADD COLUMN IF NOT EXISTS not_before timestamptz;
 -- NULL for any agentrun that never reached generate() (failed at
 -- handler-load time, etc.).
 ALTER TABLE agentruns ADD COLUMN IF NOT EXISTS model text;
--- Resolved system prompt (SOUL.md + CONTEXT.md + handler body +
--- tool list) used for this agentrun. Populated by AgentRunner
+-- Resolved prompt (rendered prompt template: system prompt, then
+-- user-message head) used for this agentrun. Populated by AgentRunner
 -- only when core.logSystemPrompt is true; otherwise NULL. Surfaced
 -- by the report layer's Agentrun Start section when the consumer
 -- opts into withDetails.

package/build/index.d.ts

@@ -22,9 +22,10 @@ export { renderMarkdownToHtml } from "./markdownHtml.js";
 export { escapeTableCell, markdownTable, writeMarkdown } from "./markdownOutput.js";
 export { renderMarkdown } from "./markdownTerminal.js";
 export { matchesAnyGlob, matchesGlob } from "./PathGlob.js";
-export type { AnyCommandDef, EmitHandle, EmitOptions, EventContextProvider, HostContext, McpClient, McpInfo, PluginHostManifest, PluginManifest, PluginTool, PluginToolCallContext, } from "./Plugin.js";
+export type { AnyCommandDef, EmitHandle, EmitOptions, HostContext, McpClient, McpInfo, PluginHostManifest, PluginManifest, PluginTool, PluginToolCallContext, PromptAppender, PromptPlaceholderRegistration, } from "./Plugin.js";
 export { DaemonStoppedError, definePlugin } from "./Plugin.js";
 export { type NotificationHandler, POSTGRES_DB, POSTGRES_HOST, POSTGRES_PORT, POSTGRES_USER, PostgresConnection, type PostgresConnectionConfig, } from "./PostgresConnection.js";
+export { CACHE_MARKER_PLACEHOLDER, CORE_PROMPT_PLACEHOLDERS, isCorePromptPlaceholder, PROMPT_PLACEHOLDER_NAME_PATTERN, PROMPT_TEMPLATE_FILE, PromptPlaceholderConflictError, type PromptPlaceholderDefinition, type PromptPlaceholderKind, } from "./PromptPlaceholders.js";
 export type { NewScheduledSubagent, ScheduledSubagentRow } from "./ScheduledSubagent.js";
 export { ScheduledSubagentBus, type ScheduledSubagentNotification, type ScheduledSubagentOp, type ScheduledSubagentUnsubscribe, } from "./ScheduledSubagentBus.js";
 export { AGENTRUNS_CHANNEL, CHATMESSAGES_NEW_CHANNEL, EVENT_TERMINAL_UPDATE_SQL, EVENTS_NEW_CHANNEL, EVENTS_STATE_CHANNEL, SCHEDULED_SUBAGENTS_CHANNEL, SCHEMA_SQL, STEPRESULTS_NEW_CHANNEL, TOPIC_PATTERN, } from "./Schema.js";

package/build/index.js

@@ -18,6 +18,7 @@ export { renderMarkdown } from "./markdownTerminal.js";
 export { matchesAnyGlob, matchesGlob } from "./PathGlob.js";
 export { DaemonStoppedError, definePlugin } from "./Plugin.js";
 export { POSTGRES_DB, POSTGRES_HOST, POSTGRES_PORT, POSTGRES_USER, PostgresConnection, } from "./PostgresConnection.js";
+export { CACHE_MARKER_PLACEHOLDER, CORE_PROMPT_PLACEHOLDERS, isCorePromptPlaceholder, PROMPT_PLACEHOLDER_NAME_PATTERN, PROMPT_TEMPLATE_FILE, PromptPlaceholderConflictError, } from "./PromptPlaceholders.js";
 export { ScheduledSubagentBus, } from "./ScheduledSubagentBus.js";
 export { AGENTRUNS_CHANNEL, CHATMESSAGES_NEW_CHANNEL, EVENT_TERMINAL_UPDATE_SQL, EVENTS_NEW_CHANNEL, EVENTS_STATE_CHANNEL, SCHEDULED_SUBAGENTS_CHANNEL, SCHEMA_SQL, STEPRESULTS_NEW_CHANNEL, TOPIC_PATTERN, } from "./Schema.js";
 export { StepResultBus } from "./StepResultBus.js";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@getfamiliar/shared",
   "type": "module",
-  "version": "0.1.10",
+  "version": "0.1.11",
   "description": "Familiar — shared types and bus-state client between host and container.",
   "publishConfig": {
     "access": "public"