@getfamiliar/shared 0.1.12 → 0.1.13

package/build/HandlerResolution.js

@@ -0,0 +1,105 @@
+import { TOPIC_PATTERN } from "./Schema.js";
+const TOPIC_REGEXP = new RegExp(TOPIC_PATTERN);
+/** File name of the folder form of a handler (`a/b/c/index.md`). */
+const INDEX_FILE = "index.md";
+/**
+ * Build the candidate handler files for a topic, one entry per topic
+ * level (most specific first). Each level lists its candidates in
+ * precedence order: the file form `a/b/c.md` before the folder form
+ * `a/b/c/index.md`. A single-segment topic `a` has only `a/index.md`
+ * — workspace-root files are never handlers.
+ *
+ * For topic `mail:new:ms365` without `isExactTopic`:
+ *
+ *   1. `mail/new/ms365.md`, `mail/new/ms365/index.md`
+ *   2. `mail/new.md`, `mail/new/index.md`
+ *   3. `mail/index.md`
+ *
+ * @param topic Colon-separated topic, e.g. `mail:new:ms365`.
+ * @param options See {@link HandlerResolutionOptions}.
+ * @returns The candidate levels, most specific first.
+ */
+export function handlerCandidateLevels(topic, options) {
+    const segments = topic.split(":");
+    const shallowestDepth = options.isExactTopic ? segments.length : 1;
+    const levels = [];
+    for (let depth = segments.length; depth >= shallowestDepth; depth--) {
+        const folder = segments.slice(0, depth).join("/");
+        const level = depth === 1 ? [] : [`${folder}.md`];
+        level.push(`${folder}/${INDEX_FILE}`);
+        levels.push(level);
+    }
+    return levels;
+}
+/**
+ * Resolve a topic to the single handler file that runs for it. The
+ * first level of {@link handlerCandidateLevels} holding any existing
+ * file wins; within a level the file form beats the folder form and
+ * the loser is reported as {@link HandlerResolution.shadowedPath}.
+ * Nothing is merged — exactly one file is the handler.
+ *
+ * @param topic Colon-separated topic, e.g. `mail:new:ms365`.
+ * @param options See {@link HandlerResolutionOptions}.
+ * @param isFile Existence probe for a workspace-relative path.
+ * @returns The resolution, or `null` when no candidate exists.
+ */
+export function resolveHandlerPath(topic, options, isFile) {
+    for (const level of handlerCandidateLevels(topic, options)) {
+        const existing = level.filter((candidate) => isFile(candidate));
+        if (existing.length > 0) {
+            return { relativePath: existing[0], shadowedPath: existing[1] ?? null };
+        }
+    }
+    return null;
+}
+/**
+ * Derive the topic a handler file answers to. The inverse of
+ * {@link handlerCandidateLevels}' own level:
+ *
+ * - `mail/important/digest.md` → `mail:important:digest`
+ * - `mail/new/index.md` → `mail:new`
+ * - `mail/index.md` → `mail`
+ *
+ * @param relativePath Workspace-relative posix path ending in `.md`.
+ * @returns The topic, or `null` for workspace-root files, non-`.md`
+ *   files and paths whose segments don't form a valid topic (e.g. a
+ *   file name containing a dot or a space).
+ */
+export function topicFromHandlerPath(relativePath) {
+    if (!relativePath.endsWith(".md")) {
+        return null;
+    }
+    const segments = relativePath.split("/");
+    if (segments.length < 2) {
+        return null;
+    }
+    const fileName = segments[segments.length - 1];
+    const folders = segments.slice(0, -1);
+    const topicSegments = fileName === INDEX_FILE ? folders : [...folders, fileName.slice(0, -".md".length)];
+    const topic = topicSegments.join(":");
+    return TOPIC_REGEXP.test(topic) ? topic : null;
+}
+/**
+ * The other form of the same handler: `a/b/c.md` ↔ `a/b/c/index.md`.
+ * Only one of the two may exist; seeding and the cron scheduler use
+ * this to detect the conflict.
+ *
+ * @param relativePath Workspace-relative posix path ending in `.md`.
+ * @returns The twin's path, or `null` when the twin would be a
+ *   workspace-root file (`a/index.md` ↔ `a.md`) or the path is a root
+ *   file / not markdown.
+ */
+export function twinHandlerPath(relativePath) {
+    if (!relativePath.endsWith(".md")) {
+        return null;
+    }
+    const segments = relativePath.split("/");
+    if (segments.length < 2) {
+        return null;
+    }
+    const fileName = segments[segments.length - 1];
+    if (fileName === INDEX_FILE) {
+        return segments.length < 3 ? null : `${segments.slice(0, -1).join("/")}.md`;
+    }
+    return `${relativePath.slice(0, -".md".length)}/${INDEX_FILE}`;
+}

package/build/Plugin.d.ts

@@ -282,6 +282,13 @@ export interface HostContext {
      * `dataDir` is for plugin-private host-only state.
      */
     readonly dataDir: string;
+    /**
+     * Absolute host path of the project's `workspace/` directory — the
+     * assistant's markdown workspace (handlers, PROMPT.md, SOUL.md,
+     * knowledge files), bind-mounted into the agent container as
+     * `/workspace`.
+     */
+    readonly workspaceDir: string;
     /**
      * Absolute host path of the project's `tmp/` directory — the
      * gitignored, safe-to-wipe scratch root (it also holds the daemon
@@ -579,6 +586,24 @@ export interface PluginToolCallContext {
      */
     readonly toolRunContext: ToolRunContext;
 }
+/**
+ * One kind of event a plugin emits onto the bus, as returned by
+ * {@link PluginHostManifest.getEmittedEvents}. Describes a topic, not an
+ * individual event — `familiar events list-topics` lists these.
+ */
+export interface EmittedEventDescriptor {
+    /** Event topic, matching `TOPIC_PATTERN` (e.g. `mail:new:ms365`). */
+    readonly topic: string;
+    /** One-line, human-readable description of when the event fires. */
+    readonly description: string;
+    /**
+     * `true` when the plugin emits this topic with `isExactTopic` (it
+     * addresses one handler file, e.g. memory's `skills:memory:save`),
+     * so `familiar events list-topics` resolves it without falling back up
+     * the topic chain. Omit for world events.
+     */
+    readonly isExactTopic?: boolean;
+}
 /**
  * Host-side surface a plugin may declare. All fields optional; a
  * plugin that's pure workspace template (no host code) leaves `host`
@@ -589,9 +614,18 @@ export interface PluginToolCallContext {
  */
 export interface PluginHostManifest {
     /**
-     * Synchronous, side-effect-light setup. Runs once per process,
-     * **before any plugin's `start`** and before any plugin one-shot
-     * CLI command's `run`. Use this for module-level state that other
+     * Config subtrees outside the plugin's own `<plugin.id>.*` group
+     * whose change restarts the plugin on a config reload (dotted paths,
+     * e.g. `["inference.apiKeys.openai"]`). The own group is always
+     * watched; list a foreign key here only when the plugin captures it
+     * in `prepare` / `start` instead of reading it per use.
+     */
+    restartOnConfigChange?: readonly string[];
+    /**
+     * Synchronous, side-effect-light setup. Runs once per process start
+     * and again on every plugin restart (config reload, after
+     * {@link stop}), **before the plugin's `start`** and before any plugin
+     * one-shot CLI command's `run`. Use this for module-level state that other
      * plugins consume — e.g. populating an API-key constant the
      * plugin's library exports — so the order in which siblings call
      * each other doesn't depend on `start` finishing first.
@@ -614,12 +648,22 @@ export interface PluginHostManifest {
      */
     start?(ctx: HostContext): Promise<void>;
     /**
-     * Drain hook called during daemon shutdown. Awaited in reverse
-     * registration order (LIFO of `start`), wrapped in a `safeStop`
-     * so a throw is logged but does not abort the rest of the drain.
-     *
-     * Use this for plugins that own dirty in-memory state which must
-     * be flushed to disk before the process exits — the memory
+     * Drain hook called during daemon shutdown and before a plugin
+     * restart (config reload changed the plugin's config group). On
+     * shutdown it is awaited in reverse registration order (LIFO of
+     * `start`), wrapped in a `safeStop` so a throw is logged but does
+     * not abort the rest of the drain.
+     *
+     * Must release everything `start` set up — timers, poll loops,
+     * sockets, chat / workspace subscriptions — and reset module state,
+     * because a restart runs `prepare` → `start` → `tools` again in the
+     * same process. Providers, prompt appenders / placeholders and tools
+     * the plugin registered are unregistered by the host. A plugin with
+     * a `start` but no `stop` cannot be restarted: a config reload that
+     * touches it reports "daemon restart required" instead.
+     *
+     * Use this also for plugins that own dirty in-memory state which
+     * must be flushed to disk before the process exits — the memory
      * plugin's Orama index is the motivating case.
      *
      * Hard rules: must resolve within the daemon-wide drain budget
@@ -634,8 +678,9 @@ export interface PluginHostManifest {
     stop?(ctx: HostContext): Promise<void>;
     /**
      * Declarative list of {@link PluginTool}s this plugin contributes
-     * to the agent. Collected once, **after** the plugin's `start`
-     * resolves, so closures over `start`-time state are safe.
+     * to the agent. Collected **after** the plugin's `start` resolves
+     * (at boot and after every restart), so closures over `start`-time
+     * state are safe.
      *
      * Hard rules: synchronous, side-effect-free — just build and
      * return the tool list. The host registers each tool under
@@ -681,6 +726,19 @@ export interface PluginHostManifest {
      * collision between two plugins, the first registered wins (logged).
      */
     getModelProviders?(ctx: HostContext): readonly ModelProviderDescriptor[];
+    /**
+     * Declare the event topics this plugin emits onto the bus under the
+     * current configuration — e.g. ms365 omits `mail:new:ms365` when its
+     * mail feature is disabled. Backs `familiar events list-topics`, so the
+     * operator can see which topics exist and which handler file each
+     * one resolves to.
+     *
+     * Hard rules: synchronous, side-effect-free — derive the list from
+     * constants and `ctx.config`, no network, no DB. Called after
+     * `prepare`, also from one-shot CLI runs without the daemon. Topics
+     * that don't match `TOPIC_PATTERN` are logged and dropped.
+     */
+    getEmittedEvents?(ctx: HostContext): readonly EmittedEventDescriptor[];
     /**
      * Default command for the plugin's CLI root. When set, invoking
      * the plugin id with no subcommand (e.g. `familiar cli-chat`) runs
@@ -723,7 +781,7 @@ export interface PluginManifest {
     readonly host?: PluginHostManifest;
     /**
      * Absolute path to a directory of files copied into
-     * `data/workspace/` on first install. Existing files are left
+     * the workspace (`<home>/workspace/`) on first install. Existing files are left
      * alone — diff/merge on plugin updates is a separate concern.
      * Plugins typically derive this with
      * `path.join(__dirname, "..", "workspace-template")` (or the ESM

package/build/PromptPlaceholders.js

@@ -30,7 +30,7 @@ export const CORE_PROMPT_PLACEHOLDERS = [
     },
     {
         name: "HANDLER_CONTENT",
-        description: "Body of the resolved handler file (merged with its parents). Placeholders inside it are expanded too.",
+        description: "Body of the resolved handler file. Placeholders inside it are expanded too.",
         kind: "static",
     },
     {
@@ -40,12 +40,7 @@ export const CORE_PROMPT_PLACEHOLDERS = [
     },
     {
         name: "HANDLER_PATH",
-        description: "Workspace-relative path of the handler file, e.g. `chat/telegram/index.md`.",
-        kind: "static",
-    },
-    {
-        name: "HANDLER_INHERITS",
-        description: "Parent handler files this handler is merged with, as `a ← b`, or `(none)`.",
+        description: "Workspace-relative path of the handler file, e.g. `chat/telegram.md`.",
         kind: "static",
     },
     {
@@ -70,7 +65,7 @@ export const CORE_PROMPT_PLACEHOLDERS = [
     },
     {
         name: "RUNTIME_LIST",
-        description: "Bullet list of run facts: current time, event topic, handler file, inheritance, outputChat, privileged.",
+        description: "Bullet list of run facts: current time, event topic, handler file, outputChat, privileged.",
         kind: "dynamic",
     },
     {

package/build/ScheduledSubagent.d.ts

@@ -12,7 +12,7 @@
  *    `scheduled_subagents_changed` NOTIFY and installs a Croner job for
  *    `fireAt` with `maxRuns: 1`.
  * 3. When the job fires, the host atomically claims-and-deletes the
- *    row, then emits a fresh event with the row's topic / handler /
+ *    row, then emits a fresh exact-topic event with the row's topic /
  *    prompt / payload / priority / privileged.
  *
  * `prompt` is optional at the table level so the agent can schedule
@@ -25,8 +25,8 @@ export interface ScheduledSubagentRow {
     readonly key: string;
     /** UTC ISO-8601 firing time (e.g. `2026-05-21T13:00:00Z`). */
     readonly fireAt: string;
+    /** Handler address; must resolve exactly (no fallback up the topic chain). */
     readonly topic: string;
-    readonly handler: string;
     readonly prompt: string | null;
     readonly payload: unknown;
     readonly priority: number;
@@ -41,7 +41,6 @@ export interface NewScheduledSubagent {
     readonly key: string;
     readonly fireAt: string;
     readonly topic: string;
-    readonly handler: string;
     readonly prompt?: string | null;
     readonly payload?: unknown;
     readonly priority?: number;

package/build/ScheduledSubagentBus.d.ts

@@ -43,7 +43,7 @@ export declare class ScheduledSubagentBus {
      * old row is overwritten in one statement so the host scheduler
      * sees exactly one NOTIFY and installs exactly one job.
      *
-     * @throws If `topic` does not match `\w+(:\w+)*` (CHECK constraint).
+     * @throws If `topic` does not match `TOPIC_PATTERN` (CHECK constraint).
      */
     upsert(row: NewScheduledSubagent): Promise<ScheduledSubagentRow>;
     /**

package/build/ScheduledSubagentBus.js

@@ -37,16 +37,15 @@ export class ScheduledSubagentBus {
      * old row is overwritten in one statement so the host scheduler
      * sees exactly one NOTIFY and installs exactly one job.
      *
-     * @throws If `topic` does not match `\w+(:\w+)*` (CHECK constraint).
+     * @throws If `topic` does not match `TOPIC_PATTERN` (CHECK constraint).
      */
     async upsert(row) {
         const result = await this.connection.getPool().query(`INSERT INTO scheduled_subagents
-                (key, fire_at, topic, handler, prompt, payload, priority, privileged)
-             VALUES ($1, $2, $3, $4, $5, $6::jsonb, $7, $8)
+                (key, fire_at, topic, prompt, payload, priority, privileged)
+             VALUES ($1, $2, $3, $4, $5::jsonb, $6, $7)
              ON CONFLICT (key) DO UPDATE SET
                 fire_at = EXCLUDED.fire_at,
                 topic = EXCLUDED.topic,
-                handler = EXCLUDED.handler,
                 prompt = EXCLUDED.prompt,
                 payload = EXCLUDED.payload,
                 priority = EXCLUDED.priority,
@@ -55,7 +54,6 @@ export class ScheduledSubagentBus {
             row.key,
             row.fireAt,
             row.topic,
-            row.handler,
             row.prompt ?? null,
             JSON.stringify(row.payload ?? {}),
             row.priority ?? 50,
@@ -177,7 +175,6 @@ function mapRow(raw) {
         key: raw.key,
         fireAt: raw.fire_at.toISOString(),
         topic: raw.topic,
-        handler: raw.handler,
         prompt: raw.prompt,
         payload: raw.payload,
         priority: raw.priority,

package/build/Schema.d.ts

@@ -50,17 +50,19 @@ export declare const CHATMESSAGES_NEW_CHANNEL = "chatmessages_new";
  */
 export declare const SCHEDULED_SUBAGENTS_CHANNEL = "scheduled_subagents_changed";
 /**
- * Topic regex used by the events check constraint and by the container
- * runtime when resolving handler files. One word, optionally followed
- * by any number of `:`-prefixed sub-topic words. Examples:
- * `mail`, `chat:cli`, `chat:telegram:group:reaction`.
+ * Topic regex used by the topic check constraints and by the container
+ * runtime when resolving handler files. One word (word characters and
+ * dashes), optionally followed by any number of `:`-prefixed sub-topic
+ * words. Examples: `mail`, `chat:cli`, `mail:extract-style`,
+ * `chat:telegram:group:reaction`.
  *
- * The container resolves a handler for topic `a:b:c` by walking the
- * chain `a/b/c/<basename>.md → a/b/<basename>.md → a/<basename>.md`
- * deepest-first and merging every existing layer (see HandlerFile.load).
+ * The topic is a handler's whole address: `a:b:c` names the single file
+ * `a/b/c.md` (or its folder form `a/b/c/index.md`). Events fall back up
+ * the chain (`a:b`, `a`) when that file is missing; everything else must
+ * match exactly (see `HandlerResolution.ts`).
  */
-export declare const TOPIC_PATTERN = "^\\w+(:\\w+)*$";
-export declare const SCHEMA_SQL = "\n-- Drop legacy single-table artifacts from before the events/agentruns\n-- split. Safe no-ops on fresh databases. The current schema reuses the\n-- name events_notify_new() for its own NOTIFY function, so we do NOT\n-- drop it here (CREATE OR REPLACE FUNCTION below handles the update);\n-- dropping would fail anyway once the current events_new_trg exists.\nDROP TRIGGER IF EXISTS events_notify_changed_trg ON events;\nDROP TRIGGER IF EXISTS events_notify_new_trg ON events;\nDROP FUNCTION IF EXISTS events_notify_changed();\nDROP INDEX IF EXISTS events_pending_priority_idx;\nDROP INDEX IF EXISTS events_state_priority_idx;\n\nCREATE TABLE IF NOT EXISTS events (\n  id              bigserial PRIMARY KEY,\n  topic           text NOT NULL,\n  priority        smallint NOT NULL DEFAULT 50,\n  state           text NOT NULL DEFAULT 'pending',\n  payload         jsonb NOT NULL DEFAULT '{}'::jsonb,\n  idempotency_key text UNIQUE,\n  privileged      boolean NOT NULL DEFAULT false,\n  created_at      timestamptz NOT NULL DEFAULT now(),\n  updated_at      timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT events_topic_format CHECK (topic ~ '^\\w+(:\\w+)*$')\n);\n\n-- Drop legacy columns from earlier schema generations. Single-instance\n-- project; column drops are fine.\nALTER TABLE events DROP COLUMN IF EXISTS supervisor_prompt;\nALTER TABLE events DROP COLUMN IF EXISTS causation_chain;\n\n-- Chat-aware event metadata. `is_chat` opts into automatic user-message\n-- persistence in EventBus.add; `preferred_chat_channel_id` names the\n-- channel an assistant reply should reach the user on. The container is\n-- channel-blind \u2014 both fields are read host-side (for routing) or via\n-- JOIN inside the chatmessages NOTIFY trigger.\nALTER TABLE events ADD COLUMN IF NOT EXISTS is_chat boolean NOT NULL DEFAULT false;\nALTER TABLE events ADD COLUMN IF NOT EXISTS preferred_chat_channel_id text;\n-- Required for non-chat events (validated at `EventBus.add` time and at\n-- the type level via `NewEvent`'s discriminated union); always null for\n-- chat events because the user's text in `chatmessages` already serves\n-- as the agent-visible \"what happened\" message. The EventWatcher copies\n-- this verbatim into the root `agentruns.prompt` so the agent sees the\n-- emitter's framing without the EventWatcher having to reach into the\n-- payload schema.\nALTER TABLE events ADD COLUMN IF NOT EXISTS prompt text;\n-- Optional override for the root agentrun's handler. When NULL the\n-- input-event watcher falls back to 'index' \u2014 same behaviour as\n-- before this column existed. Set by the emitter on NewEvent.\nALTER TABLE events ADD COLUMN IF NOT EXISTS start_handler text;\n-- Privileged events originate from a trusted user-input source (operator\n-- at the local terminal via cli-chat, operator on Telegram). The flag\n-- propagates verbatim to the root agentrun and to every child agentrun\n-- spawned via schedule_subagent / start_subagent, so future system tools can\n-- gate risky reads / writes (editing SOUL.md etc.) on whether the run\n-- descends from a trusted input. Default false: any plugin that doesn't\n-- explicitly opt in produces non-privileged events.\nALTER TABLE events ADD COLUMN IF NOT EXISTS privileged boolean NOT NULL DEFAULT false;\n-- When true and the event ends in 'failed', `HostContextImpl.emitAndAwait`\n-- writes a role='assistant' chatmessage with the failure text before\n-- rejecting handle.settled. Default false: only chat plugins (cli-chat,\n-- telegram) opt in. See [[outputChatOnFailure]] on NewEvent for the\n-- rationale.\nALTER TABLE events ADD COLUMN IF NOT EXISTS output_chat_on_failure boolean NOT NULL DEFAULT false;\n\nCREATE INDEX IF NOT EXISTS events_state_priority_idx\n  ON events (state, priority DESC, id ASC);\nCREATE INDEX IF NOT EXISTS events_topic_idx ON events (topic);\n\nCREATE TABLE IF NOT EXISTS agentruns (\n  id                 bigserial PRIMARY KEY,\n  event_id           bigint NOT NULL REFERENCES events(id) ON DELETE CASCADE,\n  parent_agentrun_id bigint REFERENCES agentruns(id) ON DELETE CASCADE,\n  topic              text NOT NULL,\n  handler            text NOT NULL,\n  priority           smallint NOT NULL DEFAULT 50,\n  state              text NOT NULL DEFAULT 'pending',\n  prompt             text,\n  payload            jsonb NOT NULL DEFAULT '{}'::jsonb,\n  result             jsonb,\n  result_text        text,\n  error              text,\n  privileged         boolean NOT NULL DEFAULT false,\n  created_at         timestamptz NOT NULL DEFAULT now(),\n  updated_at         timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT agentruns_topic_format CHECK (topic ~ '^\\w+(:\\w+)*$')\n);\n\n-- Forward-compat ALTER for databases created before result_text landed.\n-- Safe no-op on fresh databases where the column already exists.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS result_text text;\n-- Inherited from the originating event (root agentrun) or parent\n-- agentrun (children spawned via schedule_subagent / start_subagent). See\n-- the matching ALTER on the events table for the trust-model rationale.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS privileged boolean NOT NULL DEFAULT false;\n-- Number of retry attempts already made on this agentrun. Bumped each\n-- time AgentRunner postpones the row due to a retryable inference\n-- error (APICallError.isRetryable). Capped per-handler via maxRetries\n-- (frontmatter override) or globally via inference.maxRetries.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS retry_count int NOT NULL DEFAULT 0;\n-- Earliest moment the agentrun watcher is allowed to re-claim this\n-- row. NULL = claim immediately (default for fresh rows). A future\n-- timestamp = leave the row alone until then; the watcher's claim\n-- query gates on this so a parked row doesn't waste the slot while\n-- other agentruns (potentially using different models) can still run.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS not_before timestamptz;\n-- Resolved model id for this agentrun, of the form\n-- `<provider>/<modelId>` (e.g. `featherless/zai-org/GLM-5.1`).\n-- Populated by AgentRunner once it builds the model client; stays\n-- NULL for any agentrun that never reached generate() (failed at\n-- handler-load time, etc.).\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS model text;\n-- Resolved prompt (rendered prompt template: system prompt, then\n-- user-message head) used for this agentrun. Populated by AgentRunner\n-- only when core.logSystemPrompt is true; otherwise NULL. Surfaced\n-- by the report layer's Agentrun Start section when the consumer\n-- opts into withDetails.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS system_prompt text;\n-- Verbatim model-message array assembled for the first agent.generate()\n-- call (prior history + the run's leading user turn). Populated by\n-- AgentRunner only when inference.captureInitialMessageHistory is true;\n-- otherwise NULL. Surfaced by the report layer's -vv view so an operator\n-- can see exactly what was sent into the model loop.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS initial_messages jsonb;\n\n-- Distinguishes how a child agentrun was spawned.\n--   NULL        \u2014 root agentrun (created by the input-event watcher, no parent).\n--   'scheduled' \u2014 fire-and-forget child spawned by `schedule_subagent` without\n--                 a future `when` (immediate dispatch under the same event).\n--   'started'   \u2014 synchronous child spawned via the `start_subagent` tool; the\n--                 parent is parked in state='waiting' until this row settles.\n-- The Scheduler reads this column to decide whether settling a row should\n-- wake a waiting parent.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS calltype text;\nALTER TABLE agentruns DROP CONSTRAINT IF EXISTS agentruns_calltype_format;\nALTER TABLE agentruns ADD CONSTRAINT agentruns_calltype_format\n  CHECK (calltype IS NULL OR calltype IN ('scheduled','started'));\n\n-- Partial index for the \"are all started children of $parent settled?\"\n-- check the Scheduler runs after every 'started' child settles. Indexes\n-- only the rows that actually participate in the question.\nCREATE INDEX IF NOT EXISTS agentruns_parent_calltype_state_idx\n  ON agentruns (parent_agentrun_id, state)\n  WHERE calltype = 'started';\n\n-- Forward-compat: relax the topic CHECK constraint to allow arbitrarily\n-- deep `a:b:c:\u2026` topics. CREATE TABLE IF NOT EXISTS above doesn't\n-- update existing constraints, so we drop+re-add unconditionally. The\n-- DROP IF EXISTS / ADD pair is idempotent.\nALTER TABLE events DROP CONSTRAINT IF EXISTS events_topic_format;\nALTER TABLE events ADD CONSTRAINT events_topic_format CHECK (topic ~ '^\\w+(:\\w+)*$');\nALTER TABLE agentruns DROP CONSTRAINT IF EXISTS agentruns_topic_format;\nALTER TABLE agentruns ADD CONSTRAINT agentruns_topic_format CHECK (topic ~ '^\\w+(:\\w+)*$');\n\nCREATE INDEX IF NOT EXISTS agentruns_state_priority_idx\n  ON agentruns (state, priority DESC, id ASC);\nCREATE INDEX IF NOT EXISTS agentruns_event_id_idx ON agentruns (event_id);\nCREATE INDEX IF NOT EXISTS agentruns_parent_idx ON agentruns (parent_agentrun_id);\n\nCREATE TABLE IF NOT EXISTS stepresults (\n  id              bigserial PRIMARY KEY,\n  agent_run_id    bigint NOT NULL REFERENCES agentruns(id) ON DELETE CASCADE,\n  event_id        bigint NOT NULL REFERENCES events(id) ON DELETE CASCADE,\n  step_number     int    NOT NULL,\n  finish_reason   text   NOT NULL,\n  result_text     text,\n  reasoning_text  text,\n  input_tokens    int,\n  output_tokens   int,\n  total_tokens    int,\n  tool_call_count int    NOT NULL DEFAULT 0,\n  tool_calls      jsonb  NOT NULL DEFAULT '[]'::jsonb,\n  tool_results    jsonb  NOT NULL DEFAULT '[]'::jsonb,\n  created_at      timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT stepresults_step_number_unique UNIQUE (agent_run_id, step_number)\n);\n\nCREATE INDEX IF NOT EXISTS stepresults_agent_run_id_idx ON stepresults (agent_run_id);\nCREATE INDEX IF NOT EXISTS stepresults_event_id_idx     ON stepresults (event_id);\n\n-- AI SDK per-step usage breakdown\n-- (LanguageModelUsage.inputTokenDetails / outputTokenDetails). Each\n-- column is NULL when the provider doesn't report that detail.\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS input_tokens_no_cache    int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS input_tokens_cache_read  int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS input_tokens_cache_write int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS output_tokens_text       int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS output_tokens_reasoning  int;\n-- Full step object snapshot, populated only when the operator opts\n-- in via inference.captureRawStepResultToDatabase: true. Used to\n-- inspect provider-specific fields (Anthropic cache control,\n-- OpenAI logprobs, ...) that don't fit dedicated columns.\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS raw_result jsonb;\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 chatmessages \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Persistent chat history across all channels. Each row links to the\n-- event whose lifecycle the message belongs to:\n--   * For role='user': the event the host plugin emitted with isChat=true.\n--   * For role='assistant': the event whose agentrun called send_chat.\n-- The channel is reachable via JOIN to events.preferred_chat_channel_id;\n-- there is intentionally no channel_id column here \u2014 channel routing is\n-- a host-side concern, the container never names a channel.\n--\n-- delivered_at is set when ANY listener returns true from its async\n-- handler. New subscribers replay all undelivered matching rows on\n-- registration so a message produced when nobody was listening is still\n-- delivered later.\nCREATE TABLE IF NOT EXISTS chatmessages (\n  id           bigserial PRIMARY KEY,\n  event_id     bigint NOT NULL REFERENCES events(id) ON DELETE CASCADE,\n  role         text NOT NULL CHECK (role IN ('user','assistant')),\n  text_content text NOT NULL,\n  created_at   timestamptz NOT NULL DEFAULT now(),\n  delivered_at timestamptz\n);\n\nCREATE INDEX IF NOT EXISTS chatmessages_event_idx\n  ON chatmessages (event_id);\nCREATE INDEX IF NOT EXISTS chatmessages_undelivered_idx\n  ON chatmessages (created_at) WHERE delivered_at IS NULL;\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 NOTIFY triggers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nCREATE OR REPLACE FUNCTION events_notify_new() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify('events_new', NEW.id::text);\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS events_new_trg ON events;\nCREATE TRIGGER events_new_trg\n  AFTER INSERT ON events\n  FOR EACH ROW EXECUTE FUNCTION events_notify_new();\n\nCREATE OR REPLACE FUNCTION events_notify_state() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify('events_state', NEW.id::text || ':' || NEW.state);\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS events_state_trg ON events;\nCREATE TRIGGER events_state_trg\n  AFTER UPDATE OF state ON events\n  FOR EACH ROW EXECUTE FUNCTION events_notify_state();\n\nCREATE OR REPLACE FUNCTION agentruns_notify_changed() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify(\n    'agentruns_changed',\n    NEW.event_id::text || ':' || NEW.id::text\n  );\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS agentruns_notify_changed_trg ON agentruns;\nCREATE TRIGGER agentruns_notify_changed_trg\n  AFTER INSERT OR UPDATE OF state ON agentruns\n  FOR EACH ROW EXECUTE FUNCTION agentruns_notify_changed();\n\nCREATE OR REPLACE FUNCTION stepresults_notify_new() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify(\n    'stepresults_new',\n    NEW.event_id::text || ':' || NEW.agent_run_id::text || ':' || NEW.id::text\n  );\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS stepresults_new_trg ON stepresults;\nCREATE TRIGGER stepresults_new_trg\n  AFTER INSERT ON stepresults\n  FOR EACH ROW EXECUTE FUNCTION stepresults_notify_new();\n\n-- chatmessages NOTIFY: payload is \"<channel_id>:<role>:<id>\". Channel\n-- comes from the parent event's preferred_chat_channel_id, JOINed at\n-- trigger time. Empty channel becomes empty prefix \u2014 listeners will\n-- filter it out unless they explicitly subscribe to channelId=\"\".\nCREATE OR REPLACE FUNCTION chatmessages_notify_new() RETURNS trigger AS $$\nDECLARE\n  channel text;\nBEGIN\n  SELECT preferred_chat_channel_id INTO channel FROM events WHERE id = NEW.event_id;\n  PERFORM pg_notify(\n    'chatmessages_new',\n    COALESCE(channel, '') || ':' || NEW.role || ':' || NEW.id::text\n  );\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS chatmessages_new_trg ON chatmessages;\nCREATE TRIGGER chatmessages_new_trg\n  AFTER INSERT ON chatmessages\n  FOR EACH ROW EXECUTE FUNCTION chatmessages_notify_new();\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 calendars + calendar_events \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Plugin-agnostic calendar data layer. `calendars` lists every\n-- subscription (own or shared) any provider plugin (ms365, future\n-- google/caldav) has surfaced; `calendar_events` stores every\n-- instance. Providers persist every occurrence of a recurring\n-- series independently (no master-expansion in core).\n--\n-- Identity:\n--   * `calendars.unique_key` is the provider's stable id. Uniqueness\n--     within `(plugin_id, unique_key)` lets multiple providers\n--     coexist.\n--   * `calendar_events.id` is provider-prefixed (e.g. `ms365:<graph-id>`)\n--     so collisions across providers are impossible by construction.\n--\n-- Refresh reconciliation uses a scan-generation tag: a refresh walk\n-- bumps `calendars.scan_generation`, upserts every event in window\n-- with the new value, then DELETEs events whose generation is older\n-- than the calendar's current value.\n\nCREATE TABLE IF NOT EXISTS calendars (\n  id              bigserial PRIMARY KEY,\n  plugin_id       text NOT NULL,\n  unique_key      text NOT NULL,\n  name            text NOT NULL,\n  type            text NOT NULL CHECK (type IN ('own','shared')),\n  owner_name      text,\n  scan_generation int  NOT NULL DEFAULT 0,\n  created_at      timestamptz NOT NULL DEFAULT now(),\n  UNIQUE (plugin_id, unique_key)\n);\n\n-- The provider's own \"default calendar\" flag (Graph's\n-- `isDefaultCalendar`). Used by `CalendarService.resolveDefaultCalendar`\n-- as the fallback when `core.defaultCalendar` is unset \u2014 we pick the\n-- first registered calendar (lowest id) flagged here. Added via\n-- ALTER so existing databases don't need a schema reset.\nALTER TABLE calendars ADD COLUMN IF NOT EXISTS is_default smallint NOT NULL DEFAULT 0;\n\nCREATE INDEX IF NOT EXISTS calendars_plugin_id_idx ON calendars (plugin_id);\n\nCREATE TABLE IF NOT EXISTS calendar_events (\n  id                  text PRIMARY KEY,\n  calendar_id         bigint NOT NULL REFERENCES calendars(id) ON DELETE CASCADE,\n  series_master_id    text,\n  type                text NOT NULL CHECK (type IN ('singleInstance','occurrence','exception','seriesMaster')),\n  subject             text,\n  start_dt            text NOT NULL,\n  end_dt              text NOT NULL,\n  event_tz            text,\n  is_all_day          smallint NOT NULL DEFAULT 0,\n  is_cancelled        smallint NOT NULL DEFAULT 0,\n  show_as             text,\n  sensitivity         text,\n  importance          text,\n  location            text,\n  is_online_meeting   smallint NOT NULL DEFAULT 0,\n  online_meeting_url  text,\n  organizer_name      text,\n  organizer_email     text,\n  response_status     text,\n  attendees_json      jsonb,\n  body                text,\n  attachments         jsonb,\n  scan_generation     int  NOT NULL,\n  created_at          timestamptz NOT NULL DEFAULT now(),\n  updated_at          timestamptz NOT NULL DEFAULT now()\n);\n\nCREATE INDEX IF NOT EXISTS calendar_events_window_idx\n  ON calendar_events (calendar_id, start_dt);\nCREATE INDEX IF NOT EXISTS calendar_events_series_idx\n  ON calendar_events (series_master_id);\nCREATE INDEX IF NOT EXISTS calendar_events_generation_idx\n  ON calendar_events (calendar_id, scan_generation);\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 scheduled_subagents \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- One-off agent-scheduled wake-ups. Each row is upserted by the\n-- container's `schedule_subagent` tool and read by the host-side\n-- `ScheduledSubagentScheduler`, which installs a Croner job per row\n-- and atomically deletes the row when it fires. `key` is the\n-- agent-supplied unique id used for replace-on-conflict semantics\n-- (\"rescheduling a key overwrites the previous timing\"). `fire_at`\n-- is the UTC firing time; the agent passes wall-clock-in-`core.timezone`\n-- and the container projects to UTC before insert. On daemon startup,\n-- past-due rows are deleted with a warn log; future rows are\n-- reinstalled. See [[feedback_agent_facing_format]] \u2014 UTC storage,\n-- local-tz projection at every agent-facing edge.\nCREATE TABLE IF NOT EXISTS scheduled_subagents (\n  key         text PRIMARY KEY,\n  fire_at     timestamptz NOT NULL,\n  topic       text NOT NULL,\n  handler     text NOT NULL,\n  prompt      text,\n  payload     jsonb NOT NULL DEFAULT '{}'::jsonb,\n  priority    smallint NOT NULL DEFAULT 50,\n  privileged  boolean NOT NULL DEFAULT false,\n  created_at  timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT scheduled_subagents_topic_format CHECK (topic ~ '^\\w+(:\\w+)*$')\n);\n\nCREATE INDEX IF NOT EXISTS scheduled_subagents_fire_at_idx\n  ON scheduled_subagents (fire_at);\n\nCREATE OR REPLACE FUNCTION scheduled_subagents_notify_changed() RETURNS trigger AS $$\nDECLARE\n  payload_key text;\n  op text;\nBEGIN\n  IF TG_OP = 'DELETE' THEN\n    payload_key := OLD.key;\n    op := 'd';\n  ELSE\n    payload_key := NEW.key;\n    op := 'u';\n  END IF;\n  PERFORM pg_notify('scheduled_subagents_changed', payload_key || ':' || op);\n  RETURN COALESCE(NEW, OLD);\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS scheduled_subagents_notify_changed_trg ON scheduled_subagents;\nCREATE TRIGGER scheduled_subagents_notify_changed_trg\n  AFTER INSERT OR UPDATE OR DELETE ON scheduled_subagents\n  FOR EACH ROW EXECUTE FUNCTION scheduled_subagents_notify_changed();\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 inference_events \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Append-only audit trail of every upstream model HTTP call attempt.\n-- Written by AgentRunner on each generate() outcome (success / retryable /\n-- fatal). Read by the host-side `inference_status` reflection tool to\n-- answer \"is this model misbehaving right now?\". One row per attempt;\n-- retries write multiple rows. NULL agent_run_id is kept for runs whose\n-- row was later deleted (parent event cascade) so the historical signal\n-- survives.\nCREATE TABLE IF NOT EXISTS inference_events (\n  id            bigserial PRIMARY KEY,\n  provider      text NOT NULL,\n  model         text NOT NULL,\n  agent_run_id  bigint REFERENCES agentruns(id) ON DELETE SET NULL,\n  outcome       text NOT NULL CHECK (outcome IN ('success','retryable','fatal')),\n  status_code   int,\n  error_excerpt text,\n  occurred_at   timestamptz NOT NULL DEFAULT now()\n);\n\nCREATE INDEX IF NOT EXISTS inference_events_model_time_idx\n  ON inference_events (model, occurred_at DESC);\nCREATE INDEX IF NOT EXISTS inference_events_occurred_at_idx\n  ON inference_events (occurred_at DESC);\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 tool_calls \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Append-only record of every tool invocation an agentrun attempted,\n-- tagged with the resolved handler markdown path and whether the call\n-- threw. Written by the tool wrapper in the container's ToolsFactory on\n-- each execute() outcome. Read by the heuristic tool-preloader\n-- (ToolCallBus.topToolsForHandler): the tools a handler successfully\n-- used across its recent non-error runs get loaded up front on the next\n-- run, so warm handlers rarely need a tool_list / tool_call round-trip.\n-- NULL agent_run_id survives a parent-event cascade so the historical\n-- usage signal outlives the run row.\nCREATE TABLE IF NOT EXISTS tool_calls (\n  id           bigserial PRIMARY KEY,\n  agent_run_id bigint REFERENCES agentruns(id) ON DELETE SET NULL,\n  handler_path text NOT NULL,\n  tool_name    text NOT NULL,\n  successful   boolean NOT NULL,\n  created_at   timestamptz NOT NULL DEFAULT now()\n);\n\nCREATE INDEX IF NOT EXISTS tool_calls_handler_run_idx\n  ON tool_calls (handler_path, agent_run_id DESC);\nCREATE INDEX IF NOT EXISTS tool_calls_created_at_idx\n  ON tool_calls (created_at DESC);\n";
+export declare const TOPIC_PATTERN = "^[\\w-]+(:[\\w-]+)*$";
+export declare const SCHEMA_SQL = "\n-- Drop legacy single-table artifacts from before the events/agentruns\n-- split. Safe no-ops on fresh databases. The current schema reuses the\n-- name events_notify_new() for its own NOTIFY function, so we do NOT\n-- drop it here (CREATE OR REPLACE FUNCTION below handles the update);\n-- dropping would fail anyway once the current events_new_trg exists.\nDROP TRIGGER IF EXISTS events_notify_changed_trg ON events;\nDROP TRIGGER IF EXISTS events_notify_new_trg ON events;\nDROP FUNCTION IF EXISTS events_notify_changed();\nDROP INDEX IF EXISTS events_pending_priority_idx;\nDROP INDEX IF EXISTS events_state_priority_idx;\n\nCREATE TABLE IF NOT EXISTS events (\n  id              bigserial PRIMARY KEY,\n  topic           text NOT NULL,\n  priority        smallint NOT NULL DEFAULT 50,\n  state           text NOT NULL DEFAULT 'pending',\n  payload         jsonb NOT NULL DEFAULT '{}'::jsonb,\n  idempotency_key text UNIQUE,\n  privileged      boolean NOT NULL DEFAULT false,\n  created_at      timestamptz NOT NULL DEFAULT now(),\n  updated_at      timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT events_topic_format CHECK (topic ~ '^[\\w-]+(:[\\w-]+)*$')\n);\n\n-- Drop legacy columns from earlier schema generations. Single-instance\n-- project; column drops are fine.\nALTER TABLE events DROP COLUMN IF EXISTS supervisor_prompt;\nALTER TABLE events DROP COLUMN IF EXISTS causation_chain;\n\n-- Chat-aware event metadata. `is_chat` opts into automatic user-message\n-- persistence in EventBus.add; `preferred_chat_channel_id` names the\n-- channel an assistant reply should reach the user on. The container is\n-- channel-blind \u2014 both fields are read host-side (for routing) or via\n-- JOIN inside the chatmessages NOTIFY trigger.\nALTER TABLE events ADD COLUMN IF NOT EXISTS is_chat boolean NOT NULL DEFAULT false;\nALTER TABLE events ADD COLUMN IF NOT EXISTS preferred_chat_channel_id text;\n-- Required for non-chat events (validated at `EventBus.add` time and at\n-- the type level via `NewEvent`'s discriminated union); always null for\n-- chat events because the user's text in `chatmessages` already serves\n-- as the agent-visible \"what happened\" message. The EventWatcher copies\n-- this verbatim into the root `agentruns.prompt` so the agent sees the\n-- emitter's framing without the EventWatcher having to reach into the\n-- payload schema.\nALTER TABLE events ADD COLUMN IF NOT EXISTS prompt text;\n-- The topic is the handler's whole address now; the separate start\n-- handler basename is gone.\nALTER TABLE events DROP COLUMN IF EXISTS start_handler;\n-- When true the topic must name an existing handler file exactly; when\n-- false (world events) handler resolution falls back up the topic chain.\n-- Copied onto the root agentrun by the input-event watcher.\nALTER TABLE events ADD COLUMN IF NOT EXISTS is_exact_topic boolean NOT NULL DEFAULT false;\n-- Privileged events originate from a trusted user-input source (operator\n-- at the local terminal via cli-chat, operator on Telegram). The flag\n-- propagates verbatim to the root agentrun and to every child agentrun\n-- spawned via schedule_subagent / start_subagent, so future system tools can\n-- gate risky reads / writes (editing SOUL.md etc.) on whether the run\n-- descends from a trusted input. Default false: any plugin that doesn't\n-- explicitly opt in produces non-privileged events.\nALTER TABLE events ADD COLUMN IF NOT EXISTS privileged boolean NOT NULL DEFAULT false;\n-- When true and the event ends in 'failed', `HostContextImpl.emitAndAwait`\n-- writes a role='assistant' chatmessage with the failure text before\n-- rejecting handle.settled. Default false: only chat plugins (cli-chat,\n-- telegram) opt in. See [[outputChatOnFailure]] on NewEvent for the\n-- rationale.\nALTER TABLE events ADD COLUMN IF NOT EXISTS output_chat_on_failure boolean NOT NULL DEFAULT false;\n\nCREATE INDEX IF NOT EXISTS events_state_priority_idx\n  ON events (state, priority DESC, id ASC);\nCREATE INDEX IF NOT EXISTS events_topic_idx ON events (topic);\n\nCREATE TABLE IF NOT EXISTS agentruns (\n  id                 bigserial PRIMARY KEY,\n  event_id           bigint NOT NULL REFERENCES events(id) ON DELETE CASCADE,\n  parent_agentrun_id bigint REFERENCES agentruns(id) ON DELETE CASCADE,\n  topic              text NOT NULL,\n  priority           smallint NOT NULL DEFAULT 50,\n  state              text NOT NULL DEFAULT 'pending',\n  prompt             text,\n  payload            jsonb NOT NULL DEFAULT '{}'::jsonb,\n  result             jsonb,\n  result_text        text,\n  error              text,\n  privileged         boolean NOT NULL DEFAULT false,\n  created_at         timestamptz NOT NULL DEFAULT now(),\n  updated_at         timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT agentruns_topic_format CHECK (topic ~ '^[\\w-]+(:[\\w-]+)*$')\n);\n\n-- Forward-compat ALTER for databases created before result_text landed.\n-- Safe no-op on fresh databases where the column already exists.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS result_text text;\n-- The topic is the handler's whole address; the basename column is gone.\nALTER TABLE agentruns DROP COLUMN IF EXISTS handler;\n-- Whether handler resolution must match the topic exactly. Root\n-- agentruns copy the event's flag; spawned children are always exact.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS is_exact_topic boolean NOT NULL DEFAULT true;\n-- Inherited from the originating event (root agentrun) or parent\n-- agentrun (children spawned via schedule_subagent / start_subagent). See\n-- the matching ALTER on the events table for the trust-model rationale.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS privileged boolean NOT NULL DEFAULT false;\n-- Number of retry attempts already made on this agentrun. Bumped each\n-- time AgentRunner postpones the row due to a retryable inference\n-- error (APICallError.isRetryable). Capped per-handler via maxRetries\n-- (frontmatter override) or globally via inference.maxRetries.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS retry_count int NOT NULL DEFAULT 0;\n-- Earliest moment the agentrun watcher is allowed to re-claim this\n-- row. NULL = claim immediately (default for fresh rows). A future\n-- timestamp = leave the row alone until then; the watcher's claim\n-- query gates on this so a parked row doesn't waste the slot while\n-- other agentruns (potentially using different models) can still run.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS not_before timestamptz;\n-- Resolved model id for this agentrun, of the form\n-- `<provider>/<modelId>` (e.g. `featherless/zai-org/GLM-5.1`).\n-- Populated by AgentRunner once it builds the model client; stays\n-- NULL for any agentrun that never reached generate() (failed at\n-- handler-load time, etc.).\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS model text;\n-- Resolved prompt (rendered prompt template: system prompt, then\n-- user-message head) used for this agentrun. Populated by AgentRunner\n-- only when core.logSystemPrompt is true; otherwise NULL. Surfaced\n-- by the report layer's Agentrun Start section when the consumer\n-- opts into withDetails.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS system_prompt text;\n-- Verbatim model-message array assembled for the first agent.generate()\n-- call (prior history + the run's leading user turn). Populated by\n-- AgentRunner only when inference.captureInitialMessageHistory is true;\n-- otherwise NULL. Surfaced by the report layer's -vv view so an operator\n-- can see exactly what was sent into the model loop.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS initial_messages jsonb;\n\n-- Distinguishes how a child agentrun was spawned.\n--   NULL        \u2014 root agentrun (created by the input-event watcher, no parent).\n--   'scheduled' \u2014 fire-and-forget child spawned by `schedule_subagent` without\n--                 a future `when` (immediate dispatch under the same event).\n--   'started'   \u2014 synchronous child spawned via the `start_subagent` tool; the\n--                 parent is parked in state='waiting' until this row settles.\n-- The Scheduler reads this column to decide whether settling a row should\n-- wake a waiting parent.\nALTER TABLE agentruns ADD COLUMN IF NOT EXISTS calltype text;\nALTER TABLE agentruns DROP CONSTRAINT IF EXISTS agentruns_calltype_format;\nALTER TABLE agentruns ADD CONSTRAINT agentruns_calltype_format\n  CHECK (calltype IS NULL OR calltype IN ('scheduled','started'));\n\n-- Partial index for the \"are all started children of $parent settled?\"\n-- check the Scheduler runs after every 'started' child settles. Indexes\n-- only the rows that actually participate in the question.\nCREATE INDEX IF NOT EXISTS agentruns_parent_calltype_state_idx\n  ON agentruns (parent_agentrun_id, state)\n  WHERE calltype = 'started';\n\n-- Forward-compat: relax the topic CHECK constraint to allow arbitrarily\n-- deep `a:b:c:\u2026` topics. CREATE TABLE IF NOT EXISTS above doesn't\n-- update existing constraints, so we drop+re-add unconditionally. The\n-- DROP IF EXISTS / ADD pair is idempotent.\nALTER TABLE events DROP CONSTRAINT IF EXISTS events_topic_format;\nALTER TABLE events ADD CONSTRAINT events_topic_format CHECK (topic ~ '^[\\w-]+(:[\\w-]+)*$');\nALTER TABLE agentruns DROP CONSTRAINT IF EXISTS agentruns_topic_format;\nALTER TABLE agentruns ADD CONSTRAINT agentruns_topic_format CHECK (topic ~ '^[\\w-]+(:[\\w-]+)*$');\n\nCREATE INDEX IF NOT EXISTS agentruns_state_priority_idx\n  ON agentruns (state, priority DESC, id ASC);\nCREATE INDEX IF NOT EXISTS agentruns_event_id_idx ON agentruns (event_id);\nCREATE INDEX IF NOT EXISTS agentruns_parent_idx ON agentruns (parent_agentrun_id);\n\nCREATE TABLE IF NOT EXISTS stepresults (\n  id              bigserial PRIMARY KEY,\n  agent_run_id    bigint NOT NULL REFERENCES agentruns(id) ON DELETE CASCADE,\n  event_id        bigint NOT NULL REFERENCES events(id) ON DELETE CASCADE,\n  step_number     int    NOT NULL,\n  finish_reason   text   NOT NULL,\n  result_text     text,\n  reasoning_text  text,\n  input_tokens    int,\n  output_tokens   int,\n  total_tokens    int,\n  tool_call_count int    NOT NULL DEFAULT 0,\n  tool_calls      jsonb  NOT NULL DEFAULT '[]'::jsonb,\n  tool_results    jsonb  NOT NULL DEFAULT '[]'::jsonb,\n  created_at      timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT stepresults_step_number_unique UNIQUE (agent_run_id, step_number)\n);\n\nCREATE INDEX IF NOT EXISTS stepresults_agent_run_id_idx ON stepresults (agent_run_id);\nCREATE INDEX IF NOT EXISTS stepresults_event_id_idx     ON stepresults (event_id);\n\n-- AI SDK per-step usage breakdown\n-- (LanguageModelUsage.inputTokenDetails / outputTokenDetails). Each\n-- column is NULL when the provider doesn't report that detail.\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS input_tokens_no_cache    int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS input_tokens_cache_read  int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS input_tokens_cache_write int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS output_tokens_text       int;\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS output_tokens_reasoning  int;\n-- Full step object snapshot, populated only when the operator opts\n-- in via inference.captureRawStepResultToDatabase: true. Used to\n-- inspect provider-specific fields (Anthropic cache control,\n-- OpenAI logprobs, ...) that don't fit dedicated columns.\nALTER TABLE stepresults ADD COLUMN IF NOT EXISTS raw_result jsonb;\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 chatmessages \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Persistent chat history across all channels. Each row links to the\n-- event whose lifecycle the message belongs to:\n--   * For role='user': the event the host plugin emitted with isChat=true.\n--   * For role='assistant': the event whose agentrun called send_chat.\n-- The channel is reachable via JOIN to events.preferred_chat_channel_id;\n-- there is intentionally no channel_id column here \u2014 channel routing is\n-- a host-side concern, the container never names a channel.\n--\n-- delivered_at is set when ANY listener returns true from its async\n-- handler. New subscribers replay all undelivered matching rows on\n-- registration so a message produced when nobody was listening is still\n-- delivered later.\nCREATE TABLE IF NOT EXISTS chatmessages (\n  id           bigserial PRIMARY KEY,\n  event_id     bigint NOT NULL REFERENCES events(id) ON DELETE CASCADE,\n  role         text NOT NULL CHECK (role IN ('user','assistant')),\n  text_content text NOT NULL,\n  created_at   timestamptz NOT NULL DEFAULT now(),\n  delivered_at timestamptz\n);\n\nCREATE INDEX IF NOT EXISTS chatmessages_event_idx\n  ON chatmessages (event_id);\nCREATE INDEX IF NOT EXISTS chatmessages_undelivered_idx\n  ON chatmessages (created_at) WHERE delivered_at IS NULL;\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 NOTIFY triggers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nCREATE OR REPLACE FUNCTION events_notify_new() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify('events_new', NEW.id::text);\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS events_new_trg ON events;\nCREATE TRIGGER events_new_trg\n  AFTER INSERT ON events\n  FOR EACH ROW EXECUTE FUNCTION events_notify_new();\n\nCREATE OR REPLACE FUNCTION events_notify_state() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify('events_state', NEW.id::text || ':' || NEW.state);\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS events_state_trg ON events;\nCREATE TRIGGER events_state_trg\n  AFTER UPDATE OF state ON events\n  FOR EACH ROW EXECUTE FUNCTION events_notify_state();\n\nCREATE OR REPLACE FUNCTION agentruns_notify_changed() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify(\n    'agentruns_changed',\n    NEW.event_id::text || ':' || NEW.id::text\n  );\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS agentruns_notify_changed_trg ON agentruns;\nCREATE TRIGGER agentruns_notify_changed_trg\n  AFTER INSERT OR UPDATE OF state ON agentruns\n  FOR EACH ROW EXECUTE FUNCTION agentruns_notify_changed();\n\nCREATE OR REPLACE FUNCTION stepresults_notify_new() RETURNS trigger AS $$\nBEGIN\n  PERFORM pg_notify(\n    'stepresults_new',\n    NEW.event_id::text || ':' || NEW.agent_run_id::text || ':' || NEW.id::text\n  );\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS stepresults_new_trg ON stepresults;\nCREATE TRIGGER stepresults_new_trg\n  AFTER INSERT ON stepresults\n  FOR EACH ROW EXECUTE FUNCTION stepresults_notify_new();\n\n-- chatmessages NOTIFY: payload is \"<channel_id>:<role>:<id>\". Channel\n-- comes from the parent event's preferred_chat_channel_id, JOINed at\n-- trigger time. Empty channel becomes empty prefix \u2014 listeners will\n-- filter it out unless they explicitly subscribe to channelId=\"\".\nCREATE OR REPLACE FUNCTION chatmessages_notify_new() RETURNS trigger AS $$\nDECLARE\n  channel text;\nBEGIN\n  SELECT preferred_chat_channel_id INTO channel FROM events WHERE id = NEW.event_id;\n  PERFORM pg_notify(\n    'chatmessages_new',\n    COALESCE(channel, '') || ':' || NEW.role || ':' || NEW.id::text\n  );\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS chatmessages_new_trg ON chatmessages;\nCREATE TRIGGER chatmessages_new_trg\n  AFTER INSERT ON chatmessages\n  FOR EACH ROW EXECUTE FUNCTION chatmessages_notify_new();\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 calendars + calendar_events \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Plugin-agnostic calendar data layer. `calendars` lists every\n-- subscription (own or shared) any provider plugin (ms365, future\n-- google/caldav) has surfaced; `calendar_events` stores every\n-- instance. Providers persist every occurrence of a recurring\n-- series independently (no master-expansion in core).\n--\n-- Identity:\n--   * `calendars.unique_key` is the provider's stable id. Uniqueness\n--     within `(plugin_id, unique_key)` lets multiple providers\n--     coexist.\n--   * `calendar_events.id` is provider-prefixed (e.g. `ms365:<graph-id>`)\n--     so collisions across providers are impossible by construction.\n--\n-- Refresh reconciliation uses a scan-generation tag: a refresh walk\n-- bumps `calendars.scan_generation`, upserts every event in window\n-- with the new value, then DELETEs events whose generation is older\n-- than the calendar's current value.\n\nCREATE TABLE IF NOT EXISTS calendars (\n  id              bigserial PRIMARY KEY,\n  plugin_id       text NOT NULL,\n  unique_key      text NOT NULL,\n  name            text NOT NULL,\n  type            text NOT NULL CHECK (type IN ('own','shared')),\n  owner_name      text,\n  scan_generation int  NOT NULL DEFAULT 0,\n  created_at      timestamptz NOT NULL DEFAULT now(),\n  UNIQUE (plugin_id, unique_key)\n);\n\n-- The provider's own \"default calendar\" flag (Graph's\n-- `isDefaultCalendar`). Used by `CalendarService.resolveDefaultCalendar`\n-- as the fallback when `core.defaultCalendar` is unset \u2014 we pick the\n-- first registered calendar (lowest id) flagged here. Added via\n-- ALTER so existing databases don't need a schema reset.\nALTER TABLE calendars ADD COLUMN IF NOT EXISTS is_default smallint NOT NULL DEFAULT 0;\n\nCREATE INDEX IF NOT EXISTS calendars_plugin_id_idx ON calendars (plugin_id);\n\nCREATE TABLE IF NOT EXISTS calendar_events (\n  id                  text PRIMARY KEY,\n  calendar_id         bigint NOT NULL REFERENCES calendars(id) ON DELETE CASCADE,\n  series_master_id    text,\n  type                text NOT NULL CHECK (type IN ('singleInstance','occurrence','exception','seriesMaster')),\n  subject             text,\n  start_dt            text NOT NULL,\n  end_dt              text NOT NULL,\n  event_tz            text,\n  is_all_day          smallint NOT NULL DEFAULT 0,\n  is_cancelled        smallint NOT NULL DEFAULT 0,\n  show_as             text,\n  sensitivity         text,\n  importance          text,\n  location            text,\n  is_online_meeting   smallint NOT NULL DEFAULT 0,\n  online_meeting_url  text,\n  organizer_name      text,\n  organizer_email     text,\n  response_status     text,\n  attendees_json      jsonb,\n  body                text,\n  attachments         jsonb,\n  scan_generation     int  NOT NULL,\n  created_at          timestamptz NOT NULL DEFAULT now(),\n  updated_at          timestamptz NOT NULL DEFAULT now()\n);\n\nCREATE INDEX IF NOT EXISTS calendar_events_window_idx\n  ON calendar_events (calendar_id, start_dt);\nCREATE INDEX IF NOT EXISTS calendar_events_series_idx\n  ON calendar_events (series_master_id);\nCREATE INDEX IF NOT EXISTS calendar_events_generation_idx\n  ON calendar_events (calendar_id, scan_generation);\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 scheduled_subagents \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- One-off agent-scheduled wake-ups. Each row is upserted by the\n-- container's `schedule_subagent` tool and read by the host-side\n-- `ScheduledSubagentScheduler`, which installs a Croner job per row\n-- and atomically deletes the row when it fires. `key` is the\n-- agent-supplied unique id used for replace-on-conflict semantics\n-- (\"rescheduling a key overwrites the previous timing\"). `fire_at`\n-- is the UTC firing time; the agent passes wall-clock-in-`core.timezone`\n-- and the container projects to UTC before insert. On daemon startup,\n-- past-due rows are deleted with a warn log; future rows are\n-- reinstalled. See [[feedback_agent_facing_format]] \u2014 UTC storage,\n-- local-tz projection at every agent-facing edge.\nCREATE TABLE IF NOT EXISTS scheduled_subagents (\n  key         text PRIMARY KEY,\n  fire_at     timestamptz NOT NULL,\n  topic       text NOT NULL,\n  prompt      text,\n  payload     jsonb NOT NULL DEFAULT '{}'::jsonb,\n  priority    smallint NOT NULL DEFAULT 50,\n  privileged  boolean NOT NULL DEFAULT false,\n  created_at  timestamptz NOT NULL DEFAULT now(),\n  CONSTRAINT scheduled_subagents_topic_format CHECK (topic ~ '^[\\w-]+(:[\\w-]+)*$')\n);\n\n-- The topic is the handler's whole address; the basename column is gone.\nALTER TABLE scheduled_subagents DROP COLUMN IF EXISTS handler;\n-- Re-add the topic CHECK so a widened TOPIC_PATTERN reaches existing tables.\nALTER TABLE scheduled_subagents DROP CONSTRAINT IF EXISTS scheduled_subagents_topic_format;\nALTER TABLE scheduled_subagents ADD CONSTRAINT scheduled_subagents_topic_format CHECK (topic ~ '^[\\w-]+(:[\\w-]+)*$');\n\nCREATE INDEX IF NOT EXISTS scheduled_subagents_fire_at_idx\n  ON scheduled_subagents (fire_at);\n\nCREATE OR REPLACE FUNCTION scheduled_subagents_notify_changed() RETURNS trigger AS $$\nDECLARE\n  payload_key text;\n  op text;\nBEGIN\n  IF TG_OP = 'DELETE' THEN\n    payload_key := OLD.key;\n    op := 'd';\n  ELSE\n    payload_key := NEW.key;\n    op := 'u';\n  END IF;\n  PERFORM pg_notify('scheduled_subagents_changed', payload_key || ':' || op);\n  RETURN COALESCE(NEW, OLD);\nEND;\n$$ LANGUAGE plpgsql;\n\nDROP TRIGGER IF EXISTS scheduled_subagents_notify_changed_trg ON scheduled_subagents;\nCREATE TRIGGER scheduled_subagents_notify_changed_trg\n  AFTER INSERT OR UPDATE OR DELETE ON scheduled_subagents\n  FOR EACH ROW EXECUTE FUNCTION scheduled_subagents_notify_changed();\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 inference_events \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Append-only audit trail of every upstream model HTTP call attempt.\n-- Written by AgentRunner on each generate() outcome (success / retryable /\n-- fatal). Read by the host-side `inference_status` reflection tool to\n-- answer \"is this model misbehaving right now?\". One row per attempt;\n-- retries write multiple rows. NULL agent_run_id is kept for runs whose\n-- row was later deleted (parent event cascade) so the historical signal\n-- survives.\nCREATE TABLE IF NOT EXISTS inference_events (\n  id            bigserial PRIMARY KEY,\n  provider      text NOT NULL,\n  model         text NOT NULL,\n  agent_run_id  bigint REFERENCES agentruns(id) ON DELETE SET NULL,\n  outcome       text NOT NULL CHECK (outcome IN ('success','retryable','fatal')),\n  status_code   int,\n  error_excerpt text,\n  occurred_at   timestamptz NOT NULL DEFAULT now()\n);\n\nCREATE INDEX IF NOT EXISTS inference_events_model_time_idx\n  ON inference_events (model, occurred_at DESC);\nCREATE INDEX IF NOT EXISTS inference_events_occurred_at_idx\n  ON inference_events (occurred_at DESC);\n\n-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 tool_calls \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n--\n-- Append-only record of every tool invocation an agentrun attempted,\n-- tagged with the resolved handler markdown path and whether the call\n-- threw. Written by the tool wrapper in the container's ToolsFactory on\n-- each execute() outcome. Read by the heuristic tool-preloader\n-- (ToolCallBus.topToolsForHandler): the tools a handler successfully\n-- used across its recent non-error runs get loaded up front on the next\n-- run, so warm handlers rarely need a tool_list / tool_call round-trip.\n-- NULL agent_run_id survives a parent-event cascade so the historical\n-- usage signal outlives the run row.\nCREATE TABLE IF NOT EXISTS tool_calls (\n  id           bigserial PRIMARY KEY,\n  agent_run_id bigint REFERENCES agentruns(id) ON DELETE SET NULL,\n  handler_path text NOT NULL,\n  tool_name    text NOT NULL,\n  successful   boolean NOT NULL,\n  created_at   timestamptz NOT NULL DEFAULT now()\n);\n\nCREATE INDEX IF NOT EXISTS tool_calls_handler_run_idx\n  ON tool_calls (handler_path, agent_run_id DESC);\nCREATE INDEX IF NOT EXISTS tool_calls_created_at_idx\n  ON tool_calls (created_at DESC);\n";
 /**
  * SQL fragment that flips the parent event's terminal state when the
  * **root** agentrun settles. Run inside the same transaction as the

package/build/Schema.js

@@ -50,16 +50,18 @@ export const CHATMESSAGES_NEW_CHANNEL = "chatmessages_new";
  */
 export const SCHEDULED_SUBAGENTS_CHANNEL = "scheduled_subagents_changed";
 /**
- * Topic regex used by the events check constraint and by the container
- * runtime when resolving handler files. One word, optionally followed
- * by any number of `:`-prefixed sub-topic words. Examples:
- * `mail`, `chat:cli`, `chat:telegram:group:reaction`.
+ * Topic regex used by the topic check constraints and by the container
+ * runtime when resolving handler files. One word (word characters and
+ * dashes), optionally followed by any number of `:`-prefixed sub-topic
+ * words. Examples: `mail`, `chat:cli`, `mail:extract-style`,
+ * `chat:telegram:group:reaction`.
  *
- * The container resolves a handler for topic `a:b:c` by walking the
- * chain `a/b/c/<basename>.md → a/b/<basename>.md → a/<basename>.md`
- * deepest-first and merging every existing layer (see HandlerFile.load).
+ * The topic is a handler's whole address: `a:b:c` names the single file
+ * `a/b/c.md` (or its folder form `a/b/c/index.md`). Events fall back up
+ * the chain (`a:b`, `a`) when that file is missing; everything else must
+ * match exactly (see `HandlerResolution.ts`).
  */
-export const TOPIC_PATTERN = "^\\w+(:\\w+)*$";
+export const TOPIC_PATTERN = "^[\\w-]+(:[\\w-]+)*$";
 export const SCHEMA_SQL = `
 -- Drop legacy single-table artifacts from before the events/agentruns
 -- split. Safe no-ops on fresh databases. The current schema reuses the
@@ -105,10 +107,13 @@ ALTER TABLE events ADD COLUMN IF NOT EXISTS preferred_chat_channel_id text;
 -- emitter's framing without the EventWatcher having to reach into the
 -- payload schema.
 ALTER TABLE events ADD COLUMN IF NOT EXISTS prompt text;
--- Optional override for the root agentrun's handler. When NULL the
--- input-event watcher falls back to 'index' — same behaviour as
--- before this column existed. Set by the emitter on NewEvent.
-ALTER TABLE events ADD COLUMN IF NOT EXISTS start_handler text;
+-- The topic is the handler's whole address now; the separate start
+-- handler basename is gone.
+ALTER TABLE events DROP COLUMN IF EXISTS start_handler;
+-- When true the topic must name an existing handler file exactly; when
+-- false (world events) handler resolution falls back up the topic chain.
+-- Copied onto the root agentrun by the input-event watcher.
+ALTER TABLE events ADD COLUMN IF NOT EXISTS is_exact_topic boolean NOT NULL DEFAULT false;
 -- Privileged events originate from a trusted user-input source (operator
 -- at the local terminal via cli-chat, operator on Telegram). The flag
 -- propagates verbatim to the root agentrun and to every child agentrun
@@ -133,7 +138,6 @@ CREATE TABLE IF NOT EXISTS agentruns (
   event_id           bigint NOT NULL REFERENCES events(id) ON DELETE CASCADE,
   parent_agentrun_id bigint REFERENCES agentruns(id) ON DELETE CASCADE,
   topic              text NOT NULL,
-  handler            text NOT NULL,
   priority           smallint NOT NULL DEFAULT 50,
   state              text NOT NULL DEFAULT 'pending',
   prompt             text,
@@ -150,6 +154,11 @@ CREATE TABLE IF NOT EXISTS agentruns (
 -- Forward-compat ALTER for databases created before result_text landed.
 -- Safe no-op on fresh databases where the column already exists.
 ALTER TABLE agentruns ADD COLUMN IF NOT EXISTS result_text text;
+-- The topic is the handler's whole address; the basename column is gone.
+ALTER TABLE agentruns DROP COLUMN IF EXISTS handler;
+-- Whether handler resolution must match the topic exactly. Root
+-- agentruns copy the event's flag; spawned children are always exact.
+ALTER TABLE agentruns ADD COLUMN IF NOT EXISTS is_exact_topic boolean NOT NULL DEFAULT true;
 -- Inherited from the originating event (root agentrun) or parent
 -- agentrun (children spawned via schedule_subagent / start_subagent). See
 -- the matching ALTER on the events table for the trust-model rationale.
@@ -452,7 +461,6 @@ CREATE TABLE IF NOT EXISTS scheduled_subagents (
   key         text PRIMARY KEY,
   fire_at     timestamptz NOT NULL,
   topic       text NOT NULL,
-  handler     text NOT NULL,
   prompt      text,
   payload     jsonb NOT NULL DEFAULT '{}'::jsonb,
   priority    smallint NOT NULL DEFAULT 50,
@@ -461,6 +469,12 @@ CREATE TABLE IF NOT EXISTS scheduled_subagents (
   CONSTRAINT scheduled_subagents_topic_format CHECK (topic ~ '${TOPIC_PATTERN}')
 );
 
+-- The topic is the handler's whole address; the basename column is gone.
+ALTER TABLE scheduled_subagents DROP COLUMN IF EXISTS handler;
+-- Re-add the topic CHECK so a widened TOPIC_PATTERN reaches existing tables.
+ALTER TABLE scheduled_subagents DROP CONSTRAINT IF EXISTS scheduled_subagents_topic_format;
+ALTER TABLE scheduled_subagents ADD CONSTRAINT scheduled_subagents_topic_format CHECK (topic ~ '${TOPIC_PATTERN}');
+
 CREATE INDEX IF NOT EXISTS scheduled_subagents_fire_at_idx
   ON scheduled_subagents (fire_at);
 

package/build/index.d.ts

@@ -4,14 +4,15 @@ export { BASTION_TOKEN_HEADER } from "./BastionAuth.js";
 export { buildCalendarEventId, type CalendarApi, type CalendarAttachmentMeta, type CalendarAttendee, type CalendarChangePayload, type CalendarEventRow, type CalendarEventType, type CalendarImportance, type CalendarProvider, type CalendarResponseStatus, type CalendarRow, type CalendarSensitivity, type CalendarShowAs, type CalendarType, type CreateEventInput, type FindEventsQuery, type NewCalendarEvent, parseCalendarEventId, type UpdateEventInput, type UpsertCalendarInput, } from "./Calendar.js";
 export type { ChatFilter, ChatMessage, ChatRole, NewChatMessage } from "./ChatMessage.js";
 export { type ChatHandler, ChatMessageBus, type ChatUnsubscribe } from "./ChatMessageBus.js";
-export type { ConfigService } from "./Config.js";
+export { type ConfigService, DEFAULT_WRITABLE_PATHS } from "./Config.js";
 export type { ContainerToolInfo } from "./ContainerTool.js";
 export { type ParsedCron, parseCron } from "./CronExpression.js";
 export type { EventFile, EventFilter, EventPatch, EventRow, EventState, NewEvent, } from "./Event.js";
 export { EVENT_PRIORITY } from "./Event.js";
 export { DuplicateIdempotencyKeyError, EventBus } from "./EventBus.js";
 export { estimateTokens } from "./estimateTokens.js";
-export { HandlerCatalog, type HandlerPath } from "./HandlerCatalog.js";
+export { HandlerCatalog, type HandlerPath, type ResolvedHandler } from "./HandlerCatalog.js";
+export { type HandlerResolution, type HandlerResolutionOptions, handlerCandidateLevels, resolveHandlerPath, topicFromHandlerPath, twinHandlerPath, } from "./HandlerResolution.js";
 export type { InferenceEventRow, InferenceOutcome, NewInferenceEvent, } from "./InferenceEvent.js";
 export { InferenceEventBus } from "./InferenceEventBus.js";
 export { type CreateLoggerOptions, createLogger, jsonStdoutStream, type Logger, type LogLevel, type LogStream, prettyStdoutStream, } from "./logging/Logger.js";
@@ -22,7 +23,7 @@ export { renderMarkdownToHtml } from "./markdownHtml.js";
 export { escapeTableCell, markdownTable, writeMarkdown } from "./markdownOutput.js";
 export { renderMarkdown } from "./markdownTerminal.js";
 export { matchesAnyGlob, matchesGlob } from "./PathGlob.js";
-export type { AnyCommandDef, EmitHandle, EmitOptions, HostContext, McpClient, McpInfo, PluginHostManifest, PluginManifest, PluginTool, PluginToolCallContext, PromptAppender, PromptPlaceholderRegistration, } from "./Plugin.js";
+export type { AnyCommandDef, EmitHandle, EmitOptions, EmittedEventDescriptor, HostContext, McpClient, McpInfo, PluginHostManifest, PluginManifest, PluginTool, PluginToolCallContext, PromptAppender, PromptPlaceholderRegistration, } from "./Plugin.js";
 export { DaemonStoppedError, definePlugin } from "./Plugin.js";
 export { type NotificationHandler, POSTGRES_DB, POSTGRES_HOST, POSTGRES_PORT, POSTGRES_USER, PostgresConnection, type PostgresConnectionConfig, } from "./PostgresConnection.js";
 export { CACHE_MARKER_PLACEHOLDER, CORE_PROMPT_PLACEHOLDERS, isCorePromptPlaceholder, PROMPT_PLACEHOLDER_NAME_PATTERN, PROMPT_TEMPLATE_FILE, PromptPlaceholderConflictError, type PromptPlaceholderDefinition, type PromptPlaceholderKind, } from "./PromptPlaceholders.js";

package/build/index.js

@@ -2,11 +2,13 @@ export { AgentRunBus } from "./AgentRunBus.js";
 export { BASTION_TOKEN_HEADER } from "./BastionAuth.js";
 export { buildCalendarEventId, parseCalendarEventId, } from "./Calendar.js";
 export { ChatMessageBus } from "./ChatMessageBus.js";
+export { DEFAULT_WRITABLE_PATHS } from "./Config.js";
 export { parseCron } from "./CronExpression.js";
 export { EVENT_PRIORITY } from "./Event.js";
 export { DuplicateIdempotencyKeyError, EventBus } from "./EventBus.js";
 export { estimateTokens } from "./estimateTokens.js";
 export { HandlerCatalog } from "./HandlerCatalog.js";
+export { handlerCandidateLevels, resolveHandlerPath, topicFromHandlerPath, twinHandlerPath, } from "./HandlerResolution.js";
 export { InferenceEventBus } from "./InferenceEventBus.js";
 export { createLogger, jsonStdoutStream, prettyStdoutStream, } from "./logging/Logger.js";
 export { buildMailId, parseMailId, } from "./Mail.js";

package/build/testing/MockAgentRunBus.js

@@ -33,7 +33,7 @@ export class MockAgentRunBus {
             eventId: run.eventId,
             parentAgentrunId: run.parentAgentrunId ?? null,
             topic: run.topic,
-            handler: run.handler,
+            isExactTopic: run.isExactTopic ?? true,
             priority: run.priority ?? 50,
             state: run.state ?? "pending",
             prompt: run.prompt ?? null,

package/build/testing/MockEventBus.js

@@ -29,7 +29,7 @@ export class MockEventBus {
             isChat: event.isChat === true,
             preferredChatChannelId: event.preferredChatChannelId ?? null,
             prompt: event.prompt ?? null,
-            startHandler: event.startHandler ?? null,
+            isExactTopic: event.isExactTopic ?? false,
             privileged: event.privileged === true,
             outputChatOnFailure: event.outputChatOnFailure === true,
             createdAt: now,