@orkestrel/toolbox 0.0.1

package/dist/src/core/index.d.cts

@@ -0,0 +1,2651 @@
+import { AgentInterface } from '@orkestrel/agent';
+import { AgentRegistryInterface } from '@orkestrel/agent';
+import { ArrayShape } from '@orkestrel/contract';
+import { BooleanShape } from '@orkestrel/contract';
+import { ColumnSchema } from '@orkestrel/database';
+import { Condition } from '@orkestrel/database';
+import { Connector } from '@orkestrel/database';
+import { ContractInterface } from '@orkestrel/contract';
+import { ContractShape } from '@orkestrel/contract';
+import { ConversationStoreInterface } from '@orkestrel/agent';
+import { Criteria } from '@orkestrel/database';
+import { DatabaseErrorCode } from '@orkestrel/database';
+import { DatabaseInterface } from '@orkestrel/database';
+import { Direction } from '@orkestrel/database';
+import { DriverInterface } from '@orkestrel/database';
+import { Include } from '@orkestrel/relation';
+import { JSONShape } from '@orkestrel/contract';
+import { KeyFunction } from '@orkestrel/database';
+import { LiteralShape } from '@orkestrel/contract';
+import { ModelInterface } from '@orkestrel/relation';
+import { NumberShape } from '@orkestrel/contract';
+import { ObjectShape } from '@orkestrel/contract';
+import { OptionalShape } from '@orkestrel/contract';
+import { PromptType } from '@orkestrel/terminal';
+import { RelationErrorCode } from '@orkestrel/relation';
+import { RelationManagerInterface } from '@orkestrel/relation';
+import { StringShape } from '@orkestrel/contract';
+import { TableInterface } from '@orkestrel/database';
+import { TableSchema } from '@orkestrel/database';
+import { TablesShape } from '@orkestrel/database';
+import { TerminalManagerInterface } from '@orkestrel/terminal';
+import { ToolInterface } from '@orkestrel/tool';
+import { ToolManagerInterface } from '@orkestrel/tool';
+import { UnionShape } from '@orkestrel/contract';
+import { WorkflowDefinition } from '@orkestrel/workflow';
+import { WorkflowFunction } from '@orkestrel/workflow';
+import { WorkflowResult } from '@orkestrel/workflow';
+import { WorkflowRunnerInterface } from '@orkestrel/workflow';
+import { WorkflowStatus } from '@orkestrel/workflow';
+import { WorkflowStoreInterface } from '@orkestrel/workflow';
+import { WorkspaceManagerInterface } from '@orkestrel/agent';
+import { WorkspaceStoreInterface } from '@orkestrel/agent';
+
+/**
+ * The maximum nesting depth a delegation chain (agent tool → sub-agent → agent tool → …) may
+ * reach — the bound {@link import('./factories.js').createAgentTool}'s depth/cycle guard
+ * enforces.
+ *
+ * @remarks
+ * Deliberately a SEPARATE constant from {@link MAX_WORKFLOW_DEPTH} (rather than the two guards
+ * sharing one reference): the two guards bound DIFFERENT chains (workflow nesting vs. agent
+ * delegation) that happen to share a value today, and keeping this bound decoupled means a
+ * future change to one never silently shifts the other. Same numeric value by convention, not
+ * by shared reference.
+ */
+export declare const AGENT_TOOL_DEPTH = 8;
+
+export declare const AGENT_TOOL_DESCRIPTION: string;
+
+/**
+ * The name {@link import('./factories.js').createAgentTool} advertises by default — the key a
+ * model calls and the `ToolManagerInterface` (`@orkestrel/tool`) registers under.
+ */
+export declare const AGENT_TOOL_NAME = "agent";
+
+/**
+ * The lean {@link import('@orkestrel/tool').ToolInterface.summary} {@link import('./factories.js').createAgentTool}
+ * advertises in place of {@link AGENT_TOOL_DESCRIPTION} — a `ToolManagerInterface.definitions()`
+ * (`@orkestrel/tool`) advertises `summary ?? description`, so this one-sentence text stands in
+ * for the full teaching description; the full text stays retrievable via
+ * {@link import('./factories.js').createDescribeTool}.
+ */
+export declare const AGENT_TOOL_SUMMARY = "Delegate a task to a sub-agent and return its result; each call runs one sub-agent turn to completion. Call describe('agent') for the optional provider/tools/system overrides.";
+
+/**
+ * Options for {@link import('./factories.js').createAgentFunction} — the OPT-IN adapter that
+ * wraps a live `AgentInterface` (`@orkestrel/agent`) as a `WorkflowFunction`
+ * (`@orkestrel/workflow`), folding a nested workflow-authoring depth / cycle guard into its
+ * closure.
+ *
+ * @remarks
+ * All fields are optional: omitted entirely, the adapter runs the agent with no nested workflow
+ * tool bound and no depth/cycle bound (depth `0`, empty ancestry).
+ * - `runner` — when supplied, the adapter BINDS a depth/cycle-aware
+ *   {@link import('./factories.js').createWorkflowTool} onto the agent's `context.tools` (the
+ *   propagation seam), so the agent can author + run a NESTED workflow through it. Omitted ⇒ the
+ *   agent runs with no workflow tool bound.
+ * - `depth` — this invocation's nesting depth (default `0`); the bound workflow tool runs its
+ *   nested workflow at `depth + 1`, bounded by
+ *   {@link import('./constants.js').MAX_WORKFLOW_DEPTH}.
+ * - `ancestry` — the workflow / agent identifiers already in this run chain (default empty); a
+ *   cycle (this agent already present) is rejected with a typed `DEPTH` `WorkflowError`
+ *   (`@orkestrel/workflow`).
+ */
+export declare interface AgentFunctionOptions {
+    readonly runner?: WorkflowRunnerInterface;
+    readonly depth?: number;
+    readonly ancestry?: readonly string[];
+}
+
+/**
+ * The ancestry identifier of an agent in a run chain — `agent:<name>`.
+ *
+ * @remarks
+ * The agent counterpart of {@link workflowTag}: {@link import('./factories.js').createAgentFunction}
+ * / {@link import('./factories.js').createWorkflowTool} guard against re-entering an agent or
+ * workflow already in the chain (a typed `DEPTH` `WorkflowError`, `@orkestrel/workflow`). The
+ * `agent:` namespace keeps it distinct from a same-string workflow id.
+ *
+ * @param name - The agent's identifier / registry name
+ * @returns The namespaced ancestry tag (`agent:<name>`)
+ */
+export declare function agentTag(name: string): string;
+
+/**
+ * The FLAT args {@link import('./factories.js').createAgentTool} accepts — a delegated `task`
+ * plus the minimal optional `AgentJobInput` (`@orkestrel/agent`) fields a caller may override
+ * per-call.
+ *
+ * @remarks
+ * `task` becomes the seed user message in the sub-agent's rehydrated conversation
+ * (`AgentJobInput.messages`). `provider` / `tools` / `system` shadow the tool's own
+ * {@link AgentToolOptions} defaults for this ONE call when supplied.
+ */
+export declare interface AgentToolArguments {
+    readonly task: string;
+    readonly provider?: string;
+    readonly tools?: readonly string[];
+    readonly system?: string;
+}
+
+/**
+ * Options for {@link import('./factories.js').createAgentTool} — the sub-agent delegation
+ * defaults, the nesting-depth / cycle guard bookkeeping, and the advertised tool overrides.
+ *
+ * @remarks
+ * - `name` / `description` — advertised tool overrides; default to
+ *   {@link import('./constants.js').AGENT_TOOL_NAME} / {@link import('./constants.js').AGENT_TOOL_DESCRIPTION}.
+ * - `provider` — the DEFAULT registry provider key used when a call omits `provider`; a call
+ *   that supplies its own `provider` overrides this. One of `provider` (here or per-call) MUST
+ *   resolve, or the handler throws a typed `TOOL` {@link import('./errors.js').ToolboxError}.
+ * - `tools` — the DEFAULT registry tool-name list loaded into the delegated sub-agent; a
+ *   per-call `tools` list overrides (never merges with) this default.
+ * - `system` — the DEFAULT system prompt seeding the sub-agent's context; a per-call `system`
+ *   overrides this.
+ * - `depth` — this invocation's nesting depth (default `0`); a delegated sub-agent that itself
+ *   calls this tool again runs at `depth + 1`, bounded by
+ *   {@link import('./constants.js').AGENT_TOOL_DEPTH}.
+ * - `ancestry` — the sub-agent identifiers already in this delegation chain (default empty); a
+ *   cycle (the resolved agent already present) is rejected with a typed `DEPTH`
+ *   {@link import('./errors.js').ToolboxError}.
+ * - `store` — this package's ADDITION: when supplied, the handler persists the delegated
+ *   sub-agent's active conversation snapshot (`store.set(agent.context.conversations.active.snapshot())`)
+ *   once `agent.generate()` settles successfully, before returning — one snapshot per delegation
+ *   (each `registry.build` mints a fresh conversation id, so a shared store accumulates an
+ *   audit log rather than colliding). Omitted ⇒ no persistence from this tool.
+ *
+ * Conversation persistence for a delegated sub-agent has TWO independent seams, composable
+ * together: this `store` slot persists EACH delegation's conversation individually, and/or an
+ * `AgentRegistryInterface` built with `AgentRegistryOptions.store` (`@orkestrel/agent`) backs
+ * EVERY agent it builds — including ones built through this tool — with a store-backed
+ * `ConversationManagerInterface` of its own. Neither is required; either or both may be used.
+ */
+export declare interface AgentToolOptions {
+    readonly name?: string;
+    readonly description?: string;
+    readonly provider?: string;
+    readonly tools?: readonly string[];
+    readonly system?: string;
+    readonly depth?: number;
+    readonly ancestry?: readonly string[];
+    readonly store?: ConversationStoreInterface;
+}
+
+/**
+ * The shape of {@link import('./types.js').AgentToolArguments} —
+ * {@link import('./factories.js').createAgentTool}'s advertised `parameters`.
+ *
+ * @remarks
+ * `task` is the only required field (a non-empty string); `provider` / `tools` / `system`
+ * are per-call overrides of the tool's own configured defaults.
+ */
+export declare const agentToolShape: ObjectShape<{
+    task: StringShape;
+    provider: OptionalShape<StringShape>;
+    tools: OptionalShape<ArrayShape<StringShape>>;
+    system: OptionalShape<StringShape>;
+}, false>;
+
+export declare const ANSWER_TOOL_DESCRIPTION: string;
+
+/**
+ * The name {@link import('./factories.js').createAnswerTool} advertises by default — the key a
+ * model calls and the `ToolManagerInterface` (`@orkestrel/tool`) registers under.
+ */
+export declare const ANSWER_TOOL_NAME = "answer";
+
+/**
+ * The lean {@link import('@orkestrel/tool').ToolInterface.summary} {@link import('./factories.js').createAnswerTool}
+ * advertises in place of {@link ANSWER_TOOL_DESCRIPTION} — a `ToolManagerInterface.definitions()`
+ * (`@orkestrel/tool`) advertises `summary ?? description`, so this one-sentence text stands in
+ * for the full teaching description; the full text stays retrievable via
+ * {@link import('./factories.js').createDescribeTool}.
+ */
+export declare const ANSWER_TOOL_SUMMARY = "List prompts addressed to this terminal, or answer one by id. Call describe('answer') for the required fields.";
+
+/**
+ * Options for {@link import('./factories.js').createAnswerTool} — the live
+ * {@link TerminalManagerInterface} (`@orkestrel/terminal`) to list / answer prompts through, the
+ * terminal name `to`, and the advertised tool overrides.
+ *
+ * @remarks
+ * - `manager` — the terminal manager whose `pending(to)` / `answer(to, id, value)` the tool's
+ *   handler calls — `pending` lists the prompts currently addressed to `to`, `answer` resolves
+ *   one by `id`. A failed `answer` (`TerminalAnswerResult.error`) re-surfaces as a typed
+ *   `ANSWER` {@link import('./errors.js').ToolboxError}.
+ * - `to` — the terminal identity this tool lists / answers prompts FOR.
+ * - `name` / `description` — advertised tool overrides; default to
+ *   {@link import('./constants.js').ANSWER_TOOL_NAME} / {@link import('./constants.js').ANSWER_TOOL_DESCRIPTION}.
+ */
+export declare interface AnswerToolOptions {
+    readonly manager: TerminalManagerInterface;
+    readonly to: string;
+    readonly name?: string;
+    readonly description?: string;
+}
+
+/**
+ * The shape of {@link import('./factories.js').createAnswerTool}'s call arguments — discriminated
+ * by `operation`: `'pending'` lists the prompts addressed to this tool's terminal, `'answer'`
+ * resolves one by `id` with a `value`.
+ *
+ * @remarks
+ * `value`'s type varies by the ORIGINAL prompt's form (`string` for `'input'` / `'password'` /
+ * `'select'` / `'editor'`, `boolean` for `'confirm'`, `readonly string[]` for `'checkbox'`) —
+ * `unionShape(stringShape(), booleanShape(), arrayShape(stringShape()))` expresses that
+ * union directly, so `value` is typed as the full `string | boolean | readonly string[]` union
+ * here (no lossy string-only fallback needed).
+ */
+export declare const answerToolShape: UnionShape<readonly [ ObjectShape<{
+    operation: LiteralShape<readonly ["pending"]>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["answer"]>;
+    id: StringShape;
+    value: UnionShape<readonly [ StringShape, BooleanShape, ArrayShape<StringShape>]>;
+}, false>]>;
+
+/**
+ * Clamp a `'records'` call's criteria to a row cap, and build the PROBE criteria the caller reads
+ * with — the pure leaf {@link import('./factories.js').createDatabaseTool}'s `'records'` operation
+ * uses to detect truncation without a separate `count` round trip.
+ *
+ * @remarks
+ * The effective limit is `min(criteria?.limit ?? cap, cap)`, floored at `0` (so a caller can never
+ * exceed the configured cap by supplying a larger `criteria.limit`). The returned probe criteria
+ * requests ONE MORE row than the effective limit (`limit: effective + 1`) — if storage returns
+ * that many, the caller knows the true result was truncated (`rows.length > effective`) and slices
+ * back down to `effective` before returning.
+ *
+ * @example
+ * ```ts
+ * import { clampCriteria } from '@src/core'
+ *
+ * const { criteria, limit } = clampCriteria(undefined, 100)
+ * // limit === 100, criteria.limit === 101 — a probe fetching one extra row
+ * const rows = await table.records(criteria)
+ * const truncated = rows.length > limit // true when storage had more than `limit` rows
+ * ```
+ *
+ * @param criteria - The live criteria to clamp (or `undefined`)
+ * @param cap - The row-count ceiling
+ * @returns The PROBE criteria (`limit` bumped by one) and the effective `limit`
+ */
+export declare function clampCriteria(criteria: Criteria | undefined, cap: number): Readonly<{
+    criteria: Criteria;
+    limit: number;
+}>;
+
+/**
+ * Normalize an LLM-supplied answer `value` to the type {@link PromptType} `form` expects, so a
+ * caller that only ever emits strings can still answer a typed prompt.
+ *
+ * @remarks
+ * `'confirm'` coerces to a `boolean` — a `boolean` passes through, and the strings `'true'` /
+ * `'false'` (case-insensitively) map to it; any other string is truthy-coerced via
+ * `Boolean(value)`. `'checkbox'` coerces to `readonly string[]` — an array passes through
+ * (stringifying each entry), a comma-separated string splits + trims into one, and any other
+ * single (non-comma) string becomes a one-item array. Every other form (`'input'` / `'password'`
+ * / `'select'` / `'editor'`) coerces to a plain `string` — a string passes through verbatim; a
+ * non-string, non-object scalar (`number` / `boolean`) stringifies via `String(value)`; an
+ * object or array (no lossless string form) falls back to `''` rather than serializing garbage.
+ * Pure and total — never throws.
+ *
+ * @param form - The {@link PromptType} the answer is being coerced FOR
+ * @param value - The raw, LLM-supplied answer value
+ * @returns The coerced answer — `boolean` for `'confirm'`, `readonly string[]` for `'checkbox'`,
+ *   `string` otherwise
+ */
+export declare function coerceAnswer(form: PromptType, value: unknown): string | boolean | readonly string[];
+
+/** One column's declared type — a primitive shorthand, or `integer` for a whole-number `number`. */
+export declare type ColumnKind = 'string' | 'integer' | 'number' | 'boolean';
+
+/** A {@link import('./types.js').ColumnKind} literal — the leaf {@link columnSpecShape} wraps. */
+export declare const columnKindShape: LiteralShape<readonly ["string", "integer", "number", "boolean"]>;
+
+/** Map a column NAME + its live `@orkestrel/database` `ContractShape` to a {@link ColumnSchema} — the leaf {@link tableSchema} maps over. */
+export declare function columnSchema(name: string, shape: ContractShape): ColumnSchema;
+
+/** Compile one {@link ColumnSpec} into its `@orkestrel/database` column shape — the per-column leaf {@link expandTables} maps over. */
+export declare function columnShape(spec: ColumnSpec): ContractShape;
+
+/**
+ * One table column's spec — either a bare {@link ColumnKind} shorthand, or `{ type, optional }`
+ * when the column may be absent from a row.
+ */
+export declare type ColumnSpec = ColumnKind | Readonly<{
+    type: ColumnKind;
+    optional?: boolean;
+}>;
+
+/** A {@link import('./types.js').ColumnSpec} — a bare {@link columnKindShape}, or `{ type, optional }`. */
+export declare const columnSpecShape: UnionShape<readonly [ LiteralShape<readonly ["string", "integer", "number", "boolean"]>, ObjectShape<{
+    type: LiteralShape<readonly ["string", "integer", "number", "boolean"]>;
+    optional: OptionalShape<BooleanShape>;
+}, false>]>;
+
+/**
+ * Complete a {@link WorkflowDraft} into a strict {@link WorkflowDefinition} — synthesize any
+ * MISSING `id` deterministically + positionally, and default any MISSING `name` to its
+ * (now-resolved) `id`.
+ *
+ * @remarks
+ * The positional id scheme is stable and human-legible: the workflow is `wf`, phase `i` is
+ * `phase-<i>`, and task `j` of that phase is `<phaseId>-task-<j>` (so a provided phase id flows
+ * into its tasks' synthesized ids). A PROVIDED `id` / `name` at any level is kept VERBATIM —
+ * synthesis touches only the omitted ones. A missing `name` defaults to the resolved `id` (never
+ * the other way round), so the result always has both. `run`, `description`, the per-phase
+ * `concurrency` / `bail`, the per-task `retries` / `timeout`, and the workflow `bail` carry over
+ * unchanged. The result is a complete {@link WorkflowDefinition}; the caller still validates it
+ * against the STRICT contract.
+ *
+ * @param draft - The draft workflow (id/name optional at all three levels)
+ * @returns A complete {@link WorkflowDefinition} with every id/name filled
+ */
+export declare function completeDraft(draft: WorkflowDraft): WorkflowDefinition;
+
+/**
+ * Complete one {@link PhaseDraft} into a strict phase definition — the per-phase step of
+ * {@link completeDraft} (phase `index` → `phase-<index>` when its id is omitted).
+ *
+ * @param phase - The draft phase
+ * @param index - The phase's positional index in the workflow
+ * @returns A complete phase definition
+ */
+export declare function completePhaseDraft(phase: PhaseDraft, index: number): WorkflowDefinition['phases'][number];
+
+/**
+ * Complete one {@link TaskDraft} into a strict task definition — the per-task leaf step of
+ * {@link completeDraft} (task `index` of phase `<phaseId>` → `<phaseId>-task-<index>` when its id
+ * is omitted).
+ *
+ * @param task - The draft task
+ * @param phaseId - The (resolved) parent phase id, so the synthesized task id nests under it
+ * @param index - The task's positional index within its phase
+ * @returns A complete task definition
+ */
+export declare function completeTaskDraft(task: TaskDraft, phaseId: string, index: number): WorkflowDefinition['phases'][number]['tasks'][number];
+
+/** One SERIALIZED WHERE condition — `values` is ALWAYS an array, even for a single-value operator. */
+export declare const conditionShape: ObjectShape<{
+    column: StringShape;
+    operator: LiteralShape<readonly ["equals", "not", "above", "below", "from", "to", "between", "like", "glob", "starts", "ends", "any", "none", "absent", "present"]>;
+    values: ArrayShape<JSONShape>;
+    connector: OptionalShape<LiteralShape<readonly ["and", "or"]>>;
+}, false>;
+
+/**
+ * Wrap a live `AgentInterface` (`@orkestrel/agent`) as a {@link WorkflowFunction}
+ * (`@orkestrel/workflow`) — the OPT-IN adapter that runs the agent to a settled result, folding
+ * a nested workflow-authoring depth / cycle guard into its own closure.
+ *
+ * @remarks
+ * OWNED here now (ported from `@orkestrel/workflow`). Composes into a caller's
+ * `WorkflowOptions.functions` registry like any other behavior; the pure workflow runner has no
+ * knowledge of agents itself. Before running the agent, the depth/cycle guard REJECTS the call
+ * (a THROWN typed `DEPTH` `WorkflowError`, which the leaf `fail`s) when running it would push a
+ * nested chain past {@link import('./constants.js').MAX_WORKFLOW_DEPTH}, OR when this agent is
+ * already an ancestor (a cycle). When {@link import('./types.js').AgentFunctionOptions.runner}
+ * is supplied, the adapter BINDS a depth/cycle-aware {@link createWorkflowTool} onto the agent's
+ * `context.tools` (the propagation seam) — closed over `depth` and the extended ancestry (the
+ * tool itself computes `depth + 1` internally) — so the agent can author + run a NESTED workflow
+ * through it; the wrapped default is the CURRENT task's own workflow id (used only on a no-args
+ * tool call). The task's cancellation folds into the agent run: an already-aborted
+ * `controller.signal` cancels the agent up front; otherwise a one-shot listener fires
+ * `agent.abort(reason)` when the task cancels, removed in `finally`. `agent.generate()` resolves
+ * a partial `AgentResult` on a cancel (never rejects), returned as the task's completed value.
+ *
+ * A bound agent is effectively SINGLE-RUN: `context.tools.add` binds one `ToolInterface` under
+ * the fixed {@link import('./constants.js').WORKFLOW_TOOL_NAME}, and `agent.generate()` /
+ * `agent.abort()` are per-agent state. Two CONCURRENT tasks sharing the SAME `agent` instance
+ * race on that one tool binding (last-write-wins) and on generate/abort — give each concurrent
+ * task its OWN agent instance.
+ *
+ * @param agent - The live `AgentInterface` to run
+ * @param options - The nested-workflow binding + depth/cycle bookkeeping (see {@link import('./types.js').AgentFunctionOptions})
+ * @returns A {@link WorkflowFunction} that runs `agent` to its settled result
+ *
+ * @example
+ * ```ts
+ * import { createAgentFunction } from '@src/core'
+ * import { createWorkflowRunner } from '@orkestrel/workflow'
+ *
+ * const runner = createWorkflowRunner()
+ * const review = createAgentFunction(myAgent, { runner })
+ * await runner.execute(definition, { functions: { review } })
+ * ```
+ */
+export declare function createAgentFunction(agent: AgentInterface, options?: AgentFunctionOptions): WorkflowFunction;
+
+/**
+ * Build an LLM-callable sub-agent delegation tool — resolves a live, seeded `AgentInterface`
+ * from `registry` and runs it to completion for ONE delegated `task`.
+ *
+ * @remarks
+ * The universal tool-handler contract (AGENTS §14): validates the call args against
+ * {@link import('./shapers.js').agentToolShape}, assembles an `AgentJobInput` (`task` seeds the
+ * sub-agent's conversation as a single `user` message; `provider` / `tools` / `system` fall
+ * back to the tool's own {@link import('./types.js').AgentToolOptions} defaults), rehydrates the sub-agent via
+ * `registry.build`, runs it with `agent.generate()`, and returns the settled
+ * `AgentResult.content` string (the sub-agent's final text). A missing / unresolvable `provider`, or a malformed call, THROWS a typed `TOOL`
+ * {@link import('./errors.js').ToolboxError}; a delegation that would exceed
+ * {@link import('./constants.js').AGENT_TOOL_DEPTH}, or re-enter an already-delegated agent (a
+ * cycle), THROWS a typed `DEPTH` {@link import('./errors.js').ToolboxError} — both isolated
+ * by the `ToolManagerInterface` into the canonical tool result's top-level `error`.
+ *
+ * `AgentInterface` (`@orkestrel/agent`) exposes no teardown method — a bound sub-agent's
+ * lifetime is the single `generate()` call this handler awaits; there is nothing to release
+ * afterwards (unlike a store-backed resource, its state lives entirely in the resolved
+ * `AgentContextInterface`, owned by the caller's registry).
+ *
+ * @param registry - The `AgentRegistryInterface` a delegated job resolves against (providers,
+ *   tools, authorities, schedulers, and the `build` rehydration seam)
+ * @param options - Delegation defaults, depth/ancestry bookkeeping, and advertised overrides
+ *   (see {@link import('./types.js').AgentToolOptions})
+ * @returns A `ToolInterface` (named {@link import('./constants.js').AGENT_TOOL_NAME} by default)
+ *
+ * @example
+ * ```ts
+ * import { createAgentTool } from '@src/core'
+ * import { createAgentRegistry } from '@orkestrel/agent'
+ * import { createToolManager } from '@orkestrel/tool'
+ *
+ * const registry = createAgentRegistry({ providers: { openai: myProvider } })
+ * const tool = createAgentTool(registry, { provider: 'openai' })
+ * const tools = createToolManager()
+ * tools.add(tool) // a model can now delegate a task to a sub-agent
+ * ```
+ */
+export declare function createAgentTool(registry: AgentRegistryInterface, options?: AgentToolOptions): ToolInterface;
+
+/**
+ * Build an LLM-callable answer tool — the ANSWER side of the terminal seam. Lists the prompts
+ * currently addressed to {@link import('./types.js').AnswerToolOptions.to}, or answers one of
+ * them by id.
+ *
+ * @remarks
+ * The universal tool-handler contract (AGENTS §14): validates the call args against
+ * {@link import('./shapers.js').answerToolShape} (discriminated by `operation`). `'pending'`
+ * returns a compact list (`{ id, from, form, message }`) of every prompt currently addressed to
+ * `to` (`TerminalManagerInterface.pending`, `@orkestrel/terminal`). `'answer'` looks the prompt
+ * up by `id` (an unknown id throws a typed `ANSWER` {@link import('./errors.js').ToolboxError}),
+ * normalizes the model-supplied `value` to the prompt's own form
+ * ({@link import('./helpers.js').coerceAnswer}), and applies it via
+ * `TerminalManagerInterface.answer` — a rejected / unknown / unresolvable outcome
+ * (`TerminalAnswerResult.error`) re-surfaces as a typed `ANSWER` `ToolboxError`; success returns
+ * `{ answered: id }`. `to` is FIXED at construction
+ * ({@link import('./types.js').AnswerToolOptions.to}) — never read from the model-supplied args —
+ * so a model cannot spoof which terminal it is answering for. Concurrent answerers racing on one
+ * endpoint are FIRST-WRITE-WINS — a late answer to an already-settled prompt returns a typed
+ * `ANSWER` `ToolboxError` (surfaced as a 422 over HTTP).
+ *
+ * @param options - The live manager, the fixed `to` identity, and advertised overrides (see
+ *   {@link import('./types.js').AnswerToolOptions})
+ * @returns A `ToolInterface` (named {@link import('./constants.js').ANSWER_TOOL_NAME} by default)
+ *
+ * @example
+ * ```ts
+ * import { createAnswerTool } from '@src/core'
+ * import { createToolManager } from '@orkestrel/tool'
+ * import { createTerminalManager } from '@orkestrel/terminal'
+ *
+ * const manager = createTerminalManager()
+ * manager.add('reviewer')
+ * const tool = createAnswerTool({ manager, to: 'reviewer' })
+ * const tools = createToolManager()
+ * tools.add(tool) // the reviewer terminal can now list/answer prompts addressed to it
+ * ```
+ */
+export declare function createAnswerTool(options: AnswerToolOptions): ToolInterface;
+
+/**
+ * Create a {@link DefinitionStoreInterface} backed by one table of the `@orkestrel/database`
+ * layer — the driver-pluggable twin of {@link createMemoryDefinitionStore}, storing each
+ * database's definition as one opaque JSON column.
+ *
+ * @param driver - The {@link DriverInterface} backing the table (default an in-memory driver)
+ * @returns A {@link DefinitionStoreInterface}
+ *
+ * @example
+ * ```ts
+ * import { createDatabaseDefinitionStore } from '@src/core'
+ *
+ * const store = createDatabaseDefinitionStore() // in-memory by default
+ * ```
+ */
+export declare function createDatabaseDefinitionStore(driver?: DriverInterface): DefinitionStoreInterface;
+
+/**
+ * Build an LLM-callable database tool — create, query, and mutate `@orkestrel/database`
+ * databases through one `operation`-discriminated call (AGENTS §14, matching
+ * {@link createWorkspaceTool}'s single-tool-many-operations shape).
+ *
+ * @remarks
+ * The universal tool-handler contract (AGENTS §14): validates the call args against
+ * {@link import('./shapers.js').databaseToolShape}, dispatches to the matching operation, and
+ * RETURNS a plain result on success. A database is resolved lazily and cached for the tool's
+ * lifetime — `'create'` mints one from `tables` ({@link import('./helpers.js').expandTables}) and
+ * a registered `driver` key ({@link import('./types.js').DatabaseToolOptions.drivers}, default
+ * `{ memory: () => createMemoryDriver() }`); any other operation addressing an uncached id falls
+ * back to {@link import('./types.js').DatabaseToolOptions.store} (an unknown id throws a typed
+ * `TOOL` {@link import('./errors.js').ToolboxError}). When a `store` is configured, `'create'`
+ * persists the new {@link import('./types.js').DatabaseDefinition} and `'destroy'` deletes it.
+ *
+ * `'migrate'` re-declares a LIVE handle's tables via `DatabaseInterface.import` (the SAME driver
+ * and storage, a NEW typed view) and calls its `migrate` against the OLD deployed schema —
+ * derived from the handle's OWN `export()` (via {@link import('./helpers.js').tableSchema}), so it
+ * works for any handle, config-tracked or caller-supplied via
+ * {@link import('./types.js').DatabaseToolOptions.databases}. `'records'` clamps its `criteria` to
+ * {@link import('./types.js').DatabaseToolOptions.limit} (default
+ * {@link import('./constants.js').DATABASE_TOOL_LIMIT}) via
+ * {@link import('./helpers.js').clampCriteria}, reporting `truncated` when storage held more rows
+ * than the cap. Every operation's `criteria` is normalized via
+ * {@link import('./helpers.js').criteriaOf} (defaults an omitted condition `connector` to `'and'`).
+ * When {@link import('./types.js').DatabaseToolOptions.readonly} is `true`, every mutating
+ * operation throws a typed `TOOL` `ToolboxError` before doing anything. When
+ * {@link import('./types.js').DatabaseToolOptions.timeout} is set, every `@orkestrel/database` call
+ * this tool makes is given a fresh `AbortSignal.timeout(timeout)`. A typed `@orkestrel/database`
+ * failure (`DatabaseError`) re-surfaces as a typed `DATABASE` `ToolboxError` carrying the
+ * original {@link import('@orkestrel/database').DatabaseErrorCode} in `context.code`
+ * ({@link import('./helpers.js').databaseToolCode}); an `ToolboxError` thrown by this tool's own
+ * guards passes through unwrapped.
+ *
+ * A lazily re-minted database over the DEFAULT in-memory driver yields an EMPTY database — only
+ * the {@link import('./types.js').DatabaseDefinition} schema persists in `store`, never rows;
+ * durable rows need a persistent driver factory registered in
+ * {@link import('./types.js').DatabaseToolOptions.drivers}. `'destroy'` closes whatever handle is
+ * cached for the id, including an embedder-supplied
+ * {@link import('./types.js').DatabaseToolOptions.databases} handle — the embedder relinquishes
+ * that handle's lifecycle to this tool for any id it wires in. This tool assumes the
+ * single-writer, non-reentrant model `@orkestrel/database` itself assumes — concurrent calls
+ * against one id are NOT serialized by this tool. `'get'` is uncapped by
+ * {@link import('./types.js').DatabaseToolOptions.limit} (bounded only by the caller's `key` array
+ * size), unlike `'records'` / `'find'` / `'links'`.
+ *
+ * @param options - The tool's configuration (see {@link import('./types.js').DatabaseToolOptions})
+ * @returns A `ToolInterface` (named {@link import('./constants.js').DATABASE_TOOL_NAME} by default)
+ *
+ * @example
+ * ```ts
+ * import { createDatabaseTool } from '@src/core'
+ *
+ * const tool = createDatabaseTool()
+ * await tool.execute({
+ * 	operation: 'create',
+ * 	id: 'shop',
+ * 	tables: { products: { columns: { name: 'string', price: 'number' } } },
+ * })
+ * ```
+ */
+export declare function createDatabaseTool(options?: DatabaseToolOptions): ToolInterface;
+
+/**
+ * Build an LLM-callable tool that returns the FULL `description` of another registered tool by
+ * name — the counterpart to the lean `summary` the other tools in this package advertise
+ * (`AGENT_TOOL_SUMMARY` / `WORKFLOW_TOOL_SUMMARY` / `WORKSPACE_TOOL_SUMMARY`).
+ *
+ * @remarks
+ * `ToolManagerInterface.definitions()` (`@orkestrel/tool`) advertises `tool.summary ??
+ * tool.description` — a lean one-sentence summary stands in for a tool's full teaching
+ * description when `summary` is set, keeping the advertised tool list compact for a small model.
+ * This tool is the on-demand expansion seam: given a registered tool's `name`, it looks the tool
+ * up via `tools.tool(name)` and returns its full `description` (falling back to `summary` when a
+ * tool has no `description` of its own, then a placeholder when it has neither).
+ *
+ * The universal tool-handler contract (AGENTS §14): validates the call args against
+ * {@link import('./shapers.js').describeToolShape}, RETURNS the plain description string on
+ * success, THROWS a typed `TOOL` {@link import('./errors.js').ToolboxError} on a malformed call
+ * or an unknown tool name.
+ *
+ * @param tools - The `ToolManagerInterface` (`@orkestrel/tool`) whose registered tools this
+ *   tool can describe
+ * @returns A `ToolInterface` (named {@link import('./constants.js').DESCRIBE_TOOL_NAME})
+ *
+ * @example
+ * ```ts
+ * import { createDescribeTool, createWorkflowTool } from '@src/core'
+ * import { createToolManager } from '@orkestrel/tool'
+ *
+ * const tools = createToolManager()
+ * tools.add(createWorkflowTool(definition, runner))
+ * tools.add(createDescribeTool(tools))
+ * const full = await tools.execute({ id: '1', name: 'describe', arguments: { name: 'workflow' } })
+ * full.value // the workflow tool's full teaching description
+ * ```
+ */
+export declare function createDescribeTool(tools: ToolManagerInterface): ToolInterface;
+
+/**
+ * Wrap one CONCRETE endpoint ({@link import('./types.js').EndpointDefinition}) as an LLM-callable
+ * `ToolInterface` — the endpoint half of the "existing API/DB → MCP tool" bridge (the other half,
+ * {@link createInferTool}, is a standalone inference utility).
+ *
+ * @remarks
+ * `parameters` is inferred ONCE at construction from `definition.samples` via
+ * `@orkestrel/contract`'s `samplesToSchema` (tuned by {@link import('./types.js').EndpointToolOptions}'s
+ * `format` / `enum`), wrapping a non-object root as `{ value: <schema> }` via `schemaToObject` —
+ * the SAME object-rooted schema is both the ADVERTISED `parameters` and, by default
+ * ({@link import('./types.js').EndpointToolOptions.validate} `true`), the ENFORCED contract:
+ * `@orkestrel/contract` 0.0.7's `schemaToShape` compiles it ONCE (via `createContract`) into a
+ * `ContractInterface` whose `.parse` runs on every call's `args` before `definition.invoke` — a
+ * NORMALIZING parse, not a strict type check: a scalar is COERCED to its inferred type where the
+ * house parsers coerce (a number to/from a numeric string, a boolean from `'1'`/`'0'`/`'true'`/
+ * `'false'`/`1`/`0`), so `definition.invoke` receives the COERCED value (e.g. `7` sent for a
+ * string slot arrives as `'7'`), not the raw call value. A call whose `args` fails to parse into
+ * a record — a required key missing, or a value not coercible to its slot's type — THROWS a
+ * typed `TOOL` {@link import('./errors.js').ToolboxError} carrying the compiled contract's
+ * structured `explain` faults, and `definition.invoke` is never called. `format` annotations are
+ * NEVER asserted, and a key outside the closed inferred schema is SILENTLY DROPPED rather than
+ * rejected (see {@link import('./types.js').EndpointToolOptions.validate}). With
+ * `validate: false`, `execute` PASSES THROUGH the model-supplied `args` to `definition.invoke`
+ * WITHOUT re-validation — the pre-0.0.7 behavior, preserved as an explicit opt-out. Either way,
+ * `invoke`'s return flows back as the tool call's plain result; a throw PROPAGATES uncaught,
+ * isolated by the `ToolManagerInterface` (`@orkestrel/tool`) into the canonical error envelope
+ * (AGENTS §14) — never caught or re-wrapped here.
+ *
+ * @param definition - The endpoint's identity, non-empty samples, and local handler (see
+ *   {@link import('./types.js').EndpointDefinition})
+ * @param options - Construction-time inference tuning + the validate opt-out (see
+ *   {@link import('./types.js').EndpointToolOptions})
+ * @returns A `ToolInterface` named `definition.name`
+ *
+ * @example
+ * ```ts
+ * import { createEndpointTool } from '@src/core'
+ * import { createToolManager } from '@orkestrel/tool'
+ *
+ * const tool = createEndpointTool({
+ * 	name: 'lookupUser',
+ * 	description: 'Look up a user by id.',
+ * 	samples: [{ id: '1', name: 'Ada' }, { id: '2', name: 'Bob' }],
+ * 	invoke: (args) => ({ id: args.id, name: 'Ada' }),
+ * })
+ * const tools = createToolManager()
+ * tools.add(tool)
+ *
+ * // conforming args (all required keys present) parse and reach `invoke`
+ * const result = await tools.execute({
+ * 	id: 'call-1',
+ * 	name: 'lookupUser',
+ * 	arguments: { id: '1', name: 'Ada' },
+ * })
+ * // result.value -> { id: '1', name: 'Ada' }
+ *
+ * // a nonconforming call (id is not coercible to the required string) is rejected before
+ * // `invoke` runs
+ * const rejected = await tools.execute({
+ * 	id: 'call-2',
+ * 	name: 'lookupUser',
+ * 	arguments: { id: true, name: 'Ada' },
+ * })
+ * // rejected.error -> the TOOL ToolboxError message
+ * ```
+ */
+export declare function createEndpointTool(definition: EndpointDefinition, options?: EndpointToolOptions): ToolInterface;
+
+/**
+ * Build a standalone LLM-callable tool that infers a JSON Schema from example values — the
+ * utility half of the "existing API/DB → MCP tool" bridge (the other half,
+ * {@link createEndpointTool}, wraps one CONCRETE endpoint).
+ *
+ * @remarks
+ * The universal tool-handler contract (AGENTS §14): validates the call args against
+ * {@link import('./shapers.js').inferToolShape} (`samples` non-empty, `format` / `enum` optional
+ * booleans, `candidates` an optional array), infers a schema via `@orkestrel/contract`'s
+ * `samplesToSchema`, wraps a non-object root as `{ value: <schema> }` via `schemaToObject` (mirrors
+ * the tool-parameters convention every other `create*Tool` factory advertises), and RETURNS the
+ * resulting parameters record. An empty `samples` array fails `inferToolShape`'s `min: 1` bound —
+ * `contract.parse` returns `undefined` and the handler throws a typed `TOOL`
+ * {@link import('./errors.js').ToolboxError}.
+ *
+ * When `candidates` is ABSENT, the return is the bare parameters record — unchanged from before
+ * this array existed. When `candidates` is PRESENT (any array, including empty), the handler
+ * compiles a SEPARATE per-call contract from the RAW inferred schema (via `@orkestrel/contract`'s
+ * `schemaToShape`, NOT the `schemaToObject`-wrapped parameters — a bare-value sample checks a
+ * bare-value candidate) and returns `{ parameters, checks }`, one check per candidate at the same
+ * index. Every entry has a UNIFORM shape — `{ index, valid, coercible }`, with `faults` added ONLY
+ * when `valid` is `false`: `valid` is the STRICT guard verdict (`checker.is(candidate)`), the
+ * OPPOSITE of {@link createEndpointTool}'s enforcement, which coerces (`7` becomes `'7'` for a
+ * string slot) — here a conformance report answers "does this value conform AS-IS": `7` against a
+ * string slot is `valid: false`, full stop. `coercible` answers a SEPARATE question — "would the
+ * NORMALIZING parse accept this value", i.e. would {@link createEndpointTool}'s default enforcement
+ * admit it (`checker.parse(candidate) !== undefined`) — computed for every candidate regardless of
+ * `valid`; by the house parse/guard round-trip guarantee (AGENTS §14), a `valid: true` entry is
+ * ALWAYS also `coercible: true`. `@orkestrel/contract` 0.0.7's `explain` mirrors the normalizing
+ * `parse`'s leniency, not `is`'s strictness — so a strictly-invalid but coercible candidate (`7`
+ * against a string slot) yields `{ valid: false, coercible: true, faults: [] }`: EMPTY faults, since
+ * the mismatch the normalizing parse would silently fix is not one `explain` reports. `faults`
+ * therefore only ever populates for a NON-coercible mismatch — a wrong type the parse can't coerce
+ * (a boolean in a string slot), a missing required key, or an out-of-enum value — where
+ * `coercible: false`. `checker.is` / `.parse` / `.explain` are all total over JSON-safe input — a
+ * JSON-safe hostile candidate (a `__proto__`-carrying object, deeply nested data) reaches all three
+ * and yields a bounded, non-throwing per-candidate verdict; a NON-JSON-safe candidate (e.g. a
+ * throwing-getter `Proxy`) never reaches the checker at all — it fails the OUTER `args` parse
+ * against {@link import('./shapers.js').inferToolShape} and rejects the WHOLE call with the same
+ * `TOOL` {@link import('./errors.js').ToolboxError} a malformed `samples`/`format`/`enum` throws,
+ * with no per-candidate verdict produced.
+ *
+ * @param options - Advertised `name` / `description` overrides (see
+ *   {@link import('./types.js').InferToolOptions})
+ * @returns A `ToolInterface` (named {@link import('./constants.js').INFER_TOOL_NAME} by default)
+ *
+ * @example
+ * ```ts
+ * import { createInferTool } from '@src/core'
+ * import { createToolManager } from '@orkestrel/tool'
+ *
+ * const tool = createInferTool()
+ * const tools = createToolManager()
+ * tools.add(tool)
+ *
+ * const result = await tools.execute({
+ * 	id: 'call-1',
+ * 	name: 'infer',
+ * 	arguments: { samples: [{ id: 1, name: 'Ada' }, { id: 2, name: 'Bob' }] },
+ * })
+ * // result.value -> { type: 'object', properties: { id: {...}, name: {...} }, ... }
+ *
+ * // with candidates, the result is wrapped with per-candidate verdicts
+ * const checked = await tools.execute({
+ * 	id: 'call-2',
+ * 	name: 'infer',
+ * 	arguments: {
+ * 		samples: [{ id: 1, name: 'Ada' }],
+ * 		candidates: [{ id: 2, name: 'Bob' }, { id: 'x', name: 'Cy' }],
+ * 	},
+ * })
+ * // checked.value -> { parameters: {...}, checks: [
+ * //   { index: 0, valid: true, coercible: true },
+ * //   { index: 1, valid: false, coercible: false, faults: [...] },
+ * // ] }
+ * ```
+ */
+export declare function createInferTool(options?: InferToolOptions): ToolInterface;
+
+/**
+ * Create the in-memory {@link DefinitionStoreInterface} — a process-lifetime `Map` of database
+ * definitions, the DEFAULT store the upcoming database / relation tools will persist their
+ * `DatabaseDefinition` configs through.
+ *
+ * @returns A {@link DefinitionStoreInterface}
+ *
+ * @example
+ * ```ts
+ * import { createMemoryDefinitionStore } from '@src/core'
+ *
+ * const store = createMemoryDefinitionStore()
+ * ```
+ */
+export declare function createMemoryDefinitionStore(): DefinitionStoreInterface;
+
+/**
+ * Build an LLM-callable prompt tool — the ASK side of the terminal seam. Asks
+ * {@link import('./types.js').PromptToolOptions.to} a question and BLOCKS until it answers,
+ * returning the resolved answer value.
+ *
+ * @remarks
+ * The universal tool-handler contract (AGENTS §14): validates the call args against
+ * {@link import('./shapers.js').promptToolShape}, dispatches to the matching
+ * `TerminalManagerInterface.ask` overload (`@orkestrel/terminal`) for the call's `form`, and
+ * RETURNS the resolved answer on success. `from` is FIXED at construction
+ * ({@link import('./types.js').PromptToolOptions.from}) — never read from the model-supplied
+ * args — so a model cannot spoof which terminal is asking. A prompt CYCLE rejects with
+ * `TerminalError('DEADLOCK')`, re-surfaced as a typed `DEADLOCK`
+ * {@link import('./errors.js').ToolboxError}; an expired prompt re-surfaces as `EXPIRE`; an
+ * unknown `to` (or any other `TerminalError`) re-surfaces as `TOOL`, naming the unknown terminal
+ * plus the known ones (`manager.terminals()`).
+ *
+ * @param options - The live manager, the fixed `from` identity, and advertised overrides (see
+ *   {@link import('./types.js').PromptToolOptions})
+ * @returns A `ToolInterface` (named {@link import('./constants.js').PROMPT_TOOL_NAME} by default)
+ *
+ * @example
+ * ```ts
+ * import { createPromptTool } from '@src/core'
+ * import { createToolManager } from '@orkestrel/tool'
+ * import { createTerminalManager } from '@orkestrel/terminal'
+ *
+ * const manager = createTerminalManager()
+ * manager.add('agent')
+ * manager.add('reviewer')
+ * const tool = createPromptTool({ manager, from: 'agent' })
+ * const tools = createToolManager()
+ * tools.add(tool) // the agent can now ask 'reviewer' and block for the answer
+ * ```
+ */
+export declare function createPromptTool(options: PromptToolOptions): ToolInterface;
+
+/**
+ * Build an LLM-callable relation tool — traverse and edit `@orkestrel/relation` relationships
+ * through one `operation`-discriminated call (AGENTS §14, matching {@link createDatabaseTool}'s
+ * single-tool-many-operations shape).
+ *
+ * @remarks
+ * The universal tool-handler contract (AGENTS §14): validates the call args against
+ * {@link import('./shapers.js').relationToolShape}, resolves the addressed
+ * {@link import('@orkestrel/relation').RelationManagerInterface} — an explicit `manager` field
+ * must match a key of {@link import('./types.js').RelationToolOptions.managers}, an OMITTED one
+ * resolves to the SOLE registered manager, either miss throwing a typed `TOOL`
+ * {@link import('./errors.js').ToolboxError}
+ * ({@link import('./helpers.js').relationManagerOf}) — then resolves `model` against it
+ * ({@link import('./helpers.js').relationModelOf}, same typed-`TOOL`-on-miss shape), and
+ * dispatches to the matched operation, RETURNING a plain result on success.
+ *
+ * `'load'` / `'find'` expand the call's FLAT dot-path `include` list into a live
+ * `@orkestrel/relation` `Include` tree via {@link import('./helpers.js').expandInclude}, capped
+ * at {@link import('./types.js').RelationToolOptions.depth} (default
+ * {@link import('./constants.js').RELATION_TOOL_DEPTH}) — a path exceeding the cap, or carrying an
+ * empty segment, throws a typed `TOOL` error. `'load'` dispatches on whether `key` is an array
+ * (positional many-key form, AGENTS §9.2) or a single key. `'find'` and `'links'` clamp their
+ * result to {@link import('./types.js').RelationToolOptions.limit} (default
+ * {@link import('./constants.js').RELATION_TOOL_LIMIT}) — `'find'` probes one row past the
+ * effective limit (mirroring {@link import('./helpers.js').clampCriteria}'s idiom) to report
+ * `truncated`; `'links'` (which has no upstream pagination) fetches the FULL linked-key list and
+ * slices/truncates it the same way. `'link'` / `'unlink'` write / remove one `through` junction
+ * row.
+ *
+ * A typed `@orkestrel/relation` failure (`RelationError`) re-surfaces as a typed `RELATION`
+ * `ToolboxError` carrying the original {@link import('@orkestrel/relation').RelationErrorCode}
+ * in `context.code`; a typed `@orkestrel/database` failure underneath it (`DatabaseError`)
+ * re-surfaces as a typed `DATABASE` `ToolboxError`, mirroring {@link createDatabaseTool}'s error
+ * mapping; an `ToolboxError` thrown by this tool's own guards (malformed args, an unknown
+ * manager/model) passes through unwrapped.
+ *
+ * @param options - The tool's configuration (see {@link import('./types.js').RelationToolOptions})
+ * @returns A `ToolInterface` (named {@link import('./constants.js').RELATION_TOOL_NAME} by default)
+ *
+ * @example
+ * ```ts
+ * import { createRelationTool } from '@src/core'
+ *
+ * const tool = createRelationTool({ managers: { shop: manager } })
+ * await tool.execute({ operation: 'load', model: 'accounts', key: 'acc1', include: ['contacts'] })
+ * ```
+ */
+export declare function createRelationTool(options: RelationToolOptions): ToolInterface;
+
+/**
+ * Wrap a registered tool as a {@link WorkflowFunction} (`@orkestrel/workflow`) — the OPT-IN
+ * adapter that lets a `function`-form task run a `@orkestrel/tool` tool BY NAME.
+ *
+ * @remarks
+ * OWNED here now (ported from `@orkestrel/workflow`). Composes into a caller's
+ * `WorkflowOptions.functions` registry like any other behavior
+ * (`{ publish: createToolFunction(tools, 'publish') }`); the pure workflow runner has no
+ * knowledge of tools itself. The returned function executes `name` against `tools` with the
+ * task's `controller.input` as the call arguments, id-correlated to the task's own id. A
+ * `ToolManagerInterface.execute` (`@orkestrel/tool`) NEVER throws (a handler throw is isolated
+ * into `result.error`), so a failing tool is surfaced here as a THROWN `Error` carrying the
+ * original message as `cause` — the leaf `fail`s, honouring `bail`. An UNREGISTERED tool name is
+ * a programmer error (an explicit binding to a name that doesn't exist) — unlike the engine's
+ * own silent auto-complete of an unresolved task handler, this THROWS a typed `TOOL`
+ * `WorkflowError` (`@orkestrel/workflow`).
+ *
+ * @param tools - The `ToolManagerInterface` (`@orkestrel/tool`) the named tool is registered on
+ * @param name - The registered tool's name
+ * @returns A {@link WorkflowFunction} that runs the named tool
+ *
+ * @example
+ * ```ts
+ * import { createToolFunction } from '@src/core'
+ * import { createToolManager } from '@orkestrel/tool'
+ * import { createWorkflowRunner } from '@orkestrel/workflow'
+ *
+ * const tools = createToolManager()
+ * tools.add(myPublishTool)
+ * const runner = createWorkflowRunner()
+ * await runner.execute(definition, { functions: { publish: createToolFunction(tools, 'publish') } })
+ * ```
+ */
+export declare function createToolFunction(tools: ToolManagerInterface, name: string): WorkflowFunction;
+
+/**
+ * Compile the LENIENT workflow DRAFT contract — identical to `createWorkflowContract`
+ * (`@orkestrel/workflow`) EXCEPT `id` and `name` are OPTIONAL at all three levels (workflow /
+ * phase / task), so a small model can omit the six identity strings.
+ *
+ * @remarks
+ * The widened authoring surface {@link createWorkflowTool} parses an authored blob through
+ * before {@link import('./helpers.js').completeDraft} fills the missing ids/names. It does NOT
+ * relax the canonical contract — `createWorkflowContract` (`@orkestrel/workflow`) stays
+ * byte-for-byte unchanged and STRICT, and the completed draft is re-validated against THAT
+ * strict gate before running (soundness preserved). A PROVIDED `id` / `name` still carries
+ * `minLength: 1`, so an explicitly-empty `id: ''` is REJECTED (parses to `undefined`), never
+ * auto-filled — keeping "garbage" distinct from "omitted". `run` stays optional (a plain name
+ * string).
+ *
+ * @returns The compiled {@link import('./types.js').WorkflowDraft} contract
+ *
+ * @example
+ * ```ts
+ * import { createWorkflowDraftContract, completeDraft } from '@src/core'
+ *
+ * const draft = createWorkflowDraftContract()
+ * const parsed = draft.parse({ phases: [{ tasks: [{ run: 'compile' }] }] })
+ * const definition = parsed && completeDraft(parsed) // ids/names filled positionally
+ * draft.parse({ id: '', phases: [] }) // undefined — an explicit empty id is rejected
+ * ```
+ */
+export declare function createWorkflowDraftContract(): ContractInterface<WorkflowDraft>;
+
+/**
+ * Wrap a {@link WorkflowDefinition} as an LLM-callable tool — it ADVERTISES the SIMPLE flat
+ * authoring shape (`{ name?, steps: [{ name }] }`) as its `parameters` so even a small model can
+ * author a complete tree, and its handler EXPANDS / COMPLETES the authored blob, validates it
+ * against the STRICT contract, runs it through `runner`, and, when
+ * {@link import('./types.js').WorkflowToolOptions.store} is supplied, PERSISTS each executed
+ * workflow's final snapshot after the run settles.
+ *
+ * @remarks
+ * A plain `ToolManagerInterface`-compatible tool (`@orkestrel/tool`), reproducing
+ * `@orkestrel/workflow`'s former call contract exactly (flat / draft / full authoring forms, the
+ * strict soundness gate, the depth/cycle guard). It is ALSO the propagation carrier
+ * {@link createAgentFunction} binds onto a wrapped agent's `context.tools`: because a tool
+ * handler receives ONLY the model-supplied `args` (no ambient context, no signal), the run's
+ * depth + ancestry are CLOSED OVER at bind time via {@link import('./types.js').WorkflowToolOptions},
+ * and the handler enforces the SAME depth / cycle guard itself before running the nested
+ * workflow at `depth + 1` with the extended ancestry.
+ *
+ * **Widened authoring surface (additive — the canonical contract + runner stay STRICT and
+ * unchanged).** A 2B model reliably CALLS the tool but cannot reliably emit the full four-level
+ * nested {@link WorkflowDefinition} (six required `id`/`name` strings, an all-or-nothing tree).
+ * So the tool ACCEPTS three authoring forms and converges them on the SAME strict
+ * `createWorkflowContract` gate before running (soundness preserved):
+ * - the FLAT shape `{ name?, steps: [{ name }] }` — the ADVERTISED `parameters` (the simplest
+ *   form, {@link import('./helpers.js').expandSteps}'d into one one-task phase per step);
+ * - a nested DRAFT with any `id`/`name` OMITTED — {@link createWorkflowDraftContract}-parsed then
+ *   {@link import('./helpers.js').completeDraft}'d (missing ids synthesized positionally);
+ * - the full nested {@link WorkflowDefinition} — the advanced escape-hatch, accepted as the draft
+ *   super-set.
+ *
+ * The universal tool-handler contract (AGENTS §14): returns the plain run summary
+ * (`{ status, count }`) on success, THROWS a typed `WorkflowError` (`@orkestrel/workflow`) on
+ * every failure path — malformed authored args (`TOOL`), or an over-deep / cyclic nested run
+ * (`DEPTH`). The `ToolManagerInterface` isolates every throw into the canonical tool result's
+ * top-level `error`, so nothing escapes the run. `options.depth` / `options.ancestry` are the
+ * propagation carrier across a workflow → agent → workflow chain; `options.store` is this
+ * package's ADDITION — the persisted snapshot is retrievable via the store afterwards (a caller
+ * restores it through `@orkestrel/workflow`'s own `Workflow.restore` / store-backed factories).
+ *
+ * @param definition - The workflow the tool runs when called with no authored args
+ * @param runner - The `WorkflowRunnerInterface` (`@orkestrel/workflow`) that executes the (nested) workflow
+ * @param options - Depth/ancestry bookkeeping plus the optional durable store (see {@link import('./types.js').WorkflowToolOptions})
+ * @returns A `ToolInterface` (named {@link import('./constants.js').WORKFLOW_TOOL_NAME}) whose
+ *   `parameters` advertise the flat authoring schema
+ *
+ * @example
+ * ```ts
+ * import { createWorkflowTool } from '@src/core'
+ * import { createWorkflowRunner, createMemoryWorkflowStore } from '@orkestrel/workflow'
+ * import { createToolManager } from '@orkestrel/tool'
+ *
+ * const runner = createWorkflowRunner()
+ * const store = createMemoryWorkflowStore()
+ * const tool = createWorkflowTool(definition, runner, { store })
+ * const tools = createToolManager()
+ * tools.add(tool) // authored runs are now persisted to `store` on settle
+ * ```
+ */
+export declare function createWorkflowTool(definition: WorkflowDefinition, runner: WorkflowRunnerInterface, options?: WorkflowToolOptions): ToolInterface;
+
+/**
+ * Build an LLM-callable workspace-editing tool — it ADVERTISES the `operation`-discriminated
+ * 13-op union ({@link import('./shapers.js').workspaceToolShape}) as its `parameters`, and its
+ * handler PARSES the model-supplied args against that contract and DISPATCHES the matched
+ * operation against the manager's ACTIVE workspace (the registry ops drive the manager itself),
+ * returning the plain result (throwing a typed `WorkspaceError`, `@orkestrel/agent`, on
+ * failure). EITHER drives a caller-supplied {@link WorkspaceToolOptions.manager} directly, OR
+ * constructs a fresh `WorkspaceManagerInterface` (`@orkestrel/agent`) over
+ * {@link import('./types.js').WorkspaceToolOptions.store} (via `@orkestrel/agent`'s
+ * `createWorkspaceManager`); neither given constructs a manager backed by `@orkestrel/agent`'s
+ * in-memory store default.
+ *
+ * @remarks
+ * MANAGER-DRIVEN: every edit / read op (read / list / has / search / replace / write / splice /
+ * prepend / append / move / remove) targets `manager.active`, so the model edits whichever
+ * workspace is active and a host can re-point it (`WorkspaceManagerInterface.switch`) between
+ * turns. Two REGISTRY ops make the model self-sufficient: `workspaces` LISTS the registered
+ * workspaces (each `{ id, files, active }`) so it can discover an id, and `switch` re-points the
+ * active workspace by id (lenient — an unknown id is a no-op reporting `switched: false`, never a
+ * throw).
+ *
+ * NO-ACTIVE RULE (the ergonomic seam): a WRITING op (write / splice / prepend / append / move /
+ * remove / replace) run when `manager.active` is `undefined` AUTO-CREATES + activates a default
+ * workspace (`manager.add()`) so the model can just start writing; a pure-READ op (read / list /
+ * has / search) against no active workspace returns the EMPTY result (`undefined` / `[]` /
+ * `false`), never creating one and never throwing.
+ *
+ * The handler conforms to the universal tool-handler contract (AGENTS §14): it `contract.parse`s
+ * the args, THROWS a `TOOL` `WorkspaceError` when no operation arm matched (a malformed / unknown
+ * operation), else `switch`es on `op.operation` and RETURNS the plain result — letting a
+ * `WorkspaceError` raised by the live workspace (`MODALITY` / `PATTERN` / `RANGE`) PROPAGATE
+ * uncaught. The range edit is the FLAT `'splice'` op: its four flat caret integers are
+ * reassembled into a `Range` (`@orkestrel/agent`) by `rangeOf` and fed to the workspace's ranged
+ * `write`.
+ *
+ * @param options - `manager` (drive directly) OR `store` (build a manager over it); neither ⇒
+ *   an in-memory-backed manager (see {@link import('./types.js').WorkspaceToolOptions})
+ * @returns A `ToolInterface` (named {@link import('./constants.js').WORKSPACE_TOOL_NAME} by default)
+ *
+ * @example
+ * ```ts
+ * import { createWorkspaceTool } from '@src/core'
+ * import { createToolManager } from '@orkestrel/tool'
+ *
+ * const tool = createWorkspaceTool() // in-memory workspace, no persistence
+ * const tools = createToolManager()
+ * tools.add(tool)
+ * ```
+ */
+export declare function createWorkspaceTool(options?: WorkspaceToolOptions): ToolInterface;
+
+/**
+ * Normalize the database tool's parsed SERIALIZED criteria into a live `@orkestrel/database`
+ * {@link Criteria} — default each condition's OMITTED `connector` to `'and'`.
+ *
+ * @remarks
+ * The wire form ({@link import('./shapers.js').databaseToolShape}) lets a caller drop `connector`
+ * on the last condition (it has nothing to join FORWARD to); the compiled `Condition` a live
+ * `@orkestrel/database` table call accepts always carries one, so this fills the gap. `order` /
+ * `limit` / `offset` pass through unchanged. Pure and total.
+ *
+ * @param criteria - The parsed criteria (or `undefined`)
+ * @returns The equivalent live `Criteria`, or `undefined` when `criteria` is `undefined`
+ */
+export declare function criteriaOf(criteria: Readonly<{
+    conditions?: readonly Readonly<{
+        column: string;
+        operator: Condition['operator'];
+        values: readonly unknown[];
+        connector?: Connector;
+    }>[];
+    order?: readonly Readonly<{
+        column: string;
+        direction: Direction;
+    }>[];
+    limit?: number;
+    offset?: number;
+}> | undefined): Criteria | undefined;
+
+/** The SERIALIZED criteria form — conditions, order, and pagination. */
+export declare const criteriaShape: ObjectShape<{
+    conditions: OptionalShape<ArrayShape<ObjectShape<{
+        column: StringShape;
+        operator: LiteralShape<readonly ["equals", "not", "above", "below", "from", "to", "between", "like", "glob", "starts", "ends", "any", "none", "absent", "present"]>;
+        values: ArrayShape<JSONShape>;
+        connector: OptionalShape<LiteralShape<readonly ["and", "or"]>>;
+    }, false>>>;
+    order: OptionalShape<ArrayShape<ObjectShape<{
+        column: StringShape;
+        direction: LiteralShape<readonly ["ascending", "descending"]>;
+    }, false>>>;
+    limit: OptionalShape<NumberShape>;
+    offset: OptionalShape<NumberShape>;
+}, false>;
+
+/**
+ * The DESCRIPTION the upcoming database tool will advertise — a multi-line guide that teaches a
+ * small model the operation list, the SERIALIZED criteria form, and the {@link import('./types.js').TableSpec}
+ * column DSL.
+ *
+ * @remarks
+ * The criteria form is deliberately SERIALIZED (never fluent) — every condition is a flat object
+ * `{ column, operator, values, connector? }` where `values` is ALWAYS an array, even for a
+ * single-value operator (`{ column: 'age', operator: 'from', values: [18] }`), so a small model
+ * never has to chain method calls or guess whether a value is scalar or a list.
+ */
+export declare const DATABASE_TOOL_DESCRIPTION: string;
+
+/** The default cap on rows a `records` / `remove` call returns (or acts on) when the caller omits `criteria.limit` — the upcoming database tool's default row ceiling. */
+export declare const DATABASE_TOOL_LIMIT = 1000;
+
+/** The database tool's mutating operations — disabled by `DatabaseToolOptions.readonly`. */
+export declare const DATABASE_TOOL_MUTATIONS: Set<string>;
+
+/**
+ * The name the upcoming `createDatabaseTool` factory will advertise by default — the key a model
+ * calls and the `ToolManagerInterface` (`@orkestrel/tool`) registers under.
+ *
+ * @remarks
+ * SRC-1 of a 3-unit spine: this unit lands the persistence + schema foundation
+ * ({@link import('./types.js').DatabaseDefinition}, {@link import('./types.js').DefinitionStoreInterface},
+ * {@link import('./helpers.js').expandTables}); `createDatabaseTool` itself is built in a later unit.
+ */
+export declare const DATABASE_TOOL_NAME = "database";
+
+/**
+ * The lean {@link import('@orkestrel/tool').ToolInterface.summary} the upcoming database tool
+ * will advertise in place of {@link DATABASE_TOOL_DESCRIPTION}.
+ */
+export declare const DATABASE_TOOL_SUMMARY = "Create and query a database \u2014 one operation per call (create, tables, get, records, count, aggregate, add, set, update, remove, migrate, destroy), chosen by the 'operation' field. Call describe('database') for the full operation list, the criteria form, and the column DSL.";
+
+/**
+ * One database's CONFIG-ONLY definition — `id` + `driver` + {@link TableSpec} (+ optional `keys`),
+ * the pure-JSON blueprint the upcoming database / relation tools build a live database from.
+ *
+ * @remarks
+ * A `DatabaseDefinition` is NEVER a live handle — it is the durable, serializable config a
+ * {@link DefinitionStoreInterface} persists and a tool factory turns into a real
+ * `@orkestrel/database` `DatabaseInterface` (via `createDatabase` + {@link import('./helpers.js').expandTables})
+ * on demand. `keys`, when present, maps a table name to its primary-key column (omitted ⇒ the
+ * driver's default primary key).
+ */
+export declare interface DatabaseDefinition {
+    readonly id: string;
+    readonly driver: string;
+    readonly tables: TableSpec;
+    readonly keys?: Readonly<Record<string, string>>;
+}
+
+/** One opaque persisted row — the shape a `TableInterface<DatabaseDefinitionRow>`-backed store reads/writes; `definition` is narrowed with {@link import('./helpers.js').isDatabaseDefinition} on read. */
+export declare interface DatabaseDefinitionRow {
+    readonly id: string;
+    readonly definition: unknown;
+}
+
+/**
+ * A {@link DefinitionStoreInterface} backed by one table of the `@orkestrel/database` layer — a
+ * database's durable CONFIG state IS a row, so persistence reduces to keyed point-access
+ * (`get` / `set` / `delete`) over a {@link TableInterface}, the driver-pluggable twin of the
+ * plain-`Map` {@link import('./MemoryDefinitionStore.js').MemoryDefinitionStore}.
+ *
+ * @remarks
+ * The store is driver-agnostic: it holds a single {@link TableInterface} whose backend (memory,
+ * JSON, SQLite, IndexedDB) is chosen by whoever builds it (the factories), so a JSON / SQLite /
+ * IndexedDB backend swaps in WITHOUT touching a consumer — the same seam as
+ * {@link import('./MemoryDefinitionStore.js').MemoryDefinitionStore}. The driver defaults to
+ * memory ({@link import('../factories.js').createDatabaseDefinitionStore} passes
+ * `createMemoryDriver()`), so it ALSO works in memory out of the box; you opt into the durable
+ * plumbing by passing a JSON / SQLite / IndexedDB driver.
+ *
+ * The {@link DatabaseDefinition} is stored as ONE OPAQUE JSON COLUMN — the table is a row of
+ * `{ id; definition }` ({@link DatabaseDefinitionRow}). The definition is already a COMPLETE,
+ * self-contained, pure-JSON CONFIG payload (never a live handle), so storing it whole is lossless
+ * AND keeps the row type flat (`definition` reads back as `unknown`).
+ *
+ * - **`set(definition)` upserts under the definition's OWN `id`** (no separate id param) — it
+ *   writes the row `{ id: definition.id, definition }`.
+ * - **`get(id)` resolves the stored definition for an id**, narrowing the opaque JSON column back
+ *   to a {@link DatabaseDefinition} ({@link import('../helpers.js').isDatabaseDefinition} — the
+ *   AGENTS §14 boundary narrow for an untrusted storage read), or `undefined` if none is stored
+ *   or the stored blob is malformed.
+ * - **`delete(id)` drops a definition by id**; an absent id is a no-op (no throw).
+ *
+ * The public surface is EXACTLY `get` / `set` / `delete` — no extra members (the §22 method
+ * bijection with {@link DefinitionStoreInterface}).
+ *
+ * @example
+ * ```ts
+ * import { createDatabaseDefinitionStore, createMemoryDriver } from '@src/core'
+ *
+ * const store = createDatabaseDefinitionStore(createMemoryDriver()) // a durable driver swaps in here
+ * await store.set({ id: 'shop', driver: 'memory', tables: {} }) // persist the config (one JSON column)
+ * const definition = await store.get('shop')
+ * await store.delete('shop')
+ * ```
+ */
+export declare class DatabaseDefinitionStore implements DefinitionStoreInterface {
+    #private;
+    /**
+     * Wrap a table as a definition store.
+     *
+     * @param table - The {@link TableInterface} holding the definitions — its row is the
+     *   {@link DatabaseDefinitionRow} `{ id; definition }` shape (the definition one opaque JSON column)
+     */
+    constructor(table: TableInterface<DatabaseDefinitionRow>);
+    /** Resolve the persisted definition for `id`, narrowing the opaque JSON column back to a `DatabaseDefinition`. */
+    get(id: string): Promise<DatabaseDefinition | undefined>;
+    /** Insert or replace under the definition's OWN `id` (no separate id param) — the row is `{ id, definition }`. */
+    set(definition: DatabaseDefinition): Promise<void>;
+    /** Drop a definition by id; an absent id is a no-op (no throw). */
+    delete(id: string): Promise<void>;
+}
+
+/**
+ * Resolve database definitions into cached live handles for database tools.
+ *
+ * @example
+ * ```ts
+ * import { DatabaseResolver } from '@orkestrel/toolbox'
+ *
+ * const resolver = new DatabaseResolver(handles, drivers, key, store)
+ * const database = await resolver.resolve('shop')
+ * ```
+ */
+export declare class DatabaseResolver {
+    #private;
+    /**
+     * Create a database resolver over the tool's live state and optional definition store.
+     *
+     * @param handles - Initial live database handles cached by id
+     * @param drivers - Driver factories keyed by definition driver name
+     * @param key - Key generator supplied to newly created databases
+     * @param store - Optional persistent definition store
+     */
+    constructor(handles: ReadonlyMap<string, DatabaseInterface>, drivers: Readonly<Record<string, () => DriverInterface>>, key: KeyFunction, store?: DefinitionStoreInterface);
+    /**
+     * Determine whether a live database is cached by id.
+     *
+     * @param id - Database id
+     * @returns Whether a live handle is cached
+     */
+    has(id: string): boolean;
+    /**
+     * Read a cached database without consulting the definition store.
+     *
+     * @param id - Database id
+     * @returns The cached live database, or `undefined`
+     */
+    get(id: string): DatabaseInterface | undefined;
+    /**
+     * Cache a live database by id.
+     *
+     * @param id - Database id
+     * @param database - Live database handle
+     * @returns Nothing
+     */
+    set(id: string, database: DatabaseInterface): void;
+    /**
+     * Remove a cached live database by id.
+     *
+     * @param id - Database id
+     * @returns Nothing
+     */
+    delete(id: string): void;
+    /**
+     * Resolve a cached or stored database by id.
+     *
+     * @param id - Database definition id
+     * @returns The cached or newly constructed live database
+     */
+    resolve(id: string): Promise<DatabaseInterface>;
+}
+
+/**
+ * Map a caught error to the {@link ToolboxErrorCode} the upcoming database tool should throw
+ * with — the pure classification step of that factory's error handling, mirroring
+ * {@link terminalToolCode}'s idiom for `@orkestrel/database`.
+ *
+ * @param error - The value caught from a `@orkestrel/database` table operation
+ * @returns The granular {@link DatabaseErrorCode}, or `undefined` if `error` is not a `DatabaseError`
+ */
+export declare function databaseToolCode(error: unknown): DatabaseErrorCode | undefined;
+
+/**
+ * Options for {@link import('./factories.js').createDatabaseTool} — SRC-2 of the 3-unit database
+ * / relation spine, built over the SRC-1 foundation ({@link DatabaseDefinition},
+ * {@link DefinitionStoreInterface}, {@link import('./helpers.js').expandTables}).
+ *
+ * @remarks
+ * - `databases` — live `DatabaseInterface` handles to seed the tool's cache with (e.g. a
+ *   caller-constructed database it should manage alongside store-backed ones); keyed by the id a
+ *   call's `id` field addresses.
+ * - `store` — the {@link DefinitionStoreInterface} the `'create'` / `'migrate'` operations persist
+ *   their {@link DatabaseDefinition} CONFIG through, and `'destroy'` deletes from; also the source
+ *   `'get'`/every other operation resolves an id from when it isn't already cached. Omitted means
+ *   no persistence — a database created without a store lives only for the tool's lifetime.
+ * - `drivers` — registry of driver-name to `() => DriverInterface` factories a `'create'` call's
+ *   `driver` field (or a persisted definition's `driver`) resolves against. Defaults to
+ *   `{ memory: () => createMemoryDriver() }` (`@orkestrel/database`).
+ * - `key` — the `KeyFunction` (`@orkestrel/database`) every minted database is constructed with,
+ *   used when a written row lacks its primary key. Defaults to `generateUUID`.
+ * - `limit` — the row cap `'records'` / `'remove'` — via {@link import('./helpers.js').clampCriteria}
+ *   — enforce when a call's `criteria.limit` is omitted or exceeds it. Defaults to
+ *   {@link import('./constants.js').DATABASE_TOOL_LIMIT}.
+ * - `timeout` — milliseconds; when set, every `@orkestrel/database` call this tool makes is given
+ *   a fresh `AbortSignal.timeout(timeout)` per tool call.
+ * - `readonly` — when `true`, every mutating operation (`'create'` / `'add'` / `'set'` /
+ *   `'update'` / `'remove'` / `'migrate'` / `'destroy'`) throws a typed `TOOL`
+ *   {@link import('./errors.js').ToolboxError} before doing anything.
+ * - `name` / `description` — advertised tool overrides; default to
+ *   {@link import('./constants.js').DATABASE_TOOL_NAME} / {@link import('./constants.js').DATABASE_TOOL_DESCRIPTION}.
+ */
+export declare interface DatabaseToolOptions {
+    readonly name?: string;
+    readonly description?: string;
+    readonly databases?: Readonly<Record<string, DatabaseInterface>>;
+    readonly store?: DefinitionStoreInterface;
+    readonly drivers?: Readonly<Record<string, () => DriverInterface>>;
+    readonly key?: KeyFunction;
+    readonly limit?: number;
+    readonly timeout?: number;
+    readonly readonly?: boolean;
+}
+
+/**
+ * The shape of {@link import('./factories.js').createDatabaseTool}'s call arguments —
+ * discriminated by `operation` into the 12 database operations (`'create'` / `'tables'` /
+ * `'get'` / `'records'` / `'count'` / `'aggregate'` / `'add'` / `'set'` / `'update'` /
+ * `'remove'` / `'migrate'` / `'destroy'`).
+ *
+ * @remarks
+ * Every arm carries `id` (the database id). `'create'` / `'migrate'` carry `tables` (the
+ * {@link import('./types.js').TableSpec} column DSL, compiled via
+ * {@link import('./helpers.js').expandTables}); `'get'` / `'update'` / `'remove'` carry `key`
+ * (one key or an array of keys, positional); `'add'` / `'set'` carry `row` (one row or an array of
+ * rows); `'update'` also carries `changes` (a loose partial row); `'records'` / `'count'` /
+ * `'aggregate'` carry an optional `criteria` (the SERIALIZED form — `values` is ALWAYS an array,
+ * even for a single-value operator, so a caller never chains method calls or guesses arity).
+ */
+export declare const databaseToolShape: UnionShape<readonly [ ObjectShape<{
+    operation: LiteralShape<readonly ["create"]>;
+    id: StringShape;
+    tables: ObjectShape<Record<never, never>, ObjectShape<{
+        columns: ObjectShape<Record<never, never>, UnionShape<readonly [ LiteralShape<readonly ["string", "integer", "number", "boolean"]>, ObjectShape<{
+            type: LiteralShape<readonly ["string", "integer", "number", "boolean"]>;
+            optional: OptionalShape<BooleanShape>;
+        }, false>]>>;
+    }, false>>;
+    driver: OptionalShape<StringShape>;
+    keys: OptionalShape<ObjectShape<Record<never, never>, StringShape>>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["tables"]>;
+    id: StringShape;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["get"]>;
+    id: StringShape;
+    table: StringShape;
+    key: UnionShape<readonly [ ArrayShape<UnionShape<readonly [ StringShape, NumberShape]>>, StringShape, NumberShape]>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["records"]>;
+    id: StringShape;
+    table: StringShape;
+    criteria: OptionalShape<ObjectShape<{
+        conditions: OptionalShape<ArrayShape<ObjectShape<{
+            column: StringShape;
+            operator: LiteralShape<readonly ["equals", "not", "above", "below", "from", "to", "between", "like", "glob", "starts", "ends", "any", "none", "absent", "present"]>;
+            values: ArrayShape<JSONShape>;
+            connector: OptionalShape<LiteralShape<readonly ["and", "or"]>>;
+        }, false>>>;
+        order: OptionalShape<ArrayShape<ObjectShape<{
+            column: StringShape;
+            direction: LiteralShape<readonly ["ascending", "descending"]>;
+        }, false>>>;
+        limit: OptionalShape<NumberShape>;
+        offset: OptionalShape<NumberShape>;
+    }, false>>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["count"]>;
+    id: StringShape;
+    table: StringShape;
+    criteria: OptionalShape<ObjectShape<{
+        conditions: OptionalShape<ArrayShape<ObjectShape<{
+            column: StringShape;
+            operator: LiteralShape<readonly ["equals", "not", "above", "below", "from", "to", "between", "like", "glob", "starts", "ends", "any", "none", "absent", "present"]>;
+            values: ArrayShape<JSONShape>;
+            connector: OptionalShape<LiteralShape<readonly ["and", "or"]>>;
+        }, false>>>;
+        order: OptionalShape<ArrayShape<ObjectShape<{
+            column: StringShape;
+            direction: LiteralShape<readonly ["ascending", "descending"]>;
+        }, false>>>;
+        limit: OptionalShape<NumberShape>;
+        offset: OptionalShape<NumberShape>;
+    }, false>>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["aggregate"]>;
+    id: StringShape;
+    table: StringShape;
+    function: LiteralShape<readonly ["count", "sum", "average", "minimum", "maximum"]>;
+    column: StringShape;
+    criteria: OptionalShape<ObjectShape<{
+        conditions: OptionalShape<ArrayShape<ObjectShape<{
+            column: StringShape;
+            operator: LiteralShape<readonly ["equals", "not", "above", "below", "from", "to", "between", "like", "glob", "starts", "ends", "any", "none", "absent", "present"]>;
+            values: ArrayShape<JSONShape>;
+            connector: OptionalShape<LiteralShape<readonly ["and", "or"]>>;
+        }, false>>>;
+        order: OptionalShape<ArrayShape<ObjectShape<{
+            column: StringShape;
+            direction: LiteralShape<readonly ["ascending", "descending"]>;
+        }, false>>>;
+        limit: OptionalShape<NumberShape>;
+        offset: OptionalShape<NumberShape>;
+    }, false>>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["add"]>;
+    id: StringShape;
+    table: StringShape;
+    row: UnionShape<readonly [ ArrayShape<ObjectShape<Record<never, never>, JSONShape>>, ObjectShape<Record<never, never>, JSONShape>]>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["set"]>;
+    id: StringShape;
+    table: StringShape;
+    row: UnionShape<readonly [ ArrayShape<ObjectShape<Record<never, never>, JSONShape>>, ObjectShape<Record<never, never>, JSONShape>]>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["update"]>;
+    id: StringShape;
+    table: StringShape;
+    key: UnionShape<readonly [ ArrayShape<UnionShape<readonly [ StringShape, NumberShape]>>, StringShape, NumberShape]>;
+    changes: ObjectShape<Record<never, never>, JSONShape>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["remove"]>;
+    id: StringShape;
+    table: StringShape;
+    key: UnionShape<readonly [ ArrayShape<UnionShape<readonly [ StringShape, NumberShape]>>, StringShape, NumberShape]>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["migrate"]>;
+    id: StringShape;
+    tables: ObjectShape<Record<never, never>, ObjectShape<{
+        columns: ObjectShape<Record<never, never>, UnionShape<readonly [ LiteralShape<readonly ["string", "integer", "number", "boolean"]>, ObjectShape<{
+            type: LiteralShape<readonly ["string", "integer", "number", "boolean"]>;
+            optional: OptionalShape<BooleanShape>;
+        }, false>]>>;
+    }, false>>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["destroy"]>;
+    id: StringShape;
+}, false>]>;
+
+/**
+ * The point-access persistence seam (AGENTS §5 — Stores) for {@link DatabaseDefinition} configs —
+ * the twin of `@orkestrel/terminal`'s `TerminalStoreInterface`, storing a database's CONFIG-ONLY
+ * blueprint (never a live handle). Every primitive is async; `delete` of an absent id is a no-op.
+ */
+export declare interface DefinitionStoreInterface {
+    get(id: string): Promise<DatabaseDefinition | undefined>;
+    set(definition: DatabaseDefinition): Promise<void>;
+    delete(id: string): Promise<void>;
+}
+
+/**
+ * The DESCRIPTION {@link import('./factories.js').createDescribeTool} advertises.
+ *
+ * @remarks
+ * Deliberately short — unlike the workflow / workspace / agent tools, this one has no authoring
+ * schema or multi-step protocol to teach.
+ */
+export declare const DESCRIBE_TOOL_DESCRIPTION = "Return the full description of a registered tool by its name. Required: name - the registered tool name (see another tool listing for available names).";
+
+/**
+ * The name {@link import('./factories.js').createDescribeTool} advertises by default — the key a
+ * model calls and the `ToolManagerInterface` (`@orkestrel/tool`) registers under.
+ *
+ * @remarks
+ * Net-new: pairs with the other three tools' lean {@link AGENT_TOOL_SUMMARY} /
+ * {@link WORKFLOW_TOOL_SUMMARY} / {@link WORKSPACE_TOOL_SUMMARY} — a model that reads only the
+ * advertised summary can call `describe` with that tool's registered name to get its full
+ * teaching description back.
+ */
+export declare const DESCRIBE_TOOL_NAME = "describe";
+
+/**
+ * The lean {@link import('@orkestrel/tool').ToolInterface.summary} {@link import('./factories.js').createDescribeTool}
+ * advertises — this tool needs no teaching of its own, so its summary and description are both
+ * short.
+ */
+export declare const DESCRIBE_TOOL_SUMMARY = "Return the full description of a named registered tool.";
+
+/**
+ * The FLAT args {@link import('./factories.js').createDescribeTool} accepts — the registered
+ * tool `name` whose full `description` a model wants back.
+ *
+ * @remarks
+ * `name` must match a tool registered on the {@link import('@orkestrel/tool').ToolManagerInterface}
+ * the describe tool was built over — it is looked up via `tools.tool(name)`.
+ */
+export declare interface DescribeToolArguments {
+    readonly name: string;
+}
+
+/**
+ * The shape of {@link import('./types.js').DescribeToolArguments} —
+ * {@link import('./factories.js').createDescribeTool}'s advertised `parameters`.
+ *
+ * @remarks
+ * `name` is the only field (a non-empty string) — the registered tool name to look up.
+ */
+export declare const describeToolShape: ObjectShape<{
+    name: StringShape;
+}, false>;
+
+/**
+ * One concrete endpoint {@link import('./factories.js').createEndpointTool} wraps as an
+ * LLM-callable `ToolInterface` — the advertised identity, a non-empty set of example values its
+ * `parameters` are inferred from, and the local handler that runs a call.
+ *
+ * @remarks
+ * `samples` MUST be non-empty — {@link import('./factories.js').createEndpointTool} throws a
+ * typed `TOOL` {@link import('./errors.js').ToolboxError} at CONSTRUCTION when it is empty,
+ * since an empty sample set cannot infer a schema. By DEFAULT ({@link EndpointToolOptions.validate}
+ * `true`) `invoke` receives the PARSED, NORMALIZED args record — a copy of the model-supplied
+ * `args` with each scalar coerced to its inferred type (e.g. a number sent for a string slot
+ * arrives coerced to a string), checked against the same schema advertised as `parameters` — and
+ * a call with a missing required key or a non-coercible value never reaches `invoke` at all (see
+ * {@link EndpointToolOptions.validate}). With
+ * `validate: false`, `invoke` receives the model-supplied `args` VERBATIM (raw passthrough, never
+ * checked against the inferred schema). Either way `invoke`'s return flows back as the tool
+ * call's result; a throw PROPAGATES uncaught, isolated by the `ToolManagerInterface`
+ * (`@orkestrel/tool`) into the canonical error envelope. When `samples` are non-object values,
+ * the advertised schema wraps them under a single required `value` property, so `invoke` receives
+ * an `args` record of the shape `{ value: ... }` — never the bare value.
+ */
+export declare interface EndpointDefinition {
+    readonly name: string;
+    readonly description: string;
+    readonly samples: readonly unknown[];
+    readonly invoke: EndpointHandler;
+}
+
+/**
+ * The handler {@link import('./types.js').EndpointDefinition.invoke} implements — mirrors
+ * `@orkestrel/tool`'s `ToolOptions.execute` signature EXACTLY (same `Readonly<Record<string,
+ * unknown>>` argument, same `Promise<unknown> | unknown` return) so
+ * `execute: (args) => definition.invoke(args)` typechecks with zero assertions in
+ * {@link import('./factories.js').createEndpointTool}.
+ */
+export declare type EndpointHandler = (args: Readonly<Record<string, unknown>>) => Promise<unknown> | unknown;
+
+/**
+ * Construction-time tuning for {@link import('./factories.js').createEndpointTool} — the
+ * inferred `parameters` schema's `format` / `enum` constraints, and whether that same schema is
+ * ENFORCED at `execute` time.
+ *
+ * @remarks
+ * `format` / `enum` default to `false`, matching `@orkestrel/contract`'s own
+ * `ValueToSchemaOptions` defaults. `validate` defaults to `true`: the schema
+ * `createEndpointTool` advertises as `parameters` (`samplesToSchema` + `schemaToObject`) is
+ * compiled ONCE at construction (via `@orkestrel/contract` 0.0.7's `schemaToShape`) into a
+ * `ContractInterface` used to `parse` every call's `args` before `invoke` runs — a NORMALIZING
+ * parse: a scalar value is COERCED to its inferred type where the house parsers coerce (a number
+ * to/from a numeric string, a boolean from `'1'`/`'0'`/`'true'`/`'false'`/`1`/`0`), so `invoke`
+ * receives the COERCED values (e.g. `7` sent for a string slot arrives at `invoke` as `'7'`), not
+ * the raw call args. A call whose `args` fails to parse — a required key missing, or a value not
+ * coercible to its slot's type — THROWS a typed `TOOL` {@link import('./errors.js').ToolboxError}
+ * carrying the structured `explain` faults, and `invoke` is never called. Beyond that coercion,
+ * enforcement is STRUCTURAL — required keys, `enum` membership, and numeric bounds — `format`
+ * annotations (`email`, `date-time`, `uuid`, `uri`, ...) are NEVER asserted, mirroring
+ * `@orkestrel/contract`'s own widening-only law for `schemaToShape`: a `format: true`-tuned
+ * endpoint still ACCEPTS a non-conforming string in a format-tagged slot. A key NOT present in
+ * the inferred (closed, `additionalProperties: false`) schema is NEVER a rejection either — it is
+ * SILENTLY DROPPED before `invoke` runs (the same leniency `@orkestrel/contract`'s own `parse`
+ * grants a closed object generally), so `invoke` may see fewer keys than the caller sent. Set
+ * `validate: false` to restore the PRE-0.0.7 behavior exactly — `execute` passes the
+ * model-supplied `args` straight to `invoke` UNCHANGED, unchecked and unstripped.
+ */
+export declare interface EndpointToolOptions {
+    readonly format?: boolean;
+    readonly enum?: boolean;
+    readonly validate?: boolean;
+}
+
+/**
+ * Expand the relation tool's FLAT dot-path `include` list into a live `@orkestrel/relation`
+ * {@link Include} tree — the pure leaf {@link import('./factories.js').createRelationTool} calls
+ * before a `'load'` / `'find'` call.
+ *
+ * @remarks
+ * Each path splits on `'.'` into a chain of relation names, deep-merged into one nested
+ * `Include` object with a leaf `true`. A longer path SUBSUMES a shorter sibling's bare `true` —
+ * `'contacts'` followed by `'contacts.account'` yields `{ contacts: { account: true } }`, never
+ * overwriting the deeper chain. An EMPTY segment (`''`, from a leading/trailing/doubled `.`) or a
+ * path whose segment count exceeds `depth` throws a typed `TOOL` {@link ToolboxError}.
+ *
+ * @param paths - The flat dot-path `include` list (or `undefined` — yields `{}`)
+ * @param depth - The max segment count a single path may reach
+ * @returns The equivalent nested {@link Include}
+ *
+ * @example
+ * ```ts
+ * import { expandInclude } from '@src/core'
+ *
+ * expandInclude(['contacts', 'contacts.account'], 3)
+ * // { contacts: { account: true } }
+ * ```
+ */
+export declare function expandInclude(paths: readonly string[] | undefined, depth: number): Include;
+
+/**
+ * Expand a flat {@link WorkflowSteps} blob into a strict {@link WorkflowDefinition} — each step
+ * becomes a one-task phase, IN ORDER.
+ *
+ * @remarks
+ * The expansion of the tool's ADVERTISED surface: the deliberately-reduced flat form. Each
+ * {@link import('./types.js').WorkflowStep} maps to a phase holding exactly one task: the step's
+ * `name` becomes the task's `run` (the behavior-registry key). Ids/names are auto-filled
+ * positionally — it builds an ids-omitted {@link WorkflowDraft} and delegates to
+ * {@link completeDraft}, so the two lenient surfaces share ONE synthesis path (step `i` → phase
+ * `phase-<i>`, its task `phase-<i>-task-0`). The optional `name` becomes the workflow's `name`.
+ * The result is a complete definition the caller validates against the STRICT contract before
+ * running.
+ *
+ * @param flat - The flat steps blob (`{ name?, steps: [{ name }] }`)
+ * @returns A complete {@link WorkflowDefinition} (one one-task phase per step)
+ */
+export declare function expandSteps(flat: WorkflowSteps): WorkflowDefinition;
+
+/**
+ * Compile a {@link TableSpec} into the `@orkestrel/database` {@link TablesShape} it configures —
+ * each {@link ColumnSpec} maps to the matching primitive shaper (`'string'` → `stringShape()`,
+ * `'integer'` → `integerShape()`, `'number'` → `numberShape()`, `'boolean'` → `booleanShape()`),
+ * wrapped in `optionalShape` when the column declares `optional: true`. Total, pure.
+ *
+ * @param spec - The small-model-facing table layout
+ * @returns The compiled `TablesShape` a `@orkestrel/database` `createDatabase` call accepts
+ */
+export declare function expandTables(spec: TableSpec): TablesShape;
+
+/** Flat dot-path relation include list, expanded via {@link import('./helpers.js').expandInclude}. */
+export declare const includeShape: OptionalShape<ArrayShape<StringShape>>;
+
+export declare const INFER_TOOL_DESCRIPTION: string;
+
+/**
+ * The name {@link import('./factories.js').createInferTool} advertises by default — the key a
+ * model calls and the `ToolManagerInterface` (`@orkestrel/tool`) registers under.
+ */
+export declare const INFER_TOOL_NAME = "infer";
+
+/**
+ * The lean {@link import('@orkestrel/tool').ToolInterface.summary} {@link import('./factories.js').createInferTool}
+ * advertises in place of {@link INFER_TOOL_DESCRIPTION} — a `ToolManagerInterface.definitions()`
+ * (`@orkestrel/tool`) advertises `summary ?? description`, so this one-sentence text stands in
+ * for the full teaching description; the full text stays retrievable via
+ * {@link import('./factories.js').createDescribeTool}.
+ */
+export declare const INFER_TOOL_SUMMARY = "Infer a JSON Schema (as advertised tool parameters) from one or more example values. Call describe('infer') for the required fields.";
+
+/**
+ * Options for {@link import('./factories.js').createInferTool} — advertised name/description
+ * overrides only; `format` / `enum` are RUNTIME call arguments (see
+ * {@link import('./shapers.js').inferToolShape}), not construction-time options, since a model
+ * chooses them per call.
+ */
+export declare interface InferToolOptions {
+    readonly name?: string;
+    readonly description?: string;
+}
+
+/**
+ * The shape of {@link import('./factories.js').createInferTool}'s call arguments — one or more
+ * example `samples` to infer a JSON Schema from, plus per-call `format` / `enum` toggles and an
+ * optional `candidates` array to check against the inferred schema.
+ *
+ * @remarks
+ * `samples` requires at least one element (`min: 1`) — an empty array parses to `undefined`,
+ * surfaced by the handler as a typed `TOOL` {@link import('./errors.js').ToolboxError}. When
+ * `candidates` is present (any array, including empty), the handler compiles a contract from the
+ * freshly inferred schema and checks each candidate against it with a STRICT guard (`.is`, no
+ * coercion) — the opposite of {@link import('./factories.js').createEndpointTool}'s NORMALIZING
+ * `.parse` enforcement.
+ */
+export declare const inferToolShape: ObjectShape<{
+    samples: ArrayShape<JSONShape>;
+    format: OptionalShape<BooleanShape>;
+    enum: OptionalShape<BooleanShape>;
+    candidates: OptionalShape<ArrayShape<JSONShape>>;
+}, false>;
+
+/** Narrow an unknown value to a {@link import('./types.js').ColumnKind}. */
+export declare function isColumnKind(value: unknown): value is ColumnKind;
+
+/** Narrow an unknown value to a {@link ColumnSpec} — a valid {@link import('./types.js').ColumnKind} shorthand, or `{ type, optional }` with a valid `type`. */
+export declare function isColumnSpec(value: unknown): value is ColumnSpec;
+
+/**
+ * Narrow an unknown value to a {@link DatabaseDefinition} — a non-empty `id` + `driver`, a
+ * `tables` record whose every value is `{ columns: record of valid ColumnSpec }`, and an optional
+ * `keys` record of strings. The boundary guard a {@link import('./types.js').DefinitionStoreInterface}
+ * applies to an untrusted persisted blob before trusting it as a definition (never an `as`).
+ */
+export declare function isDatabaseDefinition(value: unknown): value is DatabaseDefinition;
+
+/**
+ * Type guard narrowing an unknown caught value to an {@link ToolboxError}.
+ *
+ * @param value - The value to test (typically a `catch` binding)
+ * @returns `true` when `value` is an {@link ToolboxError}
+ *
+ * @example
+ * ```ts
+ * import { isToolboxError } from '@src/core'
+ *
+ * try {
+ * 	// ...
+ * } catch (error) {
+ * 	if (isToolboxError(error)) console.log(error.code)
+ * }
+ * ```
+ */
+export declare function isToolboxError(value: unknown): value is ToolboxError;
+
+/** One key value — a string or number; the array form (multiple keys, positional) resolves FIRST per AGENTS §9.2. */
+export declare const keyShape: UnionShape<readonly [ ArrayShape<UnionShape<readonly [ StringShape, NumberShape]>>, StringShape, NumberShape]>;
+
+/** Map one {@link import('./types.js').ColumnKind} to its primitive `@orkestrel/database` shape — the leaf {@link columnShape} wraps. */
+export declare function kindShape(kind: ColumnKind): ContractShape;
+
+/** Which registered relation manager to address — omitted resolves to the sole registered manager. */
+export declare const managerShape: OptionalShape<StringShape>;
+
+/**
+ * The maximum nesting depth a workflow → agent → workflow chain may reach — the bound
+ * {@link import('./factories.js').createAgentFunction} and
+ * {@link import('./factories.js').createWorkflowTool}'s depth/cycle guards enforce.
+ *
+ * @remarks
+ * OWNED here now (ported from `@orkestrel/workflow`, whose engine no longer uses it — only the
+ * tool-authoring guards this package now owns consume it). The limit lives in ONE place: an
+ * agent-function-wrapped agent running at this depth can no longer author + run a NESTED
+ * workflow through its bound workflow tool (that would be depth `MAX_WORKFLOW_DEPTH + 1`), so
+ * the over-deep invocation is REJECTED (a typed `DEPTH` `WorkflowError` throw, `@orkestrel/workflow`).
+ */
+export declare const MAX_WORKFLOW_DEPTH = 8;
+
+/**
+ * The in-memory {@link DefinitionStoreInterface} — a process-lifetime `Map` of
+ * {@link DatabaseDefinition}s keyed by database id, the DEFAULT store
+ * {@link import('../factories.js').createMemoryDefinitionStore} builds. The EXACT twin of
+ * {@link import('./DatabaseDefinitionStore.js').DatabaseDefinitionStore}.
+ *
+ * @remarks
+ * A plain `Map<string, DatabaseDefinition>` (AGENTS §21 — the definition is already pure,
+ * self-contained CONFIG-only JSON, so no encoding is needed for the memory tier). There is NO
+ * idle-TTL and NO eviction: a persisted definition lives until an explicit `delete`. A durable
+ * backend (JSON / SQLite / IndexedDB) swaps in through the SAME interface without touching a
+ * consumer — its driver-pluggable twin is
+ * {@link import('./DatabaseDefinitionStore.js').DatabaseDefinitionStore} (the definition as one
+ * opaque JSON column).
+ *
+ * - **`get` resolves the persisted definition for an id**, or `undefined` if none is stored.
+ * - **`set` inserts / replaces under the definition's OWN `id`** (no separate id param).
+ * - **`delete` drops a definition by id**; an absent id is a no-op (no throw).
+ *
+ * The public surface is EXACTLY `get` / `set` / `delete` — no extra members (the §22 method
+ * bijection with {@link DefinitionStoreInterface}).
+ *
+ * @example
+ * ```ts
+ * import { createMemoryDefinitionStore } from '@src/core'
+ *
+ * const store = createMemoryDefinitionStore()
+ * await store.set({ id: 'shop', driver: 'memory', tables: {} })
+ * const definition = await store.get('shop')
+ * await store.delete('shop')
+ * ```
+ */
+export declare class MemoryDefinitionStore implements DefinitionStoreInterface {
+    #private;
+    get(id: string): Promise<DatabaseDefinition | undefined>;
+    set(definition: DatabaseDefinition): Promise<void>;
+    delete(id: string): Promise<void>;
+}
+
+/** One sort term. */
+export declare const orderShape: ObjectShape<{
+    column: StringShape;
+    direction: LiteralShape<readonly ["ascending", "descending"]>;
+}, false>;
+
+/** A draft phase — a `PhaseDefinition` (`@orkestrel/workflow`) with OPTIONAL `id` / `name` and {@link TaskDraft} tasks. */
+export declare interface PhaseDraft {
+    readonly id?: string;
+    readonly name?: string;
+    readonly description?: string;
+    readonly tasks: readonly TaskDraft[];
+    /** Max tasks in flight at once (a resource throttle); omitted ⇒ unbounded. */
+    readonly concurrency?: number;
+    /** The per-phase failure-policy OVERRIDE; omitted ⇒ inherits the workflow `bail`. */
+    readonly bail?: boolean;
+}
+
+/**
+ * The shape of a PHASE in a draft workflow — identical to a strict phase shape EXCEPT `id` and
+ * `name` are OPTIONAL, and its tasks are {@link taskDraftShape}s.
+ */
+export declare const phaseDraftShape: ObjectShape<{
+    id: OptionalShape<StringShape>;
+    name: OptionalShape<StringShape>;
+    description: OptionalShape<StringShape>;
+    tasks: ArrayShape<ObjectShape<{
+        id: OptionalShape<StringShape>;
+        name: OptionalShape<StringShape>;
+        description: OptionalShape<StringShape>;
+        run: OptionalShape<StringShape>;
+        retries: OptionalShape<NumberShape>;
+        timeout: OptionalShape<NumberShape>;
+    }, false>>;
+    concurrency: OptionalShape<NumberShape>;
+    bail: OptionalShape<LiteralShape<readonly [true, false]>>;
+}, false>;
+
+export declare const PROMPT_TOOL_DESCRIPTION: string;
+
+/**
+ * The name {@link import('./factories.js').createPromptTool} advertises by default — the key a
+ * model calls and the `ToolManagerInterface` (`@orkestrel/tool`) registers under.
+ */
+export declare const PROMPT_TOOL_NAME = "ask";
+
+/**
+ * The lean {@link import('@orkestrel/tool').ToolInterface.summary} {@link import('./factories.js').createPromptTool}
+ * advertises in place of {@link PROMPT_TOOL_DESCRIPTION} — a `ToolManagerInterface.definitions()`
+ * (`@orkestrel/tool`) advertises `summary ?? description`, so this one-sentence text stands in
+ * for the full teaching description; the full text stays retrievable via
+ * {@link import('./factories.js').createDescribeTool}.
+ */
+export declare const PROMPT_TOOL_SUMMARY = "Ask another terminal a question and BLOCK until it answers; the call resolves with the answered value. Call describe('ask') for the required fields.";
+
+/**
+ * Options for {@link import('./factories.js').createPromptTool} — the live
+ * {@link TerminalManagerInterface} (`@orkestrel/terminal`) to `ask` through, the terminal name
+ * `from`, and the advertised tool overrides.
+ *
+ * @remarks
+ * - `manager` — the terminal manager whose `ask(from, to, form, options)` the tool's handler
+ *   calls; BLOCKS the calling agent turn until the addressed terminal answers (or the ask
+ *   rejects — a cycle throws `TerminalError('DEADLOCK')`, re-surfaced as a typed `DEADLOCK`
+ *   {@link import('./errors.js').ToolboxError}; an expired prompt re-surfaces as `EXPIRE`).
+ * - `from` — the terminal identity this tool asks AS; the model supplies the `to` target and the
+ *   prompt form per call.
+ * - `name` / `description` — advertised tool overrides; default to
+ *   {@link import('./constants.js').PROMPT_TOOL_NAME} / {@link import('./constants.js').PROMPT_TOOL_DESCRIPTION}.
+ */
+export declare interface PromptToolOptions {
+    readonly manager: TerminalManagerInterface;
+    readonly from: string;
+    readonly name?: string;
+    readonly description?: string;
+}
+
+/**
+ * The shape of {@link import('./factories.js').createPromptTool}'s call arguments — `to` (the
+ * terminal identity to address), `form` (which of the six {@link import('@orkestrel/terminal').PromptType}
+ * forms to ask), `message`, an optional `timeout` override, and every per-form optional field
+ * FLATTENED onto one object (mirrors `workspaceToolShape`'s flat-arm style, but a single shared
+ * shape rather than a discriminated union — `form` alone does not vary the REQUIRED fields, only
+ * which of the optional ones apply, so a flat shape stays faithful without duplicating `to` /
+ * `message` / `timeout` across six near-identical arms).
+ *
+ * @remarks
+ * `choices` backs `'select'` / `'checkbox'`; `default` backs `'input'` / `'confirm'` / `'select'`
+ * (a string for the first two forms' text default, `'true'`/`'false'` string for confirm — the
+ * contract layer cannot vary a field's type by a sibling field's value, so `default` stays a
+ * string and the handler coerces per form); `mask` backs `'password'`; `min` / `max` backs
+ * `'checkbox'`; `validate` (declarative only) backs the four text-shaped forms
+ * (`'input'` / `'password'` / `'confirm'` / `'editor'`).
+ */
+export declare const promptToolShape: ObjectShape<{
+    to: StringShape;
+    form: LiteralShape<readonly ["input", "password", "confirm", "select", "checkbox", "editor"]>;
+    message: StringShape;
+    default: OptionalShape<StringShape>;
+    choices: OptionalShape<ArrayShape<ObjectShape<{
+        name: StringShape;
+        value: StringShape;
+        description: OptionalShape<StringShape>;
+    }, boolean | ContractShape>>>;
+    mask: OptionalShape<StringShape>;
+    min: OptionalShape<NumberShape>;
+    max: OptionalShape<NumberShape>;
+    validate: OptionalShape<ObjectShape<{
+        required: OptionalShape<BooleanShape>;
+        minimum: OptionalShape<NumberShape>;
+        maximum: OptionalShape<NumberShape>;
+        pattern: OptionalShape<StringShape>;
+        email: OptionalShape<BooleanShape>;
+        url: OptionalShape<BooleanShape>;
+        numeric: OptionalShape<BooleanShape>;
+        integer: OptionalShape<BooleanShape>;
+        alphanumeric: OptionalShape<BooleanShape>;
+    }, boolean | ContractShape>>;
+    timeout: OptionalShape<NumberShape>;
+}, false>;
+
+/** The default cap on how many `include` path segments deep a `load` / `find` call may traverse — the relation tool's default include-depth ceiling. */
+export declare const RELATION_TOOL_DEPTH = 3;
+
+/**
+ * The DESCRIPTION the relation tool advertises — a multi-line guide that teaches a small model
+ * the operation list and the flat dot-path `include` syntax.
+ *
+ * @remarks
+ * An include path is a FLAT dot-separated string (`'contacts.account'`), never a nested object —
+ * the same small-model ergonomic lever the other tools in this package use for flat args.
+ */
+export declare const RELATION_TOOL_DESCRIPTION: string;
+
+/** The default cap on rows a `find` / `links` call returns when the caller omits `limit` — the relation tool's default row ceiling. */
+export declare const RELATION_TOOL_LIMIT = 1000;
+
+/**
+ * The name `createRelationTool` advertises by default — the key a model calls and the
+ * `ToolManagerInterface` (`@orkestrel/tool`) registers under.
+ */
+export declare const RELATION_TOOL_NAME = "relation";
+
+/**
+ * The lean {@link import('@orkestrel/tool').ToolInterface.summary} the relation tool advertises
+ * in place of {@link RELATION_TOOL_DESCRIPTION}.
+ */
+export declare const RELATION_TOOL_SUMMARY = "Traverse and edit relationships between database rows \u2014 one operation per call (load, find, link, unlink, links), chosen by the 'operation' field. Call describe('relation') for the include-path syntax.";
+
+/** One key value — a string or number; the array form (multiple keys, positional) resolves FIRST per AGENTS §9.2. */
+export declare const relationKeyShape: UnionShape<readonly [ ArrayShape<UnionShape<readonly [ StringShape, NumberShape]>>, StringShape, NumberShape]>;
+
+/**
+ * Resolve which registered {@link RelationManagerInterface} a relation-tool call addresses — the
+ * pure manager-resolution leaf {@link import('./factories.js').createRelationTool} calls on
+ * every operation.
+ *
+ * @remarks
+ * An explicit `name` must match a key of `managers` (a miss throws a typed `TOOL`
+ * {@link ToolboxError} naming the registered managers). An OMITTED `name` resolves to the sole
+ * registered manager when exactly one is registered, else throws the same typed error.
+ *
+ * @param managers - The tool's registered `RelationManagerInterface` map
+ * @param name - The call's optional `manager` field
+ * @returns The resolved {@link RelationManagerInterface}
+ */
+export declare function relationManagerOf(managers: Readonly<Record<string, RelationManagerInterface>>, name: string | undefined): RelationManagerInterface;
+
+/**
+ * Resolve a `model` name against a live {@link RelationManagerInterface} — the pure model-lookup
+ * leaf {@link import('./factories.js').createRelationTool} calls on every operation, mirroring
+ * {@link relationManagerOf}'s guard shape.
+ *
+ * @param manager - The resolved {@link RelationManagerInterface}
+ * @param name - The call's `model` field
+ * @returns The model's {@link ModelInterface}
+ */
+export declare function relationModelOf(manager: RelationManagerInterface, name: string): ModelInterface;
+
+/**
+ * Map a caught error to the {@link ToolboxErrorCode} the upcoming relation tool should throw
+ * with — the pure classification step of that factory's error handling, mirroring
+ * {@link terminalToolCode}'s idiom for `@orkestrel/relation`.
+ *
+ * @param error - The value caught from a `@orkestrel/relation` operation
+ * @returns The granular {@link RelationErrorCode}, or `undefined` if `error` is not a `RelationError`
+ */
+export declare function relationToolCode(error: unknown): RelationErrorCode | undefined;
+
+/**
+ * Options for {@link import('./factories.js').createRelationTool} — SRC-3 (the final unit) of
+ * the 3-unit database / relation spine.
+ *
+ * @remarks
+ * - `managers` — the live `RelationManagerInterface` (`@orkestrel/relation`) registry a call's
+ *   optional `manager` field addresses by name; REQUIRED (unlike the database tool's lazily
+ *   resolved handles, a relation manager's relations are declared up front and cannot be minted
+ *   on demand from a tool call). A call that omits `manager` resolves to the SOLE registered
+ *   manager when exactly one is registered, else throws a typed `TOOL`
+ *   {@link import('./errors.js').ToolboxError} naming the registered manager keys.
+ * - `limit` — the row cap `'find'` / `'links'` enforce when a call's `limit` is omitted or
+ *   exceeds it. Defaults to {@link import('./constants.js').RELATION_TOOL_LIMIT}.
+ * - `depth` — the max dot-path segment count `'load'` / `'find'`'s `include` paths may reach
+ *   ({@link import('./helpers.js').expandInclude}). Defaults to
+ *   {@link import('./constants.js').RELATION_TOOL_DEPTH}.
+ * - `name` / `description` — advertised tool overrides; default to
+ *   {@link import('./constants.js').RELATION_TOOL_NAME} / {@link import('./constants.js').RELATION_TOOL_DESCRIPTION}.
+ */
+export declare interface RelationToolOptions {
+    readonly name?: string;
+    readonly description?: string;
+    readonly managers: Readonly<Record<string, RelationManagerInterface>>;
+    readonly limit?: number;
+    readonly depth?: number;
+}
+
+/**
+ * The shape of {@link import('./factories.js').createRelationTool}'s call arguments —
+ * discriminated by `operation` into the 5 relation operations (`'load'` / `'find'` / `'link'` /
+ * `'unlink'` / `'links'`).
+ *
+ * @remarks
+ * `'load'` fetches one or more rows (positional key/array) with `include` attached. `'find'`
+ * fetches rows (pagination / sort only) with `include` attached. `'link'` / `'unlink'` write /
+ * remove a `through` junction row; `'links'` lists a `through` relation's linked keys.
+ */
+export declare const relationToolShape: UnionShape<readonly [ ObjectShape<{
+    operation: LiteralShape<readonly ["load"]>;
+    manager: OptionalShape<StringShape>;
+    model: StringShape;
+    key: UnionShape<readonly [ ArrayShape<UnionShape<readonly [ StringShape, NumberShape]>>, StringShape, NumberShape]>;
+    include: OptionalShape<ArrayShape<StringShape>>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["find"]>;
+    manager: OptionalShape<StringShape>;
+    model: StringShape;
+    include: OptionalShape<ArrayShape<StringShape>>;
+    limit: OptionalShape<NumberShape>;
+    offset: OptionalShape<NumberShape>;
+    sort: OptionalShape<StringShape>;
+    direction: OptionalShape<LiteralShape<readonly ["ascending", "descending"]>>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["link"]>;
+    manager: OptionalShape<StringShape>;
+    model: StringShape;
+    key: UnionShape<readonly [ StringShape, NumberShape]>;
+    relation: StringShape;
+    target: UnionShape<readonly [ StringShape, NumberShape]>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["unlink"]>;
+    manager: OptionalShape<StringShape>;
+    model: StringShape;
+    key: UnionShape<readonly [ StringShape, NumberShape]>;
+    relation: StringShape;
+    target: UnionShape<readonly [ StringShape, NumberShape]>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["links"]>;
+    manager: OptionalShape<StringShape>;
+    model: StringShape;
+    key: UnionShape<readonly [ StringShape, NumberShape]>;
+    relation: StringShape;
+}, false>]>;
+
+/** A loose row — a flat object of column name to JSON value; the array form (multiple rows) resolves FIRST per AGENTS §9.2. */
+export declare const rowShape: ObjectShape<Record<never, never>, JSONShape>;
+
+/** One or many loose rows — the array form resolves FIRST per AGENTS §9.2. */
+export declare const rowsShape: UnionShape<readonly [ ArrayShape<ObjectShape<Record<never, never>, JSONShape>>, ObjectShape<Record<never, never>, JSONShape>]>;
+
+/** A single row key (not an array) — used by `'link'` / `'unlink'` / `'links'`, which address exactly one owning row. */
+export declare const singleKeyShape: UnionShape<readonly [ StringShape, NumberShape]>;
+
+/**
+ * The shape of ONE flat step — `{ name }` — the building block of {@link workflowStepsShape}.
+ *
+ * @remarks
+ * `name` is the REGISTERED behavior name the step runs (it becomes the task's `run`). The tool
+ * expands each step into a one-task phase, in order ({@link import('./helpers.js').expandSteps}).
+ */
+export declare const stepShape: ObjectShape<{
+    name: StringShape;
+}, false>;
+
+/**
+ * Build one {@link TableSchema} from a table NAME and its `@orkestrel/database` `TableExport` —
+ * the "deployed" schema shape `DatabaseInterface.migrate` diffs against, derived from a LIVE
+ * handle's `export()` rather than a re-declared {@link TableSpec}, so it works for ANY handle
+ * (config-tracked or caller-supplied).
+ *
+ * @param name - The table name
+ * @param table - The table's `TableExport` (`{ key, columns }`, `@orkestrel/database`)
+ * @returns The equivalent {@link TableSchema} (`indexes` empty — this package declares none)
+ */
+export declare function tableSchema(name: string, table: Readonly<{
+    key: string;
+    columns: Readonly<Record<string, ContractShape>>;
+}>): TableSchema;
+
+/**
+ * A database's table layout — one entry per table, each a flat map of column name to
+ * {@link ColumnSpec}. The small-model-facing DSL {@link import('./helpers.js').expandTables}
+ * compiles into an `@orkestrel/database` `TablesShape`.
+ */
+export declare type TableSpec = Readonly<Record<string, Readonly<{
+    columns: Readonly<Record<string, ColumnSpec>>;
+}>>>;
+
+/** A {@link import('./types.js').TableSpec} — table name to `{ columns }`, each column a {@link columnSpecShape}. */
+export declare const tableSpecShape: ObjectShape<Record<never, never>, ObjectShape<{
+    columns: ObjectShape<Record<never, never>, UnionShape<readonly [ LiteralShape<readonly ["string", "integer", "number", "boolean"]>, ObjectShape<{
+        type: LiteralShape<readonly ["string", "integer", "number", "boolean"]>;
+        optional: OptionalShape<BooleanShape>;
+    }, false>]>>;
+}, false>>;
+
+/**
+ * A draft task — a `TaskDefinition` (`@orkestrel/workflow`) with OPTIONAL `id` / `name`.
+ *
+ * @remarks
+ * The tool synthesizes a missing `id` positionally and defaults a missing `name` to its `id`
+ * ({@link import('./helpers.js').completeDraft}). A PROVIDED `id` / `name` is preserved verbatim
+ * (and must be non-empty — the draft contract's `minLength: 1`).
+ */
+export declare interface TaskDraft {
+    readonly id?: string;
+    readonly name?: string;
+    readonly description?: string;
+    /** The behavior reference — a registry key resolved against a workflow's functions registry at construction; omitted ⇒ no handler. */
+    readonly run?: string;
+    /** Extra attempts after the first on failure (a non-negative integer); overrides the phase Runner default. Execution-only. */
+    readonly retries?: number;
+    /** The per-attempt deadline in milliseconds (a non-negative integer); overrides the phase Runner default. Execution-only. */
+    readonly timeout?: number;
+}
+
+/**
+ * The shape of a {@link import('./types.js').TaskDraft} — identical to a strict task shape
+ * EXCEPT `id` and `name` are OPTIONAL.
+ */
+export declare const taskDraftShape: ObjectShape<{
+    id: OptionalShape<StringShape>;
+    name: OptionalShape<StringShape>;
+    description: OptionalShape<StringShape>;
+    run: OptionalShape<StringShape>;
+    retries: OptionalShape<NumberShape>;
+    timeout: OptionalShape<NumberShape>;
+}, false>;
+
+/**
+ * Map a caught error to the {@link ToolboxErrorCode} the terminal-tool factory should throw
+ * with — the pure classification step of that factory's error handling.
+ *
+ * @remarks
+ * Narrows `error` with {@link isTerminalError} (`@orkestrel/terminal`) first: a non-`TerminalError`
+ * value returns `undefined`, telling the caller this mapper does not apply (rethrow / handle
+ * otherwise). For a genuine `TerminalError`, `'DEADLOCK'` maps to `'DEADLOCK'`, `'EXPIRE'` maps
+ * to `'EXPIRE'`, and every other {@link import('@orkestrel/terminal').TerminalErrorCode}
+ * (`'TARGET'`, `'CANCEL'`, `'DRIVER'`) maps to the generic `'TOOL'` code. The mapper only
+ * classifies — the factory performs the actual throw.
+ *
+ * @param error - The value caught from a terminal-manager operation (`ask` / `answer` / …)
+ * @returns The mapped {@link ToolboxErrorCode}, or `undefined` if `error` is not a `TerminalError`
+ */
+export declare function terminalToolCode(error: unknown): ToolboxErrorCode | undefined;
+
+/**
+ * Thrown by {@link import('./factories.js').createAgentTool}'s and
+ * {@link import('./factories.js').createDescribeTool}'s handlers on every failure path — a
+ * malformed / unresolvable call or an unknown tool name (`TOOL`), a delegation that would
+ * exceed the configured depth bound or re-enter an ancestor (`DEPTH`), a prompt cycle
+ * (`DEADLOCK`), a prompt that expired before it was answered (`EXPIRE`), or an answer that
+ * failed to apply (`ANSWER`) — the last three thrown by
+ * {@link import('./factories.js').createPromptTool} / {@link import('./factories.js').createAnswerTool}.
+ *
+ * @remarks
+ * Carries a machine-readable `code` (see {@link import('./types.js').ToolboxErrorCode}) and
+ * an optional `context` bag for structured diagnostics. They are readable through an in-process
+ * catch, including around a direct `tool.execute(args)` call. The `ToolManagerInterface`
+ * (`@orkestrel/tool`) instead flattens every throw to the canonical tool result's top-level
+ * `error` message string under AGENTS' “narrow untrusted input with guards” rule.
+ *
+ * @example
+ * ```ts
+ * import { ToolboxError, isToolboxError } from '@src/core'
+ *
+ * try {
+ * 	throw new ToolboxError('TOOL', 'task is required')
+ * } catch (error) {
+ * 	if (isToolboxError(error)) console.log(error.code) // 'TOOL'
+ * }
+ * ```
+ */
+export declare class ToolboxError extends Error {
+    readonly code: ToolboxErrorCode;
+    readonly context?: Readonly<Record<string, unknown>>;
+    constructor(code: ToolboxErrorCode, message: string, context?: Readonly<Record<string, unknown>>);
+}
+
+/**
+ * The seven-value machine-readable code a thrown
+ * {@link import('./errors.js').ToolboxError} carries (AGENTS §14: a thrown, typed,
+ * code-bearing error, never a `{ error }` return).
+ *
+ * @remarks
+ * `TOOL` — malformed calls and package-owned resolution or configuration failures, including
+ * unknown tools, terminals, databases, drivers, relation managers, or models; invalid prompt
+ * choices or include paths; disabled readonly mutations; and invalid infer/endpoint inputs.
+ * `DEPTH` — the delegation would exceed {@link import('./constants.js').AGENT_TOOL_DEPTH}, or
+ * the resolved agent is already an ancestor (a cycle).
+ * `DEADLOCK` — an `ask` call ({@link import('./factories.js').createPromptTool}) would form a
+ * prompt cycle (`TerminalManagerInterface.ask`, `@orkestrel/terminal`, rejects with its own
+ * `TerminalError('DEADLOCK')`, re-surfaced here).
+ * `EXPIRE` — an `ask` call's addressed prompt expired before it was answered.
+ * `ANSWER` — {@link import('./factories.js').createAnswerTool}'s answer call failed to apply
+ * because the prompt id is unknown or already settled, or the terminal manager rejected the
+ * answer.
+ * `DATABASE` — a typed `@orkestrel/database` failure (`DatabaseError`), re-surfaced with the
+ * granular {@link import('@orkestrel/database').DatabaseErrorCode} carried in `context.code`.
+ * `RELATION` — a typed `@orkestrel/relation` failure (`RelationError`), re-surfaced with the
+ * granular {@link import('@orkestrel/relation').RelationErrorCode} carried in `context.code`.
+ */
+export declare type ToolboxErrorCode = 'TOOL' | 'DEPTH' | 'DEADLOCK' | 'EXPIRE' | 'ANSWER' | 'DATABASE' | 'RELATION';
+
+export declare const WORKFLOW_TOOL_DESCRIPTION: string;
+
+/**
+ * A complete FLAT authoring example — the PRIMARY way a small model authors a workflow through
+ * {@link import('./factories.js').createWorkflowTool}: `{ name, steps: [{ name }] }`.
+ *
+ * @remarks
+ * OWNED here now (ported from `@orkestrel/workflow`). Each step becomes a one-task phase, in
+ * order; a step's `name` is a REGISTERED behavior name (not a label) — the registry key its
+ * task's `run` resolves against. The tool expands this
+ * ({@link import('./helpers.js').expandSteps}) into a valid `WorkflowDefinition`
+ * (`@orkestrel/workflow`). It is embedded VERBATIM in {@link WORKFLOW_TOOL_DESCRIPTION}.
+ */
+export declare const WORKFLOW_TOOL_FLAT_EXAMPLE: WorkflowSteps;
+
+/**
+ * The name {@link import('./factories.js').createWorkflowTool} advertises by default — the key a
+ * model calls and the `ToolManagerInterface` (`@orkestrel/tool`) registers under, and the name
+ * {@link import('./factories.js').createAgentFunction} binds the depth/cycle-aware workflow tool
+ * under onto a wrapped agent's `context.tools`.
+ *
+ * @remarks
+ * OWNED here now (ported from `@orkestrel/workflow`). The propagation seam's well-known key: when
+ * `createAgentFunction`'s `runner` option is supplied, it adds a `createWorkflowTool`-built tool
+ * under this name to the agent's `context.tools`, so it can author + run a NESTED workflow
+ * (bounded by {@link MAX_WORKFLOW_DEPTH}).
+ */
+export declare const WORKFLOW_TOOL_NAME = "workflow";
+
+/**
+ * A minimal NESTED authoring example — the ADVANCED escape-hatch form a model may use instead of
+ * the flat shape: a full `WorkflowDefinition` (`@orkestrel/workflow`).
+ *
+ * @remarks
+ * OWNED here now (ported from `@orkestrel/workflow`). The full four-level form, documented in
+ * {@link WORKFLOW_TOOL_DESCRIPTION} as the advanced alternative. It is embedded VERBATIM.
+ */
+export declare const WORKFLOW_TOOL_NESTED_EXAMPLE: WorkflowDefinition;
+
+/**
+ * The lean {@link import('@orkestrel/tool').ToolInterface.summary} {@link import('./factories.js').createWorkflowTool}
+ * advertises in place of {@link WORKFLOW_TOOL_DESCRIPTION} — a `ToolManagerInterface.definitions()`
+ * (`@orkestrel/tool`) advertises `summary ?? description`, so this one-sentence text stands in
+ * for the full teaching description; the full text stays retrievable via
+ * {@link import('./factories.js').createDescribeTool}.
+ */
+export declare const WORKFLOW_TOOL_SUMMARY = "Author and run a multi-phase workflow in one call \u2014 phases run in sequence, tasks within a phase run concurrently. Call describe('workflow') for the full authoring schema and examples.";
+
+/**
+ * A draft workflow — a `WorkflowDefinition` (`@orkestrel/workflow`) with OPTIONAL `id` / `name`
+ * at all three levels (workflow / phase / task).
+ *
+ * @remarks
+ * The lenient authoring form {@link import('./factories.js').createWorkflowDraftContract}
+ * validates and {@link import('./helpers.js').completeDraft} completes into a strict
+ * `WorkflowDefinition`. `run` stays optional (a plain name string); the `bail` policy carries
+ * over.
+ */
+export declare interface WorkflowDraft {
+    readonly id?: string;
+    readonly name?: string;
+    readonly description?: string;
+    readonly phases: readonly PhaseDraft[];
+    /** Failure policy: `false` (default) continues gracefully, `true` halts on the first failure. */
+    readonly bail?: boolean;
+}
+
+/**
+ * The shape of a DRAFT workflow — identical to a strict workflow shape EXCEPT `id` and `name`
+ * are OPTIONAL at all three levels (workflow / phase / task), so a small model can omit the six
+ * identity strings and let the tool synthesize them positionally.
+ *
+ * @remarks
+ * The lenient counterpart {@link import('./factories.js').createWorkflowDraftContract} compiles.
+ * `run` stays required on the strict form; a provided `id` / `name` still has `minLength: 1` (so
+ * an explicitly-empty `id: ''` is REJECTED, not auto-filled). After
+ * {@link import('./helpers.js').completeDraft} fills the missing ids/names, the result is
+ * validated against the STRICT `createWorkflowContract` (`@orkestrel/workflow`) gate before
+ * running.
+ */
+export declare const workflowDraftShape: ObjectShape<{
+    id: OptionalShape<StringShape>;
+    name: OptionalShape<StringShape>;
+    description: OptionalShape<StringShape>;
+    phases: ArrayShape<ObjectShape<{
+        id: OptionalShape<StringShape>;
+        name: OptionalShape<StringShape>;
+        description: OptionalShape<StringShape>;
+        tasks: ArrayShape<ObjectShape<{
+            id: OptionalShape<StringShape>;
+            name: OptionalShape<StringShape>;
+            description: OptionalShape<StringShape>;
+            run: OptionalShape<StringShape>;
+            retries: OptionalShape<NumberShape>;
+            timeout: OptionalShape<NumberShape>;
+        }, false>>;
+        concurrency: OptionalShape<NumberShape>;
+        bail: OptionalShape<LiteralShape<readonly [true, false]>>;
+    }, false>>;
+    bail: OptionalShape<LiteralShape<readonly [true, false]>>;
+}, false>;
+
+/**
+ * One flat step — `{ name }` — the building block of a {@link WorkflowSteps} blob.
+ *
+ * @remarks
+ * `name` is the REGISTERED behavior name the step runs (it becomes the task's `run`, NOT a
+ * human label) — resolved against a workflow-level functions registry at construction.
+ */
+export declare interface WorkflowStep {
+    /** The registered behavior name this step runs (becomes the task's `run`). */
+    readonly name: string;
+}
+
+/**
+ * The FLAT authoring blob {@link import('./factories.js').createWorkflowTool} advertises —
+ * `{ name?, steps }` — the simplest surface a small model can fill.
+ *
+ * @remarks
+ * Each {@link WorkflowStep} becomes a one-task phase, in order
+ * ({@link import('./helpers.js').expandSteps}); `name` is the optional workflow name (defaulted
+ * when omitted).
+ */
+export declare interface WorkflowSteps {
+    readonly name?: string;
+    readonly steps: readonly WorkflowStep[];
+}
+
+/**
+ * The FLAT authoring shape {@link import('./factories.js').createWorkflowTool} advertises as its
+ * `parameters` — the simplest surface a small model can fill: `{ name?, steps: [{ name }] }`.
+ *
+ * @remarks
+ * A deliberately-reduced surface: a flat ordered list of steps, each a `{ name }`. The tool
+ * EXPANDS it ({@link import('./helpers.js').expandSteps}) into a full
+ * {@link import('./types.js').WorkflowDefinition} — one one-task phase per step, in order —
+ * then validates against the STRICT `createWorkflowContract` (`@orkestrel/workflow`) gate. The
+ * full nested form is STILL accepted by the tool (it branches on the args' shape) and is
+ * documented as the advanced escape-hatch in the tool's description — but THIS is what
+ * `parameters` advertises.
+ */
+export declare const workflowStepsShape: ObjectShape<{
+    name: OptionalShape<StringShape>;
+    steps: ArrayShape<ObjectShape<{
+        name: StringShape;
+    }, false>>;
+}, false>;
+
+/**
+ * The ancestry identifier of a workflow in a run chain — `workflow:<id>`.
+ *
+ * @remarks
+ * Namespacing keeps a workflow id and an {@link agentTag} agent name in ONE set without
+ * collision, so re-entering a workflow OR an agent already in the chain is a single `includes`
+ * check.
+ *
+ * @param id - The workflow definition's `id`
+ * @returns The namespaced ancestry tag (`workflow:<id>`)
+ */
+export declare function workflowTag(id: string): string;
+
+/**
+ * Options for {@link import('./factories.js').createWorkflowTool} — the depth + ancestry a
+ * nested workflow run is bound at, plus the optional durable {@link WorkflowStoreInterface}
+ * (`@orkestrel/workflow`) this package layers on top of the ported handler logic.
+ *
+ * @remarks
+ * This is the PROPAGATION carrier across the agent/tool boundary. A `Tool`'s handler receives
+ * ONLY the model-supplied `args` (no ambient context, no signal — see `@orkestrel/tool`'s
+ * `ToolOptions`), so the run's position in the workflow→agent→workflow chain CANNOT be threaded
+ * through a tool call at runtime. Instead {@link import('./factories.js').createAgentFunction}
+ * CLOSES `depth` / `ancestry` over the tool at BIND time. Both are OPTIONAL: a workflow tool
+ * built for a TOP-LEVEL caller omits them — its nested run starts the chain at depth `1` with
+ * the bare `workflow:<id>` ancestry.
+ *
+ * `store` is this package's ADDITION: when supplied, the tool's handler persists the run's final
+ * snapshot (`store.set(result.workflow.snapshot())`) once the run settles, so a workflow
+ * authored + run through the tool is retrievable / restorable afterwards. Omitted ⇒ no
+ * persistence.
+ */
+export declare interface WorkflowToolOptions {
+    /** The depth the INVOKING agent runs at; the nested workflow runs at `depth + 1`. Default `0`. */
+    readonly depth?: number;
+    /** The ancestry of the invoking run; the nested run extends it with its own `workflow:<id>`. Default empty. */
+    readonly ancestry?: readonly string[];
+    readonly store?: WorkflowStoreInterface;
+}
+
+/**
+ * Build the plain success summary {@link import('./factories.js').createWorkflowTool} returns on
+ * a completed run — the universal tool-handler contract (AGENTS §14): return a plain value on
+ * success, appearing identically over BOTH the agent loop and MCP.
+ *
+ * @remarks
+ * The summary is LEAN: the workflow's terminal `status` and the COUNT of settled task results —
+ * enough for a caller / model to react without serializing the whole live tree. (It carries no
+ * synthetic `id` / `name`: a tool handler has no call id; the `ToolManagerInterface`
+ * (`@orkestrel/tool`) supplies the canonical envelope's identity.)
+ *
+ * @param result - The terminal `WorkflowResult` (`@orkestrel/workflow`) the run produced
+ * @returns The plain success summary — `{ status, count }`
+ */
+export declare function workflowToolSummary(result: WorkflowResult): Readonly<{
+    status: WorkflowStatus;
+    count: number;
+}>;
+
+export declare const WORKSPACE_TOOL_DESCRIPTION: string;
+
+/**
+ * A valid {@link import('./types.js').WorkspaceOperation} object — the canonical example embedded
+ * VERBATIM in {@link WORKSPACE_TOOL_DESCRIPTION}.
+ *
+ * @remarks
+ * OWNED here now (ported from `@orkestrel/agent`). A `'write'` op (the most common authoring
+ * action): create or overwrite `notes.txt` with `hello`. Frozen so it cannot be mutated in
+ * place.
+ */
+export declare const WORKSPACE_TOOL_EXAMPLE: WorkspaceOperation;
+
+/**
+ * The name {@link import('./factories.js').createWorkspaceTool} advertises by default — the key a
+ * model calls and the `ToolManagerInterface` (`@orkestrel/tool`) registers under.
+ *
+ * @remarks
+ * OWNED here now (ported from `@orkestrel/agent`).
+ */
+export declare const WORKSPACE_TOOL_NAME = "workspace";
+
+/**
+ * The lean {@link import('@orkestrel/tool').ToolInterface.summary} {@link import('./factories.js').createWorkspaceTool}
+ * advertises in place of {@link WORKSPACE_TOOL_DESCRIPTION} — a `ToolManagerInterface.definitions()`
+ * (`@orkestrel/tool`) advertises `summary ?? description`, so this one-sentence text stands in
+ * for the full teaching description; the full text stays retrievable via
+ * {@link import('./factories.js').createDescribeTool}.
+ */
+export declare const WORKSPACE_TOOL_SUMMARY = "Read and edit files in a workspace \u2014 one operation per call (read, write, list, search, replace, splice, move, remove, plus workspace switching), chosen by the 'operation' field. Call describe('workspace') for the full operation list and fields.";
+
+/**
+ * One operation an agent invokes through {@link import('./factories.js').createWorkspaceTool} — a
+ * FLAT, descriptive tagged union over the 13 workspace edit / read / navigation actions,
+ * discriminated by the `operation` literal (AGENTS §4.8: a discriminant is named for its axis —
+ * the action being performed — NEVER `kind`).
+ *
+ * @remarks
+ * This is the SOURCE OF TRUTH the tool contract is typed to
+ * ({@link import('./shapers.js').workspaceToolShape} compiles to a structurally-identical guard /
+ * parser / JSON Schema). Every field is FLAT (no nested objects) — the small-model ergonomic
+ * lever: a range edit is the four flat integers of the `'splice'` arm (`fromLine` /
+ * `fromColumn` / `toLine` / `toColumn`), reassembled into a 1-based `Range` (`@orkestrel/agent`)
+ * by `rangeOf`, never a nested `{ start, end }`. Each EDIT / READ arm maps onto exactly one
+ * `WorkspaceInterface` call against the manager's ACTIVE workspace; the two REGISTRY arms
+ * (`switch` / `workspaces`) drive the {@link WorkspaceManagerInterface} pointer instead —
+ * `workspaces` LISTS the workspaces the model can move between, and `switch` re-points which one
+ * the edit / read arms target.
+ */
+export declare type WorkspaceOperation = 
+/** Read a whole text file's text by `path` from the ACTIVE workspace (a binary / absent path — or no active workspace — yields no content). */
+    {
+    readonly operation: 'read';
+    readonly path: string;
+}
+/** List every file in the ACTIVE workspace (path / state / size / lines / kind summaries); `[]` when no workspace is active. */
+| {
+    readonly operation: 'list';
+}
+/** Whether a file exists at `path` in the ACTIVE workspace (`false` when no workspace is active). */
+| {
+    readonly operation: 'has';
+    readonly path: string;
+}
+/**
+* Scan every text file for `query`, returning each hit (path + 1-based line / column + the line).
+*
+* @remarks
+* `regex` treats `query` as a regular-expression source (default `false` — a literal substring);
+* `exact` matches case-sensitively (default `true`); `limit` caps the total hits returned.
+*/
+| {
+    readonly operation: 'search';
+    readonly query: string;
+    readonly regex?: boolean;
+    readonly exact?: boolean;
+    readonly limit?: number;
+}
+/**
+* Replace `query` with `replacement` across every text file, returning the tally.
+*
+* @remarks
+* Same matching axes as `search`: `regex` (default `false`), `exact` (default `true`), `limit`
+* (cap the total replacements).
+*/
+| {
+    readonly operation: 'replace';
+    readonly query: string;
+    readonly replacement: string;
+    readonly regex?: boolean;
+    readonly exact?: boolean;
+    readonly limit?: number;
+}
+/** Write (create or overwrite) the whole file at `path` with `content`. */
+| {
+    readonly operation: 'write';
+    readonly path: string;
+    readonly content: string;
+}
+/**
+* Splice `content` into an existing text file, replacing the 1-based range
+* `(fromLine, fromColumn)` (INCLUSIVE) → `(toLine, toColumn)` (EXCLUSIVE).
+*
+* @remarks
+* The FLAT range edit — the four positive-integer caret components reassemble into a `Range`
+* (`@orkestrel/agent`) via `rangeOf`. An empty span (`from === to`) inserts; a span past the
+* end is clamped. An inverted / sub-1 range throws `RANGE`; a binary target throws
+* `MODALITY`.
+*/
+| {
+    readonly operation: 'splice';
+    readonly path: string;
+    readonly content: string;
+    readonly fromLine: number;
+    readonly fromColumn: number;
+    readonly toLine: number;
+    readonly toColumn: number;
+}
+/** Prepend `content` to the start of the file at `path` (creating it when absent). */
+| {
+    readonly operation: 'prepend';
+    readonly path: string;
+    readonly content: string;
+}
+/** Append `content` to the end of the file at `path` (creating it when absent). */
+| {
+    readonly operation: 'append';
+    readonly path: string;
+    readonly content: string;
+}
+/** Re-key the file `from` → `to` (overwriting an occupied target). */
+| {
+    readonly operation: 'move';
+    readonly from: string;
+    readonly to: string;
+}
+/** Remove the file at `path` from the workspace. */
+| {
+    readonly operation: 'remove';
+    readonly path: string;
+}
+/** List the workspaces the model can move between — each `{ id, files, active }` — so it can choose an `id` to `switch` to. */
+| {
+    readonly operation: 'workspaces';
+}
+/** Re-point the manager's ACTIVE workspace to the one with `id` (an unknown `id` is a lenient no-op). The edit / read arms target the active workspace from then on. */
+| {
+    readonly operation: 'switch';
+    readonly id: string;
+};
+
+/**
+ * Options for {@link import('./factories.js').createWorkspaceTool} — EITHER a caller-built
+ * {@link WorkspaceManagerInterface} to drive directly, OR a {@link WorkspaceStoreInterface} the
+ * tool constructs a fresh manager over; neither given constructs a manager over
+ * `@orkestrel/agent`'s in-memory store.
+ *
+ * @remarks
+ * - `manager` — drive THIS manager directly (its `active` workspace is what every edit / read
+ *   operation targets). Takes priority over `store` when both are supplied.
+ * - `store` — construct a manager over this durable {@link WorkspaceStoreInterface} (via
+ *   `@orkestrel/agent`'s `createWorkspaceManager`) — used only when `manager` is omitted.
+ *   The store only backs the manager's own `open` / `save` operations: the tool's edits are
+ *   NOT auto-persisted — durability requires an explicit caller `save` on the manager
+ *   (unlike the workflow tool's `store`, which persists each executed snapshot on settle).
+ * - `name` / `description` — advertised tool overrides; default to
+ *   {@link import('./constants.js').WORKSPACE_TOOL_NAME} / {@link import('./constants.js').WORKSPACE_TOOL_DESCRIPTION}.
+ */
+export declare interface WorkspaceToolOptions {
+    readonly name?: string;
+    readonly description?: string;
+    readonly manager?: WorkspaceManagerInterface;
+    readonly store?: WorkspaceStoreInterface;
+}
+
+/**
+ * The shape of a {@link import('./types.js').WorkspaceOperation} — a descriptive tagged union
+ * over the 13 workspace edit / read / navigation operations, discriminated by the `operation`
+ * literal (never a bare `kind`; AGENTS §4.4). Each variant leads with its `operation`
+ * discriminant then its FLAT fields, every field via `stringShape` / `optionalShape` /
+ * `integerShape({ min: 1 })` / `booleanShape`, each carrying a strong field-level `description`.
+ *
+ * @remarks
+ * The union compiles to an `anyOf` JSON Schema + a `unionOf` guard + a first-match parser
+ * automatically ({@link import('./factories.js').createWorkspaceTool} types the result to the
+ * hand-written {@link import('./types.js').WorkspaceOperation}). `limit` and the four `'splice'`
+ * caret components are POSITIVE integers (`integerShape({ min: 1 })`); `regex` / `exact` are
+ * `optionalShape(booleanShape(...))`. The two REGISTRY arms — `workspaces` (list the workspaces
+ * the model can move between) and `switch` (re-point the active one by `id`) — let a model
+ * DISCOVER then CHOOSE which workspace the edit / read arms target.
+ */
+export declare const workspaceToolShape: UnionShape<readonly [ ObjectShape<{
+    operation: LiteralShape<readonly ["read"]>;
+    path: StringShape;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["list"]>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["has"]>;
+    path: StringShape;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["search"]>;
+    query: StringShape;
+    regex: OptionalShape<BooleanShape>;
+    exact: OptionalShape<BooleanShape>;
+    limit: OptionalShape<NumberShape>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["replace"]>;
+    query: StringShape;
+    replacement: StringShape;
+    regex: OptionalShape<BooleanShape>;
+    exact: OptionalShape<BooleanShape>;
+    limit: OptionalShape<NumberShape>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["write"]>;
+    path: StringShape;
+    content: StringShape;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["splice"]>;
+    path: StringShape;
+    content: StringShape;
+    fromLine: NumberShape;
+    fromColumn: NumberShape;
+    toLine: NumberShape;
+    toColumn: NumberShape;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["prepend"]>;
+    path: StringShape;
+    content: StringShape;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["append"]>;
+    path: StringShape;
+    content: StringShape;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["move"]>;
+    from: StringShape;
+    to: StringShape;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["remove"]>;
+    path: StringShape;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["workspaces"]>;
+}, false>, ObjectShape<{
+    operation: LiteralShape<readonly ["switch"]>;
+    id: StringShape;
+}, false>]>;
+
+export { }