@vantageos/agent-engine 0.1.0-alpha.5 → 0.1.0-alpha.6

package/dist/component/engine/habits.js

@@ -0,0 +1,219 @@
+import { v } from "convex/values";
+import { Crons } from "@convex-dev/crons";
+import { internal, components } from "../_generated/api.js";
+import { internalMutation, mutation, query } from "../_generated/server.js";
+import { assertSameOrg, requireOrgId } from "../lib/auth.js";
+// engine/habits — NOTRE LIGNE (SYNTHESE §2/§4.e-ter: "ce qui transforme un
+// chat en employé"). Une habitude = un cron DYNAMIQUE par agent/org,
+// enregistré à l'exécution via @convex-dev/crons — jamais un
+// `convex/crons.ts` statique. Créer / exécuter / modifier / désactiver ne
+// redéploient jamais rien : le `cronExpression` est une DONNÉE portée par
+// la ligne `habits`, le cron runtime en est un simple reflet. Ported from
+// convex/habits.ts (repo-root prototype) into the component boundary (C4).
+//
+// C4 orgId discipline (component/lib/auth.ts): every PUBLIC function takes
+// `orgId` as an explicit ARGUMENT (auth does not propagate across a
+// component boundary), same as engine/mandates.ts (C3). The cron runtime
+// target is `internal.engine.habits.run` -- the component-boundary path
+// for this module, mirroring `internal.habits.run` at the app level.
+const crons = new Crons(components.crons);
+const habitDoc = v.object({
+    _id: v.id("habits"),
+    _creationTime: v.number(),
+    orgId: v.string(),
+    agentId: v.id("agents"),
+    name: v.string(),
+    cronExpression: v.string(),
+    prompt: v.string(),
+    enabled: v.boolean(),
+    cronJobId: v.optional(v.string()),
+    lastRunAt: v.optional(v.number()),
+    createdAt: v.number(),
+    updatedAt: v.number(),
+});
+// create — writes the habit row AND registers its runtime cron in the same
+// transaction. @convex-dev/crons guarantees the cron "is guaranteed to
+// exist after the mutation that creates them has run" (README) -- so the
+// very next tick can fire it, with zero deploy.
+export const create = mutation({
+    args: {
+        orgId: v.string(),
+        agentId: v.id("agents"),
+        name: v.string(),
+        cronExpression: v.string(),
+        prompt: v.string(),
+    },
+    returns: v.id("habits"),
+    handler: async (ctx, args) => {
+        const orgId = requireOrgId(args.orgId);
+        const agent = await ctx.db.get(args.agentId);
+        assertSameOrg(orgId, agent, "Agent not found");
+        if (args.name.trim().length === 0) {
+            throw new Error("Validation: name must not be empty");
+        }
+        if (args.cronExpression.trim().length === 0) {
+            throw new Error("Validation: cronExpression must not be empty");
+        }
+        const now = Date.now();
+        const habitId = await ctx.db.insert("habits", {
+            orgId,
+            agentId: args.agentId,
+            name: args.name,
+            cronExpression: args.cronExpression,
+            prompt: args.prompt,
+            enabled: true,
+            createdAt: now,
+            updatedAt: now,
+        });
+        const cronJobId = await crons.register(ctx, { kind: "cron", cronspec: args.cronExpression }, internal.engine.habits.run, { habitId }, `habit:${habitId}`);
+        await ctx.db.patch(habitId, { cronJobId, updatedAt: Date.now() });
+        return habitId;
+    },
+});
+export const get = query({
+    args: { orgId: v.string(), habitId: v.id("habits") },
+    returns: v.union(habitDoc, v.null()),
+    handler: async (ctx, args) => {
+        const orgId = requireOrgId(args.orgId);
+        const doc = await ctx.db.get(args.habitId);
+        if (!doc || doc.orgId !== orgId)
+            return null;
+        return doc;
+    },
+});
+export const listForAgent = query({
+    args: { orgId: v.string(), agentId: v.id("agents") },
+    returns: v.array(habitDoc),
+    handler: async (ctx, args) => {
+        const orgId = requireOrgId(args.orgId);
+        return await ctx.db
+            .query("habits")
+            .withIndex("by_org_agent", (q) => q.eq("orgId", orgId).eq("agentId", args.agentId))
+            .collect();
+    },
+});
+// updateSchedule — edits the habit AT EXECUTION TIME. Deletes the old
+// runtime cron and registers a fresh one from the new `cronExpression`,
+// still inside a single Convex mutation transaction. No redeploy, no
+// downtime window: @convex-dev/crons crons are transactional (README).
+export const updateSchedule = mutation({
+    args: {
+        orgId: v.string(),
+        habitId: v.id("habits"),
+        cronExpression: v.optional(v.string()),
+        prompt: v.optional(v.string()),
+        name: v.optional(v.string()),
+    },
+    returns: v.null(),
+    handler: async (ctx, args) => {
+        const orgId = requireOrgId(args.orgId);
+        const existing = await ctx.db.get(args.habitId);
+        assertSameOrg(orgId, existing, "Habit not found");
+        const { orgId: _orgId, habitId, cronExpression, ...rest } = args;
+        await ctx.db.patch(habitId, { ...rest, updatedAt: Date.now() });
+        if (cronExpression !== undefined && cronExpression !== existing.cronExpression) {
+            if (cronExpression.trim().length === 0) {
+                throw new Error("Validation: cronExpression must not be empty");
+            }
+            if (existing.enabled && existing.cronJobId) {
+                await crons.delete(ctx, { id: existing.cronJobId });
+            }
+            await ctx.db.patch(habitId, { cronExpression, updatedAt: Date.now() });
+            if (existing.enabled) {
+                const cronJobId = await crons.register(ctx, { kind: "cron", cronspec: cronExpression }, internal.engine.habits.run, { habitId }, `habit:${habitId}:${Date.now()}`);
+                await ctx.db.patch(habitId, { cronJobId, updatedAt: Date.now() });
+            }
+        }
+        return null;
+    },
+});
+// disable — stops future runs by DELETING the runtime cron registration.
+// This is a hard stop, not a soft "skip if disabled" flag: after `disable`
+// resolves, there is no scheduled function left that could fire this habit.
+export const disable = mutation({
+    args: { orgId: v.string(), habitId: v.id("habits") },
+    returns: v.null(),
+    handler: async (ctx, args) => {
+        const orgId = requireOrgId(args.orgId);
+        const existing = await ctx.db.get(args.habitId);
+        assertSameOrg(orgId, existing, "Habit not found");
+        if (existing.enabled && existing.cronJobId) {
+            await crons.delete(ctx, { id: existing.cronJobId });
+        }
+        await ctx.db.patch(args.habitId, {
+            enabled: false,
+            cronJobId: undefined,
+            updatedAt: Date.now(),
+        });
+        return null;
+    },
+});
+// enable — re-registers the runtime cron from the habit's own
+// `cronExpression` DATA. No redeploy: the schedule was never lost, only its
+// runtime registration.
+export const enable = mutation({
+    args: { orgId: v.string(), habitId: v.id("habits") },
+    returns: v.null(),
+    handler: async (ctx, args) => {
+        const orgId = requireOrgId(args.orgId);
+        const existing = await ctx.db.get(args.habitId);
+        assertSameOrg(orgId, existing, "Habit not found");
+        if (existing.enabled)
+            return null;
+        const cronJobId = await crons.register(ctx, { kind: "cron", cronspec: existing.cronExpression }, internal.engine.habits.run, { habitId: args.habitId }, `habit:${args.habitId}:${Date.now()}`);
+        await ctx.db.patch(args.habitId, {
+            enabled: true,
+            cronJobId,
+            updatedAt: Date.now(),
+        });
+        return null;
+    },
+});
+// run — the cron-invoked target (internal only, never client-facing).
+// Writes a `habitRuns` proof row and bumps `lastRunAt`. This is what makes
+// "a habit fires its first run without a deploy" and "a disabled habit does
+// not fire again" PROVABLE rather than asserted on trust
+// (component/habits.componentPackaging.test.ts). No `orgId` argument: this
+// mutation is reachable ONLY by the runtime cron scheduler (never a
+// client), and it derives `orgId` from the habit row itself, which is the
+// same trust boundary `spendInternal` uses in engine/mandates.ts.
+export const run = internalMutation({
+    args: { habitId: v.id("habits") },
+    returns: v.null(),
+    handler: async (ctx, args) => {
+        const habit = await ctx.db.get(args.habitId);
+        if (!habit || !habit.enabled) {
+            // Defence in depth: `disable` already removes the cron registration,
+            // but if a run was already in flight when disable landed, refuse to
+            // record it as having run.
+            return null;
+        }
+        const now = Date.now();
+        await ctx.db.insert("habitRuns", {
+            orgId: habit.orgId,
+            habitId: args.habitId,
+            agentId: habit.agentId,
+            ranAt: now,
+        });
+        await ctx.db.patch(args.habitId, { lastRunAt: now });
+        return null;
+    },
+});
+export const listRuns = query({
+    args: { orgId: v.string(), habitId: v.id("habits") },
+    returns: v.array(v.object({
+        _id: v.id("habitRuns"),
+        _creationTime: v.number(),
+        orgId: v.string(),
+        habitId: v.id("habits"),
+        agentId: v.id("agents"),
+        ranAt: v.number(),
+    })),
+    handler: async (ctx, args) => {
+        const orgId = requireOrgId(args.orgId);
+        return await ctx.db
+            .query("habitRuns")
+            .withIndex("by_org_habit", (q) => q.eq("orgId", orgId).eq("habitId", args.habitId))
+            .collect();
+    },
+});

package/dist/component/engine/mandates.d.ts

@@ -0,0 +1,74 @@
+import type { Id } from "../_generated/dataModel.js";
+export declare const set: import("convex/server").RegisteredMutation<"public", {
+    capacity?: number | undefined;
+    orgId: string;
+    kind: "token bucket" | "fixed window";
+    agentId: import("convex/values").GenericId<"agents">;
+    scope: string;
+    rate: number;
+    period: number;
+}, Promise<import("convex/values").GenericId<"mandates">>>;
+export declare const get: import("convex/server").RegisteredQuery<"public", {
+    orgId: string;
+    agentId: import("convex/values").GenericId<"agents">;
+    scope: string;
+}, Promise<{
+    _id: import("convex/values").GenericId<"mandates">;
+    _creationTime: number;
+    capacity?: number | undefined;
+    orgId: string;
+    createdAt: number;
+    updatedAt: number;
+    kind: "token bucket" | "fixed window";
+    agentId: import("convex/values").GenericId<"agents">;
+    scope: string;
+    rate: number;
+    period: number;
+} | null>>;
+export declare const spend: import("convex/server").RegisteredMutation<"public", {
+    orgId: string;
+    agentId: import("convex/values").GenericId<"agents">;
+    scope: string;
+    reason: string;
+    cost: number;
+}, Promise<{
+    ok: boolean;
+    approvalId?: Id<"approvalRequests">;
+}>>;
+export declare const spendInternal: import("convex/server").RegisteredMutation<"internal", {
+    orgId: string;
+    agentId: import("convex/values").GenericId<"agents">;
+    scope: string;
+    reason: string;
+    cost: number;
+}, Promise<{
+    ok: boolean;
+    approvalId?: Id<"approvalRequests">;
+}>>;
+export declare const listApprovals: import("convex/server").RegisteredQuery<"public", {
+    agentId?: import("convex/values").GenericId<"agents"> | undefined;
+    orgId: string;
+}, Promise<{
+    _id: import("convex/values").GenericId<"approvalRequests">;
+    _creationTime: number;
+    resolvedAt?: number | undefined;
+    resolvedBy?: string | undefined;
+    orgId: string;
+    status: "pending" | "approved" | "denied";
+    createdAt: number;
+    agentId: import("convex/values").GenericId<"agents">;
+    scope: string;
+    requestedCost: number;
+    reason: string;
+}[]>>;
+export declare const resolveApproval: import("convex/server").RegisteredMutation<"public", {
+    orgId: string;
+    resolvedBy: string;
+    decision: "approved" | "denied";
+    approvalId: import("convex/values").GenericId<"approvalRequests">;
+}, Promise<null>>;
+export declare const usageCount: import("convex/server").RegisteredQuery<"public", {
+    orgId: string;
+    agentId: import("convex/values").GenericId<"agents">;
+    scope: string;
+}, Promise<number>>;

package/dist/component/engine/mandates.js

@@ -0,0 +1,272 @@
+import { v } from "convex/values";
+import { RateLimiter } from "@convex-dev/rate-limiter";
+import { ShardedCounter } from "@convex-dev/sharded-counter";
+import { internalMutation, mutation, query } from "../_generated/server.js";
+import { components } from "../_generated/api.js";
+import { assertSameOrg, requireOrgId } from "../lib/auth.js";
+// engine/mandates — NOTRE LIGNE (SYNTHESE §2 / §4.e-ter) : « autorité
+// bornée ». Ported from convex/mandates.ts (repo-root prototype) into the
+// component boundary (C3). A mandate is a LINE OF DATA scoped
+// orgId+agentId+scope, never a constant read from code (litmus test: a
+// client changes their mind => zero deployment). The rate-limiter has NO
+// static named config in this module -- every call to `spend` builds its
+// `config` inline, dynamically, from the `mandates` row loaded from the
+// database (@convex-dev/rate-limiter README §"Define a rate limit inline /
+// dynamically"). Fails-closed: no mandate row => refusal, never a silent
+// bypass.
+//
+// C3 orgId discipline (component/lib/auth.ts): every PUBLIC function takes
+// `orgId` as an explicit ARGUMENT (auth does not propagate across a
+// component boundary), same as the rest of this component (agents,
+// wakeup, sessions). `spendInternal` also takes `orgId` as an argument, but
+// is an `internalMutation` -- the ONLY caller reachable from any client is
+// `engine/wakeup.enqueue` (an action), which threads its own
+// caller-supplied `orgId` argument through after validating it.
+const rateLimiter = new RateLimiter(components.rateLimiter);
+// Usage rollup, keyed identically to the rate-limiter key (org+agent+scope).
+// I0 §7.4: counters via sharded-counter, never a canary/alpha dependency.
+const usageCounter = new ShardedCounter(components.shardedCounter);
+const mandateDoc = v.object({
+    _id: v.id("mandates"),
+    _creationTime: v.number(),
+    orgId: v.string(),
+    agentId: v.id("agents"),
+    scope: v.string(),
+    kind: v.union(v.literal("token bucket"), v.literal("fixed window")),
+    rate: v.number(),
+    period: v.number(),
+    capacity: v.optional(v.number()),
+    createdAt: v.number(),
+    updatedAt: v.number(),
+});
+// set — upserts the DATA row that bounds an agent's authority for a given
+// scope. This is the ONLY place a cap value is ever written; there is no
+// constant anywhere in the engine that plays this role.
+export const set = mutation({
+    args: {
+        orgId: v.string(),
+        agentId: v.id("agents"),
+        scope: v.string(),
+        kind: v.union(v.literal("token bucket"), v.literal("fixed window")),
+        rate: v.number(),
+        period: v.number(),
+        capacity: v.optional(v.number()),
+    },
+    returns: v.id("mandates"),
+    handler: async (ctx, args) => {
+        const orgId = requireOrgId(args.orgId);
+        const agent = await ctx.db.get(args.agentId);
+        assertSameOrg(orgId, agent, "Agent not found");
+        if (args.scope.trim().length === 0) {
+            throw new Error("Validation: scope must not be empty");
+        }
+        if (args.rate <= 0 || args.period <= 0) {
+            throw new Error("Validation: rate and period must be positive");
+        }
+        const existing = await ctx.db
+            .query("mandates")
+            .withIndex("by_org_agent_scope", (q) => q.eq("orgId", orgId).eq("agentId", args.agentId).eq("scope", args.scope))
+            .unique();
+        const now = Date.now();
+        if (existing) {
+            await ctx.db.patch(existing._id, {
+                kind: args.kind,
+                rate: args.rate,
+                period: args.period,
+                capacity: args.capacity,
+                updatedAt: now,
+            });
+            return existing._id;
+        }
+        return await ctx.db.insert("mandates", {
+            orgId,
+            agentId: args.agentId,
+            scope: args.scope,
+            kind: args.kind,
+            rate: args.rate,
+            period: args.period,
+            capacity: args.capacity,
+            createdAt: now,
+            updatedAt: now,
+        });
+    },
+});
+export const get = query({
+    args: { orgId: v.string(), agentId: v.id("agents"), scope: v.string() },
+    returns: v.union(mandateDoc, v.null()),
+    handler: async (ctx, args) => {
+        const orgId = requireOrgId(args.orgId);
+        return await ctx.db
+            .query("mandates")
+            .withIndex("by_org_agent_scope", (q) => q.eq("orgId", orgId).eq("agentId", args.agentId).eq("scope", args.scope))
+            .unique();
+    },
+});
+// spend — the single choke point through which every costed action an
+// agent takes must pass. `cost` is a WEIGHTED count (tokens, euros, calls —
+// whatever the mandate's scope means), never a plain call counter.
+//
+// Deny by default, twice over:
+//   1. No mandate row for this org+agent+scope => throw immediately. We do
+//      NOT fall back to "unlimited"; an unconfigured mandate is a refusal,
+//      not an escape hatch. Nothing needs to be persisted for this case, so
+//      throwing (and rolling back the whole transaction) is safe.
+//   2. Mandate exists but is exhausted => an approvalRequests row MUST be
+//      committed. Convex mutations are single transactions: throwing after
+//      `ctx.db.insert` would roll the insert back along with everything
+//      else, silently destroying the very approval request the guard is
+//      supposed to leave behind. So this path returns `{ ok: false }`
+//      instead of throwing -- the approval row survives, and the caller
+//      (engine/wakeup) is REQUIRED to check `.ok` and treat `false` as a
+//      hard refusal. There is no code path that lets the action proceed
+//      past an exhausted mandate; the only way authority is restored is an
+//      explicit human `resolveApproval("approved")`.
+export const spend = mutation({
+    args: {
+        orgId: v.string(),
+        agentId: v.id("agents"),
+        scope: v.string(),
+        cost: v.number(),
+        reason: v.string(),
+    },
+    returns: v.object({
+        ok: v.boolean(),
+        approvalId: v.optional(v.id("approvalRequests")),
+    }),
+    handler: async (ctx, args) => {
+        const orgId = requireOrgId(args.orgId);
+        const agent = await ctx.db.get(args.agentId);
+        assertSameOrg(orgId, agent, "Agent not found");
+        return await spendCore(ctx, orgId, args);
+    },
+});
+// spendInternal — SAME choke point as `spend`, INTERNAL ONLY (unreachable
+// from any client). This is the ONE function `engine/wakeup.enqueue` (an
+// `action`) calls, in its OWN transaction, before it may ever call
+// `enqueueInternal` to put work in the pool -- see the C3 wiring note in
+// component/engine/wakeup.ts. Trusting an `orgId` argument here is exactly
+// as safe as `engine/wakeup.enqueueInternal` trusting one: the only code
+// that can reach an `internal.*` function is other server code, never a
+// client SDK. The public `spend` above is completely untouched.
+export const spendInternal = internalMutation({
+    args: {
+        orgId: v.string(),
+        agentId: v.id("agents"),
+        scope: v.string(),
+        cost: v.number(),
+        reason: v.string(),
+    },
+    returns: v.object({
+        ok: v.boolean(),
+        approvalId: v.optional(v.id("approvalRequests")),
+    }),
+    handler: async (ctx, args) => {
+        const agent = await ctx.db.get(args.agentId);
+        assertSameOrg(args.orgId, agent, "Agent not found");
+        return await spendCore(ctx, args.orgId, args);
+    },
+});
+async function spendCore(ctx, orgId, args) {
+    if (args.cost <= 0) {
+        throw new Error("Validation: cost must be positive");
+    }
+    const mandate = await ctx.db
+        .query("mandates")
+        .withIndex("by_org_agent_scope", (q) => q.eq("orgId", orgId).eq("agentId", args.agentId).eq("scope", args.scope))
+        .unique();
+    if (!mandate) {
+        // fails-closed: no data => no authority. Never silently unlimited.
+        throw new Error(`Mandate refused: no mandate configured for scope "${args.scope}"`);
+    }
+    const key = `${orgId}:${args.agentId}:${args.scope}`;
+    const status = await rateLimiter.limit(ctx, "mandateSpend", {
+        key,
+        count: args.cost,
+        config: {
+            kind: mandate.kind,
+            rate: mandate.rate,
+            period: mandate.period,
+            capacity: mandate.capacity,
+        },
+    });
+    if (!status.ok) {
+        // Overrun => a human approval request is created and PERSISTED
+        // (returning instead of throwing so the transaction commits it). This
+        // is the ONLY consequence of an overrun -- there is no code path that
+        // spends past an exhausted mandate.
+        const approvalId = await ctx.db.insert("approvalRequests", {
+            orgId,
+            agentId: args.agentId,
+            scope: args.scope,
+            requestedCost: args.cost,
+            reason: args.reason,
+            status: "pending",
+            createdAt: Date.now(),
+        });
+        return { ok: false, approvalId };
+    }
+    // Rollup via sharded-counter (I0 §7.4: no canary dependency for a
+    // guardrail). One shard bucket per org+agent+scope key.
+    await usageCounter.add(ctx, key, args.cost);
+    return { ok: true };
+}
+export const listApprovals = query({
+    args: { orgId: v.string(), agentId: v.optional(v.id("agents")) },
+    returns: v.array(v.object({
+        _id: v.id("approvalRequests"),
+        _creationTime: v.number(),
+        orgId: v.string(),
+        agentId: v.id("agents"),
+        scope: v.string(),
+        requestedCost: v.number(),
+        reason: v.string(),
+        status: v.union(v.literal("pending"), v.literal("approved"), v.literal("denied")),
+        createdAt: v.number(),
+        resolvedAt: v.optional(v.number()),
+        resolvedBy: v.optional(v.string()),
+    })),
+    handler: async (ctx, args) => {
+        const orgId = requireOrgId(args.orgId);
+        const rows = await ctx.db
+            .query("approvalRequests")
+            .withIndex("by_org", (q) => q.eq("orgId", orgId))
+            .collect();
+        return args.agentId
+            ? rows.filter((r) => r.agentId === args.agentId)
+            : rows;
+    },
+});
+// resolveApproval — the ONLY way an overrun ever becomes usable authority
+// again: an explicit human decision, recorded, never inferred.
+export const resolveApproval = mutation({
+    args: {
+        orgId: v.string(),
+        approvalId: v.id("approvalRequests"),
+        decision: v.union(v.literal("approved"), v.literal("denied")),
+        resolvedBy: v.string(),
+    },
+    returns: v.null(),
+    handler: async (ctx, args) => {
+        const orgId = requireOrgId(args.orgId);
+        const existing = await ctx.db.get(args.approvalId);
+        assertSameOrg(orgId, existing, "Approval request not found");
+        await ctx.db.patch(args.approvalId, {
+            status: args.decision,
+            resolvedAt: Date.now(),
+            resolvedBy: args.resolvedBy,
+        });
+        return null;
+    },
+});
+// usageCount — the rollup readout (sharded-counter), for dashboards/audits.
+export const usageCount = query({
+    args: { orgId: v.string(), agentId: v.id("agents"), scope: v.string() },
+    returns: v.number(),
+    handler: async (ctx, args) => {
+        const orgId = requireOrgId(args.orgId);
+        const agent = await ctx.db.get(args.agentId);
+        assertSameOrg(orgId, agent, "Agent not found");
+        const key = `${orgId}:${args.agentId}:${args.scope}`;
+        return await usageCounter.count(ctx, key);
+    },
+});

package/dist/component/engine/sandboxCallback.d.ts

@@ -0,0 +1,36 @@
+export declare const startRun: import("convex/server").RegisteredMutation<"public", {
+    orgId: string;
+    workflowId: string;
+    awaitedEventName: string;
+    timeoutMs: number;
+}, Promise<import("convex/values").GenericId<"sandboxRuns">>>;
+export declare const attachSandboxId: import("convex/server").RegisteredMutation<"public", {
+    orgId: string;
+    sandboxId: string;
+    sandboxRunId: import("convex/values").GenericId<"sandboxRuns">;
+}, Promise<null>>;
+export declare const getStatus: import("convex/server").RegisteredQuery<"public", {
+    orgId: string;
+    sandboxRunId: import("convex/values").GenericId<"sandboxRuns">;
+}, Promise<{
+    status: "completed" | "pending" | "failed" | "timedOut";
+    resultSummary: string | undefined;
+}>>;
+export declare const deadLetterMalformed: import("convex/server").RegisteredMutation<"public", {
+    orgId?: string | undefined;
+    reason: string;
+    deliveryId: string;
+    rawBody: string;
+}, Promise<null>>;
+export declare const processCallback: import("convex/server").RegisteredMutation<"public", {
+    resultSummary?: string | undefined;
+    orgId: string;
+    status: "completed" | "failed";
+    sandboxRunId: string;
+    deliveryId: string;
+}, Promise<{
+    outcome: "woke" | "duplicate" | "dead-lettered";
+}>>;
+export declare const timeoutInternal: import("convex/server").RegisteredMutation<"internal", {
+    sandboxRunId: import("convex/values").GenericId<"sandboxRuns">;
+}, Promise<null>>;