botinabox 2.9.1 → 2.9.2

package/dist/index.d.ts

@@ -1,2367 +1,39 @@
-import { C as ChannelAdapter, H as HealthStatus, I as InboundMessage } from './channel-CVm1AWUF.js';
-export { A as Attachment, a as AttachmentMediaType, b as ChannelCapabilities, c as ChannelConfig, d as ChannelMeta, e as ChatType, F as FormattingMode, O as OutboundPayload, S as SendResult } from './channel-CVm1AWUF.js';
-import { T as TokenUsage, L as LLMProvider, M as ModelInfo, R as ResolvedModel, C as ChatMessage } from './provider-BHkqkSdq.js';
-export { a as ChatParams, b as ChatResult, c as ContentBlock, d as ToolUse } from './provider-BHkqkSdq.js';
-import { C as ConnectorConfig } from './connector-B4Mj0P1b.js';
-export { A as AuthResult, a as Connector, b as ConnectorMeta, P as PushResult, S as SyncOptions, c as SyncResult } from './connector-B4Mj0P1b.js';
-import { C as ChatResponderConfig, D as DataStore, H as HookBus, M as MessageStore, a as ChatResponder, b as MessageInterpreter, E as Extractor } from './chat-pipeline-aBSj7a4E.js';
-export { c as ChatPipeline, d as ChatPipelineConfig, e as DataStoreError, f as EntityContextDef, g as EntityFileSpec, h as EntitySource, i as ExtractedFile, j as ExtractedMemory, k as ExtractedTask, l as ExtractedUserContext, F as Filter, m as HookHandler, n as HookOptions, o as HookRegistration, I as InterpretationResult, L as LLMCallFn, p as MessageInterpreterConfig, P as PkLookup, Q as QueryOptions, R as RelationDef, q as RoutingDecision, r as RoutingRule, s as Row, S as SeedItem, t as SqliteAdapter, u as StoreResult, v as StoredAttachment, T as TableDefinition, w as TableInfoRow, x as TriageRouter, y as TriageRouterConfig, U as Unsubscribe } from './chat-pipeline-aBSj7a4E.js';
-import 'better-sqlite3';
-
-/** Execution adapter types — Story 1.5 / 3.4 / 3.5 */
-type RunStatus = "queued" | "running" | "succeeded" | "failed" | "cancelled";
-interface RunContext {
-    runId: string;
-    agentId: string;
-    agentSlug: string;
-    taskId?: string;
-    taskTitle?: string;
-    taskDescription?: string;
-    model: string;
-    workdir: string;
-    sessionParams?: unknown;
-    abortSignal?: AbortSignal;
-    onLog?: (line: string) => void;
-}
-interface RunResult {
-    status: "succeeded" | "failed";
-    output?: string;
-    error?: string;
-    usage?: TokenUsage;
-    costCents?: number;
-    sessionParams?: unknown;
-    clearSession?: boolean;
-    durationMs: number;
-}
-interface ExecutionAdapter {
-    id: string;
-    execute(ctx: RunContext): Promise<RunResult>;
-}
-
-/** Agent types — Story 1.5 / 3.1 */
-type AgentStatus = "idle" | "running" | "paused" | "terminated" | "error";
-interface AgentDefinition {
-    slug: string;
-    name: string;
-    role?: string;
-    adapter: string;
-    model?: string;
-    workdir?: string;
-    instructionsFile?: string;
-    maxConcurrentRuns?: number;
-    budgetMonthlyCents?: number;
-    canCreateAgents?: boolean;
-    skipPermissions?: boolean;
-    config?: Record<string, unknown>;
-}
-interface AgentRecord extends AgentDefinition {
-    id: string;
-    status: AgentStatus;
-    spentMonthlyCents: number;
-    createdAt: string;
-    updatedAt: string;
-    deletedAt?: string;
-}
-interface AgentFilter {
-    status?: AgentStatus | AgentStatus[];
-    role?: string;
-    adapter?: string;
-}
-interface BudgetCheck {
-    allowed: boolean;
-    status: "ok" | "warning" | "hard_stop";
-    spentCents: number;
-    limitCents?: number;
-    message?: string;
-}
-
-/** Task types — Story 1.5 / 3.2 */
-type TaskStatus = "backlog" | "todo" | "in_progress" | "in_review" | "done" | "blocked" | "cancelled";
-interface RetryPolicy {
-    maxRetries: number;
-    backoffMs: number;
-    backoffMultiplier: number;
-    maxBackoffMs: number;
-}
-interface TaskDefinition {
-    title: string;
-    description?: string;
-    assigneeId?: string;
-    priority?: number;
-    parentId?: string;
-    dependsOn?: string[];
-    followupAgentId?: string;
-    followupTemplate?: string;
-    chainOriginId?: string;
-    chainDepth?: number;
-    retryPolicy?: RetryPolicy;
-    metadata?: Record<string, unknown>;
-}
-interface TaskRecord extends Required<Pick<TaskDefinition, "title" | "priority">> {
-    id: string;
-    description: string;
-    assigneeId?: string;
-    status: TaskStatus;
-    priority: number;
-    parentId?: string;
-    dependsOn: string[];
-    followupAgentId?: string;
-    followupTemplate?: string;
-    chainOriginId?: string;
-    chainDepth: number;
-    retryPolicy?: RetryPolicy;
-    retryCount: number;
-    maxRetries: number;
-    nextRetryAt?: string;
-    executionRunId?: string;
-    result?: string;
-    completedOutput?: string;
-    metadata?: Record<string, unknown>;
-    createdAt: string;
-    updatedAt: string;
-    completedAt?: string;
-    deletedAt?: string;
-}
-
-/** Bot configuration types — Story 1.2 / 1.5 */
-interface DataConfig {
-    path: string;
-    walMode: boolean;
-    backupDir?: string;
-}
-interface ModelConfig {
-    aliases: Record<string, string>;
-    default: string;
-    routing: Record<string, string>;
-    fallbackChain: string[];
-    costLimit?: {
-        perRunCents?: number;
-    };
-}
-interface SecurityConfig {
-    fieldLengthLimits?: Record<string, number>;
-    allowedFilePrefixes?: string[];
-}
-interface RenderConfig {
-    outputDir: string;
-    watchIntervalMs: number;
-}
-interface UpdateConfig {
-    policy: "auto-all" | "auto-compatible" | "auto-patch" | "notify" | "manual";
-    checkIntervalMs: number;
-    maintenanceWindow?: {
-        utcHourStart: number;
-        utcHourEnd: number;
-        days?: Array<"mon" | "tue" | "wed" | "thu" | "fri" | "sat" | "sun">;
-    };
-}
-interface BudgetConfig {
-    globalMonthlyCents?: number;
-    warnPercent: number;
-}
-interface EntityColumnDef {
-    type: "uuid" | "text" | "integer" | "boolean" | "datetime" | "real";
-    required?: boolean;
-    default?: string | number | boolean;
-    references?: string;
-}
-interface EntityConfig {
-    columns: Record<string, EntityColumnDef>;
-    relations?: Array<{
-        type: "hasMany" | "manyToMany" | "belongsTo";
-        table: string;
-        through?: string;
-        localKey?: string;
-        remoteKey?: string;
-    }>;
-}
-interface AgentConfig {
-    slug: string;
-    name: string;
-    role?: string;
-    adapter: string;
-    model?: string;
-    workdir?: string;
-    instructionsFile?: string;
-    maxConcurrentRuns?: number;
-    budgetMonthlyCents?: number;
-    canCreateAgents?: boolean;
-    skipPermissions?: boolean;
-    config?: Record<string, unknown>;
-}
-interface ExecutionConfig {
-    /** Model for task execution. Default: models.routing.task_execution */
-    model?: string;
-    /** Max tool loop iterations per task. Default: 5 */
-    maxIterations?: number;
-    /** Max tokens per LLM call. Default: 4096 */
-    maxTokens?: number;
-    /** Additional system prompt text appended to agent prompt */
-    systemPromptSuffix?: string;
-}
-interface ChatConfig {
-    /** System prompt for the conversational responder */
-    systemPrompt?: string;
-    /** Max tokens for context window. Default: 4000 */
-    contextWindowTokens?: number;
-    /** Max recent outbound messages for redundancy check. Default: 10 */
-    redundancyWindow?: number;
-    /** Message dedup window in ms. Default: 300000 (5 min) */
-    dedupWindowMs?: number;
-    /** Max tokens for ack responses. Default: 500 */
-    responseMaxTokens?: number;
-}
-interface RoutingConfig {
-    /** Routing rules for message triage */
-    rules: Array<{
-        agentSlug: string;
-        keywords?: string[];
-        patterns?: string[];
-        priority?: number;
-    }>;
-    /** Default agent when no rule matches */
-    fallbackAgent: string;
-    /** Use LLM for ambiguous messages. Default: false */
-    llmFallback?: boolean;
-}
-interface SafetyConfig {
-    /** Circuit breaker failure threshold. Default: 3 */
-    circuitBreakerThreshold?: number;
-    /** Circuit breaker reset timeout ms. Default: 300000 (5 min) */
-    circuitBreakerResetMs?: number;
-    /** Max agent followup chain depth. Default: 5 */
-    maxChainDepth?: number;
-    /** Stale run detection threshold ms. Default: 1800000 (30 min) */
-    staleRunThresholdMs?: number;
-}
-interface BotConfig {
-    data: DataConfig;
-    channels: Record<string, {
-        enabled: boolean;
-        accounts?: Record<string, unknown>;
-    } & Record<string, unknown>>;
-    connectors?: Record<string, {
-        enabled: boolean;
-        provider: string;
-        accounts?: Record<string, ConnectorConfig>;
-    } & Record<string, unknown>>;
-    agents: AgentConfig[];
-    providers: Record<string, {
-        enabled: boolean;
-    } & Record<string, unknown>>;
-    models: ModelConfig;
-    entities: Record<string, EntityConfig>;
-    security: SecurityConfig;
-    render: RenderConfig;
-    updates: UpdateConfig;
-    budget: BudgetConfig;
-    execution?: ExecutionConfig;
-    chat?: ChatConfig;
-    routing?: RoutingConfig;
-    safety?: SafetyConfig;
-    workflows?: Record<string, WorkflowConfigEntry>;
-}
-interface WorkflowConfigEntry {
-    name: string;
-    description?: string;
-    steps: WorkflowStepConfig[];
-    trigger?: {
-        type: "task_completed" | "event" | "schedule" | "manual";
-        filter?: Record<string, unknown>;
-    };
-}
-interface WorkflowStepConfig {
-    id: string;
-    name: string;
-    agentSlug?: string;
-    taskTemplate: {
-        title: string;
-        description: string;
-    };
-    dependsOn?: string[];
-    onComplete?: "next" | "parallel" | "end";
-    onFail?: "abort" | "skip" | "retry";
-    retryPolicy?: RetryPolicy;
-}
-
-/** Workflow types — Story 1.5 / 5.1 */
-type WorkflowRunStatus = "running" | "completed" | "failed" | "cancelled";
-interface WorkflowStep$1 {
-    id: string;
-    name: string;
-    agentSlug?: string;
-    agentResolver?: string;
-    taskTemplate: {
-        title: string;
-        description: string;
-    };
-    dependsOn?: string[];
-    onComplete?: "next" | "parallel" | "end";
-    onFail?: "abort" | "skip" | "retry";
-    retryPolicy?: RetryPolicy;
-    condition?: string;
-}
-interface WorkflowDefinition$1 {
-    slug: string;
-    name: string;
-    description?: string;
-    steps: WorkflowStep$1[];
-    trigger?: WorkflowTrigger;
-}
-interface WorkflowTrigger {
-    type: "task_completed" | "event" | "schedule" | "manual";
-    filter?: Record<string, unknown>;
-}
-interface WorkflowRunRecord {
-    id: string;
-    workflowId: string;
-    status: WorkflowRunStatus;
-    currentStep: number;
-    context: Record<string, unknown>;
-    originTaskId?: string;
-    startedAt: string;
-    finishedAt?: string;
-    error?: string;
-}
-
-/** Shared constants — event names, default values, status enums */
-/** Hook/event name constants */
-declare const EVENTS: {
-    readonly COST_RECORDED: "cost.recorded";
-    readonly AGENT_CREATED: "agent.created";
-    readonly AGENT_STATUS_CHANGED: "agent.status_changed";
-    readonly BUDGET_EXCEEDED: "budget.exceeded";
-    readonly TASK_CREATED: "task.created";
-    readonly TASK_COMPLETED: "task.completed";
-    readonly TASK_FAILED: "task.failed";
-    readonly TASK_CANCELLED: "task.cancelled";
-    readonly RUN_STARTED: "run.started";
-    readonly RUN_COMPLETED: "run.completed";
-    readonly RUN_FAILED: "run.failed";
-    readonly MESSAGE_INBOUND: "message.inbound";
-    readonly MESSAGE_ROUTED: "message.routed";
-    readonly MESSAGE_PROCESSED: "message.processed";
-    readonly MESSAGE_OUTBOUND: "message.outbound";
-    readonly MESSAGE_SENT: "message.sent";
-    readonly UPDATE_AVAILABLE: "update.available";
-    readonly UPDATE_STARTED: "update.started";
-    readonly UPDATE_COMPLETED: "update.completed";
-    readonly UPDATE_FAILED: "update.failed";
-    readonly WORKFLOW_STARTED: "workflow.started";
-    readonly WORKFLOW_STEP_COMPLETED: "workflow.step_completed";
-    readonly WORKFLOW_COMPLETED: "workflow.completed";
-    readonly WORKFLOW_FAILED: "workflow.failed";
-};
-/** Default config values */
-declare const DEFAULTS: {
-    readonly TASK_POLL_INTERVAL_MS: 30000;
-    readonly NOTIFICATION_POLL_INTERVAL_MS: 5000;
-    readonly ORPHAN_REAP_INTERVAL_MS: 300000;
-    readonly STALE_RUN_THRESHOLD_MS: 1800000;
-    readonly STALE_TASK_AGE_MS: 7200000;
-    readonly MAX_CHAIN_DEPTH: 5;
-    readonly MAX_NOTIFICATION_RETRIES: 3;
-    readonly UPDATE_CHECK_INTERVAL_MS: 86400000;
-    readonly RENDER_WATCH_INTERVAL_MS: 30000;
-    readonly DATA_PATH: "./data/bot.db";
-    readonly RENDER_OUTPUT_DIR: "./context";
-    readonly LOG_PATH_TEMPLATE: "./data/runs/{runId}.ndjson";
-    readonly BUDGET_WARN_PERCENT: 80;
-};
-/** Task status values */
-declare const TASK_STATUSES: readonly ["backlog", "todo", "in_progress", "in_review", "done", "blocked", "cancelled"];
-/** Agent status values */
-declare const AGENT_STATUSES: readonly ["idle", "running", "paused", "terminated", "error"];
-/** Run status values */
-declare const RUN_STATUSES: readonly ["queued", "running", "succeeded", "failed", "cancelled"];
-
-/** Shared utility functions. */
 /**
- * Truncate text at a word boundary, appending "..." if truncated.
- * Returns the original text if it's shorter than maxLen.
- */
-declare function truncateAtWord(text: string, maxLen: number): string;
-
-interface ConfigLoadError {
-    field: string;
-    message: string;
-}
-interface ConfigLoadResult {
-    config: BotConfig;
-    errors: ConfigLoadError[];
-}
-/**
- * Load and merge config from file, with env var interpolation and runtime overrides.
- * Merge order: defaults < config file < runtime overrides
- */
-declare function loadConfig(opts?: {
-    configPath?: string;
-    overrides?: Partial<BotConfig>;
-    env?: Record<string, string | undefined>;
-}): ConfigLoadResult;
-/** Get the loaded config singleton. Auto-initializes with defaults if not loaded. */
-declare function getConfig(): BotConfig;
-/** Initialize the config singleton. Returns errors if any. */
-declare function initConfig(opts?: Parameters<typeof loadConfig>[0]): ConfigLoadError[];
-/** Reset the singleton (for testing) */
-declare function _resetConfig(): void;
-
-/**
- * Interpolate ${ENV_VAR} references in YAML string values.
- * Recursively walks objects and arrays.
- */
-declare function interpolateEnv(value: unknown, env?: Record<string, string | undefined>): unknown;
-
-interface SchemaError {
-    path: string;
-    message: string;
-}
-declare function validateConfig(config: unknown): SchemaError[];
-
-declare const DEFAULT_CONFIG: BotConfig;
-
-declare class ProviderRegistry {
-    private providers;
-    register(provider: LLMProvider): void;
-    unregister(id: string): void;
-    get(id: string): LLMProvider | undefined;
-    list(): LLMProvider[];
-    listModels(): ModelInfo[];
-}
-
-declare class ModelRouter {
-    private readonly registry;
-    private readonly config;
-    constructor(registry: ProviderRegistry, config: ModelConfig);
-    /**
-     * Resolve a model ID or alias to a ResolvedModel.
-     * 1. Look up alias in config.aliases (or use as-is)
-     * 2. Search all registered providers for a model with that id
-     */
-    resolve(modelIdOrAlias: string): ResolvedModel | undefined;
-    /**
-     * Try primary model, then each in config.fallbackChain.
-     * Throws if none found.
-     */
-    resolveWithFallback(modelIdOrAlias: string): ResolvedModel;
-    /**
-     * Use config.routing[purpose] ?? config.default, then resolveWithFallback.
-     */
-    resolveForPurpose(purpose: string): ResolvedModel;
-    /** Returns all models from all registered providers. */
-    listAvailable(): ModelInfo[];
-}
-
-type Importer$1 = (packageName: string) => Promise<unknown>;
-/**
- * Scans nodeModulesPath/@botinabox/{pkg}/package.json for each package in the scope.
- * If pkg.botinabox?.type === 'provider', dynamically imports the package
- * and returns the discovered LLMProvider instances.
- *
- * The optional importer parameter allows injection for testing.
- */
-declare function discoverProviders(nodeModulesPath: string, importer?: Importer$1): Promise<LLMProvider[]>;
-
-/**
- * Default LLM call function — ready-to-use wrapper around the Anthropic SDK.
- *
- * Handles model routing (fast → Haiku, default → Sonnet), message formatting,
- * and response extraction. Apps can use this directly or provide their own.
- */
-
-interface DefaultLLMCallConfig {
-    /** Fast model ID (for acks, interpretation). Default: claude-haiku-4-5-20251001 */
-    fastModel?: string;
-    /** Standard model ID (for execution). Default: claude-sonnet-4-20250514 */
-    defaultModel?: string;
-}
-/**
- * Create a default LLM call function using the Anthropic SDK.
- *
- * @param anthropicClient - An initialized Anthropic client instance
- * @param config - Optional model configuration
- */
-declare function createDefaultLLMCall(anthropicClient: {
-    messages: {
-        create: (params: Record<string, unknown>) => Promise<{
-            content: Array<{
-                type: string;
-                text?: string;
-            }>;
-            model: string;
-            stop_reason: string;
-            usage: {
-                input_tokens: number;
-                output_tokens: number;
-            };
-        }>;
-    };
-}, config?: DefaultLLMCallConfig): ChatResponderConfig['llmCall'];
-
-/**
- * ChannelRegistry — manages channel adapter lifecycle.
- * Story 4.1
- */
-
-declare class ChannelRegistryError extends Error {
-    constructor(message: string);
-}
-declare class ChannelRegistry {
-    private readonly adapters;
-    private started;
-    /**
-     * Register a channel adapter.
-     * Throws if an adapter with the same id is already registered.
-     * If registry is already started, immediately connects the adapter.
-     */
-    register(adapter: ChannelAdapter, config?: unknown): void;
-    /**
-     * Unregister a channel adapter.
-     * Disconnects the adapter if it exists.
-     */
-    unregister(id: string): Promise<void>;
-    /**
-     * Reconfigure an adapter: disconnect, update config, reconnect.
-     */
-    reconfigure(id: string, config: unknown): Promise<void>;
-    /**
-     * Run health checks on all registered adapters.
-     */
-    healthCheck(): Promise<Record<string, HealthStatus>>;
-    /** Check if an adapter is registered. */
-    has(id: string): boolean;
-    /** Get an adapter by ID. */
-    get(id: string): ChannelAdapter | undefined;
-    /** List all registered adapters. */
-    list(): ChannelAdapter[];
-    /**
-     * Start: connect all registered adapters and mark registry as started.
-     */
-    start(): Promise<void>;
-    /**
-     * Stop: disconnect all registered adapters.
-     */
-    stop(): Promise<void>;
-}
-
-/**
- * Auto-discovery for channel adapters.
- * Scans @botinabox/* packages for botinabox.type === 'channel'.
- * Story 4.1
- */
-
-type Importer = (packageName: string) => Promise<unknown>;
-/**
- * Scans nodeModulesPath/@botinabox/{pkg}/package.json for each package in the scope.
- * If pkg.botinabox?.type === 'channel', dynamically imports the package
- * and returns the discovered ChannelAdapter instances.
- *
- * The optional importer parameter allows injection for testing.
- */
-declare function discoverChannels(nodeModulesPath: string, importer?: Importer): Promise<ChannelAdapter[]>;
-
-declare class AgentRegistry {
-    private db;
-    private hooks;
-    constructor(db: DataStore, hooks: HookBus);
-    register(agent: {
-        slug: string;
-        name: string;
-        adapter: string;
-        role?: string;
-        [key: string]: unknown;
-    }, opts?: {
-        actorAgentId?: string;
-    }): Promise<string>;
-    getById(id: string): Promise<Record<string, unknown> | undefined>;
-    getBySlug(slug: string): Promise<Record<string, unknown> | undefined>;
-    list(filter?: {
-        status?: string;
-        role?: string;
-    }): Promise<Record<string, unknown>[]>;
-    update(id: string, changes: Record<string, unknown>): Promise<void>;
-    setStatus(id: string, newStatus: string): Promise<void>;
-    terminate(id: string): Promise<void>;
-    seedFromConfig(agentConfigs: Array<{
-        slug: string;
-        name: string;
-        adapter: string;
-        [key: string]: unknown;
-    }>): Promise<void>;
-}
-
-declare const MAX_CHAIN_DEPTH = 5;
-/**
- * Throws if depth exceeds the maximum allowed chain depth.
- */
-declare function checkChainDepth(depth: number, max?: number): void;
-/**
- * Build chain origin metadata for a new child task.
- * If parentTaskId is provided, sets chain_origin_id and increments depth.
- * Otherwise returns depth=0 with no origin.
- */
-declare function buildChainOrigin(parentTaskId?: string, parentOriginId?: string, parentDepth?: number): {
-    chain_origin_id?: string;
-    chain_depth: number;
-};
-
-declare class TaskQueue {
-    private db;
-    private hooks;
-    private config?;
-    private pollTimer;
-    private readonly pollIntervalMs;
-    private readonly staleThresholdMs;
-    constructor(db: DataStore, hooks: HookBus, config?: {
-        pollIntervalMs?: number;
-        staleThresholdMs?: number;
-    } | undefined);
-    create(task: {
-        title: string;
-        description?: string;
-        assignee_id?: string;
-        priority?: number;
-        chain_depth?: number;
-        chain_origin_id?: string;
-        [key: string]: unknown;
-    }): Promise<string>;
-    update(id: string, changes: Record<string, unknown>): Promise<void>;
-    get(id: string): Promise<Record<string, unknown> | undefined>;
-    list(filter?: {
-        status?: string;
-        assignee_id?: string;
-    }): Promise<Record<string, unknown>[]>;
-    startPolling(): void;
-    stopPolling(): void;
-    private poll;
-}
-
-interface UserInput {
-    id?: string;
-    org_id?: string;
-    name: string;
-    email?: string;
-    role?: string;
-    title?: string;
-    external_id?: string;
-    channel?: string;
-    timezone?: string;
-    preferences?: string;
-    notes?: string;
-}
-interface User {
-    id: string;
-    org_id: string | null;
-    name: string;
-    email: string | null;
-    role: string | null;
-    title: string | null;
-    external_id: string | null;
-    channel: string | null;
-    timezone: string | null;
-    preferences: string;
-    notes: string | null;
-    created_at: string;
-    updated_at: string;
-    deleted_at: string | null;
-}
-declare class UserRegistry {
-    private readonly db;
-    private readonly hooks;
-    constructor(db: DataStore, hooks: HookBus);
-    register(input: UserInput): Promise<User>;
-    getById(id: string): Promise<User | null>;
-    getByEmail(email: string): Promise<User | null>;
-    resolveByIdentity(channel: string, externalId: string): Promise<User | null>;
-    resolveOrCreate(externalId: string, channel: string, defaults?: Partial<UserInput>): Promise<User>;
-    list(filter?: {
-        role?: string;
-        org_id?: string;
-    }): Promise<User[]>;
-    update(id: string, changes: Partial<UserInput>): Promise<void>;
-    addIdentity(userId: string, channel: string, externalId: string, displayName?: string): Promise<void>;
-}
-
-/**
- * MessagePipeline — routes inbound messages to the task queue.
- * Story 4.2
- */
-
-declare class MessagePipeline {
-    private readonly hooks;
-    private readonly agentRegistry;
-    private readonly taskQueue;
-    private readonly config;
-    private readonly agentBindings;
-    private readonly userRegistry?;
-    constructor(hooks: HookBus, agentRegistry: AgentRegistry, taskQueue: TaskQueue, config: BotConfig, userRegistry?: UserRegistry);
-    /**
-     * Process an inbound message end-to-end.
-     * 1. Emit 'message.inbound'
-     * 2. Resolve agent
-     * 3. Check policy (allowlist / mention gate)
-     * 4. Create task
-     * 5. Emit 'message.processed'
-     */
-    processInbound(msg: InboundMessage): Promise<void>;
-    /**
-     * Resolve the best agent for a given inbound message.
-     * Returns agentId (slug) or undefined if no match.
-     */
-    resolveAgent(msg: InboundMessage): string | undefined;
-    /**
-     * Evaluate messaging policy for the given agent.
-     * Returns false if the message is blocked.
-     */
-    evaluatePolicy(msg: InboundMessage, agentId: string): boolean;
-}
-
-/**
- * Chat routing — maps channel/scope to agentId.
- * Story 4.2
- *
- * @deprecated Use TriageRouter for content-aware routing with keyword/regex
- * matching and LLM fallback. This static channel→agent binding is kept for
- * backward compatibility only. See `./triage-router.ts`.
- */
-
-/**
- * Build a map from channel identifier to agentId.
- * Each agent may have a config.channel or config.channels binding.
- *
- * @deprecated Use TriageRouter instead — it supports keyword, regex,
- * and LLM-based routing with ownership chain logging.
- */
-declare function buildAgentBindings(agents: AgentConfig[]): Map<string, string>;
-
-/**
- * Chat policy helpers — allowlist and mention gate checks.
- * Story 4.2
- */
-
-/**
- * Returns true if the sender is in the allowlist.
- * If allowFrom is empty, all senders are allowed.
- */
-declare function checkAllowlist(allowFrom: string[], senderId: string): boolean;
-/**
- * Returns true if the message passes the mention gate.
- * In group/channel contexts, the bot must be mentioned (body contains @botId or similar).
- * In direct contexts, always passes.
- */
-declare function checkMentionGate(msg: InboundMessage, botId: string): boolean;
-
-/**
- * SessionKey — structured key for chat sessions.
- * Story 4.3
- */
-declare class SessionKey {
-    readonly agentId: string;
-    readonly channel: string;
-    readonly scope: string;
-    constructor(agentId: string, channel: string, scope: string);
-    toString(): string;
-    toJSON(): {
-        agentId: string;
-        channel: string;
-        scope: string;
-    };
-    static fromString(key: string): SessionKey;
-    /**
-     * Build a session key from structured parameters.
-     *
-     * @param agentId      - The agent identifier
-     * @param channel      - The channel identifier
-     * @param chatType     - 'dm' or 'group'
-     * @param peerId       - The peer/user ID
-     * @param dmScope      - DM scoping strategy
-     *   - 'main'               → single session per agent+channel regardless of peer
-     *   - 'per-peer'           → one session per (agent, peer)
-     *   - 'per-channel-peer'   → one session per (agent, channel, peer)
-     */
-    static build(agentId: string, channel: string, chatType: "dm" | "group", peerId: string, dmScope: "main" | "per-peer" | "per-channel-peer"): SessionKey;
-}
-
-/**
- * ChatSessionManager — wraps orchestrator SessionManager with SessionKey-based lookup.
- * Story 4.3
- */
-
-declare class ChatSessionManager {
-    private readonly inner;
-    constructor(db: DataStore);
-    save(key: SessionKey, params: Record<string, unknown>): Promise<string>;
-    load(key: SessionKey): Promise<Record<string, unknown> | undefined>;
-    clear(key: SessionKey): Promise<void>;
-    shouldClear(session: Record<string, unknown>, opts: {
-        maxRuns?: number;
-        maxAgeHours?: number;
-    }): Promise<boolean>;
-}
-
-/**
- * NotificationQueue — persistent outbound notification queue with retry.
- * Story 4.4
- */
-
-interface NotificationQueueOpts {
-    maxRetries?: number;
-    pollIntervalMs?: number;
-}
-declare class NotificationQueue {
-    private readonly db;
-    private readonly hooks;
-    private readonly channelRegistry;
-    private readonly maxRetries;
-    private readonly pollIntervalMs;
-    private timer;
-    constructor(db: DataStore, hooks: HookBus, channelRegistry: ChannelRegistry, opts?: NotificationQueueOpts);
-    /**
-     * Enqueue a notification for delivery.
-     * Returns the notification ID.
-     */
-    enqueue(channel: string, recipient: string, payload: {
-        text: string;
-        threadId?: string;
-        [key: string]: unknown;
-    }): Promise<string>;
-    /** Start the background worker polling for pending notifications. */
-    startWorker(): void;
-    /** Stop the background worker. */
-    stopWorker(): void;
-    private processNext;
-}
-
-/**
- * CircuitBreaker — prevents runaway agent failures with automatic escalation.
- * Story 6.2
- *
- * States:
- *   CLOSED  → normal operation, failures counted
- *   OPEN    → tripped, all executions blocked, escalated to human
- *   HALF_OPEN → probe mode, one execution allowed to test recovery
- *
- * Integrates with LoopDetector and RunManager via HookBus events.
- */
-
-declare enum BreakerState {
-    CLOSED = "closed",
-    OPEN = "open",
-    HALF_OPEN = "half_open"
-}
-interface CircuitBreakerConfig {
-    /** Failures before tripping. Default: 3 */
-    failureThreshold?: number;
-    /** Milliseconds to wait before half-open probe. Default: 300_000 (5 min) */
-    resetTimeoutMs?: number;
-    /** Log events to the database. Default: true */
-    persist?: boolean;
-}
-declare class CircuitBreaker {
-    private db;
-    private hooks;
-    private readonly breakers;
-    private readonly failureThreshold;
-    private readonly resetTimeoutMs;
-    private readonly persist;
-    constructor(db: DataStore, hooks: HookBus, config?: CircuitBreakerConfig);
-    /**
-     * Check if an agent is allowed to execute.
-     * Returns true if execution is allowed, false if circuit is open.
-     */
-    canExecute(agentId: string): boolean;
-    /**
-     * Record a successful execution. Resets the breaker to CLOSED.
-     */
-    recordSuccess(agentId: string): Promise<void>;
-    /**
-     * Record a failed execution. Increments failure count and may trip breaker.
-     */
-    recordFailure(agentId: string, reason?: string): Promise<void>;
-    /**
-     * Trip the breaker to OPEN state and escalate to human.
-     */
-    trip(agentId: string, reason: string): Promise<void>;
-    /**
-     * Manually reset a breaker (e.g. after human review).
-     */
-    reset(agentId: string): Promise<void>;
-    /**
-     * Get the current state of a breaker.
-     */
-    getState(agentId: string): BreakerState;
-    /**
-     * Get failure count for an agent.
-     */
-    getFailureCount(agentId: string): number;
-    private logEvent;
-}
-
-declare class RunManager {
-    private db;
-    private hooks;
-    private config?;
-    private locks;
-    private orphanTimer;
-    private readonly staleThresholdMs;
-    private circuitBreaker?;
-    constructor(db: DataStore, hooks: HookBus, config?: {
-        staleThresholdMs?: number;
-        maxBackoffMs?: number;
-    } | undefined);
-    /**
-     * Attach a CircuitBreaker to prevent retries on broken agents.
-     */
-    setCircuitBreaker(cb: CircuitBreaker): void;
-    isLocked(agentId: string): boolean;
-    startRun(agentId: string, taskId: string, adapter?: string): Promise<string>;
-    finishRun(runId: string, result: {
-        exitCode: number;
-        output?: string;
-        costCents?: number;
-        usage?: unknown;
-    }): Promise<void>;
-    reapOrphans(): Promise<void>;
-    startOrphanReaper(intervalMs?: number): void;
-    stopOrphanReaper(): void;
-}
-
-/**
- * ExecutionEngine — generic task executor with pluggable tools and tool loop.
- *
- * Listens for task.created events, picks up tasks, runs them through an LLM
- * with tools, and finishes the run with the result.
- *
- * Apps configure: model, tools, system prompt, max iterations.
- * Framework handles: task pickup, locking, tool loop, cost tracking, result storage.
- */
-
-interface ToolDefinition {
-    name: string;
-    description: string;
-    input_schema: Record<string, unknown>;
-}
-type ToolHandler = (input: Record<string, unknown>, context: ToolContext) => Promise<string>;
-interface ToolContext {
-    taskId: string;
-    agentId: string;
-    hooks: HookBus;
-    db: DataStore;
-    /** Resolve a relative file path to an absolute path (environment-aware). */
-    resolveFilePath?: (path: string) => string;
-}
-interface ContextFile {
-    /** Absolute path, used as the `path` attribute in the wrapped XML tag. */
-    path: string;
-    /** Raw file contents (UTF-8). The engine does not read the filesystem itself. */
-    content: string;
-}
-interface ExecutionEngineConfig {
-    /** Anthropic client instance */
-    client: {
-        messages: {
-            create: (params: Record<string, unknown>) => Promise<{
-                content: Array<{
-                    type: string;
-                    text?: string;
-                    id?: string;
-                    name?: string;
-                    input?: unknown;
-                }>;
-                stop_reason: string;
-                usage: {
-                    input_tokens: number;
-                    output_tokens: number;
-                };
-            }>;
-        };
-    };
-    /** Model to use. Default: claude-sonnet-4-20250514 */
-    model?: string;
-    /** Max tool loop iterations. Default: 5 */
-    maxIterations?: number;
-    /** Tools available to the agent */
-    tools?: Array<{
-        definition: ToolDefinition;
-        handler: ToolHandler;
-    }>;
-    /** Additional system prompt text (appended after system context) */
-    systemPromptSuffix?: string;
-    /** Include system context (users, files, etc). Default: true */
-    includeSystemContext?: boolean;
-    /** Resolve file paths from DB-relative to absolute (for cross-environment support). */
-    resolveFilePath?: (path: string) => string;
-    /**
-     * Optional per-dispatch context resolver. Called once per task pickup with
-     * the resolved agent and task rows. Returned files are wrapped in
-     * `<file path="...">...</file>` XML tags and inserted into the system
-     * prompt between the static `buildSystemContext` block and the tool
-     * listing. Intended for apps that want to inject per-agent or per-project
-     * rendered context (rules, playbooks, agent definitions) that is not
-     * already covered by `buildSystemContext`.
-     *
-     * The resolver owns all filesystem / database lookups — the engine does
-     * not touch the disk. If the resolver throws, the task fails loudly per
-     * Rule-16-style fail-loud semantics; there is no silent fallback.
-     */
-    resolveContextFiles?: (ctx: {
-        agent: Record<string, unknown>;
-        task: Record<string, unknown>;
-    }) => Promise<ContextFile[]> | ContextFile[];
-}
-declare function registerExecutionEngine(opts: {
-    db: DataStore;
-    hooks: HookBus;
-    runs: RunManager;
-    config: ExecutionEngineConfig;
-}): Promise<void>;
-
-/**
- * SystemContextBuilder — loads entity data from the database and formats
- * it as markdown for injection into LLM system prompts.
- *
- * Used by both the ChatPipeline (ack layer) and ExecutionEngine (agent layer)
- * to give LLMs awareness of the system state.
- */
-
-interface SystemContextOptions {
-    /** Include users. Default: true */
-    users?: boolean;
-    /** Include agents. Default: true */
-    agents?: boolean;
-    /** Include projects. Default: true */
-    projects?: boolean;
-    /** Include clients. Default: true */
-    clients?: boolean;
-    /** Include files. Default: true */
-    files?: boolean;
-    /** Include org. Default: true */
-    org?: boolean;
-}
-/**
- * Build a markdown-formatted system context string from the database.
- * Queries users, agents, projects, clients, files, and org.
- */
-declare function buildSystemContext(db: DataStore, options?: SystemContextOptions): Promise<string>;
-
-/**
- * ChatPipelineV2 — Primary Agent Architecture.
- *
- * Replaces the 6-layer "dumb ack + headless execution" pattern with a
- * 3-phase "conversational brain + tool delegation" pattern:
- *
- *   Phase 1: RECEIVE — Store message, build history, emit typing indicator
- *   Phase 2: THINK  — Call primary agent LLM with history + tools in a loop
- *   Phase 3: RESPOND — Deliver agent's text, run async memory extraction
- *
- * The primary agent is the conversational hub. It has full conversation
- * context and uses tools to answer directly (single-agent) or delegate
- * work (multi-agent). One response per message — no separate ack.
- */
-
-type ContentBlock = {
-    type: string;
-    text?: string;
-    id?: string;
-    name?: string;
-    input?: unknown;
-    source?: unknown;
-};
-type MessageParam = {
-    role: string;
-    content: string | ContentBlock[];
-};
-interface ChatPipelineV2Config {
-    /** Primary agent LLM call — supports tool use */
-    llmCall: (params: {
-        model: string;
-        messages: MessageParam[];
-        system?: string;
-        maxTokens?: number;
-        tools?: ToolDefinition[];
-        tool_choice?: {
-            type: string;
-        };
-    }) => Promise<{
-        content: ContentBlock[];
-        stop_reason: string;
-        usage?: {
-            input_tokens: number;
-            output_tokens: number;
-        };
-    }>;
-    /** System prompt for the primary agent */
-    systemPrompt: string;
-    /** Tools available to the primary agent */
-    tools?: Array<{
-        definition: ToolDefinition;
-        handler: ToolHandler;
-    }>;
-    /** Model (default: 'claude-sonnet-4-6') */
-    model?: string;
-    /** Max tool loop iterations (default: 5) */
-    maxIterations?: number;
-    /** Max tokens for response (default: 4096) */
-    maxTokens?: number;
-    /** Optional message filter */
-    messageFilter?: (msg: InboundMessage) => boolean;
-    /** Channel (default: 'slack') */
-    channel?: string;
-    /** Dedup window ms (default: 300_000) */
-    dedupWindowMs?: number;
-    /** Conversation history config */
-    history?: {
-        maxMessages?: number;
-        maxAgeDays?: number;
-        includeAssistant?: boolean;
-    };
-    /** Include system context from DB (default: true) */
-    includeSystemContext?: boolean;
-    /** Options for buildSystemContext */
-    systemContextOptions?: SystemContextOptions;
-    /** TaskQueue for dispatch_task and sub-agent result delivery */
-    tasks: {
-        create(task: Record<string, unknown>): Promise<string>;
-        update(id: string, changes: Record<string, unknown>): Promise<void>;
-        get(id: string): Promise<Record<string, unknown> | undefined>;
-    };
-    /** WakeupQueue for agent wakeup */
-    wakeups: {
-        enqueue(agentId: string, source: string, context?: Record<string, unknown>): Promise<string>;
-    };
-    /** Custom extractors for async memory extraction */
-    extractors?: Extractor[];
-    /** Sub-agent result handling (default: 'passthrough') */
-    subAgentResultMode?: 'passthrough' | 'synthesize';
-    /** Resolve file paths from DB-relative to absolute */
-    resolveFilePath?: (path: string) => string;
-}
-declare class ChatPipelineV2 {
-    private db;
-    private hooks;
-    private config;
-    readonly messageStore: MessageStore;
-    readonly responder: ChatResponder;
-    readonly interpreter: MessageInterpreter;
-    private readonly channel;
-    private readonly messageFilter?;
-    private readonly dedupWindowMs;
-    private readonly threadChannelMap;
-    private readonly toolDefs;
-    private readonly toolHandlers;
-    constructor(db: DataStore, hooks: HookBus, config: ChatPipelineV2Config);
-    /**
-     * Resolve the channel ID for a thread (for response delivery).
-     */
-    resolveChannel(threadId: string, taskId?: string): Promise<string | undefined>;
-    private registerHandlers;
-    /**
-     * Primary agent tool loop — adapted from ExecutionEngine pattern.
-     */
-    private think;
-    /**
-     * Build conversation history from channel messages.
-     * Includes BOTH user and assistant messages (unlike v1 which excluded bot messages).
-     */
-    private buildHistory;
-    /**
-     * Dedup check (same as v1).
-     */
-    private isDuplicate;
-    /**
-     * Async memory extraction (non-blocking, non-fatal).
-     */
-    private extractAsync;
-}
-
-/**
- * Text chunker — splits long text into chunks at natural boundaries.
- * Story 4.4
- */
-/**
- * Split text into chunks of at most maxLen characters.
- * Splits at paragraph boundaries first, then sentence, then word, then hard-cuts.
- */
-declare function chunkText(text: string, maxLen: number): string[];
-
-/**
- * Text formatter — converts markdown to channel-specific formats.
- * Story 4.4
- */
-/**
- * Format text for the given mode:
- * - 'mrkdwn': Slack's mrkdwn format (**bold** → *bold*, _italic_ preserved, `code` preserved)
- * - 'html': basic markdown → HTML (strong, em, code, pre)
- * - 'plain': strip markdown markers
- */
-declare function formatText(text: string, mode: "mrkdwn" | "html" | "plain"): string;
-
-/**
- * Define all 18 core tables on a DataStore instance.
- * Call before db.init().
- */
-declare function defineCoreTables(db: DataStore): void;
-
-/** Initial migration set for core tables */
-declare const CORE_MIGRATIONS: Array<{
-    version: string;
-    sql: string;
-}>;
-
-/**
- * Define default entity context rendering for botinabox core tables.
- * Call after defineCoreTables() and before or after init().
- *
- * Renders:
- * - agents/ — per-agent context (AGENT.md, PROJECTS.md if agent_project exists)
- * - users/  — per-user context (USER.md) — protected
- * - skills/ — per-skill context (SKILL.md)
- *
- * Apps can override by calling db.defineEntityContext() with the same table name
- * BEFORE calling defineCoreEntityContexts().
- */
-declare function defineCoreEntityContexts(db: DataStore): void;
-
-/**
- * Options for domain table generation.
- * Enable/disable optional tables based on your app's needs.
- */
-interface DomainSchemaOptions {
-    /** Include client + invoice tables (default: true) */
-    clients?: boolean;
-    /** Include repository table (default: true) */
-    repositories?: boolean;
-    /** Include file table (default: true) */
-    files?: boolean;
-    /** Include channel table (default: true) */
-    channels?: boolean;
-    /** Include rule table + junction tables (default: true) */
-    rules?: boolean;
-    /** Include event audit log (default: true) */
-    events?: boolean;
-    /** Include cross-domain junction tables (default: true) */
-    junctions?: boolean;
-}
-/**
- * Define standard domain tables that most multi-agent apps need.
- * Call after defineCoreTables() and before db.init().
- *
- * Provides: org, project, + optional client, invoice, repository,
- * file, channel, rule, event tables with appropriate junction tables.
- *
- * @example
- * ```ts
- * defineCoreTables(db);
- * defineDomainTables(db);          // all tables
- * defineDomainTables(db, { clients: false }); // skip client/invoice
- * ```
- */
-declare function defineDomainTables(db: DataStore, options?: DomainSchemaOptions): void;
-
-/**
- * Options for domain entity context generation.
- * Match the options used in defineDomainTables().
- */
-interface DomainEntityContextOptions {
-    clients?: boolean;
-    repositories?: boolean;
-    files?: boolean;
-    channels?: boolean;
-    rules?: boolean;
-    /** Column used as directory name for each entity type. Default: 'id'. */
-    orgSlugColumn?: string;
-    projectSlugColumn?: string;
-    clientSlugColumn?: string;
-    fileSlugColumn?: string;
-    channelSlugColumn?: string;
-}
-/**
- * Define entity context rendering for standard domain tables.
- * Call after defineDomainTables() and defineCoreTables().
- *
- * Renders per-entity directories with context files for:
- * org, project, + optional client, file, channel entities.
- * Also adds PROJECTS.md, RULES.md, SKILLS.md, REPOS.md to agent context.
- *
- * @example
- * ```ts
- * defineCoreTables(db);
- * defineDomainTables(db);
- * defineCoreEntityContexts(db);    // agents, users, skills
- * defineDomainEntityContexts(db);  // org, project, client, file, channel
- * ```
- */
-declare function defineDomainEntityContexts(db: DataStore, options?: DomainEntityContextOptions): void;
-
-interface SanitizerOptions {
-    fieldLengthLimits?: Record<string, number>;
-    truncateSuffix?: string;
-}
-interface AuditEvent {
-    table: string;
-    operation: 'insert' | 'update' | 'delete';
-    pk: unknown;
-    timestamp: number;
-    changedColumns?: string[];
-}
-
-/**
- * Sanitizes a row object by:
- * 1. Stripping null bytes from string values
- * 2. Stripping control characters (preserving \n, \r, \t)
- * 3. Truncating fields that exceed their byte length limit
- *
- * Non-string values pass through unchanged.
- * Returns a new object — input is never mutated.
- */
-declare function sanitize(row: Record<string, unknown>, opts?: SanitizerOptions): Record<string, unknown>;
-
-interface ColumnValidator {
-    validateWrite(table: string, row: Record<string, unknown>): Record<string, unknown>;
-    validateRead(table: string, columns: string[]): void;
-    invalidateCache(table: string): void;
-}
-/**
- * Validates column names against the live SQLite schema.
- *
- * - validateWrite: strips unknown columns silently
- * - validateRead: throws on unknown columns
- */
-declare class ColumnValidatorImpl implements ColumnValidator {
-    private readonly db;
-    constructor(db: DataStore);
-    private getValidColumns;
-    validateWrite(table: string, row: Record<string, unknown>): Record<string, unknown>;
-    validateRead(table: string, columns: string[]): void;
-    invalidateCache(_table: string): void;
-}
-
-interface AuditEmitterOptions {
-    auditTables?: string[];
-}
-/**
- * Emits audit events via the HookBus for tracked tables.
- *
- * - auditTables defaults to [] (nothing audited)
- * - '*' wildcard audits all tables
- * - emit is fire-and-forget — errors are swallowed, no awaiting
- */
-declare class AuditEmitter {
-    private readonly hooks;
-    private readonly auditTables;
-    constructor(hooks: HookBus, opts?: AuditEmitterOptions);
-    shouldAudit(table: string): boolean;
-    emit(event: AuditEvent): void;
-}
-
-/**
- * Build a clean environment for spawned subprocesses.
- * Strips secrets and passes only safe system variables.
- * Used by the CLI execution adapter when spawning agent processes.
- */
-/**
- * Build a filtered environment for subprocess execution.
- * Only passes explicitly allowed variables — all secrets are stripped.
- *
- * @param allowedKeys - Additional keys to allow beyond the defaults
- * @param inject - Extra key-value pairs to inject into the env
- */
-declare function buildProcessEnv(allowedKeys?: string[], inject?: Record<string, string>): Record<string, string>;
-
-interface PackageUpdate {
-    name: string;
-    installedVersion: string;
-    latestVersion: string;
-    updateType: 'patch' | 'minor' | 'major';
-}
-interface UpdateManifest {
-    checkedAt: string;
-    packages: PackageUpdate[];
-    hasUpdates: boolean;
-}
-
-/**
- * Simple semver utilities — no external deps.
- */
-declare function parseVersion(v: string): [number, number, number];
-declare function compareVersions(a: string, b: string): -1 | 0 | 1;
-declare function classifyUpdate(from: string, to: string): 'patch' | 'minor' | 'major' | 'none';
-
-declare class UpdateChecker {
-    private nodeModulesPath;
-    private opts?;
-    private readonly fetchFn;
-    constructor(nodeModulesPath: string, opts?: {
-        fetch?: typeof globalThis.fetch;
-    } | undefined);
-    getInstalledPackages(): string[];
-    check(packageNames?: string[]): Promise<UpdateManifest>;
-}
-
-declare class BackupManager {
-    private projectRoot;
-    constructor(projectRoot: string);
-    backup(): Promise<string>;
-    restore(backupPath: string): Promise<void>;
-    cleanup(backupPath: string): Promise<void>;
-}
-
-type UpdatePolicy = 'auto-all' | 'auto-compatible' | 'auto-patch' | 'notify' | 'manual';
-declare class UpdateManager {
-    private checker;
-    private db;
-    private hooks;
-    private opts?;
-    private backupManager;
-    constructor(checker: UpdateChecker, db: DataStore, hooks: HookBus, opts?: {
-        projectRoot?: string;
-        policy?: UpdatePolicy;
-        maintenanceWindow?: {
-            utcHourStart: number;
-            utcHourEnd: number;
-        };
-    } | undefined);
-    checkAndNotify(): Promise<UpdateManifest>;
-    applyUpdates(updates: PackageUpdate[]): Promise<void>;
-    isInMaintenanceWindow(): boolean;
-    filterByPolicy(updates: PackageUpdate[]): PackageUpdate[];
-}
-
-interface PackageMigration {
-    version: string;
-    package: string;
-    sql: string;
-}
-/**
- * Runs package migrations using the __lattice_migrations table for tracking.
- * Each migration is keyed by "{package}:{version}" to ensure idempotency.
- */
-declare function runPackageMigrations(db: DataStore, migrations: PackageMigration[]): Promise<void>;
-
-interface UpdateResult {
-    updated: boolean;
-    packages: Array<{
-        name: string;
-        from: string;
-        to: string;
-    }>;
-    restartRequired: boolean;
-}
-/**
- * Check npm for newer versions of framework packages and install them.
- * Returns what was updated. Safe to call on every startup — skips if
- * already on latest.
- *
- * @param packages - Package names to check (default: botinabox + latticesql)
- * @param opts.quiet - Suppress console output (default: false)
- */
-declare function autoUpdate(packages?: string[], opts?: {
-    quiet?: boolean;
-}): Promise<UpdateResult>;
-
-declare class BudgetController {
-    private db;
-    private hooks;
-    constructor(db: DataStore, hooks: HookBus);
-    checkBudget(agentId: string): Promise<{
-        allowed: boolean;
-        reason?: string;
-        currentSpendCents: number;
-        limitCents: number;
-    }>;
-    resetMonthlySpend(agentId: string): Promise<void>;
-    globalCheck(): Promise<{
-        allowed: boolean;
-        totalSpentCents: number;
-        limitCents: number;
-    }>;
-}
-
-interface WorkflowStep {
-    id: string;
-    name: string;
-    agentSlug?: string;
-    taskTemplate: {
-        title: string;
-        description: string;
-    };
-    dependsOn?: string[];
-    onComplete?: 'next' | 'parallel' | 'end';
-    onFail?: 'abort' | 'skip' | 'retry';
-}
-interface WorkflowDefinition {
-    name: string;
-    description?: string;
-    steps: WorkflowStep[];
-    trigger?: {
-        type: 'task_completed' | 'event' | 'schedule' | 'manual';
-        filter?: Record<string, unknown>;
-    };
-}
-declare class WorkflowEngine {
-    private db;
-    private hooks;
-    private taskQueue;
-    constructor(db: DataStore, hooks: HookBus, taskQueue: TaskQueue);
-    /**
-     * Define/register a workflow.
-     */
-    define(slug: string, def: WorkflowDefinition): Promise<void>;
-    /**
-     * Start a workflow run.
-     */
-    start(workflowSlug: string, context: Record<string, unknown>): Promise<string>;
-    /**
-     * Called when a task with workflow_run_id completes.
-     */
-    onStepCompleted(taskId: string, output: string): Promise<void>;
-    /**
-     * Mark a workflow run as failed.
-     */
-    onStepFailed(taskId: string, error: string): Promise<void>;
-    private _createStepTask;
-}
-
-declare class WakeupQueue {
-    private db;
-    constructor(db: DataStore);
-    enqueue(agentId: string, source: string, context?: Record<string, unknown>): Promise<string>;
-    coalesce(agentId: string, context?: Record<string, unknown>): Promise<void>;
-    getNext(agentId: string): Promise<Record<string, unknown> | undefined>;
-    markFired(wakeupId: string, runId: string): Promise<void>;
-}
-
-declare class SessionManager {
-    private db;
-    constructor(db: DataStore);
-    save(agentId: string, channelId: string, peerId: string, params: Record<string, unknown>): Promise<string>;
-    load(agentId: string, channelId: string, peerId: string): Promise<Record<string, unknown> | undefined>;
-    clear(agentId: string, channelId: string, peerId: string): Promise<void>;
-    shouldClear(session: Record<string, unknown>, opts: {
-        maxRuns?: number;
-        maxAgeHours?: number;
-    }): Promise<boolean>;
-    private _find;
-}
-
-declare class NdjsonLogger {
-    private logPath;
-    constructor(logPath: string);
-    log(stream: 'stdout' | 'stderr', chunk: string): void;
-    close(): void;
-}
-
-/**
- * Scheduler — database-backed job scheduling with cron expressions.
- *
- * Supports one-time and recurring schedules. When a schedule fires,
- * it emits the schedule's `action` as a hook event with the
- * `action_config` payload. Consumers subscribe to handle the action.
- *
- * Supports one-time and recurring use cases.
- */
-
-interface ScheduleDef {
-    name: string;
-    description?: string;
-    /** Cron expression for recurring schedules */
-    cron?: string;
-    /** ISO 8601 datetime for one-time schedules */
-    runAt?: string;
-    /** Hook event name to emit when fired */
-    action: string;
-    /** JSON-serializable payload passed to the hook */
-    actionConfig?: Record<string, unknown>;
-    timezone?: string;
-}
-interface Schedule {
-    id: string;
-    name: string;
-    description: string | null;
-    type: "one_time" | "recurring";
-    cron: string | null;
-    run_at: string | null;
-    timezone: string;
-    enabled: number;
-    action: string;
-    action_config: string;
-    last_fired_at: string | null;
-    next_fire_at: string | null;
-    created_at: string;
-    updated_at: string;
-    deleted_at: string | null;
-}
-declare class Scheduler {
-    private db;
-    private hooks;
-    private timer;
-    constructor(db: DataStore, hooks: HookBus);
-    /**
-     * Start the scheduler. Computes initial next_fire_at for schedules
-     * that don't have one, then polls for due schedules.
-     */
-    start(pollIntervalMs?: number): Promise<void>;
-    stop(): void;
-    /** Check for and fire due schedules. */
-    tick(): Promise<void>;
-    /** Register a new schedule. */
-    register(def: ScheduleDef): Promise<string>;
-    /** Update an existing schedule. */
-    update(id: string, changes: Partial<Pick<ScheduleDef, "name" | "cron" | "runAt" | "action" | "actionConfig" | "timezone" | "description">> & {
-        enabled?: boolean;
-    }): Promise<void>;
-    /** Soft-delete a schedule. */
-    unregister(id: string): Promise<void>;
-    /** List schedules, optionally filtered. */
-    list(filter?: {
-        enabled?: boolean;
-        action?: string;
-    }): Promise<Schedule[]>;
-    /** Compute next_fire_at for any enabled schedule missing it. */
-    private initializeNextFireTimes;
-}
-
-/**
- * Creates a config revision record with before/after snapshots.
- * Note: uses config_revisions table with config_yaml storing JSON of {agentId, before, after}.
- */
-declare function createConfigRevision(db: DataStore, agentId: string, before: Record<string, unknown>, after: Record<string, unknown>): Promise<void>;
-
-/**
- * Dependency resolution utilities for workflow steps and task deps.
- */
-interface StepRef {
-    id: string;
-    dependsOn?: string[];
-}
-/**
- * DFS cycle detection — returns true if cycle exists.
- */
-declare function detectCycle(steps: StepRef[]): boolean;
-/**
- * Returns step IDs in topological (execution) order.
- * Throws if a cycle is detected.
- */
-declare function topologicalSort(steps: StepRef[]): string[];
-/**
- * Returns true if all dependencies are satisfied (present in completedTaskIds).
- */
-declare function areDependenciesMet(taskDepsJson: string | undefined, completedTaskIds: Set<string>): boolean;
-
-/**
- * Simple template interpolation for workflow step templates.
- * Supports {{key}} and {{steps.stepId.output}} patterns.
- */
-declare function interpolate(template: string, context: Record<string, unknown>): string;
-
-declare class ApiExecutionAdapter {
-    private modelRouter;
-    readonly type = "api";
-    constructor(modelRouter: ModelRouter);
-    execute(ctx: {
-        agent: {
-            id: string;
-            model?: string;
-            adapter_config?: string;
-        };
-        task: {
-            description?: string;
-            context?: string;
-        };
-        sessionParams?: {
-            history?: ChatMessage[];
-        };
-        contextFiles?: string[];
-        abortSignal?: AbortSignal;
-        onLog?: (stream: 'stdout' | 'stderr', chunk: string) => void;
-    }): Promise<{
-        output: string;
-        exitCode: number;
-        usage: TokenUsage & {
-            provider: string;
-            model: string;
-        };
-        sessionParams: {
-            history: ChatMessage[];
-        };
-    }>;
-}
-
-/**
- * Inputs to the CLI argument builder. Kept as a separate type so the
- * pure arg-construction function is unit-testable without spawning a process.
- */
-interface CliArgBuildInput {
-    prompt: string;
-    skipPermissions?: boolean;
-    sessionId?: string;
-    settings?: string;
-    appendSystemPrompt?: string;
-    addDirs?: string[];
-    extraArgs?: string[];
-}
-/**
- * Build the argv array passed to the `claude` binary.
- *
- * Order matters for the `claude` CLI: flags come first, then `--print` with
- * the prompt as the final positional argument. This function exists so the
- * argv shape can be asserted in tests without a real subprocess.
- */
-declare function buildCliArgs(input: CliArgBuildInput): string[];
-declare class CliExecutionAdapter {
-    readonly type = "cli";
-    execute(ctx: {
-        agent: {
-            id: string;
-            cwd?: string;
-            adapter_config?: string;
-            skip_permissions?: boolean;
-        };
-        task: {
-            title: string;
-            description?: string;
-            context?: string;
-        };
-        /**
-         * Optional Claude Code session UUID. When provided, passed as `--session-id`
-         * so the same UUID on subsequent calls resumes the same conversation.
-         * Callers typically derive this deterministically from a stable conversation
-         * key (e.g. thread identifier) so multi-turn exchanges maintain history.
-         */
-        sessionId?: string;
-        /**
-         * Value for `--settings`. Accepts a JSON string or a path to a settings
-         * file. Use this to override settings like `autoMemoryDirectory` without
-         * mutating the caller's global config.
-         */
-        settings?: string;
-        /** Value for `--append-system-prompt`. */
-        appendSystemPrompt?: string;
-        /** Additional directories passed via `--add-dir`. */
-        addDirs?: string[];
-        /** Extra CLI flags appended before the positional prompt. */
-        extraArgs?: string[];
-        logPath?: string;
-        onLog?: (stream: string, chunk: string) => void;
-        abortSignal?: AbortSignal;
-    }): Promise<{
-        output: string;
-        exitCode: number;
-    }>;
-}
-
-/**
- * DeterministicAdapter — executes scripts without LLM calls.
- * Story 6.1
- *
- * For tasks that don't require reasoning: routing, validation,
- * data fetching, file transforms. Runs a user-specified command
- * (Python, Node, bash) as a subprocess with task context on stdin.
- */
-interface DeterministicConfig {
-    command: string;
-    args?: string[];
-    env?: Record<string, string>;
-    timeoutMs?: number;
-    inputMode?: 'stdin' | 'arg';
-}
-declare class DeterministicAdapter {
-    readonly type = "deterministic";
-    execute(ctx: {
-        agent: {
-            id: string;
-            cwd?: string;
-            adapter_config?: string;
-        };
-        task: {
-            title: string;
-            description?: string;
-            context?: string;
-        };
-        abortSignal?: AbortSignal;
-        onLog?: (stream: string, chunk: string) => void;
-    }): Promise<{
-        output: string;
-        exitCode: number;
-    }>;
-}
-
-/**
- * LoopDetector — pattern-based loop detection for agent routing.
- * Story 6.2
- *
- * Complements chain-guard's depth limit with active pattern detection:
- * - Self-loop: agent routes a task back to itself
- * - Ping-pong: two agents bounce tasks between each other (A→B→A→B)
- * - Blocked re-entry: a task re-enters the system after being blocked
- */
-
-declare enum LoopType {
-    SELF_LOOP = "self_loop",
-    PING_PONG = "ping_pong",
-    BLOCKED_REENTRY = "blocked_reentry"
-}
-interface LoopDetection {
-    type: LoopType;
-    agents: string[];
-    taskId: string;
-    chainOriginId?: string;
-    message: string;
-}
-interface LoopDetectorConfig {
-    /** Number of recent followup records to scan. Default: 10 */
-    windowSize?: number;
-    /** Minimum repetitions to confirm ping-pong. Default: 2 */
-    pingPongThreshold?: number;
-}
-declare class LoopDetector {
-    private db;
-    private readonly windowSize;
-    private readonly pingPongThreshold;
-    constructor(db: DataStore, config?: LoopDetectorConfig);
-    /**
-     * Check for loops before creating a followup task.
-     * Returns a LoopDetection if a loop pattern is found, undefined otherwise.
-     */
-    check(sourceAgentId: string, targetAgentId: string, taskId: string, chainOriginId?: string): Promise<LoopDetection | undefined>;
-    /**
-     * Check if an agent is routing to itself.
-     */
-    private checkSelfLoop;
-    /**
-     * Check if a previously blocked task is being re-entered.
-     */
-    private checkBlockedReentry;
-    /**
-     * Check for A→B→A→B ping-pong by scanning recent tasks in the chain.
-     */
-    private checkPingPong;
-}
-
-/**
- * LearningPipeline — turns execution experience into durable knowledge.
- * Story 6.5
- *
- * Promotion ladder:
- *   Execution → Feedback (structured capture)
- *     → 3+ similar → Playbook (generalized rule)
- *       → 3+ projects → Skill (executable behavior)
- *         → Agent-Skill Matrix → Per-Agent Context
- *
- * Two-axis evaluation:
- *   - Accuracy: was the output correct?
- *   - Efficiency: how fast / how many tokens?
- */
-
-interface FeedbackEntry {
-    agentId: string;
-    userId?: string;
-    taskId?: string;
-    issue: string;
-    rootCause?: string;
-    severity: 'low' | 'medium' | 'high' | 'critical';
-    repeatable: boolean;
-    accuracyScore?: number;
-    efficiencyScore?: number;
-    tags?: string[];
-}
-interface PlaybookEntry {
-    pattern: string;
-    rule: string;
-    feedbackIds: string[];
-    projectScoped: boolean;
-    clientId?: string;
-    agentIds?: string[];
-}
-interface SkillEntry {
-    name: string;
-    slug: string;
-    description?: string;
-    behavior: string;
-    sourcePlaybookIds: string[];
-    category?: string;
-}
-interface LearningPipelineConfig {
-    /** Feedback count threshold for playbook promotion. Default: 3 */
-    playbookThreshold?: number;
-    /** Project count threshold for skill promotion. Default: 3 */
-    skillThreshold?: number;
-    /** Auto-promote when thresholds are met. Default: false */
-    autoPromote?: boolean;
-}
-declare class LearningPipeline {
-    private db;
-    private hooks;
-    private readonly playbookThreshold;
-    private readonly skillThreshold;
-    private readonly autoPromote;
-    constructor(db: DataStore, hooks: HookBus, config?: LearningPipelineConfig);
-    /**
-     * Capture a structured feedback record from an execution.
-     */
-    captureFeedback(entry: FeedbackEntry): Promise<string>;
-    /**
-     * Get all feedback records, optionally filtered.
-     */
-    listFeedback(filter?: {
-        agentId?: string;
-        userId?: string;
-        severity?: string;
-        repeatable?: boolean;
-    }): Promise<Array<Record<string, unknown>>>;
-    /**
-     * Check if feedback records with similar issues should be promoted to a playbook.
-     * Groups by issue text similarity (exact match for now).
-     */
-    checkPlaybookPromotion(issue: string): Promise<string | undefined>;
-    /**
-     * Manually create a playbook from a set of feedback records.
-     */
-    promoteToPlaybook(entry: PlaybookEntry): Promise<string>;
-    /**
-     * List playbooks, optionally filtered.
-     */
-    listPlaybooks(filter?: {
-        projectScoped?: boolean;
-    }): Promise<Array<Record<string, unknown>>>;
-    /**
-     * Check if a playbook should be promoted to a skill.
-     * A playbook becomes a skill when it works across multiple projects
-     * (indicated by being referenced by agents in different contexts).
-     */
-    checkSkillPromotion(playbookId: string): Promise<string | undefined>;
-    /**
-     * Manually promote a playbook to a reusable skill.
-     */
-    promoteToSkill(entry: SkillEntry): Promise<string>;
-    /**
-     * Assign a skill to an agent.
-     */
-    assignSkill(agentId: string, skillId: string): Promise<void>;
-    /**
-     * Get learning metrics for an agent.
-     */
-    getMetrics(agentId: string): Promise<{
-        feedbackCount: number;
-        avgAccuracy: number | null;
-        avgEfficiency: number | null;
-        playbookCount: number;
-        skillCount: number;
-    }>;
-}
-
-/**
- * PermissionRelay — remote approval for unattended agent execution.
- * Story 6.6
- *
- * When an agent needs human approval but the operator is away:
- * 1. Post the approval prompt to a messaging platform (Slack, Discord, etc.)
- * 2. Poll for response (approve/deny)
- * 3. Relay the decision back to the agent
- *
- * Dual approval: local terminal + remote messaging. First response wins.
- * Race condition handled by atomic state transition.
- */
-
-type ApprovalStatus = 'pending' | 'approved' | 'denied' | 'expired';
-interface PermissionPrompt {
-    id: string;
-    agentId: string;
-    action: string;
-    context?: string;
-    requestedAt: string;
-    expiresAt?: string;
-}
-interface ApprovalResponse {
-    promptId: string;
-    status: 'approved' | 'denied';
-    respondedBy: string;
-    respondedAt: string;
-    comment?: string;
-}
-/**
- * Provider interface — implement for each messaging platform.
- */
-interface PermissionProvider {
-    readonly id: string;
-    /** Post an approval request, return a handle for polling. */
-    sendPrompt(prompt: PermissionPrompt): Promise<string>;
-    /** Check for a response. Returns undefined if still pending. */
-    pollResponse(handle: string): Promise<ApprovalResponse | undefined>;
-    /** Cancel a pending prompt (e.g. after local approval). */
-    cancelPrompt(handle: string): Promise<void>;
-}
-interface PermissionRelayConfig {
-    /** Registered providers (e.g. Slack, Discord adapters) */
-    providers: PermissionProvider[];
-    /** Poll interval in ms. Default: 5000 */
-    pollIntervalMs?: number;
-    /** Timeout for pending approvals in ms. Default: 300_000 (5 min) */
-    timeoutMs?: number;
-}
-declare class PermissionRelay {
-    private hooks;
-    private readonly providers;
-    private readonly pollIntervalMs;
-    private readonly timeoutMs;
-    private readonly pending;
-    constructor(hooks: HookBus, config: PermissionRelayConfig);
-    /**
-     * Request approval from all configured providers.
-     * Returns when the first provider responds (approve or deny).
-     */
-    requestApproval(prompt: PermissionPrompt): Promise<ApprovalResponse>;
-    /**
-     * Provide a local approval (from terminal).
-     * Resolves the pending request and cancels remote providers.
-     */
-    approveLocally(promptId: string, approved: boolean): Promise<void>;
-    /**
-     * Get all pending approval requests.
-     */
-    getPending(): PermissionPrompt[];
-    private cancelOtherProviders;
-}
-
-/**
- * GovernanceGate — independent validation gates for agent output.
- * Story 6.7
- *
- * Key principle: gates report to the HUMAN, not to each other
- * or to a project manager agent. Structural independence prevents capture.
- *
- * Gate dimensions:
- *   QA       — data correctness (schema, row counts, format)
- *   Quality  — code quality (lint, coverage, patterns)
- *   Drift    — architectural drift (unintended dependencies, scope creep)
- */
-
-type GateVerdict = 'pass' | 'fail' | 'warn';
-interface GateResult {
-    gateId: string;
-    verdict: GateVerdict;
-    findings: GateFinding[];
-    checkedAt: string;
-    durationMs: number;
-}
-interface GateFinding {
-    severity: 'info' | 'warning' | 'error' | 'critical';
-    message: string;
-    location?: string;
-    suggestion?: string;
-}
-interface GateInput {
-    agentId: string;
-    taskId: string;
-    output: string;
-    metadata?: Record<string, unknown>;
-}
-/**
- * Base class for governance gates. Each gate checks a different dimension.
- * Gates are structurally independent — they report to the human operator,
- * not to each other or to any agent.
- */
-declare abstract class GovernanceGate {
-    abstract readonly id: string;
-    abstract readonly name: string;
-    abstract readonly dimension: string;
-    /**
-     * Run the gate check on agent output.
-     * Must return a verdict and any findings.
-     */
-    abstract check(input: GateInput): Promise<GateResult>;
-}
-/**
- * QA Gate — validates data correctness.
- * Checks: schema conformance, row counts, format validation.
- */
-declare class QAGate extends GovernanceGate {
-    private validators;
-    readonly id = "qa";
-    readonly name = "Quality Assurance";
-    readonly dimension = "data_correctness";
-    constructor(validators?: Array<{
-        name: string;
-        validate: (output: string, metadata?: Record<string, unknown>) => GateFinding[];
-    }>);
-    check(input: GateInput): Promise<GateResult>;
-}
-/**
- * Quality Gate — validates code quality.
- * Checks: lint results, test coverage, review patterns.
- */
-declare class QualityGate extends GovernanceGate {
-    private checks;
-    readonly id = "quality";
-    readonly name = "Code Quality";
-    readonly dimension = "code_quality";
-    constructor(checks?: Array<{
-        name: string;
-        check: (output: string, metadata?: Record<string, unknown>) => Promise<GateFinding[]>;
-    }>);
-    check(input: GateInput): Promise<GateResult>;
-}
-/**
- * Drift Gate — detects architectural drift.
- * Checks: unintended dependencies, scope creep, pattern violations.
- */
-declare class DriftGate extends GovernanceGate {
-    private rules;
-    readonly id = "drift";
-    readonly name = "Architectural Drift";
-    readonly dimension = "architecture";
-    constructor(rules?: Array<{
-        name: string;
-        detect: (output: string, metadata?: Record<string, unknown>) => GateFinding[];
-    }>);
-    check(input: GateInput): Promise<GateResult>;
-}
-/**
- * GateRunner — orchestrates multiple independent gates on agent output.
- * Each gate runs independently. Results are reported to the human, not to agents.
- */
-declare class GateRunner {
-    private gates;
-    private hooks;
-    constructor(gates: GovernanceGate[], hooks: HookBus);
-    /**
-     * Run all gates on the given input.
-     * Gates run independently — one failure doesn't block others.
-     */
-    runAll(input: GateInput): Promise<{
-        passed: boolean;
-        results: GateResult[];
-    }>;
-}
-
-declare const sendFileTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-
-declare const readFileTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-
-/**
- * Built-in tools: File operations — list, register, send, read.
- */
-
-declare const listFilesTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-declare const registerFileTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-
-declare const dispatchTaskTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-declare const cancelTaskTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-declare const reassignTaskTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-
-/**
- * Built-in tools: System awareness — task status, agent status, system health.
- */
-
-declare const getTaskStatusTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-declare const getAgentStatusTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-declare const getSystemStatusTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-declare const getActiveTasksTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-
-/**
- * Built-in tools: Entity lookup — agents, projects, details.
- */
-
-declare const listAgentsTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-declare const listProjectsTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-declare const getAgentDetailTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-
-/**
- * Built-in tools: Communication — send messages, read conversations, search history.
- * All messaging is channel-agnostic: slack, email, discord, sms — same tools.
- */
-
-declare const sendMessageTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-declare const addTaskCommentTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-declare const readConversationTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-declare const searchConversationTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-
-/**
- * Shared agent resolution: slug → role → name (case-insensitive).
- *
- * LLMs see list_agents output like "AgentName (role)" and naturally use
- * the role as the identifier. All agent-resolving tools must accept
- * slug, role, OR name — not just slug.
- */
-
-declare function resolveAgent(db: DataStore, ref: string): Promise<Record<string, unknown> | null>;
-
-/**
- * Built-in tools: Entity creation — agents, projects.
- */
-
-declare const createAgentTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-declare const createProjectTool: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-};
-
-/**
- * All native tools bundled for convenience.
- * Apps can pass this directly to ExecutionEngine config:
- *   tools: nativeTools
- * or spread to add custom tools:
- *   tools: [...nativeTools, myCustomTool]
- */
-declare const nativeTools: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-}[];
-/**
- * Coordinator tools for multi-agent primary agent.
- * Orchestration + communication + awareness — no "work" tools.
- * Use with ChatPipelineV2 in multi-agent mode.
- *
- * Single-agent mode should use `nativeTools` instead (all tools).
- */
-declare const coordinatorTools: {
-    definition: ToolDefinition;
-    handler: ToolHandler;
-}[];
-
-interface SecretInput {
-    name: string;
-    type?: string;
-    environment?: string;
-    value?: string;
-    location?: string;
-    description?: string;
-    rotation_schedule?: string;
-    expires_at?: string;
-    notes?: string;
-    org_id?: string;
-}
-interface SecretMeta {
-    id: string;
-    org_id: string | null;
-    name: string;
-    type: string;
-    environment: string;
-    location: string | null;
-    description: string | null;
-    rotation_schedule: string | null;
-    expires_at: string | null;
-    notes: string | null;
-    created_at: string;
-    updated_at: string;
-}
-declare class SecretStore {
-    private readonly db;
-    private readonly hooks;
-    private readonly encKey;
-    /**
-     * @param db - DataStore instance
-     * @param hooks - HookBus instance
-     * @param encryptionKey - Optional master key for encrypting secrets at rest.
-     *   When provided, all new secrets are encrypted with AES-256-GCM.
-     *   Existing plaintext secrets are read transparently (passthrough on decrypt).
-     */
-    constructor(db: DataStore, hooks: HookBus, encryptionKey?: string);
-    set(input: SecretInput): Promise<SecretMeta>;
-    get(name: string, environment?: string): Promise<string | null>;
-    getMeta(name: string, environment?: string): Promise<SecretMeta | null>;
-    list(): Promise<SecretMeta[]>;
-    rotate(name: string, newValue: string, environment?: string): Promise<void>;
-    delete(name: string, environment?: string): Promise<void>;
-    /**
-     * Load a sync cursor by key. Returns undefined if not found.
-     * Cursors are stored as secrets with type='sync_cursor'.
-     */
-    loadCursor(key: string): Promise<string | undefined>;
-    /**
-     * Persist a sync cursor by key. Creates or updates the secret.
-     */
-    saveCursor(key: string, value: string): Promise<void>;
-    private _toMeta;
-}
-
-/**
- * Parse Claude CLI NDJSON (stream-json) output into structured results.
- * Used by the CLI execution adapter to extract session info, costs,
- * token usage, and text output from Claude CLI subprocess output.
- */
-interface ParsedStream {
-    sessionId: string | null;
-    model: string | null;
-    costUsd: number | null;
-    usage: UsageSummary | null;
-    summary: string;
-    isError: boolean;
-    errorMessage: string | null;
-    stopReason: string | null;
-}
-interface UsageSummary {
-    inputTokens: number;
-    cachedInputTokens: number;
-    outputTokens: number;
-}
-/**
- * Parse Claude CLI NDJSON output into a structured result.
- * Handles init, assistant, and result event types.
- */
-declare function parseClaudeStream(stdout: string): ParsedStream;
-/** Check if the run stopped due to max turns. */
-declare function isMaxTurns(parsed: ParsedStream): boolean;
-/** Check if Claude CLI requires login. */
-declare function isLoginRequired(stdout: string): boolean;
-/** Rewrite local image paths to prevent CLI auto-embedding as vision content. */
-declare function deactivateLocalImagePaths(prompt: string): string;
-
-export { AGENT_STATUSES, type AgentConfig, type AgentDefinition, type AgentFilter, type AgentRecord, AgentRegistry, type AgentStatus, ApiExecutionAdapter, type ApprovalResponse, type ApprovalStatus, AuditEmitter, type AuditEvent, BackupManager, type BotConfig, BreakerState, type BudgetCheck, type BudgetConfig, BudgetController, CORE_MIGRATIONS, ChannelAdapter, ChannelRegistry, ChannelRegistryError, type ChatConfig, ChatMessage, ChatPipelineV2, type ChatPipelineV2Config, ChatResponder, ChatResponderConfig, ChatSessionManager, CircuitBreaker, type CircuitBreakerConfig, type CliArgBuildInput, CliExecutionAdapter, type ColumnValidator, ColumnValidatorImpl, type ConfigLoadError, type ConfigLoadResult, ConnectorConfig, DEFAULTS, DEFAULT_CONFIG, type DataConfig, DataStore, type DefaultLLMCallConfig, DeterministicAdapter, type DeterministicConfig, type DomainEntityContextOptions, type DomainSchemaOptions, DriftGate, EVENTS, type EntityColumnDef, type EntityConfig, type ExecutionAdapter, type ExecutionConfig, type ExecutionEngineConfig, Extractor, type FeedbackEntry, type GateFinding, type GateInput, type GateResult, GateRunner, type GateVerdict, GovernanceGate, HealthStatus, HookBus, InboundMessage, LLMProvider, LearningPipeline, type LearningPipelineConfig, type LoopDetection, LoopDetector, type LoopDetectorConfig, LoopType, MAX_CHAIN_DEPTH, MessageInterpreter, MessagePipeline, MessageStore, type ModelConfig, ModelInfo, ModelRouter, NdjsonLogger, NotificationQueue, type PackageMigration, type PackageUpdate, type ParsedStream, type PermissionPrompt, type PermissionProvider, PermissionRelay, type PermissionRelayConfig, type PlaybookEntry, ProviderRegistry, QAGate, QualityGate, RUN_STATUSES, type RenderConfig, ResolvedModel, type RetryPolicy, type RoutingConfig, type RunContext, RunManager, type RunResult, type RunStatus, type SafetyConfig, type SanitizerOptions, type Schedule, type ScheduleDef, Scheduler, type SchemaError, type SecretInput, type SecretMeta, SecretStore, type SecurityConfig, SessionKey, SessionManager, type SkillEntry, type StepRef, type SystemContextOptions, TASK_STATUSES, type TaskDefinition, TaskQueue, type TaskRecord, type TaskStatus, TokenUsage, type ToolContext, type ToolDefinition, type ToolHandler, UpdateChecker, type UpdateConfig, UpdateManager, type UpdateManifest, type UsageSummary, type User, type UserInput, UserRegistry, WakeupQueue, type WorkflowConfigEntry, type WorkflowDefinition$1 as WorkflowDefinition, WorkflowEngine, type WorkflowRunRecord, type WorkflowRunStatus, type WorkflowStep$1 as WorkflowStep, type WorkflowStepConfig, type WorkflowTrigger, _resetConfig, addTaskCommentTool, areDependenciesMet, autoUpdate, buildAgentBindings, buildChainOrigin, buildCliArgs, buildProcessEnv, buildSystemContext, cancelTaskTool, checkAllowlist, checkChainDepth, checkMentionGate, chunkText, classifyUpdate, compareVersions, coordinatorTools, createAgentTool, createConfigRevision, createDefaultLLMCall, createProjectTool, deactivateLocalImagePaths, defineCoreEntityContexts, defineCoreTables, defineDomainEntityContexts, defineDomainTables, detectCycle, discoverChannels, discoverProviders, dispatchTaskTool, formatText, getActiveTasksTool, getAgentDetailTool, getAgentStatusTool, getConfig, getSystemStatusTool, getTaskStatusTool, initConfig, interpolate, interpolateEnv, isLoginRequired, isMaxTurns, listAgentsTool, listFilesTool, listProjectsTool, loadConfig, nativeTools, parseClaudeStream, parseVersion, readConversationTool, readFileTool, reassignTaskTool, registerExecutionEngine, registerFileTool, resolveAgent, runPackageMigrations, sanitize, searchConversationTool, sendFileTool, sendMessageTool, topologicalSort, truncateAtWord, validateConfig };
+ * botinabox — framework for building multi-agent bots.
+ * Re-exports everything from shared types and core modules.
+ */
+export * from "./shared/index.js";
+export * from "./core/hooks/index.js";
+export * from "./core/config/index.js";
+export * from "./core/llm/index.js";
+export * from "./core/chat/index.js";
+export * from "./core/data/index.js";
+export * from "./core/security/index.js";
+export * from "./core/update/index.js";
+export * from "./core/orchestrator/agent-registry.js";
+export * from "./core/orchestrator/task-queue.js";
+export * from "./core/orchestrator/run-manager.js";
+export * from "./core/orchestrator/budget-controller.js";
+export { WorkflowEngine } from "./core/orchestrator/workflow-engine.js";
+export * from "./core/orchestrator/wakeup-queue.js";
+export * from "./core/orchestrator/session-manager.js";
+export * from "./core/orchestrator/chain-guard.js";
+export * from "./core/orchestrator/ndjson-logger.js";
+export * from "./core/orchestrator/scheduler.js";
+export * from "./core/orchestrator/config-revisions.js";
+export * from "./core/orchestrator/dependency-resolver.js";
+export * from "./core/orchestrator/template-interpolate.js";
+export * from "./core/orchestrator/adapters/api-adapter.js";
+export * from "./core/orchestrator/adapters/cli-adapter.js";
+export * from "./core/orchestrator/adapters/deterministic-adapter.js";
+export * from "./core/orchestrator/loop-detector.js";
+export * from "./core/orchestrator/circuit-breaker.js";
+export * from "./core/orchestrator/learning-pipeline.js";
+export * from "./core/orchestrator/permission-relay.js";
+export * from "./core/orchestrator/governance-gate.js";
+export { registerExecutionEngine } from "./core/orchestrator/execution-engine.js";
+export type { ExecutionEngineConfig, ToolDefinition, ToolHandler, ToolContext } from "./core/orchestrator/execution-engine.js";
+export * from "./core/orchestrator/tools/index.js";
+export * from "./core/orchestrator/user-registry.js";
+export * from "./core/orchestrator/secret-store.js";
+export * from "./core/orchestrator/claude-stream-parser.js";