@agent-team-foundation/first-tree-hub 0.12.8 → 0.12.10

package/dist/{bootstrap-BCZC1ki6.mjs → bootstrap-CW73oEYn.mjs}

@@ -598,7 +598,7 @@ const serverConfigSchema = defineConfig({
 	rateLimit: optional({
 		max: field(z.number().default(100), { env: "FIRST_TREE_HUB_RATE_LIMIT_MAX" }),
 		loginMax: field(z.number().default(5), { env: "FIRST_TREE_HUB_RATE_LIMIT_LOGIN_MAX" }),
-		webhookMax: field(z.number().default(60), { env: "FIRST_TREE_HUB_RATE_LIMIT_WEBHOOK_MAX" }),
+		webhookMax: field(z.number().default(600), { env: "FIRST_TREE_HUB_RATE_LIMIT_WEBHOOK_MAX" }),
 		contextTreeSnapshotMax: field(z.number().default(6), { env: "FIRST_TREE_HUB_RATE_LIMIT_CONTEXT_TREE_SNAPSHOT_MAX" }),
 		agentMessageMax: field(z.number().default(30), { env: "FIRST_TREE_HUB_RATE_LIMIT_AGENT_MESSAGE_MAX" })
 	}),

package/dist/cli/index.mjs

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import "../observability-BAScT_5S-BcW9HgkG.mjs";
-import { $ as formatStaleReason, A as checkDocker, B as isServiceSupported, C as createApiNameResolver, D as checkBackgroundService, E as checkAgentConfigs, F as checkWebSocket, H as restartClientService, I as printResults, J as stopPostgres, L as reconcileAgentConfigs, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, Q as findStaleAliases, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, _ as formatCheckReport, a as declineUpdate, at as fail, b as onboardCreate, c as detectInstallMode, ct as ClientUserMismatchError, d as startServer, dt as SessionRegistry, et as removeLocalAgent, f as reconcileLocalRuntimeProviders, ft as cleanWorkspaces, g as promptMissingFields, h as promptAddAgent, ht as configureClientLoggerForService, i as createExecuteUpdate, it as resolveSenderName, j as checkNodeVersion, k as checkDatabase, l as fetchLatestVersion, lt as FirstTreeHubSDK, m as isInteractive, mt as applyClientLoggerConfig, o as promptUpdate, ot as success, p as uploadClientCapabilities, pt as probeCapabilities, r as registerSaaSConnectCommand, rt as resolveReplyToFromEnv, s as PACKAGE_NAME, st as ClientOrgMismatchError, tt as createOwner, u as installGlobalLatest, ut as SdkError, v as loadOnboardState, w as migrateLocalAgentDirs, x as saveOnboardState, y as onboardCheck, z as installClientService } from "../saas-connect-CLcon-De.mjs";
+import { $ as formatStaleReason, A as checkDocker, B as isServiceSupported, C as createApiNameResolver, D as checkBackgroundService, E as checkAgentConfigs, F as checkWebSocket, H as restartClientService, I as printResults, J as stopPostgres, L as reconcileAgentConfigs, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, Q as findStaleAliases, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, _ as formatCheckReport, a as declineUpdate, at as fail, b as onboardCreate, c as detectInstallMode, ct as ClientUserMismatchError, d as startServer, dt as SessionRegistry, et as removeLocalAgent, f as reconcileLocalRuntimeProviders, ft as cleanWorkspaces, g as promptMissingFields, h as promptAddAgent, ht as configureClientLoggerForService, i as createExecuteUpdate, it as resolveSenderName, j as checkNodeVersion, k as checkDatabase, l as fetchLatestVersion, lt as FirstTreeHubSDK, m as isInteractive, mt as applyClientLoggerConfig, o as promptUpdate, ot as success, p as uploadClientCapabilities, pt as probeCapabilities, r as registerSaaSConnectCommand, rt as resolveReplyToFromEnv, s as PACKAGE_NAME, st as ClientOrgMismatchError, tt as createOwner, u as installGlobalLatest, ut as SdkError, v as loadOnboardState, w as migrateLocalAgentDirs, x as saveOnboardState, y as onboardCheck, z as installClientService } from "../saas-connect-Fgnnnola.mjs";
 import "../logger-core-BTmvdflj-DjW8FM4T.mjs";
-import { C as resetConfigMeta, E as setConfigValue, S as resetConfig, T as serverConfigSchema, _ as getConfigValue, a as ensureFreshAdminToken, c as resolveServerUrl, d as DEFAULT_CONFIG_DIR, f as DEFAULT_DATA_DIR, h as clientConfigSchema, i as ensureFreshAccessToken, l as saveAgentConfig, m as agentConfigSchema, o as loadCredentials, p as DEFAULT_HOME_DIR, u as saveCredentials, v as initConfig, w as resolveConfigReadonly, x as readConfigFile, y as loadAgents } from "../bootstrap-BCZC1ki6.mjs";
+import { C as resetConfigMeta, E as setConfigValue, S as resetConfig, T as serverConfigSchema, _ as getConfigValue, a as ensureFreshAdminToken, c as resolveServerUrl, d as DEFAULT_CONFIG_DIR, f as DEFAULT_DATA_DIR, h as clientConfigSchema, i as ensureFreshAccessToken, l as saveAgentConfig, m as agentConfigSchema, o as loadCredentials, p as DEFAULT_HOME_DIR, u as saveCredentials, v as initConfig, w as resolveConfigReadonly, x as readConfigFile, y as loadAgents } from "../bootstrap-CW73oEYn.mjs";
 import { a as print, n as CLI_USER_AGENT, o as setJsonMode, r as COMMAND_VERSION, t as cliFetch } from "../cli-fetch--tiwKm5S.mjs";
-import "../dist-CnjqakXS.mjs";
-import { n as bindFeishuUser, t as bindFeishuBot } from "../feishu-DrnBbl8T.mjs";
+import "../dist-B1GHzMLc.mjs";
+import { n as bindFeishuUser, t as bindFeishuBot } from "../feishu-30vUx69l.mjs";
 import "../errors-CF5evtJt-B0NTIVPt.mjs";
 import "../src-DNBS5Yjj.mjs";
-import "../client-bR8nwHaV-OxnjyKOk.mjs";
+import "../client-BViGcaUC-CZb2Svgh.mjs";
 import "../invitation-Bg0TRiyx-BsZH4GCS.mjs";
 import { join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
@@ -1707,13 +1707,13 @@ function isSecretField(schema, dotPath) {
 //#region src/commands/onboard.ts
 async function promptMissing(args) {
 	if (!args.server) try {
-		const { resolveServerUrl } = await import("../bootstrap-BCZC1ki6.mjs").then((n) => n.r);
+		const { resolveServerUrl } = await import("../bootstrap-CW73oEYn.mjs").then((n) => n.r);
 		resolveServerUrl();
 	} catch {
 		args.server = await input({ message: "Hub server URL:" });
 		saveOnboardState(args);
 	}
-	const { loadCredentials } = await import("../bootstrap-BCZC1ki6.mjs").then((n) => n.r);
+	const { loadCredentials } = await import("../bootstrap-CW73oEYn.mjs").then((n) => n.r);
 	if (!loadCredentials()) throw new Error("No saved credentials. Run `first-tree-hub client connect <server-url>` before onboarding.");
 	if (!args.id) {
 		args.id = await input({ message: "Agent ID:" });

package/dist/{client-bR8nwHaV-OxnjyKOk.mjs → client-BViGcaUC-CZb2Svgh.mjs}

@@ -1,10 +1,10 @@
 import { O as withSpan, f as messageAttrs, s as createLogger } from "./observability-BAScT_5S-BcW9HgkG.mjs";
-import { N as extractMentions, a as AGENT_VISIBILITY, et as questionAnswerMessageContentSchema, g as agentTypeSchema, i as AGENT_STATUSES, k as defaultParticipantMode, o as CHAT_ENGAGEMENT_STATUSES, ot as scanMentionTokens, tt as questionMessageContentSchema, v as clientCapabilitiesSchema } from "./dist-CnjqakXS.mjs";
+import { F as extractMentions, b as clientCapabilitiesSchema, i as AGENT_STATUSES, it as questionMessageContentSchema, j as defaultParticipantMode, lt as scanMentionTokens, o as AGENT_VISIBILITY, rt as questionAnswerMessageContentSchema, s as CHAT_ENGAGEMENT_STATUSES, v as agentTypeSchema } from "./dist-B1GHzMLc.mjs";
 import { a as ConflictError, i as ClientUserMismatchError, l as organizations, n as BadRequestError, o as ForbiddenError, s as NotFoundError, u as users } from "./errors-CF5evtJt-B0NTIVPt.mjs";
 import { randomUUID } from "node:crypto";
 import { and, desc, eq, inArray, isNotNull, lt, ne, or, sql } from "drizzle-orm";
 import { bigserial, boolean, index, integer, jsonb, pgTable, primaryKey, text, timestamp, unique } from "drizzle-orm/pg-core";
-//#region ../server/dist/client-bR8nwHaV.mjs
+//#region ../server/dist/client-BViGcaUC.mjs
 /**
 * Client connections. A client is a single SDK process (AgentRuntime) that may
 * host multiple agents. From the unified-user-token milestone on, a client is
@@ -237,7 +237,7 @@ function invalidateChatAudience(chatId) {
 *   - for each row, `peerAgentTypes` is the type of every OTHER participant
 *     being inserted in the same call PLUS every EXISTING speaker of
 *     the chat. This matters only for `direct` chats; the helper ignores
-*     it for `group` / `thread`.
+*     it for `group`.
 *
 * Writes one INSERT (multi-row) per call.
 *
@@ -250,7 +250,7 @@ async function addChatParticipants(tx, chatId, participants, options = {}) {
 	if (participants.length === 0) return;
 	const [chat] = await tx.select({ type: chats.type }).from(chats).where(eq(chats.id, chatId)).limit(1);
 	if (!chat) throw new NotFoundError(`Chat "${chatId}" not found`);
-	if (chat.type !== "direct" && chat.type !== "group" && chat.type !== "thread") throw new Error(`Unexpected chat type "${chat.type}" for chat "${chatId}"`);
+	if (chat.type !== "direct" && chat.type !== "group") throw new Error(`Unexpected chat type "${chat.type}" for chat "${chatId}"`);
 	const chatType = chat.type;
 	const agentIds = participants.map((p) => p.agentId);
 	const agentRows = await tx.select({
@@ -1314,17 +1314,27 @@ const RUNTIME_STATE_CHANNEL = "runtime_state_changes";
 * inbox NOTIFY path that only reaches speakers.
 */
 const CHAT_MESSAGE_CHANNEL = "chat_message_events";
+/**
+* Generic admin-broadcast envelope channel. Producers (e.g. notification.ts)
+* emit a JSON-stringified `AdminBroadcastPayload`; every server instance
+* LISTENs and hands the envelope to its local admin-socket fanout. Keeps
+* cross-instance and single-instance code paths identical from the admin WS
+* route's perspective.
+*/
+const ADMIN_BROADCAST_CHANNEL = "admin_broadcast_envelopes";
 function createNotifier(listenClient) {
 	const subscriptions = /* @__PURE__ */ new Map();
 	const configChangeHandlers = [];
 	const sessionStateChangeHandlers = [];
 	const runtimeStateChangeHandlers = [];
 	const chatMessageHandlers = [];
+	const adminBroadcastHandlers = [];
 	let unlistenInboxFn = null;
 	let unlistenConfigFn = null;
 	let unlistenSessionStateFn = null;
 	let unlistenRuntimeStateFn = null;
 	let unlistenChatMessageFn = null;
+	let unlistenAdminBroadcastFn = null;
 	function handleNotification(payload) {
 		const sepIdx = payload.indexOf(":");
 		if (sepIdx === -1) return;
@@ -1384,6 +1394,21 @@ function createNotifier(listenClient) {
 				await listenClient`SELECT pg_notify(${CHAT_MESSAGE_CHANNEL}, ${`${chatId}:${messageId}`})`;
 			} catch {}
 		},
+		async notifyAdminBroadcast(payload) {
+			let encoded;
+			try {
+				encoded = JSON.stringify(payload);
+			} catch {
+				return;
+			}
+			if (encoded.length > 7500) {
+				console.error(`[notifier] admin broadcast payload too large (${encoded.length} bytes); refusing to NOTIFY`);
+				return;
+			}
+			try {
+				await listenClient`SELECT pg_notify(${ADMIN_BROADCAST_CHANNEL}, ${encoded})`;
+			} catch {}
+		},
 		async pushFrameToInbox(inboxId, frame) {
 			const map = subscriptions.get(inboxId);
 			if (!map) return 0;
@@ -1413,6 +1438,9 @@ function createNotifier(listenClient) {
 		onChatMessage(handler) {
 			chatMessageHandlers.push(handler);
 		},
+		onAdminBroadcast(handler) {
+			adminBroadcastHandlers.push(handler);
+		},
 		async start() {
 			unlistenInboxFn = (await listenClient.listen(INBOX_CHANNEL, (payload) => {
 				if (payload) handleNotification(payload);
@@ -1468,6 +1496,20 @@ function createNotifier(listenClient) {
 					});
 				} catch {}
 			})).unlisten;
+			unlistenAdminBroadcastFn = (await listenClient.listen(ADMIN_BROADCAST_CHANNEL, (payload) => {
+				if (!payload) return;
+				let parsed;
+				try {
+					parsed = JSON.parse(payload);
+				} catch {
+					return;
+				}
+				if (typeof parsed !== "object" || parsed === null) return;
+				const envelope = parsed;
+				for (const handler of adminBroadcastHandlers) try {
+					handler(envelope);
+				} catch {}
+			})).unlisten;
 		},
 		async stop() {
 			if (unlistenInboxFn) {
@@ -1490,6 +1532,10 @@ function createNotifier(listenClient) {
 				await unlistenChatMessageFn();
 				unlistenChatMessageFn = null;
 			}
+			if (unlistenAdminBroadcastFn) {
+				await unlistenAdminBroadcastFn();
+				unlistenAdminBroadcastFn = null;
+			}
 		}
 	};
 }
@@ -1700,6 +1746,7 @@ async function sendMessageInner(db, chatId, senderId, data, options) {
 			...incomingMeta,
 			mentions: mergedMentions
 		} : incomingMeta;
+		const dmAutoProjection = chatType === "direct" ? [...new Set([...mergedMentions, ...participants.filter((p) => p.agentId !== senderId).map((p) => p.agentId)])] : mergedMentions;
 		if (options.enforceGroupMention && chatType === "group") {
 			if (mergedMentions.filter((id) => id !== senderId).length === 0) throw new BadRequestError("Sending to a group chat requires an explicit @mention. Use `agent send <name>` to message a single agent, or @<name> in the content to address one or more group members.");
 		}
@@ -1720,6 +1767,13 @@ async function sendMessageInner(db, chatId, senderId, data, options) {
 			}
 		}
 		if (data.format === "question") await assertSenderMayEmitQuestion(tx, senderId);
+		const isSilentSend = typeof outboundContent === "string" && outboundContent.replace(/^(@\S+\s*)+/, "").trim().length === 0;
+		if (isSilentSend) log.info({
+			chatId,
+			senderId,
+			source: data.source ?? null
+		}, "silent send: empty content after mention strip — no fan-out wake-up");
+		const projectionMentions = isSilentSend ? [] : dmAutoProjection;
 		const messageId = randomUUID();
 		const [msg] = await tx.insert(messages).values({
 			id: messageId,
@@ -1743,7 +1797,7 @@ async function sendMessageInner(db, chatId, senderId, data, options) {
 		const fanout = participants.filter((p) => p.agentId !== senderId).map((p) => ({
 			agentId: p.agentId,
 			inboxId: p.inboxId,
-			notify: p.mode !== "mention_only" || mentionSet.has(p.agentId)
+			notify: !isSilentSend && (p.mode !== "mention_only" || mentionSet.has(p.agentId))
 		}));
 		if (fanout.length > 0) await tx.insert(inboxEntries).values(fanout.map((f) => ({
 			inboxId: f.inboxId,
@@ -1763,9 +1817,10 @@ async function sendMessageInner(db, chatId, senderId, data, options) {
 				await tx.insert(inboxEntries).values({
 					inboxId: original.replyToInbox,
 					messageId,
-					chatId: original.replyToChat
+					chatId: original.replyToChat,
+					notify: !isSilentSend
 				}).onConflictDoNothing();
-				if (!recipients.includes(original.replyToInbox)) recipients.push(original.replyToInbox);
+				if (!isSilentSend && !recipients.includes(original.replyToInbox)) recipients.push(original.replyToInbox);
 			}
 		}
 		await tx.update(chats).set({ updatedAt: /* @__PURE__ */ new Date() }).where(eq(chats.id, chatId));
@@ -1775,7 +1830,7 @@ async function sendMessageInner(db, chatId, senderId, data, options) {
 			chatId,
 			messageId: msg.id,
 			senderId,
-			mentionedAgentIds: mergedMentions,
+			mentionedAgentIds: projectionMentions,
 			contentPreview: previewText,
 			messageCreatedAt: msg.createdAt
 		});
@@ -1796,11 +1851,81 @@ async function sendMessageInner(db, chatId, senderId, data, options) {
 		}, "predictive session activation failed");
 	}
 	fireChatMessageKick(chatId, txResult.message.id);
+	observeLoopPattern(db, chatId).catch((err) => {
+		log.error({
+			err,
+			chatId
+		}, "loop pattern observation failed");
+	});
 	return {
 		message: txResult.message,
 		recipients: txResult.recipients
 	};
 }
+function stripMentionPrefix(content) {
+	return content.replace(/^(@\S+\s*)+/, "").trim();
+}
+const defaultLoopObserver = (data) => {
+	log.warn({
+		metric: "loop_pattern_observed_total",
+		...data
+	}, "loop pattern observed (not blocked) — prompt discipline may be drifting");
+};
+/**
+* Pure observation: detect short, fast, two-agent ping-pong reply chains and
+* surface them via a structured log line. Does NOT modify the `notify` flag
+* or otherwise interfere with delivery — loop *prevention* lives client-side
+* (prompt + silent-turn protocol in `result-sink`). Six conjunctive
+* conditions (see design `agent-reply-loop-prevention-design.md` §3.4) so
+* normal multi-agent collaboration is never flagged:
+*
+*   C1 — every message is `format=text`
+*   C2 — no human sender in the window (any human reply resets the chain)
+*   C3 — exactly two senders, perfectly alternating
+*   C4 — strict `inReplyTo` chain across the whole window
+*   C5 — every message body (after stripping leading `@<name>` tokens) is
+*        ≤ `LOOP_OBSERVATION_SHORT_CHARS` characters
+*   C6 — the whole window spans ≤ `LOOP_OBSERVATION_TIME_WINDOW_MS` ms
+*
+* Exported for direct test coverage of the detection logic; the `sendMessage`
+* call site uses the default observer.
+*/
+async function observeLoopPattern(db, chatId, observer = defaultLoopObserver) {
+	const window = await db.select({
+		id: messages.id,
+		senderId: messages.senderId,
+		content: messages.content,
+		inReplyTo: messages.inReplyTo,
+		createdAt: messages.createdAt,
+		format: messages.format,
+		senderType: agents.type
+	}).from(messages).innerJoin(agents, eq(messages.senderId, agents.uuid)).where(eq(messages.chatId, chatId)).orderBy(desc(messages.createdAt)).limit(4);
+	if (window.length < 4) return;
+	if (window.some((m) => m.format !== "text")) return;
+	if (window.some((m) => m.senderType === "human")) return;
+	if (new Set(window.map((m) => m.senderId)).size !== 2) return;
+	for (let i = 0; i < window.length - 1; i++) if (window[i]?.senderId === window[i + 1]?.senderId) return;
+	for (let i = 0; i < window.length - 1; i++) if (window[i]?.inReplyTo !== window[i + 1]?.id) return;
+	const lens = [];
+	for (const m of window) {
+		const text = typeof m.content === "string" ? m.content : null;
+		if (text === null) return;
+		const len = stripMentionPrefix(text).length;
+		if (len > 10) return;
+		lens.push(len);
+	}
+	const newest = window[0];
+	const oldest = window[window.length - 1];
+	if (!newest || !oldest) return;
+	const spanMs = newest.createdAt.getTime() - oldest.createdAt.getTime();
+	if (spanMs > 3e4) return;
+	observer({
+		chatId,
+		recentMessageIds: window.map((m) => m.id),
+		windowSpanMs: spanMs,
+		contentLengths: lens
+	});
+}
 async function sendToAgent(db, senderUuid, targetName, data) {
 	const [sender] = await db.select({
 		uuid: agents.uuid,

package/dist/{client-DNEtPEBu-BtHkUya2.mjs → client-DNiLcPEq-db3YS57z.mjs}

@@ -1,7 +1,7 @@
 import "./observability-BAScT_5S-BcW9HgkG.mjs";
 import "./logger-core-BTmvdflj-DjW8FM4T.mjs";
-import "./dist-CnjqakXS.mjs";
+import "./dist-B1GHzMLc.mjs";
 import "./errors-CF5evtJt-B0NTIVPt.mjs";
 import "./src-DNBS5Yjj.mjs";
-import { J as listMyPinnedAgents } from "./client-bR8nwHaV-OxnjyKOk.mjs";
+import { J as listMyPinnedAgents } from "./client-BViGcaUC-CZb2Svgh.mjs";
 export { listMyPinnedAgents };

package/dist/{dist-CnjqakXS.mjs → dist-B1GHzMLc.mjs}

@@ -74,7 +74,7 @@ function scanMentionTokens(content) {
 */
 function defaultParticipantMode(chatType, agentType, peerAgentTypes = []) {
 	if (agentType === "human") return "full";
-	if (chatType === "group" || chatType === "thread") return "mention_only";
+	if (chatType === "group") return "mention_only";
 	return peerAgentTypes.every((t) => t !== "human") ? "mention_only" : "full";
 }
 /**
@@ -476,6 +476,11 @@ z.object({
 });
 const runtimeProviderSchema = z.enum(["claude-code", "codex"]);
 const DEFAULT_RUNTIME_PROVIDER = "claude-code";
+const AGENT_TYPES = {
+	HUMAN: "human",
+	PERSONAL_ASSISTANT: "personal_assistant",
+	AUTONOMOUS_AGENT: "autonomous_agent"
+};
 const agentTypeSchema = z.enum([
 	"human",
 	"personal_assistant",
@@ -627,11 +632,7 @@ const chatMetadataSchema = z.discriminatedUnion("source", [githubChatMetadataSch
 * sneak through `{ source: "github" }` without the required fields.
 */
 const optionalChatMetadataSchema = z.union([z.object({}).strict(), chatMetadataSchema]);
-const chatTypeSchema = z.enum([
-	"direct",
-	"group",
-	"thread"
-]);
+const chatTypeSchema = z.enum(["direct", "group"]);
 /**
 * Per-(chat, user) engagement state. Stored on `chat_user_state` so each
 * user manages their own view independently of structural membership.
@@ -1179,7 +1180,8 @@ const meChatRowSchema = z.object({
 	lastMessagePreview: z.string().nullable(),
 	unreadMentionCount: z.number().int(),
 	canReply: z.boolean(),
-	engagementStatus: chatEngagementStatusSchema
+	engagementStatus: chatEngagementStatusSchema,
+	workingAgentIds: z.array(z.string())
 });
 z.object({
 	rows: z.array(meChatRowSchema),
@@ -1287,15 +1289,106 @@ memberSchema.extend({
 	displayName: z.string(),
 	password: z.string()
 });
+/**
+* Origin of a normalized webhook event. After the GitHub App ingestion
+* cutover this is single-form (App installations only); the type stays
+* a structured object so future non-GitHub sources can be added by
+* widening it into a discriminated union without churning callers.
+*/
+const webhookSourceSchema = z.object({
+	kind: z.literal("github-app-installation"),
+	installationId: z.number().int(),
+	organizationId: z.string().min(1)
+});
+const involveReasonSchema = z.enum([
+	"mentioned",
+	"review_requested",
+	"assigned"
+]);
+const normalizedEventKindSchema = z.enum([
+	"opened",
+	"edited",
+	"closed",
+	"merged",
+	"reopened",
+	"commented",
+	"review_requested",
+	"reviewed",
+	"review_comment",
+	"synchronized",
+	"commit_commented",
+	"assigned",
+	"other"
+]);
+const normalizedEntitySchema = z.object({
+	type: githubEntityTypeSchema,
+	repo: z.string().min(1),
+	key: z.string().min(1),
+	title: z.string().optional(),
+	url: z.string().optional()
+});
+const normalizedActorSchema = z.object({
+	githubLogin: z.string().min(1),
+	isBot: z.boolean()
+});
+const normalizedInvolveSchema = z.object({
+	githubLogin: z.string().min(1),
+	reason: involveReasonSchema
+});
+const normalizedSurfaceSchema = z.object({
+	title: z.string(),
+	body: z.string(),
+	url: z.string()
+});
+const normalizedRelatedRefSchema = z.object({
+	type: z.literal("issue"),
+	key: z.string().min(1)
+});
+z.object({
+	source: webhookSourceSchema,
+	deliveryId: z.string().nullable(),
+	rawEventType: z.string().min(1),
+	rawAction: z.string().nullable(),
+	entity: normalizedEntitySchema,
+	actor: normalizedActorSchema,
+	kind: normalizedEventKindSchema,
+	involves: z.array(normalizedInvolveSchema),
+	surface: normalizedSurfaceSchema,
+	relatedRefs: z.array(normalizedRelatedRefSchema)
+});
+const githubEventCardReasonSchema = z.enum([
+	"mentioned",
+	"review_requested",
+	"assigned",
+	"subscribed"
+]);
+z.object({
+	type: z.literal("github_event"),
+	reason: githubEventCardReasonSchema,
+	event: z.string().min(1),
+	action: z.string().nullable(),
+	kind: normalizedEventKindSchema,
+	repository: z.string(),
+	sender: z.string(),
+	title: z.string(),
+	body: z.string(),
+	url: z.string(),
+	entity: z.object({
+		type: githubEntityTypeSchema,
+		key: z.string().min(1),
+		url: z.string().nullable()
+	}),
+	mentionedUser: z.string().optional()
+});
+const NOTIFICATION_TYPES = {
+	AGENT_ERROR: "agent_error",
+	AGENT_BLOCKED: "agent_blocked",
+	AGENT_STALE: "agent_stale"
+};
 const notificationTypeSchema = z.enum([
 	"agent_error",
-	"session_error",
-	"agent_needs_decision",
 	"agent_blocked",
-	"agent_stale",
-	"agent_disconnected",
-	"agent_connected",
-	"session_completed"
+	"agent_stale"
 ]);
 const notificationSeveritySchema = z.enum([
 	"high",
@@ -1430,12 +1523,6 @@ const orgContextTreeOutputSchema = z.object({
 	repo: z.string().optional(),
 	branch: z.string().optional()
 });
-const orgGithubIntegrationStorageSchema = z.object({ webhookSecretCipher: z.string().optional() });
-const orgGithubIntegrationInputSchema = z.object({ webhookSecret: z.string().min(1).nullish() });
-const orgGithubIntegrationOutputSchema = z.object({
-	webhookSecretConfigured: z.boolean(),
-	webhookUrl: z.string()
-});
 const orgSourceReposStorageSchema = z.object({ repos: z.array(z.object({
 	url: repoUrlSchema,
 	defaultBranch: z.string().optional()
@@ -1455,12 +1542,6 @@ const ORG_SETTINGS_NAMESPACES = {
 		output: orgContextTreeOutputSchema,
 		readPolicy: "member"
 	},
-	github_integration: {
-		storage: orgGithubIntegrationStorageSchema,
-		input: orgGithubIntegrationInputSchema,
-		output: orgGithubIntegrationOutputSchema,
-		readPolicy: "admin"
-	},
 	source_repos: {
 		storage: orgSourceReposStorageSchema,
 		input: orgSourceReposInputSchema,
@@ -1678,15 +1759,6 @@ const sessionEventMessageSchema = z.object({
 	chatId: z.string(),
 	event: sessionEventSchema
 });
-/**
-* WS control message: client signals that a query completed end-to-end.
-* Decoupled from `session:event` so the `session_completed` notification
-* fires on actual result forwarding, not on incidental tool activity.
-*/
-const sessionCompletionMessageSchema = z.object({
-	agentId: z.string(),
-	chatId: z.string()
-});
 /** Client → server: list locally-held chatIds; server replies with the subset to drop. */
 const sessionReconcileRequestSchema = z.object({
 	type: z.literal("session:reconcile"),
@@ -1754,4 +1826,4 @@ z.object({
 	capabilities: serverCapabilitiesSchema.optional()
 }).passthrough();
 //#endregion
-export { patchOnboardingSchema as $, defaultRuntimeConfigPayload as A, inboxDeliverFrameSchema as B, createAdapterMappingSchema as C, updateOrganizationSchema as Ct, createMemberSchema as D, createMeChatSchema as E, githubCallbackQuerySchema as F, joinByInvitationSchema as G, isOrgSettingNamespace as H, githubDevCallbackQuerySchema as I, messageSourceSchema as J, listMeChatsQuerySchema as K, githubStartQuerySchema as L, dryRunAgentRuntimeConfigSchema as M, extractMentions as N, createOrgFromMeSchema as O, githubAppInstallationClaimBodySchema as P, patchChatEngagementSchema as Q, imageInlineContentSchema as R, createAdapterConfigSchema as S, updateMemberSchema as St, createChatSchema as T, isRedactedEnvValue as U, inboxPollQuerySchema as V, isReservedAgentName as W, onboardingEventSchema as X, notificationQuerySchema as Y, paginationQuerySchema as Z, chatMetadataSchema as _, updateAdapterConfigSchema as _t, AGENT_VISIBILITY as a, safeRedirectPath as at, connectTokenExchangeSchema as b, updateChatSchema as bt, MENTION_REGEX as c, sendMessageSchema as ct, addMeChatParticipantsSchema as d, sessionEventMessageSchema as dt, questionAnswerMessageContentSchema as et, addParticipantSchema as f, sessionEventSchema as ft, agentTypeSchema as g, submitQuestionAnswerSchema as gt, agentRuntimeConfigPayloadSchema as h, stripCode as ht, AGENT_STATUSES as i, runtimeStateMessageSchema as it, delegateFeishuUserSchema as j, defaultParticipantMode as k, ORG_SETTINGS_NAMESPACES as l, sendToAgentSchema as lt, agentPinnedMessageSchema as m, sessionStateMessageSchema as mt, AGENT_NAME_REGEX as n, rebindAgentSchema as nt, CHAT_ENGAGEMENT_STATUSES as o, scanMentionTokens as ot, agentBindRequestSchema as p, sessionReconcileRequestSchema as pt, loginSchema as q, AGENT_SELECTOR_HEADER as r, refreshTokenSchema as rt, DEFAULT_RUNTIME_PROVIDER as s, selfServiceFeishuBotSchema as st, AGENT_BIND_REJECT_REASONS as t, questionMessageContentSchema as tt, WS_AUTH_FRAME_TIMEOUT_MS as u, sessionCompletionMessageSchema as ut, clientCapabilitiesSchema as v, updateAgentRuntimeConfigSchema as vt, createAgentSchema as w, wsAuthFrameSchema as wt, contextTreeSnapshotSchema as x, updateClientCapabilitiesSchema as xt, clientRegisterSchema as y, updateAgentSchema as yt, inboxAckFrameSchema as z };
+export { onboardingEventSchema as $, createOrgFromMeSchema as A, githubStartQuerySchema as B, contextTreeSnapshotSchema as C, updateClientCapabilitiesSchema as Ct, createChatSchema as D, createAgentSchema as E, wsAuthFrameSchema as Et, extractMentions as F, isOrgSettingNamespace as G, inboxAckFrameSchema as H, githubAppInstallationClaimBodySchema as I, joinByInvitationSchema as J, isRedactedEnvValue as K, githubAppInstallationPermissionsSchema as L, defaultRuntimeConfigPayload as M, delegateFeishuUserSchema as N, createMeChatSchema as O, dryRunAgentRuntimeConfigSchema as P, notificationQuerySchema as Q, githubCallbackQuerySchema as R, connectTokenExchangeSchema as S, updateChatSchema as St, createAdapterMappingSchema as T, updateOrganizationSchema as Tt, inboxDeliverFrameSchema as U, imageInlineContentSchema as V, inboxPollQuerySchema as W, loginSchema as X, listMeChatsQuerySchema as Y, messageSourceSchema as Z, agentRuntimeConfigPayloadSchema as _, stripCode as _t, AGENT_TYPES as a, rebindAgentSchema as at, clientCapabilitiesSchema as b, updateAgentRuntimeConfigSchema as bt, DEFAULT_RUNTIME_PROVIDER as c, safeRedirectPath as ct, ORG_SETTINGS_NAMESPACES as d, sendMessageSchema as dt, paginationQuerySchema as et, WS_AUTH_FRAME_TIMEOUT_MS as f, sendToAgentSchema as ft, agentPinnedMessageSchema as g, sessionStateMessageSchema as gt, agentBindRequestSchema as h, sessionReconcileRequestSchema as ht, AGENT_STATUSES as i, questionMessageContentSchema as it, defaultParticipantMode as j, createMemberSchema as k, MENTION_REGEX as l, scanMentionTokens as lt, addParticipantSchema as m, sessionEventSchema as mt, AGENT_NAME_REGEX as n, patchOnboardingSchema as nt, AGENT_VISIBILITY as o, refreshTokenSchema as ot, addMeChatParticipantsSchema as p, sessionEventMessageSchema as pt, isReservedAgentName as q, AGENT_SELECTOR_HEADER as r, questionAnswerMessageContentSchema as rt, CHAT_ENGAGEMENT_STATUSES as s, runtimeStateMessageSchema as st, AGENT_BIND_REJECT_REASONS as t, patchChatEngagementSchema as tt, NOTIFICATION_TYPES as u, selfServiceFeishuBotSchema as ut, agentTypeSchema as v, submitQuestionAnswerSchema as vt, createAdapterConfigSchema as w, updateMemberSchema as wt, clientRegisterSchema as x, updateAgentSchema as xt, chatMetadataSchema as y, updateAdapterConfigSchema as yt, githubDevCallbackQuerySchema as z };

package/dist/drizzle/0041_notifications_dedup_key.sql

@@ -0,0 +1,29 @@
+-- DB-backed deduplication for the notifications table.
+--
+-- Before this migration, the server kept an in-memory Map keyed by
+-- `(agentId, notificationType)` to suppress duplicate notifications within a
+-- five-minute window. That broke in two important ways:
+--
+--   1. Multi-instance deployments: each server process owned its own Map, so
+--      a notification produced on instance A passed instance B's dedupe gate
+--      unchanged. Operators saw the same row inserted multiple times during
+--      load-balancer failover or rolling restart.
+--   2. Process restart wiped the Map, re-opening the dedupe window for
+--      whatever events had fired just before.
+--
+-- The new model is purely DB-driven. A producer optionally supplies a
+-- `dedup_key` (e.g. `agent:{uuid}:error`, `chat:{uuid}:completed`). The
+-- partial unique index below scopes uniqueness to `(organization_id,
+-- dedup_key)` *while the prior row is still unread*. Re-emitting the same
+-- key while the previous notification sits unread is a no-op (the
+-- application uses `ON CONFLICT DO NOTHING`); after the user acknowledges
+-- the prior row, a fresh notification can land again.
+--
+-- Producers without a `dedup_key` keep the legacy always-insert behaviour,
+-- so this column is purely additive — no back-fill, no NOT NULL constraint.
+
+ALTER TABLE "notifications" ADD COLUMN "dedup_key" text;
+
+CREATE UNIQUE INDEX "uq_notifications_org_dedup_unread"
+  ON "notifications" ("organization_id", "dedup_key")
+  WHERE read = false AND dedup_key IS NOT NULL;

package/dist/drizzle/0042_notifications_drop_legacy_types.sql

@@ -0,0 +1,36 @@
+-- Drop notification rows whose `type` is no longer in the shared schema.
+--
+-- Three types were removed in earlier work but their rows were left behind:
+--
+--   * `agent_disconnected` — producer deleted by PR #348 (the
+--     systemctl-restart spam fix), schema enum entry deleted later. 37 rows
+--     still in dev hub at the time of writing, with no UI label and no
+--     click target.
+--   * `session_completed` — removed end-to-end in this PR (was 56% of recent
+--     notifications, duplicating the conversation list's "latest message"
+--     signal). Without the cleanup, the bell would keep surfacing them
+--     until each org's user marks them all read manually.
+--   * `session_error` — long-dead type: schema entry + UI label existed,
+--     but no producer ever wrote one. Cleanup is defensive — any stray
+--     rows from a hand-written test or prod-DB experiment go.
+--
+-- `notifications.type` is a `text` column (not a PG enum), so this is a
+-- pure data-cleanup migration — no schema change, no type-cast risk.
+--
+-- The unread-only branch handles the transition window for rows still on
+-- the previous per-type dedup key (`agent:{id}:agent_error|blocked|stale`).
+-- They co-exist with new `agent:{id}:fault` rows for the same agent until
+-- one or the other is marked read, which is exactly the redundancy this PR
+-- is fixing — so wipe them too. Read rows on those keys stay (history).
+
+DELETE FROM "notifications"
+WHERE "type" IN ('agent_disconnected', 'session_completed', 'session_error');
+
+DELETE FROM "notifications"
+WHERE "read" = false
+  AND "dedup_key" IN (
+    SELECT "dedup_key" FROM "notifications"
+    WHERE "dedup_key" LIKE 'agent:%:agent_error'
+       OR "dedup_key" LIKE 'agent:%:agent_blocked'
+       OR "dedup_key" LIKE 'agent:%:agent_stale'
+  );

package/dist/drizzle/meta/_journal.json

@@ -288,6 +288,20 @@
       "when": 1779235200000,
       "tag": "0040_chat_user_state_engagement",
       "breakpoints": true
+    },
+    {
+      "idx": 41,
+      "version": "7",
+      "when": 1779321600000,
+      "tag": "0041_notifications_dedup_key",
+      "breakpoints": true
+    },
+    {
+      "idx": 42,
+      "version": "7",
+      "when": 1779408000000,
+      "tag": "0042_notifications_drop_legacy_types",
+      "breakpoints": true
     }
   ]
 }

package/dist/{feishu-DrnBbl8T.mjs → feishu-30vUx69l.mjs}

@@ -1,6 +1,6 @@
 import { r as __exportAll } from "./chunk-BSw8zbkd.mjs";
 import { t as cliFetch } from "./cli-fetch--tiwKm5S.mjs";
-import { r as AGENT_SELECTOR_HEADER } from "./dist-CnjqakXS.mjs";
+import { r as AGENT_SELECTOR_HEADER } from "./dist-B1GHzMLc.mjs";
 //#region src/core/feishu.ts
 var feishu_exports = /* @__PURE__ */ __exportAll({
 	bindFeishuBot: () => bindFeishuBot,

package/dist/index.mjs

@@ -1,12 +1,12 @@
 import "./observability-BAScT_5S-BcW9HgkG.mjs";
-import { A as checkDocker, B as isServiceSupported, E as checkAgentConfigs, F as checkWebSocket, G as uninstallClientService, H as restartClientService, I as printResults, J as stopPostgres, K as ensurePostgres, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, V as resolveCliInvocation, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, Z as rotateClientIdWithBackup, _ as formatCheckReport, b as onboardCreate, d as startServer, g as promptMissingFields, h as promptAddAgent, j as checkNodeVersion, k as checkDatabase, lt as FirstTreeHubSDK, m as isInteractive, n as deriveHubUrlFromToken, nt as hasUser, q as isDockerAvailable, t as HubUrlDerivationError, tt as createOwner, ut as SdkError, y as onboardCheck, z as installClientService } from "./saas-connect-CLcon-De.mjs";
+import { A as checkDocker, B as isServiceSupported, E as checkAgentConfigs, F as checkWebSocket, G as uninstallClientService, H as restartClientService, I as printResults, J as stopPostgres, K as ensurePostgres, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, V as resolveCliInvocation, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, Z as rotateClientIdWithBackup, _ as formatCheckReport, b as onboardCreate, d as startServer, g as promptMissingFields, h as promptAddAgent, j as checkNodeVersion, k as checkDatabase, lt as FirstTreeHubSDK, m as isInteractive, n as deriveHubUrlFromToken, nt as hasUser, q as isDockerAvailable, t as HubUrlDerivationError, tt as createOwner, ut as SdkError, y as onboardCheck, z as installClientService } from "./saas-connect-Fgnnnola.mjs";
 import "./logger-core-BTmvdflj-DjW8FM4T.mjs";
-import { a as ensureFreshAdminToken, c as resolveServerUrl, i as ensureFreshAccessToken, n as AuthRefreshRateLimitedError, s as resolveAccessToken, t as AuthRefreshFailedError } from "./bootstrap-BCZC1ki6.mjs";
+import { a as ensureFreshAdminToken, c as resolveServerUrl, i as ensureFreshAccessToken, n as AuthRefreshRateLimitedError, s as resolveAccessToken, t as AuthRefreshFailedError } from "./bootstrap-CW73oEYn.mjs";
 import { i as blank, s as status } from "./cli-fetch--tiwKm5S.mjs";
-import "./dist-CnjqakXS.mjs";
-import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-DrnBbl8T.mjs";
+import "./dist-B1GHzMLc.mjs";
+import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-30vUx69l.mjs";
 import "./errors-CF5evtJt-B0NTIVPt.mjs";
 import "./src-DNBS5Yjj.mjs";
-import "./client-bR8nwHaV-OxnjyKOk.mjs";
+import "./client-BViGcaUC-CZb2Svgh.mjs";
 import "./invitation-Bg0TRiyx-BsZH4GCS.mjs";
 export { AuthRefreshFailedError, AuthRefreshRateLimitedError, ClientRuntime, FirstTreeHubSDK, HubUrlDerivationError, SdkError, bindFeishuBot, bindFeishuUser, blank, checkAgentConfigs, checkClientConfig, checkDatabase, checkDocker, checkNodeVersion, checkServerConfig, checkServerHealth, checkServerReachable, checkWebSocket, createOwner, deriveHubUrlFromToken, ensureFreshAccessToken, ensureFreshAdminToken, ensurePostgres, formatCheckReport, getClientServiceStatus, handleClientOrgMismatch, hasUser, installClientService, isDockerAvailable, isInteractive, isServiceSupported, onboardCheck, onboardCreate, printResults, promptAddAgent, promptMissingFields, resolveAccessToken, resolveCliInvocation, resolveServerUrl, restartClientService, rotateClientIdWithBackup, runHomeMigration, runMigrations, startClientService, startServer, status, stopClientService, stopPostgres, uninstallClientService };

package/dist/{invitation-C299fxkP-KKslbta2.mjs → invitation-C299fxkP-CZgGbsN_.mjs}

@@ -1,4 +1,4 @@
-import "./dist-CnjqakXS.mjs";
+import "./dist-B1GHzMLc.mjs";
 import "./errors-CF5evtJt-B0NTIVPt.mjs";
 import { s as previewInvitation } from "./invitation-Bg0TRiyx-BsZH4GCS.mjs";
 export { previewInvitation };