@agent-team-foundation/first-tree-hub 0.12.9 → 0.13.0

package/dist/{client-OMwJMCQt-R1T06ZH6.mjs → client-BH4CmUL0-CybE3kuP.mjs}

@@ -1,10 +1,10 @@
 import { O as withSpan, f as messageAttrs, s as createLogger } from "./observability-BAScT_5S-BcW9HgkG.mjs";
-import { N as extractMentions, a as AGENT_VISIBILITY, et as questionAnswerMessageContentSchema, g as agentTypeSchema, i as AGENT_STATUSES, k as defaultParticipantMode, o as CHAT_ENGAGEMENT_STATUSES, ot as scanMentionTokens, tt as questionMessageContentSchema, v as clientCapabilitiesSchema } from "./dist-CnjqakXS.mjs";
-import { a as ConflictError, i as ClientUserMismatchError, l as organizations, n as BadRequestError, o as ForbiddenError, s as NotFoundError, u as users } from "./errors-CF5evtJt-B0NTIVPt.mjs";
+import { I as extractMentions, M as defaultParticipantMode, at as questionMessageContentSchema, i as AGENT_STATUSES, it as questionAnswerMessageContentSchema, o as AGENT_VISIBILITY, s as CHAT_ENGAGEMENT_STATUSES, ut as scanMentionTokens, x as clientCapabilitiesSchema, y as agentTypeSchema } from "./dist-C8yStx2L.mjs";
+import { a as ConflictError, i as ClientUserMismatchError, l as organizations, n as BadRequestError, o as ForbiddenError, s as NotFoundError, u as users } from "./errors-LPcARA4K-Dbrptiyz.mjs";
 import { randomUUID } from "node:crypto";
 import { and, desc, eq, inArray, isNotNull, lt, ne, or, sql } from "drizzle-orm";
 import { bigserial, boolean, index, integer, jsonb, pgTable, primaryKey, text, timestamp, unique } from "drizzle-orm/pg-core";
-//#region ../server/dist/client-OMwJMCQt.mjs
+//#region ../server/dist/client-BH4CmUL0.mjs
 /**
 * Client connections. A client is a single SDK process (AgentRuntime) that may
 * host multiple agents. From the unified-user-token milestone on, a client is
@@ -237,7 +237,7 @@ function invalidateChatAudience(chatId) {
 *   - for each row, `peerAgentTypes` is the type of every OTHER participant
 *     being inserted in the same call PLUS every EXISTING speaker of
 *     the chat. This matters only for `direct` chats; the helper ignores
-*     it for `group` / `thread`.
+*     it for `group`.
 *
 * Writes one INSERT (multi-row) per call.
 *
@@ -250,7 +250,7 @@ async function addChatParticipants(tx, chatId, participants, options = {}) {
 	if (participants.length === 0) return;
 	const [chat] = await tx.select({ type: chats.type }).from(chats).where(eq(chats.id, chatId)).limit(1);
 	if (!chat) throw new NotFoundError(`Chat "${chatId}" not found`);
-	if (chat.type !== "direct" && chat.type !== "group" && chat.type !== "thread") throw new Error(`Unexpected chat type "${chat.type}" for chat "${chatId}"`);
+	if (chat.type !== "direct" && chat.type !== "group") throw new Error(`Unexpected chat type "${chat.type}" for chat "${chatId}"`);
 	const chatType = chat.type;
 	const agentIds = participants.map((p) => p.agentId);
 	const agentRows = await tx.select({
@@ -1306,6 +1306,7 @@ const pendingQuestions = pgTable("pending_questions", {
 const INBOX_CHANNEL = "inbox_notifications";
 const CONFIG_CHANNEL = "config_changes";
 const SESSION_STATE_CHANNEL = "session_state_changes";
+const SESSION_EVENT_CHANNEL = "session_event_changes";
 const RUNTIME_STATE_CHANNEL = "runtime_state_changes";
 /**
 * Chat-first workspace cross-process kick. Carries `<chatId>:<messageId>`.
@@ -1314,17 +1315,29 @@ const RUNTIME_STATE_CHANNEL = "runtime_state_changes";
 * inbox NOTIFY path that only reaches speakers.
 */
 const CHAT_MESSAGE_CHANNEL = "chat_message_events";
+/**
+* Generic admin-broadcast envelope channel. Producers (e.g. notification.ts)
+* emit a JSON-stringified `AdminBroadcastPayload`; every server instance
+* LISTENs and hands the envelope to its local admin-socket fanout. Keeps
+* cross-instance and single-instance code paths identical from the admin WS
+* route's perspective.
+*/
+const ADMIN_BROADCAST_CHANNEL = "admin_broadcast_envelopes";
 function createNotifier(listenClient) {
 	const subscriptions = /* @__PURE__ */ new Map();
 	const configChangeHandlers = [];
 	const sessionStateChangeHandlers = [];
+	const sessionEventHandlers = [];
 	const runtimeStateChangeHandlers = [];
 	const chatMessageHandlers = [];
+	const adminBroadcastHandlers = [];
 	let unlistenInboxFn = null;
 	let unlistenConfigFn = null;
 	let unlistenSessionStateFn = null;
+	let unlistenSessionEventFn = null;
 	let unlistenRuntimeStateFn = null;
 	let unlistenChatMessageFn = null;
+	let unlistenAdminBroadcastFn = null;
 	function handleNotification(payload) {
 		const sepIdx = payload.indexOf(":");
 		if (sepIdx === -1) return;
@@ -1374,6 +1387,11 @@ function createNotifier(listenClient) {
 				await listenClient`SELECT pg_notify(${SESSION_STATE_CHANNEL}, ${`${agentId}:${chatId}:${state}:${organizationId}`})`;
 			} catch {}
 		},
+		async notifySessionEvent(agentId, chatId, kind, organizationId) {
+			try {
+				await listenClient`SELECT pg_notify(${SESSION_EVENT_CHANNEL}, ${`${agentId}:${chatId}:${kind}:${organizationId}`})`;
+			} catch {}
+		},
 		async notifyRuntimeStateChange(agentId, state, organizationId) {
 			try {
 				await listenClient`SELECT pg_notify(${RUNTIME_STATE_CHANNEL}, ${`${agentId}:${state}:${organizationId}`})`;
@@ -1384,6 +1402,21 @@ function createNotifier(listenClient) {
 				await listenClient`SELECT pg_notify(${CHAT_MESSAGE_CHANNEL}, ${`${chatId}:${messageId}`})`;
 			} catch {}
 		},
+		async notifyAdminBroadcast(payload) {
+			let encoded;
+			try {
+				encoded = JSON.stringify(payload);
+			} catch {
+				return;
+			}
+			if (encoded.length > 7500) {
+				console.error(`[notifier] admin broadcast payload too large (${encoded.length} bytes); refusing to NOTIFY`);
+				return;
+			}
+			try {
+				await listenClient`SELECT pg_notify(${ADMIN_BROADCAST_CHANNEL}, ${encoded})`;
+			} catch {}
+		},
 		async pushFrameToInbox(inboxId, frame) {
 			const map = subscriptions.get(inboxId);
 			if (!map) return 0;
@@ -1407,12 +1440,18 @@ function createNotifier(listenClient) {
 		onSessionStateChange(handler) {
 			sessionStateChangeHandlers.push(handler);
 		},
+		onSessionEvent(handler) {
+			sessionEventHandlers.push(handler);
+		},
 		onRuntimeStateChange(handler) {
 			runtimeStateChangeHandlers.push(handler);
 		},
 		onChatMessage(handler) {
 			chatMessageHandlers.push(handler);
 		},
+		onAdminBroadcast(handler) {
+			adminBroadcastHandlers.push(handler);
+		},
 		async start() {
 			unlistenInboxFn = (await listenClient.listen(INBOX_CHANNEL, (payload) => {
 				if (payload) handleNotification(payload);
@@ -1439,6 +1478,27 @@ function createNotifier(listenClient) {
 					}
 				}
 			})).unlisten;
+			unlistenSessionEventFn = (await listenClient.listen(SESSION_EVENT_CHANNEL, (payload) => {
+				if (payload) {
+					const firstSep = payload.indexOf(":");
+					const secondSep = payload.indexOf(":", firstSep + 1);
+					const thirdSep = payload.indexOf(":", secondSep + 1);
+					if (firstSep > 0 && secondSep > firstSep && thirdSep > secondSep) {
+						const agentId = payload.slice(0, firstSep);
+						const chatId = payload.slice(firstSep + 1, secondSep);
+						const kind = payload.slice(secondSep + 1, thirdSep);
+						const organizationId = payload.slice(thirdSep + 1);
+						for (const handler of sessionEventHandlers) try {
+							handler({
+								agentId,
+								chatId,
+								kind,
+								organizationId
+							});
+						} catch {}
+					}
+				}
+			})).unlisten;
 			unlistenRuntimeStateFn = (await listenClient.listen(RUNTIME_STATE_CHANNEL, (payload) => {
 				if (payload) {
 					const firstSep = payload.indexOf(":");
@@ -1468,6 +1528,20 @@ function createNotifier(listenClient) {
 					});
 				} catch {}
 			})).unlisten;
+			unlistenAdminBroadcastFn = (await listenClient.listen(ADMIN_BROADCAST_CHANNEL, (payload) => {
+				if (!payload) return;
+				let parsed;
+				try {
+					parsed = JSON.parse(payload);
+				} catch {
+					return;
+				}
+				if (typeof parsed !== "object" || parsed === null) return;
+				const envelope = parsed;
+				for (const handler of adminBroadcastHandlers) try {
+					handler(envelope);
+				} catch {}
+			})).unlisten;
 		},
 		async stop() {
 			if (unlistenInboxFn) {
@@ -1482,6 +1556,10 @@ function createNotifier(listenClient) {
 				await unlistenSessionStateFn();
 				unlistenSessionStateFn = null;
 			}
+			if (unlistenSessionEventFn) {
+				await unlistenSessionEventFn();
+				unlistenSessionEventFn = null;
+			}
 			if (unlistenRuntimeStateFn) {
 				await unlistenRuntimeStateFn();
 				unlistenRuntimeStateFn = null;
@@ -1490,6 +1568,10 @@ function createNotifier(listenClient) {
 				await unlistenChatMessageFn();
 				unlistenChatMessageFn = null;
 			}
+			if (unlistenAdminBroadcastFn) {
+				await unlistenAdminBroadcastFn();
+				unlistenAdminBroadcastFn = null;
+			}
 		}
 	};
 }
@@ -1700,8 +1782,9 @@ async function sendMessageInner(db, chatId, senderId, data, options) {
 			...incomingMeta,
 			mentions: mergedMentions
 		} : incomingMeta;
+		const dmAutoProjection = chatType === "direct" ? [...new Set([...mergedMentions, ...participants.filter((p) => p.agentId !== senderId).map((p) => p.agentId)])] : mergedMentions;
 		if (options.enforceGroupMention && chatType === "group") {
-			if (mergedMentions.filter((id) => id !== senderId).length === 0) throw new BadRequestError("Sending to a group chat requires an explicit @mention. Use `agent send <name>` to message a single agent, or @<name> in the content to address one or more group members.");
+			if (mergedMentions.filter((id) => id !== senderId).length === 0) throw new BadRequestError("Sending to a group chat requires an explicit @mention. Use `first-tree-hub chat send <name>` to message a single agent, or @<name> in the content to address one or more group members.");
 		}
 		let outboundContent = data.content;
 		if (options.normalizeMentionsInContent && typeof outboundContent === "string") {
@@ -1726,6 +1809,7 @@ async function sendMessageInner(db, chatId, senderId, data, options) {
 			senderId,
 			source: data.source ?? null
 		}, "silent send: empty content after mention strip — no fan-out wake-up");
+		const projectionMentions = isSilentSend ? [] : dmAutoProjection;
 		const messageId = randomUUID();
 		const [msg] = await tx.insert(messages).values({
 			id: messageId,
@@ -1782,7 +1866,7 @@ async function sendMessageInner(db, chatId, senderId, data, options) {
 			chatId,
 			messageId: msg.id,
 			senderId,
-			mentionedAgentIds: mergedMentions,
+			mentionedAgentIds: projectionMentions,
 			contentPreview: previewText,
 			messageCreatedAt: msg.createdAt
 		});
@@ -1885,7 +1969,7 @@ async function sendToAgent(db, senderUuid, targetName, data) {
 	}).from(agents).where(eq(agents.uuid, senderUuid)).limit(1);
 	if (!sender) throw new NotFoundError(`Agent "${senderUuid}" not found`);
 	const [target] = await db.select({ uuid: agents.uuid }).from(agents).where(and(eq(agents.organizationId, sender.organizationId), eq(agents.name, targetName), ne(agents.status, "deleted"))).limit(1);
-	if (!target) throw new NotFoundError(`Agent "${targetName}" not found${/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(targetName) ? " — `agent send` expects an agent NAME, not a uuid. Run `first-tree-hub agent list` to see available names." : ""}`);
+	if (!target) throw new NotFoundError(`Agent "${targetName}" not found${/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(targetName) ? " — `first-tree-hub chat send` expects an agent NAME, not a uuid. Run `first-tree-hub agent list` to see available names." : ""}`);
 	const incomingMeta = data.metadata ?? {};
 	const existingMentionsRaw = incomingMeta.mentions;
 	const existingMentions = Array.isArray(existingMentionsRaw) ? existingMentionsRaw.filter((m) => typeof m === "string") : [];

package/dist/{client-CjGIGddS-BrpazWa3.mjs → client-h4KZ3b9o-CQyibXig.mjs}

@@ -1,7 +1,7 @@
 import "./observability-BAScT_5S-BcW9HgkG.mjs";
 import "./logger-core-BTmvdflj-DjW8FM4T.mjs";
-import "./dist-CnjqakXS.mjs";
-import "./errors-CF5evtJt-B0NTIVPt.mjs";
+import "./dist-C8yStx2L.mjs";
+import "./errors-LPcARA4K-Dbrptiyz.mjs";
 import "./src-DNBS5Yjj.mjs";
-import { J as listMyPinnedAgents } from "./client-OMwJMCQt-R1T06ZH6.mjs";
+import { J as listMyPinnedAgents } from "./client-BH4CmUL0-CybE3kuP.mjs";
 export { listMyPinnedAgents };

package/dist/{dist-CnjqakXS.mjs → dist-C8yStx2L.mjs}

@@ -74,7 +74,7 @@ function scanMentionTokens(content) {
 */
 function defaultParticipantMode(chatType, agentType, peerAgentTypes = []) {
 	if (agentType === "human") return "full";
-	if (chatType === "group" || chatType === "thread") return "mention_only";
+	if (chatType === "group") return "mention_only";
 	return peerAgentTypes.every((t) => t !== "human") ? "mention_only" : "full";
 }
 /**
@@ -185,6 +185,7 @@ z.object({
 const PROMPT_APPEND_MAX_LENGTH = 32e3;
 const MCP_NAME_PATTERN = /^[a-z0-9][a-z0-9_-]{0,63}$/i;
 const ENV_KEY_PATTERN = /^[A-Z][A-Z0-9_]*$/;
+const WINDOWS_DRIVE_PATH_PATTERN = /^[A-Za-z]:/;
 const promptConfigSchema = z.object({ append: z.string().max(PROMPT_APPEND_MAX_LENGTH).default("") });
 const mcpStdioServerSchema = z.object({
 	name: z.string().regex(MCP_NAME_PATTERN, "MCP name must match /^[a-z0-9][a-z0-9_-]{0,63}$/i"),
@@ -214,10 +215,38 @@ const envEntrySchema = z.object({
 	value: z.string(),
 	sensitive: z.boolean().default(false)
 });
+function hasControlCharacters(value) {
+	for (let idx = 0; idx < value.length; idx++) {
+		const code = value.charCodeAt(idx);
+		if (code <= 31 || code === 127) return true;
+	}
+	return false;
+}
+function getRepoLocalPathSafetyError(localPath) {
+	if (localPath.length === 0) return "Git repo local path must not be empty";
+	if (localPath.trim() !== localPath) return "Git repo local path must not have leading or trailing whitespace";
+	if (hasControlCharacters(localPath)) return "Git repo local path must not contain control characters";
+	if (localPath.includes("\\")) return "Git repo local path must use forward slashes";
+	if (localPath.startsWith("/") || WINDOWS_DRIVE_PATH_PATTERN.test(localPath)) return "Git repo local path must be relative";
+	const segments = localPath.split("/");
+	for (const segment of segments) {
+		if (!segment) return "Git repo local path must not contain empty path segments";
+		if (segment === "." || segment === "..") return "Git repo local path must not contain dot segments";
+		if (segment.trim() !== segment) return "Git repo local path segments must not have leading or trailing whitespace";
+	}
+	return null;
+}
 const gitRepoSchema = z.object({
 	url: z.string().min(1),
 	ref: z.string().min(1).optional(),
-	localPath: z.string().min(1).optional()
+	localPath: z.string().min(1).superRefine((localPath, ctx) => {
+		const safetyError = getRepoLocalPathSafetyError(localPath);
+		if (!safetyError) return;
+		ctx.addIssue({
+			code: z.ZodIssueCode.custom,
+			message: safetyError
+		});
+	}).optional()
 });
 /**
 * Untagged base shape — 5 user-tunable fields, no `kind` discriminator.
@@ -476,6 +505,11 @@ z.object({
 });
 const runtimeProviderSchema = z.enum(["claude-code", "codex"]);
 const DEFAULT_RUNTIME_PROVIDER = "claude-code";
+const AGENT_TYPES = {
+	HUMAN: "human",
+	PERSONAL_ASSISTANT: "personal_assistant",
+	AUTONOMOUS_AGENT: "autonomous_agent"
+};
 const agentTypeSchema = z.enum([
 	"human",
 	"personal_assistant",
@@ -627,11 +661,7 @@ const chatMetadataSchema = z.discriminatedUnion("source", [githubChatMetadataSch
 * sneak through `{ source: "github" }` without the required fields.
 */
 const optionalChatMetadataSchema = z.union([z.object({}).strict(), chatMetadataSchema]);
-const chatTypeSchema = z.enum([
-	"direct",
-	"group",
-	"thread"
-]);
+const chatTypeSchema = z.enum(["direct", "group"]);
 /**
 * Per-(chat, user) engagement state. Stored on `chat_user_state` so each
 * user manages their own view independently of structural membership.
@@ -1167,6 +1197,28 @@ const meChatParticipantSchema = z.object({
 	displayName: z.string(),
 	type: z.string()
 });
+/**
+* Live activity hint surfaced in the conversation row's time slot. Derived
+* server-side from the latest `session_events` row for the chat. See
+* `MeChatRow.liveActivity` for the lifecycle rules.
+*
+* `kind` is intentionally narrower than the full `sessionEventKind` enum:
+* `turn_end` / `error` produce `liveActivity: null` rather than a live
+* indicator.
+*/
+const liveActivityKindSchema = z.enum([
+	"tool_call",
+	"thinking",
+	"assistant_text"
+]);
+const liveActivitySchema = z.object({
+	agentId: z.string(),
+	kind: liveActivityKindSchema,
+	label: z.string(),
+	startedAt: z.string()
+});
+/** Stale threshold (ms) past which a `session_events` row stops driving liveActivity. */
+const LIVE_ACTIVITY_STALE_MS = 6e4;
 const meChatRowSchema = z.object({
 	chatId: z.string(),
 	type: z.string(),
@@ -1179,7 +1231,9 @@ const meChatRowSchema = z.object({
 	lastMessagePreview: z.string().nullable(),
 	unreadMentionCount: z.number().int(),
 	canReply: z.boolean(),
-	engagementStatus: chatEngagementStatusSchema
+	engagementStatus: chatEngagementStatusSchema,
+	engagedAgentIds: z.array(z.string()),
+	liveActivity: liveActivitySchema.nullable()
 });
 z.object({
 	rows: z.array(meChatRowSchema),
@@ -1287,15 +1341,106 @@ memberSchema.extend({
 	displayName: z.string(),
 	password: z.string()
 });
+/**
+* Origin of a normalized webhook event. After the GitHub App ingestion
+* cutover this is single-form (App installations only); the type stays
+* a structured object so future non-GitHub sources can be added by
+* widening it into a discriminated union without churning callers.
+*/
+const webhookSourceSchema = z.object({
+	kind: z.literal("github-app-installation"),
+	installationId: z.number().int(),
+	organizationId: z.string().min(1)
+});
+const involveReasonSchema = z.enum([
+	"mentioned",
+	"review_requested",
+	"assigned"
+]);
+const normalizedEventKindSchema = z.enum([
+	"opened",
+	"edited",
+	"closed",
+	"merged",
+	"reopened",
+	"commented",
+	"review_requested",
+	"reviewed",
+	"review_comment",
+	"synchronized",
+	"commit_commented",
+	"assigned",
+	"other"
+]);
+const normalizedEntitySchema = z.object({
+	type: githubEntityTypeSchema,
+	repo: z.string().min(1),
+	key: z.string().min(1),
+	title: z.string().optional(),
+	url: z.string().optional()
+});
+const normalizedActorSchema = z.object({
+	githubLogin: z.string().min(1),
+	isBot: z.boolean()
+});
+const normalizedInvolveSchema = z.object({
+	githubLogin: z.string().min(1),
+	reason: involveReasonSchema
+});
+const normalizedSurfaceSchema = z.object({
+	title: z.string(),
+	body: z.string(),
+	url: z.string()
+});
+const normalizedRelatedRefSchema = z.object({
+	type: z.literal("issue"),
+	key: z.string().min(1)
+});
+z.object({
+	source: webhookSourceSchema,
+	deliveryId: z.string().nullable(),
+	rawEventType: z.string().min(1),
+	rawAction: z.string().nullable(),
+	entity: normalizedEntitySchema,
+	actor: normalizedActorSchema,
+	kind: normalizedEventKindSchema,
+	involves: z.array(normalizedInvolveSchema),
+	surface: normalizedSurfaceSchema,
+	relatedRefs: z.array(normalizedRelatedRefSchema)
+});
+const githubEventCardReasonSchema = z.enum([
+	"mentioned",
+	"review_requested",
+	"assigned",
+	"subscribed"
+]);
+z.object({
+	type: z.literal("github_event"),
+	reason: githubEventCardReasonSchema,
+	event: z.string().min(1),
+	action: z.string().nullable(),
+	kind: normalizedEventKindSchema,
+	repository: z.string(),
+	sender: z.string(),
+	title: z.string(),
+	body: z.string(),
+	url: z.string(),
+	entity: z.object({
+		type: githubEntityTypeSchema,
+		key: z.string().min(1),
+		url: z.string().nullable()
+	}),
+	mentionedUser: z.string().optional()
+});
+const NOTIFICATION_TYPES = {
+	AGENT_ERROR: "agent_error",
+	AGENT_BLOCKED: "agent_blocked",
+	AGENT_STALE: "agent_stale"
+};
 const notificationTypeSchema = z.enum([
 	"agent_error",
-	"session_error",
-	"agent_needs_decision",
 	"agent_blocked",
-	"agent_stale",
-	"agent_disconnected",
-	"agent_connected",
-	"session_completed"
+	"agent_stale"
 ]);
 const notificationSeveritySchema = z.enum([
 	"high",
@@ -1430,12 +1575,6 @@ const orgContextTreeOutputSchema = z.object({
 	repo: z.string().optional(),
 	branch: z.string().optional()
 });
-const orgGithubIntegrationStorageSchema = z.object({ webhookSecretCipher: z.string().optional() });
-const orgGithubIntegrationInputSchema = z.object({ webhookSecret: z.string().min(1).nullish() });
-const orgGithubIntegrationOutputSchema = z.object({
-	webhookSecretConfigured: z.boolean(),
-	webhookUrl: z.string()
-});
 const orgSourceReposStorageSchema = z.object({ repos: z.array(z.object({
 	url: repoUrlSchema,
 	defaultBranch: z.string().optional()
@@ -1455,12 +1594,6 @@ const ORG_SETTINGS_NAMESPACES = {
 		output: orgContextTreeOutputSchema,
 		readPolicy: "member"
 	},
-	github_integration: {
-		storage: orgGithubIntegrationStorageSchema,
-		input: orgGithubIntegrationInputSchema,
-		output: orgGithubIntegrationOutputSchema,
-		readPolicy: "admin"
-	},
 	source_repos: {
 		storage: orgSourceReposStorageSchema,
 		input: orgSourceReposInputSchema,
@@ -1678,15 +1811,6 @@ const sessionEventMessageSchema = z.object({
 	chatId: z.string(),
 	event: sessionEventSchema
 });
-/**
-* WS control message: client signals that a query completed end-to-end.
-* Decoupled from `session:event` so the `session_completed` notification
-* fires on actual result forwarding, not on incidental tool activity.
-*/
-const sessionCompletionMessageSchema = z.object({
-	agentId: z.string(),
-	chatId: z.string()
-});
 /** Client → server: list locally-held chatIds; server replies with the subset to drop. */
 const sessionReconcileRequestSchema = z.object({
 	type: z.literal("session:reconcile"),
@@ -1754,4 +1878,4 @@ z.object({
 	capabilities: serverCapabilitiesSchema.optional()
 }).passthrough();
 //#endregion
-export { patchOnboardingSchema as $, defaultRuntimeConfigPayload as A, inboxDeliverFrameSchema as B, createAdapterMappingSchema as C, updateOrganizationSchema as Ct, createMemberSchema as D, createMeChatSchema as E, githubCallbackQuerySchema as F, joinByInvitationSchema as G, isOrgSettingNamespace as H, githubDevCallbackQuerySchema as I, messageSourceSchema as J, listMeChatsQuerySchema as K, githubStartQuerySchema as L, dryRunAgentRuntimeConfigSchema as M, extractMentions as N, createOrgFromMeSchema as O, githubAppInstallationClaimBodySchema as P, patchChatEngagementSchema as Q, imageInlineContentSchema as R, createAdapterConfigSchema as S, updateMemberSchema as St, createChatSchema as T, isRedactedEnvValue as U, inboxPollQuerySchema as V, isReservedAgentName as W, onboardingEventSchema as X, notificationQuerySchema as Y, paginationQuerySchema as Z, chatMetadataSchema as _, updateAdapterConfigSchema as _t, AGENT_VISIBILITY as a, safeRedirectPath as at, connectTokenExchangeSchema as b, updateChatSchema as bt, MENTION_REGEX as c, sendMessageSchema as ct, addMeChatParticipantsSchema as d, sessionEventMessageSchema as dt, questionAnswerMessageContentSchema as et, addParticipantSchema as f, sessionEventSchema as ft, agentTypeSchema as g, submitQuestionAnswerSchema as gt, agentRuntimeConfigPayloadSchema as h, stripCode as ht, AGENT_STATUSES as i, runtimeStateMessageSchema as it, delegateFeishuUserSchema as j, defaultParticipantMode as k, ORG_SETTINGS_NAMESPACES as l, sendToAgentSchema as lt, agentPinnedMessageSchema as m, sessionStateMessageSchema as mt, AGENT_NAME_REGEX as n, rebindAgentSchema as nt, CHAT_ENGAGEMENT_STATUSES as o, scanMentionTokens as ot, agentBindRequestSchema as p, sessionReconcileRequestSchema as pt, loginSchema as q, AGENT_SELECTOR_HEADER as r, refreshTokenSchema as rt, DEFAULT_RUNTIME_PROVIDER as s, selfServiceFeishuBotSchema as st, AGENT_BIND_REJECT_REASONS as t, questionMessageContentSchema as tt, WS_AUTH_FRAME_TIMEOUT_MS as u, sessionCompletionMessageSchema as ut, clientCapabilitiesSchema as v, updateAgentRuntimeConfigSchema as vt, createAgentSchema as w, wsAuthFrameSchema as wt, contextTreeSnapshotSchema as x, updateClientCapabilitiesSchema as xt, clientRegisterSchema as y, updateAgentSchema as yt, inboxAckFrameSchema as z };
+export { notificationQuerySchema as $, createMemberSchema as A, githubDevCallbackQuerySchema as B, connectTokenExchangeSchema as C, updateChatSchema as Ct, createAgentSchema as D, wsAuthFrameSchema as Dt, createAdapterMappingSchema as E, updateOrganizationSchema as Et, dryRunAgentRuntimeConfigSchema as F, inboxPollQuerySchema as G, imageInlineContentSchema as H, extractMentions as I, isReservedAgentName as J, isOrgSettingNamespace as K, githubAppInstallationClaimBodySchema as L, defaultParticipantMode as M, defaultRuntimeConfigPayload as N, createChatSchema as O, delegateFeishuUserSchema as P, messageSourceSchema as Q, githubAppInstallationPermissionsSchema as R, clientRegisterSchema as S, updateAgentSchema as St, createAdapterConfigSchema as T, updateMemberSchema as Tt, inboxAckFrameSchema as U, githubStartQuerySchema as V, inboxDeliverFrameSchema as W, listMeChatsQuerySchema as X, joinByInvitationSchema as Y, loginSchema as Z, agentPinnedMessageSchema as _, sessionStateMessageSchema as _t, AGENT_TYPES as a, questionMessageContentSchema as at, chatMetadataSchema as b, updateAdapterConfigSchema as bt, DEFAULT_RUNTIME_PROVIDER as c, runtimeStateMessageSchema as ct, NOTIFICATION_TYPES as d, selfServiceFeishuBotSchema as dt, onboardingEventSchema as et, ORG_SETTINGS_NAMESPACES as f, sendMessageSchema as ft, agentBindRequestSchema as g, sessionReconcileRequestSchema as gt, addParticipantSchema as h, sessionEventSchema as ht, AGENT_STATUSES as i, questionAnswerMessageContentSchema as it, createOrgFromMeSchema as j, createMeChatSchema as k, LIVE_ACTIVITY_STALE_MS as l, safeRedirectPath as lt, addMeChatParticipantsSchema as m, sessionEventMessageSchema as mt, AGENT_NAME_REGEX as n, patchChatEngagementSchema as nt, AGENT_VISIBILITY as o, rebindAgentSchema as ot, WS_AUTH_FRAME_TIMEOUT_MS as p, sendToAgentSchema as pt, isRedactedEnvValue as q, AGENT_SELECTOR_HEADER as r, patchOnboardingSchema as rt, CHAT_ENGAGEMENT_STATUSES as s, refreshTokenSchema as st, AGENT_BIND_REJECT_REASONS as t, paginationQuerySchema as tt, MENTION_REGEX as u, scanMentionTokens as ut, agentRuntimeConfigPayloadSchema as v, stripCode as vt, contextTreeSnapshotSchema as w, updateClientCapabilitiesSchema as wt, clientCapabilitiesSchema as x, updateAgentRuntimeConfigSchema as xt, agentTypeSchema as y, submitQuestionAnswerSchema as yt, githubCallbackQuerySchema as z };

package/dist/drizzle/0041_notifications_dedup_key.sql

@@ -0,0 +1,29 @@
+-- DB-backed deduplication for the notifications table.
+--
+-- Before this migration, the server kept an in-memory Map keyed by
+-- `(agentId, notificationType)` to suppress duplicate notifications within a
+-- five-minute window. That broke in two important ways:
+--
+--   1. Multi-instance deployments: each server process owned its own Map, so
+--      a notification produced on instance A passed instance B's dedupe gate
+--      unchanged. Operators saw the same row inserted multiple times during
+--      load-balancer failover or rolling restart.
+--   2. Process restart wiped the Map, re-opening the dedupe window for
+--      whatever events had fired just before.
+--
+-- The new model is purely DB-driven. A producer optionally supplies a
+-- `dedup_key` (e.g. `agent:{uuid}:error`, `chat:{uuid}:completed`). The
+-- partial unique index below scopes uniqueness to `(organization_id,
+-- dedup_key)` *while the prior row is still unread*. Re-emitting the same
+-- key while the previous notification sits unread is a no-op (the
+-- application uses `ON CONFLICT DO NOTHING`); after the user acknowledges
+-- the prior row, a fresh notification can land again.
+--
+-- Producers without a `dedup_key` keep the legacy always-insert behaviour,
+-- so this column is purely additive — no back-fill, no NOT NULL constraint.
+
+ALTER TABLE "notifications" ADD COLUMN "dedup_key" text;
+
+CREATE UNIQUE INDEX "uq_notifications_org_dedup_unread"
+  ON "notifications" ("organization_id", "dedup_key")
+  WHERE read = false AND dedup_key IS NOT NULL;

package/dist/drizzle/0042_notifications_drop_legacy_types.sql

@@ -0,0 +1,36 @@
+-- Drop notification rows whose `type` is no longer in the shared schema.
+--
+-- Three types were removed in earlier work but their rows were left behind:
+--
+--   * `agent_disconnected` — producer deleted by PR #348 (the
+--     systemctl-restart spam fix), schema enum entry deleted later. 37 rows
+--     still in dev hub at the time of writing, with no UI label and no
+--     click target.
+--   * `session_completed` — removed end-to-end in this PR (was 56% of recent
+--     notifications, duplicating the conversation list's "latest message"
+--     signal). Without the cleanup, the bell would keep surfacing them
+--     until each org's user marks them all read manually.
+--   * `session_error` — long-dead type: schema entry + UI label existed,
+--     but no producer ever wrote one. Cleanup is defensive — any stray
+--     rows from a hand-written test or prod-DB experiment go.
+--
+-- `notifications.type` is a `text` column (not a PG enum), so this is a
+-- pure data-cleanup migration — no schema change, no type-cast risk.
+--
+-- The unread-only branch handles the transition window for rows still on
+-- the previous per-type dedup key (`agent:{id}:agent_error|blocked|stale`).
+-- They co-exist with new `agent:{id}:fault` rows for the same agent until
+-- one or the other is marked read, which is exactly the redundancy this PR
+-- is fixing — so wipe them too. Read rows on those keys stay (history).
+
+DELETE FROM "notifications"
+WHERE "type" IN ('agent_disconnected', 'session_completed', 'session_error');
+
+DELETE FROM "notifications"
+WHERE "read" = false
+  AND "dedup_key" IN (
+    SELECT "dedup_key" FROM "notifications"
+    WHERE "dedup_key" LIKE 'agent:%:agent_error'
+       OR "dedup_key" LIKE 'agent:%:agent_blocked'
+       OR "dedup_key" LIKE 'agent:%:agent_stale'
+  );

package/dist/drizzle/0043_onboarding_completed_at.sql

@@ -0,0 +1,32 @@
+-- Onboarding terminal-state stamp. Distinct from `onboarding_dismissed_at`:
+--
+--   * `onboarding_dismissed_at` means "the user clicked ✕ on the stepper" —
+--     a UI hide, not a setup-complete signal. The user can resume the
+--     wizard from Settings → Onboarding to land back on whichever step is
+--     still incomplete.
+--
+--   * `onboarding_completed_at` means "the user actually walked Step 3 to
+--     success" (admin Continue, invitee Confirm/Continue). Once set, the
+--     Settings → Onboarding entry point and Resume button disappear
+--     permanently. Subsequent tree / source-repo edits go through Settings
+--     → Team and /agents/:uuid.
+--
+-- The two stamps are intentionally orthogonal: `inferOnboardingStep()`
+-- keeps its existing "infer from current resources" semantics and never
+-- consults this column. This field is UI-gate only.
+--
+-- Backfill: every already-dismissed user is treated as completed. The pre-
+-- column population (mid-2025) had no terminal-state concept, so the only
+-- signal we have is "they hid the stepper" — and the alternative (showing
+-- the Onboarding sidebar entry to every legacy user forever) is worse than
+-- the off-by-one risk that a few users dismissed-without-finishing and
+-- will lose their Resume affordance.
+
+ALTER TABLE "users"
+  ADD COLUMN IF NOT EXISTS "onboarding_completed_at" timestamp with time zone;
+
+--> statement-breakpoint
+UPDATE "users"
+   SET "onboarding_completed_at" = "onboarding_dismissed_at"
+ WHERE "onboarding_dismissed_at" IS NOT NULL
+   AND "onboarding_completed_at" IS NULL;

package/dist/drizzle/meta/_journal.json

@@ -288,6 +288,27 @@
       "when": 1779235200000,
       "tag": "0040_chat_user_state_engagement",
       "breakpoints": true
+    },
+    {
+      "idx": 41,
+      "version": "7",
+      "when": 1779321600000,
+      "tag": "0041_notifications_dedup_key",
+      "breakpoints": true
+    },
+    {
+      "idx": 42,
+      "version": "7",
+      "when": 1779408000000,
+      "tag": "0042_notifications_drop_legacy_types",
+      "breakpoints": true
+    },
+    {
+      "idx": 43,
+      "version": "7",
+      "when": 1779494400000,
+      "tag": "0043_onboarding_completed_at",
+      "breakpoints": true
     }
   ]
 }

package/dist/{errors-CF5evtJt-B0NTIVPt.mjs → errors-LPcARA4K-Dbrptiyz.mjs}

@@ -1,5 +1,5 @@
 import { integer, jsonb, pgTable, text, timestamp } from "drizzle-orm/pg-core";
-//#region ../server/dist/errors-CF5evtJt.mjs
+//#region ../server/dist/errors-LPcARA4K.mjs
 /** Organization entity. Agents and chats belong to exactly one organization. */
 const organizations = pgTable("organizations", {
 	id: text("id").primaryKey(),
@@ -20,6 +20,7 @@ const users = pgTable("users", {
 	avatarUrl: text("avatar_url"),
 	status: text("status").notNull().default("active"),
 	onboardingDismissedAt: timestamp("onboarding_dismissed_at", { withTimezone: true }),
+	onboardingCompletedAt: timestamp("onboarding_completed_at", { withTimezone: true }),
 	createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
 	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
 });