@desplega.ai/agent-swarm 1.107.0 → 1.108.0

package/dist/{cli-wb4j4tfe.js → cli-9wv4e7qs.js}

@@ -25,11 +25,11 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-ccre5q9r.js";
+} from "./cli-apdrt1ch.js";
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-3pp1362w.js";
+} from "./cli-4j2mrzag.js";
 import {
   __commonJS,
   __esm,
@@ -469,7 +469,7 @@ function resolveTaskModelSelection(opts) {
 function isTerminalTaskStatus(status) {
   return TERMINAL_TASK_STATUSES.includes(status);
 }
-var ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, LEGACY_MODEL_TO_TIER, DEFAULT_MODEL_TIER_MAP, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, InboxMessageStatusSchema, InboxMessageSchema, AgentTaskSourceSchema, ProviderNameSchema, FollowUpConfigSchema, AgentTaskSchema, TaskAttachmentKindSchema, attachmentCommonFields, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, IdentityEventTypeSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentSchema, AgentCredStatusLiveTestSchema, AgentLatestModelSchema, AgentBedrockStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChangeSourceSchema, VersionableFieldSchema, ContextVersionSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, AgentLogEventTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostSourceSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, RetryPolicySchema, ExecutorMetaSchema, ValidationResultSchema, StepValidationConfigSchema, SwarmScriptNodeConfigSchema, WorkflowNodeSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowTemplateSchema, WorkflowSnapshotSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSnapshotSchema, PageSchema, PageVersionSchema, MetricParamSchema, MetricVariableTypeSchema, MetricFormatSchema, MetricVisualizationSchema, MetricQuerySchema, MetricVariableSchema, MetricVizConfigSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSnapshotSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunKindSchema, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepStatusSchema, WorkflowRunStepSchema, WaitModeSchema, WaitStateStatusSchema, WaitStateRowSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillTypeSchema, SkillScopeSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpServerTransportSchema, McpServerScopeSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KV_NAME_REGEX, KvNamespaceSchema, KvKeySchema, KvEntrySchema;
+var ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, LEGACY_MODEL_TO_TIER, DEFAULT_MODEL_TIER_MAP, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, InboxMessageStatusSchema, InboxMessageSchema, AgentTaskSourceSchema, ProviderNameSchema, FollowUpConfigSchema, AgentTaskSchema, TaskAttachmentKindSchema, attachmentCommonFields, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, IdentityEventTypeSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentSchema, AgentCredStatusLiveTestSchema, AgentLatestModelSchema, AgentBedrockStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChangeSourceSchema, VersionableFieldSchema, ContextVersionSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, AgentLogEventTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostSourceSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, RetryPolicySchema, ExecutorMetaSchema, ValidationResultSchema, StepValidationConfigSchema, SwarmScriptNodeConfigSchema, WorkflowNodeSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowTemplateSchema, WorkflowSnapshotSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSnapshotSchema, PageSchema, PageVersionSchema, MetricParamSchema, MetricVariableTypeSchema, MetricFormatSchema, MetricVisualizationSchema, MetricQuerySchema, MetricVariableSchema, MetricVizConfigSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSnapshotSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunKindSchema, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepStatusSchema, WorkflowRunStepSchema, WaitModeSchema, WaitStateStatusSchema, WaitStateRowSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillTypeSchema, SkillScopeSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpServerTransportSchema, McpServerScopeSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KV_NAME_REGEX, KvNamespaceSchema, KvKeySchema, KvEntrySchema;
 var init_types = __esm(() => {
   init_zod();
   ModelTierSchema = _enum(["smol", "regular", "smart", "ultra"]);
@@ -654,6 +654,9 @@ var init_types = __esm(() => {
   TaskAttachmentKindSchema = _enum(["agent-fs", "url", "shared-fs", "page"]);
   attachmentCommonFields = {
     name: string().min(1).describe("Display name for the attachment."),
+    providerId: string().min(1).optional(),
+    providerKey: string().min(1).optional(),
+    capabilities: record(string(), unknown()).optional(),
     mimeType: string().optional(),
     sizeBytes: number().int().min(0).optional(),
     sha256: string().optional(),
@@ -694,6 +697,9 @@ var init_types = __esm(() => {
     url: string().optional(),
     path: string().optional(),
     pageId: string().optional(),
+    providerId: string().optional(),
+    providerKey: string().optional(),
+    capabilities: record(string(), unknown()).optional(),
     orgId: string().optional(),
     driveId: string().optional(),
     mimeType: string().optional(),
@@ -702,7 +708,9 @@ var init_types = __esm(() => {
     intent: string().optional(),
     description: string().optional(),
     isPrimary: boolean().default(false),
-    createdAt: exports_iso.datetime()
+    createdAt: exports_iso.datetime(),
+    createdBy: string().optional(),
+    updatedBy: string().optional()
   });
   UserSchema = object({
     id: string(),
@@ -752,6 +760,17 @@ var init_types = __esm(() => {
     createdAt: string(),
     lastUpdatedAt: string()
   });
+  FavoriteItemTypeSchema = _enum(["page", "workflow", "schedule"]);
+  UserFavoriteSchema = object({
+    id: string(),
+    userId: string(),
+    itemType: FavoriteItemTypeSchema,
+    itemId: string(),
+    createdAt: string(),
+    lastUpdatedAt: string(),
+    createdBy: string().optional(),
+    updatedBy: string().optional()
+  });
   TaskTemplateKindSchema = _enum(["task", "workflow", "schedule"]);
   TaskTemplateSchema = object({
     id: string(),
@@ -1041,7 +1060,8 @@ var init_types = __esm(() => {
     createdAt: exports_iso.datetime(),
     lastUpdatedAt: exports_iso.datetime(),
     createdBy: string().optional(),
-    updatedBy: string().optional()
+    updatedBy: string().optional(),
+    favorite: boolean().optional()
   }).refine((data) => {
     if (data.scheduleType === "one_time")
       return true;
@@ -1269,7 +1289,8 @@ var init_types = __esm(() => {
     createdAt: string(),
     lastUpdatedAt: string(),
     createdBy: string().optional(),
-    updatedBy: string().optional()
+    updatedBy: string().optional(),
+    favorite: boolean().optional()
   });
   WorkflowVersionSchema = object({
     id: string().uuid(),
@@ -1303,7 +1324,8 @@ var init_types = __esm(() => {
     needsCredentials: array(string()).optional(),
     viewCount: number().int().min(0).default(0),
     createdAt: string(),
-    updatedAt: string()
+    updatedAt: string(),
+    favorite: boolean().optional()
   });
   PageVersionSchema = object({
     id: string(),
@@ -3443,6 +3465,7 @@ var require_sqlite_vec = __commonJS((exports, module) => {
 // src/be/db.ts
 var exports_db = {};
 __export(exports_db, {
+  withFavoriteFlags: () => withFavoriteFlags,
   upsertSwarmConfig: () => upsertSwarmConfig,
   upsertSkillFiles: () => upsertSkillFiles,
   upsertSkillFile: () => upsertSkillFile,
@@ -3487,6 +3510,7 @@ __export(exports_db, {
   supersedeTask: () => supersedeTask,
   startTask: () => startTask,
   shouldBlockPolling: () => shouldBlockPolling,
+  setUserFavorite: () => setUserFavorite,
   setSlackMessageTracking: () => setSlackMessageTracking,
   setBudgetRefusalFollowUpTaskId: () => setBudgetRefusalFollowUpTaskId,
   setApiKeyName: () => setApiKeyName,
@@ -3501,6 +3525,7 @@ __export(exports_db, {
   resetPromptTemplateToDefault: () => resetPromptTemplateToDefault,
   resetOrphanedInProgressTasksForAgent: () => resetOrphanedInProgressTasksForAgent,
   resetEmptyPollCount: () => resetEmptyPollCount,
+  replaceTaskAttachment: () => replaceTaskAttachment,
   releaseTask: () => releaseTask,
   releaseStaleReviewingTasks: () => releaseStaleReviewingTasks,
   releaseStaleProcessingInbox: () => releaseStaleProcessingInbox,
@@ -3527,6 +3552,7 @@ __export(exports_db, {
   logQueries: () => logQueries,
   listWorkflows: () => listWorkflows,
   listWorkflowRuns: () => listWorkflowRuns,
+  listUserFavorites: () => listUserFavorites,
   listTaskTemplates: () => listTaskTemplates,
   listSkills: () => listSkills,
   listSkillFileManifest: () => listSkillFileManifest,
@@ -3658,6 +3684,7 @@ __export(exports_db, {
   getLeadAgent: () => getLeadAgent,
   getLatestTaskByContextKey: () => getLatestTaskByContextKey,
   getLatestStepForNode: () => getLatestStepForNode,
+  getLatestPageBySlug: () => getLatestPageBySlug,
   getLatestContextVersion: () => getLatestContextVersion,
   getLatestActiveTaskInThread: () => getLatestActiveTaskInThread,
   getLastSuccessfulRun: () => getLastSuccessfulRun,
@@ -3673,6 +3700,7 @@ __export(exports_db, {
   getInProgressTasksByContextKey: () => getInProgressTasksByContextKey,
   getInProgressSlackTasks: () => getInProgressSlackTasks,
   getIdleWorkersWithCapacity: () => getIdleWorkersWithCapacity,
+  getFavoriteItemIdSet: () => getFavoriteItemIdSet,
   getExpiredPendingApprovals: () => getExpiredPendingApprovals,
   getDueWaitStates: () => getDueWaitStates,
   getDueScheduledTasks: () => getDueScheduledTasks,
@@ -3734,11 +3762,13 @@ __export(exports_db, {
   findTaskByAgentMailThread: () => findTaskByAgentMailThread,
   findRecentSimilarTasks: () => findRecentSimilarTasks,
   findRecentCancelledTaskInThread: () => findRecentCancelledTaskInThread,
+  findExistingLinearTrackerContextWork: () => findExistingLinearTrackerContextWork,
   findCompletedTaskInThread: () => findCompletedTaskInThread,
   failTask: () => failTask,
   failPendingResumeIfUnclaimed: () => failPendingResumeIfUnclaimed,
   deleteWorkflow: () => deleteWorkflow,
   deleteUser: () => deleteUser,
+  deleteTaskAttachment: () => deleteTaskAttachment,
   deleteTask: () => deleteTask,
   deleteSwarmRepo: () => deleteSwarmRepo,
   deleteSwarmConfigByKey: () => deleteSwarmConfigByKey,
@@ -4776,6 +4806,34 @@ function getInProgressTasksByContextKey(contextKey, statuses = ["pending", "in_p
        ORDER BY lastUpdatedAt DESC
        LIMIT 200`).all(contextKey, ...statuses).map(rowToAgentTask);
 }
+function isLinearTrackerContextKey(contextKey) {
+  return !!contextKey && contextKey.startsWith(LINEAR_TRACKER_CONTEXT_KEY_PREFIX);
+}
+function findExistingLinearTrackerContextWork(contextKey) {
+  if (!isLinearTrackerContextKey(contextKey))
+    return null;
+  const activeRow = getDb().prepare(`SELECT * FROM agent_tasks
+       WHERE contextKey = ?
+       AND status NOT IN ('completed', 'failed', 'cancelled', 'superseded')
+       ORDER BY lastUpdatedAt DESC
+       LIMIT 1`).get(contextKey);
+  if (activeRow) {
+    return { task: rowToAgentTask(activeRow), reason: "active_task" };
+  }
+  const linkedPrRow = getDb().prepare(`SELECT * FROM agent_tasks
+       WHERE contextKey = ?
+       AND status = 'completed'
+       AND vcsProvider IS NOT NULL
+       AND vcsRepo IS NOT NULL
+       AND vcsNumber IS NOT NULL
+       AND vcsUrl IS NOT NULL
+       ORDER BY lastUpdatedAt DESC
+       LIMIT 1`).get(contextKey);
+  if (linkedPrRow) {
+    return { task: rowToAgentTask(linkedPrRow), reason: "linked_open_pr" };
+  }
+  return null;
+}
 function getLatestTaskByContextKey(contextKey) {
   if (!contextKey)
     return null;
@@ -5205,6 +5263,9 @@ function rowToTaskAttachment(row) {
     url: row.url ?? undefined,
     path: row.path ?? undefined,
     pageId: row.page_id ?? undefined,
+    providerId: row.provider_id ?? undefined,
+    providerKey: row.provider_key ?? undefined,
+    capabilities: parseAttachmentCapabilities(row.capabilities),
     orgId: row.agent_fs_org_id ?? undefined,
     driveId: row.agent_fs_drive_id ?? undefined,
     mimeType: row.mime_type ?? undefined,
@@ -5213,9 +5274,24 @@ function rowToTaskAttachment(row) {
     intent: row.intent ?? undefined,
     description: row.description ?? undefined,
     isPrimary: !!row.is_primary,
-    createdAt: row.created_at
+    createdAt: row.created_at,
+    createdBy: row.created_by ?? undefined,
+    updatedBy: row.updated_by ?? undefined
   };
 }
+function parseAttachmentCapabilities(value) {
+  if (!value)
+    return;
+  try {
+    const parsed = JSON.parse(value);
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : undefined;
+  } catch {
+    return;
+  }
+}
+function stringifyAttachmentCapabilities(value) {
+  return value ? JSON.stringify(value) : null;
+}
 function insertTaskAttachment(input) {
   const db2 = getDb();
   if (input.sha256) {
@@ -5237,15 +5313,59 @@ function insertTaskAttachment(input) {
   const id = crypto.randomUUID();
   const row = db2.prepare(`INSERT INTO task_attachments
          (id, task_id, agent_id, name, kind, url, path, page_id,
+          provider_id, provider_key, capabilities,
           agent_fs_org_id, agent_fs_drive_id,
-          mime_type, size_bytes, sha256, intent, description, is_primary)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-       RETURNING *`).get(id, input.taskId, input.agentId ?? null, input.name, input.kind, input.url ?? null, input.path ?? null, input.pageId ?? null, input.orgId ?? null, input.driveId ?? null, input.mimeType ?? null, input.sizeBytes ?? null, input.sha256 ?? null, input.intent ?? null, input.description ?? null, input.isPrimary ? 1 : 0);
+          mime_type, size_bytes, sha256, intent, description, is_primary,
+          created_by, updated_by)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+       RETURNING *`).get(id, input.taskId, input.agentId ?? null, input.name, input.kind, input.url ?? null, input.path ?? null, input.pageId ?? null, input.providerId ?? defaultProviderId(input.kind), input.providerKey ?? defaultProviderKey(input), stringifyAttachmentCapabilities(input.capabilities), input.orgId ?? null, input.driveId ?? null, input.mimeType ?? null, input.sizeBytes ?? null, input.sha256 ?? null, input.intent ?? null, input.description ?? null, input.isPrimary ? 1 : 0, input.createdBy ?? null, input.updatedBy ?? input.createdBy ?? null);
   if (!row) {
     throw new Error("Failed to insert task attachment");
   }
   return rowToTaskAttachment(row);
 }
+function defaultProviderId(kind) {
+  if (kind === "agent-fs" || kind === "shared-fs")
+    return "agent-fs";
+  return kind;
+}
+function defaultProviderKey(input) {
+  if (input.kind === "agent-fs" || input.kind === "shared-fs")
+    return input.path ?? null;
+  if (input.kind === "url")
+    return input.url ?? null;
+  if (input.kind === "page")
+    return input.pageId ?? null;
+  return null;
+}
+function deleteTaskAttachment(id) {
+  const result = getDb().run("DELETE FROM task_attachments WHERE id = ?", [id]);
+  return result.changes > 0;
+}
+function replaceTaskAttachment(id, input) {
+  const row = getDb().prepare(`UPDATE task_attachments
+       SET agent_id = ?,
+           name = ?,
+           kind = ?,
+           url = ?,
+           path = ?,
+           page_id = ?,
+           provider_id = ?,
+           provider_key = ?,
+           capabilities = ?,
+           agent_fs_org_id = ?,
+           agent_fs_drive_id = ?,
+           mime_type = ?,
+           size_bytes = ?,
+           sha256 = ?,
+           intent = ?,
+           description = ?,
+           is_primary = ?,
+           updated_by = ?
+       WHERE id = ?
+       RETURNING *`).get(input.agentId ?? null, input.name, input.kind, input.url ?? null, input.path ?? null, input.pageId ?? null, input.providerId ?? defaultProviderId(input.kind), input.providerKey ?? defaultProviderKey(input), stringifyAttachmentCapabilities(input.capabilities), input.orgId ?? null, input.driveId ?? null, input.mimeType ?? null, input.sizeBytes ?? null, input.sha256 ?? null, input.intent ?? null, input.description ?? null, input.isPrimary ? 1 : 0, input.updatedBy ?? null, id);
+  return row ? rowToTaskAttachment(row) : null;
+}
 function getTaskAttachments(taskId) {
   return getDb().prepare("SELECT * FROM task_attachments WHERE task_id = ? ORDER BY created_at ASC, rowid ASC").all(taskId).map(rowToTaskAttachment);
 }
@@ -5399,6 +5519,11 @@ function createTaskExtended(task, options) {
       }
     }
   }
+  const existingTrackerWork = findExistingLinearTrackerContextWork(options?.contextKey);
+  if (existingTrackerWork) {
+    console.log(`[task-dedup] Skipping Linear tracker task creation for ${options?.contextKey}: ${existingTrackerWork.reason} ${existingTrackerWork.task.id.slice(0, 8)} already exists`);
+    return existingTrackerWork.task;
+  }
   if (options?.creatorAgentId && !options.slackChannelId && options.sourceTaskId) {
     const sourceTask = getTaskById(options.sourceTaskId);
     if (sourceTask?.slackChannelId) {
@@ -6470,7 +6595,7 @@ function getScheduledTasks(filters, opts) {
   if (filters?.hideCompleted !== false) {
     query += " AND NOT (scheduleType = 'one_time' AND enabled = 0)";
   }
-  query += " ORDER BY name ASC";
+  query += " ORDER BY lastRunAt IS NULL ASC, lastRunAt DESC, lastUpdatedAt DESC";
   const rows = getDb().prepare(query).all(...params);
   return opts?.slim ? rows.map(rowToScheduledTaskSummary) : rows.map(rowToScheduledTask);
 }
@@ -7128,7 +7253,7 @@ function listWorkflows(filters, opts) {
     query += " AND enabled = ?";
     params.push(filters.enabled ? 1 : 0);
   }
-  query += " ORDER BY name ASC";
+  query += " ORDER BY lastUpdatedAt DESC";
   const rows = getDb().prepare(query).all(...params);
   return opts?.slim ? rows.map(rowToWorkflowSummary) : rows.map(rowToWorkflow);
 }
@@ -7474,6 +7599,10 @@ function getPageBySlug(agentId, slug) {
   const row = getDb().prepare("SELECT * FROM pages WHERE agentId = ? AND slug = ?").get(agentId, slug);
   return row ? rowToPage(row) : null;
 }
+function getLatestPageBySlug(slug) {
+  const row = getDb().prepare("SELECT * FROM pages WHERE slug = ? ORDER BY updatedAt DESC LIMIT 1").get(slug);
+  return row ? rowToPage(row) : null;
+}
 function rowToPageSummary(row) {
   return {
     id: row.id,
@@ -9016,6 +9145,65 @@ function upsertInboxState(opts) {
     throw new Error("Failed to upsert inbox state");
   return rowToInboxItemState(row);
 }
+function rowToUserFavorite(row) {
+  return {
+    id: row.id,
+    userId: row.userId,
+    itemType: row.itemType,
+    itemId: row.itemId,
+    createdAt: row.createdAt,
+    lastUpdatedAt: row.lastUpdatedAt,
+    createdBy: row.created_by ?? undefined,
+    updatedBy: row.updated_by ?? undefined
+  };
+}
+function listUserFavorites(opts) {
+  const conditions = ["userId = ?"];
+  const params = [opts.userId];
+  if (opts.itemType) {
+    conditions.push("itemType = ?");
+    params.push(opts.itemType);
+  }
+  if (opts.itemIds && opts.itemIds.length > 0) {
+    conditions.push(`itemId IN (${opts.itemIds.map(() => "?").join(",")})`);
+    params.push(...opts.itemIds);
+  }
+  const rows = getDb().prepare(`SELECT * FROM user_favorites WHERE ${conditions.join(" AND ")} ORDER BY lastUpdatedAt DESC`).all(...params);
+  return rows.map(rowToUserFavorite);
+}
+function getFavoriteItemIdSet(opts) {
+  return new Set(listUserFavorites(opts).map((favorite) => favorite.itemId));
+}
+function setUserFavorite(opts) {
+  if (!opts.favorite) {
+    getDb().prepare("DELETE FROM user_favorites WHERE userId = ? AND itemType = ? AND itemId = ?").run(opts.userId, opts.itemType, opts.itemId);
+    return null;
+  }
+  const now = new Date().toISOString();
+  const actor = opts.actorUserId ?? opts.userId;
+  const row = getDb().prepare(`INSERT INTO user_favorites (
+         userId, itemType, itemId, createdAt, lastUpdatedAt, created_by, updated_by
+       )
+       VALUES (?, ?, ?, ?, ?, ?, ?)
+       ON CONFLICT(userId, itemType, itemId) DO UPDATE SET
+         lastUpdatedAt = excluded.lastUpdatedAt,
+         updated_by = excluded.updated_by
+       RETURNING *`).get(opts.userId, opts.itemType, opts.itemId, now, now, actor, actor);
+  if (!row)
+    throw new Error("Failed to set favorite");
+  return rowToUserFavorite(row);
+}
+function withFavoriteFlags(rows, opts) {
+  if (!opts.userId || rows.length === 0) {
+    return rows.map((row) => ({ ...row, favorite: false }));
+  }
+  const favoriteIds = getFavoriteItemIdSet({
+    userId: opts.userId,
+    itemType: opts.itemType,
+    itemIds: rows.map((row) => row.id)
+  });
+  return rows.map((row) => ({ ...row, favorite: favoriteIds.has(row.id) }));
+}
 function rowToTaskTemplate(row) {
   let payload = {};
   try {
@@ -9721,7 +9909,7 @@ function countScriptRunJournalAgentTaskSteps(runId) {
   const row = getDb().prepare("SELECT COUNT(*) AS count FROM script_run_journal WHERE runId = ? AND stepType = 'agent-task'").get(runId);
   return row?.count ?? 0;
 }
-var db = null, sqliteVecAvailable = false, VERSIONABLE_FIELDS, agentQueries, MAX_EMPTY_POLLS = 2, taskQueries, findTaskByGitHub, logQueries, sessionLogQueries, sessionCostQueries, SCHEDULE_TEMPLATE_PREVIEW_LENGTH = 280, TASK_PREVIEW_LENGTH = 300, RESERVED_CONFIG_PLACEHOLDER = "[reserved key stored in swarm_config; delete this row]", SKILL_FILE_LIMITS, BINARY_SKILL_FILE_PLACEHOLDER = "[binary file - not synced]", SKILL_SLIM_COLUMNS = "id, name, description, type, scope, ownerAgentId, sourceUrl, sourceRepo, sourcePath, sourceBranch, sourceHash, isComplex, allowedTools, model, effort, context, agent, disableModelInvocation, userInvocable, version, isEnabled, systemDefault, createdAt, lastUpdatedAt, lastFetchedAt, '' as content", contextSnapshotQueries, KvTypeCollisionError;
+var db = null, sqliteVecAvailable = false, VERSIONABLE_FIELDS, agentQueries, MAX_EMPTY_POLLS = 2, taskQueries, findTaskByGitHub, LINEAR_TRACKER_CONTEXT_KEY_PREFIX = "task:trackers:linear:", logQueries, sessionLogQueries, sessionCostQueries, SCHEDULE_TEMPLATE_PREVIEW_LENGTH = 280, TASK_PREVIEW_LENGTH = 300, RESERVED_CONFIG_PLACEHOLDER = "[reserved key stored in swarm_config; delete this row]", SKILL_FILE_LIMITS, BINARY_SKILL_FILE_PLACEHOLDER = "[binary file - not synced]", SKILL_SLIM_COLUMNS = "id, name, description, type, scope, ownerAgentId, sourceUrl, sourceRepo, sourcePath, sourceBranch, sourceHash, isComplex, allowedTools, model, effort, context, agent, disableModelInvocation, userInvocable, version, isEnabled, systemDefault, createdAt, lastUpdatedAt, lastFetchedAt, '' as content", contextSnapshotQueries, KvTypeCollisionError;
 var init_db = __esm(() => {
   init_provider_metadata();
   init_package();
@@ -9829,4 +10017,4 @@ var init_db = __esm(() => {
   };
 });
 
-export { interpolate, deepInterpolate, init_template, registerTemplate, getTemplateDefinition, getAllTemplateDefinitions, init_registry, configureHttpResolver, resolveTemplate, resolveTemplateAsync, init_resolver, initTelemetry, telemetry, init_telemetry, ModelTierSchema, ReasoningEffortSchema, splitLegacyModelAlias, resolveTaskModelSelection, AgentTaskStatusSchema, isTerminalTaskStatus, AgentTaskSourceSchema, ProviderNameSchema, FollowUpConfigSchema, AgentTaskSchema, AttachmentInputSchema, TaskAttachmentSchema, InboxItemTypeSchema, InboxItemStatusSchema, TaskTemplateKindSchema, AgentSchema, AgentLatestModelSchema, AgentCredStatusSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, ResumeReasonSchema, AgentLogSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, ScheduledTaskTargetTypeSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, PageContentTypeSchema, PageAuthModeSchema, MetricDefinitionSchema, MetricVersionSchema, WorkflowRunStatusSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptApiAuthModeSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types, setRequestAuth, getRequestAuth, init_request_auth_context, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, normalizeDateRequired, init_date_utils, init_session_templates, init_templates, init_templates2 as init_templates1, isReservedConfigKey, reservedKeyError, validateConfigValue, init_swarm_config_guard, onTaskStarted, init_task_lifecycle_events, generateDefaultClaudeMd, generateDefaultSoulMd, generateDefaultIdentityMd, generateDefaultToolsMd, init_defaults, isSqliteVecAvailable, initDb, getDb, closeDb, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, agentQueries, updateAgentCredentialState, createAgent, getAgentById, getAllAgents, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, taskQueries, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, getTaskById, markTaskSlackReplySent, setSlackMessageTracking, getChildTasks, hasNonTerminalResumeChild, hasNonTerminalRerouteDecisionChild, updateTaskClaudeSessionId, updateTaskVcs, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getInProgressTasksByContextKey, getLatestTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, completeTask, failTask, cancelTask, supersedeTask, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, insertTaskAttachment, getTaskAttachments, getAgentWithTasks, getAllAgentsWithTasks, logQueries, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, releaseStaleReviewingTasks, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, sessionLogQueries, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, getSessionCostSummary, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createPage, getPage, getPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, markKeyRateLimited, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, upsertKv, deleteKv, KvTypeCollisionError, incrKv, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db };
+export { interpolate, deepInterpolate, init_template, registerTemplate, getTemplateDefinition, getAllTemplateDefinitions, init_registry, configureHttpResolver, resolveTemplate, resolveTemplateAsync, init_resolver, initTelemetry, telemetry, init_telemetry, ModelTierSchema, ReasoningEffortSchema, splitLegacyModelAlias, resolveTaskModelSelection, AgentTaskStatusSchema, isTerminalTaskStatus, AgentTaskSourceSchema, ProviderNameSchema, FollowUpConfigSchema, AgentTaskSchema, AttachmentInputSchema, TaskAttachmentSchema, InboxItemTypeSchema, InboxItemStatusSchema, FavoriteItemTypeSchema, TaskTemplateKindSchema, AgentSchema, AgentLatestModelSchema, AgentCredStatusSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, ResumeReasonSchema, AgentLogSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, ScheduledTaskTargetTypeSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, PageContentTypeSchema, PageAuthModeSchema, MetricDefinitionSchema, MetricVersionSchema, WorkflowRunStatusSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptApiAuthModeSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types, setRequestAuth, getRequestAuth, getCurrentRequestAuth, init_request_auth_context, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, normalizeDateRequired, init_date_utils, init_session_templates, init_templates, init_templates2 as init_templates1, isReservedConfigKey, reservedKeyError, validateConfigValue, init_swarm_config_guard, onTaskStarted, init_task_lifecycle_events, generateDefaultClaudeMd, generateDefaultSoulMd, generateDefaultIdentityMd, generateDefaultToolsMd, init_defaults, isSqliteVecAvailable, initDb, getDb, closeDb, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, agentQueries, updateAgentCredentialState, createAgent, getAgentById, getAllAgents, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, taskQueries, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, getTaskById, markTaskSlackReplySent, setSlackMessageTracking, getChildTasks, hasNonTerminalResumeChild, hasNonTerminalRerouteDecisionChild, updateTaskClaudeSessionId, updateTaskVcs, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getInProgressTasksByContextKey, findExistingLinearTrackerContextWork, getLatestTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, completeTask, failTask, cancelTask, supersedeTask, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, insertTaskAttachment, deleteTaskAttachment, replaceTaskAttachment, getTaskAttachments, getAgentWithTasks, getAllAgentsWithTasks, logQueries, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, releaseStaleReviewingTasks, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, sessionLogQueries, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, getSessionCostSummary, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createPage, getPage, getPageBySlug, getLatestPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, markKeyRateLimited, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listUserFavorites, getFavoriteItemIdSet, setUserFavorite, withFavoriteFlags, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, upsertKv, deleteKv, KvTypeCollisionError, incrKv, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db };

package/dist/{cli-bk526b46.js → cli-a0t7vapf.js}

@@ -28,7 +28,7 @@ import {
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-3pp1362w.js";
+} from "./cli-4j2mrzag.js";
 import {
   __toESM
 } from "./cli-p9swy5t3.js";

package/dist/{cli-3jcx2wmm.js → cli-a0w6tqyc.js}

@@ -3,7 +3,7 @@ import {
   getAgentById,
   getInProgressTasksByContextKey,
   init_db
-} from "./cli-wb4j4tfe.js";
+} from "./cli-9wv4e7qs.js";
 
 // src/tasks/context-key.ts
 var SEPARATOR = ":";

package/dist/{cli-r0nfastp.js → cli-a8gkr14c.js}

@@ -2,19 +2,19 @@ import {
   authJsonToCredentialSelection,
   checkCodexCredentials,
   credentialsToAuthJson
-} from "./cli-wnkwyhmw.js";
+} from "./cli-w6zp4qcx.js";
 import {
   loadAllCodexOAuthSlots
 } from "./cli-amncg1dq.js";
 import {
   checkClaudeManagedCredentials
-} from "./cli-jk4tj5m6.js";
+} from "./cli-2r7s8jhp.js";
 import {
   checkDevinCredentials
 } from "./cli-tyfxrrdd.js";
 import {
   checkOpencodeCredentials
-} from "./cli-bk526b46.js";
+} from "./cli-a0t7vapf.js";
 import {
   initOtel,
   injectTraceContext,
@@ -23,10 +23,10 @@ import {
   withSpan,
   withSpanContext,
   writeSkillsToFilesystem
-} from "./cli-xaht317v.js";
+} from "./cli-gx7gnvha.js";
 import {
   checkClaudeCredentials
-} from "./cli-4r9m8f3t.js";
+} from "./cli-2fc97xm5.js";
 import {
   MAX_RATE_LIMIT_RESET_MS,
   isCodexCreditsExhaustedMessage,
@@ -40,10 +40,10 @@ import {
 import {
   ensure,
   initialize
-} from "./cli-awqz8v9k.js";
+} from "./cli-1zs2dm5w.js";
 import {
   validateJsonSchema
-} from "./cli-kgr1cazt.js";
+} from "./cli-psz2xq0n.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
@@ -53,7 +53,10 @@ import {
   resolveClaudeMdPath,
   syncProfileFilesToServer,
   writeIdentityBaselines
-} from "./cli-3j01d33e.js";
+} from "./cli-q25ejbyn.js";
+import {
+  taskAttachmentDisplayUrl
+} from "./cli-wspgs9bt.js";
 import {
   getMcpBaseUrl
 } from "./cli-dh55d5fg.js";
@@ -76,7 +79,7 @@ import {
   resolveTaskModelSelection,
   resolveTemplateAsync,
   telemetry
-} from "./cli-wb4j4tfe.js";
+} from "./cli-9wv4e7qs.js";
 import {
   init_credentials,
   resolveCredentialPools
@@ -84,7 +87,7 @@ import {
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-3pp1362w.js";
+} from "./cli-4j2mrzag.js";
 import {
   __require
 } from "./cli-p9swy5t3.js";
@@ -438,19 +441,19 @@ async function materializeCodexAuthJson(_slot, creds, deps = {}) {
 async function createProviderAdapter(provider) {
   switch (provider) {
     case "claude": {
-      const { ClaudeAdapter } = await import("./claude-adapter-hw0wsvpj.js");
+      const { ClaudeAdapter } = await import("./claude-adapter-mma9a1yr.js");
       return new ClaudeAdapter;
     }
     case "pi": {
-      const { PiMonoAdapter } = await import("./pi-mono-adapter-5bbyymfw.js");
+      const { PiMonoAdapter } = await import("./pi-mono-adapter-ayr3akk8.js");
       return new PiMonoAdapter;
     }
     case "codex": {
-      const { CodexAdapter } = await import("./codex-adapter-wer4en6f.js");
+      const { CodexAdapter } = await import("./codex-adapter-ebs12jef.js");
       return new CodexAdapter;
     }
     case "claude-managed": {
-      const { ClaudeManagedAdapter } = await import("./claude-managed-adapter-vj9kzegz.js");
+      const { ClaudeManagedAdapter } = await import("./claude-managed-adapter-pv2nbqy4.js");
       return new ClaudeManagedAdapter;
     }
     case "devin": {
@@ -458,7 +461,7 @@ async function createProviderAdapter(provider) {
       return new DevinAdapter;
     }
     case "opencode": {
-      const { OpencodeAdapter } = await import("./opencode-adapter-5jxw9cv8.js");
+      const { OpencodeAdapter } = await import("./opencode-adapter-mqsxr170.js");
       return new OpencodeAdapter;
     }
     default:
@@ -856,20 +859,8 @@ async function fetchTaskContextForPreamble(apiUrl, apiKey, taskId) {
   }
 }
 function formatAttachmentPointer(att) {
-  if (att.kind === "agent-fs" && att.path) {
-    const liveHost = process.env.AGENT_FS_LIVE_URL ?? "https://live.agent-fs.dev";
-    if (att.orgId && att.driveId) {
-      return `${liveHost}/file/~/${att.orgId}/${att.driveId}/${att.path}`;
-    }
-    return att.path;
-  }
-  if (att.kind === "url" && att.url)
-    return att.url;
-  if (att.kind === "page" && att.pageId)
-    return `(page:${att.pageId})`;
-  if (att.kind === "shared-fs" && att.path)
-    return att.path;
-  return "(no pointer)";
+  const pointer = taskAttachmentDisplayUrl(att);
+  return pointer || "(no pointer)";
 }
 async function buildContextPreamble(apiUrl, apiKey, parentTaskId) {
   const ancestors = [];
@@ -1118,7 +1109,7 @@ async function checkProviderCredentials(provider, env, opts) {
     case "opencode":
       return checkOpencodeCredentials(env, opts);
     case "pi": {
-      const { checkPiMonoCredentials } = await import("./pi-mono-adapter-5bbyymfw.js");
+      const { checkPiMonoCredentials } = await import("./pi-mono-adapter-ayr3akk8.js");
       return checkPiMonoCredentials(env, opts);
     }
     default:
@@ -1720,6 +1711,33 @@ async function fetchResolvedEnv(apiUrl, apiKey, agentId, baseEnv = process.env,
   });
   return { env, credentialSelections, resolvedProvider };
 }
+async function ensureAgentFsCredentials(apiUrl, apiKey, agentId) {
+  if (!apiUrl || !apiKey || !agentId || agentId === "unknown")
+    return;
+  try {
+    const response = await fetch(`${apiUrl}/api/fs/agent-credentials`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${apiKey}`,
+        "X-Agent-ID": agentId,
+        "Content-Type": "application/json"
+      },
+      body: "{}",
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!response.ok) {
+      const text = await response.text().catch(() => "");
+      console.warn(scrubSecrets(`[agent-fs] credential provisioning skipped: HTTP ${response.status}${text ? ` ${text}` : ""}`));
+      return;
+    }
+    const result = await response.json().catch(() => ({}));
+    if (result.enabled) {
+      console.log(`[agent-fs] ${result.created ? "created" : "confirmed"} agent-scoped credentials`);
+    }
+  } catch (error) {
+    console.warn(scrubSecrets(`[agent-fs] credential provisioning skipped: ${error}`));
+  }
+}
 var RELOADABLE_ENV_KEYS = new Set([
   "MODEL_OVERRIDE",
   "REASONING_EFFORT_OVERRIDE",
@@ -3880,6 +3898,7 @@ async function runAgent(config, opts) {
   let bootModel = process.env.MODEL_OVERRIDE || "";
   let bootCooldownMs = resolveCodexCreditsExhaustedCooldownMs(undefined);
   try {
+    await ensureAgentFsCredentials(apiUrl, apiKey, agentId);
     const bootEnv = await fetchResolvedEnv(apiUrl, apiKey, agentId);
     bootProvider = bootEnv.resolvedProvider;
     bootModel = bootEnv.env.MODEL_OVERRIDE || bootModel;