@desplega.ai/agent-swarm 1.113.0 → 1.115.0

package/dist/{cli-ncfgsqbd.js → cli-15y7qhzp.js}

@@ -4,8 +4,9 @@ import {
 } from "./cli-z2zcxes1.js";
 import {
   init_zod
-} from "./cli-q21d49ac.js";
+} from "./cli-bw80ck94.js";
 import {
+  ZodIssueCode,
   _enum,
   _null,
   array,
@@ -21,11 +22,11 @@ import {
   union,
   unknown,
   uuid
-} from "./cli-anrj584m.js";
+} from "./cli-xz9aq0rf.js";
 import {
   init_package,
   package_default
-} from "./cli-c3frqf65.js";
+} from "./cli-b23axgz4.js";
 import {
   init_secret_scrubber,
   scrubSecrets
@@ -469,12 +470,12 @@ function resolveTaskModelSelection(opts) {
 function isTerminalTaskStatus(status) {
   return TERMINAL_TASK_STATUSES.includes(status);
 }
-var ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, LEGACY_MODEL_TO_TIER, DEFAULT_MODEL_TIER_MAP, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, InboxMessageStatusSchema, InboxMessageSchema, AgentTaskSourceSchema, ProviderNameSchema, FollowUpConfigSchema, AgentTaskSchema, TaskAttachmentKindSchema, attachmentCommonFields, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, IdentityEventTypeSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentSchema, AgentCredStatusLiveTestSchema, AgentLatestModelSchema, AgentBedrockStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChangeSourceSchema, VersionableFieldSchema, ContextVersionSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, AgentLogEventTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostSourceSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, RetryPolicySchema, ExecutorMetaSchema, ValidationResultSchema, StepValidationConfigSchema, SwarmScriptNodeConfigSchema, WorkflowNodeSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowTemplateSchema, WorkflowSnapshotSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSnapshotSchema, PageSchema, PageVersionSchema, MetricParamSchema, MetricVariableTypeSchema, MetricFormatSchema, MetricVisualizationSchema, MetricQuerySchema, MetricVariableSchema, MetricVizConfigSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSnapshotSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunKindSchema, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepStatusSchema, WorkflowRunStepSchema, WaitModeSchema, WaitStateStatusSchema, WaitStateRowSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillTypeSchema, SkillScopeSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpServerTransportSchema, McpServerScopeSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KV_NAME_REGEX, KvNamespaceSchema, KvKeySchema, KvEntrySchema;
+var ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, LEGACY_MODEL_TO_TIER, DEFAULT_MODEL_TIER_MAP, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, InboxMessageStatusSchema, InboxMessageSchema, AgentTaskSourceSchema, ProviderNameSchema, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, TaskAttachmentKindSchema, attachmentCommonFields, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, IdentityEventTypeSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentSchema, AgentCredStatusLiveTestSchema, AgentLatestModelSchema, AgentBedrockStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChangeSourceSchema, VersionableFieldSchema, ContextVersionSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, AgentLogEventTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostSourceSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, RetryPolicySchema, ExecutorMetaSchema, ValidationResultSchema, StepValidationConfigSchema, SwarmScriptNodeConfigSchema, WorkflowNodeSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, WebhookVerificationSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowTemplateSchema, WorkflowSnapshotSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSnapshotSchema, PageSchema, PageVersionSchema, MetricParamSchema, MetricVariableTypeSchema, MetricFormatSchema, MetricVisualizationSchema, MetricQuerySchema, MetricVariableSchema, MetricVizConfigSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSnapshotSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunKindSchema, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepStatusSchema, WorkflowRunStepSchema, WaitModeSchema, WaitStateStatusSchema, WaitStateRowSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillTypeSchema, SkillScopeSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpServerTransportSchema, McpServerScopeSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KV_NAME_REGEX, KvNamespaceSchema, KvKeySchema, KvEntrySchema;
 var init_types = __esm(() => {
   init_zod();
   ModelTierSchema = _enum(["smol", "regular", "smart", "ultra"]);
   MODEL_TIERS = ModelTierSchema.options;
-  ReasoningEffortSchema = _enum(["off", "low", "medium", "high", "xhigh"]);
+  ReasoningEffortSchema = _enum(["off", "low", "medium", "high", "xhigh", "max"]);
   LEGACY_MODEL_TO_TIER = {
     haiku: "smol",
     sonnet: "regular",
@@ -495,10 +496,10 @@ var init_types = __esm(() => {
       ultra: "claude-fable-5"
     },
     codex: {
-      smol: "gpt-5.4-mini",
-      regular: "gpt-5.4",
-      smart: "gpt-5.5",
-      ultra: "gpt-5.5"
+      smol: "gpt-5.6-luna",
+      regular: "gpt-5.6-terra",
+      smart: "gpt-5.6-sol",
+      ultra: "gpt-5.6-sol"
     },
     pi: {
       smol: "openrouter/deepseek/deepseek-v4-flash",
@@ -582,6 +583,12 @@ var init_types = __esm(() => {
     onCompleted: string().max(4000).optional(),
     onFailed: string().max(4000).optional()
   });
+  RoutingAffinitySchema = object({
+    sourceAgentId: uuid().optional(),
+    role: string().max(100).optional(),
+    harnessProvider: ProviderNameSchema.optional(),
+    capabilities: array(string()).default([])
+  });
   AgentTaskSchema = object({
     id: uuid(),
     agentId: uuid().nullable(),
@@ -649,7 +656,8 @@ var init_types = __esm(() => {
     providerMeta: record(string(), unknown()).optional(),
     harnessVariant: string().optional(),
     harnessVariantMeta: record(string(), unknown()).optional(),
-    totalCostUsd: number().min(0).optional()
+    totalCostUsd: number().min(0).optional(),
+    routingAffinity: RoutingAffinitySchema.optional()
   });
   TaskAttachmentKindSchema = _enum(["agent-fs", "url", "shared-fs", "page"]);
   attachmentCommonFields = {
@@ -921,6 +929,7 @@ var init_types = __esm(() => {
     "task_accepted",
     "task_rejected",
     "task_claimed",
+    "task_claim_rejected_affinity",
     "task_released",
     "channel_message",
     "service_registered",
@@ -1224,17 +1233,43 @@ var init_types = __esm(() => {
     onNodeFailure: _enum(["fail", "continue"]).optional().describe("Update the definition-level onNodeFailure behavior"),
     triggerSchema: record(string(), unknown()).optional().nullable().describe("Optional JSON-Schema describing the expected trigger payload shape. " + "Pass an object to set/replace; pass null to clear; omit to leave unchanged. " + "Validator subset: type, required, properties, enum, const, items. " + "Other JSON-Schema keywords are silently ignored.")
   });
+  WebhookVerificationSchema = discriminatedUnion("format", [
+    object({
+      format: literal("hmac-sha256"),
+      header: string().default("X-Hub-Signature-256").describe("Header containing HMAC-SHA256 over the raw request body. Accepts sha256=<hex> or bare hex.")
+    }),
+    object({
+      format: literal("timestamped-hmac-sha256"),
+      header: string().min(1).describe("Header containing comma-separated timestamp/signature pairs such as t=<timestamp>,v1=<hex>."),
+      timestampKey: string().default("t").describe("Timestamp field key in the signature header"),
+      signatureKey: string().default("v1").describe("Signature field key in the signature header; multiple entries are allowed"),
+      toleranceSeconds: number().int().positive().default(300).describe("Maximum allowed clock skew, in seconds, for replay protection")
+    }),
+    object({
+      format: literal("token-equality"),
+      header: string().min(1).describe("Header containing the shared token to compare")
+    })
+  ]);
   TriggerConfigSchema = discriminatedUnion("type", [
     object({
       type: literal("webhook"),
       hmacSecret: string().optional(),
-      hmacHeader: string().default("X-Hub-Signature-256")
+      hmacHeader: string().default("X-Hub-Signature-256").describe("Legacy HMAC header for webhook verification. Prefer verification.header for new workflows."),
+      verification: WebhookVerificationSchema.optional().describe("Optional webhook verification format. Omit to keep legacy HMAC-SHA256 behavior with fallback header scanning.")
     }),
     object({
       type: literal("schedule"),
       scheduleId: string().uuid()
     })
-  ]);
+  ]).superRefine((trigger, ctx) => {
+    if (trigger.type === "webhook" && trigger.verification && !trigger.hmacSecret) {
+      ctx.addIssue({
+        code: ZodIssueCode.custom,
+        message: "hmacSecret is required when verification is configured",
+        path: ["hmacSecret"]
+      });
+    }
+  });
   CooldownConfigSchema = object({
     hours: number().min(0).optional(),
     minutes: number().min(0).optional(),
@@ -2532,9 +2567,9 @@ The 5 script tools (\`script-search\`, \`script-run\`, \`script-upsert\`, \`scri
 - \`agentId\` IS propagated to scripts via the \`X-Agent-ID\` header.
 - \`taskId\` is NOT propagated to scripts — there is no ambient task context. Pass \`taskId\` explicitly via \`args\` if the script needs to call \`ctx.swarm.task_storeProgress\`.
 - Use \`script-query-types\` to inspect the live \`swarm-sdk.d.ts\` before authoring a complex script.
-- Typed API connections: a lead-registered \`script_connections\` entry exposes a typed \`ctx.api.<slug>.<method>(...)\` client in scripts.
-- \`ctx.api\` clients auto-inject the configured credential at egress, so scripts calling an allow-listed external API should prefer \`ctx.api\` over hand-written \`[REDACTED:<KEY>]\` Authorization headers.
-- Registration is lead-only; workers should document the connection spec and hand it to the lead to register.
+- Script connections: lead-registered \`script_connections\` entries expose typed clients in scripts — \`ctx.api.<slug>.<operationId>(...)\` (OpenAPI), \`ctx.api.<slug>.graphql(query, vars)\` (GraphQL), and \`ctx.mcp.<slug>.<toolName>(args)\` (MCP, proxied server-side). Introspect with \`Object.keys(ctx.api ?? {})\` / \`Object.keys(ctx.mcp ?? {})\`.
+- Connection credentials (config secrets or OAuth tokens with auto-refresh) are injected at egress, so scripts calling an external API should prefer a connection over hand-written \`fetch\` + \`[REDACTED:<KEY>]\` headers — and never paste raw secrets.
+- Registration is lead-only (\`script-connections\` + \`credential-bindings\` tools); workers should hand the lead the spec to register: slug, baseUrl or spec URL, allowedHosts, and auth (config key vs OAuth provider).
 `,
     variables: [],
     category: "system"
@@ -3008,7 +3043,10 @@ A Kapso webhook fired on the swarm's provisioned WhatsApp number. Load the \`kap
       { name: "conversation_id", description: "Kapso conversation id, or 'unknown'" },
       { name: "inbound_wamid", description: "Inbound message WAMID, or 'unknown'" },
       { name: "sender_phone", description: "Sender phone (E.164 no +), or 'unknown'" },
-      { name: "contact_name", description: "Contact display name, or 'unknown'" },
+      {
+        name: "contact_name",
+        description: "Sender identity — resolved canonical name (e.g. 'Luis (kapso:15551234567)') or the UNKNOWN sentinel — never the raw WhatsApp profile name"
+      },
       { name: "phone_number_id", description: "Provisioned phone-number id, or 'unknown'" },
       {
         name: "test_note",
@@ -3168,6 +3206,41 @@ This work will NOT fall back to the unassigned pool — you are the only re-dele
     ],
     category: "task_lifecycle"
   });
+  registerTemplate({
+    eventType: "task.pool.starved.decision",
+    header: "",
+    defaultBody: `Reroute decision: a pooled task has no eligible worker.
+
+Original task ID: {{original_task_id}}
+Task: "{{task_desc}}"
+Required role: {{required_role}}
+Required capabilities: {{required_capabilities}}{{artifacts_block}}
+
+## Your job
+
+This task has been sitting unassigned because no currently-registered agent matches its required role/capabilities. Pick an agent to take this work over and RE-DELEGATE it — do NOT execute it yourself.
+
+Dispatch via \`send-task\` with an explicit \`agentId\` (REQUIRED — omitting it re-pools the work under the same affinity tag and it will starve again) and \`parentTaskId: {{original_task_id}}\`.
+
+This work will NOT fall back to the unassigned pool — you are the only re-delegation path.`,
+    variables: [
+      { name: "original_task_id", description: "ID of the starved pool task" },
+      { name: "task_desc", description: "Original task description (truncated to 200 chars)" },
+      {
+        name: "required_role",
+        description: "Role declared on the task's routingAffinity, or a placeholder"
+      },
+      {
+        name: "required_capabilities",
+        description: "Comma-joined capabilities declared on the task's routingAffinity, or a placeholder"
+      },
+      {
+        name: "artifacts_block",
+        description: "Formatted attachment list from the original task, or empty string"
+      }
+    ],
+    category: "task_lifecycle"
+  });
 });
 
 // src/be/seed-prompt-templates.ts
@@ -3600,6 +3673,8 @@ __export(exports_db, {
   listAllMetrics: () => listAllMetrics,
   listAgentsWithCredStatusByProvider: () => listAgentsWithCredStatusByProvider,
   isSqliteVecAvailable: () => isSqliteVecAvailable,
+  isPoolAffinityEnforcementEnabled: () => isPoolAffinityEnforcementEnabled,
+  isAgentEligibleForTask: () => isAgentEligibleForTask,
   installSystemDefaultSkillsForAgent: () => installSystemDefaultSkillsForAgent,
   installSkill: () => installSkill,
   installMcpServer: () => installMcpServer,
@@ -3629,6 +3704,7 @@ __export(exports_db, {
   getUnreadMessages: () => getUnreadMessages,
   getUnreadInboxMessages: () => getUnreadInboxMessages,
   getUnassignedTasksCount: () => getUnassignedTasksCount,
+  getUnassignedTaskIdsForAgent: () => getUnassignedTaskIdsForAgent,
   getUnassignedTaskIds: () => getUnassignedTaskIds,
   getUnassignedPoolTasks: () => getUnassignedPoolTasks,
   getTasksCount: () => getTasksCount,
@@ -3653,6 +3729,7 @@ __export(exports_db, {
   getStepCountForNode: () => getStepCountForNode,
   getStepByIdempotencyKey: () => getStepByIdempotencyKey,
   getStalledInProgressTasks: () => getStalledInProgressTasks,
+  getStaleUnassignedAffinityTasks: () => getStaleUnassignedAffinityTasks,
   getStalePinnedResumes: () => getStalePinnedResumes,
   getSkillFiles: () => getSkillFiles,
   getSkillFile: () => getSkillFile,
@@ -3873,6 +3950,7 @@ __export(exports_db, {
   checkDependencies: () => checkDependencies,
   cascadeFailDependents: () => cascadeFailDependents,
   cancelTask: () => cancelTask,
+  buildRoutingAffinityFromAgent: () => buildRoutingAffinityFromAgent,
   backfillSupersedeTaskResumeTaskId: () => backfillSupersedeTaskResumeTaskId,
   autoEncryptLegacyPlaintextSecrets: () => autoEncryptLegacyPlaintextSecrets,
   assignUnassignedTaskPending: () => assignUnassignedTaskPending,
@@ -4326,6 +4404,40 @@ function updateAgentStatusFromCapacity(agentId) {
     updateAgentStatus(agentId, newStatus);
   }
 }
+function isPoolAffinityEnforcementEnabled() {
+  return process.env.POOL_AFFINITY_ENFORCEMENT !== "0";
+}
+function buildRoutingAffinityFromAgent(agentId) {
+  const agent = getAgentById(agentId);
+  if (!agent)
+    return null;
+  return {
+    sourceAgentId: agent.id,
+    role: agent.role,
+    harnessProvider: agent.harnessProvider ?? agent.provider ?? undefined,
+    capabilities: agent.capabilities ?? []
+  };
+}
+function isAgentEligibleForTask(agent, task) {
+  if (!isPoolAffinityEnforcementEnabled())
+    return true;
+  const affinity = task.routingAffinity;
+  if (!affinity)
+    return true;
+  if (affinity.sourceAgentId && affinity.sourceAgentId === agent.id)
+    return true;
+  if (!agent.role || !affinity.role)
+    return false;
+  if (agent.role !== affinity.role)
+    return false;
+  const requiredCapabilities = affinity.capabilities ?? [];
+  if (requiredCapabilities.length > 0) {
+    const agentCapabilities = new Set(agent.capabilities ?? []);
+    if (!requiredCapabilities.every((cap) => agentCapabilities.has(cap)))
+      return false;
+  }
+  return true;
+}
 function rowToAgentTask(row) {
   let followUpConfig;
   if (row.followUpConfig) {
@@ -4341,6 +4453,19 @@ function rowToAgentTask(row) {
       followUpConfig = undefined;
     }
   }
+  let routingAffinity;
+  if (row.routingAffinity) {
+    try {
+      const parsed = RoutingAffinitySchema.safeParse(JSON.parse(row.routingAffinity));
+      if (parsed.success) {
+        routingAffinity = parsed.data;
+      } else {
+        console.warn(`[db] Ignoring invalid agent_tasks.routingAffinity for task ${row.id}:`, parsed.error.message);
+      }
+    } catch (error) {
+      console.warn(`[db] Ignoring malformed agent_tasks.routingAffinity for task ${row.id}:`, error instanceof Error ? error.message : String(error));
+    }
+  }
   return {
     id: row.id,
     agentId: row.agentId,
@@ -4408,7 +4533,8 @@ function rowToAgentTask(row) {
     providerMeta: parseProviderMeta(row.provider, row.providerMeta),
     harnessVariant: row.harnessVariant ?? undefined,
     harnessVariantMeta: row.harnessVariantMeta ? JSON.parse(row.harnessVariantMeta) : undefined,
-    totalCostUsd: row.totalCostUsd ?? undefined
+    totalCostUsd: row.totalCostUsd ?? undefined,
+    routingAffinity
   };
 }
 function rowToAgentTaskSummary(row) {
@@ -4470,6 +4596,24 @@ function getPendingTaskForAgent(agentId) {
   return null;
 }
 function assignUnassignedTaskPending(taskId, agentId) {
+  if (isPoolAffinityEnforcementEnabled()) {
+    const task = getTaskById(taskId);
+    const agent = getAgentById(agentId);
+    if (task && agent && !isAgentEligibleForTask(agent, task)) {
+      try {
+        createLogEntry({
+          eventType: "task_claim_rejected_affinity",
+          agentId,
+          taskId,
+          metadata: {
+            agentRole: agent.role ?? null,
+            requiredRole: task.routingAffinity?.role ?? null
+          }
+        });
+      } catch {}
+      return null;
+    }
+  }
   const now = new Date().toISOString();
   const row = getDb().prepare(`UPDATE agent_tasks SET agentId = ?, status = 'pending', lastUpdatedAt = ?
        WHERE id = ? AND status = 'unassigned' RETURNING *`).get(agentId, now, taskId);
@@ -4665,6 +4809,10 @@ function getAllTasks(filters, opts) {
     conditions.push("createdAt >= ?");
     params.push(filters.createdAfter);
   }
+  if (filters?.createdBefore) {
+    conditions.push("createdAt < ?");
+    params.push(filters.createdBefore);
+  }
   if (filters?.requestedByUserId) {
     conditions.push("requestedByUserId = ?");
     params.push(filters.requestedByUserId);
@@ -4675,10 +4823,11 @@ function getAllTasks(filters, opts) {
   const whereClause = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
   const limit = filters?.limit ?? 25;
   const offset = filters?.offset ?? 0;
+  const orderBy = filters?.orderBy === "createdAt" ? "createdAt DESC, rowid DESC" : "lastUpdatedAt DESC, priority DESC";
   const query = `SELECT agent_tasks.*,
     (SELECT SUM(totalCostUsd) FROM session_costs WHERE session_costs.taskId = agent_tasks.id) AS totalCostUsd
     FROM agent_tasks ${whereClause}
-    ORDER BY lastUpdatedAt DESC, priority DESC LIMIT ${limit} OFFSET ${offset}`;
+    ORDER BY ${orderBy} LIMIT ${limit} OFFSET ${offset}`;
   const rows = getDb().prepare(query).all(...params);
   const isReady = (task) => {
     if (!task.dependsOn || task.dependsOn.length === 0)
@@ -4755,6 +4904,14 @@ function getTasksCount(filters) {
     conditions.push("createdAt >= ?");
     params.push(filters.createdAfter);
   }
+  if (filters?.createdBefore) {
+    conditions.push("createdAt < ?");
+    params.push(filters.createdBefore);
+  }
+  if (filters?.requestedByUserId) {
+    conditions.push("requestedByUserId = ?");
+    params.push(filters.requestedByUserId);
+  }
   if (!filters?.includeHeartbeat) {
     conditions.push(`(IFNULL(taskType, '') NOT IN ('heartbeat', 'heartbeat-checklist', 'boot-triage') AND tags NOT LIKE '%"heartbeat"%')`);
   }
@@ -5548,6 +5705,9 @@ function createTaskExtended(task, options) {
       if (parent.followUpConfig && !options.followUpConfig) {
         options.followUpConfig = parent.followUpConfig;
       }
+      if (parent.routingAffinity && !options.routingAffinity) {
+        options.routingAffinity = parent.routingAffinity;
+      }
     }
   }
   const existingTrackerWork = findExistingLinearTrackerContextWork(options?.contextKey);
@@ -5572,8 +5732,8 @@ function createTaskExtended(task, options) {
         vcsInstallationId, vcsNodeId,
         agentmailInboxId, agentmailMessageId, agentmailThreadId,
         mentionMessageId, mentionChannelId, dir, parentTaskId, model, modelTier, effort, scheduleId,
-        workflowRunId, workflowRunStepId, outputSchema, followUpConfig, requestedByUserId, contextKey, swarmVersion, createdAt, lastUpdatedAt, created_by, updated_by
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) RETURNING *`).get(id, options?.agentId ?? null, options?.creatorAgentId ?? null, task, status, options?.source ?? "mcp", options?.taskType ?? null, JSON.stringify(options?.tags ?? []), options?.priority ?? 50, JSON.stringify(options?.dependsOn ?? []), options?.offeredTo ?? null, options?.offeredTo ? now : null, options?.slackChannelId ?? null, options?.slackThreadTs ?? null, options?.slackUserId ?? null, options?.vcsProvider ?? null, options?.vcsRepo ?? null, options?.vcsEventType ?? null, options?.vcsNumber ?? null, options?.vcsCommentId ?? null, options?.vcsAuthor ?? null, options?.vcsUrl ?? null, options?.vcsInstallationId ?? null, options?.vcsNodeId ?? null, options?.agentmailInboxId ?? null, options?.agentmailMessageId ?? null, options?.agentmailThreadId ?? null, options?.mentionMessageId ?? null, options?.mentionChannelId ?? null, options?.dir ?? null, options?.parentTaskId ?? null, options?.model ?? null, options?.modelTier ?? null, options?.effort ?? null, options?.scheduleId ?? null, options?.workflowRunId ?? null, options?.workflowRunStepId ?? null, options?.outputSchema ? JSON.stringify(options.outputSchema) : null, options?.followUpConfig ? JSON.stringify(options.followUpConfig) : null, options?.requestedByUserId ?? null, options?.contextKey ?? null, package_default.version, now, now, auditUserId, auditUserId);
+        workflowRunId, workflowRunStepId, outputSchema, followUpConfig, requestedByUserId, contextKey, routingAffinity, swarmVersion, createdAt, lastUpdatedAt, created_by, updated_by
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) RETURNING *`).get(id, options?.agentId ?? null, options?.creatorAgentId ?? null, task, status, options?.source ?? "mcp", options?.taskType ?? null, JSON.stringify(options?.tags ?? []), options?.priority ?? 50, JSON.stringify(options?.dependsOn ?? []), options?.offeredTo ?? null, options?.offeredTo ? now : null, options?.slackChannelId ?? null, options?.slackThreadTs ?? null, options?.slackUserId ?? null, options?.vcsProvider ?? null, options?.vcsRepo ?? null, options?.vcsEventType ?? null, options?.vcsNumber ?? null, options?.vcsCommentId ?? null, options?.vcsAuthor ?? null, options?.vcsUrl ?? null, options?.vcsInstallationId ?? null, options?.vcsNodeId ?? null, options?.agentmailInboxId ?? null, options?.agentmailMessageId ?? null, options?.agentmailThreadId ?? null, options?.mentionMessageId ?? null, options?.mentionChannelId ?? null, options?.dir ?? null, options?.parentTaskId ?? null, options?.model ?? null, options?.modelTier ?? null, options?.effort ?? null, options?.scheduleId ?? null, options?.workflowRunId ?? null, options?.workflowRunStepId ?? null, options?.outputSchema ? JSON.stringify(options.outputSchema) : null, options?.followUpConfig ? JSON.stringify(options.followUpConfig) : null, options?.requestedByUserId ?? null, options?.contextKey ?? null, options?.routingAffinity ? JSON.stringify(options.routingAffinity) : null, package_default.version, now, now, auditUserId, auditUserId);
   if (!row)
     throw new Error("Failed to create task");
   try {
@@ -5608,6 +5768,24 @@ function createTaskExtended(task, options) {
   return rowToAgentTask(row);
 }
 function claimTask(taskId, agentId) {
+  if (isPoolAffinityEnforcementEnabled()) {
+    const task = getTaskById(taskId);
+    const agent = getAgentById(agentId);
+    if (task && agent && !isAgentEligibleForTask(agent, task)) {
+      try {
+        createLogEntry({
+          eventType: "task_claim_rejected_affinity",
+          agentId,
+          taskId,
+          metadata: {
+            agentRole: agent.role ?? null,
+            requiredRole: task.routingAffinity?.role ?? null
+          }
+        });
+      } catch {}
+      return null;
+    }
+  }
   const now = new Date().toISOString();
   const row = getDb().prepare(`UPDATE agent_tasks SET agentId = ?, status = 'in_progress', lastUpdatedAt = ?
        WHERE id = ? AND status = 'unassigned' RETURNING *`).get(agentId, now, taskId);
@@ -5779,6 +5957,31 @@ function getUnassignedTaskIds(limit = 10) {
   const rows = getDb().prepare("SELECT id FROM agent_tasks WHERE status = 'unassigned' ORDER BY priority DESC, createdAt ASC, rowid ASC LIMIT ?").all(limit);
   return rows.map((r) => r.id);
 }
+function getUnassignedTaskIdsForAgent(agentId, limit = 10) {
+  const agent = getAgentById(agentId);
+  if (!agent)
+    return [];
+  const batchSize = Math.max(limit * 5, ELIGIBILITY_SCAN_BATCH_SIZE);
+  const eligible = [];
+  let offset = 0;
+  while (eligible.length < limit && offset < ELIGIBILITY_SCAN_CAP) {
+    const rows = getDb().prepare("SELECT * FROM agent_tasks WHERE status = 'unassigned' ORDER BY priority DESC, createdAt ASC, rowid ASC LIMIT ? OFFSET ?").all(batchSize, offset);
+    if (rows.length === 0)
+      break;
+    for (const row of rows) {
+      const task = rowToAgentTask(row);
+      if (isAgentEligibleForTask(agent, task)) {
+        eligible.push(task.id);
+        if (eligible.length >= limit)
+          break;
+      }
+    }
+    offset += rows.length;
+    if (rows.length < batchSize)
+      break;
+  }
+  return eligible;
+}
 function checkDependencies(taskId) {
   const task = getTaskById(taskId);
   if (!task || !task.dependsOn || task.dependsOn.length === 0) {
@@ -7175,8 +7378,11 @@ function getStalledInProgressTasks(thresholdMinutes = 30) {
 function getStalePinnedResumes(graceMin) {
   const cutoff = new Date(Date.now() - graceMin * 60 * 1000).toISOString();
   return getDb().prepare(`SELECT * FROM agent_tasks
-       WHERE taskType = 'resume' AND status = 'pending'
-         AND (tags LIKE '%"crash-recovery-pin"%' OR tags LIKE '%"graceful-shutdown-pin"%')
+       WHERE status = 'pending'
+         AND (
+           (taskType = 'resume' AND (tags LIKE '%"crash-recovery-pin"%' OR tags LIKE '%"graceful-shutdown-pin"%'))
+           OR tags LIKE '%"reboot-retry-pin"%'
+         )
          AND createdAt < ?
        ORDER BY createdAt ASC`).all(cutoff).map(rowToAgentTask);
 }
@@ -7207,11 +7413,16 @@ function getIdleWorkersWithCapacity() {
     return activeCount < (agent.maxTasks ?? 1);
   });
 }
-function getUnassignedPoolTasks(limit = 10) {
+function getUnassignedPoolTasks(limit = 10, offset = 0) {
   return getDb().prepare(`SELECT * FROM agent_tasks
        WHERE status = 'unassigned'
-       ORDER BY priority DESC, createdAt ASC
-       LIMIT ?`).all(limit).map(rowToAgentTask);
+       ORDER BY priority DESC, createdAt ASC, rowid ASC
+       LIMIT ? OFFSET ?`).all(limit, offset).map(rowToAgentTask);
+}
+function getStaleUnassignedAffinityTasks(cutoffIso) {
+  return getDb().prepare(`SELECT * FROM agent_tasks
+       WHERE status = 'unassigned' AND routingAffinity IS NOT NULL AND createdAt < ?
+       ORDER BY createdAt ASC`).all(cutoffIso).map(rowToAgentTask);
 }
 function getRecentFailedTasks(hours = 6) {
   const since = new Date(Date.now() - hours * 60 * 60 * 1000).toISOString();
@@ -7738,7 +7949,11 @@ function updatePage(id, data) {
   return row ? rowToPage(row) : null;
 }
 function deletePage(id) {
-  const result = getDb().run("DELETE FROM pages WHERE id = ?", [id]);
+  const result = getDb().transaction(() => {
+    getDb().run("DELETE FROM user_favorites WHERE itemType = 'page' AND itemId = ?", [id]);
+    getDb().run("DELETE FROM kv_entries WHERE namespace = ?", [`task:page:${id}`]);
+    return getDb().run("DELETE FROM pages WHERE id = ?", [id]);
+  })();
   return result.changes > 0;
 }
 function incrementPageViewCount(id) {
@@ -8080,6 +8295,7 @@ function rowToApprovalRequest(row) {
     timeoutSeconds: row.timeoutSeconds,
     expiresAt: normalizeDate(row.expiresAt),
     notificationChannels: row.notificationChannels ? JSON.parse(row.notificationChannels) : null,
+    createdBy: row.created_by ?? undefined,
     createdAt: normalizeDateRequired(row.createdAt),
     updatedAt: normalizeDateRequired(row.updatedAt)
   };
@@ -8087,9 +8303,9 @@ function rowToApprovalRequest(row) {
 function createApprovalRequest(data) {
   const now = new Date().toISOString();
   const expiresAt = data.timeoutSeconds ? new Date(Date.now() + data.timeoutSeconds * 1000).toISOString() : null;
-  const row = getDb().prepare(`INSERT INTO approval_requests (id, title, questions, workflowRunId, workflowRunStepId, sourceTaskId, approvers, timeoutSeconds, expiresAt, notificationChannels, createdAt, updatedAt)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-       RETURNING *`).get(data.id, data.title, JSON.stringify(data.questions), data.workflowRunId ?? null, data.workflowRunStepId ?? null, data.sourceTaskId ?? null, JSON.stringify(data.approvers), data.timeoutSeconds ?? null, expiresAt, data.notificationChannels ? JSON.stringify(data.notificationChannels) : null, now, now);
+  const row = getDb().prepare(`INSERT INTO approval_requests (id, title, questions, workflowRunId, workflowRunStepId, sourceTaskId, approvers, timeoutSeconds, expiresAt, notificationChannels, created_by, createdAt, updatedAt)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+       RETURNING *`).get(data.id, data.title, JSON.stringify(data.questions), data.workflowRunId ?? null, data.workflowRunStepId ?? null, data.sourceTaskId ?? null, JSON.stringify(data.approvers), data.timeoutSeconds ?? null, expiresAt, data.notificationChannels ? JSON.stringify(data.notificationChannels) : null, data.createdBy ?? null, now, now);
   return rowToApprovalRequest(row);
 }
 function getApprovalRequestById(id) {
@@ -8790,8 +9006,19 @@ function updateMcpServer(id, updates) {
   return row ? rowToMcpServer(row) : null;
 }
 function deleteMcpServer(id) {
-  const result = getDb().prepare("DELETE FROM mcp_servers WHERE id = ?").run(id);
-  return result.changes > 0;
+  const db2 = getDb();
+  const existing = db2.prepare("SELECT id FROM mcp_servers WHERE id = ?").get(id);
+  if (!existing)
+    return { deleted: false, deletedScriptConnectionCount: 0 };
+  const tx = db2.transaction(() => {
+    const deletedConnections = db2.prepare("DELETE FROM script_connections WHERE mcp_server_id = ?").run(id);
+    const deletedServer = db2.prepare("DELETE FROM mcp_servers WHERE id = ?").run(id);
+    return {
+      deleted: deletedServer.changes > 0,
+      deletedScriptConnectionCount: deletedConnections.changes
+    };
+  });
+  return tx();
 }
 function getMcpServerById(id) {
   const row = getDb().prepare("SELECT * FROM mcp_servers WHERE id = ?").get(id);
@@ -9969,7 +10196,7 @@ function countScriptRunJournalAgentTaskSteps(runId) {
   const row = getDb().prepare("SELECT COUNT(*) AS count FROM script_run_journal WHERE runId = ? AND stepType = 'agent-task'").get(runId);
   return row?.count ?? 0;
 }
-var db = null, sqliteVecAvailable = false, VERSIONABLE_FIELDS, agentQueries, MAX_EMPTY_POLLS = 2, taskQueries, findTaskByGitHub, LINEAR_TRACKER_CONTEXT_KEY_PREFIX = "task:trackers:linear:", logQueries, sessionLogQueries, sessionCostQueries, SCHEDULE_TEMPLATE_PREVIEW_LENGTH = 280, TASK_PREVIEW_LENGTH = 300, RESERVED_CONFIG_PLACEHOLDER = "[reserved key stored in swarm_config; delete this row]", SKILL_FILE_LIMITS, BINARY_SKILL_FILE_PLACEHOLDER = "[binary file - not synced]", SKILL_SLIM_COLUMNS = "id, name, description, type, scope, ownerAgentId, sourceUrl, sourceRepo, sourcePath, sourceBranch, sourceHash, isComplex, allowedTools, model, effort, context, agent, disableModelInvocation, userInvocable, version, isEnabled, systemDefault, createdAt, lastUpdatedAt, lastFetchedAt, '' as content", contextSnapshotQueries, KvTypeCollisionError;
+var db = null, sqliteVecAvailable = false, VERSIONABLE_FIELDS, agentQueries, MAX_EMPTY_POLLS = 2, taskQueries, findTaskByGitHub, LINEAR_TRACKER_CONTEXT_KEY_PREFIX = "task:trackers:linear:", logQueries, ELIGIBILITY_SCAN_BATCH_SIZE, ELIGIBILITY_SCAN_CAP, sessionLogQueries, sessionCostQueries, SCHEDULE_TEMPLATE_PREVIEW_LENGTH = 280, TASK_PREVIEW_LENGTH = 300, RESERVED_CONFIG_PLACEHOLDER = "[reserved key stored in swarm_config; delete this row]", SKILL_FILE_LIMITS, BINARY_SKILL_FILE_PLACEHOLDER = "[binary file - not synced]", SKILL_SLIM_COLUMNS = "id, name, description, type, scope, ownerAgentId, sourceUrl, sourceRepo, sourcePath, sourceBranch, sourceHash, isComplex, allowedTools, model, effort, context, agent, disableModelInvocation, userInvocable, version, isEnabled, systemDefault, createdAt, lastUpdatedAt, lastFetchedAt, '' as content", contextSnapshotQueries, KvTypeCollisionError;
 var init_db = __esm(() => {
   init_provider_metadata();
   init_package();
@@ -10029,6 +10256,8 @@ var init_db = __esm(() => {
     getByEventType: () => getDb().prepare("SELECT * FROM agent_log WHERE eventType = ? ORDER BY createdAt DESC"),
     getAll: () => getDb().prepare("SELECT * FROM agent_log ORDER BY createdAt DESC")
   };
+  ELIGIBILITY_SCAN_BATCH_SIZE = Number(process.env.ELIGIBILITY_SCAN_BATCH_SIZE) || 25;
+  ELIGIBILITY_SCAN_CAP = Number(process.env.ELIGIBILITY_SCAN_CAP) || 500;
   sessionLogQueries = {
     insert: () => getDb().prepare(`INSERT INTO session_logs (id, taskId, sessionId, iteration, cli, content, lineNumber, createdAt)
        VALUES (?, ?, ?, ?, ?, ?, ?, strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) RETURNING *`),
@@ -10077,4 +10306,4 @@ var init_db = __esm(() => {
   };
 });
 
-export { interpolate, deepInterpolate, init_template, registerTemplate, getTemplateDefinition, getAllTemplateDefinitions, init_registry, configureHttpResolver, resolveTemplate, resolveTemplateAsync, init_resolver, initTelemetry, telemetry, init_telemetry, ModelTierSchema, ReasoningEffortSchema, splitLegacyModelAlias, resolveTaskModelSelection, AgentTaskStatusSchema, isTerminalTaskStatus, AgentTaskSourceSchema, ProviderNameSchema, FollowUpConfigSchema, AgentTaskSchema, AttachmentInputSchema, TaskAttachmentSchema, InboxItemTypeSchema, InboxItemStatusSchema, FavoriteItemTypeSchema, TaskTemplateKindSchema, AgentSchema, AgentLatestModelSchema, AgentCredStatusSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, ResumeReasonSchema, AgentLogSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, ScheduledTaskTargetTypeSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, PageContentTypeSchema, PageAuthModeSchema, MetricDefinitionSchema, MetricVersionSchema, WorkflowRunStatusSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptApiAuthModeSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types, setRequestAuth, getRequestAuth, getCurrentRequestAuth, init_request_auth_context, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, normalizeDateRequired, init_date_utils, init_session_templates, init_templates, init_templates2 as init_templates1, isReservedConfigKey, reservedKeyError, validateConfigValue, init_swarm_config_guard, onTaskStarted, init_task_lifecycle_events, generateDefaultClaudeMd, generateDefaultSoulMd, generateDefaultIdentityMd, generateDefaultToolsMd, init_defaults, isSqliteVecAvailable, initDb, getDb, closeDb, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, agentQueries, updateAgentCredentialState, createAgent, getAgentById, getAllAgents, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, taskQueries, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, getTaskById, markTaskSlackReplySent, setSlackMessageTracking, getChildTasks, hasNonTerminalResumeChild, hasNonTerminalRerouteDecisionChild, updateTaskClaudeSessionId, updateTaskVcs, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getInProgressTasksByContextKey, findExistingLinearTrackerContextWork, getLatestTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, completeTask, failTask, cancelTask, supersedeTask, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, insertTaskAttachment, deleteTaskAttachment, replaceTaskAttachment, getTaskAttachments, getAgentWithTasks, getAllAgentsWithTasks, logQueries, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, releaseStaleReviewingTasks, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, sessionLogQueries, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, getSessionCostSummary, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createPage, getPage, getPageBySlug, getLatestPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, markKeyRateLimited, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listUserFavorites, getFavoriteItemIdSet, setUserFavorite, withFavoriteFlags, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, upsertKv, deleteKv, KvTypeCollisionError, incrKv, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db };
+export { interpolate, deepInterpolate, init_template, registerTemplate, getTemplateDefinition, getAllTemplateDefinitions, init_registry, configureHttpResolver, resolveTemplate, resolveTemplateAsync, init_resolver, initTelemetry, telemetry, init_telemetry, ModelTierSchema, ReasoningEffortSchema, splitLegacyModelAlias, resolveTaskModelSelection, AgentTaskStatusSchema, isTerminalTaskStatus, AgentTaskSourceSchema, ProviderNameSchema, FollowUpConfigSchema, AgentTaskSchema, AttachmentInputSchema, TaskAttachmentSchema, InboxItemTypeSchema, InboxItemStatusSchema, FavoriteItemTypeSchema, TaskTemplateKindSchema, AgentSchema, AgentLatestModelSchema, AgentCredStatusSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, ResumeReasonSchema, AgentLogSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, ScheduledTaskTargetTypeSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, PageContentTypeSchema, PageAuthModeSchema, MetricDefinitionSchema, MetricVersionSchema, WorkflowRunStatusSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptApiAuthModeSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types, setRequestAuth, getRequestAuth, getCurrentRequestAuth, init_request_auth_context, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, normalizeDate, normalizeDateRequired, init_date_utils, init_session_templates, init_templates, init_templates2 as init_templates1, isReservedConfigKey, reservedKeyError, validateConfigValue, init_swarm_config_guard, onTaskStarted, init_task_lifecycle_events, generateDefaultClaudeMd, generateDefaultSoulMd, generateDefaultIdentityMd, generateDefaultToolsMd, init_defaults, isSqliteVecAvailable, initDb, getDb, closeDb, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, agentQueries, updateAgentCredentialState, createAgent, getAgentById, getAllAgents, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, isPoolAffinityEnforcementEnabled, buildRoutingAffinityFromAgent, isAgentEligibleForTask, taskQueries, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, getTaskById, markTaskSlackReplySent, setSlackMessageTracking, getChildTasks, hasNonTerminalResumeChild, hasNonTerminalRerouteDecisionChild, updateTaskClaudeSessionId, updateTaskVcs, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getInProgressTasksByContextKey, findExistingLinearTrackerContextWork, getLatestTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, completeTask, failTask, cancelTask, supersedeTask, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, insertTaskAttachment, deleteTaskAttachment, replaceTaskAttachment, getTaskAttachments, getAgentWithTasks, getAllAgentsWithTasks, logQueries, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, releaseStaleReviewingTasks, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, getUnassignedTaskIdsForAgent, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, sessionLogQueries, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, getSessionCostSummary, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getStaleUnassignedAffinityTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createPage, getPage, getPageBySlug, getLatestPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, markKeyRateLimited, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listUserFavorites, getFavoriteItemIdSet, setUserFavorite, withFavoriteFlags, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, upsertKv, deleteKv, KvTypeCollisionError, incrKv, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db };

package/dist/{cli-7ga43spr.js → cli-1yjrbg1f.js}

@@ -14,7 +14,7 @@ import {
   string,
   union,
   unknown
-} from "./cli-anrj584m.js";
+} from "./cli-xz9aq0rf.js";
 
 // node_modules/@mistralai/mistralai/esm/lib/primitives.js
 function remap(inp, mappings) {

package/dist/{cli-36ymmpmp.js → cli-3samkyap.js}

@@ -1,13 +1,13 @@
 import {
   buildModelsDevSeedRows
-} from "./cli-tbw13sx8.js";
+} from "./cli-tece6zgm.js";
 import {
   createLogEntry,
   getActivePricingRow,
   getDb,
   init_db,
   insertPricingRow
-} from "./cli-ncfgsqbd.js";
+} from "./cli-15y7qhzp.js";
 import {
   init_secret_scrubber,
   scrubSecrets