@desplega.ai/agent-swarm 1.124.0 → 1.125.0

package/dist/{cli-3z4q09tn.js → cli-yr11vvst.js}

@@ -1,3 +1,15 @@
+import {
+  configureDbResolver,
+  getAllTemplateDefinitions,
+  init_env_flag,
+  init_registry,
+  init_resolver,
+  init_session_templates,
+  init_steering_enabled,
+  isEnvFlagEnabled,
+  isSteeringEnabled,
+  registerTemplate
+} from "./cli-k1py8264.js";
 import {
   deriveProviderFromKeyType,
   init_credentials
@@ -5,7 +17,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-p0zgv8pj.js";
+} from "./cli-8vzddbs7.js";
 import {
   init_secret_scrubber,
   scrubSecrets
@@ -121,219 +133,6 @@ var init_key = __esm(() => {
   };
 });
 
-// src/utils/template.ts
-function interpolate(template, ctx) {
-  const unresolved = [];
-  const result = template.replace(/\{\{([^}]+)\}\}/g, (_match, path) => {
-    const keys = path.trim().split(".");
-    let value = ctx;
-    for (const key of keys) {
-      if (value == null || typeof value !== "object") {
-        unresolved.push(path.trim());
-        return "";
-      }
-      value = value[key];
-    }
-    if (value == null) {
-      unresolved.push(path.trim());
-      return "";
-    }
-    return typeof value === "object" ? safeStringify(value) : String(value);
-  });
-  return { result, unresolved };
-}
-function safeStringify(value) {
-  try {
-    return JSON.stringify(value);
-  } catch {
-    return "[Circular]";
-  }
-}
-function resolvePath(path, ctx) {
-  const keys = path.trim().split(".");
-  let value = ctx;
-  for (const key of keys) {
-    if (value == null || typeof value !== "object")
-      return { found: false };
-    value = value[key];
-  }
-  if (value === undefined)
-    return { found: false };
-  return { found: true, value };
-}
-function deepInterpolate(value, ctx, options = {}) {
-  const allUnresolved = [];
-  function walk(v) {
-    if (typeof v === "string") {
-      const exactMatch = options.preserveRawTokens ? EXACT_TOKEN_RE.exec(v) : null;
-      if (exactMatch?.[1]) {
-        const path = exactMatch[1].trim();
-        const resolved = resolvePath(path, ctx);
-        if (!resolved.found) {
-          allUnresolved.push(path);
-          return "";
-        }
-        return resolved.value;
-      }
-      const { result, unresolved } = interpolate(v, ctx);
-      allUnresolved.push(...unresolved);
-      return result;
-    }
-    if (Array.isArray(v))
-      return v.map(walk);
-    if (v != null && typeof v === "object") {
-      const out = {};
-      for (const [k, val] of Object.entries(v)) {
-        out[k] = walk(val);
-      }
-      return out;
-    }
-    return v;
-  }
-  return { value: walk(value), unresolved: allUnresolved };
-}
-var EXACT_TOKEN_RE;
-var init_template = __esm(() => {
-  EXACT_TOKEN_RE = /^\{\{([^}]+)\}\}$/;
-});
-
-// src/prompts/registry.ts
-function registerTemplate(def) {
-  templateDefinitions.set(def.eventType, def);
-}
-function getTemplateDefinition(eventType) {
-  return templateDefinitions.get(eventType);
-}
-function getAllTemplateDefinitions() {
-  return Array.from(templateDefinitions.values());
-}
-var templateDefinitions;
-var init_registry = __esm(() => {
-  templateDefinitions = new Map;
-});
-
-// src/prompts/resolver.ts
-function configureDbResolver(fn) {
-  dbResolverFn = fn;
-}
-function configureHttpResolver(apiUrl, apiKey) {
-  httpResolverConfig = { apiUrl, apiKey };
-}
-async function resolveTemplateViaHttp(eventType, variables, options) {
-  const config = httpResolverConfig;
-  const url = `${config.apiUrl}/api/prompt-templates/render`;
-  try {
-    const resp = await fetch(url, {
-      method: "POST",
-      headers: {
-        Authorization: `Bearer ${config.apiKey}`,
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify({
-        eventType,
-        variables,
-        agentId: options.agentId,
-        repoId: options.repoId
-      })
-    });
-    if (!resp.ok) {
-      console.warn(`[prompt-resolver] HTTP render failed (${resp.status}), falling back to code defaults`);
-      return resolveTemplateFromCode(eventType, variables);
-    }
-    return await resp.json();
-  } catch (err) {
-    console.warn(`[prompt-resolver] HTTP render error, falling back to code defaults:`, err instanceof Error ? err.message : err);
-    return resolveTemplateFromCode(eventType, variables);
-  }
-}
-function resolveTemplateFromCode(eventType, variables) {
-  const definition = getTemplateDefinition(eventType);
-  const header = definition?.header ?? "";
-  const body = definition?.defaultBody ?? "";
-  const composed = header ? `${header}
-
-${body}` : body;
-  const { result: text, unresolved } = interpolate(composed, variables);
-  return { text, skipped: false, unresolved };
-}
-function resolveTemplate(eventType, variables, options = {}) {
-  if (httpResolverConfig) {
-    return resolveTemplateFromCode(eventType, variables);
-  }
-  return resolveTemplateViaDb(eventType, variables, options);
-}
-async function resolveTemplateAsync(eventType, variables, options = {}) {
-  if (httpResolverConfig) {
-    return resolveTemplateViaHttp(eventType, variables, options);
-  }
-  return resolveTemplateViaDb(eventType, variables, options);
-}
-function resolveTemplateViaDb(eventType, variables, options) {
-  const definition = getTemplateDefinition(eventType);
-  const header = definition?.header ?? "";
-  const defaultBody = definition?.defaultBody ?? "";
-  const dbResult = dbResolverFn?.(eventType, options.agentId, options.repoId) ?? null;
-  if (dbResult && "skip" in dbResult) {
-    return { text: "", skipped: true, unresolved: [] };
-  }
-  let body;
-  let templateId;
-  let scope;
-  if (dbResult && "template" in dbResult) {
-    body = dbResult.template.body;
-    templateId = dbResult.template.id;
-    scope = dbResult.template.scope;
-  } else {
-    body = defaultBody;
-  }
-  body = expandTemplateRefs(body, variables, options, new Set, 0);
-  const composed = header ? `${header}
-
-${body}` : body;
-  const { result: text, unresolved } = interpolate(composed, variables);
-  return {
-    text,
-    templateId,
-    scope,
-    skipped: false,
-    unresolved
-  };
-}
-function expandTemplateRefs(text, variables, options, visited, depth) {
-  if (depth > MAX_TEMPLATE_REF_DEPTH) {
-    return text;
-  }
-  return text.replace(TEMPLATE_REF_REGEX, (fullMatch, referencedId) => {
-    if (visited.has(referencedId)) {
-      console.warn(`[prompt-resolver] Cycle detected for template reference "${referencedId}", leaving token as-is`);
-      return fullMatch;
-    }
-    if (depth + 1 > MAX_TEMPLATE_REF_DEPTH) {
-      console.warn(`[prompt-resolver] Max template reference depth (${MAX_TEMPLATE_REF_DEPTH}) exceeded for "${referencedId}", leaving token as-is`);
-      return fullMatch;
-    }
-    const refDef = getTemplateDefinition(referencedId);
-    const refDefaultBody = refDef?.defaultBody ?? "";
-    const refDbResult = dbResolverFn?.(referencedId, options.agentId, options.repoId) ?? null;
-    if (refDbResult && "skip" in refDbResult) {
-      return fullMatch;
-    }
-    const refBody = refDbResult && "template" in refDbResult ? refDbResult.template.body : refDefaultBody;
-    if (!refBody) {
-      return fullMatch;
-    }
-    const newVisited = new Set(visited);
-    newVisited.add(referencedId);
-    return expandTemplateRefs(refBody, variables, options, newVisited, depth + 1);
-  });
-}
-var dbResolverFn = null, httpResolverConfig = null, MAX_TEMPLATE_REF_DEPTH = 3, TEMPLATE_REF_REGEX;
-var init_resolver = __esm(() => {
-  init_template();
-  init_registry();
-  TEMPLATE_REF_REGEX = /\{\{@template\[([^\]]+)\]\}\}/g;
-});
-
 // src/tasks/context-key.ts
 function assertSafePart(value, label) {
   if (value === null || value === undefined) {
@@ -592,28 +391,6 @@ var init_slack_routing = __esm(() => {
   init_context_key();
 });
 
-// src/utils/env-flag.ts
-function parseEnvFlag(raw, defaultValue) {
-  if (raw === undefined || raw === null)
-    return defaultValue;
-  const normalized = raw.trim().toLowerCase();
-  if (normalized === "")
-    return defaultValue;
-  if (TRUTHY.has(normalized))
-    return true;
-  if (FALSY.has(normalized))
-    return false;
-  return defaultValue;
-}
-function isEnvFlagEnabled(key, defaultValue, env = process.env) {
-  return parseEnvFlag(env[key], defaultValue);
-}
-var TRUTHY, FALSY;
-var init_env_flag = __esm(() => {
-  TRUTHY = new Set(["true", "1"]);
-  FALSY = new Set(["false", "0"]);
-});
-
 // src/telemetry.ts
 import { randomUUID } from "node:crypto";
 function isEnabled() {
@@ -1063,7 +840,7 @@ var init_types = __esm(() => {
     devin: ["queue"],
     opencode: ["queue"],
     claude: ["queue"],
-    codex: []
+    codex: ["queue"]
   };
   FollowUpConfigSchema = object({
     disabled: boolean().optional(),
@@ -3069,887 +2846,6 @@ var init_oauth_encryption_backfill = __esm(() => {
   init_crypto();
 });
 
-// src/prompts/session-templates.ts
-var init_session_templates = __esm(() => {
-  init_registry();
-  registerTemplate({
-    eventType: "system.agent.role",
-    header: "",
-    defaultBody: `
-You are part of an agent swarm, your role is: {{role}} and your unique identified is {{agentId}}.
-
-The agent swarm operates in a collaborative manner to achieve complex tasks by dividing responsibilities among specialized agents.
-`,
-    variables: [
-      { name: "role", description: "The agent's role (e.g. lead, worker)" },
-      { name: "agentId", description: "The agent's unique identifier" }
-    ],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.register",
-    header: "",
-    defaultBody: `
-If you are not yet registered in the swarm, use the \`join-swarm\` tool to register yourself.
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.lead",
-    header: "",
-    defaultBody: `
-As the lead agent, you coordinate all worker agents in the swarm.
-
-**CRITICAL: You are a coordinator, NOT a worker.** Delegate ALL implementation, research, analysis, and content creation to workers. The only things you handle directly: swarm management, simple factual answers, and inter-agent coordination. Exception: when the user explicitly says "do this yourself."
-
-#### Tools
-
-**Monitoring:**
-- \`get-swarm\`: See all agents and their status (idle, busy, offline)
-- \`get-tasks\`: List tasks with filters (status, unassigned, tags)
-- \`get-task-details\`: Deep dive into a specific task's progress and output
-
-**Delegation:**
-- \`send-task\`: Assign a task to a specific worker or to the general pool. Slack/AgentMail metadata auto-inherits from parent task.
-- \`store-progress\`: Track coordination notes or update task status
-
-**User Registration:** When a task arrives from an unknown user (no \`requestedByUserId\`), use the \`manage-user\` tool to register them before proceeding. Resolve their identity from the task metadata attached to the task.
-
-**Identity:**
-- \`update-profile\`: Update your own or other agents' profile fields (name, role, capabilities, soulMd, identityMd, heartbeatMd, claudeMd, toolsMd, setupScript)
-- \`manage-user\`: Register or update human users (resolve from GitHub/GitLab identity or other source metadata)
-
-#### Task Routing
-
-When composing task descriptions: include the repo URL (if applicable), specific goal, and any constraints. Workers know how to use git, wts, slash commands, and store-progress — don't spell out those steps.
-
-**Decision guide:**
-- Research/exploration/analysis → tell worker to use \`/desplega:research\`
-- Complex feature/major refactor → send Planning task first, then Implementation with \`parentTaskId\`
-- Bug fix/small change → direct implementation (no plan needed)
-- Non-code task/question → general task description
-
-#### Session Continuity (parentTaskId)
-
-For follow-up tasks that should continue from previous work, pass \`parentTaskId\` with the previous task's ID:
-- Worker resumes the parent's Claude session (full conversation context preserved)
-- Child task is auto-routed to the same worker (session data is local)
-
-If you explicitly assign to a different worker, session resume gracefully falls back to a fresh session.
-
-#### Follow-Up Tasks
-
-When a worker completes or fails a task, you receive an automatic follow-up task. Handle it by:
-1. Review the output/failure reason
-2. Complete this task. Do NOT re-delegate or create new worker tasks from a follow-up — the worker's result IS the answer. Only escalate to the stakeholder if the worker explicitly failed and the failure needs human attention.
-
-#### Heartbeat Checklist
-
-The system reads your \`/workspace/HEARTBEAT.md\` every 30 minutes. If it has content, it creates a \`heartbeat-checklist\` task containing auto-generated system status + your standing orders.
-
-**Configuration:** Edit \`/workspace/HEARTBEAT.md\` directly or use \`update-profile\` with the \`heartbeatMd\` field. Empty file = disabled (zero cost).
-
-**Keep it alive:** HEARTBEAT.md is a live operational runbook, not a static config file. Update it when you detect patterns (recurring failures, worker issues, rate limits). Remove items when they're resolved. The system status includes failure reasons and patterns — use them to decide what standing orders to add.
-
-**Example standing orders:**
-\`\`\`markdown
-- Review active tasks for any that seem stuck or need follow-up
-- If idle workers exist and unassigned tasks are available, investigate why
-\`\`\`
-
-**Key mechanics:**
-- System status is automatic — don't gather it yourself
-- Don't create checklist tasks yourself — the system handles scheduling
-- Boot triage: after server restart, you get a higher-priority checklist within 30 seconds
-
-**When you receive a checklist task:** Review system status + standing orders, take action if needed, otherwise complete with "All clear."
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.slack",
-    header: "",
-    defaultBody: `
-#### Slack Tools
-
-- \`slack-reply\`: Reply to user in the Slack thread (use taskId for context)
-- \`slack-read\`: Read thread/channel history (use taskId or channelId)
-- \`slack-list-channels\`: Discover available Slack channels
-
-**Slack User Registration:** When a task arrives from an unknown user (no \`requestedByUserId\`) with Slack metadata, use the \`manage-user\` tool to register them before proceeding. Resolve their identity from the Slack metadata (user ID, display name) attached to the task.
-
-**Slack context inheritance:** For follow-up tasks using \`parentTaskId\`, Slack metadata (channelId, threadTs, userId) auto-inherits.
-
-**Slack follow-up tasks:** When a worker completes or fails a task that has Slack metadata, use \`slack-reply\` with the task's ID to post the result back to the originating thread before completing the follow-up task.
-
-**Slack standing orders:** If you maintain heartbeat standing orders, check Slack for unaddressed requests older than 1 hour when appropriate.
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.worker",
-    header: "",
-    defaultBody: `
-As a worker agent of the swarm, you are responsible for executing tasks assigned by the lead agent.
-
-- Each worker focuses on specific tasks or objectives, contributing to the overall goals of the swarm.
-- Workers MUST report their progress back to the lead and collaborate with other workers as needed.
-
-#### Useful tools for workers
-
-- \`store-progress\`: Save your work progress on tasks (critical!)
-- \`task-action\`: Manage tasks - claim from pool, release, accept/reject offered tasks
-
-#### Completing Tasks
-
-When you finish a task:
-- **Success**: Use \`store-progress\` with status: "completed" and output: "<summary of what you did>"
-- **Failure**: Use \`store-progress\` with status: "failed" and failureReason: "<what went wrong>"
-
-Always include meaningful output - the lead agent reviews your work.
-
-#### Credential Hygiene
-
-When you retrieve secrets via \`get-config\` (with \`includeSecrets: true\`), **never pass secret values directly on a command line or embed them in tool output**. Command arguments are logged.
-
-**Safe pattern:** Write the secret to a temporary \`.env\` file, then source it:
-\`\`\`bash
-# Write to temp file (not logged)
-echo "MY_TOKEN=<value>" > /tmp/.task-env && source /tmp/.task-env
-# Use the variable (value stays out of logs)
-curl -H "Authorization: Bearer $MY_TOKEN" https://api.example.com
-rm /tmp/.task-env
-\`\`\`
-
-**Unsafe pattern (NEVER do this):**
-\`\`\`bash
-# The literal secret appears in the logged command
-curl -H "Authorization: Bearer lin_oauth_abc123..." https://api.example.com
-\`\`\`
-
-The same applies to \`store-progress\` output — never include raw secret values in progress text, output, or failure reasons.
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.messaging",
-    header: "",
-    defaultBody: `
-#### Swarm Messaging
-
-- \`post-message\`: Post a message to a swarm channel (use \`mentions\` to notify specific agents, \`replyTo\` to thread)
-- \`read-messages\`: Read messages from the lead or other agents (filters: \`unreadOnly\`, \`mentionsOnly\`)
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.steering",
-    header: "",
-    defaultBody: `
-#### Live Task Steering
-
-You may receive steering messages while this task is running. Each one arrives wrapped in a \`[steering <id>]\` marker that carries its steering message ID. Incorporate the message into your current work, then call \`accept-steer\` with that ID. Do not acknowledge a message before acting on it.
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.steering.delivery",
-    header: "",
-    defaultBody: `[steering {{steeringMessageId}}] {{body}}
-
-(Once you have acted on this, call \`accept-steer\` with steeringMessageId "{{steeringMessageId}}".)`,
-    variables: [
-      { name: "steeringMessageId", description: "ID of the steering message being delivered" },
-      { name: "body", description: "The steering message text as the sender wrote it" }
-    ],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.worker.slack",
-    header: "",
-    defaultBody: `
-#### Slack Thread Updates
-
-This task originated from Slack (channel: \`{{slackChannelId}}\`). You MUST keep the originating Slack thread informed:
-- **On start**: Post a brief update that you've picked up the task using \`slack-reply\` with your taskId
-- **On completion**: Post a summary of the result using \`slack-reply\` with your taskId
-- **On failure**: Post what went wrong so the requester knows immediately
-
-This ensures humans who requested work via Slack get timely feedback without having to check the dashboard.
-`,
-    variables: [
-      { name: "slackChannelId", description: "The Slack channel ID for the originating thread" },
-      { name: "slackThreadTs", description: "The Slack thread timestamp" }
-    ],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.filesystem",
-    header: "",
-    defaultBody: `
-### You are given a full Ubuntu filesystem at /workspace, where you can find the following CRUCIAL files and directories:
-
-- /workspace/personal - Your personal directory for storing files, code, and data related to your tasks.
-- /workspace/personal/todos.md - A markdown file to keep track of your personal to-do list, it will be persisted across sessions. Use the /todos command to interact with it.
-- /workspace/shared - A shared directory accessible by all agents in the swarm for collaboration, critical if you want to share files or data with other agents, specially the lead agent.
-
-#### Shared Workspace Directory Convention
-
-Each agent writes ONLY to its own subdirectory under each shared category, using \`{category}/{{agentId}}/\`. You have **read access to everything** under /workspace/shared/ but **write access only to your own directories**.
-
-**Your write directories** (create as needed):
-- \`/workspace/shared/thoughts/{{agentId}}/plans/\` — Your plans
-- \`/workspace/shared/thoughts/{{agentId}}/research/\` — Your research notes
-- \`/workspace/shared/thoughts/{{agentId}}/brainstorms/\` — Your brainstorm documents
-- \`/workspace/shared/memory/{{agentId}}/\` — Your shared memories (searchable by all agents)
-- \`/workspace/shared/downloads/{{agentId}}/\` — Your downloaded files
-- \`/workspace/shared/misc/{{agentId}}/\` — Other shared files
-
-The commands to interact with thoughts are /desplega:research, /desplega:create-plan and /desplega:implement-plan.
-
-**Discovering other agents' work:**
-- \`ls /workspace/shared/thoughts/*/plans/\` — See all agents' plans
-- \`ls /workspace/shared/thoughts/*/research/\` — See all agents' research
-- \`memory-search\` — Search across all agents' shared memories
-
-**WARNING: Do NOT write to another agent's directory.** Each agent owns its \`{{agentId}}/\` subdirectory. Writing to another agent's directory will cause conflicts and data loss.
-
-#### Environment Setup
-Your setup script at \`/workspace/start-up.sh\` runs at every container start. Edit between the \`# === Agent-managed setup\` markers (persisted to DB), or use \`update-profile\` with \`setupScript\`.
-
-#### Operational Knowledge
-Your \`/workspace/TOOLS.md\` file stores environment-specific knowledge — repos you work with,
-services and ports, SSH hosts, APIs, tool preferences. Update it as you learn about your environment.
-It persists across sessions.
-
-#### Memory
-
-**Your memory is limited — if you want to remember something, WRITE IT TO A FILE.**
-Mental notes don't survive session restarts. Files do. Text > Brain.
-
-**REQUIRED — Memory recall:** At the start of EVERY task, you MUST use \`memory-search\` with your task description to recall relevant context before doing any work. Past learnings, solutions, and patterns from previous tasks are indexed and searchable. Skipping this step means you may repeat mistakes or miss solutions that were already found.
-
-Do this FIRST, before reading files, writing code, or making plans.
-
-**Saving memories:** Write important learnings, patterns, decisions, and solutions to files in your memory directories. They are automatically indexed and become searchable via \`memory-search\`:
-- \`/workspace/personal/memory/\` — Private to you, searchable only by you
-- \`/workspace/shared/memory/{{agentId}}/\` — Shared with all agents, searchable by everyone (write only to YOUR directory)
-
-When you solve a hard problem, fix a tricky bug, or learn something about the codebase — write it down immediately. Don't wait until the end of the session.
-
-Examples:
-- Private: \`Write("/workspace/personal/memory/auth-header-fix.md", "The API requires Bearer prefix...")\`
-- Shared: \`Write("/workspace/shared/memory/{{agentId}}/auth-header-fix.md", "The API requires Bearer prefix...")\`
-
-**Memory tools:**
-- \`memory-search\` — Search your memories with natural language queries. Returns summaries with IDs.
-- \`memory-get\` — Retrieve full details of a specific memory by ID.
-
-**What gets auto-indexed (no action needed from you):**
-- Files written to the memory directories above (via PostToolUse hook)
-- Completed task outputs (when you call store-progress with status: completed)
-- Session summaries (captured automatically when your session ends)
-
-**When to write memories:**
-- You solved a problem → write the solution
-- You learned a codebase pattern → write the pattern
-- You made a mistake → write what went wrong and how to avoid it
-- Someone says "remember this" → write it down
-- You discovered an important configuration → write it
-
-You also still have \`/workspace/personal/\` for general file persistence.
-`,
-    variables: [{ name: "agentId", description: "The agent's unique identifier" }],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.agent_fs",
-    header: "",
-    defaultBody: `
-## Agent Filesystem (agent-fs)
-
-You have access to agent-fs — a persistent, searchable filesystem shared across the swarm.
-Use the \`agent-fs\` CLI for all thoughts, research, plans, and shared documents.
-
-The \`agent-fs\` skill (installed in your skills directory) provides a full CLI
-reference. You can also run \`agent-fs docs\` for interactive CLI documentation.
-
-### Writing to your personal drive (default)
-\`\`\`bash
-agent-fs write thoughts/research/YYYY-MM-DD-topic.md --content "..." -m "description"
-echo "content" | agent-fs write thoughts/plans/YYYY-MM-DD-topic.md -m "description"
-\`\`\`
-
-### Writing to the shared drive
-Use the same directory structure as the personal drive, namespaced by your agent ID:
-\`\`\`bash
-# Structured files: thoughts/{{agentId}}/{type}/YYYY-MM-DD-name.md
-agent-fs --org {{sharedOrgId}} write thoughts/{{agentId}}/research/YYYY-MM-DD-topic.md --content "..." -m "research findings"
-agent-fs --org {{sharedOrgId}} write thoughts/{{agentId}}/plans/YYYY-MM-DD-topic.md --content "..." -m "implementation plan"
-
-# Random/misc files: misc/{{agentId}}/name.ext
-agent-fs --org {{sharedOrgId}} write misc/{{agentId}}/notes.md --content "..." -m "misc notes"
-
-# Shared documents (not agent-namespaced): docs/name.md
-agent-fs --org {{sharedOrgId}} write docs/shared-report.md --content "..." -m "for team review"
-\`\`\`
-
-### Reading and searching
-\`\`\`bash
-agent-fs cat thoughts/research/2026-03-18-topic.md
-agent-fs fts "authentication"          # keyword search across all files
-agent-fs search "how does auth work"   # semantic search
-agent-fs ls thoughts/research/         # list files
-agent-fs docs                          # interactive CLI documentation
-\`\`\`
-
-### Comments (for human-agent collaboration)
-\`\`\`bash
-agent-fs comment add docs/spec.md --body "Needs clarification on auth flow"
-agent-fs comment list docs/spec.md
-\`\`\`
-
-### Sharing agent-fs files with humans
-
-To give a human a direct link to a file, build the URL from the live host
-(env-var driven, never hardcode):
-
-\`\`\`
-\${AGENT_FS_LIVE_URL}/file/~/<org_id>/<drive_id>/<file_path>
-\`\`\`
-
-\`AGENT_FS_LIVE_URL\` defaults to \`https://live.agent-fs.dev\` if not set.
-\`<org_id>\` and \`<drive_id>\` come from the file's \`agent-fs stat <path> --json\`
-output (or the agent-fs CLI returns them on write). Use the **shared** drive
-id for files humans should review.
-
-Key conventions:
-- **Personal drive**: thoughts/{type}/YYYY-MM-DD-topic.md (plans, research, brainstorms)
-- **Shared drive**: thoughts/{{agentId}}/{type}/YYYY-MM-DD-topic.md (same structure, namespaced by your ID)
-- **Misc files**: misc/{{agentId}}/name.ext (shared drive) or misc/name.ext (personal drive)
-- Add version messages (-m) to writes for auditability
-- All CLI output is JSON — parse it
-- Use the shared drive (--org) for documents humans or other agents should review
-- Run \`agent-fs docs\` if you need help with any command
-
-Do NOT use the local filesystem (/workspace/shared/thoughts/) for thoughts or shared docs
-when agent-fs is available. Local filesystem is still used for: repos, artifacts, scripts,
-and any non-thought data.
-`,
-    variables: [
-      { name: "agentId", description: "The agent's unique identifier" },
-      { name: "sharedOrgId", description: "The shared organization ID for agent-fs" }
-    ],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.self_awareness",
-    header: "",
-    defaultBody: `
-### How You Are Built
-
-Your source code lives in the \`desplega-ai/agent-swarm\` GitHub repository. Key facts:
-
-- **Runtime:** Headless Claude Code process inside a Docker container
-- **Orchestration:** Runner process (\`src/commands/runner.ts\`) polls for tasks and spawns sessions
-- **Hooks:** Six hooks fire during your session (SessionStart, PreCompact, PreToolUse, PostToolUse, UserPromptSubmit, Stop) — see \`src/hooks/hook.ts\`
-- **Memory:** SQLite + OpenAI embeddings (text-embedding-3-small, 512d). Search is brute-force cosine similarity
-- **Identity Sync:** SOUL.md/IDENTITY.md/TOOLS.md/CLAUDE.md synced to DB on file edit (PostToolUse) and session end (Stop)
-- **System Prompt:** Assembled from base-prompt.ts + SOUL.md + IDENTITY.md + CLAUDE.md + TOOLS.md, passed via --append-system-prompt
-- **Task Lifecycle:** unassigned → offered → pending → in_progress → completed/failed. Completed output auto-indexed into memory
-- **MCP Server:** Tools come from MCP server at $MCP_BASE_URL (src/server.ts)
-
-Use this to debug issues and propose improvements to your own infrastructure.
-
-**Proposing changes:** If you want to change how you are built (hooks, runner, prompts, tools), ask the lead agent to follow up with the user in Slack to discuss the change. Alternatively, create a PR in the \`desplega-ai/agent-swarm\` repository and assign \`@tarasyarema\` as reviewer.
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.script_authoring_contract",
-    header: "",
-    defaultBody: `
-### Script Authoring Contract (read BEFORE writing any script)
-
-**Entry point — \`args\` FIRST, \`ctx\` SECOND.** A one-parameter \`function (ctx)\` can execute through \`script-run\`, but at runtime that parameter receives \`args\`, so every \`ctx.*\` access throws. \`script-upsert\` also rejects an untyped parameter under strict typechecking. This is the single most common cause of failed script runs.
-
-\`\`\`ts
-import type { ScriptContext } from "swarm-sdk";
-import * as z from "zod";
-
-export const argsSchema = z.object({ taskId: z.string(), limit: z.number().optional() });
-
-export default async function (args: z.infer<typeof argsSchema>, ctx: ScriptContext) {
-  const res = await ctx.swarm.task_get({ taskId: args.taskId });
-  const task = ((res as { data?: unknown }).data ?? res) as { title?: string };
-  return { title: task?.title };
-}
-\`\`\`
-
-**Typechecking:** inline source passed to \`script-run\` executes without a compile-time typecheck. \`script-upsert\` typechecks before saving, so import \`ScriptContext\` from \`"swarm-sdk"\` as shown above to make inline code promotion-safe. Use \`script-query-types\` for the authoritative SDK and stdlib declarations.
-
-**What \`ctx\` actually holds for inline/named scripts (\`script-run\` / \`script-upsert\`) — nothing else:**
-- \`ctx.swarm.*\` — the swarm SDK: \`task_get\`, \`task_send\`, \`task_storeProgress\`, \`task_action\`, \`task_list\`, \`message_post\`, \`message_read\`, \`slack_reply\`, \`memory_search\`, \`kv_get\`/\`kv_set\`/\`kv_del\`/\`kv_incr\`/\`kv_list\`, \`swarm_get\`, \`agent_info\`, and more. Responses are usually wrapped — prefer \`res?.data ?? res\`.
-- \`ctx.swarm.config\` — \`apiKey\`, \`agentId\`, \`mcpBaseUrl\`, plus \`ctx.swarm.config.get("KEY")\` for user values. All are \`Redacted\` wrappers: they stringify to \`<redacted>\`, and you must never unwrap them into a return value, log line, or request body you build by hand.
-- \`ctx.api.<slug>\` / \`ctx.mcp.<slug>\` — typed clients for connections the lead registered (\`ctx.api.<slug>.<operationId>(...)\`, \`ctx.api.<slug>.graphql(query, vars)\`, \`ctx.mcp.<slug>.<toolName>(args)\`). They exist ONLY for registered connections — introspect with \`Object.keys(ctx.api ?? {})\` / \`Object.keys(ctx.mcp ?? {})\` before assuming one is there.
-- \`ctx.stdlib\` — \`fetch\`, \`fetchJson\` (retries + 30s timeout), \`grep\`, \`glob\`, \`table\`, \`Redacted\`.
-- \`ctx.logger\` — \`log\` / \`warn\` / \`error\`.
-
-There is NO ambient task context: \`taskId\` must arrive through \`args\`. \`agentId\` IS propagated automatically (\`X-Agent-ID\` header).
-
-**Durable workflow scripts (\`launch-script-run\`) get a DIFFERENT \`ctx\`:** \`ctx.run\` (\`id\`/\`agentId\`/\`args\`), \`ctx.step.rawLlm(label, config)\` / \`ctx.step.agentTask(label, config)\` / \`ctx.step.swarmScript(label, config)\` (durable, journaled steps), plus \`ctx.swarm.*\`, \`ctx.stdlib\`, \`ctx.logger\` as above. Durable runs have NO \`ctx.api\`/\`ctx.mcp\` connection clients and no \`ctx.swarm.config\` — call connections from an inner script via \`ctx.step.swarmScript\` instead.
-
-**\`argsSchema\` convention:** export a Zod schema named \`argsSchema\` from every named script. \`script-upsert\` converts it to JSON Schema, so callers, schedules, and workflows can see the script's input contract. Without it the script's args are undocumented.
-
-**Secrets — never paste a raw value:**
-- Prefer a registered connection (\`ctx.api.<slug>\` / \`ctx.mcp.<slug>\`): its credentials are attached server-side and never enter the script.
-- Otherwise put the placeholder \`[REDACTED:<CONFIG_KEY>]\` in the header or query value (e.g. \`Authorization: Bearer [REDACTED:GITHUB_TOKEN]\`). The runtime substitutes the real value at egress, and only for that credential binding's allowed hosts.
-- NEVER bake a raw secret — or the output of \`get-config\` with \`includeSecrets: true\` — into script source, script args, a schedule's \`taskTemplate\`, or a task description. Those are stored as plaintext and replayed on every run. Use a connection or a credential binding instead.
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.script_rubric",
-    header: "",
-    defaultBody: `
-{{@template[system.agent.script_authoring_contract]}}
-
-### Agent Scripts — for bulk, repetitive, or data-heavy work
-
-Use **scripts** (\`script-upsert\` + \`script-run\`) when a task involves repetitive SDK calls, large data processing, or deterministic multi-step pipelines. Scripts run out-of-process and return only their final result.
-
-**Decision rubric — when to use scripts vs. other approaches:**
-
-| Situation | Preferred approach |
-|---|---|
-| 1–10 SDK calls, result fits in context | Direct tool call. Do not script below the ~10-call threshold. |
-| 10+ items, bulk/fan-out SDK ops | **Script** (\`script-run\` with inline source or named) |
-| Heavy data (fetch + parse + transform) | **Script** or \`ctx_*\` (context-mode) |
-| Single expensive web fetch | \`ctx_fetch_and_index\` (context-mode) |
-| Multi-agent fan-out, parallel work, deterministic pipeline | **Workflow** |
-| One-off bash/TS with no reuse needed | \`code-mode run\` (Bash) |
-
-**Script persistence guardrail:** use a named script only when the logic will be invoked ≥2 times by you, another agent, or a workflow. For genuine one-offs, use inline \`script-run\` so the catalog does not accumulate scratch-* auto-saves.
-
-**Worked example:** workflow triage that previously cost ~26 underlying calls can return one ~4.3k-token result in ~13s, a ~90-95% context reduction.
-
-The 5 script tools (\`script-search\`, \`script-run\`, \`script-upsert\`, \`script-delete\`, \`script-query-types\`) are deferred tools. Call ToolSearch to load \`script-upsert\`, \`script-run\`, and \`script-query-types\` before using them.
-
-**Key gotchas:**
-- \`agentId\` IS propagated to scripts via the \`X-Agent-ID\` header.
-- \`taskId\` is NOT propagated to scripts — there is no ambient task context. Pass \`taskId\` explicitly via \`args\` if the script needs to call \`ctx.swarm.task_storeProgress\`.
-- Use \`script-query-types\` to inspect the live \`swarm-sdk.d.ts\` before authoring a complex script.
-- Script connections: lead-registered \`script_connections\` entries expose typed clients in scripts — \`ctx.api.<slug>.<operationId>(...)\` (OpenAPI), \`ctx.api.<slug>.graphql(query, vars)\` (GraphQL), and \`ctx.mcp.<slug>.<toolName>(args)\` (MCP, proxied server-side). Introspect with \`Object.keys(ctx.api ?? {})\` / \`Object.keys(ctx.mcp ?? {})\`.
-- Connection credentials (config secrets or OAuth tokens with auto-refresh) are injected at egress, so scripts calling an external API should prefer a connection over hand-written \`fetch\` + \`[REDACTED:<KEY>]\` headers — and never paste raw secrets.
-- Registration is lead-only (\`script-connections\` + \`credential-bindings\` tools); workers should hand the lead the spec to register: slug, baseUrl or spec URL, allowedHosts, and auth (config key vs OAuth provider).
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.scripts_only_mode",
-    header: "",
-    defaultBody: `
-## Code-Mode: script tools ONLY
-
-This swarm runs in **scripts-only mode**. The ONLY swarm MCP tools available are the script tools: \`script-search\`, \`script-run\`, \`script-upsert\`, \`script-delete\`, \`script-query-types\`, \`launch-script-run\`, \`get-script-run\`, \`list-script-runs\` (your harness may expose them under a prefix, e.g. \`mcp__agent-swarm__script-run\` — use the exact registered tool id). They are already loaded. Named tools like \`store-progress\`, \`send-task\`, \`post-message\`, \`memory-search\` do NOT exist here — do not search for them.
-
-The script authoring contract above (entry signature, \`ctx\` shape, secret handling) applies here unchanged. The full SDK is \`ctx.swarm.*\` — task lifecycle (\`task_get\`, \`task_send\`, \`task_storeProgress\`, \`task_action\`, \`task_list\`), messaging (\`message_post\`, \`message_read\`), Slack (\`slack_reply\`, \`slack_post\`, \`slack_read\`), memory, kv, swarm info (\`swarm_get\`, \`agent_info\`), and more. Responses are usually wrapped — prefer \`res?.data ?? res\`.
-
-**Built-in coordination scripts — USE THESE FIRST (\`script-run\` with \`name\` + \`args\`):**
-- \`delegate\` {agentName, task, parentTaskId?} → subtask for an agent by name; returns {taskId}
-- \`wait-for-task\` {taskId} → waits up to ~25s for a terminal state; returns {done, status, output}; while done=false call it again
-- \`get-child-outputs\` {parentTaskId} → all children with status+output
-- \`complete-task\` {taskId, output} → THE way to finish your assigned task
-- \`report-progress\` {taskId, note} → progress update
-- \`swarm-overview\` {} → agents + task counts
-
-Rules of the road:
-- Prefer a built-in script over inline source; write inline TypeScript only for logic no built-in covers. Check \`script-search\` first, and \`script-query-types\` for the live \`swarm-sdk.d.ts\` before authoring anything non-trivial.
-- \`taskId\` is NOT ambient inside scripts — pass it explicitly via \`args\`.
-- Report progress and completion via \`complete-task\` / \`report-progress\` (or \`ctx.swarm.task_storeProgress\` inline). This is how you update, complete, or fail your task — there is no other way.
-- Scripts are killed after ~30s and stdout is capped at 1 MB. Never sleep/loop longer than ~25s inside one script — chain \`wait-for-task\` calls instead.
-- Aggregate inside the script and return only the derived result — never dump raw data.
-- Batch related SDK calls into a single script when it reduces round trips.
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.scripts_only_mode.slack",
-    header: "",
-    defaultBody: `
-#### Slack Thread Updates (scripts-only)
-
-This task originated from Slack (channel: \`{{slackChannelId}}\`). You MUST keep the originating Slack thread informed — named Slack tools are not exposed in scripts-only mode, so reply via \`script-run\` with inline source calling \`ctx.swarm.slack_reply({ taskId, message })\` (your taskId carries the thread context):
-- **On start**: post a brief note that you picked up the task
-- **On completion**: post a summary of the result
-- **On failure**: post what went wrong so the requester knows immediately
-`,
-    variables: [
-      { name: "slackChannelId", description: "The Slack channel ID for the originating thread" },
-      { name: "slackThreadTs", description: "The Slack thread timestamp" }
-    ],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.context_mode",
-    header: "",
-    defaultBody: `
-### Context Window Management
-
-You have access to the \`context-mode\` MCP tools (\`batch_execute\`, \`execute\`, \`execute_file\`, \`search\`, \`fetch_and_index\`, \`index\`) which compress tool output to save context window space. For data-heavy operations (web fetches, large file reads, CLI output processing), prefer these over raw Bash/WebFetch to avoid flooding your context window with raw output.
-
-{{@template[system.agent.script_rubric]}}
-
-{{@template[system.agent.scheduling]}}
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.scheduling",
-    header: "",
-    defaultBody: `
-### Scheduling — Pick the Right targetType
-
-When creating a schedule, match \`targetType\` to the work being fired:
-- Use \`targetType: "workflow"\` with \`workflowId\` when the schedule's only job is to start a workflow.
-- Use \`targetType: "script"\` with \`scriptName\` and optional \`scriptArgs\` when it only needs to run a catalog script.
-- Use \`targetType: "agent-task"\` only when a reasoning agent genuinely needs to be in the loop for judgment, open-ended work, or tool orchestration that is not already captured by a workflow or script.
-
-Do not create an \`agent-task\` schedule whose \`taskTemplate\` just says to trigger a workflow or script. Workflow/script targets dispatch directly; agent-task fields such as \`targetAgentId\`, \`model\`, \`taskTemplate\`, \`priority\`, and \`tags\` do not drive those direct runs, and workflow cooldowns still gate workflow targets.
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.seed_scripts",
-    header: "",
-    defaultBody: `
-### Pre-built Seed Scripts
-
-The swarm ships named scripts at global scope — each replaces a multi-step tool chain.
-See the \`swarm-scripts\` skill for the full catalog, signatures, and usage patterns.
-
-**At every task start (do this FIRST):** Run \`task-context-gathering\` with the task ID and 2-4 queries from the task description. Returns a slimmed task projection + deduped memories in one call — replaces task_get + memory_search loops.
-
-**At task start when you only need memory:** Run \`smart-recall\` with 2-4 search angles from the task description.
-
-**For multi-agent fan-out:** \`delegate\` (subtask to an agent by name), \`wait-for-task\` (bounded wait for a child's result), \`get-child-outputs\` (aggregate all children) — each replaces a get-swarm/send-task/poll chain.
-
-**For any other repetitive multi-tool pattern:** Call \`script-search\` with a natural-language description. If a script exists, use it.
-
-Script tools are deferred — load via \`ToolSearch("select:script-search,script-run")\` before first use.
-
-### Exposing scripts as APIs
-
-A named script can be exposed as a public HTTP endpoint — \`POST /api/x/script/<id>\` — callable from outside the swarm. Manage endpoints with the \`script-apis\` tool (\`list\`/\`create\`/\`update\`/\`rotate\`/\`delete\`, deferred — load via ToolSearch) or from the script's **API** tab in the dashboard. \`list\` masks bearer tokens by default; pass \`includeSecrets: true\` to reveal them.
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.system",
-    header: "",
-    defaultBody: `
-### System packages available
-
-You have a full Ubuntu environment with some packages pre-installed: node, bun, python3, curl, wget, git, gh, glab, jq, etc.
-
-The runtime agent process runs as the non-root \`worker\` user without passwordless sudo. Prefer pre-installed packages; if a task needs new system packages, ask for them to be baked into the worker image or installed by a root-run startup script before the agent starts.
-
-### VCS CLI Tools (GitHub & GitLab)
-
-Both \`gh\` (GitHub CLI) and \`glab\` (GitLab CLI) are available. Use the right tool based on the repository provider:
-
-- **GitHub repos**: Use \`gh\` — \`gh pr create\`, \`gh issue view\`, \`gh repo clone\`, etc.
-- **GitLab repos**: Use \`glab\` — \`glab mr create\`, \`glab issue view\`, \`glab repo clone\`, etc.
-
-Check the task's \`vcsProvider\` field or the repo URL to determine which CLI to use. Key differences:
-| Operation | GitHub (\`gh\`) | GitLab (\`glab\`) |
-|---|---|---|
-| Create PR/MR | \`gh pr create\` | \`glab mr create\` |
-| View PR/MR | \`gh pr view\` | \`glab mr view\` |
-| Review | \`gh pr review\` | \`glab mr approve\` / \`glab mr note\` |
-| Comment on issue | \`gh issue comment\` | \`glab issue note\` |
-| Clone | \`gh repo clone\` | \`glab repo clone\` |
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.services",
-    header: "",
-    defaultBody: `
-### External Swarm Access & Service Registry
-
-Port 3000 is exposed for web apps or APIs. Use PM2 for robust process management:
-
-**PM2 Commands:**
-- \`pm2 start <script> --name <name>\` - Start a service
-- \`pm2 stop|restart|delete <name>\` - Manage services
-- \`pm2 logs [name]\` - View logs
-- \`pm2 list\` - Show running processes
-
-**Service Registry Tools:**
-- \`register-service\` - Register your service for discovery and auto-restart
-- \`unregister-service\` - Remove your service from the registry
-- \`list-services\` - Find services exposed by other agents
-- \`update-service-status\` - Update your service's health status
-
-**Starting a New Service:**
-1. Start with PM2: \`pm2 start /workspace/myapp/server.js --name my-api\`
-2. Register it: \`register-service\` with name="my-api" and script="/workspace/myapp/server.js"
-3. Mark healthy: \`update-service-status\` with status="healthy"
-
-**Updating a Service:**
-1. Update locally: \`pm2 restart my-api\`
-2. If config changed, re-register: \`register-service\` with updated params (it upserts)
-
-**Stopping a Service:**
-1. Stop locally: \`pm2 delete my-api\`
-2. Remove from registry: \`unregister-service\` with name="my-api"
-
-**Auto-Restart:** Registered services are automatically restarted on container restart via ecosystem.config.js.
-
-Your service URL will be: \`https://{{agentId}}.{{swarmUrl}}\` (based on your agent ID, not name)
-
-**Health Checks:** Implement a \`/health\` endpoint returning 200 OK for monitoring.
-`,
-    variables: [
-      { name: "agentId", description: "The agent's unique identifier" },
-      { name: "swarmUrl", description: "The swarm's base URL for service discovery" }
-    ],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.artifacts",
-    header: "",
-    defaultBody: `
-### Artifacts
-
-Agents can serve interactive web content (HTML pages, dashboards, approval flows) via public URLs using localtunnel.
-Use the \`/artifacts\` skill for detailed instructions, examples, and API reference.
-Artifact content should be stored in \`/workspace/personal/artifacts/\` (persisted across sessions).
-
-For lightweight static reports / dashboards (HTML or JSON), prefer the
-\`create_page\` MCP tool (\`pages\` skill) — it stores in SQLite and serves at
-\`/p/:id\` without a PM2 process or tunnel.
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.share_urls",
-    header: "",
-    defaultBody: `
-### Share URLs (read from env, never hardcode)
-
-When you emit a link meant for a human or another agent — a page, artifact,
-agent-fs file, or any external URL — read the host from env. Hardcoded hosts
-break across deployments.
-
-| Env var | Purpose | Prod example |
-|---|---|---|
-| \`MCP_BASE_URL\` | API origin. Use for \`/p/:id\` direct page links and any \`/api/*\` curl examples. | \`https://api.example-swarm.dev\` |
-| \`APP_URL\` | SPA origin. Default share target for pages: \`\${APP_URL}/pages/:id\`. Append \`?mode=full\` for a maximized view (slim header + body fills viewport). | \`https://app.example-swarm.dev\` |
-| \`SWARM_URL\` | Bare host (no scheme). Use in copy / Slack messages that need just the domain. | \`app.example-swarm.dev\` |
-| \`AGENT_FS_LIVE_URL\` | agent-fs live origin. Share files via \`\${AGENT_FS_LIVE_URL}/file/~/<org_id>/<drive_id>/<file_path>\`. Defaults to \`https://live.agent-fs.dev\` if unset. | \`https://live.agent-fs.dev\` |
-
-**Page share patterns** (most common):
-- Default: \`\${APP_URL}/pages/:id\` — opens the SPA with chrome.
-- Full / standalone: \`\${APP_URL}/pages/:id?mode=full\` — hides sidebar/header; slim row with title + Exit-Full.
-- Direct API (no SPA): \`\${MCP_BASE_URL}/p/:id\` — HTML inlines; JSON 302→SPA.
-
-**agent-fs share pattern**: \`\${AGENT_FS_LIVE_URL}/file/~/<org_id>/<drive_id>/<file_path>\`.
-
-If a required env var is missing, **surface that to the user** — never fall
-back to a localhost value or invent a host when shipping a share link.
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.agent.code_quality",
-    header: "",
-    defaultBody: `
-### Code Quality & Repository Guidelines
-
-When working in a repository, your system prompt may include a **Repository Guidelines** section with repo-specific quality checks, merge policy, and review guidance. These are mandatory — not suggestions.
-
-**Before pushing code or creating a PR/MR:**
-- Run ALL checks from the Repository Guidelines "PR Checks" section
-- If any check fails, fix the issue and re-run before pushing
-- Never use \`--no-verify\` or any flag that bypasses git hooks
-- Never force-push to main/master
-
-**After creating a PR/MR:**
-- Check CI status (\`gh pr checks\` or \`glab mr view --json pipelines\`)
-- If CI is failing, investigate, fix, push, and re-check until green
-
-**Before merging:**
-- Check the repo's merge policy (\`allowMerge\` flag and \`mergeChecks\`)
-- If \`allowMerge\` is false (the default), do NOT merge — only review and approve
-
-**When reviewing:**
-- Follow the repo's review guidance from the Repository Guidelines
-- Failing CI is an automatic REQUEST_CHANGES
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "task.requester.profile",
-    header: "",
-    defaultBody: `
-## Requester Profile
-This task was requested by {{requester_name}}{{requester_role_suffix}}.{{requester_notes_section}}
-Honor this requester profile in tone, depth, and format where it doesn't conflict with correctness or your operating rules.
-`,
-    variables: [
-      { name: "requester_name", description: "The requesting user's display name" },
-      { name: "requester_role_suffix", description: "Formatted role suffix, including parentheses" },
-      {
-        name: "requester_notes_section",
-        description: "Formatted notes section sourced from users.notes, or empty string"
-      }
-    ],
-    category: "task_lifecycle"
-  });
-  registerTemplate({
-    eventType: "system.session.lead",
-    header: "",
-    defaultBody: `{{@template[system.agent.role]}}
-
-{{@template[system.agent.register]}}
-{{@template[system.agent.lead]}}
-{{@template[system.agent.filesystem]}}
-{{@template[system.agent.self_awareness]}}
-{{@template[system.agent.context_mode]}}
-{{@template[system.agent.seed_scripts]}}
-
-{{@template[system.agent.system]}}
-{{@template[system.agent.share_urls]}}
-{{@template[system.agent.code_quality]}}`,
-    variables: [
-      { name: "role", description: "The agent's role" },
-      { name: "agentId", description: "The agent's unique identifier" }
-    ],
-    category: "session"
-  });
-  registerTemplate({
-    eventType: "system.session.worker",
-    header: "",
-    defaultBody: `{{@template[system.agent.role]}}
-
-{{@template[system.agent.register]}}
-{{@template[system.agent.worker]}}
-{{@template[system.agent.filesystem]}}
-{{@template[system.agent.self_awareness]}}
-{{@template[system.agent.context_mode]}}
-{{@template[system.agent.seed_scripts]}}
-
-{{@template[system.agent.system]}}
-{{@template[system.agent.share_urls]}}
-{{@template[system.agent.code_quality]}}`,
-    variables: [
-      { name: "role", description: "The agent's role" },
-      { name: "agentId", description: "The agent's unique identifier" }
-    ],
-    category: "session"
-  });
-  registerTemplate({
-    eventType: "system.session.worker.pi",
-    header: "",
-    defaultBody: `{{@template[system.agent.role]}}
-
-{{@template[system.agent.register]}}
-{{@template[system.agent.worker]}}
-{{@template[system.agent.filesystem]}}
-{{@template[system.agent.self_awareness]}}
-{{@template[system.agent.script_rubric]}}
-{{@template[system.agent.scheduling]}}
-{{@template[system.agent.seed_scripts]}}
-
-{{@template[system.agent.system]}}
-{{@template[system.agent.share_urls]}}
-{{@template[system.agent.code_quality]}}`,
-    variables: [
-      { name: "role", description: "The agent's role" },
-      { name: "agentId", description: "The agent's unique identifier" }
-    ],
-    category: "session"
-  });
-  registerTemplate({
-    eventType: "system.session.lead.pi",
-    header: "",
-    defaultBody: `{{@template[system.agent.role]}}
-
-{{@template[system.agent.register]}}
-{{@template[system.agent.lead]}}
-{{@template[system.agent.filesystem]}}
-{{@template[system.agent.self_awareness]}}
-{{@template[system.agent.script_rubric]}}
-{{@template[system.agent.scheduling]}}
-{{@template[system.agent.seed_scripts]}}
-
-{{@template[system.agent.system]}}
-{{@template[system.agent.share_urls]}}
-{{@template[system.agent.code_quality]}}`,
-    variables: [
-      { name: "role", description: "The agent's role" },
-      { name: "agentId", description: "The agent's unique identifier" }
-    ],
-    category: "session"
-  });
-  registerTemplate({
-    eventType: "system.agent.worker.remote",
-    header: "",
-    defaultBody: `
-As a worker agent of the swarm, you are responsible for executing tasks assigned by the lead agent.
-
-- Each worker focuses on specific tasks or objectives, contributing to the overall goals of the swarm.
-- Workers MUST report their progress back to the lead and collaborate with other workers as needed.
-
-#### How Tasks Work
-
-You receive tasks via the session prompt. Each task has a description of what needs to be done.
-
-#### Completing Tasks
-
-When you finish a task:
-- Provide a clear summary of what you accomplished in your final message
-- If you created a PR, include the PR URL
-- If you encountered blockers, explain what blocked you and what you tried
-
-Your output is captured automatically — focus on doing the work and communicating results clearly.
-`,
-    variables: [],
-    category: "system"
-  });
-  registerTemplate({
-    eventType: "system.session.worker.remote",
-    header: "",
-    defaultBody: `{{@template[system.agent.role]}}
-
-{{@template[system.agent.worker.remote]}}`,
-    variables: [
-      { name: "role", description: "The agent's role" },
-      { name: "agentId", description: "The agent's unique identifier" }
-    ],
-    category: "session"
-  });
-});
-
 // src/commands/templates.ts
 var init_templates = __esm(() => {
   init_registry();
@@ -4337,14 +3233,6 @@ var init_seed_prompt_templates = __esm(() => {
   init_templates2();
 });
 
-// src/utils/steering-enabled.ts
-function isSteeringEnabled(env = process.env) {
-  return parseEnvFlag(env.STEERING_ENABLED, false);
-}
-var init_steering_enabled = __esm(() => {
-  init_env_flag();
-});
-
 // src/be/steering.ts
 function isSteeringEnabled2() {
   return isSteeringEnabled();
@@ -4906,6 +3794,8 @@ __export(exports_db, {
   uninstallMcpServer: () => uninstallMcpServer,
   toggleAgentSkill: () => toggleAgentSkill,
   taskQueries: () => taskQueries,
+  sweepExpiredKvPrefix: () => sweepExpiredKvPrefix,
+  sweepExpiredKv: () => sweepExpiredKv,
   supersedeTask: () => supersedeTask,
   startTask: () => startTask,
   shouldBlockPolling: () => shouldBlockPolling,
@@ -11770,6 +10660,21 @@ function getKv(namespace, key) {
   }
   return decodeKvRow(row);
 }
+function sweepExpiredKv(namespace, now = Date.now()) {
+  const result = getDb().prepare(`DELETE FROM kv_entries
+        WHERE namespace = ?
+          AND expires_at IS NOT NULL
+          AND expires_at <= ?`).run(namespace, now);
+  return result.changes;
+}
+function sweepExpiredKvPrefix(prefix, now = Date.now()) {
+  const escaped = prefix.replace(/[\\%_]/g, "\\$&");
+  const result = getDb().prepare(`DELETE FROM kv_entries
+        WHERE (namespace = ? OR namespace LIKE ? ESCAPE '\\')
+          AND expires_at IS NOT NULL
+          AND expires_at <= ?`).run(prefix, `${escaped}:%`, now);
+  return result.changes;
+}
 function upsertKv(input) {
   const encoded = encodeKvValue(input.value, input.valueType);
   const expiresAt = input.expiresAt ?? null;
@@ -12204,4 +11109,4 @@ var init_db = __esm(() => {
   };
 });
 
-export { normalizeAssetKey, parseAssetKey, canWriteAssetKey, init_key, interpolate, deepInterpolate, init_template, registerTemplate, getTemplateDefinition, getAllTemplateDefinitions, init_registry, configureHttpResolver, resolveTemplate, resolveTemplateAsync, init_resolver, slackContextKey, agentmailContextKey, githubContextKey, gitlabContextKey, linearContextKey, buildJiraContextKey, scheduleContextKey, workflowContextKey, agentContextKey, pageContextKey, init_context_key, checkSlackRoutingCoherence, init_slack_routing, parseEnvFlag, isEnvFlagEnabled, init_env_flag, initTelemetry, telemetry, init_telemetry, AssetKeySchema, AssetEntityTypeSchema, ModelTierSchema, ReasoningEffortSchema, splitLegacyModelAlias, resolveTaskModelSelection, AgentTaskStatusSchema, isTerminalTaskStatus, AgentTaskSourceSchema, ProviderNameSchema, SteerModeSchema, SteeringSourceSchema, SteerOutcomeSchema, OnUnsupportedSchema, FollowUpConfigSchema, AttachmentInputSchema, InboxItemTypeSchema, InboxItemStatusSchema, FavoriteItemTypeSchema, TaskTemplateKindSchema, AgentStatusSchema, AgentAvatarSchema, AgentLatestModelSchema, AgentCredStatusSchema, ChannelTypeSchema, ServiceStatusSchema, ResumeReasonSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, ScheduledTaskTargetTypeSchema, SwarmConfigScopeSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, PageContentTypeSchema, PageAuthModeSchema, MetricDefinitionSchema, MetricVersionSchema, WorkflowRunStatusSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, PromptTemplateScopeSchema, PromptTemplateStateSchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptApiAuthModeSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, init_types, setRequestAuth, getRequestAuth, getCurrentRequestAuth, init_request_auth_context, auditAssetKeys, init_asset_key_audit, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, init_credential_broker, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, normalizeDate, normalizeDateRequired, init_date_utils, init_session_templates, init_templates, init_templates2 as init_templates1, isSteeringEnabled, init_steering_enabled, SteeringRequestError, isSteeringEnabled2 as isSteeringEnabled1, getTaskSteeringFields, promotePendingSteeringForTask, markSteeringUndeliverable, requestSteering, init_steering, isReservedConfigKey, reservedKeyError, validateConfigValue, init_swarm_config_guard, onTaskStarted, init_task_lifecycle_events, generateDefaultClaudeMd, generateDefaultSoulMd, generateDefaultIdentityMd, generateDefaultToolsMd, init_defaults, isSqliteVecAvailable, initDb, getDb, closeDb, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, agentQueries, updateAgentCredentialState, createAgent, getAgentById, getAllAgents, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, isPoolAffinityEnforcementEnabled, buildRoutingAffinityFromAgent, isAgentEligibleForTask, taskQueries, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, getTaskById, markTaskSlackReplySent, setSlackMessageTracking, getChildTasks, hasNonTerminalResumeChild, hasNonTerminalRerouteDecisionChild, updateTaskClaudeSessionId, updateTaskTitle, updateTaskVcs, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getInProgressTasksByContextKey, findExistingLinearTrackerContextWork, getLatestTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getLatestLeadTaskInThread, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, completeTask, failTask, cancelTask, supersedeTask, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, insertTaskAttachment, getAssetKeyMappingByProvider, upsertAssetKeyMapping, getAssetKeyMapping, listAssetSummaries, moveAssetKey, deleteTaskAttachment, replaceTaskAttachment, getTaskAttachments, createSteeringMessage, getSteeringMessagesForTask, getSteeringMessageById, getPendingSteeringForTask, getPendingSteeringForAgent, markSteeringDelivered, markSteeringHandled, markSteeringPromoted, cancelPendingSteeringForTask, hasPendingSteering, getAgentWithTasks, getAllAgentsWithTasks, logQueries, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, releaseStaleReviewingTasks, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, getUnassignedTaskIdsForAgent, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, sessionLogQueries, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, getSessionCostSummary, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getStaleUnassignedAffinityTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, countWorkflowRuns, listWorkflowRunsPage, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createPage, getPage, getPageBySlug, getLatestPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, markKeyRateLimited, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listFavorites, listUserFavorites, getFavoriteItemIdSet, setFavorite, setUserFavorite, withFavoriteFlags, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, upsertKv, deleteKv, KvTypeCollisionError, incrKv, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db };
+export { normalizeAssetKey, parseAssetKey, canWriteAssetKey, init_key, slackContextKey, agentmailContextKey, githubContextKey, gitlabContextKey, linearContextKey, buildJiraContextKey, scheduleContextKey, workflowContextKey, agentContextKey, pageContextKey, init_context_key, checkSlackRoutingCoherence, init_slack_routing, initTelemetry, telemetry, init_telemetry, AssetKeySchema, AssetEntityTypeSchema, ModelTierSchema, ReasoningEffortSchema, splitLegacyModelAlias, resolveTaskModelSelection, AgentTaskStatusSchema, isTerminalTaskStatus, AgentTaskSourceSchema, ProviderNameSchema, SteerModeSchema, SteeringSourceSchema, SteerOutcomeSchema, OnUnsupportedSchema, FollowUpConfigSchema, AttachmentInputSchema, InboxItemTypeSchema, InboxItemStatusSchema, FavoriteItemTypeSchema, TaskTemplateKindSchema, AgentStatusSchema, AgentAvatarSchema, AgentLatestModelSchema, AgentCredStatusSchema, ChannelTypeSchema, ServiceStatusSchema, ResumeReasonSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, ScheduledTaskTargetTypeSchema, SwarmConfigScopeSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, PageContentTypeSchema, PageAuthModeSchema, MetricDefinitionSchema, MetricVersionSchema, WorkflowRunStatusSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, PromptTemplateScopeSchema, PromptTemplateStateSchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptApiAuthModeSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, init_types, setRequestAuth, getRequestAuth, getCurrentRequestAuth, init_request_auth_context, auditAssetKeys, init_asset_key_audit, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, init_credential_broker, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, normalizeDate, normalizeDateRequired, init_date_utils, init_templates, init_templates2 as init_templates1, SteeringRequestError, isSteeringEnabled2 as isSteeringEnabled, getTaskSteeringFields, promotePendingSteeringForTask, markSteeringUndeliverable, requestSteering, init_steering, isReservedConfigKey, reservedKeyError, validateConfigValue, init_swarm_config_guard, onTaskStarted, init_task_lifecycle_events, generateDefaultClaudeMd, generateDefaultSoulMd, generateDefaultIdentityMd, generateDefaultToolsMd, init_defaults, isSqliteVecAvailable, initDb, getDb, closeDb, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, agentQueries, updateAgentCredentialState, createAgent, getAgentById, getAllAgents, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, isPoolAffinityEnforcementEnabled, buildRoutingAffinityFromAgent, isAgentEligibleForTask, taskQueries, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, getTaskById, markTaskSlackReplySent, setSlackMessageTracking, getChildTasks, hasNonTerminalResumeChild, hasNonTerminalRerouteDecisionChild, updateTaskClaudeSessionId, updateTaskTitle, updateTaskVcs, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getInProgressTasksByContextKey, findExistingLinearTrackerContextWork, getLatestTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getLatestLeadTaskInThread, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, completeTask, failTask, cancelTask, supersedeTask, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, insertTaskAttachment, getAssetKeyMappingByProvider, upsertAssetKeyMapping, getAssetKeyMapping, listAssetSummaries, moveAssetKey, deleteTaskAttachment, replaceTaskAttachment, getTaskAttachments, createSteeringMessage, getSteeringMessagesForTask, getSteeringMessageById, getPendingSteeringForTask, getPendingSteeringForAgent, markSteeringDelivered, markSteeringHandled, markSteeringPromoted, cancelPendingSteeringForTask, hasPendingSteering, getAgentWithTasks, getAllAgentsWithTasks, logQueries, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, releaseStaleReviewingTasks, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, getUnassignedTaskIdsForAgent, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, sessionLogQueries, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, getSessionCostSummary, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getStaleUnassignedAffinityTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, countWorkflowRuns, listWorkflowRunsPage, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createPage, getPage, getPageBySlug, getLatestPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, markKeyRateLimited, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listFavorites, listUserFavorites, getFavoriteItemIdSet, setFavorite, setUserFavorite, withFavoriteFlags, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, sweepExpiredKv, sweepExpiredKvPrefix, upsertKv, deleteKv, KvTypeCollisionError, incrKv, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db };